Function at 0x9bb1b0
Capabilities:
Check for time delay via gettickcount
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0xa99b38
mov eax, dword fs:[0]
push eax
sub esp, 0x4c
push ebx
push ebp
push esi
push edi
mov eax, dword [0xb196ec]
xor eax, esp
push eax
lea eax, [esp + 0x60]
mov dword fs:[0], eax
mov ebp, dword [esp + 0x7c]
cmp dword [esp + 0x70], 4
jbe 0x9bb42f
cmp dword [esp + 0x78], 0
jne 0x9bb22a
mov eax, dword [0xbdc558]
test eax, eax
je 0x9bb203
push 0xffffffffffffffff
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x9bb22a
mov ebx, dword [esp + 0x74]
push str.Failed_to_Lock_hMutexMap1
call fcn.009b7510
add esp, 4
xor eax, eax
mov ecx, dword [esp + 0x60]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x58
ret
lea edi, [esp + 0x70]
lea ebx, [esp + 0x20]
call fcn.009c00a0
mov edi, dword [eax]
mov esi, dword [eax + 4]
mov ebx, dword [0xbe4bf4]
test edi, edi
je 0x9bb24e
cmp edi, dword [0xbe4bdc]
je 0x9bb253
call fcn.00a7a8a1
cmp esi, ebx
je 0x9bb41b
test edi, edi
jne 0x9bb2aa
call fcn.00a7a8a1
cmp esi, dword [edi + 0x18]
jne 0x9bb26e
call fcn.00a7a8a1
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [esi + 0x120], 0
call edi
mov ebx, 1
mov dword [esi + 0x124], eax
cmp ebp, ebx
jne 0x9bb2ae
cmp dword [0xbdc56c], 0
jne 0x9bb29f
call edi
mov dword [0xbdc570], eax
add dword [0xbdc56c], ebx
jmp 0x9bb41b
mov edi, dword [edi]
jmp 0x9bb264
test ebp, ebp
jne 0x9bb41b
lea eax, [esp + 0x40]
push eax
call fcn.0099cb90
xor ecx, ecx
mov dword [esp + 0x68], ecx
mov eax, dword [esi + 0x134]
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x18], eax
cmp dword [esi + 0x128], ecx
jne 0x9bb2e0
mov dword [esp + 0x1c], ebx
cmp eax, 4
jbe 0x9bb3f0
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0x44]
push edx
lea ebx, [esp + 0x30]
call fcn.0099c9d0
lea edi, [esp + 0x18]
lea ebx, [esp + 0x20]
call fcn.009c00a0
mov edi, dword [eax]
mov esi, dword [eax + 4]
mov ebx, dword [0xbe4bf4]
test edi, edi
je 0x9bb320
cmp edi, dword [0xbe4bdc]
je 0x9bb325
call fcn.00a7a8a1
cmp esi, ebx
je 0x9bb3f0
test edi, edi
jne 0x9bb3d5
call fcn.00a7a8a1
cmp esi, dword [edi + 0x18]
jne 0x9bb344
call fcn.00a7a8a1
mov eax, dword [esi + 0x128]
test eax, eax
jbe 0x9bb355
dec eax
mov dword [esi + 0x128], eax
cmp dword [esi + 0x128], 0
mov eax, dword [esi + 0x134]
mov dword [esp + 0x18], eax
jne 0x9bb384
mov eax, dword [esi + 0x12c]
add esi, 0x12c
call fcn.00981220
test eax, eax
jne 0x9bb384
mov eax, esi
call fcn.009c0000
mov ebp, dword [esp + 0x58]
mov ebx, dword [esp + 0x40]
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0x2c]
push edx
lea edi, [esp + 0x48]
call fcn.0099cb00
mov esi, eax
mov eax, dword [esi]
test eax, eax
je 0x9bb3ab
cmp eax, ebx
je 0x9bb3b0
call fcn.00a7a8a1
cmp dword [esi + 4], ebp
jne 0x9bb3dc
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x44]
push ecx
lea ebx, [esp + 0x3c]
call fcn.0099c9d0
cmp dword [esp + 0x18], 4
ja 0x9bb2fc
jmp 0x9bb3f0
mov edi, dword [edi]
jmp 0x9bb33a
mov edx, dword [esp + 0x18]
push edx
push str._PIDSET__C__Possible_looping_of_PID__u_
push 0
call fcn.0096a780
add esp, 0xc
cmp dword [esp + 0x1c], 0
je 0x9bb400
lea eax, [esp + 0x70]
call fcn.009c0000
lea eax, [esp + 0x40]
call fcn.0099cad0
lea eax, [esp + 0x40]
push eax
mov dword [esp + 0x6c], 0xffffffff
call fcn.0099c980
cmp dword [esp + 0x78], 0
jne 0x9bb42f
mov ecx, dword [0xbdc558]
push ecx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov eax, 1
mov ecx, dword [esp + 0x60]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x58
ret