Function at 0x43cc73
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x50
and dword [ebp - 4], 0
push ebx
push esi
push edi
mov ebx, eax
mov eax, dword [0x4dd4b4]
mov edi, 0x4dd4b4
mov ecx, edi
call dword [eax + 0xc]
add eax, 0x10
mov ecx, edi
lea esi, [ebp - 0x4c]
mov dword [ebp - 0x50], eax
call fcn.004016ab
mov ecx, edi
lea esi, [ebp - 0x48]
call fcn.004016ab
mov eax, dword [0x4dd4b4]
xor esi, esi
mov ecx, edi
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x18], esi
call dword [eax + 0xc]
add eax, 0x10
push esi
mov dword [ebp - 0x14], eax
call dword [sym.imp.ole32.dll_CoInitialize]
call fcn.00423605
cmp eax, esi
jne 0x43cd15
mov edi, dword [sym.imp.KERNEL32.DLL_GetLastError]
call edi
push eax
push esi
push str.GetDebugPrivilege_return:_d_GetLassError_return:_d
call fcn.00424d1d
add esp, 0xc
call edi
push eax
push esi
push str.GetDebugPrivilege_return:_d_GetLassError_return:_d
mov esi, 0x4de92c
call fcn.0044aa61
add esp, 0xc
push str.kxescore
call fcn.00424f0d
push eax
push dword [ebx + 0xc]
push str.cover:_d__kxescore:_d
call fcn.00424d1d
add esp, 0x10
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
push dword [ebx + 0x1c]
lea edi, [ebp - 0x50]
mov dword [ebp - 0x10], eax
call fcn.0041e498
test eax, eax
je 0x43d0db
xor esi, esi
mov eax, ebx
mov dword [ebx + 0x10], esi
call fcn.0043df53
cmp dword [ebx + 0xc], esi
mov dword [ebp - 0xc], eax
je 0x43cde7
mov eax, dword [ebx + 0x88]
cmp eax, esi
je 0x43cd82
cmp dword [ebp - 0xc], esi
jne 0x43cd82
push dword [ebx + 0x5c]
push 0x4c057c
push esi
push esi
call eax
add esp, 0x10
push str.StopAllProgress...
mov esi, 0x4de92c
call fcn.0044aa61
pop ecx
lea edi, [ebp - 0x50]
call fcn.0041e74b
push eax
push str.StopAllProgress_return:_d
mov dword [ebp - 8], eax
mov edi, esi
call fcn.0044aa61
cmp dword [ebp - 8], 0
pop ecx
pop ecx
jne 0x43cddc
mov eax, dword [ebx + 0x88]
test eax, eax
je 0x43cdcd
push dword [ebx + 0x5c]
push 0x4c05bc
push 1
push 0
call eax
add esp, 0x10
mov eax, 0xe0000003
call fcn.00424d0e
jmp 0x43d0e0
mov dword [ebp - 4], 0x14
xor esi, esi
jmp 0x43cdf1
call fcn.0042454d
mov edi, 0x4de92c
mov eax, dword [0x4d9cb8]
cmp eax, esi
je 0x43ce01
push eax
call dword [sym.imp.KERNEL32.DLL_SetEvent]
push str.ClearWebShield...
mov esi, edi
call fcn.0044aa61
pop ecx
xor esi, esi
call fcn.0043b0e3
test eax, eax
je 0x43ce2d
call fcn.0043b23f
test eax, eax
je 0x43ce2d
call fcn.0043b160
call fcn.0043b1e4
inc esi
push esi
push str.ClearWebShield_return:_d
mov esi, edi
call fcn.0044aa61
push str.ClearFiles...
call fcn.0044aa61
add esp, 0xc
lea eax, [ebp - 0x50]
call fcn.0041ea57
push str.ClearFiles_end
call fcn.0044aa61
pop ecx
push ebx
call fcn.0043e528
mov eax, dword [ebp - 4]
call fcn.0043b0c2
push dword [ebx + 0x1c]
call fcn.00422f52
mov eax, dword [0x4dd4b4]
pop ecx
mov ecx, 0x4dd4b4
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
push eax
push dword [ebx + 0x1c]
call fcn.0043baed
mov eax, dword [ebp - 8]
cmp dword [eax - 0xc], 0
pop ecx
pop ecx
je 0x43ceab
push eax
push 0x4c061c
call fcn.0044aa61
mov eax, dword [ebp - 8]
pop ecx
pop ecx
add eax, 0xfffffff0
call fcn.0040151c
mov eax, dword [ebx + 0x88]
xor esi, esi
cmp eax, esi
je 0x43ced5
cmp dword [ebp - 0xc], esi
jne 0x43ced5
push dword [ebx + 0x5c]
push 0x4c0620
push esi
push dword [ebp - 4]
call eax
add esp, 0x10
cmp dword [ebx + 0xc], esi
jne 0x43cee5
lea esi, [ebx + 0xcc]
call fcn.0041f3a8
push str.install_begin...
mov esi, edi
call fcn.0044aa61
xor esi, esi
push esi
call fcn.004246ac
mov eax, dword [ebx + 0x1c]
cmp dword [eax - 0xc], esi
pop ecx
pop ecx
je 0x43cf18
push eax
lea eax, [ebx + 0x60]
call fcn.0043fd8e
test eax, eax
je 0x43cf18
mov eax, ebx
call fcn.0043c6e1
inc esi
push 1
call fcn.004246ac
test esi, esi
pop ecx
jne 0x43cf6c
mov eax, dword [ebx + 0x88]
test eax, eax
je 0x43d0e0
cmp dword [ebx + 0x7c], esi
push dword [ebx + 0x5c]
je 0x43cf53
push 0x4c0648
push 7
push dword [ebp - 4]
call eax
add esp, 0x10
mov eax, 0xe000000d
jmp 0x43cdd2
push 0x4c0658
push 2
push dword [ebp - 4]
call eax
add esp, 0x10
mov eax, 0xe0000002
jmp 0x43cdd2
push dword [ebx + 0x1c]
call fcn.00438dff
push eax
call fcn.00438ef4
test eax, eax
jne 0x43cf88
mov eax, 0xe0000029
jmp 0x43cdd2
push ebx
call fcn.0043e028
test eax, eax
push ebx
je 0x43cfa2
call fcn.0043e0da
mov eax, 0xe0000004
jmp 0x43cdd2
call fcn.0043e201
test eax, eax
je 0x43cfc3
call fcn.00438dff
call fcn.00439411
test eax, eax
jne 0x43cfc3
mov eax, 0xe0000005
jmp 0x43cdd2
lea esi, [ebx + 0x60]
call fcn.0043fd29
mov eax, dword [ebx + 0xc]
neg eax
sbb eax, eax
and eax, 0xa
add eax, 0xa
add dword [ebp - 4], eax
xor esi, esi
cmp dword [ebx + 0x9c], esi
je 0x43cfea
call fcn.00425431
mov eax, dword [ebp - 4]
call fcn.0043b0c2
mov eax, dword [ebx + 0x88]
cmp eax, esi
je 0x43d012
cmp dword [ebp - 0xc], esi
jne 0x43d012
push dword [ebx + 0x5c]
push str.ck_W
push esi
push dword [ebp - 4]
call eax
add esp, 0x10
mov edi, ebx
call fcn.0043e666
mov eax, ebx
call fcn.0043e6ac
push ebx
call fcn.0043c7a1
test eax, eax
jne 0x43d055
mov eax, dword [ebx + 0x88]
test eax, eax
je 0x43d046
push dword [ebx + 0x5c]
push 0x4c067c
push 3
push dword [ebp - 4]
call eax
add esp, 0x10
mov eax, 0xe0000007
call fcn.00424d0e
jmp 0x43d0db
cmp dword [ebx + 0xc], esi
jne 0x43d069
push 0xa
lea eax, [ebx + 0xd0]
push eax
call dword [sym.imp.KERNEL32.DLL_InterlockedExchange]
call fcn.0043ddb1
test eax, eax
jne 0x43d082
push str.install_ksafe_fail
mov esi, 0x4de92c
call fcn.0044aa61
pop ecx
mov eax, ebx
call fcn.0043deb3
test eax, eax
jne 0x43d09d
push str.install_pcmgr_fail
mov esi, 0x4de92c
call fcn.0044aa61
pop ecx
xor eax, eax
cmp dword [ebx + 0xc], eax
je 0x43d0c3
push eax
lea ecx, [ebp - 0xc]
push ecx
push eax
push 0xf003f
push 1
push eax
push eax
push str.SOFTWAREkingsoftAntivirusKNeedReboot
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
mov eax, ebx
call fcn.0043e2cc
mov dword [ebx + 0x10], 1
call fcn.0043e937
call fcn.0043e874
mov edi, 0x4de92c
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
sub eax, dword [ebp - 0x10]
xor esi, esi
cmp dword [ebx + 0x10], esi
mov dword [ebx + 0x84], eax
je 0x43d100
push 0x64
pop eax
call fcn.0043b0c2
jmp 0x43d10c
push 9
mov eax, 0x4de89c
call fcn.004027b7
cmp dword [ebx + 0x80], esi
je 0x43d134
cmp dword [ebx + 0x10], esi
je 0x43d134
push str.wait_kismain
mov esi, edi
call fcn.0044aa61
mov dword [esp], str.wait_kismain_end
call fcn.0044aa61
pop ecx
xor esi, esi
mov eax, dword [ebx + 0x88]
cmp eax, esi
je 0x43d153
cmp dword [ebx + 0x10], esi
je 0x43d153
push dword [ebx + 0x5c]
push 0x4c06d8
push esi
push 0x64
call eax
add esp, 0x10
mov eax, 0x4d9ca8
call fcn.0041e339
test eax, eax
je 0x43d173
mov eax, dword [0x4d9ca8]
cmp eax, esi
je 0x43d173
push 0xffffffffffffffff
push eax
call dword [sym.imp.KERNEL32.DLL_WaitForSingleObject]
mov eax, dword [0x4d9cac]
mov dword [0x4de868], eax
mov eax, dword [0x4d9cb0]
add eax, 0xfffffff0
call fcn.00401648
mov esi, eax
add esi, 0x10
push esi
push 0x4de870
call fcn.00401af8
lea eax, [esi - 0x10]
call fcn.0040151c
cmp dword [ebx + 0x11c], 0
je 0x43d1cb
mov eax, dword [ebx + 0xfc]
push ecx
sub eax, 0x10
mov esi, esp
call fcn.00401648
add eax, 0x10
mov dword [esi], eax
push dword [ebx + 0x10]
call fcn.00424aac
pop ecx
pop ecx
push dword [ebx + 0x84]
mov esi, edi
push dword [ebx + 0x10]
push str.install_end__return:_d__install_cost_time:_dms
call fcn.0044aa61
push dword [ebx + 0x10]
push str.install_thread_end:_d
call fcn.00424d1d
add esp, 0x14
call dword [sym.imp.ole32.dll_CoUninitialize]
mov eax, dword [ebp - 0x14]
add eax, 0xfffffff0
call fcn.0040151c
lea esi, [ebp - 0x24]
call fcn.00405cc1
lea esi, [ebp - 0x34]
call fcn.00405cc1
lea esi, [ebp - 0x44]
call fcn.00405cc1
mov eax, dword [ebp - 0x48]
add eax, 0xfffffff0
call fcn.0040151c
mov eax, dword [ebp - 0x4c]
add eax, 0xfffffff0
call fcn.0040151c
mov eax, dword [ebp - 0x50]
add eax, 0xfffffff0
call fcn.0040151c
pop edi
pop esi
pop ebx
leave
ret