Function at 0x10006e30
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x10026a18
mov eax, dword fs:[0]
push eax
sub esp, 0x20
push ebx
push esi
push edi
mov eax, dword [0x1002e080]
xor eax, esp
push eax
lea eax, [esp + 0x30]
mov dword fs:[0], eax
mov esi, ecx
xor edi, edi
mov dword [esp + 0x1c], edi
mov dword [esp + 0x20], edi
mov dword [esp + 0x24], edi
mov dword [esp + 0x38], edi
mov eax, dword [esi + 4]
sub eax, dword [esi]
xor ebx, ebx
sar eax, 2
test eax, eax
je 0x10006f8c
cmp dword [0x10032004], 0
jne 0x10006f88
cmp dword [section.sdcoredl], 0
je 0x10006ea9
push 0x14
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [section.sdcoredl], 0
jne 0x10006e98
mov ecx, dword [esi + 4]
sub ecx, dword [esi]
mov edi, dword [ebp + 8]
lea eax, [ebx + 1]
sar ecx, 2
mov edx, edi
mov dword [esp + 0x14], eax
call fcn.10005ef0
mov dword [esp + 0x10], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
sub ecx, dword [edi + 0xc]
cmp ecx, 0x1f4
jb 0x10006eec
mov ecx, dword [esp + 0x10]
mov dword [edi + 0xc], eax
test ecx, ecx
js 0x10006eec
mov edx, dword [edi + 0x14]
call fcn.10012ba0
mov edx, dword [esi]
mov ecx, dword [edx + ebx*4]
cmp dword [ecx], 3
lea eax, [edx + ebx*4]
jne 0x10006f74
push ecx
push edi
lea edi, [esp + 0x24]
call fcn.10007090
test eax, eax
je 0x10006f74
mov eax, dword [esi]
mov ecx, dword [eax + ebx*4]
mov edx, dword [ebp + 8]
push ecx
push edx
mov ecx, esi
mov eax, edi
call fcn.10007310
mov eax, dword [esi]
mov ecx, dword [eax + ebx*4]
mov dword [ecx], 2
mov edx, dword [esi]
mov eax, dword [edx + ebx*4]
add dword [esi + 0x40], 1
mov ebx, 0
adc dword [esi + 0x44], ebx
mov ecx, dword [eax + 0x18]
add dword [esi + 0x48], ecx
mov edx, dword [eax + 0x1c]
adc dword [esi + 0x4c], edx
mov ecx, dword [eax + 8]
add dword [esi + 0x50], ecx
mov ecx, dword [esi + 0x6c]
mov edx, dword [esi + 0x68]
adc dword [esi + 0x54], ebx
mov edi, dword [eax + 0x10]
mov eax, dword [eax + 0x14]
cmp ecx, eax
ja 0x10006f6a
jb 0x10006f62
cmp edx, edi
jae 0x10006f6a
mov dword [esi + 0x68], ebx
mov dword [esi + 0x6c], ebx
jmp 0x10006f74
sub edx, edi
sbb ecx, eax
mov dword [esi + 0x68], edx
mov dword [esi + 0x6c], ecx
mov edx, dword [esi + 4]
sub edx, dword [esi]
mov ebx, dword [esp + 0x14]
sar edx, 2
cmp ebx, edx
jb 0x10006e82
mov edi, dword [esp + 0x1c]
mov esi, dword [ebp + 8]
fnstcw word [esp + 0x10]
movzx eax, word [esp + 0x10]
fld qword [esi + 0x240]
or eax, 0xc00
mov dword [esp + 0x14], eax
fldcw word [esp + 0x14]
fistp qword [esp + 0x14]
mov ecx, dword [esp + 0x14]
fldcw word [esp + 0x10]
cmp ecx, 1
ja 0x10006fc1
mov ecx, 1
fld qword [esi + 0x238]
fnstcw word [esp + 0x10]
movzx eax, word [esp + 0x10]
or eax, 0xc00
mov dword [esp + 0x14], eax
fldcw word [esp + 0x14]
fistp qword [esp + 0x14]
mov eax, dword [esp + 0x14]
add ecx, eax
mov eax, dword [esi + 8]
fldcw word [esp + 0x10]
cmp eax, ecx
jbe 0x10006ff4
mov ecx, eax
fld qword [esi + 0x230]
mov dword [esi + 8], ecx
fnstcw word [esp + 0x10]
movzx eax, word [esp + 0x10]
or eax, 0xc00
mov dword [esp + 0x14], eax
fldcw word [esp + 0x14]
fistp qword [esp + 0x14]
mov ebx, dword [esp + 0x14]
dec ebx
fldcw word [esp + 0x10]
cmp ecx, ebx
jae 0x10007026
mov ebx, ecx
mov dword [esi + 8], ebx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
sub ecx, dword [esi + 0xc]
cmp ecx, 0x1f4
jb 0x1000704d
mov dword [esi + 0xc], eax
test ebx, ebx
js 0x1000704d
mov edx, dword [esi + 0x14]
mov ecx, ebx
call fcn.10012ba0
mov dword [esp + 0x38], 0xffffffff
test edi, edi
je 0x10007062
push edi
call fcn.10013b8f
add esp, 4
xor eax, eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], eax
mov ecx, dword [esp + 0x30]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4