Function at 0x1007cef0
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x100ab320
push 0x1008695a
mov eax, dword fs:[0]
push eax
sub esp, 0x80
mov eax, dword [0x100ae8c8]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x1c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
wait
mov dword [ebp - 4], 0
cmp dword [0x3505b88], 0
je 0x1007d060
mov ebx, dword [0x2feacec]
push 0xda2b90
mov eax, dword [ebx + 0x1d20]
push eax
call fcn.10006f80
add esp, 8
mov edi, eax
cmp dword [0x1019f4d0], 1
jne 0x1007cfcb
test edi, edi
je 0x1007cfcb
cmp edi, ebx
je 0x1007cfcb
mov eax, dword [ebx + 0x47e4]
mov cx, word [0x101c04a0]
cmp cx, word [edi + 0x14]
je 0x1007cf98
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
mov dword [0x101c049c], eax
mov dx, word [edi + 0x14]
mov word [0x101c04a0], dx
jmp 0x1007cfd1
test eax, eax
jle 0x1007cfb2
mov byte [0x101c0498], 1
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
mov dword [0x101c049c], eax
jmp 0x1007cfd1
cmp byte [0x101c0498], 1
jne 0x1007d066
mov byte [0x101c0498], 0
call fcn.10037c50
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
cmp dword [0x1019f3e8], 1
jne 0x1007d246
push 0xda2b90
mov eax, dword [ebx + 0x1d20]
push eax
call fcn.10006f80
add esp, 8
test eax, eax
je 0x1007d162
cmp eax, ebx
je 0x1007d162
sub esp, 0x10
fld dword [0x101c04c8]
fstp dword [esp + 0xc]
fld dword [0x101c04cc]
fstp dword [esp + 8]
fld dword [eax + 0x1f74]
fstp dword [esp + 4]
fld dword [eax + 0x1f6c]
fstp dword [esp]
call fcn.10008270
add esp, 0x10
fild dword [0x1019f3f0]
fcompp
fnstsw ax
test ah, 5
jp 0x1007d162
push 8
push 0x100a2008
call fcn.1003ae80
push 0xffff
call fcn.1006e6c0
add esp, 0xc
wait
jmp 0x1007d7fe
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
cmp byte [0x1012d3fd], 1
jne 0x1007d088
call esi
mov dword [0x101c049c], eax
mov byte [0x1012d3fd], 0
jmp 0x1007cfd1
call esi
sub eax, dword [0x101c049c]
cmp eax, 0x1b58
jb 0x1007d0d6
push 0xa
lea eax, [ebp - 0x50]
push eax
movzx ecx, word [0x101c04a0]
push ecx
call dword [sym.imp.MSVCR100D.dll__itoa]
push 8
lea edx, [ebp - 0x50]
push edx
call fcn.1003ae80
movzx eax, word [0x101c04a0]
mov byte [eax + 0x1011d208], 1
push 0xffff
call fcn.1006e6c0
add esp, 0x18
jmp 0x1007cfd1
call esi
sub eax, dword [0x101c049c]
cmp eax, 0xfa0
jb 0x1007cfd1
call esi
sub eax, dword [0x1012d208]
cmp eax, 0xfa0
jb 0x1007d109
call fcn.10037c50
call esi
mov dword [0x101c049c], eax
jmp 0x1007cfd1
call esi
sub eax, dword [0x101c0494]
cmp eax, 0x12c
jbe 0x1007cfd1
call esi
mov dword [0x101c0494], eax
sub esp, 8
fld dword [ebx + 0x1f74]
fstp dword [esp + 4]
fld dword [ebx + 0x1f6c]
fstp dword [esp]
call fcn.10037e50
call fcn.10037c50
push 0
movzx ecx, word [0x101c04a0]
push ecx
mov edx, dword [0x1019f4ac]
dec edx
push edx
call fcn.10037f90
add esp, 0x14
jmp 0x1007cfd1
sub esp, 0x10
fld dword [0x101c04c8]
fstp dword [esp + 0xc]
fld dword [0x101c04cc]
fstp dword [esp + 8]
fld dword [ebx + 0x1f74]
fstp dword [esp + 4]
fld dword [ebx + 0x1f6c]
fstp dword [esp]
call fcn.10008270
add esp, 0x10
fild dword [0x1019f3f0]
fcompp
fnstsw ax
test ah, 5
jnp 0x1007d1eb
sub esp, 0x10
fld dword [0x101c04c8]
fstp dword [esp + 0xc]
fld dword [0x101c04cc]
fstp dword [esp + 8]
fld dword [ebx + 0x1f74]
fstp dword [esp + 4]
fld dword [ebx + 0x1f6c]
fstp dword [esp]
call fcn.10008270
add esp, 0x10
fcomp qword [0x100a0660]
fnstsw ax
test ah, 0x41
jne 0x1007d246
cmp dword [0x1019f4c8], 1
jne 0x1007d246
push fcn.1007be70
push 0x1f4
mov ecx, dword [0x101a46e8]
add ecx, 0x59
push ecx
mov edx, dword [0x100eaf2c]
push edx
call dword [sym.imp.USER32.dll_SetTimer]
mov byte [0x1012d416], 1
mov dword [0x1011d174], 0
push 0
push 0
push 0
push 0
call fcn.1007be70
push 8
push 0x100a1ff8
call fcn.1003ae80
add esp, 8
mov byte [0x1012d409], 0
wait
jmp 0x1007d7fe
mov eax, dword [0x2feacec]
cmp dword [eax + 0x2a60], 6
jne 0x1007d28b
call esi
sub eax, dword [0x101c0490]
cmp eax, 0x12c
jbe 0x1007d28b
push 0x10095708
call fcn.100464e0
push 0x1009edf4
call fcn.100464e0
push 0x1009ee00
call fcn.100464e0
add esp, 0xc
call esi
mov dword [0x101c0490], eax
cmp dword [0x1019f3e4], 1
jne 0x1007d61f
call esi
sub eax, dword [0x101c0428]
mov ecx, dword [0x1019f590]
imul ecx, ecx, 0x3e8
cmp eax, ecx
jb 0x1007d2cb
cmp dword [0x1019f58c], 1
jne 0x1007d2cb
push 0xffff
call fcn.1006e6c0
add esp, 4
jmp 0x1007d4d9
test edi, edi
je 0x1007d44d
cmp edi, ebx
je 0x1007d44d
cmp dword [0x1019f3f4], 1
jne 0x1007d304
push edi
call fcn.1003ae70
add esp, 4
test al, al
jne 0x1007d304
push 0xffff
call fcn.1006e6c0
add esp, 4
wait
jmp 0x1007d7fe
push 1
push edi
call fcn.1007b560
add esp, 8
test al, al
jne 0x1007d332
push 0xffff
call fcn.1006e6c0
push 8
push 0x100a1fdc
call fcn.1003ae80
add esp, 0xc
wait
jmp 0x1007d7fe
cmp dword [0x1019f4a4], 2
jne 0x1007d3b4
call esi
sub eax, dword [0x101c048c]
cmp eax, 0x3e8
jb 0x1007d3b4
call esi
mov dword [0x101c048c], eax
call fcn.1007bad0
mov edi, eax
cmp edi, dword [ebx + 0x1d20]
je 0x1007d3b4
call fcn.10037c50
push edi
call fcn.1006e6c0
push 0xda2b90
mov edx, dword [ebx + 0x1d20]
push edx
call fcn.10006f80
mov cx, word [eax + 0x14]
mov word [0x101c04a0], cx
add eax, 0x526c
push eax
push 0x100a1fd0
push str._s:_s
lea edx, [ebp - 0x80]
push edx
call dword [sym.imp.MSVCR100.dll_sprintf]
push 8
lea eax, [ebp - 0x80]
push eax
call fcn.1003ae80
add esp, 0x24
jmp 0x1007d768
push 0xda2b90
mov ecx, dword [ebx + 0x1d20]
push ecx
call fcn.10006f80
fld dword [eax + 0x1f6c]
fstp dword [ebp - 0x90]
fld dword [eax + 0x1f74]
fstp dword [ebp - 0x8c]
fld dword [ebp - 0x8c]
fstp dword [esp + 4]
fld dword [ebp - 0x90]
fstp dword [esp]
sub esp, 8
fld dword [ebx + 0x1f74]
fstp dword [esp + 4]
fld dword [ebx + 0x1f6c]
fstp dword [esp]
call fcn.10008270
add esp, 0x10
fcomp dword [0x1009e930]
fnstsw ax
test ah, 0x41
jne 0x1007d61f
call esi
sub eax, dword [0x101c0488]
cmp eax, 0xfa
jb 0x1007d61f
mov edx, dword [ebx + 0x1d20]
push edx
call fcn.1006e6c0
add esp, 4
call esi
mov dword [0x101c0488], eax
jmp 0x1007d61f
call fcn.1007bad0
mov edi, eax
test edi, edi
jle 0x1007d4b9
call fcn.10037c50
push edi
call fcn.1006e6c0
push 0xda2b90
mov eax, dword [ebx + 0x1d20]
push eax
call fcn.10006f80
add esp, 0xc
mov edi, eax
call esi
mov dword [0x101c049c], eax
mov cx, word [edi + 0x14]
mov word [0x101c04a0], cx
add edi, 0x526c
push edi
push 0x100a1fd0
push str._s:_s
lea edx, [ebp - 0x80]
push edx
call dword [sym.imp.MSVCR100.dll_sprintf]
push 8
lea eax, [ebp - 0x80]
push eax
call fcn.1003ae80
add esp, 0x18
jmp 0x1007d768
cmp dword [0x1019f58c], 1
jne 0x1007d568
call esi
sub eax, dword [0x101c0428]
cmp eax, 0x7d0
jb 0x1007d568
call esi
mov dword [0x101c0428], eax
mov ecx, dword [0x101b8d5c]
dec ecx
push ecx
call fcn.1007bf70
add esp, 4
mov dword [0x101b8d5c], eax
xor edi, edi
cmp eax, edi
jl 0x1007d568
push 0x1007ce80
push 0x64
mov edx, dword [0x101a46e8]
add edx, 0x59
push edx
mov eax, dword [0x100eaf2c]
push eax
call dword [sym.imp.USER32.dll_SetTimer]
mov byte [0x1012d416], 1
mov dword [0x1011d174], edi
mov ecx, dword [0x101b8d5c]
push ecx
call fcn.1007bf00
mov dword [0x1012d38c], edi
mov edx, dword [0x101b8d5c]
push edx
push 0x100a1fc0
lea eax, [ebp - 0x30]
push eax
call dword [sym.imp.MSVCR100.dll_sprintf]
push 8
lea ecx, [ebp - 0x30]
push ecx
call fcn.1003ae80
add esp, 0x18
mov byte [0x1012d409], 0
wait
jmp 0x1007d7fe
call esi
mov dword [0x101c049c], eax
xor edx, edx
mov word [0x101c04a0], dx
mov byte [0x1012d409], dl
cmp dword [0x1019f3e8], 1
jne 0x1007d61f
call esi
sub eax, dword [0x101c0484]
cmp eax, 0x12c
jb 0x1007d61f
call esi
mov dword [0x101c0484], eax
sub esp, 8
fld dword [ebx + 0x1f6c]
fstp dword [esp + 4]
fld dword [0x101c04cc]
fstp dword [esp]
call fcn.10056030
add esp, 8
fcomp dword [0x1009e724]
fnstsw ax
test ah, 5
jp 0x1007d5fb
sub esp, 8
fld dword [ebx + 0x1f74]
fstp dword [esp + 4]
fld dword [0x101c04c8]
fstp dword [esp]
call fcn.10056030
add esp, 8
fcomp dword [0x1009e724]
fnstsw ax
test ah, 5
jnp 0x1007d61f
sub esp, 0xc
fld dword [0x101c04c8]
fstp dword [esp + 8]
fldz
fstp dword [esp + 4]
fld dword [0x101c04cc]
fstp dword [esp]
call fcn.10038180
add esp, 0xc
mov eax, dword [ebx + 0x1d20]
cmp eax, 0xffff
je 0x1007d060
cmp eax, dword [ebx + 0xc]
je 0x1007d060
call esi
sub eax, dword [0x101c0480]
cmp eax, 0x12c
jbe 0x1007d060
call esi
mov dword [0x101c0480], eax
mov esi, 1
cmp dword [0x1019f3ec], esi
jne 0x1007d75e
mov eax, dword [ebx + 0x2a60]
cmp eax, 8
je 0x1007d6a3
cmp eax, 9
je 0x1007d6a3
cmp eax, 0xb
je 0x1007d6a3
cmp eax, 0xa
jne 0x1007d75e
call fcn.1003cb20
cmp al, 1
jne 0x1007d75e
cmp dword [0x1019f4a8], esi
sete al
mov byte [0x1012d409], al
wait
jmp 0x1007d7fe
xor edi, edi
mov dword [ebp - 0x88], edi
mov ecx, 0x101a20fc
call fcn.10001080
cmp edi, eax
jge 0x1007d75e
xor esi, esi
mov dword [ebp - 0x84], esi
cmp esi, 0x14
jge 0x1007d758
lea ecx, [ebp - 0x3c]
push ecx
push esi
call fcn.10006c20
add esp, 8
mov edx, dword [0x101a20fc]
mov ecx, dword [edx + edi*4]
lea eax, [ebp - 0x3c]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1007d707
test dl, dl
je 0x1007d703
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1007d707
add eax, 2
add ecx, 2
test dl, dl
jne 0x1007d6e7
xor eax, eax
jmp 0x1007d70c
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x1007d752
cmp dword [ebp - 0x24], eax
jne 0x1007d752
cmp dword [0x1019f4a8], 1
jne 0x1007d73c
mov byte [0x1012d409], 1
push 0xb
push esi
call fcn.10038380
add esp, 8
mov dword [0x100ae394], esi
wait
jmp 0x1007d7fe
push esi
call fcn.100380e0
add esp, 4
mov byte [0x1012d409], 0
wait
jmp 0x1007d7fe
inc esi
jmp 0x1007d6bf
inc edi
jmp 0x1007d6a5
mov dword [0x100ae394], 0xffffffff
mov eax, 1
cmp dword [0x1019f4a8], eax
jne 0x1007d7bf
cmp dword [0x1019f3ec], eax
jne 0x1007d7b5
push 0xda2b90
mov eax, dword [ebx + 0x1d20]
push eax
call fcn.10006f80
add esp, 8
test eax, eax
jle 0x1007d7b5
cmp eax, ebx
je 0x1007d7b5
push 0xb
mov ecx, dword [0x1019f4ac]
dec ecx
push ecx
call fcn.10038380
add esp, 8
mov byte [0x1012d409], 1
wait
jmp 0x1007d7fe
mov byte [0x1012d409], 0
wait
jmp 0x1007d7fe
cmp dword [0x1019f3ec], eax
jne 0x1007d7f2
push 0xda2b90
mov edx, dword [ebx + 0x1d20]
push edx
call fcn.10006f80
add esp, 8
test eax, eax
jle 0x1007d7f2
cmp eax, ebx
je 0x1007d7f2
mov eax, dword [0x1019f4ac]
dec eax
push eax
call fcn.100380e0
add esp, 4
wait
jmp 0x1007d7fe
mov dword [ebp - 4], 0xfffffffe
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x1c]
xor ecx, ebp
call fcn.10086786
mov esp, ebp
pop ebp
ret