Function at 0x1006bb10
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xd8
mov eax, dword [0x100ae8c8]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
mov ebx, dword [sym.imp.MSVCR100.dll_sprintf]
push esi
mov esi, dword [eax + 0xd0]
push edi
mov edi, dword [eax]
mov eax, dword [eax + 0x50]
mov dword [ebp - 0xc4], edi
mov dword [ebp - 0xc0], esi
mov dword [ebp - 0xd8], eax
test esi, esi
jle 0x1006c3ce
mov ecx, esi
imul ecx, ecx, 0x164
lea eax, [ecx + eax - 0x164]
mov dword [ebp - 0xb4], eax
mov eax, dword [eax + 0x150]
mov dword [ebp - 0xd4], eax
test eax, eax
jne 0x1006bb8b
push esi
push edi
call fcn.10046160
add esp, 8
cmp al, 1
jne 0x1006c3ce
cmp edi, dword [0x10152728]
jne 0x1006bbcf
movzx edx, byte [0x1015272c]
dec esi
cmp edx, esi
jne 0x1006bbcf
push 0x10152754
call fcn.100460c0
add esp, 4
cmp eax, dword [0x10152774]
jge 0x1006bbcf
pop edi
pop esi
mov dword [0x101b8d0c], 0
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10085dc6
mov esp, ebp
pop ebp
ret
xor eax, eax
mov dword [ebp - 0xc8], eax
mov dword [0x10152774], eax
mov dword [ebp - 0xb8], eax
cmp dword [0x101519f8], eax
jle 0x1006bdf7
mov dword [ebp - 0xd0], 0x1014d010
jmp 0x1006bc00
mov eax, dword [ebp - 0xc4]
mov ecx, dword [ebp - 0xb8]
cmp dword [ecx*4 + 0x10148628], eax
jne 0x1006bdca
mov edx, ecx
movzx eax, byte [edx + 0x10148d08]
mov ecx, dword [ebp - 0xc0]
dec ecx
cmp eax, ecx
jne 0x1006bdca
mov edx, dword [ebp - 0xd0]
push edx
mov dword [ebp - 0xc8], 1
call fcn.100460c0
mov esi, dword [ebp - 0xb8]
add esp, 4
cmp eax, dword [esi*4 + 0x101503a0]
jl 0x1006beb2
cmp dword [0x1019d784], 0
je 0x1006bdca
push 0x32
xor edi, edi
lea eax, [ebp - 0x9c]
push edi
push eax
call sub.MSVCR100.dll_memset
mov ecx, dword [ebp - 0xc0]
mov edx, dword [ebp - 0xc4]
push 0x10152754
push ecx
push edx
lea eax, [ebp - 0x9c]
push str._d__d__s
push eax
call ebx
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
add esp, 0x20
call esi
sub eax, dword [0x101b8d08]
cmp eax, 0x7530
jb 0x1006bccc
lea ecx, [ebp - 0x9c]
push ecx
push 2
call fcn.100397c0
add esp, 8
call esi
mov dword [0x101b8d08], eax
mov dword [ebp - 0xcc], 0x35f5170
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0xbc], edi
mov esi, dword [eax]
test esi, esi
je 0x1006be70
cmp byte [esi + 0x330], 0
je 0x1006be70
push 0x64
lea edx, [ebp - 0x68]
push 0
push edx
inc edi
call sub.MSVCR100.dll_memset
lea eax, [ebp - 0x9c]
push eax
add esi, 0x338
push esi
lea ecx, [ebp - 0x68]
push 0x100a11a4
push ecx
call ebx
add esp, 0x1c
mov ecx, 0x101a21f4
xor esi, esi
call fcn.10001240
test eax, eax
jle 0x1006bd7c
mov edx, dword [0x101a21f4]
mov eax, dword [edx + esi*4]
lea ecx, [ebp - 0x68]
nop
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006bd60
test dl, dl
je 0x1006bd5c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006bd60
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006bd40
xor eax, eax
jmp 0x1006bd65
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1006be6a
mov ecx, 0x101a21f4
inc esi
call fcn.10001240
cmp esi, eax
jl 0x1006bd33
mov dword [ebp - 0xbc], 1
test edi, edi
je 0x1006bdca
cmp dword [ebp - 0xbc], 0
je 0x1006bdca
cmp dword [0x101b8d0c], 0
je 0x1006be89
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [0x1019d788]
sub eax, dword [0x101b8d0c]
imul ecx, ecx, 0xea60
cmp eax, ecx
jb 0x1006c5ff
mov dword [0x101b8d0c], 0
mov eax, dword [ebp - 0xb8]
add dword [ebp - 0xd0], 0x1e
inc eax
mov dword [ebp - 0xb8], eax
cmp eax, dword [0x101519f8]
jl 0x1006bc00
cmp dword [ebp - 0xc8], 0
jne 0x1006c010
mov edx, dword [ebp - 0xb4]
mov ecx, dword [edx + 0x154]
sub ecx, dword [ebp - 0xd4]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov esi, edx
shr esi, 0x1f
add esi, edx
xor edi, edi
test esi, esi
jle 0x1006c010
mov ebx, dword [ebp - 0xd4]
lea esp, [esp]
mov ecx, dword [ebx]
lea eax, [ebp - 0x68]
push eax
push ecx
call fcn.1004a950
mov edx, dword [ebx + 8]
lea eax, [ebp - 0x68]
push eax
mov dword [ebp - 0xbc], edx
call fcn.100460c0
add esp, 0xc
cmp eax, dword [ebp - 0xbc]
jl 0x1006bf5d
inc edi
add ebx, 0x1c
cmp edi, esi
jl 0x1006be30
jmp 0x1006c00a
mov eax, dword [ebp - 0xcc]
add eax, 4
mov dword [ebp - 0xcc], eax
cmp eax, 0x35f518c
jl 0x1006bce2
jmp 0x1006bd86
push 0x100a1194
call fcn.10008090
add esp, 4
call dword [sym.imp.KERNEL32.dll_GetTickCount]
pop edi
pop esi
mov dword [0x101b8d0c], eax
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10085dc6
mov esp, ebp
pop ebp
ret
cmp byte [esi + 0x10151840], 1
mov edx, dword [esi*4 + 0x10148628]
mov dword [0x10152728], edx
jne 0x1006bede
fild dword [esi*4 + 0x10150a80]
fstp dword [0x10152748]
fild dword [esi*4 + 0x10151160]
jmp 0x1006bef2
fild dword [esi*4 + 0x1014bb70]
fstp dword [0x10152748]
fild dword [esi*4 + 0x1014c250]
mov eax, dword [esi*4 + 0x1014c930]
fstp dword [0x1015274c]
mov cl, byte [esi + 0x10148d08]
mov edx, esi
imul edx, edx, 0x1a
mov dword [0x10152750], eax
lea eax, [edx + 0x10148ec0]
mov edx, 0x1015272d
mov byte [0x1015272c], cl
sub edx, eax
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x1006bf22
mov eax, esi
shl eax, 4
sub eax, esi
lea eax, [eax*2 + 0x1014d010]
mov edx, 0x10152754
sub edx, eax
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x1006bf41
mov ecx, dword [esi*4 + 0x101503a0]
mov dword [0x10152774], ecx
jmp 0x1006c010
mov ecx, dword [ebp - 0xc4]
mov eax, dword [ebp - 0xd4]
lea edx, [edi*8]
sub edx, edi
cmp dword [0x10152720], 0
lea eax, [eax + edx*4]
mov dword [0x10152728], ecx
mov ecx, dword [eax + 0x10]
mov dword [0x10152750], ecx
jle 0x1006bfd0
mov ecx, dword [eax + 0x18]
mov edx, dword [eax + 0x14]
mov eax, dword [0x10151dc0]
imul edx, eax
imul eax, ecx
add edx, dword [0x10151b40]
mov ecx, dword [0x10151c80]
mov dword [ebp - 0xb4], edx
sub ecx, eax
fild dword [ebp - 0xb4]
mov dword [ebp - 0xb4], ecx
fstp dword [0x10152748]
fild dword [ebp - 0xb4]
fstp dword [0x1015274c]
mov dl, byte [ebp - 0xc0]
dec dl
mov byte [0x1015272c], dl
mov byte [0x1015272d], 0
xor eax, eax
jmp 0x1006bff0
mov cl, byte [ebp + eax - 0x68]
mov byte [eax + 0x10152754], cl
inc eax
test cl, cl
jne 0x1006bff0
mov eax, dword [ebp - 0xbc]
mov dword [0x10152774], eax
mov ebx, dword [sym.imp.MSVCR100.dll_sprintf]
xor edi, edi
cmp dword [0x10152774], edi
jle 0x1006c3ce
push 0x1f4
call sub.mfc100.dll_Ordinal_265
push 0x33cbd50
push 0x1011c4d0
mov esi, eax
push str._s_s.txt
push esi
mov dword [ebp - 0xb4], esi
call ebx
mov ebx, 1
add esp, 0x14
cmp dword [ebp - 0xc8], ebx
jne 0x1006c0a3
cmp dword [0x10152750], edi
jne 0x1006c0a3
push esi
call fcn.10055800
fld dword [0x10191920]
fst dword [0x1012d2a8]
push ebx
fstp dword [0x1012d2b0]
push 0x100a116c
fld dword [0x10191924]
fst dword [0x1012d2ac]
fstp dword [0x1012d2b4]
call fcn.10069f30
add esp, 0xc
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10085dc6
mov esp, ebp
pop ebp
ret
push 0x100946b8
push esi
call dword [sym.imp.MSVCR100.dll_fopen]
add esp, 8
test eax, eax
jne 0x1006c0c1
mov ecx, dword [0x1011d1bc]
call fcn.1005b6f0
mov esi, dword [sym.imp.USER32.dll_IsWindowVisible]
cmp dword [0x10191930], ebx
jne 0x1006c0f7
mov ecx, dword [0x101917e0]
push ecx
mov dword [0x10191930], edi
call esi
cmp eax, ebx
jne 0x1006c0ed
push edi
mov ecx, 0x101917c0
call sub.mfc100.dll_Ordinal_13219
mov ecx, 0x101917c0
call fcn.1000b840
cmp dword [0x10191854], edi
jne 0x1006c127
mov edx, dword [0x101917e0]
push edx
mov dword [0x10191854], ebx
call esi
cmp eax, ebx
jne 0x1006c11d
push edi
mov ecx, 0x101917c0
call sub.mfc100.dll_Ordinal_13219
mov ecx, 0x101917c0
call fcn.1000ba20
cmp dword [0x1019185c], ebx
jne 0x1006c156
mov eax, dword [0x101917e0]
push eax
mov dword [0x1019185c], edi
call esi
cmp eax, ebx
jne 0x1006c14c
push edi
mov ecx, 0x101917c0
call sub.mfc100.dll_Ordinal_13219
mov ecx, 0x101917c0
call fcn.1000ba20
cmp dword [0x1019dd70], ebx
jne 0x1006c19a
mov ecx, dword [0x101917e0]
push ecx
mov dword [0x10191bc0], ebx
mov dword [0x10191858], ebx
call esi
cmp eax, ebx
jne 0x1006c182
push edi
mov ecx, 0x101917c0
call sub.mfc100.dll_Ordinal_13219
mov ecx, 0x101917c0
call fcn.1000ba20
mov edx, dword [0x1019dd74]
mov dword [0x1019191c], edx
jmp 0x1006c1a4
mov dword [0x1019191c], 0xc8
push 0x10092e4c
mov ecx, 0x10194014
call sub.mfc100.dll_Ordinal_12868
fld dword [0x10152748]
mov eax, dword [0x101917e0]
fst dword [0x1012d2a8]
fstp dword [0x1012d2b0]
push eax
fld dword [0x1015274c]
mov dword [0x1019b798], edi
fst dword [0x1012d2ac]
mov dword [0x1019b78c], edi
fstp dword [0x1012d2b4]
mov dword [0x1019b790], edi
mov dword [0x1019b794], edi
mov dword [0x1019b7a0], edi
mov dword [0x10191bc4], 3
call esi
cmp eax, ebx
jne 0x1006c216
push edi
mov ecx, 0x101917c0
call sub.mfc100.dll_Ordinal_13219
mov eax, 0x1015272d
lea edx, [eax + 1]
mov edi, edi
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x1006c220
sub eax, edx
jne 0x1006c248
cmp dword [0x10191868], ebx
jne 0x1006c324
mov ecx, dword [0x101917e0]
mov dword [0x10191868], eax
push ecx
jmp 0x1006c303
mov edx, dword [0x10192cd0]
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
push 0
push 0
push 0x1009
push edx
call edi
xor eax, eax
mov cl, byte [eax + 0x1015272d]
mov byte [ebp + eax - 0x68], cl
inc eax
test cl, cl
jne 0x1006c262
mov ebx, dword [sym.imp.MSVCR100.dll_strtok]
lea eax, [ebp - 0x68]
push 0x1009e968
push eax
call ebx
mov esi, eax
add esp, 8
test esi, esi
je 0x1006c2ea
jmp 0x1006c290
mov ecx, dword [0x10192cd0]
push 0
push 0
push 0x1004
push ecx
call edi
push 0
push 0
push 0
push 0
push esi
push eax
push 1
mov ecx, 0x10192cb0
call sub.mfc100.dll_Ordinal_7211
mov edx, dword [0x10192cd0]
push 1
push 0
push 0
push 0x1004
push edx
call edi
dec eax
push eax
mov ecx, 0x10192cb0
call sub.mfc100.dll_Ordinal_12170
push 0x1009e968
push 0
call ebx
mov esi, eax
add esp, 8
test esi, esi
jne 0x1006c290
cmp dword [0x10191868], 0
jne 0x1006c324
mov eax, dword [0x101917e0]
mov dword [0x10191868], 1
push eax
call dword [sym.imp.USER32.dll_IsWindowVisible]
cmp eax, 1
jne 0x1006c31a
push 0
mov ecx, 0x101917c0
call sub.mfc100.dll_Ordinal_13219
mov ecx, 0x101917c0
call fcn.1000ba20
mov ecx, dword [0x10152750]
push ecx
lea edx, [ebp - 0xb0]
push edx
call fcn.10007970
add esp, 8
push eax
mov ecx, 0x10192d2c
call sub.mfc100.dll_Ordinal_12868
call fcn.1006e640
mov eax, dword [0x10152750]
mov dword [0x1011cd68], 2
mov dword [0x10152788], 0
cmp dword [0x35ec500], eax
je 0x1006c39f
push eax
lea eax, [ebp - 0xb0]
push eax
call fcn.10007970
push eax
mov eax, dword [0x10152788]
lea ecx, [eax + eax*4]
shl ecx, 4
add ecx, 0x1015278c
push 0x1009bb58
push ecx
call dword [sym.imp.MSVCR100.dll_sprintf]
add esp, 0x14
inc dword [0x10152788]
mov dword [0x101663f4], 1
call fcn.10060510
mov edx, dword [ebp - 0xb4]
push edx
call sub.mfc100.dll_Ordinal_1296
add esp, 4
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10085dc6
mov esp, ebp
pop ebp
ret
call fcn.1006e640
mov eax, dword [ebp - 0xc0]
mov edx, dword [0x10148620]
imul eax, eax, 0x164
add eax, dword [ebp - 0xd8]
xor ecx, ecx
mov dword [0x1011cd68], 2
mov dword [0x10152788], ecx
mov edi, dword [eax + 0x144]
mov eax, dword [eax + 0x134]
cmp edi, ecx
jne 0x1006c42b
cmp edx, ecx
jle 0x1006c42b
movzx esi, word [ecx*2 + 0x10147778]
cmp esi, eax
je 0x1006c424
inc ecx
cmp ecx, edx
jl 0x1006c411
jmp 0x1006c42b
mov edi, dword [ecx*4 + 0x10144c80]
xor esi, esi
test edx, edx
jle 0x1006c460
cmp dword [esi*4 + 0x10144c80], edi
jne 0x1006c44a
movzx ecx, word [esi*2 + 0x10147778]
cmp ecx, eax
je 0x1006c4c5
movzx ecx, word [esi*2 + 0x10147778]
cmp ecx, eax
jne 0x1006c45b
cmp eax, 0xc
je 0x1006c4c5
inc esi
cmp esi, edx
jl 0x1006c431
push 0x64
lea eax, [ebp - 0x68]
push 0
push eax
call sub.MSVCR100.dll_memset
mov esi, dword [ebp + 0xc]
add esp, 0xc
push 0x64
lea ecx, [ebp - 0x68]
push ecx
push 0
push esi
mov ecx, 0x1019d494
call sub.mfc100.dll_Ordinal_5176
push 0
push esi
mov ecx, 0x1019d494
call sub.mfc100.dll_Ordinal_12170
lea edx, [ebp - 0x68]
push edx
lea eax, [ebp - 0x9c]
push 0x100a1158
push eax
call ebx
lea ecx, [ebp - 0x9c]
push ecx
call fcn.10008090
add esp, 0x10
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10085dc6
mov esp, ebp
pop ebp
ret
mov edx, dword [esi*4 + 0x10144c80]
push edx
lea eax, [ebp - 0x68]
push eax
call fcn.10007970
push eax
mov eax, dword [0x10152788]
lea ecx, [eax + eax*4]
shl ecx, 4
add ecx, 0x1015278c
push 0x1009bb58
push ecx
call ebx
mov eax, dword [0x10152788]
mov edx, dword [esi*4 + 0x1014813c]
mov ecx, dword [esi*4 + 0x10147d54]
push edx
mov edx, dword [esi*4 + 0x1014796c]
mov edi, 1
add eax, edi
mov dword [0x10152788], eax
push ecx
lea eax, [eax + eax*4]
push edx
shl eax, 4
add eax, 0x1015278c
push 0x1009ffe0
push eax
call ebx
mov eax, dword [0x10152788]
add eax, edi
mov dword [0x10152788], eax
lea ecx, [esi + esi*4]
lea eax, [eax + eax*4]
lea edx, [ecx*8 + 0x10145068]
push edx
shl eax, 4
add eax, 0x1015278c
push 0x1009766c
push eax
call ebx
mov eax, dword [0x10152788]
mov ecx, dword [0x1009baec]
mov edx, dword [0x1009baf0]
add eax, edi
mov dword [0x10152788], eax
lea eax, [eax + eax*4]
shl eax, 4
add eax, 0x1015278c
mov dword [eax], ecx
mov cl, byte [0x1009baf4]
mov dword [eax + 4], edx
mov byte [eax + 8], cl
mov eax, dword [ebp - 0xc4]
add dword [0x10152788], edi
lea edx, [ebp - 0x68]
push edx
push eax
call fcn.100079d0
mov eax, dword [0x10152788]
lea ecx, [ebp - 0x68]
lea edx, [eax + eax*4]
push ecx
shl edx, 4
add edx, 0x1015278c
push 0x100a1148
push edx
call ebx
mov eax, dword [0x10152788]
mov ecx, dword [0x10097630]
mov edx, dword [0x10097634]
add eax, edi
mov dword [0x10152788], eax
lea eax, [eax + eax*4]
shl eax, 4
mov dword [eax + 0x1015278c], ecx
mov dword [eax + 0x10152790], edx
add esp, 0x48
add dword [0x10152788], edi
mov dword [0x101663f4], edi
mov byte [0x1012d413], 1
call fcn.10060510
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.10085dc6
mov esp, ebp
pop ebp
ret