Function at 0x694ff0
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x36
push 0
push 0
dec ecx
jne 0x694ff9
push ecx
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov dword [ebp - 4], ecx
mov esi, edx
mov ebx, eax
xor eax, eax
push ebp
push 0x695b60
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 5], 0
mov eax, dword [ebx + 0x36c]
cmp byte [eax + 0x50], 0
je 0x695044
push 1
mov edx, dword [0x707b2c]
mov edx, dword [edx]
xor ecx, ecx
mov eax, ebx
call fcn.006a6c7c
jmp 0x695b18
cmp byte [ebx + 0x176d], 0x64
jae 0x695053
inc byte [ebx + 0x176d]
movzx eax, byte [esi + 0x12]
sub al, 1
jb 0x69506e
je 0x695121
dec al
je 0x69550d
jmp 0x695b18
cmp dword [ebx + 0x16c], 0
jbe 0x6950b7
movzx eax, byte [esi + 0x14]
dec al
je 0x695085
dec al
je 0x695094
jmp 0x69509d
mov ecx, dword [esi + 0x29]
mov edx, dword [esi + 0x21]
mov eax, ebx
call fcn.006b09bc
jmp 0x6950b7
mov byte [ebx + 0x3a8], 1
jmp 0x6950b7
mov eax, dword [esi + 0x21]
test eax, eax
jbe 0x6950aa
add dword [ebx + 0xfc], eax
mov eax, dword [esi + 0x29]
test eax, eax
jbe 0x6950b7
add dword [ebx + 0x100], eax
mov eax, dword [ebp - 4]
cmp word [eax + 0x1b], 1
jbe 0x695118
mov eax, dword [ebp - 4]
dec word [eax + 0x1b]
cmp byte [esi + 0x70], 1
jne 0x69510f
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xf]
push eax
mov eax, dword [ebp - 4]
movzx eax, word [eax + 0x1b]
push eax
push 0x695b7c
push 0x695b88
push 0x695b94
push 0x695ba0
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x1c]
lea edx, [esi + 2]
call fcn.00405744
mov ecx, dword [ebp - 0x1c]
mov edx, 6
mov eax, ebx
call fcn.004e18e0
mov byte [ebp - 5], 0
jmp 0x695b18
mov byte [ebp - 5], 1
jmp 0x695b18
cmp byte [esi + 0x14], 0
jne 0x6951a1
mov edx, esi
mov eax, ebx
call fcn.00687904
mov eax, dword [ebp - 4]
cmp word [eax + 0x1b], 0x3e8
jbe 0x695198
mov eax, dword [ebp - 4]
sub word [eax + 0x1b], 0x3e8
mov byte [ebp - 5], 0
cmp byte [esi + 0x70], 1
jne 0x695b18
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xf]
push eax
mov eax, dword [ebp - 4]
movzx eax, word [eax + 0x1b]
push eax
push 0x695b7c
push 0x695b88
push 0x695bb0
push 0x695ba0
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x20]
lea edx, [esi + 2]
call fcn.00405744
mov ecx, dword [ebp - 0x20]
mov edx, 6
mov eax, ebx
call fcn.004e18e0
jmp 0x695b18
mov byte [ebp - 5], 1
jmp 0x695b18
cmp byte [esi + 0x14], 1
jne 0x6952a4
mov eax, dword [ebx + 0x318]
mov eax, dword [eax + 8]
dec eax
test eax, eax
jl 0x695237
inc eax
mov dword [ebp - 0x18], eax
xor edi, edi
mov edx, edi
mov eax, dword [ebx + 0x318]
call fcn.00420a68
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
cmp byte [eax + 0x314], 7
jae 0x695231
mov eax, dword [ebp - 0x10]
mov byte [eax + 0x314], 7
mov eax, dword [ebp - 0x10]
mov edx, dword [eax]
call dword [edx + 0x5c]
mov eax, dword [ebp - 0x10]
call fcn.006acd1c
mov eax, dword [ebp - 0x10]
push eax
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0x24]
push eax
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0x28]
push eax
push 0
push 0
mov ecx, 0x12
mov dx, 0xd9
mov eax, dword [ebp - 0x10]
call fcn.006a4724
push 1
mov edx, dword [0x7076c8]
mov edx, dword [edx]
mov cl, 2
mov eax, ebx
call fcn.006a6c7c
jmp 0x695237
inc edi
dec dword [ebp - 0x18]
jne 0x6951bf
mov eax, dword [ebp - 4]
cmp word [eax + 0x1b], 0x3e8
jbe 0x69529b
mov eax, dword [ebp - 4]
sub word [eax + 0x1b], 0x3e8
cmp byte [esi + 0x70], 1
jne 0x695292
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xf]
push eax
mov eax, dword [ebp - 4]
movzx eax, word [eax + 0x1b]
push eax
push 0x695b7c
push 0x695b88
push 0x695bb0
push 0x695ba0
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x24]
lea edx, [esi + 2]
call fcn.00405744
mov ecx, dword [ebp - 0x24]
mov edx, 6
mov eax, ebx
call fcn.004e18e0
mov byte [ebp - 5], 0
jmp 0x695b18
mov byte [ebp - 5], 1
jmp 0x695b18
cmp byte [esi + 0x14], 9
jne 0x695489
mov eax, dword [ebp - 4]
movzx eax, word [eax + 0x1b]
add eax, eax
lea eax, [eax + eax*4]
mov dword [ebp - 0xc], eax
xor edi, edi
cmp dword [ebp - 0xc], 0
jle 0x6953f4
mov edx, edi
shl edx, 7
add edx, edi
cmp word [ebx + edx + 0x4c7], 0
jbe 0x6953f4
mov eax, edi
shl eax, 7
add eax, edi
movzx edx, word [ebx + eax + 0x4cf]
cmp dx, word [ebx + eax + 0x4d1]
jae 0x6953f4
mov eax, edi
shl eax, 7
add eax, edi
movzx edx, word [ebx + eax + 0x4c7]
mov eax, dword [0x707bc4]
mov eax, dword [eax]
call fcn.0062e410
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x6953f4
mov dl, 2
mov eax, dword [ebp - 4]
call fcn.0050b918
test al, al
jne 0x6953f4
mov eax, dword [ebp - 0x14]
test byte [eax + 0x13], 1
je 0x6953f4
mov eax, edi
shl eax, 7
add eax, edi
movzx eax, word [ebx + eax + 0x4d1]
mov edx, edi
shl edx, 7
add edx, edi
movzx edx, word [ebx + edx + 0x4cf]
sub eax, edx
test eax, eax
jle 0x6953f4
cmp eax, dword [ebp - 0xc]
jge 0x695384
mov edx, edi
shl edx, 7
add edx, edi
add word [ebx + edx + 0x4cf], ax
sub dword [ebp - 0xc], eax
jmp 0x69539c
mov eax, edi
shl eax, 7
add eax, edi
movzx edx, word [ebp - 0xc]
add word [ebx + eax + 0x4cf], dx
xor eax, eax
mov dword [ebp - 0xc], eax
push 1
lea eax, [ebp - 0x28]
push eax
mov eax, dword [ebp - 0x14]
add eax, 2
mov dword [ebp - 0x30], eax
mov byte [ebp - 0x2c], 4
lea edx, [ebp - 0x30]
mov eax, dword [0x7073b8]
mov eax, dword [eax]
xor ecx, ecx
call fcn.0040bf74
mov edx, dword [ebp - 0x28]
mov cl, 1
mov eax, ebx
call fcn.006a6c7c
mov eax, edi
shl eax, 7
add eax, edi
movzx eax, word [ebx + eax + 0x4d1]
push eax
mov eax, edi
shl eax, 7
add eax, edi
movzx ecx, word [ebx + eax + 0x4cf]
mov edx, edi
mov eax, ebx
call fcn.006a2f58
inc edi
cmp edi, 0x10
jne 0x6952bf
cmp dword [ebp - 0xc], 0x3e8
jl 0x695480
fild dword [ebp - 0xc]
fdiv dword [0x695bb8]
call fcn.004035bc
mov dword [ebp - 0xc], eax
cmp byte [esi + 0x70], 1
jne 0x69546c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xf]
push eax
mov eax, dword [ebp - 0xc]
push eax
push 0x695b7c
push 0x695b88
lea edx, [ebp - 0x34]
mov eax, dword [ebp - 4]
movzx eax, word [eax + 0x1b]
sub eax, dword [ebp - 0xc]
call fcn.0040ab6c
mov eax, dword [ebp - 0x34]
push eax
push 0x695ba0
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x38]
lea edx, [esi + 2]
call fcn.00405744
mov ecx, dword [ebp - 0x38]
mov edx, 6
mov eax, ebx
call fcn.004e18e0
mov eax, dword [ebp - 4]
movzx edx, word [ebp - 0xc]
mov word [eax + 0x1b], dx
mov byte [ebp - 5], 0
jmp 0x695b18
mov byte [ebp - 5], 1
jmp 0x695b18
mov byte [ebp - 5], 0
movzx edx, byte [esi + 0x14]
mov eax, ebx
call fcn.00695e70
test al, al
je 0x695b18
mov eax, dword [ebp - 4]
cmp word [eax + 0x1b], 0x3e8
jbe 0x695504
mov eax, dword [ebp - 4]
sub word [eax + 0x1b], 0x3e8
cmp byte [esi + 0x70], 1
jne 0x6954fb
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xf]
push eax
mov eax, dword [ebp - 4]
movzx eax, word [eax + 0x1b]
push eax
push 0x695b7c
push 0x695b88
push 0x695bb0
push 0x695ba0
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x3c]
lea edx, [esi + 2]
call fcn.00405744
mov ecx, dword [ebp - 0x3c]
mov edx, 6
mov eax, ebx
call fcn.004e18e0
mov byte [ebp - 5], 0
jmp 0x695b18
mov byte [ebp - 5], 1
jmp 0x695b18
movzx eax, byte [esi + 0x14]
cmp al, 0x12
jne 0x695599
xor edi, edi
movzx eax, word [ebx + 0xe48]
add edi, eax
movzx eax, word [ebx + 0xe4a]
add edi, eax
movzx eax, word [ebx + 0xe4c]
add edi, eax
movzx eax, word [ebx + 0xe4e]
add edi, eax
movzx eax, word [ebx + 0xe50]
add edi, eax
movzx eax, word [ebx + 0xe52]
add edi, eax
movzx eax, word [esi + 0x1f]
mov edx, eax
add edx, dword [ebx + 0xe58]
cmp edi, edx
jle 0x695569
add dword [ebx + 0xe58], eax
jmp 0x695589
xor eax, eax
mov dword [ebx + 0xe58], eax
lea eax, [ebx + 0xe48]
xor ecx, ecx
mov edx, 0xc
call fcn.0048ca78
add dword [ebx + 0xe54], edi
mov eax, ebx
call fcn.00683104
mov byte [ebp - 5], 1
jmp 0x695b18
cmp al, 0x11
jne 0x6955b7
movzx eax, word [esi + 0x17]
imul edx, eax, 0x3e8
mov eax, ebx
call fcn.0067d2bc
mov byte [ebp - 5], 1
jmp 0x695b18
cmp al, 0x10
jne 0x6955e1
mov eax, 0x64
call fcn.004034e0
movzx edx, byte [esi + 0x16]
cmp eax, edx
setl cl
movzx edx, word [esi + 0x17]
mov eax, ebx
call fcn.0069a5a8
mov byte [ebp - 5], al
jmp 0x695b18
cmp al, 0xf
jne 0x695693
mov byte [ebp - 5], 0
mov eax, dword [ebx + 0x388]
test eax, eax
je 0x69567e
movzx edx, word [esi + 0x17]
call fcn.00516f08
mov edx, 0x695bbc
lea eax, [ebp - 0x54]
call fcn.00403a20
lea edx, [ebx + 0x15]
lea eax, [ebp - 0x54]
mov cl, 0xf
call fcn.004039f0
lea edx, [ebp - 0x54]
lea eax, [ebp - 0x74]
call fcn.00403a20
mov edx, 0x695bc0
lea eax, [ebp - 0x74]
mov cl, 0x1f
call fcn.004039f0
lea edx, [ebp - 0x74]
lea eax, [ebp - 0x44]
call fcn.00405744
push dword [ebp - 0x44]
lea edx, [ebp - 0x78]
movzx eax, word [esi + 0x17]
call fcn.0040ab6c
push dword [ebp - 0x78]
push 0x695bdc
lea eax, [ebp - 0x40]
mov edx, 3
call fcn.00405874
mov edx, dword [ebp - 0x40]
mov eax, dword [ebx + 0x388]
call fcn.005187ac
mov byte [ebp - 5], 1
jmp 0x695b18
push 1
xor ecx, ecx
mov edx, 0x695be8
mov eax, ebx
call fcn.006a6c7c
jmp 0x695b18
cmp al, 0xe
jne 0x6956f0
mov byte [ebp - 5], 0
movzx eax, word [esi + 0x1f]
movzx edx, ax
imul edx, edx, 0x3c
cmp edx, dword [ebx + 0x3b20]
jg 0x6956db
movzx eax, ax
imul eax, eax, 0x3c
sub dword [ebx + 0x3b20], eax
movzx edx, word [esi + 0x17]
movzx eax, word [esi + 0x19]
imul edx, eax
mov eax, ebx
call fcn.0067d2bc
mov eax, ebx
call fcn.006adef0
mov byte [ebp - 5], 1
jmp 0x695b18
push 1
xor ecx, ecx
mov edx, 0x695c08
mov eax, ebx
call fcn.006a6c7c
jmp 0x695b18
cmp al, 0xd
jne 0x6957fd
mov eax, dword [ebp - 4]
movzx eax, byte [eax + 0x24]
mov byte [ebp - 5], al
cmp byte [ebp - 5], 0
je 0x695752
lea edx, [ebp - 0x7c]
mov eax, dword [ebp - 4]
movzx eax, word [eax + 0x4b]
call fcn.0040ab6c
mov eax, dword [ebp - 0x7c]
push eax
lea edx, [ebp - 0x80]
mov eax, dword [ebp - 4]
movzx eax, word [eax + 0x49]
call fcn.0040ab6c
mov eax, dword [ebp - 0x80]
push eax
lea eax, [ebp - 0x84]
mov edx, dword [ebp - 4]
add edx, 0x34
call fcn.00405744
mov edx, dword [ebp - 0x84]
mov eax, ebx
pop ecx
call fcn.00696150
jmp 0x695b18
lea eax, [ebp - 0x184]
mov edx, dword [ebx + 0x36c]
mov edx, dword [edx + 8]
mov ecx, 0xff
call fcn.0040577c
lea edx, [ebp - 0x184]
mov eax, dword [ebp - 4]
add eax, 0x25
mov cl, 0xe
call fcn.00403a2c
lea eax, [ebp - 0x184]
mov edx, dword [ebx + 0x36c]
mov edx, dword [edx + 4]
mov ecx, 0xff
call fcn.0040577c
lea edx, [ebp - 0x184]
mov eax, dword [ebp - 4]
add eax, 0x34
mov cl, 0x14
call fcn.00403a2c
mov eax, dword [ebp - 4]
movzx edx, word [ebx + 0x24]
mov word [eax + 0x49], dx
mov eax, dword [ebp - 4]
movzx edx, word [ebx + 0x28]
mov word [eax + 0x4b], dx
mov eax, dword [ebp - 4]
mov byte [eax + 0x24], 1
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xf]
push eax
push 0
push 0
push 0
lea ecx, [ebp - 0x188]
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.006864f0
mov eax, dword [ebp - 0x188]
push eax
mov cx, 0x14b8
mov edx, ebx
mov eax, ebx
call fcn.006a3e14
jmp 0x695b18
cmp al, 0xc
jne 0x695b0b
xor eax, eax
cmp dword [esi + 0x31], 0
jbe 0x695886
mov byte [ebx + 0x28a], 1
movzx eax, word [esi + 0x31]
mov word [ebx + 0x290], ax
call sub.kernel32.dll_GetTickCount_1
imul edx, dword [esi + 0x2d], 0x3e8
add eax, edx
mov dword [ebx + 0x29c], eax
push 1
push 0x695c28
mov eax, dword [esi + 0x2d]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x190]
call fcn.0040ad3c
push dword [ebp - 0x190]
push 0x695c3c
lea eax, [ebp - 0x18c]
mov edx, 3
call fcn.00405874
mov edx, dword [ebp - 0x18c]
mov cl, 1
mov eax, ebx
call fcn.006a6c7c
mov cl, 1
mov edx, 4
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov al, 1
cmp dword [esi + 0x39], 0
jbe 0x695905
mov byte [ebx + 0x28b], 1
movzx eax, word [esi + 0x39]
mov word [ebx + 0x292], ax
call sub.kernel32.dll_GetTickCount_1
imul edx, dword [esi + 0x2d], 0x3e8
add eax, edx
mov dword [ebx + 0x2a0], eax
push 1
push 0x695c48
mov eax, dword [esi + 0x2d]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x198]
call fcn.0040ad3c
push dword [ebp - 0x198]
push 0x695c3c
lea eax, [ebp - 0x194]
mov edx, 3
call fcn.00405874
mov edx, dword [ebp - 0x194]
mov cl, 1
mov eax, ebx
call fcn.006a6c7c
mov cl, 1
mov edx, 7
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov al, 1
cmp dword [esi + 0x41], 0
jbe 0x695984
mov byte [ebx + 0x28c], 1
movzx eax, word [esi + 0x41]
mov word [ebx + 0x294], ax
call sub.kernel32.dll_GetTickCount_1
imul edx, dword [esi + 0x2d], 0x3e8
add eax, edx
mov dword [ebx + 0x2a4], eax
push 1
push 0x695c5c
mov eax, dword [esi + 0x2d]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x1a0]
call fcn.0040ad3c
push dword [ebp - 0x1a0]
push 0x695c3c
lea eax, [ebp - 0x19c]
mov edx, 3
call fcn.00405874
mov edx, dword [ebp - 0x19c]
mov cl, 1
mov eax, ebx
call fcn.006a6c7c
mov cl, 1
mov edx, 2
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov al, 1
cmp dword [esi + 0x25], 0
jbe 0x6959f5
mov byte [ebx + 0x28d], 1
movzx eax, word [esi + 0x25]
mov word [ebx + 0x296], ax
call sub.kernel32.dll_GetTickCount_1
imul edx, dword [esi + 0x2d], 0x3e8
add eax, edx
mov dword [ebx + 0x2a8], eax
push 1
push 0x695c70
mov eax, dword [esi + 0x2d]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x1a8]
call fcn.0040ad3c
push dword [ebp - 0x1a8]
push 0x695c3c
lea eax, [ebp - 0x1a4]
mov edx, 3
call fcn.00405874
mov edx, dword [ebp - 0x1a4]
mov cl, 1
mov eax, ebx
call fcn.006a6c7c
mov al, 1
cmp dword [esi + 0x21], 0
jbe 0x695a74
mov byte [ebx + 0x288], 1
movzx eax, word [esi + 0x21]
mov word [ebx + 0x298], ax
call sub.kernel32.dll_GetTickCount_1
imul edx, dword [esi + 0x2d], 0x3e8
add eax, edx
mov dword [ebx + 0x2ac], eax
push 1
push 0x695c88
mov eax, dword [esi + 0x2d]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x1b0]
call fcn.0040ad3c
push dword [ebp - 0x1b0]
push 0x695c3c
lea eax, [ebp - 0x1ac]
mov edx, 3
call fcn.00405874
mov edx, dword [ebp - 0x1ac]
mov cl, 1
mov eax, ebx
call fcn.006a6c7c
mov cl, 1
mov edx, 0xa
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov al, 1
cmp dword [esi + 0x29], 0
jbe 0x695af3
mov byte [ebx + 0x289], 1
movzx eax, word [esi + 0x29]
mov word [ebx + 0x29a], ax
call sub.kernel32.dll_GetTickCount_1
imul edx, dword [esi + 0x2d], 0x3e8
add eax, edx
mov dword [ebx + 0x2b0], eax
push 1
push 0x695c9c
mov eax, dword [esi + 0x2d]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x1b8]
call fcn.0040ad3c
push dword [ebp - 0x1b8]
push 0x695c3c
lea eax, [ebp - 0x1b4]
mov edx, 3
call fcn.00405874
mov edx, dword [ebp - 0x1b4]
mov cl, 1
mov eax, ebx
call fcn.006a6c7c
mov cl, 1
mov edx, 8
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 0xc]
mov al, 1
test al, al
je 0x695b18
mov eax, ebx
mov edx, dword [eax]
call dword [edx + 0x5c]
mov eax, ebx
call fcn.006a92bc
mov byte [ebp - 5], 1
jmp 0x695b18
movzx edx, al
mov eax, ebx
call fcn.00695e70
mov byte [ebp - 5], al
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x695b67
lea eax, [ebp - 0x1b8]
mov edx, 0xd
call fcn.004054f4
lea eax, [ebp - 0x84]
mov edx, 4
call fcn.004054f4
lea eax, [ebp - 0x44]
mov edx, 5
call fcn.004054f4
lea eax, [ebp - 0x28]
mov edx, 4
call fcn.004054f4
ret