Function at 0x10158850
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x680
mov eax, dword [0x102519c8]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp + 0x10]
push ebx
mov dword [ebp - 0x664], eax
xor ebx, ebx
mov eax, dword [ebp + 0x18]
push esi
mov esi, dword [ebp + 8]
mov dword [ebp - 0x64c], eax
mov eax, dword [ebp + 0x14]
and eax, 0x400
mov dword [ebp - 0x630], esi
mov dword [esi + 0x4ac], 0
mov dword [ebp - 0x65c], eax
mov eax, dword [ecx]
push edi
push ecx
mov dword [ebp - 0x660], ecx
mov dword [ebp - 0x654], ebx
call dword [eax + 0xc]
movzx eax, ax
mov ecx, esi
push eax
call fcn.10158e70
mov edi, eax
mov dword [ebp - 0x62c], edi
test edi, edi
je 0x10158e42
push 0x208
lea eax, [ebp - 0x20c]
push ebx
push eax
call sub.msvcrt.dll_memset
mov eax, dword [edi]
lea ecx, [ebp - 0x20c]
add esp, 0xc
push 0x104
push ecx
push str.PluginID
mov ecx, edi
call dword [eax + 8]
mov ecx, dword [ebp - 0x62c]
xor edi, edi
mov dword [ebp - 0x63c], ebx
mov dword [ebp - 0x638], ebx
mov dword [ebp - 0x634], ebx
mov eax, dword [ecx]
mov dword [ebp - 0x670], ebx
mov dword [ebp - 0x66c], ebx
mov dword [ebp - 0x668], edi
mov dword [ebp - 0x650], ebx
call dword [eax + 0x18]
test eax, eax
jle 0x10158d2a
mov edi, dword [sym.imp.KERNEL32.dll_lstrcmpiW]
mov ebx, dword [ebp - 0x62c]
cmp dword [esi + 0x4ac], 0
jne 0x10158d1e
mov eax, dword [ebx]
lea ecx, [ebp - 0x620]
push ecx
push dword [ebp - 0x650]
mov ecx, ebx
mov dword [ebp - 0x620], 0
call dword [eax + 0x1c]
mov eax, dword [ebp - 0x620]
test eax, eax
je 0x10158cf6
push eax
push ebx
mov ecx, esi
call fcn.1015a030
test eax, eax
je 0x10158cec
mov ecx, dword [ebp - 0x620]
mov eax, dword [ecx]
call dword [eax + 0x18]
test eax, eax
jne 0x10158cec
test byte [ebp + 0x14], 2
mov ecx, dword [ebp - 0x620]
mov eax, dword [ecx]
je 0x101589b6
call dword [eax + 0x14]
jmp 0x10158cec
call dword [eax + 0xc]
cmp dword [ebp - 0x65c], 0
jne 0x10158c09
test al, 0x20
je 0x10158c09
lea eax, [ebp - 0x620]
mov dword [ebp - 0x648], 0
push eax
lea ecx, [ebp - 0x67c]
mov dword [ebp - 0x644], 0
mov dword [ebp - 0x640], 0
mov dword [ebp - 0x67c], 0
mov dword [ebp - 0x678], 0
mov dword [ebp - 0x674], 0
call fcn.10156de0
lea ecx, [ebp - 0x628]
mov dword [ebp - 0x628], 0
lea ebx, [esi + 0x490]
mov dword [ebp - 0x624], 0
call fcn.1003cef0
mov dword [ebp - 0x628], eax
mov ecx, ebx
lea eax, [ebp - 0x628]
push eax
lea eax, [ebp - 0x67c]
push eax
call fcn.10143370
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
sub eax, dword [ebx + 0x14]
cmp eax, 0x7d0
jbe 0x10158a7a
mov ecx, ebx
call fcn.101b31a0
call esi
mov dword [ebx + 0x14], eax
mov edi, dword [ebp - 0x628]
mov esi, dword [edi]
mov dword [ebp - 0x658], esi
cmp esi, edi
je 0x10158b1c
cmp dword [esi + 0x14], 0
jne 0x10158aff
push 0x208
lea eax, [ebp - 0x61c]
push 0
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
lea eax, [ebp - 0x61c]
lea edi, [esi + 0x10]
mov ecx, ebx
push 0x104
push eax
push dword [edi]
call fcn.101b2f50
test eax, eax
je 0x10158aff
mov esi, dword [ebp - 0x644]
cmp dword [ebp - 0x640], esi
je 0x10158af2
mov eax, dword [edi]
sub eax, 0x10
push eax
call fcn.10002a60
add eax, 0x10
add esp, 4
mov dword [esi], eax
add dword [ebp - 0x644], 4
jmp 0x10158aff
push edi
push esi
lea ecx, [ebp - 0x648]
call fcn.100048e0
lea ecx, [ebp - 0x658]
call fcn.10014d60
mov esi, dword [ebp - 0x658]
cmp esi, dword [ebp - 0x628]
jne 0x10158a90
mov edi, dword [ebp - 0x628]
lea ecx, [ebp - 0x628]
push dword [edi + 4]
call fcn.100407c0
mov eax, dword [ebp - 0x628]
push 0x18
mov dword [eax + 4], edi
mov eax, dword [ebp - 0x628]
mov dword [eax], edi
mov eax, dword [ebp - 0x628]
mov dword [eax + 8], edi
push dword [ebp - 0x628]
mov dword [ebp - 0x624], 0
call sub.msvcrt.dll_void___cdecl_operator_delete_void__
mov eax, dword [ebp - 0x644]
add esp, 8
sub eax, dword [ebp - 0x648]
test eax, 0xfffffffc
je 0x10158be1
mov ebx, dword [ebp - 0x64c]
lea eax, [ebp - 0x620]
push eax
lea ecx, [ebp - 0x670]
mov dword [ebp - 0x654], 1
or dword [ebx], 1
call fcn.10156de0
push dword [ebp - 0x644]
lea eax, [ebp - 0x680]
push dword [ebp - 0x648]
lea ecx, [ebp - 0x63c]
push dword [ebp - 0x63c]
push eax
call fcn.100b7aa0
lea ecx, [ebp - 0x67c]
call fcn.1002a360
lea ecx, [ebp - 0x648]
call fcn.1002a3c0
mov ebx, dword [ebp - 0x62c]
jmp 0x10158cf6
lea ecx, [ebp - 0x67c]
call fcn.1002a360
lea ecx, [ebp - 0x648]
call fcn.1002a3c0
mov esi, dword [ebp - 0x630]
mov ebx, dword [ebp - 0x62c]
mov edi, dword [sym.imp.KERNEL32.dll_lstrcmpiW]
push 0x208
lea eax, [ebp - 0x414]
push 0
push eax
call sub.msvcrt.dll_memset
mov ecx, dword [ebp - 0x620]
lea edx, [ebp - 0x414]
add esp, 0xc
mov eax, dword [ecx]
push 0x104
push edx
push str.IsConfirm
call dword [eax + 8]
cmp dword [ebp - 0x65c], 0
jne 0x10158cc7
push 0x10213e10
lea eax, [ebp - 0x20c]
push eax
call edi
test eax, eax
jne 0x10158cc7
push str.true
lea eax, [ebp - 0x414]
push eax
call edi
test eax, eax
jne 0x10158cc7
mov ebx, dword [ebp - 0x64c]
mov dword [ebp - 0x654], 1
or dword [ebx], 1
mov ecx, dword [esi + 0x480]
test ecx, ecx
je 0x10158c8d
mov eax, dword [ecx]
call dword [eax]
mov ecx, dword [ebp - 0x664]
mov eax, dword [ebp - 0x620]
mov dword [esi + 0x480], eax
push ecx
mov eax, dword [ecx]
call dword [eax + 0xc]
mov ecx, dword [ebp - 0x660]
mov word [esi + 0x47c], ax
push ecx
mov eax, dword [ecx]
call dword [eax + 0xc]
mov ebx, dword [ebp - 0x62c]
mov word [esi + 0x47e], ax
jmp 0x10158cf6
mov ecx, dword [ebp - 0x620]
push 0
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, dword [ebp - 0x620]
mov eax, dword [ecx]
call dword [eax + 0xc]
test al, 4
je 0x10158cec
mov eax, dword [ebp - 0x64c]
or dword [eax], 2
mov ecx, dword [ebp - 0x620]
mov eax, dword [ecx]
call dword [eax]
mov esi, dword [ebp - 0x650]
mov ecx, ebx
mov eax, dword [ebx]
inc esi
mov dword [ebp - 0x650], esi
call dword [eax + 0x18]
mov edi, dword [sym.imp.KERNEL32.dll_lstrcmpiW]
cmp esi, eax
mov esi, dword [ebp - 0x630]
jl 0x10158943
mov edi, dword [ebp - 0x668]
mov ebx, dword [ebp - 0x670]
mov eax, dword [ebp - 0x638]
sub eax, dword [ebp - 0x63c]
test eax, 0xfffffffc
je 0x10158e04
mov ecx, dword [ebp - 0x660]
push ecx
mov eax, dword [ecx]
call dword [eax + 0xc]
mov ecx, dword [ebp - 0x664]
mov word [esi + 0x462], ax
push ecx
mov eax, dword [ecx]
call dword [eax + 0xc]
mov word [esi + 0x460], ax
lea edx, [esi + 0x470]
lea eax, [ebp - 0x63c]
cmp edx, eax
je 0x10158dab
mov ecx, dword [edx]
mov eax, dword [ebp - 0x63c]
mov dword [edx], eax
mov eax, dword [ebp - 0x638]
mov dword [ebp - 0x63c], ecx
mov ecx, dword [edx + 4]
mov dword [edx + 4], eax
mov eax, dword [ebp - 0x634]
mov dword [ebp - 0x638], ecx
mov ecx, dword [edx + 8]
mov dword [edx + 8], eax
mov dword [ebp - 0x634], ecx
add esi, 0x448
je 0x10158dba
push esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov ecx, dword [ebp - 0x630]
lea eax, [ecx + 0x464]
push eax
call fcn.10157e70
mov ecx, dword [ebp - 0x630]
lea edx, [ebp - 0x670]
add ecx, 0x464
cmp ecx, edx
je 0x10158df9
mov eax, dword [ecx]
mov dword [ecx], ebx
mov ebx, eax
mov eax, dword [ebp - 0x66c]
mov dword [ecx + 4], eax
mov eax, dword [ecx + 8]
mov dword [ecx + 8], edi
mov edi, eax
test esi, esi
je 0x10158e04
push esi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test ebx, ebx
je 0x10158e31
sub edi, ebx
mov eax, ebx
and edi, 0xfffffffc
cmp edi, 0x1000
jb 0x10158e27
mov ebx, dword [ebx - 4]
add edi, 0x23
sub eax, ebx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10158e5f
push edi
push ebx
call sub.msvcrt.dll_void___cdecl_operator_delete_void__
add esp, 8
lea ecx, [ebp - 0x63c]
call fcn.1002a3c0
mov ebx, dword [ebp - 0x654]
mov ecx, dword [ebp - 4]
neg ebx
pop edi
sbb ebx, ebx
xor ecx, ebp
and ebx, 5
pop esi
lea eax, [ebx + 1]
pop ebx
call fcn.101f99c6
mov esp, ebp
pop ebp
ret 0x14
call fcn.101e6c40
int3