Function at 0x1006dc1f
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x40
mov eax, dword [0x100a69a0]
xor eax, ebp
mov dword [ebp - 4], eax
xor eax, eax
push ebx
mov ebx, dword [0x36208e4]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x38], eax
cmp ebx, eax
je 0x1006e259
push esi
push edi
call fcn.10047f0b
or dword [0x10342a34], 0xffffffff
mov edi, dword [ebx + 0x1d24]
push 0xaf3b24
push edi
call fcn.10006298
mov esi, eax
xor edx, edx
pop ecx
pop ecx
cmp esi, edx
je 0x1006dcfa
movzx ecx, word [esi + 0x14]
mov edi, dword [esi + 0x5f4]
mov eax, dword [esi + 0x610]
mov dword [ebp - 0x38], ecx
mov ecx, dword [esi + 0x3b0]
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x34], eax
cmp ecx, 0x270f
jg 0x1006dcac
push 0xffff
call fcn.1006d880
jmp 0x1006e256
cmp edi, edx
jne 0x1006dcce
cmp dword [0x35ed708], 0xa7f9
jne 0x1006dcce
cmp eax, 0xee6b280
jle 0x1006dcce
push edx
call fcn.1005f83b
jmp 0x1006e256
fild dword [ebp - 0x2c]
fidiv dword [ebp - 0x34]
fcomp qword [0x1009bf80]
fnstsw ax
test ah, 5
jp 0x1006dd37
cmp ecx, 0x2af9
jl 0x1006dcf1
cmp ecx, 0x2b35
jle 0x1006dd37
push esi
call fcn.1005cb5a
pop ecx
jmp 0x1006dd37
cmp dword [0x103b64b8], edx
je 0x1006ddc6
cmp byte [0x10342a8e], 1
jne 0x1006ddc6
cmp dword [0x103b7db4], edx
jne 0x1006ddc6
push 0xaf6500
push edi
call fcn.10006298
pop ecx
pop ecx
test eax, eax
jne 0x1006e257
mov edi, dword [ebp - 0x2c]
cmp dword [0x103a81f4], 1
jne 0x1006e257
test esi, esi
je 0x1006dda7
fld dword [0x10342918]
sub esp, 0x10
fstp dword [esp + 0xc]
fld dword [0x10342914]
fstp dword [esp + 8]
fld dword [ebx + 0x1f6c]
fstp dword [esp + 4]
fld dword [ebx + 0x1f64]
fstp dword [esp]
call fcn.10006f13
add esp, 0x10
call fcn.10083ba0
cmp eax, dword [0x103a82bc]
jge 0x1006ddcd
cmp dword [0x103a97ac], 1
mov byte [0x10302857], 1
jne 0x1006ddd7
cmp edi, dword [0x103d236c]
jge 0x1006ddd7
cmp edi, dword [0x103a97b0]
jge 0x1006ddd7
call fcn.1003c1b8
cmp dword [0x103a81fc], 1
mov byte [0x10302857], 0
jne 0x1006ddcd
call fcn.1006dafe
jmp 0x1006e257
mov edi, edx
jmp 0x1006dd37
call fcn.1005fd33
jmp 0x1006e257
cmp dword [0x103a81f4], 1
jne 0x1006df5f
cmp dword [0x103a81f8], 1
jne 0x1006df5f
fld dword [esi + 0x1074]
call fcn.10083ba0
fld dword [esi + 0x107c]
mov dword [ebp - 0x28], eax
call fcn.10083ba0
mov esi, dword [esi + 0x10a4]
fld dword [esi + 0x280]
mov dword [ebp - 0x30], eax
call fcn.10083ba0
fld dword [esi + 0x288]
mov dword [ebp - 0x3c], eax
call fcn.10083ba0
fld dword [0x10342918]
sub esp, 0x10
fstp dword [esp + 0xc]
mov dword [ebp - 0x40], eax
fld dword [0x10342914]
fstp dword [esp + 8]
fld dword [ebx + 0x1f6c]
fstp dword [esp + 4]
fld dword [ebx + 0x1f64]
fstp dword [esp]
call fcn.10006f13
fcomp dword [0x1009a9f4]
add esp, 0x10
fnstsw ax
test ah, 1
jne 0x1006dee2
mov eax, dword [0x103be1bc]
and dword [0x10112804], 0
and dword [0x101127fc], 0
push fcn.10059719
push 0x1f4
add eax, 0x4d
push eax
push dword [0x100e04bc]
call dword [sym.imp.USER32.dll_SetTimer]
fld dword [0x10342918]
sub esp, 0xc
fstp dword [esp + 8]
fldz
fstp dword [esp + 4]
fld dword [0x10342914]
fstp dword [esp]
call fcn.1003815c
push 0xffff
call fcn.1006d880
push 0x1009bf68
mov dword [0x10112374], 1
call fcn.10006dd0
add esp, 0x14
jmp 0x1006e257
fld dword [ebx + 0x1f6c]
sub esp, 0x10
fstp dword [esp + 0xc]
fld dword [ebx + 0x1f64]
fstp dword [esp + 8]
fild dword [ebp - 0x30]
fstp dword [esp + 4]
fild dword [ebp - 0x28]
fstp dword [esp]
call fcn.10006f13
fild dword [0x10342938]
add esp, 0x10
fcompp
fnstsw ax
test ah, 5
jp 0x1006df5f
fld dword [ebx + 0x1f6c]
sub esp, 0x10
fstp dword [esp + 0xc]
fld dword [ebx + 0x1f64]
fstp dword [esp + 8]
fild dword [ebp - 0x40]
fstp dword [esp + 4]
fild dword [ebp - 0x3c]
fstp dword [esp]
call fcn.10006f13
fild dword [0x10342938]
add esp, 0x10
fcompp
fnstsw ax
test ah, 5
jp 0x1006df5f
push 0
jmp 0x1006dcc4
cmp dword [0x103a99b8], 1
jne 0x1006dffa
xor esi, esi
lea eax, [ebp - 0x24]
push eax
push esi
call fcn.1000601d
lea eax, [ebp - 0x24]
push 0x1009ae2c
push eax
call sub.MSVCR100.dll_strcmp
add esp, 0x10
test eax, eax
je 0x1006dfa9
lea eax, [ebp - 0x24]
push 0x1009ae20
push eax
call sub.MSVCR100.dll_strcmp
pop ecx
pop ecx
test eax, eax
je 0x1006dfa9
inc esi
cmp esi, 0x14
jl 0x1006df6e
jmp 0x1006dffa
cmp dword [ebp - 0xc], 0
je 0x1006dfc4
cmp dword [ebp - 0xc], 0x1770
jbe 0x1006dff3
mov byte [0x10302857], 0
jmp 0x1006e257
fild dword [ebp - 0x2c]
fidiv dword [ebp - 0x34]
fild dword [0x103a99bc]
fdiv qword [0x10090010]
fcompp
fnstsw ax
test ah, 0x41
jp 0x1006dff3
push 0xb
push esi
call fcn.1005c5f4
mov byte [0x10302857], 0
jmp 0x1006e255
mov byte [0x10302857], 1
cmp dword [0x103a856c], 1
jne 0x1006e022
cmp byte [0x10342a71], 0
jne 0x1006e022
cmp dword [0x103a990c], 0
jg 0x1006e022
push 2
call fcn.1005f83b
pop ecx
jmp 0x1006e116
cmp dword [0x103a9910], 1
jne 0x1006e116
and dword [ebp - 0x30], 0
and dword [ebp - 0x28], 0
mov ecx, 0x103b1184
mov edi, 0x270f
call fcn.100011d9
test eax, eax
jle 0x1006e0db
mov esi, dword [ebp - 0x28]
mov eax, dword [0x103b1924]
mov eax, dword [eax + esi*4]
mov ecx, dword [ebp - 0x38]
cmp dword [eax], ecx
je 0x1006e0d6
mov eax, dword [0x103b1184]
mov eax, dword [eax + esi*4]
cmp dword [eax], 0x2c
jne 0x1006e0be
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [0x103b231c]
mov ecx, dword [ecx + esi*4]
sub eax, dword [ecx]
cmp eax, 0x1388
ja 0x1006e0be
mov eax, dword [0x103b1924]
mov eax, dword [eax + esi*4]
push edi
push dword [eax]
call fcn.1003d84f
mov esi, eax
pop ecx
pop ecx
test esi, esi
jle 0x1006e0be
push 0xaf3b24
push esi
call fcn.10006298
pop ecx
pop ecx
test eax, eax
je 0x1006e0be
fld dword [eax + 0x35c]
call fcn.10083ba0
mov edi, eax
mov dword [ebp - 0x30], esi
inc dword [ebp - 0x28]
mov ecx, 0x103b1184
call fcn.100011d9
cmp dword [ebp - 0x28], eax
jl 0x1006e04e
jmp 0x1006e0db
mov edi, 0x270f
cmp edi, dword [0x10342938]
jg 0x1006e116
push dword [ebp - 0x30]
mov esi, 0x10111d48
push 0x1009ae74
push esi
call dword [sym.imp.MSVCR100.dll_sprintf]
push esi
call fcn.10006dd0
push dword [ebp - 0x30]
call fcn.1006d880
mov eax, dword [0x103a99c0]
dec eax
push 0
push eax
call fcn.1005c5f4
add esp, 0x1c
mov eax, dword [ebx + 0x2a58]
cmp eax, 8
je 0x1006e134
cmp eax, 9
je 0x1006e134
cmp eax, 0xb
je 0x1006e134
cmp eax, 0xd
jne 0x1006e237
and dword [ebp - 0x28], 0
mov ecx, 0x103bb574
call fcn.100011d9
test eax, eax
jle 0x1006e237
xor esi, esi
lea eax, [ebp - 0x24]
push eax
push esi
call fcn.1000601d
mov eax, dword [0x103bb574]
mov ecx, dword [ebp - 0x28]
push dword [eax + ecx*4]
lea eax, [ebp - 0x24]
push eax
call sub.MSVCR100.dll_strcmp
add esp, 0x10
test eax, eax
jne 0x1006e217
xor ebx, ebx
cmp dword [ebp - 0xc], ebx
jne 0x1006e217
lea eax, [ebp - 0x24]
push 0x1009ae64
push eax
call sub.MSVCR100.dll_strcmp
pop ecx
pop ecx
test eax, eax
jne 0x1006e1ea
mov edi, 0x103b1184
mov ecx, edi
call fcn.100011d9
test eax, eax
jle 0x1006e217
mov eax, dword [0x103b1924]
mov eax, dword [eax + ebx*4]
mov ecx, dword [ebp - 0x38]
cmp dword [eax], ecx
jne 0x1006e1dc
mov eax, dword [0x103b1184]
mov eax, dword [eax + ebx*4]
cmp dword [eax], 0x2c
jne 0x1006e1dc
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [0x103b231c]
mov ecx, dword [ecx + ebx*4]
sub eax, dword [ecx]
cmp eax, 0x1388
jbe 0x1006e266
mov ecx, edi
inc ebx
call fcn.100011d9
cmp ebx, eax
jl 0x1006e1a4
jmp 0x1006e217
lea eax, [ebp - 0x24]
push 0x1009ae6c
push eax
call sub.MSVCR100.dll_strcmp
pop ecx
pop ecx
test eax, eax
jne 0x1006e266
fild dword [ebp - 0x2c]
fidiv dword [ebp - 0x34]
fstp dword [ebp - 0x3c]
fld dword [ebp - 0x3c]
fcomp qword [str.333333]
fnstsw ax
test ah, 1
je 0x1006e266
inc esi
cmp esi, 0x14
jl 0x1006e14c
inc dword [ebp - 0x28]
mov ecx, 0x103bb574
call fcn.100011d9
cmp dword [ebp - 0x28], eax
jl 0x1006e14a
call fcn.1005ca18
cmp al, 1
je 0x1006e257
mov eax, dword [0x103a99c0]
dec eax
push 0
push eax
call fcn.1005c5f4
or dword [0x100a6388], 0xffffffff
pop ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
pop ebx
call fcn.10083a34
leave
ret
push 0xb
push esi
call fcn.1005c5f4
mov dword [0x100a6388], esi
jmp 0x1006e255