Function at 0x10006ba0
Capabilities:
Check for time delay via gettickcount
Get graphical window text

Disassembly:
sub esp, 0x548
mov eax, dword [0x1001842c]
xor eax, esp
mov dword [esp + 0x544], eax
cmp byte [0x1001a4f4], 0
push ebx
push esi
push edi
je 0x10006eb4
push ebp
mov ebp, dword [sym.imp.KERNEL32.dll_GetTickCount]
call ebp
mov ebx, dword [sym.imp.KERNEL32.dll_Sleep]
push 0xfa
mov dword [0x1001a4e8], eax
call ebx
mov eax, dword [0x1001a6c0]
cdq
sub eax, edx
mov esi, eax
sar esi, 1
add esi, 5
call ebp
mov edi, eax
mov eax, esi
sub eax, dword [0x1001a4e8]
push 1
push 3
lea ecx, [esp + 0x344]
add edi, eax
call fcn.10007ba0
push edi
lea ecx, [esp + 0x340]
call fcn.10007da0
mov edi, dword [0x1001a4f0]
lea ecx, [esp + 0x33c]
call fcn.10007c10
movzx ecx, al
push ecx
lea edx, [esp + 0x340]
push edx
mov ecx, edi
call fcn.10006110
push 0xfa
call ebx
push 2
push 3
lea ecx, [esp + 0x44c]
call fcn.10007ba0
call ebp
mov edi, eax
mov eax, esi
sub eax, dword [0x1001a4e8]
lea ecx, [esp + 0x444]
add edi, eax
push edi
call fcn.10007da0
mov ebx, dword [0x1001a4f0]
lea ecx, [esp + 0x444]
call fcn.10007c10
movzx ecx, al
push ecx
lea edx, [esp + 0x448]
push edx
mov ecx, ebx
call fcn.10006110
mov dword [esp + 0x10], 0
lea ecx, [ecx]
mov ecx, dword [0x1001a4f0]
mov eax, dword [ecx]
mov edx, dword [eax + 0x1c]
call edx
test al, al
jne 0x10006cd7
push 0
push 1
call fcn.10002fe0
test al, al
je 0x10006df9
mov ecx, dword [0x1001a4f0]
mov eax, dword [ecx]
mov edx, dword [eax + 0x1c]
call edx
test al, al
je 0x10006df9
lea ecx, [esp + 0x234]
call fcn.10007b80
lea eax, [esp + 0x14]
push eax
push 0
lea ecx, [esp + 0x23c]
push ecx
mov ecx, dword [0x1001a4f0]
call fcn.10005450
test al, al
je 0x10006df9
mov ecx, dword [esp + 0x234]
mov eax, ecx
and eax, 0xf
cmp eax, 3
jne 0x10006de7
and cl, 0xf0
cmp cl, 0x40
jne 0x10006df9
lea ecx, [esp + 0x234]
call fcn.100080d0
mov ebx, eax
push ebx
push edi
push str.TSYNC_ADJUST:__i___i
call fcn.10003cd0
add esp, 0xc
test ebx, ebx
jle 0x10006d75
mov eax, 0x88888889
imul esi
add edx, esi
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp ebx, eax
jge 0x10006d73
mov eax, 0x88888889
imul ebx
add edx, ebx
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
add esi, ecx
test ebx, ebx
mov eax, 4
je 0x10006d80
mov eax, dword [esp + 0x10]
inc eax
cmp eax, 4
mov dword [esp + 0x10], eax
jge 0x10006e04
lea edx, [esi + 0xa]
push edx
call dword [sym.imp.KERNEL32.dll_Sleep]
call ebp
mov edi, eax
mov eax, esi
sub eax, dword [0x1001a4e8]
lea ecx, [esp + 0x24]
add edi, eax
call fcn.10007b80
mov ecx, dword [esp + 0x24]
and ecx, 0xffffff23
or ecx, 0x23
mov dword [esp + 0x24], ecx
push edi
lea ecx, [esp + 0x28]
call fcn.10007da0
mov ebx, dword [0x1001a4f0]
lea ecx, [esp + 0x24]
call fcn.10007c10
movzx edx, al
push edx
lea eax, [esp + 0x28]
push eax
mov ecx, ebx
call fcn.10006110
jmp 0x10006df9
cmp eax, 9
jne 0x10006df9
lea ecx, [esp + 0x234]
push ecx
call fcn.100058a0
cmp dword [esp + 0x10], 4
jl 0x10006ca0
call fcn.10003640
xor ecx, ecx
test al, al
setne cl
mov edi, esi
shl edi, 4
sub edi, esi
add edi, edi
add edi, edi
mov eax, 0x10624dd3
imul edi
sar edx, 6
mov eax, edx
shr eax, 0x1f
add ecx, edx
push 5
lea ecx, [eax + ecx + 1]
mov eax, dword [0x1001a444]
lea edx, [esp + 0x550]
push edx
push eax
mov dword [0x1001a6d0], ecx
call dword [sym.imp.USER32.dll_GetWindowTextA]
lea ecx, [esp + 0x54c]
push ecx
call dword [sym.imp.MSVCR90.dll_atoi]
add esp, 4
pop ebp
test eax, eax
jle 0x10006e67
mov dword [0x1001a6d0], eax
push 0
push 4
lea ecx, [esp + 0x130]
call fcn.10007ba0
mov edx, dword [0x1001a6d0]
push edx
lea ecx, [esp + 0x12c]
call fcn.10007da0
mov esi, dword [0x1001a4f0]
lea ecx, [esp + 0x128]
call fcn.10007c10
movzx eax, al
push eax
lea ecx, [esp + 0x12c]
push ecx
mov ecx, esi
call fcn.10006110
jmp 0x1000700a
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
lea ebx, [ebx]
mov ecx, dword [0x1001a4f0]
mov edx, dword [ecx]
mov eax, dword [edx + 0x1c]
call eax
test al, al
jne 0x10006eef
push 0
push 1
call fcn.10002fe0
test al, al
je 0x10006ec0
mov ecx, dword [0x1001a4f0]
mov edx, dword [ecx]
mov eax, dword [edx + 0x1c]
call eax
test al, al
je 0x10006ec0
lea ecx, [esp + 0x20]
call fcn.10007b80
lea ecx, [esp + 0x10]
push ecx
mov ecx, dword [0x1001a4f0]
push 0
lea edx, [esp + 0x28]
push edx
call fcn.10005450
test al, al
je 0x10006ec0
mov eax, dword [esp + 0x20]
mov ecx, eax
and ecx, 0xf
cmp ecx, 3
jne 0x10006fdf
shr eax, 4
and eax, 0xf
cmp eax, 1
jne 0x10006f5b
call ebx
lea ecx, [esp + 0x20]
mov dword [0x1001a4e8], eax
call fcn.100080d0
mov esi, eax
call ebx
mov ecx, dword [0x1001a4e8]
sub eax, ecx
sub eax, esi
add ecx, eax
mov dword [0x1001a4e8], ecx
jmp 0x10006ec0
cmp eax, 2
jne 0x10006ec0
lea ecx, [esp + 0x20]
call fcn.100080d0
mov edi, eax
call ebx
mov ecx, dword [0x1001a4e8]
mov esi, eax
sub esi, ecx
sub esi, edi
mov eax, 0x88888889
imul esi
add edx, esi
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
add ecx, eax
push 4
mov dword [0x1001a4e8], ecx
push 3
lea ecx, [esp + 0x130]
call fcn.10007ba0
push esi
lea ecx, [esp + 0x12c]
call fcn.10007da0
mov esi, dword [0x1001a4f0]
lea ecx, [esp + 0x128]
call fcn.10007c10
movzx ecx, al
push ecx
lea edx, [esp + 0x12c]
push edx
mov ecx, esi
call fcn.10006110
jmp 0x10006ec0
cmp ecx, 4
je 0x10006ffc
cmp ecx, 9
jne 0x10006ec0
lea eax, [esp + 0x20]
push eax
call fcn.100058a0
jmp 0x10006ec0
lea ecx, [esp + 0x20]
call fcn.100080d0
mov dword [0x1001a6d0], eax
mov ecx, dword [esp + 0x550]
pop edi
pop esi
pop ebx
xor ecx, esp
mov al, 1
mov dword [0x1001a6cc], 3
call fcn.10012622
add esp, 0x548
ret