Function at 0x1001511e
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
lea ebp, [esp - 0xc9c]
sub esp, 0xd1c
mov eax, dword [0x10084adc]
xor eax, ebp
mov dword [ebp + 0xc98], eax
mov eax, dword [ebp + 0xca8]
push ebx
push esi
mov esi, dword [ebp + 0xca4]
push edi
xor ebx, ebx
push 0x1ff
mov dword [ebp - 0x74], eax
lea eax, [ebp + 0x595]
push ebx
push eax
mov dword [ebp - 0x78], esi
mov byte [ebp + 0x594], bl
call fcn.10045030
add esp, 0xc
cmp esi, ebx
je 0x1001520a
cmp byte [esi], bl
je 0x1001520a
mov eax, esi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x10015180
sub eax, edx
cmp eax, 0x200
jae 0x1001520a
lea eax, [ebp + 0x594]
push esi
push eax
call fcn.1000789a
lea eax, [ebp + 0x594]
push eax
call fcn.10046d09
add esp, 0xc
mov esi, 0x10185a70
cmp byte [0x10185a70], bl
je 0x100151f0
lea eax, [ebp + 0x594]
push esi
push eax
call fcn.10007842
pop ecx
pop ecx
test eax, eax
je 0x100151f0
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call edi
mov ecx, dword [0x10185c70]
add ecx, 0x3e8
cmp ecx, eax
jbe 0x100151f0
call edi
mov dword [0x10185c70], eax
jmp 0x100154cb
lea eax, [ebp + 0x594]
push eax
push esi
call fcn.1000789a
pop ecx
pop ecx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x10185c70], eax
mov esi, dword [0x101ad89c]
mov dword [ebp - 0x70], ebx
mov edi, 0x10113ba8
jmp 0x10015234
cmp dword [ebp - 0x70], 0x20
jge 0x10015262
push eax
call fcn.1000770a
pop ecx
test eax, eax
ja 0x10015248
dec esi
jns 0x10015231
push 0x1f
pop esi
inc dword [ebp - 0x70]
mov eax, esi
imul eax, eax, 0x1210
lea eax, [eax + 0x1018969c]
cmp byte [eax], bl
jne 0x1001521a
jmp 0x10015262
imul esi, esi, 0x1210
lea eax, [esi + 0x1018969c]
mov edx, edi
sub edx, eax
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
cmp cl, bl
jne 0x10015258
cmp dword [0x1015668c], ebx
je 0x10015279
push edi
push str.TrojanMonPrinter_g_1stOpenFile__s_
push ebx
call fcn.100412e2
add esp, 0xc
mov eax, dword [0x1015675c]
cdq
mov ecx, 0x3e8
idiv ecx
or dword [0x10157ca0], 0xffffffff
mov esi, 0x1ff
push esi
lea eax, [ebp + 0x395]
push ebx
push eax
mov byte [ebp + 0x394], bl
add edx, 0x64
inc dword [0x1015675c]
mov dword [ebp - 0x70], edx
call fcn.10045030
push 0x3ff
lea eax, [ebp - 0x6b]
push ebx
push eax
mov byte [ebp - 0x6c], bl
call fcn.10045030
push dword [ebp - 0x70]
lea eax, [ebp + 0x394]
push 0x10061188
push eax
call fcn.10045378
push esi
lea eax, [ebp + 0xa99]
push ebx
push eax
mov byte [ebp + 0xa98], bl
call fcn.10045030
lea eax, [ebp + 0xa98]
push eax
call fcn.10040f13
add esp, 0x34
cmp byte [0x102b5630], bl
je 0x10015317
xor eax, eax
mov cl, byte [eax + 0x102b5630]
mov byte [ebp + eax + 0xa98], cl
inc eax
cmp cl, bl
jne 0x10015305
push esi
lea eax, [ebp + 0x899]
push ebx
push eax
mov byte [ebp + 0x898], bl
call fcn.10045030
lea eax, [ebp - 0x80]
push eax
call fcn.100457db
lea eax, [ebp - 0x80]
push eax
call fcn.100457b4
add esp, 0x14
cmp eax, ebx
je 0x10015360
push eax
push str._Y__m__d__H:_M:_S
lea eax, [ebp + 0x898]
push 0x200
push eax
call fcn.10046465
add esp, 0x10
jmp 0x10015373
lea eax, [ebp + 0x898]
push str.0000
push eax
call fcn.1000789a
pop ecx
pop ecx
push dword [ebp + 0xcac]
lea eax, [ebp + 0xa98]
mov esi, 0x4000
cmp byte [0x10113ba8], bl
je 0x1001538f
push edi
jmp 0x10015392
push dword [ebp - 0x78]
push dword [ebp - 0x74]
push eax
push esi
push 2
lea eax, [ebp + 0x898]
push eax
lea eax, [ebp - 0x6c]
push str._s_d_d_s_s_s_d
push eax
call fcn.10045378
mov al, byte [0x10151868]
add esp, 0x24
test al, 1
je 0x10015427
cmp byte [0x10113ba8], bl
je 0x10015427
cmp byte [0x10169550], bl
jne 0x100153ce
test al, 0x20
je 0x10015427
push 0x104
lea eax, [ebp + 0x794]
push ebx
push eax
call fcn.10045030
push 1
lea eax, [ebp + 0x794]
push eax
push edi
call fcn.10035824
lea eax, [ebp + 0x794]
push eax
push 0x1014e918
push dword [ebp + 0xcac]
lea eax, [ebp + 0xa98]
push edi
push dword [ebp - 0x74]
push eax
push esi
push 2
lea eax, [ebp + 0x898]
push eax
lea eax, [ebp - 0x6c]
push str._s_d_d_s_s_s_d_s_s
push eax
call fcn.10045378
add esp, 0x44
push dword [ebp - 0x70]
lea eax, [ebp + 0xa98]
push str.SoftwareTrojanCut_tc_FileP
push eax
call fcn.10045378
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp + 0x394]
push eax
lea eax, [ebp + 0xa98]
push eax
mov esi, reloc.WS2_32.dll_bind
push esi
call fcn.100422d1
add esp, 0x1c
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push str.tc_Last
push str.SOFTWARETrojanCut_tc_Env
push esi
call fcn.10041a19
mov edi, dword [sym.imp.USER32.dll_FindWindowA]
add esp, 0x10
push 0x100610e0
push ebx
call edi
mov dword [0x10154a14], eax
cmp eax, ebx
jne 0x100154ba
push 0x100610e0
push ebx
call edi
mov dword [0x10154a14], eax
cmp eax, ebx
jne 0x100154ba
push ebx
push str.tc_hnd
push str.SOFTWARETrojanCutTC_Env_tc_COMMUNICATION
push esi
call fcn.10040ccf
add esp, 0x10
mov dword [0x10154a14], eax
cmp eax, ebx
je 0x100154cb
push 2
push dword [ebp - 0x70]
push 0xcfc
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
mov ecx, dword [ebp + 0xc98]
pop edi
pop esi
xor ecx, ebp
xor eax, eax
pop ebx
call fcn.1004501f
add ebp, 0xc9c
leave
ret