Function at 0x4492f0
Capabilities:
Check for time delay via gettickcount
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x40
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
mov ebx, edx
mov dword [ebp - 0x2c], ebx
mov esi, ecx
cmp edi, 0x2d3
ja 0x449330
cmp edi, 0x17
ja 0x449318
inc dword [0x4c6fac]
jmp 0x449346
cmp edi, 0x175
ja 0x449328
inc dword [0x4c6fb0]
jmp 0x449346
inc dword [0x4c6fb4]
jmp 0x449346
cmp edi, 0x578
ja 0x449340
inc dword [0x4c6fb8]
jmp 0x449346
inc dword [0x4c6fbc]
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
mov ecx, esi
mov dword [0x4c6fd4], eax
call fcn.004484d1
cmp byte [esi + 0x3c], 0
lea eax, [ebx + edi]
mov edi, dword [sym.imp.WS2_32.dll_ntohs]
mov dword [ebp - 0x20], eax
jne 0x449389
movzx eax, word [ebx + 0x13]
push eax
call edi
movzx eax, ax
mov dword [ebp - 0x10], eax
movzx eax, word [ebx + 0x15]
push eax
call edi
movzx eax, ax
mov dword [ebp - 0x1c], eax
mov al, byte [ebx + 0x12]
jmp 0x4493a8
movzx eax, word [ebx + 0x10]
push eax
call edi
movzx eax, ax
mov dword [ebp - 0x10], eax
movzx eax, word [ebx + 0x12]
push eax
call edi
movzx eax, ax
mov dword [ebp - 0x1c], eax
mov al, byte [ebx]
shr al, 4
mov byte [ebp - 1], al
cmp al, 5
jb 0x4493b6
xor eax, eax
jmp 0x449ba8
call fcn.0044578e
and dword [ebp - 0x18], 0
xor ecx, ecx
mov dword [ebp - 0x3c], edx
mov dl, byte [esi + 0x3c]
test dl, dl
setne cl
mov dword [ebp - 0x40], eax
dec ecx
and ecx, 3
add ecx, 0x14
lea eax, [ecx + ebx]
mov dword [ebp - 8], eax
cmp ecx, dword [ebp + 8]
ja 0x4493af
test dl, dl
jne 0x4493ea
mov cl, byte [ebx + 0x11]
jmp 0x4493ed
mov cl, byte [ebx + 1]
movzx edi, cl
jmp 0x449432
mov ecx, dword [ebp - 0x20]
inc eax
inc eax
sub ecx, eax
js 0x4493af
movzx edx, byte [eax - 1]
cmp ecx, edx
jl 0x4493af
dec edi
je 0x449422
dec edi
jne 0x449425
cmp byte [eax - 1], 8
jne 0x4493af
mov ecx, dword [eax]
mov dword [esi + 0x1b4], ecx
mov ecx, dword [eax + 4]
mov dword [esi + 0x1b8], ecx
jmp 0x449425
mov dword [ebp - 0x18], eax
movzx ecx, byte [eax - 1]
movzx edi, byte [eax - 2]
add eax, ecx
mov dword [ebp - 8], eax
test edi, edi
jne 0x4493f2
cmp byte [esi + 0x3d], 1
jne 0x449444
mov eax, dword [ebp - 0x10]
dec eax
mov word [esi + 0x46], ax
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
cmp byte [ebp + 0xc], 0
mov dword [0x4c6fd4], eax
mov dword [esi + 0x58], eax
jne 0x4493af
movzx ecx, word [ebp - 0x10]
movzx eax, word [esi + 0x46]
mov dword [ebp - 0x24], ecx
sub ecx, eax
dec ecx
mov eax, 0xffff
and ecx, eax
mov dword [ebp - 0x30], ecx
cmp ecx, 0x1ff
jb 0x4494af
cmp ecx, 0xfe01
jb 0x4493af
cmp byte [ebp - 1], 2
je 0x4493af
mov eax, dword [esi + 0x54]
mov ecx, dword [0x4c6fd4]
sub eax, ecx
cmp eax, 0x64
jb 0x4494a5
push 0x64
pop eax
add eax, ecx
mov dword [esi + 0x54], eax
jmp 0x4493af
movzx edi, word [ebp - 0x1c]
movzx ecx, word [esi + 0x48]
movzx edx, word [esi + 0x20]
mov dword [ebp - 0xc], edi
sub edi, ecx
lea edi, [edi + edx + 1]
and edi, eax
cmp edi, edx
mov dword [ebp + 0xc], edx
mov dword [ebp + 8], edi
jle 0x4494d5
xor edi, edi
mov dword [ebp + 8], edi
movzx edx, word [esi + 0x20]
test dx, dx
jbe 0x44951e
sub ecx, dword [ebp + 0xc]
dec ecx
and ecx, eax
cmp dword [ebp - 0xc], ecx
jne 0x44951a
inc byte [esi + 0x1a]
cmp byte [esi + 0x1a], 3
jne 0x44951e
mov ecx, dword [esi + 0x1cc]
test ecx, ecx
je 0x44951e
dec ecx
and ecx, eax
cmp dword [ebp - 0xc], ecx
jne 0x44951e
mov eax, dword [esi + 0x1d0]
dec eax
mov ecx, esi
mov dword [esi + 0x1c0], eax
call fcn.0044851a
jmp 0x44951e
mov byte [esi + 0x1a], 0
and dword [ebp + 0xc], 0
or dword [ebp - 0x38], 0xffffffff
and dword [ebp - 0x14], 0
mov dword [ebp - 0x34], SysReAllocString
test edi, edi
jle 0x4495c4
movzx eax, word [esi + 0x20]
movzx edi, word [esi + 0x48]
sub edi, eax
add edi, dword [ebp - 0x14]
lea ecx, [esi + 0x1f8]
and edi, 0xffff
push edi
call fcn.0044827f
mov dword [ebp - 0x28], eax
test eax, eax
je 0x4495b5
test dword [eax + 0x10], 0x7fffffff
je 0x4495b5
mov eax, dword [eax + 4]
add dword [ebp + 0xc], eax
mov eax, dword [esi + 0x1cc]
test eax, eax
je 0x44958f
cmp edi, eax
jne 0x44958f
mov eax, dword [esi + 0x1d0]
mov ecx, esi
mov dword [esi + 0x1c4], eax
call fcn.0044851a
call fcn.0044578e
mov ecx, dword [ebp - 0x28]
sub eax, dword [ecx + 8]
sbb edx, dword [ecx + 0xc]
cmp dword [ebp - 0x34], edx
jg 0x4495af
jl 0x4495a9
cmp dword [ebp - 0x38], eax
jae 0x4495af
mov eax, dword [ebp - 0x38]
mov edx, dword [ebp - 0x34]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], edx
inc dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp + 8]
jl 0x449539
cmp dword [ebp - 0x18], 0
je 0x4495ea
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0xc]
movzx ecx, byte [eax - 1]
push eax
add edx, 2
and edx, 0xffff
push esi
lea edi, [ebp - 0x38]
call fcn.00448ad0
add dword [ebp + 0xc], eax
cmp byte [esi + 0x3c], 0
push dword [ebx + 4]
jne 0x449617
mov edi, dword [sym.imp.WS2_32.dll_ntohl]
call edi
push dword [ebx + 8]
mov dword [ebp - 0x28], eax
call edi
mov ecx, eax
mov eax, dword [ebp - 0x28]
mov edx, 0xf4240
mul edx
xor edi, edi
add ecx, eax
adc edi, edx
jmp 0x449621
call dword [sym.imp.WS2_32.dll_ntohl]
mov ecx, eax
xor edi, edi
mov eax, dword [0x4c6fd4]
mov dword [esi + 0x60], eax
mov eax, ecx
or eax, edi
je 0x449634
mov eax, dword [ebp - 0x40]
sub eax, ecx
lea edi, [esi + 0x160]
mov ecx, dword [edi]
mov dword [esi + 0x50], eax
mov dword [ebp - 0x28], ecx
test eax, eax
je 0x449651
push eax
mov ecx, edi
call fcn.00448342
mov ecx, dword [ebp - 0x28]
test ecx, ecx
je 0x449679
mov edi, dword [edi]
mov eax, ecx
mov edx, edi
sub eax, edi
sub edx, ecx
cmp eax, edx
jae 0x449679
sub ecx, edi
cmp ecx, 0x2710
ja 0x449679
push ecx
lea ecx, [esi + 0x10c]
call fcn.00448329
cmp byte [esi + 0x3c], 0
jne 0x4496a6
push dword [ebx + 0xc]
call dword [sym.imp.WS2_32.dll_ntohl]
cmp eax, 0x7fffffff
jne 0x449696
xor edi, edi
jmp 0x4497e5
push dword [ebx + 0xc]
call dword [sym.imp.WS2_32.dll_ntohl]
mov edi, eax
mov dword [ebp - 0x14], edi
jmp 0x4496c2
push dword [ebx + 8]
mov edi, dword [sym.imp.WS2_32.dll_ntohl]
call edi
cmp eax, 0x7fffffff
je 0x44968f
push dword [ebx + 8]
call edi
mov edi, eax
mov dword [ebp - 0x14], eax
test edi, edi
je 0x4497e5
push edi
lea ecx, [esi + 0x10c]
call fcn.00448342
cmp dword [esi + 0x1e4], 0
jne 0x4496e5
mov dword [esi + 0x1e4], edi
mov edx, dword [esi + 0x1e4]
mov eax, edx
mov ecx, edi
sub eax, edi
sub ecx, edx
cmp eax, ecx
jbe 0x4496fd
mov eax, ecx
xor ecx, ecx
jmp 0x449705
xor ecx, ecx
neg eax
adc ecx, ecx
neg ecx
add dword [esi + 0x1d8], eax
mov edi, dword [esi + 0x1e8]
adc dword [esi + 0x1dc], ecx
inc dword [esi + 0x1e0]
mov eax, dword [esi + 0x1e0]
cmp dword [0x4c6fd4], edi
jbe 0x4497e2
mov ebx, dword [esi + 0x1d4]
cdq
push edx
push eax
push dword [esi + 0x1dc]
push dword [esi + 0x1d8]
call fcn.004010e0
add edi, 0x1388
mov dword [esi + 0x1e8], edi
xor edi, edi
mov edx, eax
cmp ebx, edx
mov dword [esi + 0x1d4], eax
mov dword [esi + 0x1d8], edi
mov dword [esi + 0x1dc], edi
mov dword [esi + 0x1e0], edi
mov ecx, ebx
jl 0x44977d
mov ecx, edx
mov eax, ebx
jg 0x44977f
mov eax, edx
cmp ecx, edi
jle 0x449787
neg ecx
jmp 0x44978f
cmp eax, edi
jge 0x4497ab
neg eax
mov ecx, eax
cmp ecx, edi
je 0x4497ab
mov eax, dword [esi + 0x1e4]
sub eax, ecx
add edx, ecx
mov dword [esi + 0x1e4], eax
mov dword [esi + 0x1d4], edx
add ebx, ecx
mov eax, dword [esi + 0x1d4]
sub eax, ebx
cdq
mov edi, eax
mov eax, dword [esi + 0x1ec]
push 0
mov ebx, edx
cdq
push 7
push edx
push eax
call fcn.00401270
push 0
add edi, eax
push 8
adc ebx, edx
push ebx
push edi
call fcn.004010e0
mov ebx, dword [ebp - 0x2c]
mov dword [esi + 0x1ec], eax
mov edi, dword [ebp - 0x14]
lea ecx, [esi + 0x10c]
call fcn.0044862c
cmp eax, dword [ebp - 0x38]
jbe 0x44980f
lea ecx, [esi + 0x10c]
call fcn.0044862c
sub eax, dword [ebp - 0x38]
lea ecx, [esi + 0x10c]
push eax
call fcn.00448329
test edi, edi
je 0x44982a
cmp dword [ebp + 0xc], 1
jl 0x44982a
push dword [ebp - 0x34]
mov edx, dword [ebp + 0xc]
push dword [ebp - 0x38]
mov ecx, esi
push edi
call fcn.00448bd0
movzx eax, word [esi + 0x20]
cmp dword [ebp + 8], eax
jg 0x4499a4
cmp byte [esi + 0x3c], 0
jne 0x449849
movzx eax, byte [ebx + 0x10]
imul eax, eax, 0x15e
jmp 0x449852
push dword [ebx + 0xc]
call dword [sym.imp.WS2_32.dll_ntohl]
mov dword [esi + 0x38], eax
test eax, eax
jne 0x449869
mov eax, dword [0x4c6fd4]
add eax, 0x3a98
mov dword [esi + 0xf8], eax
mov al, byte [esi + 0x3d]
cmp al, 1
jne 0x449882
mov ecx, dword [esi + 0x74]
xor edx, edx
inc edx
mov byte [esi + 0x3d], 2
call dword [esi + 0x84]
jmp 0x449893
cmp al, 6
jne 0x449893
movzx eax, word [esi + 0x20]
cmp eax, dword [ebp + 8]
jne 0x449893
mov byte [esi + 0x3d], 8
mov eax, dword [ebp - 0xc]
movzx ecx, word [esi + 0x4c]
inc eax
and eax, 0xffff
mov edx, eax
sub edx, ecx
sub ecx, eax
cmp edx, ecx
jae 0x4498b2
mov eax, dword [ebp - 0x1c]
inc eax
mov word [esi + 0x4c], ax
xor edi, edi
cmp dword [ebp + 8], edi
jle 0x4498dd
movzx eax, word [esi + 0x48]
movzx ecx, word [esi + 0x20]
sub eax, ecx
push eax
call fcn.004489b7
cmp eax, 2
je 0x4498dd
mov eax, 0xffff
add word [esi + 0x20], ax
inc edi
cmp edi, dword [ebp + 8]
jl 0x4498b9
cmp word [esi + 0x20], 0
jbe 0x44990d
movzx ebx, word [esi + 0x48]
movzx edi, word [esi + 0x20]
movzx eax, di
mov ecx, ebx
sub ecx, eax
push ecx
lea ecx, [esi + 0x1f8]
call fcn.0044827f
test eax, eax
jne 0x44990d
dec edi
mov word [esi + 0x20], di
test di, di
ja 0x4498e8
cmp word [esi + 0x20], 1
jne 0x44995e
movzx eax, word [esi + 0x48]
dec eax
push eax
lea ecx, [esi + 0x1f8]
call fcn.0044827f
mov ecx, eax
test dword [ecx + 0x10], 0x7fffffff
jne 0x44995e
mov eax, dword [esi + 0x6c]
push 0x64
cdq
pop edi
idiv edi
cmp eax, dword [ecx]
jb 0x44995e
mov eax, ecx
mov ecx, esi
call fcn.00448f9d
cmp word [esi + 0x18], 0
jne 0x44995e
mov eax, dword [0x4c6fd4]
add eax, 0x70000000
and dword [esi + 0x1c], 0
mov dword [esi + 0x54], eax
mov al, byte [esi + 0x34]
test al, 0x20
je 0x4499a4
movzx ecx, word [esi + 0x48]
movzx edx, word [esi + 0x20]
movzx edi, word [esi + 0x4c]
sub ecx, edx
cmp cx, di
je 0x44997f
and al, 0xdf
mov byte [esi + 0x34], al
jmp 0x4499a4
push ecx
lea ecx, [esi + 0x1f8]
call fcn.0044827f
test eax, eax
je 0x4499a4
test dword [eax + 0x10], 0x7fffffff
jbe 0x4499a4
inc edi
mov ecx, esi
mov word [esi + 0x4c], di
call fcn.00448f9d
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x4499be
movzx ecx, byte [eax - 1]
push eax
mov eax, dword [ebp - 0xc]
add eax, 2
push eax
mov eax, esi
call fcn.00449166
cmp byte [esi + 0x3d], 3
jne 0x4499e1
xor edx, edx
mov ecx, esi
call fcn.004490d6
test al, al
je 0x4499e1
mov ecx, dword [esi + 0x74]
push 2
pop edx
mov byte [esi + 0x3d], 2
call dword [esi + 0x84]
cmp byte [ebp - 1], 2
je 0x4493af
mov al, byte [esi + 0x3d]
cmp al, 2
je 0x4499fa
cmp al, 3
jne 0x4493af
cmp byte [ebp - 1], 1
jne 0x449a0c
mov ax, word [ebp - 0x10]
or byte [esi + 0x34], 0x10
mov word [esi + 0x44], ax
mov eax, dword [ebp - 0x30]
test eax, eax
jne 0x449b0d
mov edi, dword [ebp - 0x20]
mov eax, edi
sub eax, dword [ebp - 8]
mov dword [ebp + 0xc], eax
test eax, eax
jle 0x449a30
mov edx, dword [ebp - 8]
mov ecx, dword [esi + 0x74]
push eax
call dword [esi + 0x78]
sub edi, dword [ebp - 8]
inc word [esi + 0x46]
add dword [esi + 0x1c], edi
test byte [esi + 0x34], 0x10
je 0x449a4a
mov ax, word [esi + 0x44]
cmp ax, word [esi + 0x46]
je 0x449aa1
cmp word [esi + 0x18], 0
je 0x449add
movzx edi, word [esi + 0x46]
inc edi
lea ecx, [esi + 0x1f0]
push edi
call fcn.0044827f
mov ebx, eax
test ebx, ebx
je 0x449add
lea eax, [esi + 0x1f0]
and edi, dword [eax]
mov eax, dword [eax + 4]
and dword [eax + edi*4], 0
push dword [ebx]
mov ecx, dword [esi + 0x74]
lea edx, [ebx + 4]
call dword [esi + 0x78]
inc word [esi + 0x46]
mov eax, dword [ebx]
add dword [esi + 0x1c], eax
mov ecx, ebx
call fcn.004444fe
mov eax, 0xffff
add word [esi + 0x18], ax
jmp 0x449a3a
mov eax, dword [esi + 0x98]
imul eax, eax, 3
mov byte [esi + 0x3d], 4
cmp eax, 0x3c
jb 0x449ab6
push 0x3c
pop eax
mov ecx, dword [0x4c6fd4]
add eax, ecx
mov ecx, dword [esi + 0x74]
push 4
pop edx
mov dword [esi + 0xf4], eax
call dword [esi + 0x84]
xor eax, eax
mov dword [esi + 0x1c], 0x961
mov word [esi + 0x18], ax
cmp byte [esi + 0x3d], 4
jne 0x449af1
push 0
mov eax, esi
call fcn.004486f7
jmp 0x449ba5
mov eax, dword [esi + 0x54]
mov ecx, dword [0x4c6fd4]
sub eax, ecx
cmp eax, 0x64
jb 0x449ba0
push 0x64
pop eax
jmp 0x449ba0
test byte [esi + 0x34], 0x10
je 0x449b21
mov cx, word [ebp - 0x10]
cmp cx, word [esi + 0x44]
ja 0x4493af
cmp eax, 0x3ff
ja 0x4493af
inc eax
lea ebx, [esi + 0x1f0]
cmp eax, dword [ebx]
jbe 0x449b44
push eax
mov eax, dword [ebp - 0x24]
inc eax
push eax
mov ecx, ebx
call fcn.00448296
push dword [ebp - 0x24]
mov ecx, ebx
call fcn.0044827f
test eax, eax
jne 0x4493af
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 8]
lea ecx, [eax + 4]
mov dword [ebp + 0xc], eax
call fcn.00444a72
mov edi, eax
mov eax, dword [ebp + 0xc]
push eax
push dword [ebp - 8]
mov dword [edi], eax
lea eax, [edi + 4]
push eax
call sub.MSVCRT.dll_memcpy
mov eax, dword [ebx]
and eax, dword [ebp - 0x24]
mov ecx, dword [ebx + 4]
mov dword [ecx + eax*4], edi
mov eax, dword [esi + 0x54]
add esp, 0xc
inc word [esi + 0x18]
mov ecx, dword [0x4c6fd4]
sub eax, ecx
cmp eax, 1
jb 0x449ba0
xor eax, eax
inc eax
add eax, ecx
mov dword [esi + 0x54], eax
mov eax, dword [ebp + 0xc]
pop edi
pop esi
pop ebx
leave
ret 8