Function at 0x6a114c
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffb4
push ebx
push esi
push edi
mov dword [ebp - 8], ecx
mov dword [ebp - 4], edx
mov ebx, eax
cmp dword [ebx + 0x498], 0
je 0x6a1170
cmp byte [ebp + 0xc], 0
je 0x6a1170
xor eax, eax
jmp 0x6a1172
mov al, 1
mov byte [ebp - 0x45], al
mov eax, dword [ebx + 0x298]
mov eax, dword [eax + 0xc]
cmp eax, dword [ebp - 8]
jg 0x6a1187
dec eax
mov dword [ebp - 8], eax
cmp byte [ebp + 0xc], 0
jne 0x6a11a7
mov eax, dword [ebx + 0x298]
mov eax, dword [eax + 0x40]
cmp eax, dword [ebp - 4]
jle 0x6a11a7
mov eax, dword [ebx + 0x298]
mov eax, dword [eax + 0x40]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
cmp eax, dword [ebp - 8]
jg 0x6a1550
cmp word [ebx + 0x3b2], 0
jne 0x6a11c1
mov byte [ebp + 8], 0
cmp byte [ebp + 8], 0
je 0x6a11d1
call sub.kernel32.dll_GetTickCount_1
mov dword [ebp - 0x34], eax
jmp 0x6a11d6
xor eax, eax
mov dword [ebp - 0x34], eax
mov byte [ebx + 0x491], 1
mov eax, dword [ebx + 0x53c]
mov dword [ebp - 0x20], eax
mov eax, dword [ebx + 0x498]
test eax, eax
jne 0x6a1204
mov eax, dword [ebx + 0x290]
mov dword [ebp - 0x14], eax
mov eax, dword [ebx + 0x48c]
mov dword [ebp - 0x1c], eax
jmp 0x6a1210
mov dword [ebp - 0x14], eax
mov eax, dword [ebx + 0x49c]
mov dword [ebp - 0x1c], eax
xor eax, eax
mov dword [ebp - 0x24], eax
xor eax, eax
mov dword [ebp - 0x28], eax
mov byte [ebp - 0x2d], 0
mov byte [ebp - 0x39], 0
mov eax, dword [ebx + 0x298]
mov eax, dword [eax + 0x40]
mov dword [ebp - 0x38], eax
xor eax, eax
mov dword [ebp - 0x2c], eax
cmp byte [ebp + 8], 0
jne 0x6a1243
mov edx, dword [ebp - 8]
mov eax, ebx
call fcn.006a155c
mov edi, dword [ebp - 4]
mov eax, dword [ebp - 8]
sub eax, edi
jl 0x6a1370
inc eax
mov dword [ebp - 0x4c], eax
cmp byte [ebp + 8], 0
je 0x6a1264
mov edx, edi
mov eax, ebx
call fcn.006a155c
mov edx, edi
mov eax, dword [ebx + 0x298]
call fcn.006921f4
mov esi, eax
cmp edi, dword [ebp - 4]
jle 0x6a1280
mov eax, dword [ebp - 0x2c]
mov dword [esi + 8], eax
jmp 0x6a1286
mov eax, dword [esi + 8]
mov dword [ebp - 0x2c], eax
cmp byte [ebp + 0xc], 0
jne 0x6a1296
test byte [esi + 0xc], 4
jne 0x6a1344
cmp byte [ebp + 8], 0
je 0x6a12cc
call sub.kernel32.dll_GetTickCount_1
sub eax, dword [ebp - 0x34]
cmp eax, dword [ebx + 0x374]
jbe 0x6a12cc
mov edx, ebx
mov eax, dword [ebx + 0x3b4]
call dword [ebx + 0x3b0]
cmp byte [ebp - 0x2d], 0
je 0x6a12c4
mov byte [ebp - 0x2d], 0
call sub.kernel32.dll_GetTickCount_1
mov dword [ebp - 0x34], eax
xor eax, eax
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x1c]
push eax
push esi
push edi
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x10]
push eax
push 1
lea eax, [ebp - 0x18]
push eax
lea eax, [ebx + 0x4ac]
push eax
lea eax, [ebx + 0x4b0]
push eax
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x40]
push eax
movzx ecx, byte [ebp - 0x2d]
xor cl, 1
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.006990b8
mov byte [ebp - 0x2d], 1
mov eax, dword [ebp - 0x44]
add dword [ebp - 0x24], eax
test byte [esi + 0xc], 0x80
jne 0x6a1322
mov eax, dword [ebp - 0x44]
add dword [ebp - 0x28], eax
mov eax, dword [ebx + 0x2ac]
call fcn.00690298
cmp edi, eax
jne 0x6a134e
mov eax, dword [ebx + 0x2ac]
mov dword [eax + 0x28], 0xffffffff
mov byte [ebp - 0x39], 1
jmp 0x6a134e
mov eax, esi
call fcn.0068fc38
mov dword [ebp - 0x40], eax
lea eax, [edi + 1]
mov edx, dword [ebx + 0x298]
mov dword [edx + 0x40], eax
test byte [esi + 0xc], 0x80
jne 0x6a1366
mov eax, dword [ebp - 0x40]
add dword [ebp - 0x2c], eax
inc edi
dec dword [ebp - 0x4c]
jne 0x6a1255
cmp byte [ebp - 0x2d], 0
je 0x6a1511
mov eax, dword [ebx + 0x43c]
cmp eax, dword [ebp - 0x2c]
jle 0x6a1390
mov eax, dword [ebp - 0x24]
add dword [ebx + 0x43c], eax
jmp 0x6a139a
mov dword [ebx + 0x43c], 0xffffffff
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x298]
call fcn.00692428
mov edx, dword [eax + 4]
mov ecx, dword [ebp - 8]
mov eax, dword [ebx + 0x400]
call fcn.0068ff8c
mov eax, dword [ebx + 0x298]
mov edx, dword [ebp - 0x24]
add dword [eax + 0x24], edx
cmp dword [ebp - 0x28], 0
je 0x6a149a
mov eax, dword [ebx + 0x298]
mov edx, dword [ebp - 0x28]
add dword [eax + 0x28], edx
mov eax, dword [ebx + 0x298]
mov edx, dword [eax + 0x40]
mov ecx, dword [ebp - 0x28]
call fcn.006949a4
cmp byte [ebp - 0x45], 0
je 0x6a149a
mov eax, dword [ebx + 0x2b0]
call fcn.00690298
cmp eax, dword [ebp - 4]
jl 0x6a145d
mov eax, dword [ebx + 0x2b0]
call fcn.006907d4
mov ecx, eax
mov esi, dword [ebx + 0x36c]
imul ecx, esi
mov edi, dword [ebx + 0x2c4]
mov eax, edi
cdq
idiv esi
add ecx, edx
mov eax, ecx
cmp edi, eax
je 0x6a145d
mov dword [ebx + 0x2c4], eax
cmp byte [ebx + 0x2a5], 0
je 0x6a145d
push 0xffffffffffffffff
mov eax, dword [ebx + 0x2c4]
cdq
idiv dword [ebx + 0x47c]
push eax
push 1
mov eax, ebx
call fcn.0056a620
push eax
call sub.user32.dll_SetScrollPos
cmp byte [ebx + 0x2d0], 0
je 0x6a146f
cmp dword [ebx + 0x360], 0
jle 0x6a1483
mov eax, dword [ebx + 0x540]
cmp eax, dword [ebp - 8]
jle 0x6a1483
mov eax, dword [ebp - 0x24]
add dword [ebx + 0x540], eax
mov eax, ebx
call fcn.006a1ff8
test al, al
je 0x6a149a
mov byte [ebx + 0x491], 0
jmp 0x6a1550
cmp byte [ebp - 0x45], 0
je 0x6a1511
cmp byte [ebp - 0x39], 0
jne 0x6a14bc
cmp dword [ebp - 0x28], 0
je 0x6a14c5
mov eax, dword [ebx + 0x2ac]
call fcn.00690298
cmp eax, dword [ebp - 4]
jle 0x6a14c5
xor edx, edx
mov eax, ebx
call fcn.006a0dd4
cmp byte [ebx + 0x2a4], 0
je 0x6a1511
mov eax, dword [ebx + 0x53c]
cmp eax, dword [ebp - 0x20]
je 0x6a1511
cmp byte [ebx + 0x2d0], 0
je 0x6a14eb
cmp dword [ebx + 0x360], 0
jle 0x6a1511
mov eax, ebx
call fcn.006a1ebc
push 0xffffffffffffffff
mov eax, dword [ebx + 0x2c0]
cdq
idiv dword [ebx + 0x480]
push eax
push 0
mov eax, ebx
call fcn.0056a620
push eax
call sub.user32.dll_SetScrollPos
mov byte [ebx + 0x491], 0
mov eax, dword [ebp - 4]
cmp eax, dword [ebp - 0x38]
je 0x6a152e
mov eax, dword [ebx + 0x298]
mov edx, dword [ebp - 0x38]
mov dword [eax + 0x40], edx
jmp 0x6a1550
cmp byte [ebp + 8], 0
je 0x6a1550
mov eax, dword [ebx + 0x298]
mov edx, dword [eax + 0x40]
cmp edx, dword [eax + 0xc]
jl 0x6a1550
mov edx, ebx
mov eax, dword [ebx + 0x3b4]
call dword [ebx + 0x3b0]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8