Function at 0x434470
Capabilities:
Check for time delay via gettickcount
Copy file

Disassembly:
mov eax, dword [0x458724]
push ebx
push esi
push edi
xor edi, edi
test eax, eax
je 0x434484
pop edi
pop esi
xor eax, eax
pop ebx
ret
mov esi, dword [esp + 0x1c]
test esi, esi
jl 0x4344db
mov eax, dword [0x6aa940]
test eax, eax
jne 0x4344b7
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x6aa940], eax
mov eax, dword [0x694ca8]
push 0
push esi
push 0x14
push eax
call dword [sym.imp.USER32.dll_SetTimer]
pop edi
pop esi
xor eax, eax
pop ebx
ret
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
call ebx
cmp eax, dword [0x6aa940]
jbe 0x4344db
call ebx
mov ecx, dword [0x6aa940]
add ecx, esi
cmp eax, ecx
jae 0x4344db
pop edi
pop esi
xor eax, eax
pop ebx
ret
mov ebx, dword [sym.imp.KERNEL32.dll_Sleep]
xor esi, esi
push 0x46bc74
call fcn.0043a360
add esp, 4
test eax, eax
je 0x4344fe
push 0x64
call ebx
inc esi
cmp esi, 5
jl 0x4344e3
push 0x46bc74
call fcn.00439b70
push 0x4531dc
push 0x46bc74
call fcn.0043a600
mov esi, eax
add esp, 0xc
test esi, esi
jne 0x434531
mov dword [esp + 0x1c], 0xffffffff
mov edi, dword [esp + 0x1c]
jmp 0x4345c8
mov edx, dword [0x694cdc]
mov eax, dword [0x694cd8]
push ebp
push 0x46a824
push edx
push eax
push str._CONFIG_
push str._sOnTime_t_0.2f_t_s_r_n
push esi
call dword [sym.imp.MSVCRT.dll_fwprintf]
mov ecx, dword [esp + 0x2c]
push 0x94
push esi
push ecx
call fcn.00404980
mov ebx, dword [esp + 0x3c]
add esp, 0x24
xor ebp, ebp
test ebx, ebx
jle 0x4345a8
mov ecx, dword [esp + 0x1c]
lea edx, [ebx + ebx*8]
lea eax, [ebx + edx*2]
shl eax, 7
lea edi, [eax + ecx - 0x980]
push esi
push edi
call fcn.004346f0
add esp, 8
cmp eax, 0xffffffff
mov dword [esp + 0x20], eax
je 0x4345a4
inc ebp
sub edi, 0x980
cmp ebp, ebx
jl 0x434586
mov edi, dword [esp + 0x20]
push str._END_
push str._s_r_n
push esi
call dword [sym.imp.MSVCRT.dll_fwprintf]
push esi
call dword [sym.imp.MSVCRT.dll_fclose]
add esp, 0x10
test edi, edi
pop ebp
jge 0x434600
push 0
push 0
push 0x46bc74
push 0
push 0xffffffffffffffff
push 0
push 0x222
call fcn.00426440
mov edx, dword [0x694ca8]
add esp, 0x1c
push 0
push 0x1388
push 0x14
push edx
call dword [sym.imp.USER32.dll_SetTimer]
mov eax, edi
pop edi
pop esi
pop ebx
ret
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push 7
push 0x222
mov dword [0x6aa940], 0
call fcn.00426440
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push 7
push 0x221
call fcn.00426440
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push 7
push 0x220
call fcn.00426440
add esp, 0x54
push 0x46ba6c
call fcn.00439b70
mov esi, dword [sym.imp.USER32.dll_SetTimer]
add esp, 4
cmp word [0x46ba6c], 0
je 0x4346ad
push 0
push 0x46ba6c
push 0x46bc74
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
jne 0x4346ad
push eax
push eax
push 0x46ba6c
push eax
push 0xffffffffffffffff
push eax
push 0x22c
call fcn.00426440
mov eax, dword [0x694ca8]
add esp, 0x1c
push 0
push 0xea60
push 0x16
push eax
call esi
jmp 0x4346d8
mov ecx, dword [0x694ca8]
push 0x16
push ecx
call dword [sym.imp.USER32.dll_KillTimer]
push 0
push 0
push 0x46ba6c
push 0
push 0xffffffffffffffff
push 7
push 0x22c
call fcn.00426440
add esp, 0x1c
mov edx, dword [0x694ca8]
push 0
push 0x1b7740
push 0x14
push edx
call esi
mov eax, edi
pop edi
pop esi
pop ebx
ret