Function at 0x9ba450
Capabilities:
Check for time delay via gettickcount
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0xa9bcf7
mov eax, dword fs:[0]
push eax
sub esp, 0x568
mov eax, dword [0xb196ec]
xor eax, esp
mov dword [esp + 0x560], eax
push ebx
push esi
push edi
mov eax, dword [0xb196ec]
xor eax, esp
push eax
lea eax, [esp + 0x578]
mov dword fs:[0], eax
mov eax, dword [ebp + 0x14]
mov ebx, dword [ebp + 0xc]
mov edi, dword [ebp + 0x10]
push 0x103
mov dword [esp + 0x68], ecx
xor esi, esi
mov dword [esp + 0x64], eax
mov eax, dword [ebp + 0x18]
lea ecx, [esp + 0x469]
push esi
push ecx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x20], edi
mov dword [esp + 0x74], edx
mov dword [esp + 0x68], eax
mov byte [esp + 0x470], 0
call fcn.00a7ffb0
mov eax, dword [0xabd68c]
mov edx, dword [0xabd688]
mov dword [esp + 0x31c], eax
xor eax, eax
mov dword [esp + 0x320], eax
mov dword [esp + 0x324], eax
mov byte [esp + 0x30c], al
mov dword [esp + 0x30d], eax
mov dword [esp + 0x311], eax
mov byte [esp + 0x315], al
or eax, 0xffffffff
add esp, 0xc
mov dword [esp + 0x30c], edx
mov dword [esp + 0x30], esi
mov dword [esp + 0x38], esi
mov dword [esp + 0x34], eax
cmp dword [0xb2b0bc], eax
jne 0x9ba53a
call fcn.00968110
mov dword [0xb2b0bc], eax
cmp dword [ebp + 8], 4
jbe 0x9bac61
cmp ebx, esi
je 0x9bac61
cmp byte [ebx], 0
je 0x9bac61
mov eax, dword [0xbdc574]
cmp eax, esi
je 0x9bac61
mov ebx, dword [ebp + 0x1c]
cmp ebx, esi
jne 0x9ba585
cmp eax, 1
jne 0x9ba585
mov edi, edi
mov esi, 0xa
call fcn.0094d160
cmp dword [0xbdc574], 1
je 0x9ba570
xor esi, esi
mov eax, 0xbdc558
call fcn.0096ffb0
test eax, eax
jne 0x9ba5a9
push str.Failed_to_Lock_hMutexMap1
mov ebx, edi
call fcn.009b7510
add esp, 4
xor eax, eax
jmp 0x9bac66
cmp ebx, esi
jne 0x9ba714
cmp dword [0xbdc56c], esi
je 0x9ba714
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
call ebx
sub eax, dword [0xbdc570]
cmp eax, 0x493e0
jbe 0x9ba714
lea ecx, [esp + 0x3c]
push ecx
call fcn.0099cb90
mov dword [esp + 0x580], esi
call ebx
mov edx, dword [0xbe4bf4]
mov ecx, dword [0xbe4bdc]
mov dword [0xbdc570], eax
mov eax, dword [edx]
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], eax
jmp 0x9ba610
mov edx, dword [0xbe4bf4]
mov eax, dword [0xbe4bdc]
lea esi, [esp + 0x28]
lea edi, [esp + 0x20]
mov dword [esp + 0x2c], edx
mov dword [esp + 0x28], eax
call fcn.009c1390
test al, al
je 0x9ba687
mov esi, edi
call fcn.009024d0
mov esi, eax
add esi, 4
cmp dword [esi + 0x110], 0
jne 0x9ba67c
cmp dword [esi + 0x118], 0
jne 0x9ba67c
call ebx
sub eax, dword [esi + 0x114]
cmp eax, 0x3a980
jbe 0x9ba67c
add esi, 0x11c
push esi
lea ecx, [esp + 0x40]
push ecx
lea ebx, [esp + 0x74]
call fcn.0099c9d0
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
lea esi, [esp + 0x20]
call fcn.009c63e0
jmp 0x9ba610
cmp dword [esp + 0x58], 0
jbe 0x9ba6f4
mov edx, dword [esp + 0x54]
mov ecx, dword [edx]
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], ecx
mov edi, 1
mov esi, dword [esp + 0x54]
test eax, eax
je 0x9ba6b3
cmp eax, dword [esp + 0x3c]
je 0x9ba6b8
call fcn.00a7a8a1
cmp dword [esp + 0x24], esi
je 0x9ba6f4
cmp dword [0xbdc56c], 0
jbe 0x9ba6cd
sub dword [0xbdc56c], edi
lea esi, [esp + 0x20]
call fcn.009024d0
mov ecx, dword [esp + 0x14]
mov edx, dword [eax]
push 0
push edi
push ecx
push edx
call fcn.009bb1b0
add esp, 0x10
call fcn.0099d3f0
mov eax, dword [esp + 0x20]
jmp 0x9ba6a5
lea eax, [esp + 0x3c]
call fcn.0099cad0
lea eax, [esp + 0x3c]
push eax
mov dword [esp + 0x584], 0xffffffff
call fcn.0099c980
xor esi, esi
cmp dword [0xb2b0bc], esi
je 0x9ba75f
mov edx, dword [ebp + 8]
lea ecx, [esp + 0x14]
push ecx
push edx
mov dword [esp + 0x1c], esi
call fcn.00968090
add esp, 8
test eax, eax
je 0x9ba75f
cmp dword [esp + 0x14], esi
je 0x9ba750
mov dword [esp + 0x300], 0x343678
mov dword [esp + 0x34], 1
jmp 0x9ba75f
mov dword [esp + 0x300], 0x323378
mov dword [esp + 0x34], esi
mov edx, dword [ebp + 8]
lea eax, [esp + 0x30]
push eax
lea ecx, [esp + 0x3c]
push ecx
push edx
lea edx, [esp + 0x318]
lea ecx, [esp + 0x470]
call fcn.009b8130
mov edx, dword [esp + 0x70]
add esp, 0xc
cmp edx, esi
je 0x9ba7a0
lea eax, [esp + 0x464]
mov ecx, eax
sub edx, ecx
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x9ba796
mov edx, dword [esp + 0x5c]
cmp edx, esi
je 0x9ba7bd
lea eax, [esp + 0x30c]
mov ecx, eax
sub edx, ecx
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x9ba7b3
mov eax, dword [esp + 0x68]
cmp eax, esi
je 0x9ba7cb
mov edx, dword [esp + 0x30]
mov dword [eax], edx
mov eax, dword [esp + 0x60]
mov ebx, dword [esp + 0x38]
cmp eax, esi
je 0x9ba7d9
mov dword [eax], ebx
lea eax, [esp + 0x1bc]
call fcn.008c3b90
mov dword [esp + 0x580], 1
mov edi, dword [esp + 0x18]
push edi
lea ecx, [esp + 0x1c0]
call fcn.0085d440
lea eax, [esp + 0x300]
lea edx, [eax + 1]
jmp 0x9ba810
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x9ba810
sub eax, edx
push eax
lea eax, [esp + 0x304]
push eax
lea ecx, [esp + 0x1fc]
call fcn.0085d360
lea eax, [esp + 0x464]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x9ba838
sub eax, edx
push eax
lea ecx, [esp + 0x468]
push ecx
lea ecx, [esp + 0x218]
call fcn.0085d360
lea eax, [esp + 0x30c]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x9ba860
sub eax, edx
push eax
lea edx, [esp + 0x310]
push edx
lea ecx, [esp + 0x234]
call fcn.0085d360
mov eax, dword [ebp + 8]
push edi
mov byte [esp + 0x268], 0
mov dword [esp + 0x2d0], 1
mov dword [esp + 0x2d8], esi
mov dword [esp + 0x2dc], eax
mov dword [esp + 0x2e0], esi
call fcn.009ba3c0
add esp, 4
test eax, eax
je 0x9baa71
mov eax, 4
mov dword [esp + 0x14], eax
mov dword [esp + 0x2e0], eax
mov dword [esp + 0x2e4], esi
mov eax, dword [esp + 0x34]
cmp eax, 0xffffffff
je 0x9ba8e1
mov dword [esp + 0x2f0], eax
mov ecx, dword [esp + 0x30]
mov edi, dword [ebp + 8]
lea edx, [esp + 0x31c]
mov dword [esp + 0x2f8], ecx
push edx
lea edx, [esp + 0x2ec]
mov ecx, edi
mov dword [esp + 0x2f8], ebx
call fcn.0096cad0
add esp, 4
push 0x8000
call fcn.00a7a155
mov esi, eax
add esp, 4
test esi, esi
je 0x9ba943
push edi
mov ecx, esi
mov byte [esi], 0
call fcn.0097b4b0
push esi
lea ecx, [esp + 0x1dc]
call fcn.0085d440
push esi
call fcn.00a78fec
add esp, 4
lea edi, [ebp + 8]
lea ebx, [esp + 0x28]
call fcn.009c00a0
mov ecx, dword [eax]
mov esi, dword [eax + 4]
mov edi, dword [0xbe4bf4]
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], esi
test ecx, ecx
je 0x9ba96e
cmp ecx, dword [0xbe4bdc]
je 0x9ba973
call fcn.00a7a8a1
cmp esi, edi
je 0x9baaba
push 0x103
lea eax, [esp + 0x321]
push 0
push eax
mov byte [esp + 0x328], 0
call fcn.00a7ffb0
add esp, 0xc
cmp dword [ebp + 0x1c], 0
jne 0x9baaa9
mov edx, dword [ebp + 8]
push 0
push 1
lea ecx, [esp + 0x324]
push ecx
push edx
call fcn.009bb1b0
add esp, 0x10
lea edi, [ebp + 8]
lea ebx, [esp + 0x28]
call fcn.009c00a0
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov eax, dword [0xbe4bf4]
mov dword [esp + 0x18], ecx
mov ecx, dword [0xbe4bdc]
lea esi, [esp + 0x28]
lea edi, [esp + 0x18]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x2c], eax
mov dword [esp + 0x28], ecx
call fcn.009c1390
test al, al
je 0x9baa08
mov esi, edi
call fcn.009024d0
lea eax, [ebp + 8]
call fcn.009c0000
mov edx, dword [0xbe4bf4]
mov ecx, dword [edx]
mov eax, dword [0xbe4bdc]
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], ecx
lea ecx, [ecx]
mov esi, dword [0xbe4bf4]
test eax, eax
je 0x9baa32
cmp eax, dword [0xbe4bdc]
je 0x9baa37
call fcn.00a7a8a1
cmp dword [esp + 0x1c], esi
je 0x9baac4
lea esi, [esp + 0x18]
call fcn.009024d0
mov ecx, dword [ebp + 8]
add eax, 4
cmp dword [eax + 0x124], ecx
jne 0x9baa62
mov dword [eax + 0x124], 0
lea esi, [esp + 0x18]
call fcn.009c63e0
mov eax, dword [esp + 0x18]
jmp 0x9baa20
mov edx, dword [ebp + 8]
lea ecx, [esp + 0x288]
call fcn.0097ceb0
mov dword [esp + 0x14], eax
mov dword [esp + 0x2e0], eax
cmp eax, 4
jbe 0x9ba8ca
xor ecx, ecx
mov edx, eax
call fcn.0097ceb0
mov dword [esp + 0x2e4], eax
jmp 0x9ba8d1
lea esi, [esp + 0x18]
call fcn.009024d0
lea eax, [ebp + 8]
call fcn.009c0000
cmp dword [ebp + 0x1c], 0
jne 0x9babe0
lea edx, [esp + 0x3c]
push edx
call fcn.0099cb90
mov byte [esp + 0x580], 2
cmp dword [esp + 0x14], 4
jbe 0x9babc5
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x40]
push ecx
lea ebx, [esp + 0x74]
call fcn.0099c9d0
jmp 0x9bab00
lea edi, [esp + 0x14]
lea ebx, [esp + 0x20]
call fcn.009c00a0
mov edi, dword [eax]
mov esi, dword [eax + 4]
mov ebx, dword [0xbe4bf4]
test edi, edi
je 0x9bab24
cmp edi, dword [0xbe4bdc]
je 0x9bab29
call fcn.00a7a8a1
cmp esi, ebx
je 0x9babc5
test edi, edi
jne 0x9babad
call fcn.00a7a8a1
cmp esi, dword [edi + 0x18]
jne 0x9bab44
call fcn.00a7a8a1
mov edx, dword [esi + 0x134]
mov eax, dword [esp + 0x54]
mov ebx, dword [esp + 0x3c]
lea ecx, [esp + 0x14]
mov dword [esp + 0x14], edx
push ecx
lea edx, [esp + 0x1c]
push edx
lea edi, [esp + 0x44]
mov dword [esp + 0x34], eax
call fcn.0099cb00
mov edi, eax
mov eax, dword [edi]
test eax, eax
je 0x9bab79
cmp eax, ebx
je 0x9bab7e
call fcn.00a7a8a1
mov eax, dword [esp + 0x2c]
cmp dword [edi + 4], eax
jne 0x9babb1
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0x40]
push edx
lea ebx, [esp + 0x74]
call fcn.0099c9d0
inc dword [esi + 0x128]
cmp dword [esp + 0x14], 4
ja 0x9bab00
jmp 0x9babc5
mov edi, dword [edi]
jmp 0x9bab3a
mov eax, dword [esp + 0x14]
push eax
push str._PIDSET__A__Possible_looping_of_PID__u_
push 0
call fcn.0096a780
add esp, 0xc
lea eax, [esp + 0x3c]
call fcn.0099cad0
lea ecx, [esp + 0x3c]
push ecx
mov byte [esp + 0x584], 1
call fcn.0099c980
mov edx, dword [ebp + 8]
lea eax, [esp + 0x320]
push eax
lea ebx, [esp + 0x1c0]
mov dword [esp + 0x320], edx
call fcn.009c13e0
mov byte [esp + 0x580], 3
mov ecx, dword [esp + 0x31c]
lea edx, [esp + 0x7c]
push edx
lea ebx, [esp + 0x324]
mov dword [esp + 0x7c], ecx
call fcn.009c13e0
lea eax, [esp + 0x78]
push eax
lea edi, [esp + 0x70]
mov byte [esp + 0x584], 4
call fcn.009bff10
lea esi, [esp + 0x7c]
call fcn.008c3c10
mov esi, ebx
call fcn.008c3c10
mov ecx, dword [0xbdc558]
push ecx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea esi, [esp + 0x1bc]
call fcn.008c3c10
mov eax, 1
mov ecx, dword [esp + 0x578]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x560]
xor ecx, esp
call fcn.00a78f21
mov esp, ebp
pop ebp
ret