Function at 0x1106b140
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x80
mov eax, dword [0x111ec774]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [esi + 4]
push ebx
mov ebx, dword [eax + 0x10]
push edi
mov dword [ebp - 0x58], eax
mov eax, dword [esi + 0x134]
push 0x30000000
mov dword [ebp - 0x50], eax
xor eax, eax
push 0x1119ee34
push ebx
mov dword [ebp - 0x60], eax
xor edi, edi
mov byte [ebp - 0x24], al
mov dword [ebp - 0x23], eax
mov dword [ebp - 0x1f], eax
mov dword [ebp - 0x1b], eax
mov dword [ebp - 0x17], eax
mov dword [ebp - 0x13], eax
mov dword [ebp - 0xf], eax
mov dword [ebp - 0xb], eax
mov byte [ebp - 7], al
call fcn.11089ca0
mov ecx, dword [ebp - 0x58]
mov ecx, dword [ecx + 0xc]
add esp, 0xc
push 4
push 0x2710
push 0x111a2e90
push 0x111a0fc0
call fcn.1105e820
mov dword [ebp - 0x5c], eax
call dword [sym.imp.KeRneL32.DLl_GetTickCount]
mov edx, dword [esi + 0x130]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x50]
mov ecx, dword [eax + 0x54]
push edx
call ecx
add esp, 4
test eax, eax
je 0x1106b243
lea ebx, [ebx]
mov edx, dword [esi + 0x370]
cmp edx, 0xfffffffe
je 0x1106b204
mov eax, dword [esi + 0x370]
cmp eax, 0xffffffff
jne 0x1106b243
call dword [sym.imp.KeRneL32.DLl_GetTickCount]
sub eax, dword [ebp - 0x54]
cmp eax, dword [ebp - 0x5c]
jae 0x1106b243
test byte [ebx + 0x14], 1
jne 0x1106b21e
mov edx, dword [ebx]
mov eax, dword [edx + 0x20]
push 0
push 0
mov ecx, ebx
call eax
mov dword [ebp - 0x60], eax
test eax, eax
jne 0x1106b243
mov ecx, dword [esi + 0x390]
push 0x64
push ecx
call dword [sym.imp.KeRneL32.DLl_WaitForSingleObject]
mov edx, dword [esi + 0x130]
mov eax, dword [ebp - 0x50]
mov ecx, dword [eax + 0x54]
push edx
call ecx
add esp, 4
test eax, eax
jne 0x1106b1e0
call dword [sym.imp.KeRneL32.DLl_GetTickCount]
sub eax, dword [ebp - 0x54]
cmp eax, 0x1388
jb 0x1106b275
mov edx, dword [esi + 0x370]
mov eax, dword [ebp - 0x60]
push edx
push eax
call dword [sym.imp.KeRneL32.DLl_GetTickCount]
sub eax, dword [ebp - 0x54]
push eax
push 0x111a2e58
call fcn.11147060
add esp, 0x10
mov ecx, dword [esi + 0x370]
test ecx, ecx
jne 0x1106b31f
push 0x30000000
push 0x1119ee34
push ebx
call fcn.11089ca0
add esp, 0xc
cmp dword [ebp + 0xc], edi
je 0x1106b31f
mov edx, dword [esi + 0x130]
mov eax, dword [ebp - 0x50]
mov ecx, dword [eax + 0x54]
push edx
call ecx
add esp, 4
test eax, eax
je 0x1106b30c
mov edx, dword [esi + 0x370]
test edx, edx
jne 0x1106b30c
cmp dword [esi + 0x4a8], edi
jne 0x1106b30c
push 0x32
call dword [sym.imp.KeRneL32.DLl_Sleep]
call dword [sym.imp.KeRneL32.DLl_GetTickCount]
sub eax, dword [ebp - 0x54]
cmp eax, dword [ebp - 0x5c]
jae 0x1106b2f5
mov eax, dword [esi + 0x130]
mov ecx, dword [ebp - 0x50]
mov edx, dword [ecx + 0x54]
push eax
call edx
add esp, 4
test eax, eax
jne 0x1106b2b5
jmp 0x1106b30c
push 0x111a2e3c
call fcn.11147060
add esp, 4
mov dword [esi + 0x370], 0xfffffffc
push 0x30000000
push 0x1119ee34
push ebx
call fcn.11089ca0
add esp, 0xc
mov eax, dword [esi + 0x370]
test eax, eax
jne 0x1106b37c
mov ecx, dword [esi + 0x3c4]
inc ecx
cmp ecx, 1
jbe 0x1106b6b0
cmp dword [esi + 0x398], edi
jne 0x1106b6b0
mov ecx, dword [ebp - 0x58]
mov dword [esi + 0x398], 1
mov edx, dword [ebx]
call fcn.11064cf0
push eax
mov eax, dword [edx + 4]
push 0
push 0x18a1
push ebx
call eax
add esp, 0x10
mov eax, edi
pop edi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.11162bb7
mov esp, ebp
pop ebp
ret
or edi, 0xffffffff
cmp dword [ebp - 0x60], 0
jne 0x1106b666
mov eax, dword [esi + 0x370]
add eax, 4
cmp eax, 0x1d
ja case.0x1106b3a2.0
movzx ecx, byte [eax + 0x1106b70c]
jmp dword [ecx*4 + 0x1106b6c4]
mov edi, 0x18a0
mov dword [ebp - 0x50], 0x1956
jmp 0x1106b506
mov edi, 0x18a2
mov dword [ebp - 0x50], 0x1957
jmp 0x1106b506
mov edi, 0x18a3
mov dword [ebp - 0x50], 0x1958
jmp 0x1106b506
mov edi, 0x1947
mov dword [ebp - 0x50], 0x1959
jmp 0x1106b506
mov edi, 0x18a4
mov dword [ebp - 0x50], 0x195a
jmp 0x1106b506
mov edi, 0x18a5
mov dword [ebp - 0x50], 0x195b
jmp 0x1106b506
mov eax, dword [ebp + 0x10]
mov edi, eax
neg edi
sbb edi, edi
and edi, 0xab
add edi, 0x18a7
neg eax
sbb eax, eax
add eax, 0x195d
cmp dword [ebp + 8], 0
mov dword [ebp - 0x50], eax
jne 0x1106b506
mov eax, edi
pop edi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.11162bb7
mov esp, ebp
pop ebp
ret
mov edi, 0x18a6
mov dword [ebp - 0x50], 0x195e
jmp 0x1106b506
mov edi, 0x1935
mov dword [ebp - 0x50], 0x195f
jmp 0x1106b506
mov edi, 0x1943
mov dword [ebp - 0x50], 0x1960
jmp 0x1106b506
mov edi, 0x18b0
mov dword [ebp - 0x50], 0x1958
jmp 0x1106b506
mov edi, 0x194f
mov dword [ebp - 0x50], 0x1961
jmp 0x1106b506
mov edi, 0x1950
mov dword [ebp - 0x50], 0x1962
jmp 0x1106b506
mov edi, 0x1951
mov dword [ebp - 0x50], 0x1963
jmp 0x1106b506
mov edi, 0x1953
mov dword [ebp - 0x50], 0x1964
jmp 0x1106b506
mov edi, 0x1966
mov dword [ebp - 0x50], 0x1967
jmp 0x1106b506
mov edi, 0x1969
mov dword [ebp - 0x50], 0x196a
jmp 0x1106b506
mov edx, dword [esi + 0x370]
push edx
lea eax, [ebp - 0x24]
push 0x111a2e34
push eax
mov edi, 0x18a3
mov dword [ebp - 0x50], 0x1958
call dword [sym.imp.uSEr32.dll_wsprintfA]
add esp, 0xc
cmp byte [ebp - 0x24], 0
je 0x1106b514
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x54], ecx
jmp 0x1106b51d
lea edx, [esi + 0x377]
mov dword [ebp - 0x54], edx
cmp edi, 0x18a0
je 0x1106b552
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x58]
push eax
call fcn.11064cf0
push eax
push edi
call fcn.11147af0
push eax
push 0x111a130c
mov dword [ebp - 0x5c], eax
call fcn.11147060
mov ecx, dword [ebp - 0x5c]
push ecx
call fcn.11162777
add esp, 0x18
mov edx, dword [ebp - 0x58]
mov eax, dword [edx + 0xc]
push eax
push ebx
call fcn.11068700
add esp, 8
cmp edi, 0x1950
jne 0x1106b5ad
cmp dword [esi + 0x3a8], 0
jle 0x1106b5ad
push 0x111a2e18
call fcn.11147060
add esp, 4
mov ecx, 0x5b
mov word [ebp - 0x4c], cx
mov ecx, dword [ebp - 0x58]
mov edx, dword [ecx]
mov edx, dword [edx + 0x44]
push 5
push 2
lea eax, [ebp - 0x4c]
push eax
call edx
mov eax, edi
pop edi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.11162bb7
mov esp, ebp
pop ebp
ret
mov eax, dword [ebx]
mov edx, dword [eax + 0x54]
mov ecx, ebx
call edx
test eax, eax
je 0x1106b5c2
cmp edi, 0x18a0
je 0x1106b5dd
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x58]
mov edx, dword [ebx]
push eax
call fcn.11064cf0
mov ecx, dword [edx + 4]
push eax
push 0
push edi
push ebx
call ecx
add esp, 0x14
cmp dword [esi + 0x614], 0
je 0x1106b6b0
mov eax, dword [ebp - 0x50]
mov ebx, 0x11195264
test eax, eax
je 0x1106b605
mov edx, dword [ebp - 0x54]
push edx
push eax
call fcn.11147af0
add esp, 8
mov ebx, eax
xor eax, eax
push 0xa
mov dword [ebp - 0x70], eax
push eax
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x54]
push eax
mov dword [ebp - 0x70], 2
call fcn.11164536
mov ecx, dword [esi + 0x370]
mov edx, dword [esi + 0x61c]
push edx
mov edx, dword [esi + 0x614]
mov dword [ebp - 0x6c], eax
lea eax, [ebp - 0x70]
mov dword [ebp - 0x64], ecx
mov ecx, dword [esi + 0x618]
push eax
push ecx
push 0
mov dword [ebp - 0x68], ebx
call edx
add esp, 0x1c
mov eax, edi
pop edi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.11162bb7
mov esp, ebp
pop ebp
ret
cmp dword [esi + 0x614], 0
je 0x1106b6b0
xor eax, eax
mov dword [ebp - 0x80], eax
push 0x1965
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x80], 1
call fcn.11146710
mov edx, dword [esi + 0x618]
mov dword [ebp - 0x78], eax
mov eax, dword [esi + 0x61c]
push eax
mov eax, dword [esi + 0x614]
lea ecx, [ebp - 0x80]
push ecx
push edx
push 0
call eax
add esp, 0x14
mov ecx, dword [ebp - 4]
mov eax, edi
pop edi
xor ecx, ebp
pop ebx
call fcn.11162bb7
mov esp, ebp
pop ebp
ret