Function at 0x1115ec20
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x68
mov eax, dword [0x111ec774]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
mov ebx, ecx
cmp byte [ebx + 8], 0xff
mov dword [ebp - 0x5c], eax
lea eax, [ebx + 8]
push esi
push edi
mov dword [ebp - 0x58], eax
jne 0x1115ed72
mov ecx, dword [ebx]
mov esi, dword [ecx]
mov edx, dword [esi]
mov eax, dword [edx + 4]
push 0
push 0x18
lea edi, [ebx + 0xd8]
push edi
push 0x111c13e0
push 0x111a0fa4
mov ecx, esi
call eax
test eax, eax
jns 0x1115ec93
mov ecx, dword [0x1119dff0]
mov dword [edi], ecx
mov edx, dword [0x1119dff4]
mov dword [edi + 4], edx
mov eax, dword [0x1119dff8]
mov dword [edi + 8], eax
mov ecx, dword [0x1119dffc]
mov dword [edi + 0xc], ecx
mov edx, dword [esi]
mov edx, dword [edx + 4]
push 0
push 0x30
lea eax, [ebp - 0x54]
push eax
push 0x111c13d4
push 0x111a0fa4
mov ecx, esi
call edx
test eax, eax
jns 0x1115ece8
mov eax, dword [0x111c13c0]
mov ecx, dword [0x111c13c4]
mov edx, dword [0x111c13c8]
mov dword [ebp - 0x54], eax
mov eax, dword [0x111c13cc]
mov dword [ebp - 0x50], ecx
mov cx, word [0x111c13d0]
mov dword [ebp - 0x4c], edx
mov dl, byte [0x111c13d2]
mov dword [ebp - 0x48], eax
mov word [ebp - 0x44], cx
mov byte [ebp - 0x42], dl
mov ecx, dword [ebp - 0x5c]
push ecx
lea edx, [ebp - 0x54]
lea eax, [ebx + 0xf0]
push edx
push eax
call dword [sym.imp.uSEr32.dll_wsprintfA]
mov eax, dword [esi]
mov edx, dword [eax + 4]
add esp, 0xc
push 0
push 0x84
lea ecx, [ebp - 0x54]
push ecx
push 0x111c13b4
push 0x111a0fa4
mov ecx, esi
call edx
test eax, eax
jns 0x1115ed57
push 0
push 0
push 6
call fcn.11145c70
add esp, 0xc
test eax, eax
je 0x1115ed45
mov ecx, 6
mov esi, 0x111c1398
lea edi, [ebp - 0x54]
rep movsd dword es:[edi], dword [esi]
jmp 0x1115ed56
mov ecx, 5
mov esi, 0x111c1380
lea edi, [ebp - 0x54]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov ecx, dword [ebp - 0x58]
lea eax, [ebx + 0xf0]
push eax
lea eax, [ebp - 0x54]
push eax
push ecx
call dword [sym.imp.uSEr32.dll_wsprintfA]
mov eax, dword [ebp - 0x58]
add esp, 0xc
cmp byte [eax], 0
je 0x1115ef05
mov edx, dword [ebx]
mov eax, dword [edx + 4]
xor ecx, ecx
mov dword [ebp - 0x60], eax
cmp dword [ebx + 0x120], ecx
jne 0x1115ef05
mov al, byte [ebx + 0xd8]
lea esi, [ebx + 0xd8]
mov dword [ebx + 0xd4], ecx
test al, al
jne 0x1115edad
lea ecx, [ebx + 0xf0]
mov edi, dword [sym.imp.uSEr32.dll_FindWindowA]
movsx eax, al
neg eax
sbb eax, eax
and eax, esi
push ecx
push eax
call edi
mov dword [ebx + 0x120], eax
test eax, eax
jne 0x1115ef05
call dword [sym.imp.uSEr32.dll_GetForegroundWindow]
mov ecx, dword [ebx]
mov edx, dword [ecx]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x58]
push edx
push eax
call fcn.1115ea00
add esp, 8
test eax, eax
jne 0x1115ee32
mov esi, dword [ebp - 0x58]
mov eax, dword [ebp - 0x60]
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push esi
push 0
push 0x5d2
push eax
call edx
add esp, 0x10
mov byte [esi], 0
call dword [sym.imp.KeRneL32.DLl_GetLastError]
push eax
push 0x111c1370
call fcn.11147060
add esp, 8
pop edi
pop esi
mov eax, 0x5d2
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.11162bb7
mov esp, ebp
pop ebp
ret
call dword [sym.imp.KeRneL32.DLl_GetTickCount]
mov dword [ebp - 0x68], eax
jmp 0x1115ee40
mov al, byte [esi]
test al, al
je 0x1115ee4a
xor ecx, ecx
jmp 0x1115ee50
lea ecx, [ebx + 0xf0]
movsx eax, al
neg eax
sbb eax, eax
and eax, esi
push ecx
push eax
call edi
mov dword [ebx + 0x120], eax
test eax, eax
jne 0x1115ee7f
push 0x64
call dword [sym.imp.KeRneL32.DLl_Sleep]
call dword [sym.imp.KeRneL32.DLl_GetTickCount]
sub eax, dword [ebp - 0x68]
cmp eax, 0x2710
jl 0x1115ee40
push 0x7d0
call dword [sym.imp.KeRneL32.DLl_Sleep]
mov eax, dword [ebp - 0x64]
push eax
call dword [sym.imp.uSEr32.dll_SetForegroundWindow]
mov eax, dword [ebx + 0x120]
test eax, eax
jne 0x1115eed7
mov eax, dword [ebp - 0x60]
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push esi
add ebx, 0xf0
push ebx
push 0
push 0x5d3
push eax
call edx
mov eax, dword [ebp - 0x58]
add esp, 0x14
pop edi
pop esi
mov byte [eax], 0
mov eax, 0x5d3
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.11162bb7
mov esp, ebp
pop ebp
ret
lea ecx, [ebp - 0x5c]
push ecx
push eax
mov dword [ebp - 0x5c], 0
call dword [sym.imp.uSEr32.dll_GetWindowThreadProcessId]
mov edx, dword [ebp - 0x5c]
push edx
call dword [sym.imp.KeRneL32.DLl_GetProcessVersion]
shr eax, 0x10
cmp eax, 4
jae 0x1115ef05
mov dword [ebx + 0x13c], 1
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
xor eax, eax
pop ebx
call fcn.11162bb7
mov esp, ebp
pop ebp
ret