Function at 0x436220
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x63c
mov eax, dword [0x6aae14]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
push 0x207
xor edi, edi
lea eax, [ebp - 0x20b]
push edi
push eax
mov esi, 0x1388
mov dword [ebp - 0x620], 0x80004005
mov byte [ebp - 0x20c], 0
call fcn.005dfd60
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
add esp, 0xc
mov dword [0x6b3cf0], 1
call ebx
mov dword [0x6b3ca0], eax
cmp dword [0x6e8934], edi
je 0x4362b5
mov ecx, dword [0x6b4348]
push ecx
lea edx, [ebp - 0x61c]
push str.ReloadDatabases_Called__Event256___d_
push edx
call fcn.005dfb23
mov eax, dword [0x6e8934]
push edi
push eax
lea ecx, [ebp - 0x61c]
push ecx
push 0x6aec98
call fcn.004311c0
add esp, 0x1c
cmp dword [0x6b4348], edi
jle 0x4362e0
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
test esi, esi
je 0x4362de
call ebx
push 2
mov dword [0x6b3ca0], eax
call edi
sub esi, 2
cmp dword [0x6b4348], 0
jg 0x4362c3
xor edi, edi
xor eax, eax
mov cl, byte [eax + 0x6af4b8]
mov byte [ebp + eax - 0x20c], cl
inc eax
test cl, cl
jne 0x4362e2
lea edx, [ebp - 0x20c]
push edx
call fcn.004e24e0
lea eax, [ebp - 0x20c]
add esp, 4
dec eax
lea ebx, [ebx]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x436310
mov ecx, dword [str.Vista]
mov dx, word [0x61d720]
mov dword [eax], ecx
mov word [eax + 4], dx
call ebx
mov dword [0x6b3ca0], eax
mov eax, dword [0x6821f0]
cmp eax, edi
je 0x436367
cmp eax, 0xffffffff
je 0x436367
cmp eax, 1
jne 0x43634c
call fcn.00530930
jmp 0x43636d
cmp eax, 2
jne 0x43637b
call fcn.00435a00
test eax, eax
je 0x43637b
mov eax, dword [0x6b37c4]
cmp eax, edi
je 0x43637b
call eax
jmp 0x43636d
call dword [0x693464]
cmp eax, edi
mov dword [ebp - 0x620], eax
jge 0x436443
call ebx
mov dword [0x6b3ca0], eax
push edi
lea eax, [ebp - 0x20c]
push eax
push 0x6b37c8
call fcn.00519dc0
add esp, 0xc
cmp eax, 1
jne 0x436405
lea ecx, [ebp - 0x61c]
push str.Note:_AVC_Files_Successfully_Restored_From_Backup
push ecx
call fcn.005dfb23
push edi
push 1
lea edx, [ebp - 0x61c]
push edx
push 0x6aec98
call fcn.004311c0
mov eax, dword [0x6821f0]
add esp, 0x18
cmp eax, edi
je 0x4363f9
cmp eax, 0xffffffff
je 0x4363f9
cmp eax, 1
jne 0x4363de
call fcn.00530930
jmp 0x4363ff
cmp eax, 2
jne 0x436405
call fcn.00435a00
test eax, eax
je 0x436405
mov eax, dword [0x6b37c4]
cmp eax, edi
je 0x436405
call eax
jmp 0x4363ff
call dword [0x693464]
mov dword [ebp - 0x620], eax
mov esi, dword [ebp - 0x620]
cmp esi, edi
jge 0x436443
push esi
lea eax, [ebp - 0x61c]
push str.Error:_Anti_Virus_Database_Cannot_Be_Reloaded._Reason:_0x_x
push eax
call fcn.005dfb23
push edi
push 1
lea ecx, [ebp - 0x61c]
push ecx
push 0x6aec98
call fcn.004311c0
add esp, 0x1c
mov dword [0x6b3cf4], edi
jmp 0x43657a
call ebx
lea edx, [ebp - 0x20c]
push edx
push 0x6b37c8
mov dword [0x6b3ca0], eax
call fcn.005196f0
add esp, 8
test eax, eax
je 0x436491
lea eax, [ebp - 0x20c]
push eax
lea ecx, [ebp - 0x61c]
push str.Taken_Backup_Of_Signatures_In_Folder:__s
push ecx
call fcn.005dfb23
push edi
push 1
lea edx, [ebp - 0x61c]
push edx
push 0x6aec98
call fcn.004311c0
add esp, 0x1c
xor eax, eax
mov dword [ebp - 0x63c], eax
mov dword [ebp - 0x638], eax
mov dword [ebp - 0x634], eax
mov dword [ebp - 0x630], eax
mov dword [ebp - 0x62c], eax
mov dword [ebp - 0x628], eax
mov dword [ebp - 0x624], eax
call ebx
mov dword [0x6b3ca0], eax
lea eax, [ebp - 0x63c]
push eax
call dword [0x693460]
mov esi, eax
cmp esi, edi
jge 0x4364f6
push edi
push 1
push str.Unable_To_Get_The_Database_Information_For_eScan_After_Database_Update
push 0x6aec98
call fcn.004311c0
mov ecx, dword [0x6b38d0]
add esp, 0x10
mov dword [ecx], edi
jmp 0x436533
mov edx, dword [0x6b38d0]
mov eax, dword [ebp - 0x63c]
mov dword [edx], eax
mov ecx, dword [ebp - 0x638]
mov edx, dword [ebp - 0x630]
mov eax, dword [ebp - 0x634]
push ecx
mov ecx, dword [0x6b38d0]
push edx
push eax
add ecx, 0x440
push str._d__d__d
push ecx
call fcn.005dfb23
add esp, 0x14
mov ecx, 0x6e8970
call fcn.004fb1f0
mov edx, dword [0x6b3d0c]
push 0xffffffffffffffff
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [0x6b4344]
cmp eax, edi
je 0x436564
push eax
call fcn.005e0865
add esp, 4
mov dword [0x6b4344], edi
mov eax, dword [0x6b3d0c]
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov dword [0x6b3cf4], 1
mov ecx, dword [ebp - 4]
mov dword [0x6b3cf0], edi
pop edi
mov eax, esi
pop esi
xor ecx, ebp
pop ebx
call fcn.005dfbbe
mov esp, ebp
pop ebp
ret