Function at 0x401758
Capabilities:
Check for time delay via gettickcount
Query or enumerate registry value

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x25c
mov eax, dword [0x406004]
xor eax, ebp
mov dword [ebp - 4], eax
or dword [ebp - 0x224], 0xffffffff
push ebx
push esi
push edi
xor ebx, ebx
mov edi, ebx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push 0x18
mov dword [ebp - 0x214], eax
pop eax
mov dword [ebp - 0x23c], eax
mov dword [ebp - 0x238], eax
mov dword [ebp - 0x234], eax
lea eax, [ebp - 0x23c]
push eax
lea eax, [ebp - 0x220]
mov dword [ebp - 0x220], 0x30000
push eax
push 0x406c58
push 0x406c70
push fcn.004041d6
push dword [0x406690]
mov dword [ebp - 0x230], 1
push 0x406c40
mov dword [ebp - 0x22c], ebx
mov dword [ebp - 0x228], ebx
mov dword [ebp - 0x218], ebx
call dword [sym.imp.TAPI32.dll_lineInitializeExW]
mov esi, eax
cmp esi, 0x80000052
jne 0x401905
push ebx
push dword [0x406d08]
call dword [sym.imp.USER32.dll_EnableWindow]
xor ecx, ecx
inc ecx
call fcn.004020e7
lea eax, [ebp - 0x23c]
push eax
lea eax, [ebp - 0x220]
push eax
push 0x406c58
push 0x406c70
push fcn.004041d6
push dword [0x406690]
push 0x406c40
call dword [sym.imp.TAPI32.dll_lineInitializeExW]
mov esi, eax
cmp esi, 0x80000052
jne 0x4018f0
mov edi, dword [ebp - 0x214]
jmp 0x401871
lea eax, [ebp - 0x258]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [ebp - 0x258]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageW]
push 1
push ebx
push ebx
push ebx
lea eax, [ebp - 0x258]
push eax
call dword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
jne 0x401857
call dword [sym.imp.KERNEL32.dll_GetTickCount]
lea ecx, [edi + 0x1388]
cmp eax, ecx
jbe 0x4018b6
mov ecx, dword [0x406d08]
mov edx, 0x610
push 5
call fcn.004048ae
cmp eax, 2
je 0x4018ee
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edi, eax
lea eax, [ebp - 0x23c]
push eax
lea eax, [ebp - 0x220]
push eax
push 0x406c58
push 0x406c70
push fcn.004041d6
push dword [0x406690]
push 0x406c40
call dword [sym.imp.TAPI32.dll_lineInitializeExW]
mov esi, eax
cmp esi, 0x80000052
je 0x401871
mov edi, ebx
xor ecx, ecx
call fcn.004020e7
push 1
push dword [0x406d08]
call dword [sym.imp.USER32.dll_EnableWindow]
test esi, esi
je 0x401910
mov ebx, esi
jmp 0x401b75
lea eax, [ebp - 0x218]
push eax
push 0x20019
push ebx
push 0x401060
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
xor eax, eax
mov dword [ebp - 0x21c], 0x200
mov word [ebp - 0x208], ax
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x208]
push eax
push ebx
push ebx
push 0x4010c4
push dword [ebp - 0x218]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x40197b
lea eax, [ebp - 0x208]
push eax
call dword [sym.imp.msvcrt.dll__wtoi]
pop ecx
mov dword [ebp - 0x214], eax
jmp 0x401982
or dword [ebp - 0x214], 0xffffffff
or dword [0x406040], 0xffffffff
mov edx, dword [0x406c58]
test edx, edx
jne 0x4019c7
mov esi, dword [sym.imp.KERNEL32.dll_LocalAlloc]
push 4
push 0x40
call esi
push 4
push 0x40
mov dword [0x406f38], eax
call esi
push 0x214
push 0x40
mov dword [0x406d10], eax
call esi
mov edi, eax
mov eax, dword [0x406d10]
mov dword [ebp - 0x210], edi
jmp 0x401a35
lea eax, [ebp - 0x20c]
mov ecx, 0x214
push eax
call fcn.00401585
test eax, eax
jns 0x4019e6
mov ebx, 0x80000044
jmp 0x401b75
push dword [ebp - 0x20c]
mov esi, dword [sym.imp.KERNEL32.dll_LocalAlloc]
push 0x40
call esi
mov edx, dword [0x406c58]
mov edi, eax
lea eax, [ebp - 0x20c]
mov dword [ebp - 0x210], edi
push eax
push 4
pop ecx
call fcn.00401585
test eax, eax
js 0x4019dc
push dword [ebp - 0x20c]
push 0x40
call esi
push dword [ebp - 0x20c]
mov dword [0x406f38], eax
push 0x40
call esi
mov dword [0x406d10], eax
test edi, edi
je 0x4019dc
cmp dword [0x406f38], ebx
je 0x4019dc
test eax, eax
je 0x4019dc
invalid