Function at 0x6b05dc
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x5b
push 0
push 0
dec ecx
jne 0x6b05e4
push ebx
push esi
push edi
mov ebx, eax
mov edi, dword [0x70f140]
xor eax, eax
push ebp
push 0x6b123d
push dword fs:[eax]
mov dword fs:[eax], esp
xor esi, esi
call sub.KERNEL32.DLL_GetTickCount
sub eax, dword [ebx + 0x4dd0]
cmp eax, 0x3e8
jae 0x6b062d
mov edx, 0x6b1254
mov eax, dword [ebx + 0x490]
call fcn.006ef808
jmp 0x6b1207
mov edx, 0x18
mov eax, dword [ebx + 0x4a4]
call fcn.004e7fb4
test al, al
jne 0x6b0665
mov eax, dword [ebx + 0x458]
cmp byte [eax + 0x280], 0
je 0x6b0665
mov edx, 0x6b1284
mov eax, dword [ebx + 0x490]
call fcn.006ef808
jmp 0x6b1207
mov eax, dword [0x70f510]
mov eax, dword [eax]
mov edx, dword [eax + 0x3196c]
mov eax, dword [ebx + 0x4a4]
call fcn.004e7b60
test al, al
jne 0x6b0696
mov edx, 0x6b12b4
mov eax, dword [ebx + 0x490]
call fcn.006ef808
jmp 0x6b1207
cmp byte [ebx + 0x155c], 0
je 0x6b06c3
mov eax, dword [ebx + 0x458]
cmp byte [eax + 0x280], 0
jne 0x6b06c3
mov edx, 0x6b12c8
mov eax, dword [ebx + 0x490]
call fcn.006ef808
jmp 0x6b1207
cmp byte [ebx + 0x155d], 0
je 0x6b06f0
mov eax, dword [ebx + 0x458]
cmp byte [eax + 0x280], 0
je 0x6b06f0
mov edx, 0x6b12e0
mov eax, dword [ebx + 0x490]
call fcn.006ef808
jmp 0x6b1207
mov eax, dword [0x70f510]
mov eax, dword [eax]
cmp byte [eax + 0x3197f], 0
je 0x6b0724
mov eax, dword [ebx + 0x458]
cmp byte [eax + 0x280], 0
jne 0x6b0724
mov edx, 0x6b12f8
mov eax, dword [ebx + 0x490]
call fcn.006ef808
jmp 0x6b1207
mov eax, dword [ebx + 0x454]
call fcn.0056aab0
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0x6b0765
mov eax, dword [ebx + 0x454]
call fcn.0056a1bc
inc eax
je 0x6b0765
mov eax, dword [ebx + 0x454]
call fcn.0056a1bc
push eax
mov eax, dword [ebx + 0x454]
call fcn.0056aab0
pop edx
mov ecx, dword [eax]
call dword [ecx + 0x18]
mov esi, eax
test esi, esi
jne 0x6b079a
mov eax, dword [ebx + 0x458]
cmp byte [eax + 0x280], 0
je 0x6b079a
mov edx, 0x6b1320
mov eax, dword [ebx + 0x490]
call fcn.006ef808
xor edx, edx
mov eax, dword [ebx + 0x458]
call fcn.0053a2b8
jmp 0x6b1207
lea ecx, [ebp - 0x111]
mov eax, dword [0x70f510]
mov eax, dword [eax]
mov edx, dword [eax + 0x3196c]
mov eax, dword [ebx + 0x4a4]
call fcn.004e7a7c
test al, al
jne 0x6b07d1
mov edx, 0x6b1340
mov eax, dword [ebx + 0x490]
call fcn.006ef808
jmp 0x6b1207
lea ecx, [ebp - 0x212]
mov edx, esi
mov eax, dword [ebx + 0x4a4]
call fcn.004e7a7c
test al, al
jne 0x6b07fd
mov edx, 0x6b1364
mov eax, dword [ebx + 0x490]
call fcn.006ef808
jmp 0x6b1207
mov edx, esi
mov eax, dword [ebx + 0x4a4]
call fcn.004e7e90
test al, al
je 0x6b0823
mov edx, 0x6b138c
mov eax, dword [ebx + 0x490]
call fcn.006ef808
jmp 0x6b1207
mov eax, dword [0x70f510]
mov eax, dword [eax]
mov eax, dword [eax + 0x31968]
mov edx, esi
call fcn.004b8adc
test al, al
je 0x6b0850
mov edx, 0x6b13b8
mov eax, dword [ebx + 0x490]
call fcn.006ef808
jmp 0x6b1207
cmp byte [ebp - 0x9d], 0
je 0x6b087d
mov eax, dword [ebx + 0x458]
cmp byte [eax + 0x280], 0
jne 0x6b087d
mov edx, 0x6b13e4
mov eax, dword [ebx + 0x490]
call fcn.006ef808
jmp 0x6b1207
mov eax, dword [0x70f510]
mov eax, dword [eax]
cmp esi, dword [eax + 0x3196c]
jne 0x6b08ac
mov eax, dword [ebx + 0x434]
call fcn.00694f9c
mov edx, 0x6b1400
mov eax, dword [ebx + 0x490]
call fcn.006ef808
jmp 0x6b1207
mov eax, dword [ebx + 0x458]
cmp byte [eax + 0x280], 0
je 0x6b08d9
cmp byte [ebp - 0x150], 0
je 0x6b08d9
mov edx, 0x6b1424
mov eax, dword [ebx + 0x490]
call fcn.006ef808
jmp 0x6b1207
mov eax, dword [ebx + 0x458]
cmp byte [eax + 0x280], 0
jne 0x6b0906
cmp byte [ebp - 0x151], 0
je 0x6b0906
mov edx, 0x6b143c
mov eax, dword [ebx + 0x490]
call fcn.006ef808
jmp 0x6b1207
cmp byte [ebp - 0x1ed], 2
jne 0x6b096d
mov eax, dword [ebx + 0x458]
cmp byte [eax + 0x280], 0
je 0x6b093e
mov eax, dword [ebx + 0x434]
call fcn.00694f9c
mov edx, 0x6b1454
mov eax, dword [ebx + 0x490]
call fcn.006ef808
jmp 0x6b1207
mov eax, dword [ebx + 0x458]
cmp byte [eax + 0x280], 0
jne 0x6b096d
mov eax, dword [ebx + 0x434]
call fcn.00694f9c
mov edx, 0x6b1470
mov eax, dword [ebx + 0x490]
call fcn.006ef808
jmp 0x6b1207
lea edx, [ebp - 0xc]
mov eax, dword [ebx + 0x434]
call fcn.0069514c
mov eax, dword [0x70f510]
mov eax, dword [eax]
mov edx, 0x97
call fcn.00700d8c
fmul dword [0x6b1484]
fstp xword [ebp - 0x220]
wait
mov eax, dword [ebp - 0xc]
call fcn.00405100
mov dword [ebp - 0x224], eax
fild dword [ebp - 0x224]
fld xword [ebp - 0x220]
fcompp
fnstsw ax
sahf
jae 0x6b0a2c
cmp byte [ebp - 0xec], 0
je 0x6b09cc
cmp byte [ebp - 0xec], 1
jne 0x6b0a2c
lea eax, [ebp - 0x228]
push eax
mov eax, dword [0x70f510]
mov eax, dword [eax]
mov edx, 0x97
call fcn.00700d8c
fstp xword [ebp - 0x220]
wait
lea eax, [ebp - 0x220]
mov dword [ebp - 0x230], eax
mov byte [ebp - 0x22c], 3
lea edx, [ebp - 0x230]
xor ecx, ecx
mov eax, 0x6b1490
call fcn.0040b918
mov edx, dword [ebp - 0x228]
mov eax, dword [0x70f918]
mov eax, dword [eax]
mov eax, dword [eax + 0x3c]
mov eax, dword [eax]
call fcn.004b66f0
jmp 0x6b1207
lea edx, [ebp - 4]
mov eax, dword [ebx + 0x434]
call fcn.0069524c
cmp dword [ebp - 4], 0
jne 0x6b0a8b
cmp dword [ebp - 0xc], 0
jne 0x6b0a8b
lea edx, [ebp - 0x230]
mov eax, dword [0x70f91c]
mov eax, dword [eax]
call fcn.00466f64
mov eax, dword [ebp - 0x22c]
push eax
lea edx, [ebp - 0x238]
mov eax, dword [0x70f91c]
mov eax, dword [eax]
call fcn.00466f64
mov edx, dword [ebp - 0x238]
mov eax, dword [ebx + 0x494]
mov eax, dword [eax + 0x70]
pop ecx
mov ebx, dword [eax]
call dword [ebx + 0x40]
jmp 0x6b1207
lea edx, [ebp - 8]
mov eax, dword [ebx + 0x434]
call fcn.0069514c
mov eax, dword [ebp - 8]
call fcn.00405100
cmp eax, 0x1f4
jle 0x6b0abd
mov edx, 0x6b14cc
mov eax, dword [ebx + 0x490]
call fcn.006ef808
jmp 0x6b1207
mov al, byte [0x6b14d8]
push eax
lea eax, [ebp - 0x23c]
push eax
mov ecx, 0x6b14e4
mov edx, 0x6b14f8
mov eax, dword [ebp - 4]
call fcn.00410298
mov edx, dword [ebp - 0x23c]
lea eax, [ebp - 4]
call fcn.00404ec8
lea ecx, [ebp - 8]
mov eax, dword [0x70f918]
mov eax, dword [eax]
mov eax, dword [eax + 0x44]
mov eax, dword [eax]
mov edx, dword [ebp - 4]
call fcn.004b4e5c
mov eax, dword [ebx + 0x458]
cmp byte [eax + 0x280], 0
je 0x6b0b21
lea ecx, [ebp - 0x10]
mov eax, dword [edi]
mov edx, 0x6b1518
call fcn.006fbecc
jmp 0x6b0b30
lea ecx, [ebp - 0x10]
mov eax, dword [edi]
mov edx, 0x6b1534
call fcn.006fbecc
cmp byte [ebp - 0x9d], 0
je 0x6b0c71
mov al, byte [0x6b14d8]
push eax
lea eax, [ebp - 0x240]
push eax
xor ecx, ecx
mov edx, 0x6b1550
mov eax, dword [ebp - 0x10]
call fcn.00410298
mov edx, dword [ebp - 0x240]
lea eax, [ebp - 0x10]
call fcn.00404ec8
mov al, byte [0x6b14d8]
push eax
lea eax, [ebp - 0x244]
push eax
xor ecx, ecx
mov edx, 0x6b1568
mov eax, dword [ebp - 0x10]
call fcn.00410298
mov edx, dword [ebp - 0x244]
lea eax, [ebp - 0x10]
call fcn.00404ec8
mov al, byte [0x6b14d8]
push eax
lea eax, [ebp - 0x248]
push eax
xor ecx, ecx
mov edx, 0x6b157c
mov eax, dword [ebp - 0x10]
call fcn.00410298
mov edx, dword [ebp - 0x248]
lea eax, [ebp - 0x10]
call fcn.00404ec8
mov al, byte [0x6b14d8]
push eax
lea eax, [ebp - 0x24c]
push eax
mov ecx, 0x6b1594
mov edx, 0x6b15a4
mov eax, dword [ebp - 0x10]
call fcn.00410298
mov edx, dword [ebp - 0x24c]
lea eax, [ebp - 0x10]
call fcn.00404ec8
mov al, byte [0x6b14d8]
push eax
lea eax, [ebp - 0x250]
push eax
mov ecx, 0x6b1594
mov edx, 0x6b15bc
mov eax, dword [ebp - 0x10]
call fcn.00410298
mov edx, dword [ebp - 0x250]
lea eax, [ebp - 0x10]
call fcn.00404ec8
mov al, byte [0x6b14d8]
push eax
lea eax, [ebp - 0x254]
push eax
mov ecx, 0x6b1594
mov edx, 0x6b15d4
mov eax, dword [ebp - 0x10]
call fcn.00410298
mov edx, dword [ebp - 0x254]
lea eax, [ebp - 0x10]
call fcn.00404ec8
mov al, byte [0x6b14d8]
push eax
lea eax, [ebp - 0x258]
push eax
xor ecx, ecx
mov edx, 0x6b15e8
mov eax, dword [ebp - 0x10]
call fcn.00410298
mov edx, dword [ebp - 0x258]
lea eax, [ebp - 0x10]
call fcn.00404ec8
jmp 0x6b0d78
lea eax, [ebp - 0x25c]
push eax
lea ecx, [ebp - 0x111]
mov eax, dword [edi]
mov edx, dword [ebp - 0x10]
call fcn.006f9a44
mov edx, dword [ebp - 0x25c]
lea eax, [ebp - 0x10]
call fcn.00404ec8
lea eax, [ebp - 0x260]
push eax
lea ecx, [ebp - 0x111]
mov eax, dword [edi]
mov edx, dword [ebp - 0x10]
call fcn.006f8d2c
mov edx, dword [ebp - 0x260]
lea eax, [ebp - 0x10]
call fcn.00404ec8
lea eax, [ebp - 0x264]
push eax
lea ecx, [ebp - 0x111]
mov eax, dword [edi]
mov edx, dword [ebp - 0x10]
call fcn.006f9944
mov edx, dword [ebp - 0x264]
lea eax, [ebp - 0x10]
call fcn.00404ec8
push 0
lea eax, [ebp - 0x268]
push eax
lea ecx, [ebp - 0x111]
mov eax, dword [edi]
mov edx, dword [ebp - 0x10]
call fcn.006f90e4
mov edx, dword [ebp - 0x268]
lea eax, [ebp - 0x10]
call fcn.00404ec8
push 0
lea eax, [ebp - 0x26c]
push eax
lea ecx, [ebp - 0x111]
mov eax, dword [edi]
mov edx, dword [ebp - 0x10]
call fcn.006f9354
mov edx, dword [ebp - 0x26c]
lea eax, [ebp - 0x10]
call fcn.00404ec8
lea eax, [ebp - 0x270]
push eax
lea ecx, [ebp - 0x111]
mov eax, dword [edi]
mov edx, dword [ebp - 0x10]
call fcn.006f9030
mov edx, dword [ebp - 0x270]
lea eax, [ebp - 0x10]
call fcn.00404ec8
lea eax, [ebp - 0x274]
push eax
mov eax, dword [edi]
mov ecx, dword [ebp - 0x111]
mov edx, dword [ebp - 0x10]
call fcn.006f98a4
mov edx, dword [ebp - 0x274]
lea eax, [ebp - 0x10]
call fcn.00404ec8
cmp byte [ebp - 0x19e], 0
je 0x6b0ee3
mov al, byte [0x6b14d8]
push eax
lea eax, [ebp - 0x278]
push eax
xor ecx, ecx
mov edx, 0x6b15fc
mov eax, dword [ebp - 0x10]
call fcn.00410298
mov edx, dword [ebp - 0x278]
lea eax, [ebp - 0x10]
call fcn.00404ec8
mov al, byte [0x6b14d8]
push eax
lea eax, [ebp - 0x27c]
push eax
xor ecx, ecx
mov edx, 0x6b1614
mov eax, dword [ebp - 0x10]
call fcn.00410298
mov edx, dword [ebp - 0x27c]
lea eax, [ebp - 0x10]
call fcn.00404ec8
mov al, byte [0x6b14d8]
push eax
lea eax, [ebp - 0x280]
push eax
xor ecx, ecx
mov edx, 0x6b1628
mov eax, dword [ebp - 0x10]
call fcn.00410298
mov edx, dword [ebp - 0x280]
lea eax, [ebp - 0x10]
call fcn.00404ec8
mov al, byte [0x6b14d8]
push eax
lea eax, [ebp - 0x284]
push eax
mov ecx, 0x6b1594
mov edx, 0x6b1640
mov eax, dword [ebp - 0x10]
call fcn.00410298
mov edx, dword [ebp - 0x284]
lea eax, [ebp - 0x10]
call fcn.00404ec8
mov al, byte [0x6b14d8]
push eax
lea eax, [ebp - 0x288]
push eax
mov ecx, 0x6b1594
mov edx, 0x6b1658
mov eax, dword [ebp - 0x10]
call fcn.00410298
mov edx, dword [ebp - 0x288]
lea eax, [ebp - 0x10]
call fcn.00404ec8
mov al, byte [0x6b14d8]
push eax
lea eax, [ebp - 0x28c]
push eax
mov ecx, 0x6b1594
mov edx, 0x6b1670
mov eax, dword [ebp - 0x10]
call fcn.00410298
mov edx, dword [ebp - 0x28c]
lea eax, [ebp - 0x10]
call fcn.00404ec8
mov al, byte [0x6b14d8]
push eax
lea eax, [ebp - 0x290]
push eax
xor ecx, ecx
mov edx, 0x6b1684
mov eax, dword [ebp - 0x10]
call fcn.00410298
mov edx, dword [ebp - 0x290]
lea eax, [ebp - 0x10]
call fcn.00404ec8
mov al, byte [0x6b14d8]
push eax
lea eax, [ebp - 0x294]
push eax
xor ecx, ecx
mov edx, 0x6b1698
mov eax, dword [ebp - 0x10]
call fcn.00410298
mov edx, dword [ebp - 0x294]
lea eax, [ebp - 0x10]
call fcn.00404ec8
jmp 0x6b1150
test esi, esi
jne 0x6b1049
mov al, byte [0x6b14d8]
push eax
lea eax, [ebp - 0x298]
push eax
xor ecx, ecx
mov edx, 0x6b15fc
mov eax, dword [ebp - 0x10]
call fcn.00410298
mov edx, dword [ebp - 0x298]
lea eax, [ebp - 0x10]
call fcn.00404ec8
mov al, byte [0x6b14d8]
push eax
lea eax, [ebp - 0x29c]
push eax
xor ecx, ecx
mov edx, 0x6b1614
mov eax, dword [ebp - 0x10]
call fcn.00410298
mov edx, dword [ebp - 0x29c]
lea eax, [ebp - 0x10]
call fcn.00404ec8
mov al, byte [0x6b14d8]
push eax
lea eax, [ebp - 0x2a0]
push eax
xor ecx, ecx
mov edx, 0x6b1628
mov eax, dword [ebp - 0x10]
call fcn.00410298
mov edx, dword [ebp - 0x2a0]
lea eax, [ebp - 0x10]
call fcn.00404ec8
mov al, byte [0x6b14d8]
push eax
lea eax, [ebp - 0x2a4]
push eax
mov ecx, 0x6b16a4
mov edx, 0x6b1640
mov eax, dword [ebp - 0x10]
call fcn.00410298
mov edx, dword [ebp - 0x2a4]
lea eax, [ebp - 0x10]
call fcn.00404ec8
mov al, byte [0x6b14d8]
push eax
lea eax, [ebp - 0x2a8]
push eax
mov ecx, 0x6b16a4
mov edx, 0x6b1658
mov eax, dword [ebp - 0x10]
call fcn.00410298
mov edx, dword [ebp - 0x2a8]
lea eax, [ebp - 0x10]
call fcn.00404ec8
mov al, byte [0x6b14d8]
push eax
lea eax, [ebp - 0x2ac]
push eax
mov ecx, 0x6b16a4
mov edx, 0x6b1670
mov eax, dword [ebp - 0x10]
call fcn.00410298
mov edx, dword [ebp - 0x2ac]
lea eax, [ebp - 0x10]
call fcn.00404ec8
mov al, byte [0x6b14d8]
push eax
lea eax, [ebp - 0x2b0]
push eax
xor ecx, ecx
mov edx, 0x6b1684
mov eax, dword [ebp - 0x10]
call fcn.00410298
mov edx, dword [ebp - 0x2b0]
lea eax, [ebp - 0x10]
call fcn.00404ec8
mov al, byte [0x6b14d8]
push eax
lea eax, [ebp - 0x2b4]
push eax
xor ecx, ecx
mov edx, 0x6b1698
mov eax, dword [ebp - 0x10]
call fcn.00410298
mov edx, dword [ebp - 0x2b4]
lea eax, [ebp - 0x10]
call fcn.00404ec8
jmp 0x6b1150
lea eax, [ebp - 0x2b8]
push eax
lea ecx, [ebp - 0x212]
mov eax, dword [edi]
mov edx, dword [ebp - 0x10]
call fcn.006f6c70
mov edx, dword [ebp - 0x2b8]
lea eax, [ebp - 0x10]
call fcn.00404ec8
lea eax, [ebp - 0x2bc]
push eax
lea ecx, [ebp - 0x212]
mov eax, dword [edi]
mov edx, dword [ebp - 0x10]
call fcn.006f6398
mov edx, dword [ebp - 0x2bc]
lea eax, [ebp - 0x10]
call fcn.00404ec8
lea eax, [ebp - 0x2c0]
push eax
lea ecx, [ebp - 0x212]
mov eax, dword [edi]
mov edx, dword [ebp - 0x10]
call fcn.006f6b70
mov edx, dword [ebp - 0x2c0]
lea eax, [ebp - 0x10]
call fcn.00404ec8
push 0
lea eax, [ebp - 0x2c4]
push eax
lea ecx, [ebp - 0x212]
mov eax, dword [edi]
mov edx, dword [ebp - 0x10]
call fcn.006f6718
mov edx, dword [ebp - 0x2c4]
lea eax, [ebp - 0x10]
call fcn.00404ec8
push 0
lea eax, [ebp - 0x2c8]
push eax
lea ecx, [ebp - 0x212]
mov eax, dword [edi]
mov edx, dword [ebp - 0x10]
call fcn.006f693c
mov edx, dword [ebp - 0x2c8]
lea eax, [ebp - 0x10]
call fcn.00404ec8
lea eax, [ebp - 0x2cc]
push eax
lea ecx, [ebp - 0x212]
mov eax, dword [edi]
mov edx, dword [ebp - 0x10]
call fcn.006f669c
mov edx, dword [ebp - 0x2cc]
lea eax, [ebp - 0x10]
call fcn.00404ec8
lea eax, [ebp - 0x2d0]
push eax
mov eax, dword [edi]
mov ecx, dword [ebp - 0x212]
mov edx, dword [ebp - 0x10]
call fcn.006f6ad0
mov edx, dword [ebp - 0x2d0]
lea eax, [ebp - 0x10]
call fcn.00404ec8
call sub.KERNEL32.DLL_GetTickCount
mov dword [ebx + 0x4dd0], eax
lea eax, [ebp - 0x2d4]
push eax
mov eax, dword [edi]
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 0x10]
call fcn.006f6358
mov edx, dword [ebp - 0x2d4]
lea eax, [ebp - 0x10]
call fcn.00404ec8
call fcn.0040cee4
add esp, 0xfffffff8
fstp qword [esp]
wait
lea ecx, [ebp - 0x2d8]
mov eax, dword [edi]
mov edx, dword [ebp - 0x10]
call fcn.006fa090
mov edx, dword [ebp - 0x2d8]
lea eax, [ebp - 0x10]
call fcn.00404ec8
mov edx, dword [ebp - 0x10]
mov eax, dword [ebx + 0x490]
call fcn.006ef5e4
mov edx, dword [ebp - 0x10]
mov eax, dword [ebx + 0x490]
call fcn.006ef5e0
mov edx, dword [ebp - 0xc]
push edx
mov eax, dword [ebx + 0x458]
mov al, byte [eax + 0x280]
mov edx, eax
xor dl, 1
push edx
push 0
push eax
push 0
mov ecx, dword [ebp - 4]
mov edx, esi
mov eax, dword [ebx + 0x4a0]
call fcn.0053516c
mov eax, dword [ebx + 0x434]
call fcn.00694f9c
mov eax, dword [ebx + 0x434]
mov edx, dword [eax]
call dword [edx + 0xc4]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x6b1244
lea eax, [ebp - 0x2d8]
mov edx, 0x28
call fcn.00404e54
lea eax, [ebp - 0x228]
call fcn.00404e30
lea eax, [ebp - 0x10]
mov edx, 4
call fcn.00404e54
ret