Function at 0x1006c400
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xd8
mov eax, dword [0x100ae8c8]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
mov ebx, dword [sym.imp.MSVCR100.dll_sprintf]
push esi
mov esi, dword [eax + 0xd0]
push edi
mov edi, dword [eax]
mov eax, dword [eax + 0x50]
mov dword [ebp - 0xc4], edi
mov dword [ebp - 0xc0], esi
mov dword [ebp - 0xd8], eax
test esi, esi
jle 0x1006ccbe
mov ecx, esi
imul ecx, ecx, 0x164
lea eax, [ecx + eax - 0x164]
mov dword [ebp - 0xb4], eax
mov eax, dword [eax + 0x150]
mov dword [ebp - 0xd4], eax
test eax, eax
jne 0x1006c47b
push esi
push edi
call fcn.10046810
add esp, 8
cmp al, 1
jne 0x1006ccbe
cmp edi, dword [0x10152728]
jne 0x1006c4bf
movzx edx, byte [0x1015272c]
dec esi
cmp edx, esi
jne 0x1006c4bf
push 0x10152754
call fcn.10046770
add esp, 4
cmp eax, dword [0x10152774]
jge 0x1006c4bf
pop edi
pop esi
mov dword [0x101b8d18], 0
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10086746
mov esp, ebp
pop ebp
ret
xor eax, eax
mov dword [ebp - 0xc8], eax
mov dword [0x10152774], eax
mov dword [ebp - 0xb8], eax
cmp dword [0x101519f8], eax
jle 0x1006c6e7
mov dword [ebp - 0xd0], 0x1014d010
jmp 0x1006c4f0
mov eax, dword [ebp - 0xc4]
mov ecx, dword [ebp - 0xb8]
cmp dword [ecx*4 + 0x10148628], eax
jne 0x1006c6ba
mov edx, ecx
movzx eax, byte [edx + 0x10148d08]
mov ecx, dword [ebp - 0xc0]
dec ecx
cmp eax, ecx
jne 0x1006c6ba
mov edx, dword [ebp - 0xd0]
push edx
mov dword [ebp - 0xc8], 1
call fcn.10046770
mov esi, dword [ebp - 0xb8]
add esp, 4
cmp eax, dword [esi*4 + 0x101503a0]
jl 0x1006c7a2
cmp dword [0x1019d794], 0
je 0x1006c6ba
push 0x32
xor edi, edi
lea eax, [ebp - 0x9c]
push edi
push eax
call sub.MSVCR100.dll_memset
mov ecx, dword [ebp - 0xc0]
mov edx, dword [ebp - 0xc4]
push 0x10152754
push ecx
push edx
lea eax, [ebp - 0x9c]
push str._d__d__s
push eax
call ebx
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
add esp, 0x20
call esi
sub eax, dword [0x101b8d14]
cmp eax, 0x7530
jb 0x1006c5bc
lea ecx, [ebp - 0x9c]
push ecx
push 2
call fcn.10039d00
add esp, 8
call esi
mov dword [0x101b8d14], eax
mov dword [ebp - 0xcc], 0x35f6378
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0xbc], edi
mov esi, dword [eax]
test esi, esi
je 0x1006c760
cmp byte [esi + 0x330], 0
je 0x1006c760
push 0x64
lea edx, [ebp - 0x68]
push 0
push edx
inc edi
call sub.MSVCR100.dll_memset
lea eax, [ebp - 0x9c]
push eax
add esi, 0x338
push esi
lea ecx, [ebp - 0x68]
push 0x100a1200
push ecx
call ebx
add esp, 0x1c
mov ecx, 0x101a21f8
xor esi, esi
call fcn.10001040
test eax, eax
jle 0x1006c66c
mov edx, dword [0x101a21f8]
mov eax, dword [edx + esi*4]
lea ecx, [ebp - 0x68]
nop
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006c650
test dl, dl
je 0x1006c64c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006c650
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006c630
xor eax, eax
jmp 0x1006c655
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1006c75a
mov ecx, 0x101a21f8
inc esi
call fcn.10001040
cmp esi, eax
jl 0x1006c623
mov dword [ebp - 0xbc], 1
test edi, edi
je 0x1006c6ba
cmp dword [ebp - 0xbc], 0
je 0x1006c6ba
cmp dword [0x101b8d18], 0
je 0x1006c779
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [0x1019d798]
sub eax, dword [0x101b8d18]
imul ecx, ecx, 0xea60
cmp eax, ecx
jb 0x1006ceef
mov dword [0x101b8d18], 0
mov eax, dword [ebp - 0xb8]
add dword [ebp - 0xd0], 0x1e
inc eax
mov dword [ebp - 0xb8], eax
cmp eax, dword [0x101519f8]
jl 0x1006c4f0
cmp dword [ebp - 0xc8], 0
jne 0x1006c900
mov edx, dword [ebp - 0xb4]
mov ecx, dword [edx + 0x154]
sub ecx, dword [ebp - 0xd4]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov esi, edx
shr esi, 0x1f
add esi, edx
xor edi, edi
test esi, esi
jle 0x1006c900
mov ebx, dword [ebp - 0xd4]
lea esp, [esp]
mov ecx, dword [ebx]
lea eax, [ebp - 0x68]
push eax
push ecx
call fcn.1004b170
mov edx, dword [ebx + 8]
lea eax, [ebp - 0x68]
push eax
mov dword [ebp - 0xbc], edx
call fcn.10046770
add esp, 0xc
cmp eax, dword [ebp - 0xbc]
jl 0x1006c84d
inc edi
add ebx, 0x1c
cmp edi, esi
jl 0x1006c720
jmp 0x1006c8fa
mov eax, dword [ebp - 0xcc]
add eax, 4
mov dword [ebp - 0xcc], eax
cmp eax, 0x35f6394
jl 0x1006c5d2
jmp 0x1006c676
push 0x100a11f0
call fcn.100080a0
add esp, 4
call dword [sym.imp.KERNEL32.dll_GetTickCount]
pop edi
pop esi
mov dword [0x101b8d18], eax
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10086746
mov esp, ebp
pop ebp
ret
cmp byte [esi + 0x10151840], 1
mov edx, dword [esi*4 + 0x10148628]
mov dword [0x10152728], edx
jne 0x1006c7ce
fild dword [esi*4 + 0x10150a80]
fstp dword [0x10152748]
fild dword [esi*4 + 0x10151160]
jmp 0x1006c7e2
fild dword [esi*4 + 0x1014bb70]
fstp dword [0x10152748]
fild dword [esi*4 + 0x1014c250]
mov eax, dword [esi*4 + 0x1014c930]
fstp dword [0x1015274c]
mov cl, byte [esi + 0x10148d08]
mov edx, esi
imul edx, edx, 0x1a
mov dword [0x10152750], eax
lea eax, [edx + 0x10148ec0]
mov edx, 0x1015272d
mov byte [0x1015272c], cl
sub edx, eax
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x1006c812
mov eax, esi
shl eax, 4
sub eax, esi
lea eax, [eax*2 + 0x1014d010]
mov edx, 0x10152754
sub edx, eax
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x1006c831
mov ecx, dword [esi*4 + 0x101503a0]
mov dword [0x10152774], ecx
jmp 0x1006c900
mov ecx, dword [ebp - 0xc4]
mov eax, dword [ebp - 0xd4]
lea edx, [edi*8]
sub edx, edi
cmp dword [0x10152720], 0
lea eax, [eax + edx*4]
mov dword [0x10152728], ecx
mov ecx, dword [eax + 0x10]
mov dword [0x10152750], ecx
jle 0x1006c8c0
mov ecx, dword [eax + 0x18]
mov edx, dword [eax + 0x14]
mov eax, dword [0x10151dc0]
imul edx, eax
imul eax, ecx
add edx, dword [0x10151b40]
mov ecx, dword [0x10151c80]
mov dword [ebp - 0xb4], edx
sub ecx, eax
fild dword [ebp - 0xb4]
mov dword [ebp - 0xb4], ecx
fstp dword [0x10152748]
fild dword [ebp - 0xb4]
fstp dword [0x1015274c]
mov dl, byte [ebp - 0xc0]
dec dl
mov byte [0x1015272c], dl
mov byte [0x1015272d], 0
xor eax, eax
jmp 0x1006c8e0
mov cl, byte [ebp + eax - 0x68]
mov byte [eax + 0x10152754], cl
inc eax
test cl, cl
jne 0x1006c8e0
mov eax, dword [ebp - 0xbc]
mov dword [0x10152774], eax
mov ebx, dword [sym.imp.MSVCR100.dll_sprintf]
xor edi, edi
cmp dword [0x10152774], edi
jle 0x1006ccbe
push 0x1f4
call sub.mfc100.dll_Ordinal_265
push 0x33ccf58
push 0x1011c4d0
mov esi, eax
push str._s_s.txt
push esi
mov dword [ebp - 0xb4], esi
call ebx
mov ebx, 1
add esp, 0x14
cmp dword [ebp - 0xc8], ebx
jne 0x1006c993
cmp dword [0x10152750], edi
jne 0x1006c993
push esi
call fcn.10056070
fld dword [0x10191920]
fst dword [0x1012d2a8]
push ebx
fstp dword [0x1012d2b0]
push 0x100a11c8
fld dword [0x10191924]
fst dword [0x1012d2ac]
fstp dword [0x1012d2b4]
call fcn.1006a9a0
add esp, 0xc
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10086746
mov esp, ebp
pop ebp
ret
push 0x100946b8
push esi
call dword [sym.imp.MSVCR100.dll_fopen]
add esp, 8
test eax, eax
jne 0x1006c9b1
mov ecx, dword [0x1011d1bc]
call fcn.1005bed0
mov esi, dword [sym.imp.USER32.dll_IsWindowVisible]
cmp dword [0x10191930], ebx
jne 0x1006c9e7
mov ecx, dword [0x101917e0]
push ecx
mov dword [0x10191930], edi
call esi
cmp eax, ebx
jne 0x1006c9dd
push edi
mov ecx, 0x101917c0
call sub.mfc100.dll_Ordinal_13219
mov ecx, 0x101917c0
call fcn.1000b860
cmp dword [0x10191854], edi
jne 0x1006ca17
mov edx, dword [0x101917e0]
push edx
mov dword [0x10191854], ebx
call esi
cmp eax, ebx
jne 0x1006ca0d
push edi
mov ecx, 0x101917c0
call sub.mfc100.dll_Ordinal_13219
mov ecx, 0x101917c0
call fcn.1000ba40
cmp dword [0x1019185c], ebx
jne 0x1006ca46
mov eax, dword [0x101917e0]
push eax
mov dword [0x1019185c], edi
call esi
cmp eax, ebx
jne 0x1006ca3c
push edi
mov ecx, 0x101917c0
call sub.mfc100.dll_Ordinal_13219
mov ecx, 0x101917c0
call fcn.1000ba40
cmp dword [0x1019dd80], ebx
jne 0x1006ca8a
mov ecx, dword [0x101917e0]
push ecx
mov dword [0x10191bc0], ebx
mov dword [0x10191858], ebx
call esi
cmp eax, ebx
jne 0x1006ca72
push edi
mov ecx, 0x101917c0
call sub.mfc100.dll_Ordinal_13219
mov ecx, 0x101917c0
call fcn.1000ba40
mov edx, dword [0x1019dd84]
mov dword [0x1019191c], edx
jmp 0x1006ca94
mov dword [0x1019191c], 0xc8
push 0x10092e4c
mov ecx, 0x10194014
call sub.mfc100.dll_Ordinal_12868
fld dword [0x10152748]
mov eax, dword [0x101917e0]
fst dword [0x1012d2a8]
fstp dword [0x1012d2b0]
push eax
fld dword [0x1015274c]
mov dword [0x1019b7a8], edi
fst dword [0x1012d2ac]
mov dword [0x1019b79c], edi
fstp dword [0x1012d2b4]
mov dword [0x1019b7a0], edi
mov dword [0x1019b7a4], edi
mov dword [0x1019b7b0], edi
mov dword [0x10191bc4], 3
call esi
cmp eax, ebx
jne 0x1006cb06
push edi
mov ecx, 0x101917c0
call sub.mfc100.dll_Ordinal_13219
mov eax, 0x1015272d
lea edx, [eax + 1]
mov edi, edi
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x1006cb10
sub eax, edx
jne 0x1006cb38
cmp dword [0x10191868], ebx
jne 0x1006cc14
mov ecx, dword [0x101917e0]
mov dword [0x10191868], eax
push ecx
jmp 0x1006cbf3
mov edx, dword [0x10192cd0]
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
push 0
push 0
push 0x1009
push edx
call edi
xor eax, eax
mov cl, byte [eax + 0x1015272d]
mov byte [ebp + eax - 0x68], cl
inc eax
test cl, cl
jne 0x1006cb52
mov ebx, dword [sym.imp.MSVCR100.dll_strtok]
lea eax, [ebp - 0x68]
push 0x1009e980
push eax
call ebx
mov esi, eax
add esp, 8
test esi, esi
je 0x1006cbda
jmp 0x1006cb80
mov ecx, dword [0x10192cd0]
push 0
push 0
push 0x1004
push ecx
call edi
push 0
push 0
push 0
push 0
push esi
push eax
push 1
mov ecx, 0x10192cb0
call sub.mfc100.dll_Ordinal_7211
mov edx, dword [0x10192cd0]
push 1
push 0
push 0
push 0x1004
push edx
call edi
dec eax
push eax
mov ecx, 0x10192cb0
call sub.mfc100.dll_Ordinal_12170
push 0x1009e980
push 0
call ebx
mov esi, eax
add esp, 8
test esi, esi
jne 0x1006cb80
cmp dword [0x10191868], 0
jne 0x1006cc14
mov eax, dword [0x101917e0]
mov dword [0x10191868], 1
push eax
call dword [sym.imp.USER32.dll_IsWindowVisible]
cmp eax, 1
jne 0x1006cc0a
push 0
mov ecx, 0x101917c0
call sub.mfc100.dll_Ordinal_13219
mov ecx, 0x101917c0
call fcn.1000ba40
mov ecx, dword [0x10152750]
push ecx
lea edx, [ebp - 0xb0]
push edx
call fcn.10007980
add esp, 8
push eax
mov ecx, 0x10192d2c
call sub.mfc100.dll_Ordinal_12868
call fcn.1006ef80
mov eax, dword [0x10152750]
mov dword [0x1011cd68], 2
mov dword [0x10152788], 0
cmp dword [0x35ed708], eax
je 0x1006cc8f
push eax
lea eax, [ebp - 0xb0]
push eax
call fcn.10007980
push eax
mov eax, dword [0x10152788]
lea ecx, [eax + eax*4]
shl ecx, 4
add ecx, 0x1015278c
push 0x10097628
push ecx
call dword [sym.imp.MSVCR100.dll_sprintf]
add esp, 0x14
inc dword [0x10152788]
mov dword [0x101663f4], 1
call fcn.10060d60
mov edx, dword [ebp - 0xb4]
push edx
call sub.mfc100.dll_Ordinal_1296
add esp, 4
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10086746
mov esp, ebp
pop ebp
ret
call fcn.1006ef80
mov eax, dword [ebp - 0xc0]
mov edx, dword [0x10148620]
imul eax, eax, 0x164
add eax, dword [ebp - 0xd8]
xor ecx, ecx
mov dword [0x1011cd68], 2
mov dword [0x10152788], ecx
mov edi, dword [eax + 0x144]
mov eax, dword [eax + 0x134]
cmp edi, ecx
jne 0x1006cd1b
cmp edx, ecx
jle 0x1006cd1b
movzx esi, word [ecx*2 + 0x10147778]
cmp esi, eax
je 0x1006cd14
inc ecx
cmp ecx, edx
jl 0x1006cd01
jmp 0x1006cd1b
mov edi, dword [ecx*4 + 0x10144c80]
xor esi, esi
test edx, edx
jle 0x1006cd50
cmp dword [esi*4 + 0x10144c80], edi
jne 0x1006cd3a
movzx ecx, word [esi*2 + 0x10147778]
cmp ecx, eax
je 0x1006cdb5
movzx ecx, word [esi*2 + 0x10147778]
cmp ecx, eax
jne 0x1006cd4b
cmp eax, 0xc
je 0x1006cdb5
inc esi
cmp esi, edx
jl 0x1006cd21
push 0x64
lea eax, [ebp - 0x68]
push 0
push eax
call sub.MSVCR100.dll_memset
mov esi, dword [ebp + 0xc]
add esp, 0xc
push 0x64
lea ecx, [ebp - 0x68]
push ecx
push 0
push esi
mov ecx, 0x1019d4a4
call sub.mfc100.dll_Ordinal_5176
push 0
push esi
mov ecx, 0x1019d4a4
call sub.mfc100.dll_Ordinal_12170
lea edx, [ebp - 0x68]
push edx
lea eax, [ebp - 0x9c]
push 0x100a11b4
push eax
call ebx
lea ecx, [ebp - 0x9c]
push ecx
call fcn.100080a0
add esp, 0x10
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10086746
mov esp, ebp
pop ebp
ret
mov edx, dword [esi*4 + 0x10144c80]
push edx
lea eax, [ebp - 0x68]
push eax
call fcn.10007980
push eax
mov eax, dword [0x10152788]
lea ecx, [eax + eax*4]
shl ecx, 4
add ecx, 0x1015278c
push 0x10097628
push ecx
call ebx
mov eax, dword [0x10152788]
mov edx, dword [esi*4 + 0x1014813c]
mov ecx, dword [esi*4 + 0x10147d54]
push edx
mov edx, dword [esi*4 + 0x1014796c]
mov edi, 1
add eax, edi
mov dword [0x10152788], eax
push ecx
lea eax, [eax + eax*4]
push edx
shl eax, 4
add eax, 0x1015278c
push 0x100a0190
push eax
call ebx
mov eax, dword [0x10152788]
add eax, edi
mov dword [0x10152788], eax
lea ecx, [esi + esi*4]
lea eax, [eax + eax*4]
lea edx, [ecx*8 + 0x10145068]
push edx
shl eax, 4
add eax, 0x1015278c
push 0x1009767c
push eax
call ebx
mov eax, dword [0x10152788]
mov ecx, dword [0x1009bafc]
mov edx, dword [0x1009bb00]
add eax, edi
mov dword [0x10152788], eax
lea eax, [eax + eax*4]
shl eax, 4
add eax, 0x1015278c
mov dword [eax], ecx
mov cl, byte [0x1009bb04]
mov dword [eax + 4], edx
mov byte [eax + 8], cl
mov eax, dword [ebp - 0xc4]
add dword [0x10152788], edi
lea edx, [ebp - 0x68]
push edx
push eax
call fcn.100079e0
mov eax, dword [0x10152788]
lea ecx, [ebp - 0x68]
lea edx, [eax + eax*4]
push ecx
shl edx, 4
add edx, 0x1015278c
push 0x100a11a4
push edx
call ebx
mov eax, dword [0x10152788]
mov ecx, dword [0x10097640]
mov edx, dword [0x10097644]
add eax, edi
mov dword [0x10152788], eax
lea eax, [eax + eax*4]
shl eax, 4
mov dword [eax + 0x1015278c], ecx
mov dword [eax + 0x10152790], edx
add esp, 0x48
add dword [0x10152788], edi
mov dword [0x101663f4], edi
mov byte [0x1012d413], 1
call fcn.10060d60
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.10086746
mov esp, ebp
pop ebp
ret