Function at 0x1006face
Capabilities:
Check for time delay via gettickcount

Disassembly:
push 0xb0
push 0x100a2ef0
call fcn.10083d10
xor edi, edi
cmp dword [0x1011280c], edi
jne 0x1006faf8
push dword [0x10342a38]
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x100706d5
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x98], eax
wait
mov dword [ebp - 4], edi
cmp byte [0x10342a82], 0
jne 0x1006fb46
cmp dword [0x12b5b20], edi
jne 0x1006fb46
push edi
mov eax, 0x1389
push eax
push eax
push dword [0x100e04bc]
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
call esi
push edi
push edi
push 0x2710
mov eax, dword [0x1011280c]
push dword [eax + 0x20]
call esi
wait
jmp 0x100706ce
push edi
push edi
push 0xfb1
push dword [0x100e04bc]
call dword [sym.imp.USER32.dll_SendMessageA]
cmp eax, 0x2710
je 0x1006fb78
push 0x1003574f
push 0xfffffffffffffffc
push dword [0x100e04bc]
call dword [sym.imp.USER32.dll_SetWindowLongA]
mov dword [0x103be1c4], eax
xor esi, esi
mov ebx, 0x103bb52c
mov dword [ebp - 0xa0], esi
mov ecx, ebx
call fcn.100011d9
cmp esi, eax
jge 0x1006fe4f
mov eax, dword [0x103bb52c]
mov eax, dword [eax + esi*4]
mov ecx, dword [ebp - 0x98]
sub ecx, dword [eax]
cmp ecx, 0xbb8
ja 0x1006fe3b
mov eax, dword [0x103bb520]
mov eax, dword [eax + esi*4]
mov eax, dword [eax]
add eax, 2
push eax
call sub.MSVCR100.dll_strlen
pop ecx
test eax, eax
je 0x1006fe35
mov eax, dword [0x103bb520]
mov eax, dword [eax + esi*4]
mov eax, dword [eax]
lea ecx, [eax + 0x15]
push ecx
movzx ecx, byte [eax + 0x28]
push ecx
add eax, 2
push eax
push 0x1009c154
lea eax, [ebp - 0x80]
push eax
call dword [sym.imp.MSVCR100.dll_sprintf]
add esp, 0x14
mov dword [ebp - 0x90], edi
mov ebx, 0x103bb508
mov ecx, ebx
call fcn.100011d9
cmp dword [ebp - 0x90], eax
jge 0x1006fc4d
mov edi, dword [ebp - 0x90]
lea eax, [ebp - 0x80]
push eax
mov eax, dword [0x103bb508]
push dword [eax + edi*4]
call sub.MSVCR100.dll_strcmp
pop ecx
pop ecx
test eax, eax
jne 0x1006fc43
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x101123c0], eax
mov eax, dword [0x103bb514]
mov eax, dword [eax + edi*4]
inc dword [eax]
jmp 0x1006fc75
inc dword [ebp - 0x90]
xor edi, edi
jmp 0x1006fc00
xor eax, eax
cmp eax, edi
jne 0x1006fc75
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x101123c0], eax
lea eax, [ebp - 0x80]
push eax
mov ecx, ebx
call fcn.1000110a
push 1
mov ecx, 0x103bb514
call fcn.10001182
mov ebx, dword [0x36208e4]
cmp dword [0x103afaf8], 1
jne 0x1006fe2e
xor edi, edi
mov dword [ebp - 0x94], edi
mov dword [ebp - 0xa4], edi
cmp edi, 7
jge 0x1006fce5
mov eax, dword [edi*4 + 0x35f6378]
test eax, eax
je 0x1006fd81
cmp byte [eax + 0x330], 0
je 0x1006fd81
mov ecx, dword [0x103bb520]
mov ecx, dword [ecx + edi*4]
mov ecx, dword [ecx]
add ecx, 2
push ecx
add eax, 0x338
push eax
call sub.MSVCR100.dll_strcmp
pop ecx
pop ecx
test eax, eax
jne 0x1006fd81
mov dword [ebp - 0x94], 1
and dword [ebp - 0x8c], 0
mov ecx, 0x103bb4e4
call fcn.100011d9
cmp dword [ebp - 0x8c], eax
jge 0x1006fd31
mov eax, dword [ebp - 0x8c]
mov ecx, dword [0x103bb520]
mov ecx, dword [ecx + eax*4]
mov ecx, dword [ecx]
add ecx, 2
push ecx
mov ecx, dword [0x103bb4e4]
push dword [ecx + eax*4]
call sub.MSVCR100.dll_strcmp
pop ecx
pop ecx
test eax, eax
jne 0x1006fd87
mov dword [ebp - 0x94], 1
and dword [ebp - 0x84], 0
mov edi, 0x103bb4d8
mov ecx, edi
call fcn.100011d9
cmp dword [ebp - 0x84], eax
jge 0x1006fd92
mov eax, dword [ebp - 0x84]
mov ecx, dword [0x103bb520]
mov ecx, dword [ecx + eax*4]
mov ecx, dword [ecx]
add ecx, 2
push ecx
mov ecx, dword [0x103bb4d8]
push dword [ecx + eax*4]
call sub.MSVCR100.dll_strcmp
pop ecx
pop ecx
test eax, eax
je 0x1006fe2e
inc dword [ebp - 0x84]
jmp 0x1006fd3d
inc edi
jmp 0x1006fc90
inc dword [ebp - 0x8c]
jmp 0x1006fcec
cmp dword [ebp - 0x94], 0
jne 0x1006fe2e
cmp dword [0x103b055c], 1
jne 0x1006fdd0
mov eax, dword [ebx + 0x14]
imul eax, eax, 0x1cc
add eax, 0xfbaf2d
push eax
mov eax, dword [0x103bb520]
mov eax, dword [eax + esi*4]
mov eax, dword [eax]
add eax, 0x15
push eax
call sub.MSVCR100.dll_strcmp
pop ecx
pop ecx
test eax, eax
je 0x1006fe4f
cmp dword [0x103afafc], 1
jne 0x1006fdf8
mov eax, dword [ebx + 0x14]
imul eax, eax, 0x1cc
mov ecx, dword [0x103bb520]
mov ecx, dword [ecx + esi*4]
mov ecx, dword [ecx]
mov cl, byte [ecx + 0x27]
cmp cl, byte [eax + 0xfbaf3f]
je 0x1006fe4f
mov eax, dword [0x103bb520]
mov eax, dword [eax + esi*4]
mov eax, dword [eax]
add eax, 2
push eax
push 0
push 0x180
push dword [0x103af8d8]
call dword [sym.imp.USER32.dll_SendMessageA]
mov eax, dword [0x103bb520]
mov eax, dword [eax + esi*4]
mov eax, dword [eax]
add eax, 2
push eax
mov ecx, edi
call fcn.1000110a
mov ecx, 0x103bb52c
jmp 0x1006fe3d
inc esi
jmp 0x1006fb7f
mov ecx, ebx
inc esi
push esi
call fcn.100011dd
push esi
mov ecx, 0x103bb520
call fcn.100011dd
mov edi, dword [ebp - 0x98]
mov eax, edi
sub eax, dword [0x103d27e0]
mov esi, 0xea60
cmp eax, esi
jb 0x1006fe6c
mov dword [0x103d27e0], edi
mov eax, dword [0x10342a50]
cmp eax, 1
je 0x1006fe80
cmp eax, 2
je 0x1006fe80
cmp eax, 3
jne 0x1006fe85
call fcn.1006f58e
xor ebx, ebx
cmp dword [0x36208e4], ebx
je 0x1006fb40
cmp dword [0x12ad060], 1
jne 0x1006fec5
push 0x1008c674
call fcn.10006485
pop ecx
cmp eax, 1
jne 0x1006fec5
cmp dword [0x33ccfd8], ebx
jle 0x1006fec5
push 0x100943e0
call fcn.1003882a
pop ecx
mov dword [0x12ad060], ebx
mov eax, dword [0x36208e4]
cmp dword [0x103ad7a4], 1
jne 0x1006fedf
mov dword [eax + 0x2744], 0x10f
jmp 0x1006fee9
mov dword [eax + 0x2744], 0xf
mov eax, edi
sub eax, dword [0x103d27dc]
cmp eax, esi
jb 0x1006ff00
mov dword [0x103d27dc], edi
call fcn.1004618b
cmp dword [0x103a8394], 1
jne 0x1006ff34
mov eax, edi
sub eax, dword [0x101123d0]
mov ecx, dword [0x103a877c]
imul ecx, ecx, 0x3e8
cmp eax, ecx
jb 0x1006ff34
mov eax, dword [0x10112368]
cmp eax, dword [0x103a8780]
jl 0x1006ff34
mov dword [0x10112368], ebx
mov eax, dword [0x101123dc]
cmp eax, ebx
je 0x1006ff4f
mov ecx, edi
sub ecx, eax
cmp ecx, 0x3e8
jb 0x1006ff4f
mov dword [0x101123dc], ebx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov esi, eax
mov eax, dword [0x103ad7d4]
imul eax, eax, 0xffffd8f0
cdq
sub eax, edx
sar eax, 1
cdq
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0x98], edx
push ebx
push ebx
push ebx
push ebx
lea eax, [ebp - 0x9c]
push eax
push dword [0x103bde98]
call dword [sym.imp.KERNEL32.dll_SetWaitableTimer]
push 0xff
push 0xffffffffffffffff
push ebx
push 0x103bde98
push 1
call dword [sym.imp.USER32.dll_MsgWaitForMultipleObjects]
test eax, eax
je 0x1006ffd6
push 1
push ebx
push ebx
push ebx
lea eax, [ebp - 0xc0]
push eax
call dword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x1006ff8b
lea eax, [ebp - 0xc0]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [ebp - 0xc0]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageA]
jmp 0x1006ffa4
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, esi
cmp eax, dword [0x103ad7d4]
jb 0x1006ff57
push 0x1008c6e0
call fcn.10006485
pop ecx
cmp eax, 1
jne 0x10070081
cmp dword [0x101123b0], 2
jne 0x1007001a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [0x103d230c]
cmp eax, 0xbb8
jae 0x10070077
cmp dword [0x103b2bd0], 1
jne 0x10070081
xor esi, esi
mov dword [ebp - 0x88], ebx
mov ecx, 0x103bb4b4
call fcn.100011d9
cmp dword [ebp - 0x88], eax
jge 0x1007005e
push 0x10111b0c
mov eax, dword [0x103bb4b4]
mov ecx, dword [ebp - 0x88]
push dword [eax + ecx*4]
call sub.MSVCR100.dll_strcmp
pop ecx
pop ecx
test eax, eax
jne 0x1007006b
xor esi, esi
inc esi
cmp dword [0x103b2c80], ebx
jne 0x10070073
cmp esi, 1
jmp 0x10070075
inc dword [ebp - 0x88]
jmp 0x1007002b
cmp esi, ebx
jne 0x10070081
push ebx
push 3
call fcn.1003ae4e
pop ecx
pop ecx
call fcn.1006a6fc
cmp dword [0x103b7488], 1
jne 0x100700d0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x103d27d8], eax
cmp byte [0x10342a83], 1
jne 0x100700d0
mov ecx, eax
sub ecx, dword [0x103d27d4]
cmp ecx, 0xfa
jb 0x100700d0
mov dword [0x103d27d4], eax
mov eax, dword [0x100a6388]
push ebx
cmp eax, ebx
jge 0x100700c8
mov eax, dword [0x103b748c]
dec eax
push eax
call fcn.1005c5f4
pop ecx
pop ecx
mov esi, 0x1f4
cmp dword [0x103acd90], 1
jne 0x100700f8
mov eax, edi
sub eax, dword [0x103d27d0]
cmp eax, esi
jb 0x100700f8
mov dword [0x103d27d0], edi
push 0x28
call fcn.10058aba
pop ecx
mov eax, dword [0x36208e4]
cmp dword [eax + 0x2a58], 5
jne 0x100704cd
cmp byte [0x10342a96], bl
jne 0x100704cd
cmp dword [0x103acd8c], 1
jne 0x100704cd
cmp dword [0x103acda0], 1
jne 0x100704cd
mov eax, edi
sub eax, dword [0x103d27cc]
cmp eax, esi
jb 0x100704cd
mov eax, dword [0x101123b0]
cmp eax, 2
je 0x1007015d
cmp eax, 5
je 0x1007015d
cmp eax, 4
je 0x1007015d
cmp eax, 6
jne 0x10070506
cmp dword [0x103a6df4], 1
jne 0x10070191
cmp dword [0x36208e4], ebx
je 0x10070191
cmp dword [0x33ccfd8], ebx
jle 0x10070191
mov eax, edi
sub eax, dword [0x103d27c8]
cmp eax, dword [0x103429cc]
jb 0x10070191
mov dword [0x103d27c8], edi
call fcn.1006a81f
cmp dword [0x103a6df8], 1
jne 0x100701b5
mov eax, edi
sub eax, dword [0x103d27c4]
cmp eax, dword [0x103429d0]
jb 0x100701b5
mov dword [0x103d27c4], edi
call fcn.100498a3
mov eax, dword [0x10112804]
cmp eax, ebx
jle 0x100701d5
mov ecx, edi
sub ecx, dword [0x10112800]
cmp ecx, eax
jb 0x100701d5
mov dword [0x10112800], edi
call fcn.1006dc1f
mov eax, dword [0x101127f4]
cmp eax, ebx
jle 0x100701f5
mov ecx, edi
sub ecx, dword [0x101127f0]
cmp ecx, eax
jb 0x100701f5
mov dword [0x101127f0], edi
call fcn.1006ba41
mov eax, dword [0x101127ec]
cmp eax, ebx
jle 0x10070215
mov ecx, edi
sub ecx, dword [0x101127e8]
cmp ecx, eax
jb 0x10070215
mov dword [0x101127e8], edi
call fcn.1005ad73
mov eax, dword [0x101127e4]
cmp eax, ebx
jle 0x10070235
mov ecx, edi
sub ecx, dword [0x101127e0]
cmp ecx, eax
jb 0x10070235
mov dword [0x101127e0], edi
call fcn.10048f02
mov eax, dword [0x101127dc]
cmp eax, ebx
jle 0x10070255
mov ecx, edi
sub ecx, dword [0x101127d8]
cmp ecx, eax
jb 0x10070255
mov dword [0x101127d8], edi
call fcn.1003bc3a
mov eax, dword [0x101127d4]
cmp eax, ebx
jle 0x10070275
mov ecx, edi
sub ecx, dword [0x101127d0]
cmp ecx, eax
jb 0x10070275
mov dword [0x101127d0], edi
call fcn.1005c965
mov eax, dword [0x101127cc]
cmp eax, ebx
jle 0x10070295
mov ecx, edi
sub ecx, dword [0x101127c8]
cmp ecx, eax
jb 0x10070295
mov dword [0x101127c8], edi
call fcn.1003beb4
cmp dword [0x101127c4], ebx
jle 0x100702bb
mov eax, dword [0x101123b0]
cmp eax, 2
je 0x100702bb
cmp eax, 5
je 0x100702bb
cmp eax, 4
je 0x100702bb
cmp eax, 6
je 0x100702bb
call fcn.10078d47
cmp dword [0x103a81f4], 1
jne 0x1007030b
cmp dword [0x10112804], ebx
jle 0x1007030b
cmp dword [0x103a8200], 1
jne 0x1007030b
cmp byte [0x10302857], 1
jne 0x1007030b
mov eax, edi
sub eax, dword [0x10112370]
cmp eax, 0xa0
jb 0x1007030b
mov dword [0x10112370], edi
mov eax, dword [0x100a6388]
push ebx
cmp eax, ebx
jge 0x10070303
mov eax, dword [0x103a99c0]
dec eax
push eax
call fcn.1005c5f4
pop ecx
pop ecx
mov eax, dword [0x101127fc]
cmp eax, ebx
jle 0x1007032b
mov ecx, edi
sub ecx, dword [0x101127f8]
cmp ecx, eax
jb 0x1007032b
mov dword [0x101127f8], edi
call fcn.1006ee5f
cmp dword [0x103afb08], 1
jne 0x10070362
cmp byte [0x10342a83], 1
jne 0x10070362
mov eax, edi
sub eax, dword [0x10112370]
cmp eax, 0x190
jb 0x10070362
mov dword [0x10112370], edi
push 0xb
mov eax, dword [0x103afb0c]
dec eax
push eax
call fcn.1005c5f4
pop ecx
pop ecx
cmp dword [0x103aeb70], 1
jne 0x1007038e
cmp dword [0x10342a50], 1
jne 0x1007038e
mov eax, edi
sub eax, dword [0x103d27c0]
cmp eax, 0x3e8
jb 0x1007038e
mov dword [0x103d27c0], edi
call fcn.1003c2ae
cmp dword [0x103b6e9c], 1
jne 0x100703c5
cmp byte [0x10342a8e], 1
jne 0x100703c5
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x103d27d8], eax
mov ecx, eax
sub ecx, dword [0x103d23a4]
cmp ecx, dword [0x100a638c]
jb 0x100703c5
mov dword [0x103d23a4], eax
call fcn.1007c9cb
cmp dword [0x103b8850], 1
jne 0x100703f2
cmp byte [0x10342a8e], 1
jne 0x100703f2
mov eax, edi
sub eax, dword [0x103d27bc]
cmp eax, dword [0x103b8854]
jb 0x100703f2
mov dword [0x103d27bc], edi
call fcn.1007747d
cmp dword [0x103b6fa4], 1
jne 0x1007041e
cmp byte [0x10342a8e], 1
jne 0x1007041e
mov eax, edi
sub eax, dword [0x103d27b8]
cmp eax, 0x12c
jb 0x1007041e
mov dword [0x103d27b8], edi
call fcn.1007cac4
cmp dword [0x103b69a0], 1
jne 0x10070448
cmp byte [0x10342a8e], 1
jne 0x10070448
mov eax, edi
sub eax, dword [0x103d27b4]
cmp eax, 0x64
jb 0x10070448
mov dword [0x103d27b4], edi
call fcn.1007739e
cmp dword [0x103b64b8], ebx
je 0x1007046a
mov eax, edi
sub eax, dword [0x103d27b0]
cmp eax, 0x3e8
jb 0x1007046a
mov dword [0x103d27b0], edi
call fcn.100782af
cmp dword [0x103a82c8], 1
jne 0x10070674
cmp byte [0x10342a7b], 1
jne 0x10070668
cmp dword [0x103d238c], 3
jge 0x10070668
mov eax, edi
sub eax, dword [0x103428e0]
cmp eax, 0x96
jb 0x10070674
mov eax, dword [0x100a6388]
push ebx
cmp eax, ebx
jge 0x100704b4
mov eax, dword [0x103a99c8]
dec eax
push eax
call fcn.1005c5f4
pop ecx
pop ecx
mov dword [0x103428e0], edi
inc dword [0x103d238c]
jmp 0x10070674
cmp dword [0x35ed708], 0xa7f9
jne 0x1007015d
cmp byte [0x10342a96], bl
jne 0x1007015d
cmp dword [0x103acd8c], 1
jne 0x1007015d
mov eax, edi
sub eax, dword [0x103d27cc]
cmp eax, esi
jb 0x1007015d
mov dword [0x103d27cc], edi
push dword [0x103acda4]
call fcn.10059940
pop ecx
mov esi, eax
mov dword [0x103d2374], esi
cmp esi, ebx
je 0x1007015d
cmp dword [0x10342a50], ebx
jne 0x100705c7
cmp dword [0x35ed708], 0xa7f9
jne 0x100705c7
fld dword [esi]
call fcn.10083ba0
mov dword [0x103d2378], eax
fld dword [esi + 8]
call fcn.10083ba0
mov dword [0x103d237c], eax
mov eax, dword [esi + 0x20]
mov dword [0x103d2380], eax
push fcn.10059f3c
push 0x12c
mov eax, dword [0x103be1bc]
add eax, 0x46
push eax
push dword [0x100e04bc]
call dword [sym.imp.USER32.dll_SetTimer]
mov byte [0x10342a96], 1
mov byte [0x10342a87], bl
mov byte [0x10342a88], bl
mov byte [0x10342a89], bl
mov dword [0x101123b0], 4
mov byte [0x10342a74], 1
push ebx
push ebx
push ebx
push ebx
call fcn.10059f3c
push 0x1009a9f8
call fcn.10006dd0
pop ecx
jmp 0x1006fb40
cmp esi, ebx
je 0x1007015d
cmp dword [0x10342a50], 1
jne 0x1007015d
fld dword [esi]
call fcn.10083ba0
mov dword [0x103d2378], eax
fld dword [esi + 8]
call fcn.10083ba0
mov dword [0x103d237c], eax
mov eax, dword [esi + 0x20]
mov dword [0x103d2380], eax
push fcn.10059f3c
push 0x12c
mov eax, dword [0x103be1bc]
add eax, 0x46
push eax
push dword [0x100e04bc]
call dword [sym.imp.USER32.dll_SetTimer]
xor esi, esi
inc esi
cmp dword [0x103a82d0], esi
jne 0x1007062d
mov dword [0x101127d4], ebx
cmp dword [0x103a81f4], esi
jne 0x1007063b
mov dword [0x10112804], ebx
mov eax, dword [0x103be1bc]
add eax, 0x4d
push eax
push dword [0x100e04bc]
call dword [sym.imp.USER32.dll_KillTimer]
mov dword [0x101127fc], ebx
mov byte [0x10342a96], 1
mov dword [0x10112374], esi
jmp 0x1007058b
mov dword [0x103d238c], ebx
mov byte [0x10342a7b], bl
cmp dword [0x103ad7c4], 1
jne 0x1006fb40
mov eax, edi
sub eax, dword [0x103d2394]
cmp eax, 0x2710
jb 0x1006fb40
mov dword [0x103d2394], edi
call fcn.1003bd4c
jmp 0x1006fb40
mov dword [ebp - 4], 0xfffffffe
call fcn.10083d58
ret