Function at 0x1006fff0
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x70
mov eax, dword [0x100ae8c8]
xor eax, ebp
mov dword [ebp - 4], eax
cmp dword [0x2f91a04], 0x64
push esi
mov esi, dword [ebp + 8]
jge 0x10070051
mov edx, 0x101b883c
mov eax, esi
sub edx, esi
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x10070016
mov eax, dword [0x101a46e8]
mov ecx, dword [0x100eaf2c]
push 0x10045580
push 0x3e8
add eax, 0x93
push eax
push ecx
call dword [sym.imp.USER32.dll_SetTimer]
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10086738
mov esp, ebp
pop ebp
ret
push ebx
mov dword [0x1012d38c], 0
mov edx, dword [0x2f91a04]
push edi
push edx
lea eax, [ebp - 0x6c]
push eax
call fcn.10007940
mov edi, dword [sym.imp.MSVCR100.dll_sprintf]
push esi
push 0x1009eda8
push 0x1012d4d8
call edi
mov ebx, dword [0x2f91a04]
lea ecx, [ebx - 0x59da]
add esp, 0x14
cmp ecx, 0x3e5
ja 0x10070133
push esi
call fcn.100078d0
add esp, 4
cmp eax, 0x59d9
jl 0x100700bb
push esi
call fcn.100078d0
add esp, 4
cmp eax, 0x5dbf
jle 0x10070133
push 0x32
lea edx, [ebp - 0x38]
push 0
push edx
call sub.MSVCR100.dll_memset
push esi
lea eax, [ebp - 0x38]
push 0x10097628
push eax
call edi
mov ecx, dword [0x101663f4]
push 0x10152788
push ecx
lea edx, [ebp - 0x38]
push edx
call fcn.10045f70
mov eax, dword [0x101663f4]
push 0x10152788
push eax
push 0x100a0354
call fcn.10045f70
add esp, 0x30
mov ecx, dword [0x101a46e8]
mov edx, dword [0x100eaf2c]
push 0x100404c0
push 0x64
add ecx, 0x93
push ecx
push edx
call dword [sym.imp.USER32.dll_SetTimer]
pop edi
pop ebx
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10086738
mov esp, ebp
pop ebp
ret
push esi
call fcn.100078d0
push eax
call fcn.100454c0
push ebx
mov byte [ebp - 0x6d], al
call fcn.100454c0
add esp, 0xc
cmp al, byte [ebp - 0x6d]
je 0x10070170
push 1
push esi
call fcn.100078d0
add esp, 4
push eax
call fcn.1005a100
add esp, 8
push 0x100404c0
push 0x64
jmp 0x10070240
cmp dword [0x101971b0], 1
jne 0x100701f1
push esi
call fcn.100078d0
push eax
call fcn.100455b0
add esp, 8
cmp al, 1
jne 0x100701f1
mov edx, dword [0x2fb6ac4]
cmp byte [edx + 0x4884], 0
jne 0x100701f1
push esi
call fcn.100078d0
push esi
mov dword [0x101b8880], eax
call fcn.100078d0
push eax
call fcn.1003b0b0
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [0x100eaf2c]
mov dword [0x101b8884], eax
mov eax, dword [0x101a46e8]
push 0x10043290
push 0x3e8
add eax, 0x44
push eax
push ecx
call dword [sym.imp.USER32.dll_SetTimer]
pop edi
pop ebx
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10086738
mov esp, ebp
pop ebp
ret
push 0x1012d4d8
call fcn.10006c40
add esp, 4
test eax, eax
je 0x10070269
mov edx, dword [0x2fb6ac4]
cmp byte [edx + 0x4884], 0
jne 0x10070269
push esi
call fcn.100078d0
push 1
push 0x1012d4d8
mov dword [0x101b8880], eax
call fcn.10006a90
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push 0x10043330
mov dword [0x101b8884], eax
push 0x3e8
mov eax, dword [0x101a46e8]
mov ecx, dword [0x100eaf2c]
add eax, 0x93
push eax
push ecx
call dword [sym.imp.USER32.dll_SetTimer]
pop edi
pop ebx
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10086738
mov esp, ebp
pop ebp
ret
mov ecx, esi
lea eax, [ebp - 0x6c]
mov edi, edi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10070290
test dl, dl
je 0x1007028c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10070290
add eax, 2
add ecx, 2
test dl, dl
jne 0x10070270
xor eax, eax
jmp 0x10070295
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x100702e4
push esi
push 0x100a0340
push 0x1011c6e8
call edi
push 0x1011c6e8
call fcn.10008080
mov edx, dword [0x101a46e8]
mov eax, dword [0x100eaf2c]
add esp, 0x10
push 0x100404c0
push 0x64
add edx, 0x93
push edx
push eax
call dword [sym.imp.USER32.dll_SetTimer]
pop edi
pop ebx
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10086738
mov esp, ebp
pop ebp
ret
push 1
push esi
call fcn.100078d0
add esp, 4
push eax
call fcn.1005a100
add esp, 8
cmp al, 1
je 0x10070101
push esi
push 0x100a0318
push 0x1011c6e8
call edi
push 0x1011c6e8
call fcn.10008080
push 1
push 0x100943ec
call fcn.10006a90
mov ecx, dword [0x1011d1bc]
add esp, 0x18
call fcn.1006f070
mov ecx, dword [ebp - 4]
pop edi
pop ebx
xor ecx, ebp
pop esi
call fcn.10086738
mov esp, ebp
pop ebp
ret