Function at 0x1006ac1a
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x144
mov eax, dword [0x10144040]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, 0x80f8e0
call eax
cmp dword [0xe609e8], 5
jne 0x1006aecb
cmp dword [0x1015748c], 1
jne 0x1006aecb
cmp byte [0x10157234], 0
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
jne 0x1006ac75
cmp dword [0x10157470], 0
jne 0x1006ab4e
xorps xmm0, xmm0
movss dword [ebp - 0x144], xmm0
jmp 0x1006ab9f
call esi
sub eax, dword [0x10157488]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x10138c00]
mov eax, dword [0x10157470]
cvtpd2ps xmm1, xmm0
movd xmm0, eax
mulss xmm1, dword [0x10138984]
shr eax, 0x1f
cvtdq2pd xmm0, xmm0
addsd xmm0, qword [eax*8 + 0x10138c00]
cvtpd2ps xmm0, xmm0
divss xmm1, xmm0
movss dword [ebp - 0x144], xmm1
push edi
sub esp, 0x10
mov edi, 0x790b50
mov dword [esp + 0xc], 0x41900000
mov dword [esp + 8], 0x43200000
mov dword [esp + 4], 0x42c80000
mov dword [esp], 0x43700000
push 0x7a65
call edi
movss xmm0, dword [0x10138984]
add esp, 4
minss xmm0, dword [ebp - 0x144]
mov dword [esp + 0xc], 0x41000000
movss dword [esp + 8], xmm0
mov dword [esp + 4], 0x42d20000
mov dword [esp], 0x43750000
push 0x7a66
call edi
mov eax, dword [0x1015749c]
add esp, 0x14
pop edi
cmp eax, 3
ja case.default.0x1006ac13
jmp dword [eax*4 + 0x1006aedc]
push 1
jmp 0x1006ac28
push 2
jmp 0x1006ac28
push 3
jmp 0x1006ac28
push 4
mov ecx, 0x10145e58
call fcn.10020470
push eax
lea eax, [ebp - 0x104]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
push 3
push 0
push 0xffffffffffffffff
push 0
push 0xa0
push 0x69
lea eax, [ebp - 0x104]
push 0xf0
push eax
mov eax, 0x7d04d0
call eax
add esp, 0x28
call esi
sub eax, dword [0x10157488]
cmp eax, dword [0x10157470]
jbe 0x1006acd2
mov dword [0x1015748c], 2
mov dword [0x1015749c], 0
call esi
mov dword [0x10157474], eax
call esi
mov dword [0x10157488], eax
mov ecx, 0x3e8
xor eax, eax
mov dword [0x10157470], 0
cmp byte [0x10144f66], 1
cmove eax, ecx
mov ecx, 0x8793750
mov dword [0x10157490], eax
mov eax, 0x63a180
call eax
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1007c089
mov esp, ebp
pop ebp
ret
call esi
sub eax, dword [0x10157474]
cmp eax, dword [0x10157490]
jb 0x1006aeca
mov eax, dword [0x1015749c]
sub eax, 0
je 0x1006aebe
sub eax, 1
jne 0x1006aec3
mov eax, dword [0x10157494]
test eax, eax
jne 0x1006aec3
movzx eax, byte [0x101574ac]
xor al, 0xfc
mov dword [0x10157494], 1
mov byte [ebp - 0x13c], al
movzx eax, byte [0x101574ad]
xor al, 0xcf
mov dword [ebp - 0x140], 0x1f13bc3
mov byte [ebp - 0x13b], al
movzx eax, byte [0x101574ae]
xor al, 0xab
mov byte [ebp - 0x13a], al
movzx eax, byte [0x101574af]
xor al, 0xfc
mov byte [ebp - 0x139], al
movzx eax, byte [0x101574b0]
xor al, 0xcf
mov byte [ebp - 0x138], al
movzx eax, byte [0x101574b1]
xor al, 0xab
mov byte [ebp - 0x137], al
movzx eax, byte [0x101574b2]
xor al, 0xfc
mov byte [ebp - 0x136], al
movzx eax, byte [0x101574b3]
xor al, 0xcf
mov byte [ebp - 0x135], al
movzx eax, byte [0x101574b4]
xor al, 0xab
mov byte [ebp - 0x134], al
movzx eax, byte [0x101574b5]
xor al, 0xfc
mov byte [ebp - 0x133], al
movzx eax, byte [0x101574a0]
xor al, 0xfc
mov byte [ebp - 0x132], al
movzx eax, byte [0x101574a1]
xor al, 0xcf
mov byte [ebp - 0x131], al
movzx eax, byte [0x101574a2]
xor al, 0xab
mov byte [ebp - 0x130], al
movzx eax, byte [0x101574a3]
xor al, 0xfc
mov byte [ebp - 0x12f], al
movzx eax, byte [0x101574a4]
xor al, 0xcf
mov byte [ebp - 0x12e], al
movzx eax, byte [0x101574a5]
xor al, 0xab
mov byte [ebp - 0x12d], al
movzx eax, byte [0x101574a6]
xor al, 0xfc
mov byte [ebp - 0x12c], al
movzx eax, byte [0x101574a7]
xor al, 0xcf
mov byte [ebp - 0x12b], al
movzx eax, byte [0x101574a8]
xor al, 0xab
mov byte [ebp - 0x12a], al
movzx eax, byte [0x101574a9]
xor al, 0xfc
mov byte [ebp - 0x129], al
call esi
mov dword [ebp - 0x11e], eax
movzx eax, byte [0xe61f68]
dec al
mov byte [ebp - 0x11a], al
movzx eax, byte [0xe61f69]
sub al, 2
mov byte [ebp - 0x119], al
movzx eax, byte [0xe61f6a]
sub al, 3
mov byte [ebp - 0x118], al
movzx eax, byte [0xe61f6b]
sub al, 4
mov byte [ebp - 0x117], al
movzx eax, byte [0xe61f6c]
sub al, 5
mov byte [ebp - 0x116], al
mov eax, 0xe61f70
movups xmm0, xmmword [eax]
mov edx, 0x3b
lea ecx, [ebp - 0x140]
movups xmmword [ebp - 0x115], xmm0
call fcn.1006a940
jmp 0x1006aec3
call fcn.1006af60
call esi
mov dword [0x10157474], eax
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1007c089
mov esp, ebp
pop ebp
ret