Function at 0x404410
Capabilities:
Check for time delay via gettickcount

Disassembly:
sub esp, 0x18
push ebx
push ebp
push esi
mov esi, eax
mov eax, dword [0x43d4c4]
mov edx, dword [eax + 0xc]
xor ebx, ebx
push edi
mov ecx, 0x43d4c4
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x18], ebx
call edx
mov edi, eax
mov eax, dword [esp + 0x2c]
mov eax, dword [eax + 0x64]
add edi, 0x10
mov dword [esp + 0x10], edi
mov dword [esp + 0x14], ebx
lea ebp, [ebx + 1]
cmp eax, ebx
je 0x404490
mov ecx, dword [esi]
cmp dword [ecx - 0xc], ebx
jl 0x404490
push eax
push ecx
call fcn.0041d228
add esp, 8
cmp eax, ebx
je 0x404490
sub eax, dword [esi]
sar eax, 1
js 0x404490
lea eax, [edi - 0x10]
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x404484
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x18
ret 4
mov eax, dword [esi]
cmp dword [eax - 0xc], ebx
jl 0x404616
push str.www.sogou.com
push eax
call fcn.0041d228
add esp, 8
cmp eax, ebx
je 0x404616
mov ecx, dword [esi]
sub eax, ecx
sar eax, 1
cmp eax, ebx
jle 0x404616
cmp dword [ecx - 0xc], ebx
jl 0x404616
push 0x43450c
push ecx
call fcn.0041d228
add esp, 8
cmp eax, ebx
je 0x404616
mov ecx, dword [esi]
sub eax, ecx
sar eax, 1
cmp eax, ebx
jle 0x404616
cmp dword [ecx - 0xc], ebx
jl 0x40450d
push str.pid
push ecx
call fcn.0041d228
add esp, 8
cmp eax, ebx
je 0x40450d
sub eax, dword [esi]
sar eax, 1
jns 0x404616
mov ecx, dword [esp + 0x2c]
mov edx, dword [ecx + 0x68]
mov eax, dword [edx - 0xc]
add ecx, 0x68
cmp eax, ebx
jle 0x404542
push ecx
add eax, 0xfffffffc
lea ecx, [esp + 0x24]
mov dword [esp + 0x20], ebp
call fcn.00409eb0
mov eax, dword [eax]
xor ecx, ecx
mov edx, eax
call fcn.00409d80
test eax, eax
jg 0x404616
xor ecx, ecx
mov edx, str.pidaf71006
call fcn.00409d80
test eax, eax
jge 0x404616
xor ecx, ecx
mov edx, str.pidaf71034
call fcn.00409d80
test eax, eax
jge 0x404616
xor ecx, ecx
mov edx, str.sogou_netb_cbf8710b43df3f2c
call fcn.00409d80
test eax, eax
jge 0x404616
xor ecx, ecx
mov edx, str.sogou_netb_d210cf373cf002a0
call fcn.00409d80
test eax, eax
jge 0x404616
xor ecx, ecx
mov edx, str.pidaf71027
call fcn.00409d80
test eax, eax
jge 0x404616
xor ecx, ecx
mov edx, str.pidaf71061
call fcn.00409d80
test eax, eax
jge 0x404616
xor ecx, ecx
mov edx, str.pidaf71042
call fcn.00409d80
test eax, eax
jge 0x404616
xor ecx, ecx
mov edx, str.pid_3daf71006
call fcn.00409d80
test eax, eax
jge 0x404616
xor ecx, ecx
mov edx, str.pid_3daf71034
call fcn.00409d80
test eax, eax
jge 0x404616
xor ecx, ecx
mov edx, str.pid_3daf71027
call fcn.00409d80
test eax, eax
jge 0x404616
xor ecx, ecx
mov edx, str.pid_3daf71042
call fcn.00409d80
test eax, eax
jge 0x404616
xor ecx, ecx
mov edx, str.pid_3daf71061
call fcn.00409d80
test eax, eax
jge 0x404616
mov bl, 1
jmp 0x404618
xor bl, bl
test byte [esp + 0x1c], 1
je 0x40463f
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40463f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
test bl, bl
je 0x40475a
mov ebp, dword [esp + 0x2c]
cmp dword [ebp + 0x74], 0x64
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
jle 0x404695
call ebx
sub eax, dword [ebp + 0x78]
cmp eax, 0x1f4
jae 0x404695
lea eax, [edi - 0x10]
mov dword [ebp + 0x74], 0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x404686
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
pop edi
pop esi
pop ebp
mov eax, 2
pop ebx
add esp, 0x18
ret 4
inc dword [ebp + 0x74]
mov eax, dword [esi]
cmp dword [eax - 0xc], 0
jl 0x40472a
push 0x43450c
push eax
call fcn.0041d228
add esp, 8
test eax, eax
je 0x40472a
mov ecx, dword [esi]
sub eax, ecx
sar eax, 1
mov ebp, eax
test ebp, ebp
jle 0x404726
lea eax, [ebp + 3]
test eax, eax
jl 0x4046dc
cmp eax, dword [ecx - 0xc]
jge 0x4046dc
lea ecx, [ecx + eax*2]
push 0x26
push ecx
call fcn.0041d7c2
add esp, 8
push esi
xor eax, eax
mov ecx, ebp
lea edx, [esp + 0x24]
call fcn.00409e10
lea edi, [esp + 0x10]
call fcn.0040d0f0
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x404713
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x2c]
mov edx, dword [ecx + 0x68]
mov edi, dword [esp + 0x10]
push edx
push edi
push esi
call fcn.00409b40
mov ebp, dword [esp + 0x2c]
call ebx
mov dword [ebp + 0x78], eax
lea eax, [edi - 0x10]
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40474b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x18
ret 4
mov ebx, dword [esp + 0x2c]
mov ecx, dword [ebx + 0x60]
mov eax, dword [ecx - 0xc]
add ebx, 0x60
mov dword [esp + 0x1c], eax
test eax, eax
jle 0x404928
mov edx, dword [esi]
cmp dword [edx - 0xc], 0
jle 0x404928
nop
cmp ebp, dword [esp + 0x1c]
jge 0x404868
test ebp, ebp
jl 0x404868
mov eax, dword [ebx]
cmp ebp, dword [eax - 0xc]
jge 0x404868
lea eax, [eax + ebp*2]
push 0x40
push eax
call fcn.0041d7c2
add esp, 8
test eax, eax
je 0x404868
sub eax, dword [ebx]
sar eax, 1
mov ebp, eax
cmp ebp, 1
jle 0x404868
mov ecx, dword [esp + 0x14]
sub eax, ecx
push ebx
lea edx, [esp + 0x24]
call fcn.00409e10
lea edi, [esp + 0x10]
call fcn.0040d0f0
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4047fb
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov edi, dword [esp + 0x10]
mov eax, dword [edi - 8]
push eax
push edi
call fcn.0041ce04
add esp, 8
test eax, eax
jl 0x4049b2
cmp eax, dword [edi - 8]
jg 0x4049b2
mov dword [edi - 0xc], eax
xor ecx, ecx
mov word [edi + eax*2], cx
mov eax, dword [esi]
cmp dword [eax - 0xc], ecx
jl 0x40485b
push edi
push eax
call fcn.0041d228
add esp, 8
test eax, eax
je 0x40485b
sub eax, dword [esi]
sar eax, 1
js 0x40485b
lea edx, [esp + 0x10]
push edx
mov ecx, 0x435008
call fcn.0040a0e0
add esp, 4
test al, al
jne 0x404952
inc ebp
mov dword [esp + 0x14], ebp
test ebp, ebp
jg 0x404780
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x1c]
cmp ecx, eax
jge 0x404928
sub eax, ecx
dec eax
push ebx
lea edx, [esp + 0x24]
call fcn.00409e10
lea edi, [esp + 0x10]
call fcn.0040d0f0
lea eax, [esp + 0x20]
call fcn.00409a00
mov edi, dword [esp + 0x10]
mov eax, dword [edi - 8]
push eax
push edi
call fcn.0041ce04
add esp, 8
test eax, eax
jl 0x4049b2
cmp eax, dword [edi - 8]
jg 0x4049b2
xor edx, edx
mov dword [edi - 0xc], eax
mov word [edi + eax*2], dx
xor ecx, ecx
mov edx, edi
call fcn.00409d80
test eax, eax
jl 0x404928
lea eax, [esp + 0x10]
push eax
mov ecx, 0x435008
call fcn.0040a0e0
add esp, 4
test al, al
je 0x404928
mov esi, dword [esp + 0x2c]
cmp dword [esi + 0x74], 0x64
jle 0x4048ff
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [esi + 0x78]
cmp eax, 0x1f4
jb 0x40496c
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [esi + 4]
mov edx, dword [esi + 0x5c]
push 0x4346a8
push ecx
push 0x8003
push edx
mov dword [esi + 0x78], eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [esp + 0x18], 2
lea eax, [edi - 0x10]
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x404944
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x18]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x18
ret 4
mov ebp, dword [esp + 0x2c]
cmp dword [ebp + 0x74], 0x64
jle 0x404984
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [ebp + 0x78]
cmp eax, 0x1f4
jae 0x404984
lea eax, [esp + 0x10]
call fcn.00409a00
pop edi
pop esi
pop ebp
mov eax, 2
pop ebx
add esp, 0x18
ret 4
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebp + 0x5c]
push str.dk_k
mov dword [ebp + 0x78], eax
mov eax, dword [ebp + 4]
push eax
push 0x8003
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [esp + 0x18], 2
jmp 0x404868
push 0x80070057
call fcn.00401730
int3