Function at 0x10094af0
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov eax, dword [section..data]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
lea ecx, [ebp - 0x14]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp + 0x10]
push edi
mov edi, dword [ebp + 8]
mov dword [ebp - 0x18], eax
call fcn.10006520
lea eax, [ebp - 0x14]
push eax
push edi
call fcn.10081920
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 0x1c]
neg eax
push eax
mov eax, dword [ebp - 0x14]
neg eax
push eax
call fcn.10084c40
cmp dword [edi + 0x16d8], 0
jne 0x10094b73
push dword [ebp - 0x18]
lea eax, [edi + 0x1684]
push dword [ebp - 0x1c]
push eax
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
je 0x10094b73
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push edi
call fcn.1008e690
pop edi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10056351
mov esp, ebp
pop ebp
ret 0xc
push ebx
push esi
push 4
push edi
call fcn.10082150
push 1
push edi
call fcn.10081b40
call fcn.10094d90
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x1c]
push eax
push dword [edi + 0x1498]
call dword [sym.imp.USER32.dll_ClientToScreen]
call dword [sym.imp.USER32.dll_GetDesktopWindow]
mov ecx, edi
mov esi, eax
call fcn.10094060
push edi
push 0
mov ebx, eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
push 0x3e9
push esi
push ebx
lea ecx, [ebp - 0x14]
call fcn.10084cf0
push eax
push dword [ebp - 0x18]
push dword [ebp - 0x1c]
push 0x40000000
push 0x100e3908
push dword [0x100f7540]
push 0x88
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov dword [edi + 0x18f0], eax
test eax, eax
je 0x10094d1e
cmp ebx, 6
jg 0x10094c17
push 0x53
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push eax
jmp 0x10094cb6
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x28], eax
xor esi, esi
mov eax, 0x66666667
mov dword [ebp - 0x20], esi
imul ebx
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
inc ecx
add ecx, edx
mov dword [ebp - 0x24], ecx
lea esp, [esp]
add esi, ecx
cmp esi, ebx
cmovge esi, ebx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [ebp - 0x28]
lea ecx, [ebp - 0x14]
push 0x52
cmp eax, 0xc8
ja 0x10094ca3
push esi
call fcn.10084cf0
push eax
push 0
push 0
push 0xffffffffffffffff
push dword [edi + 0x18f0]
call dword [sym.imp.USER32.dll_SetWindowPos]
push 0x102
push 0
push 0
push dword [edi + 0x18f0]
call dword [sym.imp.USER32.dll_RedrawWindow]
push 0x28
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x20], eax
cmp eax, 6
jl 0x10094c40
jmp 0x10094cbc
push ebx
call fcn.10084cf0
push eax
push 0
push 0
push 0xffffffffffffffff
push dword [edi + 0x18f0]
call dword [sym.imp.USER32.dll_SetWindowPos]
mov esi, dword [edi + 0x1498]
mov ebx, dword [sym.imp.USER32.dll_GetWindowLongW]
push 0xfffffffffffffff0
push esi
call ebx
test eax, 0x40000000
je 0x10094ce9
push esi
call dword [sym.imp.USER32.dll_GetParent]
mov esi, eax
push 0xfffffffffffffff0
push esi
call ebx
test eax, 0x40000000
jne 0x10094cd4
push dword [edi + 0x18f0]
push esi
push edi
call fcn.100951f0
mov eax, dword [edi]
add esp, 0xc
push 0
push edi
call dword [eax + 0x21c]
push 1
push edi
mov dword [edi + 0x18f0], 0
call fcn.10082150
push 1
push edi
call fcn.10081b40
mov ecx, dword [ebp - 4]
pop esi
pop ebx
xor ecx, ebp
pop edi
call fcn.10056351
mov esp, ebp
pop ebp
ret 0xc