Function at 0x41c8b0
Capabilities:
Check for time delay via gettickcount
Check if file exists

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x62c
mov eax, dword [0x633754]
xor eax, ebp
mov dword [ebp - 4], eax
movzx eax, word [0x639524]
push ebx
push esi
mov esi, dword [ebp + 0x18]
push edi
push 0x206
mov word [ebp - 0x41c], ax
lea eax, [ebp - 0x41a]
push 0
push eax
call fcn.00546400
movzx eax, word [0x639528]
push 0x206
mov word [ebp - 0x214], ax
lea eax, [ebp - 0x212]
push 0
push eax
call fcn.00546400
add esp, 0x18
mov dword [ebp - 0x628], 0
cmp dword [ebp + 8], 0
mov dword [ebp - 0x62c], 0
jne 0x41c940
push 0
push 0
push 1
push 0
call fcn.0041d040
add esp, 0x10
test eax, eax
je 0x41d01e
cmp dword [ebp + 0xc], 0
je 0x41cae1
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
push 0x63952c
push 0x63c3c0
call esi
push 0x63c3c0
push 0xfb05
push dword [0x640174]
call dword [sym.imp.USER32.dll_SetDlgItemTextW]
push 0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push 0xfb06
push dword [0x640174]
call dword [sym.imp.USER32.dll_SetDlgItemInt]
cmp dword [0x6378a4], 0
jne 0x41c9a1
push 0x639530
push 0x6378a8
call esi
push 0x63c360
push 0
push 0
call fcn.004110f0
push 0
push 0x6394c2
push dword [0x64018c]
call fcn.004078a0
push 0
push dword [0x64018c]
call fcn.00428590
add esp, 0x20
call fcn.0041c6a0
mov eax, dword [0x63c798]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push 0
mov dword [0x63c354], 0
mov eax, dword [eax*4 + 0x5df77c]
push eax
push 0x7ef
push dword [0x64018c]
mov dword [0x63789c], 0
mov dword [0x63c348], eax
call esi
mov ecx, dword [0x63c7ac]
mov eax, 0xfde9
test ecx, ecx
mov dword [0x63c350], ecx
push 0
cmove eax, dword [0x63c344]
push eax
push 0x7f5
push dword [0x64018c]
mov dword [0x63c34c], ecx
call esi
push 0
push 0x6394c3
push dword [0x64018c]
call fcn.004078a0
add esp, 0xc
cmp dword [0x63c354], 0
jne 0x41ca70
mov eax, dword [0x63c350]
cmp eax, dword [0x63c34c]
jne 0x41ca70
xor eax, eax
jmp 0x41ca75
mov eax, 1
push 0x6378a8
push dword [0x63789c]
push 0x2715
push eax
push dword [0x63c834]
push 0x63c3c0
push 0x2713
push dword [0x6391e8]
push dword [0x5df778]
push dword [0x640174]
call fcn.00414670
mov eax, dword [0x63c75c]
xor ecx, ecx
cmp dword [0x63c758], ecx
push ecx
cmovne eax, ecx
mov dword [0x63c75c], eax
call fcn.004192b0
add esp, 0x2c
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0052a352
mov esp, ebp
pop ebp
ret
mov edi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
test esi, esi
je 0x41cb02
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
je 0x41cb02
push esi
lea eax, [ebp - 0x41c]
push eax
call edi
jmp 0x41cb26
push 0
push 0x104
lea eax, [ebp - 0x41c]
push eax
push dword [0x640174]
call fcn.0041d5b0
add esp, 0x10
test eax, eax
je 0x41d01e
lea eax, [ebp - 0x41c]
push 0x104
push eax
call fcn.00416230
add esp, 8
lea eax, [ebp - 0x41c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathIsRelativeW]
mov ebx, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x41cbb3
push 0x104
push 0x639230
lea eax, [ebp - 0x214]
push eax
call dword [sym.imp.SHLWAPI.dll_StrCpyNW]
lea eax, [ebp - 0x41c]
push eax
lea eax, [ebp - 0x214]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
lea eax, [ebp - 0x214]
push eax
call ebx
test eax, eax
jne 0x41cbc3
push eax
lea eax, [ebp - 0x624]
push eax
push 0x104
push 0
lea eax, [ebp - 0x41c]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_SearchPathW]
test eax, eax
je 0x41cbc3
lea eax, [ebp - 0x624]
jmp 0x41cbb9
lea eax, [ebp - 0x41c]
push eax
lea eax, [ebp - 0x214]
push eax
call edi
lea eax, [ebp - 0x214]
push eax
call fcn.00416280
lea eax, [ebp - 0x214]
push 0x104
push eax
call fcn.004162d0
lea eax, [ebp - 0x214]
push eax
call fcn.00415a50
add esp, 0x10
test eax, eax
je 0x41cc08
lea eax, [ebp - 0x214]
push 0x104
push eax
push eax
call fcn.00415ac0
add esp, 0xc
cmp dword [ebp + 0x10], 0
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
jne 0x41cd42
lea eax, [ebp - 0x214]
push eax
call ebx
test eax, eax
jne 0x41cd42
cmp dword [0x639494], eax
jne 0x41cc50
lea eax, [ebp - 0x214]
push eax
push 0xc366
push 2
call fcn.004027f0
add esp, 0xc
cmp eax, 6
jne 0x41d01e
push 0
push 0x80
push 1
push 0
push 3
push 0x40000000
lea eax, [ebp - 0x214]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0xc], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x63c618], eax
xor ebx, ebx
mov eax, dword [ebp - 0xc]
cmp eax, 0xffffffff
setne bl
je 0x41cd74
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x63c360
push 0
push 0
call fcn.004110f0
push 0
push 0x6394c6
push dword [0x64018c]
call fcn.004078a0
push 0
push dword [0x64018c]
call fcn.00428590
mov eax, dword [0x63c798]
add esp, 0x20
mov eax, dword [eax*4 + 0x5df77c]
push 0
push eax
push 0x7ef
push dword [0x64018c]
mov dword [0x63c348], eax
call esi
mov ecx, dword [0x5df770]
cmp ecx, 0xffffffff
jne 0x41ccf7
mov ecx, dword [0x63c7ac]
test ecx, ecx
mov dword [0x63c34c], ecx
push 0
mov eax, 0xfde9
mov dword [0x63c350], ecx
cmove eax, dword [0x63c344]
push eax
push 0x7f5
push dword [0x64018c]
call esi
push 0
push 0x6394c7
push dword [0x64018c]
mov dword [0x63789c], 0
call fcn.004078a0
add esp, 0xc
jmp 0x41cd74
push 0
push 0
lea eax, [ebp - 0x62c]
push eax
lea eax, [ebp - 0x628]
push eax
push 0x63c348
push 0x63c350
push dword [ebp + 0x14]
lea eax, [ebp - 0x214]
push eax
push 1
call fcn.0041c760
add esp, 0x24
mov ebx, eax
test ebx, ebx
je 0x41cfec
lea eax, [ebp - 0x214]
push eax
push 0x63c3c0
call edi
push 0x63c3c0
push 0xfb05
push dword [0x640174]
call dword [sym.imp.USER32.dll_SetDlgItemTextW]
push 0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push 0xfb06
push dword [0x640174]
call dword [sym.imp.USER32.dll_SetDlgItemInt]
cmp dword [0x6378a4], 0
jne 0x41cdcf
push 0x639534
push 0x6378a8
call edi
cmp dword [0x639490], 0
jne 0x41cdeb
push 0x63c3c0
push dword [0x64018c]
call fcn.004297b0
add esp, 8
call fcn.0041c6a0
mov eax, dword [0x63c350]
push 0
push dword [0x63c348]
mov dword [0x63c34c], eax
push 0x7ef
push dword [0x64018c]
mov dword [0x63c354], 0
call esi
push dword [0x639450]
lea eax, [ebp - 0x214]
push dword [0x63944c]
push eax
push dword [0x63c624]
call fcn.00416840
add esp, 0x10
cmp dword [0x639498], 2
jne 0x41ce52
lea eax, [ebp - 0x214]
push eax
push 3
call dword [sym.imp.SHELL32.dll_SHAddToRecentDocs]
cmp dword [0x63c354], 0
jne 0x41ce6c
mov eax, dword [0x63c350]
cmp eax, dword [0x63c34c]
jne 0x41ce6c
xor eax, eax
jmp 0x41ce71
mov eax, 1
push 0x6378a8
push dword [0x63789c]
push 0x2715
push eax
push dword [0x63c834]
lea eax, [ebp - 0x214]
push eax
push 0x2713
push dword [0x6391e8]
push dword [0x5df778]
push dword [0x640174]
call fcn.00414670
add esp, 0x28
cmp dword [ebp + 0x10], 0
jne 0x41cec9
mov eax, dword [0x63c75c]
xor ecx, ecx
cmp dword [0x63c758], ecx
cmovne eax, ecx
mov dword [0x63c75c], eax
push 0x63c3c0
call fcn.004192b0
add esp, 4
push 0
push 0
push 0x7d6
push dword [0x64018c]
call esi
cmp eax, 4
jl 0x41cfc1
mov al, byte [0x6394ca]
mov byte [ebp - 0xc], al
lea eax, [ebp - 0xc]
push eax
push 5
push 0x886
push dword [0x64018c]
mov dword [ebp - 0xb], 0
call esi
push str..LOG
lea eax, [ebp - 0xc]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x41cfc1
push eax
push 0xffffffffffffffff
push dword [0x64018c]
call fcn.0040e700
add esp, 0xc
push 0
push 0
push 0x81e
push dword [0x64018c]
call esi
push 0
push 0
push 0x919
push dword [0x64018c]
call esi
push 0
push 0x19d9e
push 0x111
push dword [0x640174]
call esi
push 0
push 0xffffffffffffffff
push dword [0x64018c]
call fcn.0040e700
add esp, 0xc
push 0
push 0
push 0x919
push dword [0x64018c]
call esi
push 0
push 0
push 0x81f
push dword [0x64018c]
call esi
push 0
push 0xffffffffffffffff
push dword [0x64018c]
call fcn.0040e700
push dword [0x64018c]
call fcn.0040e930
add esp, 0x10
cmp dword [ebp - 0x628], 0
je 0x41d00b
push 0xc35f
push 1
call fcn.004027f0
add esp, 8
mov eax, ebx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0052a352
mov esp, ebp
pop ebp
ret
cmp dword [ebp - 0x62c], 0
jne 0x41d00b
lea eax, [ebp - 0x214]
push eax
push 0xc350
push 1
call fcn.004027f0
add esp, 0xc
pop edi
pop esi
mov eax, ebx
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0052a352
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 4]
xor eax, eax
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0052a352
mov esp, ebp
pop ebp
ret