Function at 0x485ec0
Capabilities:
Check for time delay via gettickcount

Disassembly:
push 0xffffffffffffffff
push 0x4ef9e5
mov eax, dword fs:[0]
push eax
sub esp, 0x278
mov eax, dword [0x53fa2c]
xor eax, esp
mov dword [esp + 0x274], eax
push ebp
push esi
push edi
mov eax, dword [0x53fa2c]
xor eax, esp
push eax
lea eax, [esp + 0x288]
mov dword fs:[0], eax
mov dword [esp + 0x290], 3
call dword [sym.imp.KERNEL32.dll_GetTickCount]
cmp dword [0x103a97c], 0
mov dword [esp + 0x3c], eax
je 0x485f3f
mov eax, dword [esp + 0x2a4]
mov ecx, dword [esp + 0x2a0]
mov edx, dword [esp + 0x29c]
push eax
push ecx
push edx
push str.MakeJuneDataOne___s___s___s_
push 8
call fcn.0043d500
add esp, 0x14
lea ecx, [esp + 0x54]
call sub.mfc90.dll_Ordinal_580
mov byte [esp + 0x290], 4
lea ecx, [esp + 0x70]
call sub.mfc90.dll_Ordinal_580
mov byte [esp + 0x290], 5
lea ecx, [esp + 0x40]
call sub.mfc90.dll_Ordinal_580
mov byte [esp + 0x290], 6
lea eax, [esp + 0x2a0]
push eax
lea ecx, [esp + 0x30]
call dword [sym.imp.mfc90.dll_Ordinal_300]
mov byte [esp + 0x290], 7
lea ecx, [esp + 0x10]
call dword [sym.imp.mfc90.dll_Ordinal_316]
mov byte [esp + 0x290], 8
mov eax, dword [0x103adf8]
xor esi, esi
test eax, eax
jle 0x485fe6
mov edi, dword [sym.imp.SHLWAPI.dll_StrStrIA]
nop
test esi, esi
jl 0x486151
cmp esi, eax
jge 0x486151
mov ecx, dword [0x103adf4]
mov edx, dword [esp + 0x2a0]
mov eax, dword [ecx + esi*4]
push edx
push eax
call edi
test eax, eax
jne 0x4860c0
mov eax, dword [0x103adf8]
inc esi
cmp esi, eax
jl 0x485fb0
mov edx, dword [esp + 0x10]
cmp dword [edx - 0xc], 0
jne 0x486156
mov eax, dword [esp + 0x2a0]
push eax
push 0x514f30
push 8
call fcn.0043d500
add esp, 0xc
mov byte [esp + 0x290], 7
lea ecx, [esp + 0x10]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x290], 6
lea ecx, [esp + 0x2c]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x290], 5
lea ecx, [esp + 0x40]
call sub.mfc90.dll_Ordinal_781
mov byte [esp + 0x290], 4
lea ecx, [esp + 0x70]
call sub.mfc90.dll_Ordinal_781
mov byte [esp + 0x290], 3
lea ecx, [esp + 0x54]
call sub.mfc90.dll_Ordinal_781
mov byte [esp + 0x290], 2
lea ecx, [esp + 0x29c]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x290], 1
lea ecx, [esp + 0x2a0]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x290], 0
lea ecx, [esp + 0x2a4]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov dword [esp + 0x290], 0xffffffff
lea ecx, [esp + 0x2a8]
call dword [sym.imp.mfc90.dll_Ordinal_601]
xor eax, eax
jmp 0x486520
cmp esi, dword [0x103adc8]
jge 0x486151
mov eax, dword [0x103adc4]
lea eax, [eax + esi*4]
push eax
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90.dll_Ordinal_817]
push 0x5116d8
push 0x502818
lea ecx, [esp + 0x18]
call dword [sym.imp.mfc90.dll_Ordinal_5924]
push 0xffffffffffffffff
push 0
lea ecx, [esp + 0x48]
call sub.mfc90.dll_Ordinal_6494
push 0x4ff790
lea ecx, [esp + 0x44]
push ecx
lea edx, [esp + 0x18]
push edx
call fcn.00492540
mov eax, dword [esp + 0x54]
add esp, 0xc
xor esi, esi
test eax, eax
jle 0x485fe6
test esi, esi
jl 0x486151
cmp esi, eax
jge 0x486151
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0x5c]
lea eax, [eax + esi*4]
push eax
push ecx
lea ecx, [esp + 0x5c]
call sub.mfc90.dll_Ordinal_6153
mov eax, dword [esp + 0x48]
inc esi
cmp esi, eax
jl 0x486125
jmp 0x485fe6
call sub.mfc90.dll_Ordinal_1252
lea ecx, [esp + 0x2a0]
push ecx
lea ecx, [esp + 0x1c]
call dword [sym.imp.mfc90.dll_Ordinal_300]
mov byte [esp + 0x290], 9
mov edx, dword [esp + 0x2a0]
mov esi, dword [sym.imp.MSVCR90.dll__stricmp]
push str.Win32_NTLogEvent
push edx
call esi
mov edi, dword [sym.imp.KERNEL32.dll_GetSystemTime]
mov ebp, dword [sym.imp.MSVCR90.dll_sprintf]
add esp, 8
test eax, eax
jne 0x4862bc
push 0x200
lea eax, [esp + 0x88]
push 0
push eax
call sub.MSVCR90.dll_memset
push 0x200
lea ecx, [esp + 0x94]
push ecx
push str.event_log_TimeWritten
push str.SOFTWARETrojanCut_tc_Env
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.00491b30
add esp, 0x20
cmp byte [esp + 0x84], 0
jne 0x48622e
lea edx, [esp + 0x1c]
push edx
call edi
movzx eax, word [esp + 0x28]
movzx ecx, word [esp + 0x26]
movzx edx, word [esp + 0x24]
push eax
movzx eax, word [esp + 0x26]
push ecx
movzx ecx, word [esp + 0x26]
push edx
movzx edx, word [esp + 0x28]
push eax
push ecx
push edx
lea eax, [esp + 0x9c]
push str._04d_02d_02d_02d_02d_02d.000000_000
push eax
call ebp
add esp, 0x20
lea ecx, [esp + 0x84]
push ecx
mov ecx, 0x103acf4
call dword [sym.imp.mfc90.dll_Ordinal_820]
lea edx, [esp + 0x84]
push edx
lea ecx, [esp + 0x34]
call dword [sym.imp.mfc90.dll_Ordinal_310]
mov byte [esp + 0x290], 0xa
push eax
lea eax, [esp + 0x38]
push str._where_TimeWritten___
push eax
call fcn.00410070
mov byte [esp + 0x29c], 0xb
push 0x50eb4c
push eax
lea ecx, [esp + 0x4c]
push ecx
call fcn.00402a60
add esp, 0x18
mov byte [esp + 0x290], 0xc
push eax
lea ecx, [esp + 0x1c]
call dword [sym.imp.mfc90.dll_Ordinal_941]
mov byte [esp + 0x290], 0xb
lea ecx, [esp + 0x38]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x290], 0xa
lea ecx, [esp + 0x34]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x290], 9
lea ecx, [esp + 0x30]
call dword [sym.imp.mfc90.dll_Ordinal_601]
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90.dll_Ordinal_316]
mov byte [esp + 0x290], 0xd
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x10]
push edx
push eax
lea ecx, [esp + 0x1c]
push str.Select__s_from__s
push ecx
call dword [sym.imp.mfc90.dll_Ordinal_2539]
add esp, 0x10
push 0
lea edx, [esp + 0x74]
push edx
lea eax, [esp + 0x5c]
push eax
push ecx
lea edx, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x40], esp
push edx
call dword [sym.imp.mfc90.dll_Ordinal_300]
mov byte [esp + 0x2a0], 0xe
push ecx
lea eax, [esp + 0x2bc]
mov ecx, esp
mov dword [esp + 0x48], esp
push eax
call dword [sym.imp.mfc90.dll_Ordinal_300]
mov byte [esp + 0x2a4], 0xf
push ecx
lea edx, [esp + 0x2bc]
mov ecx, esp
mov dword [esp + 0x50], esp
push edx
call dword [sym.imp.mfc90.dll_Ordinal_300]
mov byte [esp + 0x2a8], 0x10
push ecx
lea eax, [esp + 0x2b8]
mov ecx, esp
mov dword [esp + 0x84], esp
push eax
call dword [sym.imp.mfc90.dll_Ordinal_300]
mov byte [esp + 0x2ac], 0x11
push ecx
lea edx, [esp + 0x2c0]
mov ecx, esp
mov dword [esp + 0x8c], esp
push edx
call dword [sym.imp.mfc90.dll_Ordinal_300]
mov byte [esp + 0x2b0], 0x12
mov eax, dword [esp + 0x2b8]
push eax
mov byte [esp + 0x2b4], 0xd
call fcn.004847d0
mov ecx, dword [esp + 0x2c4]
push str.Win32_NTLogEvent
push ecx
call esi
add esp, 0x2c
test eax, eax
jne 0x486434
mov edx, dword [0x103acf4]
cmp dword [edx - 0xc], eax
je 0x486434
lea eax, [esp + 0x1c]
push eax
call edi
movzx ecx, word [esp + 0x28]
movzx edx, word [esp + 0x26]
movzx eax, word [esp + 0x24]
push ecx
movzx ecx, word [esp + 0x26]
push edx
movzx edx, word [esp + 0x26]
push eax
movzx eax, word [esp + 0x28]
push ecx
push edx
push eax
lea ecx, [esp + 0x9c]
push str._04d_02d_02d_02d_02d_02d.000000_000
push ecx
call ebp
add esp, 0x20
lea edx, [esp + 0x84]
push edx
mov ecx, 0x103acf4
call dword [sym.imp.mfc90.dll_Ordinal_820]
lea eax, [esp + 0x84]
push eax
push str.event_log_TimeWritten
push str.SOFTWARETrojanCut_tc_Env
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.00491e90
add esp, 0x10
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
sub ecx, dword [esp + 0x3c]
mov eax, 0x10624dd3
mul ecx
mov esi, edx
shr esi, 6
mov byte [esp + 0x290], 9
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x290], 8
lea ecx, [esp + 0x18]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x290], 7
lea ecx, [esp + 0x10]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x290], 6
lea ecx, [esp + 0x2c]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x290], 5
lea ecx, [esp + 0x40]
call sub.mfc90.dll_Ordinal_781
mov byte [esp + 0x290], 4
lea ecx, [esp + 0x70]
call sub.mfc90.dll_Ordinal_781
mov byte [esp + 0x290], 3
lea ecx, [esp + 0x54]
call sub.mfc90.dll_Ordinal_781
mov byte [esp + 0x290], 2
lea ecx, [esp + 0x29c]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x290], 1
lea ecx, [esp + 0x2a0]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x290], 0
lea ecx, [esp + 0x2a4]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov dword [esp + 0x290], 0xffffffff
lea ecx, [esp + 0x2a8]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov eax, esi
mov ecx, dword [esp + 0x288]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
mov ecx, dword [esp + 0x274]
xor ecx, esp
call fcn.004e0148
add esp, 0x284
ret