Function at 0x4492bf
Capabilities:
Check for time delay via gettickcount
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x40
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
mov ebx, edx
mov dword [ebp - 0x2c], ebx
mov esi, ecx
cmp edi, 0x2d3
ja 0x4492ff
cmp edi, 0x17
ja 0x4492e7
inc dword [0x4c5fac]
jmp 0x449315
cmp edi, 0x175
ja 0x4492f7
inc dword [0x4c5fb0]
jmp 0x449315
inc dword [0x4c5fb4]
jmp 0x449315
cmp edi, 0x578
ja 0x44930f
inc dword [0x4c5fb8]
jmp 0x449315
inc dword [0x4c5fbc]
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
mov ecx, esi
mov dword [0x4c5fd4], eax
call fcn.004484da
cmp byte [esi + 0x3c], 0
lea eax, [ebx + edi]
mov edi, dword [sym.imp.WS2_32.dll_ntohs]
mov dword [ebp - 0x20], eax
jne 0x449358
movzx eax, word [ebx + 0x13]
push eax
call edi
movzx eax, ax
mov dword [ebp - 0x10], eax
movzx eax, word [ebx + 0x15]
push eax
call edi
movzx eax, ax
mov dword [ebp - 0x1c], eax
mov al, byte [ebx + 0x12]
jmp 0x449377
movzx eax, word [ebx + 0x10]
push eax
call edi
movzx eax, ax
mov dword [ebp - 0x10], eax
movzx eax, word [ebx + 0x12]
push eax
call edi
movzx eax, ax
mov dword [ebp - 0x1c], eax
mov al, byte [ebx]
shr al, 4
mov byte [ebp - 1], al
cmp al, 5
jb 0x449385
xor eax, eax
jmp 0x449b77
call fcn.004457b1
and dword [ebp - 0x18], 0
xor ecx, ecx
mov dword [ebp - 0x3c], edx
mov dl, byte [esi + 0x3c]
test dl, dl
setne cl
mov dword [ebp - 0x40], eax
dec ecx
and ecx, 3
add ecx, 0x14
lea eax, [ecx + ebx]
mov dword [ebp - 8], eax
cmp ecx, dword [ebp + 8]
ja 0x44937e
test dl, dl
jne 0x4493b9
mov cl, byte [ebx + 0x11]
jmp 0x4493bc
mov cl, byte [ebx + 1]
movzx edi, cl
jmp 0x449401
mov ecx, dword [ebp - 0x20]
inc eax
inc eax
sub ecx, eax
js 0x44937e
movzx edx, byte [eax - 1]
cmp ecx, edx
jl 0x44937e
dec edi
je 0x4493f1
dec edi
jne 0x4493f4
cmp byte [eax - 1], 8
jne 0x44937e
mov ecx, dword [eax]
mov dword [esi + 0x1b4], ecx
mov ecx, dword [eax + 4]
mov dword [esi + 0x1b8], ecx
jmp 0x4493f4
mov dword [ebp - 0x18], eax
movzx ecx, byte [eax - 1]
movzx edi, byte [eax - 2]
add eax, ecx
mov dword [ebp - 8], eax
test edi, edi
jne 0x4493c1
cmp byte [esi + 0x3d], 1
jne 0x449413
mov eax, dword [ebp - 0x10]
dec eax
mov word [esi + 0x46], ax
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
cmp byte [ebp + 0xc], 0
mov dword [0x4c5fd4], eax
mov dword [esi + 0x58], eax
jne 0x44937e
movzx ecx, word [ebp - 0x10]
movzx eax, word [esi + 0x46]
mov dword [ebp - 0x24], ecx
sub ecx, eax
dec ecx
mov eax, 0xffff
and ecx, eax
mov dword [ebp - 0x30], ecx
cmp ecx, 0x1ff
jb 0x44947e
cmp ecx, 0xfe01
jb 0x44937e
cmp byte [ebp - 1], 2
je 0x44937e
mov eax, dword [esi + 0x54]
mov ecx, dword [0x4c5fd4]
sub eax, ecx
cmp eax, 0x64
jb 0x449474
push 0x64
pop eax
add eax, ecx
mov dword [esi + 0x54], eax
jmp 0x44937e
movzx edi, word [ebp - 0x1c]
movzx ecx, word [esi + 0x48]
movzx edx, word [esi + 0x20]
mov dword [ebp - 0xc], edi
sub edi, ecx
lea edi, [edi + edx + 1]
and edi, eax
cmp edi, edx
mov dword [ebp + 0xc], edx
mov dword [ebp + 8], edi
jle 0x4494a4
xor edi, edi
mov dword [ebp + 8], edi
movzx edx, word [esi + 0x20]
test dx, dx
jbe 0x4494ed
sub ecx, dword [ebp + 0xc]
dec ecx
and ecx, eax
cmp dword [ebp - 0xc], ecx
jne 0x4494e9
inc byte [esi + 0x1a]
cmp byte [esi + 0x1a], 3
jne 0x4494ed
mov ecx, dword [esi + 0x1cc]
test ecx, ecx
je 0x4494ed
dec ecx
and ecx, eax
cmp dword [ebp - 0xc], ecx
jne 0x4494ed
mov eax, dword [esi + 0x1d0]
dec eax
mov ecx, esi
mov dword [esi + 0x1c0], eax
call fcn.00448523
jmp 0x4494ed
mov byte [esi + 0x1a], 0
and dword [ebp + 0xc], 0
or dword [ebp - 0x38], 0xffffffff
and dword [ebp - 0x14], 0
mov dword [ebp - 0x34], SysReAllocString
test edi, edi
jle 0x449593
movzx eax, word [esi + 0x20]
movzx edi, word [esi + 0x48]
sub edi, eax
add edi, dword [ebp - 0x14]
lea ecx, [esi + 0x1f8]
and edi, 0xffff
push edi
call fcn.0044828b
mov dword [ebp - 0x28], eax
test eax, eax
je 0x449584
test dword [eax + 0x10], 0x7fffffff
je 0x449584
mov eax, dword [eax + 4]
add dword [ebp + 0xc], eax
mov eax, dword [esi + 0x1cc]
test eax, eax
je 0x44955e
cmp edi, eax
jne 0x44955e
mov eax, dword [esi + 0x1d0]
mov ecx, esi
mov dword [esi + 0x1c4], eax
call fcn.00448523
call fcn.004457b1
mov ecx, dword [ebp - 0x28]
sub eax, dword [ecx + 8]
sbb edx, dword [ecx + 0xc]
cmp dword [ebp - 0x34], edx
jg 0x44957e
jl 0x449578
cmp dword [ebp - 0x38], eax
jae 0x44957e
mov eax, dword [ebp - 0x38]
mov edx, dword [ebp - 0x34]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], edx
inc dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp + 8]
jl 0x449508
cmp dword [ebp - 0x18], 0
je 0x4495b9
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0xc]
movzx ecx, byte [eax - 1]
push eax
add edx, 2
and edx, 0xffff
push esi
lea edi, [ebp - 0x38]
call fcn.00448ad9
add dword [ebp + 0xc], eax
cmp byte [esi + 0x3c], 0
push dword [ebx + 4]
jne 0x4495e6
mov edi, dword [sym.imp.WS2_32.dll_ntohl]
call edi
push dword [ebx + 8]
mov dword [ebp - 0x28], eax
call edi
mov ecx, eax
mov eax, dword [ebp - 0x28]
mov edx, 0xf4240
mul edx
xor edi, edi
add ecx, eax
adc edi, edx
jmp 0x4495f0
call dword [sym.imp.WS2_32.dll_ntohl]
mov ecx, eax
xor edi, edi
mov eax, dword [0x4c5fd4]
mov dword [esi + 0x60], eax
mov eax, ecx
or eax, edi
je 0x449603
mov eax, dword [ebp - 0x40]
sub eax, ecx
lea edi, [esi + 0x160]
mov ecx, dword [edi]
mov dword [esi + 0x50], eax
mov dword [ebp - 0x28], ecx
test eax, eax
je 0x449620
push eax
mov ecx, edi
call fcn.0044834b
mov ecx, dword [ebp - 0x28]
test ecx, ecx
je 0x449648
mov edi, dword [edi]
mov eax, ecx
mov edx, edi
sub eax, edi
sub edx, ecx
cmp eax, edx
jae 0x449648
sub ecx, edi
cmp ecx, 0x2710
ja 0x449648
push ecx
lea ecx, [esi + 0x10c]
call fcn.00448332
cmp byte [esi + 0x3c], 0
jne 0x449675
push dword [ebx + 0xc]
call dword [sym.imp.WS2_32.dll_ntohl]
cmp eax, 0x7fffffff
jne 0x449665
xor edi, edi
jmp 0x4497b4
push dword [ebx + 0xc]
call dword [sym.imp.WS2_32.dll_ntohl]
mov edi, eax
mov dword [ebp - 0x14], edi
jmp 0x449691
push dword [ebx + 8]
mov edi, dword [sym.imp.WS2_32.dll_ntohl]
call edi
cmp eax, 0x7fffffff
je 0x44965e
push dword [ebx + 8]
call edi
mov edi, eax
mov dword [ebp - 0x14], eax
test edi, edi
je 0x4497b4
push edi
lea ecx, [esi + 0x10c]
call fcn.0044834b
cmp dword [esi + 0x1e4], 0
jne 0x4496b4
mov dword [esi + 0x1e4], edi
mov edx, dword [esi + 0x1e4]
mov eax, edx
mov ecx, edi
sub eax, edi
sub ecx, edx
cmp eax, ecx
jbe 0x4496cc
mov eax, ecx
xor ecx, ecx
jmp 0x4496d4
xor ecx, ecx
neg eax
adc ecx, ecx
neg ecx
add dword [esi + 0x1d8], eax
mov edi, dword [esi + 0x1e8]
adc dword [esi + 0x1dc], ecx
inc dword [esi + 0x1e0]
mov eax, dword [esi + 0x1e0]
cmp dword [0x4c5fd4], edi
jbe 0x4497b1
mov ebx, dword [esi + 0x1d4]
cdq
push edx
push eax
push dword [esi + 0x1dc]
push dword [esi + 0x1d8]
call fcn.004010e0
add edi, 0x1388
mov dword [esi + 0x1e8], edi
xor edi, edi
mov edx, eax
cmp ebx, edx
mov dword [esi + 0x1d4], eax
mov dword [esi + 0x1d8], edi
mov dword [esi + 0x1dc], edi
mov dword [esi + 0x1e0], edi
mov ecx, ebx
jl 0x44974c
mov ecx, edx
mov eax, ebx
jg 0x44974e
mov eax, edx
cmp ecx, edi
jle 0x449756
neg ecx
jmp 0x44975e
cmp eax, edi
jge 0x44977a
neg eax
mov ecx, eax
cmp ecx, edi
je 0x44977a
mov eax, dword [esi + 0x1e4]
sub eax, ecx
add edx, ecx
mov dword [esi + 0x1e4], eax
mov dword [esi + 0x1d4], edx
add ebx, ecx
mov eax, dword [esi + 0x1d4]
sub eax, ebx
cdq
mov edi, eax
mov eax, dword [esi + 0x1ec]
push 0
mov ebx, edx
cdq
push 7
push edx
push eax
call fcn.00401270
push 0
add edi, eax
push 8
adc ebx, edx
push ebx
push edi
call fcn.004010e0
mov ebx, dword [ebp - 0x2c]
mov dword [esi + 0x1ec], eax
mov edi, dword [ebp - 0x14]
lea ecx, [esi + 0x10c]
call fcn.00448635
cmp eax, dword [ebp - 0x38]
jbe 0x4497de
lea ecx, [esi + 0x10c]
call fcn.00448635
sub eax, dword [ebp - 0x38]
lea ecx, [esi + 0x10c]
push eax
call fcn.00448332
test edi, edi
je 0x4497f9
cmp dword [ebp + 0xc], 1
jl 0x4497f9
push dword [ebp - 0x34]
mov edx, dword [ebp + 0xc]
push dword [ebp - 0x38]
mov ecx, esi
push edi
call fcn.00448bd9
movzx eax, word [esi + 0x20]
cmp dword [ebp + 8], eax
jg 0x449973
cmp byte [esi + 0x3c], 0
jne 0x449818
movzx eax, byte [ebx + 0x10]
imul eax, eax, 0x15e
jmp 0x449821
push dword [ebx + 0xc]
call dword [sym.imp.WS2_32.dll_ntohl]
mov dword [esi + 0x38], eax
test eax, eax
jne 0x449838
mov eax, dword [0x4c5fd4]
add eax, 0x3a98
mov dword [esi + 0xf8], eax
mov al, byte [esi + 0x3d]
cmp al, 1
jne 0x449851
mov ecx, dword [esi + 0x74]
xor edx, edx
inc edx
mov byte [esi + 0x3d], 2
call dword [esi + 0x84]
jmp 0x449862
cmp al, 6
jne 0x449862
movzx eax, word [esi + 0x20]
cmp eax, dword [ebp + 8]
jne 0x449862
mov byte [esi + 0x3d], 8
mov eax, dword [ebp - 0xc]
movzx ecx, word [esi + 0x4c]
inc eax
and eax, 0xffff
mov edx, eax
sub edx, ecx
sub ecx, eax
cmp edx, ecx
jae 0x449881
mov eax, dword [ebp - 0x1c]
inc eax
mov word [esi + 0x4c], ax
xor edi, edi
cmp dword [ebp + 8], edi
jle 0x4498ac
movzx eax, word [esi + 0x48]
movzx ecx, word [esi + 0x20]
sub eax, ecx
push eax
call fcn.004489c0
cmp eax, 2
je 0x4498ac
mov eax, 0xffff
add word [esi + 0x20], ax
inc edi
cmp edi, dword [ebp + 8]
jl 0x449888
cmp word [esi + 0x20], 0
jbe 0x4498dc
movzx ebx, word [esi + 0x48]
movzx edi, word [esi + 0x20]
movzx eax, di
mov ecx, ebx
sub ecx, eax
push ecx
lea ecx, [esi + 0x1f8]
call fcn.0044828b
test eax, eax
jne 0x4498dc
dec edi
mov word [esi + 0x20], di
test di, di
ja 0x4498b7
cmp word [esi + 0x20], 1
jne 0x44992d
movzx eax, word [esi + 0x48]
dec eax
push eax
lea ecx, [esi + 0x1f8]
call fcn.0044828b
mov ecx, eax
test dword [ecx + 0x10], 0x7fffffff
jne 0x44992d
mov eax, dword [esi + 0x6c]
push 0x64
cdq
pop edi
idiv edi
cmp eax, dword [ecx]
jb 0x44992d
mov eax, ecx
mov ecx, esi
call fcn.00448f6c
cmp word [esi + 0x18], 0
jne 0x44992d
mov eax, dword [0x4c5fd4]
add eax, 0x70000000
and dword [esi + 0x1c], 0
mov dword [esi + 0x54], eax
mov al, byte [esi + 0x34]
test al, 0x20
je 0x449973
movzx ecx, word [esi + 0x48]
movzx edx, word [esi + 0x20]
movzx edi, word [esi + 0x4c]
sub ecx, edx
cmp cx, di
je 0x44994e
and al, 0xdf
mov byte [esi + 0x34], al
jmp 0x449973
push ecx
lea ecx, [esi + 0x1f8]
call fcn.0044828b
test eax, eax
je 0x449973
test dword [eax + 0x10], 0x7fffffff
jbe 0x449973
inc edi
mov ecx, esi
mov word [esi + 0x4c], di
call fcn.00448f6c
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x44998d
movzx ecx, byte [eax - 1]
push eax
mov eax, dword [ebp - 0xc]
add eax, 2
push eax
mov eax, esi
call fcn.00449135
cmp byte [esi + 0x3d], 3
jne 0x4499b0
xor edx, edx
mov ecx, esi
call fcn.004490a5
test al, al
je 0x4499b0
mov ecx, dword [esi + 0x74]
push 2
pop edx
mov byte [esi + 0x3d], 2
call dword [esi + 0x84]
cmp byte [ebp - 1], 2
je 0x44937e
mov al, byte [esi + 0x3d]
cmp al, 2
je 0x4499c9
cmp al, 3
jne 0x44937e
cmp byte [ebp - 1], 1
jne 0x4499db
mov ax, word [ebp - 0x10]
or byte [esi + 0x34], 0x10
mov word [esi + 0x44], ax
mov eax, dword [ebp - 0x30]
test eax, eax
jne 0x449adc
mov edi, dword [ebp - 0x20]
mov eax, edi
sub eax, dword [ebp - 8]
mov dword [ebp + 0xc], eax
test eax, eax
jle 0x4499ff
mov edx, dword [ebp - 8]
mov ecx, dword [esi + 0x74]
push eax
call dword [esi + 0x78]
sub edi, dword [ebp - 8]
inc word [esi + 0x46]
add dword [esi + 0x1c], edi
test byte [esi + 0x34], 0x10
je 0x449a19
mov ax, word [esi + 0x44]
cmp ax, word [esi + 0x46]
je 0x449a70
cmp word [esi + 0x18], 0
je 0x449aac
movzx edi, word [esi + 0x46]
inc edi
lea ecx, [esi + 0x1f0]
push edi
call fcn.0044828b
mov ebx, eax
test ebx, ebx
je 0x449aac
lea eax, [esi + 0x1f0]
and edi, dword [eax]
mov eax, dword [eax + 4]
and dword [eax + edi*4], 0
push dword [ebx]
mov ecx, dword [esi + 0x74]
lea edx, [ebx + 4]
call dword [esi + 0x78]
inc word [esi + 0x46]
mov eax, dword [ebx]
add dword [esi + 0x1c], eax
mov ecx, ebx
call fcn.00444521
mov eax, 0xffff
add word [esi + 0x18], ax
jmp 0x449a09
mov eax, dword [esi + 0x98]
imul eax, eax, 3
mov byte [esi + 0x3d], 4
cmp eax, 0x3c
jb 0x449a85
push 0x3c
pop eax
mov ecx, dword [0x4c5fd4]
add eax, ecx
mov ecx, dword [esi + 0x74]
push 4
pop edx
mov dword [esi + 0xf4], eax
call dword [esi + 0x84]
xor eax, eax
mov dword [esi + 0x1c], 0x961
mov word [esi + 0x18], ax
cmp byte [esi + 0x3d], 4
jne 0x449ac0
push 0
mov eax, esi
call fcn.00448700
jmp 0x449b74
mov eax, dword [esi + 0x54]
mov ecx, dword [0x4c5fd4]
sub eax, ecx
cmp eax, 0x64
jb 0x449b6f
push 0x64
pop eax
jmp 0x449b6f
test byte [esi + 0x34], 0x10
je 0x449af0
mov cx, word [ebp - 0x10]
cmp cx, word [esi + 0x44]
ja 0x44937e
cmp eax, 0x3ff
ja 0x44937e
inc eax
lea ebx, [esi + 0x1f0]
cmp eax, dword [ebx]
jbe 0x449b13
push eax
mov eax, dword [ebp - 0x24]
inc eax
push eax
mov ecx, ebx
call fcn.004482a2
push dword [ebp - 0x24]
mov ecx, ebx
call fcn.0044828b
test eax, eax
jne 0x44937e
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 8]
lea ecx, [eax + 4]
mov dword [ebp + 0xc], eax
call fcn.00444a95
mov edi, eax
mov eax, dword [ebp + 0xc]
push eax
push dword [ebp - 8]
mov dword [edi], eax
lea eax, [edi + 4]
push eax
call sub.MSVCRT.dll_memcpy
mov eax, dword [ebx]
and eax, dword [ebp - 0x24]
mov ecx, dword [ebx + 4]
mov dword [ecx + eax*4], edi
mov eax, dword [esi + 0x54]
add esp, 0xc
inc word [esi + 0x18]
mov ecx, dword [0x4c5fd4]
sub eax, ecx
cmp eax, 1
jb 0x449b6f
xor eax, eax
inc eax
add eax, ecx
mov dword [esi + 0x54], eax
mov eax, dword [ebp + 0xc]
pop edi
pop esi
pop ebx
leave
ret 8