Function at 0x427a3f
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
lea ebp, [esp - 0x68]
sub esp, 0x10c
mov eax, dword [ebp + 0x78]
push ebx
push esi
push edi
push 5
mov dword [ebp + 0x4c], eax
xor ebx, ebx
lea eax, [ebp + 0x78]
push ebx
push eax
call fcn.00414faa
add esp, 0xc
lea ecx, [ebp + 0x78]
mov dword [ebp + 0x78], eax
call fcn.0040b43e
mov dword [ebp + 0x64], ebx
mov byte [0x4a6f9d], 1
call fcn.0040e368
mov dword [ebp + 0x28], eax
movzx ax, al
xor ecx, ecx
mov ch, al
mov dword [ebp + 0x5c], ebx
or ecx, eax
mov dword [ebp + 0x2c], ecx
lea ecx, [ebp + 0x44]
call fcn.00433c24
push str.PeExe
push 0xffffffffffffffff
mov esi, 0x4a6f08
push esi
call fcn.00435ee3
add esp, 0xc
lea ecx, [ebp + 0x38]
call fcn.00433c24
push ebx
lea eax, [ebp + 0x38]
push eax
push str.SCRIPTINIT
push 0x64
push dword [0x4a6e00]
mov dword [ebp + 0x3c], ebx
mov dword [ebp + 0x40], ebx
call fcn.004108f8
lea eax, [ebp + 0x38]
push 1
push eax
call fcn.00472a56
mov edx, dword [ebp + 0x38]
add esp, 0x1c
lea ecx, [ebp + 0x58]
mov dword [ebp + 0x58], edx
call fcn.0040b43e
cmp dword [ebp + 0x3c], 4
mov eax, dword [ebp + 0x58]
jg 0x427afe
mov word [edx], bx
mov word [eax], bx
cmp word [eax], bx
mov edi, 0x4a6f08
je 0x427bba
push 0x40
push 0x493b30
mov ecx, edi
call fcn.00414bea
mov eax, dword [ebp + 0x38]
push dword [ebp + 0x4c]
mov dword [ebp + 0x58], eax
mov al, byte [0x4a5280]
lea ecx, [ebp + 0x50]
mov dword [ebp + 0x38], ebx
mov byte [ebp + 0x63], al
mov byte [0x4a5280], 1
call fcn.0043ddc9
push 0x496134
push dword [ebp + 0x50]
mov ecx, edi
push dword [ebp + 0x58]
call fcn.0046cfc7
push 0xffffffffffffffff
mov dword [ebp + 0x64], eax
mov al, byte [ebp + 0x63]
push ebx
push str.__Autoapp
mov ecx, edi
mov byte [0x4a5280], al
call fcn.0040c4d0
cmp eax, ebx
je 0x427b8e
add eax, 4
cmp eax, ebx
je 0x427b8e
mov eax, dword [eax]
xor ecx, ecx
mov cx, word [eax]
cmp cx, bx
je 0x427b85
inc eax
mov dword [ebp + 0x5c], ecx
inc eax
push eax
lea ecx, [ebp + 0x44]
call fcn.0043de8d
push 0xffffffffffffffff
push ebx
push str.__bInitWin
mov ecx, edi
call fcn.0040c4d0
cmp eax, ebx
jne 0x427ba5
xor eax, eax
jmp 0x427ba8
add eax, 4
cmp eax, ebx
setne al
lea ecx, [ebp + 0x50]
mov byte [0x4a6ebd], al
call fcn.0042eb98
push dword [ebp + 0x38]
call fcn.0042eb6a
pop ecx
lea ecx, [ebp + 0x38]
call fcn.0042eb98
push str.PeExe
push 1
push esi
call fcn.00435ee3
add esp, 0xc
lea ecx, [ebp + 0x1c]
call fcn.00433c24
movzx eax, word [ebp + 0x2c]
shl eax, 0x10
cmp word [ebp + 0x5c], 0x2a
mov dword [ebp + 0x20], ebx
mov dword [ebp + 0x24], ebx
mov dword [ebp + 0x50], eax
mov dword [ebp + 0x58], ebx
je 0x427c51
cmp word [ebp + 0x5c], 0x24
je 0x427c51
mov eax, dword [ebp + 0x44]
cmp word [eax], bx
jne 0x427c51
lea eax, [ebp + 0x50]
push eax
lea eax, [ebp + 0x1c]
push eax
push str.SCRIPT
push 0x65
push dword [0x4a6e00]
call fcn.004108f8
mov eax, dword [ebp + 0x50]
or eax, 1
push eax
lea eax, [ebp + 0x1c]
push eax
call fcn.00472a56
mov eax, dword [ebp + 0x1c]
add esp, 0x1c
cmp dword [ebp + 0x20], 4
mov dword [ebp + 0x58], eax
jg 0x427c51
mov dword [ebp + 0x28], ebx
mov dword [ebp + 0x2c], ebx
mov dword [ebp + 0x50], ebx
mov dword [ebp + 0x58], ebx
mov eax, dword [ebp + 0x4c]
cmp eax, ebx
mov dword [ebp + 0x18], eax
je 0x427c79
push 0x11
lea eax, [ebp + 0x18]
push eax
push str.PECMDpecmd_cmd
call fcn.0042ec25
add esp, 0xc
test eax, eax
mov byte [0x4a6d54], 1
jne 0x427c7f
mov byte [0x4a6d54], bl
mov esi, dword [ebp + 0x78]
push 4
push esi
push str.MAIN
call fcn.0042fae7
add esp, 0xc
test al, al
je 0x427c9c
mov byte [0x4a6b86], bl
mov al, byte [0x4a6d54]
cmp al, bl
mov byte [ebp + 0x7b], al
jne 0x427d70
cmp word [ebp + 0x5c], 0x2d
jne 0x427cb7
or byte [ebp + 0x7b], 2
cmp word [ebp + 0x5c], 0x2a
jne 0x427ce3
push 0x4a6f34
mov byte [0x4a5280], 1
call fcn.004700a3
mov eax, dword [ebp + 0x44]
pop ecx
add eax, 8
push eax
mov ecx, edi
call fcn.004275a8
jmp 0x427d68
cmp word [ebp + 0x5c], 0x24
jne 0x427d00
push ebx
push ebx
push ebx
push dword [ebp + 0x44]
mov ecx, edi
mov byte [0x4a5280], 1
call fcn.00424fb6
jmp 0x427d68
mov eax, dword [ebp + 0x44]
cmp word [eax], bx
je 0x427d36
cmp dword [ebp + 0x58], ebx
jne 0x427d36
push 0x490120
lea ecx, [ebp + 0x44]
mov byte [0x4a5280], 1
call fcn.00433c92
push esi
lea ecx, [ebp + 0x44]
call fcn.00433c92
push dword [ebp + 0x44]
mov ecx, edi
call fcn.0042065b
jmp 0x427d68
cmp word [esi], bx
jne 0x427d70
cmp dword [ebp + 0x58], ebx
jne 0x427d70
push 5
push 0x12e
push dword [0x4a6e00]
call dword [sym.imp.KERNEL32.dll_FindResourceW]
test eax, eax
je 0x428202
push ebx
push 0x496134
mov ecx, edi
call fcn.0041fc37
mov dword [ebp + 0x64], eax
jmp 0x428202
lea ecx, [ebp + 0x5c]
call fcn.00433c24
cmp dword [ebp + 0x4c], ebx
jne 0x427d8d
lea ecx, [ebp + 0x5c]
call fcn.0042eb98
or esi, 0xffffffff
jmp 0x428240
lea eax, [ebp + 0x5c]
push eax
push dword [ebp + 0x4c]
call fcn.00417ac8
mov eax, dword [ebp + 0x5c]
mov dword [ebp + 0x64], eax
push 1
lea eax, [ebp + 0x4c]
push eax
lea eax, [ebp + 0x64]
push eax
mov dword [ebp + 0x4c], ebx
call fcn.00414faa
add esp, 0x14
lea ecx, [ebp + 0x64]
mov dword [ebp + 0x64], eax
call fcn.0040b43e
mov esi, dword [ebp + 0x64]
mov eax, esi
sub eax, dword [ebp + 0x5c]
sar eax, 1
cmp dword [ebp + 0x58], ebx
mov dword [ebp + 0x4c], eax
je 0x427dda
cmp byte [ebp + 0x7b], bl
mov byte [ebp + 0x57], 1
je 0x427ddd
mov byte [ebp + 0x57], bl
cmp byte [ebp + 0x57], bl
mov byte [ebp + 0x62], 0x10
mov dword [ebp + 0x38], ebx
mov dword [ebp + 0x3c], ebx
mov dword [ebp + 0x40], ebx
mov byte [ebp + 0x63], 1
je 0x427e05
lea esi, [ebp + 0x1c]
mov byte [0x4a5280], 1
mov byte [ebp + 0x63], bl
jmp 0x427fef
push dword [ebp + 0x1c]
call fcn.0042eb6a
pop ecx
lea ecx, [ebp + 0x1c]
call fcn.0042eb98
cmp word [esi], 0x2f
mov dword [ebp + 0x28], ebx
mov dword [ebp + 0x2c], ebx
mov dword [ebp + 0x50], ebx
mov byte [ebp + 0x7b], bl
jne 0x427e49
mov ax, word [esi + 2]
or ax, 0x20
cmp ax, 0x6c
jne 0x427e49
mov ax, word [esi + 4]
call fcn.00402b47
test al, al
je 0x427e49
mov al, byte [esi + 2]
mov byte [ebp + 0x7b], al
cmp byte [ebp + 0x7b], bl
mov dword [ebp + 0x58], ebx
je 0x427e72
mov word [esi + 2], 0x20
mov word [esi], 0x20
add esi, 4
lea ecx, [ebp + 0x64]
mov dword [ebp + 0x64], esi
call fcn.0040b43e
mov esi, dword [ebp + 0x64]
jmp 0x427f16
cmp word [esi], 0x22
push ebx
lea eax, [ebp + 0x48]
push eax
lea eax, [ebp + 0x64]
push eax
sete byte [ebp + 0x33]
mov dword [ebp + 0x48], ebx
mov dword [ebp + 0x64], esi
call fcn.00414faa
sub eax, dword [ebp + 0x64]
add esp, 0xc
sar eax, 1
push eax
push dword [ebp + 0x64]
lea ecx, [ebp + 0x34]
call fcn.0043dde6
push dword [ebp + 0x34]
call fcn.0047acb6
cmp byte [ebp + 0x33], bl
pop ecx
mov dword [ebp + 0x48], eax
je 0x427ecd
cmp eax, ebx
je 0x427ec4
mov ax, word [esi + 2]
call fcn.00402b47
test al, al
je 0x427ecd
push esi
call fcn.0040ec9c
pop ecx
mov esi, eax
cmp dword [ebp + 0x48], ebx
je 0x427f0e
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
inc eax
mov dword [ebp + 0x48], eax
add eax, 0xa
push eax
lea ecx, [ebp + 0x58]
call fcn.00433c6b
push 0xc
push 0x493ad0
push dword [ebp + 0x58]
call fcn.0047b530
push dword [ebp + 0x48]
mov eax, dword [ebp + 0x58]
add eax, 0xa
push esi
push eax
call fcn.0040414f
mov esi, dword [ebp + 0x58]
add esp, 0x18
lea ecx, [ebp + 0x34]
call fcn.0042eb98
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov dword [ebp + 0x34], eax
add eax, 3
push eax
lea ecx, [ebp + 0x38]
call fcn.00433c6b
mov eax, dword [ebp + 0x34]
inc eax
push eax
push esi
push dword [ebp + 0x38]
call fcn.0040414f
mov eax, dword [ebp + 0x38]
mov ecx, dword [ebp + 0x34]
add esp, 0xc
cmp byte [ebp + 0x7b], bl
mov word [eax + ecx*2 + 2], bx
je 0x427fe0
push dword [ebp + 0x38]
mov byte [ebp + 0x62], bl
call fcn.00430d63
mov eax, dword [ebp + 0x38]
mov dword [ebp + 0x64], eax
pop ecx
lea eax, [ebp + 0x64]
call fcn.004103f2
mov esi, dword [ebp + 0x64]
sub esi, dword [ebp + 0x38]
mov eax, dword [ebp + 0x4c]
sar esi, 1
add eax, esi
mov dword [ebp + 0x48], eax
inc eax
push eax
lea ecx, [ebp + 0x5c]
call fcn.00433c6b
cmp esi, ebx
jle 0x427fe0
mov eax, dword [ebp + 0x5c]
mov ecx, dword [ebp + 0x4c]
push esi
push dword [ebp + 0x38]
lea eax, [eax + ecx*2]
push eax
call fcn.0040414f
mov eax, dword [ebp + 0x5c]
mov ecx, dword [ebp + 0x48]
add esp, 0xc
cmp byte [ebp + 0x7b], 0x4c
mov word [eax + ecx*2], bx
jne 0x427fe0
push dword [ebp + 0x64]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
inc eax
add eax, eax
push eax
push dword [ebp + 0x64]
mov dword [ebp + 0x78], eax
push dword [ebp + 0x38]
call fcn.0047b870
mov ecx, dword [ebp + 0x78]
lea eax, [esi + esi]
push eax
mov eax, dword [ebp + 0x38]
add ecx, eax
push ebx
push ecx
call fcn.0047b210
add esp, 0x18
or byte [ebp + 0x62], 1
lea ecx, [ebp + 0x58]
lea esi, [ebp + 0x38]
call fcn.0042eb98
mov eax, dword [esi]
push 1
push dword [ebp + 0x5c]
mov ecx, 0x4a6f08
mov dword [ebp + 0x78], eax
call fcn.004411c1
cmp byte [ebp + 0x57], bl
je 0x428014
push 0x10040
push str.101
jmp 0x42804a
lea ecx, [ebp + 0x78]
call fcn.0040b43e
push dword [ebp + 0x78]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov edx, dword [ebp + 0x78]
lea ecx, [edx + eax*2 - 2]
jmp 0x42803f
mov ax, word [ecx]
call fcn.00402b47
test al, al
je 0x428043
mov word [ecx], bx
dec ecx
dec ecx
cmp ecx, edx
jae 0x42802e
push 0x40
push str.cmdline
mov ecx, edi
call fcn.00414bea
mov edi, dword [esi]
mov eax, dword [ebp + 0x78]
sub eax, edi
test eax, 0xfffffffe
jle 0x428079
push dword [ebp + 0x78]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [eax + eax + 2]
push eax
push dword [ebp + 0x78]
push edi
call fcn.0047b870
add esp, 0xc
mov edi, dword [esi]
push 0x493aa4
lea ecx, [ebp + 0x78]
call fcn.0043ddc9
push ebx
push 0x4a6f08
lea ecx, [ebp - 0xa4]
call fcn.0041fe8f
movzx eax, word [ebp + 0x2c]
push eax
lea ecx, [ebp - 0xa4]
mov dword [ebp + 0x34], eax
call fcn.00432b58
mov ax, word [ebp + 0x2c]
mov word [ebp - 0x9c], ax
mov eax, edi
push ebx
lea edi, [ebp - 0xa4]
call fcn.00414d4e
push dword [ebp + 0x2c]
push dword [esi]
call fcn.0040e34f
mov ecx, edi
push ecx
lea ecx, [ebp + 0x78]
push ecx
mov ecx, dword [ebp + 0x50]
push eax
push ebx
push esi
mov dword [ebp + 0x48], eax
call fcn.0041da3e
movzx edi, word [ebp + 0x28]
movzx eax, ax
or dword [ebp + 0x50], eax
mov eax, dword [ebp + 0x48]
inc eax
push eax
mov eax, edi
xor eax, dword [ebp + 0x34]
push eax
push dword [esi]
call fcn.0040e3c3
mov eax, dword [ebp + 0x50]
add esp, 0x2c
and eax, 2
shl edi, 0x10
push ebx
lea ecx, [ebp - 0xa4]
or edi, eax
call fcn.0041f8fd
lea ecx, [ebp - 0x60]
call fcn.0042eb98
lea ecx, [ebp + 0x78]
call fcn.0042eb98
movsx eax, byte [ebp + 0x63]
push str.PeExe
push eax
push 0x4a6f08
call fcn.00435ee3
mov ecx, dword [esi]
xor eax, eax
mov al, byte [ebp + 0x62]
add esp, 0xc
push ebx
push ebx
mov dword [esi], ebx
and eax, 1
or eax, edi
or eax, 0x80
push eax
push ebx
push dword [ebp + 0x5c]
push ecx
mov ecx, 0x4a6f08
call fcn.0046d0be
mov dword [ebp + 0x64], eax
call fcn.004341c1
cmp dword [0x4a7228], ebx
jle 0x42817d
mov byte [0x4a5290], 0xff
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
mov edi, eax
sub edi, 0x14
call esi
jmp 0x4281e5
call esi
mov dword [ebp + 0x78], eax
sub eax, edi
cmp eax, 1
jb 0x4281a4
push ebx
call dword [sym.imp.USER32.dll_PostQuitMessage]
mov edi, dword [ebp + 0x78]
push 0x4bf
push 0xa
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_MsgWaitForMultipleObjects]
jmp 0x4281dd
push 1
push ebx
push ebx
push ebx
lea eax, [ebp - 4]
push eax
call dword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x4281e5
lea eax, [ebp - 4]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [ebp - 4]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageW]
cmp dword [0x4a7228], ebx
jg 0x4281b6
cmp dword [0x4a7228], ebx
jg 0x42818e
lea ecx, [ebp + 0x38]
call fcn.0042eb98
lea ecx, [ebp + 0x5c]
call fcn.0042eb98
mov edi, 0x4a6f08
push dword [ebp + 0x1c]
call fcn.0042eb6a
pop ecx
mov ecx, 0x4a7678
call fcn.0042f0b2
mov ecx, 0x4a7270
call fcn.0042f0e0
push 0x4a6f34
call fcn.004700a3
pop ecx
call fcn.0040ebb1
mov eax, 0x496134
push eax
push eax
mov ecx, edi
call fcn.0041719b
mov esi, dword [ebp + 0x64]
lea ecx, [ebp + 0x1c]
call fcn.0042eb98
lea ecx, [ebp + 0x44]
call fcn.0042eb98
pop edi
mov eax, esi
pop esi
pop ebx
add ebp, 0x68
leave
ret