Function at 0x424460
Capabilities:
Check for time delay via gettickcount
Print debug messages

Disassembly:
push 0xffffffffffffffff
push 0x489b0d
mov eax, dword fs:[0]
push eax
sub esp, 0x17c
mov eax, dword [0x4ac13c]
xor eax, esp
mov dword [esp + 0x178], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4ac13c]
xor eax, esp
push eax
lea eax, [esp + 0x190]
mov dword fs:[0], eax
mov edi, ecx
mov dword [esp + 0x14], edi
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
xor ebx, ebx
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0x1c4]
mov dword [ecx + 0x18], 0xf
mov dword [ecx + 0x14], ebx
push eax
mov dword [esp + 0x1c0], 1
mov byte [ecx + 4], bl
call fcn.00402093
lea ecx, [esp + 0x88]
push ecx
mov ecx, edi
call fcn.004240f0
lea edx, [esp + 0x1a0]
push edx
lea eax, [esp + 0x1c]
lea esi, [edi + 0x5f0]
push eax
mov ecx, esi
mov byte [esp + 0x1a0], 2
call fcn.00418960
mov ebp, dword [esp + 0x18]
cmp ebp, ebx
mov ecx, dword [esi + 4]
mov dword [esp + 0x24], ecx
je 0x424518
cmp ebp, esi
je 0x42451d
call fcn.0045c852
mov edx, dword [esp + 0x1c]
cmp edx, dword [esp + 0x24]
je 0x42454f
cmp ebp, ebx
jne 0x424530
call fcn.0045c852
mov eax, dword [esp + 0x1c]
cmp eax, dword [ebp + 4]
jne 0x42453e
call fcn.0045c852
mov ecx, dword [esp + 0x1c]
mov ebp, dword [ecx + 0x28]
mov esi, 0x10
jmp 0x424643
mov eax, dword [esp + 0x70]
mov edi, 0x10
cmp dword [esp + 0x84], edi
jae 0x424565
lea eax, [esp + 0x70]
push eax
push 0x400000
push ebx
push 4
push ebx
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov ebp, eax
cmp ebp, ebx
je 0x424926
push ebp
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x38], esp
push 0xffffffffffffffff
push ebx
lea edx, [esp + 0x1c8]
mov dword [ecx + 0x18], 0xf
mov dword [ecx + 0x14], ebx
push edx
mov byte [ecx + 4], bl
call fcn.00402093
lea eax, [esp + 0x6c]
push eax
call fcn.004194f0
add esp, 0x24
mov edi, eax
push 0xffffffffffffffff
push ebx
push edi
lea ecx, [esp + 0x38]
mov byte [esp + 0x1a4], 3
mov dword [esp + 0x50], 0xf
mov dword [esp + 0x4c], ebx
mov byte [esp + 0x3c], bl
call fcn.00402093
mov ecx, dword [edi + 0x1c]
mov dword [esp + 0x48], ecx
lea edx, [esp + 0x2c]
push edx
lea eax, [esp + 0x24]
push eax
mov ecx, esi
mov byte [esp + 0x1a0], 4
call fcn.0041cf60
mov esi, 0x10
cmp dword [esp + 0x44], esi
jb 0x424614
mov ecx, dword [esp + 0x30]
push ecx
call fcn.00451fd9
add esp, 4
cmp dword [esp + 0x64], esi
mov dword [esp + 0x44], 0xf
mov dword [esp + 0x40], ebx
mov byte [esp + 0x30], bl
mov byte [esp + 0x198], 2
jb 0x42463f
mov edx, dword [esp + 0x50]
push edx
call fcn.00451fd9
add esp, 4
mov edi, dword [esp + 0x14]
push ebx
push ebx
push ebx
push 2
push ebp
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
cmp eax, ebx
jne 0x4246b7
push str.HandleNotifyUICreateTask_MapViewOfFile_Failed
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
cmp dword [esp + 0x84], esi
jb 0x424674
mov eax, dword [esp + 0x70]
push eax
call fcn.00451fd9
add esp, 4
cmp dword [esp + 0x1b8], esi
mov edi, 0xf
mov dword [esp + 0x84], edi
mov dword [esp + 0x80], ebx
mov byte [esp + 0x70], bl
jb 0x4246a4
mov ecx, dword [esp + 0x1a4]
push ecx
call fcn.00451fd9
add esp, 4
cmp dword [esp + 0x1d4], esi
mov dword [esp + 0x1b8], edi
jmp 0x424992
cmp dword [esp + 0x1d4], esi
mov ecx, dword [esp + 0x1c0]
jae 0x4246ce
lea ecx, [esp + 0x1c0]
push 0x3fffff
push ecx
push eax
call fcn.0045ce00
push 0x103
lea eax, [esp + 0x99]
push ebx
push eax
mov byte [esp + 0xa0], bl
call fcn.0045c2f0
add esp, 0x18
cmp dword [esp + 0x1b4], 5
jbe 0x42473f
cmp dword [esp + 0x84], esi
mov ecx, dword [esp + 0x70]
jae 0x424712
lea ecx, [esp + 0x70]
cmp dword [esp + 0x1b8], esi
mov eax, dword [esp + 0x1a4]
jae 0x424729
lea eax, [esp + 0x1a4]
push ecx
push eax
push str._qq:_s__cmd:createtask__cmdparam:_s
push 0x104
lea ecx, [esp + 0x98]
push ecx
jmp 0x424767
cmp dword [esp + 0x84], esi
mov eax, dword [esp + 0x70]
jae 0x424750
lea eax, [esp + 0x70]
push eax
lea edx, [edi + 0x6e]
push edx
push str._qq:_s__cmd:createtask__cmdparam:_s
push 0x104
lea eax, [esp + 0x98]
push eax
call fcn.0045d37d
add edi, 0x5fc
add esp, 0x14
cmp dword [edi + 0x18], esi
jb 0x42477f
mov eax, dword [edi + 4]
jmp 0x424782
lea eax, [edi + 4]
lea ecx, [esp + 0x88]
lea esp, [esp]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x4247b0
cmp dl, bl
je 0x4247ac
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x4247b0
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x424790
xor eax, eax
jmp 0x4247b5
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
jne 0x4248b5
push ebx
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x38], esp
push 0xffffffffffffffff
push ebx
lea edx, [esp + 0x1c8]
mov dword [ecx + 0x18], 0xf
mov dword [ecx + 0x14], ebx
push edx
mov byte [ecx + 4], bl
call fcn.00402093
lea eax, [esp + 0x40]
push eax
mov byte [esp + 0x1bc], 5
call fcn.00435a40
add esp, 4
mov eax, dword [eax]
mov byte [esp + 0x1b8], 6
mov ecx, eax
mov byte [esp + 0x1b8], 7
call fcn.004291e0
lea ecx, [esp + 0x20]
mov esi, eax
mov byte [esp + 0x198], 2
call fcn.00438830
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ebp, dword [esp + 0x14]
cmp esi, ebx
mov esi, eax
je 0x42484e
sub esi, dword [ebp + 0x618]
mov edi, 0xc8
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp + 0x618], eax
jmp 0x424865
sub esi, dword [ebp + 0x61c]
mov edi, 0x3e8
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp + 0x61c], eax
cmp esi, edi
jbe 0x42491c
lea ecx, [esp + 0x20]
push ecx
call fcn.00435a40
add esp, 4
mov edx, dword [ebp + 0xee]
mov eax, dword [eax]
push edx
lea ecx, [esp + 0x8c]
push ecx
mov ecx, eax
mov byte [esp + 0x1a0], 8
call fcn.00430610
lea ecx, [esp + 0x20]
mov byte [esp + 0x198], 2
call fcn.00438830
mov esi, 0x10
jmp 0x42465e
lea edx, [esp + 0x20]
push edx
call fcn.00435a40
add esp, 4
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx + 0xee]
mov eax, dword [eax]
push edx
lea ecx, [esp + 0x8c]
push ecx
mov ecx, eax
mov byte [esp + 0x1a0], 9
call fcn.00430610
lea ecx, [esp + 0x20]
mov byte [esp + 0x198], 2
call fcn.00438830
lea eax, [esp + 0x88]
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x424901
sub eax, edx
push eax
lea edx, [esp + 0x8c]
push edx
mov ecx, edi
call fcn.004022c0
mov esi, 0x10
jmp 0x42465e
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x42493e
push str.HandleNotifyUICreateTask_CreateFileMappingA_ERROR_ALREADY_EXISTS
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
cmp dword [esp + 0x84], edi
jb 0x424954
mov eax, dword [esp + 0x70]
push eax
call fcn.00451fd9
add esp, 4
cmp dword [esp + 0x1b8], edi
mov esi, 0xf
mov dword [esp + 0x84], esi
mov dword [esp + 0x80], ebx
mov byte [esp + 0x70], bl
jb 0x424984
mov ecx, dword [esp + 0x1a4]
push ecx
call fcn.00451fd9
add esp, 4
cmp dword [esp + 0x1d4], edi
mov dword [esp + 0x1b8], esi
mov dword [esp + 0x1b4], ebx
mov byte [esp + 0x1a4], bl
jb 0x4249b2
mov edx, dword [esp + 0x1c0]
push edx
call fcn.00451fd9
add esp, 4
mov ecx, dword [esp + 0x190]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x178]
xor ecx, esp
call fcn.0045b7a6
add esp, 0x188
ret 0x38