Function at 0x1006c430
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xd8
mov eax, dword [0x100ae8c8]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
mov ebx, dword [sym.imp.MSVCR100.dll_sprintf]
push esi
mov esi, dword [eax + 0xb4]
push edi
mov edi, dword [eax]
mov eax, dword [eax + 0x48]
mov dword [ebp - 0xc4], edi
mov dword [ebp - 0xc0], esi
mov dword [ebp - 0xd8], eax
test esi, esi
jle 0x1006ccee
mov ecx, esi
imul ecx, ecx, 0x134
lea eax, [ecx + eax - 0x134]
mov dword [ebp - 0xb4], eax
mov eax, dword [eax + 0x128]
mov dword [ebp - 0xd4], eax
test eax, eax
jne 0x1006c4ab
push esi
push edi
call fcn.10046890
add esp, 8
cmp al, 1
jne 0x1006ccee
cmp edi, dword [0x10152728]
jne 0x1006c4ef
movzx edx, byte [0x1015272c]
dec esi
cmp edx, esi
jne 0x1006c4ef
push 0x10152754
call fcn.100467f0
add esp, 4
cmp eax, dword [0x10152774]
jge 0x1006c4ef
pop edi
pop esi
mov dword [0x101b8d18], 0
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100867e6
mov esp, ebp
pop ebp
ret
xor eax, eax
mov dword [ebp - 0xc8], eax
mov dword [0x10152774], eax
mov dword [ebp - 0xb8], eax
cmp dword [0x101519f8], eax
jle 0x1006c717
mov dword [ebp - 0xd0], 0x1014d010
jmp 0x1006c520
mov eax, dword [ebp - 0xc4]
mov ecx, dword [ebp - 0xb8]
cmp dword [ecx*4 + 0x10148628], eax
jne 0x1006c6ea
mov edx, ecx
movzx eax, byte [edx + 0x10148d08]
mov ecx, dword [ebp - 0xc0]
dec ecx
cmp eax, ecx
jne 0x1006c6ea
mov edx, dword [ebp - 0xd0]
push edx
mov dword [ebp - 0xc8], 1
call fcn.100467f0
mov esi, dword [ebp - 0xb8]
add esp, 4
cmp eax, dword [esi*4 + 0x101503a0]
jl 0x1006c7d2
cmp dword [0x1019d794], 0
je 0x1006c6ea
push 0x32
xor edi, edi
lea eax, [ebp - 0x9c]
push edi
push eax
call sub.MSVCR100.dll_memset
mov ecx, dword [ebp - 0xc0]
mov edx, dword [ebp - 0xc4]
push 0x10152754
push ecx
push edx
lea eax, [ebp - 0x9c]
push str._d__d__s
push eax
call ebx
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
add esp, 0x20
call esi
sub eax, dword [0x101b8d14]
cmp eax, 0x7530
jb 0x1006c5ec
lea ecx, [ebp - 0x9c]
push ecx
push 2
call fcn.10039db0
add esp, 8
call esi
mov dword [0x101b8d14], eax
mov dword [ebp - 0xcc], 0x2f9b2b0
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0xbc], edi
mov esi, dword [eax]
test esi, esi
je 0x1006c790
cmp byte [esi + 0x330], 0
je 0x1006c790
push 0x64
lea edx, [ebp - 0x68]
push 0
push edx
inc edi
call sub.MSVCR100.dll_memset
lea eax, [ebp - 0x9c]
push eax
add esi, 0x338
push esi
lea ecx, [ebp - 0x68]
push 0x100a1250
push ecx
call ebx
add esp, 0x1c
mov ecx, 0x101a21f8
xor esi, esi
call fcn.10001240
test eax, eax
jle 0x1006c69c
mov edx, dword [0x101a21f8]
mov eax, dword [edx + esi*4]
lea ecx, [ebp - 0x68]
nop
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006c680
test dl, dl
je 0x1006c67c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006c680
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006c660
xor eax, eax
jmp 0x1006c685
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1006c78a
mov ecx, 0x101a21f8
inc esi
call fcn.10001240
cmp esi, eax
jl 0x1006c653
mov dword [ebp - 0xbc], 1
test edi, edi
je 0x1006c6ea
cmp dword [ebp - 0xbc], 0
je 0x1006c6ea
cmp dword [0x101b8d18], 0
je 0x1006c7a9
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [0x1019d798]
sub eax, dword [0x101b8d18]
imul ecx, ecx, 0xea60
cmp eax, ecx
jb 0x1006cf1f
mov dword [0x101b8d18], 0
mov eax, dword [ebp - 0xb8]
add dword [ebp - 0xd0], 0x1e
inc eax
mov dword [ebp - 0xb8], eax
cmp eax, dword [0x101519f8]
jl 0x1006c520
cmp dword [ebp - 0xc8], 0
jne 0x1006c930
mov edx, dword [ebp - 0xb4]
mov ecx, dword [edx + 0x12c]
sub ecx, dword [ebp - 0xd4]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov esi, edx
shr esi, 0x1f
add esi, edx
xor edi, edi
test esi, esi
jle 0x1006c930
mov ebx, dword [ebp - 0xd4]
lea esp, [esp]
mov ecx, dword [ebx]
lea eax, [ebp - 0x68]
push eax
push ecx
call fcn.1004b080
mov edx, dword [ebx + 8]
lea eax, [ebp - 0x68]
push eax
mov dword [ebp - 0xbc], edx
call fcn.100467f0
add esp, 0xc
cmp eax, dword [ebp - 0xbc]
jl 0x1006c87d
inc edi
add ebx, 0x1c
cmp edi, esi
jl 0x1006c750
jmp 0x1006c92a
mov eax, dword [ebp - 0xcc]
add eax, 4
mov dword [ebp - 0xcc], eax
cmp eax, 0x2f9b2cc
jl 0x1006c602
jmp 0x1006c6a6
push 0x100a1240
call fcn.10008130
add esp, 4
call dword [sym.imp.KERNEL32.dll_GetTickCount]
pop edi
pop esi
mov dword [0x101b8d18], eax
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100867e6
mov esp, ebp
pop ebp
ret
cmp byte [esi + 0x10151840], 1
mov edx, dword [esi*4 + 0x10148628]
mov dword [0x10152728], edx
jne 0x1006c7fe
fild dword [esi*4 + 0x10150a80]
fstp dword [0x10152748]
fild dword [esi*4 + 0x10151160]
jmp 0x1006c812
fild dword [esi*4 + 0x1014bb70]
fstp dword [0x10152748]
fild dword [esi*4 + 0x1014c250]
mov eax, dword [esi*4 + 0x1014c930]
fstp dword [0x1015274c]
mov cl, byte [esi + 0x10148d08]
mov edx, esi
imul edx, edx, 0x1a
mov dword [0x10152750], eax
lea eax, [edx + 0x10148ec0]
mov edx, 0x1015272d
mov byte [0x1015272c], cl
sub edx, eax
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x1006c842
mov eax, esi
shl eax, 4
sub eax, esi
lea eax, [eax*2 + 0x1014d010]
mov edx, 0x10152754
sub edx, eax
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x1006c861
mov ecx, dword [esi*4 + 0x101503a0]
mov dword [0x10152774], ecx
jmp 0x1006c930
mov ecx, dword [ebp - 0xc4]
mov eax, dword [ebp - 0xd4]
lea edx, [edi*8]
sub edx, edi
cmp dword [0x10152720], 0
lea eax, [eax + edx*4]
mov dword [0x10152728], ecx
mov ecx, dword [eax + 0x10]
mov dword [0x10152750], ecx
jle 0x1006c8f0
mov ecx, dword [eax + 0x18]
mov edx, dword [eax + 0x14]
mov eax, dword [0x10151dc0]
imul edx, eax
imul eax, ecx
add edx, dword [0x10151b40]
mov ecx, dword [0x10151c80]
mov dword [ebp - 0xb4], edx
sub ecx, eax
fild dword [ebp - 0xb4]
mov dword [ebp - 0xb4], ecx
fstp dword [0x10152748]
fild dword [ebp - 0xb4]
fstp dword [0x1015274c]
mov dl, byte [ebp - 0xc0]
dec dl
mov byte [0x1015272c], dl
mov byte [0x1015272d], 0
xor eax, eax
jmp 0x1006c910
mov cl, byte [ebp + eax - 0x68]
mov byte [eax + 0x10152754], cl
inc eax
test cl, cl
jne 0x1006c910
mov eax, dword [ebp - 0xbc]
mov dword [0x10152774], eax
mov ebx, dword [sym.imp.MSVCR100.dll_sprintf]
xor edi, edi
cmp dword [0x10152774], edi
jle 0x1006ccee
push 0x1f4
call sub.mfc100.dll_Ordinal_265
push 0x34d28e8
push 0x1011c4d0
mov esi, eax
push str._s_s.txt
push esi
mov dword [ebp - 0xb4], esi
call ebx
mov ebx, 1
add esp, 0x14
cmp dword [ebp - 0xc8], ebx
jne 0x1006c9c3
cmp dword [0x10152750], edi
jne 0x1006c9c3
push esi
call fcn.10055f90
fld dword [0x10191920]
fst dword [0x1012d2a8]
push ebx
fstp dword [0x1012d2b0]
push 0x100a1218
fld dword [0x10191924]
fst dword [0x1012d2ac]
fstp dword [0x1012d2b4]
call fcn.1006a9d0
add esp, 0xc
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100867e6
mov esp, ebp
pop ebp
ret
push 0x100946e0
push esi
call dword [sym.imp.MSVCR100.dll_fopen]
add esp, 8
test eax, eax
jne 0x1006c9e1
mov ecx, dword [0x1011d1bc]
call fcn.1005bf10
mov esi, dword [sym.imp.USER32.dll_IsWindowVisible]
cmp dword [0x10191930], ebx
jne 0x1006ca17
mov ecx, dword [0x101917e0]
push ecx
mov dword [0x10191930], edi
call esi
cmp eax, ebx
jne 0x1006ca0d
push edi
mov ecx, 0x101917c0
call sub.mfc100.dll_Ordinal_13219
mov ecx, 0x101917c0
call fcn.1000b8e0
cmp dword [0x10191854], edi
jne 0x1006ca47
mov edx, dword [0x101917e0]
push edx
mov dword [0x10191854], ebx
call esi
cmp eax, ebx
jne 0x1006ca3d
push edi
mov ecx, 0x101917c0
call sub.mfc100.dll_Ordinal_13219
mov ecx, 0x101917c0
call fcn.1000bac0
cmp dword [0x1019185c], ebx
jne 0x1006ca76
mov eax, dword [0x101917e0]
push eax
mov dword [0x1019185c], edi
call esi
cmp eax, ebx
jne 0x1006ca6c
push edi
mov ecx, 0x101917c0
call sub.mfc100.dll_Ordinal_13219
mov ecx, 0x101917c0
call fcn.1000bac0
cmp dword [0x1019dd80], ebx
jne 0x1006caba
mov ecx, dword [0x101917e0]
push ecx
mov dword [0x10191bc0], ebx
mov dword [0x10191858], ebx
call esi
cmp eax, ebx
jne 0x1006caa2
push edi
mov ecx, 0x101917c0
call sub.mfc100.dll_Ordinal_13219
mov ecx, 0x101917c0
call fcn.1000bac0
mov edx, dword [0x1019dd84]
mov dword [0x1019191c], edx
jmp 0x1006cac4
mov dword [0x1019191c], 0xc8
push 0x10092e4c
mov ecx, 0x10194014
call sub.mfc100.dll_Ordinal_12868
fld dword [0x10152748]
mov eax, dword [0x101917e0]
fst dword [0x1012d2a8]
fstp dword [0x1012d2b0]
push eax
fld dword [0x1015274c]
mov dword [0x1019b7a8], edi
fst dword [0x1012d2ac]
mov dword [0x1019b79c], edi
fstp dword [0x1012d2b4]
mov dword [0x1019b7a0], edi
mov dword [0x1019b7a4], edi
mov dword [0x1019b7b0], edi
mov dword [0x10191bc4], 3
call esi
cmp eax, ebx
jne 0x1006cb36
push edi
mov ecx, 0x101917c0
call sub.mfc100.dll_Ordinal_13219
mov eax, 0x1015272d
lea edx, [eax + 1]
mov edi, edi
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x1006cb40
sub eax, edx
jne 0x1006cb68
cmp dword [0x10191868], ebx
jne 0x1006cc44
mov ecx, dword [0x101917e0]
mov dword [0x10191868], eax
push ecx
jmp 0x1006cc23
mov edx, dword [0x10192cd0]
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
push 0
push 0
push 0x1009
push edx
call edi
xor eax, eax
mov cl, byte [eax + 0x1015272d]
mov byte [ebp + eax - 0x68], cl
inc eax
test cl, cl
jne 0x1006cb82
mov ebx, dword [sym.imp.MSVCR100.dll_strtok]
lea eax, [ebp - 0x68]
push 0x1009e9c8
push eax
call ebx
mov esi, eax
add esp, 8
test esi, esi
je 0x1006cc0a
jmp 0x1006cbb0
mov ecx, dword [0x10192cd0]
push 0
push 0
push 0x1004
push ecx
call edi
push 0
push 0
push 0
push 0
push esi
push eax
push 1
mov ecx, 0x10192cb0
call sub.mfc100.dll_Ordinal_7211
mov edx, dword [0x10192cd0]
push 1
push 0
push 0
push 0x1004
push edx
call edi
dec eax
push eax
mov ecx, 0x10192cb0
call sub.mfc100.dll_Ordinal_12170
push 0x1009e9c8
push 0
call ebx
mov esi, eax
add esp, 8
test esi, esi
jne 0x1006cbb0
cmp dword [0x10191868], 0
jne 0x1006cc44
mov eax, dword [0x101917e0]
mov dword [0x10191868], 1
push eax
call dword [sym.imp.USER32.dll_IsWindowVisible]
cmp eax, 1
jne 0x1006cc3a
push 0
mov ecx, 0x101917c0
call sub.mfc100.dll_Ordinal_13219
mov ecx, 0x101917c0
call fcn.1000bac0
mov ecx, dword [0x10152750]
push ecx
lea edx, [ebp - 0xb0]
push edx
call fcn.10007a10
add esp, 8
push eax
mov ecx, 0x10192d2c
call sub.mfc100.dll_Ordinal_12868
call fcn.1006efb0
mov eax, dword [0x10152750]
mov dword [0x1011cd68], 2
mov dword [0x10152788], 0
cmp dword [0x2f92a08], eax
je 0x1006ccbf
push eax
lea eax, [ebp - 0xb0]
push eax
call fcn.10007a10
push eax
mov eax, dword [0x10152788]
lea ecx, [eax + eax*4]
shl ecx, 4
add ecx, 0x1015278c
push 0x10097650
push ecx
call dword [sym.imp.MSVCR100.dll_sprintf]
add esp, 0x14
inc dword [0x10152788]
mov dword [0x101663f4], 1
call fcn.10060d90
mov edx, dword [ebp - 0xb4]
push edx
call sub.mfc100.dll_Ordinal_1296
add esp, 4
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100867e6
mov esp, ebp
pop ebp
ret
call fcn.1006efb0
mov eax, dword [ebp - 0xc0]
mov edx, dword [0x10148620]
imul eax, eax, 0x134
add eax, dword [ebp - 0xd8]
xor ecx, ecx
mov dword [0x1011cd68], 2
mov dword [0x10152788], ecx
mov edi, dword [eax + 0x11c]
mov eax, dword [eax + 0x10c]
cmp edi, ecx
jne 0x1006cd4b
cmp edx, ecx
jle 0x1006cd4b
movzx esi, word [ecx*2 + 0x10147778]
cmp esi, eax
je 0x1006cd44
inc ecx
cmp ecx, edx
jl 0x1006cd31
jmp 0x1006cd4b
mov edi, dword [ecx*4 + 0x10144c80]
xor esi, esi
test edx, edx
jle 0x1006cd80
cmp dword [esi*4 + 0x10144c80], edi
jne 0x1006cd6a
movzx ecx, word [esi*2 + 0x10147778]
cmp ecx, eax
je 0x1006cde5
movzx ecx, word [esi*2 + 0x10147778]
cmp ecx, eax
jne 0x1006cd7b
cmp eax, 0xc
je 0x1006cde5
inc esi
cmp esi, edx
jl 0x1006cd51
push 0x64
lea eax, [ebp - 0x68]
push 0
push eax
call sub.MSVCR100.dll_memset
mov esi, dword [ebp + 0xc]
add esp, 0xc
push 0x64
lea ecx, [ebp - 0x68]
push ecx
push 0
push esi
mov ecx, 0x1019d4a4
call sub.mfc100.dll_Ordinal_5176
push 0
push esi
mov ecx, 0x1019d4a4
call sub.mfc100.dll_Ordinal_12170
lea edx, [ebp - 0x68]
push edx
lea eax, [ebp - 0x9c]
push 0x100a1204
push eax
call ebx
lea ecx, [ebp - 0x9c]
push ecx
call fcn.10008130
add esp, 0x10
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100867e6
mov esp, ebp
pop ebp
ret
mov edx, dword [esi*4 + 0x10144c80]
push edx
lea eax, [ebp - 0x68]
push eax
call fcn.10007a10
push eax
mov eax, dword [0x10152788]
lea ecx, [eax + eax*4]
shl ecx, 4
add ecx, 0x1015278c
push 0x10097650
push ecx
call ebx
mov eax, dword [0x10152788]
mov edx, dword [esi*4 + 0x1014813c]
mov ecx, dword [esi*4 + 0x10147d54]
push edx
mov edx, dword [esi*4 + 0x1014796c]
mov edi, 1
add eax, edi
mov dword [0x10152788], eax
push ecx
lea eax, [eax + eax*4]
push edx
shl eax, 4
add eax, 0x1015278c
push 0x100a0048
push eax
call ebx
mov eax, dword [0x10152788]
add eax, edi
mov dword [0x10152788], eax
lea ecx, [esi + esi*4]
lea eax, [eax + eax*4]
lea edx, [ecx*8 + 0x10145068]
push edx
shl eax, 4
add eax, 0x1015278c
push 0x100976a4
push eax
call ebx
mov eax, dword [0x10152788]
mov ecx, dword [0x1009bb24]
mov edx, dword [0x1009bb28]
add eax, edi
mov dword [0x10152788], eax
lea eax, [eax + eax*4]
shl eax, 4
add eax, 0x1015278c
mov dword [eax], ecx
mov cl, byte [0x1009bb2c]
mov dword [eax + 4], edx
mov byte [eax + 8], cl
mov eax, dword [ebp - 0xc4]
add dword [0x10152788], edi
lea edx, [ebp - 0x68]
push edx
push eax
call fcn.10007a70
mov eax, dword [0x10152788]
lea ecx, [ebp - 0x68]
lea edx, [eax + eax*4]
push ecx
shl edx, 4
add edx, 0x1015278c
push 0x100a11f4
push edx
call ebx
mov eax, dword [0x10152788]
mov ecx, dword [0x10097668]
mov edx, dword [0x1009766c]
add eax, edi
mov dword [0x10152788], eax
lea eax, [eax + eax*4]
shl eax, 4
mov dword [eax + 0x1015278c], ecx
mov dword [eax + 0x10152790], edx
add esp, 0x48
add dword [0x10152788], edi
mov dword [0x101663f4], edi
mov byte [0x1012d413], 1
call fcn.10060d90
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.100867e6
mov esp, ebp
pop ebp
ret