Function at 0x4047a0
Capabilities:
Check for time delay via gettickcount
Encode data using xor
Get common file path
Get disk information

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x1e0
mov eax, dword [ebp + 0x14]
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0xc]
mov esi, dword [ebp + 8]
mov dword [esp + 0x1bc], 0
mov dword [esp + 0x1b8], 0x2018
mov edi, dword [esp + 0x1c8]
mov ebx, edi
and ebx, 0x23c7
mov dword [esp + 0x1c8], ebx
mov byte [esp + 0x1b7], 0
mov dword [esp + 0x1b0], 0x190b
mov ebx, dword [esp + 0x1b8]
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x1bc]
mov dword [esp + 0x4c], eax
xor eax, eax
mov dword [esp + 0x48], eax
mov eax, 0x48f7
sub eax, ebx
mov ebx, dword [esp + 0x48]
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x4c]
sbb ebx, eax
mov eax, dword [esp + 0x44]
mov dword [esp + 0x1a8], eax
mov dword [esp + 0x1ac], ebx
mov eax, dword [esp + 0x1b0]
xor eax, 0x190b
mov dword [esp + 0x174], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 0x170], eax
mov dword [esp + 0x178], ecx
mov dword [esp + 0x17c], edx
mov ecx, edi
and ecx, 0x3344
mov dword [esp + 0x1c8], ecx
mov dword [esp + 0x158], esi
mov ecx, dword [esp + 0x1b0]
mov edx, 0x1a0b
sub edx, ecx
mov dword [esp + 0x1c8], 0xffffa4af
mov ecx, esp
lea esi, [esp + 0x55]
mov dword [ecx + 4], esi
mov dword [ecx], edx
mov ecx, dword [sym.imp.KERNEL32.dll_GetTempPathA]
mov dword [esp + 0x40], ebx
mov dword [esp + 0x3c], edi
mov dword [esp + 0x38], esi
call ecx
sub esp, 8
mov byte [esp + 0x58], 0
mov ecx, esp
mov edx, dword [esp + 0x38]
mov dword [ecx], edx
mov ecx, dword [sym.imp.KERNEL32.dll_GetDriveTypeA]
mov dword [esp + 0x34], eax
call ecx
sub esp, 4
mov dword [esp + 0x1a4], eax
mov ecx, dword [esp + 0x44]
xor ecx, 0x3385
mov edx, dword [esp + 0x40]
or ecx, edx
mov dword [esp + 0x30], eax
mov dword [esp + 0x2c], ecx
je 0x404a1b
jmp 0x4048fd
mov eax, dword [esp + 0x30]
cmp eax, 3
je 0x40492c
mov dword [esp + 0x1d4], 0
mov dword [esp + 0x1d0], 0x52f4a0
mov dword [esp + 0x174], 0
jmp 0x404a8b
mov eax, dword [sym.imp.KERNEL32.dll_GetTickCount]
call eax
mov ecx, dword [esp + 0x1b0]
add ecx, 0xffffe6f5
mov edx, dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [esp + 0x28], eax
mov dword [esp + 0x24], ecx
call edx
lea ecx, [0x401226]
mov edx, dword [esp + 0x24]
mov dword [esp + 0x164], edx
mov dword [esp + 0x160], ecx
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x160]
mov cl, byte [esp + 0x1b7]
xor cl, 1
mov edx, esp
mov dword [edx + 4], eax
mov dword [edx], 0x401230
lea eax, [esp + 0x16c]
mov byte [esp + 0x1f], cl
mov ecx, eax
call fcn.00404aa0
sub esp, 8
mov ecx, dword [esp + 0x3c]
and ecx, 0x58c5
mov dword [esp + 0x1c8], ecx
cmp eax, 0
setne bl
mov bh, byte [esp + 0x1f]
xor bl, bh
test bl, 1
jne 0x4049c1
jmp 0x404a1b
mov eax, 0x190c
mov ecx, dword [esp + 0x1b0]
mov edx, dword [esp + 0x164]
sub eax, ecx
add edx, eax
mov dword [esp + 0x164], edx
cmp dword [esp + 0x164], 0x186a0
jle 0x4049ee
jmp 0x404a1b
lea eax, [0x40124e]
lea ecx, [esp + 0x188]
mov edx, dword [esp + 0x164]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.0040522c
mov dword [esp + 0x18], eax
jmp 0x40496c
movss xmm0, dword [0x4011ec]
mov dword [esp + 0x168], 0x6652
mov al, byte [esp + 0x1c7]
add al, 0xef
mov ecx, dword [esp + 0x168]
mov byte [esp + 0x1c7], al
mov edx, dword [esp + 0x1b0]
xor edx, 0x6fd5
movss dword [esp], xmm0
mov dword [esp + 0x14], edx
mov dword [esp + 0x10], ecx
call fcn.00418ab0
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
cmp ecx, edx
je 0x404a1b
mov dword [esp + 0x174], 0
mov al, byte [esp + 0x1c7]
sub al, 0x3d
mov byte [esp + 0x1c7], al
mov eax, dword [esp + 0x174]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret 0x10