Function at 0x42a80c
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
lea ebp, [esp - 0x68]
sub esp, 0x108
mov eax, dword [ebp + 0x78]
push ebx
push esi
push edi
push 5
mov dword [ebp + 0x4c], eax
xor ebx, ebx
lea eax, [ebp + 0x78]
push ebx
push eax
call fcn.00417571
add esp, 0xc
lea ecx, [ebp + 0x78]
mov dword [ebp + 0x78], eax
call fcn.0040c032
mov dword [ebp + 0x64], ebx
mov byte [0x4affb9], 1
call fcn.0040f23b
mov dword [ebp + 0x28], eax
movzx ax, al
xor ecx, ecx
mov ch, al
mov dword [ebp + 0x58], ebx
or ecx, eax
mov dword [ebp + 0x2c], ecx
lea ecx, [ebp + 0x48]
call fcn.0043717e
push str.PeExe
push 0xffffffffffffffff
mov esi, 0x4aff28
push esi
call fcn.004394ef
add esp, 0xc
lea ecx, [ebp + 0x34]
call fcn.0043717e
push ebx
lea eax, [ebp + 0x34]
push eax
push str.SCRIPTINIT
push 0x64
push dword [0x4afe10]
mov dword [ebp + 0x38], ebx
mov dword [ebp + 0x3c], ebx
call fcn.00411356
lea eax, [ebp + 0x34]
push 1
push eax
call fcn.0047a39a
mov edx, dword [ebp + 0x34]
add esp, 0x1c
lea ecx, [ebp + 0x60]
mov dword [ebp + 0x60], edx
call fcn.0040c032
cmp dword [ebp + 0x38], 4
mov eax, dword [ebp + 0x60]
jg 0x42a8cb
mov word [edx], bx
mov word [eax], bx
cmp word [eax], bx
mov edi, 0x4aff28
je 0x42a9aa
push 0x40
push 0x49c340
mov ecx, edi
call fcn.0041708c
mov eax, dword [ebp + 0x34]
push dword [ebp + 0x4c]
mov dword [ebp + 0x60], eax
mov al, byte [0x4ae280]
lea ecx, [ebp + 0x50]
mov dword [ebp + 0x34], ebx
mov byte [ebp + 0x5f], al
mov byte [0x4ae280], 1
call fcn.004419bc
push 0x497994
push dword [ebp + 0x50]
mov ecx, edi
push dword [ebp + 0x60]
call fcn.004741b8
push 0xffffffffffffffff
mov dword [ebp + 0x64], eax
mov al, byte [ebp + 0x5f]
push ebx
push str.__Autoapp
mov ecx, edi
mov byte [0x4ae280], al
call fcn.0040d05d
cmp eax, ebx
je 0x42a95b
add eax, 4
cmp eax, ebx
je 0x42a95b
mov eax, dword [eax]
xor ecx, ecx
mov cx, word [eax]
cmp cx, bx
je 0x42a952
inc eax
mov dword [ebp + 0x58], ecx
inc eax
push eax
lea ecx, [ebp + 0x48]
call fcn.00441a80
push 0xffffffffffffffff
push ebx
push str.__bInitWin
mov ecx, edi
call fcn.0040d05d
cmp eax, ebx
je 0x42a9a2
add eax, 4
cmp eax, ebx
je 0x42a9a2
mov byte [0x4afed5], 1
mov eax, dword [eax]
mov dword [ebp + 0x44], eax
lea eax, [ebp + 0x60]
push eax
lea eax, [ebp + 0x44]
push eax
mov dword [ebp + 0x60], ebx
call fcn.00439fac
mov eax, dword [ebp + 0x60]
cmp eax, ebx
pop ecx
pop ecx
jle 0x42a9a2
and al, 0x3f
or byte [0x4afed5], al
lea ecx, [ebp + 0x50]
call fcn.00431c4c
push dword [ebp + 0x34]
call fcn.00431c1e
pop ecx
lea ecx, [ebp + 0x34]
call fcn.00431c4c
push str.PeExe
push 1
push esi
call fcn.004394ef
add esp, 0xc
lea ecx, [ebp + 0x1c]
call fcn.0043717e
movzx eax, word [ebp + 0x2c]
shl eax, 0x10
cmp word [ebp + 0x58], 0x2a
mov dword [ebp + 0x20], ebx
mov dword [ebp + 0x24], ebx
mov dword [ebp + 0x50], eax
mov dword [ebp + 0x60], ebx
je 0x42aa41
cmp word [ebp + 0x58], 0x24
je 0x42aa41
mov eax, dword [ebp + 0x48]
cmp word [eax], bx
jne 0x42aa41
lea eax, [ebp + 0x50]
push eax
lea eax, [ebp + 0x1c]
push eax
push str.SCRIPT
push 0x65
push dword [0x4afe10]
call fcn.00411356
mov eax, dword [ebp + 0x50]
or eax, 1
push eax
lea eax, [ebp + 0x1c]
push eax
call fcn.0047a39a
mov eax, dword [ebp + 0x1c]
add esp, 0x1c
cmp dword [ebp + 0x20], 4
mov dword [ebp + 0x60], eax
jg 0x42aa41
mov dword [ebp + 0x28], ebx
mov dword [ebp + 0x2c], ebx
mov dword [ebp + 0x50], ebx
mov dword [ebp + 0x60], ebx
mov eax, dword [ebp + 0x4c]
cmp eax, ebx
mov dword [ebp + 0x18], eax
je 0x42aa69
push 0x11
lea eax, [ebp + 0x18]
push eax
push str.PECMDpecmd_cmd
call fcn.00431d40
add esp, 0xc
test eax, eax
mov byte [0x4afd5c], 1
jne 0x42aa6f
mov byte [0x4afd5c], bl
mov esi, dword [ebp + 0x78]
push 4
push esi
push 0x498964
call fcn.00432c59
add esp, 0xc
test al, al
je 0x42aa8c
mov byte [0x4afb92], bl
mov al, byte [0x4afd5c]
cmp al, bl
mov byte [ebp + 0x7b], al
jne 0x42ab60
cmp word [ebp + 0x58], 0x2d
jne 0x42aaa7
or byte [ebp + 0x7b], 2
cmp word [ebp + 0x58], 0x2a
jne 0x42aad3
push 0x4aff50
mov byte [0x4ae280], 1
call fcn.0047747f
mov eax, dword [ebp + 0x48]
pop ecx
add eax, 8
push eax
mov ecx, edi
call fcn.004265bb
jmp 0x42ab58
cmp word [ebp + 0x58], 0x24
jne 0x42aaf0
push ebx
push ebx
push ebx
push dword [ebp + 0x48]
mov ecx, edi
mov byte [0x4ae280], 1
call fcn.00427548
jmp 0x42ab58
mov eax, dword [ebp + 0x48]
cmp word [eax], bx
je 0x42ab26
cmp dword [ebp + 0x60], ebx
jne 0x42ab26
push 0x49825c
lea ecx, [ebp + 0x48]
mov byte [0x4ae280], 1
call fcn.004371ec
push esi
lea ecx, [ebp + 0x48]
call fcn.004371ec
push dword [ebp + 0x48]
mov ecx, edi
call fcn.004296fc
jmp 0x42ab58
cmp word [esi], bx
jne 0x42ab60
cmp dword [ebp + 0x60], ebx
jne 0x42ab60
push 5
push 0x12e
push dword [0x4afe10]
call dword [sym.imp.KERNEL32.dll_FindResourceW]
test eax, eax
je 0x42afee
push ebx
push 0x497994
mov ecx, edi
call fcn.00426e18
mov dword [ebp + 0x64], eax
jmp 0x42afee
lea ecx, [ebp + 0x58]
call fcn.0043717e
cmp dword [ebp + 0x4c], ebx
jne 0x42ab7d
lea ecx, [ebp + 0x58]
call fcn.00431c4c
or esi, 0xffffffff
jmp 0x42b02c
lea eax, [ebp + 0x58]
push eax
push dword [ebp + 0x4c]
call fcn.0041a640
mov eax, dword [ebp + 0x58]
mov dword [ebp + 0x64], eax
push 1
lea eax, [ebp + 0x4c]
push eax
lea eax, [ebp + 0x64]
push eax
mov dword [ebp + 0x4c], ebx
call fcn.00417571
add esp, 0x14
lea ecx, [ebp + 0x64]
mov dword [ebp + 0x64], eax
call fcn.0040c032
mov esi, dword [ebp + 0x64]
mov eax, esi
sub eax, dword [ebp + 0x58]
sar eax, 1
cmp dword [ebp + 0x60], ebx
mov dword [ebp + 0x4c], eax
je 0x42abca
cmp byte [ebp + 0x7b], bl
mov byte [ebp + 0x57], 1
je 0x42abcd
mov byte [ebp + 0x57], bl
cmp byte [ebp + 0x57], bl
mov byte [ebp + 0x5e], 0x10
mov dword [ebp + 0x34], ebx
mov dword [ebp + 0x38], ebx
mov dword [ebp + 0x3c], ebx
mov byte [ebp + 0x5f], 1
je 0x42abf5
lea esi, [ebp + 0x1c]
mov byte [0x4ae280], 1
mov byte [ebp + 0x5f], bl
jmp 0x42addf
push dword [ebp + 0x1c]
call fcn.00431c1e
pop ecx
lea ecx, [ebp + 0x1c]
call fcn.00431c4c
cmp word [esi], 0x2f
mov dword [ebp + 0x28], ebx
mov dword [ebp + 0x2c], ebx
mov dword [ebp + 0x50], ebx
mov byte [ebp + 0x7b], bl
jne 0x42ac39
mov ax, word [esi + 2]
or ax, 0x20
cmp ax, 0x6c
jne 0x42ac39
mov ax, word [esi + 4]
call fcn.00431c5f
test al, al
je 0x42ac39
mov al, byte [esi + 2]
mov byte [ebp + 0x7b], al
cmp byte [ebp + 0x7b], bl
mov dword [ebp + 0x60], ebx
je 0x42ac62
mov word [esi + 2], 0x20
mov word [esi], 0x20
add esi, 4
lea ecx, [ebp + 0x64]
mov dword [ebp + 0x64], esi
call fcn.0040c032
mov esi, dword [ebp + 0x64]
jmp 0x42ad06
cmp word [esi], 0x22
push ebx
lea eax, [ebp + 0x40]
push eax
lea eax, [ebp + 0x64]
push eax
sete byte [ebp + 0x33]
mov dword [ebp + 0x40], ebx
mov dword [ebp + 0x64], esi
call fcn.00417571
sub eax, dword [ebp + 0x64]
add esp, 0xc
sar eax, 1
push eax
push dword [ebp + 0x64]
lea ecx, [ebp + 0x44]
call fcn.004419d9
push dword [ebp + 0x44]
call fcn.00482cde
cmp byte [ebp + 0x33], bl
pop ecx
mov dword [ebp + 0x40], eax
je 0x42acbd
cmp eax, ebx
je 0x42acb4
mov ax, word [esi + 2]
call fcn.00431c5f
test al, al
je 0x42acbd
push esi
call fcn.0040f738
pop ecx
mov esi, eax
cmp dword [ebp + 0x40], ebx
je 0x42acfe
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
inc eax
mov dword [ebp + 0x40], eax
add eax, 0xc
push eax
lea ecx, [ebp + 0x60]
call fcn.004371c5
push 0xc
push str.LOAD
push dword [ebp + 0x60]
call fcn.00410b58
push dword [ebp + 0x40]
mov eax, dword [ebp + 0x60]
add eax, 0xa
push esi
push eax
call fcn.004047cb
mov esi, dword [ebp + 0x60]
add esp, 0x18
lea ecx, [ebp + 0x44]
call fcn.00431c4c
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov dword [ebp + 0x44], eax
add eax, 3
push eax
lea ecx, [ebp + 0x34]
call fcn.004371c5
mov eax, dword [ebp + 0x44]
inc eax
push eax
push esi
push dword [ebp + 0x34]
call fcn.004047cb
mov eax, dword [ebp + 0x34]
mov ecx, dword [ebp + 0x44]
add esp, 0xc
cmp byte [ebp + 0x7b], bl
mov word [eax + ecx*2 + 2], bx
je 0x42add0
push dword [ebp + 0x34]
mov byte [ebp + 0x5e], bl
call fcn.0043424a
mov eax, dword [ebp + 0x34]
mov dword [ebp + 0x64], eax
pop ecx
lea eax, [ebp + 0x64]
call fcn.00410bc4
mov esi, dword [ebp + 0x64]
sub esi, dword [ebp + 0x34]
mov eax, dword [ebp + 0x4c]
sar esi, 1
add eax, esi
mov dword [ebp + 0x40], eax
inc eax
push eax
lea ecx, [ebp + 0x58]
call fcn.004371c5
cmp esi, ebx
jle 0x42add0
mov eax, dword [ebp + 0x58]
mov ecx, dword [ebp + 0x4c]
push esi
push dword [ebp + 0x34]
lea eax, [eax + ecx*2]
push eax
call fcn.004047cb
mov eax, dword [ebp + 0x58]
mov ecx, dword [ebp + 0x40]
add esp, 0xc
cmp byte [ebp + 0x7b], 0x4c
mov word [eax + ecx*2], bx
jne 0x42add0
push dword [ebp + 0x64]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
inc eax
add eax, eax
push eax
push dword [ebp + 0x64]
mov dword [ebp + 0x78], eax
push dword [ebp + 0x34]
call fcn.00410b0e
mov ecx, dword [ebp + 0x78]
lea eax, [esi + esi]
push eax
mov eax, dword [ebp + 0x34]
add ecx, eax
push ebx
push ecx
call fcn.004832e0
add esp, 0x18
or byte [ebp + 0x5e], 1
lea ecx, [ebp + 0x60]
lea esi, [ebp + 0x34]
call fcn.00431c4c
mov eax, dword [esi]
push 1
push dword [ebp + 0x58]
mov ecx, 0x4aff28
mov dword [ebp + 0x78], eax
call fcn.00444e2a
cmp byte [ebp + 0x57], bl
je 0x42ae04
push 0x10040
push str.101
jmp 0x42ae3a
lea ecx, [ebp + 0x78]
call fcn.0040c032
push dword [ebp + 0x78]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov edx, dword [ebp + 0x78]
lea ecx, [edx + eax*2 - 2]
jmp 0x42ae2f
mov ax, word [ecx]
call fcn.00431c5f
test al, al
je 0x42ae33
mov word [ecx], bx
dec ecx
dec ecx
cmp ecx, edx
jae 0x42ae1e
push 0x40
push str.cmdline
mov ecx, edi
call fcn.0041708c
mov eax, dword [ebp + 0x78]
sub eax, dword [esi]
test eax, 0xfffffffe
jle 0x42ae68
push dword [ebp + 0x78]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [eax + eax + 2]
push eax
push dword [ebp + 0x78]
push dword [esi]
call fcn.00410b0e
add esp, 0xc
mov edi, dword [esi]
push 0x49c2c0
lea ecx, [ebp + 0x78]
call fcn.004419bc
push ebx
push 0x4aff28
lea ecx, [ebp - 0xa0]
call fcn.00429378
movzx eax, word [ebp + 0x2c]
push eax
lea ecx, [ebp - 0xa0]
mov dword [ebp + 0x44], eax
call fcn.00436055
mov ax, word [ebp + 0x2c]
mov word [ebp - 0x74], ax
mov eax, edi
push ebx
lea edi, [ebp - 0xa0]
call fcn.00417315
push dword [ebp + 0x2c]
push dword [esi]
call fcn.0040f222
mov ecx, edi
push ecx
lea ecx, [ebp + 0x78]
push ecx
mov ecx, dword [ebp + 0x50]
push eax
push ebx
push esi
mov dword [ebp + 0x40], eax
call fcn.00421e41
movzx edi, word [ebp + 0x28]
movzx eax, ax
or dword [ebp + 0x50], eax
mov eax, dword [ebp + 0x40]
inc eax
push eax
mov eax, edi
xor eax, dword [ebp + 0x44]
push eax
push dword [esi]
call fcn.0040f296
mov eax, dword [ebp + 0x50]
add esp, 0x2c
and eax, 2
shl edi, 0x10
push ebx
lea ecx, [ebp - 0xa0]
or edi, eax
call fcn.00429312
lea ecx, [ebp - 0x60]
call fcn.00431c4c
lea ecx, [ebp + 0x78]
call fcn.00431c4c
movsx eax, byte [ebp + 0x5f]
push str.PeExe
push eax
push 0x4aff28
call fcn.004394ef
mov ecx, dword [esi]
xor eax, eax
mov al, byte [ebp + 0x5e]
add esp, 0xc
push ebx
push ebx
mov dword [esi], ebx
and eax, 1
or eax, edi
or eax, 0x80
push eax
push ebx
push dword [ebp + 0x58]
push ecx
mov ecx, 0x4aff28
call fcn.004742af
mov dword [ebp + 0x64], eax
call fcn.00437764
cmp dword [0x4b0274], ebx
jle 0x42af69
mov byte [0x4ae290], 0xff
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
mov edi, eax
sub edi, 0x14
call esi
jmp 0x42afd1
call esi
mov dword [ebp + 0x78], eax
sub eax, edi
cmp eax, 1
jb 0x42af90
push ebx
call dword [sym.imp.USER32.dll_PostQuitMessage]
mov edi, dword [ebp + 0x78]
push 0x4bf
push 0xa
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_MsgWaitForMultipleObjects]
jmp 0x42afc9
push 1
push ebx
push ebx
push ebx
lea eax, [ebp - 4]
push eax
call dword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x42afd1
lea eax, [ebp - 4]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [ebp - 4]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageW]
cmp dword [0x4b0274], ebx
jg 0x42afa2
cmp dword [0x4b0274], ebx
jg 0x42af7a
lea ecx, [ebp + 0x34]
call fcn.00431c4c
lea ecx, [ebp + 0x58]
call fcn.00431c4c
mov edi, 0x4aff28
push dword [ebp + 0x1c]
call fcn.00431c1e
pop ecx
mov ecx, 0x4b06d0
call fcn.00432210
mov ecx, 0x4b02c8
call fcn.0043223e
push 0x4aff50
call fcn.0047747f
pop ecx
call fcn.0040f644
mov eax, 0x497994
push eax
push eax
mov ecx, edi
call fcn.00419ca5
mov esi, dword [ebp + 0x64]
lea ecx, [ebp + 0x1c]
call fcn.00431c4c
lea ecx, [ebp + 0x48]
call fcn.00431c4c
pop edi
mov eax, esi
pop esi
pop ebx
add ebp, 0x68
leave
ret