Function at 0x1006fe04
Capabilities:
Check for time delay via gettickcount

Disassembly:
push 0xb0
push 0x100a2fd0
call fcn.10084100
xor edi, edi
cmp dword [0x1011280c], edi
jne 0x1006fe2e
push dword [0x10342a38]
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x10070a09
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x98], eax
wait
mov dword [ebp - 4], edi
cmp byte [0x10342a82], 0
jne 0x1006fe7c
cmp dword [0xe7b850], edi
jne 0x1006fe7c
push edi
mov eax, 0x1389
push eax
push eax
push dword [0x100e04bc]
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
call esi
push edi
push edi
push 0x2710
mov eax, dword [0x1011280c]
push dword [eax + 0x20]
call esi
wait
jmp 0x10070a02
push edi
push edi
push 0xfb1
push dword [0x100e04bc]
call dword [sym.imp.USER32.dll_SendMessageA]
cmp eax, 0x2710
je 0x1006feae
push 0x10035805
push 0xfffffffffffffffc
push dword [0x100e04bc]
call dword [sym.imp.USER32.dll_SetWindowLongA]
mov dword [0x103be1c8], eax
xor esi, esi
mov ebx, 0x103bb52c
mov dword [ebp - 0xa0], esi
mov ecx, ebx
call fcn.10001036
cmp esi, eax
jge 0x10070185
mov eax, dword [0x103bb52c]
mov eax, dword [eax + esi*4]
mov ecx, dword [ebp - 0x98]
sub ecx, dword [eax]
cmp ecx, 0xbb8
ja 0x10070171
mov eax, dword [0x103bb520]
mov eax, dword [eax + esi*4]
mov eax, dword [eax]
add eax, 2
push eax
call sub.MSVCR100.dll_strlen
pop ecx
test eax, eax
je 0x1007016b
mov eax, dword [0x103bb520]
mov eax, dword [eax + esi*4]
mov eax, dword [eax]
lea ecx, [eax + 0x15]
push ecx
movzx ecx, byte [eax + 0x28]
push ecx
add eax, 2
push eax
push 0x1009c234
lea eax, [ebp - 0x80]
push eax
call dword [sym.imp.MSVCR100.dll_sprintf]
add esp, 0x14
mov dword [ebp - 0x90], edi
mov ebx, 0x103bb508
mov ecx, ebx
call fcn.10001036
cmp dword [ebp - 0x90], eax
jge 0x1006ff83
mov edi, dword [ebp - 0x90]
lea eax, [ebp - 0x80]
push eax
mov eax, dword [0x103bb508]
push dword [eax + edi*4]
call sub.MSVCR100.dll_strcmp
pop ecx
pop ecx
test eax, eax
jne 0x1006ff79
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x101123c0], eax
mov eax, dword [0x103bb514]
mov eax, dword [eax + edi*4]
inc dword [eax]
jmp 0x1006ffab
inc dword [ebp - 0x90]
xor edi, edi
jmp 0x1006ff36
xor eax, eax
cmp eax, edi
jne 0x1006ffab
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x101123c0], eax
lea eax, [ebp - 0x80]
push eax
mov ecx, ebx
call fcn.100010dc
push 1
mov ecx, 0x103bb514
call fcn.10001186
mov ebx, dword [0x2fb6ac4]
cmp dword [0x103afaf8], 1
jne 0x10070164
xor edi, edi
mov dword [ebp - 0x94], edi
mov dword [ebp - 0xa4], edi
cmp edi, 7
jge 0x1007001b
mov eax, dword [edi*4 + 0x2f9a2b0]
test eax, eax
je 0x100700b7
cmp byte [eax + 0x330], 0
je 0x100700b7
mov ecx, dword [0x103bb520]
mov ecx, dword [ecx + edi*4]
mov ecx, dword [ecx]
add ecx, 2
push ecx
add eax, 0x338
push eax
call sub.MSVCR100.dll_strcmp
pop ecx
pop ecx
test eax, eax
jne 0x100700b7
mov dword [ebp - 0x94], 1
and dword [ebp - 0x8c], 0
mov ecx, 0x103bb4e4
call fcn.10001036
cmp dword [ebp - 0x8c], eax
jge 0x10070067
mov eax, dword [ebp - 0x8c]
mov ecx, dword [0x103bb520]
mov ecx, dword [ecx + eax*4]
mov ecx, dword [ecx]
add ecx, 2
push ecx
mov ecx, dword [0x103bb4e4]
push dword [ecx + eax*4]
call sub.MSVCR100.dll_strcmp
pop ecx
pop ecx
test eax, eax
jne 0x100700bd
mov dword [ebp - 0x94], 1
and dword [ebp - 0x84], 0
mov edi, 0x103bb4d8
mov ecx, edi
call fcn.10001036
cmp dword [ebp - 0x84], eax
jge 0x100700c8
mov eax, dword [ebp - 0x84]
mov ecx, dword [0x103bb520]
mov ecx, dword [ecx + eax*4]
mov ecx, dword [ecx]
add ecx, 2
push ecx
mov ecx, dword [0x103bb4d8]
push dword [ecx + eax*4]
call sub.MSVCR100.dll_strcmp
pop ecx
pop ecx
test eax, eax
je 0x10070164
inc dword [ebp - 0x84]
jmp 0x10070073
inc edi
jmp 0x1006ffc6
inc dword [ebp - 0x8c]
jmp 0x10070022
cmp dword [ebp - 0x94], 0
jne 0x10070164
cmp dword [0x103b055c], 1
jne 0x10070106
mov eax, dword [ebx + 0x14]
imul eax, eax, 0x1cc
add eax, 0x333aac5
push eax
mov eax, dword [0x103bb520]
mov eax, dword [eax + esi*4]
mov eax, dword [eax]
add eax, 0x15
push eax
call sub.MSVCR100.dll_strcmp
pop ecx
pop ecx
test eax, eax
je 0x10070185
cmp dword [0x103afafc], 1
jne 0x1007012e
mov eax, dword [ebx + 0x14]
imul eax, eax, 0x1cc
mov ecx, dword [0x103bb520]
mov ecx, dword [ecx + esi*4]
mov ecx, dword [ecx]
mov cl, byte [ecx + 0x27]
cmp cl, byte [eax + 0x333aad7]
je 0x10070185
mov eax, dword [0x103bb520]
mov eax, dword [eax + esi*4]
mov eax, dword [eax]
add eax, 2
push eax
push 0
push 0x180
push dword [0x103af8d8]
call dword [sym.imp.USER32.dll_SendMessageA]
mov eax, dword [0x103bb520]
mov eax, dword [eax + esi*4]
mov eax, dword [eax]
add eax, 2
push eax
mov ecx, edi
call fcn.100010dc
mov ecx, 0x103bb52c
jmp 0x10070173
inc esi
jmp 0x1006feb5
mov ecx, ebx
inc esi
push esi
call fcn.100011dd
push esi
mov ecx, 0x103bb520
call fcn.100011dd
mov edi, dword [ebp - 0x98]
mov eax, edi
sub eax, dword [0x103d27e8]
mov esi, 0xea60
cmp eax, esi
jb 0x100701a2
mov dword [0x103d27e8], edi
mov eax, dword [0x10342a50]
cmp eax, 1
je 0x100701b6
cmp eax, 2
je 0x100701b6
cmp eax, 3
jne 0x100701bb
call fcn.1006f8c4
xor ebx, ebx
cmp dword [0x2fb6ac4], ebx
je 0x1006fe76
cmp dword [0xe7b5c0], 1
jne 0x100701fb
push 0x1008c698
call fcn.10006509
pop ecx
cmp eax, 1
jne 0x100701fb
cmp dword [0x34d1968], ebx
jle 0x100701fb
push 0x10094400
call fcn.1003892a
pop ecx
mov dword [0xe7b5c0], ebx
mov eax, dword [0x2fb6ac4]
cmp dword [0x103ad7a4], 1
jne 0x10070215
mov dword [eax + 0x2740], 0x10f
jmp 0x1007021f
mov dword [eax + 0x2740], 0xf
mov eax, edi
sub eax, dword [0x103d27e4]
cmp eax, esi
jb 0x10070236
mov dword [0x103d27e4], edi
call fcn.10046232
cmp dword [0x103a8394], 1
jne 0x1007026a
mov eax, edi
sub eax, dword [0x101123d0]
mov ecx, dword [0x103a877c]
imul ecx, ecx, 0x3e8
cmp eax, ecx
jb 0x1007026a
mov eax, dword [0x10112368]
cmp eax, dword [0x103a8780]
jl 0x1007026a
mov dword [0x10112368], ebx
mov eax, dword [0x101123dc]
cmp eax, ebx
je 0x10070285
mov ecx, edi
sub ecx, eax
cmp ecx, 0x3e8
jb 0x10070285
mov dword [0x101123dc], ebx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov esi, eax
mov eax, dword [0x103ad7d4]
imul eax, eax, 0xffffd8f0
cdq
sub eax, edx
sar eax, 1
cdq
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0x98], edx
push ebx
push ebx
push ebx
push ebx
lea eax, [ebp - 0x9c]
push eax
push dword [0x103bde98]
call dword [sym.imp.KERNEL32.dll_SetWaitableTimer]
push 0xff
push 0xffffffffffffffff
push ebx
push 0x103bde98
push 1
call dword [sym.imp.USER32.dll_MsgWaitForMultipleObjects]
test eax, eax
je 0x1007030c
push 1
push ebx
push ebx
push ebx
lea eax, [ebp - 0xc0]
push eax
call dword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x100702c1
lea eax, [ebp - 0xc0]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [ebp - 0xc0]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageA]
jmp 0x100702da
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, esi
cmp eax, dword [0x103ad7d4]
jb 0x1007028d
push 0x1008c704
call fcn.10006509
pop ecx
cmp eax, 1
jne 0x100703b7
cmp dword [0x101123b0], 2
jne 0x10070350
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [0x103d2314]
cmp eax, 0xbb8
jae 0x100703ad
cmp dword [0x103b2bd0], 1
jne 0x100703b7
xor esi, esi
mov dword [ebp - 0x88], ebx
mov ecx, 0x103bb4b4
call fcn.10001036
cmp dword [ebp - 0x88], eax
jge 0x10070394
push 0x10111b0c
mov eax, dword [0x103bb4b4]
mov ecx, dword [ebp - 0x88]
push dword [eax + ecx*4]
call sub.MSVCR100.dll_strcmp
pop ecx
pop ecx
test eax, eax
jne 0x100703a1
xor esi, esi
inc esi
cmp dword [0x103b2c80], ebx
jne 0x100703a9
cmp esi, 1
jmp 0x100703ab
inc dword [ebp - 0x88]
jmp 0x10070361
cmp esi, ebx
jne 0x100703b7
push ebx
push 3
call fcn.1003af4e
pop ecx
pop ecx
call fcn.1006aa53
cmp dword [0x103b7488], 1
jne 0x10070406
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x103d27e0], eax
cmp byte [0x10342a83], 1
jne 0x10070406
mov ecx, eax
sub ecx, dword [0x103d27dc]
cmp ecx, 0xfa
jb 0x10070406
mov dword [0x103d27dc], eax
mov eax, dword [0x100a6388]
push ebx
cmp eax, ebx
jge 0x100703fe
mov eax, dword [0x103b748c]
dec eax
push eax
call fcn.1005c63e
pop ecx
pop ecx
mov esi, 0x1f4
cmp dword [0x103acd90], 1
jne 0x1007042e
mov eax, edi
sub eax, dword [0x103d27d8]
cmp eax, esi
jb 0x1007042e
mov dword [0x103d27d8], edi
push 0x28
call fcn.10058b4e
pop ecx
mov eax, dword [0x2fb6ac4]
cmp dword [eax + 0x2a50], 5
jne 0x10070801
cmp byte [0x10342a96], bl
jne 0x10070801
cmp dword [0x103acd8c], 1
jne 0x10070801
cmp dword [0x103acda0], 1
jne 0x10070801
mov eax, edi
sub eax, dword [0x103d27d4]
cmp eax, esi
jb 0x10070801
mov eax, dword [0x101123b0]
cmp eax, 2
je 0x10070493
cmp eax, 5
je 0x10070493
cmp eax, 4
je 0x10070493
cmp eax, 6
jne 0x1007083a
cmp dword [0x103a6df4], 1
jne 0x100704c7
cmp dword [0x2fb6ac4], ebx
je 0x100704c7
cmp dword [0x34d1968], ebx
jle 0x100704c7
mov eax, edi
sub eax, dword [0x103d27d0]
cmp eax, dword [0x103429cc]
jb 0x100704c7
mov dword [0x103d27d0], edi
call fcn.1006ab76
cmp dword [0x103a6df8], 1
jne 0x100704eb
mov eax, edi
sub eax, dword [0x103d27cc]
cmp eax, dword [0x103429d0]
jb 0x100704eb
mov dword [0x103d27cc], edi
call fcn.10049934
mov eax, dword [0x10112804]
cmp eax, ebx
jle 0x1007050b
mov ecx, edi
sub ecx, dword [0x10112800]
cmp ecx, eax
jb 0x1007050b
mov dword [0x10112800], edi
call fcn.1006df3f
mov eax, dword [0x101127f4]
cmp eax, ebx
jle 0x1007052b
mov ecx, edi
sub ecx, dword [0x101127f0]
cmp ecx, eax
jb 0x1007052b
mov dword [0x101127f0], edi
call fcn.1006bd61
mov eax, dword [0x101127ec]
cmp eax, ebx
jle 0x1007054b
mov ecx, edi
sub ecx, dword [0x101127e8]
cmp ecx, eax
jb 0x1007054b
mov dword [0x101127e8], edi
call fcn.1005adbd
mov eax, dword [0x101127e4]
cmp eax, ebx
jle 0x1007056b
mov ecx, edi
sub ecx, dword [0x101127e0]
cmp ecx, eax
jb 0x1007056b
mov dword [0x101127e0], edi
call fcn.10048f93
mov eax, dword [0x101127dc]
cmp eax, ebx
jle 0x1007058b
mov ecx, edi
sub ecx, dword [0x101127d8]
cmp ecx, eax
jb 0x1007058b
mov dword [0x101127d8], edi
call fcn.1003bd2c
mov eax, dword [0x101127d4]
cmp eax, ebx
jle 0x100705ab
mov ecx, edi
sub ecx, dword [0x101127d0]
cmp ecx, eax
jb 0x100705ab
mov dword [0x101127d0], edi
call fcn.1005c9d3
mov eax, dword [0x101127cc]
cmp eax, ebx
jle 0x100705cb
mov ecx, edi
sub ecx, dword [0x101127c8]
cmp ecx, eax
jb 0x100705cb
mov dword [0x101127c8], edi
call fcn.1003bfa6
cmp dword [0x101127c4], ebx
jle 0x100705f1
mov eax, dword [0x101123b0]
cmp eax, 2
je 0x100705f1
cmp eax, 5
je 0x100705f1
cmp eax, 4
je 0x100705f1
cmp eax, 6
je 0x100705f1
call fcn.100790d6
cmp dword [0x103a81f4], 1
jne 0x10070641
cmp dword [0x10112804], ebx
jle 0x10070641
cmp dword [0x103a8200], 1
jne 0x10070641
cmp byte [0x10302857], 1
jne 0x10070641
mov eax, edi
sub eax, dword [0x10112370]
cmp eax, 0xa0
jb 0x10070641
mov dword [0x10112370], edi
mov eax, dword [0x100a6388]
push ebx
cmp eax, ebx
jge 0x10070639
mov eax, dword [0x103a99c0]
dec eax
push eax
call fcn.1005c63e
pop ecx
pop ecx
mov eax, dword [0x101127fc]
cmp eax, ebx
jle 0x10070661
mov ecx, edi
sub ecx, dword [0x101127f8]
cmp ecx, eax
jb 0x10070661
mov dword [0x101127f8], edi
call fcn.1006f195
cmp dword [0x103afb08], 1
jne 0x10070698
cmp byte [0x10342a83], 1
jne 0x10070698
mov eax, edi
sub eax, dword [0x10112370]
cmp eax, 0x190
jb 0x10070698
mov dword [0x10112370], edi
push 0xb
mov eax, dword [0x103afb0c]
dec eax
push eax
call fcn.1005c63e
pop ecx
pop ecx
cmp dword [0x103aeb70], 1
jne 0x100706c4
cmp dword [0x10342a50], 1
jne 0x100706c4
mov eax, edi
sub eax, dword [0x103d27c8]
cmp eax, 0x3e8
jb 0x100706c4
mov dword [0x103d27c8], edi
call fcn.1003c3a0
cmp dword [0x103b6e9c], 1
jne 0x100706fb
cmp byte [0x10342a8e], 1
jne 0x100706fb
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x103d27e0], eax
mov ecx, eax
sub ecx, dword [0x103d23ac]
cmp ecx, dword [0x100a638c]
jb 0x100706fb
mov dword [0x103d23ac], eax
call fcn.1007cdd1
cmp dword [0x103b8850], 1
jne 0x10070728
cmp byte [0x10342a8e], 1
jne 0x10070728
mov eax, edi
sub eax, dword [0x103d27c4]
cmp eax, dword [0x103b8854]
jb 0x10070728
mov dword [0x103d27c4], edi
call fcn.100777e3
cmp dword [0x103b6fa4], 1
jne 0x10070754
cmp byte [0x10342a8e], 1
jne 0x10070754
mov eax, edi
sub eax, dword [0x103d27c0]
cmp eax, 0x12c
jb 0x10070754
mov dword [0x103d27c0], edi
call fcn.1007cecf
cmp dword [0x103b69a0], 1
jne 0x1007077e
cmp byte [0x10342a8e], 1
jne 0x1007077e
mov eax, edi
sub eax, dword [0x103d27bc]
cmp eax, 0x64
jb 0x1007077e
mov dword [0x103d27bc], edi
call fcn.100776e6
cmp dword [0x103b64b8], ebx
je 0x1007079e
mov eax, edi
sub eax, dword [0x103d27b8]
cmp eax, 0x64
jb 0x1007079e
mov dword [0x103d27b8], edi
call fcn.10078610
cmp dword [0x103a82c8], 1
jne 0x100709a8
cmp byte [0x10342a7b], 1
jne 0x1007099c
cmp dword [0x103d2394], 3
jge 0x1007099c
mov eax, edi
sub eax, dword [0x103428e0]
cmp eax, 0x96
jb 0x100709a8
mov eax, dword [0x100a6388]
push ebx
cmp eax, ebx
jge 0x100707e8
mov eax, dword [0x103a99c8]
dec eax
push eax
call fcn.1005c63e
pop ecx
pop ecx
mov dword [0x103428e0], edi
inc dword [0x103d2394]
jmp 0x100709a8
cmp dword [0x2f91a04], 0xa7f9
jne 0x10070493
cmp byte [0x10342a96], bl
jne 0x10070493
cmp dword [0x103acd8c], 1
jne 0x10070493
mov eax, edi
sub eax, dword [0x103d27d4]
cmp eax, esi
jb 0x10070493
mov dword [0x103d27d4], edi
push dword [0x103acda4]
call fcn.1005998a
pop ecx
mov esi, eax
mov dword [0x103d237c], esi
cmp esi, ebx
je 0x10070493
cmp dword [0x10342a50], ebx
jne 0x100708fb
cmp dword [0x2f91a04], 0xa7f9
jne 0x100708fb
fld dword [esi]
call fcn.10083f90
mov dword [0x103d2380], eax
fld dword [esi + 8]
call fcn.10083f90
mov dword [0x103d2384], eax
mov eax, dword [esi + 0x20]
mov dword [0x103d2388], eax
push fcn.10059f86
push 0x12c
mov eax, dword [0x103be1c0]
add eax, 0x46
push eax
push dword [0x100e04bc]
call dword [sym.imp.USER32.dll_SetTimer]
mov byte [0x10342a96], 1
mov byte [0x10342a87], bl
mov byte [0x10342a88], bl
mov byte [0x10342a89], bl
mov dword [0x101123b0], 4
mov byte [0x10342a74], 1
push ebx
push ebx
push ebx
push ebx
call fcn.10059f86
push 0x1009aa38
call fcn.10006e54
pop ecx
jmp 0x1006fe76
cmp esi, ebx
je 0x10070493
cmp dword [0x10342a50], 1
jne 0x10070493
fld dword [esi]
call fcn.10083f90
mov dword [0x103d2380], eax
fld dword [esi + 8]
call fcn.10083f90
mov dword [0x103d2384], eax
mov eax, dword [esi + 0x20]
mov dword [0x103d2388], eax
push fcn.10059f86
push 0x12c
mov eax, dword [0x103be1c0]
add eax, 0x46
push eax
push dword [0x100e04bc]
call dword [sym.imp.USER32.dll_SetTimer]
xor esi, esi
inc esi
cmp dword [0x103a82d0], esi
jne 0x10070961
mov dword [0x101127d4], ebx
cmp dword [0x103a81f4], esi
jne 0x1007096f
mov dword [0x10112804], ebx
mov eax, dword [0x103be1c0]
add eax, 0x4d
push eax
push dword [0x100e04bc]
call dword [sym.imp.USER32.dll_KillTimer]
mov dword [0x101127fc], ebx
mov byte [0x10342a96], 1
mov dword [0x10112374], esi
jmp 0x100708bf
mov dword [0x103d2394], ebx
mov byte [0x10342a7b], bl
cmp dword [0x103ad7c4], 1
jne 0x1006fe76
mov eax, edi
sub eax, dword [0x103d239c]
cmp eax, 0x2710
jb 0x1006fe76
mov dword [0x103d239c], edi
call fcn.1003be3e
jmp 0x1006fe76
mov dword [ebp - 4], 0xfffffffe
call fcn.10084148
ret