Function at 0x4247b0
Capabilities:
Check for time delay via gettickcount
Print debug messages

Disassembly:
push 0xffffffffffffffff
push 0x4894cd
mov eax, dword fs:[0]
push eax
sub esp, 0x17c
mov eax, dword [0x4ab13c]
xor eax, esp
mov dword [esp + 0x178], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4ab13c]
xor eax, esp
push eax
lea eax, [esp + 0x190]
mov dword fs:[0], eax
mov edi, ecx
mov dword [esp + 0x14], edi
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
xor ebx, ebx
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0x1c4]
mov dword [ecx + 0x18], 0xf
mov dword [ecx + 0x14], ebx
push eax
mov dword [esp + 0x1c0], 1
mov byte [ecx + 4], bl
call fcn.0040204d
lea ecx, [esp + 0x88]
push ecx
mov ecx, edi
call fcn.00424440
lea edx, [esp + 0x1a0]
push edx
lea eax, [esp + 0x1c]
lea esi, [edi + 0x5f0]
push eax
mov ecx, esi
mov byte [esp + 0x1a0], 2
call fcn.00418d20
mov ebp, dword [esp + 0x18]
cmp ebp, ebx
mov ecx, dword [esi + 4]
mov dword [esp + 0x24], ecx
je 0x424868
cmp ebp, esi
je 0x42486d
call fcn.0045c182
mov edx, dword [esp + 0x1c]
cmp edx, dword [esp + 0x24]
je 0x42489f
cmp ebp, ebx
jne 0x424880
call fcn.0045c182
mov eax, dword [esp + 0x1c]
cmp eax, dword [ebp + 4]
jne 0x42488e
call fcn.0045c182
mov ecx, dword [esp + 0x1c]
mov ebp, dword [ecx + 0x28]
mov esi, 0x10
jmp 0x424993
mov eax, dword [esp + 0x70]
mov edi, 0x10
cmp dword [esp + 0x84], edi
jae 0x4248b5
lea eax, [esp + 0x70]
push eax
push 0x400000
push ebx
push 4
push ebx
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov ebp, eax
cmp ebp, ebx
je 0x424c76
push ebp
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x38], esp
push 0xffffffffffffffff
push ebx
lea edx, [esp + 0x1c8]
mov dword [ecx + 0x18], 0xf
mov dword [ecx + 0x14], ebx
push edx
mov byte [ecx + 4], bl
call fcn.0040204d
lea eax, [esp + 0x6c]
push eax
call fcn.00419800
add esp, 0x24
mov edi, eax
push 0xffffffffffffffff
push ebx
push edi
lea ecx, [esp + 0x38]
mov byte [esp + 0x1a4], 3
mov dword [esp + 0x50], 0xf
mov dword [esp + 0x4c], ebx
mov byte [esp + 0x3c], bl
call fcn.0040204d
mov ecx, dword [edi + 0x1c]
mov dword [esp + 0x48], ecx
lea edx, [esp + 0x2c]
push edx
lea eax, [esp + 0x24]
push eax
mov ecx, esi
mov byte [esp + 0x1a0], 4
call fcn.0041d350
mov esi, 0x10
cmp dword [esp + 0x44], esi
jb 0x424964
mov ecx, dword [esp + 0x30]
push ecx
call fcn.00451909
add esp, 4
cmp dword [esp + 0x64], esi
mov dword [esp + 0x44], 0xf
mov dword [esp + 0x40], ebx
mov byte [esp + 0x30], bl
mov byte [esp + 0x198], 2
jb 0x42498f
mov edx, dword [esp + 0x50]
push edx
call fcn.00451909
add esp, 4
mov edi, dword [esp + 0x14]
push ebx
push ebx
push ebx
push 2
push ebp
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
cmp eax, ebx
jne 0x424a07
push str.HandleNotifyUICreateTask_MapViewOfFile_Failed
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
cmp dword [esp + 0x84], esi
jb 0x4249c4
mov eax, dword [esp + 0x70]
push eax
call fcn.00451909
add esp, 4
cmp dword [esp + 0x1b8], esi
mov edi, 0xf
mov dword [esp + 0x84], edi
mov dword [esp + 0x80], ebx
mov byte [esp + 0x70], bl
jb 0x4249f4
mov ecx, dword [esp + 0x1a4]
push ecx
call fcn.00451909
add esp, 4
cmp dword [esp + 0x1d4], esi
mov dword [esp + 0x1b8], edi
jmp 0x424ce2
cmp dword [esp + 0x1d4], esi
mov ecx, dword [esp + 0x1c0]
jae 0x424a1e
lea ecx, [esp + 0x1c0]
push 0x3fffff
push ecx
push eax
call fcn.0045c730
push 0x103
lea eax, [esp + 0x99]
push ebx
push eax
mov byte [esp + 0xa0], bl
call fcn.0045bc20
add esp, 0x18
cmp dword [esp + 0x1b4], 5
jbe 0x424a8f
cmp dword [esp + 0x84], esi
mov ecx, dword [esp + 0x70]
jae 0x424a62
lea ecx, [esp + 0x70]
cmp dword [esp + 0x1b8], esi
mov eax, dword [esp + 0x1a4]
jae 0x424a79
lea eax, [esp + 0x1a4]
push ecx
push eax
push str._qq:_s__cmd:createtask__cmdparam:_s
push 0x104
lea ecx, [esp + 0x98]
push ecx
jmp 0x424ab7
cmp dword [esp + 0x84], esi
mov eax, dword [esp + 0x70]
jae 0x424aa0
lea eax, [esp + 0x70]
push eax
lea edx, [edi + 0x6e]
push edx
push str._qq:_s__cmd:createtask__cmdparam:_s
push 0x104
lea eax, [esp + 0x98]
push eax
call fcn.0045ccad
add edi, 0x5fc
add esp, 0x14
cmp dword [edi + 0x18], esi
jb 0x424acf
mov eax, dword [edi + 4]
jmp 0x424ad2
lea eax, [edi + 4]
lea ecx, [esp + 0x88]
lea esp, [esp]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x424b00
cmp dl, bl
je 0x424afc
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x424b00
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x424ae0
xor eax, eax
jmp 0x424b05
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
jne 0x424c05
push ebx
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x38], esp
push 0xffffffffffffffff
push ebx
lea edx, [esp + 0x1c8]
mov dword [ecx + 0x18], 0xf
mov dword [ecx + 0x14], ebx
push edx
mov byte [ecx + 4], bl
call fcn.0040204d
lea eax, [esp + 0x40]
push eax
mov byte [esp + 0x1bc], 5
call fcn.004358e0
add esp, 4
mov eax, dword [eax]
mov byte [esp + 0x1b8], 6
mov ecx, eax
mov byte [esp + 0x1b8], 7
call fcn.00429450
lea ecx, [esp + 0x20]
mov esi, eax
mov byte [esp + 0x198], 2
call fcn.00438700
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ebp, dword [esp + 0x14]
cmp esi, ebx
mov esi, eax
je 0x424b9e
sub esi, dword [ebp + 0x618]
mov edi, 0xc8
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp + 0x618], eax
jmp 0x424bb5
sub esi, dword [ebp + 0x61c]
mov edi, 0x3e8
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp + 0x61c], eax
cmp esi, edi
jbe 0x424c6c
lea ecx, [esp + 0x20]
push ecx
call fcn.004358e0
add esp, 4
mov edx, dword [ebp + 0xee]
mov eax, dword [eax]
push edx
lea ecx, [esp + 0x8c]
push ecx
mov ecx, eax
mov byte [esp + 0x1a0], 8
call fcn.004304a0
lea ecx, [esp + 0x20]
mov byte [esp + 0x198], 2
call fcn.00438700
mov esi, 0x10
jmp 0x4249ae
lea edx, [esp + 0x20]
push edx
call fcn.004358e0
add esp, 4
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx + 0xee]
mov eax, dword [eax]
push edx
lea ecx, [esp + 0x8c]
push ecx
mov ecx, eax
mov byte [esp + 0x1a0], 9
call fcn.004304a0
lea ecx, [esp + 0x20]
mov byte [esp + 0x198], 2
call fcn.00438700
lea eax, [esp + 0x88]
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x424c51
sub eax, edx
push eax
lea edx, [esp + 0x8c]
push edx
mov ecx, edi
call fcn.00402288
mov esi, 0x10
jmp 0x4249ae
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x424c8e
push str.HandleNotifyUICreateTask_CreateFileMappingA_ERROR_ALREADY_EXISTS
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
cmp dword [esp + 0x84], edi
jb 0x424ca4
mov eax, dword [esp + 0x70]
push eax
call fcn.00451909
add esp, 4
cmp dword [esp + 0x1b8], edi
mov esi, 0xf
mov dword [esp + 0x84], esi
mov dword [esp + 0x80], ebx
mov byte [esp + 0x70], bl
jb 0x424cd4
mov ecx, dword [esp + 0x1a4]
push ecx
call fcn.00451909
add esp, 4
cmp dword [esp + 0x1d4], edi
mov dword [esp + 0x1b8], esi
mov dword [esp + 0x1b4], ebx
mov byte [esp + 0x1a4], bl
jb 0x424d02
mov edx, dword [esp + 0x1c0]
push edx
call fcn.00451909
add esp, 4
mov ecx, dword [esp + 0x190]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x178]
xor ecx, esp
call fcn.0045b0da
add esp, 0x188
ret 0x38