Function at 0x1006c3c0
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xd8
mov eax, dword [0x100ae8c8]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
mov ebx, dword [sym.imp.MSVCR100.dll_sprintf]
push esi
mov esi, dword [eax + 0xb4]
push edi
mov edi, dword [eax]
mov eax, dword [eax + 0x48]
mov dword [ebp - 0xc4], edi
mov dword [ebp - 0xc0], esi
mov dword [ebp - 0xd8], eax
test esi, esi
jle 0x1006cc7e
mov ecx, esi
imul ecx, ecx, 0x134
lea eax, [ecx + eax - 0x134]
mov dword [ebp - 0xb4], eax
mov eax, dword [eax + 0x128]
mov dword [ebp - 0xd4], eax
test eax, eax
jne 0x1006c43b
push esi
push edi
call fcn.100467f0
add esp, 8
cmp al, 1
jne 0x1006cc7e
cmp edi, dword [0x10152728]
jne 0x1006c47f
movzx edx, byte [0x1015272c]
dec esi
cmp edx, esi
jne 0x1006c47f
push 0x10152754
call fcn.10046750
add esp, 4
cmp eax, dword [0x10152774]
jge 0x1006c47f
pop edi
pop esi
mov dword [0x101b8d18], 0
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10086738
mov esp, ebp
pop ebp
ret
xor eax, eax
mov dword [ebp - 0xc8], eax
mov dword [0x10152774], eax
mov dword [ebp - 0xb8], eax
cmp dword [0x101519f8], eax
jle 0x1006c6a7
mov dword [ebp - 0xd0], 0x1014d010
jmp 0x1006c4b0
mov eax, dword [ebp - 0xc4]
mov ecx, dword [ebp - 0xb8]
cmp dword [ecx*4 + 0x10148628], eax
jne 0x1006c67a
mov edx, ecx
movzx eax, byte [edx + 0x10148d08]
mov ecx, dword [ebp - 0xc0]
dec ecx
cmp eax, ecx
jne 0x1006c67a
mov edx, dword [ebp - 0xd0]
push edx
mov dword [ebp - 0xc8], 1
call fcn.10046750
mov esi, dword [ebp - 0xb8]
add esp, 4
cmp eax, dword [esi*4 + 0x101503a0]
jl 0x1006c762
cmp dword [0x1019d794], 0
je 0x1006c67a
push 0x32
xor edi, edi
lea eax, [ebp - 0x9c]
push edi
push eax
call sub.MSVCR100.dll_memset
mov ecx, dword [ebp - 0xc0]
mov edx, dword [ebp - 0xc4]
push 0x10152754
push ecx
push edx
lea eax, [ebp - 0x9c]
push str._d__d__s
push eax
call ebx
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
add esp, 0x20
call esi
sub eax, dword [0x101b8d14]
cmp eax, 0x7530
jb 0x1006c57c
lea ecx, [ebp - 0x9c]
push ecx
push 2
call fcn.10039d10
add esp, 8
call esi
mov dword [0x101b8d14], eax
mov dword [ebp - 0xcc], 0x2f9a2b0
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0xbc], edi
mov esi, dword [eax]
test esi, esi
je 0x1006c720
cmp byte [esi + 0x330], 0
je 0x1006c720
push 0x64
lea edx, [ebp - 0x68]
push 0
push edx
inc edi
call sub.MSVCR100.dll_memset
lea eax, [ebp - 0x9c]
push eax
add esi, 0x338
push esi
lea ecx, [ebp - 0x68]
push 0x100a1228
push ecx
call ebx
add esp, 0x1c
mov ecx, 0x101a21f8
xor esi, esi
call fcn.10001240
test eax, eax
jle 0x1006c62c
mov edx, dword [0x101a21f8]
mov eax, dword [edx + esi*4]
lea ecx, [ebp - 0x68]
nop
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006c610
test dl, dl
je 0x1006c60c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006c610
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006c5f0
xor eax, eax
jmp 0x1006c615
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1006c71a
mov ecx, 0x101a21f8
inc esi
call fcn.10001240
cmp esi, eax
jl 0x1006c5e3
mov dword [ebp - 0xbc], 1
test edi, edi
je 0x1006c67a
cmp dword [ebp - 0xbc], 0
je 0x1006c67a
cmp dword [0x101b8d18], 0
je 0x1006c739
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [0x1019d798]
sub eax, dword [0x101b8d18]
imul ecx, ecx, 0xea60
cmp eax, ecx
jb 0x1006ceaf
mov dword [0x101b8d18], 0
mov eax, dword [ebp - 0xb8]
add dword [ebp - 0xd0], 0x1e
inc eax
mov dword [ebp - 0xb8], eax
cmp eax, dword [0x101519f8]
jl 0x1006c4b0
cmp dword [ebp - 0xc8], 0
jne 0x1006c8c0
mov edx, dword [ebp - 0xb4]
mov ecx, dword [edx + 0x12c]
sub ecx, dword [ebp - 0xd4]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov esi, edx
shr esi, 0x1f
add esi, edx
xor edi, edi
test esi, esi
jle 0x1006c8c0
mov ebx, dword [ebp - 0xd4]
lea esp, [esp]
mov ecx, dword [ebx]
lea eax, [ebp - 0x68]
push eax
push ecx
call fcn.1004afe0
mov edx, dword [ebx + 8]
lea eax, [ebp - 0x68]
push eax
mov dword [ebp - 0xbc], edx
call fcn.10046750
add esp, 0xc
cmp eax, dword [ebp - 0xbc]
jl 0x1006c80d
inc edi
add ebx, 0x1c
cmp edi, esi
jl 0x1006c6e0
jmp 0x1006c8ba
mov eax, dword [ebp - 0xcc]
add eax, 4
mov dword [ebp - 0xcc], eax
cmp eax, 0x2f9a2cc
jl 0x1006c592
jmp 0x1006c636
push 0x100a1218
call fcn.10008080
add esp, 4
call dword [sym.imp.KERNEL32.dll_GetTickCount]
pop edi
pop esi
mov dword [0x101b8d18], eax
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10086738
mov esp, ebp
pop ebp
ret
cmp byte [esi + 0x10151840], 1
mov edx, dword [esi*4 + 0x10148628]
mov dword [0x10152728], edx
jne 0x1006c78e
fild dword [esi*4 + 0x10150a80]
fstp dword [0x10152748]
fild dword [esi*4 + 0x10151160]
jmp 0x1006c7a2
fild dword [esi*4 + 0x1014bb70]
fstp dword [0x10152748]
fild dword [esi*4 + 0x1014c250]
mov eax, dword [esi*4 + 0x1014c930]
fstp dword [0x1015274c]
mov cl, byte [esi + 0x10148d08]
mov edx, esi
imul edx, edx, 0x1a
mov dword [0x10152750], eax
lea eax, [edx + 0x10148ec0]
mov edx, 0x1015272d
mov byte [0x1015272c], cl
sub edx, eax
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x1006c7d2
mov eax, esi
shl eax, 4
sub eax, esi
lea eax, [eax*2 + 0x1014d010]
mov edx, 0x10152754
sub edx, eax
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x1006c7f1
mov ecx, dword [esi*4 + 0x101503a0]
mov dword [0x10152774], ecx
jmp 0x1006c8c0
mov ecx, dword [ebp - 0xc4]
mov eax, dword [ebp - 0xd4]
lea edx, [edi*8]
sub edx, edi
cmp dword [0x10152720], 0
lea eax, [eax + edx*4]
mov dword [0x10152728], ecx
mov ecx, dword [eax + 0x10]
mov dword [0x10152750], ecx
jle 0x1006c880
mov ecx, dword [eax + 0x18]
mov edx, dword [eax + 0x14]
mov eax, dword [0x10151dc0]
imul edx, eax
imul eax, ecx
add edx, dword [0x10151b40]
mov ecx, dword [0x10151c80]
mov dword [ebp - 0xb4], edx
sub ecx, eax
fild dword [ebp - 0xb4]
mov dword [ebp - 0xb4], ecx
fstp dword [0x10152748]
fild dword [ebp - 0xb4]
fstp dword [0x1015274c]
mov dl, byte [ebp - 0xc0]
dec dl
mov byte [0x1015272c], dl
mov byte [0x1015272d], 0
xor eax, eax
jmp 0x1006c8a0
mov cl, byte [ebp + eax - 0x68]
mov byte [eax + 0x10152754], cl
inc eax
test cl, cl
jne 0x1006c8a0
mov eax, dword [ebp - 0xbc]
mov dword [0x10152774], eax
mov ebx, dword [sym.imp.MSVCR100.dll_sprintf]
xor edi, edi
cmp dword [0x10152774], edi
jle 0x1006cc7e
push 0x1f4
call sub.mfc100.dll_Ordinal_265
push 0x34d18e8
push 0x1011c4d0
mov esi, eax
push str._s_s.txt
push esi
mov dword [ebp - 0xb4], esi
call ebx
mov ebx, 1
add esp, 0x14
cmp dword [ebp - 0xc8], ebx
jne 0x1006c953
cmp dword [0x10152750], edi
jne 0x1006c953
push esi
call fcn.10055f00
fld dword [0x10191920]
fst dword [0x1012d2a8]
push ebx
fstp dword [0x1012d2b0]
push 0x100a11f0
fld dword [0x10191924]
fst dword [0x1012d2ac]
fstp dword [0x1012d2b4]
call fcn.1006a960
add esp, 0xc
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10086738
mov esp, ebp
pop ebp
ret
push 0x100946b8
push esi
call dword [sym.imp.MSVCR100.dll_fopen]
add esp, 8
test eax, eax
jne 0x1006c971
mov ecx, dword [0x1011d1bc]
call fcn.1005be90
mov esi, dword [sym.imp.USER32.dll_IsWindowVisible]
cmp dword [0x10191930], ebx
jne 0x1006c9a7
mov ecx, dword [0x101917e0]
push ecx
mov dword [0x10191930], edi
call esi
cmp eax, ebx
jne 0x1006c99d
push edi
mov ecx, 0x101917c0
call sub.mfc100.dll_Ordinal_13219
mov ecx, 0x101917c0
call fcn.1000b840
cmp dword [0x10191854], edi
jne 0x1006c9d7
mov edx, dword [0x101917e0]
push edx
mov dword [0x10191854], ebx
call esi
cmp eax, ebx
jne 0x1006c9cd
push edi
mov ecx, 0x101917c0
call sub.mfc100.dll_Ordinal_13219
mov ecx, 0x101917c0
call fcn.1000ba20
cmp dword [0x1019185c], ebx
jne 0x1006ca06
mov eax, dword [0x101917e0]
push eax
mov dword [0x1019185c], edi
call esi
cmp eax, ebx
jne 0x1006c9fc
push edi
mov ecx, 0x101917c0
call sub.mfc100.dll_Ordinal_13219
mov ecx, 0x101917c0
call fcn.1000ba20
cmp dword [0x1019dd80], ebx
jne 0x1006ca4a
mov ecx, dword [0x101917e0]
push ecx
mov dword [0x10191bc0], ebx
mov dword [0x10191858], ebx
call esi
cmp eax, ebx
jne 0x1006ca32
push edi
mov ecx, 0x101917c0
call sub.mfc100.dll_Ordinal_13219
mov ecx, 0x101917c0
call fcn.1000ba20
mov edx, dword [0x1019dd84]
mov dword [0x1019191c], edx
jmp 0x1006ca54
mov dword [0x1019191c], 0xc8
push 0x10092e4c
mov ecx, 0x10194014
call sub.mfc100.dll_Ordinal_12868
fld dword [0x10152748]
mov eax, dword [0x101917e0]
fst dword [0x1012d2a8]
fstp dword [0x1012d2b0]
push eax
fld dword [0x1015274c]
mov dword [0x1019b7a8], edi
fst dword [0x1012d2ac]
mov dword [0x1019b79c], edi
fstp dword [0x1012d2b4]
mov dword [0x1019b7a0], edi
mov dword [0x1019b7a4], edi
mov dword [0x1019b7b0], edi
mov dword [0x10191bc4], 3
call esi
cmp eax, ebx
jne 0x1006cac6
push edi
mov ecx, 0x101917c0
call sub.mfc100.dll_Ordinal_13219
mov eax, 0x1015272d
lea edx, [eax + 1]
mov edi, edi
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x1006cad0
sub eax, edx
jne 0x1006caf8
cmp dword [0x10191868], ebx
jne 0x1006cbd4
mov ecx, dword [0x101917e0]
mov dword [0x10191868], eax
push ecx
jmp 0x1006cbb3
mov edx, dword [0x10192cd0]
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
push 0
push 0
push 0x1009
push edx
call edi
xor eax, eax
mov cl, byte [eax + 0x1015272d]
mov byte [ebp + eax - 0x68], cl
inc eax
test cl, cl
jne 0x1006cb12
mov ebx, dword [sym.imp.MSVCR100.dll_strtok]
lea eax, [ebp - 0x68]
push 0x1009e9a0
push eax
call ebx
mov esi, eax
add esp, 8
test esi, esi
je 0x1006cb9a
jmp 0x1006cb40
mov ecx, dword [0x10192cd0]
push 0
push 0
push 0x1004
push ecx
call edi
push 0
push 0
push 0
push 0
push esi
push eax
push 1
mov ecx, 0x10192cb0
call sub.mfc100.dll_Ordinal_7211
mov edx, dword [0x10192cd0]
push 1
push 0
push 0
push 0x1004
push edx
call edi
dec eax
push eax
mov ecx, 0x10192cb0
call sub.mfc100.dll_Ordinal_12170
push 0x1009e9a0
push 0
call ebx
mov esi, eax
add esp, 8
test esi, esi
jne 0x1006cb40
cmp dword [0x10191868], 0
jne 0x1006cbd4
mov eax, dword [0x101917e0]
mov dword [0x10191868], 1
push eax
call dword [sym.imp.USER32.dll_IsWindowVisible]
cmp eax, 1
jne 0x1006cbca
push 0
mov ecx, 0x101917c0
call sub.mfc100.dll_Ordinal_13219
mov ecx, 0x101917c0
call fcn.1000ba20
mov ecx, dword [0x10152750]
push ecx
lea edx, [ebp - 0xb0]
push edx
call fcn.10007940
add esp, 8
push eax
mov ecx, 0x10192d2c
call sub.mfc100.dll_Ordinal_12868
call fcn.1006ef40
mov eax, dword [0x10152750]
mov dword [0x1011cd68], 2
mov dword [0x10152788], 0
cmp dword [0x2f91a04], eax
je 0x1006cc4f
push eax
lea eax, [ebp - 0xb0]
push eax
call fcn.10007940
push eax
mov eax, dword [0x10152788]
lea ecx, [eax + eax*4]
shl ecx, 4
add ecx, 0x1015278c
push 0x10097628
push ecx
call dword [sym.imp.MSVCR100.dll_sprintf]
add esp, 0x14
inc dword [0x10152788]
mov dword [0x101663f4], 1
call fcn.10060d20
mov edx, dword [ebp - 0xb4]
push edx
call sub.mfc100.dll_Ordinal_1296
add esp, 4
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10086738
mov esp, ebp
pop ebp
ret
call fcn.1006ef40
mov eax, dword [ebp - 0xc0]
mov edx, dword [0x10148620]
imul eax, eax, 0x134
add eax, dword [ebp - 0xd8]
xor ecx, ecx
mov dword [0x1011cd68], 2
mov dword [0x10152788], ecx
mov edi, dword [eax + 0x11c]
mov eax, dword [eax + 0x10c]
cmp edi, ecx
jne 0x1006ccdb
cmp edx, ecx
jle 0x1006ccdb
movzx esi, word [ecx*2 + 0x10147778]
cmp esi, eax
je 0x1006ccd4
inc ecx
cmp ecx, edx
jl 0x1006ccc1
jmp 0x1006ccdb
mov edi, dword [ecx*4 + 0x10144c80]
xor esi, esi
test edx, edx
jle 0x1006cd10
cmp dword [esi*4 + 0x10144c80], edi
jne 0x1006ccfa
movzx ecx, word [esi*2 + 0x10147778]
cmp ecx, eax
je 0x1006cd75
movzx ecx, word [esi*2 + 0x10147778]
cmp ecx, eax
jne 0x1006cd0b
cmp eax, 0xc
je 0x1006cd75
inc esi
cmp esi, edx
jl 0x1006cce1
push 0x64
lea eax, [ebp - 0x68]
push 0
push eax
call sub.MSVCR100.dll_memset
mov esi, dword [ebp + 0xc]
add esp, 0xc
push 0x64
lea ecx, [ebp - 0x68]
push ecx
push 0
push esi
mov ecx, 0x1019d4a4
call sub.mfc100.dll_Ordinal_5176
push 0
push esi
mov ecx, 0x1019d4a4
call sub.mfc100.dll_Ordinal_12170
lea edx, [ebp - 0x68]
push edx
lea eax, [ebp - 0x9c]
push 0x100a11dc
push eax
call ebx
lea ecx, [ebp - 0x9c]
push ecx
call fcn.10008080
add esp, 0x10
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10086738
mov esp, ebp
pop ebp
ret
mov edx, dword [esi*4 + 0x10144c80]
push edx
lea eax, [ebp - 0x68]
push eax
call fcn.10007940
push eax
mov eax, dword [0x10152788]
lea ecx, [eax + eax*4]
shl ecx, 4
add ecx, 0x1015278c
push 0x10097628
push ecx
call ebx
mov eax, dword [0x10152788]
mov edx, dword [esi*4 + 0x1014813c]
mov ecx, dword [esi*4 + 0x10147d54]
push edx
mov edx, dword [esi*4 + 0x1014796c]
mov edi, 1
add eax, edi
mov dword [0x10152788], eax
push ecx
lea eax, [eax + eax*4]
push edx
shl eax, 4
add eax, 0x1015278c
push 0x100a0020
push eax
call ebx
mov eax, dword [0x10152788]
add eax, edi
mov dword [0x10152788], eax
lea ecx, [esi + esi*4]
lea eax, [eax + eax*4]
lea edx, [ecx*8 + 0x10145068]
push edx
shl eax, 4
add eax, 0x1015278c
push 0x1009767c
push eax
call ebx
mov eax, dword [0x10152788]
mov ecx, dword [0x1009bafc]
mov edx, dword [0x1009bb00]
add eax, edi
mov dword [0x10152788], eax
lea eax, [eax + eax*4]
shl eax, 4
add eax, 0x1015278c
mov dword [eax], ecx
mov cl, byte [0x1009bb04]
mov dword [eax + 4], edx
mov byte [eax + 8], cl
mov eax, dword [ebp - 0xc4]
add dword [0x10152788], edi
lea edx, [ebp - 0x68]
push edx
push eax
call fcn.100079a0
mov eax, dword [0x10152788]
lea ecx, [ebp - 0x68]
lea edx, [eax + eax*4]
push ecx
shl edx, 4
add edx, 0x1015278c
push 0x100a11cc
push edx
call ebx
mov eax, dword [0x10152788]
mov ecx, dword [0x10097640]
mov edx, dword [0x10097644]
add eax, edi
mov dword [0x10152788], eax
lea eax, [eax + eax*4]
shl eax, 4
mov dword [eax + 0x1015278c], ecx
mov dword [eax + 0x10152790], edx
add esp, 0x48
add dword [0x10152788], edi
mov dword [0x101663f4], edi
mov byte [0x1012d413], 1
call fcn.10060d20
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.10086738
mov esp, ebp
pop ebp
ret