Function at 0x4263be
Capabilities:
Check for time delay via gettickcount
Get geographical location
Resolve dns

Disassembly:
push 0x6c
mov eax, 0x43e44b
call fcn.0042b376
mov edi, ecx
xor ebx, ebx
mov dword [ebp - 0x3c], edi
cmp dword [edi + 0x40], ebx
je 0x4263de
xor eax, eax
call fcn.0042b3f9
ret
lea eax, [ebp - 0x58]
push eax
call fcn.00417a22
call dword [sym.imp.KERNEL32.dll_GetTickCount]
dec eax
dec eax
je 0x4263fa
dec eax
dec eax
je 0x4263fa
sub eax, 4
jne 0x426404
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_VerifyVersionInfoA]
mov dword [ebp - 4], ebx
cmp dword [edi + 0x18], 0x10
mov dword [ebp - 0x38], ebx
jb 0x426415
mov eax, dword [edi + 4]
jmp 0x426418
lea eax, [edi + 4]
push ebx
lea ecx, [ebp - 0x38]
push ecx
push ebx
push ebx
push 0xf
push eax
call sub.DNSAPI.dll_DnsQuery_A
cmp eax, ebx
je 0x42643a
lea esi, [ebp - 0x58]
call fcn.004030cb
mov eax, 0x80004005
jmp 0x4263d8
mov esi, dword [ebp - 0x38]
call fcn.004011be
test eax, eax
je 0x4264c5
call fcn.00425e25
jmp 0x4264c5
cmp word [esi + 8], 0xf
jne 0x4264c3
cmp dword [edi + 0x18], 0x10
jb 0x42645f
mov eax, dword [edi + 4]
jmp 0x426462
lea eax, [edi + 4]
push dword [esi + 4]
push eax
call fcn.00428726
pop ecx
pop ecx
test eax, eax
jne 0x4264c3
movzx ecx, word [esi + 0x1c]
mov eax, dword [esi + 0x18]
mov dword [ebp - 0x78], ecx
push eax
lea ecx, [ebp - 0x74]
call fcn.00402e72
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 3
call fcn.00403168
push ebx
push 1
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], bl
call fcn.0040329c
lea eax, [ebp - 0x31]
mov byte [ebp - 0x31], bl
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x4264ab
sub eax, edi
je 0x4264c0
call fcn.00425e68
call fcn.00425f08
mov edi, dword [ebp - 0x3c]
mov esi, dword [esi]
cmp esi, ebx
jne 0x42644d
cmp dword [ebp - 0x38], ebx
je 0x42651d
push 1
push dword [ebp - 0x38]
call sub.DNSAPI.dll_DnsFree
call fcn.004011be
test eax, eax
je 0x4264e6
call fcn.0040c1a4
mov dword [ebp - 0x38], ebx
call fcn.00401271
test eax, eax
je 0x42651d
push 4
lea eax, [ebp - 0x40]
push eax
push 0x20001009
mov esi, 0x400
push esi
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoA]
push 0x20
lea eax, [ebp - 0x78]
push eax
push 0x58
push esi
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
call fcn.00425f51
push ebx
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x18], 0xf
call fcn.00403636
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x48]
sub eax, dword [ebp - 0x4c]
xor esi, esi
sar eax, 5
test eax, eax
jbe 0x426587
push esi
lea eax, [ebp - 0x58]
call fcn.004030f8
cmp dword [eax], 0x11
jne 0x42655f
push esi
lea eax, [ebp - 0x58]
call fcn.004030f8
add eax, 4
cmp dword [eax + 0x14], ebx
jne 0x42656f
mov eax, dword [ebp - 0x48]
sub eax, dword [ebp - 0x4c]
inc esi
sar eax, 5
cmp esi, eax
jb 0x426540
jmp 0x426587
push esi
lea eax, [ebp - 0x58]
call fcn.004030f8
push 0xffffffffffffffff
add eax, 4
push ebx
push eax
lea ecx, [ebp - 0x30]
call fcn.004031c2
cmp dword [ebp - 0x1c], ebx
jne 0x42659c
push ebx
push 1
lea ecx, [ebp - 0x30]
call fcn.0040329c
jmp 0x42642b
call dword [sym.imp.KERNEL32.dll_GetTickCount]
dec eax
dec eax
je 0x4265af
dec eax
dec eax
je 0x4265af
sub eax, 4
jne 0x4265c0
push ebx
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
call fcn.00425f9a
call fcn.00425fdd
cmp dword [ebp - 0x18], 0x10
mov eax, dword [ebp - 0x2c]
jae 0x4265cc
lea eax, [ebp - 0x2c]
push eax
call sub.WS2_32.dll_gethostbyname
mov edi, eax
lea eax, [ebp - 0x31]
mov byte [ebp - 0x31], bl
lea esi, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x4265dd
sub eax, esi
je 0x4265ff
call fcn.0040cb42
call dword [sym.imp.USER32.dll_GetActiveWindow]
call dword [sym.imp.USER32.dll_GetCapture]
call dword [sym.imp.USER32.dll_GetClipboardOwner]
cmp edi, ebx
je 0x42658c
mov eax, dword [edi + 0xc]
mov eax, dword [eax]
mov eax, dword [eax]
mov edi, dword [ebp - 0x3c]
mov dword [edi + 0x40], eax
call fcn.00428e21
cdq
push 0x14
pop ecx
idiv ecx
mov esi, edx
inc esi
call fcn.00428e21
cdq
idiv esi
cmp edx, esi
jg 0x426633
mov eax, esi
cdq
idiv esi
cmp edx, ebx
je 0x426638
call fcn.0040c1a4
cmp dword [edi + 0x40], ebx
jne 0x42665c
mov edi, 0x80004005
push ebx
push 1
lea ecx, [ebp - 0x30]
call fcn.0040329c
lea esi, [ebp - 0x58]
call fcn.004030cb
mov eax, edi
jmp 0x4263d8
xor edi, edi
jmp 0x426642