Function at 0x46c650
Capabilities:
Check for time delay via queryperformancecounter

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4d15ac
mov eax, dword fs:[0]
push eax
sub esp, 0x2b0
mov eax, dword [0x509074]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x278], edi
mov eax, dword fs:[0x2c]
mov esi, dword [ebp + 8]
mov edx, dword [eax]
mov eax, dword [0x50c3e4]
cmp eax, dword [edx + 4]
jle 0x46c72b
push 0x50c3e4
call fcn.00496c4b
add esp, 4
cmp dword [0x50c3e4], 0xffffffff
jne 0x46c72b
mov dword [ebp - 4], 0
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
lea ecx, [edi + 0x18]
mov dword [0x50c3e8], 0x4e5630
xorps xmm0, xmm0
mov dword [0x50c3ec], 0
push 0x50c400
mov dword [0x50c3f0], ecx
mov dword [0x50c3f4], esi
mov dword [0x50c3f8], eax
mov dword [0x50c3fc], 0
movlpd qword [0x50c400], xmm0
call dword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
push 0x50c408
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov dword [ebp - 4], 0xffffffff
push 0x50c3e4
call fcn.00496bfa
add esp, 4
mov eax, dword [esi + 0x18]
cmp dword [eax - 0xc], 0
je 0x46ccc3
cmp dword [esi + 8], 0
je 0x46ccc3
mov eax, dword [esi]
cmp dword [eax - 0xc], 0
je 0x46ccc3
mov eax, dword [esi + 0x14]
cmp dword [eax - 0xc], 0
je 0x46ccc3
mov eax, dword [esi + 0x48]
cmp dword [eax - 0xc], 0
je 0x46ccc3
test eax, eax
jne 0x46c797
xor esi, esi
mov dword [ebp - 0x2a0], esi
mov dword [ebp - 4], 1
lea eax, [ebp - 0x258]
push eax
push esi
call dword [sym.imp.ole32.dll_CLSIDFromString]
test eax, eax
je 0x46c7b0
mov edi, 0xe0000007
jmp 0x46ccb1
push eax
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov esi, eax
mov dword [ebp - 0x2a0], esi
test esi, esi
je 0x46cce5
jmp 0x46c774
mov dword [ebp - 0x294], 0
mov byte [ebp - 4], 2
mov dword [ebp - 0x290], 0
mov dword [ebp - 0x28c], 0
mov dword [ebp - 0x288], 0
mov byte [ebp - 4], 4
lea eax, [ebp - 0x218]
push 0x104
push eax
push dword [0x50ae2c]
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov dword [ebp - 0x284], 0
mov byte [ebp - 4], 6
lea eax, [ebp - 0x284]
push eax
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.OLEAUT32.dll_LoadRegTypeLib]
mov edi, eax
mov dword [ebp - 0x274], edi
test edi, edi
js 0x46cb7d
mov eax, dword [ebp - 0x284]
mov dword [0x50c3ec], eax
lea eax, [ebp - 0x27c]
push eax
push 4
push 4
push 0x50c3e8
lea eax, [ebp - 0x258]
mov dword [ebp - 0x280], 0
push eax
mov dword [ebp - 0x27c], 0
call dword [sym.imp.ole32.dll_CoRegisterClassObject]
mov ecx, eax
mov dword [ebp - 0x274], ecx
test ecx, ecx
js 0x46cb7d
lea eax, [ebp - 0x280]
push eax
lea ecx, [ebp - 0x290]
call fcn.0040add0
mov eax, dword [ebp - 0x278]
cmp byte [eax + 0x174], 0
je 0x46caad
lea ecx, [ebp - 0x248]
call fcn.00421a70
mov byte [ebp - 4], 9
xorps xmm0, xmm0
push 0x18
push str.Updater_comproxystub.dll
lea ecx, [ebp - 0x230]
mov dword [ebp - 0x220], 0
movups xmmword [ebp - 0x230], xmm0
mov dword [ebp - 0x21c], 0
call fcn.00403c90
mov byte [ebp - 4], 0xa
lea eax, [ebp - 0x230]
push eax
lea ecx, [ebp - 0x248]
call fcn.00422200
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x230]
call fcn.00403e10
lea eax, [ebp - 0x270]
push eax
lea ecx, [ebp - 0x248]
call fcn.00421c60
mov edi, eax
mov byte [ebp - 4], 0xb
cmp dword [edi + 0x14], 8
jb 0x46c91f
mov edi, dword [edi]
call fcn.004043d0
mov ecx, eax
test ecx, ecx
je 0x46ccef
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x278], eax
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x278]
push edi
call fcn.00403470
test al, al
jne 0x46c97c
test edi, edi
jne 0x46c95a
xor ecx, ecx
jmp 0x46c96f
mov ecx, edi
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x46c960
sub ecx, edx
sar ecx, 1
push ecx
push edi
lea ecx, [ebp - 0x278]
call fcn.004035e0
mov byte [ebp - 4], 0xd
push 0x18
call fcn.00496f0e
add esp, 4
mov dword [ebp - 0x274], eax
mov byte [ebp - 4], 0xe
mov dword [eax], 0x4e2500
mov dword [eax + 4], 0
mov byte [ebp - 4], 0xf
lea edi, [eax + 8]
mov dword [ebp - 0x298], edi
mov eax, dword [ebp - 0x278]
add eax, 0xfffffff0
mov ecx, eax
mov dword [ebp - 0x27c], eax
call fcn.004025a0
add eax, 0x10
mov dword [edi], eax
mov byte [ebp - 4], 0x11
mov eax, dword [ebp - 0x274]
push dword [edi]
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov byte [eax + 0x14], 0
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov edi, dword [ebp - 0x274]
mov dword [ebp - 0x298], eax
mov ecx, dword [edi + 4]
cmp eax, ecx
je 0x46ca10
mov edx, dword [edi]
mov ecx, edi
call dword [edx + 4]
mov ecx, dword [ebp - 0x298]
mov dword [edi + 4], ecx
test ecx, ecx
je 0x46ca3e
push str.LocalRegisterProxyStub
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x46ca3e
lea ecx, [edi + 0xc]
push ecx
call eax
mov dword [edi + 0x10], eax
test eax, eax
js 0x46ca45
mov byte [edi + 0x14], 1
mov dword [edi + 4], 0
jmp 0x46ca45
mov dword [edi + 0x10], 0x80004005
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x294], edi
mov edi, dword [edi + 0x10]
mov dword [ebp - 0x274], edi
mov byte [ebp - 4], 0xb
or eax, 0xffffffff
mov edx, dword [ebp - 0x27c]
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x46ca77
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x270]
call fcn.00403e10
test edi, edi
jns 0x46ca9e
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x248]
call fcn.00403e10
jmp 0x46cb7d
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x248]
call fcn.00403e10
call dword [sym.imp.ole32.dll_CoResumeClassObjects]
mov dword [ebp - 0x274], eax
test eax, eax
js 0x46cb7d
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
push 1
push 0
push 0
push 0
lea eax, [ebp - 0x2bc]
push eax
call dword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x46cb00
cmp dword [ebp - 0x2b8], 0x12
je 0x46cb7d
lea eax, [ebp - 0x2bc]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageW]
push 0x64
call edi
jmp 0x46cac7
cmp dword [0x50c3fc], 0
jne 0x46cb6a
lea eax, [ebp - 0x280]
push eax
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov ecx, dword [ebp - 0x280]
sub ecx, dword [0x50c408]
mov edx, dword [ebp - 0x27c]
sbb edx, dword [0x50c40c]
call fcn.004bc3b0
mulsd xmm0, qword [0x4e9360]
mov edx, dword [0x50c404]
mov ecx, dword [0x50c400]
movsd qword [ebp - 0x29c], xmm0
call fcn.004bc3b0
movsd xmm1, qword [ebp - 0x29c]
divsd xmm1, xmm0
comisd xmm1, xmmword [0x4e9368]
ja 0x46cb73
push 0x64
call edi
jmp 0x46cac7
mov dword [ebp - 0x274], 0x80004004
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x284]
test eax, eax
je 0x46cb91
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x1d
xor edi, edi
mov eax, dword [ebp - 0x28c]
test eax, eax
jle 0x46cbe6
test edi, edi
js 0x46ccf9
cmp edi, eax
jge 0x46ccf9
mov ecx, dword [ebp - 0x290]
mov edx, dword [ecx + edi*8]
test edx, edx
jne 0x46cbca
push dword [ecx + edi*8 + 4]
call dword [sym.imp.ole32.dll_CoRevokeClassObject]
jmp 0x46cbdb
cmp edx, 1
jne 0x46cbe1
push 0
push dword [ecx + edi*8 + 4]
call dword [sym.imp.OLEAUT32.dll_GetActiveObject]
mov eax, dword [ebp - 0x28c]
inc edi
cmp edi, eax
jl 0x46cba1
mov byte [ebp - 4], 0x1c
mov eax, dword [ebp - 0x290]
test eax, eax
je 0x46cc07
push eax
call fcn.004a09b1
add esp, 4
mov dword [ebp - 0x290], 0
mov dword [ebp - 0x28c], 0
mov dword [ebp - 0x288], 0
mov byte [ebp - 4], 1
mov edi, dword [ebp - 0x294]
mov dword [ebp - 0x27c], edi
test edi, edi
je 0x46cca1
mov byte [ebp - 4], 0x1f
cmp dword [edi + 0x10], 0
jl 0x46cc4c
cmp byte [edi + 0x14], 0
je 0x46cc4c
push dword [edi + 0xc]
mov byte [edi + 0x14], 0
call dword [sym.imp.ole32.dll_CoRevokeClassObject]
mov byte [ebp - 4], 0x1e
lea eax, [edi + 8]
mov dword [ebp - 0x298], eax
mov byte [ebp - 4], 0x1e
mov edx, dword [eax]
or eax, 0xffffffff
sub edx, 0x10
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x46cc77
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 1
mov dword [edi], 0x4e2500
mov eax, dword [edi + 4]
test eax, eax
je 0x46cc96
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov dword [edi + 4], 0
push 0x18
push edi
call fcn.00496f00
add esp, 8
mov edi, dword [ebp - 0x274]
mov dword [ebp - 0x294], 0
mov dword [ebp - 4], 0xffffffff
push esi
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, edi
jmp 0x46ccc8
mov eax, 0xe0000007
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00496b9e
mov esp, ebp
pop ebp
ret 4
push 0x8007000e
call fcn.00402570
push 0x80004005
call fcn.00402570
push 0x8000000b
call fcn.00402570
int3