Function at 0x40140c
Capabilities:
Check for time delay via gettickcount
Enumerate gui resources

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x428db1
push eax
mov dword fs:[0], esp
sub esp, 0x70
push ebx
push esi
push edi
mov dword [esp + 0x1c], 0x7440d5aa
mov dword [esp + 0x34], 0x571d3690
mov dword [esp + 0x18], 0x7a4d3331
mov dword [esp + 0x54], 0x27dc4590
mov dword [esp + 0x30], 0x493ebd39
mov dword [esp + 0x4c], 0x37953d38
mov dword [esp + 0x24], 0x38a4bd39
mov dword [esp + 0x28], 0x30cb42b4
mov dword [esp + 0x20], 0x7f90b2d5
mov dword [esp + 0x48], 0x3315c86
mov dword [esp + 0x2c], 0x3b328268
mov dword [esp + 0x44], 0x5c9b05fa
mov dword [esp + 0x3c], 0x4cafc32d
mov dword [esp + 0x40], 0x6f87932b
mov dword [esp + 0x38], 0xee5c800
mov dword [esp + 0x14], 0x12782a61
mov dword [esp + 0x50], 0x50ba1e58
mov dword [esp + 0x10], 0x4d61a883
add dword [esp + 0x1c], 0x30751268
mov eax, 0x5ba8e469
mul dword [esp + 0x1c]
mov eax, dword [esp + 0x1c]
mov eax, 0x3c690b32
mul dword [esp + 0x34]
mov eax, dword [esp + 0x34]
add dword [esp + 0x54], 0x13f4daa2
add dword [esp + 0x18], 0x780f1dc2
mov eax, 0x658a3ac7
mul dword [esp + 0x1c]
mov eax, dword [esp + 0x1c]
sub dword [esp + 0x1c], 0x3cf0a9dc
add dword [esp + 0x34], 0x663a84ed
add dword [esp + 0x34], 0x76ad0a50
sub dword [esp + 0x4c], 0x462a62b3
sub dword [esp + 0x1c], 0x7920411
add dword [esp + 0x1c], 0xb05a244
sub dword [esp + 0x24], 0x6d59a77f
mov eax, 0x794fbf76
mul dword [esp + 0x28]
mov eax, dword [esp + 0x28]
add dword [esp + 0x30], 0x1706959a
sub dword [esp + 0x1c], 0x1a28ba89
sub dword [esp + 0x30], 0x4565c9cb
sub dword [esp + 0x54], 0x7a59da13
mov eax, 0x14d0a36
mul dword [esp + 0x34]
mov eax, dword [esp + 0x34]
sub dword [esp + 0x54], 0x2e996e81
add dword [esp + 0x24], 0x75f0205b
mov eax, 0x34e7dfb8
mul dword [esp + 0x4c]
mov eax, dword [esp + 0x4c]
add dword [esp + 0x3c], 0x1dc48001
sub dword [esp + 0x34], 0x5ba9833
add dword [esp + 0x34], 0x6e323ced
mov eax, 0x70d4e654
mul dword [esp + 0x14]
mov eax, dword [esp + 0x14]
add dword [esp + 0x2c], 0x5e3bbb21
add dword [esp + 0x50], 0x14c2ce72
add dword [esp + 0x48], 0x7ecb47c3
sub dword [esp + 0x30], 0x4b17255c
sub dword [esp + 0x40], 0x2ac29721
add dword [esp + 0x18], 0x1784e9ad
xor ebx, ebx
cmp dword [0x43f934], 0x400
jne 0x40169c
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.WINHTTP.dll_WinHttpSetOption]
push 0xf
pop esi
mov dword [esp + 0x74], esi
mov dword [esp + 0x70], ebx
mov byte [esp + 0x60], bl
mov dword [esp + 0x84], ebx
fldz
push ecx
push ecx
fstp qword [esp]
call fcn.00401e00
mov eax, esp
fstp st(0)
mov dword [eax], ebx
mov dword [eax + 4], ebx
call fcn.00402280
fstp st(0)
mov eax, esp
mov dword [eax], ebx
mov dword [eax + 4], ebx
call fcn.00401c90
fstp st(0)
mov eax, esp
mov dword [eax], ebx
mov dword [eax + 4], ebx
call fcn.00401940
fstp st(0)
mov eax, esp
mov dword [eax], ebx
mov dword [eax + 4], ebx
call fcn.00401c9a
fstp st(0)
mov eax, esp
mov dword [eax], ebx
mov dword [eax + 4], ebx
call fcn.00401a70
fstp st(0)
mov eax, esp
mov dword [eax], ebx
mov dword [eax + 4], ebx
call fcn.00401cd0
fstp st(0)
or dword [esp + 0x8c], 0xffffffff
add esp, 8
cmp dword [esp + 0x74], 0x10
jb 0x401690
push dword [esp + 0x60]
call fcn.00401cc0
pop ecx
mov dword [esp + 0x74], esi
mov dword [esp + 0x70], ebx
mov byte [esp + 0x60], bl
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
xor edi, edi
call esi
call esi
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp edi, 0x206d51
jg 0x4016bf
inc edi
cmp edi, 0x4eed4
jl 0x4016a4
xor esi, esi
push ebx
call dword [sym.imp.KERNEL32.dll_GlobalFindAtomW]
cmp esi, 0x2b257f
jg 0x4016d9
inc esi
cmp esi, 0x118bb
jl 0x4016c1
xor esi, esi
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetNumberFormatW]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
cmp esi, 0x2afdec
jle 0x401701
cmp dword [esp + 0x58], 0x787c7e45
jne 0x40170a
inc esi
cmp esi, 0x42f7
jl 0x4016db
mov eax, dword [0x432f3c]
mov dword [0x43f934], eax
call fcn.004011a7
mov esi, 0x3078f
cmp dword [0x43f934], 0x51f
jne 0x401733
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_EnumResourceTypesW]
dec esi
jne 0x40171e
mov ecx, dword [esp + 0x7c]
pop edi
pop esi
xor eax, eax
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 0x10