Function at 0x100c4850
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1017cf87
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0xac
push ebx
push esi
push edi
mov eax, dword [0x101e8118]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 4], 0
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x126c]
push ecx
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x100c48db
mov edx, dword [ebp + 8]
mov byte [edx + 0x12ca], 1
push 0
push 0
push 6
mov ecx, dword [ebp + 8]
add ecx, 0x126c
call fcn.1000d000
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [ebp + 8]
add ecx, 0x1268
call fcn.100147c0
mov ecx, dword [ebp + 8]
add ecx, 0x123c
call fcn.100a5fe0
mov eax, dword [ebp + 8]
cmp dword [eax + 0x1224], 0
je 0x100c49f3
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x1224]
cmp dword [edx + 0x2c], 0
je 0x100c49f3
push 0x1019bfd8
lea ecx, [ebp - 0x40]
call fcn.100165d0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x28]
call fcn.10016540
mov byte [ebp - 4], 2
mov dword [ebp - 0x30], 0
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x28]
push ecx
lea edx, [ebp - 0x28]
push edx
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x40]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x13d4]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x13d4]
mov eax, dword [eax]
push edx
mov ecx, dword [eax + 0xd0]
call ecx
mov dword [ebp - 0x44], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x44], 0
jl 0x100c49db
cmp dword [ebp - 0x30], 4
je 0x100c49db
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [ebp - 0x2c]
cmp eax, 0x7d0
jbe 0x100c497d
jmp 0x100c49db
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
push 1
push 0
push 0
push 0
lea edx, [ebp - 0x60]
push edx
call dword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x100c49a7
lea eax, [ebp - 0x60]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageW]
jmp 0x100c4985
mov ecx, dword [ebp + 8]
add ecx, 0x13d0
call fcn.10022aa0
mov dword [ebp - 0x84], eax
lea ecx, [ebp - 0x30]
push ecx
mov edx, dword [ebp - 0x84]
push edx
mov eax, dword [ebp - 0x84]
mov ecx, dword [eax]
mov edx, dword [ecx + 0xe0]
call edx
mov dword [ebp - 0x44], eax
jmp 0x100c495f
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x28]
call fcn.10016820
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x40]
call fcn.10016820
mov ecx, dword [ebp + 8]
add ecx, 0x74
call fcn.100ebeb0
push str.explorerQuit
lea ecx, [ebp - 0x14]
call fcn.100057d0
mov byte [ebp - 4], 3
movzx eax, byte [0x101e59f3]
test eax, eax
je 0x100c4b30
mov byte [0x101e59f3], 0
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x1224], 0
je 0x100c4b29
mov byte [ebp - 4], 4
mov dword [ebp - 0x64], 0
jmp 0x100c4a4b
mov edx, dword [ebp - 0x64]
add edx, 1
mov dword [ebp - 0x64], edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x1224]
mov ecx, dword [ecx + 0xbc]
add ecx, 0x10
call fcn.10004710
cmp dword [ebp - 0x64], eax
jae 0x100c4aac
mov edx, dword [ebp - 0x64]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x1224]
mov ecx, dword [ecx + 0xbc]
add ecx, 0x10
call fcn.100045d0
mov edx, dword [eax]
mov dword [ebp - 0x88], edx
push 0
push 0
lea ecx, [ebp - 0x14]
call fcn.10005f10
push eax
mov eax, dword [ebp - 0x88]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x88]
mov eax, dword [edx + 0x30]
call eax
jmp 0x100c4a42
mov dword [ebp - 0x64], 0
jmp 0x100c4abe
mov ecx, dword [ebp - 0x64]
add ecx, 1
mov dword [ebp - 0x64], ecx
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x1224]
add ecx, 0x38
call fcn.1000c730
cmp dword [ebp - 0x64], eax
jae 0x100c4b13
mov eax, dword [ebp - 0x64]
push eax
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x1224]
add ecx, 0x38
call fcn.1000c770
mov edx, dword [eax]
mov dword [ebp - 0x8c], edx
push 0
push 0
lea ecx, [ebp - 0x14]
call fcn.10005f10
push eax
mov eax, dword [ebp - 0x8c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x8c]
mov eax, dword [edx + 0x58]
call eax
jmp 0x100c4ab5
jmp 0x100c4b22
mov dword [ebp - 4], 3
mov byte [0x101e59f3], 1
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x1388]
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x18]
push eax
call fcn.1008dad0
add esp, 4
movzx ecx, al
test ecx, ecx
je 0x100c4bd3
push ecx
mov ecx, esp
mov dword [ebp - 0x6c], esp
push 0x1019c00c
call fcn.100057d0
mov dword [ebp - 0x90], eax
mov edx, dword [ebp - 0x90]
mov dword [ebp - 0x94], edx
mov byte [ebp - 4], 6
push ecx
mov ecx, esp
mov dword [ebp - 0x70], esp
push 0x1019c010
call fcn.100057d0
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x9c], eax
mov byte [ebp - 4], 7
push ecx
mov ecx, esp
mov dword [ebp - 0x74], esp
push 0x1019c014
call fcn.100057d0
mov dword [ebp - 0xa0], eax
mov ecx, dword [ebp - 0xa0]
mov dword [ebp - 0xa4], ecx
mov byte [ebp - 4], 8
mov byte [ebp - 4], 3
call fcn.100ad390
add esp, 0xc
jmp 0x100c4c51
push ecx
mov ecx, esp
mov dword [ebp - 0x78], esp
push 0x1019c024
call fcn.100057d0
mov dword [ebp - 0xa8], eax
mov edx, dword [ebp - 0xa8]
mov dword [ebp - 0xac], edx
mov byte [ebp - 4], 9
push ecx
mov ecx, esp
mov dword [ebp - 0x7c], esp
push 0x1019c028
call fcn.100057d0
mov dword [ebp - 0xb0], eax
mov eax, dword [ebp - 0xb0]
mov dword [ebp - 0xb4], eax
mov byte [ebp - 4], 0xa
push ecx
mov ecx, esp
mov dword [ebp - 0x80], esp
push 0x1019c02c
call fcn.100057d0
mov dword [ebp - 0xb8], eax
mov ecx, dword [ebp - 0xb8]
mov dword [ebp - 0xbc], ecx
mov byte [ebp - 4], 0xb
mov byte [ebp - 4], 3
call fcn.100ad390
add esp, 0xc
cmp dword [ebp - 0x18], 0
je 0x100c4c87
movzx edx, byte [0x101ea624]
test edx, edx
jne 0x100c4c87
mov eax, dword [ebp - 0x18]
push eax
call fcn.1008dc10
add esp, 4
mov dword [ebp - 0x68], eax
mov ecx, dword [ebp - 0x68]
push ecx
call dword [sym.imp.USER32.dll_UnhookWindowsHookEx]
mov edx, dword [ebp - 0x18]
push edx
call fcn.1008dc80
add esp, 4
mov byte [0x101ee007], 0
mov eax, dword [ebp + 8]
mov byte [eax + 0x13e0], 1
mov ecx, dword [ebp + 8]
mov byte [ecx + 0x13e1], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x14]
call fcn.10006030
jmp 0x100c4cc4
mov dword [ebp - 4], 0xffffffff
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4