Function at 0x1006dfb0
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x144
mov eax, dword [0x10149040]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, 0x80f8e0
call eax
cmp dword [0xe609e8], 5
jne 0x1006e38b
cmp dword [0x1015c5e8], 1
jne 0x1006e38b
cmp byte [0x1015c37c], 0
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
jne 0x1006e135
cmp dword [0x1015c5cc], 0
jne 0x1006e00e
xorps xmm0, xmm0
movss dword [ebp - 0x144], xmm0
jmp 0x1006e05f
call esi
sub eax, dword [0x1015c5e4]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x1013df60]
mov eax, dword [0x1015c5cc]
cvtpd2ps xmm1, xmm0
movd xmm0, eax
mulss xmm1, dword [0x1013dcc8]
shr eax, 0x1f
cvtdq2pd xmm0, xmm0
addsd xmm0, qword [eax*8 + 0x1013df60]
cvtpd2ps xmm0, xmm0
divss xmm1, xmm0
movss dword [ebp - 0x144], xmm1
push edi
sub esp, 0x10
mov edi, 0x790b50
mov dword [esp + 0xc], 0x41900000
mov dword [esp + 8], 0x43200000
mov dword [esp + 4], 0x42c80000
mov dword [esp], 0x43700000
push 0x7a65
call edi
movss xmm0, dword [0x1013dcc8]
add esp, 4
minss xmm0, dword [ebp - 0x144]
mov dword [esp + 0xc], 0x41000000
movss dword [esp + 8], xmm0
mov dword [esp + 4], 0x42d20000
mov dword [esp], 0x43750000
push 0x7a66
call edi
mov eax, dword [0x1015c5f8]
add esp, 0x14
pop edi
cmp eax, 3
ja case.default.0x1006e0d3
jmp dword [eax*4 + 0x1006e39c]
push 1
jmp 0x1006e0e8
push 2
jmp 0x1006e0e8
push 3
jmp 0x1006e0e8
push 4
mov ecx, 0x1014aec0
call fcn.10020240
push eax
lea eax, [ebp - 0x104]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
push 3
push 0
push 0xffffffffffffffff
push 0
push 0xa0
push 0x69
lea eax, [ebp - 0x104]
push 0xf0
push eax
mov eax, 0x7d04d0
call eax
add esp, 0x28
call esi
sub eax, dword [0x1015c5e4]
cmp eax, dword [0x1015c5cc]
jbe 0x1006e192
mov dword [0x1015c5e8], 2
mov dword [0x1015c5f8], 0
call esi
mov dword [0x1015c5d0], eax
call esi
mov dword [0x1015c5e4], eax
mov ecx, 0x3e8
xor eax, eax
mov dword [0x1015c5cc], 0
cmp byte [0x10149f56], 1
cmove eax, ecx
mov ecx, 0x8793750
mov dword [0x1015c5ec], eax
mov eax, 0x63a180
call eax
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10080ec9
mov esp, ebp
pop ebp
ret
call esi
sub eax, dword [0x1015c5d0]
cmp eax, dword [0x1015c5ec]
jb 0x1006e38a
mov eax, dword [0x1015c5f8]
sub eax, 0
je 0x1006e37e
sub eax, 1
jne 0x1006e383
mov eax, dword [0x1015c5f0]
test eax, eax
jne 0x1006e383
movzx eax, byte [0x1015c608]
xor al, 0xfc
mov dword [0x1015c5f0], 1
mov byte [ebp - 0x13c], al
movzx eax, byte [0x1015c609]
xor al, 0xcf
mov dword [ebp - 0x140], 0x1f13bc3
mov byte [ebp - 0x13b], al
movzx eax, byte [0x1015c60a]
xor al, 0xab
mov byte [ebp - 0x13a], al
movzx eax, byte [0x1015c60b]
xor al, 0xfc
mov byte [ebp - 0x139], al
movzx eax, byte [0x1015c60c]
xor al, 0xcf
mov byte [ebp - 0x138], al
movzx eax, byte [0x1015c60d]
xor al, 0xab
mov byte [ebp - 0x137], al
movzx eax, byte [0x1015c60e]
xor al, 0xfc
mov byte [ebp - 0x136], al
movzx eax, byte [0x1015c60f]
xor al, 0xcf
mov byte [ebp - 0x135], al
movzx eax, byte [0x1015c610]
xor al, 0xab
mov byte [ebp - 0x134], al
movzx eax, byte [0x1015c611]
xor al, 0xfc
mov byte [ebp - 0x133], al
movzx eax, byte [0x1015c5fc]
xor al, 0xfc
mov byte [ebp - 0x132], al
movzx eax, byte [0x1015c5fd]
xor al, 0xcf
mov byte [ebp - 0x131], al
movzx eax, byte [0x1015c5fe]
xor al, 0xab
mov byte [ebp - 0x130], al
movzx eax, byte [0x1015c5ff]
xor al, 0xfc
mov byte [ebp - 0x12f], al
movzx eax, byte [0x1015c600]
xor al, 0xcf
mov byte [ebp - 0x12e], al
movzx eax, byte [0x1015c601]
xor al, 0xab
mov byte [ebp - 0x12d], al
movzx eax, byte [0x1015c602]
xor al, 0xfc
mov byte [ebp - 0x12c], al
movzx eax, byte [0x1015c603]
xor al, 0xcf
mov byte [ebp - 0x12b], al
movzx eax, byte [0x1015c604]
xor al, 0xab
mov byte [ebp - 0x12a], al
movzx eax, byte [0x1015c605]
xor al, 0xfc
mov byte [ebp - 0x129], al
call esi
mov dword [ebp - 0x11e], eax
movzx eax, byte [0xe61f68]
dec al
mov byte [ebp - 0x11a], al
movzx eax, byte [0xe61f69]
sub al, 2
mov byte [ebp - 0x119], al
movzx eax, byte [0xe61f6a]
sub al, 3
mov byte [ebp - 0x118], al
movzx eax, byte [0xe61f6b]
sub al, 4
mov byte [ebp - 0x117], al
movzx eax, byte [0xe61f6c]
sub al, 5
mov byte [ebp - 0x116], al
mov eax, 0xe61f70
movups xmm0, xmmword [eax]
mov edx, 0x3b
lea ecx, [ebp - 0x140]
movups xmmword [ebp - 0x115], xmm0
call fcn.1006de00
jmp 0x1006e383
call fcn.1006e420
call esi
mov dword [0x1015c5d0], eax
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10080ec9
mov esp, ebp
pop ebp
ret