Function at 0x40aa70
Capabilities:
Check for time delay via gettickcount
Create directory
Get common file path
Get file attributes
Read .ini file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, 0x4634
call fcn.00478380
mov eax, dword [0x494014]
xor eax, esp
mov dword [esp + 0x4630], eax
push ebx
push esi
push edi
push 0x400
lea eax, [esp + 0x1e3c]
mov esi, ecx
push 0
push eax
mov ebx, edx
mov dword [esp + 0x18], esi
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x1a38]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x530]
push 0x104
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x28]
push 0x104
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x530]
push eax
push 0
push 0
push 5
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathA]
push 0
push 0x10
lea eax, [esp + 0x1a40]
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathA]
push 0x400
lea eax, [esp + 0x63c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea edi, [esi + 4]
lea eax, [esp + 0x1a38]
push edi
push eax
lea eax, [esp + 0x640]
push str._s_s.ini
push eax
call fcn.00403cb0
add esp, 0x10
lea eax, [esp + 0x638]
push eax
push 0
push str.time
push edi
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
push 0
mov esi, eax
call dword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
add esp, 4
sub eax, esi
test esi, esi
je 0x40b127
cmp eax, 0x2a300
jbe 0x40b127
push 0x48c390
lea eax, [esp + 0x534]
push eax
lea eax, [esp + 0x30]
push 0x48bcfc
push eax
call fcn.00403c90
push edi
lea eax, [esp + 0x1e4c]
push 0x48b93c
push eax
call fcn.00403cb0
lea esi, [esp + 0x1e54]
add esp, 0x1c
lea ecx, [esi + 1]
mov al, byte [esi]
inc esi
test al, al
jne 0x40abc8
lea eax, [esp + 0x28]
sub esi, ecx
push 0x48b98c
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
add esp, 8
mov dword [esp + 0x14], eax
test eax, eax
je 0x40ac0b
push eax
push esi
lea eax, [esp + 0x1e40]
push 1
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
push dword [esp + 0x24]
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
add esp, 0x14
push edi
push 0x48b8f4
lea eax, [esp + 0x538]
push eax
lea eax, [esp + 0x34]
push 0x48c3a4
push eax
call fcn.00403c90
add esp, 0x14
lea eax, [esp + 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
cmp eax, 0x10
je 0x40ac4a
push 0
lea eax, [esp + 0x2c]
push eax
call esi
push edi
push 0x48b8f4
lea eax, [esp + 0x538]
push eax
lea eax, [esp + 0x34]
push 0x48c3ac
push eax
call fcn.00403c90
add esp, 0x14
lea eax, [esp + 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0x10
je 0x40ac83
push 0
lea eax, [esp + 0x2c]
push eax
call esi
push edi
push 0x48b8f4
lea eax, [esp + 0x538]
push eax
lea eax, [esp + 0x34]
push str._s_s_s_
push eax
call fcn.00403c90
add esp, 0x14
lea eax, [esp + 0x28]
push 0x48c3d0
push 0x82
push eax
call fcn.004053d0
mov edx, dword [esp + 0x18]
add esp, 0xc
mov eax, dword [edx]
cmp eax, 1
je 0x40ace7
cmp eax, 2
jne 0x40acd6
lea eax, [esp + 0x28]
push eax
push 0x48c3f4
jmp 0x40acf1
cmp eax, 3
jne 0x40ace7
lea eax, [esp + 0x28]
push eax
push 0x48c3f8
jmp 0x40acf1
lea eax, [esp + 0x28]
push eax
push 0x48c2a0
push str.Worldid
push 0x48c3e8
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
push 0x400
lea eax, [esp + 0x134]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x1638]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0xe38]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0xa38]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x1238]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x638]
xor esi, esi
push eax
push 0x400
lea eax, [esp + 0x138]
push eax
push 0x48bc68
push 0x48b188
push edi
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
test eax, eax
je 0x40aeb7
lea eax, [esp + 0x1638]
mov edx, 0x400
push eax
lea ecx, [esp + 0x134]
call fcn.004035a0
mov esi, eax
add esp, 4
test esi, esi
je 0x40b016
push 0x400
lea eax, [esp + 0x134]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x638]
push eax
push 0x400
lea eax, [esp + 0x138]
push eax
push 0x48bc68
push 0x48b1b0
push edi
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [esp + 0xe38]
mov edx, 0x400
push eax
lea ecx, [esp + 0x134]
call fcn.004035a0
add esp, 4
lea eax, [esp + 0x130]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x638]
push eax
push 0x400
lea eax, [esp + 0x138]
push eax
push 0x48bc68
push 0x48b1a0
push edi
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [esp + 0xa38]
mov edx, 0x400
push eax
lea ecx, [esp + 0x134]
call fcn.004035a0
add esp, 4
lea eax, [esp + 0x130]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x638]
push eax
push 0x400
lea eax, [esp + 0x138]
push eax
push 0x48bc68
push 0x48b190
jmp 0x40aff3
lea eax, [esp + 0x638]
push eax
push 0x400
lea eax, [esp + 0x138]
push eax
push 0x48bc68
push str.0107_0088
push edi
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
test eax, eax
je 0x40b016
lea eax, [esp + 0x1638]
mov edx, 0x400
push eax
lea ecx, [esp + 0x134]
call fcn.004035a0
mov esi, eax
add esp, 4
test esi, esi
je 0x40b016
push 0x400
lea eax, [esp + 0x134]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x638]
push eax
push 0x400
lea eax, [esp + 0x138]
push eax
push 0x48bc68
push str.0107_0001
push edi
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [esp + 0xe38]
mov edx, 0x400
push eax
lea ecx, [esp + 0x134]
call fcn.004035a0
add esp, 4
lea eax, [esp + 0x130]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x638]
push eax
push 0x400
lea eax, [esp + 0x138]
push eax
push 0x48bc68
push str.0109_0001
push edi
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [esp + 0xa38]
mov edx, 0x400
push eax
lea ecx, [esp + 0x134]
call fcn.004035a0
add esp, 4
lea eax, [esp + 0x130]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x638]
push eax
push 0x400
lea eax, [esp + 0x138]
push eax
push 0x48bc68
push str.0109_0038
push edi
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [esp + 0x1238]
mov edx, 0x400
push eax
lea ecx, [esp + 0x134]
call fcn.004035a0
add esp, 4
mov ecx, dword [0x4958f8]
push 0x48c42c
push 0xb
push ebx
call dword [sym.imp.mfc140u.dll_CListCtrl::SetItemText]
test esi, esi
je 0x40b0fc
mov esi, dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoll]
xorps xmm0, xmm0
push ecx
push edi
movups xmmword [esp + 0x20], xmm0
call esi
add esp, 4
lea edx, [esp + 0xe3c]
lea ecx, [esp + 0x163c]
push eax
lea eax, [esp + 0x1240]
push eax
lea eax, [esp + 0xa44]
push eax
call fcn.004026a0
add esp, 4
push edi
call esi
add esp, 4
mov ecx, eax
call fcn.00402e40
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
add esp, 0xc
call esi
mov ebx, eax
lea eax, [esp + 0x638]
push eax
push 0
push str.time
push edi
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
test eax, eax
jne 0x40b629
call esi
mov ecx, eax
mov eax, 0x10624dd3
sub ecx, ebx
mul ecx
shr edx, 6
cmp edx, 5
ja 0x40b629
push 0
push 0xa
call fcn.004033d0
add esp, 8
lea eax, [esp + 0x638]
push eax
push 0
push str.time
push edi
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
test eax, eax
je 0x40b0a6
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x4630]
xor ecx, esp
call fcn.0041caaf
mov esp, ebp
pop ebp
ret
mov ecx, dword [0x4958f8]
push 0x48c438
push 0xb
push ebx
call dword [sym.imp.mfc140u.dll_CListCtrl::SetItemText]
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x4630]
xor ecx, esp
call fcn.0041caaf
mov esp, ebp
pop ebp
ret
push 0x400
lea eax, [esp + 0xa3c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x2238]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x2638]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0xe38]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x1638]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x1238]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x2a38]
push 0x800
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x1a38]
push eax
lea eax, [esp + 0x123c]
push str._sLoginData.ini
push eax
call fcn.00403cb0
add esp, 0xc
lea eax, [esp + 0x1a38]
push eax
lea eax, [esp + 0x163c]
push 0x48c18c
push eax
call fcn.00403cb0
mov esi, dword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__access]
lea eax, [esp + 0x1244]
add esp, 0xc
push 0
push eax
call esi
add esp, 8
test eax, eax
je 0x40b238
lea eax, [esp + 0x1a38]
push eax
lea eax, [esp + 0x123c]
push str._sLoginData.ini
push eax
call fcn.00403cb0
add esp, 0xc
lea eax, [esp + 0x1638]
push 0
push eax
call esi
mov esi, dword [sym.imp.mfc140u.dll_CListCtrl::SetItemText]
add esp, 8
test eax, eax
jne 0x40b38b
movaps xmm0, xmmword [0x48db30]
lea eax, [esp + 0x3238]
push 0x800
push 0
push eax
movups xmmword [esp + 0x24], xmm0
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x1638]
push eax
push 0x800
lea eax, [esp + 0x3240]
push eax
push 0x48bc68
push 0x48c1a0
push edi
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov dword [esp + 0x14], eax
test eax, eax
je 0x40b38b
push 0xc00
lea eax, [esp + 0x3a3c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov edx, dword [esp + 0x20]
lea eax, [esp + 0x3a44]
add esp, 0xc
lea ecx, [esp + 0x3238]
push eax
call fcn.004035a0
add esp, 4
mov dword [esp + 0x14], eax
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esp + 0x134]
push ecx
lea ecx, [esp + 0x20]
push ecx
push eax
lea eax, [esp + 0x3a48]
push eax
call fcn.0040aa60
add esp, 0x14
push 0
call dword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
sub eax, dword [esp + 0x134]
add esp, 4
cmp dword [esp + 0x14], 0
je 0x40b37b
cmp eax, 0x2a300
jae 0x40b37b
mov ecx, dword [0x4958f8]
push 0x48c458
push 0xb
push ebx
call esi
push ecx
lea eax, [esp + 0x2c8]
push eax
lea eax, [esp + 0x244]
push eax
lea eax, [esp + 0x258]
push eax
push edi
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoll]
mov edx, dword [esp + 0x20]
add esp, 4
mov ecx, eax
mov edx, dword [edx]
call fcn.00402fd0
add esp, 0x10
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x4630]
xor ecx, esp
call fcn.0041caaf
mov esp, ebp
pop ebp
ret
mov ecx, dword [0x4958f8]
push 0x48c464
push 0xb
push ebx
call esi
lea eax, [esp + 0x638]
push 0
push eax
call dword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__access]
add esp, 8
test eax, eax
jne 0x40b4d1
lea eax, [esp + 0x638]
push eax
push 0x400
lea eax, [esp + 0xa40]
push eax
push 0x48bc68
push str.buf16bytesGTKey_ST
push edi
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
test eax, eax
je 0x40b4d1
lea eax, [esp + 0x2238]
mov edx, 0x400
push eax
lea ecx, [esp + 0xa3c]
call fcn.004035a0
add esp, 4
test eax, eax
je 0x40b4d1
mov ecx, dword [0x4958f8]
push 0x48c458
push 0xb
push ebx
call esi
push 0x400
lea eax, [esp + 0xa3c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov ebx, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [esp + 0x644]
add esp, 0xc
push eax
push 0x400
lea eax, [esp + 0xa40]
push eax
push 0x48bc68
push str.bufServiceTicket
push edi
call ebx
lea eax, [esp + 0x2638]
mov edx, 0x400
push eax
lea ecx, [esp + 0xa3c]
call fcn.004035a0
add esp, 4
lea eax, [esp + 0xa38]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x638]
push eax
push 0x400
lea eax, [esp + 0xa40]
push eax
push 0x48bc68
push str.bufST_PTLOGIN
push edi
call ebx
lea eax, [esp + 0xe38]
mov edx, 0x400
push eax
lea ecx, [esp + 0xa3c]
call fcn.004035a0
lea eax, [esp + 0xe3c]
push eax
lea eax, [esp + 0x2240]
push eax
lea eax, [esp + 0x2644]
jmp 0x40b34b
lea eax, [esp + 0x1238]
push 0
push eax
call dword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__access]
add esp, 8
test eax, eax
jne 0x40b619
push 0x120
push eax
lea eax, [esp + 0x138]
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x1238]
push eax
push 0xc00
lea eax, [esp + 0x2a40]
push eax
push 0x48bc68
push str.LoginData
push edi
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [esp + 0x2a38]
mov dword [esp + 0x14], eax
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40b536
sub ecx, edx
jne 0x40b561
push ecx
lea eax, [esp + 0x63c]
push eax
call dword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__access]
add esp, 8
test eax, eax
je 0x40b561
push 0x48c478
jmp 0x40b61e
mov ecx, dword [0x4958f8]
push 0x48c458
push 0xb
push ebx
call esi
push 0x400
lea eax, [esp + 0xe3c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov edx, dword [esp + 0x20]
add esp, 0xc
xor esi, esi
xor ecx, ecx
test edx, edx
js 0x40b5ac
mov al, byte [esp + ecx + 0x2a38]
cmp al, 0x20
je 0x40b5a7
mov byte [esp + esi + 0xe38], al
inc esi
inc ecx
cmp ecx, edx
jle 0x40b594
lea edx, [esp + 0xe38]
lea ecx, [esp + 0x2a38]
call fcn.00403510
mov eax, esi
cdq
sub eax, edx
sar eax, 1
push eax
lea eax, [esp + 0xe3c]
push eax
lea eax, [esp + 0x138]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
push 0
call dword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
sub eax, dword [esp + 0x138]
add esp, 4
cmp eax, 0x2a300
ja 0x40b0fc
push ecx
lea eax, [esp + 0x1d4]
push eax
lea eax, [esp + 0x140]
push eax
lea eax, [esp + 0x158]
jmp 0x40b34b
push 0x48c438
mov ecx, dword [0x4958f8]
push 0xb
push ebx
call esi
mov ecx, dword [esp + 0x463c]
xor eax, eax
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.0041caaf
mov esp, ebp
pop ebp
ret