Function at 0x404610
Capabilities:
Check for time delay via gettickcount
Set current directory

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x108
cmp dword [0x4fb9bc], 0
push ebx
push ebp
push esi
push edi
jg 0x404a42
mov ecx, dword [0x4f90f4]
cmp byte [ecx + 0xed], 0
je 0x404a42
mov eax, dword [0x4fb9d0]
cmp eax, dword [0x4f90f0]
jge 0x404a42
cmp dword [0x4f90ec], 0
je 0x404a42
cmp dword [0x4fb9b8], 0
jne 0x404a42
cmp byte [ecx + 0xec], 0
mov edx, dword [sym.imp.KERNEL32.dll_GetTickCount]
jne 0x4046bc
cmp byte [ecx + 0xee], 0
jne 0x4046af
cmp dword [ecx + 0xe0], 0xffffffff
jle 0x4046af
call edx
mov ecx, dword [0x4f90f4]
mov edx, dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [ecx + 0xdc]
cmp eax, dword [ecx + 0xe0]
jb 0x4046af
mov byte [ecx + 0xec], 1
cmp byte [ecx + 0xec], 0
je 0x404a42
mov ebx, dword [0x4fe630]
xor ebp, ebp
mov dword [esp + 0x14], ebp
test ebx, ebx
je 0x404a42
cmp byte [ebx + 0x11], 0
je 0x4046f8
cmp byte [ebx + 0x10], 0
ja 0x4046f8
mov eax, dword [ebx + 0xc]
cmp eax, dword [ecx + 0x2c]
jl 0x4046f8
call edx
mov edi, eax
mov ecx, edi
sub ecx, dword [ebx + 8]
cmp ecx, dword [ebx + 4]
jae 0x404722
mov ecx, dword [0x4f90f4]
mov esi, dword [ebx + 0x14]
mov edx, dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ebx, esi
test esi, esi
jne 0x4046d0
test ebp, ebp
je 0x404a42
lea ecx, [esp + 0x18]
call fcn.00405100
mov al, 1
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret
test ebp, ebp
jne 0x4047df
mov esi, dword [0x4fb9cc]
mov dword [esp + 0x14], 1
cmp byte [esi + 0x17], 0
jne 0x404741
mov esi, dword [esi + 0xc]
test byte [esi + 0x15], 8
je 0x40474e
mov ecx, esi
call fcn.00401510
mov al, byte [esi + 0x17]
cmp al, 1
jne 0x404766
test byte [esi + 0x15], 4
je 0x404761
push esi
call fcn.0044f420
mov ecx, dword [esi + 8]
jmp 0x4047b4
cmp al, 2
jne 0x4047af
mov ecx, dword [0x4fe6e4]
test ecx, ecx
jne 0x4047b4
mov ebp, dword [sym.imp.USER32.dll_IsClipboardFormatAvailable]
push 0xd
call ebp
test eax, eax
jne 0x404797
push 0xf
call ebp
test eax, eax
mov ecx, 0x4cfc34
mov eax, 0x4cfc40
cmove ecx, eax
jmp 0x4047b4
push 0
call fcn.004068c0
cmp eax, 0xffffffff
mov ecx, 0x4cfc40
cmovne ecx, dword [0x4fe6e0]
jmp 0x4047b4
mov ecx, 0x4fd2d8
push 0x7f
push ecx
lea eax, [esp + 0x20]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
inc dword [0x4fb9d0]
xor eax, eax
add esp, 0xc
mov word [esp + 0x116], ax
add dword [0x4f90f4], 0x108
cmp byte [ebx + 0x12], 0
mov dword [ebx + 8], edi
je 0x404832
mov byte [ebx + 0x11], 0
sub dword [0x4fe63c], 1
jne 0x404832
cmp dword [0x4fb9ec], 0
jne 0x404832
cmp dword [0x4fc548], 0
jne 0x404832
cmp byte [0x4fb8a6], 0
je 0x404832
push 9
push dword [0x4fb9e8]
call dword [sym.imp.USER32.dll_KillTimer]
movzx ecx, byte [0x4fb8a6]
xor edx, edx
test eax, eax
cmovne ecx, edx
mov byte [0x4fb8a6], cl
mov eax, dword [0x50009c]
mov dword [0x4fe694], edi
mov edx, dword [ebx]
test al, 1
jne 0x404859
push 0
or eax, 1
mov ecx, 0x5000a0
push 0
mov dword [0x50009c], eax
call fcn.0042d690
mov eax, dword [0x4fe1c8]
mov ecx, dword [edx]
cmp ecx, dword [eax]
je 0x40486c
cmp ecx, dword [0x5000a0]
jne 0x404880
mov eax, 8
mov eax, dword [edx + eax]
test eax, eax
je 0x404880
mov dl, byte [eax]
mov byte [esp + 0x13], dl
jmp 0x404885
mov byte [esp + 0x13], 0
cmp dword [0x4fb9e4], 0
mov ecx, 0x42
mov ebp, dword [0x4f90f4]
mov esi, 0x4fb8b0
mov eax, dword [ebx + 0xc]
mov edi, ebp
rep movsd dword es:[edi], dword [esi]
xorps xmm0, xmm0
mov dword [ebp + 0x2c], eax
movlpd qword [0x4fe680], xmm0
je 0x4048cf
mov eax, dword [0x4fab50]
mov ecx, 0x4cfc40
test eax, eax
je 0x4048c8
mov eax, dword [eax]
test eax, eax
cmovne ecx, eax
push ecx
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
mov al, byte [ebp + 0xee]
test al, al
jne 0x4048fe
cmp byte [esp + 0x13], 0x65
sete al
mov byte [ebp + 0xee], al
jne 0x4048fe
mov dword [ebp], 0xffffffff
mov dword [ebp + 4], 0xffffffff
mov dword [ebp + 0x24], 0xffffffff
cmp dword [0x4fe68c], 0
je 0x404910
cmp dword [0x4fe688], 0
jne 0x404914
test al, al
je 0x40494b
mov byte [ebp + 0xec], 0
test al, al
jne 0x40494b
cmp dword [0x4fe68c], 0
jge 0x404934
mov dword [ebp + 0xe0], 0xffffffff
jmp 0x40494b
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp + 0xdc], eax
mov eax, dword [0x4fe68c]
mov dword [ebp + 0xe0], eax
mov eax, dword [0x4f90f4]
mov dword [eax + 0xc0], ebx
inc byte [ebx + 0x10]
mov ecx, dword [0x4faaec]
cmp ecx, dword [0x4faaf0]
jne 0x404972
call fcn.00406f70
mov ecx, dword [0x4faaec]
cmp ecx, dword [0x4faae8]
jb 0x404987
mov eax, dword [0x4fe1c4]
mov dword [ecx], eax
mov ecx, dword [0x4faaec]
add ecx, 0xc
push 0
push 0
mov dword [0x4faaec], ecx
push 0
mov dword [ecx], 0
mov dword [ecx + 4], str.Timer
mov dword [ecx + 8], 0
mov ecx, dword [ebx]
mov edx, ecx
push 0
push str.call
call fcn.0049d2f0
sub dword [0x4faaec], 0xc
add esp, 0x14
dec byte [ebx + 0x10]
cmp byte [ebx + 0x12], 0
mov esi, dword [ebx + 0x14]
je 0x404a22
cmp byte [ebx + 0x11], 0
jne 0x404a22
mov edx, dword [ebx]
test edx, edx
je 0x404a22
mov eax, dword [0x50009c]
mov ecx, edx
test al, 1
jne 0x4049ff
push 0
or eax, 1
mov ecx, 0x5000a0
push 0
mov dword [0x50009c], eax
call fcn.0042d690
mov ecx, dword [ebx]
mov eax, dword [0x4fe1c8]
mov edx, dword [edx]
cmp edx, dword [eax]
je 0x404a22
cmp edx, dword [0x5000a0]
je 0x404a22
test ecx, ecx
je 0x404a1c
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [ebx], 0
cmp dword [ebx], 0
jne 0x404a33
push 0
mov ecx, 0x4fdb78
call fcn.004344a0
mov ecx, dword [0x4f90f4]
mov ebp, dword [esp + 0x14]
jmp 0x4046fb
pop edi
xor al, al
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret