Function at 0x467224
Capabilities:
Check for time delay via gettickcount

Disassembly:
push 0x2d8
mov eax, 0x4b9d42
call fcn.004701a5
mov dword [ebp - 0x1c4], ecx
mov al, byte [ebp + 0x14]
mov ebx, dword [ebp + 8]
mov esi, dword [ebp + 0x18]
mov byte [ebp - 0x1d4], al
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x1cc], ebx
mov dword [ebp - 0x1c8], esi
mov dword [ebp - 0x1c0], eax
test ebx, ebx
je 0x467d60
push ebx
call fcn.0046b684
pop ecx
test eax, eax
je 0x467d60
lea ecx, [ebp - 0x1f8]
mov dword [ebp - 0x1d0], 2
call fcn.00426a1a
and dword [ebp - 4], 0
lea eax, [ebp - 0x1b4]
push ebx
lea ecx, [ebp - 0x1b8]
mov byte [ebp - 4], 1
mov dword [ebp - 0x1b8], eax
call fcn.00440b04
xor eax, eax
push 0x30
push eax
mov byte [esi], al
mov dword [ebp - 0x260], eax
lea eax, [ebp - 0x25c]
push eax
call fcn.0046bdb0
and dword [ebp - 0x20c], 0
xor eax, eax
lea edi, [ebp - 0x208]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
add esp, 0xc
lea ecx, [ebp - 0x21c]
stosd dword es:[edi], eax
call fcn.0042ead5
push dword [ebp - 0x1d4]
mov eax, dword [ebp - 0x1b8]
mov edi, dword [ebp - 0x1c4]
and dword [ebp - 0x200], 0
mov dword [ebp - 0x208], eax
push ebx
lea eax, [ebp - 0x204]
push eax
lea eax, [ebp - 0x21c]
push eax
mov ecx, edi
mov byte [ebp - 4], 3
mov dword [ebp - 0x20c], 0x10
call fcn.00467dc7
mov esi, eax
mov dword [ebp - 0x1d0], esi
cmp esi, 1
jne 0x467720
push dword [ebp + 0x10]
and dword [ebp - 0x25c], 0
and dword [ebp - 0x258], 0
lea eax, [ebp - 0x260]
push eax
mov ecx, edi
mov dword [ebp - 0x260], 0x34
mov dword [ebp - 0x254], 2
call fcn.00467d98
lea eax, [ebp - 0x20c]
mov dword [ebp - 0x248], eax
xor eax, eax
mov dword [ebp - 0x24c], esi
mov dword [ebp - 0x244], eax
mov dword [ebp - 0x240], eax
mov dword [ebp - 0x23c], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edi, eax
lea eax, [ebp - 0x260]
push eax
lea eax, [ebp - 0x44]
push eax
mov dword [ebp - 0x38], 0xee95c24f
push 0xffffffffffffffff
cmp dword [ebp + 0x20], esi
jne 0x4673c7
mov dword [ebp - 0x44], 0xf750e6c3
mov dword [ebp - 0x40], 0x11d138ee
mov dword [ebp - 0x3c], 0xc000e585
jmp 0x4673dc
mov dword [ebp - 0x44], 0xaac56b
mov dword [ebp - 0x40], 0x11d0cd44
mov dword [ebp - 0x3c], 0xc000c28c
call sub.WINTRUST.dll_WinVerifyTrust
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, edi
cmp eax, 0x1f4
jbe 0x467490
mov ecx, dword [0x50b594]
mov edi, 0x50b594
cmp ecx, edi
je 0x467484
test byte [ecx + 0x1c], 1
je 0x467453
cmp byte [ecx + 0x19], 2
jb 0x467453
cmp dword [ebp + 0x20], 1
jne 0x467424
mov edx, 0x4ca3f8
mov dword [ebp - 0x1bc], edx
jmp 0x467433
mov edx, str.WINTRUST_ACTION_GENERIC_VERIFY_V2
mov dword [ebp - 0x1bc], 0x4ca3f8
push eax
push ebx
push edx
push 0x4ca3e4
push 0x17
push dword [ecx + 0x14]
push dword [ecx + 0x10]
call fcn.0041e01c
mov ecx, dword [0x50b594]
add esp, 0x1c
jmp 0x46745d
mov dword [ebp - 0x1bc], 0x4ca3f8
cmp ecx, edi
je 0x4674a5
test byte [ecx + 0x1c], 1
je 0x4674a5
cmp byte [ecx + 0x19], 2
jb 0x4674a5
push 0x4ca3e4
push 0x18
push dword [ecx + 0x14]
push dword [ecx + 0x10]
call fcn.0041df22
add esp, 0x10
jmp 0x46749f
mov dword [ebp - 0x1bc], 0x4ca3f8
jmp 0x4674a5
mov edi, 0x50b594
mov dword [ebp - 0x1bc], 0x4ca3f8
mov ecx, dword [0x50b594]
test esi, esi
je 0x467ae9
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov ecx, dword [0x50b594]
cmp ecx, edi
je 0x467504
test byte [ecx + 0x1c], 1
je 0x467504
push 4
pop ebx
cmp byte [ecx + 0x19], bl
jb 0x467507
cmp dword [ebp + 0x20], 1
mov eax, dword [ebp - 0x1bc]
je 0x4674de
mov eax, str.WINTRUST_ACTION_GENERIC_VERIFY_V2
push edx
push esi
push dword [ebp - 0x1cc]
push eax
push 0x4ca3e4
push 0x19
push dword [ecx + 0x14]
push dword [ecx + 0x10]
call fcn.00467ee3
mov ecx, dword [0x50b594]
add esp, 0x20
jmp 0x467507
push 4
pop ebx
cmp dword [ebp + 0xc], 3
jne 0x467517
cmp byte [ebp + 0x24], 1
jne 0x467aec
lea ecx, [ebp - 0x3c]
call fcn.0046937a
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], bl
call fcn.00469567
lea ecx, [ebp - 0x3c]
test eax, eax
jne 0x467567
mov byte [ebp - 4], 3
call fcn.00469533
lea ecx, [ebp - 0x21c]
call fcn.0042eb17
lea eax, [ebp - 0x1b4]
cmp dword [ebp - 0x1b8], eax
je 0x46755f
push dword [ebp - 0x1b8]
call fcn.0046af6b
pop ecx
push 2
pop esi
jmp 0x467745
mov eax, dword [ebp - 0x1b8]
mov dword [ebp - 0x1fc], eax
call fcn.0046956a
push eax
push dword [ebp - 0x1d4]
lea ecx, [ebp - 0xb4]
push dword [ebp - 0x1fc]
call fcn.0046956e
lea ecx, [ebp - 0xb4]
mov byte [ebp - 4], 5
call fcn.00469bb9
cmp eax, 1
jne 0x467a0c
lea eax, [ebp - 0xb4]
push eax
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x2e4]
call fcn.00469c2e
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 6
call fcn.0046a083
mov al, byte [ebp - 0x2c8]
mov byte [ebp - 4], 7
cmp al, byte [ebp - 0x18]
je 0x4679bd
mov eax, dword [ebp - 0x1c8]
mov ecx, dword [ebp - 0x1c0]
push 0
push 0x4daef0
mov byte [eax], 1
call fcn.00401404
mov al, byte [ebp - 0x2c8]
cmp al, byte [ebp - 0x18]
je 0x467995
lea ecx, [ebp - 0x2e4]
call fcn.00467e78
mov esi, dword [ebp - 0x1c0]
cmp esi, eax
je 0x467628
push 0xffffffffffffffff
push 0
push eax
mov ecx, esi
call fcn.004015ee
and dword [ebp - 0x294], 0
push 0x30
lea eax, [ebp - 0x290]
push 0
push eax
call fcn.0046bdb0
and dword [ebp - 0x2c4], 0
add esp, 0xc
xor eax, eax
push 9
pop ecx
lea edi, [ebp - 0x2c0]
rep stosd dword es:[edi], eax
lea ecx, [ebp - 0x22c]
call fcn.0042ead5
cmp dword [esi + 0x14], 8
mov byte [ebp - 4], 8
mov dword [ebp - 0x2c4], 0x28
jb 0x467679
mov eax, dword [esi]
jmp 0x46767b
mov eax, esi
mov dword [ebp - 0x2bc], eax
mov eax, dword [ebp - 0x1b8]
lea ecx, [ebp - 0xb4]
mov dword [ebp - 0x2b4], eax
call fcn.00469bbd
lea ecx, [ebp - 0x3c]
mov dword [ebp - 0x2b8], eax
call fcn.0046956a
push dword [ebp - 0x1d4]
mov edi, dword [ebp - 0x1c4]
push dword [ebp - 0x1cc]
mov dword [ebp - 0x2a0], eax
lea eax, [ebp - 0x2b0]
push eax
lea eax, [ebp - 0x22c]
push eax
mov ecx, edi
call fcn.00467dc7
mov esi, eax
mov dword [ebp - 0x1d0], esi
cmp esi, 1
je 0x467757
lea ecx, [ebp - 0x22c]
call fcn.0042eb17
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 6
call fcn.0046a0a0
lea ecx, [ebp - 0x2e4]
mov byte [ebp - 4], 5
call fcn.0046a0a0
lea ecx, [ebp - 0xb4]
mov byte [ebp - 4], bl
call fcn.00469a3f
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 3
call fcn.00469533
lea ecx, [ebp - 0x21c]
call fcn.0042eb17
lea eax, [ebp - 0x1b4]
cmp dword [ebp - 0x1b8], eax
je 0x467745
push dword [ebp - 0x1b8]
call fcn.0046af6b
pop ecx
lea ecx, [ebp - 0x1f8]
call fcn.00426a56
mov eax, esi
jmp 0x467d90
push dword [ebp + 0x10]
and dword [ebp - 0x290], 0
and dword [ebp - 0x28c], 0
lea eax, [ebp - 0x294]
push eax
mov ecx, edi
mov dword [ebp - 0x294], 0x34
mov dword [ebp - 0x288], 2
call fcn.00467d98
lea eax, [ebp - 0x2c4]
mov dword [ebp - 0x27c], eax
xor eax, eax
mov dword [ebp - 0x280], 2
mov dword [ebp - 0x278], eax
mov dword [ebp - 0x274], eax
mov dword [ebp - 0x270], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
cmp dword [ebp + 0x20], 1
mov edi, eax
lea eax, [ebp - 0x294]
push eax
jne 0x4677ea
mov dword [ebp - 0x54], 0xf750e6c3
mov dword [ebp - 0x50], 0x11d138ee
mov dword [ebp - 0x4c], 0xc000e585
mov dword [ebp - 0x48], 0xee95c24f
lea eax, [ebp - 0x54]
jmp 0x467809
mov dword [ebp - 0x64], 0xaac56b
mov dword [ebp - 0x60], 0x11d0cd44
mov dword [ebp - 0x5c], 0xc000c28c
mov dword [ebp - 0x58], 0xee95c24f
lea eax, [ebp - 0x64]
push eax
push 0xffffffffffffffff
call sub.WINTRUST.dll_WinVerifyTrust
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, edi
mov dword [ebp - 0x1c8], eax
cmp eax, 0x1f4
jbe 0x4678b4
mov ecx, dword [0x50b594]
mov edi, 0x50b594
cmp ecx, edi
je 0x4678bf
test byte [ecx + 0x1c], 1
je 0x46788d
cmp byte [ecx + 0x19], 2
jb 0x46788d
cmp dword [ebp + 0x20], 1
mov edx, dword [ebp - 0x1bc]
je 0x46785c
mov edx, str.WINTRUST_ACTION_GENERIC_VERIFY_V2
mov eax, dword [ebp - 0x1c0]
cmp dword [eax + 0x14], 8
jb 0x46786a
mov eax, dword [eax]
push dword [ebp - 0x1c8]
push eax
push edx
push 0x4ca3e4
push 0x1a
push dword [ecx + 0x14]
push dword [ecx + 0x10]
call fcn.0041e01c
mov ecx, dword [0x50b594]
add esp, 0x1c
cmp ecx, edi
je 0x4678bf
test byte [ecx + 0x1c], 1
je 0x4678bf
cmp byte [ecx + 0x19], 2
jb 0x4678bf
push 0x4ca3e4
push 0x1b
push dword [ecx + 0x14]
push dword [ecx + 0x10]
call fcn.0041df22
add esp, 0x10
jmp 0x4678b9
mov edi, 0x50b594
mov ecx, dword [0x50b594]
test esi, esi
jne 0x467918
cmp ecx, edi
je 0x467908
test byte [ecx + 0x1c], 1
je 0x467908
cmp byte [ecx + 0x19], bl
jb 0x467908
cmp dword [ebp + 0x20], 1
mov edx, dword [ebp - 0x1bc]
je 0x4678e3
mov edx, str.WINTRUST_ACTION_GENERIC_VERIFY_V2
mov eax, dword [ebp - 0x1c0]
cmp dword [eax + 0x14], 8
jb 0x4678f1
mov eax, dword [eax]
push eax
push edx
push 0x4ca3e4
push 0x1c
push dword [ecx + 0x14]
push dword [ecx + 0x10]
call fcn.0040a9f8
add esp, 0x18
lea ecx, [ebp - 0x22c]
call fcn.0042eb17
jmp 0x4679ec
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c8], eax
mov ecx, dword [0x50b594]
cmp ecx, edi
je 0x467976
test byte [ecx + 0x1c], 1
je 0x467976
cmp byte [ecx + 0x19], bl
jb 0x467976
cmp dword [ebp + 0x20], 1
mov edx, dword [ebp - 0x1bc]
je 0x46794a
mov edx, str.WINTRUST_ACTION_GENERIC_VERIFY_V2
mov eax, dword [ebp - 0x1c0]
cmp dword [eax + 0x14], 8
jb 0x467958
mov eax, dword [eax]
push dword [ebp - 0x1c8]
push esi
push eax
push edx
push 0x4ca3e4
push 0x1d
push dword [ecx + 0x14]
push dword [ecx + 0x10]
call fcn.00467ee3
add esp, 0x20
lea ecx, [ebp - 0x22c]
mov byte [ebp - 4], 7
call fcn.0042eb17
lea ecx, [ebp - 0x2e4]
call fcn.00467ebe
jmp 0x4675f8
test esi, esi
je 0x4679ec
mov eax, dword [0x50b594]
cmp eax, edi
je 0x4679ec
test byte [eax + 0x1c], 1
je 0x4679ec
cmp byte [eax + 0x19], 3
jb 0x4679ec
push dword [ebp - 0x1cc]
push 0x4ca3e4
push 0x1e
jmp 0x4679de
mov eax, dword [0x50b594]
cmp eax, edi
je 0x4679ec
test byte [eax + 0x1c], 1
je 0x4679ec
cmp byte [eax + 0x19], bl
jb 0x4679ec
push dword [ebp - 0x1cc]
push 0x4ca3e4
push 0x1f
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0041df3f
add esp, 0x14
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 6
call fcn.0046a0a0
lea ecx, [ebp - 0x2e4]
mov byte [ebp - 4], 5
call fcn.0046a0a0
jmp 0x467ac7
mov eax, dword [0x50b594]
cmp eax, edi
je 0x467a65
test byte [eax + 0x1c], 1
je 0x467a40
cmp byte [eax + 0x19], bl
jb 0x467a40
push dword [ebp - 0x1cc]
push 0x4ca3e4
push 0x20
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0041df3f
mov eax, dword [0x50b594]
add esp, 0x14
cmp eax, edi
je 0x467a65
test byte [eax + 0x1c], 1
je 0x467a65
cmp byte [eax + 0x19], bl
jb 0x467a65
push esi
push 0x4ca3e4
push 0x21
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0041e118
add esp, 0x14
lea ecx, [ebp - 0xb4]
call fcn.00469bc5
cmp eax, 0x57
je 0x467a98
mov esi, 0x800b0003
mov eax, dword [0x50b594]
cmp eax, edi
je 0x467ac7
test byte [eax + 0x1c], 1
je 0x467ac7
cmp byte [eax + 0x19], 2
jb 0x467ac7
push 0x4ca3e4
push 0x23
jmp 0x467ab9
mov esi, 0x800b0004
mov eax, dword [0x50b594]
cmp eax, edi
je 0x467ac7
test byte [eax + 0x1c], 1
je 0x467ac7
cmp byte [eax + 0x19], 2
jb 0x467ac7
push 0x4ca3e4
push 0x22
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0041df22
add esp, 0x10
lea ecx, [ebp - 0xb4]
mov byte [ebp - 4], bl
call fcn.00469a3f
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 3
call fcn.00469533
mov ecx, dword [0x50b594]
jmp 0x467aec
push 4
pop ebx
cmp esi, 0x800b0004
jg 0x467bdf
je 0x467b1d
cmp esi, 0x80092026
je 0x467b52
cmp esi, 0x80096005
je 0x467b4e
cmp esi, 0x80096010
je 0x467b1d
lea eax, [esi + 0x7ff4ffff]
cmp eax, 2
jbe 0x467b20
push 3
pop ebx
lea ecx, [ebp - 0x21c]
call fcn.0042eb17
lea eax, [ebp - 0x1b4]
cmp dword [ebp - 0x1b8], eax
je 0x467cae
push dword [ebp - 0x1b8]
call fcn.0046af6b
pop ecx
jmp 0x467cae
push 0x14
jmp 0x467b1f
mov eax, sub.WINTRUST.dll_WintrustGetRegPolicyFlags
test eax, eax
je 0x467b1d
and dword [ebp - 0x1c4], 0
lea eax, [ebp - 0x1c4]
push eax
call sub.WINTRUST.dll_WintrustGetRegPolicyFlags
test dword [ebp - 0x1c4], 0x40000
je 0x467b1d
mov eax, dword [0x50b594]
cmp eax, edi
je 0x467b20
test byte [eax + 0x1c], 1
je 0x467ba9
cmp byte [eax + 0x19], 2
jb 0x467ba9
push 0x4ca3e4
push 0x25
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0041df22
mov eax, dword [0x50b594]
add esp, 0x10
cmp eax, edi
je 0x467b20
test byte [eax + 0x1c], 1
je 0x467b20
cmp byte [eax + 0x19], 2
jb 0x467b20
push 0x4ca3e4
push 0x26
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0041df22
add esp, 0x10
jmp 0x467b20
cmp esi, 0x800b0100
je 0x467b1d
cmp esi, 0x800b010e
je 0x467c03
test esi, esi
jne 0x467b1d
xor ebx, ebx
inc ebx
jmp 0x467b20
cmp ecx, edi
je 0x467c28
test byte [ecx + 0x1c], 1
je 0x467c28
cmp byte [ecx + 0x19], 2
jb 0x467c28
push 0x4ca3e4
push 0x24
push dword [ecx + 0x14]
push dword [ecx + 0x10]
call fcn.0041df22
add esp, 0x10
push 0xf
jmp 0x467b1f
lea ecx, [ebp - 0x1f8]
call fcn.00426c16
test al, al
je 0x467cc0
push 6
pop ebx
lea ecx, [ebp - 0x1f8]
call fcn.00426a56
mov eax, ebx
jmp 0x467d90
mov eax, dword [0x50b594]
cmp eax, 0x50b594
je 0x467d8d
test byte [eax + 0x1c], 1
je 0x467d8d
cmp byte [eax + 0x19], 2
jb 0x467d8d
push 0x4ca3e4
push 0x16
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0041df22
add esp, 0x10
push 5
pop eax
call fcn.004700f7
ret 0x20