Function at 0x1000b9b0
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10013785
mov eax, dword fs:[0]
push eax
sub esp, 0x34
push ebx
push esi
push edi
mov eax, dword [0x1001a0c0]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
cmp dword [0x100331a4], 0
je 0x1000bd0e
mov ecx, 0xa2
xor edx, edx
nop dword [eax]
mov al, byte [edx + 0x10017354]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x40], al
and ecx, 0x800000ff
jns 0x1000ba0d
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0x15
jl 0x1000b9f0
lea eax, [ebp - 0x40]
mov byte [ebp - 0x2b], 0
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
add eax, 0xcdbe
mov ecx, 0xd
mov dword [0x10033324], eax
xor edx, edx
mov al, byte [edx + str.ZNDDA3V_Q7_]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x38], al
and ecx, 0x800000ff
jns 0x1000ba4f
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xc
jl 0x1000ba32
mov byte [ebp - 0x2c], 0
mov dword [ebp - 4], 0
lea edx, [ebp - 0x38]
mov ecx, dword [0x100332cc]
mov eax, dword [0x100332c8]
add ecx, 0x12c
push edx
push 0xffffff00
push ecx
add eax, 0x1c2
push eax
push dword [0x10032ffc]
call fcn.10003900
add esp, 0x14
mov dword [ebp - 4], 0xffffffff
cmp byte [0x10033043], 0
je 0x1000bae6
mov word [ebp - 0x10], 0x4e4f
mov byte [ebp - 0xe], 0
mov dword [ebp - 4], 1
lea edx, [ebp - 0x10]
mov ecx, dword [0x100332cc]
mov eax, dword [0x100332c8]
add ecx, 0x12c
push edx
push 0xfff50000
push ecx
add eax, 0x1fe
push eax
push dword [0x10032ffc]
call fcn.10003900
add esp, 0x14
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [0x10033324]
test ecx, ecx
je 0x1000bd22
cmp dword [0x10033020], 0
jne 0x1000bb19
push 6
add ecx, 0xfffffffa
mov edx, 0x1000b990
call fcn.10002040
add esp, 4
mov dword [0x10033020], 0x64
cmp byte [0x10033043], 0
jne 0x1000bb36
mov dword [0x10033274], 0
mov dword [0x10033234], 0
mov eax, dword [0x100338c8]
cmp dword [eax], 0
jbe 0x1000bd22
mov eax, dword [0x1003329c]
mov eax, dword [eax]
mov dword [ebp - 0x10], eax
mov eax, dword [0x10033860]
mov eax, dword [eax]
mov dword [ebp - 0x14], eax
mov eax, dword [0x11dc7d00]
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x18]
lea ecx, [eax + edx]
mov dword [ebp - 0x1c], ecx
mov ecx, dword [ebp - 0x1c]
mov eax, dword [0x100333f8]
mov ecx, dword [eax + ecx]
call fcn.10004430
test eax, eax
jle 0x1000bd22
mov eax, dword [0x100333ec]
test eax, eax
je 0x1000bd29
mov ecx, dword [0x10033234]
test ecx, ecx
jne 0x1000bbb7
mov eax, dword [eax + 0x11c]
mov dword [0x10033274], eax
mov dword [0x10033234], 0x64
jmp 0x1000bbc5
cmp ecx, 0x64
jne 0x1000bd29
mov eax, dword [0x10033274]
test eax, eax
je 0x1000bd29
push 0x45
mov dword [0x10033940], 0x100023f0
call fcn.100023f0
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
cwde
shr eax, 0x10
test eax, eax
je 0x1000bc16
cmp byte [0x11dc9118], 0
je 0x1000bc08
cmp dword [0x11dc911c], 0
je 0x1000bc1d
call esi
cmp dword [0x11dc911c], eax
ja 0x1000bc1d
mov byte [0x11dc9118], 1
mov eax, 1
jmp 0x1000bc1f
mov byte [0x11dc9118], 0
xor eax, eax
test eax, eax
je 0x1000bc34
cmp byte [0x10033043], 0
sete al
mov byte [0x10033043], al
jmp 0x1000bc39
mov al, byte [0x10033043]
test al, al
je 0x1000bd29
push 0xa2
mov dword [0x10033940], 0x100023f0
call fcn.100023f0
cwde
shr eax, 0x10
test eax, eax
je 0x1000bc91
cmp byte [0x11dc9400], 0
je 0x1000bc7c
cmp dword [0x11dc9404], 0
je 0x1000bc98
call esi
mov ecx, dword [0x11dc9404]
inc ecx
cmp ecx, eax
ja 0x1000bc98
mov byte [0x11dc9400], 1
call esi
mov dword [0x11dc9404], eax
mov eax, 1
jmp 0x1000bc9a
mov byte [0x11dc9400], 0
xor eax, eax
test eax, eax
je 0x1000bca8
sub dword [0x10033274], 0x1b60
push 0x20
mov dword [0x10033940], 0x100023f0
call fcn.100023f0
cwde
shr eax, 0x10
test eax, eax
je 0x1000bcf5
cmp byte [0x11dc8ff0], 0
je 0x1000bce0
cmp dword [0x11dc8ff4], 0
je 0x1000bcfc
call esi
mov ecx, dword [0x11dc8ff4]
inc ecx
cmp ecx, eax
ja 0x1000bcfc
mov byte [0x11dc8ff0], 1
call esi
mov dword [0x11dc8ff4], eax
mov eax, 1
jmp 0x1000bcfe
mov byte [0x11dc8ff0], 0
xor eax, eax
test eax, eax
je 0x1000bd29
add dword [0x10033274], 0x1b60
jmp 0x1000bd29
mov dword [0x10033274], 0
mov dword [0x10033234], 0
mov byte [0x10033043], 0
mov eax, dword [0x100338c8]
mov ebx, dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
je 0x1000bd97
cmp dword [eax], 0
jbe 0x1000bd97
mov esi, dword [0x10033820]
test esi, esi
jne 0x1000bda5
mov eax, dword [0x100332ac]
xor edi, edi
mov dword [ebp - 0x18], eax
mov eax, dword [0x1003326c]
mov dword [ebp - 0x1c], eax
mov eax, dword [0x11dc7a68]
mov dword [ebp - 0x10], eax
push 4
push eax
call ebx
test eax, eax
jne 0x1000bd83
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x10]
mov eax, dword [eax]
add eax, dword [ecx]
mov ecx, dword [ebp - 0x18]
add eax, edi
cmp dword [eax + ecx], 0x101
cmove esi, edi
mov eax, dword [ebp - 0x10]
inc edi
cmp edi, 0x96
jle 0x1000bd61
mov dword [0x10033820], esi
jmp 0x1000bd9d
mov esi, dword [0x10033820]
test esi, esi
je 0x1000c133
mov eax, dword [0x11dc7a68]
mov edi, dword [eax]
add edi, dword [0x100332ac]
mov eax, dword [0x1003326c]
add edi, esi
add edi, dword [eax]
cmp dword [0x10033284], 0
jne 0x1000be10
cmp dword [0x1003390c], 0
jne 0x1000bed8
cmp dword [0x100337fc], 0
jne 0x1000bfa0
cmp dword [0x11dc7e9c], 0
jne 0x1000c068
push 4
push edi
call ebx
test eax, eax
jne 0x1000be03
push 4
push edi
call ebx
test eax, eax
jne 0x1000be03
mov dword [edi], 0x101
cmp dword [0x10033284], 0
je 0x1000becb
mov eax, dword [0x100338c8]
cmp dword [eax], 0
jbe 0x1000becb
mov eax, dword [0x1003329c]
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
mov eax, dword [0x10033860]
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
mov eax, dword [0x11dc7d00]
mov eax, dword [eax]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
lea ecx, [eax + edx]
mov dword [ebp - 0x10], ecx
mov eax, dword [0x1003329c]
mov esi, dword [ebp - 0x10]
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
mov eax, dword [0x10033860]
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
mov eax, dword [0x11dc7d00]
mov eax, dword [eax]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
lea ecx, [eax + edx]
mov dword [ebp - 0x20], ecx
mov eax, dword [ebp - 0x20]
mov ecx, dword [0x100333f8]
push 4
push edi
mov ecx, dword [eax + ecx]
imul ecx, dword [0x10033360]
mov eax, dword [0x1003330c]
add ecx, esi
cmp dword [ecx + eax + 0x50], 0
jne 0x1000beb6
call ebx
test eax, eax
jne 0x1000becb
push 4
push edi
call ebx
test eax, eax
jne 0x1000becb
mov dword [edi], 0x1100
jmp 0x1000becb
call ebx
test eax, eax
jne 0x1000becb
push 4
push edi
call ebx
test eax, eax
jne 0x1000becb
mov dword [edi], 0x101
cmp dword [0x1003390c], 0
je 0x1000bf93
mov eax, dword [0x100338c8]
cmp dword [eax], 0
jbe 0x1000bf93
mov eax, dword [0x1003329c]
mov eax, dword [eax]
mov dword [ebp - 0x20], eax
mov eax, dword [0x10033860]
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
mov eax, dword [0x11dc7d00]
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x18]
lea ecx, [eax + edx]
mov dword [ebp - 0x14], ecx
mov eax, dword [0x1003329c]
mov esi, dword [ebp - 0x14]
mov eax, dword [eax]
mov dword [ebp - 0x20], eax
mov eax, dword [0x10033860]
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
mov eax, dword [0x11dc7d00]
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x18]
lea ecx, [eax + edx]
mov dword [ebp - 0x10], ecx
mov eax, dword [ebp - 0x10]
mov ecx, dword [0x100333f8]
push 4
push edi
mov ecx, dword [eax + ecx]
imul ecx, dword [0x10033360]
mov eax, dword [0x1003330c]
add ecx, esi
cmp dword [ecx + eax + 0x50], 0
jne 0x1000bf7e
call ebx
test eax, eax
jne 0x1000bf93
push 4
push edi
call ebx
test eax, eax
jne 0x1000bf93
mov dword [edi], 0x1100
jmp 0x1000bf93
call ebx
test eax, eax
jne 0x1000bf93
push 4
push edi
call ebx
test eax, eax
jne 0x1000bf93
mov dword [edi], 0x101
cmp dword [0x100337fc], 0
je 0x1000c05b
mov eax, dword [0x100338c8]
cmp dword [eax], 0
jbe 0x1000c05b
mov eax, dword [0x1003329c]
mov eax, dword [eax]
mov dword [ebp - 0x20], eax
mov eax, dword [0x10033860]
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
mov eax, dword [0x11dc7d00]
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x18]
lea ecx, [eax + edx]
mov dword [ebp - 0x14], ecx
mov eax, dword [0x1003329c]
mov esi, dword [ebp - 0x14]
mov eax, dword [eax]
mov dword [ebp - 0x20], eax
mov eax, dword [0x10033860]
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
mov eax, dword [0x11dc7d00]
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x18]
lea ecx, [eax + edx]
mov dword [ebp - 0x10], ecx
mov eax, dword [ebp - 0x10]
mov ecx, dword [0x100333f8]
push 4
push edi
mov ecx, dword [eax + ecx]
imul ecx, dword [0x10033360]
mov eax, dword [0x1003330c]
add ecx, esi
cmp dword [ecx + eax + 0x50], 0
jne 0x1000c046
call ebx
test eax, eax
jne 0x1000c05b
push 4
push edi
call ebx
test eax, eax
jne 0x1000c05b
mov dword [edi], 0x1100
jmp 0x1000c05b
call ebx
test eax, eax
jne 0x1000c05b
push 4
push edi
call ebx
test eax, eax
jne 0x1000c05b
mov dword [edi], 0x101
cmp dword [0x11dc7e9c], 0
je 0x1000c133
mov eax, dword [0x100338c8]
cmp dword [eax], 0
jbe 0x1000c133
mov eax, dword [0x1003329c]
mov eax, dword [eax]
mov dword [ebp - 0x20], eax
mov eax, dword [0x10033860]
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
mov eax, dword [0x11dc7d00]
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x18]
lea ecx, [eax + edx]
mov dword [ebp - 0x24], ecx
mov eax, dword [0x1003329c]
mov esi, dword [ebp - 0x24]
mov eax, dword [eax]
mov dword [ebp - 0x20], eax
mov eax, dword [0x10033860]
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
mov eax, dword [0x11dc7d00]
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x18]
lea ecx, [eax + edx]
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x28]
mov ecx, dword [0x100333f8]
push 4
push edi
mov ecx, dword [eax + ecx]
imul ecx, dword [0x10033360]
mov eax, dword [0x1003330c]
add ecx, esi
cmp dword [ecx + eax + 0x50], 0
jne 0x1000c11e
call ebx
test eax, eax
jne 0x1000c133
push 4
push edi
call ebx
test eax, eax
jne 0x1000c133
mov dword [edi], 0x1100
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
call ebx
test eax, eax
jne 0x1000c133
push 4
push edi
call ebx
test eax, eax
jne 0x1000c133
mov dword [edi], 0x101
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret