Function at 0x100eea80
Capabilities:
Check for time delay via gettickcount
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x70
push esi
xor esi, esi
push edi
mov dword [esp + 8], esi
mov edx, edx
mov dword [esp + 0xc], esi
cmp dword [0x101d268c], 0x7d16
mov edi, edi
mov dword [esp + 0x34], 1
mov ah, ah
xor edi, edi
mov dword [esp + 0x18], edi
cmp dword [0x101d2678], 0xffff8f8a
mov dword [esp + 0x1c], esi
cmp dword [0x101d2684], 0x614e
call fcn.100e9d30
cmp dword [0x101d2684], 0xffff9eb1
call fcn.100ea2a0
cmp dword [0x101d268c], 0xffff82e9
cmp dword [0x101d2690], 0x89c
mov ebp, ebp
mov eax, dword [0x102fba70]
mov dword [esp + 0x20], eax
nop
cmp dword [0x102fb23c], esi
mov dword [esp + 0x30], esi
jl 0x100ef3f7
push ebx
push ebp
jmp 0x100eeb10
mov ecx, dword [esp + 0x28]
push ecx
push esi
call fcn.100e99b0
mov ebp, eax
add esp, 8
mov dword [esp + 0x48], ebp
cmp dword [0x101d267c], 0x1c61
test ebp, ebp
je 0x100ef15e
cmp dword [esp + 0x10], 0
jne 0x100eeb5f
mov eax, dword [esp + 0x84]
mov edx, dword [eax]
mov edx, dword [edx]
lea ecx, [esp + 0x10]
push ecx
push 0x10199490
push eax
call edx
push ebx
pop ebx
test eax, eax
jl 0x100ef1b2
push esi
call fcn.100e9b80
mov ebx, eax
add esp, 4
mov dword [esp + 0x54], ebx
cmp dword [0x101d2690], 0x89c
test ebx, ebx
jne 0x100eeb94
push ebp
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [0x101d2694], 0xffff8d35
mov dh, dh
jmp 0x100ef15e
push 0
push 0
push 0
push 6
push ebx
call fcn.100d5900
mov esi, eax
mov dword [esp + 0x4c], esi
push ecx
pop ecx
test esi, esi
jne 0x100eebd3
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
push ebp
call esi
cmp dword [0x101d2680], 0xffffd09f
push ebx
call esi
cmp dword [0x101d2678], 0x7075
jmp 0x100ef15a
cmp dword [esp + 0x14], 0
jne 0x100eec02
mov eax, dword [esp + 0x10]
mov ecx, dword [eax]
lea edx, [esp + 0x14]
push edx
push 0
push eax
mov eax, dword [ecx + 0x98]
call eax
cmp dword [0x101d2678], 0xffff8f8a
test eax, eax
jl 0x100ef1ca
xor eax, eax
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], eax
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], eax
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], eax
mov dword [esp + 0x7c], eax
cmp dword [0x101d2670], 0xffff9a45
mov eax, dword [esp + 0x14]
mov ecx, dword [eax]
lea edx, [esp + 0x60]
push edx
push eax
mov eax, dword [ecx + 0x30]
call eax
mov dl, dl
cmp dword [0x101d2674], 0x4cdb
mov eax, dword [esp + 0x60]
cmp eax, 0x16
je 0x100eec62
cmp eax, 0x15
je 0x100eec62
cmp eax, 0x17
jne 0x100ef1e9
mov bh, bh
push esi
call fcn.100e9c40
add esp, 4
nop
test eax, eax
je 0x100ef228
cmp eax, 0xb
jne 0x100eecbf
mov eax, dword [esp + 0x24]
test eax, eax
je 0x100eec99
mov esi, esi
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov al, al
mov dword [esp + 0x24], 0
push edx
pop edx
test edi, edi
je 0x100eecbf
mov edx, edx
mov eax, dword [edi]
mov ecx, dword [eax + 8]
push edi
call ecx
cmp dword [0x101d2684], 0x614e
mov dword [esp + 0x20], 0
mov ecx, ecx
mov edi, dword [esp + 0x20]
mov edx, dword [esp + 0x78]
cmp edx, dword [esi + 0x14]
jb 0x100ef371
mov eax, dword [esp + 0x7c]
cmp eax, dword [esi + 0x18]
jb 0x100ef371
test edi, edi
jne 0x100eed8d
mov dword [esp + 0x18], edi
cmp dword [0x101d2684], 0x614e
mov eax, dword [esp + 0x10]
mov ecx, dword [eax]
push edi
lea edx, [esp + 0x1c]
push edx
mov edx, dword [esp + 0x68]
push edi
push edi
push edi
push edx
mov edx, dword [esp + 0x94]
push edx
mov edx, dword [esp + 0x94]
push edx
push eax
mov eax, dword [ecx + 0x70]
call eax
mov al, al
test eax, eax
jl 0x100ef255
mov dword [esp + 0x1c], edi
mov edx, edx
mov eax, dword [esp + 0x10]
mov ecx, dword [eax]
push edi
lea edx, [esp + 0x20]
push edx
mov edx, dword [esp + 0x68]
push 2
push edx
mov edx, dword [esp + 0x8c]
push edx
mov edx, dword [esp + 0x8c]
push edx
push eax
mov eax, dword [ecx + 0x90]
call eax
cmp dword [0x101d268c], 0x7d16
test eax, eax
jl 0x100ef284
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x24], ecx
cmp dword [0x101d2678], 0xffff8f8a
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x20], edx
cmp dword [0x101d2684], 0xffff9eb1
mov edi, edx
cmp dword [esp + 0x3c], 0
je 0x100eedfe
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x10]
mov ecx, dword [eax]
push 0
push 0
push edx
mov edx, dword [esp + 0x20]
push 0
push edx
push eax
mov eax, dword [ecx + 0x88]
call eax
cmp dword [0x101d267c], 0x1c61
test eax, eax
jl 0x100ef2c8
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0x24]
mov ecx, dword [eax]
push edi
push edx
push eax
mov eax, dword [ecx + 0x80]
call eax
cmp dword [0x101d267c], 0x1c61
test eax, eax
jl 0x100ef307
mov dword [esp + 0x3c], 0
cmp dword [0x101d2688], 0x3d36
mov ecx, ecx
mov ecx, dword [edi]
mov eax, dword [ecx + 0x34]
push 0x10
push 0
lea edx, [esp + 0x60]
push edx
push edi
call eax
mov bh, bh
test eax, eax
jl 0x100ef33d
mov ecx, dword [esp + 0x28]
push ecx
push ebp
call fcn.100e9b20
add esp, 8
test eax, eax
je 0x100ef130
xor eax, eax
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], eax
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], eax
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], eax
mov dword [esp + 0x7c], eax
cmp dword [0x101d2684], 0xffff9eb1
mov edx, dword [edi]
mov ecx, dword [edx + 0x30]
lea eax, [esp + 0x60]
push eax
push edi
call ecx
xchg ebx, eax
xchg ebx, eax
mov ebp, dword [esp + 0x5c]
cmp dword [0x101d268c], 0x7d16
mov edx, dword [esp + 0x58]
mov dword [esp + 0x40], edx
mov bl, bl
lea ebx, [esi + 0x24]
mov dword [esp + 0x34], ebx
cmp dword [0x101d2690], 0xfffff763
mov eax, dword [esi + 0x14]
add eax, eax
add eax, eax
mov dword [esp + 0x50], eax
mov eax, eax
cmp dword [0x101d268c], 0x7d16
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push ebx
pop ebx
cmp dword [0x101d267c], 0xffffe39e
cmp dword [0x101d2674], 0x4cdb
cmp dword [0x101d2684], 0xffff9eb1
mov eax, dword [esp + 0x88]
test eax, eax
je 0x100eef1d
mov ecx, dword [eax]
mov edx, dword [eax + 8]
sub edx, ecx
cmp edx, dword [esi + 0x14]
jb 0x100eef1d
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 4]
cmp edx, dword [esi + 0x18]
jb 0x100eef1d
cmp dword [esp + 0x60], 0x17
jne 0x100eef0b
lea ebp, [ebp + ecx*2]
cmp dword [0x101d2674], 0x4cdb
jmp 0x100eef11
lea ebp, [ebp + ecx*4]
mov edi, edi
mov eax, dword [eax + 4]
imul eax, dword [esp + 0x40]
add ebp, eax
push eax
pop eax
mov eax, dword [esi + 0x18]
push ecx
pop ecx
mov ecx, dword [esi + 0x14]
mov dword [esp + 0x30], ecx
cmp dword [0x101d2694], 0x72ca
mov esi, esi
mov dword [esi + 0x20], 0
cmp dword [0x101d2678], 0xffff8f8a
cmp dword [esp + 0x60], 0x17
jne 0x100eef5e
mov dword [esi + 0x20], 1
cmp dword [0x101d2688], 0xffffc2c9
cmp dword [esp + 0x28], 0
jne 0x100eef6d
mov dword [esi + 0x20], 0
nop
test eax, eax
jbe 0x100ef0e9
mov dword [esp + 0x44], eax
jmp 0x100eef84
mov ecx, dword [esp + 0x30]
cmp dword [esp + 0x60], 0x17
jne 0x100ef199
cmp dword [esp + 0x28], 0
jne 0x100ef176
cmp dword [0x101d2678], 0x7075
xor edi, edi
cmp dword [esp + 0x30], edi
jbe 0x100ef0c2
movzx eax, word [ebp + edi*2]
cmp dword [0x101d2674], 0x4cdb
movzx eax, ax
mov ecx, eax
shr ecx, 8
and ecx, 0xf8
mov bh, bh
mov ebx, eax
shr ebx, 3
and ebx, 0xfc
push eax
pop eax
and eax, 0x1f
add eax, eax
add eax, eax
add eax, eax
mov dword [esp + 0x2c], eax
cmp dword [0x101d267c], 0x1c61
mov eax, 0x8421085
mul ecx
mov eax, ecx
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 4
add ecx, eax
push edx
pop edx
mov eax, 0x4104105
mul ebx
mov eax, ebx
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
add ebx, eax
xchg ebx, eax
xchg ebx, eax
mov eax, 0x8421085
mul dword [esp + 0x2c]
mov eax, dword [esp + 0x2c]
mov esi, edx
mov edx, eax
sub edx, esi
shr edx, 1
add edx, esi
shr edx, 4
add eax, edx
cmp dword [0x101d2674], 0xffffb324
cmp ecx, 0xff
jbe 0x100ef05c
mov ecx, 0xff
cmp dword [0x101d2690], 0x89c
cmp ebx, 0xff
jbe 0x100ef073
mov ebx, 0xff
cmp dword [0x101d267c], 0xffffe39e
cmp eax, 0xff
jbe 0x100ef090
mov dword [esp + 0x2c], 0xff
cmp dword [0x101d267c], 0x1c61
mov eax, dword [esp + 0x2c]
xor edx, edx
mov dh, cl
mov ecx, dword [esp + 0x34]
movzx eax, al
mov dl, bl
shl edx, 8
or edx, eax
mov dword [ecx + edi*4], edx
cmp dword [0x101d2690], 0x89c
add edi, 1
cmp edi, dword [esp + 0x30]
jb 0x100eefb0
mov esi, dword [esp + 0x4c]
mov ebx, ecx
mov edi, dword [esp + 0x20]
add ebp, dword [esp + 0x40]
xchg ebx, eax
xchg ebx, eax
add ebx, dword [esp + 0x50]
mov dword [esp + 0x34], ebx
cmp dword [0x101d2694], 0xffff8d35
sub dword [esp + 0x44], 1
jne 0x100eef80
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov bh, bh
cmp dword [0x101d2690], 0xfffff763
mov dword [esi + 0x1c], 1
cmp dword [0x101d2674], 0xffffb324
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x48]
push edx
push eax
call fcn.100e9b50
add esp, 8
cmp dword [0x101d2674], 0xffffb324
mov ebp, dword [esp + 0x48]
mov ebx, dword [esp + 0x54]
mov ecx, dword [edi]
mov edx, dword [ecx + 0x38]
push edi
call edx
push edx
pop edx
push esi
call fcn.100d5930
mov ch, ch
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
push ebx
call esi
cmp dword [0x101d2690], 0x89c
push ebp
call esi
push ecx
pop ecx
mov esi, dword [esp + 0x38]
add esi, 1
cmp esi, dword [0x102fb23c]
mov dword [esp + 0x38], esi
jle 0x100eeb10
jmp 0x100ef3ab
lea eax, [ecx*4]
shr eax, 1
push eax
push ebp
push ebx
call fcn.1012fbf0
add esp, 0xc
cmp dword [0x101d2680], 0x2f60
jmp 0x100ef0c6
lea eax, [ecx*4]
push eax
push ebp
push ebx
call fcn.1012fbf0
add esp, 0xc
xchg ebx, eax
xchg ebx, eax
jmp 0x100ef0c6
push ebp
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [0x101d2694], 0x72ca
mov edx, edx
jmp 0x100ef3ab
mov eax, eax
push esi
call fcn.100d5930
xchg ebx, eax
xchg ebx, eax
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
push ebx
call esi
mov ebx, ebx
push ebp
call esi
mov cl, cl
jmp 0x100ef3ab
cmp dword [0x101d268c], 0x7d16
push esi
call fcn.100d5930
cmp dword [0x101d2678], 0x7075
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
push ebx
call esi
cmp dword [0x101d2674], 0xffffb324
push ebp
call esi
cmp dword [0x101d2690], 0x89c
jmp 0x100ef3ab
push esi
call fcn.100d5930
cmp dword [0x101d2694], 0xffff8d35
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
push ebx
call esi
cmp dword [0x101d2680], 0x2f60
push ebp
call esi
mov ebx, ebx
jmp 0x100ef3ab
cmp dword [0x101d2670], 0x65ba
push esi
call fcn.100d5930
mov eax, eax
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
push ebx
call esi
xchg ebx, eax
xchg ebx, eax
push ebp
call esi
cmp dword [0x101d2684], 0xffff9eb1
jmp 0x100ef3ab
cmp dword [0x101d2694], 0xffff8d35
push esi
call fcn.100d5930
cmp dword [0x101d2674], 0x4cdb
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
push ebx
call esi
push ecx
pop ecx
push ebp
call esi
cmp dword [0x101d2678], 0x7075
mov eax, dword [esp + 0x18]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
nop
jmp 0x100ef3ab
cmp dword [0x101d2670], 0xffff9a45
push esi
call fcn.100d5930
cmp dword [0x101d268c], 0xffff82e9
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
push ebx
call esi
cmp dword [0x101d2690], 0x89c
push ebp
call esi
cmp dword [0x101d2688], 0x3d36
jmp 0x100ef3ab
cmp dword [0x101d2690], 0xfffff763
push eax
pop eax
push esi
call fcn.100d5930
mov ecx, ecx
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
push ebx
call esi
cmp dword [0x101d2674], 0xffffb324
push ebp
call esi
cmp dword [0x101d2678], 0x7075
jmp 0x100ef3ab
push esi
call fcn.100d5930
mov ah, ah
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
push ebx
call esi
cmp dword [0x101d2670], 0x65ba
push ebp
call esi
cmp dword [0x101d2680], 0xffffd09f
cmp dword [0x101d2688], 0x3d36
jmp 0x100ef3ab
cmp dword [0x101d2674], 0x4cdb
push esi
call fcn.100d5930
cmp dword [0x101d268c], 0xffff82e9
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
push ebx
call esi
cmp dword [0x101d2678], 0x7075
push ebp
call esi
cmp dword [0x101d268c], 0x7d16
mov eax, dword [esp + 0x24]
xor esi, esi
cmp eax, esi
pop ebp
pop ebx
je 0x100ef3cd
cmp dword [0x101d2688], 0x3d36
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov edx, edx
push ebx
pop ebx
cmp edi, esi
je 0x100ef3f7
cmp dword [0x101d2694], 0x72ca
mov eax, dword [edi]
mov ecx, dword [eax + 8]
push edi
call ecx
cmp dword [0x101d2690], 0x89c
cmp dword [0x101d2694], 0x72ca
mov eax, dword [esp + 0xc]
cmp eax, esi
je 0x100ef409
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
push ebx
pop ebx
mov eax, dword [esp + 8]
pop edi
cmp eax, esi
pop esi
je 0x100ef41d
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov ah, ah
add esp, 0x70
ret