Function at 0x1006ce23
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x144
mov eax, dword [0x10149040]
xor eax, ebp
mov dword [ebp - 4], eax
cmp dword [0xe609e8], 5
jne 0x1006d0d4
cmp dword [0x1015c5f0], 1
jne 0x1006d0d4
cmp byte [0x1015c374], 0
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
jne 0x1006ce7e
cmp dword [0x1015c5d0], 0
jne 0x1006cd57
xorps xmm0, xmm0
movss dword [ebp - 0x144], xmm0
jmp 0x1006cda8
call esi
sub eax, dword [0x1015c5ec]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x1013e370]
mov eax, dword [0x1015c5d0]
cvtpd2ps xmm1, xmm0
movd xmm0, eax
mulss xmm1, dword [0x1013e0e4]
shr eax, 0x1f
cvtdq2pd xmm0, xmm0
addsd xmm0, qword [eax*8 + 0x1013e370]
cvtpd2ps xmm0, xmm0
divss xmm1, xmm0
movss dword [ebp - 0x144], xmm1
push edi
sub esp, 0x10
mov edi, 0x790b50
mov dword [esp + 0xc], 0x41900000
mov dword [esp + 8], 0x43200000
mov dword [esp + 4], 0x42c80000
mov dword [esp], 0x43700000
push 0x7a65
call edi
movss xmm0, dword [0x1013e0e4]
add esp, 4
minss xmm0, dword [ebp - 0x144]
mov dword [esp + 0xc], 0x41000000
movss dword [esp + 8], xmm0
mov dword [esp + 4], 0x42d20000
mov dword [esp], 0x43750000
push 0x7a66
call edi
mov eax, dword [0x1015c600]
add esp, 0x14
pop edi
cmp eax, 3
ja case.default.0x1006ce1c
jmp dword [eax*4 + 0x1006d0e4]
push 1
jmp 0x1006ce31
push 2
jmp 0x1006ce31
push 3
jmp 0x1006ce31
push 4
mov ecx, 0x1014ae98
call fcn.1001f510
push eax
lea eax, [ebp - 0x104]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
push 3
push 0
push 0xffffffffffffffff
push 0
push 0xa0
push 0x69
lea eax, [ebp - 0x104]
push 0xf0
push eax
mov eax, 0x7d04d0
call eax
add esp, 0x28
call esi
sub eax, dword [0x1015c5ec]
cmp eax, dword [0x1015c5d0]
jbe 0x1006cedb
mov dword [0x1015c5f0], 2
mov dword [0x1015c600], 0
call esi
mov dword [0x1015c5d4], eax
call esi
mov dword [0x1015c5ec], eax
mov ecx, 0x3e8
xor eax, eax
mov dword [0x1015c5d0], 0
cmp byte [0x10149f66], 1
cmove eax, ecx
mov ecx, 0x8793750
mov dword [0x1015c5f4], eax
mov eax, 0x63a180
call eax
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10081279
mov esp, ebp
pop ebp
ret
call esi
sub eax, dword [0x1015c5d4]
cmp eax, dword [0x1015c5f4]
jb 0x1006d0d3
mov eax, dword [0x1015c600]
sub eax, 0
je 0x1006d0c7
sub eax, 1
jne 0x1006d0cc
mov eax, dword [0x1015c5f8]
test eax, eax
jne 0x1006d0cc
movzx eax, byte [0x1015c610]
xor al, 0xfc
mov dword [0x1015c5f8], 1
mov byte [ebp - 0x13c], al
movzx eax, byte [0x1015c611]
xor al, 0xcf
mov dword [ebp - 0x140], 0x1f13bc3
mov byte [ebp - 0x13b], al
movzx eax, byte [0x1015c612]
xor al, 0xab
mov byte [ebp - 0x13a], al
movzx eax, byte [0x1015c613]
xor al, 0xfc
mov byte [ebp - 0x139], al
movzx eax, byte [0x1015c614]
xor al, 0xcf
mov byte [ebp - 0x138], al
movzx eax, byte [0x1015c615]
xor al, 0xab
mov byte [ebp - 0x137], al
movzx eax, byte [0x1015c616]
xor al, 0xfc
mov byte [ebp - 0x136], al
movzx eax, byte [0x1015c617]
xor al, 0xcf
mov byte [ebp - 0x135], al
movzx eax, byte [0x1015c618]
xor al, 0xab
mov byte [ebp - 0x134], al
movzx eax, byte [0x1015c619]
xor al, 0xfc
mov byte [ebp - 0x133], al
movzx eax, byte [0x1015c604]
xor al, 0xfc
mov byte [ebp - 0x132], al
movzx eax, byte [0x1015c605]
xor al, 0xcf
mov byte [ebp - 0x131], al
movzx eax, byte [0x1015c606]
xor al, 0xab
mov byte [ebp - 0x130], al
movzx eax, byte [0x1015c607]
xor al, 0xfc
mov byte [ebp - 0x12f], al
movzx eax, byte [0x1015c608]
xor al, 0xcf
mov byte [ebp - 0x12e], al
movzx eax, byte [0x1015c609]
xor al, 0xab
mov byte [ebp - 0x12d], al
movzx eax, byte [0x1015c60a]
xor al, 0xfc
mov byte [ebp - 0x12c], al
movzx eax, byte [0x1015c60b]
xor al, 0xcf
mov byte [ebp - 0x12b], al
movzx eax, byte [0x1015c60c]
xor al, 0xab
mov byte [ebp - 0x12a], al
movzx eax, byte [0x1015c60d]
xor al, 0xfc
mov byte [ebp - 0x129], al
call esi
mov dword [ebp - 0x11e], eax
movzx eax, byte [0xe61f68]
dec al
mov byte [ebp - 0x11a], al
movzx eax, byte [0xe61f69]
sub al, 2
mov byte [ebp - 0x119], al
movzx eax, byte [0xe61f6a]
sub al, 3
mov byte [ebp - 0x118], al
movzx eax, byte [0xe61f6b]
sub al, 4
mov byte [ebp - 0x117], al
movzx eax, byte [0xe61f6c]
sub al, 5
mov byte [ebp - 0x116], al
mov eax, 0xe61f70
movups xmm0, xmmword [eax]
mov edx, 0x3b
lea ecx, [ebp - 0x140]
movups xmmword [ebp - 0x115], xmm0
call fcn.1006cb50
jmp 0x1006d0cc
call fcn.1006d170
call esi
mov dword [0x1015c5d4], eax
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10081279
mov esp, ebp
pop ebp
ret