Function at 0x10036210
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffe8
push ebx
mov dword [0x1006283f], 0
cmp dword [ebp + 8], 0
jne 0x1003622e
call fcn.100360aa
jmp 0x10036230
mov al, 1
or al, al
je 0x10036433
mov eax, dword [0x1005d7bb]
mov eax, dword [eax]
movzx edx, word [eax + 8]
mov dword [ebp - 4], edx
movzx edx, word [eax + 0xa]
mov dword [ebp - 8], edx
mov eax, dword [0x10052530]
or eax, eax
je 0x10036433
mov ecx, dword [eax]
mov dword [ebp - 0xc], ecx
lea ebx, [eax + 4]
or byte [ebp - 0x14], 0xff
or byte [ebp - 0x15], 0xff
mov byte [ebp - 0x11], 0
mov byte [ebp - 0x12], 0
jmp 0x10036312
mov al, byte [0x100536b9]
cmp byte [ebx + 2], al
ja 0x1003630c
movzx eax, byte [ebx + 3]
movzx edx, byte [ebx + 4]
cmp eax, dword [ebp - 4]
jne 0x1003629b
cmp edx, dword [ebp - 8]
jne 0x1003629b
mov al, 1
jmp 0x100362a2
push edx
push eax
call fcn.100480b3
or al, al
je 0x1003630c
mov al, byte [ebp - 4]
sub al, byte [ebx + 3]
jns 0x100362b0
neg al
mov dl, byte [ebp - 8]
sub dl, byte [ebx + 4]
jns 0x100362ba
neg dl
push eax
push edx
movzx eax, al
movzx ecx, dl
add eax, ecx
movzx edx, byte [ebp - 0x14]
movzx ecx, byte [ebp - 0x15]
add edx, ecx
cmp eax, edx
ja 0x1003630a
pop edx
pop eax
mov byte [ebp - 0x14], al
mov byte [ebp - 0x15], dl
mov al, byte [ebx]
mov byte [ebp - 0x16], al
mov al, byte [ebx + 1]
mov byte [ebp - 0x17], al
mov al, byte [ebx + 3]
mov byte [ebp - 0x11], al
mov al, byte [ebx + 4]
mov byte [ebp - 0x12], al
mov al, byte [ebx + 5]
mov byte [ebp - 0x13], al
mov dword [ebp - 0x10], ebx
cmp byte [ebp - 0x14], 0
jne 0x1003630c
cmp byte [ebp - 0x15], 0
jne 0x1003630c
jmp 0x1003631c
pop edx
pop eax
add ebx, 6
dec dword [ebp - 0xc]
cmp dword [ebp - 0xc], 0
jne 0x10036277
cmp byte [ebp - 0x11], 0
jne 0x1003632c
cmp byte [ebp - 0x12], 0
je 0x1003642e
mov al, byte [ebp - 0x11]
mov dl, byte [ebp - 0x12]
cmp al, byte [ebp - 4]
jne 0x10036413
cmp dl, byte [ebp - 8]
jne 0x10036413
mov eax, 0x4f7f30
cmp byte [eax], 0
je 0x10036354
cmp byte [eax + 0x10], 0x13
je 0x1003638e
call fcn.1005103e
sub eax, dword [0x10062849]
cmp eax, 0x2bc
jbe 0x1003638e
call fcn.1003647f
cmp eax, 0xffffffff
je 0x1003637a
push eax
push 1
call fcn.100472bf
jmp 0x10036384
call fcn.1003dc4c
pop ebx
leave
ret 4
call fcn.1005103e
mov dword [0x10062849], eax
movzx edx, byte [ebp - 0x16]
movzx ecx, byte [ebp - 0x17]
mov eax, 0x4f7ef4
mov eax, dword [eax]
call dword [0x1005d32d]
or al, al
jne 0x10036433
mov eax, 0x4f7d88
mov eax, dword [eax]
call dword [0x1005d431]
or al, al
je 0x10036411
mov eax, 0x4f7d88
mov eax, dword [eax]
call dword [0x1005d3dd]
or al, al
je 0x10036411
mov eax, 0x4f7d88
mov eax, dword [eax]
call dword [0x1005d3e1]
or al, al
je 0x10036411
movzx eax, byte [ebp - 0x12]
push eax
movzx eax, byte [ebp - 0x13]
push eax
push 0
push 0
push 0
push 0
movzx ecx, byte [ebp - 0x11]
mov edx, 0xbc7
mov eax, dword [0x1005d7bb]
mov eax, dword [eax]
call dword [0x1005d3d9]
mov eax, dword [ebp - 0x10]
inc byte [eax + 2]
mov dword [0x1006283f], eax
jmp 0x10036433
movzx edx, byte [ebp - 0x11]
mov dword [0x1006b40c], edx
movzx edx, byte [ebp - 0x12]
mov dword [0x1006b410], edx
call fcn.10041b1f
jmp 0x10036433
call fcn.100361f2
pop ebx
leave
ret 4