Function at 0x1006ecd0
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x54
mov eax, dword [0x1014c1c0]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x101922ec], 0
je 0x1006f5f1
push ebx
push esi
push edi
push ecx
mov dword [esp], 0
mov eax, 0x637c60
push 1
push 1
sub esp, 0x20
mov dword [esp + 0x1c], 0x3f1f2e4b
mov dword [esp + 0x18], 0x3f21cac0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x43d68000
mov dword [esp + 8], 0x433e0000
mov dword [esp + 4], 0
mov dword [esp], 0x3f800000
push 0xf078
call eax
movss xmm0, dword [0x5ef5a1c]
add esp, 0x2c
cvtps2pd xmm0, xmm0
mov eax, 0x4db0c0
mulsd xmm0, qword [0x10143120]
cvtpd2ps xmm0, xmm0
movss dword [esp], xmm0
call eax
fadd qword [0x10143420]
mov esi, dword [0xe8c58c]
add esp, 4
mov edi, 0x41fe10
fstp dword [ebp - 0x48]
call edi
push esi
mov edx, 0x420120
mov ecx, eax
call edx
push 0
call edi
mov edx, 0x4200f0
mov ecx, eax
call edx
movss xmm1, dword [ebp - 0x48]
movsd xmm0, qword [0x101434a8]
cvtps2pd xmm1, xmm1
subsd xmm0, xmm1
mulsd xmm0, qword [0x10143818]
cvttsd2si eax, xmm0
push eax
push 0x19
push 0xbd
push 0xff
call edi
mov edx, 0x420040
mov ecx, eax
call edx
push 0xac
mov ecx, 0x1015dbb8
call fcn.10047580
mov esi, eax
call edi
push 0
push 3
push 0
push 0xbe
push esi
push 0x1d
push 1
mov ebx, 0x420150
mov ecx, eax
call ebx
movss xmm0, dword [ebp - 0x48]
cvtps2pd xmm0, xmm0
mulsd xmm0, qword [0x10143818]
cvttsd2si eax, xmm0
push eax
push 0x19
push 0xbd
push 0xff
call edi
mov ecx, eax
mov eax, 0x420040
call eax
push 0xad
mov ecx, 0x1015dbb8
call fcn.10047580
mov esi, eax
call edi
push 0
push 3
push 0
push 0xbe
push esi
push 0x1d
push 1
mov ecx, eax
call ebx
mov esi, dword [0xe8c588]
call edi
mov ecx, eax
lea eax, [ebx - 0x30]
push esi
call eax
push 0xff
push 0xff
push 0xff
push 0xff
call edi
mov ecx, eax
mov eax, 0x420040
call eax
push 0xae
mov ecx, 0x1015dbb8
call fcn.10047580
mov esi, eax
call edi
push 0
push 1
push 0
push 0xa6
push esi
push 0x3a
push 0x10
mov ecx, eax
call ebx
push 0xaf
mov ecx, 0x1015dbb8
call fcn.10047580
mov esi, eax
call edi
push 0
push 1
push 0
push 0xa6
push esi
push 0x44
push 0x10
mov ecx, eax
call ebx
push 0xb0
mov ecx, 0x1015dbb8
call fcn.10047580
mov esi, eax
call edi
push 0
push 1
push 0
push 0xa6
push esi
push 0x4e
push 0x10
mov ecx, eax
call ebx
push 0xb1
mov ecx, 0x1015dbb8
call fcn.10047580
mov esi, eax
call edi
push 0
push 1
push 0
push 0xa6
push esi
push 0x58
push 0x10
mov ecx, eax
call ebx
xor ebx, ebx
mov ecx, 0x10192308
mov dword [ebp - 0x54], ebx
nop dword [eax]
mov esi, dword [0x10192300]
xor edx, edx
movzx eax, byte [ecx + edx*8]
cmp eax, esi
jne 0x1006ef54
movzx ecx, byte [edx*8 + 0x10192309]
lea eax, [ebx + 1]
cmp ecx, eax
je 0x1006ef5f
mov ecx, 0x10192308
inc edx
cmp edx, 0x19
jl 0x1006ef38
jmp 0x1006f2b7
lea edi, [edx*8 + 0x10192304]
mov dword [ebp - 0x50], edi
test edi, edi
je 0x1006f2b7
push 1
mov eax, 0x635fd0
call eax
movd xmm0, ebx
mov eax, 0x637c60
cvtdq2ps xmm0, xmm0
mov dword [esp], 0
push 1
push 1
sub esp, 0x20
mulss xmm0, dword [0x10143c64]
mov dword [esp + 0x1c], 0x3f2e147b
mov dword [esp + 0x18], 0x3f0b8522
movss dword [ebp - 0x4c], xmm0
addss xmm0, dword [0x10143d58]
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x425c0000
mov dword [esp + 8], 0x43260000
addss xmm0, dword [0x10143178]
movss dword [esp + 4], xmm0
mov dword [esp], 0x41300000
push 0xf079
call eax
mov eax, 0xe8c588
add esp, 0x30
mov esi, dword [eax]
mov eax, 0x41fe10
call eax
mov ecx, eax
mov eax, 0x420120
push esi
call eax
movss xmm0, dword [ebp - 0x4c]
addss xmm0, dword [0x10143d78]
push 0x11
push 0x26
cvttss2si eax, xmm0
movss dword [ebp - 0x48], xmm0
push eax
push 0x88
mov eax, 0x790b10
call eax
add esp, 0x10
test al, al
je 0x1006f0ef
cmp byte [0x101922ed], 0
jne 0x1006f0ef
push 1
mov eax, 0x791070
call eax
add esp, 4
test eax, eax
je 0x1006f0ef
cmp byte [0x8793386], 0
je 0x1006f0ef
mov eax, 0x83c080
call eax
movss xmm0, dword [ebp - 0x48]
mov eax, 0x637c60
push ecx
mov dword [esp], 0
push 1
push 1
sub esp, 0x20
mov dword [esp + 0x1c], 0x3e69d18c
mov dword [esp + 0x18], 0x3f36aa76
mov dword [esp + 0x14], 0x3e8963a7
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x41880000
mov dword [esp + 8], 0x42180000
movss dword [esp + 4], xmm0
mov dword [esp], 0x43080000
push 0xf066
call eax
lea eax, [ebx + 1]
mov byte [0x101922ed], 1
mov dword [0x101922f0], eax
mov eax, dword [0x10192300]
mov dword [0x101922f4], eax
jmp 0x1006f14c
movss xmm0, dword [ebp - 0x48]
mov eax, 0x637c60
push ecx
mov dword [esp], 0
push 1
push 1
sub esp, 0x20
mov dword [esp + 0x1c], 0x3e69d18c
mov dword [esp + 0x18], 0x3f36aa76
mov dword [esp + 0x14], 0x3ca3d70a
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x41880000
mov dword [esp + 8], 0x42180000
movss dword [esp + 4], xmm0
mov dword [esp], 0x43080000
push 0xf066
call eax
add esp, 0x30
mov ebx, 0x41fe10
push 0
call ebx
mov ecx, eax
mov eax, 0x4200f0
call eax
mov eax, dword [ebp - 0x50]
movzx edi, word [edi + 2]
push 0xff
push 0
movzx eax, byte [eax]
shl eax, 9
push 0xe6
push 0xe6
add edi, eax
call ebx
mov ecx, eax
mov eax, 0x420040
call eax
push 0xab
mov ecx, 0x1015dbb8
call fcn.10047580
mov esi, eax
call ebx
movss xmm0, dword [ebp - 0x4c]
mov ecx, eax
addss xmm0, dword [0x10143d88]
push 0
push 3
push 0
push 0x46
cvttss2si ebx, xmm0
push esi
mov eax, 0x420150
push ebx
push 0x42
call eax
push 0xff
push 0xff
push 0xff
push 0xff
mov eax, 0x41fe10
call eax
mov ecx, eax
mov eax, 0x420040
call eax
imul esi, edi, 0x54
mov edi, 0x41fe10
add esi, dword [0x8128ac0]
call edi
movss xmm0, dword [ebp - 0x4c]
addss xmm0, dword [0x10143dd0]
push 0
push 1
push 0
push 0x69
cvttss2si ecx, xmm0
push esi
mov esi, 0x420150
push ecx
push 0x45
mov ecx, eax
call esi
mov ecx, dword [ebp - 0x50]
movzx eax, word [ecx + 6]
push eax
lea eax, [ebp - 0x44]
push 0x1013d534
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
movss xmm0, dword [ebp - 0x4c]
lea eax, [ebp - 0x44]
addss xmm0, dword [0x10143e00]
add esp, 0xc
push 0
push 3
push 0
push 0x64
push eax
cvttss2si eax, xmm0
push eax
push 0x5b
call edi
mov ecx, eax
call esi
push 0xff
push 0x19
push 0xbd
push 0xff
call edi
mov ecx, eax
mov eax, 0x420040
call eax
push 0x464
mov ecx, 0x8128adc
mov eax, 0x402320
call eax
mov esi, eax
call edi
push 0
push 3
push 0
push 0x26
push esi
push ebx
mov ecx, eax
mov eax, 0x420150
push 0x88
call eax
push 0
mov eax, 0x635fd0
call eax
mov ebx, dword [ebp - 0x54]
add esp, 4
inc ebx
mov ecx, 0x10192308
mov dword [ebp - 0x54], ebx
cmp ebx, 5
jl 0x1006ef30
push dword [0x101922f0]
push dword [0x101922f4]
call fcn.1006e900
movss xmm0, dword [0x10143c4c]
xor esi, esi
mov ebx, 0x10192308
nop dword [eax]
mov edi, dword [0x10192300]
xor edx, edx
movzx eax, byte [ebx + edx*8]
cmp eax, edi
jne 0x1006f30f
movzx ecx, byte [edx*8 + 0x10192309]
lea eax, [esi + 1]
cmp ecx, eax
je 0x1006f317
inc edx
cmp edx, 0x19
jl 0x1006f2f8
jmp 0x1006f36a
lea eax, [edx*8 + 0x10192304]
test eax, eax
je 0x1006f36a
movzx ecx, word [eax + 2]
sub esp, 8
movzx eax, byte [eax]
movaps xmm3, xmm0
movd xmm1, esi
movaps xmm2, xmm0
movss xmm0, dword [0x10143b8c]
xor edx, edx
cvtdq2ps xmm1, xmm1
shl eax, 9
push 0
add ecx, eax
mulss xmm1, dword [0x10143c64]
addss xmm1, dword [0x10143cf0]
call fcn.100af0c0
movss xmm0, dword [0x10143c4c]
add esp, 0xc
inc esi
cmp esi, 5
jl 0x1006f2f0
push 0xa
push 0xa
push 0x190
push 0x42
mov edi, 0x790b10
call edi
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
add esp, 0x10
test al, al
je 0x1006f404
cmp byte [0x8793386], 0
je 0x1006f404
call esi
mov ecx, dword [0x101922f8]
add ecx, 0xc8
cmp eax, ecx
jb 0x1006f404
call esi
cmp byte [0x101922ed], 0
mov dword [0x101922f8], eax
jne 0x1006f404
mov ecx, dword [0x10192300]
cmp ecx, 1
jle 0x1006f3cd
lea eax, [ecx - 1]
mov dword [0x10192300], eax
lea eax, [ecx - 1]
cmovle eax, ecx
cmp eax, 1
jne 0x1006f3ee
movsd xmm0, qword [0x10143350]
push ecx
mov dword [esp], 0
push 0
push 0
jmp 0x1006f42b
movsd xmm0, qword [0x10143300]
push ecx
mov dword [esp], 0
push 0
push 0
jmp 0x1006f42b
cmp dword [0x10192300], 1
jne 0x1006f417
movsd xmm0, qword [0x10143350]
jmp 0x1006f41f
movsd xmm0, qword [0x10143188]
push ecx
mov dword [esp], 0
push 1
push 1
sub esp, 0x20
mov ebx, 0x637c60
cvtpd2ps xmm0, xmm0
mov dword [esp + 0x1c], 0x3e0fdf41
mov dword [esp + 0x18], 0x3e85a1d5
movss dword [esp + 0x14], xmm0
mov dword [esp + 0x10], 0x3cf5c28e
mov dword [esp + 0xc], 0x41200000
mov dword [esp + 8], 0x41200000
mov dword [esp + 4], 0x43c80000
mov dword [esp], 0x42840000
push 0xf07a
call ebx
add esp, 0x30
push 0xa
push 0xa
push 0x190
push 0x74
call edi
add esp, 0x10
test al, al
je 0x1006f4e5
cmp byte [0x8793386], 0
je 0x1006f4e5
call esi
mov ecx, dword [0x101922f8]
add ecx, 0xc8
cmp eax, ecx
jb 0x1006f4e5
call esi
cmp byte [0x101922ed], 0
mov dword [0x101922f8], eax
jne 0x1006f4e5
mov ecx, dword [0x10192300]
cmp ecx, 5
jge 0x1006f4d0
lea eax, [ecx + 1]
mov dword [0x10192300], eax
lea eax, [ecx + 1]
cmovge eax, ecx
cmp eax, 5
je 0x1006f4ee
movsd xmm0, qword [0x10143300]
jmp 0x1006f500
cmp dword [0x10192300], 5
jne 0x1006f4f8
movsd xmm0, qword [0x10143350]
jmp 0x1006f500
movsd xmm0, qword [0x10143188]
push ecx
mov dword [esp], 0
push 1
push 1
sub esp, 0x20
cvtpd2ps xmm0, xmm0
mov dword [esp + 0x1c], 0x3e0fdf41
mov dword [esp + 0x18], 0x3e85a1d5
movss dword [esp + 0x14], xmm0
mov dword [esp + 0x10], 0x3ea3d709
mov dword [esp + 0xc], 0x41200000
mov dword [esp + 8], 0x41200000
mov dword [esp + 4], 0x43c80000
mov dword [esp], 0x42e80000
push 0xf07a
call ebx
mov esi, dword [0x10192300]
add esp, 0x30
xorps xmm0, xmm0
mov word [ebp - 8], 0
mov ecx, 0x8128adc
movq qword [ebp - 0x10], xmm0
mov eax, 0x402320
push 0x49d
call eax
push 5
push esi
push eax
lea eax, [ebp - 0x10]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
mov ebx, 0x41fe10
push 0
call ebx
mov ecx, eax
mov eax, 0x4200f0
call eax
push 0xff
push 0x19
push 0xbd
push 0xff
call ebx
mov ecx, eax
mov eax, 0x420040
call eax
mov esi, dword [0xe8c588]
call ebx
mov ecx, eax
mov eax, 0x420120
push esi
call eax
push 0
push 3
push 0
push 0x14
lea eax, [ebp - 0x10]
push eax
push 0x190
push 0x56
call ebx
mov ecx, eax
mov eax, 0x420150
call eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10131804
mov esp, ebp
pop ebp
ret