Function at 0x4218e0
Capabilities:
Check for time delay via gettickcount
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x46fda8
push 0x408860
mov eax, dword fs:[0]
push eax
sub esp, 0x2a8
mov eax, dword [0x474534]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x1c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
xor edi, edi
xor esi, esi
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
call ebx
mov ecx, eax
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
lea eax, [edx + edx*2]
sub ecx, eax
jne 0x422aa3
add edi, 6
jmp 0x421940
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 2
je 0x42195f
cmp eax, 3
je 0x42195f
xor edi, ecx
jmp 0x421964
mov eax, ecx
imul edi, eax
add ecx, 1
cmp ecx, 0x34
jl 0x421940
lea ecx, [ebp - 0x270]
push ecx
push 0x46c9b8
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
xor esi, esi
call ebx
mov ecx, eax
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
lea edx, [edx + edx*2]
sub ecx, edx
jne 0x422a96
add edi, 0x16
xor esi, esi
mov dword [ebp - 4], esi
mov dword [ebp - 0x2b0], esi
cmp esi, 2
jge 0x4219de
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea eax, [eax + eax*2]
mov ecx, esi
sub ecx, eax
cmp ecx, 1
jne 0x4219d0
mov eax, ebx
nop
mov ecx, edx
nop
add esi, 1
jmp 0x4219a0
add edi, 1
mov dword [ebp - 0x274], edi
add esi, 1
jmp 0x4219a0
mov dword [ebp - 4], 0xfffffffe
call fcn.00421a22
mov edi, 1
mov dword [ebp - 4], edi
xor esi, esi
mov dword [ebp - 0x2b4], esi
cmp esi, 2
jge 0x421a37
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax + eax*2]
mov eax, esi
sub eax, edx
cmp eax, edi
jne 0x421a2d
mov eax, ebx
nop
mov ecx, edx
nop
add esi, edi
jmp 0x4219f4
add dword [ebp - 0x274], edi
add esi, edi
jmp 0x4219f4
mov dword [ebp - 4], 0xfffffffe
call fcn.00421a64
xor ecx, ecx
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 1
je 0x421a70
cmp eax, 4
je 0x421a70
and esi, ecx
jmp 0x421a72
sub esi, ecx
add ecx, 1
cmp ecx, 0xe
jl 0x421a45
push 0xfa
lea eax, [ebp - 0x218]
push eax
mov edi, dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
call edi
xor ecx, ecx
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 1
je 0x421aaf
cmp eax, 4
je 0x421aaf
and esi, ecx
jmp 0x421ab1
sub esi, ecx
add ecx, 1
cmp ecx, 8
jl 0x421a90
push 0xfa
lea eax, [ebp - 0x218]
push eax
call edi
mov ebx, 0x11
nop
nop
nop
mov dword [ebp - 4], 2
xor esi, esi
mov dword [ebp - 0x280], esi
cmp esi, 2
jge 0x421b15
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov edx, esi
sub edx, ecx
cmp edx, 1
jne 0x421b07
mov eax, ebx
nop
mov ecx, edx
nop
add esi, edx
jmp 0x421ad8
add ebx, 1
mov dword [ebp - 0x274], ebx
add esi, 1
jmp 0x421ad8
mov dword [ebp - 4], 0xfffffffe
call fcn.00421b42
xor ecx, ecx
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 1
je 0x421b4e
cmp eax, 4
je 0x421b4e
and edi, ecx
jmp 0x421b50
sub edi, ecx
add ecx, 1
cmp ecx, 0xb
jl 0x421b23
push 0xfa
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
xor esi, esi
lea esp, [esp]
mov eax, 0xaaaaaaab
mul esi
shr edx, 1
lea ecx, [edx + edx*2]
mov edx, esi
sub edx, ecx
cmp edx, 1
jne 0x421b89
and edi, esi
jmp 0x421b9f
mov eax, 1
mov ebx, 2
mov ecx, 3
mov edx, 4
or edi, esi
add esi, 1
cmp esi, 5
jl 0x421b70
xor ecx, ecx
lea esp, [esp]
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 1
je 0x421bcf
cmp eax, 4
je 0x421bcf
and edi, ecx
jmp 0x421bd1
sub edi, ecx
add ecx, 1
cmp ecx, 0xa
jl 0x421bb0
push 0xfa
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
mov dword [ebp - 4], 3
xor esi, esi
mov dword [ebp - 0x2a8], esi
cmp esi, 1
jge 0x421c31
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov edx, esi
sub edx, ecx
cmp edx, 1
jne 0x421c23
mov eax, ebx
nop
mov ecx, edx
nop
add esi, edx
jmp 0x421bf4
add edi, 1
mov dword [ebp - 0x274], edi
add esi, 1
jmp 0x421bf4
mov dword [ebp - 4], 0xfffffffe
call fcn.00421c77
mov dword [ebp - 4], 4
xor esi, esi
lea edi, [esi + 1]
mov dword [ebp - 0x288], esi
cmp esi, 3
jge 0x421c8c
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea eax, [eax + eax*2]
mov ecx, esi
sub ecx, eax
cmp ecx, edi
jne 0x421c82
mov eax, ebx
nop
mov ecx, edx
nop
add esi, edi
jmp 0x421c49
add dword [ebp - 0x274], edi
add esi, edi
jmp 0x421c49
mov dword [ebp - 4], 0xfffffffe
call fcn.00421cbf
xor ecx, ecx
lea ebx, [ebx]
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 1
je 0x421ccb
cmp eax, 4
je 0x421ccb
and edi, ecx
jmp 0x421ccd
sub edi, ecx
add ecx, 1
cmp ecx, 3
jl 0x421ca0
push 0xfa
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
xor esi, esi
lea esp, [esp]
mov eax, 0xaaaaaaab
mul esi
shr edx, 1
lea ecx, [edx + edx*2]
mov edx, esi
sub edx, ecx
cmp edx, 1
jne 0x421d09
and edi, esi
jmp 0x421d1f
mov eax, 1
mov ebx, 2
mov ecx, 3
mov edx, 4
or edi, esi
add esi, 1
cmp esi, 3
jl 0x421cf0
mov dword [ebp - 4], 5
xor esi, esi
mov dword [ebp - 0x2a0], esi
cmp esi, 6
jge 0x421d6e
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea eax, [eax + eax*2]
mov ecx, esi
sub ecx, eax
cmp ecx, 1
jne 0x421d60
mov eax, ebx
nop
mov ecx, edx
nop
add esi, 1
jmp 0x421d30
add edi, 1
mov dword [ebp - 0x274], edi
add esi, 1
jmp 0x421d30
mov dword [ebp - 4], 0xfffffffe
call fcn.00421d99
xor esi, esi
lea esp, [esp]
mov eax, 0xaaaaaaab
mul esi
shr edx, 1
lea edx, [edx + edx*2]
mov eax, esi
sub eax, edx
cmp eax, 1
jne 0x421da5
and edi, esi
jmp 0x421dbb
mov eax, 1
mov ebx, 2
mov ecx, 3
mov edx, 4
or edi, esi
add esi, 1
cmp esi, 4
jl 0x421d80
xor ecx, ecx
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 1
je 0x421de4
cmp eax, 4
je 0x421de4
and edi, ecx
jmp 0x421de6
sub edi, ecx
add ecx, 1
cmp ecx, 4
jl 0x421dc5
push 0xfa
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
mov dword [ebp - 4], 6
xor esi, esi
mov dword [ebp - 0x290], esi
cmp esi, 2
jge 0x421e46
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov edx, esi
sub edx, ecx
cmp edx, 1
jne 0x421e38
mov eax, ebx
nop
mov ecx, edx
nop
add esi, edx
jmp 0x421e09
add edi, 1
mov dword [ebp - 0x274], edi
add esi, 1
jmp 0x421e09
mov dword [ebp - 4], 0xfffffffe
call fcn.00421e6d
xor esi, esi
mov eax, 0xaaaaaaab
mul esi
shr edx, 1
lea eax, [edx + edx*2]
mov ecx, esi
sub ecx, eax
cmp ecx, 1
jne 0x421e79
and edi, esi
jmp 0x421e8f
mov eax, 1
mov ebx, 2
mov ecx, 3
mov edx, 4
or edi, esi
add esi, 1
cmp esi, 5
jl 0x421e54
mov esi, 0x11
nop
nop
nop
xor ecx, ecx
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 1
je 0x421ec0
cmp eax, 4
je 0x421ec0
and esi, ecx
jmp 0x421ec2
sub esi, ecx
add ecx, 1
cmp ecx, 2
jl 0x421ea1
push 0xfa
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
xor ecx, ecx
mov edi, edi
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 2
je 0x421eff
cmp eax, 3
je 0x421eff
xor esi, ecx
jmp 0x421f04
mov eax, ecx
imul esi, eax
add ecx, 1
cmp ecx, 7
jl 0x421ee0
lea ecx, [ebp - 0x270]
push ecx
push 0x46c9c0
mov edi, dword [sym.imp.KERNEL32.dll_FindFirstFileW]
call edi
push 0x46c9c8
push 0x46c9d0
call dword [sym.imp.USER32.dll_FindWindowW]
xor ecx, ecx
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 2
je 0x421f51
cmp eax, 3
je 0x421f51
xor esi, ecx
jmp 0x421f56
mov eax, ecx
imul esi, eax
add ecx, 1
cmp ecx, 5
jl 0x421f32
lea ecx, [ebp - 0x270]
push ecx
push 0x46c9d8
call edi
xor ecx, ecx
mov edi, edi
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 2
je 0x421f8f
cmp eax, 3
je 0x421f8f
xor esi, ecx
jmp 0x421f94
mov eax, ecx
imul esi, eax
add ecx, 1
cmp ecx, 7
jl 0x421f70
lea ecx, [ebp - 0x270]
push ecx
push 0x46c9e0
call edi
mov edi, 0x11
nop
nop
nop
xor esi, esi
mov eax, 0xaaaaaaab
mul esi
shr edx, 1
lea edx, [edx + edx*2]
mov eax, esi
sub eax, edx
cmp eax, 1
jne 0x421fcd
and edi, esi
jmp 0x421fe3
mov eax, 1
mov ebx, 2
mov ecx, 3
mov edx, 4
or edi, esi
add esi, 1
cmp esi, 2
jl 0x421fb4
mov dword [ebp - 4], 7
xor esi, esi
mov dword [ebp - 0x278], esi
cmp esi, 2
jge 0x422031
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov edx, esi
sub edx, ecx
cmp edx, 1
jne 0x422023
mov eax, ebx
nop
mov ecx, edx
nop
add esi, edx
jmp 0x421ff4
add edi, 1
mov dword [ebp - 0x274], edi
add esi, 1
jmp 0x421ff4
mov dword [ebp - 4], 0xfffffffe
call fcn.0042205f
xor ecx, ecx
nop
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 1
je 0x42206b
cmp eax, 4
je 0x42206b
and edi, ecx
jmp 0x42206d
sub edi, ecx
add ecx, 1
cmp ecx, 8
jl 0x422040
push 0xfa
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
xor ecx, ecx
lea esp, [esp]
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 2
je 0x4220af
cmp eax, 3
je 0x4220af
xor edi, ecx
jmp 0x4220b4
mov eax, ecx
imul edi, eax
add ecx, 1
cmp ecx, 2
jl 0x422090
lea ecx, [ebp - 0x270]
push ecx
push 0x46c9e8
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 4], 8
xor esi, esi
mov dword [ebp - 0x298], esi
cmp esi, 6
jge 0x422115
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax + eax*2]
mov eax, esi
sub eax, edx
cmp eax, 1
jne 0x422107
mov eax, ebx
nop
mov ecx, edx
nop
add esi, 1
jmp 0x4220d7
add edi, 1
mov dword [ebp - 0x274], edi
add esi, 1
jmp 0x4220d7
mov dword [ebp - 4], 0xfffffffe
call fcn.00422171
nop
nop
nop
mov edi, 0xaaaaaaa9
push 0x46c9f0
push 0x46c9f8
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 4], 9
xor esi, esi
mov dword [ebp - 0x27c], esi
cmp esi, 3
jge 0x42218a
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov edx, esi
sub edx, ecx
cmp edx, 1
jne 0x42217c
mov eax, ebx
nop
mov ecx, edx
nop
add esi, edx
jmp 0x422142
add edi, 1
mov dword [ebp - 0x274], edi
add esi, 1
jmp 0x422142
mov dword [ebp - 4], 0xfffffffe
call fcn.004221bf
xor ecx, ecx
jmp 0x4221a0
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 2
je 0x4221cb
cmp eax, 3
je 0x4221cb
xor edi, ecx
jmp 0x4221d0
mov eax, ecx
imul edi, eax
add ecx, 1
cmp ecx, 3
jl 0x4221a0
lea ecx, [ebp - 0x270]
push ecx
push 0x46ca00
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 4], 0xa
xor esi, esi
mov dword [ebp - 0x284], esi
cmp esi, 2
jge 0x422231
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax + eax*2]
mov eax, esi
sub eax, edx
cmp eax, 1
jne 0x422223
mov eax, ebx
nop
mov ecx, edx
nop
add esi, 1
jmp 0x4221f3
add edi, 1
mov dword [ebp - 0x274], edi
add esi, 1
jmp 0x4221f3
mov dword [ebp - 4], 0xfffffffe
call fcn.00422276
mov dword [ebp - 4], 0xb
xor esi, esi
lea edi, [esi + 1]
mov dword [ebp - 0x28c], esi
test esi, esi
jge 0x42228b
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov edx, esi
sub edx, ecx
cmp edx, edi
jne 0x422281
mov eax, ebx
nop
mov ecx, edx
nop
add esi, edi
jmp 0x422249
add dword [ebp - 0x274], edi
add esi, edi
jmp 0x422249
mov dword [ebp - 4], 0xfffffffe
call fcn.004222bf
xor ecx, ecx
lea esp, [esp]
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 1
je 0x4222cb
cmp eax, 4
je 0x4222cb
and edi, ecx
jmp 0x4222cd
sub edi, ecx
add ecx, 1
cmp ecx, 3
jl 0x4222a0
push 0xfa
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
xor esi, esi
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
nop
call ebx
mov ecx, eax
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
lea edx, [edx + edx*2]
sub ecx, edx
jne 0x422a89
add edi, 1
xor esi, esi
lea ecx, [ecx]
mov eax, 0xaaaaaaab
mul esi
shr edx, 1
lea eax, [edx + edx*2]
mov ecx, esi
sub ecx, eax
cmp ecx, 1
jne 0x422329
and edi, esi
jmp 0x422345
mov eax, 1
mov ebx, 2
mov ecx, 3
mov edx, 4
or edi, esi
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
add esi, 1
cmp esi, 4
jl 0x422310
xor ecx, ecx
nop
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 1
je 0x42236f
cmp eax, 4
je 0x42236f
and edi, ecx
jmp 0x422371
sub edi, ecx
add ecx, 1
cmp ecx, 4
jl 0x422350
push 0xfa
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
test edi, edi
jle 0x422392
lea edi, [edi + edi*4]
mov eax, 0x55555556
imul edi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov edx, edi
sub edx, ecx
jne 0x4223ae
mov edi, 0x11
nop
nop
nop
mov esi, edi
lea eax, [ebp - 0x270]
push eax
push 0x46ca08
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
xor ecx, ecx
jmp 0x4223d0
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 1
je 0x4223ef
cmp eax, 4
je 0x4223ef
and esi, ecx
jmp 0x4223f1
sub esi, ecx
add ecx, 1
cmp ecx, 3
jl 0x4223d0
push 0xfa
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
xor edi, edi
lea ecx, [ecx]
call ebx
mov ecx, eax
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
lea edx, [edx + edx*2]
sub ecx, edx
jne 0x422a7c
add esi, 3
xor edi, edi
lea ecx, [ecx]
call ebx
mov ecx, eax
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
lea eax, [edx + edx*2]
sub ecx, eax
jne 0x422a6f
add esi, 4
xor edi, edi
push 0xfa
lea ecx, [ebp - 0x218]
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
mov dword [ebp - 4], 0xc
xor esi, esi
mov dword [ebp - 0x294], esi
cmp esi, 2
jge 0x4224a6
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax + eax*2]
mov eax, esi
sub eax, edx
cmp eax, 1
jne 0x422498
mov eax, ebx
nop
mov ecx, edx
nop
add esi, 1
jmp 0x422468
add edi, 1
mov dword [ebp - 0x274], edi
add esi, 1
jmp 0x422468
mov dword [ebp - 4], 0xfffffffe
call fcn.004224cd
xor esi, esi
mov eax, 0xaaaaaaab
mul esi
shr edx, 1
lea ecx, [edx + edx*2]
mov edx, esi
sub edx, ecx
cmp edx, 1
jne 0x4224d9
and edi, esi
jmp 0x4224ef
mov eax, 1
mov ebx, 2
mov ecx, 3
mov edx, 4
or edi, esi
add esi, 1
cmp esi, 3
jl 0x4224b4
add edi, 2
push 0x46ca10
push 0x46ca18
call dword [sym.imp.USER32.dll_FindWindowW]
xor ecx, ecx
lea esp, [esp]
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 2
je 0x42252f
cmp eax, 3
je 0x42252f
xor edi, ecx
jmp 0x422534
mov eax, ecx
imul edi, eax
add ecx, 1
cmp ecx, 4
jl 0x422510
lea ecx, [ebp - 0x270]
push ecx
push 0x46ca20
mov ebx, dword [sym.imp.KERNEL32.dll_FindFirstFileW]
call ebx
xor ecx, ecx
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 2
je 0x422571
cmp eax, 3
je 0x422571
xor edi, ecx
jmp 0x422576
mov eax, ecx
imul edi, eax
add ecx, 1
cmp ecx, 2
jl 0x422552
lea ecx, [ebp - 0x270]
push ecx
push 0x46ca28
call ebx
xor ecx, ecx
mov edi, edi
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 2
je 0x4225af
cmp eax, 3
je 0x4225af
xor edi, ecx
jmp 0x4225b4
mov eax, ecx
imul edi, eax
add ecx, 1
cmp ecx, 4
jl 0x422590
lea ecx, [ebp - 0x270]
push ecx
push 0x46ca30
call ebx
xor ecx, ecx
lea esp, [esp]
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 2
je 0x4225ef
cmp eax, 3
je 0x4225ef
xor edi, ecx
jmp 0x4225f4
mov eax, ecx
imul edi, eax
add ecx, 1
cmp ecx, 2
jl 0x4225d0
lea ecx, [ebp - 0x270]
push ecx
push 0x46ca38
call ebx
mov esi, 0x11
nop
nop
nop
xor ecx, ecx
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 2
je 0x422633
cmp eax, 3
je 0x422633
xor esi, ecx
jmp 0x422638
mov eax, ecx
imul esi, eax
add ecx, 1
cmp ecx, 4
jl 0x422614
lea ecx, [ebp - 0x270]
push ecx
push 0x46ca40
call ebx
xor ecx, ecx
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 2
je 0x42266f
cmp eax, 3
je 0x42266f
xor esi, ecx
jmp 0x422674
mov eax, ecx
imul esi, eax
add ecx, 1
cmp ecx, 3
jl 0x422650
lea ecx, [ebp - 0x270]
push ecx
push 0x46ca48
call ebx
mov edi, 0x11
nop
nop
nop
xor ecx, ecx
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 2
je 0x4226b3
cmp eax, 3
je 0x4226b3
xor edi, ecx
jmp 0x4226b8
mov eax, ecx
imul edi, eax
add ecx, 1
cmp ecx, 3
jl 0x422694
lea ecx, [ebp - 0x270]
push ecx
push 0x46ca50
call ebx
mov dword [ebp - 4], 0xd
xor esi, esi
mov dword [ebp - 0x29c], esi
cmp esi, 3
jge 0x422715
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax + eax*2]
mov eax, esi
sub eax, edx
cmp eax, 1
jne 0x422707
mov eax, ebx
nop
mov ecx, edx
nop
add esi, 1
jmp 0x4226d7
add edi, 1
mov dword [ebp - 0x274], edi
add esi, 1
jmp 0x4226d7
mov dword [ebp - 4], 0xfffffffe
call fcn.00422742
xor esi, esi
mov eax, 0xaaaaaaab
mul esi
shr edx, 1
lea ecx, [edx + edx*2]
mov edx, esi
sub edx, ecx
cmp edx, 1
jne 0x42274e
and edi, esi
jmp 0x42276a
mov eax, 1
mov ebx, 2
mov ecx, 3
mov edx, 4
or edi, esi
mov ebx, dword [sym.imp.KERNEL32.dll_FindFirstFileW]
add esi, 1
cmp esi, 4
jl 0x422723
push 0x46ca58
push 0x46ca60
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 4], 0xe
xor esi, esi
mov dword [ebp - 0x2a4], esi
cmp esi, 1
jge 0x4227c9
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea eax, [eax + eax*2]
mov ecx, esi
sub ecx, eax
cmp ecx, 1
jne 0x4227bb
mov eax, ebx
nop
mov ecx, edx
nop
add esi, 1
jmp 0x42278b
add edi, 1
mov dword [ebp - 0x274], edi
add esi, 1
jmp 0x42278b
mov dword [ebp - 4], 0xfffffffe
call fcn.00422814
mov dword [ebp - 4], 0xf
xor esi, esi
mov dword [ebp - 0x2ac], esi
cmp esi, 1
jge 0x42282b
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax + eax*2]
mov eax, esi
sub eax, edx
cmp eax, 1
jne 0x42281f
mov eax, ebx
nop
mov ecx, edx
nop
add esi, 1
jmp 0x4227de
add dword [ebp - 0x274], 1
add esi, 1
jmp 0x4227de
mov dword [ebp - 4], 0xfffffffe
call fcn.00422875
nop
nop
nop
lea ecx, [ebp - 0x270]
push ecx
push 0x46ca68
call ebx
xor ecx, ecx
lea ebx, [ebx]
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 1
je 0x422881
cmp eax, 4
je 0x422881
and esi, ecx
jmp 0x422883
sub esi, ecx
add ecx, 1
cmp ecx, 2
jl 0x422850
push 0xfa
lea eax, [ebp - 0x218]
push eax
mov ebx, dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
call ebx
nop
nop
nop
push 0xfa
lea ecx, [ebp - 0x218]
push ecx
call ebx
nop
nop
nop
nop
nop
nop
mov esi, 0x11
nop
nop
nop
xor edi, edi
mov eax, 0xaaaaaaab
mul edi
shr edx, 1
lea edx, [edx + edx*2]
mov eax, edi
sub eax, edx
cmp eax, 1
jne 0x4228d9
and esi, edi
jmp 0x4228f5
mov eax, 1
mov ebx, 2
mov ecx, 3
mov edx, 4
or esi, edi
mov ebx, dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
add edi, 1
cmp edi, 2
jl 0x4228c0
xor ecx, ecx
nop
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 2
je 0x42291f
cmp eax, 3
je 0x42291f
xor esi, ecx
jmp 0x422924
mov eax, ecx
imul esi, eax
add ecx, 1
cmp ecx, 3
jl 0x422900
lea ecx, [ebp - 0x270]
push ecx
push 0x46ca70
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
xor ecx, ecx
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 1
je 0x42295f
cmp eax, 4
je 0x42295f
and esi, ecx
jmp 0x422961
sub esi, ecx
add ecx, 1
cmp ecx, 2
jl 0x422940
push 0xfa
lea eax, [ebp - 0x218]
push eax
call ebx
xor ecx, ecx
lea esp, [esp]
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 1
je 0x42299f
cmp eax, 4
je 0x42299f
and esi, ecx
jmp 0x4229a1
sub esi, ecx
add ecx, 1
cmp ecx, 3
jl 0x422980
push 0xfa
lea eax, [ebp - 0x218]
push eax
call ebx
xor edi, edi
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
call ebx
mov ecx, eax
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
lea edx, [edx + edx*2]
sub ecx, edx
je 0x4229ef
mov eax, edi
imul esi, eax
add edi, 1
call ebx
mov ecx, eax
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
lea edx, [edx + edx*2]
sub ecx, edx
jne 0x4229d3
add esi, 3
mov eax, 1
mov ebx, 2
mov ecx, 3
mov edx, 4
push 0x46ca78
push 0x46ca80
call dword [sym.imp.USER32.dll_FindWindowW]
xor edi, edi
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
call ebx
mov ecx, eax
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
lea eax, [edx + edx*2]
sub ecx, eax
je 0x422a4e
mov ecx, edi
imul esi, ecx
add edi, 1
call ebx
mov ecx, eax
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
lea edx, [edx + edx*2]
sub ecx, edx
jne 0x422a32
add esi, 4
mov eax, esi
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x1c]
xor ecx, ebp
call fcn.0040470b
mov esp, ebp
pop ebp
ret
mov eax, edi
imul esi, eax
add edi, 1
jmp 0x422430
mov ecx, edi
imul esi, ecx
add edi, 1
jmp 0x422410
mov edx, esi
imul edi, edx
add esi, 1
jmp 0x4222f0
mov eax, esi
imul edi, eax
add esi, 1
jmp 0x421980
mov ecx, esi
imul edi, ecx
add esi, 1
jmp 0x421920