Function at 0x1000d8a0
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, dword [0x10188b80]
sub esp, 0x24
push ebx
push esi
push edi
mov edi, dword [eax]
test edi, edi
je 0x1000ddef
movsx ecx, word [edi + 0x13]
call fcn.1000d7d0
cmp byte [edi + 0x78], 0
jne 0x1000dddf
mov word [esp + 0x18], 0x18c1
call dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x800000ff
jns 0x1000d8e9
dec eax
or eax, 0xffffff00
inc eax
mov byte [esp + 0x1a], al
mov ecx, 0xffff
mov al, byte [0x10188b94]
sub ecx, dword [0x10188b58]
mov byte [esp + 0x13], al
mov byte [esp + 0x1d], al
movzx eax, byte [0x10188b95]
mov byte [esp + 0x1e], al
movzx eax, byte [0x10188b96]
mov byte [esp + 0x1f], al
movzx eax, byte [0x10188b97]
mov byte [esp + 0x20], al
movzx eax, byte [0x10188b98]
mov byte [esp + 0x21], al
movzx eax, byte [0x10188b99]
mov byte [esp + 0x22], al
movzx eax, byte [0x10188b9a]
mov byte [esp + 0x23], al
mov ax, word [edi + 0x13]
mov word [esp + 0x24], ax
mov eax, 0x94f2095
imul ecx
mov eax, dword [0x10188870]
movzx ecx, byte [edi + 0x32]
sar edx, 1
mov esi, edx
mov word [esp + 0x1b], 0x604
mov eax, dword [eax]
shr esi, 0x1f
add esi, edx
cmp dword [0x10086cdc], 0xffffffff
mov dword [esp + 0x28], esi
movzx edi, word [eax + ecx*2 + 0x78]
mov word [esp + 0x26], di
je 0x1000d9b5
cmp byte [0x10186d10], 0
je 0x1000d9b5
test di, di
jle 0x1000d9b5
test esi, esi
jle 0x1000d9b5
push 0x18
lea eax, [esp + 0x1c]
push eax
call fcn.100075b0
mov al, byte [esp + 0x1d]
mov esi, dword [esp + 0x28]
mov byte [esp + 0x13], al
jmp 0x1000d9be
mov word [0x10188b62], 0x101
xor ebx, ebx
cmp di, 0x4e
je 0x1000d9da
mov eax, 0x206
cmp di, ax
je 0x1000d9da
mov eax, 0x208
cmp di, ax
jne 0x1000d9df
mov ebx, 3
mov eax, 0xee
cmp di, ax
je 0x1000d9f3
mov eax, 0x20b
cmp di, ax
jne 0x1000d9f8
mov ebx, 0xf
mov ecx, 0xed
mov eax, 3
cmp di, cx
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
cmove ebx, eax
cmp dword [0x10aaa7d0], 0
jne 0x1000da1e
call edi
mov dword [0x10aaa7d0], eax
call edi
sub eax, dword [0x10aaa7d0]
cmp eax, 0x3e8
ja 0x1000dcfb
cmp byte [esp + 0x13], 0
je 0x1000db89
cmp esi, 0x64
ja 0x1000da4b
mov ecx, 3
jmp 0x1000dc6c
lea eax, [esi - 0x65]
cmp eax, 0x31
ja 0x1000da5d
mov ecx, 4
jmp 0x1000dc6c
lea eax, [esi - 0x97]
cmp eax, 0x31
ja 0x1000da72
mov ecx, 5
jmp 0x1000dc6c
lea eax, [esi - 0xc9]
cmp eax, 0x31
ja 0x1000da87
mov ecx, 6
jmp 0x1000dc6c
lea eax, [esi - 0xfb]
cmp eax, 0x31
ja 0x1000da9c
mov ecx, 7
jmp 0x1000dc6c
lea eax, [esi - 0x12d]
cmp eax, 0x31
ja 0x1000dab1
mov ecx, 8
jmp 0x1000dc6c
lea eax, [esi - 0x15f]
cmp eax, 0x31
ja 0x1000dac6
mov ecx, 9
jmp 0x1000dc6c
lea eax, [esi - 0x191]
cmp eax, 0x31
ja 0x1000dadb
mov ecx, 0xa
jmp 0x1000dc6c
lea eax, [esi - 0x1c3]
cmp eax, 0x31
ja 0x1000daf0
mov ecx, 0xb
jmp 0x1000dc6c
lea eax, [esi - 0x1f5]
cmp eax, 0x31
ja 0x1000db05
mov ecx, 0xc
jmp 0x1000dc6c
lea eax, [esi - 0x227]
cmp eax, 0x31
ja 0x1000db1a
mov ecx, 0xd
jmp 0x1000dc6c
lea eax, [esi - 0x259]
cmp eax, 0x31
ja 0x1000db2f
mov ecx, 0xe
jmp 0x1000dc6c
lea eax, [esi - 0x28b]
cmp eax, 0x31
ja 0x1000db44
mov ecx, 0xf
jmp 0x1000dc6c
lea eax, [esi - 0x2bd]
cmp eax, 0x31
ja 0x1000db59
mov ecx, 0x10
jmp 0x1000dc6c
lea eax, [esi - 0x2ef]
cmp eax, 0x31
ja 0x1000db6e
mov ecx, 0x11
jmp 0x1000dc6c
cmp esi, 0x321
jl 0x1000db80
mov ecx, 0x12
jmp 0x1000dc6c
mov ecx, dword [esp + 0x14]
jmp 0x1000dc6c
lea eax, [esi - 1]
cmp eax, 0x95
ja 0x1000db9d
mov ecx, 3
jmp 0x1000dc6c
lea eax, [esi - 0x97]
cmp eax, 0x31
ja 0x1000dbb2
mov ecx, 4
jmp 0x1000dc6c
lea eax, [esi - 0xc9]
cmp eax, 0x31
ja 0x1000dbc7
mov ecx, 5
jmp 0x1000dc6c
lea eax, [esi - 0xfb]
cmp eax, 0x31
ja 0x1000dbdc
mov ecx, 6
jmp 0x1000dc6c
lea eax, [esi - 0x12d]
cmp eax, 0x31
ja 0x1000dbee
mov ecx, 7
jmp 0x1000dc6c
lea eax, [esi - 0x15f]
cmp eax, 0x31
ja 0x1000dc00
mov ecx, 8
jmp 0x1000dc6c
lea eax, [esi - 0x191]
cmp eax, 0x31
ja 0x1000dc12
mov ecx, 9
jmp 0x1000dc6c
lea eax, [esi - 0x1c3]
cmp eax, 0x31
ja 0x1000dc24
mov ecx, 0xa
jmp 0x1000dc6c
lea eax, [esi - 0x1f5]
cmp eax, 0x31
ja 0x1000dc36
mov ecx, 0xb
jmp 0x1000dc6c
lea eax, [esi - 0x227]
cmp eax, 0x31
ja 0x1000dc48
mov ecx, 0xc
jmp 0x1000dc6c
lea eax, [esi - 0x259]
cmp eax, 0x31
ja 0x1000dc5a
mov ecx, 0xd
jmp 0x1000dc6c
mov ecx, dword [esp + 0x14]
cmp esi, 0x28b
mov eax, 0xe
cmovge ecx, eax
mov dl, byte [0x10188b94]
add ecx, ebx
mov esi, dword [0x10188b64]
test dl, dl
je 0x1000dc80
add ecx, esi
mov bl, byte [0x10188b95]
mov edi, dword [0x10188b68]
test bl, bl
je 0x1000dc92
add ecx, edi
mov dh, byte [0x10188b96]
test dh, dh
je 0x1000dca2
add ecx, dword [0x10188b6c]
mov bh, byte [0x10188b97]
test bh, bh
je 0x1000dcb2
add ecx, dword [0x10188b70]
cmp byte [0x10188b98], 0
je 0x1000dcc1
add ecx, dword [0x10188b74]
cmp byte [0x10188b99], 0
je 0x1000dcd0
add ecx, dword [0x10188b78]
cmp byte [0x10188b9a], 0
je 0x1000dcdf
add ecx, dword [0x10188b7c]
mov eax, 0x1d
cmp ecx, eax
cmovge ecx, eax
mov eax, dword [0x10aaa66c]
inc eax
cmp ecx, eax
mov dword [0x10aaa66c], eax
setge al
jmp 0x1000dd32
call edi
mov bh, byte [0x10188b97]
mov dh, byte [0x10188b96]
mov bl, byte [0x10188b95]
mov dl, byte [0x10188b94]
mov edi, dword [0x10188b68]
mov esi, dword [0x10188b64]
mov dword [0x10aaa7d0], eax
mov al, 1
mov dword [0x10aaa66c], 0
mov byte [0x10188b61], al
mov ecx, 1
test dl, dl
je 0x1000dd4d
test esi, esi
movzx eax, al
cmovne eax, ecx
mov byte [0x10188b61], al
test bl, bl
je 0x1000dd5e
test edi, edi
movzx eax, al
cmovne eax, ecx
mov byte [0x10188b61], al
test dh, dh
je 0x1000dd74
cmp dword [0x10188b6c], 0
movzx eax, al
cmovne eax, ecx
mov byte [0x10188b61], al
test bh, bh
je 0x1000dd8a
cmp dword [0x10188b70], 0
movzx eax, al
cmovne eax, ecx
mov byte [0x10188b61], al
cmp byte [0x10188b98], 0
je 0x1000dda5
cmp dword [0x10188b74], 0
movzx eax, al
cmovne eax, ecx
mov byte [0x10188b61], al
cmp byte [0x10188b99], 0
je 0x1000ddc0
cmp dword [0x10188b78], 0
movzx eax, al
cmovne eax, ecx
mov byte [0x10188b61], al
cmp byte [0x10188b9a], 0
je 0x1000ddff
cmp dword [0x10188b7c], 0
je 0x1000ddff
mov byte [0x10188b61], cl
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov word [0x10188b61], 0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov word [0x10188b62], 0
mov byte [0x10188b61], 0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret