Function at 0x46272b
Capabilities:
Check for time delay via gettickcount
Reference http user-agent string

Disassembly:
mov eax, 0x54745e
call fcn.0054565c
sub esp, 0x40
push ebx
push esi
push edi
mov dword [ebp - 4], 2
call dword [sym.imp.KERNEL32.dll_GetTickCount]
cmp eax, 0x43
ja 0x462950
push eax
push 0xfffffffffffffff7
xchg bl, ch
push eax
xchg ebx, eax
jmp 0xef9b6d96
push ecx
mov ecx, dword [ebp + 0x10]
xor ebx, ebx
lea ecx, [ecx - 0x10]
mov edi, ebx
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x30], ebx
mov esi, esp
call fcn.00402beb
add eax, 0x10
lea ecx, [ebp - 0x4c]
mov dword [esi], eax
call fcn.0049e56d
pop ecx
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x28], eax
cmp byte [ebp + 0x14], bl
jne 0x462a5c
push 0x5582fc
lea edx, [ebp + 8]
lea ecx, [ebp - 0x1c]
call fcn.00401d86
pop ecx
lea ecx, [ebp + 0xc]
push ecx
mov edx, eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 4
call fcn.00401d27
mov byte [ebp - 4], 5
mov edx, eax
lea ecx, [ebp - 0x24]
mov dword [esp], str.__post____
call fcn.00401d86
pop ecx
lea ecx, [ebp + 0x10]
push ecx
mov edx, eax
lea ecx, [ebp + 0x14]
mov byte [ebp - 4], 6
call fcn.00401d27
pop ecx
mov ecx, dword [ebp - 0x24]
lea ecx, [ecx - 0x10]
call fcn.004013c0
mov ecx, dword [ebp - 0x20]
lea ecx, [ecx - 0x10]
call fcn.004013c0
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x1c]
lea ecx, [ecx - 0x10]
call fcn.004013c0
mov eax, dword [ebp + 0x14]
cmp dword [eax - 4], 1
jle 0x462a11
push dword [eax - 0xc]
lea ecx, [ebp + 0x14]
call fcn.0040266b
mov eax, dword [ebp + 0x14]
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x2c], esp
push eax
call fcn.004018f6
sub esp, 0x18
mov byte [ebp - 4], 0xb
mov ecx, esp
mov dword [ebp - 0x34], esp
push str.SendEventAPICALL:
call fcn.004018f6
mov byte [ebp - 4], 0xc
call fcn.0043f300
lea ecx, [eax + 0x7c]
mov byte [ebp - 4], 0xa
call fcn.0044739a
mov byte [ebp - 4], 3
mov ecx, dword [ebp + 0x14]
add esp, 0x30
lea ecx, [ecx - 0x10]
call fcn.004013c0
mov eax, dword [ebp + 0x10]
mov esi, ebx
cmp dword [eax - 0xc], esi
mov edx, str.POST
mov ecx, 0x5582b0
cmovne ecx, edx
push ecx
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x20], ebx
call fcn.00401a3b
mov byte [ebp - 4], 0xd
mov eax, dword [ebp + 0x10]
cmp dword [eax - 0xc], 0
setne byte [ebp + 0x17]
call fcn.004ae8cf
cmp dword [eax + 0x1f0], 0
je 0x462e8a
call fcn.004ae8cf
cmp dword [eax + 0x1f4], 0
je 0x462e8a
call fcn.004ae8cf
cmp dword [eax + 0x1f8], 0
je 0x462e8a
call fcn.004ae8cf
cmp dword [eax + 0x1fc], 0
je 0x462e8a
call fcn.004ae8cf
cmp dword [eax + 0x200], 0
je 0x462e8a
call fcn.004ae8cf
cmp dword [eax + 0x204], 0
je 0x462e8a
call fcn.004ae8cf
cmp dword [eax + 0x208], 0
je 0x462e8a
call fcn.004ae8cf
cmp dword [eax + 0x20c], 0
je 0x462e8a
call fcn.004ae8cf
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push str.LogEvents
call dword [eax + 0x1f0]
mov esi, eax
mov dword [ebp - 0x1c], esi
test esi, esi
jne 0x462b48
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
jmp 0x462e8f
mov esi, dword [ebp + 8]
call fcn.004ae8cf
push 0
push 0x50
push esi
mov esi, dword [ebp - 0x1c]
push esi
call dword [eax + 0x1f4]
mov dword [ebp - 0x20], eax
test eax, eax
je 0x462b3b
mov ebx, dword [ebp + 0xc]
cmp dword [ebx - 4], 1
jle 0x462b7d
push dword [ebx - 0xc]
lea ecx, [ebp + 0xc]
call fcn.0040266b
mov ebx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x24], eax
cmp dword [eax - 4], 1
jle 0x462b9a
push dword [eax - 0xc]
lea ecx, [ebp - 0x18]
call fcn.0040266b
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x24], eax
call fcn.004ae8cf
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push ebx
push dword [ebp - 0x24]
push dword [ebp - 0x20]
call dword [eax + 0x1f8]
mov ebx, eax
test ebx, ebx
je 0x462b3b
cmp byte [ebp + 0x17], 0
je 0x462de8
push 0x553e58
lea ecx, [ebp + 0x14]
call fcn.00401a83
push ecx
mov byte [ebp - 4], 0xe
mov ecx, esp
mov dword [ebp - 0x34], esp
push str.Mozilla_5.0__compatible__MSIE_10.0__Windows_NT_6.2__WOW64__Trident_6.0_
call fcn.00401a83
push ecx
mov ecx, esp
push str.User_Agent
mov byte [ebp - 4], 0xf
call fcn.00401a83
lea ecx, [ebp + 0x14]
mov byte [ebp - 4], 0xe
call fcn.00461ab9
pop ecx
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
mov dword [ebp - 0x34], esp
mov esi, esp
call fcn.00402beb
add eax, 0x10
mov dword [esi], eax
push ecx
mov ecx, esp
push str.Host
mov byte [ebp - 4], 0x10
call fcn.00401a83
lea ecx, [ebp + 0x14]
mov byte [ebp - 4], 0xe
call fcn.00461ab9
pop ecx
mov ecx, esp
mov dword [ebp - 0x34], esp
mov esi, str.no_cache
push esi
call fcn.00401a83
push ecx
mov ecx, esp
push str.Cache_Control
mov byte [ebp - 4], 0x11
call fcn.00401a83
lea ecx, [ebp + 0x14]
mov byte [ebp - 4], 0xe
call fcn.00461ab9
pop ecx
mov ecx, esp
mov dword [ebp - 0x34], esp
push str.close
call fcn.00401a83
push ecx
mov ecx, esp
push str.Connection
mov byte [ebp - 4], 0x12
call fcn.00401a83
lea ecx, [ebp + 0x14]
mov byte [ebp - 4], 0xe
call fcn.00461ab9
pop ecx
mov ecx, esp
mov dword [ebp - 0x34], esp
push str.application_json__text_javascript_____q0.01
call fcn.00401a83
push ecx
mov ecx, esp
push str.Accept
mov byte [ebp - 4], 0x13
call fcn.00401a83
lea ecx, [ebp + 0x14]
mov byte [ebp - 4], 0xe
call fcn.00461ab9
pop ecx
mov ecx, esp
mov dword [ebp - 0x34], esp
push str.application_json__charsetutf_8
call fcn.00401a83
push ecx
mov ecx, esp
push str.Content_Type
mov byte [ebp - 4], 0x14
call fcn.00401a83
lea ecx, [ebp + 0x14]
mov byte [ebp - 4], 0xe
call fcn.00461ab9
pop ecx
mov ecx, esp
mov dword [ebp - 0x34], esp
push str.en_US
call fcn.00401a83
push ecx
mov ecx, esp
push str.Accept_Language
mov byte [ebp - 4], 0x15
call fcn.00401a83
lea ecx, [ebp + 0x14]
mov byte [ebp - 4], 0xe
call fcn.00461ab9
pop ecx
mov ecx, esp
mov dword [ebp - 0x34], esp
push str.gzip__deflate
call fcn.00401a83
push ecx
mov ecx, esp
push str.Accept_Encoding
mov byte [ebp - 4], 0x16
call fcn.00401a83
lea ecx, [ebp + 0x14]
mov byte [ebp - 4], 0xe
call fcn.00461ab9
pop ecx
mov ecx, esp
mov dword [ebp - 0x34], esp
push esi
call fcn.00401a83
push ecx
mov ecx, esp
push str.Pragma
mov byte [ebp - 4], 0x17
call fcn.00401a83
lea ecx, [ebp + 0x14]
mov byte [ebp - 4], 0xe
call fcn.00461ab9
cmp dword [ebp - 0x38], 0x10
mov esi, dword [ebp + 0x14]
lea eax, [ebp - 0x4c]
cmovae eax, dword [ebp - 0x4c]
cmp dword [esi - 4], 1
mov dword [ebp - 0x24], eax
mov eax, dword [esi - 0xc]
pop ecx
pop ecx
mov dword [ebp - 0x2c], eax
jle 0x462d96
push eax
lea ecx, [ebp + 0x14]
call fcn.0040266b
mov esi, dword [ebp + 0x14]
call fcn.004ae8cf
mov ecx, dword [ebp - 0x28]
push 0
push ecx
push ecx
push dword [ebp - 0x24]
push dword [ebp - 0x2c]
push esi
push ebx
call dword [eax + 0x1fc]
cmp eax, 1
je 0x462dd4
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp + 0x14]
mov edi, eax
lea ecx, [ecx - 0x10]
call fcn.004013c0
mov esi, dword [ebp - 0x1c]
jmp 0x462e8f
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp + 0x14]
lea ecx, [ecx - 0x10]
call fcn.004013c0
mov esi, dword [ebp - 0x1c]
jmp 0x462e05
call fcn.004ae8cf
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ebx
call dword [eax + 0x1fc]
cmp eax, 1
jne 0x462b3b
call fcn.004ae8cf
push 0
push ebx
call dword [eax + 0x200]
test eax, eax
je 0x462e8f
and dword [ebp - 0x14], 0
call fcn.004ae8cf
lea ecx, [ebp - 0x14]
push ecx
push ebx
call dword [eax + 0x204]
test eax, eax
je 0x462b3b
mov eax, dword [ebp - 0x14]
inc eax
push eax
call fcn.00417f6a
pop ecx
mov dword [ebp + 0x14], eax
test eax, eax
je 0x462e84
mov ecx, dword [ebp - 0x14]
inc ecx
push ecx
push 0
push eax
call fcn.0041b930
add esp, 0xc
call fcn.004ae8cf
lea ecx, [ebp - 0x30]
push ecx
push dword [ebp - 0x14]
push dword [ebp + 0x14]
push ebx
call dword [eax + 0x208]
test eax, eax
je 0x462b3b
push dword [ebp + 0x14]
call fcn.0041b9c0
cmp dword [ebp - 0x14], 0
pop ecx
ja 0x462e17
jmp 0x462e8f
and dword [ebp - 0x14], 0
jmp 0x462e8f
mov edi, 0x21a
call fcn.004ae8cf
cmp dword [eax + 0x20c], 0
je 0x462ed0
test ebx, ebx
je 0x462ead
call fcn.004ae8cf
push ebx
call dword [eax + 0x20c]
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x462ec0
call fcn.004ae8cf
push ebx
call dword [eax + 0x20c]
test esi, esi
je 0x462ed0
call fcn.004ae8cf
push esi
call dword [eax + 0x20c]
mov ecx, dword [ebp - 0x18]
lea ecx, [ecx - 0x10]
call fcn.004013c0
lea ecx, [ebp - 0x4c]
call fcn.0040187f
mov ecx, dword [ebp + 8]
lea ecx, [ecx - 0x10]
call fcn.004013c0
mov ecx, dword [ebp + 0xc]
lea ecx, [ecx - 0x10]
call fcn.004013c0
mov ecx, dword [ebp + 0x10]
lea ecx, [ecx - 0x10]
call fcn.004013c0
mov ecx, dword [ebp - 0xc]
mov eax, edi
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret 0x10