Function at 0x4066c0
Capabilities:
Check for time delay via gettickcount
Create directory

Disassembly:
mov eax, 0x2128
call fcn.00458680
push ebp
mov ebp, ecx
push 0x494b88
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov ecx, dword [esp + 0x2130]
test ecx, ecx
jl 0x40675a
mov eax, dword [ebp + 0x122f8]
test eax, eax
je 0x40675a
mov edx, dword [ebp + 0x122fc]
sub edx, eax
mov eax, 0x60f25deb
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add edx, eax
cmp ecx, edx
jae 0x40675a
mov eax, dword [esp + 0x2138]
test eax, eax
lea eax, [ecx*8]
jne 0x40673c
sub eax, ecx
lea edx, [eax + eax*2]
lea eax, [ecx + edx*8]
mov ecx, dword [ebp + 0x122f8]
mov edx, dword [esp + 0x2134]
lea eax, [ecx + eax*4 + 0x16c]
add dword [eax], edx
jmp 0x40675a
mov edx, dword [ebp + 0x122f8]
sub eax, ecx
lea eax, [eax + eax*2]
lea ecx, [ecx + eax*8]
lea eax, [edx + ecx*4 + 0x170]
mov ecx, dword [esp + 0x2134]
add dword [eax], ecx
mov eax, dword [0x49f6b0]
test eax, eax
jne 0x406778
push 0x494b88
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
pop ebp
add esp, 0x2128
ret 0xc
mov al, byte [0x494b7c]
push ebx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
test al, 1
push edi
jne 0x406798
or al, 1
mov byte [0x494b7c], al
call esi
mov dword [0x494b78], eax
call esi
mov ecx, dword [0x49f6b4]
mov esi, dword [0x494b78]
lea ecx, [ecx + ecx*2]
lea ecx, [ecx + ecx*4]
lea ecx, [ecx + ecx*4]
lea ecx, [ecx + ecx*4]
lea edx, [ecx + ecx*4]
shl edx, 5
add edx, esi
cmp eax, edx
jbe 0x406aab
mov dword [0x494b78], eax
mov al, byte [0x494b70]
mov byte [esp + 0x28], al
mov ecx, 0x41
xor eax, eax
lea edi, [esp + 0x29]
rep stosd dword es:[edi], eax
push 0x49f298
lea ecx, [esp + 0x2c]
push 0x48e48c
push ecx
call fcn.004585a3
add esp, 0xc
lea edx, [esp + 0x28]
push 0
push edx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov al, byte [0x494b70]
mov ecx, 0x400
mov byte [esp + 0x1134], al
xor eax, eax
lea edi, [esp + 0x1135]
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x18]
push ecx
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
mov edx, dword [esp + 0x1e]
mov eax, dword [esp + 0x1a]
mov ecx, dword [esp + 0x18]
and edx, 0xffff
and eax, 0xffff
push edx
and ecx, 0xffff
push eax
push ecx
lea edx, [esp + 0x1140]
push str._04d_02d_02d
push edx
call fcn.004585a3
lea eax, [esp + 0x1148]
lea ecx, [esp + 0x3c]
push eax
push 0x49f298
push str._sdata_s.txt
push ecx
call fcn.004585a3
lea edx, [esp + 0x4c]
push 0x48e248
push edx
call fcn.00458d74
mov edi, eax
add esp, 0x2c
test edi, edi
je 0x406980
push 2
push 0
push edi
call fcn.00458c8a
push edi
call fcn.00458b07
push 0
push 0
push edi
mov ebx, eax
call fcn.00458c8a
add esp, 0x1c
test ebx, ebx
jle 0x406977
lea eax, [ebx + 1]
push eax
call fcn.0046efc9
add esp, 4
mov esi, eax
test esi, esi
mov dword [esp + 0x10], esi
push edi
je 0x406978
push 1
push ebx
push esi
call fcn.0045903f
push edi
call fcn.00458a28
mov byte [esi + ebx], 0
mov al, byte [esi]
add esp, 0x14
mov ebx, esi
test al, al
je 0x40696f
jmp 0x4068f8
mov esi, dword [esp + 0x10]
push 0x48e4d0
push ebx
call fcn.00458600
mov edi, eax
add esp, 8
test edi, edi
je 0x40696f
mov byte [edi], 0
inc edi
push 0x48e4d0
push edi
call fcn.00458600
mov esi, eax
add esp, 8
test esi, esi
je 0x40696b
mov byte [esi], 0
inc esi
push 0x48e240
push esi
call fcn.00458600
add esp, 8
mov dword [esp + 0x14], eax
test eax, eax
je 0x40696b
push esi
mov byte [eax], 0
call fcn.00458e12
add esp, 4
push eax
push edi
call fcn.00458e12
add esp, 4
mov ecx, ebp
push eax
push ebx
call fcn.00406540
mov ecx, dword [esp + 0x14]
mov al, byte [ecx + 2]
lea ebx, [ecx + 2]
test al, al
jne 0x4068f4
mov esi, dword [esp + 0x10]
push esi
call fcn.0046eff2
jmp 0x40697d
push edi
call fcn.00458a28
add esp, 4
lea edx, [esp + 0x28]
push 0x48e4cc
push edx
call fcn.00458d74
mov esi, eax
add esp, 8
test esi, esi
mov dword [esp + 0x10], esi
je 0x406aab
mov al, byte [0x494b70]
mov ecx, 0x400
mov byte [esp + 0x130], al
xor eax, eax
lea edi, [esp + 0x131]
push str.username_treceived_byte__tsent_byte__r_n
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x134]
push ecx
call fcn.004585a3
lea edi, [esp + 0x138]
or ecx, 0xffffffff
xor eax, eax
push esi
repne scasb al, byte es:[edi]
not ecx
dec ecx
push 1
lea edx, [esp + 0x140]
push ecx
push edx
call fcn.00458f06
add esp, 0x18
xor ebx, ebx
xor esi, esi
mov eax, dword [ebp + 0x122f8]
test eax, eax
je 0x406a9e
mov ecx, dword [ebp + 0x122fc]
sub ecx, eax
mov eax, 0x60f25deb
imul ecx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add edx, eax
cmp ebx, edx
jae 0x406a9e
mov ecx, dword [ebp + 0x122f8]
mov edx, dword [esi + ecx + 0x170]
lea eax, [esi + ecx]
push edx
lea edx, [esp + 0x134]
mov ecx, dword [eax + 0x16c]
push ecx
push eax
push str._s_t_ld_t_ld_r_n
push edx
call fcn.004585a3
mov eax, dword [esp + 0x24]
lea edi, [esp + 0x144]
push eax
or ecx, 0xffffffff
xor eax, eax
push 1
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
lea ecx, [esp + 0x150]
push ecx
call fcn.00458f06
mov edx, dword [ebp + 0x122f8]
xor eax, eax
add esp, 0x24
inc ebx
mov dword [esi + edx + 0x16c], eax
mov ecx, dword [ebp + 0x122f8]
mov dword [esi + ecx + 0x170], eax
add esi, 0x2a4
jmp 0x4069f7
mov edx, dword [esp + 0x10]
push edx
call fcn.00458a28
add esp, 4
push 0x494b88
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
pop edi
pop esi
pop ebx
pop ebp
add esp, 0x2128
ret 0xc