Function at 0x10005f70
Capabilities:
Check for time delay via gettickcount
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xc
cmp byte [0x1007b1f1], 0
push ebx
push esi
push edi
je 0x10006146
cmp dword [0x1007c50c], 0
je 0x10005fe8
mov ecx, dword [0x1007c584]
lea eax, [ecx - 0x190]
cmp eax, 0x640
ja 0x10005fe8
mov edx, dword [0x1007c564]
lea eax, [edx - 0x190]
cmp eax, 0x640
ja 0x10005fe8
cmp ecx, dword [0x1007c59c]
jne 0x10005fc8
cmp edx, dword [0x1007c544]
je 0x10005fe8
cmp dword [0x1007c5b8], 0
push edx
mov dword [0x1007c59c], ecx
push ecx
setne cl
mov dword [0x1007c544], edx
call fcn.10005d00
add esp, 8
cmp byte [0x1007b1f2], 0
je 0x100061ed
cmp byte [0x1007b2d8], 0
jne 0x100060ee
cmp byte [0x1007b2d9], 0
jne 0x10006020
push 0
push 0
xor cl, cl
mov byte [0x1007b2d9], 1
call fcn.10005d00
add esp, 8
cmp dword [0x1007b26c], 0
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount64]
jne 0x10006036
call esi
mov dword [0x1007b26c], eax
call esi
mov ecx, dword [0x1007b26c]
add ecx, 0x3e8
test edx, edx
jb 0x10006146
ja 0x10006056
cmp eax, ecx
jbe 0x10006146
mov ch, 4
mov byte [esp + 0x16], 0
mov bl, 0x74
mov byte [esp + 0x10], ch
mov ah, bl
mov byte [esp + 0x16], 0
mov al, 0x54
xor ah, ch
xor al, ch
mov byte [esp + 0x15], ah
mov cl, 0x46
mov byte [esp + 0x11], al
mov dl, 0x45
lea eax, [esp + 0x11]
push 0
xor cl, ch
xor dl, ch
xor bl, ch
mov byte [esp + 0x16], cl
push eax
mov byte [esp + 0x1b], dl
mov byte [esp + 0x1c], bl
call dword [0x1007b23c]
mov edi, eax
push 0xfffffffffffffff0
push edi
call dword [sym.imp.USER32.dll_GetWindowLongA]
and eax, 0xff30ffff
push eax
push 0xfffffffffffffff0
push edi
call dword [sym.imp.USER32.dll_SetWindowLongA]
mov esi, dword [sym.imp.USER32.dll_GetSystemMetrics]
push 0x464
push 1
call esi
push eax
push 0
call esi
push eax
push 0
push 0
push 0
push edi
call dword [sym.imp.USER32.dll_SetWindowPos]
push 3
push edi
call dword [sym.imp.USER32.dll_ShowWindow]
mov byte [0x1007b2d8], 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp byte [0x1007b39c], 0
jne 0x10006100
cmp dword [0x1007b260], 1
jne 0x10006146
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount64]
call esi
mov ecx, dword [0x1007b26c]
add ecx, 0x3e8
test edx, edx
jb 0x10006146
ja 0x1000611e
cmp eax, ecx
jbe 0x10006146
call esi
mov dword [0x1007b26c], eax
mov eax, dword [0x1007b260]
test eax, eax
jne 0x1000614d
mov dword [0x1007b260], 1
xor cl, cl
push 0
push 0
call fcn.10005d00
add esp, 8
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp eax, 1
jne 0x10006146
mov ch, 4
mov byte [esp + 0x16], 0
mov bl, 0x74
mov dword [0x1007b260], 0
mov ah, bl
mov byte [esp + 0x10], ch
mov al, 0x54
mov byte [esp + 0x16], 0
xor al, ch
xor ah, ch
mov cl, 0x46
mov byte [esp + 0x11], al
mov dl, 0x45
mov byte [esp + 0x15], ah
push 0
lea eax, [esp + 0x15]
xor cl, ch
xor dl, ch
mov byte [esp + 0x16], cl
xor bl, ch
mov byte [esp + 0x17], dl
push eax
mov byte [esp + 0x1c], bl
call dword [0x1007b23c]
mov edi, eax
push 0xfffffffffffffff0
push edi
call dword [sym.imp.USER32.dll_GetWindowLongA]
and eax, 0xff30ffff
push eax
push 0xfffffffffffffff0
push edi
call dword [sym.imp.USER32.dll_SetWindowLongA]
mov esi, dword [sym.imp.USER32.dll_GetSystemMetrics]
push 0x464
push 1
call esi
push eax
push 0
call esi
push eax
push 0
push 0
push 0
push edi
call dword [sym.imp.USER32.dll_SetWindowPos]
push 3
push edi
call dword [sym.imp.USER32.dll_ShowWindow]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp dword [0x1007c5b8], 1
jne 0x10006146
cmp byte [0x1007c599], 0
jne 0x10006226
push 0
push 0
mov cl, 1
mov byte [0x1007c599], 1
call fcn.10005d00
mov byte [0x10063ad1], 1
add esp, 8
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp byte [0x1007b220], 0
je 0x10006146
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
mov ecx, dword [0x1007b248]
add ecx, 0x3e8
cmp eax, ecx
jbe 0x10006146
call esi
cmp byte [0x10063ad1], 1
mov dword [0x1007b248], eax
jne 0x10006290
mov byte [0x10063ad1], 0
xor cl, cl
cmp dword [0x1007c50c], 0
je 0x1000613a
push dword [0x1007c564]
push dword [0x1007c584]
call fcn.10005d00
add esp, 8
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov byte [0x10063ad1], 1
mov cl, 1
jmp 0x10006268