Function at 0x100f5f8
Capabilities:
Check for time delay via gettickcount

Disassembly:
push 0xc9c
mov eax, 0x10279f7
call fcn.01026d58
mov esi, ecx
push esi
lea ecx, [ebp - 0xca4]
mov dword [ebp - 0xca8], esi
call sub.MFC42u.dll_CClientDC::CClientDC
xor eax, eax
mov edi, 0x100219c
mov dword [ebp - 4], eax
mov dword [ebp - 0xc84], eax
mov dword [ebp - 0xc88], edi
xor ebx, ebx
mov dword [ebp - 0xc90], eax
mov eax, dword [esi + 0x2ac]
inc ebx
mov byte [ebp - 4], bl
cmp eax, 7
je 0x100f64d
cmp eax, 9
jne 0x100f654
mov ecx, esi
call fcn.0100f5d1
push 0x102ce90
push 0x104
lea eax, [ebp - 0x218]
push eax
call fcn.01008286
test eax, eax
jl 0x100fa8c
lea eax, [ebp - 0x218]
push eax
push 0x104
lea eax, [ebp - 0x420]
push eax
call fcn.01008286
test eax, eax
jl 0x100fa8c
lea eax, [ebp - 0x420]
push 0x2e
push eax
call dword [sym.imp.msvcrt.dll_wcsrchr]
pop ecx
pop ecx
test eax, eax
je 0x100f6ac
xor ecx, ecx
mov word [eax], cx
push 0x1001d7c
push 0x104
lea eax, [ebp - 0x420]
push eax
call fcn.010082c0
test eax, eax
jl 0x100fa8c
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xc8c], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [ebp - 0xc8c]
cmp eax, 0x3e8
jb 0x100f6d6
push 0
call sub.GDI32.dll_EnableEUDC
test eax, eax
jne 0x100f743
mov esi, 0x100
push esi
lea eax, [ebp - 0xc20]
push eax
push 0xef3b
push 0
call dword [sym.imp.USER32.dll_LoadStringW]
push esi
lea eax, [ebp - 0x620]
push eax
push 0xef7f
push 0
call dword [sym.imp.USER32.dll_LoadStringW]
mov ecx, dword [ebp - 0xca8]
push 0
lea eax, [ebp - 0xc20]
push eax
lea eax, [ebp - 0x620]
push eax
call sub.MFC42u.dll_CWnd::MessageBoxW
jmp 0x100fa8c
call fcn.0100b106
lea eax, [ebp - 0x218]
push eax
call fcn.0100b14b
test eax, eax
jne 0x100f86b
push 0x5c
push eax
lea eax, [ebp - 0xc7c]
push eax
mov dword [ebp - 0xc90], ebx
call sub.msvcrt.dll_memset
add esp, 0xc
push 0x102dc84
push 0x20
lea eax, [ebp - 0xc60]
push eax
call fcn.01008286
test eax, eax
jl 0x100fa81
cmp dword [0x102dce8], 0x411
mov eax, dword [0x102df58]
mov dword [ebp - 0xc7c], eax
mov eax, dword [0x102df5c]
mov dword [ebp - 0xc78], eax
mov al, byte [0x102dcec]
mov byte [ebp - 0xc64], 7
mov byte [ebp - 0xc65], al
mov byte [ebp - 0xc61], 0x10
jne 0x100f7d1
mov byte [ebp - 0xc61], 0x11
lea eax, [ebp - 0xc7c]
push eax
lea ecx, [ebp - 0xc88]
call fcn.0100b71b
test eax, eax
jne 0x100f800
mov esi, dword [esi + 0x20]
push ebx
push 0xef6e
push 0xef33
push esi
call fcn.0102447f
jmp 0x100fa81
lea eax, [ebp - 0xc88]
push eax
lea ecx, [ebp - 0xca4]
call sub.MFC42u.dll_CDC::SelectObject_2
mov dword [ebp - 0xc80], eax
xor eax, eax
cmp dword [0x102d2ac], eax
sete al
push eax
lea eax, [ebp - 0x218]
push eax
push dword [ebp - 0xca0]
call fcn.0100b577
push dword [ebp - 0xc80]
lea ecx, [ebp - 0xca4]
test eax, eax
je 0x100f85b
call sub.MFC42u.dll_CDC::SelectObject_2
lea ecx, [ebp - 0xc88]
call sub.MFC42u.dll_CGdiObject::DeleteObject
jmp 0x100fa81
call sub.MFC42u.dll_CDC::SelectObject_2
lea ecx, [ebp - 0xc88]
call sub.MFC42u.dll_CGdiObject::DeleteObject
lea eax, [ebp - 0xc8c]
push eax
push dword [0x102df5c]
call fcn.0100b348
test eax, eax
jl 0x100fa81
lea eax, [ebp - 0xc80]
push eax
push dword [0x102df58]
call fcn.0100b348
test eax, eax
jl 0x100fa81
lea eax, [ebp - 0xc8c]
push eax
push 0xf
push dword [ebp - 0xc8c]
call fcn.0100b371
test eax, eax
jl 0x100fa81
mov eax, dword [ebp - 0xc8c]
shr eax, 3
mul dword [ebp - 0xc80]
lea ecx, [ebp - 0xc8c]
push ecx
push edx
push eax
call fcn.01011467
test eax, eax
jl 0x100fa81
push dword [ebp - 0xc8c]
call dword [sym.imp.msvcrt.dll_malloc]
pop ecx
mov dword [ebp - 0xc80], eax
test eax, eax
je 0x100fa81
push eax
push dword [ebp - 0xc8c]
lea ecx, [esi + 0xd8]
call fcn.0100b7b7
push ebx
push dword [0x102df5c]
push dword [ebp - 0xc80]
call fcn.0100b39f
test eax, eax
jl 0x100fa74
push dword [0x102dcc4]
movzx eax, word [esi + 0x2b4]
push eax
lea eax, [ebp - 0x218]
push eax
push dword [ebp - 0xca0]
call fcn.0100b1c8
cmp eax, 0xfffffffd
jne 0x100f9d4
push dword [ebp - 0xc80]
call dword [sym.imp.msvcrt.dll_free]
pop ecx
call fcn.0100b12e
push ebx
call sub.GDI32.dll_EnableEUDC
call sub.MFC42u.dll_AfxGetModuleState
mov eax, dword [eax + 8]
mov esi, 0x100
push esi
lea ecx, [ebp - 0x820]
push ecx
push 0xef78
push eax
mov dword [ebp - 0xc90], eax
call dword [sym.imp.USER32.dll_LoadStringW]
push esi
lea eax, [ebp - 0xa20]
push eax
push 0xef3b
push dword [ebp - 0xc90]
call dword [sym.imp.USER32.dll_LoadStringW]
push dword [ebp + 8]
mov ecx, dword [ebp - 0xca8]
lea eax, [ebp - 0xa20]
push eax
lea eax, [ebp - 0x820]
push eax
call sub.MFC42u.dll_CWnd::MessageBoxW
cmp eax, 2
jne 0x100fa8c
xor ebx, ebx
jmp 0x100fa8c
test eax, eax
jge 0x100fa09
push dword [ebp - 0xc80]
call dword [sym.imp.msvcrt.dll_free]
pop ecx
call fcn.0100b12e
push ebx
call sub.GDI32.dll_EnableEUDC
mov esi, dword [esi + 0x20]
push ebx
push 0xef5f
push 0xef3b
push esi
call fcn.0102447f
jmp 0x100fa8c
cmp dword [ebp - 0xc90], 0
je 0x100fa22
lea eax, [ebp - 0x420]
push eax
call fcn.0100af6e
test eax, eax
jne 0x100fa74
lea eax, [ebp - 0x420]
push eax
call fcn.01025566
test eax, eax
jne 0x100fa74
push dword [0x102dcc4]
movzx eax, word [esi + 0x2b4]
push dword [0x102df58]
push dword [0x102df5c]
push dword [ebp - 0xc80]
push eax
call fcn.010253e1
test eax, eax
je 0x100fa62
call fcn.01024f5f
jmp 0x100fa74
call fcn.01024f5f
and dword [esi + 0x108], 0
mov dword [0x102c3d0], ebx
push dword [ebp - 0xc80]
call dword [sym.imp.msvcrt.dll_free]
pop ecx
call fcn.0100b12e
push ebx
call sub.GDI32.dll_EnableEUDC
lea ecx, [ebp - 0xc88]
mov byte [ebp - 4], 0
mov dword [ebp - 0xc88], edi
call fcn.01007d75
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xca4]
call fcn.01026132
mov eax, ebx
call fcn.01026dac
ret 4