Function at 0x422320
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x4c
push ebx
push esi
mov esi, ecx
push edi
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [esi + 0x847a], 2
call edi
cmp eax, 6
ja 0x422389
sub eax, dword [ecx + 0x690560e9]
stc
add ch, dh
and dword [esi - 0x35], 0xffffff9d
cwde
push es
mov gs, word [ebx - 0x76298f5a]
mov al, 0xca
iretd
xor ebx, ebx
cmp dword [esi + 0x847a], ebx
jle 0x4226c6
jmp 0x4223a0
mov eax, ebx
sub eax, 0
je 0x422531
dec eax
jne 0x4226b9
mov dword [esi + 0x2372], 1
call edi
cmp eax, 9
ja 0x422428
loopne 0x422427
invalid
psubsb mm0, qword [ebx - 0x45000059]
lodsb al, byte [esi]
aad 0x46
add byte [ebp - 0x491717b3], cl
xor al, 0
add byte [ebx + 0x72081478], al
add cl, byte [ebx - 0x7972b000]
jp 0x42246a
call fcn.0041cbb0
mov edx, str.mbamgui.exe
lea ecx, [ebp - 0x18]
call fcn.004258f0
cmp dword [eax + 0x14], 8
jb 0x422442
mov eax, dword [eax]
push eax
lea eax, [esi + 0x237a]
add byte [eax], al
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 8
cmp dword [ebp - 4], 8
jb 0x422464
push dword [ebp - 0x18]
call fcn.00447bb4
add esp, 4
xor eax, eax
mov dword [ebp - 4], 7
mov dword [ebp - 8], 0
add byte [eax], al
add bh, al
inc ebp
clc
add byte [eax], al
add byte [eax], al
mov word [ebp - 0x18], ax
call edi
cmp eax, 4
ja 0x4224b2
dec ebp
mov byte [0xbc24f6e7], al
sti
salc
outsd dx, dword [esi]
push edi
test bh, 0x39
shr dword fs:[ebx - 0x15], 1
mov dl, 0xf3
and dword [eax + 0x387bafc0], edi
ror byte [edi], 1
push ebx
cmp al, 0xd0
fldenv [ecx + 0xd]
lodsd eax, dword [esi]
nop
invalid
mov dword [esi + 0x2376], 2
call edi
cmp eax, 9
ja 0x4226b9
jno 0x4224ec
outsd dx, dword [esi]
rcl byte [eax - 0x30f04862]
sub dword [esi + ecx*8 - 0x5d], edi
mov dh, 0xf9
xor ch, byte [edi]
sub al, 0x85
std
mov eax, 0x5a58b00d
push esi
mov ss, eax
stc
cmpsb byte [esi], byte es:[edi]
push ebx
sahf
jp 0x42248c
and byte [ebx], ch
xor bl, byte [ecx + 0x659ed31d]
enter 0x55e9, 0xffffffffffffff92
invalid
cdq
sbb eax, 0xc8659ed3
jmp 0xfccfb74c
mov dword [esi + 0x2036], 2
call edi
cmp eax, 6
ja 0x422589
jb 0x422549
leave
mov dh, 0x32
and bl, byte [eax - 0x7ab1fdee]
cmp al, 0xf6
adc al, byte [edx]
dec esi
test dword [esi + esi*8], edi
pop eax
out dx, eax
mov al, byte [0x5ffd241e]
invalid
call fcn.0041cbb0
mov edx, str.avastui.exe
lea ecx, [ebp - 0x30]
call fcn.004258f0
cmp dword [eax + 0x14], 8
jb 0x4225a3
mov eax, dword [eax]
push eax
lea eax, [esi + 0x203e]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 8
cmp dword [ebp - 0x1c], 8
jb 0x4225c5
push dword [ebp - 0x30]
call fcn.00447bb4
add esp, 4
xor eax, eax
mov dword [ebp - 0x1c], 7
mov dword [ebp - 0x20], 0
mov word [ebp - 0x30], ax
call edi
cmp eax, 1
ja 0x4225f5
dec esi
int1
xchg edx, eax
xchg al, dl
outsb dx, byte [esi]
push ecx
jecxz 0x422618
invalid
call fcn.0041cbb0
mov edx, str.avastui2.exe
lea ecx, [ebp - 0x48]
call fcn.004258f0
cmp dword [eax + 0x14], 8
jb 0x42260f
dec ebp
mov eax, 0x32e9e8
add byte [ebx + 0x72081478], al
add cl, byte [ebx - 0x7972b000]
nop
and byte [eax], al
add byte [eax - 1], dl
mov eax, dword [eax]
push eax
lea eax, [esi + 0x2090]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
adc eax, sym.imp.USER32.dll_wsprintfW
add esp, 8
cmp dword [ebp - 0x34], 8
jb 0x422631
push dword [ebp - 0x48]
call fcn.00447bb4
add esp, 4
xor eax, eax
mov dword [ebp - 0x34], 7
mov dword [ebp - 0x38], 0
mov word [ebp - 0x48], ax
call edi
cmp eax, 6
ja 0x422693
mov dl, 0xa5
xchg byte [ecx + 0x22], ch
inc dl
and ecx, esi
call 0xc9ee479c
test al, 0x16
xchg edi, eax
out 0xf3, al
xchg edx, eax
push eax
js 0x4226a9
mov ebx, 0x45ea03b0
bnd jecxz 0x422600
ljmp 0x179d:0x95e3f245
popfd
pop ss
daa
in eax, dx
mov byte [bp + di + 0x2b48], ah
inc byte [ecx - 0x4a]
dec ebx
mov dword [0x41fe2b48], eax
mov dh, 0x4b
lahf
cwde
inc ecx
cmp dword [edx - 0x40], ebp
jae 0x422666
aam 0x64
sbb dword [esi - 0x4d], edi
sbb byte [edi + 0x52], al
pop esp
in eax, dx
pushfd
push ss
or byte [ebx - 0x39], al
dec esp
jge 0x422671
dec edx
mov dword [esi + 0x203a], 1
call edi
cmp eax, 1
ja 0x4226b9
add dl, ch
jle 0x42265f
adc ch, byte [eax]
fsub dword [ecx + 0x156a88ac]
or bh, byte [edx - 0x53]
aas
cli
cmpsb byte [esi], byte es:[edi]
jge 0x4226cd
inc ebx
cmp ebx, dword [esi + 0x847a]
jl 0x4223a0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
int3