Function at 0x100255c0
Capabilities:
Check for time delay via gettickcount

Disassembly:
mov ecx, dword [0x100aaf5c]
mov eax, dword [0x100af5f8]
add eax, 0x1c
push eax
mov edx, dword [ecx]
call dword [edx + 4]
cmp dword [eax], 0
je 0x100258e3
cmp dword [0x100ab3ac], 0
je 0x100258e3
mov eax, dword [0x100af5f8]
push esi
mov ecx, dword [eax + 0x2e4]
mov eax, dword [0x100ac25c]
mov ecx, dword [eax + ecx]
call fcn.1001b3f0
mov esi, eax
test esi, esi
je 0x100258d7
mov ecx, dword [0x100aaf5c]
push 0x100ac660
mov edx, dword [ecx]
call dword [edx + 4]
test eax, eax
je 0x100258d7
mov edx, dword [0x100ab53c]
add edx, eax
cmp edx, eax
jbe 0x100258d7
mov ecx, esi
call edx
test eax, eax
jle 0x100258d7
mov eax, dword [0x100af5f8]
mov ecx, dword [eax + 0x2e4]
mov eax, dword [0x100ac25c]
mov ecx, dword [eax + ecx]
call fcn.1001b3f0
test eax, eax
je 0x10025677
mov edx, dword [0x100af5f8]
movss xmm0, dword [0x100983b8]
mov ecx, dword [edx + 0x29c]
comiss xmm0, dword [eax + ecx]
ja 0x100256a0
push 0
push 0
push 0
push 0
push 4
mov dword [0x100aeda8], 0x10018380
call fcn.10018380
mov edx, dword [0x100af5f8]
mov dword [0x100b2dd4], 0
mov ecx, dword [edx + 0x2e4]
mov eax, dword [0x100ac25c]
mov esi, dword [eax + ecx]
call fcn.1001a760
mov edx, dword [0x100af5f8]
mov ecx, dword [edx + 0x2d4]
imul ecx, esi
add ecx, eax
mov eax, dword [edx + 0x2f8]
add eax, dword [edx + 0x2d8]
xor edx, edx
mov eax, dword [eax + ecx]
mov ecx, 0x186a0
div ecx
sub edx, 0x1388
cmp edx, 0x3e8
jae 0x10025869
mov ecx, dword [0x100ab3ac]
cmp ecx, 1
jne 0x10025705
mov dword [0x100b4878], 0x1f4
jmp 0x1002575e
cmp ecx, 2
jne 0x10025716
mov dword [0x100b4878], 0xc8
jmp 0x1002575e
cmp ecx, 3
jne 0x10025727
mov dword [0x100b4878], 0x96
jmp 0x1002575e
cmp ecx, 4
jne 0x10025738
mov dword [0x100b4878], 0x64
jmp 0x1002575e
cmp ecx, 5
jne 0x10025749
mov dword [0x100b4878], 0x32
jmp 0x1002575e
mov eax, dword [0x100b4878]
cmp ecx, 6
mov edx, 0x1e
cmove eax, edx
mov dword [0x100b4878], eax
push 2
mov dword [0x100ab654], 0x100183e0
call fcn.100183e0
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
cwde
shr eax, 0x10
test eax, eax
je 0x100257b9
cmp byte [0x100b2f48], 0
je 0x10025799
cmp dword [0x100b2f4c], 0
je 0x100257c0
call esi
cmp dword [0x100b2f4c], eax
ja 0x100257c0
mov byte [0x100b2f48], 1
call esi
add eax, dword [0x100b4878]
mov dword [0x100ab590], eax
mov dword [0x100b2dd4], 1
jmp 0x100257c0
mov byte [0x100b2f48], 0
call esi
cmp dword [0x100ab590], eax
ja 0x10025800
cmp dword [0x100b2dd4], 1
jne 0x10025800
push 0
push 0
push 0
push 0
push 2
mov dword [0x100aeda8], 0x10018380
call fcn.10018380
call esi
add eax, 0x32
mov dword [0x100b2dd4], 2
mov dword [0x100ab590], eax
call esi
cmp dword [0x100ab590], eax
mov eax, dword [0x100b2dd4]
ja 0x10025843
cmp eax, 2
jne 0x10025843
push 0
push 0
push 0
push 0
push 4
mov dword [0x100aeda8], 0x10018380
call fcn.10018380
call esi
add eax, 0x64
mov dword [0x100b2dd4], 3
mov dword [0x100ab590], eax
jmp 0x10025848
cmp eax, 3
jne 0x1002586b
push 0
push 1
push 0x45
push 0x33
mov dword [0x100af588], 0x100183b0
call fcn.100183b0
mov dword [0x100b2dd4], 4
pop esi
ret
cmp eax, 4
jne 0x10025893
push 0
push 3
push 0x45
push 0x33
mov dword [0x100af588], 0x100183b0
call fcn.100183b0
mov dword [0x100b2dd4], 5
jmp 0x10025898
cmp eax, 5
jne 0x100258bb
push 0
push 1
push 0x45
push 0x31
mov dword [0x100af588], 0x100183b0
call fcn.100183b0
mov dword [0x100b2dd4], 6
pop esi
ret
cmp eax, 6
jne 0x10025869
push 0
push 3
push 0x45
push 0x31
mov dword [0x100af588], 0x100183b0
call fcn.100183b0
mov dword [0x100b2dd4], 0
pop esi
ret
mov dword [0x100b2dd4], 0
ret