Function at 0x40a2b0
Capabilities:
Check for time delay via gettickcount
Create directory
Get common file path
Get file attributes
Read .ini file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, 0x4634
call fcn.00412a60
mov eax, dword [0x41b014]
xor eax, esp
mov dword [esp + 0x4630], eax
push ebx
push esi
push edi
push 0x400
lea eax, [esp + 0x1e3c]
mov ebx, edx
mov esi, ecx
mov dword [esp + 0x10], ebx
push 0
push eax
mov dword [esp + 0x1c], esi
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x1a38]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x530]
push 0x104
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x28]
push 0x104
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x530]
push eax
push 0
push 0
push 5
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathA]
push 0
push 0x10
lea eax, [esp + 0x1a40]
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathA]
push 0x400
lea eax, [esp + 0x63c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea edi, [esi + 4]
lea eax, [esp + 0x1a38]
push edi
push eax
lea eax, [esp + 0x640]
push str._s_s.ini
push eax
call fcn.00403990
add esp, 0x10
lea eax, [esp + 0x638]
push eax
push 0
push str.time
push edi
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
push 0
mov esi, eax
call dword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
add esp, 4
sub eax, esi
test esi, esi
je 0x40a956
cmp eax, 0x2a300
jbe 0x40a956
push 0x4161f8
lea eax, [esp + 0x534]
push eax
lea eax, [esp + 0x30]
push 0x415bac
push eax
call fcn.00403970
push edi
lea eax, [esp + 0x1e4c]
push 0x4157ec
push eax
call fcn.00403990
lea esi, [esp + 0x1e54]
add esp, 0x1c
lea ecx, [esi + 1]
nop dword [eax]
mov al, byte [esi]
inc esi
test al, al
jne 0x40a410
lea eax, [esp + 0x28]
sub esi, ecx
push 0x41583c
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
mov ebx, eax
add esp, 8
test ebx, ebx
je 0x40a44e
push ebx
push esi
lea eax, [esp + 0x1e40]
push 1
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
push ebx
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
add esp, 0x14
push edi
push 0x4157a4
lea eax, [esp + 0x538]
push eax
lea eax, [esp + 0x34]
push 0x41620c
push eax
call fcn.00403970
mov ebx, dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
lea eax, [esp + 0x3c]
add esp, 0x14
push eax
call ebx
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
cmp eax, 0x10
je 0x40a48f
push 0
lea eax, [esp + 0x2c]
push eax
call esi
push edi
push 0x4157a4
lea eax, [esp + 0x538]
push eax
lea eax, [esp + 0x34]
push 0x416214
push eax
call fcn.00403970
add esp, 0x14
lea eax, [esp + 0x28]
push eax
call ebx
cmp eax, 0x10
je 0x40a4c4
push 0
lea eax, [esp + 0x2c]
push eax
call esi
push edi
push 0x4157a4
lea eax, [esp + 0x538]
push eax
lea eax, [esp + 0x34]
push str._s_s_s_
push eax
call fcn.00403970
add esp, 0x14
lea eax, [esp + 0x28]
push 0x416238
push 0x82
push eax
call fcn.00405130
mov edx, dword [esp + 0x1c]
add esp, 0xc
mov eax, dword [edx]
cmp eax, 1
je 0x40a528
cmp eax, 2
jne 0x40a517
lea eax, [esp + 0x28]
push eax
push 0x41625c
jmp 0x40a532
cmp eax, 3
jne 0x40a528
lea eax, [esp + 0x28]
push eax
push 0x416260
jmp 0x40a532
lea eax, [esp + 0x28]
push eax
push 0x416108
push str.Worldid
push 0x416250
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
push 0x400
lea eax, [esp + 0x134]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x1638]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0xa38]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0xe38]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x1238]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov ebx, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [esp + 0x644]
add esp, 0xc
xor esi, esi
push eax
push 0x400
lea eax, [esp + 0x138]
push eax
push 0x415b18
push 0x415038
push edi
call ebx
test eax, eax
je 0x40a6f2
lea eax, [esp + 0x1638]
mov edx, 0x400
push eax
lea ecx, [esp + 0x134]
call fcn.004033b0
mov esi, eax
add esp, 4
test esi, esi
je 0x40a841
push 0x400
lea eax, [esp + 0x134]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x638]
push eax
push 0x400
lea eax, [esp + 0x138]
push eax
push 0x415b18
push 0x415060
push edi
call ebx
lea eax, [esp + 0xa38]
mov edx, 0x400
push eax
lea ecx, [esp + 0x134]
call fcn.004033b0
add esp, 4
lea eax, [esp + 0x130]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x638]
push eax
push 0x400
lea eax, [esp + 0x138]
push eax
push 0x415b18
push 0x415050
push edi
call ebx
lea eax, [esp + 0xe38]
mov edx, 0x400
push eax
lea ecx, [esp + 0x134]
call fcn.004033b0
add esp, 4
lea eax, [esp + 0x130]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x638]
push eax
push 0x400
lea eax, [esp + 0x138]
push eax
push 0x415b18
push 0x415040
jmp 0x40a822
lea eax, [esp + 0x638]
push eax
push 0x400
lea eax, [esp + 0x138]
push eax
push 0x415b18
push str.0107_0088
push edi
call ebx
test eax, eax
je 0x40a841
lea eax, [esp + 0x1638]
mov edx, 0x400
push eax
lea ecx, [esp + 0x134]
call fcn.004033b0
mov esi, eax
add esp, 4
test esi, esi
je 0x40a841
push 0x400
lea eax, [esp + 0x134]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x638]
push eax
push 0x400
lea eax, [esp + 0x138]
push eax
push 0x415b18
push str.0107_0001
push edi
call ebx
lea eax, [esp + 0xa38]
mov edx, 0x400
push eax
lea ecx, [esp + 0x134]
call fcn.004033b0
add esp, 4
lea eax, [esp + 0x130]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x638]
push eax
push 0x400
lea eax, [esp + 0x138]
push eax
push 0x415b18
push str.0109_0001
push edi
call ebx
lea eax, [esp + 0xe38]
mov edx, 0x400
push eax
lea ecx, [esp + 0x134]
call fcn.004033b0
add esp, 4
lea eax, [esp + 0x130]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x638]
push eax
push 0x400
lea eax, [esp + 0x138]
push eax
push 0x415b18
push str.0109_0038
push edi
call ebx
lea eax, [esp + 0x1238]
mov edx, 0x400
push eax
lea ecx, [esp + 0x134]
call fcn.004033b0
add esp, 4
mov ecx, dword [0x41bca4]
mov ebx, dword [sym.imp.mfc140u.dll_CListCtrl::SetItemText]
push 0x416294
push 0xb
push dword [esp + 0x14]
call ebx
test esi, esi
je 0x40a92c
mov esi, dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoll]
xorps xmm0, xmm0
push ecx
push edi
movups xmmword [esp + 0x20], xmm0
call esi
add esp, 4
lea edx, [esp + 0xa3c]
lea ecx, [esp + 0x163c]
push eax
lea eax, [esp + 0x1240]
push eax
lea eax, [esp + 0xe44]
push eax
call fcn.00402560
add esp, 4
push edi
call esi
add esp, 4
mov ecx, eax
call fcn.00402d00
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
add esp, 0xc
call esi
mov ebx, eax
lea eax, [esp + 0x638]
push eax
push 0
push str.time
push edi
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
test eax, eax
jne 0x40af15
call esi
mov ecx, eax
mov eax, 0x10624dd3
sub ecx, ebx
mul ecx
shr edx, 6
cmp edx, 5
ja 0x40af15
push 0
push 0xa
call fcn.00403220
add esp, 8
lea eax, [esp + 0x638]
push eax
push 0
push str.time
push edi
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
test eax, eax
je 0x40a8d6
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x4630]
xor ecx, esp
call fcn.00411c65
mov esp, ebp
pop ebp
ret
mov ecx, dword [0x41bca4]
push 0x4162a0
push 0xb
push dword [esp + 0x14]
call ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x4630]
xor ecx, esp
call fcn.00411c65
mov esp, ebp
pop ebp
ret
push 0x400
lea eax, [esp + 0xa3c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0xe38]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x2638]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x2238]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x1638]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x1238]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x2a38]
push 0x800
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x1a38]
push eax
lea eax, [esp + 0x123c]
push str._sLoginData.ini
push eax
call fcn.00403990
add esp, 0xc
lea eax, [esp + 0x1a38]
push eax
lea eax, [esp + 0x163c]
push 0x4162c0
push eax
call fcn.00403990
mov esi, dword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__access]
lea eax, [esp + 0x1244]
add esp, 0xc
push 0
push eax
call esi
add esp, 8
test eax, eax
je 0x40aa67
lea eax, [esp + 0x1a38]
push eax
lea eax, [esp + 0x123c]
push str._sLoginData.ini
push eax
call fcn.00403990
add esp, 0xc
lea eax, [esp + 0x1638]
push 0
push eax
call esi
add esp, 8
test eax, eax
jne 0x40abec
movaps xmm0, xmmword [0x417580]
push 0x800
push eax
lea eax, [esp + 0x3240]
push eax
movups xmmword [esp + 0x24], xmm0
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x1638]
push eax
push 0x800
lea eax, [esp + 0x3240]
push eax
push 0x415b18
push 0x4162d4
push edi
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov ebx, eax
test ebx, ebx
je 0x40abe8
push 0xc00
lea eax, [esp + 0x3a3c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
xor esi, esi
xor ecx, ecx
test ebx, ebx
js 0x40ab08
nop
mov al, byte [esp + ecx + 0x3238]
cmp al, 0x20
je 0x40ab03
mov byte [esp + esi + 0x3a38], al
inc esi
inc ecx
cmp ecx, ebx
jle 0x40aaf0
lea edx, [esp + 0x3a38]
lea ecx, [esp + 0x3238]
call fcn.00403320
lea ecx, [esp + 0x14]
mov eax, esi
push ecx
cdq
lea ecx, [esp + 0x134]
push ecx
sub eax, edx
lea ecx, [esp + 0x20]
sar eax, 1
push ecx
push eax
mov dword [esp + 0x24], eax
lea eax, [esp + 0x3a48]
push eax
call fcn.0040a2a0
add esp, 0x14
push 0
call dword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
sub eax, dword [esp + 0x134]
add esp, 4
cmp dword [esp + 0x14], 0
je 0x40abc8
cmp eax, 0x2a300
jae 0x40abc8
mov ecx, dword [0x41bca4]
push 0x4162dc
push 0xb
push dword [esp + 0x14]
call dword [sym.imp.mfc140u.dll_CListCtrl::SetItemText]
push ecx
lea eax, [esp + 0x2c8]
push eax
lea eax, [esp + 0x244]
push eax
lea eax, [esp + 0x258]
push eax
push edi
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoll]
mov edx, dword [esp + 0x24]
add esp, 4
mov ecx, eax
mov edx, dword [edx]
call fcn.00402e90
add esp, 0x10
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x4630]
xor ecx, esp
call fcn.00411c65
mov esp, ebp
pop ebp
ret
mov ebx, dword [esp + 0xc]
mov ecx, dword [0x41bca4]
push 0x4162e8
push 0xb
push ebx
call dword [sym.imp.mfc140u.dll_CListCtrl::SetItemText]
mov esi, dword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__access]
jmp 0x40abec
mov ebx, dword [esp + 0xc]
lea eax, [esp + 0x638]
push 0
push eax
call esi
add esp, 8
test eax, eax
jne 0x40adb1
lea eax, [esp + 0x638]
push eax
push 0x400
lea eax, [esp + 0xa40]
push eax
push 0x415b18
push str.buf16bytesGTKey_ST
push edi
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
test eax, eax
je 0x40adb1
xor esi, esi
xor eax, eax
nop word [eax + eax]
mov cl, byte [esp + eax + 0xa38]
cmp cl, 0x20
je 0x40ac54
mov byte [esp + esi + 0xe38], cl
inc esi
mov cl, byte [esp + eax + 0xa39]
cmp cl, 0x20
je 0x40ac68
mov byte [esp + esi + 0xe38], cl
inc esi
mov cl, byte [esp + eax + 0xa3a]
cmp cl, 0x20
je 0x40ac7c
mov byte [esp + esi + 0xe38], cl
inc esi
mov cl, byte [esp + eax + 0xa3b]
cmp cl, 0x20
je 0x40ac90
mov byte [esp + esi + 0xe38], cl
inc esi
mov cl, byte [esp + eax + 0xa3c]
cmp cl, 0x20
je 0x40aca4
mov byte [esp + esi + 0xe38], cl
inc esi
add eax, 5
cmp eax, 0x400
jle 0x40ac40
lea edx, [esp + 0xe38]
lea ecx, [esp + 0xa38]
call fcn.00403320
mov eax, esi
cdq
sub eax, edx
sar eax, 1
je 0x40adab
mov ecx, dword [0x41bca4]
push 0x4162dc
push 0xb
push ebx
call dword [sym.imp.mfc140u.dll_CListCtrl::SetItemText]
push 0x400
lea eax, [esp + 0xa3c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov ebx, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [esp + 0x644]
add esp, 0xc
push eax
push 0x400
lea eax, [esp + 0xa40]
push eax
push 0x415b18
push str.bufServiceTicket
push edi
call ebx
lea eax, [esp + 0x2638]
mov edx, 0x400
push eax
lea ecx, [esp + 0xa3c]
call fcn.004033b0
add esp, 4
lea eax, [esp + 0xa38]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x638]
push eax
push 0x400
lea eax, [esp + 0xa40]
push eax
push 0x415b18
push str.bufST_PTLOGIN
push edi
call ebx
lea eax, [esp + 0x2238]
mov edx, 0x400
push eax
lea ecx, [esp + 0xa3c]
call fcn.004033b0
lea eax, [esp + 0x223c]
push eax
lea eax, [esp + 0xe40]
push eax
lea eax, [esp + 0x2644]
jmp 0x40ab98
mov esi, dword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__access]
lea eax, [esp + 0x1238]
push 0
push eax
call esi
add esp, 8
test eax, eax
jne 0x40af01
push 0x120
push eax
lea eax, [esp + 0x138]
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x1238]
push eax
push 0xc00
lea eax, [esp + 0x2a40]
push eax
push 0x415b18
push str.LoginData
push edi
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [esp + 0x2a38]
mov ebx, eax
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40ae10
sub ecx, edx
jne 0x40ae3d
push ecx
lea eax, [esp + 0x63c]
push eax
call esi
add esp, 8
test eax, eax
je 0x40ae3d
push 0x4162fc
push 0xb
push dword [esp + 0x14]
jmp 0x40af09
mov ecx, dword [0x41bca4]
push 0x4162dc
push 0xb
push dword [esp + 0x14]
call dword [sym.imp.mfc140u.dll_CListCtrl::SetItemText]
push 0x400
lea eax, [esp + 0xe3c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
xor esi, esi
xor ecx, ecx
test ebx, ebx
js 0x40ae8b
mov al, byte [esp + ecx + 0x2a38]
cmp al, 0x20
je 0x40ae86
mov byte [esp + esi + 0xe38], al
inc esi
inc ecx
cmp ecx, ebx
jle 0x40ae73
lea edx, [esp + 0xe38]
lea ecx, [esp + 0x2a38]
call fcn.00403320
mov eax, esi
cdq
sub eax, edx
sar eax, 1
push eax
lea eax, [esp + 0xe3c]
push eax
lea eax, [esp + 0x138]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
push 0
call dword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
sub eax, dword [esp + 0x138]
add esp, 4
cmp eax, 0x2a300
jbe 0x40aee4
push 0x4162a0
push 0xb
push dword [esp + 0x14]
jmp 0x40af09
push ecx
lea eax, [esp + 0x1d4]
push eax
lea eax, [esp + 0x140]
push eax
lea eax, [esp + 0x158]
jmp 0x40ab98
push 0x4162a0
push 0xb
push ebx
mov ecx, dword [0x41bca4]
call dword [sym.imp.mfc140u.dll_CListCtrl::SetItemText]
mov ecx, dword [esp + 0x463c]
xor eax, eax
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.00411c65
mov esp, ebp
pop ebp
ret