Function at 0x1000dfc0
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x2124
call dword [0x1004cd30]
cmp dword [ebp + 0x10], 0
jne 0x1000dfee
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
mov ecx, 0xe61f84
mov ecx, dword [ecx]
call dword [0x1004c62c]
jmp 0x1000e392
mov dword [0x8793738], 0
movzx eax, byte [0x10188b99]
test eax, eax
je 0x1000e09c
mov ecx, dword [0x10188ddc]
movzx edx, byte [ecx + 2]
cmp edx, 0xc1
jne 0x1000e092
mov eax, dword [0x10188ddc]
movzx ecx, byte [eax + 4]
cmp ecx, 0x11
je 0x1000e062
mov edx, dword [0x10188ddc]
movzx eax, byte [edx + 4]
cmp eax, 0x19
je 0x1000e062
mov ecx, dword [0x10188ddc]
movzx edx, byte [ecx + 4]
cmp edx, 0x1e
je 0x1000e062
mov eax, dword [0x10188ddc]
movzx ecx, byte [eax + 4]
cmp ecx, 0x4b
je 0x1000e062
mov edx, dword [0x10188ddc]
movzx eax, byte [edx + 4]
cmp eax, 0x4a
jne 0x1000e08d
movzx ecx, byte [0x10188b62]
test ecx, ecx
je 0x1000e083
movzx edx, byte [0x10188b61]
test edx, edx
je 0x1000e083
movzx eax, byte [0x10188b63]
test eax, eax
jne 0x1000e088
jmp 0x1000e392
jmp 0x1000e134
jmp 0x1000e134
jmp 0x1000e134
mov ecx, dword [0x10188ddc]
movzx edx, byte [ecx + 2]
cmp edx, 0xc1
jne 0x1000e11e
mov eax, dword [0x10188ddc]
movzx ecx, byte [eax + 4]
cmp ecx, 0x11
je 0x1000e0da
mov edx, dword [0x10188ddc]
movzx eax, byte [edx + 4]
cmp eax, 0x19
je 0x1000e0da
mov ecx, dword [0x10188ddc]
movzx edx, byte [ecx + 4]
cmp edx, 0x1e
jne 0x1000e11c
call fcn.1000d8a0
movzx eax, byte [0x10188b62]
test eax, eax
je 0x1000e100
movzx ecx, byte [0x10188b61]
test ecx, ecx
je 0x1000e100
movzx edx, byte [0x10188b63]
test edx, edx
jne 0x1000e105
jmp 0x1000e392
mov byte [0x10188b63], 0
mov byte [0x10188b62], 0
mov byte [0x10188b61], 0
jmp 0x1000e134
jmp 0x1000e134
mov dword [0x8793738], 0
jmp 0x1000e134
mov eax, dword [0x10188ddc]
movzx ecx, byte [eax + 2]
cmp ecx, 0xc1
jne 0x1000e1b5
mov edx, dword [0x10188ddc]
movzx eax, byte [edx + 4]
cmp eax, 0x26
jne 0x1000e1b5
cmp dword [0x10aaa7e4], 0
jne 0x1000e168
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x10aaa7e4], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [0x10aaa7e4]
cmp eax, 0x3e8
ja 0x1000e1a0
mov ecx, dword [0x10aaa660]
add ecx, 1
mov dword [0x10aaa660], ecx
movzx edx, byte [0x10188b51]
cmp dword [0x10aaa660], edx
jl 0x1000e19e
jmp 0x1000e392
jmp 0x1000e1b5
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x10aaa7e4], eax
mov dword [0x10aaa660], 0
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0x2118]
push ecx
call dword [0x1006c038]
add esp, 0xc
call dword [0x1006c03c]
and eax, 0x800000ff
jns 0x1000e1e3
dec eax
or eax, 0xffffff00
inc eax
jmp 0x1000e1e3
mov edx, dword [ebp + 0xc]
mov byte [ebp + edx - 0x2118], al
movzx eax, byte [ebp - 0x2118]
xor ecx, ecx
cmp eax, 0xc1
setne cl
add ecx, 2
mov dword [ebp - 0x211c], ecx
mov edx, dword [ebp - 0x211c]
mov edx, 0x8793700
mov al, byte [edx]
mov edx, dword [ebp - 0x211c]
mov byte [ebp + edx - 0x2119], al
mov eax, 0x8793700
mov cl, byte [eax]
add cl, 1
mov byte [eax], cl
mov edx, dword [ebp - 0x211c]
sub edx, 1
mov dword [ebp - 0x211c], edx
mov eax, dword [ebp + 0xc]
sub eax, dword [ebp - 0x211c]
push eax
mov ecx, dword [ebp - 0x211c]
lea edx, [ebp + ecx - 0x2118]
push edx
push 0
mov ecx, 0x8797778
call dword [0x1004c628]
mov dword [ebp - 0x1114], eax
cmp dword [ebp - 0x1114], 0x100
jge 0x1000e301
cmp dword [ebp + 0x14], 0
jne 0x1000e301
mov eax, dword [ebp - 0x1114]
add eax, 2
mov dword [ebp - 0x2120], eax
xor eax, eax
je 0x1000e29d
mov byte [ebp - 0x108], 0xc8
jmp 0x1000e2a4
mov byte [ebp - 0x108], 0xc3
mov cl, byte [ebp - 0x2120]
mov byte [ebp - 0x107], cl
mov edx, dword [ebp + 0xc]
sub edx, dword [ebp - 0x211c]
push edx
mov eax, dword [ebp - 0x211c]
lea ecx, [ebp + eax - 0x2118]
push ecx
lea edx, [ebp - 0x106]
push edx
mov ecx, 0x8797778
call dword [0x1004c628]
mov eax, dword [ebp - 0x2120]
push eax
lea ecx, [ebp - 0x108]
push ecx
mov ecx, 0xe61f84
mov ecx, dword [ecx]
call dword [0x1004c62c]
jmp 0x1000e392
mov edx, dword [ebp - 0x1114]
add edx, 3
mov dword [ebp - 0x2124], edx
mov byte [ebp - 0x1110], 0xc4
mov eax, dword [ebp - 0x2124]
and eax, 0x800000ff
jns 0x1000e32d
dec eax
or eax, 0xffffff00
inc eax
jmp 0x1000e32d
mov byte [ebp - 0x110e], al
mov eax, dword [ebp - 0x2124]
cdq
and edx, 0xff
add eax, edx
sar eax, 8
mov byte [ebp - 0x110f], al
mov ecx, dword [ebp + 0xc]
sub ecx, dword [ebp - 0x211c]
push ecx
mov edx, dword [ebp - 0x211c]
lea eax, [ebp + edx - 0x2118]
push eax
lea ecx, [ebp - 0x110d]
push ecx
mov ecx, 0x8797778
call dword [0x1004c628]
mov edx, dword [ebp - 0x2124]
push edx
lea eax, [ebp - 0x1110]
push eax
mov ecx, 0xe61f84
mov ecx, dword [ecx]
call dword [0x1004c62c]
jmp 0x1000e392
mov esp, ebp
pop ebp
ret