Function at 0x535348
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffe8c
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 0x16c], ebx
mov dword [ebp - 0x168], ebx
mov dword [ebp - 0x60], ebx
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x44], ebx
mov edi, ecx
mov ebx, edx
xor eax, eax
push ebp
push 0x535649
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
mov dword [ebp - 4], eax
xor eax, eax
mov dword [ebp - 8], eax
xor edx, edx
push ebp
push 0x5355c2
push dword fs:[edx]
mov dword fs:[edx], esp
push ebx
call sub.wsock32.dll_htonl
mov dword [ebp - 0x20], eax
push edi
call sub.wsock32.dll_htonl
mov dword [ebp - 0x24], eax
cmp edi, ebx
jae 0x53540f
push 1
lea eax, [ebp - 0x40]
push eax
lea edx, [ebp - 0x20]
mov eax, dword [0x575048]
mov eax, dword [eax]
xor ecx, ecx
call fcn.00556e44
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x3c], eax
mov byte [ebp - 0x38], 0xb
lea eax, [ebp - 0x44]
push eax
lea edx, [ebp - 0x24]
mov eax, dword [0x575048]
mov eax, dword [eax]
xor ecx, ecx
call fcn.00556e44
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x34], eax
mov byte [ebp - 0x30], 0xb
lea ecx, [ebp - 0x3c]
mov eax, dword [0x575048]
mov eax, dword [eax]
mov edx, 0x535664
call fcn.00554bfc
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x535611
mov esi, edi
sub esi, ebx
inc esi
cmp esi, 0x100
ja 0x535420
test esi, esi
jne 0x535488
push 2
lea eax, [ebp - 0x60]
push eax
lea edx, [ebp - 0x20]
mov eax, dword [0x575048]
mov eax, dword [eax]
xor ecx, ecx
call fcn.00556e44
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x5c], eax
mov byte [ebp - 0x58], 0xb
lea eax, [ebp - 0x64]
push eax
lea edx, [ebp - 0x24]
mov eax, dword [0x575048]
mov eax, dword [eax]
xor ecx, ecx
call fcn.00556e44
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x54], eax
mov byte [ebp - 0x50], 0xb
mov dword [ebp - 0x4c], esi
mov byte [ebp - 0x48], 0
lea ecx, [ebp - 0x5c]
mov eax, dword [0x575048]
mov eax, dword [eax]
mov edx, 0x53569c
call fcn.00554bfc
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x535611
imul eax, esi, 0x2c
add eax, 0xc
call fcn.00402784
mov dword [ebp - 8], eax
mov eax, dword [ebp - 8]
mov dword [eax + 4], ebx
mov dword [eax + 8], edi
mov dword [eax], esi
xor esi, esi
sub edi, ebx
jb 0x5355b2
inc edi
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0xc], ebx
mov eax, dword [ebp - 0xc]
push eax
call sub.wsock32.dll_htonl
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 8]
add ebx, 0xc
imul eax, esi, 0x2c
add ebx, eax
lea eax, [ebp - 0x168]
push eax
lea edx, [ebp - 0x10]
mov eax, dword [0x575048]
mov eax, dword [eax]
xor ecx, ecx
call fcn.00556e44
mov edx, dword [ebp - 0x168]
lea eax, [ebp - 0x164]
mov ecx, 0xff
call fcn.00404a30
lea edx, [ebp - 0x164]
mov eax, ebx
mov cl, 0xf
call fcn.004030dc
mov eax, dword [ebp - 0x10]
mov dword [ebx + 0x24], eax
mov dword [ebp - 0x14], 8
call sub.kernel32.dll_GetTickCount
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x1c]
push eax
push 0
mov eax, dword [ebp - 0x10]
push eax
call sub.iphlpapi.dll_SendARP
mov edi, eax
call sub.kernel32.dll_GetTickCount
sub eax, dword [ebp - 0x28]
cmp eax, 0x3e8
jae 0x53554c
mov edx, 0x3e8
sub edx, eax
push edx
call sub.kernel32.dll_Sleep_1
test edi, edi
jne 0x53559a
cmp dword [ebp - 0x14], 6
jne 0x53559a
lea ecx, [ebp - 0x16c]
lea edx, [ebp - 0x1c]
mov eax, dword [0x575048]
mov eax, dword [eax]
call fcn.005570a0
mov edx, dword [ebp - 0x16c]
lea eax, [ebp - 0x164]
mov ecx, 0xff
call fcn.00404a30
lea edx, [ebp - 0x164]
lea eax, [ebx + 0x10]
mov cl, 0x13
call fcn.004030dc
mov dword [ebx + 0x28], 1
jmp 0x5355a5
mov byte [ebx + 0x10], 0
mov dword [ebx + 0x28], 2
inc esi
inc dword [ebp - 0xc]
dec dword [ebp - 0x2c]
jne 0x5354b2
mov eax, dword [ebp - 8]
mov dword [ebp - 4], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x535611
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x535650
lea eax, [ebp - 0x16c]
mov edx, 2
call fcn.004047b8
lea eax, [ebp - 0x64]
mov edx, 2
call fcn.004047b8
lea eax, [ebp - 0x44]
mov edx, 2
call fcn.004047b8
ret