Function at 0x100355c0
Capabilities:
Check for time delay via gettickcount

Disassembly:
xor eax, eax
inc eax
jmp 0x10036031
xadd dl, dh
pop eax
pop ecx
jne fcn.104aa2ac
cmp eax, 0xfa1
jne 0x10035667
push edi
push edi
push edi
push 0x10033b23
push edi
push edi
mov dword [0x1035ff64], 1
mov dword [0x100f415c], esi
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push str.WSAAsyncSelect
push str.ws2_32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push edi
push 5
pop esi
push esi
push 0x101143cc
push eax
push dword [0x100e08d4]
mov dword [0x10114404], eax
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [0x10114404]
push edi
push esi
push 0x10114398
mov ecx, 0x10035042
sub ecx, eax
push eax
push dword [0x100e08d4]
sub ecx, esi
mov byte [0x10114398], 0xe9
mov dword [0x10114399], ecx
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0x64
pop eax
jmp 0x10036031
mov edx, dword [0x1012fca4]
cmp dword [0x1035ff64], edi
jne 0x1003567d
cmp edx, edi
je case.default.0x10035d80
mov ecx, 0x1388
cmp eax, ecx
ja 0x10035d71
je 0x10035d60
lea ecx, [eax - 0xfa2]
cmp ecx, 0x11
ja case.default.0x10035d80
jmp dword [ecx*4 + 0x10036062]
mov byte [0x10360a35], 1
push esi
push edi
push 0x1f0fff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
push edi
push 0x28
push 0x10114364
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
jmp 0x100354b3
push esi
push edi
push 0x1f0fff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
push edi
push 0x28
push 0x10114330
jmp 0x100356c2
push esi
push edi
push 0x1f0fff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
push edi
push 0x28
push 0x101142fc
jmp 0x100356c2
push esi
push edi
push 0x1f0fff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
push edi
push 0x28
push 0x101142c8
jmp 0x100356c2
push esi
push edi
push 0x1f0fff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
push edi
push 0x28
push 0x10114294
jmp 0x100356c2
push esi
push edi
push 0x1f0fff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
push edi
push 0x28
push 0x10114260
jmp 0x100356c2
push esi
push edi
push 0x1f0fff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
push edi
push 0x28
push 0x1011422c
jmp 0x100356c2
push esi
push edi
push 0x1f0fff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
push edi
push 0x28
push 0x101141f8
jmp 0x100356c2
push 1
call fcn.10031ae1
pop ecx
jmp 0x100354b3
cmp edx, edi
je 0x100357ae
cmp dword [0x1035fef4], edi
je 0x100357ae
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [0x101127d4]
cmp eax, 0x3a98
ja 0x100357a7
push 0xa
pop eax
jmp 0x100357b1
mov eax, dword [0x101127c4]
jmp 0x100357b1
or eax, 0xffffffff
push eax
push dword [0x100dfd8c]
push 0xfb3
push dword [0x100f415c]
call dword [sym.imp.USER32.dll_SendMessageA]
jmp 0x100354b3
mov eax, dword [0x305b9f0]
cmp eax, edi
je 0x100354b3
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
add eax, 0x53c
mov dword [ebp - 0x3b8], edi
mov dword [ebp - 0x3bc], eax
mov ebx, 0x271c
mov eax, dword [ebp - 0x3bc]
mov eax, dword [eax]
mov dword [ebp - 0x3c0], eax
cmp eax, edi
je 0x10035864
mov edi, dword [ebp - 0x3c0]
lea eax, [ebp - 0x1c0]
push eax
call fcn.10016855
pop ecx
lea eax, [ebp - 0x1c0]
push eax
mov eax, edi
push dword [eax + 0xd4c]
add eax, 0x64
push eax
push dword [ebp - 0x3b8]
lea eax, [ebp - 0x94]
push str.1__d__s__d__s
push eax
call dword [sym.imp.MSVCR100.dll_sprintf]
add esp, 0x18
lea eax, [ebp - 0x94]
push eax
push dword [0x100dfd8c]
push ebx
push dword [0x100f415c]
call esi
xor edi, edi
jmp 0x1003588e
lea eax, [ebp - 0x94]
push 0x10093650
push eax
call dword [sym.imp.MSVCR100.dll_strcpy]
pop ecx
pop ecx
lea eax, [ebp - 0x94]
push eax
push dword [0x100dfd8c]
push ebx
push dword [0x100f415c]
call esi
inc dword [ebp - 0x3b8]
add dword [ebp - 0x3bc], 4
cmp dword [ebp - 0x3b8], 0x3c
jl 0x100357f7
mov eax, dword [0x305b9f4]
add eax, 0x53c
mov dword [ebp - 0x3b8], edi
mov dword [ebp - 0x3bc], eax
mov eax, dword [ebp - 0x3bc]
mov edi, dword [eax]
test edi, edi
je 0x10035905
lea eax, [ebp - 0x1c0]
push eax
call fcn.10016855
pop ecx
lea eax, [ebp - 0x1c0]
push eax
push dword [edi + 0xd4c]
add edi, 0x64
push edi
push dword [ebp - 0x3b8]
lea eax, [ebp - 0x94]
push str.2__d__s__d__s
push eax
call dword [sym.imp.MSVCR100.dll_sprintf]
add esp, 0x18
jmp 0x10035919
lea eax, [ebp - 0x94]
push 0x10093650
push eax
call dword [sym.imp.MSVCR100.dll_strcpy]
pop ecx
pop ecx
lea eax, [ebp - 0x94]
push eax
push dword [0x100dfd8c]
push ebx
push dword [0x100f415c]
call esi
inc dword [ebp - 0x3b8]
add dword [ebp - 0x3bc], 4
cmp dword [ebp - 0x3b8], 0x3c
jl 0x100358be
mov edx, dword [0x3059750]
and dword [ebp - 0x3b8], 0
call fcn.100061b1
test eax, eax
je 0x100354b3
add edx, 0x53c
mov dword [ebp - 0x3bc], edx
mov eax, dword [ebp - 0x3bc]
mov edi, dword [eax]
test edi, edi
je 0x100359b6
lea eax, [ebp - 0x1c0]
push eax
call fcn.10016855
pop ecx
lea eax, [ebp - 0x1c0]
push eax
push dword [edi + 0xd4c]
add edi, 0x64
push edi
push dword [ebp - 0x3b8]
lea eax, [ebp - 0x94]
push str.3__d__s__d__s
push eax
call dword [sym.imp.MSVCR100.dll_sprintf]
add esp, 0x18
jmp 0x100359ca
lea eax, [ebp - 0x94]
push 0x10093650
push eax
call dword [sym.imp.MSVCR100.dll_strcpy]
pop ecx
pop ecx
lea eax, [ebp - 0x94]
push eax
push dword [0x100dfd8c]
push ebx
push dword [0x100f415c]
call esi
inc dword [ebp - 0x3b8]
add dword [ebp - 0x3bc], 4
call fcn.100061b1
cmp dword [ebp - 0x3b8], eax
jb 0x1003596f
jmp 0x100354b3
mov eax, dword [0x305b9f0]
mov dword [ebp - 0x3c0], eax
cmp eax, edi
je 0x100354b3
lea eax, [ebp - 0x94]
push 0x10093f50
push eax
call dword [sym.imp.MSVCR100.dll_strcpy]
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
pop ecx
pop ecx
lea eax, [ebp - 0x94]
push eax
push dword [0x100dfd8c]
mov ebx, 0x2713
push ebx
push dword [0x100f415c]
call esi
mov eax, dword [ebp - 0x3c0]
add eax, 0x53c
mov dword [ebp - 0x3bc], eax
mov dword [ebp - 0x3c0], 0x3c
mov eax, dword [ebp - 0x3bc]
mov edi, dword [eax]
test edi, edi
je 0x10035aa7
lea eax, [ebp - 0xf8]
push eax
call fcn.10016855
pop ecx
lea eax, [ebp - 0xf8]
push eax
push dword [edi + 0xd4c]
add edi, 0x64
push edi
lea eax, [ebp - 0x94]
push 0x100984dc
push eax
call dword [sym.imp.MSVCR100.dll_sprintf]
add esp, 0x14
jmp 0x10035abb
lea eax, [ebp - 0x94]
push 0x10093650
push eax
call dword [sym.imp.MSVCR100.dll_strcpy]
pop ecx
pop ecx
lea eax, [ebp - 0x94]
push eax
push dword [0x100dfd8c]
push ebx
push dword [0x100f415c]
call esi
add dword [ebp - 0x3bc], 4
dec dword [ebp - 0x3c0]
jne 0x10035a66
mov edi, dword [0x305b9f4]
lea eax, [ebp - 0x94]
push 0x100984ec
push eax
call dword [sym.imp.MSVCR100.dll_strcpy]
pop ecx
pop ecx
lea eax, [ebp - 0x94]
push eax
push dword [0x100dfd8c]
push ebx
push dword [0x100f415c]
call esi
add edi, 0x53c
mov dword [ebp - 0x3bc], edi
mov dword [ebp - 0x3c0], 0x3c
mov eax, dword [ebp - 0x3bc]
mov edi, dword [eax]
test edi, edi
je 0x10035b67
lea eax, [ebp - 0xf8]
push eax
call fcn.10016855
pop ecx
lea eax, [ebp - 0xf8]
push eax
push dword [edi + 0xd4c]
add edi, 0x64
push edi
lea eax, [ebp - 0x94]
push 0x100984dc
push eax
call dword [sym.imp.MSVCR100.dll_sprintf]
add esp, 0x14
jmp 0x10035b7b
lea eax, [ebp - 0x94]
push 0x10093650
push eax
call dword [sym.imp.MSVCR100.dll_strcpy]
pop ecx
pop ecx
lea eax, [ebp - 0x94]
push eax
push dword [0x100dfd8c]
push ebx
push dword [0x100f415c]
call esi
add dword [ebp - 0x3bc], 4
dec dword [ebp - 0x3c0]
jne 0x10035b26
jmp 0x100354b3
lea eax, [ebp - 0x24]
push 0x10093f50
push eax
call dword [sym.imp.MSVCR100.dll_strcpy]
pop ecx
pop ecx
lea eax, [ebp - 0x24]
push eax
push dword [0x100dfd8c]
push 0x2713
push dword [0x100f415c]
call dword [sym.imp.USER32.dll_SendMessageA]
push 1
call fcn.10010e4b
jmp 0x1003577d
push esi
push edi
push 0x1f0fff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
push edi
push 0x28
push 0x1011415c
jmp 0x100356c2
call fcn.100831f3
push eax
lea ecx, [ebp - 0x20]
call dword [sym.imp.mfc100.dll_Ordinal_322]
xor ebx, ebx
inc ebx
push 0x2a4
mov dword [ebp - 4], ebx
call dword [sym.imp.mfc100.dll_Ordinal_1294]
pop ecx
mov dword [ebp - 0x3c4], eax
mov byte [ebp - 4], 2
cmp eax, edi
je 0x10035c2e
push eax
call fcn.100028c8
jmp 0x10035c30
xor eax, eax
mov byte [ebp - 4], 1
mov edx, dword [eax]
push edi
push 0x1b57
mov ecx, eax
mov dword [0x1012fca8], eax
call dword [edx + 0x168]
mov ecx, dword [0x1012fca8]
push 5
call dword [sym.imp.mfc100.dll_Ordinal_12962]
mov eax, dword [0x1012fca8]
push edi
push ebx
push 0xf1
push dword [eax + 0x24c]
call dword [sym.imp.USER32.dll_SendMessageA]
mov ecx, dword [0x1012fca8]
mov esi, dword [sym.imp.mfc100.dll_Ordinal_12868]
push 0x101142fc
add ecx, 0xb8
call esi
mov ecx, dword [0x1012fca8]
push 0x101142c8
add ecx, 0x12c
call esi
push 0xc8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [0x1012fca8]
call fcn.100037ae
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call dword [sym.imp.mfc100.dll_Ordinal_13518]
mov eax, ebx
jmp 0x10036031
mov eax, dword [0xf34f30]
cmp eax, edi
je 0x1003600e
cmp dword [eax + 0x30], 0xffffffff
je 0x1003600e
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [0x1035fd44]
cmp eax, 0x1d4c0
jae 0x1003600e
push esi
push 0
push 0x1f0fff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
push 0
push 0x64
lea ecx, [ebp - 0x15c]
push ecx
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
lea eax, [ebp - 0xf8]
push eax
movzx eax, byte [0x358e586]
push eax
mov edi, 0x1035fff4
call fcn.1003e384
lea eax, [ebp - 0xf8]
push 0x3059968
push eax
call dword [sym.imp.MSVCR100.dll_strcat]
lea eax, [ebp - 0x15c]
push eax
lea eax, [ebp - 0xf8]
push eax
call dword [sym.imp.MSVCR100.dll_strcmp]
add esp, 0x18
neg eax
sbb eax, eax
inc eax
jmp 0x10036031
push dword [ebp - 0x3c0]
call dword [sym.imp.USER32.dll_SetForegroundWindow]
jmp 0x1003601a
lea ecx, [eax - 0x1389]
cmp ecx, 0xb
ja case.default.0x10035d80
jmp dword [ecx*4 + 0x100360aa]
call fcn.1003116f
jmp 0x100354b3
mov esi, dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
xor eax, eax
push eax
mov dword [ebp - 0x30], 0xd1820f
mov word [ebp - 0x2c], 0
lea edi, [ebp - 0x2a]
push 6
stosd dword es:[edi], eax
lea eax, [ebp - 0x30]
push eax
push 0x559932
push dword [0x100e08d4]
call esi
xor eax, eax
push eax
lea edi, [ebp - 0x16]
mov dword [ebp - 0x1c], 0x70e840f
mov word [ebp - 0x18], 0
stosd dword es:[edi], eax
push 6
lea eax, [ebp - 0x1c]
push eax
push 0x559470
push dword [0x100e08d4]
call esi
jmp 0x100354b3
push ebx
mov ecx, esi
call fcn.1003d27f
jmp 0x1003577d
pushal
mov ecx, dword ds:[0xf39a68]
mov eax, 0x887930
call eax
popal
jmp 0x100354b3
cmp esi, edi
jbe 0x10035e87
push esi
push edi
push 0x1f0fff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
push edi
push 4
lea ecx, [ebp - 0x3bc]
push ecx
push ebx
push eax
mov dword [ebp - 0x3c0], eax
call esi
push edi
push 4
lea eax, [ebp - 0x3b8]
push eax
lea eax, [ebx + 4]
push eax
push dword [ebp - 0x3c0]
call esi
push edi
push 4
lea eax, [ebp - 0x3c4]
push eax
add ebx, 8
push ebx
push dword [ebp - 0x3c0]
call esi
fild dword [ebp - 0x3bc]
fstp dword [0x101127d0]
fild dword [ebp - 0x3b8]
fstp dword [0x101127cc]
fild dword [ebp - 0x3c4]
fstp dword [0x101127c8]
fld dword [0x101127c8]
sub esp, 0xc
fstp dword [esp + 8]
fld dword [0x101127cc]
fstp dword [esp + 4]
fld dword [0x101127d0]
fstp dword [esp]
call fcn.1003a6a5
add esp, 0xc
jmp 0x100354b3
push esi
call fcn.1003a5c2
jmp 0x1003577d
xor eax, eax
push eax
cmp esi, 1
mov esi, dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
lea edi, [ebp - 0x19]
push 3
jne 0x10035edd
mov word [ebp - 0x1c], 0xcc2
mov byte [ebp - 0x1a], al
jmp 0x10035ee7
mov word [ebp - 0x1c], 0x8b55
mov byte [ebp - 0x1a], 0xec
stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0x1c]
push eax
push 0x78809c
push dword [0x100e08d4]
call esi
push 0
push 3
lea eax, [ebp - 0x1c]
push eax
push 0x7880ed
jmp 0x10035ddd
push esi
call fcn.1003a32b
jmp 0x1003577d
call fcn.1003b1bc
jmp 0x100354b3
mov eax, dword [0x30780e0]
mov dword [ebp - 0x3c0], eax
pushal
mov ecx, dword [ebp - 0x3c0]
mov eax, dword ds:[ecx]
mov eax, dword ds:[eax + 4]
push 0
push dword [ebp - 0x3c4]
push 0x3f4
call eax
popal
jmp 0x100354b3
mov esi, 0x103d725c
call fcn.1000102f
mov esi, 0x103d7268
call fcn.1000102f
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
xor eax, eax
push eax
push eax
mov ebx, 0x18b
push ebx
push dword [0x103d2fd8]
mov dword [ebp - 0x3b8], eax
call edi
test eax, eax
jle 0x100354b3
push dword [ebp - 0x3b8]
mov ecx, 0x103d2fb8
call dword [sym.imp.mfc100.dll_Ordinal_4553]
push eax
mov esi, 0x103d7268
call fcn.1000117c
lea eax, [ebp - 0x64]
push eax
push dword [ebp - 0x3b8]
push 0x189
push dword [0x103d2fd8]
call edi
lea eax, [ebp - 0x64]
push eax
mov esi, 0x103d725c
call fcn.10001109
inc dword [ebp - 0x3b8]
push 0
push 0
push ebx
push dword [0x103d2fd8]
call edi
cmp dword [ebp - 0x3b8], eax
jl 0x10035f8b
jmp 0x100354b3
call fcn.100750b1
jmp 0x100354b3
cmp eax, 0x112
jne 0x1003601a
cmp esi, 0xf030
jne 0x10036012
cmp dword [0x103ca494], 1
jne 0x1003601a
xor eax, eax
jmp 0x10036031
cmp esi, 0xf032
je 0x10036005
push ebx
push esi
push dword [ebp + 0xc]
push dword [ebp - 0x3c0]
push dword [0x1038431c]
call dword [sym.imp.USER32.dll_CallWindowProcA]
call fcn.10083aac
ret 0x10