Function at 0x421b39
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
push ebx
push esi
xor ebx, ebx
test byte [0x493003], 0x20
push edi
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0xc], ecx
je 0x421b6c
push ebx
push ebx
push 0x44a
push dword [0x48e2b0]
call fcn.0040bd10
pop ecx
push eax
call edi
push ebx
push ebx
push 0x44a
push dword [0x48fdec]
call edi
cmp byte [0x493001], bl
je 0x421ba3
cmp byte [0x493002], bl
jne 0x421ba3
mov byte [0x493002], 1
call fcn.0040b702
cmp eax, 0x60000
jae 0x421ba3
call fcn.0040f42a
mov eax, dword [0x48ff74]
cmp eax, ebx
je 0x421bb1
cmp word [eax], bx
jne 0x421bf3
mov ecx, dword [ebp - 0xc]
push ebx
call fcn.004128c2
mov eax, dword [0x48ff74]
cmp eax, ebx
je 0x421bc8
cmp word [eax], bx
jne 0x421bd2
mov ecx, dword [ebp - 0xc]
push 0x64
call fcn.0040b352
cmp byte [0x48fde0], bl
je 0x421ba3
cmp byte [0x490258], bl
jne 0x421ba3
push ebx
push ebx
push 0x44b
push dword [0x48fdec]
call edi
jmp 0x421ba3
mov esi, dword [sym.imp.KERNEL32.dll_SleepEx]
push 1
push 0xa
call esi
call fcn.00412dfd
cmp byte [0x493001], bl
je 0x421c2c
cmp byte [0x493002], bl
jne 0x421c2c
mov byte [0x493002], 1
call fcn.0040b702
cmp eax, 0x60000
jae 0x421c2c
call fcn.0040f42a
push dword [0x48ff74]
lea ecx, [ebp - 8]
call fcn.00434695
mov eax, dword [ebp - 8]
call fcn.00412dcc
push dword [ebp - 8]
call fcn.0040aeea
pop ecx
push 1
push 0xa
mov dword [ebp - 0x14], eax
call esi
mov eax, dword [ebp - 8]
cmp word [eax], bx
mov byte [ebp - 1], 2
je 0x421dd0
call fcn.00412ad9
test eax, eax
jne 0x421cd8
cmp byte [0x48fde0], bl
je 0x421c8c
cmp byte [0x490258], bl
jne 0x421c8c
push ebx
push ebx
push 0x44b
push dword [0x48fdec]
call edi
mov eax, dword [ebp - 8]
cmp word [eax], bx
je 0x421cd8
push dword [ebp - 0x14]
call fcn.00409e61
mov esi, eax
push 8
push esi
push str.Explorer
call fcn.00426f79
add esp, 0x10
test al, al
je 0x421cc1
mov ax, word [esi + 0x10]
cmp ax, 0x2e
je 0x421cc3
cmp ax, bx
je 0x421cc3
xor esi, esi
cmp esi, ebx
je 0x421d02
push ebx
push ebx
push ebx
push ebx
push esi
call fcn.00412089
add esp, 0x14
test eax, eax
je 0x421d02
mov ecx, dword [ebp - 0xc]
push 0x1f4
call fcn.0040b352
mov ecx, dword [ebp - 0xc]
push 0xffffffffffffffff
call fcn.004128c2
push dword [0x48ff74]
lea ecx, [ebp - 8]
call fcn.004346c9
jmp 0x421c64
call fcn.0040bc10
push ebx
push ebx
push 0x44a
push dword [0x48fdec]
call edi
mov eax, 0x47a8e8
push eax
push eax
call sym.PECMD.exe_LoadEnvi
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
pop ecx
pop ecx
call esi
push dword [ebp - 8]
lea ecx, [ebp - 0x10]
mov dword [ebp - 0x1c], eax
call fcn.00434695
push dword [0x48ff74]
mov dword [ebp - 0x18], 0x24
call fcn.0040bca6
test eax, eax
pop ecx
mov ecx, dword [ebp - 0xc]
push ebx
push ebx
push ebx
je 0x421d61
push dword [ebp - 0x10]
call fcn.0041ff01
jmp 0x421d6e
lea eax, [ebp - 0x18]
push eax
push ecx
push dword [ebp - 0x10]
call fcn.0040653e
cmp byte [ebp - 1], bl
jle 0x421d8f
dec byte [ebp - 1]
call esi
sub eax, dword [ebp - 0x1c]
cmp eax, 0x7d0
jae 0x421d8f
mov ecx, dword [ebp - 0xc]
push 0x1f4
call fcn.0040b352
mov ecx, dword [ebp - 0xc]
push ebx
call fcn.004128c2
mov eax, dword [0x48ff74]
cmp eax, ebx
je 0x421dc3
cmp word [eax], bx
je 0x421dc3
push eax
lea ecx, [ebp - 8]
call fcn.004346c9
mov eax, dword [ebp - 8]
call fcn.00412dcc
push dword [ebp - 8]
call fcn.0040aeea
pop ecx
mov dword [ebp - 0x14], eax
lea ecx, [ebp - 0x10]
call fcn.0042602e
jmp 0x421c64
lea ecx, [ebp - 8]
call fcn.0042602e
pop edi
pop esi
pop ebx
leave
ret 4