Function at 0x406110
Capabilities:
Check for time delay via gettickcount
Hide graphical window

Disassembly:
push 0xffffffffffffffff
push 0x4250ac
mov eax, dword fs:[0]
push eax
sub esp, 0x44c
mov eax, dword [0x42c2e4]
xor eax, esp
mov dword [esp + 0x448], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x42c2e4]
xor eax, esp
push eax
lea eax, [esp + 0x460]
mov dword fs:[0], eax
push 0x128
xor edi, edi
push 0x40
mov dword [0x42e100], edi
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov ebp, eax
cmp ebp, edi
je 0x40662e
push 0x129e4
call fcn.00412bcf
add esp, 4
mov dword [esp + 0x14], eax
mov dword [esp + 0x468], edi
cmp eax, edi
je 0x40618f
mov ecx, eax
call fcn.00404390
jmp 0x406191
xor eax, eax
mov dword [esp + 0x468], 0xffffffff
cmp eax, edi
mov dword [ebp + 0x14], eax
je 0x406625
push 0x104
lea eax, [esp + 0x50]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea ecx, [esp + 0x4c]
push ecx
lea edx, [esp + 0x154]
push edx
call esi
lea ebx, [ebp + 8]
lea eax, [esp + 0x4c]
push ebx
push eax
call fcn.0040f850
add esp, 8
cmp eax, edi
mov dword [ebp + 4], eax
je 0x406625
push eax
call fcn.0040f920
lea ecx, [esp + 0x50]
push ecx
mov dword [ebp + 0x10], eax
call fcn.0040e7b0
lea edx, [esp + 0x54]
push edx
mov byte [eax], 0
call fcn.0040dfc0
add esp, 0xc
push eax
mov eax, dword [ebp + 0x14]
add eax, 0x3c98
push eax
call esi
mov ecx, dword [ebp + 0x10]
mov esi, dword [ebx]
push ecx
push esi
call fcn.00401d10
mov ebx, eax
add esp, 8
cmp ebx, edi
mov dword [esp + 0x14], ebx
je 0x40661b
add esi, ebx
mov ecx, 0xd
lea edi, [esp + 0x18]
rep movsd dword es:[edi], dword [esi]
mov eax, dword [esp + 0x18]
cmp al, 0x6c
jne 0x40661b
mov edx, eax
shr edx, 8
cmp dl, 0x73
jne 0x40661b
mov ecx, eax
shr ecx, 0x10
cmp cl, 0x66
jne 0x40661b
shr eax, 0x18
cmp al, 0x78
jne 0x40661b
mov al, byte [esp + 0x20]
test al, 8
je 0x406284
mov byte [0x42e5c8], 1
test al, 4
jne 0x406291
call fcn.00401af0
test al, al
je 0x4062bc
cmp byte [0x42e5c8], 0
jne 0x4062bc
mov edx, dword [0x42e4ac]
push 0
push 0x401ae0
push 0
push 0xa5
push edx
call dword [sym.imp.USER32.dll_CreateDialogParamA]
mov dword [0x42e5c4], eax
jmp 0x4062c1
mov eax, dword [0x42e5c4]
test eax, eax
je 0x406323
cmp byte [0x42e5c8], 0
je 0x4062f1
push 4
push 1
push 1
push 0
push 0
push 0
push eax
call dword [sym.imp.USER32.dll_SetWindowPos]
mov eax, dword [0x42e5c4]
push 0
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x406318
push 0
push eax
call fcn.0040f7f0
mov ecx, dword [0x42e5c4]
add esp, 8
push 5
push ecx
call dword [sym.imp.USER32.dll_ShowWindow]
mov edx, dword [0x42e5c4]
push edx
call dword [sym.imp.USER32.dll_UpdateWindow]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x42e5c0], eax
test dword [esp + 0x1c], 0x100000
jne 0x406371
mov ecx, dword [ebp + 0x10]
mov edx, dword [esp + 0x28]
cmp ecx, edx
je 0x406350
mov eax, ecx
sub eax, edx
cmp eax, 1
je 0x406350
mov dword [0x42e100], 6
jmp 0x406625
mov eax, ecx
sub eax, edx
sub eax, 1
neg eax
sbb eax, eax
add eax, 1
push eax
push ebx
push ecx
mov ecx, dword [ebp + 8]
push ecx
call fcn.004024a0
add esp, 0x10
test eax, eax
je 0x406341
mov edi, dword [esp + 0x24]
push edi
push 0x40
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov ebx, eax
test ebx, ebx
jne 0x406393
mov dword [0x42e100], 2
jmp 0x406625
mov esi, dword [esp + 0x14]
mov edx, dword [ebp + 8]
add esi, 0x34
push edi
add edx, esi
push edx
push ebx
call fcn.00412c90
mov eax, dword [esp + 0x3e]
add esp, 0xc
test eax, eax
je 0x4063f3
push eax
push 0x40
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov ecx, dword [ebp + 0x14]
mov dword [ecx + 0x11b94], eax
mov edx, dword [ebp + 0x14]
mov eax, dword [edx + 0x11b94]
test eax, eax
jne 0x4063dd
push ebx
call dword [sym.imp.KERNEL32.dll_LocalFree]
jmp 0x406625
mov ecx, dword [esp + 0x32]
mov edx, dword [ebp + 8]
add esi, edi
push ecx
add edx, esi
push edx
push eax
call fcn.00412c90
add esp, 0xc
mov eax, dword [ebp + 0x14]
push ebx
push eax
call fcn.004059d0
add esp, 8
test eax, eax
push ebx
je 0x4063d2
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov edi, dword [ebp + 0x14]
mov edx, dword [esp + 0x1c]
mov ecx, 0xd
lea esi, [esp + 0x18]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp + 0x14]
mov dword [ecx + 0x3c90], edx
mov eax, dword [ebp + 0x14]
mov ecx, dword [esp + 0x20]
mov dword [eax + 0x3c94], ecx
mov edx, dword [ebp + 0x14]
mov eax, dword [esp + 0x3a]
movzx ecx, word [esp + 0x3e]
mov dword [edx + 0x12228], eax
mov edx, dword [ebp + 0x14]
movzx eax, word [esp + 0x40]
mov dword [edx + 0x12398], ecx
mov ecx, dword [ebp + 0x14]
mov dword [ecx + 0x128d4], eax
mov eax, dword [ebp + 0x14]
mov edx, dword [eax + 0x3c90]
shr edx, 3
and edx, 0xffffff01
push edx
lea ecx, [eax + 0x8d2]
mov eax, dword [eax + 0x3da8]
push ecx
lea edx, [esp + 0x360]
push edx
push eax
lea ecx, [esp + 0x264]
push ecx
call fcn.0040cf20
add esp, 0x14
test al, al
je 0x406625
mov eax, dword [ebp + 0x14]
lea edx, [esp + 0x358]
push edx
add eax, 0x7ce
push eax
call fcn.00401f30
lea ecx, [esp + 0x25c]
push ecx
call fcn.0040e060
mov eax, dword [ebp + 0x14]
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
add esp, 0xc
lea edx, [esp + 0x254]
push edx
add eax, 0x5c6
push eax
call esi
mov eax, dword [ebp + 0x14]
test byte [eax + 0x3c90], 4
je 0x40651e
add eax, 0x5c6
push eax
call fcn.0040e060
mov eax, dword [ebp + 0x14]
add esp, 4
lea ecx, [eax + 0x3c98]
push ecx
add eax, 0x5c6
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov edx, dword [ebp + 0x14]
add edx, 0x5c6
push edx
call fcn.0040e060
add esp, 4
mov eax, dword [ebp + 0x14]
lea ecx, [eax + 0x5c6]
push ecx
add eax, 0x6ca
push eax
call fcn.00401f30
mov edx, dword [ebp + 0x14]
add esp, 8
xor eax, eax
test byte [edx + 0x3c90], 8
je 0x406549
mov eax, 1
cmp dword [esp + 0x32], 0
jne 0x406554
test eax, eax
je 0x406590
push 0x800
push 0x42
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov ecx, dword [ebp + 0x14]
mov dword [ecx + 0x3d9c], eax
mov edx, dword [ebp + 0x14]
mov eax, dword [edx + 0x3d9c]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov ecx, dword [ebp + 0x14]
mov dword [ecx + 0x3da0], eax
mov edx, dword [ebp + 0x14]
mov dword [edx + 0x3da4], 0x800
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x36]
add eax, ecx
push 0xec
mov dword [ebp], eax
call fcn.00412bcf
add esp, 4
mov dword [esp + 0x14], eax
mov dword [esp + 0x468], 1
test eax, eax
je 0x4065c6
mov ecx, eax
call fcn.00411660
jmp 0x4065c8
xor eax, eax
mov dword [esp + 0x468], 0xffffffff
lea edx, [esp + 0x150]
push edx
push 0x42e4b4
mov dword [ebp + 0xc], eax
call esi
mov eax, dword [ebp]
mov dword [0x42e5b8], eax
mov ecx, dword [ebp]
push ecx
mov ecx, dword [ebp + 0xc]
lea edx, [esp + 0x154]
push edx
call fcn.004118c0
test eax, eax
je 0x4063d1
mov eax, dword [ebp + 0x14]
push eax
mov ecx, 0x42e5f0
call fcn.00404760
mov eax, ebp
jmp 0x406630
mov dword [0x42e100], 1
push ebp
call fcn.00405830
add esp, 4
xor eax, eax
mov ecx, dword [esp + 0x460]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x448]
xor ecx, esp
call fcn.004121f9
add esp, 0x458
ret