Function at 0x40329e
Capabilities:
Check for time delay via gettickcount
Create thread
Query or enumerate registry value
Resume thread
Set registry value

Disassembly:
sub esp, 0x1c
push ebx
push ebp
push esi
push edi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [esp + 0x20], eax
call fcn.00403210
xor edi, edi
push edi
call dword [sym.imp.ole32.dll_OleInitialize]
call fcn.004dfdb6
call fcn.004c1caa
call fcn.00441206
call fcn.004c4892
call fcn.004613fc
call fcn.004e5dc4
call fcn.004437e7
mov esi, eax
cmp dword [esi + 0x14], edi
jne 0x403333
mov ebx, dword [sym.imp.KERNEL32.dll_CreateEventW]
push edi
push edi
xor ebp, ebp
inc ebp
push ebp
push edi
call ebx
push edi
push edi
push ebp
push edi
mov dword [esi], eax
call ebx
mov dword [esi + 8], eax
lea eax, [esi + 0x10]
push eax
push 4
push esi
push 0x44392c
push edi
push edi
call fcn.005905f0
add esp, 0x18
mov dword [esi + 0xc], eax
cmp eax, edi
je 0x403330
push 0xffffffffffffffff
push eax
call dword [sym.imp.KERNEL32.dll_SetThreadPriority]
push dword [esi + 0xc]
call dword [sym.imp.KERNEL32.dll_ResumeThread]
mov dword [esi + 0x14], ebp
call fcn.004040a8
mov dword [esp + 0x18], eax
call fcn.0044410a
push edi
mov esi, eax
call fcn.00444f02
pop ecx
cmp dword [esp + 0x18], edi
je 0x4033a8
push 0x63c268
mov ebp, 0x5db9e0
push ebp
mov ebx, 0x103
lea eax, [esi + 0x2a]
push ebx
push eax
call fcn.0058f42f
push dword [esp + 0x28]
lea eax, [esi + 0x232]
push ebp
push ebx
push eax
call fcn.0058f42f
push edi
push 4
push esi
push 0x444186
push edi
push edi
call fcn.005905f0
add esp, 0x38
mov dword [esi + 0x24], eax
cmp eax, edi
je 0x4033a8
push 0xffffffffffffffff
push eax
call dword [sym.imp.KERNEL32.dll_SetThreadPriority]
push dword [esi + 0x24]
call dword [sym.imp.KERNEL32.dll_ResumeThread]
call fcn.00403608
call fcn.004053c1
call fcn.004ab9aa
mov ebx, eax
cmp ebx, edi
je 0x4033ec
push 1
call fcn.004a7f16
mov esi, eax
call fcn.004a7f52
call fcn.004bbc9b
mov ecx, eax
call fcn.004bbcd7
call fcn.004e52dc
call fcn.0040378b
push ebx
call fcn.004ac0dc
call fcn.004e517a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [esp + 0x20]
xor edx, edx
mov ecx, 0xea60
div ecx
mov esi, eax
cmp esi, edi
jne 0x403408
xor esi, esi
inc esi
call fcn.0045f8eb
push esi
push 0x12
pop ebx
mov esi, str.siteurl
call fcn.0045f916
push 4
pop eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x24], eax
lea eax, [esp + 0x24]
push eax
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x24]
push eax
push str.insttm
push str.Softwarehao123JuziBrowser
mov ebp, 0x80000001
push ebp
mov dword [esp + 0x2c], edi
call dword [sym.imp.SHLWAPI.dll_SHGetValueW]
test eax, eax
jne 0x40345a
cmp dword [esp + 0x1c], 4
je 0x40345e
mov dword [esp + 0x14], edi
cmp dword [esp + 0x14], edi
je 0x403495
push edi
call fcn.005901bf
pop ecx
cmp eax, dword [esp + 0x14]
jb 0x403495
sub eax, dword [esp + 0x14]
xor edx, edx
mov ecx, 0xe10
div ecx
mov ebx, eax
cmp ebx, edi
jne 0x403487
xor ebx, ebx
inc ebx
call fcn.0045f8eb
push ebx
push 0x13
pop ebx
call fcn.0045f916
push 4
lea eax, [esp + 0x2c]
push eax
push 4
push str.firstrun
push str.Softwarehao123JuziBrowser
push ebp
mov dword [esp + 0x40], edi
call dword [sym.imp.SHLWAPI.dll_SHSetValueW]
push dword [0x6cd050]
mov ebx, dword [sym.imp.USER32.dll_IsWindow]
call ebx
mov ebp, dword [sym.imp.USER32.dll_PostMessageW]
test eax, eax
je 0x4034f9
lea eax, [esp + 0x18]
push eax
push dword [0x6cd04c]
mov dword [esp + 0x20], edi
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
push dword [esp + 0x18]
call dword [sym.imp.USER32.dll_AllowSetForegroundWindow]
push edi
push edi
push 0x502
push dword [0x6cd050]
call ebp
call fcn.0044410a
mov esi, eax
push dword [esi + 4]
call ebx
mov ebx, dword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
je 0x40352b
push edi
push edi
push 0x10
push dword [esi + 4]
call ebp
push 0x7d0
push dword [esi + 0x24]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push dword [esi + 0x24]
call ebx
push 1
call fcn.00444f02
mov eax, dword [0x63c00c]
pop ecx
cmp eax, edi
je 0x403545
push eax
call ebx
mov dword [0x63c00c], edi
mov eax, dword [0x63c018]
cmp eax, edi
je 0x403563
push eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
push dword [0x63c018]
call ebx
mov dword [0x63c018], edi
call dword [sym.imp.ole32.dll_OleUninitialize]
pop edi
pop esi
xor eax, eax
pop ebp
inc eax
pop ebx
add esp, 0x1c
ret