Function at 0x100187f0
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x180
push ebx
mov dword [ebp - 0xc], 0
mov dword [ebp - 8], 0
mov dword [ebp - 4], 0
push 0x1c
call sub.msvcrt.dll_malloc
add esp, 4
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x1001882d
push dword [ebp - 0x14]
call fcn.10041910
add esp, 4
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
mov ebx, dword [ebp + 8]
mov dword [eax + 0x18], ebx
push 0
push 0xffffffffffffffff
push dword [ebp + 0xc]
push 0xffffffffffffffff
mov ebx, dword [ebp - 0x10]
lea eax, [ebx]
push eax
call fcn.100545d0
push 0
push dword [ebp - 0x10]
push 0x10047b30
call fcn.1005b410
mov dword [ebp - 0x18], eax
cmp dword [ebp + 8], 0xffffffff
jne 0x10018889
push dword [ebp - 0x18]
call fcn.1005b6c0
push 0
push 1
push 0x10066f2c
push 0xffffffffffffffff
lea eax, [ebp - 0xc]
push eax
call fcn.10054610
jmp 0x10018ff7
cmp dword [ebp - 0x18], 0
je 0x10018fc5
push 0
push 0
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0xc4]
push eax
call fcn.100419e0
add esp, 0x24
call sub.KERNEL32.dll_GetTickCount
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xcc], 0
mov dword [ebp - 0xd0], 0
mov dword [ebp - 0xd4], 0
mov dword [ebp - 0xd8], 0
mov dword [ebp - 0xdc], 0
lea eax, [ebp - 0xf4]
push eax
push edi
mov edi, eax
xor eax, eax
mov ecx, 6
rep stosd dword es:[edi], eax
pop edi
pop eax
lea eax, [ebp - 0xf4]
mov dword [ebp - 0x118], eax
lea eax, [ebp - 0xf4]
mov dword [ebp - 0x114], eax
mov dword [ebp - 0x110], 0x18
mov dword [ebp - 0x10c], 4
mov dword [ebp - 0x108], 1
mov dword [ebp - 0x104], 0x31
mov dword [ebp - 0x100], 6
mov dword [ebp - 0xfc], 0
mov dword [ebp - 0xf8], 5
mov dword [ebp - 0x11c], 0
lea eax, [ebp - 0x134]
push eax
push edi
mov edi, eax
xor eax, eax
mov ecx, 6
rep stosd dword es:[edi], eax
pop edi
pop eax
lea eax, [ebp - 0x134]
mov dword [ebp - 0x158], eax
lea eax, [ebp - 0x134]
mov dword [ebp - 0x154], eax
mov dword [ebp - 0x150], 0x18
mov dword [ebp - 0x14c], 4
mov dword [ebp - 0x148], 1
mov dword [ebp - 0x144], 0x31
mov dword [ebp - 0x140], 6
mov dword [ebp - 0x13c], 0
mov dword [ebp - 0x138], 5
mov dword [ebp - 0x164], 0
mov dword [ebp - 0x160], 0
mov dword [ebp - 0x15c], 0
cmp dword [ebp + 8], 0
jbe 0x10018b30
push dword [ebp + 8]
call fcn.1001b550
push 8
call fcn.1001bdc0
lea eax, [ebp - 0xd4]
push eax
lea eax, [ebp - 0xd0]
push eax
push dword [ebp + 8]
call fcn.1001bfc0
fild dword [ebp - 0xd0]
fdiv qword [0x10067c00]
sub esp, 8
fld st(0)
fistp qword [esp]
fild qword [esp]
fld1
fsubr st(1)
fxch st(2)
fcompi st(1)
fcmovb st(0), st(1)
fstp st(1)
add esp, 8
push dword [0x10069f58]
fstp qword [ebp - 0x16c]
call fcn.10034b20
fld qword [ebp - 0x16c]
fsubrp st(1)
fistp dword [ebp - 0xd8]
fild dword [ebp - 0xd4]
fdiv qword [0x10067c00]
sub esp, 8
fld st(0)
fistp qword [esp]
fild qword [esp]
fld1
fsubr st(1)
fxch st(2)
fcompi st(1)
fcmovb st(0), st(1)
fstp st(1)
add esp, 8
push dword [0x10069f5c]
fstp qword [ebp - 0x174]
call fcn.10034b90
fld qword [ebp - 0x174]
fsubrp st(1)
fistp dword [ebp - 0xdc]
push 0
push dword [0x10069f60]
call fcn.10034b90
sub esp, 4
fistp dword [esp]
pop eax
push eax
push dword [0x10069f60]
call fcn.10034b20
sub esp, 4
fistp dword [esp]
pop eax
push eax
push dword [ebp - 0xdc]
push dword [ebp - 0xd8]
push 0
push 0xffffffffffffffff
push dword [ebp + 8]
lea eax, [ebp - 0xc4]
push eax
call fcn.100419e0
add esp, 0x24
push 0
push 0xffffff
push 1
lea eax, [ebp - 0xc4]
push eax
call fcn.10041f40
push 0
push 0
push 0
push 0
push 0xe
push str.Microsoft_YaHei
lea eax, [ebp - 0xc4]
push eax
call fcn.10042230
mov dword [ebp - 0x11c], 0
mov eax, dword [ebp - 0x11c]
imul eax, eax, 0x28
mov ebx, dword [ebp - 0x11c]
mov dword [ebp + ebx*4 - 0xf4], eax
inc dword [ebp - 0x11c]
cmp dword [ebp - 0x11c], 5
jle 0x10018b3a
mov eax, dword [ebp - 0x18]
push dword [eax]
call fcn.1001c030
test eax, eax
je 0x10018fa2
push 8
call fcn.1001bdc0
cmp dword [ebp + 8], 0
jbe 0x10018f89
mov dword [ebp - 0x11c], 0
mov eax, dword [ebp - 0x11c]
cmp dword [ebp + eax*4 - 0xf4], 0x6e
jge 0x10018bac
mov eax, dword [ebp - 0x11c]
add dword [ebp + eax*4 - 0xf4], 4
jmp 0x10018bff
mov eax, dword [ebp - 0x11c]
cmp dword [ebp + eax*4 - 0xf4], 0xc8
jge 0x10018bcf
mov eax, dword [ebp - 0x11c]
add dword [ebp + eax*4 - 0xf4], 3
jmp 0x10018bff
mov eax, dword [ebp - 0x11c]
cmp dword [ebp + eax*4 - 0xf4], 0x122
jge 0x10018bf1
mov eax, dword [ebp - 0x11c]
inc dword [ebp + eax*4 - 0xf4]
jmp 0x10018bff
mov eax, dword [ebp - 0x11c]
add dword [ebp + eax*4 - 0xf4], 5
mov eax, dword [ebp - 0x11c]
cmp dword [ebp + eax*4 - 0xf4], 0x168
jle 0x10018c23
mov eax, dword [ebp - 0x11c]
add dword [ebp + eax*4 - 0xf4], 0xfffffe98
inc dword [ebp - 0x11c]
cmp dword [ebp - 0x11c], 5
jle 0x10018b8c
call sub.KERNEL32.dll_GetTickCount
sub eax, dword [ebp - 0xc8]
push 0
push eax
fild qword [esp]
add esp, 8
fdiv qword [0x10069ca8]
fistp dword [ebp - 0xcc]
cmp dword [ebp - 0xcc], 0x4650
jle 0x10018c67
jmp 0x10018fa2
cmp dword [ebp - 0xcc], 0x258
jl 0x10018db9
push 0
push 0xffffffffffffffff
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x170], 0
mov dword [ebp - 0x16c], 0
push 0
push 2
push 0x100690ac
push 0xffffffffffffffff
lea eax, [ebp - 0x174]
push eax
call fcn.100545d0
lea eax, [ebp - 0x174]
push eax
fild dword [ebp - 0xcc]
fdiv qword [0x10069f68]
sub esp, 8
fld st(0)
fistp qword [esp]
fild qword [esp]
fld1
fsubr st(1)
fxch st(2)
fcompi st(1)
fcmovb st(0), st(1)
fstp st(1)
add esp, 8
sub esp, 8
fstp qword [esp]
call fcn.10058610
push eax
push 0xffffffffffffffff
lea eax, [ebp - 0x164]
push eax
call fcn.100545d0
push 0
push 2
push 0x10069f3c
push 0xffffffffffffffff
lea eax, [ebp - 0x164]
push eax
call fcn.10054a10
push 0
push 0xffffffffffffffff
mov dword [ebp - 0x180], 0
mov dword [ebp - 0x17c], 0
mov dword [ebp - 0x178], 0
push 0
push 4
push 0x10069f40
push 0xffffffffffffffff
lea eax, [ebp - 0x180]
push eax
call fcn.100545d0
lea eax, [ebp - 0x180]
push eax
mov eax, dword [ebp - 0xcc]
mov ecx, 0x258
cdq
idiv ecx
mov eax, edx
push eax
fild dword [esp]
add esp, 4
fdiv qword [0x10069b38]
sub esp, 8
fstp qword [esp]
call fcn.10058610
push eax
push 0xffffffffffffffff
lea eax, [ebp - 0x164]
push eax
call fcn.10054a10
push 0
push 2
push 0x10069ef4
push 0xffffffffffffffff
lea eax, [ebp - 0x164]
push eax
call fcn.10054a10
lea eax, [ebp - 0x180]
push eax
call fcn.10055990
lea eax, [ebp - 0x174]
push eax
call fcn.10055990
jmp 0x10018e42
push 0
push 0xffffffffffffffff
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x170], 0
mov dword [ebp - 0x16c], 0
push 0
push 4
push 0x10069f40
push 0xffffffffffffffff
lea eax, [ebp - 0x174]
push eax
call fcn.100545d0
lea eax, [ebp - 0x174]
push eax
fild dword [ebp - 0xcc]
fdiv qword [0x10069b38]
sub esp, 8
fstp qword [esp]
call fcn.10058610
push eax
push 0xffffffffffffffff
lea eax, [ebp - 0x164]
push eax
call fcn.100545d0
push 0
push 2
push 0x10069ef4
push 0xffffffffffffffff
lea eax, [ebp - 0x164]
push eax
call fcn.10054a10
lea eax, [ebp - 0x174]
push eax
call fcn.10055990
push 0xffffffffffffffff
lea eax, [ebp - 0xc4]
push eax
call fcn.10041ea0
push 0xff
fild dword [ebp - 0xf4]
sub esp, 4
fstp dword [esp]
lea eax, [ebp - 0xc4]
push eax
call fcn.10047d60
push 0xff00
fild dword [ebp - 0xf0]
sub esp, 4
fstp dword [esp]
lea eax, [ebp - 0xc4]
push eax
call fcn.10047d60
push 0xff0000
fild dword [ebp - 0xec]
sub esp, 4
fstp dword [esp]
lea eax, [ebp - 0xc4]
push eax
call fcn.10047d60
push 0xffff00
fild dword [ebp - 0xe8]
sub esp, 4
fstp dword [esp]
lea eax, [ebp - 0xc4]
push eax
call fcn.10047d60
push 0xff00ff
fild dword [ebp - 0xe4]
sub esp, 4
fstp dword [esp]
lea eax, [ebp - 0xc4]
push eax
call fcn.10047d60
push 0xffff
fild dword [ebp - 0xe0]
sub esp, 4
fstp dword [esp]
lea eax, [ebp - 0xc4]
push eax
call fcn.10047d60
push 0x25
push 0xffffff
push 0x10069f44
push 0x19
push 0x64
push 0x17
push 0xa
lea eax, [ebp - 0xc4]
push eax
call fcn.100423d0
push 0x25
push 0xffffff
push 0x10069f4c
push 0x19
push 0x64
push 0x31
push 0xa
lea eax, [ebp - 0xc4]
push eax
call fcn.100423d0
push 0x25
push 0xffffff
push dword [ebp - 0x164]
call fcn.1005a130
mov dword [ebp - 0x168], eax
push dword [ebp - 0x168]
push 0x19
push 0x64
push 0x49
push 0xa
lea eax, [ebp - 0xc4]
push eax
call fcn.100423d0
push dword [ebp - 0x168]
call fcn.1005a790
lea eax, [ebp - 0xc4]
push eax
call fcn.10041e50
jmp 0x10018f9d
call sub.KERNEL32.dll_GetTickCount
sub eax, dword [ebp - 0xc8]
cmp eax, 0xea60
jbe 0x10018f9d
jmp 0x10018fa2
jmp 0x10018b5f
push dword [ebp - 0x18]
call fcn.1005b6c0
lea eax, [ebp - 0x164]
push eax
call fcn.10055990
lea eax, [ebp - 0xc4]
push eax
call fcn.10001cb0
add esp, 4
push 0
push 0xffffffffffffffff
mov eax, dword [ebp - 0x10]
lea ebx, [eax + 0xc]
push ebx
push 0xffffffffffffffff
lea ebx, [ebp - 0xc]
push ebx
call fcn.100545d0
cmp dword [ebp - 0x10], 0
je 0x10018ff7
push dword [ebp - 0x10]
call fcn.100419b0
add esp, 4
push dword [ebp - 0x10]
call sub.msvcrt.dll_free
add esp, 4
lea ebx, [ebp - 0xc]
push ebx
call fcn.10059150
pop ebx
mov esp, ebp
pop ebp
ret 8