Function at 0x10018880
Capabilities:
Check for time delay via gettickcount
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xc
cmp byte [0x102b8d41], 0
push ebx
push esi
push edi
je 0x10018a56
cmp dword [0x102ba03c], 0
je 0x100188f8
mov ecx, dword [0x102ba0b0]
lea eax, [ecx - 0x190]
cmp eax, 0x640
ja 0x100188f8
mov edx, dword [0x102ba094]
lea eax, [edx - 0x190]
cmp eax, 0x640
ja 0x100188f8
cmp ecx, dword [0x102ba0c8]
jne 0x100188d8
cmp edx, dword [0x102ba074]
je 0x100188f8
cmp dword [0x102ba0e4], 0
push edx
mov dword [0x102ba0c8], ecx
push ecx
setne cl
mov dword [0x102ba074], edx
call fcn.10018610
add esp, 8
cmp byte [0x102b8d42], 0
je 0x10018afd
cmp byte [0x102b8e28], 0
jne 0x100189fe
cmp byte [0x102b8e29], 0
jne 0x10018930
push 0
push 0
xor cl, cl
mov byte [0x102b8e29], 1
call fcn.10018610
add esp, 8
cmp dword [0x102b8db8], 0
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount64]
jne 0x10018946
call esi
mov dword [0x102b8db8], eax
call esi
mov ecx, dword [0x102b8db8]
add ecx, 0x3e8
test edx, edx
jb 0x10018a56
ja 0x10018966
cmp eax, ecx
jbe 0x10018a56
mov ch, 0x24
mov byte [esp + 0x16], 0
mov bl, 0x54
mov byte [esp + 0x10], ch
mov ah, bl
mov byte [esp + 0x16], 0
mov al, 0x74
xor ah, ch
xor al, ch
mov byte [esp + 0x15], ah
mov cl, 0x66
mov byte [esp + 0x11], al
mov dl, 0x65
lea eax, [esp + 0x11]
push 0
xor cl, ch
xor dl, ch
xor bl, ch
mov byte [esp + 0x16], cl
push eax
mov byte [esp + 0x1b], dl
mov byte [esp + 0x1c], bl
call dword [0x102b8d88]
mov edi, eax
push 0xfffffffffffffff0
push edi
call dword [sym.imp.USER32.dll_GetWindowLongA]
and eax, 0xff30ffff
push eax
push 0xfffffffffffffff0
push edi
call dword [sym.imp.USER32.dll_SetWindowLongA]
mov esi, dword [sym.imp.USER32.dll_GetSystemMetrics]
push 0x464
push 1
call esi
push eax
push 0
call esi
push eax
push 0
push 0
push 0
push edi
call dword [sym.imp.USER32.dll_SetWindowPos]
push 3
push edi
call dword [sym.imp.USER32.dll_ShowWindow]
mov byte [0x102b8e28], 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp byte [0x102b8ec4], 0
jne 0x10018a10
cmp dword [0x102b8dac], 1
jne 0x10018a56
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount64]
call esi
mov ecx, dword [0x102b8db8]
add ecx, 0x3e8
test edx, edx
jb 0x10018a56
ja 0x10018a2e
cmp eax, ecx
jbe 0x10018a56
call esi
mov dword [0x102b8db8], eax
mov eax, dword [0x102b8dac]
test eax, eax
jne 0x10018a5d
mov dword [0x102b8dac], 1
xor cl, cl
push 0
push 0
call fcn.10018610
add esp, 8
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp eax, 1
jne 0x10018a56
mov ch, 0x24
mov byte [esp + 0x16], 0
mov bl, 0x54
mov dword [0x102b8dac], 0
mov ah, bl
mov byte [esp + 0x10], ch
mov al, 0x74
mov byte [esp + 0x16], 0
xor al, ch
xor ah, ch
mov cl, 0x66
mov byte [esp + 0x11], al
mov dl, 0x65
mov byte [esp + 0x15], ah
push 0
lea eax, [esp + 0x15]
xor cl, ch
xor dl, ch
mov byte [esp + 0x16], cl
xor bl, ch
mov byte [esp + 0x17], dl
push eax
mov byte [esp + 0x1c], bl
call dword [0x102b8d88]
mov edi, eax
push 0xfffffffffffffff0
push edi
call dword [sym.imp.USER32.dll_GetWindowLongA]
and eax, 0xff30ffff
push eax
push 0xfffffffffffffff0
push edi
call dword [sym.imp.USER32.dll_SetWindowLongA]
mov esi, dword [sym.imp.USER32.dll_GetSystemMetrics]
push 0x464
push 1
call esi
push eax
push 0
call esi
push eax
push 0
push 0
push 0
push edi
call dword [sym.imp.USER32.dll_SetWindowPos]
push 3
push edi
call dword [sym.imp.USER32.dll_ShowWindow]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp dword [0x102ba0e4], 1
jne 0x10018a56
cmp byte [0x102ba0c4], 0
jne 0x10018b36
push 0
push 0
mov cl, 1
mov byte [0x102ba0c4], 1
call fcn.10018610
mov byte [0x102b7ad1], 1
add esp, 8
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp byte [0x102b8d6c], 0
je 0x10018a56
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
mov ecx, dword [0x102b8d94]
add ecx, 0x3e8
cmp eax, ecx
jbe 0x10018a56
call esi
cmp byte [0x102b7ad1], 1
mov dword [0x102b8d94], eax
jne 0x10018ba0
mov byte [0x102b7ad1], 0
xor cl, cl
cmp dword [0x102ba03c], 0
je 0x10018a4a
push dword [0x102ba094]
push dword [0x102ba0b0]
call fcn.10018610
add esp, 8
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov byte [0x102b7ad1], 1
mov cl, 1
jmp 0x10018b78