Function at 0x1009b6f0
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x24
mov eax, dword [0x100d9018]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
push edi
call esi
mov edi, eax
mov eax, 0xde
mov ecx, 0x103a0f48
mov dword [ebp - 0x24], edi
call fcn.1006fd20
test al, al
setne al
mov byte [0x103a4dfe], al
mov eax, 0xd0
mov ecx, 0x103a0f48
call fcn.1006fd20
xor ebx, ebx
test al, al
je 0x1009b787
cmp dword [ebp + 8], 0x201
jne 0x1009b761
pop edi
pop esi
mov byte [0x103a4a0c], 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100c06a6
mov esp, ebp
pop ebp
ret 4
mov ecx, edi
sub ecx, dword [0x103a4a08]
mov byte [0x103a4a0c], bl
cmp ecx, 0x1f4
jb 0x1009bcff
call esi
mov dword [0x103a4a08], eax
call fcn.1009b610
mov eax, 0xd1
mov ecx, 0x103a0f48
call fcn.1006fd20
test al, al
je 0x1009b8a0
cmp dword [ebp + 8], 0x201
jne 0x1009b7c1
pop edi
pop esi
mov byte [0x103a4a54], 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100c06a6
mov esp, ebp
pop ebp
ret 4
mov edx, edi
sub edx, dword [0x103a4a50]
mov byte [0x103a4a54], bl
cmp edx, 0x1f4
jb 0x1009bcff
call esi
mov dl, byte [0x1027fd28]
mov ecx, dword [0x10310508]
mov dword [0x103a4a50], eax
xor dl, 1
xor eax, eax
mov byte [0x1027fd28], dl
cmp ecx, ebx
jbe 0x1009b8a0
cmp dl, 1
jne 0x1009b855
cmp eax, 6
ja case.default.0x1009b85a
jmp dword [eax*4 + 0x1009bd14]
mov byte [0x1027fd2c], 1
jmp case.default.0x1009b85a
mov byte [0x1027fd2d], 1
jmp case.default.0x1009b85a
mov byte [0x1027fd2e], 1
jmp case.default.0x1009b85a
mov byte [0x1027fd2f], 1
jmp case.default.0x1009b85a
mov byte [0x1027fd30], 1
jmp case.default.0x1009b85a
mov byte [0x1027fd31], 1
jmp case.default.0x1009b85a
mov byte [0x1027fd32], 1
jmp case.default.0x1009b85a
cmp eax, 6
ja case.default.0x1009b85a
jmp dword [eax*4 + 0x1009bd30]
mov byte [0x1027fd2c], bl
jmp case.default.0x1009b85a
mov byte [0x1027fd2d], bl
jmp case.default.0x1009b85a
mov byte [0x1027fd2e], bl
jmp case.default.0x1009b85a
mov byte [0x1027fd2f], bl
jmp case.default.0x1009b85a
mov byte [0x1027fd30], bl
jmp case.default.0x1009b85a
mov byte [0x1027fd31], bl
jmp case.default.0x1009b85a
mov byte [0x1027fd32], bl
inc eax
cmp eax, ecx
jb 0x1009b801
mov eax, 0xdc
mov ecx, 0x103a0f48
call fcn.1006fd20
test al, al
je 0x1009b919
cmp byte [0x1027fd28], bl
je 0x1009bcff
cmp dword [ebp + 8], 0x201
jne 0x1009b8e2
pop edi
pop esi
mov byte [0x103a4d6c], 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100c06a6
mov esp, ebp
pop ebp
ret 4
mov eax, edi
sub eax, dword [0x103a4d68]
mov byte [0x103a4d6c], bl
cmp eax, 0xc8
jb 0x1009bcff
call esi
mov dword [0x103a4d68], eax
mov eax, dword [0x1027fd34]
sub eax, 0xa
mov dword [0x1027fd34], eax
cmp eax, ebx
jg 0x1009b919
mov dword [0x1027fd34], ebx
mov eax, 0xdd
mov ecx, 0x103a0f48
call fcn.1006fd20
test al, al
je 0x1009b99a
cmp byte [0x1027fd28], bl
je 0x1009bcff
cmp dword [ebp + 8], 0x201
jne 0x1009b95b
pop edi
pop esi
mov byte [0x103a4db4], 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100c06a6
mov esp, ebp
pop ebp
ret 4
mov ecx, edi
sub ecx, dword [0x103a4db0]
mov byte [0x103a4db4], bl
cmp ecx, 0xc8
jb 0x1009bcff
call esi
mov dword [0x103a4db0], eax
mov eax, dword [0x1027fd34]
add eax, 0xa
mov dword [0x1027fd34], eax
cmp eax, 0x190
jl 0x1009b99a
mov dword [0x1027fd34], 0x190
mov eax, 0xd2
mov ecx, 0x103a0f48
call fcn.1006fd20
test al, al
je 0x1009b9f8
cmp dword [ebp + 8], 0x201
jne 0x1009b9d0
pop edi
pop esi
mov byte [0x103a4a9c], 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100c06a6
mov esp, ebp
pop ebp
ret 4
mov edx, edi
sub edx, dword [0x103a4a98]
mov byte [0x103a4a9c], bl
cmp edx, 0x1f4
jb 0x1009bcff
call esi
xor byte [0x1027fd29], 1
mov dword [0x103a4a98], eax
mov eax, 0xd3
mov ecx, 0x103a0f48
call fcn.1006fd20
test al, al
je 0x1009ba55
cmp dword [ebp + 8], 0x201
jne 0x1009ba2e
pop edi
pop esi
mov byte [0x103a4ae4], 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100c06a6
mov esp, ebp
pop ebp
ret 4
mov eax, edi
sub eax, dword [0x103a4ae0]
mov byte [0x103a4ae4], bl
cmp eax, 0x1f4
jb 0x1009bcff
call esi
xor byte [0x1027fd2a], 1
mov dword [0x103a4ae0], eax
mov eax, 0xd4
mov ecx, 0x103a0f48
call fcn.1006fd20
test al, al
je 0x1009bb72
cmp dword [ebp + 8], 0x201
jne 0x1009ba8f
pop edi
pop esi
mov byte [0x103a4b2c], 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100c06a6
mov esp, ebp
pop ebp
ret 4
mov ecx, edi
sub ecx, dword [0x103a4b28]
mov byte [0x103a4b2c], bl
cmp ecx, 0x1f4
jb 0x1009bcff
call esi
mov cl, byte [0x1027fd2b]
mov dword [0x103a4b28], eax
xor cl, 1
xor eax, eax
mov byte [0x1027fd2b], cl
cmp dword [0x10310508], ebx
jbe 0x1009bb72
lea ecx, [ecx]
cmp cl, bl
jne 0x1009bb23
cmp eax, 6
ja case.default.0x1009bb28
jmp dword [eax*4 + 0x1009bd4c]
mov byte [0x1027fd2c], 1
jmp case.default.0x1009bb28
mov byte [0x1027fd2d], 1
jmp case.default.0x1009bb28
mov byte [0x1027fd2e], 1
jmp case.default.0x1009bb28
mov byte [0x1027fd2f], 1
jmp case.default.0x1009bb28
mov byte [0x1027fd30], 1
jmp case.default.0x1009bb28
mov byte [0x1027fd31], 1
jmp case.default.0x1009bb28
mov byte [0x1027fd32], 1
jmp case.default.0x1009bb28
cmp eax, 6
ja case.default.0x1009bb28
jmp dword [eax*4 + 0x1009bd68]
mov byte [0x1027fd2c], bl
jmp case.default.0x1009bb28
mov byte [0x1027fd2d], bl
jmp case.default.0x1009bb28
mov byte [0x1027fd2e], bl
jmp case.default.0x1009bb28
mov byte [0x1027fd2f], bl
jmp case.default.0x1009bb28
mov byte [0x1027fd30], bl
jmp case.default.0x1009bb28
mov byte [0x1027fd31], bl
jmp case.default.0x1009bb28
mov byte [0x1027fd32], bl
inc eax
cmp eax, dword [0x10310508]
jb 0x1009bad0
mov eax, 0xdf
mov ecx, 0x103a0f48
call fcn.1006fd20
test al, al
je 0x1009bbd6
cmp dword [ebp + 8], 0x201
jne 0x1009bba8
pop edi
pop esi
mov byte [0x103a4e44], 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100c06a6
mov esp, ebp
pop ebp
ret 4
sub edi, dword [0x103a4e40]
mov byte [0x103a4e44], bl
cmp edi, 0x1f4
jb 0x1009bcff
call esi
mov dword [0x103a4e40], eax
mov eax, 0x1027fd24
call fcn.1009bda0
call fcn.1009b610
xor edi, edi
mov dword [ebp - 0x20], 0xd5
mov dword [ebp - 0x1c], 0xd6
mov dword [ebp - 0x18], 0xd7
mov dword [ebp - 0x14], 0xd8
mov dword [ebp - 0x10], 0xd9
mov dword [ebp - 0xc], 0xda
mov dword [ebp - 8], 0xdb
cmp dword [0x10310508], ebx
jbe 0x1009bcff
jmp 0x1009bc20
mov ax, word [ebp + edi*4 - 0x20]
mov ecx, 0x103a0f48
call fcn.1006fd20
test al, al
je 0x1009bcd0
mov eax, dword [ebp + edi*4 - 0x20]
lea esi, [eax + eax*8]
mov eax, dword [ebp - 0x24]
add esi, esi
add esi, esi
sub eax, dword [esi + esi + 0x103a0f88]
add esi, esi
cmp dword [ebp + 8], 0x201
je 0x1009bcf0
mov byte [esi + 0x103a0f8c], bl
cmp eax, 0x1f4
jb 0x1009bcff
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [esi + 0x103a0f88], eax
cmp edi, 6
ja case.default.0x1009bc7d
jmp dword [edi*4 + 0x1009bd84]
xor byte [0x1027fd2c], 1
jmp case.default.0x1009bc7d
xor byte [0x1027fd2d], 1
jmp case.default.0x1009bc7d
xor byte [0x1027fd2e], 1
jmp case.default.0x1009bc7d
xor byte [0x1027fd2f], 1
jmp case.default.0x1009bc7d
xor byte [0x1027fd30], 1
jmp case.default.0x1009bc7d
xor byte [0x1027fd31], 1
jmp case.default.0x1009bc7d
xor byte [0x1027fd32], 1
cmp byte [0x1027fd2b], 1
jne 0x1009bcd0
mov byte [0x1027fd2b], bl
inc edi
cmp edi, dword [0x10310508]
jb 0x1009bc20
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100c06a6
mov esp, ebp
pop ebp
ret 4
mov eax, dword [ebp + edi*4 - 0x20]
lea edx, [eax + eax*8]
mov byte [edx*8 + 0x103a0f8c], 1
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.100c06a6
mov esp, ebp
pop ebp
ret 4