Function at 0x10046087
Capabilities:
Check for time delay via gettickcount

Disassembly:
push 0x80
mov eax, 0x100896d8
call fcn.1006301c
mov eax, dword [ebp + 8]
mov esi, ecx
mov ecx, dword [ebp + 0x18]
mov dword [ebp - 0x4c], ecx
movzx ecx, byte [ebp + 0x10]
imul ecx, ecx, 0x22
mov dword [ebp - 0x58], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x30], eax
add eax, ecx
mov edi, dword [eax - 0x13]
mov ecx, dword [eax - 0xc]
mov eax, dword [eax + 4]
xor ebx, ebx
cmp dword [ebp + 0x20], ebx
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x44], 0x1f
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x48], edi
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x28], eax
mov byte [ebp - 0x19], bl
jle 0x100460f7
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp + 0x2c]
mov edi, dword [ebp - 0x48]
mov dword [ebp - 0x34], eax
push 0xf000
call fcn.10062b5c
pop ecx
mov dword [ebp - 0x20], eax
cmp eax, ebx
jne 0x10046148
push 0x1010
call fcn.10062b5c
pop ecx
mov dword [ebp - 0x2c], eax
mov dword [ebp - 4], ebx
cmp eax, ebx
je 0x10046131
push 0x10005828
push ebx
push 4
push eax
call fcn.10037a50
add esp, 0x10
jmp 0x10046133
xor eax, eax
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x7c], eax
push 0x1008bdb8
lea eax, [ebp - 0x7c]
push eax
call fcn.1006330f
mov dword [ebp - 0x5c], eax
mov eax, dword [esi + 8]
mov dword [eax + 0x10], 0xf000
mov eax, dword [ebp - 0x30]
cmp byte [eax + 1], bl
jne 0x10046169
mov eax, dword [ebp - 0x28]
mov ecx, dword [esi + 8]
shl eax, 4
mov dword [ecx + 0x10], eax
mov eax, dword [esi + 8]
mov eax, dword [eax + 0x10]
xor edx, edx
div dword [ebp - 0x28]
mov dword [ebp - 0x18], eax
xor eax, eax
inc eax
cmp dword [ebp + 0x20], ebx
jle 0x1004618c
cmp dword [ebp + 0x20], eax
jne 0x10046189
cmp byte [ebp + 0x38], al
je 0x1004618c
mov dword [ebp - 0x18], eax
cmp byte [ebp + 0x34], 1
jne 0x10046195
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x34]
sub eax, edi
inc eax
cdq
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x74], edx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x14], edi
mov edi, 0xf000
push edi
push ebx
push dword [ebp - 0x20]
mov dword [ebp - 4], 1
mov byte [ebp - 0x21], 1
call fcn.100620c0
add esp, 0xc
cmp dword [ebp - 0x18], 1
jbe 0x100461f9
mov eax, dword [esi + 8]
mov eax, dword [eax + 0x10]
xor edx, edx
div dword [ebp - 0x28]
mov ecx, dword [ebp - 0x34]
sub ecx, dword [ebp - 0x14]
inc ecx
mov dword [ebp - 0x18], eax
cmp eax, ecx
jb 0x100461f9
mov dword [ebp - 0x18], ecx
cmp byte [ebp - 0x19], bl
jne 0x100462ec
cmp byte [0x1009c319], 1
jne 0x10046212
mov ecx, esi
call fcn.1004074d
mov eax, dword [ebp - 0x30]
mov ecx, esi
cmp byte [eax + 1], bl
jne 0x1004623f
mov eax, dword [ebp - 0x28]
imul eax, dword [ebp - 0x18]
push eax
push dword [ebp - 0x20]
push ebx
push ebx
push ebx
push 1
push ebx
push ebx
push dword [ebp - 0x18]
push dword [ebp - 0x14]
push ebx
call fcn.1004122b
jmp 0x100462ef
push ebx
push dword [ebp - 0x18]
push dword [ebp - 0x14]
push edi
push dword [ebp - 0x20]
call fcn.10040862
jmp 0x100462ef
mov byte [ebp - 0x21], bl
or dword [ebp - 4], 0xffffffff
cmp byte [ebp - 0x21], bl
jne 0x1004648c
mov eax, dword [ebp + 0x24]
mov edi, dword [ebp + 0x20]
inc eax
cmp edi, eax
jge 0x100463fb
cmp byte [ebp - 0x19], bl
jne 0x100463fb
push ebx
lea eax, [ebp - 0x14]
push eax
push dword [esi + 0x11fd4]
mov dword [ebp - 4], 3
push 0x14
call dword [esi + 0x11fd0]
push dword [ebp + 0x38]
mov eax, dword [ebp - 0x14]
push dword [ebp + 0x34]
mov ecx, dword [ebp - 0x18]
push dword [ebp + 0x30]
lea ecx, [ecx + eax - 1]
push ecx
push eax
push dword [ebp + 0x24]
inc edi
push edi
mov edi, dword [ebp - 0x30]
push ebx
push dword [ebp - 0x4c]
mov ecx, esi
push edi
push dword [ebp + 0x10]
push dword [ebp - 0x60]
push dword [ebp - 0x58]
call fcn.10046087
mov eax, dword [ebp - 0x18]
or dword [ebp - 4], 0xffffffff
add dword [ebp - 0x3c], eax
adc dword [ebp - 0x38], ebx
add dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x34]
jg 0x100465bf
movzx eax, byte [ebp + 0x10]
imul eax, eax, 0x22
mov eax, dword [eax + edi - 0xc]
sub eax, dword [ebp - 0x14]
cmp eax, 0x96
jge 0x10046398
mov dword [ebp - 0x18], 1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
cmp dword [ebp + 0x1c], ebx
jbe 0x100461ba
mov edx, dword [ebp + 0x1c]
imul edx, edx, 0x3e8
mov ecx, eax
sub ecx, dword [ebp - 0x40]
cmp ecx, edx
jbe 0x100461ba
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x78]
push eax
push dword [esi + 0x11fd4]
push 0xb
call dword [esi + 0x11fd0]
jmp 0x100461ba
cmp byte [ebp + 0x30], bl
jne 0x10046465
movzx eax, byte [ebp + 0x10]
mov ecx, dword [ebp - 0x30]
imul eax, eax, 0x22
mov eax, dword [eax + ecx - 0xc]
sub eax, dword [ebp - 0x14]
cmp eax, 0xc8
jle 0x10046465
push 0x1010
call fcn.10062b5c
pop ecx
mov dword [ebp - 0x2c], eax
mov dword [ebp - 4], 5
cmp eax, ebx
je 0x10046447
push dword [ebp - 0x14]
push 0x100057d8
push ebx
push 0xa
push eax
call fcn.10037a50
add esp, 0x14
mov ebx, eax
push dword [ebp - 0x20]
or dword [ebp - 4], 0xffffffff
call fcn.1006213f
mov dword [ebp - 0x70], ebx
mov dword [esp], 0x1008bdb8
lea eax, [ebp - 0x70]
jmp 0x10046142
push 0xf000
push ebx
push dword [ebp - 0x20]
call fcn.100620c0
add esp, 0xc
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x14]
push eax
push dword [esi + 0x11fd4]
push 0x12
call dword [esi + 0x11fd0]
mov edi, dword [ebp - 0x28]
imul edi, dword [ebp - 0x50]
lea eax, [ebp - 0x44]
push eax
push ebx
lea eax, [ebp - 0x54]
push eax
push edi
push dword [ebp - 0x5c]
push dword [ebp - 0x4c]
call dword [ebp - 0x58]
test eax, eax
jne 0x100464f9
push 0x1010
call fcn.10062b5c
pop ecx
mov dword [ebp - 0x2c], eax
mov dword [ebp - 4], 6
cmp eax, ebx
je 0x100464db
push dword [ebp - 0x44]
push 0x10005788
push dword [ebp - 0x44]
push 5
push eax
call fcn.10037a50
add esp, 0x14
mov ebx, eax
push dword [ebp - 0x20]
or dword [ebp - 4], 0xffffffff
call fcn.1006213f
mov dword [ebp - 0x64], ebx
mov dword [esp], 0x1008bdb8
lea eax, [ebp - 0x64]
jmp 0x10046142
cmp dword [ebp - 0x54], edi
je 0x10046555
push 0x1010
call fcn.10062b5c
pop ecx
mov dword [ebp - 0x2c], eax
mov dword [ebp - 4], 7
cmp eax, ebx
je 0x10046537
mov eax, dword [ebp - 0x28]
imul eax, dword [ebp - 0x18]
push eax
push dword [ebp - 0x54]
push 0x10005720
push ebx
push 0xa
push dword [ebp - 0x2c]
call fcn.10037a50
add esp, 0x18
mov ebx, eax
push dword [ebp - 0x20]
or dword [ebp - 4], 0xffffffff
call fcn.1006213f
mov dword [ebp - 0x80], ebx
mov dword [esp], 0x1008bdb8
lea eax, [ebp - 0x80]
jmp 0x10046142
cmp byte [esi + 0x11c76], 1
jne 0x100465ab
push 0x1010
call fcn.10062b5c
pop ecx
mov dword [ebp - 0x2c], eax
mov dword [ebp - 4], 8
cmp eax, ebx
je 0x1004658d
push dword [ebp - 0x14]
push 0x100056d0
push ebx
push 0xe
push eax
call fcn.10037a50
add esp, 0x14
mov ebx, eax
push dword [ebp - 0x20]
or dword [ebp - 4], 0xffffffff
call fcn.1006213f
mov dword [ebp - 0x68], ebx
mov dword [esp], 0x1008bdb8
lea eax, [ebp - 0x68]
jmp 0x10046142
mov eax, dword [ebp - 0x18]
add dword [ebp - 0x3c], eax
mov edi, dword [ebp - 0x34]
adc dword [ebp - 0x38], ebx
add dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], edi
jle 0x100465da
lea eax, [ebp - 0x44]
push eax
push dword [ebp - 0x4c]
call dword [ebp - 0x60]
push dword [ebp - 0x20]
call fcn.1006213f
pop ecx
call fcn.100630d0
ret 0x34
movzx ecx, byte [ebp + 0x10]
mov edx, dword [ebp - 0x30]
imul ecx, ecx, 0x22
mov ecx, dword [ecx + edx - 0xc]
sub ecx, dword [ebp - 0x14]
cmp ecx, 0x96
jge 0x10046621
lea edx, [ecx + 1]
cmp edx, eax
jae 0x10046621
sub edi, eax
lea ecx, [edi + 1]
cmp ecx, dword [ebp - 0x48]
jge 0x1004660f
xor eax, eax
inc eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x50], eax
jmp 0x10046621
sub eax, edx
imul eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x20]
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x50], edx
mov dword [ebp - 0x5c], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
cmp dword [ebp + 0x1c], ebx
jbe 0x100461ba
mov edx, dword [ebp + 0x1c]
imul edx, edx, 0x3e8
mov ecx, eax
sub ecx, dword [ebp - 0x40]
cmp ecx, edx
jbe 0x100461ba
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x78]
push eax
push dword [esi + 0x11fd4]
push 0xb
call dword [esi + 0x11fd0]
jmp 0x100461ba