Function at 0x70289fd0
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x70319b59
mov eax, dword fs:[0]
push eax
sub esp, 0xc8
mov eax, dword [0x7034b250]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov edi, ecx
mov dword [ebp - 0xb0], edi
cmp eax, 1
jne 0x7028a074
call dword [sym.imp.KERNEL32.dll_GetTickCount]
xor edx, edx
cmp dword [edi + 0x158], edx
je 0x7028a060
mov ecx, dword [edi + 0x140]
cmp ecx, edx
je 0x7028a060
cmp eax, ecx
jbe 0x7028a060
sub eax, ecx
cmp eax, 0xbb8
jb 0x7028a74a
mov eax, dword [edi + 0xa4]
push 1
push eax
mov dword [edi + 0x140], edx
mov dword [edi + 0x158], edx
call dword [sym.imp.USER32.dll_KillTimer]
mov eax, edi
call fcn.702894d0
jmp 0x7028a74a
mov ecx, dword [edi + 0xa4]
push 1
push ecx
call dword [sym.imp.USER32.dll_KillTimer]
jmp 0x7028a74a
cmp eax, 2
jne 0x7028a094
mov esi, edi
call fcn.7023eb50
mov edx, dword [edi + 0xa4]
push 2
push edx
call dword [sym.imp.USER32.dll_KillTimer]
jmp 0x7028a74a
cmp eax, 3
jne 0x7028a0c8
mov ecx, dword [edi + 0x84]
cmp dword [ecx - 0xc], 0
jle 0x7028a0ad
push 0
push edi
call fcn.7023d290
mov eax, dword [edi + 0xa4]
push 3
push eax
call dword [sym.imp.USER32.dll_KillTimer]
mov eax, edi
call fcn.7028a890
jmp 0x7028a74a
cmp eax, 4
jne 0x7028a123
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [edi + 0x144]
mov esi, 1
cmp eax, ecx
jb 0x7028a0eb
sub eax, ecx
cmp eax, 0x7d0
jb 0x7028a109
mov ecx, dword [edi + 0xa4]
push 4
push ecx
mov esi, 3
mov dword [edi + 0x144], 0
call dword [sym.imp.USER32.dll_KillTimer]
cmp dword [edi + 0x12c], 0
je 0x7028a74a
push esi
mov ecx, edi
call fcn.70289280
jmp 0x7028a74a
cmp eax, 6
jne 0x7028a14f
mov ebx, dword [edi + 0x108]
mov edx, dword [edi + 0x104]
mov eax, edi
call fcn.70284ab0
mov edx, dword [edi + 0xa4]
push 6
push edx
call dword [sym.imp.USER32.dll_KillTimer]
jmp 0x7028a74a
cmp eax, 7
jne 0x7028a162
push 0
mov esi, edi
call fcn.70287520
jmp 0x7028a74a
cmp eax, 0xb
jne 0x7028a172
push edi
call fcn.702889e0
jmp 0x7028a74a
mov esi, 8
cmp eax, esi
jne 0x7028a193
mov edx, dword [edi + 0x88]
mov ecx, dword [edi + 0x70]
push 1
call fcn.7027c3a0
add esp, 4
jmp 0x7028a74a
cmp eax, 9
jne 0x7028a1c3
cmp dword [edi + 0x164], 0x10
jne 0x7028a1af
push 1
push 0
call fcn.7028ace0
jmp 0x7028a74a
mov eax, dword [edi + 0xa4]
push 9
push eax
call dword [sym.imp.USER32.dll_KillTimer]
jmp 0x7028a74a
cmp eax, 0xa
jne 0x7028a280
lea eax, [ebp - 0x50]
call fcn.702492f0
mov dword [ebp - 4], 0
call fcn.70236d40
test eax, eax
je 0x7028a1fb
lea ecx, [ebp - 0x50]
push ecx
lea edx, [edi + 0x88]
mov ecx, eax
call fcn.70249fe0
mov dword [edi + 0x1e4], eax
mov eax, dword [edi + 0x1e4]
test eax, eax
je 0x7028a273
cmp dword [edi + 0xc8], 0
jne 0x7028a217
cmp dword [edi + 0xcc], 0
je 0x7028a21d
mov dword [edi + 0x1e8], eax
lea eax, [ebp - 0xac]
call fcn.70236dd0
mov byte [ebp - 4], 1
mov ebx, dword [ebp - 0x2c]
cmp dword [ebp - 0x18], esi
jae 0x7028a237
lea ebx, [ebp - 0x2c]
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x34], esi
jae 0x7028a242
lea eax, [ebp - 0x48]
mov ecx, dword [edi + 0x1e4]
lea edx, [ebp - 0xac]
push edx
call fcn.702899d0
lea eax, [ebp - 0xac]
push eax
push edi
call fcn.70223110
mov ecx, eax
call fcn.7024d3d0
lea esi, [ebp - 0xac]
call fcn.70236e10
lea esi, [ebp - 0x50]
call fcn.7029bef0
jmp 0x7028a74a
cmp eax, 0xc
jne 0x7028a304
call dword [sym.imp.KERNEL32.dll_GetTickCount]
xor edx, edx
cmp dword [edi + 0x12f4], edx
je 0x7028a2f0
mov ecx, dword [edi + 0xd4]
cmp ecx, edx
je 0x7028a2f0
cmp eax, ecx
jbe 0x7028a2f0
mov ecx, dword [edi + 0xa4]
push 0xc
push ecx
mov dword [edi + 0x140], edx
mov dword [edi + 0x158], edx
call dword [sym.imp.USER32.dll_KillTimer]
mov eax, dword [edi + 0x12f8]
mov esi, dword [edi + 0x12f4]
push 2
push ecx
sub eax, 0x10
mov dword [ebp - 0xc4], esp
mov ebx, esp
call fcn.70208f30
add eax, 0x10
mov ecx, esi
mov edx, edi
mov dword [ebx], eax
call fcn.7023fa40
jmp 0x7028a74a
mov edx, dword [edi + 0xa4]
push 0xc
push edx
call dword [sym.imp.USER32.dll_KillTimer]
jmp 0x7028a74a
cmp eax, 0xd
jne 0x7028a5ca
inc dword [edi + 0x12fc]
mov eax, dword [edi + 0x12fc]
xor ebx, ebx
cmp dword [edi + 0xc8], ebx
jne 0x7028a32e
cmp eax, 0x96
jle 0x7028a74a
mov eax, dword [edi + 0xa4]
push 0xd
push eax
call dword [sym.imp.USER32.dll_KillTimer]
cmp dword [edi + 0x12fc], 0x96
jle 0x7028a34f
mov dword [edi + 0x12fc], ebx
lea eax, [edi + 0x88]
lea esi, [edi + 0x1304]
push esi
mov dword [ebp - 0xc4], eax
call fcn.70251210
add esp, 4
test al, al
je 0x7028a5ac
mov dword [edi + 0x12fc], ebx
mov edx, 0x70326328
mov edi, esi
call fcn.7020b380
mov ecx, dword [ebp - 0xb0]
mov dword [ebp - 0xc8], ebx
mov dword [ebp - 0xd0], ebx
mov dword [ebp - 0xb8], ebx
cmp dword [ecx + 0x1300], ebx
je 0x7028a5a4
mov dword [ebp - 0xbc], ebx
mov dword [ebp - 4], 2
mov edi, dword [esi]
cmp edi, ebx
jne 0x7028a3bf
xor eax, eax
jmp 0x7028a426
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea edx, [ebp - 0xb4]
inc eax
push edx
mov dword [ebp - 0xb4], eax
call fcn.7020cae0
add esp, 4
test eax, eax
jge 0x7028a3e4
xor eax, eax
jmp 0x7028a426
mov ebx, dword [ebp - 0xb4]
cmp ebx, 0x400
jg 0x7028a40a
push ebx
call fcn.7020c9f0
add esp, 4
test al, al
je 0x7028a40a
mov eax, ebx
call fcn.702e98d0
mov esi, esp
jmp 0x7028a419
mov eax, ebx
lea esi, [ebp - 0xbc]
call fcn.7020c990
mov esi, eax
xor edx, edx
mov ecx, ebx
mov eax, edi
call fcn.7020c920
xor ebx, ebx
mov edi, dword [ebp - 0xb0]
mov ecx, dword [edi + 0x1300]
push eax
lea eax, [ebp - 0xd0]
push eax
push ecx
push 3
push edi
lea edx, [ebp - 0xb8]
lea ecx, [ebp - 0xc8]
call fcn.70282bc0
cmp dword [0x7035a064], ebx
je 0x7028a53f
mov ecx, dword [edi + 0x1300]
xor esi, esi
lea eax, [ebp - 0xcc]
push eax
mov dword [ebp - 0xc0], esi
mov dword [ebp - 0xcc], esi
mov edx, dword [ecx]
mov edx, dword [edx + 0x40]
push esi
lea eax, [ebp - 0xc0]
push eax
call edx
mov dword [ebp - 0xd4], esi
mov eax, dword [ebp - 0xc4]
mov byte [ebp - 4], 3
mov ebx, dword [eax]
cmp ebx, esi
jne 0x7028a49f
xor eax, eax
jmp 0x7028a50a
push ebx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea ecx, [ebp - 0xb4]
inc eax
push ecx
mov dword [ebp - 0xb4], eax
call fcn.7020cae0
add esp, 4
test eax, eax
jge 0x7028a4c4
xor eax, eax
jmp 0x7028a50a
mov edi, dword [ebp - 0xb4]
cmp edi, 0x400
jg 0x7028a4ea
push edi
call fcn.7020c9f0
add esp, 4
test al, al
je 0x7028a4ea
mov eax, edi
call fcn.702e98d0
mov esi, esp
jmp 0x7028a4f9
mov eax, edi
lea esi, [ebp - 0xd4]
call fcn.7020c990
mov esi, eax
xor edx, edx
mov ecx, edi
mov eax, ebx
call fcn.7020c920
mov edi, dword [ebp - 0xb0]
xor edx, edx
cmp edx, str.OnBeforeNavigate2QueryResponse_ie_11
je 0x7028a530
mov ecx, dword [ebp - 0xc0]
mov edx, dword [ebp - 0xcc]
push ecx
push edx
push 2
push str.OnBeforeNavigate2QueryResponse_ie_11
mov ebx, eax
call fcn.7025cb90
lea esi, [ebp - 0xd4]
mov byte [ebp - 4], 2
call fcn.70202690
mov eax, dword [ebp - 0xb8]
mov ebx, dword [ebp - 0xd0]
mov ecx, dword [ebp - 0xc8]
push eax
push ebx
push ecx
push 1
mov edx, 3
push edi
lea ecx, [edx - 2]
call fcn.70287040
lea esi, [ebp - 0xbc]
mov dword [ebp - 4], 0xffffffff
call fcn.70202690
cmp ebx, 2
jne 0x7028a584
mov ecx, edi
call fcn.70239f40
jmp 0x7028a5a4
cmp ebx, 1
jne 0x7028a58c
push ebx
jmp 0x7028a59e
cmp ebx, 3
je 0x7028a59c
cmp ebx, 4
jne 0x7028a5a4
mov edi, dword [ebp - 0xb0]
push 0
push edi
call fcn.7023a080
mov edi, dword [ebp - 0xb0]
xor ebx, ebx
mov esi, dword [edi + 0x1300]
cmp esi, ebx
je 0x7028a74a
call fcn.70231e60
mov dword [edi + 0x1300], ebx
jmp 0x7028a74a
cmp eax, 0xe
jne 0x7028a5f0
mov edx, dword [edi + 0xa4]
push eax
push edx
call dword [sym.imp.USER32.dll_KillTimer]
mov edi, dword [edi + 0x70]
mov eax, dword [edi]
mov ecx, dword [eax + 0x80]
push edi
call ecx
jmp 0x7028a74a
cmp eax, 0x10
jne 0x7028a610
call fcn.702856f0
mov edx, edi
mov eax, dword [edx + 0xa4]
push 0x10
push eax
call dword [sym.imp.USER32.dll_KillTimer]
jmp 0x7028a74a
cmp eax, 0xf
jne 0x7028a658
mov ecx, dword [edi + 0xa4]
push eax
push ecx
call dword [sym.imp.USER32.dll_KillTimer]
cmp dword [edi + 0x138c], 0
je 0x7028a74a
mov ecx, dword [edi + 0xa0]
push 0
lea esi, [edi + 0xa0]
push edi
call fcn.7023d290
call fcn.7020b150
mov dword [edi + 0x138c], 0
jmp 0x7028a74a
cmp eax, 0x12
jne 0x7028a68d
cmp dword [edi + 0x1308], 0
je 0x7028a74a
mov edx, dword [edi + 0xa4]
push eax
push edx
call dword [sym.imp.USER32.dll_KillTimer]
mov eax, dword [edi + 0x70]
push eax
add edi, 0x130c
push edi
call fcn.702821f0
jmp 0x7028a74a
cmp eax, 0x13
jne 0x7028a6b5
mov ecx, dword [edi + 0xa4]
push eax
push ecx
call dword [sym.imp.USER32.dll_KillTimer]
mov edx, dword [edi + 0x70]
push edx
add edi, 0x130c
push edi
call fcn.70282630
jmp 0x7028a74a
cmp eax, 0x11
jne 0x7028a6d0
call fcn.7027fde0
mov eax, dword [edi + 0xa4]
push 0x11
push eax
call dword [sym.imp.USER32.dll_KillTimer]
jmp 0x7028a74a
cmp eax, 0x14
jne 0x7028a6eb
mov ecx, dword [edi + 0xa4]
push eax
push ecx
call dword [sym.imp.USER32.dll_KillTimer]
push edi
call fcn.70240aa0
jmp 0x7028a74a
cmp eax, 0x15
jne 0x7028a6f8
push edi
call fcn.702802d0
jmp 0x7028a74a
cmp eax, 0x17
jne 0x7028a714
mov edx, dword [edi + 0xa4]
push eax
push edx
call dword [sym.imp.USER32.dll_KillTimer]
mov esi, edi
call fcn.70242120
jmp 0x7028a74a
cmp eax, 0x18
jne 0x7028a730
push eax
mov eax, dword [edi + 0xa4]
push eax
call dword [sym.imp.USER32.dll_KillTimer]
mov esi, edi
call fcn.702421b0
jmp 0x7028a74a
cmp eax, 0x16
jne 0x7028a74a
mov ecx, dword [edi + 0xa4]
push eax
push ecx
call dword [sym.imp.USER32.dll_KillTimer]
mov edx, edi
call fcn.70242c00
xor eax, eax
lea esp, [ebp - 0xe4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.702e1c2f
mov esp, ebp
pop ebp
ret 4