Function at 0x10014f9a
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
lea ebp, [esp - 0xc9c]
sub esp, 0xd1c
mov eax, dword [0x10083adc]
xor eax, ebp
mov dword [ebp + 0xc98], eax
mov eax, dword [ebp + 0xca8]
push ebx
push esi
mov esi, dword [ebp + 0xca4]
push edi
xor ebx, ebx
push 0x1ff
mov dword [ebp - 0x74], eax
lea eax, [ebp + 0x595]
push ebx
push eax
mov dword [ebp - 0x78], esi
mov byte [ebp + 0x594], bl
call fcn.10044b80
add esp, 0xc
cmp esi, ebx
je 0x10015086
cmp byte [esi], bl
je 0x10015086
mov eax, esi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x10014ffc
sub eax, edx
cmp eax, 0x200
jae 0x10015086
lea eax, [ebp + 0x594]
push esi
push eax
call fcn.1000789a
lea eax, [ebp + 0x594]
push eax
call fcn.10046859
add esp, 0xc
mov esi, 0x10184a70
cmp byte [0x10184a70], bl
je 0x1001506c
lea eax, [ebp + 0x594]
push esi
push eax
call fcn.10007842
pop ecx
pop ecx
test eax, eax
je 0x1001506c
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call edi
mov ecx, dword [0x10184a6c]
add ecx, 0x3e8
cmp ecx, eax
jbe 0x1001506c
call edi
mov dword [0x10184a6c], eax
jmp 0x10015347
lea eax, [ebp + 0x594]
push eax
push esi
call fcn.1000789a
pop ecx
pop ecx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x10184a6c], eax
mov esi, dword [0x101ac89c]
mov dword [ebp - 0x70], ebx
mov edi, 0x10112ba8
jmp 0x100150b0
cmp dword [ebp - 0x70], 0x20
jge 0x100150de
push eax
call fcn.1000770a
pop ecx
test eax, eax
ja 0x100150c4
dec esi
jns 0x100150ad
push 0x1f
pop esi
inc dword [ebp - 0x70]
mov eax, esi
imul eax, eax, 0x1210
lea eax, [eax + 0x1018869c]
cmp byte [eax], bl
jne 0x10015096
jmp 0x100150de
imul esi, esi, 0x1210
lea eax, [esi + 0x1018869c]
mov edx, edi
sub edx, eax
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
cmp cl, bl
jne 0x100150d4
cmp dword [0x1015568c], ebx
je 0x100150f5
push edi
push str.TrojanMonPrinter_g_1stOpenFile__s_
push ebx
call fcn.1004122a
add esp, 0xc
mov eax, dword [0x1015575c]
cdq
mov ecx, 0x3e8
idiv ecx
or dword [0x10156ca0], 0xffffffff
mov esi, 0x1ff
push esi
lea eax, [ebp + 0x395]
push ebx
push eax
mov byte [ebp + 0x394], bl
add edx, 0x64
inc dword [0x1015575c]
mov dword [ebp - 0x70], edx
call fcn.10044b80
push 0x3ff
lea eax, [ebp - 0x6b]
push ebx
push eax
mov byte [ebp - 0x6c], bl
call fcn.10044b80
push dword [ebp - 0x70]
lea eax, [ebp + 0x394]
push 0x10061178
push eax
call fcn.10044ec8
push esi
lea eax, [ebp + 0xa99]
push ebx
push eax
mov byte [ebp + 0xa98], bl
call fcn.10044b80
lea eax, [ebp + 0xa98]
push eax
call fcn.10040e5b
add esp, 0x34
cmp byte [0x102b4630], bl
je 0x10015193
xor eax, eax
mov cl, byte [eax + 0x102b4630]
mov byte [ebp + eax + 0xa98], cl
inc eax
cmp cl, bl
jne 0x10015181
push esi
lea eax, [ebp + 0x899]
push ebx
push eax
mov byte [ebp + 0x898], bl
call fcn.10044b80
lea eax, [ebp - 0x80]
push eax
call fcn.1004532b
lea eax, [ebp - 0x80]
push eax
call fcn.10045304
add esp, 0x14
cmp eax, ebx
je 0x100151dc
push eax
push str._Y__m__d__H:_M:_S
lea eax, [ebp + 0x898]
push 0x200
push eax
call fcn.10045fb5
add esp, 0x10
jmp 0x100151ef
lea eax, [ebp + 0x898]
push str.0000
push eax
call fcn.1000789a
pop ecx
pop ecx
push dword [ebp + 0xcac]
lea eax, [ebp + 0xa98]
mov esi, 0x4000
cmp byte [0x10112ba8], bl
je 0x1001520b
push edi
jmp 0x1001520e
push dword [ebp - 0x78]
push dword [ebp - 0x74]
push eax
push esi
push 2
lea eax, [ebp + 0x898]
push eax
lea eax, [ebp - 0x6c]
push str._s_d_d_s_s_s_d
push eax
call fcn.10044ec8
mov al, byte [0x10150868]
add esp, 0x24
test al, 1
je 0x100152a3
cmp byte [0x10112ba8], bl
je 0x100152a3
cmp byte [0x10168550], bl
jne 0x1001524a
test al, 0x20
je 0x100152a3
push 0x104
lea eax, [ebp + 0x794]
push ebx
push eax
call fcn.10044b80
push 1
lea eax, [ebp + 0x794]
push eax
push edi
call fcn.1003568d
lea eax, [ebp + 0x794]
push eax
push 0x1014d918
push dword [ebp + 0xcac]
lea eax, [ebp + 0xa98]
push edi
push dword [ebp - 0x74]
push eax
push esi
push 2
lea eax, [ebp + 0x898]
push eax
lea eax, [ebp - 0x6c]
push str._s_d_d_s_s_s_d_s_s
push eax
call fcn.10044ec8
add esp, 0x44
push dword [ebp - 0x70]
lea eax, [ebp + 0xa98]
push str.Software_trueEP_tc_FileP
push eax
call fcn.10044ec8
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp + 0x394]
push eax
lea eax, [ebp + 0xa98]
push eax
mov esi, reloc.WS2_32.dll_bind
push esi
call fcn.10042219
add esp, 0x1c
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push str.tc_Last
push str.SOFTWARE_trueEP_tc_Env
push esi
call fcn.10041961
mov edi, dword [sym.imp.USER32.dll_FindWindowA]
add esp, 0x10
push 0x100610d8
push ebx
call edi
mov dword [0x10153a14], eax
cmp eax, ebx
jne 0x10015336
push 0x100610d8
push ebx
call edi
mov dword [0x10153a14], eax
cmp eax, ebx
jne 0x10015336
push ebx
push str.tc_hnd
push str.SOFTWARE_trueEPTC_Env_tc_COMMUNICATION
push esi
call fcn.10040c17
add esp, 0x10
mov dword [0x10153a14], eax
cmp eax, ebx
je 0x10015347
push 2
push dword [ebp - 0x70]
push 0xcfc
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
mov ecx, dword [ebp + 0xc98]
pop edi
pop esi
xor ecx, ebp
xor eax, eax
pop ebx
call fcn.10044b6f
add ebp, 0xc9c
leave
ret