Function at 0x570ad0
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x58aa1c
mov eax, dword fs:[0]
push eax
sub esp, 0x7b8
mov eax, dword [0x5ed130]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x770], ecx
mov eax, dword [ebp - 0x770]
cmp dword [eax + 0x428], 0
je 0x571904
push 0xe4
push 0
lea ecx, [ebp - 0xfc]
push ecx
call fcn.0043fa10
add esp, 0xc
lea edx, [ebp - 0xfc]
push edx
mov eax, dword [ebp - 0x770]
mov ecx, dword [eax + 0x428]
call ecx
movzx edx, al
test edx, edx
je 0x571904
lea eax, [ebp - 0xf8]
push eax
call fcn.0043f980
add esp, 4
mov dword [ebp - 0x108], eax
mov ecx, dword [ebp - 0xfc]
mov dword [ebp - 0x774], ecx
cmp dword [ebp - 0x774], 0xd693ab71
ja 0x570b91
cmp dword [ebp - 0x774], 0xd693ab71
je 0x570bab
cmp dword [ebp - 0x774], 0xd693a7ee
je 0x570bab
jmp 0x570bad
cmp dword [ebp - 0x774], 0xd693bef5
jb 0x570bad
cmp dword [ebp - 0x774], 0xd693bef8
jbe 0x570bab
jmp 0x570bad
jmp 0x570bbb
cmp dword [ebp - 0x108], 4
jge 0x570bbb
jmp 0x571904
mov edx, dword [ebp - 0xfc]
mov dword [ebp - 0x778], edx
cmp dword [ebp - 0x778], 0xd693b725
ja 0x570c6d
cmp dword [ebp - 0x778], 0xd693b725
je 0x570efc
cmp dword [ebp - 0x778], 0xd693b340
ja 0x570c38
cmp dword [ebp - 0x778], 0xd693b340
je 0x57113a
cmp dword [ebp - 0x778], 0xd693a7ea
je 0x570cf3
cmp dword [ebp - 0x778], 0xd693a7ee
je 0x5710f3
cmp dword [ebp - 0x778], 0xd693ab70
je 0x5710cd
jmp 0x571321
cmp dword [ebp - 0x778], 0xd693b345
je 0x57119a
cmp dword [ebp - 0x778], 0xd693b346
je 0x570ec8
cmp dword [ebp - 0x778], 0xd693b34a
je 0x57117d
jmp 0x571321
cmp dword [ebp - 0x778], 0xd693c2e2
ja 0x570cbe
cmp dword [ebp - 0x778], 0xd693c2e2
je 0x571168
cmp dword [ebp - 0x778], 0xd693b726
je 0x57119a
cmp dword [ebp - 0x778], 0xd693bef8
je 0x5712fb
cmp dword [ebp - 0x778], 0xd693c2e0
je 0x57119a
jmp 0x571321
cmp dword [ebp - 0x778], 0xd693c2e7
je 0x5712c7
cmp dword [ebp - 0x778], 0xd693c2ea
je 0x5712e1
cmp dword [ebp - 0x778], 0xd693c2ec
je 0x570efc
jmp 0x571321
lea eax, [ebp - 0xf8]
push eax
lea ecx, [ebp - 0x17c]
call fcn.00401580
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x17c]
push ecx
lea edx, [ebp - 0x184]
push edx
mov ecx, dword [ebp - 0x770]
add ecx, 0x88
call fcn.0041cbe0
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [ebp - 0x134], ecx
mov dword [ebp - 0x130], edx
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x17c]
call fcn.00401600
lea eax, [ebp - 0x18c]
push eax
mov ecx, dword [ebp - 0x770]
add ecx, 0x88
call fcn.0041d820
push eax
lea ecx, [ebp - 0x134]
call fcn.0041eaa0
movzx ecx, al
test ecx, ecx
je 0x570da3
lea ecx, [ebp - 0x134]
call fcn.0041e980
add eax, 0x1c
mov ecx, eax
call fcn.00401700
push eax
lea edx, [ebp - 0xd8]
push edx
call fcn.00441010
add esp, 8
jmp 0x570ec3
mov ecx, dword [ebp - 0x770]
add ecx, 0x24c
call fcn.00401720
movzx eax, al
test eax, eax
jne 0x570ec3
mov ecx, dword [ebp - 0x770]
add ecx, 0x24c
call fcn.00401700
push eax
lea ecx, [ebp - 0xd8]
push ecx
call fcn.00441010
add esp, 8
mov ecx, dword [ebp - 0x770]
add ecx, 0x24c
call fcn.004016a0
lea edx, [ebp - 0xd8]
push edx
lea ecx, [ebp - 0x218]
call fcn.00401580
mov dword [ebp - 4], 1
lea eax, [ebp - 0xf8]
push eax
lea ecx, [ebp - 0x234]
call fcn.00401580
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x218]
push ecx
lea edx, [ebp - 0x234]
push edx
lea ecx, [ebp - 0x1fc]
call fcn.0040b2d0
mov dword [ebp - 0x77c], eax
mov eax, dword [ebp - 0x77c]
mov dword [ebp - 0x780], eax
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x780]
push ecx
lea ecx, [ebp - 0x1c4]
call fcn.0040ceb0
mov byte [ebp - 4], 4
lea edx, [ebp - 0x1c4]
push edx
lea eax, [ebp - 0x240]
push eax
mov ecx, dword [ebp - 0x770]
add ecx, 0x88
call fcn.0040b0a0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x1c4]
call fcn.0040af30
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1fc]
call fcn.0040af30
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x234]
call fcn.00401600
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x218]
call fcn.00401600
jmp 0x571321
push 0x40
lea ecx, [ebp - 0xf8]
push ecx
call fcn.00406640
add esp, 8
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0
jne 0x570efc
push str._qq.com
lea edx, [ebp - 0xf8]
push edx
call fcn.00441020
add esp, 8
push 0x40
lea eax, [ebp - 0xf8]
push eax
call fcn.00406640
add esp, 8
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0
je 0x570f25
mov ecx, dword [ebp - 0x13c]
mov byte [ecx], 0
movsx edx, byte [ebp - 0xd8]
test edx, edx
je 0x57100b
lea eax, [ebp - 0xd8]
push eax
lea ecx, [ebp - 0x2cc]
call fcn.00401580
mov dword [ebp - 4], 5
lea ecx, [ebp - 0xf8]
push ecx
lea ecx, [ebp - 0x2e8]
call fcn.00401580
mov byte [ebp - 4], 6
lea edx, [ebp - 0x2cc]
push edx
lea eax, [ebp - 0x2e8]
push eax
lea ecx, [ebp - 0x2b0]
call fcn.0040b2d0
mov dword [ebp - 0x784], eax
mov ecx, dword [ebp - 0x784]
mov dword [ebp - 0x788], ecx
mov byte [ebp - 4], 7
mov edx, dword [ebp - 0x788]
push edx
lea ecx, [ebp - 0x278]
call fcn.0040ceb0
mov byte [ebp - 4], 8
lea eax, [ebp - 0x278]
push eax
lea ecx, [ebp - 0x2f4]
push ecx
mov ecx, dword [ebp - 0x770]
add ecx, 0x88
call fcn.0040b0a0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x278]
call fcn.0040af30
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x2b0]
call fcn.0040af30
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x2e8]
call fcn.00401600
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2cc]
call fcn.00401600
jmp 0x5710b6
lea edx, [ebp - 0xf8]
push edx
lea ecx, [ebp - 0x310]
call fcn.00401580
mov dword [ebp - 4], 9
lea eax, [ebp - 0x310]
push eax
lea ecx, [ebp - 0x318]
push ecx
mov ecx, dword [ebp - 0x770]
add ecx, 0x88
call fcn.0041cbe0
mov edx, dword [eax]
mov eax, dword [eax + 4]
mov dword [ebp - 0x144], edx
mov dword [ebp - 0x140], eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x310]
call fcn.00401600
lea ecx, [ebp - 0x320]
push ecx
mov ecx, dword [ebp - 0x770]
add ecx, 0x88
call fcn.0041d820
push eax
lea ecx, [ebp - 0x144]
call fcn.0041eaa0
movzx edx, al
test edx, edx
je 0x5710b6
lea ecx, [ebp - 0x144]
call fcn.0041e980
add eax, 0x1c
mov ecx, eax
call fcn.00401700
push eax
lea eax, [ebp - 0xd8]
push eax
call fcn.00441010
add esp, 8
cmp dword [ebp - 0x13c], 0
je 0x5710c8
mov ecx, dword [ebp - 0x13c]
mov byte [ecx], 0x40
jmp 0x571321
mov ecx, dword [ebp - 0x770]
add ecx, 0x1f8
call fcn.00401700
push eax
lea edx, [ebp - 0xd8]
push edx
call fcn.00441010
add esp, 8
jmp 0x571321
mov ecx, dword [ebp - 0x770]
add ecx, 0x214
call fcn.00401700
push eax
lea eax, [ebp - 0xf8]
push eax
call fcn.00441010
add esp, 8
mov ecx, dword [ebp - 0x770]
add ecx, 0x230
call fcn.00401700
push eax
lea ecx, [ebp - 0xd8]
push ecx
call fcn.00441010
add esp, 8
jmp 0x571321
push 0x40
lea edx, [ebp - 0xf8]
push edx
call fcn.00406620
add esp, 8
test eax, eax
jne 0x571163
push 0x5dc914
lea eax, [ebp - 0xf8]
push eax
call fcn.00441020
add esp, 8
jmp 0x571321
movsx ecx, byte [ebp - 0xd8]
test ecx, ecx
jne 0x571178
jmp 0x571904
jmp 0x571321
lea edx, [ebp - 0xf8]
push edx
mov ecx, dword [ebp - 0x770]
add ecx, 0x188
call fcn.00401640
jmp 0x571321
movsx eax, byte [ebp - 0xd8]
test eax, eax
je 0x5712c0
lea ecx, [ebp - 0xf8]
push ecx
lea ecx, [ebp - 0x33c]
call fcn.00401580
mov dword [ebp - 4], 0xa
lea edx, [ebp - 0x33c]
push edx
mov ecx, dword [ebp - 0x770]
add ecx, 0x88
call fcn.0041cb60
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x33c]
call fcn.00401600
lea eax, [ebp - 0xd8]
push eax
lea ecx, [ebp - 0x3c8]
call fcn.00401580
mov dword [ebp - 4], 0xb
lea ecx, [ebp - 0xf8]
push ecx
lea ecx, [ebp - 0x3e4]
call fcn.00401580
mov byte [ebp - 4], 0xc
lea edx, [ebp - 0x3c8]
push edx
lea eax, [ebp - 0x3e4]
push eax
lea ecx, [ebp - 0x3ac]
call fcn.0040b2d0
mov dword [ebp - 0x78c], eax
mov ecx, dword [ebp - 0x78c]
mov dword [ebp - 0x790], ecx
mov byte [ebp - 4], 0xd
mov edx, dword [ebp - 0x790]
push edx
lea ecx, [ebp - 0x374]
call fcn.0040ceb0
mov byte [ebp - 4], 0xe
lea eax, [ebp - 0x374]
push eax
lea ecx, [ebp - 0x3f0]
push ecx
mov ecx, dword [ebp - 0x770]
add ecx, 0x88
call fcn.0040b0a0
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x374]
call fcn.0040af30
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x3ac]
call fcn.0040af30
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x3e4]
call fcn.00401600
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3c8]
call fcn.00401600
jmp 0x5712c5
jmp 0x571904
jmp 0x571321
lea edx, [ebp - 0xd8]
push edx
mov ecx, dword [ebp - 0x770]
add ecx, 0x1c0
call fcn.00401640
jmp 0x571321
lea eax, [ebp - 0xd8]
push eax
mov ecx, dword [ebp - 0x770]
add ecx, 0x1dc
call fcn.00401640
jmp 0x571321
movsx ecx, byte [ebp - 0xf8]
cmp ecx, 0x2d
jne 0x571315
call fcn.00401fe0
mov byte [eax + 0x488], 0
jmp 0x571321
call fcn.00401fe0
mov byte [eax + 0x488], 1
mov edx, dword [ebp - 0xfc]
push edx
lea eax, [ebp - 0xf8]
push eax
mov ecx, dword [ebp - 0x770]
call fcn.00569dd0
push eax
lea ecx, [ebp - 0x40c]
call fcn.00401580
mov dword [ebp - 4], 0xf
lea ecx, [ebp - 0x40c]
push ecx
lea edx, [ebp - 0x414]
push edx
mov ecx, dword [ebp - 0x770]
add ecx, 0x48
call fcn.0041c870
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [ebp - 0x104], ecx
mov dword [ebp - 0x100], edx
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x40c]
call fcn.00401600
lea eax, [ebp - 0x41c]
push eax
mov ecx, dword [ebp - 0x770]
add ecx, 0x48
call fcn.0041d820
push eax
lea ecx, [ebp - 0x104]
call fcn.0041eaa0
movzx ecx, al
test ecx, ecx
je 0x57145f
cmp dword [ebp - 0xfc], 0xd693a7ea
jne 0x571410
lea ecx, [ebp - 0x104]
call fcn.0041e980
add eax, 0x24
mov ecx, eax
call fcn.00401720
movzx edx, al
test edx, edx
je 0x57140e
movsx eax, byte [ebp - 0xd8]
test eax, eax
je 0x57140e
mov ecx, dword [ebp - 0x100]
push ecx
mov edx, dword [ebp - 0x104]
push edx
lea eax, [ebp - 0x424]
push eax
mov ecx, dword [ebp - 0x770]
add ecx, 0x48
call fcn.0041c090
jmp 0x57145f
lea ecx, [ebp - 0x104]
call fcn.0041e980
add eax, 0x24
mov ecx, eax
call fcn.00401720
movzx ecx, al
test ecx, ecx
je 0x571437
movsx edx, byte [ebp - 0xd8]
test edx, edx
jne 0x57143c
jmp 0x571904
mov eax, dword [ebp - 0x100]
push eax
mov ecx, dword [ebp - 0x104]
push ecx
lea edx, [ebp - 0x42c]
push edx
mov ecx, dword [ebp - 0x770]
add ecx, 0x48
call fcn.0041c090
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x128], eax
lea ecx, [ebp - 0xd8]
push ecx
lea ecx, [ebp - 0x124]
call fcn.00401580
mov dword [ebp - 4], 0x10
mov edx, dword [ebp - 0xfc]
push edx
lea eax, [ebp - 0xf8]
push eax
mov ecx, dword [ebp - 0x770]
call fcn.00569dd0
push eax
lea ecx, [ebp - 0x4c8]
call fcn.00401580
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x12c]
push ecx
lea edx, [ebp - 0x4c8]
push edx
lea ecx, [ebp - 0x4ac]
call fcn.0041ea00
mov dword [ebp - 0x794], eax
mov eax, dword [ebp - 0x794]
mov dword [ebp - 0x798], eax
mov byte [ebp - 4], 0x12
mov ecx, dword [ebp - 0x798]
push ecx
lea ecx, [ebp - 0x46c]
call fcn.004283a0
mov byte [ebp - 4], 0x13
lea edx, [ebp - 0x46c]
push edx
lea eax, [ebp - 0x4d4]
push eax
mov ecx, dword [ebp - 0x770]
add ecx, 0x48
call fcn.0041bec0
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x46c]
call fcn.0041b600
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x4ac]
call fcn.0041b600
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x4c8]
call fcn.00401600
movsx ecx, byte [ebp - 0xf8]
cmp ecx, 0x2d
jne 0x571600
mov edx, dword [ebp - 0xfc]
mov dword [ebp - 0x79c], edx
cmp dword [ebp - 0x79c], 0xd693a7ea
je 0x571589
cmp dword [ebp - 0x79c], 0xd693ab70
je 0x571589
cmp dword [ebp - 0x79c], 0xd693bef8
je 0x5715d9
jmp 0x571600
lea eax, [ebp - 0xf7]
push eax
mov ecx, dword [ebp - 0xfc]
push ecx
push 0x5dc920
mov edx, dword [0x5f9314]
push edx
call fcn.00567c70
push eax
call fcn.005679e0
add esp, 0x14
push 0
lea eax, [ebp - 0xfc]
push eax
call fcn.0056df00
add esp, 8
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x12c]
call fcn.0041b5e0
jmp 0x571904
lea ecx, [ebp - 0xf7]
push ecx
mov edx, dword [ebp - 0xfc]
push edx
push 0x5dc93c
mov eax, dword [0x5f9314]
push eax
call fcn.00567c70
push eax
call fcn.005679e0
add esp, 0x14
mov byte [ebp - 0xd9], 0
mov ecx, dword [ebp - 0xfc]
mov dword [ebp - 0x7a0], ecx
cmp dword [ebp - 0x7a0], 0xd693a7ea
je 0x571624
jmp 0x5717a4
lea edx, [ebp - 0xf8]
push edx
lea ecx, [ebp - 0x6f0]
call fcn.00401580
mov byte [ebp - 4], 0x14
lea eax, [ebp - 0xfc]
push eax
lea ecx, [ebp - 0x6f0]
push ecx
lea ecx, [ebp - 0x6d4]
call fcn.0041f930
mov dword [ebp - 0x7a4], eax
mov edx, dword [ebp - 0x7a4]
mov dword [ebp - 0x7a8], edx
mov byte [ebp - 4], 0x15
mov eax, dword [ebp - 0x7a8]
push eax
lea ecx, [ebp - 0x5d4]
call fcn.00428ce0
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x5d4]
push ecx
lea edx, [ebp - 0x6fc]
push edx
mov ecx, dword [ebp - 0x770]
add ecx, 0x128
call fcn.0041e330
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x5d4]
call fcn.00414ae0
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x6d4]
call fcn.00414ae0
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x6f0]
call fcn.00401600
movsx eax, byte [ebp - 0x98]
test eax, eax
je 0x5717a4
push 0x5db18a
push 0x5dc958
lea ecx, [ebp - 0x98]
push ecx
call fcn.0057fc90
add esp, 0xc
lea edx, [ebp - 0x98]
push edx
lea ecx, [ebp - 0x160]
call fcn.00401580
mov byte [ebp - 4], 0x17
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x700], esp
push 0x5dc960
call fcn.00401580
mov dword [ebp - 0x7ac], eax
mov eax, dword [ebp - 0x7ac]
mov dword [ebp - 0x7b0], eax
mov byte [ebp - 4], 0x18
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x704], esp
push 0x5dc964
call fcn.00401580
mov dword [ebp - 0x7b4], eax
lea ecx, [ebp - 0x160]
push ecx
mov byte [ebp - 4], 0x17
call fcn.0057e460
add esp, 0x3c
push 0x80
push 0
lea edx, [ebp - 0x98]
push edx
call fcn.0043fa10
add esp, 0xc
push 0x7f
lea ecx, [ebp - 0x160]
call fcn.00401700
push eax
lea eax, [ebp - 0x98]
push eax
call fcn.00441110
add esp, 0xc
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x160]
call fcn.00401600
lea ecx, [ebp - 0x98]
push ecx
lea edx, [ebp - 0xb8]
push edx
lea eax, [ebp - 0xd8]
push eax
lea ecx, [ebp - 0xf8]
push ecx
mov edx, dword [ebp - 0xfc]
push edx
push 0x5dc968
mov eax, dword [0x5f9314]
push eax
call fcn.00567c70
push eax
call fcn.005679e0
add esp, 0x20
push 1
lea ecx, [ebp - 0xfc]
push ecx
call fcn.0056df00
add esp, 8
lea ecx, [ebp - 0x760]
call fcn.00401550
mov dword [ebp - 0x7b8], eax
mov edx, dword [ebp - 0x7b8]
mov dword [ebp - 0x7bc], edx
mov byte [ebp - 4], 0x19
mov eax, dword [ebp - 0x7bc]
push eax
lea ecx, [ebp - 0xfc]
push ecx
lea ecx, [ebp - 0x744]
call fcn.0041ea70
mov dword [ebp - 0x7c0], eax
mov edx, dword [ebp - 0x7c0]
mov dword [ebp - 0x7c4], edx
mov byte [ebp - 4], 0x1a
mov eax, dword [ebp - 0x7c4]
push eax
lea ecx, [ebp - 0x724]
call fcn.0040e490
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0xf8]
push ecx
lea edx, [ebp - 0x724]
push edx
lea eax, [ebp - 0x76c]
push eax
mov ecx, dword [ebp - 0x770]
add ecx, 0x68
call fcn.0041c970
mov ecx, eax
call fcn.004150c0
add eax, 4
mov ecx, eax
call fcn.00401640
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x724]
call fcn.0040d8a0
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x744]
call fcn.0040d8a0
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x760]
call fcn.00401600
push 1
lea ecx, [ebp - 0xf8]
push ecx
mov edx, dword [ebp - 0xfc]
push edx
push 2
mov ecx, dword [ebp - 0x770]
call fcn.0056f6f0
push 1
lea eax, [ebp - 0xd8]
push eax
mov ecx, dword [ebp - 0xfc]
push ecx
push 7
mov ecx, dword [ebp - 0x770]
call fcn.0056f6f0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x12c]
call fcn.0041b5e0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0043dd0c
mov esp, ebp
pop ebp
ret