Function at 0x11139ed0
Capabilities:
Check for time delay via gettickcount
Find taskbar

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1118c604
mov eax, dword fs:[0]
push eax
sub esp, 0x144
mov eax, dword [0x111ec774]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
cmp dword [0x111f1bb0], 0
jne 0x11139f12
call dword [sym.imp.KeRneL32.DLl_GetCurrentThreadId]
mov dword [0x111f1bb0], eax
cmp byte [0x111ee168], 0
jne 0x11139f20
call fcn.11029950
call fcn.11134830
push 0
call fcn.11134310
mov ebx, dword [sym.imp.uSEr32.dll_IsWindowVisible]
add esp, 4
cmp dword [0x111f19fc], 0
je 0x1113a01b
dec dword [0x111f19fc]
jne 0x1113a59a
push 0
push 0
push 0x30000102
call fcn.11139a70
mov eax, dword [0x111ee160]
add esp, 0xc
push eax
call dword [sym.imp.uSEr32.dll_IsWindow]
mov ecx, dword [0x111ee160]
push eax
push ecx
call ebx
mov edx, dword [0x111ee160]
push eax
push edx
push 0x111bc458
call fcn.11147060
mov ecx, dword [0x111ee100]
add esp, 0x10
push 0
push 0
push 0x111ba788
push 0x111a0f40
call fcn.1105e820
mov esi, eax
mov eax, dword [0x111ee160]
push eax
call ebx
test eax, eax
jne 0x1113a011
cmp dword [0x111ee194], eax
jne 0x1113a011
push 0x111bc440
call fcn.11147060
add esp, 4
call dword [sym.imp.uSEr32.dll_GetForegroundWindow]
mov edi, eax
test esi, esi
jne 0x11139ffe
mov ecx, dword [0x111ee160]
push esi
mov esi, dword [sym.imp.uSEr32.dll_EnableWindow]
push ecx
call esi
push 4
call fcn.11132120
push 7
call fcn.11132120
mov edx, dword [0x111ee160]
add esp, 8
push 1
push edx
call esi
test edi, edi
je 0x1113a011
cmp edi, dword [0x111ee160]
je 0x1113a011
push edi
call dword [sym.imp.uSEr32.dll_SetForegroundWindow]
mov dword [0x111f19ec], 1
cmp dword [0x111ee1cc], 0
jne 0x1113a0da
cmp dword [0x111f19ec], 0
je 0x1113a0da
cmp dword [0x111f19f4], 0
je 0x1113a0da
push 0
push 0x111b1c7c
call dword [sym.imp.uSEr32.dll_FindWindowA]
test eax, eax
je 0x1113a0da
push eax
call ebx
test eax, eax
je 0x1113a0da
cmp dword [0x111ee258], 0
jne 0x1113a0da
push 0
push 0
push 0x30000102
mov dword [0x111f19ec], 0
call fcn.11139a70
mov eax, dword [0x111ee160]
add esp, 0xc
push eax
call ebx
test eax, eax
je 0x1113a0da
mov ecx, dword [0x111ee160]
push ecx
call dword [sym.imp.uSEr32.dll_IsIconic]
test eax, eax
je 0x1113a0da
call dword [sym.imp.uSEr32.dll_GetForegroundWindow]
push 4
mov esi, eax
call fcn.11132120
push 7
call fcn.11132120
add esp, 8
test esi, esi
je 0x1113a0cb
cmp esi, dword [0x111ee160]
je 0x1113a0cb
push esi
call dword [sym.imp.uSEr32.dll_SetForegroundWindow]
mov edx, dword [0x111ee160]
push 1
push edx
call dword [sym.imp.uSEr32.dll_EnableWindow]
mov ecx, dword [0x111ee308]
mov eax, dword [ecx]
mov edx, dword [eax + 0x2c]
push 1
call edx
cmp dword [0x111eb7c4], 0
jge 0x1113a22f
cmp dword [0x111ee258], 0
je 0x1113a10e
mov dword [0x111eb7c4], 1
jmp 0x1113a275
mov ecx, dword [0x111ee100]
push 0
push 0
push 0x111bc42c
push 0x111a0f40
call fcn.1105e820
mov dword [0x111eb7c4], eax
test eax, eax
jne 0x1113a275
mov ecx, dword [0x111ee308]
mov eax, dword [ecx]
mov eax, dword [eax + 0x110]
push 0
push 0x105
lea edx, [ebp - 0x118]
push edx
call eax
mov ebx, 0x22
lea esi, [ebp - 0x118]
cmp byte [ebp - 0x118], bl
jne 0x1113a17e
lea esi, [ebp - 0x117]
mov ecx, esi
push ebx
push ecx
call fcn.11081d30
add esp, 8
test eax, eax
je 0x1113a17e
mov byte [eax], 0
push 0
push esi
call fcn.11143e00
mov edi, dword [sym.imp.KeRneL32.DLl_GetLastError]
add esp, 8
test eax, eax
jne 0x1113a1ae
call edi
push eax
push esi
push 0x111bc40c
call fcn.11147060
add esp, 0xc
mov dword [0x111eb7c4], 1
cmp byte [0x111ee26d], 0
je 0x1113a228
mov ecx, dword [0x111ee308]
mov edx, dword [ecx]
mov edx, dword [edx + 0x110]
push 1
push 0x105
lea eax, [ebp - 0x118]
push eax
call edx
lea esi, [ebp - 0x118]
cmp byte [ebp - 0x118], bl
jne 0x1113a1fc
lea esi, [ebp - 0x117]
mov eax, esi
push ebx
push eax
call fcn.11081d30
add esp, 8
test eax, eax
je 0x1113a1fc
mov byte [eax], 0
push 0
push esi
call fcn.11143e00
add esp, 8
test eax, eax
jne 0x1113a228
call edi
push eax
push esi
push 0x111bc40c
call fcn.11147060
add esp, 0xc
mov dword [0x111eb7c4], 1
jmp 0x1113a275
cmp dword [0x111eb7c4], 0
jne 0x1113a275
mov ecx, dword [0x111f1c40]
mov edx, ecx
inc ecx
mov dword [0x111f1c40], ecx
test edx, edx
jne 0x1113a25a
mov ecx, dword [0x111ee308]
mov eax, dword [ecx]
mov edx, dword [eax + 0x100]
call edx
mov ecx, dword [0x111f1c40]
mov eax, 0x99999999
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
add ecx, eax
lea edx, [ecx + eax*4]
mov dword [0x111f1c40], edx
xor edi, edi
lea ebx, [edi + 1]
cmp dword [0x111f1ba0], edi
je 0x1113a2b6
mov ecx, dword [0x111ee100]
sub dword [0x111f1ba0], ebx
push edi
push edi
push 0x1119b4d0
push 0x111a0f18
call fcn.1105e820
cmp eax, 2
jne 0x1113a2b0
push ebx
push ebx
call fcn.1102d750
add esp, 8
jmp 0x1113a2b6
mov dword [0x111f1ba0], edi
cmp dword [0x111f19f8], edi
je 0x1113a2cd
push edi
push edi
push 0x30000102
call fcn.11139a70
add esp, 0xc
mov ecx, dword [0x111ee134]
cmp ecx, edi
je 0x1113a2e7
push edi
push 0x1112de90
push 0xd0
call fcn.1106c340
call fcn.1112ddd0
cmp dword [0x111ee138], edi
je 0x1113a2fd
push edi
call fcn.11132a10
add esp, 4
movzx eax, word [0x111ee0e0]
sub eax, ebx
je 0x1113a314
sub eax, 2
jne 0x1113a319
call fcn.11132780
jmp 0x1113a319
call fcn.111326b0
cmp dword [0x111ee258], edi
jne 0x1113a429
cmp dword [0x111ee1f8], edi
je 0x1113a3db
mov eax, dword [0x111ee308]
cmp dword [eax + 8], edi
je 0x1113a429
cmp dword [0x111f1bb4], edi
jne 0x1113a429
push 0x58
call fcn.111101b0
mov esi, eax
add esp, 4
mov dword [ebp - 0x11c], esi
mov dword [ebp - 4], edi
cmp esi, edi
je 0x1113a384
push edi
push ebx
push edi
push 0x111f1bb8
mov ecx, esi
call fcn.11057eb0
mov dword [esi], 0x111ba384
mov dword [esi + 0x28], 0x111ba378
mov ecx, esi
jmp 0x1113a386
xor ecx, ecx
mov dword [ebp - 4], 0xffffffff
mov dword [0x111f1bb4], ecx
call fcn.1110fff0
mov ecx, dword [0x111f1bb4]
call fcn.1104d790
mov ecx, dword [0x111f1bb4]
call fcn.1104ecd0
mov ecx, dword [0x111f1bb4]
call fcn.1104ed40
mov ecx, dword [0x111f1bb4]
call fcn.1104d7d0
mov ecx, dword [0x111ee28c]
mov dword [0x111ee2c4], ebx
cmp ecx, edi
je 0x1113a429
call fcn.110ec320
jmp 0x1113a429
mov ecx, dword [0x111f1bb4]
cmp ecx, edi
je 0x1113a429
call fcn.1103f920
mov ecx, dword [0x111f1bb4]
call fcn.1103f960
mov ecx, dword [0x111f1bb4]
call fcn.1103f980
mov ecx, dword [0x111f1bb4]
call fcn.1103f940
mov ecx, dword [0x111f1bb8]
push ecx
mov ecx, dword [0x111f1bb4]
call fcn.11110000
mov dword [0x111f1bb4], edi
mov dword [0x111f1bb8], edi
call fcn.11139600
cmp dword [0x111f1b98], edi
je 0x1113a455
mov ecx, dword [0x111ee134]
push 0xc0
call fcn.110642e0
test eax, eax
jne 0x1113a455
mov dword [0x111f1b98], edi
call fcn.11142d90
cmp dword [0x111ee254], edi
je 0x1113a58a
cmp byte [0x111f1ba9], 0
jne 0x1113a58a
mov ecx, dword [0x111ee100]
push edi
push edi
push 0x1119ba94
push 0x111a0f40
call fcn.1105e820
test eax, eax
je 0x1113a58a
mov ecx, dword [0x111ee308]
mov edx, dword [ecx]
mov eax, dword [edx + 0xd8]
call eax
cmp byte [eax], 0
je 0x1113a4cd
cmp dword [0x111f1bac], edi
jne 0x1113a4d9
push eax
push 0x111bc3e8
call fcn.11147060
add esp, 8
call dword [sym.imp.KeRneL32.DLl_GetTickCount]
add eax, 0x3a98
mov dword [0x111f1bac], eax
jmp 0x1113a58a
cmp dword [0x111f1bac], edi
je 0x1113a58a
call dword [sym.imp.KeRneL32.DLl_GetTickCount]
cmp eax, dword [0x111f1bac]
jb 0x1113a58a
mov byte [0x111f1ba9], 1
call fcn.11143a50
push eax
push 0x3fb
call fcn.11147af0
mov edi, eax
add esp, 8
mov dword [ebp - 0x11c], edi
mov dword [ebp - 4], ebx
call fcn.11143a50
lea ecx, [ebp - 0x150]
mov esi, eax
call fcn.110261a0
mov eax, edi
mov byte [ebp - 4], 2
lea edx, [eax + 1]
jmp 0x1113a530
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x1113a530
sub eax, edx
mov edx, eax
mov eax, esi
lea ebx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x1113a540
push 0
lea ecx, [ebp - 0x120]
push ecx
push 0xa
push 0
push edx
push edi
sub eax, ebx
push eax
push esi
push 0xffffffffffffffff
push 0
lea ecx, [ebp - 0x150]
call fcn.1112d6e0
mov eax, dword [ebp - 0x150]
test eax, eax
je 0x1113a57a
push eax
call dword [sym.imp.KeRneL32.DLl_FreeLibrary]
push edi
mov dword [ebp - 4], 0xffffffff
call fcn.11162777
add esp, 4
mov ecx, dword [0x111ee308]
mov edx, dword [ecx]
mov eax, dword [edx + 0x84]
call eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.11162bb7
mov esp, ebp
pop ebp
ret