Function at 0x10021160
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xbc
mov byte [ebp - 1], 0
mov eax, dword [ebp + 8]
mov ecx, dword [eax - 0xc]
mov dword [ebp - 0x8c], ecx
cmp dword [ebp - 0x8c], 0
jne 0x100211a7
mov dl, byte [ebp - 1]
mov byte [ebp - 9], dl
mov eax, dword [ebp + 8]
sub eax, 0x10
mov dword [ebp - 0x90], eax
mov ecx, dword [ebp - 0x90]
call fcn.10003260
mov al, byte [ebp - 9]
jmp 0x10021c06
push 6
lea ecx, [ebp - 0x98]
push ecx
lea ecx, [ebp + 8]
call fcn.1002ef20
mov dword [ebp - 0x94], eax
mov edx, dword [ebp - 0x94]
push edx
lea ecx, [ebp + 8]
call fcn.10030240
mov eax, dword [ebp - 0x98]
sub eax, 0x10
mov dword [ebp - 0x9c], eax
mov ecx, dword [ebp - 0x9c]
call fcn.10003260
push str._R001_
lea ecx, [ebp + 8]
call fcn.1002f5e0
test eax, eax
jne 0x10021201
mov dword [ebp - 0x20], 1
jmp 0x10021208
mov dword [ebp - 0x20], 0
movzx ecx, byte [ebp - 0x20]
test ecx, ecx
je 0x10021221
push 1
push 1
call fcn.1001d3c0
add esp, 8
jmp 0x10021be8
push str._R002_
lea ecx, [ebp + 8]
call fcn.1002f5e0
test eax, eax
jne 0x1002123b
mov dword [ebp - 0x24], 1
jmp 0x10021242
mov dword [ebp - 0x24], 0
movzx edx, byte [ebp - 0x24]
test edx, edx
je 0x1002125b
push 1
push 1
call fcn.1001d3c0
add esp, 8
jmp 0x10021be8
push str._R003_
lea ecx, [ebp + 8]
call fcn.1002f5e0
test eax, eax
jne 0x10021275
mov dword [ebp - 0x28], 1
jmp 0x1002127c
mov dword [ebp - 0x28], 0
movzx eax, byte [ebp - 0x28]
test eax, eax
je 0x10021295
push 1
push 2
call fcn.1001d3c0
add esp, 8
jmp 0x10021be8
push str._R004_
lea ecx, [ebp + 8]
call fcn.1002f5e0
test eax, eax
jne 0x100212af
mov dword [ebp - 0x2c], 1
jmp 0x100212b6
mov dword [ebp - 0x2c], 0
movzx ecx, byte [ebp - 0x2c]
test ecx, ecx
je 0x100212cf
push 1
push 2
call fcn.1001d3c0
add esp, 8
jmp 0x10021be8
push str._R005_
lea ecx, [ebp + 8]
call fcn.1002f5e0
test eax, eax
jne 0x100212e9
mov dword [ebp - 0x30], 1
jmp 0x100212f0
mov dword [ebp - 0x30], 0
movzx edx, byte [ebp - 0x30]
test edx, edx
je 0x10021309
push 1
push 2
call fcn.1001d3c0
add esp, 8
jmp 0x10021be8
push str._R006_
lea ecx, [ebp + 8]
call fcn.1002f5e0
test eax, eax
jne 0x10021323
mov dword [ebp - 0x34], 1
jmp 0x1002132a
mov dword [ebp - 0x34], 0
movzx eax, byte [ebp - 0x34]
test eax, eax
je 0x10021343
push 1
push 2
call fcn.1001d3c0
add esp, 8
jmp 0x10021be8
push str._R007_
lea ecx, [ebp + 8]
call fcn.1002f5e0
test eax, eax
jne 0x1002135d
mov dword [ebp - 0x38], 1
jmp 0x10021364
mov dword [ebp - 0x38], 0
movzx ecx, byte [ebp - 0x38]
test ecx, ecx
je 0x100213b1
movzx edx, byte [0x1006be31]
test edx, edx
jne 0x100213a0
cmp dword [ebp + 0x24], 6
jl 0x10021392
mov byte [0x1006be31], 1
push 1
push 2
call fcn.1001d3c0
add esp, 8
jmp 0x1002139e
push 1
push 1
call fcn.1001d3c0
add esp, 8
jmp 0x100213ac
push 1
push 2
call fcn.1001d3c0
add esp, 8
jmp 0x10021be8
push str._R008_
lea ecx, [ebp + 8]
call fcn.1002f5e0
test eax, eax
jne 0x100213cb
mov dword [ebp - 0x3c], 1
jmp 0x100213d2
mov dword [ebp - 0x3c], 0
movzx eax, byte [ebp - 0x3c]
test eax, eax
je 0x100213eb
push 1
push 1
call fcn.1001d3c0
add esp, 8
jmp 0x10021be8
push str._R009_
lea ecx, [ebp + 8]
call fcn.1002f5e0
test eax, eax
jne 0x10021405
mov dword [ebp - 0x40], 1
jmp 0x1002140c
mov dword [ebp - 0x40], 0
movzx ecx, byte [ebp - 0x40]
test ecx, ecx
je 0x10021459
movzx edx, byte [0x1006be31]
test edx, edx
jne 0x10021448
cmp dword [ebp + 0x24], 4
jl 0x1002143a
mov byte [0x1006be31], 1
push 1
push 2
call fcn.1001d3c0
add esp, 8
jmp 0x10021446
push 1
push 1
call fcn.1001d3c0
add esp, 8
jmp 0x10021454
push 1
push 2
call fcn.1001d3c0
add esp, 8
jmp 0x10021be8
push str._R010_
lea ecx, [ebp + 8]
call fcn.1002f5e0
test eax, eax
jne 0x10021473
mov dword [ebp - 0x44], 1
jmp 0x1002147a
mov dword [ebp - 0x44], 0
movzx eax, byte [ebp - 0x44]
test eax, eax
je 0x100214e6
cmp dword [ebp + 0x20], 0x186a0
jge 0x100214c1
cmp dword [ebp + 0x24], 3
jl 0x100214b3
cmp dword [ebp + 0x10], 0x11
jge 0x100214a5
push 1
push 2
call fcn.1001d3c0
add esp, 8
jmp 0x100214b1
push 1
push 3
call fcn.1001d3c0
add esp, 8
jmp 0x100214bf
push 1
push 1
call fcn.1001d3c0
add esp, 8
jmp 0x100214e1
cmp dword [ebp + 0x10], 0x11
jge 0x100214d5
push 1
push 2
call fcn.1001d3c0
add esp, 8
jmp 0x100214e1
push 1
push 3
call fcn.1001d3c0
add esp, 8
jmp 0x10021be8
push str._R011_
lea ecx, [ebp + 8]
call fcn.1002f5e0
test eax, eax
jne 0x10021500
mov dword [ebp - 0x48], 1
jmp 0x10021507
mov dword [ebp - 0x48], 0
movzx ecx, byte [ebp - 0x48]
test ecx, ecx
je 0x10021520
push 1
push 2
call fcn.1001d3c0
add esp, 8
jmp 0x10021be8
push str._R012_
lea ecx, [ebp + 8]
call fcn.1002f5e0
test eax, eax
jne 0x1002153a
mov dword [ebp - 0x4c], 1
jmp 0x10021541
mov dword [ebp - 0x4c], 0
movzx edx, byte [ebp - 0x4c]
test edx, edx
je 0x100215a2
movzx eax, byte [0x1006be31]
test eax, eax
jne 0x1002157d
cmp dword [ebp + 0x24], 0x66
jl 0x1002156f
mov byte [0x1006be31], 1
push 1
push 2
call fcn.1001d3c0
add esp, 8
jmp 0x1002157b
push 1
push 1
call fcn.1001d3c0
add esp, 8
jmp 0x1002159d
cmp dword [ebp + 0x24], 3
jl 0x10021591
push 1
push 2
call fcn.1001d3c0
add esp, 8
jmp 0x1002159d
push 1
push 1
call fcn.1001d3c0
add esp, 8
jmp 0x10021be8
push str._R013_
lea ecx, [ebp + 8]
call fcn.1002f5e0
test eax, eax
jne 0x100215bc
mov dword [ebp - 0x50], 1
jmp 0x100215c3
mov dword [ebp - 0x50], 0
movzx ecx, byte [ebp - 0x50]
test ecx, ecx
je 0x100215dc
push 1
push 1
call fcn.1001d3c0
add esp, 8
jmp 0x10021be8
push str._R014_
lea ecx, [ebp + 8]
call fcn.1002f5e0
test eax, eax
jne 0x100215f6
mov dword [ebp - 0x54], 1
jmp 0x100215fd
mov dword [ebp - 0x54], 0
movzx edx, byte [ebp - 0x54]
test edx, edx
je 0x10021616
push 1
push 2
call fcn.1001d3c0
add esp, 8
jmp 0x10021be8
push str._R015_
lea ecx, [ebp + 8]
call fcn.1002f5e0
test eax, eax
jne 0x10021630
mov dword [ebp - 0x58], 1
jmp 0x10021637
mov dword [ebp - 0x58], 0
movzx eax, byte [ebp - 0x58]
test eax, eax
je 0x100216a3
cmp dword [ebp + 0x20], 0x186a0
jge 0x1002167e
cmp dword [ebp + 0x24], 3
jl 0x10021670
cmp dword [ebp + 0x10], 7
jge 0x10021662
push 1
push 2
call fcn.1001d3c0
add esp, 8
jmp 0x1002166e
push 1
push 3
call fcn.1001d3c0
add esp, 8
jmp 0x1002167c
push 1
push 1
call fcn.1001d3c0
add esp, 8
jmp 0x1002169e
cmp dword [ebp + 0x10], 7
jge 0x10021692
push 1
push 2
call fcn.1001d3c0
add esp, 8
jmp 0x1002169e
push 1
push 3
call fcn.1001d3c0
add esp, 8
jmp 0x10021be8
push str._R016_
lea ecx, [ebp + 8]
call fcn.1002f5e0
test eax, eax
jne 0x100216bd
mov dword [ebp - 0x5c], 1
jmp 0x100216c4
mov dword [ebp - 0x5c], 0
movzx ecx, byte [ebp - 0x5c]
test ecx, ecx
je 0x10021705
cmp dword [ebp + 0xc], 0xe
jge 0x100216f4
cmp dword [ebp + 0x24], 3
jl 0x100216e6
push 1
push 2
call fcn.1001d3c0
add esp, 8
jmp 0x100216f2
push 1
push 1
call fcn.1001d3c0
add esp, 8
jmp 0x10021700
push 1
push 2
call fcn.1001d3c0
add esp, 8
jmp 0x10021be8
push str._R017_
lea ecx, [ebp + 8]
call fcn.1002f5e0
test eax, eax
jne 0x1002171f
mov dword [ebp - 0x60], 1
jmp 0x10021726
mov dword [ebp - 0x60], 0
movzx edx, byte [ebp - 0x60]
test edx, edx
je 0x10021759
call fcn.100076c0
movzx eax, al
test eax, eax
je 0x10021748
push 1
push 1
call fcn.1001d3c0
add esp, 8
jmp 0x10021754
push 1
push 2
call fcn.1001d3c0
add esp, 8
jmp 0x10021be8
push str._R018_
lea ecx, [ebp + 8]
call fcn.1002f5e0
test eax, eax
jne 0x10021773
mov dword [ebp - 0x64], 1
jmp 0x1002177a
mov dword [ebp - 0x64], 0
movzx ecx, byte [ebp - 0x64]
test ecx, ecx
je 0x100217de
movzx edx, byte [0x1006be31]
test edx, edx
jne 0x100217b9
cmp dword [ebp + 0x24], 0x104
jl 0x100217ab
mov byte [0x1006be31], 1
push 1
push 2
call fcn.1001d3c0
add esp, 8
jmp 0x100217b7
push 1
push 1
call fcn.1001d3c0
add esp, 8
jmp 0x100217d9
cmp dword [ebp + 0x24], 3
jl 0x100217cd
push 1
push 2
call fcn.1001d3c0
add esp, 8
jmp 0x100217d9
push 1
push 1
call fcn.1001d3c0
add esp, 8
jmp 0x10021be8
push str._H040_
lea ecx, [ebp + 8]
call fcn.1002f5e0
test eax, eax
jne 0x100217f8
mov dword [ebp - 0x68], 1
jmp 0x100217ff
mov dword [ebp - 0x68], 0
movzx eax, byte [ebp - 0x68]
test eax, eax
je 0x1002182c
cmp dword [ebp + 0x24], 3
jl 0x1002181b
push 1
push 2
call fcn.1001d3c0
add esp, 8
jmp 0x10021827
push 1
push 1
call fcn.1001d3c0
add esp, 8
jmp 0x10021be8
push str._H041_
lea ecx, [ebp + 8]
call fcn.1002f5e0
test eax, eax
jne 0x10021846
mov dword [ebp - 0x6c], 1
jmp 0x1002184d
mov dword [ebp - 0x6c], 0
movzx ecx, byte [ebp - 0x6c]
test ecx, ecx
je 0x10021866
push 1
push 4
call fcn.1001d3c0
add esp, 8
jmp 0x10021be8
push str._H042_
lea ecx, [ebp + 8]
call fcn.1002f5e0
test eax, eax
jne 0x10021880
mov dword [ebp - 0x70], 1
jmp 0x10021887
mov dword [ebp - 0x70], 0
movzx edx, byte [ebp - 0x70]
test edx, edx
je 0x100218c8
cmp dword [ebp + 0x28], 0
jle 0x100218b7
cmp dword [ebp + 0x24], 3
jl 0x100218a9
push 1
push 2
call fcn.1001d3c0
add esp, 8
jmp 0x100218b5
push 1
push 1
call fcn.1001d3c0
add esp, 8
jmp 0x100218c3
push 1
push 2
call fcn.1001d3c0
add esp, 8
jmp 0x10021be8
push str._H043_
lea ecx, [ebp + 8]
call fcn.1002f5e0
test eax, eax
jne 0x100218e2
mov dword [ebp - 0x74], 1
jmp 0x100218e9
mov dword [ebp - 0x74], 0
movzx eax, byte [ebp - 0x74]
test eax, eax
je 0x1002191b
mov cl, byte [ebp - 1]
mov byte [ebp - 0xa], cl
mov edx, dword [ebp + 8]
sub edx, 0x10
mov dword [ebp - 0xa0], edx
mov ecx, dword [ebp - 0xa0]
call fcn.10003260
mov al, byte [ebp - 0xa]
jmp 0x10021c06
push str._H044_
lea ecx, [ebp + 8]
call fcn.1002f5e0
test eax, eax
jne 0x10021935
mov dword [ebp - 0x78], 1
jmp 0x1002193c
mov dword [ebp - 0x78], 0
movzx eax, byte [ebp - 0x78]
test eax, eax
je 0x10021955
push 1
push 4
call fcn.1001d3c0
add esp, 8
jmp 0x10021be8
push str._H045_
lea ecx, [ebp + 8]
call fcn.1002f5e0
test eax, eax
jne 0x1002196f
mov dword [ebp - 0x7c], 1
jmp 0x10021976
mov dword [ebp - 0x7c], 0
movzx ecx, byte [ebp - 0x7c]
test ecx, ecx
je 0x1002198f
push 1
push 3
call fcn.1001d3c0
add esp, 8
jmp 0x10021be8
push str._H046_
lea ecx, [ebp + 8]
call fcn.1002f5e0
test eax, eax
jne 0x100219a9
mov dword [ebp - 0x80], 1
jmp 0x100219b0
mov dword [ebp - 0x80], 0
movzx edx, byte [ebp - 0x80]
test edx, edx
je 0x10021bc6
cmp dword [0x1006bdac], 8
jge 0x10021bb8
cmp dword [0x1006bdec], 0
jne 0x100219f9
push 0x3a98
push 0x2710
call fcn.10004950
add esp, 8
mov dword [0x1006bdec], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x1006bd54], eax
jmp 0x10021bb8
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [0x1006bd54]
cmp eax, dword [0x1006bdec]
jbe 0x10021bb8
mov eax, dword [0x1006bdac]
add eax, 1
mov dword [0x1006bdac], eax
push str.Show_me_the_money
lea ecx, [ebp - 0x10]
call fcn.1002fa80
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx - 0xc]
mov dword [ebp - 0x18], edx
cmp dword [ebp - 0x18], 0
jle 0x10021b75
mov eax, dword [ebp - 0x18]
push eax
push 0x2d4f9d8
call fcn.10003a80
test eax, eax
jne 0x10021b75
mov dword [ebp - 8], 0
jmp 0x10021a66
mov ecx, dword [ebp - 8]
add ecx, 1
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 8]
cmp edx, dword [ebp - 0x18]
jge 0x10021b6b
mov eax, dword [ebp - 8]
add eax, 0x2d4f9d8
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x88], 0
push 1
mov ecx, dword [ebp - 0x84]
push ecx
call fcn.10003990
test eax, eax
jne 0x10021ad8
lea edx, [ebp - 0x88]
mov dword [ebp - 0xa4], edx
mov dword [ebp - 0x14], 0
jmp 0x10021aba
mov eax, dword [ebp - 0x14]
add eax, 1
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jge 0x10021ad8
mov ecx, dword [ebp - 0xa4]
add ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x84]
add edx, dword [ebp - 0x14]
mov al, byte [edx]
mov byte [ecx], al
jmp 0x10021ab1
mov ecx, dword [ebp - 0x88]
mov dword [ebp - 0xac], ecx
cmp dword [ebp - 8], 0
jl 0x10021b01
mov edx, dword [ebp - 0x10]
mov eax, dword [edx - 0xc]
mov dword [ebp - 0xa8], eax
mov ecx, dword [ebp - 8]
cmp ecx, dword [ebp - 0xa8]
jle 0x10021b0b
push 0x80070057
call fcn.10002e80
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 8]
mov cx, word [edx + eax*2]
mov word [ebp - 0x1a], cx
movzx edx, word [ebp - 0x1a]
cmp dword [ebp - 0xac], edx
je 0x10021b66
cmp dword [ebp - 8], 0
jl 0x10021b42
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax - 0xc]
mov dword [ebp - 0xb0], ecx
mov edx, dword [ebp - 8]
cmp edx, dword [ebp - 0xb0]
jle 0x10021b4c
push 0x80070057
call fcn.10002e80
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 8]
mov dx, word [eax + ecx*2]
mov word [ebp - 0x1c], dx
mov eax, dword [ebp - 8]
mov cl, byte [ebp - 0x1c]
mov byte [eax + 0x2d4f9d8], cl
jmp 0x10021a5d
mov edx, dword [ebp - 0x18]
mov byte [edx + 0x2d4f9d8], 0
mov eax, dword [ebp - 0x10]
sub eax, 0x10
mov dword [ebp - 0xb4], eax
mov ecx, dword [ebp - 0xb4]
call fcn.10003260
push 0xd
call fcn.10004970
add esp, 4
push 0x1388
push 0xbb8
call fcn.10004950
add esp, 8
mov dword [0x1006bdec], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x1006bd54], eax
push 1
push 2
call fcn.1001d3c0
add esp, 8
jmp 0x10021be8
mov cl, byte [ebp - 1]
mov byte [ebp - 0xb], cl
mov edx, dword [ebp + 8]
sub edx, 0x10
mov dword [ebp - 0xb8], edx
mov ecx, dword [ebp - 0xb8]
call fcn.10003260
mov al, byte [ebp - 0xb]
jmp 0x10021c06
mov byte [ebp - 0xc], 1
mov eax, dword [ebp + 8]
sub eax, 0x10
mov dword [ebp - 0xbc], eax
mov ecx, dword [ebp - 0xbc]
call fcn.10003260
mov al, byte [ebp - 0xc]
mov esp, ebp
pop ebp
ret