Function at 0x6182a8
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffe0
push ebx
push esi
push edi
xor ecx, ecx
mov dword [ebp - 0x20], ecx
mov ebx, edx
mov esi, eax
xor eax, eax
push ebp
push 0x6189d6
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 1], 0
test ebx, ebx
je 0x6189c0
xor edx, edx
push ebp
push 0x61898b
push dword fs:[edx]
mov dword fs:[edx], esp
movzx eax, word [ebx]
cmp eax, 0xc6
jg 0x61832f
je 0x618969
add eax, 0xffffff5f
cmp eax, 9
ja case.0x618300.163
jmp dword [eax*4 + 0x618307]
cmp eax, 0xe5
jg 0x61835c
je 0x61860b
sub eax, 0xc8
je 0x618727
sub eax, 0x13
je 0x618495
dec eax
je 0x618561
jmp case.0x618300.163
sub eax, 0xe6
je 0x618972
sub eax, 7
je 0x618742
jmp case.0x618300.163
cmp word [ebx], 0xa1
jne 0x6183b3
cmp byte [esi + 0x22a], 0x32
jb 0x6183b3
cmp byte [esi + 0x2a7], 0
jne 0x6183b3
cmp word [esi + 0x34], 0x23
jae 0x6183b3
mov eax, 0x3e8
call fcn.00403484
mov edx, dword [esi + 0x400]
add edx, 0x320
add eax, edx
mov dword [esi + 0x400], eax
mov ecx, dword [ebx + 4]
xor edx, edx
mov eax, esi
call fcn.0060fbdc
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jle 0x61844e
mov ecx, dword [ebx + 0x10]
lea edx, [ebp - 8]
mov eax, esi
call fcn.0060fdd0
mov eax, esi
call fcn.006127e0
movzx eax, word [esi + 0x11e]
push eax
movzx eax, word [esi + 0x122]
push eax
mov eax, dword [ebx + 0x10]
push eax
push 0
push 0
movzx ecx, word [ebp - 8]
mov dx, 0xa3
mov eax, esi
call fcn.0060aa6c
cmp byte [esi + 0x22a], 0
je 0x61844e
cmp byte [esi + 0x2a3], 0
je 0x618426
imul eax, dword [ebp - 8], 0x3e8
sub dword [esi + 0x2ac], eax
movzx eax, word [ebp - 8]
push eax
movzx eax, word [esi + 0x11e]
push eax
movzx eax, word [esi + 0x122]
push eax
mov eax, dword [ebx + 0x10]
push eax
push 0
mov cx, 0x9e
mov edx, esi
mov eax, esi
call fcn.0060a2cc
cmp byte [esi + 0xb80], 0
je 0x618467
mov word [esi + 0x1be], 1
mov byte [esi + 0xb80], 0
cmp byte [esi + 0xb81], 0
jbe case.0x618300.163
dec byte [esi + 0xb81]
cmp byte [esi + 0xb81], 0
jne case.0x618300.163
mov word [esi + 0x1be], 1
jmp case.0x618300.163
mov edx, dword [esi + 0xd0]
mov eax, dword [ebx + 4]
add edx, eax
cmp edx, 0x12c
jge 0x6184db
cmp byte [esi + 0x22a], 0
jne 0x6184c6
add dword [esi + 0xd0], eax
mov dword [esi + 0x24c], 5
jmp case.0x618300.163
add dword [esi + 0xd0], eax
mov dword [esi + 0x24c], 5
jmp case.0x618300.163
mov dword [esi + 0xd0], 0x12c
jmp case.0x618300.163
mov eax, dword [ebx + 4]
push eax
mov eax, dword [ebx + 8]
push eax
mov eax, dword [ebx + 0xc]
push eax
mov eax, dword [ebx + 0x1c]
push eax
push 0
movzx ecx, word [ebx + 2]
movzx edx, word [ebx + 0x10]
mov eax, esi
call fcn.0060aa6c
cmp dword [ebx + 0x10], 0x9e
jne 0x61853f
cmp byte [esi + 0x22a], 0
je 0x61853f
movzx eax, word [ebx + 2]
push eax
mov eax, dword [ebx + 4]
push eax
mov eax, dword [ebx + 8]
push eax
mov eax, dword [ebx + 0xc]
push eax
mov eax, dword [ebx + 0x1c]
push eax
movzx ecx, word [ebx + 0x10]
mov edx, esi
mov eax, esi
call fcn.0060a2cc
cmp byte [esi + 0xb80], 0
je case.0x618300.163
mov word [esi + 0x1be], 1
mov byte [esi + 0xb80], 0
jmp case.0x618300.163
movzx eax, word [ebx + 2]
mov dword [ebp - 0x14], eax
movzx eax, word [ebx + 4]
mov dword [ebp - 0xc], eax
mov eax, dword [ebx + 4]
shr eax, 0x10
movzx eax, ax
mov dword [ebp - 0x10], eax
mov eax, dword [ebx + 8]
mov dword [ebp - 0x18], eax
mov edi, dword [ebx + 0xc]
test edi, edi
je case.0x618300.163
mov ecx, dword [ebp - 0x14]
mov edx, esi
mov eax, edi
call fcn.0060fbdc
test eax, eax
jle case.0x618300.163
mov edx, edi
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x70]
cmp byte [edi + 0x22a], 0x32
jb 0x6185c5
fild dword [ebp - 0x14]
fld xword [0x6189e8]
fdivp st(1)
call fcn.00403560
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0xc]
sub eax, dword [edi + 0x24]
cdq
xor eax, edx
sub eax, edx
cmp eax, dword [ebp - 0x18]
jg case.0x618300.163
mov eax, dword [ebp - 0x10]
sub eax, dword [edi + 0x28]
cdq
xor eax, edx
sub eax, edx
cmp eax, dword [ebp - 0x18]
jg case.0x618300.163
push 0
mov eax, dword [ebp - 0x14]
push eax
push 0
push 0
push 0
mov cx, 0xa1
mov edx, esi
mov eax, edi
call fcn.0060a2cc
jmp case.0x618300.163
movzx eax, word [ebx + 2]
mov dword [ebp - 0x14], eax
movzx eax, word [ebx + 4]
mov dword [ebp - 0xc], eax
mov eax, dword [ebx + 4]
shr eax, 0x10
movzx eax, ax
mov dword [ebp - 0x10], eax
mov eax, dword [ebx + 8]
mov dword [ebp - 0x18], eax
mov edi, dword [ebx + 0xc]
test edi, edi
je case.0x618300.163
mov ecx, dword [ebp - 0x14]
mov edx, esi
mov eax, edi
call fcn.0060fbdc
test eax, eax
jle case.0x618300.163
mov edx, edi
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x70]
cmp byte [edi + 0x22a], 0x32
jb 0x61866f
fild dword [ebp - 0x14]
fld xword [0x6189e8]
fdivp st(1)
call fcn.00403560
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0xc]
sub eax, dword [edi + 0x24]
cdq
xor eax, edx
sub eax, edx
cmp eax, dword [ebp - 0x18]
jg case.0x618300.163
mov eax, dword [ebp - 0x10]
sub eax, dword [edi + 0x28]
cdq
xor eax, edx
sub eax, edx
cmp eax, dword [ebp - 0x18]
jg case.0x618300.163
push 0
mov eax, dword [ebp - 0x14]
push eax
push 0
push 0
push 0
mov cx, 0xa1
mov edx, esi
mov eax, edi
call fcn.0060a2cc
push 0
mov eax, dword [ebp - 0x14]
push eax
push 0
push 0
push 0
mov cx, 0xdb
mov edx, esi
mov eax, esi
call fcn.0060a2cc
push esi
mov eax, dword [esi + 0x24]
push eax
mov eax, dword [esi + 0x28]
push eax
push 0
push 0
mov cx, 0xb
mov dx, 0xd9
mov eax, esi
call fcn.0060aa6c
jmp case.0x618300.163
movzx ecx, word [ebx + 2]
mov edx, dword [ebx + 0x1c]
mov eax, esi
call fcn.006191c0
jmp case.0x618300.163
movzx eax, word [ebx + 2]
mov dword [ebp - 0x14], eax
mov eax, dword [ebx + 8]
mov dword [ebp - 0x18], eax
mov edi, dword [ebx + 0xc]
test edi, edi
je case.0x618300.163
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
mov eax, edi
call fcn.006132f8
jmp case.0x618300.163
mov eax, dword [ebx + 0xc]
push eax
push 0
mov ecx, dword [ebx + 8]
mov edx, dword [esi + 0x2e0]
mov eax, esi
call fcn.00617f30
jmp case.0x618300.163
mov eax, dword [ebx + 8]
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je case.0x618300.163
mov eax, dword [ebp - 0x1c]
mov edi, dword [eax]
mov eax, dword [ebp - 0x1c]
movzx eax, word [eax + 4]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x1c]
movzx eax, word [eax + 6]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 8]
mov dword [ebp - 0x18], eax
test edi, edi
je 0x61886f
mov eax, dword [ebp - 0xc]
sub eax, dword [esi + 0x24]
cdq
xor eax, edx
sub eax, edx
cmp eax, dword [ebp - 0x18]
jg 0x61886f
mov eax, dword [ebp - 0x10]
sub eax, dword [esi + 0x28]
cdq
xor eax, edx
sub eax, edx
cmp eax, dword [ebp - 0x18]
jg 0x61886f
mov edx, edi
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x70]
cmp byte [esi + 0x22a], 0
jne 0x6187c8
cmp byte [edi + 0x22a], 0
jne 0x6187c8
mov edx, edi
mov eax, esi
call fcn.0060e860
mov edx, edi
mov eax, esi
call fcn.0060e818
mov eax, dword [esi + 0x278]
test eax, eax
je 0x61882b
cmp eax, edi
je 0x61882b
cmp byte [edi + 0x22a], 0
jne 0x61882b
mov edx, edi
call fcn.0060e860
mov edx, dword [esi + 0x278]
mov eax, dword [0x6c10e4]
mov eax, dword [eax]
call fcn.0050ba00
test eax, eax
je 0x61882b
mov eax, dword [esi + 0x278]
mov eax, dword [eax + 0x2fc]
cmp eax, dword [edi + 0x2fc]
je 0x61882b
mov byte [edi + 0x298], 1
call sub.kernel32.dll_GetTickCount_1
mov dword [edi + 0x29c], eax
cmp dword [esi + 0x294], 0
je 0x618846
mov byte [edi + 0x298], 1
call sub.kernel32.dll_GetTickCount_1
mov dword [edi + 0x29c], eax
mov eax, dword [ebx + 0xc]
push eax
mov ecx, dword [ebx + 4]
movzx edx, word [ebx + 2]
mov eax, esi
call fcn.006109b8
cmp word [ebx + 2], 5
jne 0x61886f
mov eax, dword [ebp - 0x1c]
cmp byte [eax + 0xc], 0
je 0x61886f
mov byte [esi + 0xb81], 2
mov edx, 0xd
mov eax, dword [ebp - 0x1c]
call fcn.00402fb0
jmp case.0x618300.163
mov edi, dword [ebx + 8]
test edi, edi
je 0x618942
mov edx, edi
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x70]
cmp byte [esi + 0x22a], 0
jne 0x6188b0
cmp byte [edi + 0x22a], 0
jne 0x6188b0
mov edx, edi
mov eax, esi
call fcn.0060e860
mov edx, edi
mov eax, esi
call fcn.0060e818
mov eax, dword [esi + 0x278]
test eax, eax
je 0x618913
cmp eax, edi
je 0x618913
cmp byte [edi + 0x22a], 0
jne 0x618913
mov edx, edi
call fcn.0060e860
mov edx, dword [esi + 0x278]
mov eax, dword [0x6c10e4]
mov eax, dword [eax]
call fcn.0050ba00
test eax, eax
je 0x618913
mov eax, dword [esi + 0x278]
mov eax, dword [eax + 0x2fc]
cmp eax, dword [edi + 0x2fc]
je 0x618913
mov byte [edi + 0x298], 1
call sub.kernel32.dll_GetTickCount_1
mov dword [edi + 0x29c], eax
cmp dword [esi + 0x294], 0
je 0x61892e
mov byte [edi + 0x298], 1
call sub.kernel32.dll_GetTickCount_1
mov dword [edi + 0x29c], eax
mov eax, dword [ebx + 0xc]
push eax
mov ecx, dword [ebx + 4]
movzx edx, word [ebx + 2]
mov eax, esi
call fcn.006109b8
jmp case.0x618300.163
mov eax, dword [ebx + 0xc]
push eax
mov ecx, dword [ebx + 4]
movzx edx, word [ebx + 2]
mov eax, esi
call fcn.006109b8
jmp case.0x618300.163
mov ecx, dword [ebx + 4]
mov eax, dword [0x6c05f8]
mov eax, dword [eax]
mov edx, esi
call fcn.004f6b40
jmp case.0x618300.163
mov eax, esi
call fcn.00616190
jmp case.0x618300.163
mov edx, dword [esi + 0x2e0]
xor ecx, ecx
mov eax, esi
call fcn.00619158
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x6189c0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x6189dd
lea eax, [ebp - 0x20]
call fcn.00405394
ret