Function at 0x10001b80
Capabilities:
Check for time delay via gettickcount
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1001e644
mov eax, dword fs:[0]
push eax
sub esp, 0x8b4
mov eax, dword [section..data]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x888], 0x5d
mov dword [ebp - 0x898], 0x4d
mov eax, dword [0x1003dba4]
and eax, 1
jne 0x10001c37
mov ecx, dword [0x1003dba4]
or ecx, 1
mov dword [0x1003dba4], ecx
mov dword [ebp - 4], 0
push 0x10033388
push 0x6033ffff
push 9
push 0x1002650c
lea ecx, [ebp - 0x8b8]
call fcn.10010990
mov dword [ebp - 0x8a4], eax
mov edx, dword [ebp - 0x8a4]
mov dword [ebp - 0x8a8], edx
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x8a8]
call fcn.10001000
mov dword [0x1003dbc0], eax
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x8b8]
call fcn.10010a30
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x1002f0ec]
add eax, 0x3b
mov dword [0x1002f0ec], eax
call fcn.10006ea0
mov ecx, dword [str._b6TD_2FE__W_T]
shl ecx, 0x13
mov dword [str._b6TD_2FE__W_T], ecx
mov edx, dword [0x1002f0cc]
shl edx, 0x26
mov dword [0x1002f0cc], edx
lea eax, [ebp - 0x884]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
mov ecx, dword [ebp - 0x888]
shl ecx, 0x18
mov dword [ebp - 0x888], ecx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x890], eax
mov edx, dword [ebp - 0x898]
shl edx, 0x23
mov dword [ebp - 0x898], edx
mov eax, dword [0x1002f0e8]
shl eax, 0x21
mov dword [0x1002f0e8], eax
call fcn.10006f70
movzx ecx, word [ebp - 0x884]
imul edx, ecx, 0x2710
movzx eax, word [ebp - 0x882]
imul ecx, eax, 0x64
add edx, ecx
movzx eax, word [ebp - 0x87e]
add edx, eax
cmp edx, 0x1339f94
jge 0x10001d16
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov ecx, dword [0x1002f0f4]
add ecx, 0x26
mov dword [0x1002f0f4], ecx
call fcn.10007020
jmp 0x10001f12
push 0xa
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [0x1002f100]
add eax, 0x11
mov dword [0x1002f100], eax
call fcn.100071b0
push 0xa
call dword [sym.imp.KERNEL32.dll_Sleep]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x894], eax
mov ecx, dword [ebp - 0x888]
shl ecx, 0x48
mov dword [ebp - 0x888], ecx
mov edx, dword [ebp - 0x894]
sub edx, dword [ebp - 0x890]
cmp edx, 0x3e8
jg 0x10001d78
mov eax, dword [ebp - 0x894]
sub eax, dword [ebp - 0x890]
cmp eax, 0xa
jge 0x10001d8c
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
jmp 0x10001f12
mov dword [ebp - 0x8a0], 0
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov dword [ebp - 0x8a0], eax
mov ecx, dword [str._b6TD_2FE__W_T]
shl ecx, 0x19
mov dword [str._b6TD_2FE__W_T], ecx
xor edx, edx
mov word [ebp - 0x874], dx
push 0x7fe
push 0
lea eax, [ebp - 0x872]
push eax
call fcn.100166f0
add esp, 0xc
xor ecx, ecx
mov word [ebp - 0x74], cx
push 0x62
push 0
lea edx, [ebp - 0x72]
push edx
call fcn.100166f0
add esp, 0xc
push 0x400
lea eax, [ebp - 0x874]
push eax
mov ecx, dword [ebp - 0x8a0]
push ecx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov edx, dword [ebp - 0x888]
shl edx, 0x25
mov dword [ebp - 0x888], edx
lea eax, [ebp - 0x74]
push eax
lea ecx, [ebp - 0x874]
push ecx
call fcn.10001980
add esp, 8
mov edx, dword [str._b6TD_2FE__W_T]
shl edx, 0x10
mov dword [str._b6TD_2FE__W_T], edx
push 0x10033238
push 0xb0a3ffff
push 0x16
push 0x10026518
lea ecx, [ebp - 0x8c0]
call fcn.10010990
mov dword [ebp - 0x8b0], eax
mov eax, dword [ebp - 0x8b0]
mov dword [ebp - 0x8ac], eax
mov dword [ebp - 4], 2
mov ecx, dword [ebp - 0x8ac]
call fcn.10001000
push eax
lea ecx, [ebp - 0x74]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
jne 0x10001e8d
mov dword [ebp - 0x89c], 1
jmp 0x10001e97
mov dword [ebp - 0x89c], 0
mov dl, byte [ebp - 0x89c]
mov byte [ebp - 0x889], dl
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x8c0]
call fcn.10010a30
movzx eax, byte [ebp - 0x889]
test eax, eax
je 0x10001ed8
jmp 0x10001f12
mov edx, 1
test edx, edx
je 0x10001f01
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov eax, dword [ebp - 0x888]
shl eax, 0x2b
mov dword [ebp - 0x888], eax
jmp 0x10001ed8
jmp 0x10001f12
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10012db8
mov esp, ebp
pop ebp
ret