Function at 0x48f810
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4e287e
mov eax, dword fs:[0]
push eax
sub esp, 0xc0
mov eax, dword [0x5256a8]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0xc8], ecx
mov dword [ebp - 0xcc], eax
mov eax, dword [ebp + 0xc]
lea ecx, [ebp - 0xb8]
xor ebx, ebx
push ecx
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xc0], eax
mov byte [ebp - 0xb9], bl
call fcn.00407720
mov ecx, eax
call fcn.0040fcb0
lea edx, [ebp - 0xb8]
push edx
lea ecx, [ebp - 0x9c]
mov dword [ebp - 4], ebx
call fcn.00411b20
mov esi, dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
push 0x528aa8
mov byte [ebp - 4], 1
call esi
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
call edi
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
mov eax, dword [ebp - 0xc4]
push str.ko._x._x._x
push 0xf0
push eax
call fcn.004b9008
add esp, 0x18
cmp eax, 0xffffffff
je 0x48fc1a
push 0x528aa8
call esi
push eax
call edi
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, dword [ebp - 0xc0]
push eax
push str.ko._x._x._x
push 0xf0
push ecx
call fcn.004b9008
add esp, 0x18
cmp eax, 0xffffffff
je 0x48fc1a
mov edi, 0xf
mov eax, str.compute_only_broker
mov dword [ebp - 0x48], edi
mov dword [ebp - 0x4c], ebx
mov byte [ebp - 0x5c], bl
lea edx, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x48f920
sub eax, edx
push eax
push str.compute_only_broker
lea ecx, [ebp - 0x5c]
call fcn.00407740
mov eax, str.type
mov byte [ebp - 4], 2
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x30], ebx
mov byte [ebp - 0x40], bl
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x48f950
sub eax, edx
push eax
push str.type
lea ecx, [ebp - 0x40]
call fcn.00407740
lea edx, [ebp - 0x5c]
push edx
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 3
call fcn.00411c20
mov esi, 0x10
cmp dword [ebp - 0x2c], esi
jb 0x48f994
mov ecx, dword [ebp - 0x40]
push ecx
call fcn.00406cf9
add esp, 4
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x30], ebx
mov byte [ebp - 0x40], bl
mov byte [ebp - 4], 1
cmp dword [ebp - 0x48], esi
jb 0x48f9b2
mov edx, dword [ebp - 0x5c]
push edx
call fcn.00406cf9
add esp, 4
mov esi, dword [ebp - 0xc4]
xor eax, eax
mov word [ebp - 0x5c], ax
mov eax, esi
mov dword [ebp - 0x48], 7
mov dword [ebp - 0x4c], ebx
lea edx, [eax + 2]
lea ecx, [ecx]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x48f9d0
sub eax, edx
sar eax, 1
push eax
push esi
lea ecx, [ebp - 0x5c]
call fcn.00406030
mov eax, str.ipc_co_channel
mov byte [ebp - 4], 4
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x30], ebx
mov byte [ebp - 0x40], bl
lea edx, [eax + 1]
mov edi, edi
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x48fa00
sub eax, edx
push eax
push str.ipc_co_channel
lea ecx, [ebp - 0x40]
call fcn.00407740
lea ecx, [ebp - 0x5c]
push ecx
lea edx, [ebp - 0x40]
push edx
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 5
call fcn.0040b910
cmp dword [ebp - 0x2c], 0x10
jb 0x48fa40
mov eax, dword [ebp - 0x40]
push eax
call fcn.00406cf9
add esp, 4
cmp dword [ebp - 0x48], 8
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x30], ebx
mov byte [ebp - 0x40], bl
mov byte [ebp - 4], 1
jb 0x48fa5f
mov ecx, dword [ebp - 0x5c]
push ecx
call fcn.00406cf9
add esp, 4
mov esi, dword [ebp - 0xc0]
xor edx, edx
mov eax, esi
mov word [ebp - 0x5c], dx
mov dword [ebp - 0x48], 7
mov dword [ebp - 0x4c], ebx
lea edx, [eax + 2]
lea ebx, [ebx]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x48fa80
sub eax, edx
sar eax, 1
push eax
push esi
lea ecx, [ebp - 0x5c]
call fcn.00406030
mov eax, str.ipc_rdr_channel
mov byte [ebp - 4], 6
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x30], ebx
mov byte [ebp - 0x40], bl
lea edx, [eax + 1]
mov edi, edi
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x48fab0
sub eax, edx
push eax
push str.ipc_rdr_channel
lea ecx, [ebp - 0x40]
call fcn.00407740
lea eax, [ebp - 0x5c]
push eax
lea ecx, [ebp - 0x40]
push ecx
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 7
call fcn.0040b910
mov esi, 0x10
cmp dword [ebp - 0x2c], esi
jb 0x48faf4
mov edx, dword [ebp - 0x40]
push edx
call fcn.00406cf9
add esp, 4
cmp dword [ebp - 0x48], 8
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x30], ebx
mov byte [ebp - 0x40], bl
mov byte [ebp - 4], 1
jb 0x48fb13
mov eax, dword [ebp - 0x5c]
push eax
call fcn.00406cf9
add esp, 4
mov edx, dword [ebp - 0xcc]
mov eax, dword [edx]
push 0xa
push 0xa
lea ecx, [ebp - 0x24]
push ecx
push eax
call fcn.004b9e66
add esp, 0x10
cmp eax, ebx
jne 0x48fc1a
xor ecx, ecx
lea eax, [ebp - 0x24]
mov dword [ebp - 0x48], 7
mov dword [ebp - 0x4c], ebx
mov word [ebp - 0x5c], cx
lea edx, [eax + 2]
lea ebx, [ebx]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x48fb50
sub eax, edx
sar eax, 1
push eax
lea edx, [ebp - 0x24]
push edx
lea ecx, [ebp - 0x5c]
call fcn.00406030
push 4
push str.proc
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 8
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x30], ebx
mov byte [ebp - 0x40], bl
call fcn.00407740
lea eax, [ebp - 0x5c]
push eax
lea ecx, [ebp - 0x40]
push ecx
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 9
call fcn.0040b910
cmp dword [ebp - 0x2c], esi
jb 0x48fbb0
mov edx, dword [ebp - 0x40]
push edx
call fcn.00406cf9
add esp, 4
mov esi, 8
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x30], ebx
mov byte [ebp - 0x40], bl
mov byte [ebp - 4], 1
cmp dword [ebp - 0x48], esi
jb 0x48fbd3
mov eax, dword [ebp - 0x5c]
push eax
call fcn.00406cf9
add esp, 4
lea ecx, [ebp - 0x5c]
push ecx
lea ecx, [ebp - 0x9c]
mov byte [ebp - 0xb9], 1
call fcn.0040e820
mov ecx, dword [ebp - 0xc8]
push eax
mov byte [ebp - 4], 0xa
call fcn.00405fb0
cmp dword [ebp - 0x48], esi
jb 0x48fc0a
mov edx, dword [ebp - 0x5c]
push edx
call fcn.00406cf9
add esp, 4
xor eax, eax
mov dword [ebp - 0x48], 7
mov dword [ebp - 0x4c], ebx
mov word [ebp - 0x5c], ax
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], bl
call fcn.0042f340
lea ecx, [ebp - 0xb8]
mov dword [ebp - 4], 0xffffffff
call fcn.00406f40
mov al, byte [ebp - 0xb9]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00401306
mov esp, ebp
pop ebp
ret