Function at 0x6d92a0
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffff004
push eax
add esp, 0xfffffe98
push ebx
xor ebx, ebx
mov dword [ebp - 0x1054], ebx
mov dword [ebp - 0x1058], ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 8]
call fcn.004042a4
mov eax, dword [ebp - 0xc]
call fcn.004042a4
xor eax, eax
push ebp
push 0x6d9ab6
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x841184]
cmp byte [eax], 0
je 0x6d9471
mov byte [ebp - 0xd], 1
mov eax, dword [0x8417e4]
mov eax, dword [eax]
call fcn.0042d188
cmp byte [0x94f40e], 0
je 0x6d936d
cmp byte [ebp + 8], 0
jne 0x6d9364
push 0x40
lea edx, [ebp - 0x1054]
mov eax, dword [0x840618]
call fcn.00405e74
mov eax, dword [ebp - 0x1054]
call fcn.004042b4
push eax
lea edx, [ebp - 0x1058]
mov eax, dword [0x84100c]
call fcn.00405e74
mov eax, dword [ebp - 0x1058]
call fcn.004042b4
mov edx, eax
mov eax, dword [0x8417e4]
mov eax, dword [eax]
pop ecx
call fcn.0042d500
mov byte [ebp - 0xd], 0
jmp 0x6d9a76
mov eax, 0x94f3f0
call fcn.00403e74
lea eax, [ebp - 0x2c]
call fcn.00403e74
lea edx, [ebp - 0x104c]
lea eax, [ebp - 0x20]
call fcn.006d8d3c
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
jne 0x6d939c
cmp dword [ebp - 0x20], 0
je 0x6d936d
cmp dword [ebp - 0x48], 1
jle 0x6d93c6
lea edx, [ebp - 0x1054]
mov eax, dword [0x840ca0]
call fcn.00405e74
mov eax, dword [ebp - 0x1054]
call fcn.0044b3e4
mov byte [ebp - 0xd], 0
jmp 0x6d9a76
mov eax, dword [ebp - 0x20]
dec eax
test eax, eax
jl 0x6d9404
inc eax
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x18], 0
lea eax, [ebp - 0x1054]
mov edx, dword [ebp - 0x18]
mov dl, byte [ebp + edx - 0x104c]
call fcn.00404018
mov edx, dword [ebp - 0x1054]
lea eax, [ebp - 0x2c]
call fcn.004040f8
inc dword [ebp - 0x18]
dec dword [ebp - 0x4c]
jne 0x6d93d9
mov eax, dword [ebp - 0x2c]
call fcn.004040f0
sub eax, 0xb
jl 0x6d9449
inc eax
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x18], 0xb
lea eax, [ebp - 0x1054]
mov edx, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x18]
mov dl, byte [edx + ecx - 1]
call fcn.00404018
mov edx, dword [ebp - 0x1054]
mov eax, 0x94f3f0
call fcn.004040f8
inc dword [ebp - 0x18]
dec dword [ebp - 0x4c]
jne 0x6d941c
mov eax, dword [ebp - 0x2c]
call fcn.004040f0
cmp eax, 5
jl 0x6d9a76
mov eax, 0x94f3f0
call fcn.004042c0
mov edx, dword [ebp - 0x2c]
mov dl, byte [edx + 4]
mov byte [eax], dl
jmp 0x6d9a76
xor eax, eax
mov dword [ebp - 0x40], eax
xor eax, eax
mov dword [ebp - 0x44], eax
mov byte [ebp - 0xd], 1
mov byte [ebp - 0xe], 0
mov eax, dword [ebp - 4]
mov byte [eax], 1
call sub.KERNEL32.DLL_GetTickCount
mov dword [0x94f3ec], eax
mov eax, 0x94f3f0
call fcn.00403e74
xor eax, eax
mov dword [ebp - 0x1c], eax
mov byte [ebp - 0x12], 0
lea eax, [ebp - 0x3c]
call fcn.00403e74
mov byte [ebp - 0x34], 1
call fcn.0073b630
test al, al
je 0x6d9842
call fcn.0073b560
mov word [ebp - 0x26], ax
cmp word [ebp - 0x26], 0
jge 0x6d94d5
mov byte [ebp - 0x34], 0
jmp 0x6d94db
mov al, byte [ebp - 0x26]
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x34], 0
je 0x6d9842
cmp byte [0x94f18d], 0
je 0x6d950a
lea eax, [ebp - 0x1054]
mov dl, byte [ebp - 0x11]
call fcn.00404018
mov edx, dword [ebp - 0x1054]
lea eax, [ebp - 0x3c]
call fcn.004040f8
cmp byte [ebp - 0x11], 3
jne 0x6d951f
cmp byte [ebp - 0x12], 0x10
jne 0x6d951f
mov dword [ebp - 0x1c], 1
jmp 0x6d9524
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp byte [ebp - 0x11], 0x10
jne 0x6d9536
cmp byte [ebp - 0x12], 0x10
jne 0x6d9536
mov byte [ebp - 0x12], 0
jmp 0x6d955a
mov al, byte [ebp - 0x11]
mov byte [ebp - 0x12], al
lea eax, [ebp - 0x1054]
mov dl, byte [ebp - 0x11]
call fcn.00404018
mov edx, dword [ebp - 0x1054]
mov eax, 0x94f3f0
call fcn.004040f8
mov eax, dword [0x94f3f0]
call fcn.004040f0
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xff
jle 0x6d95c1
push 0x40
lea edx, [ebp - 0x1054]
mov eax, dword [0x840ca0]
call fcn.00405e74
mov eax, dword [ebp - 0x1054]
call fcn.004042b4
push eax
lea edx, [ebp - 0x1058]
mov eax, 0x6d8a64
call fcn.00405e74
mov eax, dword [ebp - 0x1058]
call fcn.004042b4
mov edx, eax
mov eax, dword [0x8417e4]
mov eax, dword [eax]
pop ecx
call fcn.0042d500
mov byte [ebp - 0xd], 0
jmp 0x6d9a76
cmp dword [ebp - 0x24], 2
jle 0x6d9842
mov eax, dword [0x94f3f0]
mov edx, dword [ebp - 0x24]
mov al, byte [eax + edx - 1]
mov byte [ebp - 0xf], al
mov eax, dword [0x94f3f0]
mov edx, dword [ebp - 0x24]
mov al, byte [eax + edx - 2]
mov byte [ebp - 0x10], al
cmp byte [ebp - 0xf], 3
jne 0x6d9842
cmp byte [ebp - 0x10], 0x10
jne 0x6d9842
cmp dword [ebp - 0x1c], 1
jne 0x6d9842
lea eax, [ebp - 0x1054]
push eax
mov ecx, 2
mov edx, 1
mov eax, dword [0x94f3f0]
call fcn.004042f4
mov edx, dword [ebp - 0x1054]
lea eax, [ebp - 0x1158]
mov ecx, 0xff
call fcn.004040cc
lea edx, [ebp - 0x1158]
lea eax, [ebp - 0x33]
mov cl, 2
call fcn.00402d1c
mov eax, dword [0x94f3f0]
mov edx, dword [ebp - 0x24]
movzx eax, byte [eax + edx - 3]
mov dword [0x94f3f4], eax
push 0x94f3f0
mov ecx, dword [ebp - 0x24]
sub ecx, 4
mov edx, 2
mov eax, dword [0x94f3f0]
call fcn.004042f4
call fcn.006d8bd0
mov byte [ebp - 0x35], al
cmp byte [ebp - 0x35], 0
jne 0x6d97b7
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], 8
jge 0x6d97b7
mov edx, 0x6d9ac8
lea eax, [ebp - 0x115c]
call fcn.00402d00
lea eax, [ebp - 0x1160]
mov edx, dword [0x94f3f0]
mov dl, byte [edx]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x1160]
lea eax, [ebp - 0x115c]
mov cl, 3
call fcn.00402cd0
lea edx, [ebp - 0x115c]
lea eax, [ebp - 0x1168]
call fcn.00402d00
mov edx, 0x6d9acc
lea eax, [ebp - 0x1168]
mov cl, 4
call fcn.00402cd0
lea edx, [ebp - 0x1168]
lea eax, [ebp - 0x2c]
call fcn.00404094
mov eax, dword [ebp - 0x2c]
call fcn.006d8cb4
mov edx, eax
lea eax, [ebp - 0x1054]
call fcn.00404018
mov edx, dword [ebp - 0x1054]
lea eax, [ebp - 0x2c]
call fcn.004040f8
lea eax, [ebp - 0x30]
call fcn.00403e74
mov eax, dword [ebp - 0x2c]
call fcn.004040f0
test eax, eax
jle 0x6d9781
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x18], 1
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x18]
cmp byte [eax + edx - 1], 0x10
jne 0x6d9756
lea eax, [ebp - 0x30]
mov edx, 0x6d9ad8
call fcn.004040f8
lea eax, [ebp - 0x1054]
mov edx, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x18]
mov dl, byte [edx + ecx - 1]
call fcn.00404018
mov edx, dword [ebp - 0x1054]
lea eax, [ebp - 0x30]
call fcn.004040f8
inc dword [ebp - 0x18]
dec dword [ebp - 0x4c]
jne 0x6d973c
push 0x6d9ad8
push dword [ebp - 0x30]
push 0x6d9ad8
push 0x6d9ae4
lea eax, [ebp - 0x30]
mov edx, 4
call fcn.004041b0
mov eax, 0x32
call fcn.007874b0
mov eax, dword [ebp - 0x30]
call fcn.0073b764
jmp 0x6d947b
lea eax, [ebp - 0x33]
mov edx, 0x94f3f8
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402dd0
je 0x6d97f3
lea eax, [ebp - 0x33]
mov edx, 0x94f400
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402dd0
je 0x6d97f3
lea eax, [ebp - 0x33]
mov edx, 0x94f408
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402dd0
jne 0x6d97fb
mov eax, dword [ebp - 4]
mov byte [eax], 0
jmp 0x6d9842
lea eax, [ebp - 0x33]
mov edx, 0x6d9ae8
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402dd0
jne 0x6d982f
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], 8
jge 0x6d982f
mov eax, 0x64
call fcn.007874b0
mov eax, dword [ebp - 0xc]
call fcn.0073b764
jmp 0x6d947b
mov eax, 0x94f3f0
call fcn.00403e74
xor eax, eax
mov dword [ebp - 0x1c], eax
mov byte [ebp - 0x12], 0
call sub.KERNEL32.DLL_GetTickCount
sub eax, dword [0x94f3ec]
cdq
xor eax, edx
sub eax, edx
cmp eax, dword [0x83cf8c]
jle 0x6d985e
mov byte [ebp - 0xe], 1
mov eax, dword [0x8417e4]
mov eax, dword [eax]
call fcn.0042d188
cmp byte [0x94f40e], 0
je 0x6d98cb
cmp byte [ebp + 8], 0
jne 0x6d98c1
push 0x40
lea edx, [ebp - 0x1054]
mov eax, dword [0x840618]
call fcn.00405e74
mov eax, dword [ebp - 0x1054]
call fcn.004042b4
push eax
lea edx, [ebp - 0x1058]
mov eax, dword [0x84100c]
call fcn.00405e74
mov eax, dword [ebp - 0x1058]
call fcn.004042b4
mov edx, eax
mov eax, dword [0x8417e4]
mov eax, dword [eax]
pop ecx
call fcn.0042d500
mov byte [ebp - 0xd], 0
mov eax, dword [ebp - 4]
mov byte [eax], 0
mov eax, dword [ebp - 4]
mov al, byte [eax]
xor al, 1
or al, byte [ebp - 0xe]
je 0x6d94ae
cmp byte [ebp - 0xe], 0
je 0x6d994b
lea edx, [ebp - 0x1054]
mov eax, dword [0x841654]
call fcn.00405e74
push dword [ebp - 0x1054]
push 0x6d9af4
push dword [ebp - 8]
lea eax, [ebp - 8]
mov edx, 3
call fcn.004041b0
cmp byte [ebp + 8], 0
jne 0x6d9947
push 0x40
lea edx, [ebp - 0x1054]
mov eax, dword [0x840ca0]
call fcn.00405e74
mov eax, dword [ebp - 0x1054]
call fcn.004042b4
push eax
mov eax, dword [ebp - 8]
call fcn.004042b4
mov edx, eax
mov eax, dword [0x8417e4]
mov eax, dword [eax]
pop ecx
call fcn.0042d500
mov byte [ebp - 0xd], 0
cmp byte [0x94f18d], 0
je 0x6d9a76
mov edx, dword [0x94f190]
mov eax, 0x94f194
call fcn.0040619e
mov eax, 0x94f194
call fcn.004066f5
call fcn.00402898
mov eax, 0x94f194
call fcn.0040699f
call fcn.00402898
mov edx, 0x6d9b00
mov eax, 0x94f194
call fcn.004044b0
call fcn.0040699f
call fcn.00402898
mov eax, dword [ebp - 0x3c]
call fcn.004040f0
test eax, eax
jle 0x6d9a58
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x18], 1
lea ecx, [ebp - 0x1054]
mov eax, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x18]
movzx eax, byte [eax + edx - 1]
mov edx, 2
call fcn.004094d8
lea eax, [ebp - 0x1054]
mov edx, 0x6d9af4
call fcn.004040f8
mov edx, dword [ebp - 0x1054]
mov eax, 0x94f194
call fcn.004044b0
call fcn.00406219
call fcn.00402898
mov eax, dword [ebp - 0x18]
and eax, 0x80000007
jns 0x6d9a0d
dec eax
or eax, 0xfffffff8
inc eax
test eax, eax
jne 0x6d9a2a
mov edx, 0x6d9b18
mov eax, 0x94f194
call fcn.004044b0
call fcn.00406219
call fcn.00402898
mov eax, dword [ebp - 0x18]
and eax, 0x8000000f
jns 0x6d9a39
dec eax
or eax, 0xfffffff0
inc eax
test eax, eax
jne 0x6d9a4c
mov eax, 0x94f194
call fcn.0040699f
call fcn.00402898
inc dword [ebp - 0x18]
dec dword [ebp - 0x4c]
jne 0x6d99b9
mov eax, 0x94f194
call fcn.0040699f
call fcn.00402898
mov eax, 0x94f194
call fcn.00406308
call fcn.00402898
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x6d9abd
lea eax, [ebp - 0x1058]
mov edx, 2
call fcn.00403e98
lea eax, [ebp - 0x3c]
call fcn.00403e74
lea eax, [ebp - 0x30]
mov edx, 2
call fcn.00403e98
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.00403e98
ret