Function at 0x426196
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
push ebx
push esi
xor ebx, ebx
test byte [0x4a9003], 0x20
push edi
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0xc], ecx
je 0x4261c9
push ebx
push ebx
push 0x44a
push dword [0x4a42a8]
call fcn.0040d8d0
pop ecx
push eax
call edi
push ebx
push ebx
push 0x44a
push dword [0x4a5e04]
call edi
cmp byte [0x4a9001], bl
je 0x426200
cmp byte [0x4a9002], bl
jne 0x426200
mov byte [0x4a9002], 1
call fcn.0040d1b1
cmp eax, 0x60000
jae 0x426200
call fcn.00410221
mov eax, dword [0x4a5fb0]
cmp eax, ebx
je 0x42620e
cmp word [eax], bx
jne 0x426250
mov ecx, dword [ebp - 0xc]
push ebx
call fcn.004137b0
mov eax, dword [0x4a5fb0]
cmp eax, ebx
je 0x426225
cmp word [eax], bx
jne 0x42622f
mov ecx, dword [ebp - 0xc]
push 0x64
call fcn.0040ce62
cmp byte [0x4a5df4], bl
je 0x426200
cmp byte [0x4a6270], bl
jne 0x426200
push ebx
push ebx
push 0x44b
push dword [0x4a5e04]
call edi
jmp 0x426200
mov esi, dword [sym.imp.KERNEL32.dll_SleepEx]
push 1
push 0xa
call esi
call fcn.00413cfe
cmp byte [0x4a9001], bl
je 0x426289
cmp byte [0x4a9002], bl
jne 0x426289
mov byte [0x4a9002], 1
call fcn.0040d1b1
cmp eax, 0x60000
jae 0x426289
call fcn.00410221
push dword [0x4a5fb0]
lea ecx, [ebp - 8]
call fcn.0043ccfc
mov eax, dword [ebp - 8]
call fcn.00413ccd
push dword [ebp - 8]
call fcn.0040c7db
pop ecx
push 1
push 0xa
mov dword [ebp - 0x14], eax
call esi
mov eax, dword [ebp - 8]
cmp word [eax], bx
mov byte [ebp - 1], 2
je 0x42642d
call fcn.004139d6
test eax, eax
jne 0x426335
cmp byte [0x4a5df4], bl
je 0x4262e9
cmp byte [0x4a6270], bl
jne 0x4262e9
push ebx
push ebx
push 0x44b
push dword [0x4a5e04]
call edi
mov eax, dword [ebp - 8]
cmp word [eax], bx
je 0x426335
push dword [ebp - 0x14]
call fcn.0040b80d
mov esi, eax
push 8
push esi
push str.Explorer
call fcn.0042ecb0
add esp, 0x10
test al, al
je 0x42631e
mov ax, word [esi + 0x10]
cmp ax, 0x2e
je 0x426320
cmp ax, bx
je 0x426320
xor esi, esi
cmp esi, ebx
je 0x42635f
push ebx
push ebx
push ebx
push ebx
push esi
call fcn.004131ce
add esp, 0x14
test eax, eax
je 0x42635f
mov ecx, dword [ebp - 0xc]
push 0x1f4
call fcn.0040ce62
mov ecx, dword [ebp - 0xc]
push 0xffffffffffffffff
call fcn.004137b0
push dword [0x4a5fb0]
lea ecx, [ebp - 8]
call fcn.0043cd64
jmp 0x4262c1
call fcn.0040d7c2
push ebx
push ebx
push 0x44a
push dword [0x4a5e04]
call edi
mov eax, 0x48e984
push eax
push eax
call sym.PECMD.exe_LoadEnvi
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
pop ecx
pop ecx
call esi
push dword [ebp - 8]
lea ecx, [ebp - 0x10]
mov dword [ebp - 0x1c], eax
call fcn.0043ccfc
push dword [0x4a5fb0]
mov dword [ebp - 0x18], 0x24
call fcn.0040d85d
test eax, eax
pop ecx
mov ecx, dword [ebp - 0xc]
push ebx
push ebx
push ebx
je 0x4263be
push dword [ebp - 0x10]
call fcn.0042442a
jmp 0x4263cb
lea eax, [ebp - 0x18]
push eax
push ecx
push dword [ebp - 0x10]
call fcn.00406e39
cmp byte [ebp - 1], bl
jle 0x4263ec
dec byte [ebp - 1]
call esi
sub eax, dword [ebp - 0x1c]
cmp eax, 0x7d0
jae 0x4263ec
mov ecx, dword [ebp - 0xc]
push 0x1f4
call fcn.0040ce62
mov ecx, dword [ebp - 0xc]
push ebx
call fcn.004137b0
mov eax, dword [0x4a5fb0]
cmp eax, ebx
je 0x426420
cmp word [eax], bx
je 0x426420
push eax
lea ecx, [ebp - 8]
call fcn.0043cd64
mov eax, dword [ebp - 8]
call fcn.00413ccd
push dword [ebp - 8]
call fcn.0040c7db
pop ecx
mov dword [ebp - 0x14], eax
lea ecx, [ebp - 0x10]
call fcn.0042dd2d
jmp 0x4262c1
lea ecx, [ebp - 8]
call fcn.0042dd2d
pop edi
pop esi
pop ebx
leave
ret 4