Function at 0x10001000
Capabilities:
Check for time delay via gettickcount
Print debug messages
Query or enumerate registry value
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x260
mov eax, dword [0x1002e288]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
cmp eax, dword [0x1002f1e0]
jbe 0x100010a1
call esi
add eax, 0x2710
mov dword [0x1002f1e0], eax
lea eax, [ebp - 0x25c]
push eax
push 1
push 0
push str.SoftwareWIDCOMMBtConfigDebug
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x100010a1
lea ecx, [ebp - 0x258]
push ecx
lea edx, [ebp - 0x260]
push edx
push eax
push eax
mov eax, dword [ebp - 0x25c]
push 0x10026404
mov esi, 4
push eax
mov dword [ebp - 0x258], esi
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x10001094
cmp dword [ebp - 0x258], esi
jne 0x10001094
mov ecx, dword [ebp - 0x260]
mov dword [0x1002f1e4], ecx
mov edx, dword [ebp - 0x25c]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor eax, eax
cmp dword [0x1002f1e4], eax
je 0x1000120c
mov byte [ebp - 0x244], al
mov byte [ebp - 0x44], al
mov dword [ebp - 0x43], eax
mov dword [ebp - 0x3f], eax
mov dword [ebp - 0x3b], eax
mov dword [ebp - 0x37], eax
mov dword [ebp - 0x33], eax
mov dword [ebp - 0x2f], eax
mov dword [ebp - 0x2b], eax
mov word [ebp - 0x27], ax
mov byte [ebp - 0x25], al
mov byte [ebp - 0x24], al
mov dword [ebp - 0x23], eax
mov dword [ebp - 0x1f], eax
mov dword [ebp - 0x1b], eax
mov dword [ebp - 0x17], eax
mov dword [ebp - 0x13], eax
mov dword [ebp - 0xf], eax
mov dword [ebp - 0xb], eax
mov word [ebp - 7], ax
mov byte [ebp - 5], al
lea eax, [ebp - 0x254]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
push 0x20
lea ecx, [ebp - 0x44]
push ecx
push str.dd.MM.yyyy
lea edx, [ebp - 0x254]
push edx
push 0
push 0x800
call dword [sym.imp.KERNEL32.dll_GetDateFormatA]
push 0x20
lea eax, [ebp - 0x24]
push eax
push 0x100263ec
lea ecx, [ebp - 0x254]
push ecx
push 8
push 0x800
call dword [sym.imp.KERNEL32.dll_GetTimeFormatA]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
lea edx, [ebp - 0x24]
push edx
lea eax, [ebp - 0x44]
push eax
push str.BtMmHook32__s__s_Thread_0x_0.4X_
lea ecx, [ebp - 0x244]
push 0x200
push ecx
call fcn.10009859
lea eax, [ebp - 0x244]
add esp, 0x18
lea edx, [eax + 1]
nop
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x10001170
mov ecx, dword [ebp + 8]
sub eax, edx
lea edx, [ebp + 0xc]
push edx
push ecx
mov edx, 0x1ff
sub edx, eax
push 0xffffffffffffffff
push edx
lea eax, [ebp + eax - 0x244]
push eax
call fcn.1000d6df
push 0x100263c4
lea ecx, [ebp - 0x244]
push 0x200
push ecx
call fcn.1000974c
add esp, 0x20
lea edx, [ebp - 0x244]
push edx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
cmp dword [0x1002f1e4], 2
jne 0x1000120a
push 0x100263c0
push str.c:_btmmhook.log
call fcn.100096ee
mov esi, eax
add esp, 8
test esi, esi
je 0x1000120a
lea eax, [ebp - 0x244]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x100011e8
sub eax, edx
push esi
push eax
lea eax, [ebp - 0x244]
push 1
push eax
call fcn.100095b8
push esi
call fcn.100093ed
add esp, 0x14
xor eax, eax
mov ecx, dword [ebp - 4]
xor ecx, ebp
pop esi
call fcn.10009972
mov esp, ebp
pop ebp
ret