Function at 0x463974
Capabilities:
Check for time delay via gettickcount
Check if file exists
Get common file path
Get file attributes
Get file system object information

Disassembly:
push ebp
mov ebp, esp
push eax
mov eax, 4
add esp, 0xfffff004
push eax
dec eax
jne 0x46397d
mov eax, dword [ebp - 4]
add esp, 0xfffff704
push ebx
push esi
push edi
mov dword [ebp - 0xc34], edx
mov ebx, eax
mov eax, 0x4a8124
call fcn.00495388
mov word [ebp - 0xc20], 8
inc dword [0x4c4de8]
inc dword [ebp - 0xc14]
mov word [ebp - 0xc20], 0x14
call fcn.0049d37c
mov dword [ebp - 0xc38], eax
push 1
push 0xffffffffffffffff
push 0x100c
push dword [ebx]
call sub.USER32.DLL_SendMessageA
mov dword [ebp - 0xc3c], eax
mov eax, 0x4c29c4
mov edx, 1
call fcn.00449524
mov eax, 0x1c2
call fcn.0041202c
mov edx, eax
mov eax, 0x4c29c4
call fcn.00449584
mov eax, dword [0x4c4e00]
test eax, eax
je 0x463a22
push eax
call sub.KERNEL32.DLL_FindCloseChangeNotification
mov dword [0x4c4e00], 0xffffffff
mov byte [ebp - 0xc3d], 0
mov word [ebp - 0x1854], 0
lea edx, [ebp - 0x1054]
push edx
push 0x400
call sub.KERNEL32.DLL_GetCurrentDirectoryA
call fcn.0040ffc8
test eax, eax
je 0x463a5d
lea ecx, [ebp - 0x1854]
push ecx
push 0x800
call sub.KERNEL32.DLL_GetCurrentDirectoryW
cmp byte [ebx + 0x41d], 0
je 0x463a75
mov eax, 0x4c29b4
call fcn.0047f47c
jmp 0x463b89
lea eax, [ebp - 0x1054]
xor edx, edx
call fcn.0040bed4
test al, al
jne 0x463af7
cmp word [ebp - 0x1854], 0
jne 0x463ab0
lea ecx, [ebp - 0x1054]
push ecx
call sub.KERNEL32.DLL_GetFileAttributesA
cmp eax, 0xffffffff
jne 0x463ab0
lea eax, [ebp - 0x1054]
call fcn.0040ba60
test eax, eax
jne 0x463ada
cmp word [ebp - 0x1854], 0
je 0x463af7
lea edx, [ebp - 0x1854]
push edx
call sub.KERNEL32.DLL_GetFileAttributesW
cmp eax, 0xffffffff
jne 0x463af7
lea eax, [ebp - 0x1854]
call fcn.0040baec
test eax, eax
je 0x463af7
mov eax, 0x4a7e00
xor edx, edx
call fcn.0046ed24
xor ecx, ecx
mov cl, al
cmp ecx, 1
sbb eax, eax
neg eax
mov byte [ebp - 0xc3d], al
lea eax, [ebp - 0x1054]
call fcn.0040ba60
cmp byte [eax], 0
jne 0x463b0d
lea eax, [ebp - 0x1054]
call fcn.00450a3c
lea eax, [ebp - 0x1054]
call fcn.0040bf3c
mov esi, eax
cmp esi, 0xffffffff
je 0x463b5c
call fcn.0046ed00
mov ecx, esi
mov edx, 1
shl edx, cl
and eax, edx
jne 0x463b5c
dec dword [ebp - 0xc14]
cmp dword [0x4c4de8], 0
jle 0x463b4b
dec dword [0x4c4de8]
mov eax, dword [ebp - 0xc30]
mov dword fs:[0], eax
jmp 0x46436f
cmp byte [ebp - 0xc3d], 0
jne 0x463b89
mov eax, 0x4c29b4
call fcn.0047f9c4
mov eax, 0x4c297c
call fcn.004698c8
lea edx, [ebp - 0x1054]
mov eax, 0x4c297c
call fcn.00469a94
push 0
push 0
push 0xb
push dword [ebx]
call sub.USER32.DLL_SendMessageA
mov eax, ebx
call fcn.00468654
push 0xffffffffffffffff
push dword [ebx + 8]
call sub.COMCTL32.DLL_ImageList_Remove
cmp byte [ebp - 0xc3d], 0
je 0x463bb4
xor eax, eax
jmp 0x463bd1
push 0x4401
push 0x160
lea edx, [ebp - 0x19b4]
push edx
push 0
push 0x4a7e01
call sub.SHELL32.DLL_SHGetFileInfoA
test eax, eax
jne 0x463c11
lea eax, [ebp - 0x1db4]
mov edx, 0x400
call fcn.0046ec68
cmp byte [ebp - 0xc3d], 0
je 0x463bf2
xor eax, eax
jmp 0x463c11
push 0x4401
lea edx, [ebp - 0x19b4]
push 0x160
push edx
lea ecx, [ebp - 0x1db4]
push 0
push ecx
call sub.SHELL32.DLL_SHGetFileInfoA
push eax
push 1
push 0x1003
push dword [ebx]
call sub.USER32.DLL_SendMessageA
mov byte [ebp - 0xc3e], 0
mov edx, 0x4a7e0c
mov eax, 0x4a7e03
mov ecx, 1
call fcn.0046c37c
test eax, eax
setne al
and eax, 1
mov byte [ebp - 0xc3f], al
cmp byte [ebx + 0x41d], 0
je 0x463c5e
mov eax, ebx
call fcn.004643bc
jmp 0x4641c3
mov word [ebp - 0xc20], 0x2c
lea eax, [ebp - 0xc0c]
call fcn.004126ec
inc dword [ebp - 0xc14]
mov edx, 0x4a7e1b
mov word [ebp - 0xc20], 0x38
lea eax, [ebp - 0xc0c]
call fcn.0041278c
lea eax, [ebp - 0x2254]
call fcn.004137a4
lea eax, [ebp - 0x2228]
call fcn.004137a4
lea eax, [ebp - 0x21fc]
call fcn.004137a4
mov byte [ebp - 0xc40], 0
xor edi, edi
jmp 0x464050
cmp byte [ebp - 0xc3e], 0
jne 0x463cfc
test edi, 0x1f
jne 0x463cfc
call fcn.0049d37c
sub eax, dword [ebp - 0xc38]
cmp eax, 0x1f4
jle 0x463cfc
mov byte [ebp - 0xc3e], 1
push 0x7f02
push 0
call sub.USER32.DLL_LoadCursorA
push eax
call sub.USER32.DLL_SetCursor
push 0x4a7e01
lea eax, [ebp - 0x2e68]
push eax
call fcn.00494f0c
add esp, 8
test eax, eax
je 0x464050
mov dword [ebp - 0x2e90], 7
mov dword [ebp - 0x2e8c], edi
xor edx, edx
mov dword [ebp - 0x2e74], 0xffffffff
mov dword [ebp - 0x2e88], edx
lea ecx, [ebp - 0x2e68]
mov dword [ebp - 0x2e7c], ecx
lea eax, [ebp - 0x2e68]
push 0x4a7e00
push eax
call fcn.00494f0c
add esp, 8
test eax, eax
sete dl
and edx, 1
mov byte [ebp - 0xc49], dl
mov word [ebp - 0xc20], 0x38
cmp byte [ebp - 0xc49], 0
je 0x463da1
lea eax, [ebp - 0x1054]
call fcn.0040ba60
cmp byte [eax], 0
je 0x464050
mov edx, dword [ebp - 0x19b0]
mov dword [ebp - 0x2e74], edx
mov byte [ebp - 0xc40], 1
push 0xc30
push 0
lea ecx, [ebp - 0x3ac0]
push ecx
call fcn.00494dd8
add esp, 0xc
lea eax, [ebp - 0x2e68]
push eax
lea edx, [ebp - 0x3ac0]
push edx
call fcn.00494f58
add esp, 8
lea edx, [ebp - 0x2a68]
lea eax, [ebp - 0x36c0]
call fcn.0041023c
lea edx, [ebp - 0x2e68]
mov eax, ebx
call fcn.004646d0
test al, al
je 0x463df8
mov word [ebp - 0x2a68], 0
mov ecx, dword [ebp - 0x2268]
mov dword [ebp - 0x2ec0], ecx
mov ecx, dword [ebp - 0x2264]
mov dword [ebp - 0x2ebc], ecx
lea ecx, [edi + 1]
mov dword [ebp - 0x2eb8], 0
mov dword [ebp - 0x2eb4], 0
mov eax, dword [ebp - 0x2260]
mov dword [ebp - 0x2eb0], eax
mov eax, 0x4c90e4
mov edx, dword [ebp - 0x1dc0]
mov dword [ebp - 0x2eac], edx
mov edx, dword [ebp - 0x1dbc]
mov dword [ebp - 0x2ea8], edx
lea edx, [ebp - 0x3ac0]
mov dword [ebp - 0x2e9c], ecx
call fcn.0046b858
mov dword [ebp - 0x2e70], eax
cmp byte [ebp - 0xc3f], 0
jne 0x463e7b
mov eax, dword [ebp - 0x2e7c]
call fcn.00448b98
call fcn.0040ffc8
test eax, eax
je 0x463eb3
cmp word [ebp - 0x2a68], 0
je 0x463eb3
lea edx, [ebp - 0x2a68]
lea ecx, [ebp - 0x2e90]
mov dword [ebp - 0x2e7c], edx
push ecx
push 0
push 0x104d
push dword [ebx]
call sub.USER32.DLL_SendMessageA
mov esi, eax
jmp 0x463eca
lea eax, [ebp - 0x2e90]
push eax
push 0
push 0x1007
push dword [ebx]
call sub.USER32.DLL_SendMessageA
mov esi, eax
cmp byte [ebp - 0x2258], 0
jne 0x463f1b
push dword [ebp - 0x2ebc]
push dword [ebp - 0x2ec0]
lea eax, [ebp - 0x3af4]
mov edx, 0x32
call fcn.004481d8
mov dword [ebp - 0x3b14], 1
lea ecx, [ebp - 0x3af4]
lea eax, [ebp - 0x3b1c]
mov dword [ebp - 0x3b08], ecx
push eax
push esi
push 0x102e
push dword [ebx]
call sub.USER32.DLL_SendMessageA
jmp 0x463f43
mov dword [ebp - 0x3b3c], 1
mov dword [ebp - 0x3b30], 0x4a7de0
lea edx, [ebp - 0x3b44]
push edx
push esi
push 0x102e
push dword [ebx]
call sub.USER32.DLL_SendMessageA
cmp byte [ebp - 0xc49], 0
je 0x463f78
mov dword [ebp - 0x3b64], 2
lea ecx, [ebp - 0x18a4]
lea eax, [ebp - 0x3b6c]
mov dword [ebp - 0x3b58], ecx
push eax
push esi
push 0x102e
push dword [ebx]
call sub.USER32.DLL_SendMessageA
jmp 0x463fa0
mov dword [ebp - 0x3b8c], 2
mov dword [ebp - 0x3b80], 0x4a7de0
lea edx, [ebp - 0x3b94]
push edx
push esi
push 0x102e
push dword [ebx]
call sub.USER32.DLL_SendMessageA
lea ecx, [ebp - 0xc54]
push ecx
lea eax, [ebp - 0x1dc0]
push eax
call sub.KERNEL32.DLL_FileTimeToLocalFileTime
lea edx, [ebp - 0x3ba4]
push edx
lea ecx, [ebp - 0xc54]
push ecx
call sub.KERNEL32.DLL_FileTimeToSystemTime
push 0x64
lea eax, [ebp - 0x3c08]
push eax
push 0
lea edx, [ebp - 0x3ba4]
push edx
push 0
push 0x400
call sub.KERNEL32.DLL_GetDateFormatA
push 0x4a7e1d
lea ecx, [ebp - 0x3c08]
push ecx
call fcn.00494e7c
add esp, 8
push 0x64
lea eax, [ebp - 0x3c08]
push eax
call fcn.00494f88
lea edx, [ebp - 0x3c08]
pop ecx
add eax, edx
lea ecx, [ebp - 0x3ba4]
push eax
push 0
push ecx
push 2
push 0x400
call sub.KERNEL32.DLL_GetTimeFormatA
mov dword [ebp - 0x3c28], 3
lea eax, [ebp - 0x3c08]
lea edx, [ebp - 0x3c30]
mov dword [ebp - 0x3c1c], eax
push edx
push esi
push 0x102e
push dword [ebx]
call sub.USER32.DLL_SendMessageA
inc edi
cmp byte [ebp - 0xc3d], 0
jne 0x464074
lea edx, [ebp - 0x2e68]
lea eax, [ebp - 0xc0c]
xor ecx, ecx
call fcn.00412800
test al, al
jne 0x463cc0
xor eax, eax
mov al, byte [ebp - 0x1054]
cmp eax, 0x5c
jne 0x4640c3
xor edx, edx
mov dl, byte [ebp - 0x1053]
cmp edx, 0x5c
jne 0x4640c3
push 0x5c
lea ecx, [ebp - 0x1052]
push ecx
call fcn.00495025
add esp, 8
mov word [ebp - 0xc20], 0x38
test eax, eax
je 0x4640bc
push 0x5c
inc eax
push eax
call fcn.00495025
add esp, 8
test eax, eax
jne 0x4640c3
mov byte [ebp - 0xc40], 0
cmp byte [ebp - 0xc40], 0
jne 0x4641a4
lea eax, [ebp - 0x1054]
call fcn.0040ba60
cmp byte [eax], 0
je 0x4641a4
mov dword [ebp - 0x3c58], 7
mov dword [ebp - 0x3c54], edi
xor ecx, ecx
mov edx, dword [ebp - 0x19b0]
lea eax, [ebp - 0x4888]
mov dword [ebp - 0x3c3c], edx
mov dword [ebp - 0x3c50], ecx
mov dword [ebp - 0x3c44], 0x4a7e00
push 0xc30
push 0
push eax
call fcn.00494dd8
add esp, 0xc
push 0x4a7e00
lea edx, [ebp - 0x4888]
push edx
call fcn.00494f58
mov dword [ebp - 0x3c78], 0x10
add esp, 8
lea edx, [ebp - 0x4888]
mov eax, 0x4c90e4
call fcn.0046b858
mov dword [ebp - 0x3c38], eax
lea ecx, [ebp - 0x3c58]
push ecx
push 0
push 0x1007
push dword [ebx]
call sub.USER32.DLL_SendMessageA
mov word [ebp - 0xc20], 0x38
mov dword [ebp - 0x48a8], 2
lea edx, [ebp - 0x18a4]
lea ecx, [ebp - 0x48b0]
mov dword [ebp - 0x489c], edx
push ecx
push eax
push 0x102e
push dword [ebx]
call sub.USER32.DLL_SendMessageA
dec dword [ebp - 0xc14]
lea eax, [ebp - 0xc0c]
mov edx, 2
call fcn.0041275c
mov word [ebp - 0xc20], 0x14
mov eax, 0x4c90e4
call fcn.0046bb0c
mov eax, ebx
call fcn.004682cc
xor eax, eax
mov word [ebp - 0xc20], 0x14
cmp dword [ebp - 0xc34], 0
je 0x464257
mov edx, dword [ebp - 0xc34]
cmp byte [edx], 0
jne 0x46424a
push 0
push 0
push 0x1004
push dword [ebx]
call sub.USER32.DLL_SendMessageA
cmp eax, dword [ebp - 0xc3c]
jg 0x464216
test eax, eax
jle 0x464216
dec eax
mov dword [ebp - 0xc3c], eax
mov dword [ebp - 0x48c8], 3
mov dword [ebp - 0x48cc], 3
lea edx, [ebp - 0x48d8]
push edx
push dword [ebp - 0xc3c]
push 0x102b
push dword [ebx]
call sub.USER32.DLL_SendMessageA
mov eax, 1
jmp 0x464257
mov edx, dword [ebp - 0xc34]
mov eax, ebx
call fcn.004645bc
test eax, eax
jne 0x46429f
mov dword [ebp - 0x48f0], 3
mov dword [ebp - 0x48f4], 3
lea edx, [ebp - 0x4900]
push edx
cmp dword [ebp - 0xc3c], 0xffffffff
je 0x464288
cmp dword [ebp - 0xc34], 0
jne 0x46428c
xor ecx, ecx
jmp 0x464292
mov ecx, dword [ebp - 0xc3c]
push ecx
push 0x102b
push dword [ebx]
call sub.USER32.DLL_SendMessageA
push 1
push 0xffffffffffffffff
push 0x100c
push dword [ebx]
call sub.USER32.DLL_SendMessageA
mov esi, eax
mov eax, 0x4c29c4
xor edx, edx
call fcn.00449584
push 0
push 1
push 0xb
push dword [ebx]
call sub.USER32.DLL_SendMessageA
push 0
push 0
push 0x102a
push dword [ebx]
call sub.USER32.DLL_SendMessageA
push 0
push esi
push 0x1013
push dword [ebx]
call sub.USER32.DLL_SendMessageA
mov eax, ebx
call fcn.00467504
mov eax, ebx
call fcn.00467740
cmp byte [ebp - 0xc3e], 0
je 0x464312
push 0x7f00
push 0
call sub.USER32.DLL_LoadCursorA
push eax
call sub.USER32.DLL_SetCursor
mov eax, 0x4c29c4
xor edx, edx
call fcn.00449524
mov eax, 0x4c2994
call fcn.00480e50
cmp byte [ebp - 0xc3d], 0
jne 0x46434d
cmp byte [ebx + 0x41d], 0
jne 0x46434d
push 3
push 0
push 0x4a7e01
call sub.KERNEL32.DLL_FindFirstChangeNotificationA
mov dword [0x4c4e00], eax
dec dword [ebp - 0xc14]
cmp dword [0x4c4de8], 0
jle 0x464362
dec dword [0x4c4de8]
mov edx, dword [ebp - 0xc30]
mov dword fs:[0], edx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret