Function at 0x498250
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x58f0f9
mov eax, dword fs:[0]
push eax
sub esp, 0xb8
mov eax, dword [0x610304]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 3
push 2
push 0xa0000000
push 1
push str.Users
xor ebx, ebx
push 1
lea ecx, [ebp + 8]
mov dword [ebp - 4], ebx
call sym.txupd.exe_public:_wchar_t_const____thiscall_CTXStringW::operator_wchar_t_const__void_const
push eax
call fcn.00497b50
add esp, 0x1c
lea ecx, [ebp + 8]
call sym.txupd.exe_public:_wchar_t_const____thiscall_CTXStringW::operator_wchar_t_const__void_const
push eax
call fcn.004979b0
add esp, 4
test eax, eax
jne 0x498452
push ecx
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x34], esp
push eax
call sym.txupd.exe_public:_void___thiscall_CTXStringW::constructor_class_CTXStringW_const__
push str.Autemp_Folder_is_not_writable:_s_n
push 0x5b0010
push 2
push str.Util::ACL::CheckFolderAuthority
push 0x156
mov edi, str.E:_txupdatecoding_baseutilfunutilacl.cpp
push edi
call fcn.0046fa20
mov ecx, dword [ebp + 8]
mov esi, dword [sym.imp.MSVCR80.dll_wprintf]
push ecx
push str.Autemp_Folder_is_not_writable:_s_n
call esi
add esp, 0x24
lea ecx, [ebp - 0x2c]
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_void_]
lea edx, [ebp - 0x2c]
push edx
mov byte [ebp - 4], 1
call fcn.00497d30
add esp, 4
test eax, eax
jne 0x498396
mov dword [ebp - 0x30], str.GetProcessUserName_Failed_n
mov dword [ebp - 0x50], edi
mov dword [ebp - 0x4c], str.Util::ACL::CheckFolderAuthority
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x7c], 0x15a
mov dword [ebp - 0x78], ebx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x80], 2
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x70], eax
lea eax, [ebp - 0x64]
push eax
mov dword [ebp - 0x6c], ebx
call dword [sym.imp.MSVCR80.dll__time64]
lea ecx, [ebp - 0x30]
push ecx
push 0x5a48f0
lea edx, [ebp - 0x84]
push 0x5b0010
push edx
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x58], ebx
call sym.txupd.exe_void___cdecl_TXLog_DoTXLogVW_struct_tagLogObj___wchar_t_const___wchar_t_const___char__
push str.GetProcessUserName_Failed_n
call esi
add esp, 0x18
jmp 0x498446
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x38], ebx
lea eax, [ebp - 0x44]
push eax
sub esp, 0x1c
lea edx, [ebp - 0x2c]
mov ecx, esp
mov dword [ebp - 0x34], esp
push edx
mov byte [ebp - 4], 2
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const__]
call fcn.00498160
add esp, 0x20
cmp eax, ebx
jne 0x498482
mov dword [ebp - 0x30], str.GetUserLocalGroups_Failed_n
mov dword [ebp - 0x50], edi
mov dword [ebp - 0x4c], str.Util::ACL::CheckFolderAuthority
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x7c], 0x161
mov dword [ebp - 0x78], ebx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x80], 2
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x70], eax
lea eax, [ebp - 0x64]
push eax
mov dword [ebp - 0x6c], ebx
call dword [sym.imp.MSVCR80.dll__time64]
lea ecx, [ebp - 0x30]
push ecx
push 0x5a48f0
lea edx, [ebp - 0x84]
push 0x5b0010
push edx
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x58], ebx
call sym.txupd.exe_void___cdecl_TXLog_DoTXLogVW_struct_tagLogObj___wchar_t_const___wchar_t_const___char__
push str.GetUserLocalGroups_Failed_n
call esi
add esp, 0x18
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 1
call fcn.00449920
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], bl
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [ebp + 8]
mov dword [ebp - 4], 0xffffffff
call sym.txupd.exe_public:_void___thiscall_CTXStringW::destructor_void_
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00584870
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x44]
call fcn.00449970
xor edi, edi
mov dword [ebp - 0x30], ebx
mov esi, dword [ebp - 0x40]
cmp esi, ebx
je 0x4984e9
mov ecx, dword [ebp - 0x3c]
sub ecx, esi
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jae 0x4984e9
mov ecx, dword [ebp - 0x30]
push 3
push 2
push 0x10000000
add ecx, esi
push 1
call dword [sym.imp.MSVCP80.dll_public:_wchar_t_const____thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::c_str_void_const]
push eax
push 1
lea ecx, [ebp + 8]
call sym.txupd.exe_public:_wchar_t_const____thiscall_CTXStringW::operator_wchar_t_const__void_const
push eax
call fcn.00497b50
add esp, 0x1c
add edi, 1
add dword [ebp - 0x30], 0x1c
jmp 0x498493
lea ecx, [ebp + 8]
call sym.txupd.exe_public:_wchar_t_const____thiscall_CTXStringW::operator_wchar_t_const__void_const
push eax
call fcn.004979b0
add esp, 4
test eax, eax
jne 0x49843a
mov dword [ebp - 0x34], str.try_to_change_Autemp_Folder_authority_failed_n
mov dword [ebp - 0x90], str.E:_txupdatecoding_baseutilfunutilacl.cpp
mov dword [ebp - 0x8c], str.Util::ACL::CheckFolderAuthority
mov dword [ebp - 0x94], ebx
mov dword [ebp - 0x88], ebx
mov dword [ebp - 0xbc], 0x173
mov dword [ebp - 0xb8], ebx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0xc0], 2
call dword [sym.imp.KERNEL32.dll_GetTickCount]
lea edx, [ebp - 0xa4]
push edx
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0xac], ebx
call dword [sym.imp.MSVCR80.dll__time64]
lea eax, [ebp - 0x34]
push eax
push 0x5a48f0
lea ecx, [ebp - 0xc4]
push 0x5b0010
push ecx
mov dword [ebp - 0x9c], ebx
mov dword [ebp - 0x98], ebx
call sym.txupd.exe_void___cdecl_TXLog_DoTXLogVW_struct_tagLogObj___wchar_t_const___wchar_t_const___char__
push str.try_to_change_Autemp_Folder_authority_failed_n
call dword [sym.imp.MSVCR80.dll_wprintf]
add esp, 0x18
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 1
call fcn.00449920
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], bl
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [ebp + 8]
mov dword [ebp - 4], 0xffffffff
call sym.txupd.exe_public:_void___thiscall_CTXStringW::destructor_void_
xor eax, eax
jmp 0x498466