Function at 0x407da0
Capabilities:
Check for time delay via gettickcount
Get disk information
Get memory capacity
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x3d4
mov eax, dword [0x42a004]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
xor edi, edi
mov dword [ebp - 0x3bc], edi
call fcn.00409dc0
lea ecx, [ebp - 0x158]
push ecx
push eax
call fcn.00413804
add esp, 8
test eax, eax
jne 0x407de1
mov dword [ebp - 0x3bc], 0xfffffffc
lea edx, [ebp - 0x168]
push edx
mov dword [ebp - 0x168], 0x40
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatusEx]
mov eax, dword [ebp - 0x15c]
mov ecx, dword [ebp - 0x160]
shrd ecx, eax, 0x14
shr eax, 0x14
mov esi, 2
cmp eax, edi
ja 0x407e33
jb 0x407e1e
cmp ecx, 0x200
ja 0x407e27
add dword [ebp - 0x3bc], 5
jmp 0x407e39
cmp eax, edi
ja 0x407e33
cmp ecx, 0x2000
jb 0x407e39
sub dword [ebp - 0x3bc], esi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
mov eax, 0x10624dd3
mul ecx
shr edx, 6
mov eax, 0x88888889
mul edx
shr edx, 5
cmp edx, 5
ja 0x407e63
add dword [ebp - 0x3bc], 3
jmp 0x407e6e
cmp edx, 0x3c
jb 0x407e6e
sub dword [ebp - 0x3bc], esi
push 5
mov dword [ebp - 0x3c4], edi
call fcn.00404a40
mov edx, dword [0x42c160]
mov eax, dword [edx + 0x14]
add esp, 4
push eax
call fcn.00414c6b
add esp, 4
mov ebx, eax
cmp eax, edi
jne 0x407e9b
mov ebx, 0x425582
push 6
call fcn.00404a40
mov eax, dword [0x42c160]
mov eax, dword [eax + 0x18]
add esp, 4
push eax
call fcn.00414c6b
add esp, 4
cmp eax, edi
mov edi, eax
jne 0x407ec1
mov edi, 0x425582
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x407ec6
sub eax, edx
mov edx, eax
mov eax, edi
lea esi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x407ed6
sub eax, esi
lea esi, [eax + edx + 0x2e]
push esi
call fcn.00413e95
add esp, 4
mov dword [ebp - 0x3c0], eax
test eax, eax
je 0x407ee3
push 0x5a
call fcn.00404a40
mov ecx, dword [0x42c160]
mov edx, dword [ecx + 0x168]
mov esi, dword [ebp - 0x3c0]
add esp, 4
push edi
push ebx
push edx
push esi
call fcn.00413fd6
lea eax, [ebp - 0x290]
push eax
push esi
call fcn.00414ee9
mov edi, eax
add esp, 0x18
test edi, edi
je 0x40801f
cmp edi, 0xffffffff
je 0x40801f
mov esi, dword [ebp - 0x3c4]
push 0x5b
call fcn.00404a40
mov ecx, dword [0x42c160]
mov ecx, dword [ecx + 0x16c]
add esp, 4
lea eax, [ebp - 0x26c]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x407f80
test dl, dl
je 0x407f7c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x407f80
add eax, 2
add ecx, 2
test dl, dl
jne 0x407f60
xor eax, eax
jmp 0x407f85
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x407ff2
mov ecx, 0x427d00
lea eax, [ebp - 0x26c]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x407fb4
test dl, dl
je 0x407fb0
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x407fb4
add eax, 2
add ecx, 2
test dl, dl
jne 0x407f94
xor eax, eax
jmp 0x407fb9
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x407ff2
mov ecx, 0x427d04
lea eax, [ebp - 0x26c]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x407fe8
test dl, dl
je 0x407fe4
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x407fe8
add eax, 2
add ecx, 2
test dl, dl
jne 0x407fc8
xor eax, eax
jmp 0x407fed
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x407ff2
inc esi
lea edx, [ebp - 0x290]
push edx
push edi
call fcn.00415010
add esp, 8
test eax, eax
je 0x407f44
push edi
call fcn.0041513e
add esp, 4
cmp esi, 1
ja 0x40801f
add dword [ebp - 0x3bc], 3
mov eax, dword [ebp - 0x3c0]
push eax
call fcn.00413e5b
mov edi, dword [sym.imp.KERNEL32.dll_GetDriveTypeA]
add esp, 4
xor esi, esi
mov dword [ebp - 0x3c8], 0x5c3a41
xor ebx, ebx
lea edx, [ebp - 0x158]
push edx
lea eax, [ebp - 0x3c8]
lea ecx, [ebx + 0x41]
push eax
mov byte [ebp - 0x3c8], cl
call fcn.00413804
add esp, 8
test eax, eax
jne 0x408074
lea ecx, [ebp - 0x3c8]
push ecx
call edi
cmp eax, 3
jne 0x408074
inc esi
inc ebx
cmp ebx, 0x1a
jb 0x408042
cmp esi, 1
ja 0x408087
inc dword [ebp - 0x3bc]
jmp 0x408093
cmp esi, 3
jb 0x408093
sub dword [ebp - 0x3bc], 2
push 9
mov dword [ebp - 0x3c0], 0
call fcn.00404a40
mov edx, dword [0x42c160]
mov eax, dword [edx + 0x24]
add esp, 4
push eax
call fcn.00414c6b
add esp, 4
mov ebx, eax
test eax, eax
jne 0x4080c4
mov ebx, 0x425582
mov eax, ebx
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4080d0
sub eax, edx
lea edi, [eax + 0x20]
lea esp, [esp]
push edi
call fcn.00413e95
mov esi, eax
add esp, 4
test esi, esi
je 0x4080e0
push ebx
push str._s.
push esi
call fcn.00413fd6
add esp, 0xc
lea eax, [ebp - 0x3b8]
push eax
push esi
call fcn.00414ee9
mov edi, eax
add esp, 8
test edi, edi
je 0x408145
cmp edi, 0xffffffff
je 0x408145
mov ebx, 1
mov edi, edi
add dword [ebp - 0x3c0], ebx
lea ecx, [ebp - 0x3b8]
push ecx
push edi
call fcn.00415010
add esp, 8
test eax, eax
je 0x408120
push edi
call fcn.0041513e
add esp, 4
jmp 0x40814a
mov ebx, 1
push esi
call fcn.00413e5b
add esp, 4
cmp dword [ebp - 0x3c0], 0x19
ja 0x408163
add dword [ebp - 0x3bc], 2
lea edx, [ebp - 0x128]
push edx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [ebp - 0x120]
sub eax, dword [ebp - 0x128]
cmp eax, 0x400
jne 0x4081a4
mov ecx, dword [ebp - 0x11c]
sub ecx, dword [ebp - 0x124]
cmp ecx, 0x300
jne 0x4081a4
add dword [ebp - 0x3bc], ebx
push 0x5d
call fcn.00404a40
mov edx, dword [0x42c160]
mov esi, dword [edx + 0x174]
add esp, 4
push 0x5c
call fcn.00404a40
mov eax, dword [0x42c160]
mov eax, dword [eax + 0x170]
mov ebx, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
add esp, 4
lea ecx, [ebp - 0x3c0]
push ecx
push 0x20019
push 0
push eax
push connect
mov byte [ebp - 0x14], 0
call ebx
mov eax, dword [ebp - 0x3c0]
mov edi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
je 0x408229
lea edx, [ebp - 0x3c4]
push edx
lea ecx, [ebp - 0x14]
push ecx
push 0
push 0
push esi
push eax
mov dword [ebp - 0x3c4], 4
call edi
mov edx, dword [ebp - 0x3c0]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0x5e
call fcn.00404a40
mov eax, dword [0x42c160]
mov esi, dword [eax + 0x178]
add esp, 4
push 0x5c
call fcn.00404a40
mov ecx, dword [0x42c160]
mov eax, dword [ecx + 0x170]
add esp, 4
lea edx, [ebp - 0x3c0]
push edx
push 0x20019
push 0
push eax
push connect
mov byte [ebp - 0xc], 0
call ebx
mov eax, dword [ebp - 0x3c0]
test eax, eax
je 0x4082a2
lea ecx, [ebp - 0x3c4]
push ecx
lea edx, [ebp - 0xc]
push edx
push 0
push 0
push esi
push eax
mov dword [ebp - 0x3c4], 4
call edi
mov eax, dword [ebp - 0x3c0]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp byte [ebp - 0x14], 0
je 0x4082b5
cmp byte [ebp - 0xc], 0
je 0x4082b5
add dword [ebp - 0x3bc], 2
push 0x105
call fcn.00413e95
mov esi, eax
add esp, 4
test esi, esi
je 0x4082b5
push 0x104
push esi
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
jne 0x4082ee
mov ecx, dword [0x42b128]
mov ecx, dword [ecx]
mov edx, esi
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x4082e4
push 0x5f
call fcn.00404a40
mov edx, dword [0x42c160]
mov eax, dword [edx + 0x17c]
add esp, 4
mov dword [ebp - 0x3c4], eax
xor edi, edi
lea esp, [esp]
mov ecx, dword [ebp + edi*4 - 0x3c4]
push ecx
push esi
call fcn.004146e0
add esp, 8
test eax, eax
jne 0x408333
inc edi
cmp edi, 1
jb 0x408310
mov edi, dword [ebp - 0x3bc]
jmp 0x40833c
mov edi, dword [ebp - 0x3bc]
add edi, 4
push esi
call fcn.00413e5b
add esp, 4
push 0x61
call fcn.00404a40
mov edx, dword [0x42c160]
mov esi, dword [edx + 0x184]
add esp, 4
push 0x60
call fcn.00404a40
mov eax, dword [0x42c160]
mov eax, dword [eax + 0x180]
add esp, 4
lea ecx, [ebp - 0x3c0]
push ecx
push 0x20019
push 0
push eax
push connect
mov byte [ebp - 0x118], 0
call ebx
mov eax, dword [ebp - 0x3c0]
test eax, eax
je 0x4083c8
lea edx, [ebp - 0x3c4]
push edx
lea ecx, [ebp - 0x118]
push ecx
push 0
push 0
push esi
push eax
mov dword [ebp - 0x3c4], 0x100
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov edx, dword [ebp - 0x3c0]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0x62
call fcn.00404a40
mov eax, dword [0x42c160]
mov ecx, dword [eax + 0x188]
add esp, 4
push 0x63
mov dword [ebp - 0x3d4], ecx
call fcn.00404a40
mov edx, dword [0x42c160]
mov eax, dword [edx + 0x18c]
add esp, 4
push 0x64
mov dword [ebp - 0x3d0], eax
call fcn.00404a40
mov ecx, dword [0x42c160]
mov edx, dword [ecx + 0x190]
add esp, 4
mov dword [ebp - 0x3cc], edx
xor esi, esi
lea ecx, [ecx]
mov eax, dword [ebp + esi*4 - 0x3d4]
push eax
lea ecx, [ebp - 0x118]
push ecx
call fcn.004146e0
add esp, 8
test eax, eax
jne 0x408454
inc esi
cmp esi, 3
jb 0x408420
mov eax, edi
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00412e08
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 4]
lea eax, [edi + 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00412e08
mov esp, ebp
pop ebp
ret