Function at 0x417630
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x43e2e0
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0xa80
mov eax, dword [0x47b014]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
cmp dword [0x481a14], 0
mov edi, dword [ebx + 8]
mov dword [ebp - 0xa74], edi
jne 0x41768d
mov eax, 0xfffffffd
jmp 0x4179b1
lea eax, [edi + 0x3c]
xorps xmm0, xmm0
movups xmmword [eax], xmm0
mov dword [ebp - 0xa80], eax
movups xmmword [eax + 0x10], xmm0
mov dword [eax + 0x20], 0
lea eax, [ebp - 0xa54]
push eax
movups xmmword [ebp - 0xa54], xmm0
call fcn.00417540
mov esi, eax
test esi, esi
jne 0x41799c
push dword [edi + 0x38]
lea eax, [ebp - 0x58]
push str.DIRECT_SCANMATIK__05X
push 0x20
push eax
call fcn.004019b0
add esp, 0x10
mov dword [ebp - 0xa70], esi
lea eax, [ebp - 0x58]
mov dword [ebp - 0xa68], esi
mov dword [ebp - 0xa6c], eax
lea eax, [ebp - 0xa70]
mov dword [ebp - 0xa64], esi
push esi
push eax
lea eax, [ebp - 0xa54]
mov dword [ebp - 0xa60], 3
push eax
mov eax, dword [0x481a14]
mov dword [ebp - 0xa5c], esi
push dword [eax + 0x44]
mov eax, dword [eax + 0x28]
call eax
mov esi, eax
cmp esi, 0x57
jne 0x4177e1
mov ecx, 0x11f
lea edi, [ebp - 0x4d8]
mov esi, str.__xml_version_1.0____WLANProfile_xmlns_http:__www.microsoft.com_networking_WLAN_profile_v1___name__s__name__SSIDConfig__SSID__name__ls__name___SSID___SSIDConfig__connectionType_ESS__connectionType__connectionMode_manual__connectionMode__autoSwitch_false__autoSwitch__MSM__security__authEncryption__authentication_WPA2PSK__authentication__encryption_AES__encryption__useOneX_false__useOneX___authEncryption__sharedKey__keyType_passPhrase__keyType__protected_false__protected__keyMaterial__.hs__keyMaterial___sharedKey__keyIndex_0__keyIndex___security___MSM___WLANProfile_
rep movsd dword es:[edi], dword [esi]
mov edi, dword [ebp - 0xa74]
lea eax, [edi + 0x10]
push eax
push dword [edi + 0x30]
lea eax, [ebp - 0x58]
push eax
push eax
lea eax, [ebp - 0x4d8]
push eax
lea eax, [ebp - 0xa38]
push 0x2ae
push eax
call fcn.004019b0
add esp, 0x1c
lea eax, [ebp - 0x58]
push 0
push eax
lea eax, [ebp - 0xa54]
push eax
mov eax, dword [0x481a14]
push dword [eax + 0x44]
mov eax, dword [eax + 0x3c]
call eax
lea eax, [ebp - 0xa58]
mov dword [ebp - 0xa58], 0
push eax
push 0
push 1
push 0
lea eax, [ebp - 0xa38]
push eax
push 0
lea eax, [ebp - 0xa54]
push eax
mov eax, dword [0x481a14]
push dword [eax + 0x44]
mov eax, dword [eax + 0x38]
call eax
mov esi, eax
test esi, esi
jne 0x417986
push eax
lea eax, [ebp - 0xa70]
push eax
lea eax, [ebp - 0xa54]
push eax
mov eax, dword [0x481a14]
push dword [eax + 0x44]
mov eax, dword [eax + 0x28]
call eax
mov esi, eax
test esi, esi
jne 0x417986
push 0x4e20
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0xa54]
push eax
call fcn.00417460
mov esi, eax
test esi, esi
jne 0x417986
lea eax, [edi + 0x50]
mov dword [ebp - 0xa7c], eax
mov eax, dword [0x481a14]
test eax, eax
jne 0x417824
mov esi, 0x139f
jmp 0x41798b
xorps xmm0, xmm0
mov dword [ebp - 0xa3c], 0
lea ecx, [ebp - 0xa44]
movq qword [ebp - 0xa44], xmm0
call fcn.00418050
mov dword [ebp - 4], 0
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call edi
xorps xmm0, xmm0
mov dword [ebp - 0xa78], eax
movq qword [ebp - 0xa8c], xmm0
mov dword [ebp - 0xa84], 0
nop
lea eax, [ebp - 0xa8c]
push eax
push ecx
lea eax, [ebp - 0xa54]
push eax
lea ecx, [ebp - 0xa44]
call fcn.004183a0
mov esi, eax
test esi, esi
jne 0x4178a8
mov eax, dword [ebp - 0xa84]
test eax, eax
je 0x4178b6
mov ecx, dword [ebp - 0xa7c]
test ecx, ecx
je 0x4178ef
mov dword [ecx], eax
jmp 0x4178ef
xor esi, esi
cmp eax, 0x490
cmovne esi, eax
test esi, esi
jne 0x4178ef
call edi
sub eax, dword [ebp - 0xa78]
cmp eax, 0x4e20
ja 0x4178ea
push 0
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0xa54]
push eax
call fcn.00417460
mov esi, eax
test esi, esi
jne 0x4178ef
push 0x14d
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x417870
mov esi, 0x5b4
mov dword [ebp - 4], 0xffffffff
mov edi, dword [ebp - 0xa3c]
test edi, edi
je 0x417916
mov eax, dword [edi]
test eax, eax
je 0x41790d
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
push edi
call fcn.00430bb8
add esp, 4
test esi, esi
jne 0x417986
xorps xmm0, xmm0
mov dword [ebp - 0xa3c], esi
lea ecx, [ebp - 0xa44]
movq qword [ebp - 0xa44], xmm0
call fcn.00418050
mov eax, dword [ebp - 0xa74]
movups xmm0, xmmword [ebp - 0xa54]
push dword [ebp - 0xa80]
movups xmmword [eax + 0x40], xmm0
push ecx
lea eax, [ebp - 0xa54]
push eax
lea ecx, [ebp - 0xa44]
call fcn.004181d0
mov edi, dword [ebp - 0xa3c]
mov esi, eax
test edi, edi
je 0x417982
mov eax, dword [edi]
test eax, eax
je 0x417979
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
push edi
call fcn.00430bb8
add esp, 4
test esi, esi
je 0x41799c
mov eax, dword [0x481a14]
push 0
lea ecx, [ebp - 0xa54]
push ecx
push dword [eax + 0x44]
mov eax, dword [eax + 0x2c]
call eax
xor eax, eax
cmp esi, 5
je 0x4179ac
test esi, esi
je 0x4179b1
or eax, 0xffffffff
jmp 0x4179b1
mov eax, 0xfffffffa
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00422009
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 4