Function at 0x41238f
Capabilities:
Check for time delay via gettickcount
Write file on windows

Disassembly:
push ebp
lea ebp, [esp - 0x74]
sub esp, 0xc0
mov eax, dword [0x4806f0]
xor eax, ebp
mov dword [ebp + 0x70], eax
push ebx
push edi
mov edi, dword [ebp + 0x7c]
cmp dword [edi + 0x18], 0
mov ebx, ecx
mov dword [ebp + 4], ebx
mov dword [ebp + 0x38], edi
jne 0x412bf3
push 0
lea eax, [edi + 0x8c]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004023e0
add esp, 0xc
lea ecx, [ebp - 0x14]
call fcn.00401005
test al, al
je 0x4123e9
lea ecx, [ebp - 0x14]
call fcn.0042f1e0
jmp 0x412bf3
lea eax, [edi + 0xa4]
mov dword [edi + 0x18], 1
cmp byte [eax + 7], 0xff
jne 0x4123fe
mov eax, dword [eax]
push esi
push str.player
push eax
call fcn.0044ebc0
pop ecx
pop ecx
test eax, eax
je 0x412433
lea eax, [edi + 0xac]
cmp byte [eax + 7], 0xff
jne 0x41241e
mov eax, dword [eax]
push str.restore
push eax
call fcn.0044ebc0
pop ecx
pop ecx
test eax, eax
jne 0x412a3e
lea ecx, [ebp + 0x10]
call fcn.0042ef80
push str._playerlaunch_checksum____r_n
lea ecx, [ebp + 0x10]
call fcn.0042f630
push str._____r_n
lea eax, [ebx + 0x1c0]
push eax
push str.__lang_
push str.3.5.0.30
push str.__version_
lea ecx, [ebx + 0x188]
push ecx
lea eax, [ebp + 0x28]
push str.___stub_locale_
push eax
call fcn.0042fa40
add esp, 0xc
push eax
lea eax, [ebp + 0x30]
push eax
call fcn.0042f9d0
add esp, 0xc
push eax
lea eax, [ebp + 8]
push eax
call fcn.0042f9d0
add esp, 0xc
push eax
lea eax, [ebp - 4]
push eax
call fcn.0042f9d0
add esp, 0xc
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.0042f950
add esp, 0xc
push eax
lea eax, [ebp - 0xc]
push eax
call fcn.0042f9d0
add esp, 0xc
push eax
lea ecx, [ebp + 0x10]
call fcn.0042f690
lea ecx, [ebp - 0xc]
call fcn.0042f1e0
lea ecx, [ebp - 0x1c]
call fcn.0042f1e0
lea ecx, [ebp - 4]
call fcn.0042f1e0
lea ecx, [ebp + 8]
call fcn.0042f1e0
lea ecx, [ebp + 0x30]
call fcn.0042f1e0
lea ecx, [ebp + 0x28]
call fcn.0042f1e0
mov esi, 0x473b78
push esi
lea ecx, [ebp - 0x14]
push ecx
push str.__cmdline_
lea eax, [edi + 0x3c]
push eax
mov ebx, str.___program_name_
lea eax, [ebp - 4]
push ebx
push eax
call fcn.0042fa40
add esp, 0xc
push eax
lea eax, [ebp + 8]
push eax
call fcn.0042f9d0
add esp, 0xc
push eax
lea eax, [ebp + 0x30]
push eax
call fcn.0042f950
add esp, 0xc
push eax
lea eax, [ebp + 0x28]
push eax
call fcn.0042f9d0
add esp, 0xc
push eax
lea ecx, [ebp + 0x10]
call fcn.0042f690
lea ecx, [ebp + 0x28]
call fcn.0042f1e0
lea ecx, [ebp + 0x30]
call fcn.0042f1e0
lea ecx, [ebp + 8]
call fcn.0042f1e0
lea ecx, [ebp - 4]
call fcn.0042f1e0
lea ecx, [edi + 0x94]
call fcn.00401005
test al, al
jne 0x41260a
lea ecx, [edi + 0x9c]
call fcn.00401005
test al, al
jne 0x41260a
push esi
lea eax, [edi + 0x94]
push eax
lea eax, [ebp + 0x30]
push str.wndclass_
push eax
call fcn.0042fa40
add esp, 0xc
push eax
lea eax, [ebp + 0x28]
push eax
call fcn.0042f9d0
add esp, 0xc
push eax
lea ecx, [ebp + 0x10]
call fcn.0042f690
lea ecx, [ebp + 0x28]
call fcn.0042f1e0
lea ecx, [ebp + 0x30]
call fcn.0042f1e0
push esi
lea eax, [edi + 0x9c]
push eax
lea eax, [ebp + 0x30]
push str.wndtitle_
push eax
call fcn.0042fa40
add esp, 0xc
push eax
lea eax, [ebp + 0x28]
push eax
call fcn.0042f9d0
add esp, 0xc
push eax
lea ecx, [ebp + 0x10]
call fcn.0042f690
lea ecx, [ebp + 0x28]
call fcn.0042f1e0
lea ecx, [ebp + 0x30]
call fcn.0042f1e0
add edi, 0xac
mov ecx, edi
call fcn.00401005
test al, al
jne 0x412654
push esi
push edi
lea eax, [ebp + 0x30]
push str.method_
push eax
call fcn.0042fa40
add esp, 0xc
push eax
lea eax, [ebp + 0x28]
push eax
call fcn.0042f9d0
add esp, 0xc
push eax
lea ecx, [ebp + 0x10]
call fcn.0042f690
lea ecx, [ebp + 0x28]
call fcn.0042f1e0
lea ecx, [ebp + 0x30]
call fcn.0042f1e0
push str.___r_n
lea ecx, [ebp + 0x10]
call fcn.0042f630
push str.__playerlaunch_
lea ecx, [ebp + 0x10]
call fcn.0042f630
xor eax, eax
push 8
pop ecx
mov byte [ebp + 0x60], al
mov byte [ebp + 0x3c], 0
lea edi, [ebp + 0x3d]
rep stosd dword es:[edi], eax
lea edi, [ebp + 0x61]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp + 0x60]
push eax
lea ecx, [ebp + 0x10]
call fcn.0042ef90
push eax
push 0
lea ecx, [ebp + 0x10]
call fcn.0042fbb0
push eax
call fcn.00406155
add esp, 0xc
push 0xffffffffffffffff
lea ecx, [ebp + 0x10]
call fcn.0042fc40
lea eax, [ebp + 0x3c]
push eax
lea eax, [ebp + 0x60]
push eax
call fcn.00406121
pop ecx
pop ecx
lea ecx, [ebp + 0x18]
mov edi, eax
call fcn.0042ef80
push 0x473b14
push edi
lea ecx, [ebp + 8]
call fcn.0042f200
push eax
lea eax, [ebp + 0x30]
push str._playerlaunch_checksum_
push eax
call fcn.0042fa40
add esp, 0xc
push eax
lea eax, [ebp + 0x28]
push eax
call fcn.0042f9d0
add esp, 0xc
push eax
lea ecx, [ebp + 0x18]
call fcn.0042f690
lea ecx, [ebp + 0x28]
call fcn.0042f1e0
lea ecx, [ebp + 0x30]
call fcn.0042f1e0
lea ecx, [ebp + 8]
call fcn.0042f1e0
mov eax, dword [ebp + 4]
push str._____r_n
lea ecx, [eax + 0x1c0]
push ecx
push str.__lang_
push str.3.5.0.30
push str.__version_
add eax, 0x188
push eax
lea eax, [ebp - 0xc]
push str.___stub_locale_
push eax
call fcn.0042fa40
add esp, 0xc
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.0042f9d0
add esp, 0xc
push eax
lea eax, [ebp - 4]
push eax
call fcn.0042f9d0
add esp, 0xc
push eax
lea eax, [ebp + 8]
push eax
call fcn.0042f9d0
add esp, 0xc
push eax
lea eax, [ebp + 0x30]
push eax
call fcn.0042f950
add esp, 0xc
push eax
lea eax, [ebp + 0x28]
push eax
call fcn.0042f9d0
add esp, 0xc
push eax
lea ecx, [ebp + 0x18]
call fcn.0042f690
lea ecx, [ebp + 0x28]
call fcn.0042f1e0
lea ecx, [ebp + 0x30]
call fcn.0042f1e0
lea ecx, [ebp + 8]
call fcn.0042f1e0
lea ecx, [ebp - 4]
call fcn.0042f1e0
lea ecx, [ebp - 0x1c]
call fcn.0042f1e0
lea ecx, [ebp - 0xc]
call fcn.0042f1e0
mov edi, dword [ebp + 0x38]
push esi
lea eax, [ebp - 0x14]
push eax
push str.__cmdline_
lea eax, [edi + 0x3c]
push eax
lea eax, [ebp - 4]
push ebx
push eax
call fcn.0042fa40
add esp, 0xc
push eax
lea eax, [ebp + 8]
push eax
call fcn.0042f9d0
add esp, 0xc
push eax
lea eax, [ebp + 0x30]
push eax
call fcn.0042f950
add esp, 0xc
push eax
lea eax, [ebp + 0x28]
push eax
call fcn.0042f9d0
add esp, 0xc
push eax
lea ecx, [ebp + 0x18]
call fcn.0042f690
lea ecx, [ebp + 0x28]
call fcn.0042f1e0
lea ecx, [ebp + 0x30]
call fcn.0042f1e0
lea ecx, [ebp + 8]
call fcn.0042f1e0
lea ecx, [ebp - 4]
call fcn.0042f1e0
add edi, 0x94
mov ecx, edi
call fcn.00401005
test al, al
jne 0x4128d1
mov ebx, dword [ebp + 0x38]
add ebx, 0x9c
mov ecx, ebx
call fcn.00401005
test al, al
jne 0x4128d1
push esi
push edi
lea eax, [ebp + 0x30]
push str.wndclass_
push eax
call fcn.0042fa40
add esp, 0xc
push eax
lea eax, [ebp + 0x28]
push eax
call fcn.0042f9d0
add esp, 0xc
push eax
lea ecx, [ebp + 0x18]
call fcn.0042f690
lea ecx, [ebp + 0x28]
call fcn.0042f1e0
lea ecx, [ebp + 0x30]
call fcn.0042f1e0
push esi
push ebx
lea eax, [ebp + 0x30]
push str.wndtitle_
push eax
call fcn.0042fa40
add esp, 0xc
push eax
lea eax, [ebp + 0x28]
push eax
call fcn.0042f9d0
add esp, 0xc
push eax
lea ecx, [ebp + 0x18]
call fcn.0042f690
lea ecx, [ebp + 0x28]
call fcn.0042f1e0
lea ecx, [ebp + 0x30]
call fcn.0042f1e0
mov edi, dword [ebp + 0x38]
add edi, 0xac
mov ecx, edi
call fcn.00401005
test al, al
jne 0x41291e
push esi
push edi
lea eax, [ebp + 0x30]
push str.method_
push eax
call fcn.0042fa40
add esp, 0xc
push eax
lea eax, [ebp + 0x28]
push eax
call fcn.0042f9d0
add esp, 0xc
push eax
lea ecx, [ebp + 0x18]
call fcn.0042f690
lea ecx, [ebp + 0x28]
call fcn.0042f1e0
lea ecx, [ebp + 0x30]
call fcn.0042f1e0
push str.___r_n
lea ecx, [ebp + 0x18]
call fcn.0042f630
push str.__playerlaunch_
lea ecx, [ebp + 0x18]
call fcn.0042f630
lea eax, [ebp - 0x4c]
push eax
call fcn.00438570
pop ecx
lea eax, [ebp + 0x20]
push eax
lea ecx, [ebp - 0x4c]
call fcn.00437fd0
lea ecx, [ebp + 0x20]
call fcn.0042ef90
dec eax
cmp byte [ebp + 0x27], 0xff
lea ecx, [ebp + 0x20]
jne 0x412963
mov ecx, dword [ebp + 0x20]
cmp byte [ecx + eax], 0x5c
je 0x412976
push 0x4726c4
lea ecx, [ebp + 0x20]
call fcn.0042f630
push str.RealRealPlayer_
lea ecx, [ebp + 0x20]
call fcn.0042f630
cmp byte [ebp + 0x27], 0xff
lea eax, [ebp + 0x20]
jne 0x41298f
mov eax, dword [ebp + 0x20]
push eax
call fcn.00402008
lea ecx, [ebp + 0x20]
mov dword [esp], str.launch.xml
call fcn.0042f630
cmp byte [ebp + 0x27], 0xff
lea eax, [ebp + 0x20]
jne 0x4129b0
mov eax, dword [ebp + 0x20]
push 0x472a8c
push eax
call fcn.00450908
mov esi, eax
pop ecx
pop ecx
test esi, esi
je 0x4129f5
push esi
push 1
lea ecx, [ebp + 0x18]
call fcn.0042ef90
push eax
push 0
lea ecx, [ebp + 0x18]
call fcn.0042fbb0
push eax
call fcn.00454139
add esp, 0x10
push 0xffffffffffffffff
lea ecx, [ebp + 0x18]
call fcn.0042fc40
push esi
call fcn.004506ac
pop ecx
jmp 0x412a18
push str.actionerrorvaluecreate_xml
lea ecx, [ebp - 0xc]
call fcn.0042f200
mov ecx, dword [ebp + 4]
push 0
lea eax, [ebp - 0xc]
push eax
call fcn.004118f7
lea ecx, [ebp - 0xc]
call fcn.0042f1e0
lea ecx, [ebp + 0x20]
call fcn.0042f1e0
lea ecx, [ebp - 0x4c]
call fcn.00437fa0
lea ecx, [ebp + 0x18]
call fcn.0042f1e0
lea ecx, [ebp + 0x10]
call fcn.0042f1e0
mov edi, dword [ebp + 0x38]
mov ebx, dword [ebp + 4]
lea eax, [edi + 0xa4]
cmp byte [eax + 7], 0xff
jne 0x412a4c
mov eax, dword [eax]
push str.player
push eax
call fcn.0044ebc0
pop ecx
pop ecx
test eax, eax
je 0x412bea
lea esi, [edi + 0xac]
cmp byte [esi + 7], 0xff
mov dword [ebp + 0x38], 1
mov eax, esi
jne 0x412a78
mov eax, dword [esi]
push str.minimized
push eax
call fcn.0044ebc0
pop ecx
pop ecx
test eax, eax
je 0x412aa2
cmp byte [esi + 7], 0xff
jne 0x412a91
mov esi, dword [esi]
push str.restore
push esi
call fcn.0044ebc0
pop ecx
pop ecx
test eax, eax
jne 0x412aa9
mov dword [ebp + 0x38], 6
lea eax, [ebp + 0x1c]
push eax
push dword [ebp + 0x38]
lea eax, [ebp - 0x14]
xor esi, esi
push eax
mov dword [ebp + 0x24], esi
mov dword [ebp + 0x1c], esi
call fcn.004048fb
add esp, 0xc
test eax, eax
je 0x412ad8
push dword [ebp + 0x1c]
mov dword [ebp + 0x24], 1
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea eax, [edi + 0x4c]
cmp byte [eax + 7], 0xff
jne 0x412ae3
mov eax, dword [eax]
push str.main
push eax
call fcn.0044ebc0
pop ecx
pop ecx
test eax, eax
je 0x412b65
cmp dword [edi + 0x1c], esi
jne 0x412b65
mov dword [edi + 0x1c], 1
mov eax, str.true
cmp dword [ebp + 0x24], esi
jne 0x412b0f
mov eax, str.false
push esi
push eax
push str.success
add edi, 0x3c
push edi
lea eax, [ebp + 8]
push str.srcstubactionofferlaunchedvalue
push eax
call fcn.0042fa40
add esp, 0xc
push eax
lea eax, [ebp + 0x30]
push eax
call fcn.0042f9d0
add esp, 0xc
push eax
lea eax, [ebp + 0x28]
push eax
call fcn.0042f9d0
add esp, 0xc
push eax
mov ecx, ebx
call fcn.004118f7
lea ecx, [ebp + 0x28]
call fcn.0042f1e0
lea ecx, [ebp + 0x30]
call fcn.0042f1e0
lea ecx, [ebp + 8]
call fcn.0042f1e0
cmp dword [ebx + 0x398], esi
je 0x412bea
mov dword [ebp + 0x38], esi
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
mov dword [ebp + 0x24], eax
call esi
sub eax, dword [ebp + 0x24]
mov edi, 0x2710
cmp eax, edi
jae 0x412bc2
mov ebx, str.Chrome
push ebx
push ebx
call fcn.0040345e
pop ecx
pop ecx
mov dword [ebp + 0x38], eax
test eax, eax
je 0x412bab
push eax
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
jne 0x412bbf
jmp 0x412bb6
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
call esi
sub eax, dword [ebp + 0x24]
cmp eax, edi
jb 0x412b8e
mov ebx, dword [ebp + 4]
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
xor eax, eax
push 0x13
push eax
push eax
push eax
push eax
cmp dword [ebp + 0x38], eax
je 0x412bdc
push dword [ebp + 0x38]
jmp 0x412bde
push 1
push dword [ebx + 0x234]
call dword [sym.imp.USER32.dll_SetWindowPos]
lea ecx, [ebp - 0x14]
call fcn.0042f1e0
pop esi
mov ecx, dword [ebp + 0x70]
pop edi
xor ecx, ebp
pop ebx
call fcn.0044f6e0
add ebp, 0x74
leave
ret 4