Function at 0x1007ad81
Capabilities:
Check for time delay via gettickcount

Disassembly:
push 0x84
push 0x100a42f8
call fcn.100841c0
wait
xor edi, edi
mov dword [ebp - 4], edi
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
cmp dword [0xf397d8], edi
jne 0x1007adc2
call esi
sub eax, dword [0x103d8b04]
cmp eax, 0x7d0
jb 0x1007adc2
call esi
mov dword [0x103d8b04], eax
push 1
call fcn.1003d4fd
pop ecx
cmp dword [0x3592ee8], edi
jne 0x1007add0
wait
jmp 0x1007b70a
mov edi, dword [0x307809c]
mov edx, dword [edi + 0x1d20]
mov ecx, 0xe26ae0
mov eax, edx
call fcn.10006651
mov ebx, eax
mov dword [ebp - 0x84], ebx
cmp dword [0x1035fef4], 0
jle 0x1007ae12
cmp dword [0x103d3a24], 1
jne 0x1007ae12
mov ecx, 0xe23bd4
mov eax, edx
call fcn.10006651
test eax, eax
jne 0x1007adca
cmp dword [0x103d3120], 1
jne 0x1007af62
test ebx, ebx
je 0x1007af62
cmp ebx, edi
je 0x1007af62
mov eax, dword [edi + 0x4d28]
mov cx, word [0x103d8b00]
cmp cx, word [ebx + 0x14]
je 0x1007ae58
call esi
mov dword [0x103d8afc], eax
mov ax, word [ebx + 0x14]
mov word [0x103d8b00], ax
jmp 0x1007af62
test eax, eax
jle 0x1007ae68
mov byte [0x103d8af8], 1
jmp 0x1007af0b
cmp byte [0x103d8af8], 1
jne 0x1007ae82
mov byte [0x103d8af8], 0
call fcn.10038b91
jmp 0x1007af62
cmp dword [0x1035ff38], 1
jne 0x1007ae9e
call esi
mov dword [0x103d8afc], eax
and dword [0x1035ff38], 0
jmp 0x1007af62
call esi
sub eax, dword [0x103d8afc]
cmp eax, 0x1b58
jb 0x1007aee9
push 0xa
lea eax, [ebp - 0x50]
push eax
movzx eax, word [0x103d8b00]
push eax
call dword [sym.imp.MSVCR100.dll__itoa]
push 8
lea eax, [ebp - 0x50]
push eax
call fcn.1003ce54
movzx eax, word [0x103d8b00]
mov byte [eax + 0x1012fd00], 1
push 0xffff
call fcn.1003a32b
add esp, 0x18
jmp 0x1007af62
call esi
sub eax, dword [0x103d8afc]
mov ebx, 0xfa0
cmp eax, ebx
jb 0x1007af62
call esi
sub eax, dword [0x101bfcfc]
cmp eax, ebx
jb 0x1007af14
call fcn.10038b91
call esi
mov dword [0x103d8afc], eax
jmp 0x1007af62
call esi
sub eax, dword [0x103d8af4]
cmp eax, 0x12c
jbe 0x1007af62
call esi
mov dword [0x103d8af4], eax
push ecx
push ecx
fld dword [edi + 0x1f74]
fstp dword [esp + 4]
fld dword [edi + 0x1f6c]
fstp dword [esp]
call fcn.1003a10c
call fcn.10038b91
movzx eax, word [0x103d8b00]
push eax
mov eax, dword [0x103d30fc]
dec eax
push eax
xor ecx, ecx
call fcn.1003a23b
add esp, 0x10
cmp dword [0x103d3038], 1
jne 0x1007b0c2
mov ecx, 0xe26ae0
mov eax, dword [edi + 0x1d20]
call fcn.10006651
xor ebx, ebx
cmp eax, ebx
je 0x1007afe8
cmp eax, edi
je 0x1007afe8
sub esp, 0x10
fld dword [0x1012845c]
fstp dword [esp + 0xc]
fld dword [0x1012fb24]
fstp dword [esp + 8]
fld dword [eax + 0x1f74]
fstp dword [esp + 4]
fld dword [eax + 0x1f6c]
fstp dword [esp]
call fcn.100063eb
add esp, 0x10
fild dword [0x103d3040]
fcompp
fnstsw ax
test ah, 5
jp 0x1007afe8
push 8
push 0x1009d070
call fcn.1003ce54
push 0xffff
call fcn.1003a32b
add esp, 0xc
jmp 0x1007adca
sub esp, 0x10
fld dword [0x1012845c]
fstp dword [esp + 0xc]
fld dword [0x1012fb24]
fstp dword [esp + 8]
fld dword [edi + 0x1f74]
fstp dword [esp + 4]
fld dword [edi + 0x1f6c]
fstp dword [esp]
call fcn.100063eb
add esp, 0x10
fild dword [0x103d3040]
fcompp
fnstsw ax
test ah, 5
jnp 0x1007b071
sub esp, 0x10
fld dword [0x1012845c]
fstp dword [esp + 0xc]
fld dword [0x1012fb24]
fstp dword [esp + 8]
fld dword [edi + 0x1f74]
fstp dword [esp + 4]
fld dword [edi + 0x1f6c]
fstp dword [esp]
call fcn.100063eb
add esp, 0x10
fcomp qword [0x1009ee48]
fnstsw ax
test ah, 0x41
jne 0x1007b0c2
cmp dword [0x103d3118], 1
jne 0x1007b0c2
push fcn.1007ab37
push 0x1f4
mov eax, dword [0x10114474]
add eax, 0x59
push eax
push dword [0x100dfd8c]
call dword [sym.imp.USER32.dll_SetTimer]
mov dword [0x1035ffa0], 1
mov dword [0x10112bc4], ebx
push ebx
push ebx
push ebx
push ebx
call fcn.1007ab37
push 8
push 0x1009d090
call fcn.1003ce54
pop ecx
pop ecx
mov dword [0x1035ff68], ebx
jmp 0x1007adca
mov eax, dword [0x307809c]
cmp dword [eax + 0x2a60], 6
jne 0x1007b104
call esi
sub eax, dword [0x103d8af0]
cmp eax, 0x12c
jbe 0x1007b104
mov ebx, 0x1008d94c
call fcn.10069692
mov ebx, 0x1009b9bc
call fcn.10069692
mov ebx, 0x1009b9b0
call fcn.10069692
call esi
mov dword [0x103d8af0], eax
cmp dword [0x103d3034], 1
jne 0x1007b4ca
call esi
sub eax, dword [0x103c27dc]
mov ecx, dword [0x103d31e0]
imul ecx, ecx, 0x3e8
cmp eax, ecx
jl 0x1007b144
cmp dword [0x103d31dc], 1
jne 0x1007b144
push 0xffff
call fcn.1003a32b
pop ecx
xor ebx, ebx
jmp 0x1007b397
mov ebx, dword [ebp - 0x84]
test ebx, ebx
je 0x1007b2cd
cmp ebx, edi
je 0x1007b2cd
cmp dword [0x103d3044], 1
jne 0x1007b17e
mov eax, ebx
call fcn.1003ca68
test al, al
jne 0x1007b17e
push 0xffff
call fcn.1003a32b
pop ecx
jmp 0x1007adca
movzx eax, word [ebx + 0x14]
imul eax, eax, 0x1cc
cmp byte [eax + 0x33fc106], 0
je 0x1007b1ac
push 0xffff
call fcn.1003a32b
push 8
push 0x1009d0c4
call fcn.1003ce54
jmp 0x1007afe0
push 1
mov ebx, dword [ebp - 0x84]
call fcn.1007a0c9
pop ecx
test al, al
jne 0x1007b1d1
push 0xffff
call fcn.1003a32b
push 8
push 0x1009d0d0
jmp 0x1007b1a2
cmp dword [0x103d30f4], 2
jne 0x1007b237
call esi
sub eax, dword [0x103d8aec]
cmp eax, 0x3e8
jb 0x1007b237
call esi
mov dword [0x103d8aec], eax
call fcn.1007a50b
mov edx, eax
cmp edx, dword [edi + 0x1d20]
je 0x1007b237
call fcn.10038b91
push edx
call fcn.1003a32b
mov ecx, 0xe26ae0
mov eax, dword [edi + 0x1d20]
call fcn.10006651
mov ebx, eax
mov ax, word [ebx + 0x14]
mov word [0x103d8b00], ax
fld dword [ebx + 0x1f74]
fstp dword [esp]
sub esp, 0xc
jmp 0x1007b31a
mov ecx, 0xe26ae0
mov eax, dword [edi + 0x1d20]
call fcn.10006651
fld dword [eax + 0x1f6c]
fstp dword [ebp - 0x90]
fld dword [eax + 0x1f74]
fstp dword [ebp - 0x84]
sub esp, 0x10
fld dword [ebp - 0x84]
fstp dword [esp + 0xc]
fld dword [ebp - 0x90]
fstp dword [esp + 8]
fld dword [edi + 0x1f74]
fstp dword [esp + 4]
fld dword [edi + 0x1f6c]
fstp dword [esp]
call fcn.100063eb
add esp, 0x10
fcomp dword [0x1009ef14]
fnstsw ax
test ah, 0x41
jne 0x1007b4ca
call esi
sub eax, dword [0x103d8a80]
cmp eax, 0xfa
jb 0x1007b4ca
push dword [edi + 0x1d20]
call fcn.1003a32b
pop ecx
call esi
mov dword [0x103d8a80], eax
jmp 0x1007b4ca
call fcn.1007a50b
mov edx, eax
xor ebx, ebx
cmp edx, ebx
jle 0x1007b377
call fcn.10038b91
push edx
call fcn.1003a32b
pop ecx
mov ecx, 0xe26ae0
mov eax, dword [edi + 0x1d20]
call fcn.10006651
mov ebx, eax
call esi
mov dword [0x103d8afc], eax
mov ax, word [ebx + 0x14]
mov word [0x103d8b00], ax
sub esp, 0x10
fld dword [ebx + 0x1f74]
fstp dword [esp + 0xc]
fld dword [ebx + 0x1f6c]
fstp dword [esp + 8]
fld dword [edi + 0x1f74]
fstp dword [esp + 4]
fld dword [edi + 0x1f6c]
fstp dword [esp]
call fcn.100063eb
call fcn.100840a0
push eax
add ebx, 0x526c
push ebx
push 0x1009d0a0
push str._s:_s_L__d
lea eax, [ebp - 0x80]
push eax
call dword [sym.imp.MSVCR100.dll_sprintf]
push 8
lea eax, [ebp - 0x80]
push eax
call fcn.1003ce54
add esp, 0x2c
call esi
mov dword [0x103c27dc], eax
jmp 0x1007b676
cmp dword [0x103d31dc], 1
jne 0x1007b41c
call esi
sub eax, dword [0x103c27dc]
cmp eax, 0x7d0
jl 0x1007b41c
call esi
sub eax, 0x186a0
mov dword [0x103c27dc], eax
mov eax, dword [0x10128458]
dec eax
push eax
call fcn.1007ad34
pop ecx
mov dword [0x10128458], eax
cmp eax, ebx
jl 0x1007b41c
mov dword [0x1035ffb0], ebx
push 0x1007ac51
push 0x12c
mov eax, dword [0x10114474]
add eax, 0x59
push eax
push dword [0x100dfd8c]
call dword [sym.imp.USER32.dll_SetTimer]
mov dword [0x1035ffa0], 1
mov dword [0x10112bc4], ebx
mov dword [0x1035fea8], ebx
push dword [0x10128458]
push 0x1009d0b4
lea eax, [ebp - 0x30]
push eax
call dword [sym.imp.MSVCR100.dll_sprintf]
push 8
lea eax, [ebp - 0x30]
push eax
call fcn.1003ce54
add esp, 0x14
jmp 0x1007b0b7
call esi
mov dword [0x103d8afc], eax
xor eax, eax
mov word [0x103d8b00], ax
mov dword [0x1035ff68], ebx
cmp dword [0x103d3038], 1
jne 0x1007b4ca
call esi
sub eax, dword [0x103d8ae8]
cmp eax, 0x12c
jb 0x1007b4ca
call esi
mov dword [0x103d8ae8], eax
push ecx
push ecx
fld dword [edi + 0x1f6c]
fstp dword [esp + 4]
fld dword [0x1012fb24]
fstp dword [esp]
call fcn.10055bc3
pop ecx
pop ecx
fcomp dword [0x1009ee38]
fnstsw ax
test ah, 5
jp 0x1007b4a6
push ecx
push ecx
fld dword [edi + 0x1f74]
fstp dword [esp + 4]
fld dword [0x1012845c]
fstp dword [esp]
call fcn.10055bc3
pop ecx
pop ecx
fcomp dword [0x1009ee38]
fnstsw ax
test ah, 5
jnp 0x1007b4ca
sub esp, 0xc
fld dword [0x1012845c]
fstp dword [esp + 8]
fldz
fstp dword [esp + 4]
fld dword [0x1012fb24]
fstp dword [esp]
call fcn.1003a670
add esp, 0xc
mov eax, dword [edi + 0x1d20]
cmp eax, 0xffff
je 0x1007adca
cmp eax, dword [edi + 0xc]
je 0x1007adca
call esi
sub eax, dword [0x103d8ae4]
cmp eax, 0x12c
jbe 0x1007adca
call esi
mov dword [0x103d8ae4], eax
xor ebx, ebx
mov dword [ebp - 0x8c], ebx
mov ecx, dword [ebp - 0x8c]
cmp ecx, 0x14
jge 0x1007b573
lea esi, [ebp - 0x3c]
call fcn.10006348
push 0x1009b998
mov eax, esi
push eax
call dword [sym.imp.MSVCR100.dll_strcmp]
pop ecx
pop ecx
test eax, eax
jne 0x1007b56b
cmp dword [ebp - 0x24], ebx
jne 0x1007b56b
push 0x1009b9a4
call fcn.1000648e
pop ecx
test eax, eax
je 0x1007b56b
mov eax, dword [0x307809c]
mov esi, dword [eax + 0x1d20]
push dword [eax + 0xc]
call fcn.1003a32b
push dword [ebp - 0x8c]
call fcn.1003a5c2
mov dword [0x1035ff68], ebx
push esi
jmp 0x1007afdb
inc dword [ebp - 0x8c]
jmp 0x1007b506
mov eax, dword [edi + 0x2a60]
cmp dword [0x103d303c], 1
jne 0x1007b66f
cmp eax, 8
jne 0x1007b5a5
cmp dword [0x1035fdbc], ebx
jne 0x1007b5a0
cmp dword [0x1035ffbc], 1
je 0x1007b66f
cmp eax, 8
je 0x1007b5e0
cmp eax, 9
je 0x1007b5e0
cmp eax, 0xb
je 0x1007b5e0
cmp eax, 0xd
je 0x1007b5e0
cmp eax, 0xa
jne 0x1007b66f
call fcn.10041810
cmp al, 1
jne 0x1007b66f
xor eax, eax
cmp dword [0x103d30f8], 1
sete al
mov dword [0x1035ff68], eax
jmp 0x1007adca
mov dword [ebp - 0x88], ebx
mov eax, dword [ebp - 0x88]
cmp eax, dword [0x103d7288]
jge 0x1007b66f
xor ebx, ebx
mov dword [ebp - 0x94], ebx
cmp ebx, 0x14
jge 0x1007b664
lea esi, [ebp - 0x3c]
mov ecx, ebx
call fcn.10006348
mov eax, dword [0x103d7280]
mov ecx, dword [ebp - 0x88]
push dword [eax + ecx*4]
mov eax, esi
push eax
call dword [sym.imp.MSVCR100.dll_strcmp]
pop ecx
pop ecx
test eax, eax
jne 0x1007b661
cmp dword [ebp - 0x24], eax
jne 0x1007b661
inc eax
cmp dword [0x103d30f8], eax
jne 0x1007b64f
mov dword [0x1035ff68], eax
push 0xb
mov ecx, ebx
call fcn.1003a960
mov dword [0x100a62a0], ebx
jmp 0x1007b178
push ebx
call fcn.1003a5c2
and dword [0x1035ff68], 0
jmp 0x1007b178
inc ebx
jmp 0x1007b5f6
inc dword [ebp - 0x88]
jmp 0x1007b5e6
or dword [0x100a62a0], 0xffffffff
xor esi, esi
inc esi
cmp dword [0x103d30f8], esi
jne 0x1007b6c6
cmp dword [0x103d303c], esi
jne 0x1007b6ba
mov ecx, 0xe26ae0
mov eax, dword [edi + 0x1d20]
call fcn.10006651
test eax, eax
je 0x1007b6ba
cmp eax, edi
je 0x1007b6ba
push 0xb
mov ecx, dword [0x103d30fc]
dec ecx
call fcn.1003a960
mov dword [0x1035ff68], esi
jmp 0x1007b178
and dword [0x1035ff68], 0
jmp 0x1007adca
cmp dword [0x103d303c], esi
jne 0x1007adca
mov ecx, 0xe26ae0
mov eax, dword [edi + 0x1d20]
call fcn.10006651
test eax, eax
je 0x1007adca
cmp eax, edi
je 0x1007adca
mov eax, dword [0x103d30fc]
dec eax
push eax
call fcn.1003a5c2
jmp 0x1007b178
mov dword [ebp - 4], 0xfffffffe
call fcn.10084208
ret