Function at 0x1006aa20
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x144
mov eax, dword [0x1014800c]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, 0x80f8e0
call eax
cmp dword [0xe609e8], 5
jne 0x1006adfb
cmp dword [0x1015b4bc], 1
jne 0x1006adfb
cmp byte [0x1015b380], 0
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
jne 0x1006aba5
cmp dword [0x1015b49c], 0
jne 0x1006aa7e
xorps xmm0, xmm0
movss dword [ebp - 0x144], xmm0
jmp 0x1006aacf
call esi
sub eax, dword [0x1015b4b8]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x1013d600]
mov eax, dword [0x1015b49c]
cvtpd2ps xmm1, xmm0
movd xmm0, eax
mulss xmm1, dword [0x1013d368]
shr eax, 0x1f
cvtdq2pd xmm0, xmm0
addsd xmm0, qword [eax*8 + 0x1013d600]
cvtpd2ps xmm0, xmm0
divss xmm1, xmm0
movss dword [ebp - 0x144], xmm1
push edi
sub esp, 0x10
mov edi, 0x790b50
mov dword [esp + 0xc], 0x41900000
mov dword [esp + 8], 0x43200000
mov dword [esp + 4], 0x42c80000
mov dword [esp], 0x43700000
push 0x7a65
call edi
movss xmm0, dword [0x1013d368]
add esp, 4
minss xmm0, dword [ebp - 0x144]
mov dword [esp + 0xc], 0x41000000
movss dword [esp + 8], xmm0
mov dword [esp + 4], 0x42d20000
mov dword [esp], 0x43750000
push 0x7a66
call edi
mov eax, dword [0x1015b4cc]
add esp, 0x14
pop edi
cmp eax, 3
ja case.default.0x1006ab43
jmp dword [eax*4 + 0x1006ae0c]
push 1
jmp 0x1006ab58
push 2
jmp 0x1006ab58
push 3
jmp 0x1006ab58
push 4
mov ecx, 0x10149e40
call fcn.1001f380
push eax
lea eax, [ebp - 0x104]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
push 3
push 0
push 0xffffffffffffffff
push 0
push 0xa0
push 0x69
lea eax, [ebp - 0x104]
push 0xf0
push eax
mov eax, 0x7d04d0
call eax
add esp, 0x28
call esi
sub eax, dword [0x1015b4b8]
cmp eax, dword [0x1015b49c]
jbe 0x1006ac02
mov dword [0x1015b4bc], 2
mov dword [0x1015b4cc], 0
call esi
mov dword [0x1015b4a0], eax
call esi
mov dword [0x1015b4b8], eax
mov ecx, 0x3e8
xor eax, eax
mov dword [0x1015b49c], 0
cmp byte [0x10148f26], 1
cmove eax, ecx
mov ecx, 0x8793750
mov dword [0x1015b4c0], eax
mov eax, 0x63a180
call eax
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1007c269
mov esp, ebp
pop ebp
ret
call esi
sub eax, dword [0x1015b4a0]
cmp eax, dword [0x1015b4c0]
jb 0x1006adfa
mov eax, dword [0x1015b4cc]
sub eax, 0
je 0x1006adee
sub eax, 1
jne 0x1006adf3
mov eax, dword [0x1015b4c4]
test eax, eax
jne 0x1006adf3
movzx eax, byte [0x1015b4dc]
xor al, 0xfc
mov dword [0x1015b4c4], 1
mov byte [ebp - 0x13c], al
movzx eax, byte [0x1015b4dd]
xor al, 0xcf
mov dword [ebp - 0x140], 0x1f13bc3
mov byte [ebp - 0x13b], al
movzx eax, byte [0x1015b4de]
xor al, 0xab
mov byte [ebp - 0x13a], al
movzx eax, byte [0x1015b4df]
xor al, 0xfc
mov byte [ebp - 0x139], al
movzx eax, byte [0x1015b4e0]
xor al, 0xcf
mov byte [ebp - 0x138], al
movzx eax, byte [0x1015b4e1]
xor al, 0xab
mov byte [ebp - 0x137], al
movzx eax, byte [0x1015b4e2]
xor al, 0xfc
mov byte [ebp - 0x136], al
movzx eax, byte [0x1015b4e3]
xor al, 0xcf
mov byte [ebp - 0x135], al
movzx eax, byte [0x1015b4e4]
xor al, 0xab
mov byte [ebp - 0x134], al
movzx eax, byte [0x1015b4e5]
xor al, 0xfc
mov byte [ebp - 0x133], al
movzx eax, byte [0x1015b4d0]
xor al, 0xfc
mov byte [ebp - 0x132], al
movzx eax, byte [0x1015b4d1]
xor al, 0xcf
mov byte [ebp - 0x131], al
movzx eax, byte [0x1015b4d2]
xor al, 0xab
mov byte [ebp - 0x130], al
movzx eax, byte [0x1015b4d3]
xor al, 0xfc
mov byte [ebp - 0x12f], al
movzx eax, byte [0x1015b4d4]
xor al, 0xcf
mov byte [ebp - 0x12e], al
movzx eax, byte [0x1015b4d5]
xor al, 0xab
mov byte [ebp - 0x12d], al
movzx eax, byte [0x1015b4d6]
xor al, 0xfc
mov byte [ebp - 0x12c], al
movzx eax, byte [0x1015b4d7]
xor al, 0xcf
mov byte [ebp - 0x12b], al
movzx eax, byte [0x1015b4d8]
xor al, 0xab
mov byte [ebp - 0x12a], al
movzx eax, byte [0x1015b4d9]
xor al, 0xfc
mov byte [ebp - 0x129], al
call esi
mov dword [ebp - 0x11e], eax
movzx eax, byte [0xe61f68]
dec al
mov byte [ebp - 0x11a], al
movzx eax, byte [0xe61f69]
sub al, 2
mov byte [ebp - 0x119], al
movzx eax, byte [0xe61f6a]
sub al, 3
mov byte [ebp - 0x118], al
movzx eax, byte [0xe61f6b]
sub al, 4
mov byte [ebp - 0x117], al
movzx eax, byte [0xe61f6c]
sub al, 5
mov byte [ebp - 0x116], al
mov eax, 0xe61f70
movups xmm0, xmmword [eax]
mov edx, 0x3b
lea ecx, [ebp - 0x140]
movups xmmword [ebp - 0x115], xmm0
call fcn.1006a870
jmp 0x1006adf3
call fcn.1006ae90
call esi
mov dword [0x1015b4a0], eax
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1007c269
mov esp, ebp
pop ebp
ret