Function at 0x41e730
Capabilities:
Check for time delay via gettickcount
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x46fb58
push 0x408860
mov eax, dword fs:[0]
push eax
sub esp, 0x2a8
mov eax, dword [0x474534]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x1c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
xor esi, esi
xor eax, eax
lea ebx, [ebx]
mov ecx, eax
imul esi, ecx
add eax, 1
cmp eax, 0x17
jl 0x41e770
test esi, esi
jle 0x41e784
lea esi, [esi + esi*4]
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax + eax*2]
mov eax, esi
sub eax, edx
jne 0x41e79e
lea esi, [eax + 0x11]
nop
nop
nop
xor edi, edi
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
lea esp, [esp]
call ebx
mov ecx, eax
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
lea edx, [edx + edx*2]
sub ecx, edx
jne 0x41f619
add esi, 0x28
xor edi, edi
lea ecx, [ecx]
call ebx
mov ecx, eax
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
lea eax, [edx + edx*2]
sub ecx, eax
jne 0x41f60c
add esi, 0x28
xor eax, eax
lea ecx, [ecx]
test al, 1
je 0x41e7f8
add esi, eax
jmp 0x41e7fa
sub esi, eax
add eax, 1
cmp eax, 0x1e
jl 0x41e7f0
push 0x46cd88
push 0x46cd90
call dword [sym.imp.USER32.dll_FindWindowW]
xor eax, eax
test al, 1
je 0x41e81c
add esi, eax
jmp 0x41e81e
sub esi, eax
add eax, 1
cmp eax, 0x18
jl 0x41e814
push 0x46cd98
push 0x46cda0
call dword [sym.imp.USER32.dll_FindWindowW]
xor edi, edi
jmp 0x41e840
mov eax, 0xaaaaaaab
mul edi
shr edx, 1
lea ecx, [edx + edx*2]
mov edx, edi
sub edx, ecx
cmp edx, 1
jne 0x41e859
and esi, edi
jmp 0x41e875
mov eax, 1
mov ebx, 2
mov ecx, 3
mov edx, 4
or esi, edi
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
add edi, 1
cmp edi, 0x1e
jl 0x41e840
xor eax, eax
nop
mov ecx, eax
imul esi, ecx
add eax, 1
cmp eax, 0x1c
jl 0x41e880
test esi, esi
jle 0x41e894
lea esi, [esi + esi*4]
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax + eax*2]
mov eax, esi
sub eax, edx
jne 0x41e8ae
lea esi, [eax + 0x11]
nop
nop
nop
xor edi, edi
call ebx
mov ecx, eax
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
lea edx, [edx + edx*2]
sub ecx, edx
jne 0x41f5ff
add esi, 2
xor edi, edi
mov dword [ebp - 4], edi
mov dword [ebp - 0x2b0], edi
cmp edi, 8
jge 0x41e911
mov eax, 0x55555556
imul edi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea eax, [eax + eax*2]
mov ecx, edi
sub ecx, eax
cmp ecx, 1
jne 0x41e903
mov eax, ebx
nop
mov ecx, edx
nop
add edi, 1
jmp 0x41e8d3
add esi, 1
mov dword [ebp - 0x274], esi
add edi, 1
jmp 0x41e8d3
mov dword [ebp - 4], 0xfffffffe
call fcn.0041e97a
xor esi, esi
nop
call ebx
mov ecx, eax
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
lea edx, [edx + edx*2]
sub ecx, edx
jne 0x41f5f2
add edi, 0xd
mov dword [ebp - 4], 1
xor esi, esi
mov dword [ebp - 0x2b4], esi
cmp esi, 1
jge 0x41e994
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea eax, [eax + eax*2]
mov ecx, esi
sub ecx, eax
cmp ecx, 1
jne 0x41e986
mov eax, ebx
nop
mov ecx, edx
nop
add esi, 1
jmp 0x41e944
add edi, 1
mov dword [ebp - 0x274], edi
add esi, 1
jmp 0x41e944
mov dword [ebp - 4], 0xfffffffe
call fcn.0041e9c7
xor ecx, ecx
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 2
je 0x41e9d3
cmp eax, 3
je 0x41e9d3
xor edi, ecx
jmp 0x41e9d8
mov eax, ecx
imul edi, eax
add ecx, 1
cmp ecx, 2
jl 0x41e9a2
lea ecx, [ebp - 0x270]
push ecx
push 0x46cda8
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
xor ecx, ecx
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 1
je 0x41ea13
cmp eax, 4
je 0x41ea13
and edi, ecx
jmp 0x41ea15
sub edi, ecx
add ecx, 1
cmp ecx, 4
jl 0x41e9f4
push 0xfa
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
mov dword [ebp - 4], 2
xor esi, esi
mov dword [ebp - 0x280], esi
cmp esi, 4
jge 0x41ea75
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov edx, esi
sub edx, ecx
cmp edx, 1
jne 0x41ea67
mov eax, ebx
nop
mov ecx, edx
nop
add esi, edx
jmp 0x41ea38
add edi, 1
mov dword [ebp - 0x274], edi
add esi, 1
jmp 0x41ea38
mov dword [ebp - 4], 0xfffffffe
call fcn.0041eac0
mov dword [ebp - 4], 3
xor esi, esi
mov dword [ebp - 0x2a8], esi
cmp esi, 4
jge 0x41ead7
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea eax, [eax + eax*2]
mov ecx, esi
sub ecx, eax
cmp ecx, 1
jne 0x41eacb
mov eax, ebx
nop
mov ecx, edx
nop
add esi, 1
jmp 0x41ea8a
add dword [ebp - 0x274], 1
add esi, 1
jmp 0x41ea8a
mov dword [ebp - 4], 0xfffffffe
call fcn.0041eb22
mov dword [ebp - 4], 4
xor esi, esi
mov dword [ebp - 0x288], esi
cmp esi, 2
jge 0x41eb39
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax + eax*2]
mov eax, esi
sub eax, edx
cmp eax, 1
jne 0x41eb2d
mov eax, ebx
nop
mov ecx, edx
nop
add esi, 1
jmp 0x41eaec
add dword [ebp - 0x274], 1
add esi, 1
jmp 0x41eaec
mov dword [ebp - 4], 0xfffffffe
call fcn.0041eb6f
xor edi, edi
call ebx
mov ecx, eax
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
lea edx, [edx + edx*2]
sub ecx, edx
jne 0x41f5e5
xor eax, eax
test al, 1
je 0x41eb7b
add esi, eax
jmp 0x41eb7d
sub esi, eax
add eax, 1
cmp eax, 7
jl 0x41eb61
push 0x46cdb0
push 0x46cdb8
call dword [sym.imp.USER32.dll_FindWindowW]
xor edi, edi
call ebx
mov ecx, eax
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
lea eax, [edx + edx*2]
sub ecx, eax
jne 0x41f5d8
add esi, 8
xor edi, edi
mov eax, 0xaaaaaaab
mul edi
shr edx, 1
lea ecx, [edx + edx*2]
mov edx, edi
sub edx, ecx
cmp edx, 1
jne 0x41ebcd
and esi, edi
jmp 0x41ebe3
mov eax, 1
mov ebx, 2
mov ecx, 3
mov edx, 4
or esi, edi
add edi, 1
cmp edi, 3
jl 0x41ebb4
add esi, 0xfffffffd
push 0x46cdc0
push 0x46cdc8
call dword [sym.imp.USER32.dll_FindWindowW]
xor edi, edi
mov eax, 0xaaaaaaab
mul edi
shr edx, 1
lea eax, [edx + edx*2]
mov ecx, edi
sub ecx, eax
cmp ecx, 1
jne 0x41ec19
and esi, edi
jmp 0x41ec2f
mov eax, 1
mov ebx, 2
mov ecx, 3
mov edx, 4
or esi, edi
add edi, 1
cmp edi, 5
jl 0x41ec00
xor edi, edi
lea esp, [esp]
mov eax, 0xaaaaaaab
mul edi
shr edx, 1
lea edx, [edx + edx*2]
mov eax, edi
sub eax, edx
cmp eax, 1
jne 0x41ec59
and esi, edi
jmp 0x41ec6f
mov eax, 1
mov ebx, 2
mov ecx, 3
mov edx, 4
or esi, edi
add edi, 1
cmp edi, 3
jl 0x41ec40
mov dword [ebp - 4], 5
xor edi, edi
mov dword [ebp - 0x2a0], edi
cmp edi, 8
jge 0x41ecbd
mov eax, 0x55555556
imul edi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov edx, edi
sub edx, ecx
cmp edx, 1
jne 0x41ecaf
mov eax, ebx
nop
mov ecx, edx
nop
add edi, edx
jmp 0x41ec80
add esi, 1
mov dword [ebp - 0x274], esi
add edi, 1
jmp 0x41ec80
mov dword [ebp - 4], 0xfffffffe
call fcn.0041ed03
mov dword [ebp - 4], 6
xor esi, esi
lea edi, [esi + 1]
mov dword [ebp - 0x290], esi
cmp esi, 2
jge 0x41ed18
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea eax, [eax + eax*2]
mov ecx, esi
sub ecx, eax
cmp ecx, edi
jne 0x41ed0e
mov eax, ebx
nop
mov ecx, edx
nop
add esi, edi
jmp 0x41ecd5
add dword [ebp - 0x274], edi
add esi, edi
jmp 0x41ecd5
mov dword [ebp - 4], 0xfffffffe
call fcn.0041ed45
xor ecx, ecx
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 2
je 0x41ed51
cmp eax, 3
je 0x41ed51
xor edi, ecx
jmp 0x41ed56
mov eax, ecx
imul edi, eax
add ecx, 1
cmp ecx, 7
jl 0x41ed26
lea ecx, [ebp - 0x270]
push ecx
push 0x46cdd0
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
xor esi, esi
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
call ebx
mov ecx, eax
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
lea edx, [edx + edx*2]
sub ecx, edx
jne 0x41f5cb
xor esi, esi
call ebx
mov ecx, eax
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
lea eax, [edx + edx*2]
sub ecx, eax
jne 0x41f5be
add edi, 2
xor esi, esi
nop
call ebx
mov ecx, eax
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
lea edx, [edx + edx*2]
sub ecx, edx
jne 0x41f5b1
add edi, 2
jmp 0x41edd0
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 1
je 0x41edef
cmp eax, 4
je 0x41edef
and edi, ecx
jmp 0x41edf1
sub edi, ecx
add ecx, 1
cmp ecx, 3
jl 0x41edd0
push 0xfa
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
mov dword [ebp - 4], 7
xor esi, esi
mov dword [ebp - 0x278], esi
cmp esi, 5
jge 0x41ee51
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov edx, esi
sub edx, ecx
cmp edx, 1
jne 0x41ee43
mov eax, ebx
nop
mov ecx, edx
nop
add esi, edx
jmp 0x41ee14
add edi, 1
mov dword [ebp - 0x274], edi
add esi, 1
jmp 0x41ee14
mov dword [ebp - 4], 0xfffffffe
call fcn.0041eeaf
xor eax, eax
nop
mov edx, eax
imul ecx, edx
add eax, 1
cmp eax, 7
jl 0x41ee60
nop
nop
nop
nop
nop
nop
mov edi, 0xe
push 0x46cdd8
push 0x46cde0
mov esi, dword [sym.imp.USER32.dll_FindWindowW]
call esi
xor ecx, ecx
lea esp, [esp]
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 1
je 0x41eebb
cmp eax, 4
je 0x41eebb
and edi, ecx
jmp 0x41eebd
sub edi, ecx
add ecx, 1
cmp ecx, 3
jl 0x41ee90
push 0xfa
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
xor ecx, ecx
lea esp, [esp]
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 2
je 0x41eeff
cmp eax, 3
je 0x41eeff
xor edi, ecx
jmp 0x41ef04
mov eax, ecx
imul edi, eax
add ecx, 1
cmp ecx, 4
jl 0x41eee0
lea ecx, [ebp - 0x270]
push ecx
push 0x46cde8
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
add edi, 2
push 0x46cdf0
push 0x46cdf8
call esi
mov dword [ebp - 4], 8
xor esi, esi
mov dword [ebp - 0x298], esi
cmp esi, 7
jge 0x41ef74
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax + eax*2]
mov eax, esi
sub eax, edx
cmp eax, 1
jne 0x41ef66
mov eax, ebx
nop
mov ecx, edx
nop
add esi, 1
jmp 0x41ef36
add edi, 1
mov dword [ebp - 0x274], edi
add esi, 1
jmp 0x41ef36
mov dword [ebp - 4], 0xfffffffe
call fcn.0041ef9b
xor esi, esi
mov eax, 0xaaaaaaab
mul esi
shr edx, 1
lea ecx, [edx + edx*2]
mov edx, esi
sub edx, ecx
cmp edx, 1
jne 0x41efa7
and edi, esi
jmp 0x41efbd
mov eax, 1
mov ebx, 2
mov ecx, 3
mov edx, 4
or edi, esi
add esi, 1
cmp esi, 2
jl 0x41ef82
nop
nop
nop
mov edi, 0x11
push 0x46ce00
push 0x46ce08
call dword [sym.imp.USER32.dll_FindWindowW]
xor esi, esi
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
call ebx
mov ecx, eax
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
lea eax, [edx + edx*2]
sub ecx, eax
jne 0x41f5a4
add edi, 1
mov dword [ebp - 4], 9
xor esi, esi
mov dword [ebp - 0x27c], esi
cmp esi, 4
jge 0x41f046
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov edx, esi
sub edx, ecx
cmp edx, 1
jne 0x41f038
mov eax, ebx
nop
mov ecx, edx
nop
add esi, edx
jmp 0x41f009
add edi, 1
mov dword [ebp - 0x274], edi
add esi, 1
jmp 0x41f009
mov dword [ebp - 4], 0xfffffffe
call fcn.0041f0f3
xor eax, eax
mov ecx, eax
imul esi, ecx
add eax, 1
cmp eax, 2
jl 0x41f054
test esi, esi
jle 0x41f068
lea esi, [esi + esi*4]
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax + eax*2]
mov eax, esi
sub eax, edx
jne 0x41f082
lea esi, [eax + 0x11]
nop
nop
nop
push 0x46ce10
push 0x46ce18
call dword [sym.imp.USER32.dll_FindWindowW]
xor edi, edi
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
lea ecx, [ecx]
call ebx
mov ecx, eax
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
lea edx, [edx + edx*2]
sub ecx, edx
jne 0x41f597
add esi, 2
mov dword [ebp - 4], 0xa
xor edi, edi
mov dword [ebp - 0x284], edi
test edi, edi
jge 0x41f10d
mov eax, 0x55555556
imul edi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea eax, [eax + eax*2]
mov ecx, edi
sub ecx, eax
cmp ecx, 1
jne 0x41f0ff
mov eax, ebx
nop
mov ecx, edx
nop
add edi, 1
jmp 0x41f0c4
add esi, 1
mov dword [ebp - 0x274], esi
add edi, 1
jmp 0x41f0c4
mov dword [ebp - 4], 0xfffffffe
call fcn.0041f13f
xor ecx, ecx
jmp 0x41f120
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 1
je 0x41f14b
cmp eax, 4
je 0x41f14b
and edi, ecx
jmp 0x41f14d
sub edi, ecx
add ecx, 1
cmp ecx, 3
jl 0x41f120
push 0xfa
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
test edi, edi
jle 0x41f16e
lea edi, [edi + edi*4]
mov eax, 0x55555556
imul edi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov edx, edi
sub edx, ecx
jne 0x41f188
lea edi, [edx + 0x11]
nop
nop
nop
xor esi, esi
lea ecx, [ecx]
mov eax, 0xaaaaaaab
mul esi
shr edx, 1
lea eax, [edx + edx*2]
mov ecx, esi
sub ecx, eax
cmp ecx, 1
jne 0x41f1a9
and edi, esi
jmp 0x41f1bf
mov eax, 1
mov ebx, 2
mov ecx, 3
mov edx, 4
or edi, esi
add esi, 1
cmp esi, 3
jl 0x41f190
add edi, 2
push 0x46ce20
push 0x46ce28
call dword [sym.imp.USER32.dll_FindWindowW]
xor ecx, ecx
lea esp, [esp]
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 1
je 0x41f1ff
cmp eax, 4
je 0x41f1ff
and edi, ecx
jmp 0x41f201
sub edi, ecx
add ecx, 1
cmp ecx, 3
jl 0x41f1e0
push 0xfa
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
mov edi, 0x11
nop
nop
nop
xor esi, esi
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0x41f230
call ebx
mov ecx, eax
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
lea edx, [edx + edx*2]
sub ecx, edx
jne 0x41f58a
add edi, 3
mov dword [ebp - 4], 0xb
xor esi, esi
mov dword [ebp - 0x28c], esi
cmp esi, 4
jge 0x41f292
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea eax, [eax + eax*2]
mov ecx, esi
sub ecx, eax
cmp ecx, 1
jne 0x41f284
mov eax, ebx
nop
mov ecx, edx
nop
add esi, 1
jmp 0x41f254
add edi, 1
mov dword [ebp - 0x274], edi
add esi, 1
jmp 0x41f254
mov dword [ebp - 4], 0xfffffffe
call fcn.0041f2d8
mov dword [ebp - 4], 0xc
xor esi, esi
lea edi, [esi + 1]
mov dword [ebp - 0x294], esi
cmp esi, 3
jge 0x41f2ed
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax + eax*2]
mov eax, esi
sub eax, edx
cmp eax, edi
jne 0x41f2e3
mov eax, ebx
nop
mov ecx, edx
nop
add esi, edi
jmp 0x41f2aa
add dword [ebp - 0x274], edi
add esi, edi
jmp 0x41f2aa
mov dword [ebp - 4], 0xfffffffe
call fcn.0041f373
xor eax, eax
jmp 0x41f300
mov edx, eax
imul ecx, edx
add eax, 1
cmp eax, 4
jl 0x41f300
nop
nop
nop
mov edi, 0x11
nop
nop
nop
xor esi, esi
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
call ebx
mov ecx, eax
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
lea eax, [edx + edx*2]
sub ecx, eax
jne 0x41f57d
add edi, 4
mov dword [ebp - 4], 0xd
xor esi, esi
mov dword [ebp - 0x29c], esi
cmp esi, 3
jge 0x41f38d
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov edx, esi
sub edx, ecx
cmp edx, 1
jne 0x41f37f
mov eax, ebx
nop
mov ecx, edx
nop
add esi, edx
jmp 0x41f344
add edi, 1
mov dword [ebp - 0x274], edi
add esi, 1
jmp 0x41f344
mov dword [ebp - 4], 0xfffffffe
call fcn.0041f3b9
xor esi, esi
jmp 0x41f3a0
mov eax, 0xaaaaaaab
mul esi
shr edx, 1
lea eax, [edx + edx*2]
mov ecx, esi
sub ecx, eax
cmp ecx, 1
jne 0x41f3c5
and edi, esi
jmp 0x41f3db
mov eax, 1
mov ebx, 2
mov ecx, 3
mov edx, 4
or edi, esi
add esi, 1
cmp esi, 3
jl 0x41f3a0
xor edi, edi
push 0xfa
lea edx, [ebp - 0x218]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
xor esi, esi
lea esp, [esp]
mov eax, 0xaaaaaaab
mul esi
shr edx, 1
lea eax, [edx + edx*2]
mov ecx, esi
sub ecx, eax
cmp ecx, 1
jne 0x41f419
and edi, esi
jmp 0x41f42f
mov eax, 1
mov ebx, 2
mov ecx, 3
mov edx, 4
or edi, esi
add esi, 1
cmp esi, 4
jl 0x41f400
mov dword [ebp - 4], 0xe
xor esi, esi
mov dword [ebp - 0x2a4], esi
test esi, esi
jge 0x41f47d
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax + eax*2]
mov eax, esi
sub eax, edx
cmp eax, 1
jne 0x41f46f
mov eax, ebx
nop
mov ecx, edx
nop
add esi, 1
jmp 0x41f440
add edi, 1
mov dword [ebp - 0x274], edi
add esi, 1
jmp 0x41f440
mov dword [ebp - 4], 0xfffffffe
call fcn.0041f4f2
xor eax, eax
jmp 0x41f490
mov edx, eax
imul ecx, edx
add eax, 1
cmp eax, 3
jl 0x41f490
nop
nop
nop
lea eax, [ebp - 0x270]
push eax
push 0x46ce30
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov edi, 0x11
nop
nop
nop
mov dword [ebp - 4], 0xf
xor esi, esi
mov dword [ebp - 0x2ac], esi
cmp esi, 3
jge 0x41f50c
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov edx, esi
sub edx, ecx
cmp edx, 1
jne 0x41f4fe
mov eax, ebx
nop
mov ecx, edx
nop
add esi, edx
jmp 0x41f4c3
add edi, 1
mov dword [ebp - 0x274], edi
add esi, 1
jmp 0x41f4c3
mov dword [ebp - 4], 0xfffffffe
call fcn.0041f571
xor esi, esi
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
call ebx
mov ecx, eax
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
lea eax, [edx + edx*2]
sub ecx, eax
je 0x41f550
mov ecx, esi
imul edi, ecx
add esi, 1
call ebx
mov ecx, eax
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
lea edx, [edx + edx*2]
sub ecx, edx
jne 0x41f534
add edi, 2
mov eax, edi
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x1c]
xor ecx, ebp
call fcn.0040470b
mov esp, ebp
pop ebp
ret
mov eax, esi
imul edi, eax
add esi, 1
jmp 0x41f320
mov ecx, esi
imul edi, ecx
add esi, 1
jmp 0x41f230
mov edx, edi
imul esi, edx
add edi, 1
jmp 0x41f0a0
mov eax, esi
imul edi, eax
add esi, 1
jmp 0x41efe5
mov ecx, esi
imul edi, ecx
add esi, 1
jmp 0x41edb0
mov edx, esi
imul edi, edx
add esi, 1
jmp 0x41ed92
mov eax, esi
imul edi, eax
add esi, 1
jmp 0x41ed72
mov ecx, edi
imul esi, ecx
add edi, 1
jmp 0x41eb97
mov edx, edi
imul esi, edx
add edi, 1
jmp 0x41eb47
mov eax, esi
imul edi, eax
add esi, 1
jmp 0x41e920
mov ecx, edi
imul esi, ecx
add edi, 1
jmp 0x41e8b3
mov edx, edi
imul esi, edx
add edi, 1
jmp 0x41e7d0
mov eax, edi
imul esi, eax
add edi, 1
jmp 0x41e7b0