Function at 0x428470
Capabilities:
Check for time delay via gettickcount
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x470250
push 0x408860
mov eax, dword fs:[0]
push eax
sub esp, 0x298
mov eax, dword [0x474534]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x1c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
xor ebx, ebx
xor esi, esi
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call edi
mov ecx, eax
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
lea eax, [edx + edx*2]
sub ecx, eax
jne 0x4292f6
add ebx, 0x25
xor esi, esi
lea ecx, [ecx]
call edi
mov ecx, eax
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
lea edx, [edx + edx*2]
sub ecx, edx
jne 0x4292e9
add ebx, 0x2f
xor esi, esi
lea ecx, [ecx]
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 1
je 0x42850f
cmp eax, 4
je 0x42850f
and ebx, ecx
jmp 0x428511
sub ebx, ecx
add ecx, 1
cmp ecx, 0x17
jl 0x4284f0
push 0xfa
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
mov dword [ebp - 4], esi
mov dword [ebp - 0x298], esi
cmp esi, 0x17
jge 0x42856b
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov edx, esi
sub edx, ecx
cmp edx, 1
jne 0x42855d
mov eax, ebx
nop
mov ecx, edx
nop
add esi, edx
jmp 0x42852e
add ebx, 1
mov dword [ebp - 0x274], ebx
add esi, 1
jmp 0x42852e
mov dword [ebp - 4], 0xfffffffe
call fcn.0042859f
xor ecx, ecx
lea esp, [esp]
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 1
je 0x4285ab
cmp eax, 4
je 0x4285ab
and esi, ecx
jmp 0x4285ad
sub esi, ecx
add ecx, 1
cmp ecx, 0xc
jl 0x428580
push 0xfa
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
xor eax, eax
lea esp, [esp]
test al, 1
je 0x4285d8
add esi, eax
jmp 0x4285da
sub esi, eax
add eax, 1
cmp eax, 0x1c
jl 0x4285d0
push 0x461e00
push 0x461e08
mov edi, dword [sym.imp.USER32.dll_FindWindowW]
call edi
xor eax, eax
test al, 1
je 0x4285fe
add esi, eax
jmp 0x428600
sub esi, eax
add eax, 1
cmp eax, 0x17
jl 0x4285f6
push 0x461e10
push 0x461e18
call edi
xor ecx, ecx
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 2
je 0x428635
cmp eax, 3
je 0x428635
xor esi, ecx
jmp 0x42863a
mov eax, ecx
imul esi, eax
add ecx, 1
cmp ecx, 3
jl 0x428616
lea ecx, [ebp - 0x270]
push ecx
push 0x461e20
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
xor ecx, ecx
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 1
je 0x428675
cmp eax, 4
je 0x428675
and esi, ecx
jmp 0x428677
sub esi, ecx
add ecx, 1
cmp ecx, 5
jl 0x428656
push 0xfa
lea eax, [ebp - 0x218]
push eax
mov ebx, dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
call ebx
add esi, 4
push 0x461e28
push 0x461e30
call edi
xor eax, eax
test al, 1
je 0x4286ac
add esi, eax
jmp 0x4286ae
sub esi, eax
add eax, 1
cmp eax, 0xf
jl 0x4286a4
push 0x461e38
push 0x461e40
call edi
xor ecx, ecx
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 1
je 0x4286e3
cmp eax, 4
je 0x4286e3
and esi, ecx
jmp 0x4286e5
sub esi, ecx
add ecx, 1
cmp ecx, 6
jl 0x4286c4
push 0xfa
lea eax, [ebp - 0x218]
push eax
call ebx
xor ecx, ecx
lea ecx, [ecx]
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 1
je 0x42871f
cmp eax, 4
je 0x42871f
and esi, ecx
jmp 0x428721
sub esi, ecx
add ecx, 1
cmp ecx, 0xa
jl 0x428700
push 0xfa
lea eax, [ebp - 0x218]
push eax
call ebx
xor ecx, ecx
lea esp, [esp]
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 2
je 0x42875f
cmp eax, 3
je 0x42875f
xor esi, ecx
jmp 0x428764
mov eax, ecx
imul esi, eax
add ecx, 1
cmp ecx, 2
jl 0x428740
lea ecx, [ebp - 0x270]
push ecx
push 0x461e48
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
xor ecx, ecx
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 1
je 0x42879f
cmp eax, 4
je 0x42879f
and esi, ecx
jmp 0x4287a1
sub esi, ecx
add ecx, 1
cmp ecx, 0xb
jl 0x428780
push 0xfa
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
xor ebx, ebx
lea ecx, [ecx]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
lea edx, [edx + edx*2]
sub ecx, edx
jne 0x4292dc
add esi, 6
push 0x461e50
push 0x461e58
call edi
xor eax, eax
lea ecx, [ecx]
test al, 1
je 0x4287f8
add esi, eax
jmp 0x4287fa
sub esi, eax
add eax, 1
cmp eax, 0xf
jl 0x4287f0
push 0x461e60
push 0x461e68
call edi
mov dword [ebp - 4], 1
xor ebx, ebx
mov dword [ebp - 0x2a4], ebx
cmp ebx, 0xf
jge 0x428855
mov eax, 0x55555556
imul ebx
mov eax, edx
shr eax, 0x1f
add eax, edx
lea eax, [eax + eax*2]
mov ecx, ebx
sub ecx, eax
cmp ecx, 1
jne 0x428847
mov eax, ebx
nop
mov ecx, edx
nop
add ebx, 1
jmp 0x428817
add esi, 1
mov dword [ebp - 0x274], esi
add ebx, 1
jmp 0x428817
mov dword [ebp - 4], 0xfffffffe
call fcn.00428882
xor ecx, ecx
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 2
je 0x42888e
cmp eax, 3
je 0x42888e
xor esi, ecx
jmp 0x428893
mov eax, ecx
imul esi, eax
add ecx, 1
cmp ecx, 0xc
jl 0x428863
lea ecx, [ebp - 0x270]
push ecx
push 0x461e70
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
xor ecx, ecx
nop
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 1
je 0x4288cf
cmp eax, 4
je 0x4288cf
and esi, ecx
jmp 0x4288d1
sub esi, ecx
add ecx, 1
cmp ecx, 7
jl 0x4288b0
push 0xfa
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
mov edi, esi
lea ecx, [ebp - 0x270]
push ecx
push 0x461e78
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
xor esi, esi
mov eax, 0xaaaaaaab
mul esi
shr edx, 1
lea edx, [edx + edx*2]
mov eax, esi
sub eax, edx
cmp eax, 1
jne 0x42891a
and edi, esi
jmp 0x428930
mov eax, 1
mov ebx, 2
mov ecx, 3
mov edx, 4
or edi, esi
add esi, 1
cmp esi, 8
jl 0x428901
mov dword [ebp - 4], 2
xor esi, esi
mov dword [ebp - 0x280], esi
cmp esi, 6
jge 0x42897e
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov edx, esi
sub edx, ecx
cmp edx, 1
jne 0x428970
mov eax, ebx
nop
mov ecx, edx
nop
add esi, edx
jmp 0x428941
add edi, 1
mov dword [ebp - 0x274], edi
add esi, 1
jmp 0x428941
mov dword [ebp - 4], 0xfffffffe
call fcn.00428a0a
lea eax, [ebp - 0x270]
push eax
push 0x461e80
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
push 0x461e88
push 0x461e90
mov ebx, dword [sym.imp.USER32.dll_FindWindowW]
call ebx
add esi, 1
push 0x461e98
push 0x461ea0
call ebx
push 0x461ea8
push 0x461eb0
call ebx
xor ebx, ebx
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call edi
mov ecx, eax
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
lea edx, [edx + edx*2]
sub ecx, edx
jne 0x4292cf
lea edi, [ecx + 0x11]
nop
nop
nop
xor esi, esi
mov eax, 0xaaaaaaab
mul esi
shr edx, 1
lea eax, [edx + edx*2]
mov ecx, esi
sub ecx, eax
cmp ecx, 1
jne 0x428a16
and edi, esi
jmp 0x428a2c
mov eax, 1
mov ebx, 2
mov ecx, 3
mov edx, 4
or edi, esi
add esi, 1
cmp esi, 4
jl 0x4289f1
xor ecx, ecx
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 1
je 0x428a55
cmp eax, 4
je 0x428a55
and edi, ecx
jmp 0x428a57
sub edi, ecx
add ecx, 1
cmp ecx, 2
jl 0x428a36
push 0xfa
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
xor ecx, ecx
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 2
je 0x428a92
cmp eax, 3
je 0x428a92
xor edi, ecx
jmp 0x428a97
mov eax, ecx
imul edi, eax
add ecx, 1
cmp ecx, 2
jl 0x428a73
lea ecx, [ebp - 0x270]
push ecx
push 0x461eb8
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
xor esi, esi
mov eax, 0xaaaaaaab
mul esi
shr edx, 1
lea edx, [edx + edx*2]
mov eax, esi
sub eax, edx
cmp eax, 1
jne 0x428acc
and edi, esi
jmp 0x428ae2
mov eax, 1
mov ebx, 2
mov ecx, 3
mov edx, 4
or edi, esi
add esi, 1
cmp esi, 2
jl 0x428ab3
mov dword [ebp - 4], 3
xor esi, esi
mov dword [ebp - 0x2a0], esi
cmp esi, 1
jge 0x428b30
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov edx, esi
sub edx, ecx
cmp edx, 1
jne 0x428b22
mov eax, ebx
nop
mov ecx, edx
nop
add esi, edx
jmp 0x428af3
add edi, 1
mov dword [ebp - 0x274], edi
add esi, 1
jmp 0x428af3
mov dword [ebp - 4], 0xfffffffe
call fcn.00428b5f
xor ecx, ecx
mov edi, edi
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 1
je 0x428b6b
cmp eax, 4
je 0x428b6b
and edi, ecx
jmp 0x428b6d
sub edi, ecx
add ecx, 1
cmp ecx, 2
jl 0x428b40
push 0xfa
lea eax, [ebp - 0x218]
push eax
mov esi, dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
call esi
xor ecx, ecx
jmp 0x428b90
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 1
je 0x428baf
cmp eax, 4
je 0x428baf
and edi, ecx
jmp 0x428bb1
sub edi, ecx
add ecx, 1
cmp ecx, 2
jl 0x428b90
push 0xfa
lea eax, [ebp - 0x218]
push eax
call esi
xor esi, esi
lea esp, [esp]
mov eax, 0xaaaaaaab
mul esi
shr edx, 1
lea ecx, [edx + edx*2]
mov edx, esi
sub edx, ecx
cmp edx, 1
jne 0x428be9
and edi, esi
jmp 0x428bff
mov eax, 1
mov ebx, 2
mov ecx, 3
mov edx, 4
or edi, esi
add esi, 1
cmp esi, 4
jl 0x428bd0
lea eax, [ebp - 0x270]
push eax
push 0x461ec0
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
add edi, 2
push 0x461ec8
push 0x461ed0
call dword [sym.imp.USER32.dll_FindWindowW]
xor ecx, ecx
mov edi, edi
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 1
je 0x428c4f
cmp eax, 4
je 0x428c4f
and edi, ecx
jmp 0x428c51
sub edi, ecx
add ecx, 1
cmp ecx, 3
jl 0x428c30
push 0xfa
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
xor ecx, ecx
lea ecx, [ecx]
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 2
je 0x428c8f
cmp eax, 3
je 0x428c8f
xor edi, ecx
jmp 0x428c94
mov eax, ecx
imul edi, eax
add ecx, 1
cmp ecx, 4
jl 0x428c70
lea ecx, [ebp - 0x270]
push ecx
push 0x461ed8
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
xor esi, esi
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
call ebx
mov ecx, eax
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
lea edx, [edx + edx*2]
sub ecx, edx
jne 0x4292c2
add edi, 2
mov dword [ebp - 4], 4
xor esi, esi
mov dword [ebp - 0x288], esi
cmp esi, 3
jge 0x428d18
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea eax, [eax + eax*2]
mov ecx, esi
sub ecx, eax
cmp ecx, 1
jne 0x428d0a
mov eax, ebx
nop
mov ecx, edx
nop
add esi, 1
jmp 0x428cda
add edi, 1
mov dword [ebp - 0x274], edi
add esi, 1
jmp 0x428cda
mov dword [ebp - 4], 0xfffffffe
call fcn.00428d77
mov edi, eax
lea edx, [ebp - 0x270]
push edx
push 0x461ee0
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 4], 5
xor esi, esi
mov dword [ebp - 0x278], esi
cmp esi, 4
jge 0x428d91
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea eax, [eax + eax*2]
mov ecx, esi
sub ecx, eax
cmp ecx, 1
jne 0x428d83
mov eax, ebx
nop
mov ecx, edx
nop
add esi, 1
jmp 0x428d41
add edi, 1
mov dword [ebp - 0x274], edi
add esi, 1
jmp 0x428d41
mov dword [ebp - 4], 0xfffffffe
call fcn.00428e0b
xor esi, esi
nop
call ebx
mov ecx, eax
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
lea edx, [edx + edx*2]
sub ecx, edx
jne 0x4292b5
add edi, 2
lea eax, [ebp - 0x270]
push eax
push 0x461ee8
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 4], 6
xor esi, esi
mov dword [ebp - 0x290], esi
cmp esi, 2
jge 0x428e25
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov edx, esi
sub edx, ecx
cmp edx, 1
jne 0x428e17
mov eax, ebx
nop
mov ecx, edx
nop
add esi, edx
jmp 0x428dd6
add edi, 1
mov dword [ebp - 0x274], edi
add esi, 1
jmp 0x428dd6
mov dword [ebp - 4], 0xfffffffe
call fcn.00428e8b
xor esi, esi
call ebx
mov ecx, eax
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
lea eax, [edx + edx*2]
sub ecx, eax
jne 0x4292a8
add edi, 1
mov dword [ebp - 4], 7
xor esi, esi
mov dword [ebp - 0x27c], esi
test esi, esi
jge 0x428ea5
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov edx, esi
sub edx, ecx
cmp edx, 1
jne 0x428e97
mov eax, ebx
nop
mov ecx, edx
nop
add esi, edx
jmp 0x428e57
add edi, 1
mov dword [ebp - 0x274], edi
add esi, 1
jmp 0x428e57
mov dword [ebp - 4], 0xfffffffe
call fcn.00428ec1
xor eax, eax
test al, 1
je 0x428ecd
add ecx, eax
jmp 0x428ecf
sub ecx, eax
add eax, 1
cmp eax, 4
jl 0x428eb3
push 0x461ef0
push 0x461ef8
mov esi, dword [sym.imp.USER32.dll_FindWindowW]
call esi
nop
nop
nop
push 0x461f00
push 0x461f08
call esi
lea eax, [ebp - 0x270]
push eax
push 0x461f10
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov esi, 0x55
nop
nop
nop
xor edi, edi
call ebx
mov ecx, eax
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
lea edx, [edx + edx*2]
sub ecx, edx
jne 0x42929b
add esi, 2
nop
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 1
je 0x428f4f
cmp eax, 4
je 0x428f4f
and esi, ecx
jmp 0x428f51
sub esi, ecx
add ecx, 1
cmp ecx, 3
jl 0x428f30
push 0xfa
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
mov edi, 0x11
nop
nop
nop
mov dword [ebp - 4], 8
xor esi, esi
mov dword [ebp - 0x284], esi
test esi, esi
jge 0x428fb8
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov edx, esi
sub edx, ecx
cmp edx, 1
jne 0x428faa
mov eax, ebx
nop
mov ecx, edx
nop
add esi, edx
jmp 0x428f7c
add edi, 1
mov dword [ebp - 0x274], edi
add esi, 1
jmp 0x428f7c
mov dword [ebp - 4], 0xfffffffe
call fcn.00428fdf
xor esi, esi
mov eax, 0xaaaaaaab
mul esi
shr edx, 1
lea eax, [edx + edx*2]
mov ecx, esi
sub ecx, eax
cmp ecx, 1
jne 0x428feb
and edi, esi
jmp 0x429001
mov eax, 1
mov ebx, 2
mov ecx, 3
mov edx, 4
or edi, esi
add esi, 1
cmp esi, 2
jl 0x428fc6
nop
nop
nop
mov edi, 0x10
push 0x461f18
push 0x461f20
call dword [sym.imp.USER32.dll_FindWindowW]
xor esi, esi
mov eax, 0xaaaaaaab
mul esi
shr edx, 1
lea edx, [edx + edx*2]
mov eax, esi
sub eax, edx
cmp eax, 1
jne 0x42903c
and edi, esi
jmp 0x429052
mov eax, 1
mov ebx, 2
mov ecx, 3
mov edx, 4
or edi, esi
add esi, 1
cmp esi, 4
jl 0x429023
xor esi, esi
lea esp, [esp]
mov eax, 0xaaaaaaab
mul esi
shr edx, 1
lea ecx, [edx + edx*2]
mov edx, esi
sub edx, ecx
cmp edx, 1
jne 0x429079
and edi, esi
jmp 0x42908f
mov eax, 1
mov ebx, 2
mov ecx, 3
mov edx, 4
or edi, esi
add esi, 1
cmp esi, 4
jl 0x429060
xor ecx, ecx
lea esp, [esp]
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 1
je 0x4290bf
cmp eax, 4
je 0x4290bf
and edi, ecx
jmp 0x4290c1
sub edi, ecx
add ecx, 1
cmp ecx, 2
jl 0x4290a0
push 0xfa
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
mov edi, 0x11
nop
nop
nop
xor esi, esi
mov eax, 0xaaaaaaab
mul esi
shr edx, 1
lea ecx, [edx + edx*2]
mov edx, esi
sub edx, ecx
cmp edx, 1
jne 0x4290fe
and edi, esi
jmp 0x429114
mov eax, 1
mov ebx, 2
mov ecx, 3
mov edx, 4
or edi, esi
add esi, 1
cmp esi, 3
jl 0x4290e5
xor esi, esi
mov edi, edi
mov eax, 0xaaaaaaab
mul esi
shr edx, 1
lea eax, [edx + edx*2]
mov ecx, esi
sub ecx, eax
cmp ecx, 1
jne 0x429139
and edi, esi
jmp 0x42914f
mov eax, 1
mov ebx, 2
mov ecx, 3
mov edx, 4
or edi, esi
add esi, 1
cmp esi, 4
jl 0x429120
mov dword [ebp - 4], 9
xor esi, esi
mov dword [ebp - 0x28c], esi
test esi, esi
jge 0x42919d
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax + eax*2]
mov eax, esi
sub eax, edx
cmp eax, 1
jne 0x42918f
mov eax, ebx
nop
mov ecx, edx
nop
add esi, 1
jmp 0x429160
add edi, 1
mov dword [ebp - 0x274], edi
add esi, 1
jmp 0x429160
mov dword [ebp - 4], 0xfffffffe
call fcn.004291e3
mov dword [ebp - 4], 0xa
xor esi, esi
lea edi, [esi + 1]
mov dword [ebp - 0x294], esi
cmp esi, 3
jge 0x4291f8
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov edx, esi
sub edx, ecx
cmp edx, edi
jne 0x4291ee
mov eax, ebx
nop
mov ecx, edx
nop
add esi, edi
jmp 0x4291b5
add dword [ebp - 0x274], edi
add esi, edi
jmp 0x4291b5
mov dword [ebp - 4], 0xfffffffe
call fcn.0042923e
mov dword [ebp - 4], 0xb
xor esi, esi
lea edi, [esi + 1]
mov dword [ebp - 0x29c], esi
cmp esi, 3
jge 0x429253
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea eax, [eax + eax*2]
mov ecx, esi
sub ecx, eax
cmp ecx, edi
jne 0x429249
mov eax, ebx
nop
mov ecx, edx
nop
add esi, edi
jmp 0x429210
add dword [ebp - 0x274], edi
add esi, edi
jmp 0x429210
mov dword [ebp - 4], 0xfffffffe
call fcn.0042928f
lea edx, [ebp - 0x270]
push edx
push 0x461f28
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov eax, esi
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x1c]
xor ecx, ebp
call fcn.0040470b
mov esp, ebp
pop ebp
ret
mov eax, edi
imul esi, eax
add edi, 1
jmp 0x428f14
mov ecx, esi
imul edi, ecx
add esi, 1
jmp 0x428e33
mov edx, esi
imul edi, edx
add esi, 1
jmp 0x428da0
mov eax, esi
imul edi, eax
add esi, 1
jmp 0x428cb6
mov ecx, ebx
imul esi, ecx
add ebx, 1
jmp 0x4289d1
mov edx, ebx
imul esi, edx
add ebx, 1
jmp 0x4287c0
mov eax, esi
imul ebx, eax
add esi, 1
jmp 0x4284d0
mov ecx, esi
imul ebx, ecx
add esi, 1
jmp 0x4284b0