Function at 0x1026a4e
Capabilities:
Check for time delay via gettickcount

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x40
push ebx
xor ebx, ebx
xor eax, eax
push esi
mov esi, dword [ebp + 8]
inc eax
cmp dword [esi + 0x84], ebx
mov dword [ebp - 4], 2
mov dword [ebp - 0xc], ebx
mov dword [ebp - 8], ebx
mov dword [ebp - 0x10], eax
jne 0x1026a80
cmp dword [esi + 0x8c], eax
jne 0x1026a88
or eax, 0xffffffff
jmp 0x1026e3e
cmp dword [esi + 0x1c], ebx
jne 0x1026aa5
mov eax, dword [esi + 8]
push dword [eax + 4]
call dword [sym.imp.USER32.dll_UnlockWindowStation]
mov eax, dword [esi + 8]
push dword [eax + 4]
call dword [sym.imp.USER32.dll_LockWindowStation]
push edi
push 0xb
pop ecx
xor eax, eax
lea edi, [ebp - 0x40]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x40]
push eax
mov dword [ebp - 0x40], esi
call fcn.01026432
cmp dword [ebp + 0x14], ebx
je 0x1026acc
cmp dword [ebp - 0x3c], ebx
jne 0x1026acc
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x3c], ecx
cmp eax, ebx
je 0x1026df3
lea eax, [ebp - 0x40]
push eax
call fcn.0102626a
test eax, eax
je 0x1026df3
cmp dword [ebp - 0x3c], ebx
jne 0x1026b06
mov eax, dword [esi + 0x7c]
cmp eax, 9
je 0x1026b06
cmp eax, 0xa
je 0x1026b06
push 0x2000000
push ebx
push ebx
call dword [sym.imp.USER32.dll_OpenInputDesktop]
jmp 0x1026b1a
push ebx
push 0x2000000
push ebx
push ebx
push ebx
push 0x101289c
call dword [sym.imp.USER32.dll_CreateDesktopW]
mov ecx, dword [esi + 8]
mov dword [ecx + 0x18], eax
mov eax, dword [esi + 8]
cmp dword [eax + 0x18], ebx
je 0x1026dc8
mov dword [ebp + 8], ebx
push dword [eax + 8]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea edi, [eax + eax + 0x7c]
push edi
push 0x40
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
cmp eax, ebx
mov dword [ebp - 0x1c], eax
je 0x1026dc8
mov ecx, dword [esi + 8]
push dword [ecx + 8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
push 0x1010d70
push dword [ebp - 0x1c]
call dword [sym.imp.KERNEL32.dll_lstrcatW]
push dword [ebp - 0x1c]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea ebx, [eax + eax]
mov eax, dword [ebp - 0x1c]
lea ecx, [ebp + 8]
push ecx
sub edi, ebx
push edi
mov edi, dword [sym.imp.USER32.dll_GetUserObjectInformationW]
add eax, ebx
push eax
mov eax, dword [esi + 8]
push 2
push dword [eax + 0x18]
call edi
test eax, eax
jne 0x1026bed
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x1026dc6
mov eax, dword [esi + 8]
push 0x42
push dword [eax + 8]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov ecx, dword [ebp + 8]
lea eax, [ecx + eax*2 + 4]
push eax
push dword [ebp - 0x1c]
call dword [sym.imp.KERNEL32.dll_LocalReAlloc]
test eax, eax
je 0x1026dc6
lea ecx, [ebp + 8]
push ecx
push dword [ebp + 8]
add ebx, eax
push ebx
mov dword [ebp - 0x1c], eax
mov eax, dword [esi + 8]
push 2
push dword [eax + 0x18]
call edi
test eax, eax
je 0x1026dc6
lea eax, [ebp - 0x3c]
push eax
push dword [esi + 0x3a8]
call dword [esi + 0x3e4]
test eax, eax
je 0x1026dc6
mov eax, dword [esi + 0x7c]
xor ecx, ecx
inc ecx
xor edi, edi
cmp dword [ebp - 0x3c], edi
mov dword [esi + 0x84], ecx
je 0x1026c24
mov dword [ebp - 0xc], eax
mov dword [esi + 0x7c], 8
jmp 0x1026c2e
cmp eax, 9
je 0x1026c2e
cmp eax, 0xa
jne 0x1026c39
push ecx
push esi
call fcn.01031e59
test eax, eax
je 0x1026c77
lea eax, [ebp - 0x40]
push eax
call fcn.01026392
test eax, eax
jne 0x1026c82
cmp dword [ebp - 0x3c], edi
je 0x1026c57
cmp dword [esi + 0x1c], edi
mov dword [ebp - 4], 3
jne 0x1026c5e
mov dword [ebp - 4], 2
cmp dword [ebp - 0x3c], edi
jne 0x1026c70
mov eax, dword [esi + 0x7c]
cmp eax, 9
je 0x1026c70
cmp eax, 0xa
jne 0x1026c77
push edi
push esi
call fcn.01031e59
mov dword [esi + 0x84], edi
jmp 0x1026dc6
push 4
push esi
call fcn.01039fb3
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
call ebx
push 0
push esi
mov edi, eax
mov dword [ebp - 0x30], 3
call fcn.0103bcb6
lea eax, [ebp - 0x40]
push eax
push 0x102694d
push 0
push 0x578
push dword [0x107447c]
push esi
call fcn.0103be70
mov dword [ebp - 4], eax
call ebx
mov ebx, eax
xor eax, eax
cmp dword [esi + 0xe74], eax
je 0x1026cea
cmp dword [0x10743e4], eax
je 0x1026cea
push eax
mov dword [0x10743e4], eax
mov dword [ebp - 8], 1
call fcn.0102be05
push 5
push esi
call fcn.01039fb3
cmp ebx, edi
ja 0x1026cff
or eax, 0xffffffff
sub eax, edi
add ebx, eax
jmp 0x1026d01
sub ebx, edi
xor edi, edi
cmp dword [ebp - 0x3c], edi
je 0x1026d51
cmp dword [esi + 0x1c], edi
je 0x1026d65
cmp dword [ebp + 0x10], edi
je 0x1026d2e
push 5
push 0x101286c
push 0x101128c
call dword [sym.imp.KERNEL32.dll_GetProfileIntW]
imul eax, eax, 0x3e8
cmp ebx, eax
jb 0x1026d44
cmp dword [esi + 0xe74], edi
jne 0x1026d44
cmp dword [ebp - 8], edi
jne 0x1026d44
mov dword [ebp - 4], 3
jmp 0x1026d51
mov eax, dword [ebp - 0xc]
mov dword [ebp - 4], 2
mov dword [esi + 0x7c], eax
cmp dword [esi + 0x1c], edi
je 0x1026d65
cmp dword [esi + 0x1488], edi
je 0x1026d65
mov dword [ebp - 4], 3
push 4
pop ebx
cmp dword [ebp - 0x30], ebx
je 0x1026d98
cmp dword [ebp - 4], 3
je 0x1026d98
cmp dword [ebp - 0x3c], edi
jne 0x1026d85
mov eax, dword [esi + 0x7c]
cmp eax, 9
je 0x1026d85
cmp eax, 0xa
jne 0x1026d91
mov eax, dword [esi + 8]
push dword [eax + 0x20]
push esi
call fcn.01031e59
call fcn.010202b5
jmp 0x1026d9f
push edi
push esi
call fcn.01031e59
cmp dword [ebp - 0x2c], edi
mov dword [esi + 0x84], edi
je 0x1026dc6
cmp dword [ebp - 0x30], 3
je 0x1026dc6
cmp dword [ebp - 0x30], ebx
jne 0x1026dbd
mov dword [esi + 0x34], ebx
mov dword [ebp - 4], ebx
jmp 0x1026dc6
push dword [ebp - 0x30]
push esi
call fcn.0103bc57
xor ebx, ebx
lea eax, [ebp - 0x40]
push eax
mov dword [esi + 0x8c], ebx
call fcn.01026916
mov eax, dword [esi + 8]
mov eax, dword [eax + 0x18]
cmp eax, ebx
je 0x1026dee
push eax
call dword [sym.imp.USER32.dll_CloseDesktop]
mov eax, dword [esi + 8]
mov dword [eax + 0x18], ebx
mov eax, dword [ebp - 4]
jmp 0x1026e3d
mov esi, dword [sym.imp.USER32.dll_SystemParametersInfoW]
push ebx
lea eax, [ebp - 0x10]
push eax
push ebx
push 0x10
call esi
test eax, eax
je 0x1026e23
cmp dword [ebp - 0x10], ebx
je 0x1026e23
push ebx
lea eax, [ebp - 0x14]
push eax
push ebx
push 0xe
call esi
test eax, eax
je 0x1026e23
push ebx
push ebx
push dword [ebp - 0x14]
push 0xf
call esi
lea eax, [ebp - 0x40]
push eax
call fcn.01026916
cmp dword [ebp - 0x38], ebx
je 0x1026e3a
cmp dword [ebp - 0x3c], ebx
je 0x1026e3a
push 3
jmp 0x1026e3c
push 2
pop eax
pop edi
pop esi
pop ebx
leave
ret 0x10