Function at 0x406230
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x56336e
mov eax, dword fs:[0]
push eax
sub esp, 0x26c
mov eax, dword [0x62f018]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ecx, 0x6355a1
call fcn.00561ea5
lea ecx, [ebp - 0x25c]
call fcn.0049a820
mov eax, dword [ebp - 0x258]
cmp eax, 6
jbe 0x406281
mov al, 1
jmp 0x406292
jne 0x406290
cmp dword [ebp - 0x254], 2
jb 0x406290
mov al, 1
jmp 0x406292
xor al, al
cmp dword [ebp + 8], 1
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
mov byte [0x632126], al
mov byte [0x632100], 0
jne 0x4062c6
call edi
movzx ecx, byte [0x632100]
cmp eax, 0x493e0
mov edx, 1
cmovb ecx, edx
mov byte [0x632100], cl
xorps xmm0, xmm0
movlpd qword [ebp - 0x28], xmm0
mov dword [ebp - 0x28], vtable.RC::DM::RCBreakpadServerAdpter::Delegate.0
mov dword [ebp - 4], 0
mov dword [ebp - 0x28], vtable.RC::RCCrashService.0
mov dword [ebp - 0x24], 0
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x28]
call fcn.00403180
test al, al
jne 0x40639b
cmp dword [0x6321a8], 0
je 0x40639b
push ecx
mov ecx, 0x6321a8
call fcn.004d1b40
mov eax, dword [0x6321a8]
cmp byte [eax + 0x54], 0
je 0x40639b
cmp dword [eax + 0x58], 2
jb 0x40639b
mov al, byte [eax + 0x5c]
lea ecx, [ebp - 0x40]
mov byte [ebp - 0x25d], al
call fcn.00403f80
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x40]
push 0xc
push 0x5c8470
call fcn.00404640
push 0x59
push str.RC::RCServiceImpl::RunService
push str.d:jenkinsworkspacepc_2345mpcsafe_build_rhinoprotect_rtpsystem_src_safecentersvc_rcserviceimpl.cpp
lea eax, [ebp - 0x40]
mov ecx, 0x6321a8
push eax
push 2
call fcn.004d2490
cmp byte [ebp - 0x25d], 0
je 0x406381
lea eax, [ebp - 0x40]
mov ecx, 0x6321a8
push eax
call fcn.004d27d0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x40]
call fcn.00404570
mov byte [ebp - 4], 2
lea eax, [ebp - 0x40]
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 2
mov eax, dword [0x632104]
test eax, eax
je 0x4063ab
push eax
call dword [sym.imp.KERNEL32.dll_ResetEvent]
mov ecx, 0x6320fc
call fcn.00531370
lea ecx, [ebp - 0x110]
call fcn.00405f60
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x20], 0
call fcn.004947d0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x20]
call fcn.004950c0
lea ecx, [ebp - 0x78]
call fcn.0040a7f0
mov esi, eax
mov byte [ebp - 4], 0xa
lea eax, [ebp - 0x110]
cmp eax, esi
je 0x406428
mov ecx, eax
call fcn.00404570
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [ebp - 0x110], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x100], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x78]
call fcn.00404570
mov byte [ebp - 4], 9
lea eax, [ebp - 0x78]
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x20]
call fcn.00495410
push 9
push str.ClickStat
lea ecx, [ebp - 0xf8]
call fcn.00404640
call fcn.0040abd0
lea esi, [eax + 8]
lea eax, [ebp - 0x110]
cmp esi, eax
je 0x40648a
cmp dword [ebp - 0xfc], 8
mov ecx, esi
push dword [ebp - 0x100]
cmovae eax, dword [ebp - 0x110]
push eax
call fcn.00404640
lea ecx, [esi + 0x18]
lea eax, [ebp - 0xf8]
cmp ecx, eax
je 0x4064b1
cmp dword [ebp - 0xe4], 8
push dword [ebp - 0xe8]
cmovae eax, dword [ebp - 0xf8]
push eax
call fcn.00404640
lea ecx, [esi + 0x30]
lea eax, [ebp - 0xe0]
cmp ecx, eax
je 0x4064d8
cmp dword [ebp - 0xcc], 8
push dword [ebp - 0xd0]
cmovae eax, dword [ebp - 0xe0]
push eax
call fcn.00404640
lea ecx, [esi + 0x48]
lea eax, [ebp - 0xc8]
cmp ecx, eax
je 0x4064ff
cmp dword [ebp - 0xb4], 8
push dword [ebp - 0xb8]
cmovae eax, dword [ebp - 0xc8]
push eax
call fcn.00404640
lea ecx, [esi + 0x60]
lea eax, [ebp - 0xb0]
cmp ecx, eax
je 0x406526
cmp dword [ebp - 0x9c], 8
push dword [ebp - 0xa0]
cmovae eax, dword [ebp - 0xb0]
push eax
call fcn.00404640
mov eax, dword [ebp - 0x98]
mov dword [esi + 0x78], eax
mov eax, dword [ebp - 0x94]
mov dword [esi + 0x7c], eax
mov eax, dword [ebp - 0x90]
mov dword [esi + 0x80], eax
mov eax, dword [ebp - 0x8c]
mov dword [esi + 0x84], eax
mov al, byte [ebp - 0x88]
mov byte [esi + 0x88], al
mov al, byte [ebp - 0x87]
mov byte [esi + 0x89], al
mov eax, dword [ebp - 0x80]
mov dword [esi + 0x90], eax
mov eax, dword [ebp - 0x7c]
push ecx
mov dword [esi + 0x94], eax
call fcn.0040abd0
mov ecx, eax
call fcn.0040ae90
xorps xmm0, xmm0
lea ecx, [ebp - 0x60]
movups xmmword [ebp - 0x60], xmm0
movups xmmword [ebp - 0x50], xmm0
call fcn.0049afb0
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x278]
push str.GlobalAE60A528_F81F_4665_B750_DA01929FDEF8
call fcn.00403ed0
mov byte [ebp - 4], 0x10
mov eax, dword [ebp - 0x60]
test eax, eax
je 0x4065c0
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x1c], 0
call fcn.004bccb0
mov byte [ebp - 4], 0x11
mov eax, dword [ebp - 0x1c]
cmp dword [eax], 0
je 0x4065e7
lea ecx, [eax + 8]
jmp 0x4065e9
xor ecx, ecx
cmp dword [ebp - 0x268], 0
jne 0x4065f6
xor eax, eax
jmp 0x40660a
cmp dword [ebp - 0x264], 8
lea eax, [ebp - 0x278]
cmovae eax, dword [ebp - 0x278]
push eax
push 0
push 1
push ecx
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x60], eax
test eax, eax
je 0x40662c
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
sete byte [ebp - 0x5c]
cmp dword [ebp - 0x264], 8
lea eax, [ebp - 0x278]
push dword [ebp - 0x268]
cmovae eax, dword [ebp - 0x278]
lea ecx, [ebp - 0x58]
push eax
call fcn.00404640
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x1c]
call fcn.004bcd90
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x278]
call fcn.00404570
mov byte [ebp - 4], 0xf
lea eax, [ebp - 0x278]
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 0xf
xor esi, esi
mov eax, dword [0x632104]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x14], eax
nop dword [eax + eax]
push 0x7d0
push 0
lea eax, [ebp - 0x18]
push eax
push 2
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
cmp eax, 1
jbe 0x406824
cmp eax, 0x102
jne 0x406824
call edi
test esi, esi
je 0x4066d2
cmp byte [0x632125], 0
je 0x4066d2
mov ecx, eax
sub ecx, esi
cmp ecx, 0xdbba0
jb 0x40674e
push 0x5c861c
lea ecx, [ebp - 0x128]
mov esi, eax
call fcn.00403ed0
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x40]
push str.2345RTProtect.exe
call fcn.00403ed0
mov byte [ebp - 4], 0x18
lea eax, [ebp - 0x128]
push eax
lea eax, [ebp - 0x40]
push eax
call fcn.004058b0
test al, al
jne 0x406711
xor esi, esi
jmp 0x406718
mov byte [0x632125], 1
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x40]
call fcn.00404570
mov byte [ebp - 4], 0x16
lea eax, [ebp - 0x40]
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x128]
call fcn.00404570
mov byte [ebp - 4], 0xf
lea eax, [ebp - 0x128]
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 0xf
mov eax, dword [0x63267c]
test al, 1
jne 0x40676e
or eax, 1
mov dword [0x63267c], eax
mov byte [ebp - 4], 0x21
call edi
mov dword [0x632680], eax
mov byte [ebp - 4], 0xf
call edi
cmp byte [0x62f794], 0
mov edx, eax
mov edi, dword [0x632680]
mov ecx, 0x36ee80
mov eax, 0x493e0
cmovne ecx, eax
cmp edx, edi
jbe 0x406814
mov eax, edx
sub eax, edi
cmp eax, ecx
jb 0x406814
push str.__typerepairfiles___targetnormally
lea ecx, [ebp - 0x78]
mov dword [0x632680], edx
mov byte [0x62f794], 0
call fcn.00403ed0
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x140]
push str.2345SafeCenterInstaller.exe
call fcn.00403ed0
mov byte [ebp - 4], 0x24
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x140]
push eax
call fcn.004058b0
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x140]
call fcn.00404570
mov byte [ebp - 4], 0x22
lea eax, [ebp - 0x140]
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x78]
call fcn.00404570
mov byte [ebp - 4], 0xf
lea eax, [ebp - 0x78]
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 0xf
call fcn.00406d80
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0x406690
mov eax, dword [ebp - 0x60]
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
je 0x40683b
push eax
call edi
mov dword [ebp - 0x60], 0
mov eax, dword [ebp - 0x24]
test eax, eax
je 0x4068ff
lea esi, [eax + 4]
mov ecx, esi
call fcn.00419e80
test al, al
je 0x406862
push 0
mov ecx, esi
call fcn.00419e20
jmp 0x4068ff
cmp dword [0x6321a8], 0
je 0x4068ff
push ecx
mov ecx, 0x6321a8
call fcn.004d1b40
mov eax, dword [0x6321a8]
cmp byte [eax + 0x54], 0
je 0x4068ff
cmp dword [eax + 0x58], 2
jb 0x4068ff
mov al, byte [eax + 0x5c]
lea ecx, [ebp - 0x40]
mov byte [ebp - 0x25d], al
call fcn.00403f80
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x40]
push 0xc
push str.Pbkb
call fcn.00404640
push 0x9d
push str.RC::RCServiceImpl::RunService
push str.d:jenkinsworkspacepc_2345mpcsafe_build_rhinoprotect_rtpsystem_src_safecentersvc_rcserviceimpl.cpp
lea eax, [ebp - 0x40]
mov ecx, 0x6321a8
push eax
push 2
call fcn.004d2490
cmp byte [ebp - 0x25d], 0
je 0x4068e5
lea eax, [ebp - 0x40]
mov ecx, 0x6321a8
push eax
call fcn.004d27d0
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x40]
call fcn.00404570
mov byte [ebp - 4], 0xf
lea eax, [ebp - 0x40]
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 0xf
mov byte [ebp - 4], 0x33
mov eax, dword [ebp - 0x60]
test eax, eax
je 0x406914
push eax
call edi
mov dword [ebp - 0x60], 0
mov byte [ebp - 4], 0x32
lea eax, [ebp - 0x58]
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 0x34
mov ecx, eax
call fcn.00404570
mov byte [ebp - 4], 0x32
lea eax, [ebp - 0x58]
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x20]
call fcn.00494890
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x110]
call fcn.004069b0
mov dword [ebp - 4], 0x38
mov esi, dword [ebp - 0x24]
test esi, esi
je 0x40696e
mov ecx, esi
call fcn.00419ac0
push 8
push esi
call fcn.0052f594
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov al, 1
mov dword [ebp - 0x28], vtable.RC::DM::RCBreakpadServerAdpter::Delegate.0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0052f553
mov esp, ebp
pop ebp
ret 8