Function at 0x1006df3f
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x40
mov eax, dword [0x100a69a0]
xor eax, ebp
mov dword [ebp - 4], eax
xor eax, eax
push ebx
mov ebx, dword [0x2fb6ac4]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x38], eax
cmp ebx, eax
je 0x1006e579
push esi
push edi
call fcn.10047fb1
or dword [0x10342a34], 0xffffffff
mov edi, dword [ebx + 0x1d20]
push 0xd70444
push edi
call fcn.1000631c
mov esi, eax
xor edx, edx
pop ecx
pop ecx
cmp esi, edx
je 0x1006e01a
movzx ecx, word [esi + 0x14]
mov edi, dword [esi + 0x5f4]
mov eax, dword [esi + 0x610]
mov dword [ebp - 0x38], ecx
mov ecx, dword [esi + 0x3b0]
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x34], eax
cmp ecx, 0x270f
jg 0x1006dfcc
push 0xffff
call fcn.1006dba0
jmp 0x1006e576
cmp edi, edx
jne 0x1006dfee
cmp dword [0x2f91a04], 0xa7f9
jne 0x1006dfee
cmp eax, 0xee6b280
jle 0x1006dfee
push edx
call fcn.1005f8c4
jmp 0x1006e576
fild dword [ebp - 0x2c]
fidiv dword [ebp - 0x34]
fcomp qword [0x1009c060]
fnstsw ax
test ah, 5
jp 0x1006e057
cmp ecx, 0x2af9
jl 0x1006e011
cmp ecx, 0x2b35
jle 0x1006e057
push esi
call fcn.1005cbc8
pop ecx
jmp 0x1006e057
cmp dword [0x103b64b8], edx
je 0x1006e0e6
cmp byte [0x10342a8e], 1
jne 0x1006e0e6
cmp dword [0x103b7db4], edx
jne 0x1006e0e6
push 0xd730a0
push edi
call fcn.1000631c
pop ecx
pop ecx
test eax, eax
jne 0x1006e577
mov edi, dword [ebp - 0x2c]
cmp dword [0x103a81f4], 1
jne 0x1006e577
test esi, esi
je 0x1006e0c7
fld dword [0x10342918]
sub esp, 0x10
fstp dword [esp + 0xc]
fld dword [0x10342914]
fstp dword [esp + 8]
fld dword [ebx + 0x1f68]
fstp dword [esp + 4]
fld dword [ebx + 0x1f60]
fstp dword [esp]
call fcn.10006f97
add esp, 0x10
call fcn.10083f90
cmp eax, dword [0x103a82bc]
jge 0x1006e0ed
cmp dword [0x103a97ac], 1
mov byte [0x10302857], 1
jne 0x1006e0f7
cmp edi, dword [0x103d2374]
jge 0x1006e0f7
cmp edi, dword [0x103a97b0]
jge 0x1006e0f7
call fcn.1003c2aa
cmp dword [0x103a81fc], 1
mov byte [0x10302857], 0
jne 0x1006e0ed
call fcn.1006de1e
jmp 0x1006e577
mov edi, edx
jmp 0x1006e057
call fcn.1005fdbc
jmp 0x1006e577
cmp dword [0x103a81f4], 1
jne 0x1006e27f
cmp dword [0x103a81f8], 1
jne 0x1006e27f
fld dword [esi + 0x1074]
call fcn.10083f90
fld dword [esi + 0x107c]
mov dword [ebp - 0x28], eax
call fcn.10083f90
mov esi, dword [esi + 0x10a4]
fld dword [esi + 0x280]
mov dword [ebp - 0x30], eax
call fcn.10083f90
fld dword [esi + 0x288]
mov dword [ebp - 0x3c], eax
call fcn.10083f90
fld dword [0x10342918]
sub esp, 0x10
fstp dword [esp + 0xc]
mov dword [ebp - 0x40], eax
fld dword [0x10342914]
fstp dword [esp + 8]
fld dword [ebx + 0x1f68]
fstp dword [esp + 4]
fld dword [ebx + 0x1f60]
fstp dword [esp]
call fcn.10006f97
fcomp dword [0x1009aa34]
add esp, 0x10
fnstsw ax
test ah, 1
jne 0x1006e202
mov eax, dword [0x103be1c0]
and dword [0x10112804], 0
and dword [0x101127fc], 0
push fcn.10059763
push 0x1f4
add eax, 0x4d
push eax
push dword [0x100e04bc]
call dword [sym.imp.USER32.dll_SetTimer]
fld dword [0x10342918]
sub esp, 0xc
fstp dword [esp + 8]
fldz
fstp dword [esp + 4]
fld dword [0x10342914]
fstp dword [esp]
call fcn.1003823d
push 0xffff
call fcn.1006dba0
push 0x1009c048
mov dword [0x10112374], 1
call fcn.10006e54
add esp, 0x14
jmp 0x1006e577
fld dword [ebx + 0x1f68]
sub esp, 0x10
fstp dword [esp + 0xc]
fld dword [ebx + 0x1f60]
fstp dword [esp + 8]
fild dword [ebp - 0x30]
fstp dword [esp + 4]
fild dword [ebp - 0x28]
fstp dword [esp]
call fcn.10006f97
fild dword [0x10342938]
add esp, 0x10
fcompp
fnstsw ax
test ah, 5
jp 0x1006e27f
fld dword [ebx + 0x1f68]
sub esp, 0x10
fstp dword [esp + 0xc]
fld dword [ebx + 0x1f60]
fstp dword [esp + 8]
fild dword [ebp - 0x40]
fstp dword [esp + 4]
fild dword [ebp - 0x3c]
fstp dword [esp]
call fcn.10006f97
fild dword [0x10342938]
add esp, 0x10
fcompp
fnstsw ax
test ah, 5
jp 0x1006e27f
push 0
jmp 0x1006dfe4
cmp dword [0x103a99b8], 1
jne 0x1006e31a
xor esi, esi
lea eax, [ebp - 0x24]
push eax
push esi
call fcn.100060a1
lea eax, [ebp - 0x24]
push 0x1009ae6c
push eax
call sub.MSVCR100.dll_strcmp
add esp, 0x10
test eax, eax
je 0x1006e2c9
lea eax, [ebp - 0x24]
push 0x1009ae60
push eax
call sub.MSVCR100.dll_strcmp
pop ecx
pop ecx
test eax, eax
je 0x1006e2c9
inc esi
cmp esi, 0x14
jl 0x1006e28e
jmp 0x1006e31a
cmp dword [ebp - 0xc], 0
je 0x1006e2e4
cmp dword [ebp - 0xc], 0x1770
jbe 0x1006e313
mov byte [0x10302857], 0
jmp 0x1006e577
fild dword [ebp - 0x2c]
fidiv dword [ebp - 0x34]
fild dword [0x103a99bc]
fdiv qword [0x10090030]
fcompp
fnstsw ax
test ah, 0x41
jp 0x1006e313
push 0xb
push esi
call fcn.1005c63e
mov byte [0x10302857], 0
jmp 0x1006e575
mov byte [0x10302857], 1
cmp dword [0x103a856c], 1
jne 0x1006e342
cmp byte [0x10342a71], 0
jne 0x1006e342
cmp dword [0x103a990c], 0
jg 0x1006e342
push 2
call fcn.1005f8c4
pop ecx
jmp 0x1006e436
cmp dword [0x103a9910], 1
jne 0x1006e436
and dword [ebp - 0x30], 0
and dword [ebp - 0x28], 0
mov ecx, 0x103b1184
mov edi, 0x270f
call fcn.10001036
test eax, eax
jle 0x1006e3fb
mov esi, dword [ebp - 0x28]
mov eax, dword [0x103b1924]
mov eax, dword [eax + esi*4]
mov ecx, dword [ebp - 0x38]
cmp dword [eax], ecx
je 0x1006e3f6
mov eax, dword [0x103b1184]
mov eax, dword [eax + esi*4]
cmp dword [eax], 0x2c
jne 0x1006e3de
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [0x103b231c]
mov ecx, dword [ecx + esi*4]
sub eax, dword [ecx]
cmp eax, 0x1388
ja 0x1006e3de
mov eax, dword [0x103b1924]
mov eax, dword [eax + esi*4]
push edi
push dword [eax]
call fcn.1003d912
mov esi, eax
pop ecx
pop ecx
test esi, esi
jle 0x1006e3de
push 0xd70444
push esi
call fcn.1000631c
pop ecx
pop ecx
test eax, eax
je 0x1006e3de
fld dword [eax + 0x35c]
call fcn.10083f90
mov edi, eax
mov dword [ebp - 0x30], esi
inc dword [ebp - 0x28]
mov ecx, 0x103b1184
call fcn.10001036
cmp dword [ebp - 0x28], eax
jl 0x1006e36e
jmp 0x1006e3fb
mov edi, 0x270f
cmp edi, dword [0x10342938]
jg 0x1006e436
push dword [ebp - 0x30]
mov esi, 0x10111d48
push 0x1009aeb4
push esi
call dword [sym.imp.MSVCR100.dll_sprintf]
push esi
call fcn.10006e54
push dword [ebp - 0x30]
call fcn.1006dba0
mov eax, dword [0x103a99c0]
dec eax
push 0
push eax
call fcn.1005c63e
add esp, 0x1c
mov eax, dword [ebx + 0x2a50]
cmp eax, 8
je 0x1006e454
cmp eax, 9
je 0x1006e454
cmp eax, 0xb
je 0x1006e454
cmp eax, 0xd
jne 0x1006e557
and dword [ebp - 0x28], 0
mov ecx, 0x103bb574
call fcn.10001036
test eax, eax
jle 0x1006e557
xor esi, esi
lea eax, [ebp - 0x24]
push eax
push esi
call fcn.100060a1
mov eax, dword [0x103bb574]
mov ecx, dword [ebp - 0x28]
push dword [eax + ecx*4]
lea eax, [ebp - 0x24]
push eax
call sub.MSVCR100.dll_strcmp
add esp, 0x10
test eax, eax
jne 0x1006e537
xor ebx, ebx
cmp dword [ebp - 0xc], ebx
jne 0x1006e537
lea eax, [ebp - 0x24]
push 0x1009aea4
push eax
call sub.MSVCR100.dll_strcmp
pop ecx
pop ecx
test eax, eax
jne 0x1006e50a
mov edi, 0x103b1184
mov ecx, edi
call fcn.10001036
test eax, eax
jle 0x1006e537
mov eax, dword [0x103b1924]
mov eax, dword [eax + ebx*4]
mov ecx, dword [ebp - 0x38]
cmp dword [eax], ecx
jne 0x1006e4fc
mov eax, dword [0x103b1184]
mov eax, dword [eax + ebx*4]
cmp dword [eax], 0x2c
jne 0x1006e4fc
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [0x103b231c]
mov ecx, dword [ecx + ebx*4]
sub eax, dword [ecx]
cmp eax, 0x1388
jbe 0x1006e586
mov ecx, edi
inc ebx
call fcn.10001036
cmp ebx, eax
jl 0x1006e4c4
jmp 0x1006e537
lea eax, [ebp - 0x24]
push 0x1009aeac
push eax
call sub.MSVCR100.dll_strcmp
pop ecx
pop ecx
test eax, eax
jne 0x1006e586
fild dword [ebp - 0x2c]
fidiv dword [ebp - 0x34]
fstp dword [ebp - 0x3c]
fld dword [ebp - 0x3c]
fcomp qword [str.333333]
fnstsw ax
test ah, 1
je 0x1006e586
inc esi
cmp esi, 0x14
jl 0x1006e46c
inc dword [ebp - 0x28]
mov ecx, 0x103bb574
call fcn.10001036
cmp dword [ebp - 0x28], eax
jl 0x1006e46a
call fcn.1005ca86
cmp al, 1
je 0x1006e577
mov eax, dword [0x103a99c0]
dec eax
push 0
push eax
call fcn.1005c63e
or dword [0x100a6388], 0xffffffff
pop ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
pop ebx
call fcn.10083e24
leave
ret
push 0xb
push esi
call fcn.1005c63e
mov dword [0x100a6388], esi
jmp 0x1006e575