Function at 0x493820
Capabilities:
Check for time delay via gettickcount

Disassembly:
sub esp, 0x144
mov eax, dword [0x4f4970]
xor eax, esp
mov dword [esp + 0x140], eax
mov eax, ecx
mov ecx, dword [esp + 0x148]
xor edx, edx
mov dword [esp + 0x18], eax
mov dword [esp + 0x10], ecx
mov dword [esp], edx
mov dword [esp + 0x14], edx
cmp byte [eax + 0x14], dl
jne 0x49386c
xor eax, eax
mov ecx, dword [esp + 0x140]
xor ecx, esp
call fcn.0046da8a
add esp, 0x144
ret 0xc
push ebp
call fcn.00409bf0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ebp, dword [esp + 0x20]
push ebx
push esi
mov dword [esp + 0x14], eax
push edi
mov ebx, dword [esp + 0x28]
mov eax, dword [ebx]
mov edx, dword [eax]
lea ecx, [esp + 0x134]
push ecx
mov ecx, ebx
mov dword [esp + 0x150], 0xf
mov dword [esp + 0x14c], 0
mov byte [esp + 0x13c], 0
call edx
test al, al
je 0x493bdf
mov edi, dword [esp + 0x20]
mov eax, dword [edi]
cmp dword [eax - 0xc], 0xa00000
jle 0x4938d3
mov ecx, edi
call fcn.00409bf0
cmp dword [esp + 0x14c], 0x10
mov eax, dword [esp + 0x138]
jae 0x4938eb
lea eax, [esp + 0x138]
lea ecx, [esp + 0x34]
push 0xfde9
mov dword [esp + 0x34], ecx
push eax
lea ecx, [esp + 0x38]
call fcn.0040c580
mov edx, dword [esp + 0x30]
test edx, edx
jne 0x49390e
xor eax, eax
jmp 0x493922
mov eax, edx
lea esi, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x493913
sub eax, esi
sar eax, 1
push eax
push edx
mov ecx, edi
call fcn.0040dcc0
mov eax, dword [esp + 0x30]
lea edx, [esp + 0x34]
cmp eax, edx
je 0x493940
push eax
call fcn.0046db16
add esp, 4
push edi
mov ecx, ebx
call fcn.004935c0
mov eax, dword [edi]
sub eax, 0x10
push eax
call fcn.0040ce70
add eax, 0x10
add esp, 4
lea ecx, [esp + 0x14]
mov dword [esp + 0x14], eax
call fcn.00448fb0
mov ecx, eax
call fcn.00449010
mov eax, dword [esp + 0x14]
mov esi, dword [eax - 0xc]
or dword [esp + 0x10], 1
cmp esi, 1
jg 0x493995
add eax, 0xfffffff0
push eax
call fcn.0040ce70
mov edi, eax
add esp, 4
add edi, 0x10
mov dword [esp + 0x1c], edi
jmp 0x4939d2
mov eax, dword [eax - 0x10]
test eax, eax
je 0x4939a9
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x10]
call eax
test eax, eax
jne 0x4939b9
mov edx, dword [0x4f9bc0]
mov eax, dword [edx + 0x10]
mov ecx, 0x4f9bc0
call eax
mov ecx, dword [esp + 0x14]
push eax
lea edx, [ecx + esi*2 - 2]
push 1
push edx
lea ecx, [esp + 0x28]
call fcn.0040cba0
mov edi, dword [esp + 0x1c]
mov ecx, 0x4ce110
mov eax, edi
lea esp, [esp]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x493a06
test dx, dx
je 0x493a02
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x493a06
add eax, 4
add ecx, 4
test dx, dx
jne 0x4939e0
xor eax, eax
jmp 0x493a0b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x493ab3
mov eax, dword [esp + 0x14]
mov esi, dword [eax - 0xc]
or dword [esp + 0x10], 2
cmp esi, 1
jg 0x493a3b
add eax, 0xfffffff0
push eax
call fcn.0040ce70
mov ebp, eax
add esp, 4
add ebp, 0x10
mov dword [esp + 0x2c], ebp
jmp 0x493a75
mov ecx, dword [eax - 0x10]
test ecx, ecx
je 0x493a4d
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
call edx
test eax, eax
jne 0x493a5c
mov eax, dword [0x4f9bc0]
mov edx, dword [eax + 0x10]
mov ecx, 0x4f9bc0
call edx
push eax
mov eax, dword [esp + 0x18]
lea ecx, [eax + esi*2 - 2]
push 1
push ecx
lea ecx, [esp + 0x38]
call fcn.0040cba0
mov ebp, dword [esp + 0x2c]
mov ecx, 0x4ce10c
mov eax, ebp
lea esp, [esp]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x493aa6
test dx, dx
je 0x493aa2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x493aa6
add eax, 4
add ecx, 4
test dx, dx
jne 0x493a80
xor eax, eax
jmp 0x493aab
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x493ab3
xor bl, bl
jmp 0x493ab5
mov bl, 1
test byte [esp + 0x10], 2
je 0x493add
and dword [esp + 0x10], 0xfffffffd
lea eax, [ebp - 0x10]
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x493add
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
test byte [esp + 0x10], 1
je 0x493b05
and dword [esp + 0x10], 0xfffffffe
lea eax, [edi - 0x10]
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x493b05
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
test bl, bl
jne 0x493c48
mov esi, dword [esp + 0x148]
add esi, 0xffffffff
js 0x493bbd
mov edi, 0x10
cmp esi, dword [esp + 0x148]
jbe 0x493b30
call fcn.0046d2c9
mov eax, dword [esp + 0x138]
cmp dword [esp + 0x14c], edi
jae 0x493b47
lea eax, [esp + 0x138]
movsx ecx, byte [eax + esi]
push ecx
call fcn.0047b61c
add esp, 4
test eax, eax
je 0x493b5f
sub esi, 1
jns 0x493b22
jmp 0x493bbd
cmp esi, dword [esp + 0x148]
jbe 0x493b6d
call fcn.0046d2c9
mov eax, dword [esp + 0x138]
cmp dword [esp + 0x14c], edi
jae 0x493b84
lea eax, [esp + 0x138]
cmp byte [eax + esi], 0x23
je 0x493c61
cmp esi, dword [esp + 0x148]
jbe 0x493b9c
call fcn.0046d2c9
mov eax, dword [esp + 0x138]
cmp dword [esp + 0x14c], edi
jae 0x493bb3
lea eax, [esp + 0x138]
cmp byte [eax + esi], 0x24
je 0x493c61
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x493bf8
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
jmp 0x493bf8
cmp byte [esp + 0x160], 0
je 0x493bf0
call fcn.00494d60
jmp 0x493bf8
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
mov esi, dword [esp + 0x15c]
cmp esi, 0xffffffff
je 0x493c12
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [esp + 0x18]
cmp eax, esi
jg 0x493c8d
mov ecx, dword [esp + 0x28]
mov edx, dword [ecx]
mov eax, dword [edx + 4]
call eax
test al, al
jne 0x4940bb
cmp dword [esp + 0x14c], 0x10
jb 0x493883
mov ecx, dword [esp + 0x138]
push ecx
call fcn.0046d0e6
add esp, 4
jmp 0x493883
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jmp 0x493e56
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x493c81
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
cmp dword [esp + 0x14c], edi
jmp 0x493e6a
mov edx, dword [esp + 0x20]
mov eax, dword [edx]
sub eax, 0x10
push eax
call fcn.0040ce70
add eax, 0x10
add esp, 4
lea ecx, [esp + 0x14]
mov dword [esp + 0x14], eax
call fcn.00448fb0
mov ecx, eax
call fcn.00449010
mov eax, dword [esp + 0x14]
mov esi, dword [eax - 0xc]
or dword [esp + 0x10], 4
cmp esi, 1
jg 0x493cda
add eax, 0xfffffff0
push eax
call fcn.0040ce70
mov edi, eax
add esp, 4
add edi, 0x10
jmp 0x493d17
mov eax, dword [eax - 0x10]
test eax, eax
je 0x493cee
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x10]
call eax
test eax, eax
jne 0x493cfe
mov edx, dword [0x4f9bc0]
mov eax, dword [edx + 0x10]
mov ecx, 0x4f9bc0
call eax
mov ecx, dword [esp + 0x14]
push eax
lea edx, [ecx + esi*2 - 2]
push 1
push edx
lea ecx, [esp + 0x24]
call fcn.0040cba0
mov edi, dword [esp + 0x18]
mov ecx, 0x4ce110
mov eax, edi
mov edi, edi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x493d46
test dx, dx
je 0x493d42
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x493d46
add eax, 4
add ecx, 4
test dx, dx
jne 0x493d20
xor eax, eax
jmp 0x493d4b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x493de9
mov eax, dword [esp + 0x14]
mov esi, dword [eax - 0xc]
or dword [esp + 0x10], 8
cmp esi, 1
jg 0x493d75
add eax, 0xfffffff0
push eax
call fcn.0040ce70
add esp, 4
add eax, 0x10
jmp 0x493daf
mov ecx, dword [eax - 0x10]
test ecx, ecx
je 0x493d87
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
call edx
test eax, eax
jne 0x493d96
mov eax, dword [0x4f9bc0]
mov edx, dword [eax + 0x10]
mov ecx, 0x4f9bc0
call edx
push eax
mov eax, dword [esp + 0x18]
lea ecx, [eax + esi*2 - 2]
push 1
push ecx
lea ecx, [esp + 0x28]
call fcn.0040cba0
mov eax, dword [esp + 0x1c]
mov edx, 0x4ce10c
mov ecx, eax
mov si, word [ecx]
cmp si, word [edx]
jne 0x493ddc
test si, si
je 0x493dd8
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x493ddc
add ecx, 4
add edx, 4
test si, si
jne 0x493db6
xor ecx, ecx
jmp 0x493de1
sbb ecx, ecx
sbb ecx, 0xffffffff
test ecx, ecx
je 0x493ded
xor bl, bl
jmp 0x493def
mov eax, dword [esp + 0x1c]
mov bl, 1
test byte [esp + 0x10], 8
je 0x493e17
and dword [esp + 0x10], 0xfffffff7
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x493e17
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
test byte [esp + 0x10], 4
je 0x493e3a
lea eax, [edi - 0x10]
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x493e3a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
or edx, 0xffffffff
lea ecx, [eax + 0xc]
test bl, bl
je 0x49408c
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x493e62
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
cmp dword [esp + 0x14c], 0x10
jb 0x493e7c
mov ecx, dword [esp + 0x138]
push ecx
call fcn.0046d0e6
add esp, 4
mov edx, dword [esp + 0x20]
mov esi, dword [esp + 0x28]
push edx
mov ecx, esi
call fcn.004937a0
cmp byte [esi + 0x1c], 0
je 0x4940e3
mov edi, esi
mov eax, dword [edi + 0x20]
cmp dword [eax - 0xc], 0
je 0x493f0c
test eax, eax
je 0x493f0c
mov esi, dword [esp + 0x20]
mov ecx, dword [esi]
cmp dword [ecx - 0xc], 0
jl 0x493f0c
push eax
push ecx
call fcn.0046f02d
add esp, 8
test eax, eax
je 0x493f0c
mov ecx, dword [esi]
sub eax, ecx
sar eax, 1
jne 0x493f0c
mov eax, dword [edi + 0x20]
mov eax, dword [eax - 0xc]
mov ecx, dword [ecx - 0xc]
sub ecx, eax
push ecx
push eax
lea edx, [esp + 0x24]
push edx
mov ecx, esi
call fcn.0040a240
lea eax, [esp + 0x1c]
push eax
mov ecx, esi
call fcn.0040b0f0
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x493f0c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov edi, dword [esp + 0x20]
mov eax, dword [edi]
mov esi, dword [eax - 0xc]
cmp esi, 1
jg 0x493f2d
add eax, 0xfffffff0
push eax
call fcn.0040ce70
mov esi, eax
add esp, 4
add esi, 0x10
jmp 0x493f68
mov eax, dword [eax - 0x10]
test eax, eax
je 0x493f41
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x10]
call eax
test eax, eax
jne 0x493f51
mov edx, dword [0x4f9bc0]
mov eax, dword [edx + 0x10]
mov ecx, 0x4f9bc0
call eax
mov ecx, dword [edi]
push eax
lea edx, [ecx + esi*2 - 2]
push 1
push edx
lea ecx, [esp + 0x24]
call fcn.0040cba0
mov esi, dword [esp + 0x18]
mov ecx, 0x4ce110
mov eax, esi
nop
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x493f96
test dx, dx
je 0x493f92
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x493f96
add eax, 4
add ecx, 4
test dx, dx
jne 0x493f70
xor eax, eax
jmp 0x493f9b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x493fe9
mov eax, dword [edi]
mov eax, dword [eax - 0xc]
dec eax
push eax
push 0
lea ecx, [esp + 0x20]
push ecx
mov ecx, edi
call fcn.0040a240
push eax
mov ecx, edi
call fcn.0040b0f0
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x493fdc
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov dword [esp + 0x24], 1
jmp 0x49406e
mov ecx, 0x4ce10c
mov eax, esi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x494016
test dx, dx
je 0x494012
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x494016
add eax, 4
add ecx, 4
test dx, dx
jne 0x493ff0
xor eax, eax
jmp 0x49401b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x494066
mov ecx, dword [edi]
mov eax, dword [ecx - 0xc]
dec eax
push eax
push 0
lea edx, [esp + 0x20]
push edx
mov ecx, edi
call fcn.0040a240
push eax
mov ecx, edi
call fcn.0040b0f0
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x49405c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov dword [esp + 0x24], 2
jmp 0x49406e
mov dword [esp + 0x24], 3
lea eax, [esi - 0x10]
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4940e3
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
jmp 0x4940e3
mov dword [esp + 0x24], 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4940a7
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
cmp dword [esp + 0x14c], 0x10
jb 0x4940d5
mov ecx, dword [esp + 0x138]
push ecx
jmp 0x4940cd
cmp dword [esp + 0x14c], 0x10
jb 0x4940d5
mov edx, dword [esp + 0x138]
push edx
call fcn.0046d0e6
add esp, 4
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x28]
push eax
call fcn.004937a0
mov ecx, dword [esp + 0x150]
mov eax, dword [esp + 0x24]
pop edi
pop esi
pop ebx
pop ebp
xor ecx, esp
call fcn.0046da8a
add esp, 0x144
ret 0xc