Function at 0x423dc0
Capabilities:
Check for time delay via gettickcount
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x46ff58
push 0x408860
mov eax, dword fs:[0]
push eax
sub esp, 0x2b0
mov eax, dword [0x474534]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x1c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
xor edi, edi
xor ecx, ecx
lea ebx, [ebx]
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 1
je 0x423e1f
cmp eax, 4
je 0x423e1f
and edi, ecx
jmp 0x423e21
sub edi, ecx
add ecx, 1
cmp ecx, 0x3f
jl 0x423e00
push 0xfa
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
xor esi, esi
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
call ebx
mov ecx, eax
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
lea edx, [edx + edx*2]
sub ecx, edx
jne 0x425224
add edi, 7
xor eax, eax
test al, 1
je 0x423e68
add edi, eax
jmp 0x423e6a
sub edi, eax
add eax, 1
cmp eax, 0xc
jl 0x423e60
push 0x46c720
push 0x46c728
call dword [sym.imp.USER32.dll_FindWindowW]
xor esi, esi
mov eax, 0xaaaaaaab
mul esi
shr edx, 1
lea eax, [edx + edx*2]
mov ecx, esi
sub ecx, eax
cmp ecx, 1
jne 0x423e9d
and edi, esi
jmp 0x423eb3
mov eax, 1
mov ebx, 2
mov ecx, 3
mov edx, 4
or edi, esi
add esi, 1
cmp esi, 0xe
jl 0x423e84
xor ecx, ecx
lea ecx, [ecx]
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 2
je 0x423edf
cmp eax, 3
je 0x423edf
xor edi, ecx
jmp 0x423ee4
mov eax, ecx
imul edi, eax
add ecx, 1
cmp ecx, 7
jl 0x423ec0
lea ecx, [ebp - 0x270]
push ecx
push 0x46c730
mov ebx, dword [sym.imp.KERNEL32.dll_FindFirstFileW]
call ebx
xor ecx, ecx
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 2
je 0x423f21
cmp eax, 3
je 0x423f21
xor edi, ecx
jmp 0x423f26
mov eax, ecx
imul edi, eax
add ecx, 1
cmp ecx, 0xc
jl 0x423f02
lea ecx, [ebp - 0x270]
push ecx
push 0x46c738
call ebx
xor ecx, ecx
mov edi, edi
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 2
je 0x423f5f
cmp eax, 3
je 0x423f5f
xor edi, ecx
jmp 0x423f64
mov eax, ecx
imul edi, eax
add ecx, 1
cmp ecx, 0x10
jl 0x423f40
lea ecx, [ebp - 0x270]
push ecx
push 0x46c740
call ebx
xor esi, esi
lea esp, [esp]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
lea edx, [edx + edx*2]
sub ecx, edx
jne 0x425217
add edi, 0x10
nop
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 2
je 0x423fbf
cmp eax, 3
je 0x423fbf
xor edi, ecx
jmp 0x423fc4
mov eax, ecx
imul edi, eax
add ecx, 1
cmp ecx, 0xa
jl 0x423fa0
lea ecx, [ebp - 0x270]
push ecx
push 0x46c748
call ebx
xor eax, eax
lea esp, [esp]
test al, 1
je 0x423fe8
add edi, eax
jmp 0x423fea
sub edi, eax
add eax, 1
cmp eax, 0xb
jl 0x423fe0
push 0x46c750
push 0x46c758
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 4], 0
xor esi, esi
lea ebx, [esi + 1]
mov dword [ebp - 0x298], esi
cmp esi, 0xa
jge 0x424048
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax + eax*2]
mov eax, esi
sub eax, edx
cmp eax, ebx
jne 0x42403c
mov eax, ebx
nop
mov ecx, edx
nop
add esi, ebx
jmp 0x42400e
add edi, ebx
mov dword [ebp - 0x274], edi
add esi, ebx
jmp 0x42400e
mov dword [ebp - 4], 0xfffffffe
call fcn.0042408c
mov dword [ebp - 4], ebx
xor esi, esi
mov dword [ebp - 0x2bc], esi
cmp esi, 6
jge 0x4240a1
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov edx, esi
sub edx, ecx
cmp edx, ebx
jne 0x424097
mov eax, ebx
nop
mov ecx, edx
nop
add esi, ebx
jmp 0x424059
add dword [ebp - 0x274], ebx
add esi, ebx
jmp 0x424059
mov dword [ebp - 4], 0xfffffffe
call fcn.00424105
xor esi, esi
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
call ebx
mov ecx, eax
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
lea eax, [edx + edx*2]
sub ecx, eax
jne 0x42520a
mov dword [ebp - 4], 2
xor esi, esi
mov dword [ebp - 0x280], esi
cmp esi, 8
jge 0x42411f
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov edx, esi
sub edx, ecx
cmp edx, 1
jne 0x424111
mov eax, ebx
nop
mov ecx, edx
nop
add esi, edx
jmp 0x4240d6
add edi, 1
mov dword [ebp - 0x274], edi
add esi, 1
jmp 0x4240d6
mov dword [ebp - 4], 0xfffffffe
call fcn.00424155
xor ecx, ecx
lea ecx, [ecx]
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 1
je 0x424161
cmp eax, 4
je 0x424161
and edi, ecx
jmp 0x424163
sub edi, ecx
add ecx, 1
cmp ecx, 5
jl 0x424130
push 0xfa
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
mov dword [ebp - 4], 3
xor esi, esi
mov dword [ebp - 0x2a0], esi
cmp esi, 7
jge 0x4241c3
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov edx, esi
sub edx, ecx
cmp edx, 1
jne 0x4241b5
mov eax, ebx
nop
mov ecx, edx
nop
add esi, edx
jmp 0x424186
add edi, 1
mov dword [ebp - 0x274], edi
add esi, 1
jmp 0x424186
mov dword [ebp - 4], 0xfffffffe
call fcn.004241df
xor eax, eax
test al, 1
je 0x4241eb
add ecx, eax
jmp 0x4241ed
sub ecx, eax
add eax, 1
cmp eax, 4
jl 0x4241d1
push 0x46c760
push 0x46c768
call dword [sym.imp.USER32.dll_FindWindowW]
mov esi, 0x11
nop
nop
nop
xor edi, edi
nop
call ebx
mov ecx, eax
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
lea eax, [edx + edx*2]
sub ecx, eax
jne 0x4251fd
add esi, 4
xor edi, edi
lea ecx, [ecx]
mov eax, 0xaaaaaaab
mul edi
shr edx, 1
lea ecx, [edx + edx*2]
mov edx, edi
sub edx, ecx
cmp edx, 1
jne 0x424249
and esi, edi
jmp 0x42425f
mov eax, 1
mov ebx, 2
mov ecx, 3
mov edx, 4
or esi, edi
add edi, 1
cmp edi, 6
jl 0x424230
add esi, 2
push 0x46c770
push 0x46c778
call dword [sym.imp.USER32.dll_FindWindowW]
xor ecx, ecx
lea esp, [esp]
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 1
je 0x42429f
cmp eax, 4
je 0x42429f
and esi, ecx
jmp 0x4242a1
sub esi, ecx
add ecx, 1
cmp ecx, 7
jl 0x424280
push 0xfa
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
xor edi, edi
lea ecx, [ecx]
mov eax, 0xaaaaaaab
mul edi
shr edx, 1
lea ecx, [edx + edx*2]
mov edx, edi
sub edx, ecx
cmp edx, 1
jne 0x4242d9
and esi, edi
jmp 0x4242ef
mov eax, 1
mov ebx, 2
mov ecx, 3
mov edx, 4
or esi, edi
add edi, 1
cmp edi, 8
jl 0x4242c0
xor edi, edi
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
nop
call ebx
mov ecx, eax
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
lea eax, [edx + edx*2]
sub ecx, eax
jne 0x4251f0
add esi, 8
jmp 0x424320
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 1
je 0x42433f
cmp eax, 4
je 0x42433f
and esi, ecx
jmp 0x424341
sub esi, ecx
add ecx, 1
cmp ecx, 7
jl 0x424320
push 0xfa
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
add esi, 4
push 0x46c780
push 0x46c788
mov ebx, dword [sym.imp.USER32.dll_FindWindowW]
call ebx
add esi, 3
push 0x46c790
push 0x46c798
call ebx
xor edi, edi
mov eax, 0xaaaaaaab
mul edi
shr edx, 1
lea ecx, [edx + edx*2]
mov edx, edi
sub edx, ecx
cmp edx, 1
jne 0x42439a
and esi, edi
jmp 0x4243b6
mov eax, 1
mov ebx, 2
mov ecx, 3
mov edx, 4
or esi, edi
mov ebx, dword [sym.imp.USER32.dll_FindWindowW]
add edi, 1
cmp edi, 3
jl 0x424381
mov edi, 0x11
nop
nop
nop
xor ecx, ecx
jmp 0x4243d0
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 2
je 0x4243ef
cmp eax, 3
je 0x4243ef
xor edi, ecx
jmp 0x4243f4
mov eax, ecx
imul edi, eax
add ecx, 1
cmp ecx, 3
jl 0x4243d0
lea ecx, [ebp - 0x270]
push ecx
push 0x46c7a0
mov esi, dword [sym.imp.KERNEL32.dll_FindFirstFileW]
call esi
xor ecx, ecx
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 1
je 0x424431
cmp eax, 4
je 0x424431
and edi, ecx
jmp 0x424433
sub edi, ecx
add ecx, 1
cmp ecx, 6
jl 0x424412
push 0xfa
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
xor ecx, ecx
nop
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 2
je 0x42446f
cmp eax, 3
je 0x42446f
xor edi, ecx
jmp 0x424474
mov eax, ecx
imul edi, eax
add ecx, 1
cmp ecx, 5
jl 0x424450
lea ecx, [ebp - 0x270]
push ecx
push 0x46c7a8
call esi
mov dword [ebp - 4], 4
xor esi, esi
mov dword [ebp - 0x288], esi
cmp esi, 4
jge 0x4244d1
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax + eax*2]
mov eax, esi
sub eax, edx
cmp eax, 1
jne 0x4244c3
mov eax, ebx
nop
mov ecx, edx
nop
add esi, 1
jmp 0x424493
add edi, 1
mov dword [ebp - 0x274], edi
add esi, 1
jmp 0x424493
mov dword [ebp - 4], 0xfffffffe
call fcn.004244ee
xor eax, eax
nop
test al, 1
je 0x4244fa
add esi, eax
jmp 0x4244fc
sub esi, eax
add eax, 1
cmp eax, 6
jl 0x4244e0
push 0x46c7b0
push 0x46c7b8
call ebx
add esi, 0xffffffff
push 0x46c7c0
push 0x46c7c8
call ebx
add esi, 2
push 0x46c7d0
push 0x46c7d8
call ebx
xor ecx, ecx
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 1
je 0x42454f
cmp eax, 4
je 0x42454f
and esi, ecx
jmp 0x424551
sub esi, ecx
add ecx, 1
cmp ecx, 8
jl 0x424530
push 0xfa
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
xor ecx, ecx
lea ecx, [ecx]
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 2
je 0x42458f
cmp eax, 3
je 0x42458f
xor esi, ecx
jmp 0x424594
mov eax, ecx
imul esi, eax
add ecx, 1
cmp ecx, 6
jl 0x424570
lea ecx, [ebp - 0x270]
push ecx
push 0x46c7e0
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
nop
nop
nop
push 0x46c7e8
push 0x46c7f0
call ebx
mov edi, 0x13
push 0x46c7f8
push 0x46c800
call ebx
xor ecx, ecx
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 1
je 0x4245ef
cmp eax, 4
je 0x4245ef
and edi, ecx
jmp 0x4245f1
sub edi, ecx
add ecx, 1
cmp ecx, 6
jl 0x4245d0
push 0xfa
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
mov dword [ebp - 4], 5
xor esi, esi
mov dword [ebp - 0x2b0], esi
cmp esi, 7
jge 0x424651
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov edx, esi
sub edx, ecx
cmp edx, 1
jne 0x424643
mov eax, ebx
nop
mov ecx, edx
nop
add esi, edx
jmp 0x424614
add edi, 1
mov dword [ebp - 0x274], edi
add esi, 1
jmp 0x424614
mov dword [ebp - 4], 0xfffffffe
call fcn.004246a4
push 0xfa
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
push 0x46c808
push 0x46c810
call ebx
mov edi, 0x11
nop
nop
nop
xor esi, esi
mov eax, 0xaaaaaaab
mul esi
shr edx, 1
lea ecx, [edx + edx*2]
mov edx, esi
sub edx, ecx
cmp edx, 1
jne 0x4246af
and edi, esi
jmp 0x4246cb
mov eax, 1
mov ebx, 2
mov ecx, 3
mov edx, 4
or edi, esi
mov ebx, dword [sym.imp.USER32.dll_FindWindowW]
add esi, 1
cmp esi, 2
jl 0x424685
add edi, 2
push 0x46c818
push 0x46c820
call ebx
mov dword [ebp - 4], 6
xor esi, esi
mov dword [ebp - 0x290], esi
cmp esi, 1
jge 0x424729
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea eax, [eax + eax*2]
mov ecx, esi
sub ecx, eax
cmp ecx, 1
jne 0x42471b
mov eax, ebx
nop
mov ecx, edx
nop
add esi, 1
jmp 0x4246eb
add edi, 1
mov dword [ebp - 0x274], edi
add esi, 1
jmp 0x4246eb
mov dword [ebp - 4], 0xfffffffe
call fcn.00424773
mov dword [ebp - 4], 7
xor esi, esi
mov dword [ebp - 0x2a8], esi
test esi, esi
jge 0x42478a
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax + eax*2]
mov eax, esi
sub eax, edx
cmp eax, 1
jne 0x42477e
mov eax, ebx
nop
mov ecx, edx
nop
add esi, 1
jmp 0x42473e
add dword [ebp - 0x274], 1
add esi, 1
jmp 0x42473e
mov dword [ebp - 4], 0xfffffffe
call fcn.004247c9
push 0x46c828
push 0x46c830
call ebx
xor ecx, ecx
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 2
je 0x4247d5
cmp eax, 3
je 0x4247d5
xor edi, ecx
jmp 0x4247da
mov eax, ecx
imul edi, eax
add ecx, 1
cmp ecx, 4
jl 0x4247a4
lea ecx, [ebp - 0x270]
push ecx
push 0x46c838
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
xor esi, esi
mov eax, 0xaaaaaaab
mul esi
shr edx, 1
lea edx, [edx + edx*2]
mov eax, esi
sub eax, edx
cmp eax, 1
jne 0x42480f
and edi, esi
jmp 0x424825
mov eax, 1
mov ebx, 2
mov ecx, 3
mov edx, 4
or edi, esi
add esi, 1
cmp esi, 3
jl 0x4247f6
xor ecx, ecx
nop
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 1
je 0x42484f
cmp eax, 4
je 0x42484f
and edi, ecx
jmp 0x424851
sub edi, ecx
add ecx, 1
cmp ecx, 2
jl 0x424830
push 0xfa
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
xor esi, esi
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
call ebx
mov ecx, eax
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
lea edx, [edx + edx*2]
sub ecx, edx
jne 0x4251e3
mov eax, 1
mov ebx, 2
mov ecx, 3
mov edx, 4
mov dword [ebp - 4], 8
xor esi, esi
mov dword [ebp - 0x278], esi
cmp esi, 1
jge 0x4248e6
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea eax, [eax + eax*2]
mov ecx, esi
sub ecx, eax
cmp ecx, 1
jne 0x4248d8
mov eax, ebx
nop
mov ecx, edx
nop
add esi, 1
jmp 0x4248a8
add edi, 1
mov dword [ebp - 0x274], edi
add esi, 1
jmp 0x4248a8
mov dword [ebp - 4], 0xfffffffe
call fcn.0042490d
xor esi, esi
mov eax, 0xaaaaaaab
mul esi
shr edx, 1
lea edx, [edx + edx*2]
mov eax, esi
sub eax, edx
cmp eax, 1
jne 0x424919
and edi, esi
jmp 0x42492f
mov eax, 1
mov ebx, 2
mov ecx, 3
mov edx, 4
or edi, esi
add esi, 1
cmp esi, 3
jl 0x4248f4
mov dword [ebp - 4], 9
xor esi, esi
mov dword [ebp - 0x2b8], esi
test esi, esi
jge 0x42497c
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov edx, esi
sub edx, ecx
cmp edx, 1
jne 0x42496e
mov eax, ebx
nop
mov ecx, edx
nop
add esi, edx
jmp 0x424940
add edi, 1
mov dword [ebp - 0x274], edi
add esi, 1
jmp 0x424940
mov dword [ebp - 4], 0xfffffffe
call fcn.004249af
xor ecx, ecx
lea ebx, [ebx]
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 2
je 0x4249bb
cmp eax, 3
je 0x4249bb
xor esi, ecx
jmp 0x4249c0
mov eax, ecx
imul esi, eax
add ecx, 1
cmp ecx, 2
jl 0x424990
lea ecx, [ebp - 0x270]
push ecx
push 0x46c840
mov edi, dword [sym.imp.KERNEL32.dll_FindFirstFileW]
call edi
xor ecx, ecx
mov edi, edi
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 2
je 0x4249ff
cmp eax, 3
je 0x4249ff
xor esi, ecx
jmp 0x424a04
mov eax, ecx
imul esi, eax
add ecx, 1
cmp ecx, 4
jl 0x4249e0
lea ecx, [ebp - 0x270]
push ecx
push 0x46c848
call edi
xor ebx, ebx
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call edi
mov ecx, eax
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
lea edx, [edx + edx*2]
sub ecx, edx
jne 0x4251d6
add esi, 4
xor ebx, ebx
push 0xfa
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
push 0x46c850
push 0x46c858
call dword [sym.imp.USER32.dll_FindWindowW]
xor esi, esi
call edi
mov ecx, eax
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
lea edx, [edx + edx*2]
sub ecx, edx
jne 0x4251c9
mov dword [ebp - 4], 0xa
xor esi, esi
mov dword [ebp - 0x27c], esi
test esi, esi
jge 0x424ac1
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea eax, [eax + eax*2]
mov ecx, esi
sub ecx, eax
cmp ecx, 1
jne 0x424ab3
mov eax, ebx
nop
mov ecx, edx
nop
add esi, 1
jmp 0x424a84
add ebx, 1
mov dword [ebp - 0x274], ebx
add esi, 1
jmp 0x424a84
mov dword [ebp - 4], 0xfffffffe
call fcn.00424ae9
xor esi, esi
nop
mov eax, 0xaaaaaaab
mul esi
shr edx, 1
lea edx, [edx + edx*2]
mov eax, esi
sub eax, edx
cmp eax, 1
jne 0x424af5
and edi, esi
jmp 0x424b0b
mov eax, 1
mov ebx, 2
mov ecx, 3
mov edx, 4
or edi, esi
add esi, 1
cmp esi, 4
jl 0x424ad0
mov dword [ebp - 4], 0xb
xor esi, esi
mov dword [ebp - 0x284], esi
cmp esi, 2
jge 0x424b59
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov edx, esi
sub edx, ecx
cmp edx, 1
jne 0x424b4b
mov eax, ebx
nop
mov ecx, edx
nop
add esi, edx
jmp 0x424b1c
add edi, 1
mov dword [ebp - 0x274], edi
add esi, 1
jmp 0x424b1c
mov dword [ebp - 4], 0xfffffffe
call fcn.00424bc3
xor esi, esi
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
lea ecx, [ecx]
call edi
mov ecx, eax
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
lea eax, [edx + edx*2]
sub ecx, eax
jne 0x4251bc
add ebx, 2
mov dword [ebp - 4], 0xc
xor esi, esi
mov dword [ebp - 0x28c], esi
cmp esi, 3
jge 0x424bdd
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov edx, esi
sub edx, ecx
cmp edx, 1
jne 0x424bcf
mov eax, ebx
nop
mov ecx, edx
nop
add esi, edx
jmp 0x424b94
add ebx, 1
mov dword [ebp - 0x274], ebx
add esi, 1
jmp 0x424b94
mov dword [ebp - 4], 0xfffffffe
call fcn.00424bf8
xor eax, eax
jmp 0x424bf0
test al, 1
je 0x424c04
add esi, eax
jmp 0x424c06
sub esi, eax
add eax, 1
cmp eax, 3
jl 0x424bf0
push 0x46c860
push 0x46c868
call dword [sym.imp.USER32.dll_FindWindowW]
xor ecx, ecx
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 1
je 0x424c3f
cmp eax, 4
je 0x424c3f
and esi, ecx
jmp 0x424c41
sub esi, ecx
add ecx, 1
cmp ecx, 2
jl 0x424c20
push 0xfa
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
xor ecx, ecx
lea ecx, [ecx]
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 2
je 0x424c7f
cmp eax, 3
je 0x424c7f
xor esi, ecx
jmp 0x424c84
mov eax, ecx
imul esi, eax
add ecx, 1
cmp ecx, 3
jl 0x424c60
lea ecx, [ebp - 0x270]
push ecx
push 0x46c870
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
nop
nop
nop
nop
nop
nop
mov edi, 0x55
nop
nop
nop
push 0x46c878
push 0x46c880
call dword [sym.imp.USER32.dll_FindWindowW]
xor ecx, ecx
mov edi, edi
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 1
je 0x424cdf
cmp eax, 4
je 0x424cdf
and edi, ecx
jmp 0x424ce1
sub edi, ecx
add ecx, 1
cmp ecx, 3
jl 0x424cc0
push 0xfa
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
xor esi, esi
lea ecx, [ecx]
mov eax, 0xaaaaaaab
mul esi
shr edx, 1
lea ecx, [edx + edx*2]
mov edx, esi
sub edx, ecx
cmp edx, 1
jne 0x424d19
and edi, esi
jmp 0x424d2f
mov eax, 1
mov ebx, 2
mov ecx, 3
mov edx, 4
or edi, esi
add esi, 1
cmp esi, 2
jl 0x424d00
xor esi, esi
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
nop
call ebx
mov ecx, eax
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
lea eax, [edx + edx*2]
sub ecx, eax
jne 0x4251af
add edi, 1
lea ecx, [ebp - 0x270]
push ecx
push 0x46c888
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
xor ecx, ecx
nop
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 1
je 0x424d8f
cmp eax, 4
je 0x424d8f
and edi, ecx
jmp 0x424d91
sub edi, ecx
add ecx, 1
cmp ecx, 2
jl 0x424d70
push 0xfa
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
mov dword [ebp - 4], 0xd
xor esi, esi
mov dword [ebp - 0x294], esi
cmp esi, 3
jge 0x424df1
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov edx, esi
sub edx, ecx
cmp edx, 1
jne 0x424de3
mov eax, ebx
nop
mov ecx, edx
nop
add esi, edx
jmp 0x424db4
add edi, 1
mov dword [ebp - 0x274], edi
add esi, 1
jmp 0x424db4
mov dword [ebp - 4], 0xfffffffe
call fcn.00424e58
xor eax, eax
nop
mov ecx, eax
imul esi, ecx
add eax, 1
cmp eax, 4
jl 0x424e00
test esi, esi
jle 0x424e14
lea esi, [esi + esi*4]
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax + eax*2]
mov eax, esi
sub eax, edx
jne 0x424e2e
lea esi, [eax + 0x11]
nop
nop
nop
xor ecx, ecx
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 2
je 0x424e64
cmp eax, 3
je 0x424e64
xor esi, ecx
jmp 0x424e69
mov eax, ecx
imul esi, eax
add ecx, 1
cmp ecx, 2
jl 0x424e33
lea ecx, [ebp - 0x270]
push ecx
push 0x46c890
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
xor ecx, ecx
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 2
je 0x424ea4
cmp eax, 3
je 0x424ea4
xor esi, ecx
jmp 0x424ea9
mov eax, ecx
imul esi, eax
add ecx, 1
cmp ecx, 4
jl 0x424e85
lea ecx, [ebp - 0x270]
push ecx
push 0x46c898
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
xor edi, edi
call ebx
mov ecx, eax
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
lea edx, [edx + edx*2]
sub ecx, edx
jne 0x4251a2
add esi, 3
xor edi, edi
call ebx
mov ecx, eax
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
lea eax, [edx + edx*2]
sub ecx, eax
jne 0x425195
nop
nop
nop
lea edi, [ecx + 0x11]
nop
nop
nop
mov dword [ebp - 4], 0xe
xor esi, esi
mov dword [ebp - 0x29c], esi
cmp esi, 4
jge 0x424f49
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov edx, esi
sub edx, ecx
cmp edx, 1
jne 0x424f3b
mov eax, ebx
nop
mov ecx, edx
nop
add esi, edx
jmp 0x424f0c
add edi, 1
mov dword [ebp - 0x274], edi
add esi, 1
jmp 0x424f0c
mov dword [ebp - 4], 0xfffffffe
call fcn.00424fa2
push 0xfa
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
mov dword [ebp - 4], 0xf
xor esi, esi
mov edi, 1
mov dword [ebp - 0x2a4], esi
cmp esi, edi
jge 0x424fb7
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov edx, esi
sub edx, ecx
cmp edx, edi
jne 0x424fad
mov eax, ebx
nop
mov ecx, edx
nop
add esi, edi
jmp 0x424f75
add dword [ebp - 0x274], edi
add esi, edi
jmp 0x424f75
mov dword [ebp - 4], 0xfffffffe
call fcn.00424ffe
mov dword [ebp - 4], 0x10
xor esi, esi
mov edi, 1
mov dword [ebp - 0x2ac], esi
cmp esi, edi
jge 0x425013
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea eax, [eax + eax*2]
mov ecx, esi
sub ecx, eax
cmp ecx, edi
jne 0x425009
mov eax, ebx
nop
mov ecx, edx
nop
add esi, edi
jmp 0x424fd1
add dword [ebp - 0x274], edi
add esi, edi
jmp 0x424fd1
mov dword [ebp - 4], 0xfffffffe
call fcn.00425050
push 0x46c8a0
push 0x46c8a8
call dword [sym.imp.USER32.dll_FindWindowW]
xor ecx, ecx
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 2
je 0x42505c
cmp eax, 3
je 0x42505c
xor edi, ecx
jmp 0x425061
mov eax, ecx
imul edi, eax
add ecx, 1
cmp ecx, 4
jl 0x425031
lea ecx, [ebp - 0x270]
push ecx
push 0x46c8b0
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
xor esi, esi
lea ecx, [ecx]
mov eax, 0xaaaaaaab
mul esi
shr edx, 1
lea edx, [edx + edx*2]
mov eax, esi
sub eax, edx
cmp eax, 1
jne 0x425099
and edi, esi
jmp 0x4250af
mov eax, 1
mov ebx, 2
mov ecx, 3
mov edx, 4
or edi, esi
add esi, 1
cmp esi, 2
jl 0x425080
push 0x46c8b8
push 0x46c8c0
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 4], 0x11
xor esi, esi
mov dword [ebp - 0x2b4], esi
cmp esi, 3
jge 0x42510d
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov edx, esi
sub edx, ecx
cmp edx, 1
jne 0x4250ff
mov eax, ebx
nop
mov ecx, edx
nop
add esi, edx
jmp 0x4250d0
add edi, 1
mov dword [ebp - 0x274], edi
add esi, 1
jmp 0x4250d0
mov dword [ebp - 4], 0xfffffffe
call fcn.0042513f
xor ecx, ecx
jmp 0x425120
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 1
je 0x42514b
cmp eax, 4
je 0x42514b
and esi, ecx
jmp 0x42514d
sub esi, ecx
add ecx, 1
cmp ecx, 3
jl 0x425120
push 0xfa
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
push 0x46c8c8
push 0x46c8d0
call dword [sym.imp.USER32.dll_FindWindowW]
mov eax, esi
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x1c]
xor ecx, ebp
call fcn.0040470b
mov esp, ebp
pop ebp
ret
mov ecx, edi
imul esi, ecx
add edi, 1
jmp 0x424ee2
mov edx, edi
imul esi, edx
add edi, 1
jmp 0x424ec5
mov eax, esi
imul edi, eax
add esi, 1
jmp 0x424d40
mov ecx, esi
imul ebx, ecx
add esi, 1
jmp 0x424b70
mov edx, esi
imul ebx, edx
add esi, 1
jmp 0x424a63
mov eax, ebx
imul esi, eax
add ebx, 1
jmp 0x424a22
mov ecx, esi
imul edi, ecx
add esi, 1
jmp 0x424873
mov edx, edi
imul esi, edx
add edi, 1
jmp 0x424300
mov eax, edi
imul esi, eax
add edi, 1
jmp 0x424210
mov ecx, esi
imul edi, ecx
add esi, 1
jmp 0x4240b5
mov edx, esi
imul edi, edx
add esi, 1
jmp 0x423f80
mov eax, esi
imul edi, eax
add esi, 1
jmp 0x423e43