Function at 0x41bc73
Capabilities:
Check for time delay via gettickcount

Disassembly:
mov eax, 0x4cb238
call fcn.0049cce0
sub esp, 0x3c
push ebx
push esi
push edi
mov edi, ecx
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x1c], edi
call fcn.0041a56d
xor ebx, ebx
cmp eax, ebx
jne 0x41b416
mov ecx, edi
call fcn.0041a5fe
jmp 0x41bbdc
cmp eax, 0xfffffffe
jne 0x41b473
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push 3
xor edx, edx
pop ecx
div ecx
dec edx
je 0x41b45c
dec edx
je 0x41b448
push 0x28
push 0x3e9
push 0x410
push 4
mov ecx, edi
call fcn.004196e2
jmp 0x41bb5a
push 0x31
push 0xe
push 0x28
push 4
mov ecx, edi
call fcn.0041927d
jmp 0x41bb5a
push 0x28
push 4
push 0x8a
push 0x68
mov ecx, edi
call fcn.004195d7
jmp 0x41bb5a
or esi, 0xffffffff
cmp eax, esi
jne 0x41b4a8
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push 3
xor edx, edx
pop ecx
div ecx
dec edx
je 0x41b4a1
dec edx
je 0x41b49a
push ebx
push 0x3e9
push 0x3e8
jmp 0x41b4dd
push 9
push 0xe
push ebx
jmp 0x41b4f1
push ebx
push 4
push 0x62
jmp 0x41b508
mov eax, dword [edi + 0x94]
cmp eax, ebx
je 0x41b516
push eax
mov ecx, edi
call fcn.0040f27d
test eax, eax
je 0x41b516
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push 3
xor edx, edx
pop ecx
div ecx
dec edx
je 0x41b4ff
dec edx
je 0x41b4eb
push 0x28
push 0x3e9
push 0x410
push 4
mov ecx, edi
call fcn.004196e2
jmp 0x41ba87
push 0x31
push 0xe
push 0x28
push 4
mov ecx, edi
call fcn.0041927d
jmp 0x41ba87
push 0x28
push 4
push 0x8a
push 0x68
mov ecx, edi
call fcn.004195d7
jmp 0x41ba87
push 0x570804
lea ecx, [ebp - 0x14]
call fcn.004b9682
push dword [edi + 0xa0]
lea eax, [ebp - 0x18]
mov ecx, edi
mov dword [ebp - 4], ebx
push str.SoftwareClassesCLSID_s
push eax
call fcn.0041b01f
lea eax, [ebp - 0x14]
mov ecx, edi
push eax
mov byte [ebp - 4], 1
push dword [ebp - 0x18]
call fcn.0041b215
cmp eax, ebx
je 0x41b5bf
cmp eax, 0xfffffffe
jne 0x41b5c7
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push 3
xor edx, edx
pop ecx
div ecx
dec edx
je 0x41b592
dec edx
je 0x41b581
push 0x28
push 0x3e9
push 0x410
push 4
mov ecx, edi
call fcn.004196e2
jmp 0x41b5ab
push 0x31
push 0xe
push 0x28
push 4
mov ecx, edi
call fcn.0041927d
jmp 0x41b5ab
push 0x28
push 4
push 0x8a
jmp 0x41b5a2
push ebx
push 4
push 0x62
push 0x68
mov ecx, edi
call fcn.004195d7
and byte [ebp - 4], 0
lea ecx, [ebp - 0x18]
call fcn.004b960e
mov dword [ebp - 4], esi
jmp 0x41ba7f
mov eax, dword [ebp - 0x14]
cmp dword [eax - 8], ebx
jne 0x41b5ee
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push 3
xor edx, edx
pop ecx
div ecx
dec edx
je 0x41b59d
dec edx
je 0x41b5e7
push ebx
push 0x3e9
push 0x3e8
jmp 0x41b576
push 9
push 0xe
push ebx
jmp 0x41b587
lea esi, [edi + 0x68]
push eax
mov ecx, esi
call fcn.0041be54
cmp eax, ebx
je 0x41b636
cmp eax, 0xfffffffe
jne 0x41b60d
call dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0x41bb0d
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push 3
xor edx, edx
pop ecx
div ecx
dec edx
je 0x41b630
dec edx
je 0x41b626
push ebx
jmp 0x41baa4
push 9
push 0xe
push ebx
jmp 0x41bac2
push ebx
jmp 0x41bacf
cmp word [edi + 0x70], 2
jne 0x41bbbd
mov eax, edi
mov ecx, edi
cdq
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x40], eax
lea eax, [edi + 0x7c]
mov dword [ebp - 0x44], edx
push eax
push esi
mov dword [ebp - 0x3c], edx
call fcn.0041ab21
cmp eax, 0xfffffffe
jne 0x41b69b
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push 3
xor edx, edx
pop ecx
div ecx
dec edx
je 0x41b690
dec edx
je 0x41b685
push 0x15
push 0x3e9
push 0x3fd
jmp 0x41ba3e
push 0x1e
push 0xe
push 0x15
jmp 0x41ba4f
push 0x15
push 4
push 0x77
jmp 0x41ba63
or esi, 0xffffffff
cmp eax, esi
jne 0x41b6fa
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push 3
xor edx, edx
pop ecx
div ecx
dec edx
je 0x41b6e3
dec edx
je 0x41b6cf
push 0x28
push 0x3e9
push 0x410
push 4
mov ecx, edi
call fcn.004196e2
jmp 0x41ba6f
push 0x31
push 0xe
push 0x28
push 4
mov ecx, edi
call fcn.0041927d
jmp 0x41ba6f
push 0x28
push 4
push 0x8a
push 0x68
mov ecx, edi
call fcn.004195d7
jmp 0x41ba6f
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
mov byte [ebp - 4], 2
call esi
push 3
xor edx, edx
pop ebx
mov ecx, ebx
div ecx
dec edx
je 0x41b912
dec edx
je 0x41b818
lea eax, [ebp - 0x48]
mov ecx, edi
push eax
lea eax, [ebp - 0x40]
push eax
call fcn.00419761
test eax, eax
je 0x41b788
call esi
xor edx, edx
div ebx
dec edx
je 0x41b764
dec edx
je 0x41b753
push 0x28
push 0x3e9
push 0x410
push 4
mov ecx, edi
call fcn.004196e2
jmp 0x41b776
push 0x31
push 0xe
push 0x28
push 4
mov ecx, edi
call fcn.0041927d
jmp 0x41b776
push 0x28
push 4
push 0x8a
push 0x68
mov ecx, edi
call fcn.004195d7
or dword [ebp - 0x20], 0xffffffff
lea eax, [ebp - 0x20]
push 0x4e73f8
push eax
call fcn.0049e52d
call esi
push 7
xor edx, edx
pop ecx
div ecx
cmp edx, ebx
jne 0x41ba06
mov ecx, dword [ebp - 0x40]
mov ebx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x48]
mov edx, dword [ebp - 0x44]
sub ecx, 1
sbb ebx, 0
add eax, 1
adc edx, 0
cmp eax, ecx
jne 0x41b7bd
cmp edx, ebx
je 0x41ba06
call esi
push 3
xor edx, edx
pop ecx
div ecx
dec edx
je 0x41b7f4
dec edx
je 0x41b7e3
push 0x28
push 0x3e9
push 0x410
push 4
mov ecx, edi
call fcn.004196e2
jmp 0x41b806
push 0x31
push 0xe
push 0x28
push 4
mov ecx, edi
call fcn.0041927d
jmp 0x41b806
push 0x28
push 4
push 0x8a
push 0x68
mov ecx, edi
call fcn.004195d7
or dword [ebp - 0x24], 0xffffffff
lea eax, [ebp - 0x24]
push 0x4e73f8
push eax
call fcn.0049e52d
lea eax, [ebp - 0x40]
mov ecx, edi
push eax
lea eax, [ebp - 0x48]
push eax
call fcn.004192f6
test eax, eax
je 0x41b883
call esi
xor edx, edx
div ebx
dec edx
je 0x41b85f
dec edx
je 0x41b84e
push 0x28
push 0x3e9
push 0x410
push 4
mov ecx, edi
call fcn.004196e2
jmp 0x41b871
push 0x31
push 0xe
push 0x28
push 4
mov ecx, edi
call fcn.0041927d
jmp 0x41b871
push 0x28
push 4
push 0x8a
push 0x68
mov ecx, edi
call fcn.004195d7
or dword [ebp - 0x28], 0xffffffff
lea eax, [ebp - 0x28]
push 0x4e73f8
push eax
call fcn.0049e52d
call esi
push 9
xor edx, edx
pop ecx
div ecx
cmp edx, 1
jne 0x41ba06
mov ecx, dword [ebp - 0x40]
mov ebx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x48]
sub ecx, edx
sbb ebx, 0
add eax, edx
mov edx, dword [ebp - 0x44]
adc edx, 0
cmp eax, ecx
jne 0x41b8b7
cmp edx, ebx
je 0x41ba06
call esi
push 3
xor edx, edx
pop ecx
div ecx
dec edx
je 0x41b8ee
dec edx
je 0x41b8dd
push 0x28
push 0x3e9
push 0x410
push 4
mov ecx, edi
call fcn.004196e2
jmp 0x41b900
push 0x31
push 0xe
push 0x28
push 4
mov ecx, edi
call fcn.0041927d
jmp 0x41b900
push 0x28
push 4
push 0x8a
push 0x68
mov ecx, edi
call fcn.004195d7
or dword [ebp - 0x2c], 0xffffffff
lea eax, [ebp - 0x2c]
push 0x4e73f8
push eax
call fcn.0049e52d
lea eax, [ebp - 0x40]
mov ecx, edi
push eax
lea eax, [ebp - 0x48]
push eax
call fcn.00419439
test eax, eax
je 0x41b97d
call esi
xor edx, edx
div ebx
dec edx
je 0x41b959
dec edx
je 0x41b948
push 0x28
push 0x3e9
push 0x410
push 4
mov ecx, edi
call fcn.004196e2
jmp 0x41b96b
push 0x31
push 0xe
push 0x28
push 4
mov ecx, edi
call fcn.0041927d
jmp 0x41b96b
push 0x28
push 4
push 0x8a
push 0x68
mov ecx, edi
call fcn.004195d7
or dword [ebp - 0x30], 0xffffffff
lea eax, [ebp - 0x30]
push 0x4e73f8
push eax
call fcn.0049e52d
call esi
push 5
xor edx, edx
pop ecx
div ecx
cmp edx, 2
jne 0x41ba06
mov ecx, dword [ebp - 0x40]
mov ebx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x48]
mov edx, dword [ebp - 0x44]
sub ecx, 1
sbb ebx, 0
add eax, 1
adc edx, 0
cmp eax, ecx
jne 0x41b9ab
cmp edx, ebx
je 0x41ba06
call esi
push 3
xor edx, edx
pop ecx
div ecx
dec edx
je 0x41b9e2
dec edx
je 0x41b9d1
push 0x28
push 0x3e9
push 0x410
push 4
mov ecx, edi
call fcn.004196e2
jmp 0x41b9f4
push 0x31
push 0xe
push 0x28
push 4
mov ecx, edi
call fcn.0041927d
jmp 0x41b9f4
push 0x28
push 4
push 0x8a
push 0x68
mov ecx, edi
call fcn.004195d7
or dword [ebp - 0x34], 0xffffffff
lea eax, [ebp - 0x34]
push 0x4e73f8
push eax
call fcn.0049e52d
test byte [edi + 0x1c], 1
mov dword [ebp - 4], 1
je 0x41bad5
mov ecx, edi
call fcn.0041bc24
cmp eax, 0xfffffffe
jne 0x41ba8e
call esi
push 3
xor edx, edx
pop ecx
div ecx
dec edx
je 0x41ba5a
dec edx
je 0x41ba49
push 0x28
push 0x3e9
push 0x410
push 4
mov ecx, edi
call fcn.004196e2
jmp 0x41ba6c
push 0x31
push 0xe
push 0x28
push 4
mov ecx, edi
call fcn.0041927d
jmp 0x41ba6c
push 0x28
push 4
push 0x8a
push 0x68
mov ecx, edi
call fcn.004195d7
or esi, 0xffffffff
and byte [ebp - 4], 0
lea ecx, [ebp - 0x18]
call fcn.004b960e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.004b960e
mov eax, esi
jmp 0x41bbde
cmp eax, 0xffffffff
jne 0x41bad5
call esi
push 3
xor edx, edx
pop ecx
div ecx
dec edx
je 0x41bacd
dec edx
je 0x41babc
push 0
push 0x3e9
push 0x3e8
push 4
mov ecx, edi
call fcn.004196e2
jmp 0x41bb42
push 9
push 0xe
push 0
push 4
mov ecx, edi
call fcn.0041927d
jmp 0x41bb42
push 0
push 4
push 0x62
jmp 0x41bb39
call esi
push 0xb
xor edx, edx
pop ecx
div ecx
cmp edx, 5
jne 0x41bbbd
mov ecx, dword [ebp - 0x40]
mov ebx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x48]
mov edx, dword [ebp - 0x44]
sub ecx, 1
sbb ebx, 0
add eax, 1
adc edx, 0
cmp eax, ecx
jne 0x41bb0b
cmp edx, ebx
je 0x41bbbd
call esi
push 3
xor edx, edx
pop ecx
div ecx
dec edx
je 0x41bb30
dec edx
je 0x41bb28
push 0x28
push 0x3e9
push 0x410
jmp 0x41baae
push 0x31
push 0xe
push 0x28
jmp 0x41bac2
push 0x28
push 4
push 0x8a
push 0x68
mov ecx, edi
call fcn.004195d7
and byte [ebp - 4], 0
lea ecx, [ebp - 0x18]
call fcn.004b960e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.004b960e
or eax, 0xffffffff
jmp 0x41bbde
mov ecx, edi
call fcn.0041a5fe
and byte [ebp - 4], 0
lea ecx, [ebp - 0x18]
call fcn.004b960e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.004b960e
xor eax, eax
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret
and dword [ecx + 0x90], 0
jmp 0x41b3e7