Function at 0x10063f40
Capabilities:
Check for time delay via gettickcount
Resume thread
Suspend thread

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x100b1750
push 0x1007da79
mov eax, dword fs:[0]
push eax
sub esp, 0x28
mov eax, dword [0x100b400c]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x1c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
cmp dword [0x100bfacc], eax
ja 0x10063fe5
mov eax, dword [0x100bbc48]
inc eax
mov dword [0x100bbc48], eax
cmp eax, 0x3d
jne 0x10063fc0
mov dword [0x100bbc48], 0
mov eax, dword [0x100bc724]
inc eax
mov dword [0x100bc724], eax
cmp eax, 0x3d
jne 0x10063fc0
inc dword [0x100bbbe4]
mov dword [0x100bc724], 0
sub dword [0x100b4018], 1
jne 0x10063fd9
mov dword [0x100b4018], 0x3c
dec dword [0x100b4028]
call esi
add eax, 0x3e8
mov dword [0x100bfacc], eax
call fcn.100191d0
mov esi, eax
mov ecx, esi
call fcn.100776b0
push dword [0x100bbc48]
push dword [0x100bc724]
push dword [0x100bbbe4]
push esi
push 0x100baf88
call fcn.10008c40
add esp, 0x14
wait
mov dword [ebp - 4], 0
mov ecx, dword [0x100bb620]
mov eax, dword [ecx]
push dword [0x100bfd50]
call dword [eax + 4]
mov eax, dword [eax]
mov dword [0x100bcd68], eax
call fcn.10019bf0
mov dword [0x100bc950], eax
mov eax, dword [0x100bfd50]
mov ecx, dword [eax + 0x264]
mov eax, dword [0x100bcd68]
mov edi, dword [eax + ecx]
test edi, edi
je 0x10064462
mov eax, dword [edi]
push 0x100bb604
push edi
call dword [eax + 0xc0]
add dword [0x100b4464], 2
add dword [0x100b4050], 3
add dword [0x100b4038], 4
call fcn.100192b0
call fcn.1002d120
cmp dword [0x100b4470], 0
je 0x100640fc
mov byte [ebp - 0x2d], 0
call fcn.100644a0
mov esi, eax
mov ecx, esi
call fcn.10068650
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__localtime64]
push dword [eax]
push dword [eax + 4]
push dword [eax + 8]
push esi
push 0x100bbd88
call fcn.10008c40
add esp, 0x1c
call fcn.1002c950
mov byte [ebp - 0x2e], 0
call fcn.10064580
mov esi, eax
mov ecx, esi
call fcn.100685f0
mov edx, esi
call fcn.1002ce80
call fcn.1002cef0
call fcn.1002ca60
call fcn.1002cbc0
call fcn.1002cd20
mov ecx, dword [0x100bb620]
mov eax, dword [ecx]
call dword [eax + 0xa8]
test eax, eax
je 0x10064462
mov ecx, edi
call fcn.10063090
call fcn.10016960
test eax, eax
je 0x1006412a
push edi
call fcn.10063b10
jmp 0x10064151
call fcn.10016cb0
test eax, eax
je 0x1006413b
push edi
call fcn.10063bd0
jmp 0x10064151
call fcn.10016a70
push edi
test eax, eax
je 0x1006414c
call fcn.10063b70
jmp 0x10064151
call fcn.10063aa0
cmp dword [0x100bd4cc], 0
jne 0x10064223
push 0xffff0000
mov edx, 0x100bbc10
mov ecx, edi
call fcn.10063e80
push 0xff00b4ff
mov edx, 0x100badbc
mov ecx, edi
call fcn.10063e80
push 0xffff7276
mov edx, 0x100bc728
mov ecx, edi
call fcn.10063e80
push 0xffccffff
mov edx, 0x100bfd5c
mov ecx, edi
call fcn.10063e80
push 0xffffff00
mov edx, 0x100bbd14
mov ecx, edi
call fcn.10063e80
push 0xff00ff00
mov edx, 0x100bc7f0
mov ecx, edi
call fcn.10063e80
push 0xff0000ff
mov edx, 0x100bbc84
mov ecx, edi
call fcn.10063e80
push 0xff660099
mov edx, 0x100bba6c
mov ecx, edi
call fcn.10063e80
push 0xffff1493
mov edx, 0x100ba968
mov ecx, edi
call fcn.10063e80
push 0xffff9600
mov edx, 0x100bf4d0
mov ecx, edi
call fcn.10063e80
push 0xffffffffffffffff
mov edx, 0x100bfdf4
mov ecx, edi
call fcn.10063e80
add esp, 0x2c
mov dword [0x100bd4cc], 1
cmp dword [0x100b4470], 0
je 0x100642a1
cmp dword [0x100bf97c], 0
je 0x100642a1
mov edx, 1
lea ecx, [edx + 0x10]
call fcn.10017210
test eax, eax
je 0x100642a1
lea eax, [ebp - 0x24]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
lea eax, [ebp - 0x24]
push eax
call dword [sym.imp.USER32.dll_GetForegroundWindow]
push eax
call dword [sym.imp.USER32.dll_ScreenToClient]
mov ecx, dword [ebp - 0x24]
mov dword [0x100b401c], ecx
mov eax, dword [ebp - 0x20]
add eax, 2
mov dword [0x100b4034], eax
mov dword [0x100b57bc], ecx
mov dword [0x100b5710], eax
mov dword [0x100b5970], ecx
mov dword [0x100b50c0], eax
mov dword [0x100b5524], ecx
mov dword [0x100b50f4], eax
mov dword [0x100b5460], ecx
mov dword [0x100b50a4], eax
call fcn.10026570
call fcn.10016cb0
mov ecx, edi
test eax, eax
je 0x100642b8
call fcn.1002c880
jmp 0x100642bd
call fcn.1002c470
cmp dword [0x100bad84], 0
je 0x1006433b
push str.cb.cbm
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
xor edx, edx
lea ecx, [edx + 0x70]
call fcn.10017210
test eax, eax
je 0x10064306
xor esi, esi
mov edi, dword [sym.imp.KERNEL32.dll_SuspendThread]
mov dword [ebp - 0x34], esi
mov eax, dword [0x100bfe9c]
mov ecx, dword [0x100bfe98]
sub eax, ecx
sar eax, 2
cmp esi, eax
jae 0x10064306
push dword [ecx + esi*4]
call edi
inc esi
jmp 0x100642e7
xor edx, edx
lea ecx, [edx + 0x71]
call fcn.10017210
test eax, eax
je 0x1006433b
xor esi, esi
mov edi, dword [sym.imp.KERNEL32.dll_ResumeThread]
mov dword [ebp - 0x38], esi
mov eax, dword [0x100bfe9c]
mov ecx, dword [0x100bfe98]
sub eax, ecx
sar eax, 2
cmp esi, eax
jae 0x1006433b
push dword [ecx + esi*4]
call edi
inc esi
jmp 0x1006431c
cmp dword [0x100bc784], 0
jne 0x10064462
cmp dword [0x100b4470], 1
jne 0x1006437e
cmp dword [0x100bee18], 0
jne 0x1006437e
xor edx, edx
lea ecx, [edx + 0x2e]
call fcn.10017210
test al, 1
je 0x1006437e
mov dword [0x100bee18], 1
mov dword [0x100b4470], 0
jmp 0x10064387
cmp dword [0x100b4470], 0
jne 0x100643b4
cmp dword [0x100bee18], 1
jne 0x100643b4
xor edx, edx
lea ecx, [edx + 0x2e]
call fcn.10017210
test al, 1
je 0x100643b4
mov dword [0x100bee18], 0
mov dword [0x100b4470], 1
jmp 0x100643bd
cmp dword [0x100b4470], 1
jne 0x1006440c
cmp dword [0x100bee18], 0
jne 0x1006440c
mov edx, 1
lea ecx, [edx + 0x10]
call fcn.10017210
test eax, eax
je 0x1006440c
mov edx, 1
lea ecx, [edx + 0x43]
call fcn.10017210
test eax, eax
je 0x1006440c
xor edx, edx
lea ecx, [edx + 0x30]
call fcn.10017210
test eax, eax
je 0x1006440c
mov dword [0x100bee18], 2
mov dword [0x100b4470], 0
jmp 0x10064415
cmp dword [0x100b4470], 0
jne 0x10064462
cmp dword [0x100bee18], 2
jne 0x10064462
mov edx, 1
lea ecx, [edx + 0x10]
call fcn.10017210
test eax, eax
je 0x10064462
mov edx, 1
lea ecx, [edx + 0x43]
call fcn.10017210
test eax, eax
je 0x10064462
xor edx, edx
lea ecx, [edx + 0x30]
call fcn.10017210
test eax, eax
je 0x10064462
mov dword [0x100bee18], 0
mov dword [0x100b4470], 1
wait
jmp 0x1006446e
mov dword [ebp - 4], 0xfffffffe
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x1c]
xor ecx, ebp
call fcn.1007d7e9
mov esp, ebp
pop ebp
ret