Function at 0x1106fa30
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x11182ea0
mov eax, dword fs:[0]
push eax
sub esp, 0xec
mov eax, dword [0x111ec774]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0xf0], esi
mov dword [ebp - 0xf8], esi
mov ecx, dword [esi + 0x20]
mov eax, dword [ecx + 8]
mov ebx, dword [esi + 0x24]
xor edi, edi
mov dword [ebp - 4], edi
mov dword [ebp - 0xe0], ecx
mov dword [ebp - 0xf4], ebx
cmp eax, edi
je 0x1106fa95
mov eax, dword [eax + 0x54]
mov dword [ebp - 0xdc], eax
jmp 0x1106fa9b
mov dword [ebp - 0xdc], edi
cmp dword [ebx + 0x3ac], edi
je 0x1106faae
mov edx, dword [ecx]
mov eax, dword [edx + 0x18]
push edi
push edi
push edi
push edi
call eax
mov eax, dword [esi + 0x2c]
cmp eax, edi
je 0x1106fabc
push eax
call dword [sym.imp.KeRneL32.DLl_Sleep]
mov edi, dword [sym.imp.KeRneL32.DLl_EnterCriticalSection]
lea esi, [ebx + 0x4f8]
push esi
call edi
push esi
call dword [sym.imp.KeRneL32.DLl_LeaveCriticalSection]
lea esi, [ebx + 0x4d0]
push esi
call edi
push esi
call dword [sym.imp.KeRneL32.DLl_LeaveCriticalSection]
lea esi, [ebx + 0xc]
push esi
call edi
push esi
call dword [sym.imp.KeRneL32.DLl_LeaveCriticalSection]
mov esi, dword [ebp - 0xdc]
test esi, esi
je 0x1106fcd0
add esi, 0xdb1c
push esi
mov dword [ebp - 0xe4], esi
call edi
mov edi, dword [ebp - 0xdc]
lea ecx, [ebp - 0xe0]
push ecx
lea edx, [ebp - 0xec]
push edx
lea ecx, [edi + 0xdb34]
mov byte [ebp - 4], 1
call fcn.1106d340
mov eax, dword [ebp - 0xe8]
mov ecx, dword [ebp - 0xec]
push eax
push ecx
lea edx, [ebp - 0xe8]
push edx
lea ecx, [edi + 0xdb34]
call fcn.11010460
push esi
mov byte [ebp - 4], 0
call dword [sym.imp.KeRneL32.DLl_LeaveCriticalSection]
mov esi, dword [ebx + 0x134]
test esi, esi
je 0x1106fca2
cmp esi, 0xffffffff
je 0x1106fca2
mov eax, dword [ebx + 0x130]
mov ecx, dword [esi + eax*4 + 0xc4]
mov edx, dword [ebp - 0xe0]
lea edi, [esi + eax*4 + 0xc4]
cmp ecx, edx
je 0x1106fbe0
push edx
push ecx
push edi
dec eax
push eax
lea eax, [ebp - 0xd8]
push 0x111a3400
push eax
call dword [sym.imp.uSEr32.dll_wsprintfA]
push 0xee6
lea ecx, [ebp - 0xd8]
push 0x111a2458
push ecx
call fcn.11029a70
mov edx, dword [ebp - 0xe0]
add esp, 0x24
cmp dword [edi], edx
je 0x1106fbe0
push 0xee9
push 0x111a2458
push 0x111a33f4
call fcn.11029a70
add esp, 0xc
mov dword [edi], 0
mov eax, dword [ebx + 0x130]
mov ecx, dword [esi + 0x4c]
push eax
call ecx
mov edx, dword [ebp - 0xdc]
mov edi, dword [edx + 0xdb50]
add esp, 4
test edi, edi
je 0x1106fc1c
mov eax, dword [ebp - 0xe0]
push 2
push eax
mov ecx, edi
call fcn.1106ba00
mov eax, edi
call fcn.1106d130
mov edi, dword [sym.imp.KeRneL32.DLl_InterlockedDecrement]
add esi, 0xc4
push esi
call edi
mov esi, dword [ebp - 0xdc]
lea ecx, [esi + 0xdad0]
push ecx
call edi
add esi, 0xe3f4
push esi
call edi
cmp dword [ebx + 0x3ac], 0
je 0x1106fc5b
mov edx, dword [ebp - 0xdc]
add edx, 0xdad4
push edx
call edi
mov edi, dword [sym.imp.KeRneL32.DLl_EnterCriticalSection]
cmp dword [ebx + 0x124], 0xffffffff
jne 0x1106fcdf
mov edx, dword [ebp - 0xdc]
add edx, 0xdb60
push edx
call dword [sym.imp.KeRneL32.DLl_InterlockedDecrement]
push 0x111a33d0
call fcn.11147060
mov esi, dword [ebp - 0xf0]
add esp, 4
mov dword [ebp - 0xe8], esi
mov dword [ebp - 4], 3
jmp 0x1106fe81
mov eax, dword [ebp - 0xdc]
add eax, 0xdb60
push eax
call dword [sym.imp.KeRneL32.DLl_InterlockedDecrement]
mov esi, dword [ebp - 0xf0]
mov dword [ebp - 0xe8], esi
mov ecx, dword [esi + 0x28]
mov dword [ebp - 4], 2
push ecx
jmp 0x1106fe85
push 0x111a33ac
call fcn.11147060
add esp, 4
jmp 0x1106fc61
lea eax, [ebx + 0xc]
mov dword [ebp - 0xe4], eax
lea eax, [ebx + 0xc]
push eax
call edi
mov ecx, dword [ebx + 0x450]
mov eax, dword [ecx + 4]
cmp byte [eax + 0x15], 0
mov byte [ebp - 4], 4
jne 0x1106fd1c
mov esi, 2
cmp dword [eax + 0xc], esi
jae 0x1106fd10
mov eax, dword [eax + 8]
jmp 0x1106fd14
mov ecx, eax
mov eax, dword [eax]
cmp byte [eax + 0x15], 0
je 0x1106fd01
jmp 0x1106fd21
mov esi, 2
mov edx, dword [ebx + 0x450]
mov eax, dword [edx + 4]
cmp byte [eax + 0x15], 0
jne 0x1106fd44
cmp dword [eax + 0xc], esi
jbe 0x1106fd3b
mov edx, eax
mov eax, dword [eax]
jmp 0x1106fd3e
mov eax, dword [eax + 8]
cmp byte [eax + 0x15], 0
je 0x1106fd30
cmp ecx, edx
je 0x1106fe3e
mov esi, dword [ecx + 0x10]
cmp dword [esi + 0x1c], 0
je 0x1106fd99
cmp byte [ecx + 0x15], 0
jne 0x1106fd44
mov eax, dword [ecx + 8]
cmp byte [eax + 0x15], 0
jne 0x1106fd7c
mov ecx, eax
mov eax, dword [ecx]
cmp byte [eax + 0x15], 0
jne 0x1106fd44
mov edi, edi
mov ecx, eax
mov eax, dword [ecx]
cmp byte [eax + 0x15], 0
je 0x1106fd70
jmp 0x1106fd44
mov eax, dword [ecx + 4]
cmp byte [eax + 0x15], 0
jne 0x1106fd95
cmp ecx, dword [eax + 8]
jne 0x1106fd95
mov ecx, eax
mov eax, dword [eax + 4]
cmp byte [eax + 0x15], 0
je 0x1106fd85
mov ecx, eax
jmp 0x1106fd44
mov ecx, esi
call fcn.1110fff0
push 0x24
mov ebx, eax
mov dword [esi + 0x1c], 1
call fcn.111101b0
add esp, 4
mov dword [ebp - 0xe8], eax
mov byte [ebp - 4], 6
test eax, eax
je 0x1106fdd8
mov ecx, dword [ebp - 0xe0]
push 0
push esi
push 0
push 0
push ecx
push 2
mov ecx, eax
call fcn.11067630
mov edx, dword [ebp - 0xe4]
push edx
mov byte [ebp - 4], 0
call dword [sym.imp.KeRneL32.DLl_LeaveCriticalSection]
call dword [sym.imp.KeRneL32.DLl_GetTickCount]
cmp dword [esi + 0x1c], 1
mov edi, eax
jne 0x1106fe25
call dword [sym.imp.KeRneL32.DLl_GetTickCount]
sub eax, edi
cmp eax, 0x1388
jge 0x1106fe25
mov eax, dword [esi + 0x14]
push eax
call dword [sym.imp.KeRneL32.DLl_ResetEvent]
mov ecx, dword [esi + 0x14]
push 0x3e8
push ecx
call dword [sym.imp.KeRneL32.DLl_WaitForSingleObject]
cmp dword [esi + 0x1c], 1
je 0x1106fdf7
push ebx
mov ecx, esi
call fcn.11110000
mov ebx, dword [ebp - 0xf4]
mov edi, dword [sym.imp.KeRneL32.DLl_EnterCriticalSection]
jmp 0x1106fce8
mov eax, dword [ebp - 0xdc]
test eax, eax
je 0x1106fe54
add eax, 0xdb60
push eax
call dword [sym.imp.KeRneL32.DLl_InterlockedDecrement]
push 0x111a3388
call fcn.11147060
mov edx, dword [ebp - 0xe4]
add esp, 4
push edx
call dword [sym.imp.KeRneL32.DLl_LeaveCriticalSection]
mov esi, dword [ebp - 0xf0]
mov dword [ebp - 0xe8], esi
mov dword [ebp - 4], 5
mov eax, dword [esi + 0x28]
push eax
mov ecx, dword [esi + 0x20]
call fcn.11110000
mov ecx, esi
mov dword [ebp - 4], 0xffffffff
call fcn.111102e0
push esi
call fcn.11162777
add esp, 4
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.11162bb7
mov esp, ebp
pop ebp
ret