Function at 0x1021d7a
Capabilities:
Check for time delay via gettickcount

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x420
mov eax, dword [0x103e010]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
push esi
push edi
mov edi, dword [ebp + 0xc]
mov esi, ecx
mov dword [ebp - 0x420], 4
call ebx
lea ecx, [esi + 0x1c0]
mov dword [ebp - 0x41c], eax
call fcn.01019017
mov dword [ebp - 0x418], eax
test eax, eax
jge 0x1021df0
mov eax, dword [section..data]
cmp eax, section..data
je 0x102207b
test byte [eax + 0x1c], 1
je 0x102207b
push dword [ebp - 0x418]
push 0x1003f64
push 0x1e
jmp 0x1022036
push 0
mov ecx, edi
call fcn.0100f0dc
push eax
mov ecx, edi
call fcn.01015d45
push eax
lea ecx, [esi + 0x1c0]
call fcn.0101972f
mov dword [ebp - 0x418], eax
test eax, eax
jge 0x1021e43
mov eax, dword [section..data]
cmp eax, section..data
je 0x102207b
test byte [eax + 0x1c], 1
je 0x102207b
push dword [ebp - 0x418]
push 0x1003f64
push 0x1f
jmp 0x1022036
call ebx
mov ebx, eax
sub ebx, dword [ebp - 0x41c]
push ebx
push 0x1166
push dword [0x103ec44]
call sub.ntdll.dll_WinSqmSetDWORD
mov eax, dword [section..data]
cmp eax, section..data
je 0x1021e83
test byte [eax + 0x1c], 4
je 0x1021e83
push ebx
push 0x1003f64
push 0x20
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01008600
mov ebx, 0x104
push ebx
lea eax, [ebp - 0x20c]
push eax
mov ecx, edi
call fcn.0101a651
lea eax, [ebp - 0x20c]
push 0x5c
push eax
call sub.msvcrt.dll_wcsrchr
pop ecx
pop ecx
test eax, eax
jne 0x1021eb3
lea eax, [ebp - 0x20c]
jmp 0x1021eb5
inc eax
inc eax
mov ecx, edi
mov dword [ebp - 0x418], eax
call fcn.01015d45
push eax
call fcn.0102107e
lea ecx, [esi + 0x1c0]
mov dword [ebp - 0x41c], eax
call fcn.01019274
push eax
push 0x115e
push dword [0x103ec44]
call sub.ntdll.dll_WinSqmSetDWORD
push dword [ebp - 0x418]
push 0x115d
push dword [0x103ec44]
call sub.ntdll.dll_WinSqmSetString
push 0
lea ecx, [esi + 0x1c0]
call fcn.01019d48
push eax
push 0x1730
push dword [0x103ec44]
call sub.ntdll.dll_WinSqmSetDWORD
push dword [ebp - 0x41c]
push 0x172f
push dword [0x103ec44]
call sub.ntdll.dll_WinSqmSetDWORD
cmp dword [ebp - 0x41c], 0
je 0x1021f75
and dword [ebp - 0x418], 0
mov eax, dword [section..data]
cmp eax, section..data
je 0x102207b
test byte [eax + 0x1c], 4
je 0x102207b
push 0x1003f64
push 0x21
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.010078b5
jmp 0x102207b
lea eax, [ebp - 0x420]
push eax
lea ecx, [esi + 0x1c0]
call fcn.01019d48
test eax, eax
je 0x102204c
push 1
push 0x115f
push dword [0x103ec44]
call sub.ntdll.dll_WinSqmSetDWORD
mov eax, dword [ebp + 8]
mov dword [esi + 0x3c], eax
mov eax, dword [ebp + 0x10]
mov dword [esi + 0x1370], eax
push ebx
lea eax, [ebp - 0x414]
push eax
mov ecx, edi
mov dword [esi + 0x40], edi
call fcn.0101b315
mov dword [ebp - 0x418], eax
test eax, eax
jge 0x1021ff5
mov eax, dword [section..data]
cmp eax, section..data
je 0x102207b
test byte [eax + 0x1c], 1
je 0x102207b
push dword [ebp - 0x418]
push 0x1003f64
push 0x22
jmp 0x1022036
push esi
mov ecx, edi
call fcn.01015d45
push eax
lea eax, [ebp - 0x414]
push eax
lea ecx, [esi + 4]
call fcn.01021bac
mov dword [ebp - 0x418], eax
test eax, eax
jge 0x1022043
mov eax, dword [section..data]
cmp eax, section..data
je 0x102207b
test byte [eax + 0x1c], 1
je 0x102207b
push dword [ebp - 0x418]
push 0x1003f64
push 0x23
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01008600
jmp 0x102207b
mov ecx, esi
call fcn.01020be6
jmp 0x1022074
push dword [ebp - 0x420]
push 0x1a2b
push dword [0x103ec44]
call sub.ntdll.dll_WinSqmSetDWORD
push 0
push 0x115f
push dword [0x103ec44]
call sub.ntdll.dll_WinSqmSetDWORD
and dword [ebp - 0x418], 0
mov ecx, dword [ebp - 4]
xor eax, eax
pop edi
mov dword [esi + 0x3c], eax
mov dword [esi + 0x40], eax
mov dword [esi + 0x1370], eax
mov eax, dword [ebp - 0x418]
pop esi
xor ecx, ebp
pop ebx
call fcn.010084d5
leave
ret 0xc