Function at 0x9164b4
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffe8
push ebx
push esi
push edi
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
cmp byte [eax + 0xe7c], 0
jne 0x9167b4
xor eax, eax
push ebp
push 0x9167aa
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
push ebp
push 0x916796
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov byte [eax + 0xddd], 0
mov eax, dword [ebp - 4]
cmp dword [eax + 0xde4], 0
jne 0x91650d
cmp dword [eax + 0xde0], 0
jbe 0x916575
jmp 0x91650f
jle 0x916575
call sub.kernel32.dll_GetTickCount
xor edx, edx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 4]
sub eax, dword [ecx + 0xde0]
sbb edx, dword [ecx + 0xde4]
cmp edx, 0
jne 0x91653d
cmp eax, 0
jb 0x916564
jmp 0x91653f
jl 0x916564
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 4]
sub eax, dword [ecx + 0xde0]
sbb edx, dword [ecx + 0xde4]
cmp edx, 0
jne 0x916562
cmp eax, 0x1388
jbe 0x916568
jmp 0x916564
jle 0x916568
xor eax, eax
jmp 0x91656a
mov al, 1
mov edx, dword [ebp - 4]
mov byte [edx + 0xde8], al
jmp 0x91657f
mov eax, dword [ebp - 4]
mov byte [eax + 0xde8], 0
mov eax, dword [ebp - 4]
mov dword [eax + 0xde0], 0
mov dword [eax + 0xde4], 0
mov eax, dword [0x98aad0]
mov eax, dword [eax]
mov ax, word [eax + 0x44]
mov word [ebp - 0xa], ax
mov eax, dword [ebp - 4]
call fcn.008f8604
test al, al
je 0x9165c6
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xea4]
mov eax, dword [eax + 0x2f0]
cmp dword [eax + 0x44], 0
jl 0x9165de
mov eax, dword [ebp - 4]
call fcn.008f8614
test al, al
jne 0x9165de
mov eax, dword [0x98a548]
mov eax, dword [eax]
call fcn.007a5a74
mov eax, dword [ebp - 4]
call fcn.008f245c
mov dword [ebp - 8], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xe68]
call fcn.008b4ad4
test al, al
je 0x916684
mov dl, 1
mov eax, dword [ebp - 4]
call fcn.0090b660
mov eax, dword [ebp - 4]
mov byte [eax + 0xb42], 1
mov eax, dword [ebp - 4]
mov byte [eax + 0xdea], 0
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0xe68]
mov eax, dword [ebp - 4]
call fcn.00914cb4
test eax, eax
jle 0x916655
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0xe68]
mov eax, dword [ebp - 4]
call fcn.009082a8
mov eax, dword [ebp - 4]
call fcn.00916200
mov eax, dword [ebp - 4]
call fcn.0090f79c
jmp 0x916662
mov eax, dword [ebp - 4]
mov dword [eax + 0xe64], 0xffffffff
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2e4]
call fcn.006519b0
call fcn.0049ea54
test eax, eax
sete dl
mov eax, dword [ebp - 4]
call fcn.0090a858
jmp 0x9166ee
xor eax, eax
push ebp
push 0x9166e4
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
call fcn.008dfa08
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2e4]
mov edx, dword [eax]
call dword [edx + 0xd4]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xea4]
mov eax, dword [eax + 0x2f4]
mov edx, dword [eax]
call dword [edx + 0xd4]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xe84]
mov edx, dword [eax]
call dword [edx + 0x44]
mov dl, 1
mov eax, dword [ebp - 4]
call fcn.0090a858
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x9166ee
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x9167a0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xe44]
xor edx, edx
call fcn.00405738
je 0x916760
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xe44]
call fcn.008b4aa0
test al, al
jne 0x916760
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x514]
call fcn.00624ac0
call fcn.005d1348
mov ebx, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x514]
call fcn.00624ac0
call fcn.005d1350
add ebx, eax
test ebx, ebx
jle 0x916755
mov eax, dword [ebp - 4]
call fcn.00944784
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.008f24fc
mov eax, dword [ebp - 4]
call fcn.00905308
mov eax, dword [ebp - 4]
call fcn.008f8604
test al, al
je 0x916785
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x514]
mov edx, dword [eax]
call dword [edx + 0x80]
mov eax, dword [0x98aad0]
mov eax, dword [eax]
mov dx, word [ebp - 0xa]
call fcn.00478f6c
ret
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret