Function at 0x4638e8
Capabilities:
Check for time delay via gettickcount
Check if file exists
Get common file path
Get file attributes
Get file system object information

Disassembly:
push ebp
mov ebp, esp
push eax
mov eax, 4
add esp, 0xfffff004
push eax
dec eax
jne 0x4638f1
mov eax, dword [ebp - 4]
add esp, 0xfffff704
push ebx
push esi
push edi
mov dword [ebp - 0xc34], edx
mov ebx, eax
mov eax, 0x4a804c
call fcn.00495294
mov word [ebp - 0xc20], 8
inc dword [0x4c4ce8]
inc dword [ebp - 0xc14]
mov word [ebp - 0xc20], 0x14
call fcn.0049d288
mov dword [ebp - 0xc38], eax
push 1
push 0xffffffffffffffff
push 0x100c
push dword [ebx]
call sub.USER32.DLL_SendMessageA
mov dword [ebp - 0xc3c], eax
mov eax, 0x4c28c4
mov edx, 1
call fcn.00449498
mov eax, 0x1c2
call fcn.0041202c
mov edx, eax
mov eax, 0x4c28c4
call fcn.004494f8
mov eax, dword [0x4c4d00]
test eax, eax
je 0x463996
push eax
call sub.KERNEL32.DLL_FindCloseChangeNotification
mov dword [0x4c4d00], 0xffffffff
mov byte [ebp - 0xc3d], 0
mov word [ebp - 0x1854], 0
lea edx, [ebp - 0x1054]
push edx
push 0x400
call sub.KERNEL32.DLL_GetCurrentDirectoryA
call fcn.0040ffc8
test eax, eax
je 0x4639d1
lea ecx, [ebp - 0x1854]
push ecx
push 0x800
call sub.KERNEL32.DLL_GetCurrentDirectoryW
cmp byte [ebx + 0x41d], 0
je 0x4639e9
mov eax, 0x4c28b4
call fcn.0047f388
jmp 0x463afd
lea eax, [ebp - 0x1054]
xor edx, edx
call fcn.0040bed4
test al, al
jne 0x463a6b
cmp word [ebp - 0x1854], 0
jne 0x463a24
lea ecx, [ebp - 0x1054]
push ecx
call sub.KERNEL32.DLL_GetFileAttributesA
cmp eax, 0xffffffff
jne 0x463a24
lea eax, [ebp - 0x1054]
call fcn.0040ba60
test eax, eax
jne 0x463a4e
cmp word [ebp - 0x1854], 0
je 0x463a6b
lea edx, [ebp - 0x1854]
push edx
call sub.KERNEL32.DLL_GetFileAttributesW
cmp eax, 0xffffffff
jne 0x463a6b
lea eax, [ebp - 0x1854]
call fcn.0040baec
test eax, eax
je 0x463a6b
mov eax, 0x4a7d28
xor edx, edx
call fcn.0046ec30
xor ecx, ecx
mov cl, al
cmp ecx, 1
sbb eax, eax
neg eax
mov byte [ebp - 0xc3d], al
lea eax, [ebp - 0x1054]
call fcn.0040ba60
cmp byte [eax], 0
jne 0x463a81
lea eax, [ebp - 0x1054]
call fcn.004509b0
lea eax, [ebp - 0x1054]
call fcn.0040bf3c
mov esi, eax
cmp esi, 0xffffffff
je 0x463ad0
call fcn.0046ec0c
mov ecx, esi
mov edx, 1
shl edx, cl
and eax, edx
jne 0x463ad0
dec dword [ebp - 0xc14]
cmp dword [0x4c4ce8], 0
jle 0x463abf
dec dword [0x4c4ce8]
mov eax, dword [ebp - 0xc30]
mov dword fs:[0], eax
jmp 0x4642e3
cmp byte [ebp - 0xc3d], 0
jne 0x463afd
mov eax, 0x4c28b4
call fcn.0047f8d0
mov eax, 0x4c287c
call fcn.0046983c
lea edx, [ebp - 0x1054]
mov eax, 0x4c287c
call fcn.004699e8
push 0
push 0
push 0xb
push dword [ebx]
call sub.USER32.DLL_SendMessageA
mov eax, ebx
call fcn.004685c8
push 0xffffffffffffffff
push dword [ebx + 8]
call sub.COMCTL32.DLL_ImageList_Remove
cmp byte [ebp - 0xc3d], 0
je 0x463b28
xor eax, eax
jmp 0x463b45
push 0x4401
push 0x160
lea edx, [ebp - 0x19b4]
push edx
push 0
push 0x4a7d29
call sub.SHELL32.DLL_SHGetFileInfoA
test eax, eax
jne 0x463b85
lea eax, [ebp - 0x1db4]
mov edx, 0x400
call fcn.0046eb74
cmp byte [ebp - 0xc3d], 0
je 0x463b66
xor eax, eax
jmp 0x463b85
push 0x4401
lea edx, [ebp - 0x19b4]
push 0x160
push edx
lea ecx, [ebp - 0x1db4]
push 0
push ecx
call sub.SHELL32.DLL_SHGetFileInfoA
push eax
push 1
push 0x1003
push dword [ebx]
call sub.USER32.DLL_SendMessageA
mov byte [ebp - 0xc3e], 0
mov edx, 0x4a7d34
mov eax, 0x4a7d2b
mov ecx, 1
call fcn.0046c29c
test eax, eax
setne al
and eax, 1
mov byte [ebp - 0xc3f], al
cmp byte [ebx + 0x41d], 0
je 0x463bd2
mov eax, ebx
call fcn.00464330
jmp 0x464137
mov word [ebp - 0xc20], 0x2c
lea eax, [ebp - 0xc0c]
call fcn.004126ec
inc dword [ebp - 0xc14]
mov edx, 0x4a7d43
mov word [ebp - 0xc20], 0x38
lea eax, [ebp - 0xc0c]
call fcn.0041278c
lea eax, [ebp - 0x2254]
call fcn.004137a4
lea eax, [ebp - 0x2228]
call fcn.004137a4
lea eax, [ebp - 0x21fc]
call fcn.004137a4
mov byte [ebp - 0xc40], 0
xor edi, edi
jmp 0x463fc4
cmp byte [ebp - 0xc3e], 0
jne 0x463c70
test edi, 0x1f
jne 0x463c70
call fcn.0049d288
sub eax, dword [ebp - 0xc38]
cmp eax, 0x1f4
jle 0x463c70
mov byte [ebp - 0xc3e], 1
push 0x7f02
push 0
call sub.USER32.DLL_LoadCursorA
push eax
call sub.USER32.DLL_SetCursor
push 0x4a7d29
lea eax, [ebp - 0x2e68]
push eax
call fcn.00494e18
add esp, 8
test eax, eax
je 0x463fc4
mov dword [ebp - 0x2e90], 7
mov dword [ebp - 0x2e8c], edi
xor edx, edx
mov dword [ebp - 0x2e74], 0xffffffff
mov dword [ebp - 0x2e88], edx
lea ecx, [ebp - 0x2e68]
mov dword [ebp - 0x2e7c], ecx
lea eax, [ebp - 0x2e68]
push 0x4a7d28
push eax
call fcn.00494e18
add esp, 8
test eax, eax
sete dl
and edx, 1
mov byte [ebp - 0xc49], dl
mov word [ebp - 0xc20], 0x38
cmp byte [ebp - 0xc49], 0
je 0x463d15
lea eax, [ebp - 0x1054]
call fcn.0040ba60
cmp byte [eax], 0
je 0x463fc4
mov edx, dword [ebp - 0x19b0]
mov dword [ebp - 0x2e74], edx
mov byte [ebp - 0xc40], 1
push 0xc30
push 0
lea ecx, [ebp - 0x3ac0]
push ecx
call fcn.00494ce4
add esp, 0xc
lea eax, [ebp - 0x2e68]
push eax
lea edx, [ebp - 0x3ac0]
push edx
call fcn.00494e64
add esp, 8
lea edx, [ebp - 0x2a68]
lea eax, [ebp - 0x36c0]
call fcn.0041023c
lea edx, [ebp - 0x2e68]
mov eax, ebx
call fcn.00464644
test al, al
je 0x463d6c
mov word [ebp - 0x2a68], 0
mov ecx, dword [ebp - 0x2268]
mov dword [ebp - 0x2ec0], ecx
mov ecx, dword [ebp - 0x2264]
mov dword [ebp - 0x2ebc], ecx
lea ecx, [edi + 1]
mov dword [ebp - 0x2eb8], 0
mov dword [ebp - 0x2eb4], 0
mov eax, dword [ebp - 0x2260]
mov dword [ebp - 0x2eb0], eax
mov eax, 0x4c8fe4
mov edx, dword [ebp - 0x1dc0]
mov dword [ebp - 0x2eac], edx
mov edx, dword [ebp - 0x1dbc]
mov dword [ebp - 0x2ea8], edx
lea edx, [ebp - 0x3ac0]
mov dword [ebp - 0x2e9c], ecx
call fcn.0046b778
mov dword [ebp - 0x2e70], eax
cmp byte [ebp - 0xc3f], 0
jne 0x463def
mov eax, dword [ebp - 0x2e7c]
call fcn.00448b1c
call fcn.0040ffc8
test eax, eax
je 0x463e27
cmp word [ebp - 0x2a68], 0
je 0x463e27
lea edx, [ebp - 0x2a68]
lea ecx, [ebp - 0x2e90]
mov dword [ebp - 0x2e7c], edx
push ecx
push 0
push 0x104d
push dword [ebx]
call sub.USER32.DLL_SendMessageA
mov esi, eax
jmp 0x463e3e
lea eax, [ebp - 0x2e90]
push eax
push 0
push 0x1007
push dword [ebx]
call sub.USER32.DLL_SendMessageA
mov esi, eax
cmp byte [ebp - 0x2258], 0
jne 0x463e8f
push dword [ebp - 0x2ebc]
push dword [ebp - 0x2ec0]
lea eax, [ebp - 0x3af4]
mov edx, 0x32
call fcn.0044815c
mov dword [ebp - 0x3b14], 1
lea ecx, [ebp - 0x3af4]
lea eax, [ebp - 0x3b1c]
mov dword [ebp - 0x3b08], ecx
push eax
push esi
push 0x102e
push dword [ebx]
call sub.USER32.DLL_SendMessageA
jmp 0x463eb7
mov dword [ebp - 0x3b3c], 1
mov dword [ebp - 0x3b30], 0x4a7d08
lea edx, [ebp - 0x3b44]
push edx
push esi
push 0x102e
push dword [ebx]
call sub.USER32.DLL_SendMessageA
cmp byte [ebp - 0xc49], 0
je 0x463eec
mov dword [ebp - 0x3b64], 2
lea ecx, [ebp - 0x18a4]
lea eax, [ebp - 0x3b6c]
mov dword [ebp - 0x3b58], ecx
push eax
push esi
push 0x102e
push dword [ebx]
call sub.USER32.DLL_SendMessageA
jmp 0x463f14
mov dword [ebp - 0x3b8c], 2
mov dword [ebp - 0x3b80], 0x4a7d08
lea edx, [ebp - 0x3b94]
push edx
push esi
push 0x102e
push dword [ebx]
call sub.USER32.DLL_SendMessageA
lea ecx, [ebp - 0xc54]
push ecx
lea eax, [ebp - 0x1dc0]
push eax
call sub.KERNEL32.DLL_FileTimeToLocalFileTime
lea edx, [ebp - 0x3ba4]
push edx
lea ecx, [ebp - 0xc54]
push ecx
call sub.KERNEL32.DLL_FileTimeToSystemTime
push 0x64
lea eax, [ebp - 0x3c08]
push eax
push 0
lea edx, [ebp - 0x3ba4]
push edx
push 0
push 0x400
call sub.KERNEL32.DLL_GetDateFormatA
push 0x4a7d45
lea ecx, [ebp - 0x3c08]
push ecx
call fcn.00494d88
add esp, 8
push 0x64
lea eax, [ebp - 0x3c08]
push eax
call fcn.00494e94
lea edx, [ebp - 0x3c08]
pop ecx
add eax, edx
lea ecx, [ebp - 0x3ba4]
push eax
push 0
push ecx
push 2
push 0x400
call sub.KERNEL32.DLL_GetTimeFormatA
mov dword [ebp - 0x3c28], 3
lea eax, [ebp - 0x3c08]
lea edx, [ebp - 0x3c30]
mov dword [ebp - 0x3c1c], eax
push edx
push esi
push 0x102e
push dword [ebx]
call sub.USER32.DLL_SendMessageA
inc edi
cmp byte [ebp - 0xc3d], 0
jne 0x463fe8
lea edx, [ebp - 0x2e68]
lea eax, [ebp - 0xc0c]
xor ecx, ecx
call fcn.00412800
test al, al
jne 0x463c34
xor eax, eax
mov al, byte [ebp - 0x1054]
cmp eax, 0x5c
jne 0x464037
xor edx, edx
mov dl, byte [ebp - 0x1053]
cmp edx, 0x5c
jne 0x464037
push 0x5c
lea ecx, [ebp - 0x1052]
push ecx
call fcn.00494f31
add esp, 8
mov word [ebp - 0xc20], 0x38
test eax, eax
je 0x464030
push 0x5c
inc eax
push eax
call fcn.00494f31
add esp, 8
test eax, eax
jne 0x464037
mov byte [ebp - 0xc40], 0
cmp byte [ebp - 0xc40], 0
jne 0x464118
lea eax, [ebp - 0x1054]
call fcn.0040ba60
cmp byte [eax], 0
je 0x464118
mov dword [ebp - 0x3c58], 7
mov dword [ebp - 0x3c54], edi
xor ecx, ecx
mov edx, dword [ebp - 0x19b0]
lea eax, [ebp - 0x4888]
mov dword [ebp - 0x3c3c], edx
mov dword [ebp - 0x3c50], ecx
mov dword [ebp - 0x3c44], 0x4a7d28
push 0xc30
push 0
push eax
call fcn.00494ce4
add esp, 0xc
push 0x4a7d28
lea edx, [ebp - 0x4888]
push edx
call fcn.00494e64
mov dword [ebp - 0x3c78], 0x10
add esp, 8
lea edx, [ebp - 0x4888]
mov eax, 0x4c8fe4
call fcn.0046b778
mov dword [ebp - 0x3c38], eax
lea ecx, [ebp - 0x3c58]
push ecx
push 0
push 0x1007
push dword [ebx]
call sub.USER32.DLL_SendMessageA
mov word [ebp - 0xc20], 0x38
mov dword [ebp - 0x48a8], 2
lea edx, [ebp - 0x18a4]
lea ecx, [ebp - 0x48b0]
mov dword [ebp - 0x489c], edx
push ecx
push eax
push 0x102e
push dword [ebx]
call sub.USER32.DLL_SendMessageA
dec dword [ebp - 0xc14]
lea eax, [ebp - 0xc0c]
mov edx, 2
call fcn.0041275c
mov word [ebp - 0xc20], 0x14
mov eax, 0x4c8fe4
call fcn.0046ba2c
mov eax, ebx
call fcn.00468240
xor eax, eax
mov word [ebp - 0xc20], 0x14
cmp dword [ebp - 0xc34], 0
je 0x4641cb
mov edx, dword [ebp - 0xc34]
cmp byte [edx], 0
jne 0x4641be
push 0
push 0
push 0x1004
push dword [ebx]
call sub.USER32.DLL_SendMessageA
cmp eax, dword [ebp - 0xc3c]
jg 0x46418a
test eax, eax
jle 0x46418a
dec eax
mov dword [ebp - 0xc3c], eax
mov dword [ebp - 0x48c8], 3
mov dword [ebp - 0x48cc], 3
lea edx, [ebp - 0x48d8]
push edx
push dword [ebp - 0xc3c]
push 0x102b
push dword [ebx]
call sub.USER32.DLL_SendMessageA
mov eax, 1
jmp 0x4641cb
mov edx, dword [ebp - 0xc34]
mov eax, ebx
call fcn.00464530
test eax, eax
jne 0x464213
mov dword [ebp - 0x48f0], 3
mov dword [ebp - 0x48f4], 3
lea edx, [ebp - 0x4900]
push edx
cmp dword [ebp - 0xc3c], 0xffffffff
je 0x4641fc
cmp dword [ebp - 0xc34], 0
jne 0x464200
xor ecx, ecx
jmp 0x464206
mov ecx, dword [ebp - 0xc3c]
push ecx
push 0x102b
push dword [ebx]
call sub.USER32.DLL_SendMessageA
push 1
push 0xffffffffffffffff
push 0x100c
push dword [ebx]
call sub.USER32.DLL_SendMessageA
mov esi, eax
mov eax, 0x4c28c4
xor edx, edx
call fcn.004494f8
push 0
push 1
push 0xb
push dword [ebx]
call sub.USER32.DLL_SendMessageA
push 0
push 0
push 0x102a
push dword [ebx]
call sub.USER32.DLL_SendMessageA
push 0
push esi
push 0x1013
push dword [ebx]
call sub.USER32.DLL_SendMessageA
mov eax, ebx
call fcn.00467478
mov eax, ebx
call fcn.004676b4
cmp byte [ebp - 0xc3e], 0
je 0x464286
push 0x7f00
push 0
call sub.USER32.DLL_LoadCursorA
push eax
call sub.USER32.DLL_SetCursor
mov eax, 0x4c28c4
xor edx, edx
call fcn.00449498
mov eax, 0x4c2894
call fcn.00480d5c
cmp byte [ebp - 0xc3d], 0
jne 0x4642c1
cmp byte [ebx + 0x41d], 0
jne 0x4642c1
push 3
push 0
push 0x4a7d29
call sub.KERNEL32.DLL_FindFirstChangeNotificationA
mov dword [0x4c4d00], eax
dec dword [ebp - 0xc14]
cmp dword [0x4c4ce8], 0
jle 0x4642d6
dec dword [0x4c4ce8]
mov edx, dword [ebp - 0xc30]
mov dword fs:[0], edx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret