Function at 0x4492db
Capabilities:
Check for time delay via gettickcount
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x40
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
mov ebx, edx
mov dword [ebp - 0x2c], ebx
mov esi, ecx
cmp edi, 0x2d3
ja 0x44931b
cmp edi, 0x17
ja 0x449303
inc dword [0x4c6fcc]
jmp 0x449331
cmp edi, 0x175
ja 0x449313
inc dword [0x4c6fd0]
jmp 0x449331
inc dword [0x4c6fd4]
jmp 0x449331
cmp edi, 0x578
ja 0x44932b
inc dword [0x4c6fd8]
jmp 0x449331
inc dword [0x4c6fdc]
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
mov ecx, esi
mov dword [0x4c6ff4], eax
call fcn.004484bc
cmp byte [esi + 0x3c], 0
lea eax, [ebx + edi]
mov edi, dword [sym.imp.WS2_32.dll_ntohs]
mov dword [ebp - 0x20], eax
jne 0x449374
movzx eax, word [ebx + 0x13]
push eax
call edi
movzx eax, ax
mov dword [ebp - 0x10], eax
movzx eax, word [ebx + 0x15]
push eax
call edi
movzx eax, ax
mov dword [ebp - 0x1c], eax
mov al, byte [ebx + 0x12]
jmp 0x449393
movzx eax, word [ebx + 0x10]
push eax
call edi
movzx eax, ax
mov dword [ebp - 0x10], eax
movzx eax, word [ebx + 0x12]
push eax
call edi
movzx eax, ax
mov dword [ebp - 0x1c], eax
mov al, byte [ebx]
shr al, 4
mov byte [ebp - 1], al
cmp al, 5
jb 0x4493a1
xor eax, eax
jmp 0x449b93
call fcn.0044575c
and dword [ebp - 0x18], 0
xor ecx, ecx
mov dword [ebp - 0x3c], edx
mov dl, byte [esi + 0x3c]
test dl, dl
setne cl
mov dword [ebp - 0x40], eax
dec ecx
and ecx, 3
add ecx, 0x14
lea eax, [ecx + ebx]
mov dword [ebp - 8], eax
cmp ecx, dword [ebp + 8]
ja 0x44939a
test dl, dl
jne 0x4493d5
mov cl, byte [ebx + 0x11]
jmp 0x4493d8
mov cl, byte [ebx + 1]
movzx edi, cl
jmp 0x44941d
mov ecx, dword [ebp - 0x20]
inc eax
inc eax
sub ecx, eax
js 0x44939a
movzx edx, byte [eax - 1]
cmp ecx, edx
jl 0x44939a
dec edi
je 0x44940d
dec edi
jne 0x449410
cmp byte [eax - 1], 8
jne 0x44939a
mov ecx, dword [eax]
mov dword [esi + 0x1b4], ecx
mov ecx, dword [eax + 4]
mov dword [esi + 0x1b8], ecx
jmp 0x449410
mov dword [ebp - 0x18], eax
movzx ecx, byte [eax - 1]
movzx edi, byte [eax - 2]
add eax, ecx
mov dword [ebp - 8], eax
test edi, edi
jne 0x4493dd
cmp byte [esi + 0x3d], 1
jne 0x44942f
mov eax, dword [ebp - 0x10]
dec eax
mov word [esi + 0x46], ax
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
cmp byte [ebp + 0xc], 0
mov dword [0x4c6ff4], eax
mov dword [esi + 0x58], eax
jne 0x44939a
movzx ecx, word [ebp - 0x10]
movzx eax, word [esi + 0x46]
mov dword [ebp - 0x24], ecx
sub ecx, eax
dec ecx
mov eax, 0xffff
and ecx, eax
mov dword [ebp - 0x30], ecx
cmp ecx, 0x1ff
jb 0x44949a
cmp ecx, 0xfe01
jb 0x44939a
cmp byte [ebp - 1], 2
je 0x44939a
mov eax, dword [esi + 0x54]
mov ecx, dword [0x4c6ff4]
sub eax, ecx
cmp eax, 0x64
jb 0x449490
push 0x64
pop eax
add eax, ecx
mov dword [esi + 0x54], eax
jmp 0x44939a
movzx edi, word [ebp - 0x1c]
movzx ecx, word [esi + 0x48]
movzx edx, word [esi + 0x20]
mov dword [ebp - 0xc], edi
sub edi, ecx
lea edi, [edi + edx + 1]
and edi, eax
cmp edi, edx
mov dword [ebp + 0xc], edx
mov dword [ebp + 8], edi
jle 0x4494c0
xor edi, edi
mov dword [ebp + 8], edi
movzx edx, word [esi + 0x20]
test dx, dx
jbe 0x449509
sub ecx, dword [ebp + 0xc]
dec ecx
and ecx, eax
cmp dword [ebp - 0xc], ecx
jne 0x449505
inc byte [esi + 0x1a]
cmp byte [esi + 0x1a], 3
jne 0x449509
mov ecx, dword [esi + 0x1cc]
test ecx, ecx
je 0x449509
dec ecx
and ecx, eax
cmp dword [ebp - 0xc], ecx
jne 0x449509
mov eax, dword [esi + 0x1d0]
dec eax
mov ecx, esi
mov dword [esi + 0x1c0], eax
call fcn.00448505
jmp 0x449509
mov byte [esi + 0x1a], 0
and dword [ebp + 0xc], 0
or dword [ebp - 0x38], 0xffffffff
and dword [ebp - 0x14], 0
mov dword [ebp - 0x34], SysReAllocString
test edi, edi
jle 0x4495af
movzx eax, word [esi + 0x20]
movzx edi, word [esi + 0x48]
sub edi, eax
add edi, dword [ebp - 0x14]
lea ecx, [esi + 0x1f8]
and edi, 0xffff
push edi
call fcn.0044826d
mov dword [ebp - 0x28], eax
test eax, eax
je 0x4495a0
test dword [eax + 0x10], 0x7fffffff
je 0x4495a0
mov eax, dword [eax + 4]
add dword [ebp + 0xc], eax
mov eax, dword [esi + 0x1cc]
test eax, eax
je 0x44957a
cmp edi, eax
jne 0x44957a
mov eax, dword [esi + 0x1d0]
mov ecx, esi
mov dword [esi + 0x1c4], eax
call fcn.00448505
call fcn.0044575c
mov ecx, dword [ebp - 0x28]
sub eax, dword [ecx + 8]
sbb edx, dword [ecx + 0xc]
cmp dword [ebp - 0x34], edx
jg 0x44959a
jl 0x449594
cmp dword [ebp - 0x38], eax
jae 0x44959a
mov eax, dword [ebp - 0x38]
mov edx, dword [ebp - 0x34]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], edx
inc dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp + 8]
jl 0x449524
cmp dword [ebp - 0x18], 0
je 0x4495d5
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0xc]
movzx ecx, byte [eax - 1]
push eax
add edx, 2
and edx, 0xffff
push esi
lea edi, [ebp - 0x38]
call fcn.00448abb
add dword [ebp + 0xc], eax
cmp byte [esi + 0x3c], 0
push dword [ebx + 4]
jne 0x449602
mov edi, dword [sym.imp.WS2_32.dll_ntohl]
call edi
push dword [ebx + 8]
mov dword [ebp - 0x28], eax
call edi
mov ecx, eax
mov eax, dword [ebp - 0x28]
mov edx, 0xf4240
mul edx
xor edi, edi
add ecx, eax
adc edi, edx
jmp 0x44960c
call dword [sym.imp.WS2_32.dll_ntohl]
mov ecx, eax
xor edi, edi
mov eax, dword [0x4c6ff4]
mov dword [esi + 0x60], eax
mov eax, ecx
or eax, edi
je 0x44961f
mov eax, dword [ebp - 0x40]
sub eax, ecx
lea edi, [esi + 0x160]
mov ecx, dword [edi]
mov dword [esi + 0x50], eax
mov dword [ebp - 0x28], ecx
test eax, eax
je 0x44963c
push eax
mov ecx, edi
call fcn.0044832d
mov ecx, dword [ebp - 0x28]
test ecx, ecx
je 0x449664
mov edi, dword [edi]
mov eax, ecx
mov edx, edi
sub eax, edi
sub edx, ecx
cmp eax, edx
jae 0x449664
sub ecx, edi
cmp ecx, 0x2710
ja 0x449664
push ecx
lea ecx, [esi + 0x10c]
call fcn.00448314
cmp byte [esi + 0x3c], 0
jne 0x449691
push dword [ebx + 0xc]
call dword [sym.imp.WS2_32.dll_ntohl]
cmp eax, 0x7fffffff
jne 0x449681
xor edi, edi
jmp 0x4497d0
push dword [ebx + 0xc]
call dword [sym.imp.WS2_32.dll_ntohl]
mov edi, eax
mov dword [ebp - 0x14], edi
jmp 0x4496ad
push dword [ebx + 8]
mov edi, dword [sym.imp.WS2_32.dll_ntohl]
call edi
cmp eax, 0x7fffffff
je 0x44967a
push dword [ebx + 8]
call edi
mov edi, eax
mov dword [ebp - 0x14], eax
test edi, edi
je 0x4497d0
push edi
lea ecx, [esi + 0x10c]
call fcn.0044832d
cmp dword [esi + 0x1e4], 0
jne 0x4496d0
mov dword [esi + 0x1e4], edi
mov edx, dword [esi + 0x1e4]
mov eax, edx
mov ecx, edi
sub eax, edi
sub ecx, edx
cmp eax, ecx
jbe 0x4496e8
mov eax, ecx
xor ecx, ecx
jmp 0x4496f0
xor ecx, ecx
neg eax
adc ecx, ecx
neg ecx
add dword [esi + 0x1d8], eax
mov edi, dword [esi + 0x1e8]
adc dword [esi + 0x1dc], ecx
inc dword [esi + 0x1e0]
mov eax, dword [esi + 0x1e0]
cmp dword [0x4c6ff4], edi
jbe 0x4497cd
mov ebx, dword [esi + 0x1d4]
cdq
push edx
push eax
push dword [esi + 0x1dc]
push dword [esi + 0x1d8]
call fcn.004010e0
add edi, 0x1388
mov dword [esi + 0x1e8], edi
xor edi, edi
mov edx, eax
cmp ebx, edx
mov dword [esi + 0x1d4], eax
mov dword [esi + 0x1d8], edi
mov dword [esi + 0x1dc], edi
mov dword [esi + 0x1e0], edi
mov ecx, ebx
jl 0x449768
mov ecx, edx
mov eax, ebx
jg 0x44976a
mov eax, edx
cmp ecx, edi
jle 0x449772
neg ecx
jmp 0x44977a
cmp eax, edi
jge 0x449796
neg eax
mov ecx, eax
cmp ecx, edi
je 0x449796
mov eax, dword [esi + 0x1e4]
sub eax, ecx
add edx, ecx
mov dword [esi + 0x1e4], eax
mov dword [esi + 0x1d4], edx
add ebx, ecx
mov eax, dword [esi + 0x1d4]
sub eax, ebx
cdq
mov edi, eax
mov eax, dword [esi + 0x1ec]
push 0
mov ebx, edx
cdq
push 7
push edx
push eax
call fcn.00401270
push 0
add edi, eax
push 8
adc ebx, edx
push ebx
push edi
call fcn.004010e0
mov ebx, dword [ebp - 0x2c]
mov dword [esi + 0x1ec], eax
mov edi, dword [ebp - 0x14]
lea ecx, [esi + 0x10c]
call fcn.00448617
cmp eax, dword [ebp - 0x38]
jbe 0x4497fa
lea ecx, [esi + 0x10c]
call fcn.00448617
sub eax, dword [ebp - 0x38]
lea ecx, [esi + 0x10c]
push eax
call fcn.00448314
test edi, edi
je 0x449815
cmp dword [ebp + 0xc], 1
jl 0x449815
push dword [ebp - 0x34]
mov edx, dword [ebp + 0xc]
push dword [ebp - 0x38]
mov ecx, esi
push edi
call fcn.00448bbb
movzx eax, word [esi + 0x20]
cmp dword [ebp + 8], eax
jg 0x44998f
cmp byte [esi + 0x3c], 0
jne 0x449834
movzx eax, byte [ebx + 0x10]
imul eax, eax, 0x15e
jmp 0x44983d
push dword [ebx + 0xc]
call dword [sym.imp.WS2_32.dll_ntohl]
mov dword [esi + 0x38], eax
test eax, eax
jne 0x449854
mov eax, dword [0x4c6ff4]
add eax, 0x3a98
mov dword [esi + 0xf8], eax
mov al, byte [esi + 0x3d]
cmp al, 1
jne 0x44986d
mov ecx, dword [esi + 0x74]
xor edx, edx
inc edx
mov byte [esi + 0x3d], 2
call dword [esi + 0x84]
jmp 0x44987e
cmp al, 6
jne 0x44987e
movzx eax, word [esi + 0x20]
cmp eax, dword [ebp + 8]
jne 0x44987e
mov byte [esi + 0x3d], 8
mov eax, dword [ebp - 0xc]
movzx ecx, word [esi + 0x4c]
inc eax
and eax, 0xffff
mov edx, eax
sub edx, ecx
sub ecx, eax
cmp edx, ecx
jae 0x44989d
mov eax, dword [ebp - 0x1c]
inc eax
mov word [esi + 0x4c], ax
xor edi, edi
cmp dword [ebp + 8], edi
jle 0x4498c8
movzx eax, word [esi + 0x48]
movzx ecx, word [esi + 0x20]
sub eax, ecx
push eax
call fcn.004489a2
cmp eax, 2
je 0x4498c8
mov eax, 0xffff
add word [esi + 0x20], ax
inc edi
cmp edi, dword [ebp + 8]
jl 0x4498a4
cmp word [esi + 0x20], 0
jbe 0x4498f8
movzx ebx, word [esi + 0x48]
movzx edi, word [esi + 0x20]
movzx eax, di
mov ecx, ebx
sub ecx, eax
push ecx
lea ecx, [esi + 0x1f8]
call fcn.0044826d
test eax, eax
jne 0x4498f8
dec edi
mov word [esi + 0x20], di
test di, di
ja 0x4498d3
cmp word [esi + 0x20], 1
jne 0x449949
movzx eax, word [esi + 0x48]
dec eax
push eax
lea ecx, [esi + 0x1f8]
call fcn.0044826d
mov ecx, eax
test dword [ecx + 0x10], 0x7fffffff
jne 0x449949
mov eax, dword [esi + 0x6c]
push 0x64
cdq
pop edi
idiv edi
cmp eax, dword [ecx]
jb 0x449949
mov eax, ecx
mov ecx, esi
call fcn.00448f88
cmp word [esi + 0x18], 0
jne 0x449949
mov eax, dword [0x4c6ff4]
add eax, 0x70000000
and dword [esi + 0x1c], 0
mov dword [esi + 0x54], eax
mov al, byte [esi + 0x34]
test al, 0x20
je 0x44998f
movzx ecx, word [esi + 0x48]
movzx edx, word [esi + 0x20]
movzx edi, word [esi + 0x4c]
sub ecx, edx
cmp cx, di
je 0x44996a
and al, 0xdf
mov byte [esi + 0x34], al
jmp 0x44998f
push ecx
lea ecx, [esi + 0x1f8]
call fcn.0044826d
test eax, eax
je 0x44998f
test dword [eax + 0x10], 0x7fffffff
jbe 0x44998f
inc edi
mov ecx, esi
mov word [esi + 0x4c], di
call fcn.00448f88
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x4499a9
movzx ecx, byte [eax - 1]
push eax
mov eax, dword [ebp - 0xc]
add eax, 2
push eax
mov eax, esi
call fcn.00449151
cmp byte [esi + 0x3d], 3
jne 0x4499cc
xor edx, edx
mov ecx, esi
call fcn.004490c1
test al, al
je 0x4499cc
mov ecx, dword [esi + 0x74]
push 2
pop edx
mov byte [esi + 0x3d], 2
call dword [esi + 0x84]
cmp byte [ebp - 1], 2
je 0x44939a
mov al, byte [esi + 0x3d]
cmp al, 2
je 0x4499e5
cmp al, 3
jne 0x44939a
cmp byte [ebp - 1], 1
jne 0x4499f7
mov ax, word [ebp - 0x10]
or byte [esi + 0x34], 0x10
mov word [esi + 0x44], ax
mov eax, dword [ebp - 0x30]
test eax, eax
jne 0x449af8
mov edi, dword [ebp - 0x20]
mov eax, edi
sub eax, dword [ebp - 8]
mov dword [ebp + 0xc], eax
test eax, eax
jle 0x449a1b
mov edx, dword [ebp - 8]
mov ecx, dword [esi + 0x74]
push eax
call dword [esi + 0x78]
sub edi, dword [ebp - 8]
inc word [esi + 0x46]
add dword [esi + 0x1c], edi
test byte [esi + 0x34], 0x10
je 0x449a35
mov ax, word [esi + 0x44]
cmp ax, word [esi + 0x46]
je 0x449a8c
cmp word [esi + 0x18], 0
je 0x449ac8
movzx edi, word [esi + 0x46]
inc edi
lea ecx, [esi + 0x1f0]
push edi
call fcn.0044826d
mov ebx, eax
test ebx, ebx
je 0x449ac8
lea eax, [esi + 0x1f0]
and edi, dword [eax]
mov eax, dword [eax + 4]
and dword [eax + edi*4], 0
push dword [ebx]
mov ecx, dword [esi + 0x74]
lea edx, [ebx + 4]
call dword [esi + 0x78]
inc word [esi + 0x46]
mov eax, dword [ebx]
add dword [esi + 0x1c], eax
mov ecx, ebx
call fcn.004444cc
mov eax, 0xffff
add word [esi + 0x18], ax
jmp 0x449a25
mov eax, dword [esi + 0x98]
imul eax, eax, 3
mov byte [esi + 0x3d], 4
cmp eax, 0x3c
jb 0x449aa1
push 0x3c
pop eax
mov ecx, dword [0x4c6ff4]
add eax, ecx
mov ecx, dword [esi + 0x74]
push 4
pop edx
mov dword [esi + 0xf4], eax
call dword [esi + 0x84]
xor eax, eax
mov dword [esi + 0x1c], 0x961
mov word [esi + 0x18], ax
cmp byte [esi + 0x3d], 4
jne 0x449adc
push 0
mov eax, esi
call fcn.004486e2
jmp 0x449b90
mov eax, dword [esi + 0x54]
mov ecx, dword [0x4c6ff4]
sub eax, ecx
cmp eax, 0x64
jb 0x449b8b
push 0x64
pop eax
jmp 0x449b8b
test byte [esi + 0x34], 0x10
je 0x449b0c
mov cx, word [ebp - 0x10]
cmp cx, word [esi + 0x44]
ja 0x44939a
cmp eax, 0x3ff
ja 0x44939a
inc eax
lea ebx, [esi + 0x1f0]
cmp eax, dword [ebx]
jbe 0x449b2f
push eax
mov eax, dword [ebp - 0x24]
inc eax
push eax
mov ecx, ebx
call fcn.00448284
push dword [ebp - 0x24]
mov ecx, ebx
call fcn.0044826d
test eax, eax
jne 0x44939a
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 8]
lea ecx, [eax + 4]
mov dword [ebp + 0xc], eax
call fcn.00444a40
mov edi, eax
mov eax, dword [ebp + 0xc]
push eax
push dword [ebp - 8]
mov dword [edi], eax
lea eax, [edi + 4]
push eax
call sub.MSVCRT.dll_memcpy
mov eax, dword [ebx]
and eax, dword [ebp - 0x24]
mov ecx, dword [ebx + 4]
mov dword [ecx + eax*4], edi
mov eax, dword [esi + 0x54]
add esp, 0xc
inc word [esi + 0x18]
mov ecx, dword [0x4c6ff4]
sub eax, ecx
cmp eax, 1
jb 0x449b8b
xor eax, eax
inc eax
add eax, ecx
mov dword [esi + 0x54], eax
mov eax, dword [ebp + 0xc]
pop edi
pop esi
pop ebx
leave
ret 8