Function at 0x140012530
Capabilities:
Check for time delay via gettickcount

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2f0]
sub rsp, 0x3f0
mov rax, qword [0x14031a940]
xor rax, rsp
mov qword [rbp + 0x2e0], rax
mov rsi, rdx
mov r15, rcx
xor r12d, r12d
xorps xmm0, xmm0
movups xmmword [rbp + 0x228], xmm0
movdqa xmm1, xmmword [0x1402d3570]
movdqu xmmword [rbp + 0x238], xmm1
mov word [rbp + 0x228], r12w
mov byte [rbp + 0x220], r12b
lea rdx, str.srl::System::SetConfiguration
lea rcx, [rbp + 0x228]
call fcn.140018440
nop
call fcn.1400210a0
cmp dword [rax + 8], 4
jl 0x1400125bd
lea rcx, [rbp + 0x220]
call fcn.1400162a0
call fcn.1400210a0
cmp dword [rax + 8], 3
jl 0x140012c3b
call fcn.1400210a0
mov rdi, rax
lea rcx, [rbp - 0x60]
call fcn.1400194c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x200], xmm0
mov qword [rbp + 0x210], r12
mov qword [rbp + 0x218], 7
mov word [rbp + 0x200], r12w
lea rdx, str.TRACE
lea rcx, [rbp + 0x200]
call fcn.140018440
xorps xmm0, xmm0
movups xmmword [rbp + 0x1a0], xmm0
mov rdx, r12
mov qword [rbp + 0x1b0], rdx
mov r8d, 7
mov qword [rbp + 0x1b8], r8
mov word [rbp + 0x1a0], r12w
mov ebx, r12d
cmp dword [rdi + 0x10], ebx
jle 0x1400126b7
cmp ebx, 0xa
jge 0x1400126b7
mov rax, r8
sub rax, rdx
lea rcx, [rbp + 0x1a0]
cmp rax, 2
jb 0x140012686
lea rax, [rdx + 2]
mov qword [rbp + 0x1b0], rax
cmp r8, 8
cmovae rcx, qword [rbp + 0x1a0]
mov eax, dword [0x1402cca30]
mov dword [rcx + rdx*2], eax
mov word [rcx + rdx*2 + 4], r12w
jmp 0x1400126a0
mov qword [rsp + 0x20], 2
lea r9, [0x1402cca30]
mov edx, 2
call fcn.140022090
inc ebx
cmp ebx, dword [rdi + 0x10]
jge 0x1400126b7
mov r8, qword [rbp + 0x1b8]
mov rdx, qword [rbp + 0x1b0]
jmp 0x140012646
xorps xmm0, xmm0
movups xmmword [rbp + 0x1e0], xmm0
mov qword [rbp + 0x1f0], r12
mov qword [rbp + 0x1f8], 7
mov word [rbp + 0x1e0], r12w
movups xmmword [rbp + 0x1c0], xmm0
mov qword [rbp + 0x1d0], r12
mov qword [rbp + 0x1d8], 7
mov word [rbp + 0x1c0], r12w
call fcn.140230f0c
mov edx, VariantTimeToDosDateTime
lea rcx, [rbp + 0x2c8]
call fcn.14023105c
lea rdx, [rbp + 0x2c8]
lea rcx, [rbp + 0x1e0]
call fcn.140018440
lea rcx, [rbp + 0xa0]
call fcn.1400194c0
nop
cmp dword [rdi + 0x14], 0
jne 0x140012751
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [rdi + 0x14], eax
xor edx, edx
lea rcx, [rbp + 0xb0]
call fcn.140012fa0
jmp 0x140012776
call qword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [rdi + 0x14]
xorps xmm1, xmm1
cvtsi2sd xmm1, rax
divsd xmm1, qword [0x1402d3520]
lea rcx, [rbp + 0xb0]
call fcn.140021a80
lea rdx, [rbp + 0x248]
lea rcx, [rbp + 0xb8]
call fcn.14001a0c0
nop
mov rdx, qword [rbp + 0x1d8]
cmp rdx, 8
jb 0x1400127d0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400127cb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140012ee5
call fcn.140004144
movups xmm0, xmmword [rbp + 0x248]
movups xmmword [rbp + 0x1c0], xmm0
movups xmm1, xmmword [rbp + 0x258]
movups xmmword [rbp + 0x1d0], xmm1
movdqa xmm0, xmmword [0x1402d3570]
movdqu xmmword [rbp + 0x258], xmm0
mov word [rbp + 0x248], r12w
lea rcx, [rbp + 0xa0]
call fcn.1400193b0
mov edx, reloc.OLEAUT32.dll_SafeArrayGetDim
lea rcx, [rsp + 0x40]
call fcn.140222c18
mov rbx, rax
mov edx, 0x2040
lea rcx, [rsp + 0x50]
call fcn.140222c18
mov rcx, qword [rbp - 0x50]
movsxd rdx, dword [rcx + 4]
lea rcx, [rbp - 0x50]
add rcx, rdx
mov edx, dword [rax + 8]
call qword [rax]
lea rdx, [rbp + 0x1e0]
cmp qword [rbp + 0x1f8], 8
cmovae rdx, qword [rbp + 0x1e0]
mov r8, qword [rbp + 0x1f0]
lea rcx, [rbp - 0x50]
call fcn.140016ce0
lea rdx, [0x1402cc568]
mov rcx, rax
call fcn.140016a20
mov rdi, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov edx, dword [rbx + 8]
call qword [rbx]
mov edx, 6
lea rcx, [rsp + 0x60]
call fcn.140222c40
mov rcx, qword [rdi]
movsxd rcx, dword [rcx + 4]
add rcx, rdi
mov rdx, qword [rax + 8]
call qword [rax]
mov rax, qword [rdi]
movsxd rcx, dword [rax + 4]
mov word [rcx + rdi + 0x58], 0x30
mov edx, 3
lea rcx, [rsp + 0x70]
call fcn.140222c2c
mov rcx, qword [rdi]
movsxd rcx, dword [rcx + 4]
add rcx, rdi
mov rdx, qword [rax + 8]
call qword [rax]
lea rdx, [rbp + 0x1c0]
cmp qword [rbp + 0x1d8], 8
cmovae rdx, qword [rbp + 0x1c0]
mov r8, qword [rbp + 0x1d0]
mov rcx, rdi
call fcn.140016ce0
mov rbx, rax
mov edx, 5
lea rcx, [rbp - 0x80]
call fcn.140222c40
mov rdi, rax
lea rdx, [0x1402cc568]
mov rcx, rbx
call fcn.140016a20
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov rdx, qword [rdi + 8]
call qword [rdi]
mov rcx, qword [rbx]
movsxd rdx, dword [rcx + 4]
mov word [rdx + rbx + 0x58], 0x20
mov edx, 0x40
lea rcx, [rbp - 0x70]
call fcn.140222c18
mov rcx, qword [rbx]
movsxd rcx, dword [rcx + 4]
add rcx, rbx
mov edx, dword [rax + 8]
call qword [rax]
lea rdx, [rbp + 0x200]
cmp qword [rbp + 0x218], 8
cmovae rdx, qword [rbp + 0x200]
mov r8, qword [rbp + 0x210]
mov rcx, rbx
call fcn.140016ce0
lea rbx, [rbp + 0x1a0]
cmp qword [rbp + 0x1b8], 8
cmovae rbx, qword [rbp + 0x1a0]
lea rdx, [0x1402cca80]
mov rcx, rax
call fcn.140016a20
mov rcx, rax
mov rdx, rbx
call fcn.140016a20
mov edx, 4
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x14032a09c], eax
jg 0x140012eeb
lea rdx, [rbp + 0x268]
lea rcx, [rbp - 0x48]
call fcn.14001a0c0
nop
mov rdx, qword [reloc.OLEAUT32.dll_VariantInit]
cmp rdx, 8
jb 0x140012a2e
lea rdx, [rdx*2 + 2]
mov rcx, qword [0x14031b5e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140012a29
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140012f43
call fcn.140004144
movups xmm0, xmmword [rbp + 0x268]
movups xmmword [0x14031b5e0], xmm0
movups xmm1, xmmword [rbp + 0x278]
movups xmmword [0x14031b5f0], xmm1
movdqa xmm0, xmmword [0x1402d3570]
movdqu xmmword [rbp + 0x278], xmm0
mov word [rbp + 0x268], r12w
mov rdx, qword [rbp + 0x1d8]
cmp rdx, 8
jb 0x140012aa8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140012aa3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140012f49
call fcn.140004144
mov qword [rbp + 0x1d0], r12
mov qword [rbp + 0x1d8], 7
mov word [rbp + 0x1c0], r12w
mov rdx, qword [rbp + 0x1f8]
cmp rdx, 8
jb 0x140012b08
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140012b03
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140012f4f
call fcn.140004144
mov qword [rbp + 0x1f0], r12
mov qword [rbp + 0x1f8], 7
mov word [rbp + 0x1e0], r12w
mov rdx, qword [rbp + 0x1b8]
cmp rdx, 8
jb 0x140012b68
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140012b63
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140012f55
call fcn.140004144
mov qword [rbp + 0x1b0], r12
mov qword [rbp + 0x1b8], 7
mov word [rbp + 0x1a0], r12w
mov rdx, qword [rbp + 0x218]
cmp rdx, 8
jb 0x140012bc8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x200]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140012bc3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140012f5b
call fcn.140004144
mov qword [rbp + 0x210], r12
mov qword [rbp + 0x218], 7
mov word [rbp + 0x200], r12w
lea rcx, [rbp - 0x60]
call fcn.1400193b0
call fcn.1400210a0
lea rdx, [0x14031b5e0]
cmp qword [reloc.OLEAUT32.dll_VariantInit], 8
cmovae rdx, qword [0x14031b5e0]
mov r8, qword [0x14031b5f0]
mov rcx, rax
call fcn.140016ce0
lea rdx, str.config
mov rcx, rax
call fcn.140015360
mov rbx, rax
mov rdx, qword [rsi]
mov rcx, rax
call fcn.140016a20
mov rcx, rbx
call fcn.140017c00
mov rax, qword [rsi]
cmp dword [rax - 0x10], 0
je 0x140012ea4
call fcn.140010254
mov rcx, rax
test rax, rax
je 0x140012f61
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x30], rax
lea r9, [rsp + 0x30]
lea r8, str.__ReferrerID_
lea rdx, str._ReferrerID_
mov rcx, rsi
call fcn.140011510
mov edi, 0xffffffff
test al, al
je 0x140012ce8
mov rdx, qword [rsp + 0x30]
lea rcx, [rdx - 0x18]
mov rbx, qword [r15 + 0x18]
sub rbx, 0x18
cmp rcx, rbx
je 0x140012ce8
cmp dword [rbx + 0x10], 0
jl 0x140012cdb
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x140012cdb
call fcn.140002c5c
mov r13, rax
mov ecx, edi
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x140012cd1
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [r13 + 0x18]
mov qword [r15 + 0x18], rax
jmp 0x140012ce8
mov r8d, dword [rdx - 0x10]
lea rcx, [r15 + 0x18]
call fcn.140002a9c
lea r9, [rsp + 0x30]
lea r8, str.__DetectionIDs_
lea rdx, str._DetectionIDs_
mov rcx, rsi
call fcn.140011510
test al, al
je 0x140012de4
mov rdx, qword [rsp + 0x30]
lea rcx, [rbp + 0x2a8]
call fcn.14000953c
mov rbx, rax
mov rdx, qword [r15 + 0x18]
lea rcx, [rbp + 0x288]
call fcn.14000953c
nop
lea rcx, [r15 + 0x48]
mov r8, rbx
mov rdx, rax
call fcn.14001c070
nop
mov rdx, qword [rbp + 0x2a0]
cmp rdx, 8
jb 0x140012d86
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x288]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140012d81
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140012f6c
call fcn.140004144
movdqa xmm0, xmmword [0x1402d3570]
movdqu xmmword [rbp + 0x298], xmm0
mov word [rbp + 0x288], r12w
mov rdx, qword [rbp + 0x2c0]
cmp rdx, 8
jb 0x140012de4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x2a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140012ddf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140012f72
call fcn.140004144
lea r9, [rsp + 0x30]
lea r8, str.__ApplicationID_
lea rdx, str._ApplicationID_
mov rcx, rsi
call fcn.140011510
test al, al
je 0x140012e19
lea r8, [rsp + 0x30]
mov edx, 0x116ff
lea rcx, [r15 + 0xa8]
call fcn.14001ec90
call fcn.140010254
mov rcx, rax
test rax, rax
je 0x140012eda
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x38], rax
lea r9, [rsp + 0x38]
lea r8, str.__SystemInfo_
lea rdx, str._SystemInfo_
mov rcx, rsi
call fcn.140011510
mov rbx, qword [rsp + 0x38]
test al, al
je 0x140012e6d
mov rdx, rbx
lea rcx, [r15 + 0xa8]
call fcn.14001f2c0
nop
lea rdx, [rbx - 0x18]
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140012e87
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x30]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], edi
sub edi, 1
jg 0x140012ea4
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rbp + 0x220]
call fcn.140017c90
mov rcx, qword [rbp + 0x2e0]
xor rcx, rsp
call fcn.1402202b0
mov rbx, qword [rsp + 0x440]
add rsp, 0x3f0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov ecx, 0x80004005
call fcn.140002d6c
nop
call fcn.1402295a4
nop
lea rcx, [0x14032a09c]
call fcn.1402205f4
cmp dword [0x14032a09c], 0xffffffff
jne 0x1400129d7
xorps xmm0, xmm0
movups xmmword [0x14031b5e0], xmm0
movdqa xmm1, xmmword [0x1402d3570]
movdqu xmmword [0x14031b5f0], xmm1
mov word [0x14031b5e0], r12w
lea rcx, [0x14026e440]
call fcn.140220508
lea rcx, [0x14032a09c]
call fcn.140220588
jmp 0x1400129d7
call fcn.1402295a4
nop
call fcn.1402295a4
nop
call fcn.1402295a4
nop
call fcn.1402295a4
nop
call fcn.1402295a4
nop
mov ecx, 0x80004005
call fcn.140002d6c
nop
call fcn.1402295a4
nop
call fcn.1402295a4
int3