Function at 0x42bbe0
Capabilities:
Check for time delay via gettickcount
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x4704a8
push 0x408860
mov eax, dword fs:[0]
push eax
sub esp, 0x298
mov eax, dword [0x474534]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x1c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
xor edi, edi
xor ecx, ecx
lea ebx, [ebx]
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 1
je 0x42bc3f
cmp eax, 4
je 0x42bc3f
and edi, ecx
jmp 0x42bc41
sub edi, ecx
add ecx, 1
cmp ecx, 0x39
jl 0x42bc20
push 0xfa
lea eax, [ebp - 0x218]
push eax
mov ebx, dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
call ebx
xor ecx, ecx
nop
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 2
je 0x42bc7f
cmp eax, 3
je 0x42bc7f
xor edi, ecx
jmp 0x42bc84
mov eax, ecx
imul edi, eax
add ecx, 1
cmp ecx, 0xe
jl 0x42bc60
lea ecx, [ebp - 0x270]
push ecx
push 0x4619f0
mov esi, dword [sym.imp.KERNEL32.dll_FindFirstFileW]
call esi
xor ecx, ecx
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 2
je 0x42bcc1
cmp eax, 3
je 0x42bcc1
xor edi, ecx
jmp 0x42bcc6
mov eax, ecx
imul edi, eax
add ecx, 1
cmp ecx, 0xe
jl 0x42bca2
lea ecx, [ebp - 0x270]
push ecx
push 0x4619f8
call esi
xor ecx, ecx
mov edi, edi
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 1
je 0x42bcff
cmp eax, 4
je 0x42bcff
and edi, ecx
jmp 0x42bd01
sub edi, ecx
add ecx, 1
cmp ecx, 0x10
jl 0x42bce0
push 0xfa
lea eax, [ebp - 0x218]
push eax
call ebx
xor esi, esi
lea esp, [esp]
mov eax, 0xaaaaaaab
mul esi
shr edx, 1
lea ecx, [edx + edx*2]
mov edx, esi
sub edx, ecx
cmp edx, 1
jne 0x42bd39
and edi, esi
jmp 0x42bd4f
mov eax, 1
mov ebx, 2
mov ecx, 3
mov edx, 4
or edi, esi
add esi, 1
cmp esi, 0xf
jl 0x42bd20
xor ecx, ecx
lea esp, [esp]
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 2
je 0x42bd7f
cmp eax, 3
je 0x42bd7f
xor edi, ecx
jmp 0x42bd84
mov eax, ecx
imul edi, eax
add ecx, 1
cmp ecx, 6
jl 0x42bd60
lea ecx, [ebp - 0x270]
push ecx
push 0x461a00
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov eax, 1
mov ebx, 2
mov ecx, 3
mov edx, 4
xor esi, esi
mov eax, 0xaaaaaaab
mul esi
shr edx, 1
lea edx, [edx + edx*2]
mov eax, esi
sub eax, edx
cmp eax, 1
jne 0x42bdcd
and edi, esi
jmp 0x42bde3
mov eax, 1
mov ebx, 2
mov ecx, 3
mov edx, 4
or edi, esi
add esi, 1
cmp esi, 3
jl 0x42bdb4
xor ecx, ecx
lea ecx, [ecx]
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 2
je 0x42be0f
cmp eax, 3
je 0x42be0f
xor edi, ecx
jmp 0x42be14
mov eax, ecx
imul edi, eax
add ecx, 1
cmp ecx, 0xd
jl 0x42bdf0
lea ecx, [ebp - 0x270]
push ecx
push 0x461a08
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
xor esi, esi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
lea edx, [edx + edx*2]
sub ecx, edx
jne 0x42cd54
add edi, 1
mov dword [ebp - 4], ecx
xor esi, esi
mov dword [ebp - 0x298], esi
cmp esi, 0xa
jge 0x42be92
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea eax, [eax + eax*2]
mov ecx, esi
sub ecx, eax
cmp ecx, 1
jne 0x42be84
mov eax, ebx
nop
mov ecx, edx
nop
add esi, 1
jmp 0x42be54
add edi, 1
mov dword [ebp - 0x274], edi
add esi, 1
jmp 0x42be54
mov dword [ebp - 4], 0xfffffffe
call fcn.0042bedf
nop
nop
nop
mov esi, 0xaaaaaaae
push 0x461a10
push 0x461a18
call dword [sym.imp.USER32.dll_FindWindowW]
xor ecx, ecx
jmp 0x42bec0
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 2
je 0x42beea
cmp eax, 3
je 0x42beea
xor esi, ecx
jmp 0x42beef
mov eax, ecx
imul esi, eax
add ecx, 1
cmp ecx, 0xf
jl 0x42bec0
lea ecx, [ebp - 0x270]
push ecx
push 0x461a20
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
nop
nop
nop
mov edi, 0x11
nop
nop
nop
xor ecx, ecx
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 1
je 0x42bf35
cmp eax, 4
je 0x42bf35
and edi, ecx
jmp 0x42bf37
sub edi, ecx
add ecx, 1
cmp ecx, 8
jl 0x42bf16
push 0xfa
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
mov dword [ebp - 4], 1
xor esi, esi
mov dword [ebp - 0x2a4], esi
cmp esi, 4
jge 0x42bf97
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov edx, esi
sub edx, ecx
cmp edx, 1
jne 0x42bf89
mov eax, ebx
nop
mov ecx, edx
nop
add esi, edx
jmp 0x42bf5a
add edi, 1
mov dword [ebp - 0x274], edi
add esi, 1
jmp 0x42bf5a
mov dword [ebp - 4], 0xfffffffe
call fcn.0042bfef
push 0xfa
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
mov dword [ebp - 4], 2
xor esi, esi
lea edi, [esi + 1]
mov dword [ebp - 0x280], esi
cmp esi, 5
jge 0x42c004
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov edx, esi
sub edx, ecx
cmp edx, edi
jne 0x42bffa
mov eax, ebx
nop
mov ecx, edx
nop
add esi, edi
jmp 0x42bfc1
add dword [ebp - 0x274], edi
add esi, edi
jmp 0x42bfc1
mov dword [ebp - 4], 0xfffffffe
call fcn.0042c031
xor ecx, ecx
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 1
je 0x42c03d
cmp eax, 4
je 0x42c03d
and esi, ecx
jmp 0x42c03f
sub esi, ecx
add ecx, 1
cmp ecx, 6
jl 0x42c012
push 0xfa
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
mov edi, 0x11
nop
nop
nop
xor esi, esi
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
lea esp, [esp]
call ebx
mov ecx, eax
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
lea edx, [edx + edx*2]
sub ecx, edx
jne 0x42cd47
add edi, 3
mov dword [ebp - 4], 3
xor esi, esi
mov dword [ebp - 0x2a0], esi
cmp esi, 5
jge 0x42c0d2
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea eax, [eax + eax*2]
mov ecx, esi
sub ecx, eax
cmp ecx, 1
jne 0x42c0c4
mov eax, ebx
nop
mov ecx, edx
nop
add esi, 1
jmp 0x42c094
add edi, 1
mov dword [ebp - 0x274], edi
add esi, 1
jmp 0x42c094
mov dword [ebp - 4], 0xfffffffe
call fcn.0042c111
push 0x461a28
push 0x461a30
mov esi, dword [sym.imp.USER32.dll_FindWindowW]
call esi
xor ecx, ecx
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 1
je 0x42c11d
cmp eax, 4
je 0x42c11d
and edi, ecx
jmp 0x42c11f
sub edi, ecx
add ecx, 1
cmp ecx, 6
jl 0x42c0f2
push 0xfa
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
add edi, 1
push 0x461a38
push 0x461a40
call esi
xor esi, esi
lea ebx, [ebx]
mov eax, 0xaaaaaaab
mul esi
shr edx, 1
lea ecx, [edx + edx*2]
mov edx, esi
sub edx, ecx
cmp edx, 1
jne 0x42c169
and edi, esi
jmp 0x42c17f
mov eax, 1
mov ebx, 2
mov ecx, 3
mov edx, 4
or edi, esi
add esi, 1
cmp esi, 3
jl 0x42c150
xor esi, esi
lea esp, [esp]
mov eax, 0xaaaaaaab
mul esi
shr edx, 1
lea eax, [edx + edx*2]
mov ecx, esi
sub ecx, eax
cmp ecx, 1
jne 0x42c1a9
and edi, esi
jmp 0x42c1bf
mov eax, 1
mov ebx, 2
mov ecx, 3
mov edx, 4
or edi, esi
add esi, 1
cmp esi, 3
jl 0x42c190
xor ecx, ecx
lea esp, [esp]
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 2
je 0x42c1ef
cmp eax, 3
je 0x42c1ef
xor edi, ecx
jmp 0x42c1f4
mov eax, ecx
imul edi, eax
add ecx, 1
cmp ecx, 7
jl 0x42c1d0
lea ecx, [ebp - 0x270]
push ecx
push 0x461a48
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
xor esi, esi
mov eax, 0xaaaaaaab
mul esi
shr edx, 1
lea edx, [edx + edx*2]
mov eax, esi
sub eax, edx
cmp eax, 1
jne 0x42c229
and edi, esi
jmp 0x42c23f
mov eax, 1
mov ebx, 2
mov ecx, 3
mov edx, 4
or edi, esi
add esi, 1
cmp esi, 8
jl 0x42c210
push 0x461a50
push 0x461a58
call dword [sym.imp.USER32.dll_FindWindowW]
test edi, edi
jle 0x42c25e
lea edi, [edi + edi*4]
mov eax, 0x55555556
imul edi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov edx, edi
sub edx, ecx
jne 0x42c278
lea edi, [edx + 0x11]
nop
nop
nop
mov eax, 1
mov ebx, 2
mov ecx, 3
mov edx, 4
xor ecx, ecx
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 2
je 0x42c2b0
cmp eax, 3
je 0x42c2b0
xor edi, ecx
jmp 0x42c2b5
mov eax, ecx
imul edi, eax
add ecx, 1
cmp ecx, 3
jl 0x42c291
lea ecx, [ebp - 0x270]
push ecx
push 0x461a60
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
xor esi, esi
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
call ebx
mov ecx, eax
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
lea edx, [edx + edx*2]
sub ecx, edx
jne 0x42cd3a
add edi, 1
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 2
je 0x42c311
cmp eax, 3
je 0x42c311
xor edi, ecx
jmp 0x42c316
mov eax, ecx
imul edi, eax
add ecx, 1
cmp ecx, 7
jl 0x42c2f2
lea ecx, [ebp - 0x270]
push ecx
push 0x461a68
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
xor ecx, ecx
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 2
je 0x42c351
cmp eax, 3
je 0x42c351
xor edi, ecx
jmp 0x42c356
mov eax, ecx
imul edi, eax
add ecx, 1
cmp ecx, 3
jl 0x42c332
lea ecx, [ebp - 0x270]
push ecx
push 0x461a70
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
xor esi, esi
mov eax, 0xaaaaaaab
mul esi
shr edx, 1
lea edx, [edx + edx*2]
mov eax, esi
sub eax, edx
cmp eax, 1
jne 0x42c38b
and edi, esi
jmp 0x42c3a1
mov eax, 1
mov ebx, 2
mov ecx, 3
mov edx, 4
or edi, esi
add esi, 1
cmp esi, 3
jl 0x42c372
push 0xfa
lea ecx, [ebp - 0x218]
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
mov eax, 1
mov ebx, 2
mov ecx, 3
mov edx, 4
mov esi, edi
lea edx, [ebp - 0x270]
push edx
push 0x461a78
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
xor ecx, ecx
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 2
je 0x42c404
cmp eax, 3
je 0x42c404
xor esi, ecx
jmp 0x42c409
mov eax, ecx
imul esi, eax
add ecx, 1
cmp ecx, 4
jl 0x42c3e5
lea ecx, [ebp - 0x270]
push ecx
push 0x461a80
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
xor ebx, ebx
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0x42c430
call edi
mov ecx, eax
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
lea edx, [edx + edx*2]
sub ecx, edx
jne 0x42cd2d
add esi, 4
xor ebx, ebx
lea ecx, [ecx]
call edi
mov ecx, eax
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
lea eax, [edx + edx*2]
sub ecx, eax
jne 0x42cd20
nop
nop
nop
nop
nop
nop
lea ebx, [ecx + 0x11]
nop
nop
nop
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 2
je 0x42c493
cmp eax, 3
je 0x42c493
xor ebx, ecx
jmp 0x42c498
mov eax, ecx
imul ebx, eax
add ecx, 1
cmp ecx, 4
jl 0x42c474
lea ecx, [ebp - 0x270]
push ecx
push 0x461a88
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 4], 4
xor esi, esi
mov dword [ebp - 0x288], esi
cmp esi, 3
jge 0x42c4f9
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax + eax*2]
mov eax, esi
sub eax, edx
cmp eax, 1
jne 0x42c4eb
mov eax, ebx
nop
mov ecx, edx
nop
add esi, 1
jmp 0x42c4bb
add ebx, 1
mov dword [ebp - 0x274], ebx
add esi, 1
jmp 0x42c4bb
mov dword [ebp - 4], 0xfffffffe
call fcn.0042c576
xor eax, eax
mov ecx, eax
imul ebx, ecx
add eax, 1
cmp eax, 3
jl 0x42c507
test ebx, ebx
jle 0x42c51b
lea ebx, [ebx + ebx*4]
mov eax, 0x55555556
imul ebx
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax + eax*2]
mov eax, ebx
sub eax, edx
jne 0x42c535
lea ebx, [eax + 0x11]
nop
nop
nop
mov dword [ebp - 4], 5
xor esi, esi
mov dword [ebp - 0x278], esi
cmp esi, 2
jge 0x42c590
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov edx, esi
sub edx, ecx
cmp edx, 1
jne 0x42c582
mov eax, ebx
nop
mov ecx, edx
nop
add esi, edx
jmp 0x42c541
add ebx, 1
mov dword [ebp - 0x274], ebx
add esi, 1
jmp 0x42c541
mov dword [ebp - 4], 0xfffffffe
call fcn.0042c635
xor esi, esi
mov dword [ebp - 0x274], esi
push 0xfa
lea eax, [ebp - 0x218]
push eax
mov ebx, dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
call ebx
push 0xfa
lea ecx, [ebp - 0x218]
push ecx
call ebx
xor ebx, ebx
call edi
mov ecx, eax
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
lea edx, [edx + edx*2]
sub ecx, edx
jne 0x42cd13
add esi, 1
xor ebx, ebx
call edi
mov ecx, eax
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
lea eax, [edx + edx*2]
sub ecx, eax
jne 0x42cd06
push 0x461a90
push 0x461a98
call dword [sym.imp.USER32.dll_FindWindowW]
xor ecx, ecx
nop
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 1
je 0x42c640
cmp eax, 4
je 0x42c640
and esi, ecx
jmp 0x42c642
sub esi, ecx
add ecx, 1
cmp ecx, 3
jl 0x42c610
push 0xfa
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
mov ebx, 0x11
nop
nop
nop
xor esi, esi
call edi
mov ecx, eax
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
lea edx, [edx + edx*2]
sub ecx, edx
jne 0x42ccf9
add ebx, 3
mov dword [ebp - 4], 6
xor esi, esi
mov dword [ebp - 0x290], esi
cmp esi, 1
jge 0x42c6c8
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea eax, [eax + eax*2]
mov ecx, esi
sub ecx, eax
cmp ecx, 1
jne 0x42c6ba
mov eax, ebx
nop
mov ecx, edx
nop
add esi, 1
jmp 0x42c68a
add ebx, 1
mov dword [ebp - 0x274], ebx
add esi, 1
jmp 0x42c68a
mov dword [ebp - 4], 0xfffffffe
call fcn.0042c729
mov eax, 1
mov ebx, 2
mov ecx, 3
mov edx, 4
mov ebx, esi
mov dword [ebp - 4], 7
xor esi, esi
mov dword [ebp - 0x27c], esi
cmp esi, 2
jge 0x42c743
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax + eax*2]
mov eax, esi
sub eax, edx
cmp eax, 1
jne 0x42c735
mov eax, ebx
nop
mov ecx, edx
nop
add esi, 1
jmp 0x42c6f3
add ebx, 1
mov dword [ebp - 0x274], ebx
add esi, 1
jmp 0x42c6f3
mov dword [ebp - 4], 0xfffffffe
call fcn.0042c78d
mov dword [ebp - 4], 8
xor esi, esi
mov dword [ebp - 0x284], esi
cmp esi, 4
jge 0x42c7a4
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov edx, esi
sub edx, ecx
cmp edx, 1
jne 0x42c798
mov eax, ebx
nop
mov ecx, edx
nop
add esi, edx
jmp 0x42c758
add dword [ebp - 0x274], 1
add esi, 1
jmp 0x42c758
mov dword [ebp - 4], 0xfffffffe
call fcn.0042c7ef
mov dword [ebp - 4], 9
xor esi, esi
mov dword [ebp - 0x28c], esi
cmp esi, 3
jge 0x42c806
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea eax, [eax + eax*2]
mov ecx, esi
sub ecx, eax
cmp ecx, 1
jne 0x42c7fa
mov eax, ebx
nop
mov ecx, edx
nop
add esi, 1
jmp 0x42c7b9
add dword [ebp - 0x274], 1
add esi, 1
jmp 0x42c7b9
mov dword [ebp - 4], 0xfffffffe
call fcn.0042c851
mov dword [ebp - 4], 0xa
xor esi, esi
mov dword [ebp - 0x294], esi
cmp esi, 2
jge 0x42c868
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax + eax*2]
mov eax, esi
sub eax, edx
cmp eax, 1
jne 0x42c85c
mov eax, ebx
nop
mov ecx, edx
nop
add esi, 1
jmp 0x42c81b
add dword [ebp - 0x274], 1
add esi, 1
jmp 0x42c81b
mov dword [ebp - 4], 0xfffffffe
call fcn.0042c89b
xor ecx, ecx
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 2
je 0x42c8a7
cmp eax, 3
je 0x42c8a7
xor esi, ecx
jmp 0x42c8ac
mov eax, ecx
imul esi, eax
add ecx, 1
cmp ecx, 4
jl 0x42c876
lea ecx, [ebp - 0x270]
push ecx
push 0x461aa0
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov esi, 0x11
nop
nop
nop
xor ecx, ecx
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 2
je 0x42c8ef
cmp eax, 3
je 0x42c8ef
xor esi, ecx
jmp 0x42c8f4
mov eax, ecx
imul esi, eax
add ecx, 1
cmp ecx, 4
jl 0x42c8d0
lea ecx, [ebp - 0x270]
push ecx
push 0x461aa8
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
xor ebx, ebx
call edi
mov ecx, eax
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
lea edx, [edx + edx*2]
sub ecx, edx
jne 0x42ccec
xor ebx, ebx
lea ebx, [ebx]
call edi
mov ecx, eax
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
lea eax, [edx + edx*2]
sub ecx, eax
jne 0x42ccdf
add esi, 3
push 0x461ab0
push 0x461ab8
call dword [sym.imp.USER32.dll_FindWindowW]
xor ecx, ecx
lea ecx, [ecx]
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 1
je 0x42c97f
cmp eax, 4
je 0x42c97f
and esi, ecx
jmp 0x42c981
sub esi, ecx
add ecx, 1
cmp ecx, 4
jl 0x42c960
push 0xfa
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
xor ebx, ebx
lea ecx, [ecx]
call edi
mov ecx, eax
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
lea edx, [edx + edx*2]
sub ecx, edx
jne 0x42ccd2
add esi, 2
push 0xfa
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
xor ecx, ecx
nop
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 2
je 0x42c9ef
cmp eax, 3
je 0x42c9ef
xor esi, ecx
jmp 0x42c9f4
mov eax, ecx
imul esi, eax
add ecx, 1
cmp ecx, 3
jl 0x42c9d0
lea ecx, [ebp - 0x270]
push ecx
push 0x461ac0
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
xor edi, edi
mov eax, 0xaaaaaaab
mul edi
shr edx, 1
lea edx, [edx + edx*2]
mov eax, edi
sub eax, edx
cmp eax, 1
jne 0x42ca29
and esi, edi
jmp 0x42ca3f
mov eax, 1
mov ebx, 2
mov ecx, 3
mov edx, 4
or esi, edi
add edi, 1
cmp edi, 3
jl 0x42ca10
xor edi, edi
lea esp, [esp]
mov eax, 0xaaaaaaab
mul edi
shr edx, 1
lea ecx, [edx + edx*2]
mov edx, edi
sub edx, ecx
cmp edx, 1
jne 0x42ca69
and esi, edi
jmp 0x42ca7f
mov eax, 1
mov ebx, 2
mov ecx, 3
mov edx, 4
or esi, edi
add edi, 1
cmp edi, 2
jl 0x42ca50
xor edi, edi
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
nop
call ebx
mov ecx, eax
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
lea eax, [edx + edx*2]
sub ecx, eax
jne 0x42ccc5
add esi, 4
jmp 0x42cab0
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 1
je 0x42cacf
cmp eax, 4
je 0x42cacf
and esi, ecx
jmp 0x42cad1
sub esi, ecx
add ecx, 1
cmp ecx, 4
jl 0x42cab0
push 0xfa
lea eax, [ebp - 0x218]
push eax
mov edi, dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
call edi
lea ecx, [ebp - 0x270]
push ecx
push 0x461ac8
mov ebx, dword [sym.imp.KERNEL32.dll_FindFirstFileW]
call ebx
test esi, esi
jle 0x42cb08
lea esi, [esi + esi*4]
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax + eax*2]
mov eax, esi
sub eax, edx
jne 0x42cb22
lea esi, [eax + 0x11]
nop
nop
nop
xor ecx, ecx
jmp 0x42cb30
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 1
je 0x42cb4f
cmp eax, 4
je 0x42cb4f
and esi, ecx
jmp 0x42cb51
sub esi, ecx
add ecx, 1
cmp ecx, 4
jl 0x42cb30
push 0xfa
lea eax, [ebp - 0x218]
push eax
call edi
mov dword [ebp - 4], 0xb
xor edi, edi
mov dword [ebp - 0x29c], edi
test edi, edi
jge 0x42cbac
mov eax, 0x55555556
imul edi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov edx, edi
sub edx, ecx
cmp edx, 1
jne 0x42cb9e
mov eax, ebx
nop
mov ecx, edx
nop
add edi, edx
jmp 0x42cb70
add esi, 1
mov dword [ebp - 0x274], esi
add edi, 1
jmp 0x42cb70
mov dword [ebp - 4], 0xfffffffe
call fcn.0042cbf5
lea eax, [ebp - 0x270]
push eax
push 0x461ad0
call ebx
mov esi, 0x11
nop
nop
nop
xor ecx, ecx
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 2
je 0x42cc00
cmp eax, 3
je 0x42cc00
xor esi, ecx
jmp 0x42cc05
mov eax, ecx
imul esi, eax
add ecx, 1
cmp ecx, 3
jl 0x42cbd0
lea ecx, [ebp - 0x270]
push ecx
push 0x461ad8
call ebx
xor ecx, ecx
lea ecx, [ecx]
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 1
je 0x42cc3f
cmp eax, 4
je 0x42cc3f
and esi, ecx
jmp 0x42cc41
sub esi, ecx
add ecx, 1
cmp ecx, 4
jl 0x42cc20
push 0xfa
lea eax, [ebp - 0x218]
push eax
mov edi, dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
call edi
push 0xfa
lea ecx, [ebp - 0x218]
push ecx
call edi
xor ecx, ecx
lea ecx, [ecx]
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 1
je 0x42cc8f
cmp eax, 4
je 0x42cc8f
and esi, ecx
jmp 0x42cc91
sub esi, ecx
add ecx, 1
cmp ecx, 3
jl 0x42cc70
push 0xfa
lea eax, [ebp - 0x218]
push eax
call edi
mov eax, esi
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x1c]
xor ecx, ebp
call fcn.0040470b
mov esp, ebp
pop ebp
ret
mov ecx, edi
imul esi, ecx
add edi, 1
jmp 0x42ca90
mov edx, ebx
imul esi, edx
add ebx, 1
jmp 0x42c9a0
mov eax, ebx
imul esi, eax
add ebx, 1
jmp 0x42c930
mov ecx, ebx
imul esi, ecx
add ebx, 1
jmp 0x42c910
mov edx, esi
imul ebx, edx
add esi, 1
jmp 0x42c666
mov eax, ebx
imul esi, eax
add ebx, 1
jmp 0x42c5e5
mov ecx, ebx
imul esi, ecx
add ebx, 1
jmp 0x42c5c8
mov edx, ebx
imul esi, edx
add ebx, 1
jmp 0x42c450
mov eax, ebx
imul esi, eax
add ebx, 1
jmp 0x42c430
mov ecx, esi
imul edi, ecx
add esi, 1
jmp 0x42c2d7
mov edx, esi
imul edi, edx
add esi, 1
jmp 0x42c070
mov eax, esi
imul edi, eax
add esi, 1
jmp 0x42be30