Function at 0x473c71
Capabilities:
Check for time delay via queryperformancecounter

Disassembly:
push ebp
mov eax, 0x197c
lea ebp, [esp - 0x70]
call fcn.004ade80
push ebx
push esi
lea eax, [ebp + 0x78]
push edi
push eax
mov dword [ebp + 0x2c], ecx
call fcn.0043e611
lea ecx, [ebp + 0x40]
mov dword [esp], str.CurDate
call fcn.0044e66d
lea eax, [ebp + 0x78]
push eax
call fcn.0043e611
mov esi, dword [ebp + 0x78]
xor eax, eax
pop ecx
xor ecx, ecx
mov word [ebp + 0x54], cx
lea edi, [ebp + 0x56]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [ebp - 0x190c]
mov dword [ebp + 0x68], eax
xor eax, eax
mov dword [ebp + 0x4c], ecx
lea edi, [ebp + 0x50]
stosd dword es:[edi], eax
mov dword [ebp + 0x38], ecx
lea edi, [ebp + 0x3c]
mov word [ebp - 0x190c], cx
stosd dword es:[edi], eax
mov byte [ebp + 0x66], al
mov byte [ebp + 0x6f], al
mov byte [ebp + 0x67], al
mov ax, word [esi]
xor bl, bl
cmp ax, 0x2d
mov dword [ebp + 0x28], ecx
mov cl, 0x2a
jne 0x473cf6
mov cl, al
mov edi, dword [sym.imp.KERNEL32.DLL_GetSystemTimeAsFileTime]
movsx ecx, cl
movzx eax, ax
cmp ecx, eax
mov dword [ebp + 0x34], ecx
jne 0x473d6d
push 2
lea eax, [ebp + 0x78]
push eax
push 0x4cb8dc
call fcn.00446e5a
add esp, 0xc
test al, al
je 0x473d24
mov bl, 1
jmp 0x473d4d
push 2
lea eax, [ebp + 0x78]
push eax
push 0x4cb650
call fcn.00446e5a
add esp, 0xc
test al, al
je 0x473d5a
push 0x4dbd58
call dword [sym.imp.KERNEL32.DLL_QueryPerformanceCounter]
push 0x4dc02c
call edi
mov esi, dword [ebp + 0x78]
movzx eax, word [esi]
cmp dword [ebp + 0x34], eax
je 0x473d09
jmp 0x473d5d
mov esi, dword [ebp + 0x78]
test bl, bl
je 0x473d6d
lea eax, [ebp + 0x4c]
push eax
call fcn.00442fcb
pop ecx
jmp 0x473d73
lea eax, [ebp + 0x4c]
push eax
call edi
movzx eax, word [esi]
cmp dword [ebp + 0x34], eax
jne 0x473f70
push 4
pop ebx
push ebx
lea edi, [esi + 2]
push edi
push 0x4cb8d4
call fcn.0043fac4
add esp, 0xc
test al, al
je 0x473dbf
lea eax, [ebp + 0x4c]
push eax
lea eax, [ebp + 0x78]
add esi, 0xa
push eax
mov dword [ebp + 0x78], esi
call fcn.00451a75
test eax, eax
pop ecx
pop ecx
jg 0x473f61
mov esi, 0x80070057
jmp 0x4744f6
push ebx
push edi
push str.gmt:
call fcn.0043fac4
add esp, 0xc
test al, al
je 0x473e12
lea eax, [ebp + 0x4c]
push eax
lea eax, [ebp + 0x78]
add esi, 0xa
push eax
mov dword [ebp + 0x78], esi
call fcn.00451a75
test eax, eax
pop ecx
pop ecx
jle 0x473db5
mov eax, dword [ebp + 0x4c]
mov ecx, dword [ebp + 0x50]
push 0
add eax, 0xb6109100
push 0x989680
adc ecx, 2
push ecx
push eax
call fcn.004adbb0
mov dword [ebp + 0x4c], eax
mov dword [ebp + 0x50], edx
jmp 0x473f61
push 7
push edi
push 0x4cb8c4
call fcn.0043fac4
add esp, 0xc
test al, al
je 0x473e2c
mov byte [ebp + 0x48], 1
jmp 0x473e44
push 6
push edi
push 0x4cb8bc
call fcn.0043fac4
add esp, 0xc
test al, al
je 0x473e8b
mov byte [ebp + 0x48], 0
movsx eax, byte [ebp + 0x48]
push dword [ebp + 0x48]
lea eax, [esi + eax*2 + 0xe]
mov dword [ebp + 0x78], eax
lea eax, [ebp + 0x54]
push eax
lea eax, [ebp + 0x78]
push eax
call fcn.0044c478
add esp, 0xc
test eax, eax
jle 0x473db5
lea eax, [ebp + 0x38]
push eax
lea eax, [ebp + 0x54]
push eax
call dword [sym.imp.KERNEL32.DLL_SystemTimeToFileTime]
lea eax, [ebp + 0x4c]
push eax
lea eax, [ebp + 0x38]
push eax
call dword [sym.imp.KERNEL32.DLL_LocalFileTimeToFileTime]
jmp 0x473f57
push 5
push edi
push 0x4cb8b4
call fcn.0043fac4
add esp, 0xc
test al, al
je 0x473ea5
mov byte [ebp + 0x48], 1
jmp 0x473ebc
push ebx
push edi
push 0x4cb8ac
call fcn.0043fac4
add esp, 0xc
test al, al
je 0x473ef2
mov byte [ebp + 0x48], 0
movsx eax, byte [ebp + 0x48]
push dword [ebp + 0x48]
lea eax, [esi + eax*2 + 0xa]
mov dword [ebp + 0x78], eax
lea eax, [ebp + 0x54]
push eax
lea eax, [ebp + 0x78]
push eax
call fcn.0044c478
add esp, 0xc
test eax, eax
jle 0x473db5
lea eax, [ebp + 0x4c]
push eax
lea eax, [ebp + 0x54]
push eax
call dword [sym.imp.KERNEL32.DLL_SystemTimeToFileTime]
jmp 0x473f57
push ebx
push edi
push str.bsys
call fcn.0043fa6d
add esp, 0xc
test al, al
je 0x473f0b
mov byte [ebp + 0x66], 1
jmp 0x473f57
push 6
push edi
push str.space0
call fcn.0043fa6d
add esp, 0xc
test al, al
je 0x473f25
mov byte [ebp + 0x6f], 2
jmp 0x473f57
push 5
push edi
push str.space
call fcn.0043fa6d
add esp, 0xc
test al, al
je 0x473f3f
mov byte [ebp + 0x6f], 1
jmp 0x473f57
push 2
push edi
push 0x4cb890
call fcn.0043fa6d
add esp, 0xc
test al, al
je 0x473f57
mov byte [ebp + 0x67], 1
lea eax, [ebp + 0x78]
push eax
call fcn.00405b6e
pop ecx
mov esi, dword [ebp + 0x78]
movzx eax, word [esi]
cmp dword [ebp + 0x34], eax
je 0x473d82
xor edi, edi
cmp word [esi], di
je 0x473f9f
lea eax, [ebp + 0x78]
push eax
call fcn.00405b4a
mov eax, dword [ebp + 0x78]
pop ecx
sub eax, esi
sar eax, 1
push eax
push esi
lea ecx, [ebp + 0x40]
call fcn.00444f56
mov ecx, dword [ebp + 0x2c]
push edi
lea eax, [ebp + 0x40]
push eax
call fcn.00402ecb
lea eax, [ebp + 0x78]
push eax
call fcn.0043e611
mov esi, dword [ebp + 0x78]
pop ecx
lea eax, [ebp + 0x38]
push eax
lea eax, [ebp + 0x4c]
push eax
mov dword [ebp + 0x78], esi
call dword [sym.imp.KERNEL32.DLL_FileTimeToLocalFileTime]
cmp byte [ebp + 0x66], 0
lea eax, [ebp + 0x4c]
jne 0x473fc9
lea eax, [ebp + 0x38]
lea ecx, [ebp + 0x54]
push ecx
push eax
call dword [sym.imp.KERNEL32.DLL_FileTimeToSystemTime]
cmp word [esi], di
mov esi, dword [sym.imp.USER32.dll_wsprintfW]
je 0x474413
lea eax, [ebp - 0x19c]
cmp dword [ebp + 0x68], eax
jae 0x474405
mov eax, dword [ebp + 0x78]
cmp word [eax], 0
je 0x474405
mov ebx, dword [ebp + 0x68]
lea eax, [ebp - 0x190c]
cmp ebx, eax
je 0x474016
mov word [ebx], 0x20
inc ebx
inc ebx
mov dword [ebp + 0x68], ebx
or edi, 0xffffffff
push edi
lea eax, [ebp + 0x78]
push eax
push 0x4cb88c
call fcn.00446de5
add esp, 0xc
test al, al
je 0x47406f
push 0
push 0x989680
lea eax, [ebp + 0x4c]
push dword [eax + 4]
push dword [eax]
call fcn.004adb00
sub eax, 0xb6109100
sbb edx, 2
push edx
push eax
push ebx
call fcn.0049b796
and dword [ebp + 0x30], 0
xor eax, eax
lea edi, [ebp + 0x34]
stosd dword es:[edi], eax
add esp, 0xc
lea eax, [ebp + 0x30]
push eax
call dword [sym.imp.KERNEL32.DLL_GetSystemTimeAsFileTime]
jmp 0x4743e7
push edi
lea eax, [ebp + 0x78]
push eax
push str.zone
call fcn.00446de5
add esp, 0xc
test al, al
je 0x4740bb
and dword [ebp - 0x124], 0
push 0x2a
pop ecx
xor eax, eax
lea edi, [ebp - 0x120]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x124]
push eax
call dword [sym.imp.KERNEL32.DLL_GetTimeZoneInformation]
mov eax, dword [ebp - 0x124]
push 0xffffffffffffffc4
pop ecx
cdq
idiv ecx
cdq
push edx
push eax
push ebx
jmp 0x474336
push edi
lea eax, [ebp + 0x78]
push eax
push 0x4cb880
call fcn.00446de5
add esp, 0xc
test al, al
je 0x4740dd
push dword [ebp + 0x50]
push dword [ebp + 0x4c]
push ebx
jmp 0x474369
push edi
lea eax, [ebp + 0x78]
push eax
push str.uptime
call fcn.00446de5
add esp, 0xc
test al, al
je 0x4740fa
call fcn.0044306c
jmp 0x474115
push edi
lea eax, [ebp + 0x78]
push eax
push str.uptimens
call fcn.00446de5
add esp, 0xc
test al, al
je 0x474119
call fcn.004430f1
push edx
push eax
jmp 0x4740d7
push edi
lea eax, [ebp + 0x78]
push eax
push 0x4cb868
call fcn.00446de5
add esp, 0xc
test al, al
jne 0x4743d5
or edi, 0xffffffff
push 0x4cb864
mov eax, edi
lea ebx, [ebp + 0x78]
call fcn.00444a61
test al, al
pop ecx
jne 0x4743d5
push edi
mov eax, ebx
push eax
push 0x4cb860
call fcn.00446de5
add esp, 0xc
test al, al
jne 0x4743cf
push 0x4cb85c
mov eax, edi
call fcn.00444a61
test al, al
pop ecx
jne 0x4743cf
push edi
mov eax, ebx
push eax
push 0x4cb858
call fcn.00446de5
add esp, 0xc
test al, al
jne 0x4743c9
push 0x4cb854
mov eax, edi
call fcn.00444a61
test al, al
pop ecx
jne 0x4743c9
push edi
mov eax, ebx
push eax
push 0x4cb850
call fcn.00446de5
add esp, 0xc
test al, al
jne 0x4743c3
push 0x4cb848
mov eax, edi
call fcn.00444a61
test al, al
pop ecx
jne 0x4743c3
push edi
mov eax, ebx
push eax
push 0x4c9fb4
call fcn.00446de5
add esp, 0xc
test al, al
jne 0x4743bd
push 0x4cb844
mov eax, edi
call fcn.00444a61
test al, al
pop ecx
jne 0x4743bd
push edi
mov eax, ebx
push eax
push 0x4c1f00
call fcn.00446de5
add esp, 0xc
test al, al
jne 0x4743b7
push 0x4cb840
mov eax, edi
call fcn.00444a61
test al, al
pop ecx
jne 0x4743b7
push edi
mov eax, ebx
push eax
push 0x4c5bb4
call fcn.00446de5
add esp, 0xc
test al, al
jne 0x4743b1
push 0x4cb83c
mov eax, edi
call fcn.00444a61
test al, al
pop ecx
jne 0x4743b1
push edi
mov eax, ebx
push eax
push 0x4cb838
call fcn.00446de5
add esp, 0xc
test al, al
jne 0x4743ab
push 0x4cb830
mov eax, edi
call fcn.00444a61
test al, al
pop ecx
jne 0x4743ab
push edi
mov eax, ebx
push eax
push 0x4cb82c
call fcn.00446de5
add esp, 0xc
test al, al
jne 0x474390
push 0x4cb828
mov eax, edi
call fcn.00444a61
test al, al
pop ecx
jne 0x474390
push edi
mov eax, ebx
push eax
push 0x4cb824
call fcn.00446de5
add esp, 0xc
test al, al
jne 0x47438c
push 0x4cb81c
mov eax, edi
call fcn.00444a61
test al, al
pop ecx
jne 0x47438c
push edi
mov eax, ebx
push eax
push 0x4cb818
call fcn.00446de5
add esp, 0xc
test al, al
jne 0x47437c
push 0x4cb814
mov eax, edi
call fcn.00444a61
test al, al
pop ecx
jne 0x47437c
push edi
mov eax, ebx
push eax
push 0x4cb80c
call fcn.00446de5
add esp, 0xc
test al, al
je 0x474340
push dword [0x4dbd54]
push dword [0x4dbd50]
push dword [ebp + 0x68]
call fcn.0049b796
jmp 0x4743e4
push edi
lea eax, [ebp + 0x78]
push eax
push str.Counter
call fcn.00446de5
add esp, 0xc
test al, al
je 0x474370
lea eax, [ebp + 0x44]
push eax
call dword [sym.imp.KERNEL32.DLL_QueryPerformanceCounter]
push dword [ebp + 0x48]
push dword [ebp + 0x44]
push dword [ebp + 0x68]
call fcn.0049b7b0
jmp 0x4743e4
lea eax, [ebp + 0x78]
push eax
call fcn.00405b6e
pop ecx
jmp 0x4743e7
lea edi, [ebp + 0x54]
call fcn.00442eeb
push eax
push 0x4c1b78
jmp 0x4743df
push 1
jmp 0x474392
push 0
lea eax, [ebp + 0x54]
push eax
call fcn.00442f87
push eax
push 0x4c1b78
push dword [ebp + 0x68]
call esi
add esp, 0x14
jmp 0x4743e7
movzx eax, word [ebp + 0x62]
jmp 0x4743d9
movzx eax, word [ebp + 0x60]
jmp 0x4743d9
movzx eax, word [ebp + 0x5e]
jmp 0x4743d9
movzx eax, word [ebp + 0x5c]
jmp 0x4743d9
movzx eax, word [ebp + 0x58]
jmp 0x4743d9
movzx eax, word [ebp + 0x5a]
jmp 0x4743d9
movzx eax, word [ebp + 0x56]
jmp 0x4743d9
movzx eax, word [ebp + 0x54]
push eax
push 0x4c12a0
push dword [ebp + 0x68]
call esi
add esp, 0xc
mov edi, dword [ebp + 0x68]
push edi
call dword [sym.imp.KERNEL32.DLL_lstrlenW]
lea eax, [edi + eax*2]
lea ecx, [ebp - 0x19c]
cmp eax, ecx
mov dword [ebp + 0x68], eax
jb 0x473ff2
cmp word [ebp - 0x190c], 0
jne 0x4744f3
and word [ebp - 0x78], 0
cmp byte [ebp + 0x67], 0
je 0x47443f
push 0
push 0x2710
push dword [ebp + 0x3c]
push dword [ebp + 0x38]
call fcn.004b0380
push eax
lea eax, [ebp - 0x78]
push str.._04lu
push eax
call esi
add esp, 0xc
cmp byte [ebp + 0x6f], 0
jne 0x474478
lea eax, [ebp - 0x78]
push eax
movzx eax, word [ebp + 0x62]
push eax
movzx eax, word [ebp + 0x60]
push eax
movzx eax, word [ebp + 0x5e]
push eax
movzx eax, word [ebp + 0x5c]
push eax
movzx eax, word [ebp + 0x58]
push eax
movzx eax, word [ebp + 0x5a]
push eax
movzx eax, word [ebp + 0x56]
push eax
movzx eax, word [ebp + 0x54]
push eax
push str._d__d__d_d_d:_d:_d._u_s
jmp 0x4744e2
cmp byte [ebp + 0x6f], 1
jne 0x4744b1
lea eax, [ebp - 0x78]
push eax
movzx eax, word [ebp + 0x62]
push eax
movzx eax, word [ebp + 0x60]
push eax
movzx eax, word [ebp + 0x5e]
push eax
movzx eax, word [ebp + 0x5c]
push eax
movzx eax, word [ebp + 0x58]
push eax
movzx eax, word [ebp + 0x5a]
push eax
movzx eax, word [ebp + 0x56]
push eax
movzx eax, word [ebp + 0x54]
push eax
push str._d__d__d__d__d__d__d__u_s
jmp 0x4744e2
movzx eax, word [ebp + 0x58]
push eax
lea eax, [ebp - 0x78]
push eax
movzx eax, word [ebp + 0x62]
push eax
movzx eax, word [ebp + 0x60]
push eax
movzx eax, word [ebp + 0x5e]
push eax
movzx eax, word [ebp + 0x5c]
push eax
movzx eax, word [ebp + 0x5a]
push eax
movzx eax, word [ebp + 0x56]
push eax
movzx eax, word [ebp + 0x54]
push eax
push str._04u__02u__02u__02u__02u__02u__03u_s__1u
lea eax, [ebp - 0x190c]
push eax
call esi
add esp, 0x2c
jmp 0x473fe3
mov esi, dword [ebp + 0x28]
mov ecx, dword [ebp + 0x2c]
lea eax, [ebp - 0x190c]
push eax
push dword [ebp + 0x40]
call fcn.0044451e
lea ecx, [ebp + 0x40]
call fcn.0043e679
pop edi
mov eax, esi
pop esi
pop ebx
add ebp, 0x70
leave
ret 8