Function at 0x40f970
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5e99fe
mov eax, dword fs:[0]
push eax
sub esp, 0x26c
mov eax, dword [0x677010]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0xe0], esi
mov edi, dword [ebp + 8]
lea ecx, [ebp - 0xd0]
mov dword [ebp - 0xf0], edi
call fcn.00407a4a
mov dword [ebp - 4], 0
lea ecx, [ebp - 0xd0]
push str.srl::System::SetConfiguration
mov byte [ebp - 0xd4], 0
call fcn.00414ef0
mov dword [ebp - 4], 1
call fcn.0041db40
cmp dword [eax + 4], 4
jl 0x40f9f5
push ecx
lea ecx, [ebp - 0xd4]
call fcn.00412cf0
call fcn.0041db40
cmp dword [eax + 4], 3
jl 0x40ff6d
call fcn.0041db40
sub esp, 8
lea ecx, [ebp - 0x1c8]
mov esi, eax
mov dword [ebp - 0xe8], esi
call fcn.00415be0
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 2
call fcn.00407a4a
push str.TRACE
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 3
call fcn.00414ef0
lea ecx, [ebp - 0x58]
call fcn.00407a4a
xor eax, eax
mov byte [ebp - 4], 4
mov dword [ebp - 0xd8], eax
cmp dword [esi + 0xc], eax
jle 0x40fad5
nop dword [eax + eax]
cmp eax, 0xa
jge 0x40fad5
mov edx, dword [ebp - 0x44]
mov eax, edx
mov ecx, dword [ebp - 0x48]
sub eax, ecx
cmp eax, 2
jb 0x40faa5
cmp edx, 8
lea esi, [ebp - 0x58]
push 4
cmovae esi, dword [ebp - 0x58]
lea edi, [ecx + 2]
push 0x63e4c4
mov dword [ebp - 0x48], edi
lea eax, [esi + ecx*2]
push eax
call fcn.005bfc60
add esp, 0xc
xor eax, eax
mov word [esi + edi*2], ax
mov esi, dword [ebp - 0xe8]
jmp 0x40fac3
push 2
push 0x63e4c4
mov byte [ebp - 0xe4], 0
lea ecx, [ebp - 0x58]
push dword [ebp - 0xe4]
push 2
call fcn.0041ea00
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp eax, dword [esi + 0xc]
jl 0x40fa60
lea ecx, [ebp - 0x70]
call fcn.00407a4a
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 5
call fcn.00407a4a
mov byte [ebp - 4], 6
call fcn.005c8926
lea eax, [ebp - 0x28]
push 0xb
push eax
call fcn.005c8a22
add esp, 8
lea eax, [ebp - 0x28]
lea ecx, [ebp - 0x70]
push eax
call fcn.00414ef0
sub esp, 8
lea ecx, [ebp - 0x278]
call fcn.00415be0
mov byte [ebp - 4], 7
cmp dword [esi + 0x10], 0
jne 0x40fb3c
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push 0
lea ecx, [ebp - 0x268]
mov dword [esi + 0x10], eax
call fcn.004101b0
jmp 0x40fb6c
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [esi + 0x10]
lea ecx, [ebp - 0x268]
movd xmm0, eax
cvtdq2pd xmm1, xmm0
shr eax, 0x1f
addsd xmm1, qword [eax*8 + 0x644390]
divsd xmm1, qword [0x644330]
call fcn.0041e250
lea eax, [ebp - 0xa0]
push eax
lea ecx, [ebp - 0x260]
call fcn.00416830
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x2c]
cmp eax, 8
jb 0x40fbd5
mov ecx, dword [ebp - 0x40]
inc eax
cmp eax, 0x7fffffff
ja 0x40fcbe
add eax, eax
cmp eax, 0x1000
jb 0x40fbcc
test cl, 0x1f
jne 0x40fcbe
mov eax, dword [ecx - 4]
cmp eax, ecx
jae 0x40fcbe
sub ecx, eax
cmp ecx, 4
jb 0x40fcbe
cmp ecx, 0x23
ja 0x40fcbe
mov ecx, eax
push ecx
call fcn.00476ee1
add esp, 4
movups xmm0, xmmword [ebp - 0xa0]
xor eax, eax
mov dword [ebp - 0x30], 0
mov word [ebp - 0x40], ax
lea ecx, [ebp - 0xa0]
movups xmmword [ebp - 0x40], xmm0
mov dword [ebp - 0x2c], 7
movq xmm0, qword [ebp - 0x90]
movq qword [ebp - 0x30], xmm0
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x8c], 7
mov word [ebp - 0xa0], ax
mov byte [ebp - 4], 7
call fcn.004075ab
lea ecx, [ebp - 0x278]
mov byte [ebp - 4], 6
call fcn.00415840
cmp dword [ebp - 0x44], 8
lea eax, [ebp - 0x58]
push 0x2040
cmovae eax, dword [ebp - 0x58]
mov dword [ebp - 0xe4], eax
lea eax, [ebp - 0xec]
push eax
call fcn.005be8d1
mov ecx, dword [ebp - 0x1b8]
lea edx, [ebp - 0x1b8]
push dword [eax + 4]
mov ecx, dword [ecx + 4]
mov eax, dword [eax]
add ecx, edx
push ecx
call eax
mov eax, dword [ebp - 0x60]
mov byte [ebp - 4], 9
lea edx, [ebp - 0x70]
cmp dword [ebp - 0x5c], 8
lea ecx, [ebp - 0x1b8]
push eax
cmovae edx, dword [ebp - 0x70]
mov byte [ebp - 4], 6
call fcn.004137f0
mov esi, eax
lea eax, [ebp - 0xdc]
push 0x10
push eax
call fcn.005be8d1
add esp, 0x1c
mov edx, 0x63e114
mov ecx, esi
mov edi, eax
call fcn.00413320
mov esi, eax
test esi, esi
jne 0x40fcc3
xor ecx, ecx
jmp 0x40fcca
call fcn.005c3f14
mov eax, dword [esi]
mov ecx, dword [eax + 4]
add ecx, esi
push dword [edi + 4]
mov eax, dword [edi]
push ecx
call eax
push 0
lea eax, [ebp - 0x108]
push 6
push eax
call fcn.005be8ff
mov edx, eax
mov ecx, esi
call fcn.0041e9d0
mov esi, eax
mov eax, 0x30
push 0
push 3
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
mov word [ecx + esi + 0x40], ax
lea eax, [ebp - 0x118]
push eax
call fcn.005be8e5
mov edx, eax
mov ecx, esi
call fcn.0041e9d0
mov ecx, dword [ebp - 0x30]
mov byte [ebp - 4], 0xa
lea edx, [ebp - 0x40]
cmp dword [ebp - 0x2c], 8
push ecx
cmovae edx, dword [ebp - 0x40]
mov ecx, eax
mov byte [ebp - 4], 6
call fcn.004137f0
push 0
mov edi, eax
lea eax, [ebp - 0x98]
push 5
push eax
call fcn.005be8ff
mov edx, 0x63e114
mov ecx, edi
mov esi, eax
call fcn.00413320
mov edx, esi
mov ecx, eax
call fcn.0041e9d0
mov esi, eax
mov eax, 0x20
push 0x40
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
mov word [ecx + esi + 0x40], ax
lea eax, [ebp - 0xf8]
push eax
call fcn.005be8d1
mov ecx, dword [esi]
push dword [eax + 4]
mov ecx, dword [ecx + 4]
mov eax, dword [eax]
add ecx, esi
push ecx
call eax
mov eax, dword [ebp - 0x78]
add esp, 0x40
mov byte [ebp - 4], 0xb
lea edx, [ebp - 0x88]
cmp dword [ebp - 0x74], 8
mov ecx, esi
push eax
cmovae edx, dword [ebp - 0x88]
mov byte [ebp - 4], 6
call fcn.004137f0
add esp, 4
mov edx, 0x63e504
mov ecx, eax
call fcn.00413320
mov edx, dword [ebp - 0xe4]
mov ecx, eax
call fcn.00413320
mov eax, dword fs:[0x2c]
mov ecx, dword [eax]
mov eax, dword [0x6835d0]
cmp eax, dword [ecx + 4]
jle 0x40fe19
push 0x6835d0
call fcn.005bcd79
add esp, 4
cmp dword [0x6835d0], 0xffffffff
jne 0x40fe19
mov ecx, 0x6835d4
call fcn.00407a4a
push 0x5ff870
call fcn.005bc9d9
push 0x6835d0
call fcn.005bcd3a
add esp, 8
lea eax, [ebp - 0xb8]
push eax
lea ecx, [ebp - 0x1b0]
call fcn.00416830
mov byte [ebp - 4], 0xc
mov eax, dword [0x6835e8]
cmp eax, 8
jb 0x40fe87
mov ecx, dword [0x6835d4]
inc eax
cmp eax, 0x7fffffff
ja 0x40fcbe
add eax, eax
cmp eax, 0x1000
jb 0x40fe7e
test cl, 0x1f
jne 0x40fcbe
mov eax, dword [ecx - 4]
cmp eax, ecx
jae 0x40fcbe
sub ecx, eax
cmp ecx, 4
jb 0x40fcbe
cmp ecx, 0x23
ja 0x40fcbe
mov ecx, eax
push ecx
call fcn.00476ee1
add esp, 4
movups xmm0, xmmword [ebp - 0xb8]
xor eax, eax
lea ecx, [ebp - 0xb8]
mov word [ebp - 0xb8], ax
movups xmmword [0x6835d4], xmm0
movq xmm0, qword [ebp - 0xa8]
movq qword [0x6835e4], xmm0
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xa4], 7
mov byte [ebp - 4], 6
call fcn.004075ab
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 5
call fcn.004075ab
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 4
call fcn.004075ab
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 3
call fcn.004075ab
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 2
call fcn.004075ab
lea ecx, [ebp - 0x1c8]
mov byte [ebp - 4], 1
call fcn.00415840
call fcn.0041db40
mov ecx, dword [0x6835e4]
mov byte [ebp - 4], 0xd
mov edx, 0x6835d4
cmp dword [0x6835e8], 8
push ecx
cmovae edx, dword [0x6835d4]
mov ecx, eax
mov byte [ebp - 4], 1
call fcn.004137f0
mov edx, str.config
mov ecx, eax
call fcn.00411d70
mov edi, dword [ebp - 0xf0]
mov esi, eax
mov ecx, esi
mov edx, dword [edi]
call fcn.00413320
push esi
call fcn.00414850
mov esi, dword [ebp - 0xe0]
add esp, 8
mov eax, dword [edi]
cmp dword [eax - 0xc], 0
je 0x41017f
call fcn.0040cc25
mov ecx, eax
test ecx, ecx
jne 0x40ff8e
push 0x80004005
call fcn.004022e2
mov eax, dword [ecx]
mov edx, dword [eax + 0xc]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x40ffa3
lock inc dword [ecx + 0x14]
lea eax, [ecx + 8]
jmp 0x40ffa5
call edx
add eax, 0x10
mov dword [ebp - 0xd8], eax
lea eax, [ebp - 0xd8]
mov byte [ebp - 4], 0xe
push eax
push str.__ReferrerID_
mov edx, str._ReferrerID_
mov ecx, edi
call fcn.0040e180
add esp, 8
test al, al
je 0x40ffe0
lea eax, [ebp - 0xd8]
push eax
lea ecx, [esi + 0x10]
call fcn.00410610
lea eax, [ebp - 0xd8]
mov edx, str._DetectionIDs_
push eax
push str.__DetectionIDs_
mov ecx, edi
call fcn.0040e180
add esp, 8
test al, al
je 0x410056
push dword [ebp - 0xd8]
lea ecx, [ebp - 0x70]
call fcn.004075e1
mov esi, eax
mov ecx, dword [ebp - 0xe0]
mov byte [ebp - 4], 0xf
push dword [ecx + 0x10]
lea ecx, [ebp - 0x88]
call fcn.004075e1
push esi
mov esi, dword [ebp - 0xe0]
push eax
mov byte [ebp - 4], 0x10
lea ecx, [esi + 0x28]
call fcn.00418510
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0xf
call fcn.004075ab
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0xe
call fcn.004075ab
lea eax, [ebp - 0xd8]
mov edx, str._ApplicationID_
push eax
push str.__ApplicationID_
mov ecx, edi
call fcn.0040e180
add esp, 8
test al, al
je 0x410089
lea eax, [ebp - 0xd8]
push eax
push 0x116ff
lea ecx, [esi + 0x60]
call fcn.0041ae50
call fcn.0040cc25
mov ecx, eax
test ecx, ecx
jne 0x41009e
push 0x80004005
call fcn.004022e2
mov eax, dword [ecx]
mov edx, dword [eax + 0xc]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x4100b3
lock inc dword [ecx + 0x14]
lea eax, [ecx + 8]
jmp 0x4100b5
call edx
add eax, 0x10
mov dword [ebp - 0xe8], eax
lea eax, [ebp - 0xe8]
mov byte [ebp - 4], 0x11
push eax
push str.__SystemInfo_
mov edx, str._SystemInfo_
mov ecx, edi
call fcn.0040e180
mov esi, dword [ebp - 0xe8]
add esp, 8
test al, al
je 0x4100f6
mov ecx, dword [ebp - 0xe0]
push esi
add ecx, 0x60
call fcn.0041b4b0
or edi, 0xffffffff
mov byte [ebp - 4], 0xe
add esi, 0xfffffff0
mov eax, edi
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x410139
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
mov edx, dword [eax + 4]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x410137
mov ecx, dword [ecx + 4]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
cmp eax, vtable.ATL::CWin32Heap.0
jne 0x410137
push 0
push dword [ecx + 4]
call dword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x410139
call edx
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0xd8]
add ecx, 0xfffffff0
lock xadd dword [ecx + 0xc], edi
dec edi
test edi, edi
jg 0x41017f
mov edx, dword [ecx]
push ecx
mov eax, dword [edx]
mov esi, dword [eax + 4]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x41017b
mov edx, dword [edx + 4]
mov eax, dword [edx]
mov esi, dword [eax + 4]
cmp eax, vtable.ATL::CWin32Heap.0
jne 0x41017b
push 0
push dword [edx + 4]
call dword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x41017f
mov ecx, edx
call esi
lea ecx, [ebp - 0xd4]
mov dword [ebp - 4], 0xffffffff
call fcn.00414900
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005bc745
mov esp, ebp
pop ebp
ret 4