Function at 0x6ce03c
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffb4
push ebx
push esi
push edi
xor edx, edx
mov dword [ebp - 0x48], edx
mov dword [ebp - 0x44], edx
mov dword [ebp - 0x10], edx
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x18], edx
mov dword [ebp - 8], edx
mov dword [ebp - 0xc], edx
mov dword [ebp - 0x1c], edx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
call fcn.00409d28
xor eax, eax
push ebp
push 0x6ce542
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x6cc504]
call fcn.00407ec0
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 0x40]
test edx, edx
je 0x6ce094
sub edx, 0xfffffff8
call fcn.0040e920
mov eax, dword [ebp + 8]
mov eax, dword [eax - 8]
mov edx, dword [ebp - 0x40]
mov dword [edx + 0x10], eax
mov eax, dword [ebp - 0x40]
add eax, 0x14
mov edx, dword [ebp + 8]
mov edx, dword [edx - 8]
test edx, edx
je 0x6ce0b8
sub edx, 0xfffffff8
call fcn.0040e920
mov byte [ebp - 0x1d], 0
mov dl, 1
mov eax, dword [ebp - 4]
call fcn.00424aac
test al, al
je 0x6ce4ef
xor eax, eax
push ebp
push 0x6ce138
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
lea edx, [ebp - 0x10]
xor ecx, ecx
mov eax, dword [ebp - 4]
call fcn.0063f350
test al, al
jne 0x6ce101
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x6ce4ef
mov ecx, dword [ebp - 0x10]
test ecx, ecx
je 0x6ce10d
sub ecx, 4
mov ecx, dword [ecx]
test ecx, ecx
je 0x6ce121
mov eax, dword [0x6f6ecc]
cmp dword [eax + 4], 0
jne 0x6ce12e
cmp dword [eax], 0
jne 0x6ce12e
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x6ce4ef
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x6ce14c
xor edx, edx
push ebp
push 0x6ce427
push dword fs:[edx]
mov dword fs:[edx], esp
lea eax, [ebp - 8]
mov ecx, 0x6ce560
mov edx, dword [ebp - 4]
call fcn.0040aa5c
lea eax, [ebp - 0xc]
mov ecx, 0x6ce584
mov edx, dword [ebp - 4]
call fcn.0040aa5c
push 0x40
mov ecx, dword [ebp - 4]
mov dl, 1
mov eax, dword [0x63b1d8]
call fcn.0063f7f4
mov dword [ebp - 0x24], eax
xor edx, edx
push ebp
push 0x6ce408
push dword fs:[edx]
mov dword fs:[edx], esp
push 0xff00
mov ecx, dword [ebp - 8]
mov dl, 1
mov eax, dword [0x63b1d8]
call fcn.0063f7f4
mov dword [ebp - 0x28], eax
push 0
push 0xc
mov ecx, 0x100000
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
call fcn.0049e548
call fcn.004aada8
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x6ce1db
sub eax, 4
mov eax, dword [eax]
dec eax
mov edx, dword [ebp - 0x40]
mov dword [edx + 0xc], eax
mov eax, dword [ebp + 8]
mov eax, dword [eax - 8]
mov eax, dword [eax + 0x40]
mov edx, dword [ebp - 0x40]
test edx, edx
je 0x6ce1f5
sub edx, 0xffffffe4
call fcn.004ab22c
mov eax, dword [ebp - 0x40]
mov esi, dword [eax + 0xc]
test esi, esi
jl 0x6ce29d
inc esi
xor ebx, ebx
call fcn.004aada8
mov edx, eax
sub edx, dword [ebp - 0x3c]
cmp edx, 0x1f4
jae 0x6ce225
mov edx, dword [ebp - 0x40]
cmp ebx, dword [edx + 0xc]
jne 0x6ce243
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp + 8]
mov eax, dword [eax - 8]
mov eax, dword [eax + 0x40]
mov dword [eax + 0x38], ebx
mov edx, dword [ebp - 0x40]
test edx, edx
je 0x6ce23e
sub edx, 0xffffffe8
call fcn.004ab22c
imul edi, ebx, 0x23
mov eax, dword [ebp - 0x10]
push dword [eax + edi*8 + 0x108]
push dword [eax + edi*8 + 0x104]
mov eax, dword [ebp - 0x24]
call fcn.0063fc30
mov eax, dword [ebp - 0x28]
call fcn.0063f9fc
push edx
push eax
mov eax, dword [ebp - 0x10]
pop dword [eax + edi*8 + 0x104]
pop dword [eax + edi*8 + 0x108]
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + edi*8 + 0x110]
test eax, eax
jbe 0x6ce295
mov ecx, eax
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
call fcn.0063f758
inc ebx
dec esi
jne 0x6ce20b
mov eax, dword [ebp - 0x28]
call fcn.0063f9fc
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], edx
lea eax, [ebp - 0x14]
mov edx, dword [0x63b190]
call fcn.0040ce04
lea eax, [ebp - 0x18]
mov edx, dword [0x63b190]
call fcn.0040ce04
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x6ce2d3
sub eax, 4
mov eax, dword [eax]
mov esi, eax
dec esi
test esi, esi
jl 0x6ce3b4
inc esi
xor ebx, ebx
push 1
lea eax, [ebp - 0x18]
push eax
mov eax, dword [ebp - 0x28]
call fcn.0063fab4
imul edi, ebx, 0x23
mov edx, dword [ebp - 0x10]
lea edx, [edx + edi*8]
lea ecx, [ebp - 0x2c]
call fcn.0063d74c
mov eax, dword [ebp - 0x2c]
xor edx, edx
push edx
push eax
mov eax, dword [0x6f6b3c]
mov eax, dword [eax]
cdq
cmp edx, dword [esp + 4]
jne 0x6ce31e
cmp eax, dword [esp]
pop edx
pop eax
jae 0x6ce32c
jmp 0x6ce322
pop edx
pop eax
jge 0x6ce32c
mov eax, dword [0x6f6b3c]
mov eax, dword [eax]
mov dword [ebp - 0x2c], eax
mov eax, dword [0x6f6d64]
mov eax, dword [eax]
xor eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x28]
call fcn.0063d080
mov eax, dword [0x6f6dcc]
mov eax, dword [eax]
xor eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x28]
call fcn.0063d080
mov eax, dword [ebp - 0x2c]
xor edx, edx
push edx
push eax
mov eax, dword [0x6f6b3c]
mov eax, dword [eax]
cdq
cmp edx, dword [esp + 4]
jne 0x6ce36e
cmp eax, dword [esp]
pop edx
pop eax
jbe 0x6ce382
jmp 0x6ce372
pop edx
pop eax
jle 0x6ce382
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
mov edi, dword [eax]
call dword [edi + 0x10]
jmp 0x6ce3ac
push 0
lea eax, [ebp - 0x14]
push eax
mov eax, dword [ebp - 0x28]
call fcn.0063fab4
mov edx, dword [ebp - 0x10]
lea edx, [edx + edi*8]
lea ecx, [ebp - 0x2c]
call fcn.0063d74c
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x28]
mov edi, dword [eax]
call dword [edi + 0x10]
inc ebx
dec esi
jne 0x6ce2e1
lea eax, [ebp - 0x14]
mov edx, dword [0x63b190]
call fcn.0040ce04
lea eax, [ebp - 0x18]
mov edx, dword [0x63b190]
call fcn.0040ce04
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x6ce3dc
sub eax, 4
mov eax, dword [eax]
push dword [ebp - 0x34]
push dword [ebp - 0x38]
push 0
xor ecx, ecx
mov edx, eax
mov eax, dword [ebp - 0x28]
call fcn.0063d03c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x6ce40f
mov eax, dword [ebp - 0x28]
call fcn.00407ef0
pop eax
jmp eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x6ce549
lea eax, [ebp - 0x48]
mov edx, 2
call fcn.00409c94
lea eax, [ebp - 0x1c]
call fcn.0040e908
lea eax, [ebp - 0x18]
mov edx, dword [0x63b190]
mov ecx, 2
call fcn.0040b8c8
lea eax, [ebp - 0x10]
mov edx, dword [0x63b160]
call fcn.0040ce04
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00409c94
pop eax
jmp eax