Function at 0x405a1c
Capabilities:
Check for time delay via gettickcount
Query environment variable

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x45c
mov eax, dword [0x428050]
xor eax, esp
mov dword [esp + 0x458], eax
push ebx
push esi
push edi
xor esi, esi
push 8
pop ecx
xor eax, eax
lea edi, [esp + 0x20]
push esi
mov dword [esp + 0x18], esi
rep stosd dword es:[edi], eax
mov dword [esp + 0x14], esi
mov dword [esp + 0x1c], esi
mov dword [esp + 0x20], esi
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push 0x429f10
mov dword [0x42a108], eax
call fcn.00406d04
mov edi, eax
cmp edi, esi
jge 0x405a7c
push 0x403448
jmp 0x405c34
cmp dword [0x429f14], esi
jne 0x405b4b
push 0x5c
push dword [0x429f10]
call fcn.00418c07
lea ebx, [eax + 2]
xor eax, eax
mov edi, 0x208
push edi
mov word [esp + 0x4c], ax
lea eax, [esp + 0x4e]
push esi
push eax
call fcn.0041d610
add esp, 0x14
push ebx
mov ebx, 0x104
lea eax, [esp + 0x44]
push ebx
push eax
call fcn.00418c35
add esp, 0xc
lea eax, [esp + 0x40]
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveExtensionW]
xor eax, eax
push edi
mov word [esp + 0x254], ax
lea eax, [esp + 0x256]
push esi
push eax
call fcn.0041d610
add esp, 0xc
push ebx
lea eax, [esp + 0x254]
push eax
push 0x403468
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
lea ecx, [esp + 0x40]
push ecx
sub ebx, eax
push 0x403474
lea eax, [esp + eax*2 + 0x258]
push ebx
push eax
call fcn.00418c98
add esp, 0x10
lea eax, [esp + 0x250]
push eax
xor eax, eax
mov ecx, 0x429f14
call fcn.00408c78
mov edi, eax
cmp edi, esi
jge 0x405b43
push 0x4034b0
jmp 0x405c34
cmp dword [0x429f14], esi
je 0x405b56
push dword [0x429f14]
call fcn.0040883e
push dword [0x429f10]
lea eax, [esp + 0x14]
lea ebx, [esp + 0x24]
call fcn.004061b2
mov edi, eax
cmp edi, esi
jge 0x405b79
push 0x4034c8
jmp 0x405c34
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x24]
push eax
push dword [esp + 0x18]
call fcn.0040621f
mov edi, eax
cmp edi, esi
jge 0x405b9c
push 0x4034e0
jmp 0x405c34
mov eax, dword [esp + 0x38]
cmp eax, esi
je 0x405ba9
cmp word [eax], si
jne 0x405bb3
mov dword [0x429f24], 1
push dword [esp + 0x1c]
mov ecx, 0x429f10
push dword [esp + 0x1c]
call fcn.004070e3
mov edi, eax
cmp edi, esi
jge 0x405bd2
push 0x403508
jmp 0x405c34
call dword [sym.imp.COMCTL32.dll_InitCommonControls]
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
call ebx
mov dword [esp + 0x18], eax
lea eax, [esp + 0x20]
push eax
push dword [esp + 0x14]
push 0x429f10
call fcn.00406314
mov edi, eax
cmp edi, esi
jge 0x405c04
push 0x403548
jmp 0x405c34
call ebx
sub eax, dword [esp + 0x18]
call fcn.004059c0
cmp dword [0x429f24], esi
jne 0x405c3c
lea eax, [esp + 0x14]
push eax
push dword [esp + 0x40]
push dword [esp + 0x40]
call fcn.00405e74
mov edi, eax
cmp edi, esi
jge 0x405c3c
push 0x40355c
push edi
call fcn.0040895c
pop ecx
pop ecx
call fcn.004069cb
mov ebx, dword [esp + 0x10]
cmp ebx, esi
je 0x405c4e
call fcn.0040a5fc
cmp dword [esp + 0x14], 0xcabf00d1
jne 0x405c5e
mov dword [esp + 0x14], esi
jmp 0x405c68
mov ebx, 0x429f10
call fcn.00406554
cmp edi, esi
jge 0x405c7d
cmp edi, 0x80070642
je 0x405c7d
mov esi, edi
call fcn.00405d4a
xor esi, esi
push edi
push 0x403574
push 1
call fcn.004088e0
mov dword [esp + 0x1c], esi
add esp, 0xc
lea esi, [esp + 0x10]
call fcn.00409245
test eax, eax
js 0x405cb1
push dword [esp + 0x10]
push 0x404e04
push 1
call fcn.004088e0
add esp, 0xc
xor esi, esi
cmp dword [esp + 0x10], esi
je 0x405cc2
push dword [esp + 0x10]
call fcn.0040921f
mov eax, dword [0x429150]
mov dword [0x42a144], esi
cmp eax, 0xffffffff
je 0x405ce0
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
or dword [0x429150], 0xffffffff
mov eax, dword [0x42a148]
cmp eax, esi
je 0x405cf5
push eax
call fcn.0040921f
mov dword [0x42a148], esi
mov eax, dword [0x429f18]
cmp eax, esi
je 0x405d04
push eax
call fcn.0040921f
mov eax, dword [0x429f10]
cmp eax, esi
je 0x405d13
push eax
call fcn.0040921f
mov eax, dword [0x429f14]
cmp eax, esi
je 0x405d22
push eax
call fcn.0040921f
cmp edi, esi
jl 0x405d2c
mov eax, dword [esp + 0x14]
jmp 0x405d33
mov eax, edi
and eax, 0xffff
mov ecx, dword [esp + 0x464]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.00418bf8
mov esp, ebp
pop ebp
ret 0x10