Function at 0x406d90
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x579b04
mov eax, dword fs:[0]
push eax
sub esp, 0x1ac
mov eax, dword [0x5c8a30]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
cmp dword [edi + 4], 0
jne 0x406dcc
xor eax, eax
jmp 0x4074bf
lea eax, [ebp - 0xe0]
mov dword [ebp - 0x1ac], 0xff
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemPowerStatus]
test eax, eax
je 0x406df4
movzx eax, byte [ebp - 0xe0]
mov dword [ebp - 0x1ac], eax
mov eax, dword [edi + 0x104]
lea esi, [edi + 8]
push esi
lea ecx, [ebp - 0x1a8]
mov dword [ebp - 0x1b8], eax
call fcn.00404780
lea eax, [esi + 0x18]
mov dword [ebp - 4], 0
push eax
lea ecx, [ebp - 0x190]
call fcn.00404780
lea eax, [esi + 0x30]
mov byte [ebp - 4], 1
push eax
lea ecx, [ebp - 0x178]
call fcn.00404780
lea eax, [esi + 0x48]
mov byte [ebp - 4], 2
push eax
lea ecx, [ebp - 0x160]
call fcn.00404780
lea eax, [esi + 0x60]
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0x148]
call fcn.00404780
lea eax, [esi + 0x78]
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp - 0x130]
call fcn.00404780
lea eax, [esi + 0x90]
mov byte [ebp - 4], 5
push eax
lea ecx, [ebp - 0x118]
call fcn.00404780
mov eax, dword [esi + 0xa8]
movsd xmm0, qword [esi + 0xb8]
mov dword [ebp - 0x100], eax
mov eax, dword [esi + 0xac]
mov dword [ebp - 0xfc], eax
mov eax, dword [esi + 0xb0]
mov dword [ebp - 0xf8], eax
mov al, byte [esi + 0xc0]
mov byte [ebp - 0xe8], al
mov eax, dword [esi + 0xc4]
movsd qword [ebp - 0xf0], xmm0
mov dword [ebp - 0xe4], eax
xor ecx, ecx
mov dword [ebp - 4], 6
mov dword [ebp - 0xac], 0
mov dword [ebp - 0xa8], 7
mov word [ebp - 0xbc], cx
mov dword [ebp - 0xa4], ecx
mov dword [ebp - 0x90], ecx
mov dword [ebp - 0x8c], 7
mov word [ebp - 0xa0], cx
mov dword [ebp - 0x88], ecx
mov dword [ebp - 0x84], ecx
mov dword [ebp - 0x70], ecx
mov dword [ebp - 0x6c], 7
mov word [ebp - 0x80], cx
mov dword [ebp - 0x68], ecx
mov dword [ebp - 0x54], ecx
mov dword [ebp - 0x50], 7
mov word [ebp - 0x64], cx
mov dword [ebp - 0x4c], 0xffffffff
mov dword [ebp - 0x48], ecx
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x3c], ecx
mov byte [ebp - 4], 7
xorps xmm0, xmm0
push ecx
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0xc0], ecx
mov dword [ebp - 0x14], ecx
lea ecx, [ebp - 0x14]
push ecx
push 4
lea ecx, [ebp - 0x28]
movq qword [ebp - 0x28], xmm0
push ecx
push 4
lea ecx, [ebp - 0xc0]
push ecx
push 0x294040
push eax
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x4074a5
cmp dword [ebp - 0x28], 0
je 0x4074a5
cmp dword [ebp - 0x104], 8
lea eax, [ebp - 0x118]
push dword [ebp - 0x108]
cmovae eax, dword [ebp - 0x118]
lea ecx, [ebp - 0xbc]
push eax
call fcn.0040acd0
mov eax, dword [ebp - 0x1ac]
mov esi, dword [sym.imp.KERNEL32.dll_DeviceIoControl]
push 0
mov dword [ebp - 0x88], eax
lea eax, [ebp - 0x14]
push eax
push 4
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x1c], 0
push eax
push 0xc
lea eax, [ebp - 0x28]
mov dword [ebp - 0x24], 2
push eax
push 0x294044
push dword [ebp - 0xe4]
call esi
test eax, eax
je 0x407019
mov eax, 0xcccccccd
mul dword [ebp - 0x1c]
shr edx, 3
sub edx, 0x111
mov dword [ebp - 0x4c], edx
push 0
lea eax, [ebp - 0x14]
mov dword [ebp - 0x18], 0
push eax
push 4
lea eax, [ebp - 0x18]
mov dword [ebp - 0x24], 3
push eax
push 0xc
lea eax, [ebp - 0x28]
push eax
push 0x294044
push dword [ebp - 0xe4]
call esi
mov ecx, dword [sym.imp.KERNEL32.dll_GetTickCount]
test eax, eax
je 0x40714c
mov eax, 0x88888889
mul dword [ebp - 0x18]
mov esi, edx
shr esi, 5
mov dword [ebp - 0x1b4], esi
cmp esi, 0x384
jae 0x40714c
mov eax, dword [ebp - 0x1b8]
cmp dword [ebp - 0x1ac], eax
je 0x407093
call ecx
mov ecx, dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, 0x9c40
mov dword [0x5d2a00], eax
call ecx
sub eax, dword [0x5d2a00]
cmp eax, 0xea60
jbe 0x4070b2
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x5d2a00], eax
mov eax, dword [ebp - 0x18]
jmp 0x4070b8
mov eax, dword [edi + 0xe8]
mov dword [ebp - 0xa4], eax
lea ecx, [ebp - 0x1b0]
mov dword [ebp - 0x1b0], 0
cmp esi, 0x3c
jae 0x4070f3
call fcn.00404750
push esi
lea eax, [ebp - 0x1b0]
mov byte [ebp - 4], 8
push 0x588b8c
push eax
call fcn.00406c80
add esp, 0xc
jmp 0x40712c
mov eax, 0x88888889
mul esi
mov esi, edx
shr esi, 5
imul eax, esi, 0xffffffc4
add dword [ebp - 0x1b4], eax
call fcn.00404750
push dword [ebp - 0x1b4]
lea eax, [ebp - 0x1b0]
mov byte [ebp - 4], 9
push esi
push str.iRYO_
push eax
call fcn.00406c80
add esp, 0x10
push dword [ebp - 0x1b0]
lea ecx, [ebp - 0xa0]
call fcn.00405cd0
lea ecx, [ebp - 0x1b0]
mov byte [ebp - 4], 7
call fcn.00405450
mov eax, dword [ebp - 0x28]
xorps xmm0, xmm0
push 0
mov dword [ebp - 0xd4], eax
lea eax, [ebp - 0x14]
push eax
push 0x10
lea eax, [ebp - 0x38]
movlpd qword [ebp - 0xd0], xmm0
push eax
push 0x14
lea eax, [ebp - 0xd4]
movlpd qword [ebp - 0xc8], xmm0
push eax
push 0x29404c
push dword [ebp - 0xe4]
movups xmmword [ebp - 0x38], xmm0
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x4073af
mov eax, dword [ebp - 0x34]
mov esi, dword [ebp - 0xf8]
test eax, eax
je 0x407200
test esi, esi
je 0x407200
cmp eax, esi
ja 0x4071f6
movd xmm1, eax
cvtdq2pd xmm1, xmm1
shr eax, 0x1f
movd xmm0, esi
addsd xmm1, qword [eax*8 + 0x588de0]
cvtdq2pd xmm0, xmm0
mov eax, esi
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x588de0]
divsd xmm1, xmm0
mulsd xmm1, qword [0x588dc8]
addsd xmm1, qword [0x588db8]
cvttsd2si eax, xmm1
mov dword [ebp - 0x40], eax
jmp 0x407203
mov eax, 0x64
mov dword [ebp - 0x40], eax
jmp 0x407203
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x38]
mov dword [ebp - 0x84], ecx
test cl, 4
je 0x407218
push str.ck_WEQ5u
jmp 0x407240
test cl, 1
je 0x40723b
cmp dword [ebp - 0x2c], 0
jne 0x407234
test cl, 2
je 0x407234
cmp eax, 0x64
jne 0x407234
push str.5uEQ
jmp 0x407240
push 0x588bcc
jmp 0x407240
push 0x588bd8
lea ecx, [ebp - 0x80]
call fcn.00405cd0
mov eax, dword [ebp - 0x38]
and eax, 0xa
cmp al, 0xa
jne 0x40725f
push str.5u_lJTf
lea ecx, [ebp - 0x80]
call fcn.00405cd0
mov edx, dword [ebp - 0x2c]
mov ecx, 0x30d40
cmp dword [ebp - 0xfc], ecx
mov dword [ebp - 0x48], edx
cmova ecx, dword [ebp - 0xfc]
cmp edx, ecx
jg 0x407281
neg ecx
cmp edx, ecx
jge 0x407288
mov dword [ebp - 0x48], 0
cmp dword [ebp - 0x48], 0
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x44], eax
jle 0x4073af
cmp esi, eax
jbe 0x4073af
test eax, eax
je 0x4073af
mov eax, dword [ebp - 0x1b8]
cmp dword [ebp - 0x1ac], eax
je 0x4072cc
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, 0x9c40
mov dword [0x5d2a04], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [0x5d2a04]
cmp eax, 0xea60
jbe 0x4072fc
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub esi, dword [ebp - 0x34]
xor edx, edx
mov dword [0x5d2a04], eax
imul eax, esi, 0xe10
div dword [ebp - 0x48]
mov ecx, eax
jmp 0x407302
mov ecx, dword [edi + 0x124]
mov eax, 0x88888889
mov dword [ebp - 0x68], ecx
mul ecx
mov dword [ebp - 0x1ac], 0
mov ecx, edx
shr ecx, 5
mov dword [ebp - 0x1b4], ecx
cmp ecx, 0x3c
jae 0x407351
lea ecx, [ebp - 0x1ac]
call fcn.00404750
push dword [ebp - 0x1b4]
lea eax, [ebp - 0x1ac]
mov byte [ebp - 4], 0xa
push 0x588bf0
push eax
call fcn.00406c80
add esp, 0xc
jmp 0x407392
mov eax, 0x88888889
mul ecx
mov esi, edx
shr esi, 5
imul eax, esi, 0xffffffc4
add ecx, eax
mov dword [ebp - 0x1b4], ecx
lea ecx, [ebp - 0x1ac]
call fcn.00404750
push dword [ebp - 0x1b4]
lea eax, [ebp - 0x1ac]
mov byte [ebp - 4], 0xb
push esi
push 0x588c00
push eax
call fcn.00406c80
add esp, 0x10
push dword [ebp - 0x1ac]
lea ecx, [ebp - 0x64]
call fcn.00405cd0
lea ecx, [ebp - 0x1ac]
mov byte [ebp - 4], 7
call fcn.00405450
lea esi, [edi + 0xd0]
lea eax, [ebp - 0xbc]
cmp esi, eax
je 0x4073db
cmp dword [ebp - 0xa8], 8
mov ecx, esi
push dword [ebp - 0xac]
cmovae eax, dword [ebp - 0xbc]
push eax
call fcn.0040acd0
mov eax, dword [ebp - 0xa4]
lea ecx, [esi + 0x1c]
mov dword [esi + 0x18], eax
lea eax, [ebp - 0xa0]
cmp ecx, eax
je 0x40740b
cmp dword [ebp - 0x8c], 8
push dword [ebp - 0x90]
cmovae eax, dword [ebp - 0xa0]
push eax
call fcn.0040acd0
mov eax, dword [ebp - 0x88]
lea ecx, [esi + 0x3c]
mov dword [esi + 0x34], eax
mov eax, dword [ebp - 0x84]
mov dword [esi + 0x38], eax
lea eax, [ebp - 0x80]
cmp ecx, eax
je 0x407438
cmp dword [ebp - 0x6c], 8
push dword [ebp - 0x70]
cmovae eax, dword [ebp - 0x80]
push eax
call fcn.0040acd0
mov eax, dword [ebp - 0x68]
lea ecx, [esi + 0x58]
mov dword [esi + 0x54], eax
lea eax, [ebp - 0x64]
cmp ecx, eax
je 0x407459
cmp dword [ebp - 0x50], 8
push dword [ebp - 0x54]
cmovae eax, dword [ebp - 0x64]
push eax
call fcn.0040acd0
mov eax, dword [ebp - 0x4c]
mov dword [esi + 0x70], eax
mov eax, dword [ebp - 0x48]
mov dword [esi + 0x74], eax
mov eax, dword [ebp - 0x44]
mov dword [esi + 0x78], eax
mov eax, dword [ebp - 0x40]
mov dword [esi + 0x7c], eax
mov eax, dword [ebp - 0x3c]
mov dword [esi + 0x80], eax
xor esi, esi
nop dword [eax]
push esi
mov ecx, edi
call fcn.00407b30
test eax, eax
jne 0x407497
inc esi
cmp esi, 3
jb 0x407480
lea esi, [eax + 1]
jmp 0x4074a7
mov byte [edi + 0x154], 1
mov esi, 1
jmp 0x4074a7
xor esi, esi
lea ecx, [ebp - 0xbc]
call fcn.00405980
lea ecx, [ebp - 0x1a8]
call fcn.00405740
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00441ed9
mov esp, ebp
pop ebp
ret