Function at 0x426cb9
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
lea ebp, [esp - 0x68]
sub esp, 0x10c
mov eax, dword [ebp + 0x78]
push ebx
push esi
push edi
push 5
mov dword [ebp + 0x4c], eax
xor ebx, ebx
lea eax, [ebp + 0x78]
push ebx
push eax
call fcn.00414db6
add esp, 0xc
lea ecx, [ebp + 0x78]
mov dword [ebp + 0x78], eax
call fcn.0040b430
mov dword [ebp + 0x64], ebx
mov byte [0x4a5f9d], 1
call fcn.0040df18
mov dword [ebp + 0x28], eax
movzx ax, al
xor ecx, ecx
mov ch, al
mov dword [ebp + 0x5c], ebx
or ecx, eax
mov dword [ebp + 0x2c], ecx
lea ecx, [ebp + 0x44]
call fcn.00432cb7
push str.PeExe
push 0xffffffffffffffff
mov esi, 0x4a5f08
push esi
call fcn.00434ea0
add esp, 0xc
lea ecx, [ebp + 0x38]
call fcn.00432cb7
push ebx
lea eax, [ebp + 0x38]
push eax
push str.SCRIPTINIT
push 0x64
push dword [0x4a5e00]
mov dword [ebp + 0x3c], ebx
mov dword [ebp + 0x40], ebx
call fcn.00410741
lea eax, [ebp + 0x38]
push 1
push eax
call fcn.00471542
mov edx, dword [ebp + 0x38]
add esp, 0x1c
lea ecx, [ebp + 0x58]
mov dword [ebp + 0x58], edx
call fcn.0040b430
cmp dword [ebp + 0x3c], 4
mov eax, dword [ebp + 0x58]
jg 0x426d78
mov word [edx], bx
mov word [eax], bx
cmp word [eax], bx
mov edi, 0x4a5f08
je 0x426e34
push 0x40
push 0x492ad0
mov ecx, edi
call fcn.004149f6
mov eax, dword [ebp + 0x38]
push dword [ebp + 0x4c]
mov dword [ebp + 0x58], eax
mov al, byte [0x4a4280]
lea ecx, [ebp + 0x50]
mov dword [ebp + 0x38], ebx
mov byte [ebp + 0x63], al
mov byte [0x4a4280], 1
call fcn.0043ccfc
push 0x48e984
push dword [ebp + 0x50]
mov ecx, edi
push dword [ebp + 0x58]
call fcn.0046ba82
push 0xffffffffffffffff
mov dword [ebp + 0x64], eax
mov al, byte [ebp + 0x63]
push ebx
push str.__Autoapp
mov ecx, edi
mov byte [0x4a4280], al
call fcn.0040c526
cmp eax, ebx
je 0x426e08
add eax, 4
cmp eax, ebx
je 0x426e08
mov eax, dword [eax]
xor ecx, ecx
mov cx, word [eax]
cmp cx, bx
je 0x426dff
inc eax
mov dword [ebp + 0x5c], ecx
inc eax
push eax
lea ecx, [ebp + 0x44]
call fcn.0043cdc0
push 0xffffffffffffffff
push ebx
push str.__bInitWin
mov ecx, edi
call fcn.0040c526
cmp eax, ebx
jne 0x426e1f
xor eax, eax
jmp 0x426e22
add eax, 4
cmp eax, ebx
setne al
lea ecx, [ebp + 0x50]
mov byte [0x4a5ebd], al
call fcn.0042dd2d
push dword [ebp + 0x38]
call fcn.0042dcff
pop ecx
lea ecx, [ebp + 0x38]
call fcn.0042dd2d
push str.PeExe
push 1
push esi
call fcn.00434ea0
add esp, 0xc
lea ecx, [ebp + 0x1c]
call fcn.00432cb7
movzx eax, word [ebp + 0x2c]
shl eax, 0x10
cmp word [ebp + 0x5c], 0x2a
mov dword [ebp + 0x20], ebx
mov dword [ebp + 0x24], ebx
mov dword [ebp + 0x50], eax
mov dword [ebp + 0x58], ebx
je 0x426ecb
cmp word [ebp + 0x5c], 0x24
je 0x426ecb
mov eax, dword [ebp + 0x44]
cmp word [eax], bx
jne 0x426ecb
lea eax, [ebp + 0x50]
push eax
lea eax, [ebp + 0x1c]
push eax
push str.SCRIPT
push 0x65
push dword [0x4a5e00]
call fcn.00410741
mov eax, dword [ebp + 0x50]
or eax, 1
push eax
lea eax, [ebp + 0x1c]
push eax
call fcn.00471542
mov eax, dword [ebp + 0x1c]
add esp, 0x1c
cmp dword [ebp + 0x20], 4
mov dword [ebp + 0x58], eax
jg 0x426ecb
mov dword [ebp + 0x28], ebx
mov dword [ebp + 0x2c], ebx
mov dword [ebp + 0x50], ebx
mov dword [ebp + 0x58], ebx
mov eax, dword [ebp + 0x4c]
cmp eax, ebx
mov dword [ebp + 0x18], eax
je 0x426ef3
push 0x11
lea eax, [ebp + 0x18]
push eax
push str.PECMDpecmd_cmd
call fcn.0042ddee
add esp, 0xc
test eax, eax
mov byte [0x4a5d54], 1
jne 0x426ef9
mov byte [0x4a5d54], bl
mov esi, dword [ebp + 0x78]
push 4
push esi
push str.MAIN
call fcn.0042ecb0
add esp, 0xc
test al, al
je 0x426f16
mov byte [0x4a5b86], bl
mov al, byte [0x4a5d54]
cmp al, bl
mov byte [ebp + 0x7b], al
jne 0x426fea
cmp word [ebp + 0x5c], 0x2d
jne 0x426f31
or byte [ebp + 0x7b], 2
cmp word [ebp + 0x5c], 0x2a
jne 0x426f5d
push 0x4a5f34
mov byte [0x4a4280], 1
call fcn.0046eb94
mov eax, dword [ebp + 0x44]
pop ecx
add eax, 8
push eax
mov ecx, edi
call fcn.00426822
jmp 0x426fe2
cmp word [ebp + 0x5c], 0x24
jne 0x426f7a
push ebx
push ebx
push ebx
push dword [ebp + 0x44]
mov ecx, edi
mov byte [0x4a4280], 1
call fcn.0042442a
jmp 0x426fe2
mov eax, dword [ebp + 0x44]
cmp word [eax], bx
je 0x426fb0
cmp dword [ebp + 0x58], ebx
jne 0x426fb0
push 0x48f120
lea ecx, [ebp + 0x44]
mov byte [0x4a4280], 1
call fcn.00432d25
push esi
lea ecx, [ebp + 0x44]
call fcn.00432d25
push dword [ebp + 0x44]
mov ecx, edi
call fcn.0041fd16
jmp 0x426fe2
cmp word [esi], bx
jne 0x426fea
cmp dword [ebp + 0x58], ebx
jne 0x426fea
push 5
push 0x12e
push dword [0x4a5e00]
call dword [sym.imp.KERNEL32.dll_FindResourceW]
test eax, eax
je 0x42747c
push ebx
push 0x48e984
mov ecx, edi
call fcn.0041f2f6
mov dword [ebp + 0x64], eax
jmp 0x42747c
lea ecx, [ebp + 0x5c]
call fcn.00432cb7
cmp dword [ebp + 0x4c], ebx
jne 0x427007
lea ecx, [ebp + 0x5c]
call fcn.0042dd2d
or esi, 0xffffffff
jmp 0x4274ba
lea eax, [ebp + 0x5c]
push eax
push dword [ebp + 0x4c]
call fcn.00417684
mov eax, dword [ebp + 0x5c]
mov dword [ebp + 0x64], eax
push 1
lea eax, [ebp + 0x4c]
push eax
lea eax, [ebp + 0x64]
push eax
mov dword [ebp + 0x4c], ebx
call fcn.00414db6
add esp, 0x14
lea ecx, [ebp + 0x64]
mov dword [ebp + 0x64], eax
call fcn.0040b430
mov esi, dword [ebp + 0x64]
mov eax, esi
sub eax, dword [ebp + 0x5c]
sar eax, 1
cmp dword [ebp + 0x58], ebx
mov dword [ebp + 0x4c], eax
je 0x427054
cmp byte [ebp + 0x7b], bl
mov byte [ebp + 0x57], 1
je 0x427057
mov byte [ebp + 0x57], bl
cmp byte [ebp + 0x57], bl
mov byte [ebp + 0x62], 0x10
mov dword [ebp + 0x38], ebx
mov dword [ebp + 0x3c], ebx
mov dword [ebp + 0x40], ebx
mov byte [ebp + 0x63], 1
je 0x42707f
lea esi, [ebp + 0x1c]
mov byte [0x4a4280], 1
mov byte [ebp + 0x63], bl
jmp 0x427269
push dword [ebp + 0x1c]
call fcn.0042dcff
pop ecx
lea ecx, [ebp + 0x1c]
call fcn.0042dd2d
cmp word [esi], 0x2f
mov dword [ebp + 0x28], ebx
mov dword [ebp + 0x2c], ebx
mov dword [ebp + 0x50], ebx
mov byte [ebp + 0x7b], bl
jne 0x4270c3
mov ax, word [esi + 2]
or ax, 0x20
cmp ax, 0x6c
jne 0x4270c3
mov ax, word [esi + 4]
call fcn.00402b57
test al, al
je 0x4270c3
mov al, byte [esi + 2]
mov byte [ebp + 0x7b], al
cmp byte [ebp + 0x7b], bl
mov dword [ebp + 0x58], ebx
je 0x4270ec
mov word [esi + 2], 0x20
mov word [esi], 0x20
add esi, 4
lea ecx, [ebp + 0x64]
mov dword [ebp + 0x64], esi
call fcn.0040b430
mov esi, dword [ebp + 0x64]
jmp 0x427190
cmp word [esi], 0x22
push ebx
lea eax, [ebp + 0x48]
push eax
lea eax, [ebp + 0x64]
push eax
sete byte [ebp + 0x33]
mov dword [ebp + 0x48], ebx
mov dword [ebp + 0x64], esi
call fcn.00414db6
sub eax, dword [ebp + 0x64]
add esp, 0xc
sar eax, 1
push eax
push dword [ebp + 0x64]
lea ecx, [ebp + 0x34]
call fcn.0043cd19
push dword [ebp + 0x34]
call fcn.00479791
cmp byte [ebp + 0x33], bl
pop ecx
mov dword [ebp + 0x48], eax
je 0x427147
cmp eax, ebx
je 0x42713e
mov ax, word [esi + 2]
call fcn.00402b57
test al, al
je 0x427147
push esi
call fcn.0040e84c
pop ecx
mov esi, eax
cmp dword [ebp + 0x48], ebx
je 0x427188
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
inc eax
mov dword [ebp + 0x48], eax
add eax, 0xa
push eax
lea ecx, [ebp + 0x58]
call fcn.00432cfe
push 0xc
push str.LOAD
push dword [ebp + 0x58]
call fcn.0047a010
push dword [ebp + 0x48]
mov eax, dword [ebp + 0x58]
add eax, 0xa
push esi
push eax
call fcn.00404142
mov esi, dword [ebp + 0x58]
add esp, 0x18
lea ecx, [ebp + 0x34]
call fcn.0042dd2d
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov dword [ebp + 0x34], eax
add eax, 3
push eax
lea ecx, [ebp + 0x38]
call fcn.00432cfe
mov eax, dword [ebp + 0x34]
inc eax
push eax
push esi
push dword [ebp + 0x38]
call fcn.00404142
mov eax, dword [ebp + 0x38]
mov ecx, dword [ebp + 0x34]
add esp, 0xc
cmp byte [ebp + 0x7b], bl
mov word [eax + ecx*2 + 2], bx
je 0x42725a
push dword [ebp + 0x38]
mov byte [ebp + 0x62], bl
call fcn.0042fecd
mov eax, dword [ebp + 0x38]
mov dword [ebp + 0x64], eax
pop ecx
lea eax, [ebp + 0x64]
call fcn.0041025e
mov esi, dword [ebp + 0x64]
sub esi, dword [ebp + 0x38]
mov eax, dword [ebp + 0x4c]
sar esi, 1
add eax, esi
mov dword [ebp + 0x48], eax
inc eax
push eax
lea ecx, [ebp + 0x5c]
call fcn.00432cfe
cmp esi, ebx
jle 0x42725a
mov eax, dword [ebp + 0x5c]
mov ecx, dword [ebp + 0x4c]
push esi
push dword [ebp + 0x38]
lea eax, [eax + ecx*2]
push eax
call fcn.00404142
mov eax, dword [ebp + 0x5c]
mov ecx, dword [ebp + 0x48]
add esp, 0xc
cmp byte [ebp + 0x7b], 0x4c
mov word [eax + ecx*2], bx
jne 0x42725a
push dword [ebp + 0x64]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
inc eax
add eax, eax
push eax
push dword [ebp + 0x64]
mov dword [ebp + 0x78], eax
push dword [ebp + 0x38]
call fcn.0047a350
mov ecx, dword [ebp + 0x78]
lea eax, [esi + esi]
push eax
mov eax, dword [ebp + 0x38]
add ecx, eax
push ebx
push ecx
call fcn.00479cf0
add esp, 0x18
or byte [ebp + 0x62], 1
lea ecx, [ebp + 0x58]
lea esi, [ebp + 0x38]
call fcn.0042dd2d
mov eax, dword [esi]
push 1
push dword [ebp + 0x5c]
mov ecx, 0x4a5f08
mov dword [ebp + 0x78], eax
call fcn.004401d6
cmp byte [ebp + 0x57], bl
je 0x42728e
push 0x10040
push str.101
jmp 0x4272c4
lea ecx, [ebp + 0x78]
call fcn.0040b430
push dword [ebp + 0x78]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov edx, dword [ebp + 0x78]
lea ecx, [edx + eax*2 - 2]
jmp 0x4272b9
mov ax, word [ecx]
call fcn.00402b57
test al, al
je 0x4272bd
mov word [ecx], bx
dec ecx
dec ecx
cmp ecx, edx
jae 0x4272a8
push 0x40
push str.cmdline
mov ecx, edi
call fcn.004149f6
mov edi, dword [esi]
mov eax, dword [ebp + 0x78]
sub eax, edi
test eax, 0xfffffffe
jle 0x4272f3
push dword [ebp + 0x78]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [eax + eax + 2]
push eax
push dword [ebp + 0x78]
push edi
call fcn.0047a350
add esp, 0xc
mov edi, dword [esi]
push 0x492a44
lea ecx, [ebp + 0x78]
call fcn.0043ccfc
push ebx
push 0x4a5f08
lea ecx, [ebp - 0xa4]
call fcn.0041f54a
movzx eax, word [ebp + 0x2c]
push eax
lea ecx, [ebp - 0xa4]
mov dword [ebp + 0x34], eax
call fcn.00431b8e
mov ax, word [ebp + 0x2c]
mov word [ebp - 0x9c], ax
mov eax, edi
push ebx
lea edi, [ebp - 0xa4]
call fcn.00414b5a
push dword [ebp + 0x2c]
push dword [esi]
call fcn.0040deff
mov ecx, edi
push ecx
lea ecx, [ebp + 0x78]
push ecx
mov ecx, dword [ebp + 0x50]
push eax
push ebx
push esi
mov dword [ebp + 0x48], eax
call fcn.0041d22a
movzx edi, word [ebp + 0x28]
movzx eax, ax
or dword [ebp + 0x50], eax
mov eax, dword [ebp + 0x48]
inc eax
push eax
mov eax, edi
xor eax, dword [ebp + 0x34]
push eax
push dword [esi]
call fcn.0040df73
mov eax, dword [ebp + 0x50]
add esp, 0x2c
and eax, 2
shl edi, 0x10
push ebx
lea ecx, [ebp - 0xa4]
or edi, eax
call fcn.0041f0e9
lea ecx, [ebp - 0x60]
call fcn.0042dd2d
lea ecx, [ebp + 0x78]
call fcn.0042dd2d
movsx eax, byte [ebp + 0x63]
push str.PeExe
push eax
push 0x4a5f08
call fcn.00434ea0
mov ecx, dword [esi]
xor eax, eax
mov al, byte [ebp + 0x62]
add esp, 0xc
push ebx
push ebx
mov dword [esi], ebx
and eax, 1
or eax, edi
or eax, 0x80
push eax
push ebx
push dword [ebp + 0x5c]
push ecx
mov ecx, 0x4a5f08
call fcn.0046bb79
mov dword [ebp + 0x64], eax
call fcn.00433270
cmp dword [0x4a6224], ebx
jle 0x4273f7
mov byte [0x4a4290], 0xff
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
mov edi, eax
sub edi, 0x14
call esi
jmp 0x42745f
call esi
mov dword [ebp + 0x78], eax
sub eax, edi
cmp eax, 1
jb 0x42741e
push ebx
call dword [sym.imp.USER32.dll_PostQuitMessage]
mov edi, dword [ebp + 0x78]
push 0x4bf
push 0xa
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_MsgWaitForMultipleObjects]
jmp 0x427457
push 1
push ebx
push ebx
push ebx
lea eax, [ebp - 4]
push eax
call dword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x42745f
lea eax, [ebp - 4]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [ebp - 4]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageW]
cmp dword [0x4a6224], ebx
jg 0x427430
cmp dword [0x4a6224], ebx
jg 0x427408
lea ecx, [ebp + 0x38]
call fcn.0042dd2d
lea ecx, [ebp + 0x5c]
call fcn.0042dd2d
mov edi, 0x4a5f08
push dword [ebp + 0x1c]
call fcn.0042dcff
pop ecx
mov ecx, 0x4a6678
call fcn.0042e27b
mov ecx, 0x4a6270
call fcn.0042e2a9
push 0x4a5f34
call fcn.0046eb94
pop ecx
call fcn.0040e761
mov eax, 0x48e984
push eax
push eax
mov ecx, edi
call fcn.00416fa7
mov esi, dword [ebp + 0x64]
lea ecx, [ebp + 0x1c]
call fcn.0042dd2d
lea ecx, [ebp + 0x44]
call fcn.0042dd2d
pop edi
mov eax, esi
pop esi
pop ebx
add ebp, 0x68
leave
ret