Function at 0x100676f0
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
mov ecx, dword [0x116dcac4]
mov eax, dword [0x116dcac8]
sub esp, 0x24
push ebx
push esi
push edi
dec ecx
mov ebx, 1
push ebx
mov edx, 0x635fd0
mov dword [0x10a76e50], eax
mov dword [0x10150f28], ecx
call edx
add esp, 4
mov eax, 0x635f50
call eax
cmp dword [0x10234a28], 3
jne 0x1006779a
fld dword [ebp + 0x14]
push ecx
fld qword [0x1013f6c0]
fsub st(1), st(0)
fxch st(1)
fst qword [ebp - 0x18]
fld dword [ebp + 0x10]
fsubrp st(2)
fxch st(1)
fst qword [ebp - 0x20]
fld dword [0x10140b68]
fstp dword [esp]
push 0
push 0
fxch st(1)
fstp dword [ebp + 0x14]
push 0
fld dword [ebp + 0x14]
sub esp, 0x10
fstp dword [esp + 0xc]
fstp dword [ebp + 0x14]
fld dword [ebp + 0x14]
fstp dword [esp + 8]
fld dword [ebp + 0xc]
fsub qword [0x1013fba8]
fstp dword [ebp + 0x14]
fld dword [ebp + 0x14]
fstp dword [esp + 4]
fld dword [ebp + 8]
fsub qword [0x1013f6b8]
fstp dword [ebp + 0x14]
fld dword [ebp + 0x14]
jmp 0x10067837
fld dword [ebp + 8]
sub esp, 0x10
fadd qword [0x1013f598]
mov ecx, 0x790b50
fstp dword [ebp - 4]
fld dword [0x1013fb20]
fst dword [esp + 0xc]
fstp dword [esp + 8]
fld dword [ebp + 0xc]
fadd qword [0x1013fa48]
fstp dword [ebp - 8]
fld dword [ebp - 8]
fstp dword [esp + 4]
fld dword [ebp - 4]
fstp dword [esp]
push 0xea5f
call ecx
fld dword [ebp + 0x14]
fld qword [0x1013f6c0]
add esp, 0x10
fsub st(1), st(0)
fxch st(1)
fst qword [ebp - 0x18]
fld dword [ebp + 0x10]
fsubrp st(2)
fxch st(1)
fst qword [ebp - 0x20]
fld dword [0x1013fbec]
fstp dword [esp]
push 0
push 0
fxch st(1)
fstp dword [ebp + 0x14]
push 0
fld dword [ebp + 0x14]
sub esp, 0x10
fstp dword [esp + 0xc]
fstp dword [ebp + 0x14]
fld dword [ebp + 0x14]
fstp dword [esp + 8]
fld dword [ebp + 0xc]
fadd qword [0x1013f998]
fstp dword [ebp + 0x14]
fld dword [ebp + 0x14]
fstp dword [esp + 4]
fld dword [ebp - 4]
mov eax, 0x1dc2
fstp dword [esp]
call fcn.100c7b80
cmp dword [0x10234a28], 0
jne 0x10067d16
push 8
mov edx, 0x861110
call edx
mov edx, 0x85ec20
mov ecx, eax
call edx
test al, al
jne 0x1006818f
push 0xf
mov eax, 0x861110
call eax
mov edx, 0x85ec20
mov ecx, eax
call edx
test al, al
jne 0x1006818f
push 0x4d
mov eax, 0x861110
call eax
mov edx, 0x85ec20
mov ecx, eax
call edx
test al, al
jne 0x1006818f
push 0x4e
mov eax, 0x861110
call eax
mov edx, 0x85ec20
mov ecx, eax
call edx
test al, al
jne 0x1006818f
push 0xe
mov eax, 0x861110
call eax
mov edx, 0x85ec20
mov ecx, eax
call edx
test al, al
jne 0x1006818f
push 9
mov eax, 0x861110
call eax
mov edx, 0x85ec20
mov ecx, eax
call edx
test al, al
jne 0x1006818f
push 9
mov eax, 0x861110
call eax
mov edx, 0x85ec20
mov ecx, eax
call edx
test al, al
jne 0x1006818f
push 0xa
mov eax, 0x861110
call eax
mov edx, 0x85ec20
mov ecx, eax
call edx
test al, al
jne 0x1006818f
push 0xb
mov eax, 0x861110
call eax
mov edx, 0x85ec20
mov ecx, eax
call edx
test al, al
jne 0x1006818f
push 0xc
mov eax, 0x861110
call eax
mov edx, 0x85ec20
mov ecx, eax
call edx
test al, al
jne 0x1006818f
push 7
mov eax, 0x861110
call eax
mov edx, 0x85ec20
mov ecx, eax
call edx
test al, al
jne 0x1006818f
mov eax, dword [0x10a888f0]
cmp byte [eax + 0x29], 0
jne 0x1006818f
cmp dword [0x10234b24], 0
jne 0x100679d2
fld dword [0x1013f908]
sub esp, 0x10
fstp dword [esp + 0xc]
mov ecx, 0x790b50
fld dword [0x1013f7a4]
fstp dword [esp + 8]
fld dword [ebp + 0xc]
fadd qword [0x1013fa48]
fstp dword [ebp + 0x14]
fld dword [ebp + 0x14]
fstp dword [esp + 4]
fld dword [ebp + 8]
fsub qword [0x10141170]
fstp dword [ebp + 0x14]
fld dword [ebp + 0x14]
fstp dword [esp]
push 0x81a8a
call ecx
add esp, 0x14
cmp dword [0x10234ad0], 0
jne 0x10067a26
fld dword [0x1013f908]
sub esp, 0x10
fstp dword [esp + 0xc]
mov edx, 0x790b50
fld dword [0x1013f7a4]
fstp dword [esp + 8]
fld dword [ebp + 0xc]
fadd qword [0x1013f9d8]
fstp dword [ebp + 0x14]
fld dword [ebp + 0x14]
fstp dword [esp + 4]
fld dword [ebp + 8]
fsub qword [0x10141170]
fstp dword [ebp + 0x14]
fld dword [ebp + 0x14]
fstp dword [esp]
push 0x81a8b
call edx
add esp, 0x14
cmp dword [0x10234b30], 0
jne 0x10067a7a
fld dword [0x1013f908]
sub esp, 0x10
fstp dword [esp + 0xc]
mov eax, 0x790b50
fld dword [0x1013f7a4]
fstp dword [esp + 8]
fld dword [ebp + 0xc]
fadd qword [0x1013fd78]
fstp dword [ebp + 0x14]
fld dword [ebp + 0x14]
fstp dword [esp + 4]
fld dword [ebp + 8]
fsub qword [0x10141170]
fstp dword [ebp + 0x14]
fld dword [ebp + 0x14]
fstp dword [esp]
push 0x81a8c
call eax
add esp, 0x14
cmp dword [0x10234b24], 0
jne 0x10067b3e
fld dword [0x1013f908]
sub esp, 0x10
fstp dword [esp + 0xc]
fld dword [0x1013f7a4]
fstp dword [esp + 8]
fld dword [ebp + 0xc]
fadd qword [0x1013fa48]
fstp dword [ebp + 0x14]
fld dword [ebp + 0x14]
fstp dword [esp + 4]
fld dword [ebp + 8]
fsub qword [0x10141170]
fstp dword [ebp + 0x14]
fld dword [ebp + 0x14]
fstp dword [esp]
call fcn.10037e20
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
test al, al
je 0x10067b44
call edi
add eax, 0x1f4
mov dword [0x118d9b64], eax
call edi
mov ecx, dword [0x116dcafc]
add ecx, 0x190
cmp ecx, eax
ja 0x10067b44
push ebx
mov edx, 0x791090
call edx
add esp, 4
test al, al
je 0x10067b44
mov eax, dword [0x1190acb4]
xor byte [eax + 0x29], bl
push 0
push 0
push 0x19
mov eax, 0x6d6c20
call eax
add esp, 0xc
push 0x22
mov ecx, 0x861110
call ecx
mov edx, 0x85f9a0
mov ecx, eax
call edx
call edi
mov dword [0x116dcafc], eax
call edi
add eax, 0x1f4
mov dword [0x10a88818], eax
jmp 0x10067b44
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
cmp dword [0x10234ad0], 0
jne 0x10067bf2
fld dword [ebp + 0xc]
push 0x2d
fadd qword [0x1013f9d8]
call fcn.1012e5b0
fld dword [ebp + 8]
fsub qword [0x10141170]
mov dword [ebp + 0x14], eax
call fcn.1012e5b0
mov edx, dword [ebp + 0x14]
mov esi, 0x26
mov ecx, eax
call fcn.10046570
test al, al
je 0x10067bf2
call edi
add eax, 0x1f4
mov dword [0x118d9b64], eax
call edi
mov ecx, dword [0x116dcafc]
add ecx, 0x190
cmp ecx, eax
ja 0x10067bf2
push ebx
mov edx, 0x791090
call edx
add esp, 4
test al, al
je 0x10067bf2
call edi
mov ecx, dword [0x10a8883c]
sub eax, dword [ecx + 0x30]
cmp eax, 0x12c
jbe 0x10067bc9
call fcn.10021d90
push 0
push 0
push 0x19
mov edx, 0x6d6c20
call edx
add esp, 0xc
push 0x22
mov eax, 0x861110
call eax
mov edx, 0x85f9a0
mov ecx, eax
call edx
call edi
mov dword [0x116dcafc], eax
cmp dword [0x10234b30], 0
jne 0x10067c80
fld dword [ebp + 0xc]
push 0x2d
fadd qword [0x1013fd78]
call fcn.1012e5b0
fld dword [ebp + 8]
fsub qword [0x10141170]
mov dword [ebp + 0x14], eax
call fcn.1012e5b0
mov edx, dword [ebp + 0x14]
mov esi, 0x26
mov ecx, eax
call fcn.10046570
test al, al
je 0x10067c80
call edi
add eax, 0x1f4
mov dword [0x118d9b64], eax
call edi
mov ecx, dword [0x116dcafc]
add ecx, 0x190
cmp ecx, eax
ja 0x10067c80
push ebx
mov edx, 0x791090
call edx
add esp, 4
test al, al
je 0x10067c80
lea eax, [ebp - 0xc]
push eax
lea ecx, [esi - 0x1e]
mov dword [ebp - 0xc], 0x57d308c1
mov dword [ebp - 8], ebx
call fcn.10100800
add esp, 4
call edi
mov dword [0x116dcafc], eax
fld dword [ebp + 8]
sub esp, 0x10
fsub qword [0x10141170]
fstp dword [ebp + 0x14]
fld dword [0x1013f908]
fstp dword [esp + 0xc]
fld dword [0x1013f7a4]
fstp dword [esp + 8]
fld dword [ebp + 0xc]
fadd qword [0x1013f9d8]
fstp dword [ebp + 0x10]
fld dword [ebp + 0x10]
fstp dword [esp + 4]
fld dword [ebp + 0x14]
fstp dword [esp]
call fcn.10037e20
test al, al
je 0x10067cd1
call edi
add eax, 0x1f4
mov dword [0x10a88818], eax
fld dword [0x1013f908]
sub esp, 0x10
fstp dword [esp + 0xc]
fld dword [0x1013f7a4]
fstp dword [esp + 8]
fld dword [ebp + 0xc]
fadd qword [0x1013fd78]
fstp dword [ebp + 0x10]
fld dword [ebp + 0x10]
fstp dword [esp + 4]
fld dword [ebp + 0x14]
fstp dword [esp]
call fcn.10037e20
test al, al
je 0x10067d16
call edi
add eax, 0x1f4
mov dword [0x10a88818], eax
mov esi, dword [sym.imp.USER32.dll_wsprintfA]
push 0x10136024
push 0x10a75098
call esi
xor edi, edi
push 0x10136024
push 0x10a750fc
mov dword [0x10a768f8], edi
mov dword [0x10a76808], edi
call esi
push 0x10a2f420
push 0x10a75160
mov dword [0x10a768fc], edi
mov dword [0x10a7680c], edi
call esi
push 0x10136024
push 0x10a751c4
mov dword [0x10a76900], 0xc
mov dword [0x10a76810], 2
call esi
mov eax, dword [0x10150f28]
add esp, 0x20
cmp eax, 0xffffffff
je 0x10067faa
mov ecx, dword [eax*4 + 0x10150f14]
push ecx
push 0x10a2f498
push 0x10a75228
call esi
mov edx, dword [0x116dcacc]
mov eax, dword [0x10a76e50]
add esp, 0xc
push edx
push eax
push 0x10a2f510
push 0x10a7528c
mov dword [0x10a76908], 7
mov dword [0x10a76818], ebx
call esi
mov ecx, dword [0x116dcad0]
imul ecx, dword [0x10a76e50]
push ecx
push 0x10a2f588
push 0x10a752f0
mov dword [0x10a7690c], 3
mov dword [0x10a7681c], ebx
call esi
mov edx, dword [0x116dcad4]
imul edx, dword [0x10a76e50]
add esp, 0x1c
push edx
push 0x10a2f600
mov edi, 9
push 0x10a75354
mov dword [0x10a76910], edi
mov dword [0x10a76820], ebx
call esi
add esp, 0xc
push 0x10136024
push 0x10a753b8
mov dword [0x10a76914], edi
mov dword [0x10a76824], ebx
call esi
push 0x10a2f678
push 0x10a7541c
call esi
push 0x10136024
push 0x10a75480
mov dword [0x10a7691c], 8
mov dword [0x10a7682c], ebx
call esi
add esp, 0x18
push 0x116dcaa4
mov eax, 0x10150f28
call fcn.100681f0
mov eax, dword [eax + 4]
mov ecx, dword [0x10150f14]
push eax
push ecx
push 0x10a2f6f0
push 0x10a754e4
call esi
add esp, 0x10
mov edi, 0xd
push 0x116dcaa4
mov eax, 0x10150f28
mov dword [0x10a76924], edi
mov dword [0x10a76834], ebx
call fcn.100681f0
mov edx, dword [eax + 8]
mov eax, dword [0x10150f18]
push edx
push eax
push 0x10a2f768
push 0x10a75548
call esi
add esp, 0x10
push 0x116dcaa4
mov eax, 0x10150f28
mov dword [0x10a76928], edi
mov dword [0x10a76838], ebx
call fcn.100681f0
mov ecx, dword [eax + 0xc]
mov edx, dword [0x10150f1c]
push ecx
push edx
push 0x10a2f7e0
push 0x10a755ac
call esi
add esp, 0x10
push 0x116dcaa4
mov eax, 0x10150f28
mov dword [0x10a7692c], edi
mov dword [0x10a7683c], ebx
call fcn.100681f0
mov eax, dword [eax + 0x10]
mov ecx, dword [0x10150f20]
push eax
push ecx
push 0x10a2f858
push 0x10a75610
call esi
add esp, 0x10
push 0x116dcaa4
mov eax, 0x10150f28
mov dword [0x10a76930], edi
mov dword [0x10a76840], ebx
call fcn.100681f0
mov edx, dword [eax + 0x14]
mov eax, dword [0x10150f24]
push edx
push eax
push 0x10a2f8d0
push 0x10a75674
call esi
add esp, 0x10
push 0x116dcaa4
mov eax, 0x10150f28
mov dword [0x10a76934], edi
mov dword [0x10a76844], ebx
call fcn.100681f0
mov ecx, dword [eax + 0x18]
push ecx
push 0x10a2f948
push 0x10a756d8
call esi
mov dword [0x10a76938], edi
add esp, 0xc
mov dword [0x10a76848], ebx
mov edi, 0x11
jmp 0x10067fce
push 0x10a2f9c0
push 0x10a75228
call esi
add esp, 8
mov dword [0x10a76908], 7
mov dword [0x10a76818], ebx
mov edi, 5
mov eax, edi
imul eax, eax, 0x64
add eax, 0x10a75098
push 0x10136024
push eax
call esi
add edi, ebx
mov edx, edi
imul edx, edx, 0x64
add edx, 0x10a75098
push 0x10a2fa38
push edx
call esi
mov dword [edi*4 + 0x10a768f8], 5
mov dword [edi*4 + 0x10a76808], ebx
add edi, ebx
mov eax, edi
imul eax, eax, 0x64
add eax, 0x10a75098
push 0x10136024
push eax
call esi
add esp, 0x18
fld qword [ebp - 0x18]
add edi, ebx
call fcn.1012e5b0
fld qword [ebp - 0x20]
push eax
call fcn.1012e5b0
fld dword [ebp + 0xc]
cmp dword [0x10234a28], 0
push eax
jne 0x1006808b
fadd qword [0x1013fa48]
call fcn.1012e5b0
fld dword [ebp + 8]
fadd qword [0x1013f598]
push eax
call fcn.1012e5b0
push eax
mov eax, 0x790b10
call eax
add esp, 0x10
cmp al, bl
jne 0x10068147
fld dword [ebp + 0xc]
push ebx
fadd qword [0x1013f578]
push ebx
push 3
push 0
push edi
call fcn.1012e5b0
fld dword [ebp + 8]
fsub qword [0x1013fc90]
jmp 0x100680d0
fsub qword [0x1013f600]
call fcn.1012e5b0
fld dword [ebp + 8]
push eax
call fcn.1012e5b0
push eax
mov eax, 0x790b10
call eax
add esp, 0x10
cmp al, bl
jne 0x10068147
fld dword [ebp + 0xc]
push ebx
fadd qword [0x1013f578]
push ebx
push 3
push 0
push edi
call fcn.1012e5b0
fld dword [ebp + 8]
fsub qword [0x1013ff58]
push eax
call fcn.1012e5b0
push eax
mov ecx, 0x5bf700
call ecx
add esp, 0x1c
push ebx
mov edx, 0x791070
call edx
add esp, 4
test al, al
je 0x10068147
push 0x10
mov eax, 0x791090
call eax
add esp, 4
test al, al
je 0x10068147
cmp byte [0x118c7f81], 0
jne 0x10068147
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
mov ecx, dword [0x116dcafc]
add ecx, 0x190
cmp ecx, eax
jae 0x10068147
lea edx, [ebp - 0xc]
push edx
mov ecx, 8
mov dword [ebp - 0xc], 0x3ad308c1
mov dword [ebp - 8], 0x11
call fcn.10100800
add esp, 4
call esi
mov dword [0x116dcafc], eax
mov eax, 0x635f50
call eax
push 0
mov ecx, 0x635fd0
call ecx
add esp, 4
push 0
push 0
push 0
push 0
mov edx, 0x41fe10
call edx
mov edx, 0x4200b0
mov ecx, eax
call edx
mov eax, dword [0xe8c588]
push eax
mov eax, 0x41fe10
call eax
mov edx, 0x41ff80
mov ecx, eax
call edx
push eax
call dword [sym.imp.GDI32.dll_SelectObject]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10