Function at 0x1051ce0
Capabilities:
Check for time delay via gettickcount

Disassembly:
sub esp, 0x4f8
mov eax, dword [0x10f5ca0]
xor eax, esp
mov dword [esp + 0x4f4], eax
push ebx
push ebx
call 0x1051cfb
jmp 0x1051d00
pushal
call 0x1051d06
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
xor ebx, ebx
push 0x63
lea eax, [esp + 0x499]
push ebx
push eax
mov byte [esp + 0x4a0], bl
call fcn.0109a300
add esp, 0xc
push ebx
call 0x1051d35
jmp 0x1051d3a
pushal
call 0x1051d40
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
push 0x31
lea ecx, [esp + 0x431]
push ebx
push ecx
mov byte [esp + 0x438], bl
call fcn.0109a300
add esp, 0xc
push ebx
call 0x1051d6d
jmp 0x1051d72
pushal
call 0x1051d78
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
push 0x31
lea edx, [esp + 0x465]
push ebx
push edx
mov byte [esp + 0x46c], bl
call fcn.0109a300
add esp, 0xc
push ebx
call 0x1051da5
jmp 0x1051daa
pushal
call 0x1051db0
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
push ebx
call 0x1051dc3
jmp 0x1051dc8
pushal
call 0x1051dce
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
lea eax, [esp + 0x494]
push eax
mov eax, 0x10ec3fc
mov edx, 0x10eafcc
call fcn.0103a130
add esp, 4
push ebx
call 0x1051dfb
jmp 0x1051e00
pushal
call 0x1051e06
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
lea ecx, [esp + 0x42c]
push ecx
mov eax, 0x10ec408
mov edx, 0x10eafcc
call fcn.0103a130
add esp, 4
push ebx
call 0x1051e33
jmp 0x1051e38
pushal
call 0x1051e3e
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
lea edx, [esp + 0x460]
push edx
mov eax, 0x10ec414
mov edx, 0x10eafcc
call fcn.0103a130
add esp, 4
push ebx
call 0x1051e6b
jmp 0x1051e70
pushal
call 0x1051e76
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
push ebx
mov eax, 0x10ec420
mov edx, 0x10eafcc
call fcn.0103a130
add esp, 4
mov ecx, eax
push ebx
call 0x1051e9e
jmp 0x1051ea3
pushal
call 0x1051ea9
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
cmp ecx, ebx
jle 0x1051f81
cmp dword [0x10fb47c], ebx
jne 0x1051ef4
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x10fb47c], eax
push ebx
call 0x1051ed7
jmp 0x1051edc
pushal
call 0x1051ee2
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
jmp 0x1051f86
mov dword [esp + 4], ebx
push ebx
call 0x1051efe
jmp 0x1051f03
pushal
call 0x1051f09
pop ebx
add ebx, 0xffffffd6
push 0xd51000
pop ebx
popal
pop ebx
pop ebx
mov edx, 0x7ffe0000
mov eax, dword ds:[edx]
mul dword ds:[edx + 4]
shrd eax, edx, 0x18
mov dword [esp + 4], eax
imul ecx, ecx, 0x36ee80
mov eax, dword [esp + 4]
sub eax, dword [0x10fb47c]
cmp eax, ecx
jae 0x1051f56
xor al, al
pop ebx
mov ecx, dword [esp + 0x4f4]
xor ecx, esp
call fcn.01090090
add esp, 0x4f8
ret
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x10fb47c], eax
push ebx
call 0x1051f67
jmp 0x1051f6c
pushal
call 0x1051f72
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
jmp 0x1051f86
cmp ecx, 0xffffffff
je 0x1051f3e
cmp dword [esp + 0x500], ebx
jne 0x1051fdc
mov eax, 1
test byte [0x10fb4dc], al
jne 0x1051fb4
or dword [0x10fb4dc], eax
call fcn.01009280
push 0x10c8d50
call fcn.010991d0
add esp, 4
mov eax, 0x7530
call fcn.010476c0
push ebx
call 0x1051fc4
jmp 0x1051fc9
pushal
call 0x1051fcf
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
push esi
push ebx
call 0x1051fe3
jmp 0x1051fe8
pushal
call 0x1051fee
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
push ebx
call 0x1052001
jmp 0x1052006
pushal
call 0x105200c
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
push 0x420
lea ecx, [esp + 0x14]
push ebx
push ecx
mov dword [esp + 0x18], 0x424
call fcn.0109a300
add esp, 0xc
push ebx
call 0x105203a
jmp 0x105203f
pushal
call 0x1052045
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea edx, [esp + 0x498]
push edx
lea eax, [esp + 0x14]
push eax
call esi
push ebx
call 0x105206d
jmp 0x1052072
pushal
call 0x1052078
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
mov byte [esp + 0x192], bl
push ebx
call 0x1052092
jmp 0x1052097
pushal
call 0x105209d
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
lea ecx, [esp + 0x430]
push ecx
lea edx, [esp + 0x217]
push edx
call esi
push ebx
call 0x10520c2
jmp 0x10520c7
pushal
call 0x10520cd
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
lea eax, [esp + 0x464]
push eax
lea ecx, [esp + 0x318]
push ecx
call esi
push ebx
call 0x10520f2
jmp 0x10520f7
pushal
call 0x10520fd
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
mov byte [esp + 0x415], bl
push ebx
call 0x1052117
jmp 0x105211c
pushal
call 0x1052122
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
mov dword [0x10fb480], ebx
push ebx
call 0x105213b
jmp 0x1052140
pushal
call 0x1052146
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
push 0x10fb480
push ebx
push ebx
lea edx, [esp + 0x18]
push edx
push ebx
push ebx
call sub.RASAPI32.dll_RasDialA
push ebx
call 0x105216c
jmp 0x1052171
pushal
call 0x1052177
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
mov ecx, dword [esp + 0x4fc]
pop esi
pop ebx
xor ecx, esp
call fcn.01090090
add esp, 0x4f8
ret