Function at 0x443a58
Capabilities:
Check for time delay via gettickcount

Disassembly:
mov eax, 0x546c30
call fcn.0054565c
mov eax, 0x2074
call fcn.004318e0
push ebx
push esi
xor esi, esi
mov dword [ebp - 0x1c], esi
mov dword [ebp - 4], esi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
cmp eax, 0x68
ja 0x443c84
push esp
lodsb al, byte [esi]
pop edx
and eax, dword [eax + 0x326efeaf]
pop ss
xchg al, dl
pushal
salc
mov cl, 0x5b
fistp qword [ebx]
pop ds
jl 0x443b13
mov eax, 0xe83fdd08
mov dword cs:[eax], esp
rcl byte [eax]
push edx
mov ebx, 0x72706166
dec edi
mov eax, 0x89edc06a
cmp cl, ah
cdq
push esp
lodsb al, byte [esi]
sub eax, 0xc651071c
sbb ebp, edi
sub eax, ecx
mov ah, 0x8a
push 0xfce2a922
ror dword [esi + 0x7ead3a8a], cl
test dword [ecx], esi
pop eax
or al, 0x63
cmp byte [ebx - 0x28355284], bl
xor al, 0x83
xchg esp, eax
aam 0x6d
test bl, cl
shr byte [esi], 0xee
ret
cld
loop 0x443b21
jo 0x443b68
jb 0x443b13
adc ch, byte [esi + 0x56]
salc
push ds
lahf
add bl, byte [eax + 0x43]
pop eax
inc ebx
push 0x2f
sahf
or bh, byte [ebp + 0x2b]
jle 0x443b4c
pop ebp
push 0x6a
cmpsb byte [esi], byte es:[edi]
adc dword cs:[ebp + 0x24], esp
cmpsb byte [esi], byte es:[edi]
adc byte [eax + 0x26], dh
je 0x443ba5
push ecx
in eax, dx
and ecx, dword [esi - 0x1dbd9a6d]
into
push edi
ret 0x289d
ret
jecxz 0x443b9e
mov ch, 0x88
call 0x9fd7870e
inc ecx
mov edi, 0x1d7a1f05
or dh, ch
mov fs, word [ebx - 9]
das
imul dword [edi]
push ds
das
das
mov ah, 0x48
aam 0x47
xlatb
loopne 0x443bbe
push 0xf5e7fd2b
cwde
mov eax, 0x30ae6ef0
xchg ebp, eax
xchg ebp, eax
cmp dl, dl
and al, 0xcf
pop ss
xlatb
jge 0x443b55
inc edi
or eax, 0xdb426ac6
pushal
xlatb
invalid
imul edx, eax, 0xd55b5938
fsubr dword [ebx + 0x4e68150b]
jno 0x443be5
stosd dword es:[edi], eax
or edx, dword [0x39714e68]
cmp eax, 0x1fc33b4d
pop edi
adc eax, 0x28bcae45
sar dh, 1
das
loopne 0x443b6c
test dword [ebx + esi*8 + 0x56], ebp
push esi
aaa
movsd dword es:[edi], dword [esi]
lahf
xchg esi, eax
out dx, eax
pop eax
xor edx, dword [ebx]
adc dword [ebx - 0x30], ebp
imul dword [ebp + 0x7a]
jno 0x443bb7
jo 0x443bfc
push ebp
push esp
lodsb al, byte [esi]
pop eax
sub dword [esi + 0x11], esp
lcall 0x45da, 0x11d66b50
and eax, 0x55c6dad0
pop esi
adc dh, al
mov ah, 0x68
lds esi, [ebx - 0x7c]
mov dl, 0xf7
jmp 0x3fa8f39
invalid
cmpsb byte [esi], byte es:[edi]
or dword [ebx], ebx
call 0xecb99d6c
bound ebx, qword [esi - 0x77521f84]
movsb byte es:[edi], byte [esi]
hlt
xor eax, eax
push 0xffffffffffffffff
mov word [ebp - 0x34], ax
push esi
lea eax, [ebp + 0x10]
push eax
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x20], 7
mov dword [ebp - 0x24], esi
call fcn.00402200
xor ebx, ebx
xor eax, eax
inc ebx
mov byte [ebp - 4], bl
push 0x1ffe
mov word [ebp - 0x207c], ax
lea eax, [ebp - 0x207a]
push esi
push eax
call fcn.0041b930
mov eax, dword [ebp + 0xc]
add esp, 0xc
sub eax, 0x10
je 0x443dcb
sub eax, 0xa
je 0x443d57
dec eax
dec eax
jne 0x443e40
call fcn.004ae8cf
push esi
push 0x1c
lea ecx, [ebp - 0x207c]
push ecx
push esi
call dword [eax + 0x1bc]
test eax, eax
je 0x443e40
sub esp, 0x18
lea eax, [ebp - 0x207c]
mov ecx, esp
mov dword [ebp + 0xc], esp
push eax
call fcn.004018f6
sub esp, 0x18
mov byte [ebp - 4], 4
mov ecx, esp
mov dword [ebp - 0x14], esp
push str._LOCALAPPDATA_
call fcn.004018f6
sub esp, 0x18
lea eax, [ebp + 0x10]
mov ecx, esp
push eax
mov byte [ebp - 4], 5
call fcn.004018ce
lea eax, [ebp - 0x7c]
push eax
mov byte [ebp - 4], bl
call fcn.00443e73
push eax
lea ecx, [ebp + 0x10]
call fcn.00401940
lea ecx, [ebp - 0x7c]
jmp 0x443e39
call fcn.004ae8cf
push esi
push 0x1a
lea ecx, [ebp - 0x207c]
push ecx
push esi
call dword [eax + 0x1bc]
test eax, eax
je 0x443e40
sub esp, 0x18
lea eax, [ebp - 0x207c]
mov ecx, esp
mov dword [ebp + 0xc], esp
push eax
call fcn.004018f6
sub esp, 0x18
mov byte [ebp - 4], 6
mov ecx, esp
mov dword [ebp - 0x18], esp
push str._APPDATA_
call fcn.004018f6
sub esp, 0x18
lea eax, [ebp + 0x10]
mov ecx, esp
push eax
mov byte [ebp - 4], 7
call fcn.004018ce
lea eax, [ebp - 0x4c]
push eax
mov byte [ebp - 4], bl
call fcn.00443e73
push eax
lea ecx, [ebp + 0x10]
call fcn.00401940
lea ecx, [ebp - 0x4c]
jmp 0x443e39
call fcn.004ae8cf
push esi
push 0x10
lea ecx, [ebp - 0x207c]
push ecx
push esi
call dword [eax + 0x1bc]
test eax, eax
je 0x443e40
sub esp, 0x18
lea eax, [ebp - 0x207c]
mov ecx, esp
mov dword [ebp + 0xc], esp
push eax
call fcn.004018f6
sub esp, 0x18
mov byte [ebp - 4], 2
mov ecx, esp
mov dword [ebp - 0x18], esp
push str._DESKTOPFOLDER_
call fcn.004018f6
sub esp, 0x18
lea eax, [ebp + 0x10]
mov ecx, esp
push eax
mov byte [ebp - 4], 3
call fcn.004018ce
lea eax, [ebp - 0x64]
push eax
mov byte [ebp - 4], bl
call fcn.00443e73
push eax
lea ecx, [ebp + 0x10]
call fcn.00401940
lea ecx, [ebp - 0x64]
push esi
push ebx
call fcn.004023ba
mov ecx, dword [ebp + 8]
lea eax, [ebp + 0x10]
push eax
call fcn.0040191b
push esi
push ebx
lea ecx, [ebp - 0x34]
call fcn.004023ba
push esi
push ebx
lea ecx, [ebp + 0x10]
call fcn.004023ba
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp + 8]
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret 0x20