Function at 0x405e00
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x41a0c7
mov eax, dword fs:[0]
push eax
sub esp, 0x26c
mov eax, dword [0x425010]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, esi
mov dword [ebp - 0x268], eax
mov dword [ebp - 0x254], 0
call fcn.00403790
mov dword [ebp - 0x250], 0
lea ebx, [esi + 0x84c]
lea ecx, [ecx]
lea eax, [ebp - 0x248]
mov ecx, esi
push eax
call fcn.00403d80
mov edi, eax
cmp ebx, edi
je 0x405edb
cmp dword [ebx + 0x14], 8
jb 0x405e84
push dword [ebx]
call fcn.0040bdac
add esp, 4
xor eax, eax
mov dword [ebx + 0x14], 7
mov dword [ebx + 0x10], 0
mov word [ebx], ax
cmp dword [edi + 0x14], 8
jae 0x405eb2
mov eax, dword [edi + 0x10]
inc eax
je 0x405ebc
add eax, eax
push eax
push edi
push ebx
call fcn.0040bfc0
add esp, 0xc
jmp 0x405ebc
mov eax, dword [edi]
mov dword [ebx], eax
mov dword [edi], 0
mov eax, dword [edi + 0x10]
mov dword [ebx + 0x10], eax
mov eax, dword [edi + 0x14]
mov dword [ebx + 0x14], eax
xor eax, eax
mov dword [edi + 0x14], 7
mov dword [edi + 0x10], 0
mov word [edi], ax
cmp dword [ebp - 0x234], 8
jb 0x405ef2
push dword [ebp - 0x248]
call fcn.0040bdac
add esp, 4
cmp dword [esi + 0x95c], 0
je 0x405f11
lea eax, [esi + 0x934]
mov ecx, esi
push eax
call fcn.00404790
test eax, eax
jne 0x4066c2
push 6
push ecx
push str.qq.com
mov ecx, ebx
call fcn.00408200
test eax, eax
js 0x406009
cmp dword [ebp - 0x250], 0
jne 0x405fcc
lea eax, [esi + 0x99c]
mov ecx, esi
push eax
call fcn.00404790
mov dword [ebp - 0x250], eax
test eax, eax
jne 0x405fcc
mov edx, dword [esi + 0x1158]
lea ecx, [esi + 0x9d0]
push ecx
push ecx
mov ecx, esp
mov dword [ecx], edx
test edx, edx
je 0x405f69
mov eax, dword [edx]
push edx
call dword [eax + 4]
mov ecx, esi
call fcn.004048e0
test eax, eax
je 0x405f8a
mov ecx, esi
call fcn.00405590
mov eax, dword [esi + 0x1160]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x114]
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [esi + 0x14]
mov ecx, esi
push eax
lea eax, [esi + 0xa04]
push eax
call fcn.00404550
test eax, eax
je 0x406009
lea eax, [esi + 0x21c]
mov ecx, esi
push eax
lea eax, [esi + 0xa38]
push eax
call fcn.00404550
test eax, eax
je 0x406009
lea eax, [esi + 0xa6c]
jmp 0x405fd2
lea eax, [esi + 0x99c]
push eax
push ecx
mov ecx, dword [esi + 0x1158]
mov eax, esp
mov dword [eax], ecx
test ecx, ecx
je 0x405fe8
mov eax, dword [ecx]
push ecx
call dword [eax + 4]
mov ecx, esi
call fcn.004048e0
test eax, eax
je 0x406009
mov ecx, esi
call fcn.00405590
mov eax, dword [esi + 0x1160]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x114]
push 9
push ecx
push str.weibo.com
mov ecx, ebx
call fcn.00408200
test eax, eax
js 0x4060b0
push 6
push ecx
push str.appId
mov ecx, ebx
call fcn.00408200
test eax, eax
jns 0x4060b0
lea eax, [esi + 0x14]
mov ecx, esi
push eax
lea eax, [esi + 0xb08]
push eax
call fcn.00404550
test eax, eax
je 0x4066a1
lea eax, [esi + 0x21c]
mov ecx, esi
push eax
lea eax, [esi + 0xb3c]
push eax
call fcn.00404550
test eax, eax
je 0x4066a1
lea eax, [esi + 0xb70]
push eax
push ecx
mov ecx, dword [esi + 0x1158]
mov eax, esp
mov dword [eax], ecx
test ecx, ecx
je 0x406086
mov eax, dword [ecx]
push ecx
call dword [eax + 4]
mov ecx, esi
call fcn.004048e0
test eax, eax
je 0x4066a1
mov ecx, esi
call fcn.00405590
mov eax, dword [esi + 0x1160]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x114]
jmp 0x4066a1
cmp dword [esi + 0x928], 0
je 0x40617a
lea eax, [esi + 0x900]
mov ecx, esi
push eax
call fcn.00404790
test eax, eax
je 0x40617a
push 0xd
push ecx
push str.kaixin001.com
mov ecx, ebx
call fcn.00408200
sub esp, 0x18
mov edx, esp
mov dword [edx + 0x14], 7
mov dword [edx + 0x10], 0
test eax, eax
js 0x406133
xor eax, eax
lea edi, [esi + 0xf4c]
mov word [edx], ax
cmp word [edi], ax
jne 0x40610d
xor ecx, ecx
jmp 0x406165
mov ecx, edi
lea eax, [ecx + 2]
mov dword [ebp - 0x24c], eax
jmp 0x406120
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x406120
sub ecx, dword [ebp - 0x24c]
jmp 0x406163
xor eax, eax
lea edi, [esi + 0xd44]
mov word [edx], ax
cmp word [edi], ax
jne 0x406147
xor ecx, ecx
jmp 0x406165
mov ecx, edi
lea eax, [ecx + 2]
mov dword [ebp - 0x24c], eax
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x406152
sub ecx, dword [ebp - 0x24c]
sar ecx, 1
push ecx
push edi
mov ecx, edx
call fcn.00408800
mov ecx, esi
call fcn.00407350
jmp 0x4066a1
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call edi
sub eax, dword [ebp - 0x268]
cmp eax, 0x2bf20
ja 0x4066d7
call edi
sub eax, dword [ebp - 0x254]
cmp eax, 0xea60
jbe 0x40620f
sub esp, 0x18
lea edi, [esi + 0xd44]
mov edx, esp
xor eax, eax
mov dword [edx + 0x14], 7
mov dword [edx + 0x10], 0
mov word [edx], ax
cmp word [edi], ax
jne 0x4061c9
xor ecx, ecx
jmp 0x4061e5
mov ecx, edi
lea ebx, [ecx + 2]
mov edi, edi
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4061d0
sub ecx, ebx
lea ebx, [esi + 0x84c]
sar ecx, 1
push ecx
push edi
mov ecx, edx
call fcn.00408800
mov ecx, esi
call fcn.00407350
test eax, eax
je 0x4066d7
mov eax, dword [sym.imp.KERNEL32.dll_GetTickCount]
call eax
mov dword [ebp - 0x254], eax
jmp 0x4066a1
lea eax, [esi + 0xd44]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.0040a960
mov edi, eax
mov dword [ebp - 4], 0
cmp dword [ebx + 0x14], 8
jb 0x406235
mov ecx, dword [ebx]
jmp 0x406237
mov ecx, ebx
push ecx
lea eax, [ebp - 0x270]
push eax
call fcn.0040a960
mov edx, dword [edi]
xor ecx, ecx
test edx, edx
setne cl
test ecx, ecx
je 0x4066f5
mov eax, dword [eax]
mov cx, word [eax]
cmp cx, word [edx]
jne 0x40627d
test cx, cx
je 0x406279
mov cx, word [eax + 2]
cmp cx, word [edx + 2]
jne 0x40627d
add eax, 4
add edx, 4
test cx, cx
jne 0x406257
xor eax, eax
jmp 0x406282
sbb eax, eax
or eax, 1
mov edx, dword [ebp - 0x270]
test eax, eax
sete bl
add edx, 0xfffffff0
or ecx, 0xffffffff
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4062a7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
or ecx, 0xffffffff
mov edx, dword [ebp - 0x264]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4062ce
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
test bl, bl
je 0x40669b
lea edi, [esi + 0x864]
mov ecx, esi
push edi
call fcn.00404790
test eax, eax
je 0x406383
mov eax, dword [esi + 0x10]
cmp eax, 1
jne 0x40633a
lea eax, [esi + 0x968]
push eax
push ecx
mov ecx, dword [esi + 0x1158]
mov eax, esp
mov dword [eax], ecx
test ecx, ecx
je 0x406310
mov eax, dword [ecx]
push ecx
call dword [eax + 4]
mov ecx, esi
call fcn.004048e0
test eax, eax
je 0x40669b
mov ecx, esi
call fcn.00405590
mov eax, dword [esi + 0x1160]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x114]
jmp 0x40669b
cmp eax, 2
jne 0x406347
lea eax, [esi + 0xad4]
jmp 0x4062fa
lea eax, [esi + 0x14]
mov ecx, esi
push eax
push edi
call fcn.00404550
test eax, eax
je 0x40669b
lea eax, [esi + 0x21c]
mov ecx, esi
push eax
lea eax, [esi + 0x898]
push eax
call fcn.00404550
test eax, eax
je 0x40669b
lea eax, [esi + 0x8cc]
jmp 0x406693
lea eax, [esi + 0xd44]
push eax
lea eax, [ebp - 0x26c]
push eax
call fcn.0040a960
mov ecx, str.duowan.com
mov eax, dword [eax]
lea ecx, [ecx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4063c6
test dx, dx
je 0x4063c2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4063c6
add eax, 4
add ecx, 4
test dx, dx
jne 0x4063a0
xor eax, eax
jmp 0x4063cb
sbb eax, eax
or eax, 1
mov edx, dword [ebp - 0x26c]
test eax, eax
sete bl
add edx, 0xfffffff0
or ecx, 0xffffffff
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4063f0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
test bl, bl
je 0x4064c4
mov eax, dword [sym.imp.KERNEL32.dll_GetTickCount]
call eax
lea edi, [esi + 0x8cc]
mov ecx, esi
push edi
mov ebx, eax
call fcn.00404790
test eax, eax
jne 0x40669b
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, ebx
cmp eax, 0x2710
ja 0x40669b
lea eax, [esi + 0xbd8]
push eax
push ecx
mov ecx, dword [esi + 0x1158]
mov eax, esp
mov dword [eax], ecx
test ecx, ecx
je 0x406446
mov eax, dword [ecx]
push ecx
call dword [eax + 4]
mov ecx, esi
call fcn.004048e0
test eax, eax
je 0x406467
mov ecx, esi
call fcn.00405590
mov eax, dword [esi + 0x1160]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x114]
lea eax, [esi + 0xc0c]
push eax
push ecx
mov ecx, dword [esi + 0x1158]
mov eax, esp
mov dword [eax], ecx
test ecx, ecx
je 0x406483
mov eax, dword [ecx]
push ecx
call dword [eax + 4]
mov ecx, esi
call fcn.004048e0
test eax, eax
je 0x4064a4
mov ecx, esi
call fcn.00405590
mov eax, dword [esi + 0x1160]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x114]
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
push edi
mov ecx, esi
call fcn.00404790
test eax, eax
je 0x406417
jmp 0x40669b
cmp dword [esi + 0xc9c], 0
je 0x40669b
lea edi, [esi + 0xc74]
mov ecx, esi
push edi
call fcn.00404790
test eax, eax
je 0x406684
cmp dword [esi + 0xd04], 0
je 0x40650e
lea eax, [esi + 0x424]
mov ecx, esi
push eax
push edi
call fcn.00404550
test eax, eax
je 0x40650e
lea eax, [esi + 0xcdc]
jmp 0x406693
xor eax, eax
mov dword [ebp - 0x21c], 7
mov dword [ebp - 0x220], 0
mov word [ebp - 0x230], ax
push 0x206
mov dword [ebp - 4], 1
push eax
mov word [ebp - 0x218], ax
lea eax, [ebp - 0x216]
push eax
call fcn.0040dc80
add esp, 8
lea ebx, [esi + 0x84c]
mov ecx, ebx
push str.kaixin001.com
call fcn.00407bf0
test eax, eax
js 0x406670
push edi
lea eax, [ebp - 0x248]
mov ecx, esi
push eax
call fcn.00407570
push eax
lea ecx, [ebp - 0x230]
call fcn.00407ae0
lea ecx, [ebp - 0x248]
call fcn.00407b20
mov dword [ebp - 0x260], 0
mov dword [ebp - 0x25c], 0
mov dword [ebp - 0x258], 0
push ecx
mov byte [ebp - 4], 2
mov ecx, esp
mov dword [ebp - 0x24c], esp
push 0x421e90
call fcn.00407c80
mov byte [ebp - 4], 3
lea eax, [ebp - 0x230]
cmp dword [ebp - 0x21c], 8
lea ecx, [ebp - 0x274]
cmovae eax, dword [ebp - 0x230]
push eax
call fcn.00407c80
mov byte [ebp - 4], 4
lea edx, [ebp - 0x260]
mov byte [ebp - 4], 5
mov ecx, eax
call fcn.00407740
add esp, 4
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x274]
call fcn.00407d40
mov eax, dword [ebp - 0x25c]
sub eax, dword [ebp - 0x260]
sar eax, 2
test eax, eax
je 0x406665
push 1
lea ecx, [ebp - 0x260]
call fcn.00407f10
push 0x421e94
push dword [eax]
lea eax, [ebp - 0x218]
push str.http:__game.kaixin001.com_play.php_aid5218sid
push str._s_s_s
push 0x104
push eax
call fcn.00409360
lea eax, [ebp - 0x218]
mov ecx, esp
push eax
call fcn.00407a80
mov ecx, esi
call fcn.00407350
lea ecx, [ebp - 0x260]
call fcn.004083d0
lea ecx, [ebp - 0x230]
mov dword [ebp - 4], 0xffffffff
call fcn.00407b20
jmp 0x4066a1
cmp dword [esi + 0xcd0], 0
je 0x40669b
lea eax, [esi + 0xca8]
push eax
mov ecx, esi
call fcn.00404740
lea ebx, [esi + 0x84c]
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, esi
call fcn.00406700
test eax, eax
je 0x405e60
mov eax, 1
jmp 0x4066d9
push 0
push 4
push 0x920
push dword [esi + 0x1180]
call dword [sym.imp.USER32.dll_PostMessageW]
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0040bdb1
mov esp, ebp
pop ebp
ret
push 0x80004005
call fcn.00401090
int3