Function at 0x110ffa00
Capabilities:
Check for time delay via gettickcount
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1118a3e6
mov eax, dword fs:[0]
push eax
sub esp, 0x270
mov eax, dword [0x111ec774]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ecx + 0x24]
mov ecx, dword [0x111ee100]
push 0
push 0
push 0x111b4f18
push 0x111a0f40
call fcn.1105e820
test eax, eax
jne 0x110ffd51
cmp dword [0x111ee268], eax
jne 0x110ffd51
mov bl, byte [ebp + 8]
movzx eax, bl
push eax
push 0x111b4f00
call fcn.11147060
add esp, 8
lea ecx, [ebp - 0x21c]
call fcn.110ed130
push 0
push 0
push 0x2011f
push 0x111b3e24
push reloc.wsOcK32.dll_bind
lea ecx, [ebp - 0x21c]
mov dword [ebp - 4], 0
call fcn.110ed570
test eax, eax
je 0x110ffab9
push eax
push 0x111b4ee8
call fcn.11147060
add esp, 8
jmp 0x110ffd3f
push 0
push 0x111b4ed4
lea ecx, [ebp - 0x21c]
call fcn.110ed5d0
push 0
push 0x111b4ec8
lea ecx, [ebp - 0x21c]
mov edi, eax
call fcn.110ed5d0
test bl, bl
je 0x110ffb08
test eax, eax
jne 0x110ffd3f
push eax
call fcn.11145410
add esp, 4
test al, al
je 0x110ffd3f
mov dword [ebp - 0x220], 0x111a63a0
jmp 0x110ffb1e
test eax, eax
jne 0x110ffb14
test edi, edi
je 0x110ffd3f
mov dword [ebp - 0x220], 0x111a6398
cmp dword [esi + 0x7b0], 0
je 0x110ffb70
mov edi, dword [sym.imp.KeRneL32.DLl_GetTickCount]
call edi
mov ecx, dword [esi + 0x7b0]
push 0xffffffffffffffff
push ecx
mov ebx, eax
call dword [sym.imp.KeRneL32.DLl_WaitForSingleObject]
mov edx, dword [esi + 0x7b0]
push edx
call dword [sym.imp.KeRneL32.DLl_CloseHandle]
mov dword [esi + 0x7b0], 0
call edi
sub eax, ebx
cmp eax, 0x1f4
jb 0x110ffb70
push eax
push 0x111b4ea8
call fcn.11147060
add esp, 8
mov ecx, dword [0x111ee100]
push 0
push 0
push 0x111b4ea0
push 0x111a0f50
mov dword [ebp - 0x224], 0x11195264
call fcn.1105e820
test eax, eax
je 0x110ffbbe
mov ecx, dword [0x111ee100]
push 0
push 0
push 0x111b4e94
push 0x111a0f50
call fcn.1105e820
test eax, eax
je 0x110ffbbe
mov dword [ebp - 0x224], 0x111b4e90
cmp byte [0x111ee26d], 0
mov edi, 0x111b4e80
jne 0x110ffbd1
mov edi, 0x111b4e70
push 1
push edi
call fcn.11145990
mov ebx, eax
mov dword [ebp - 0x228], ebx
push 0
push ebx
mov byte [ebp - 4], 1
call fcn.11143e00
add esp, 0x10
test eax, eax
jne 0x110ffc11
add edi, 2
push 1
push edi
call fcn.11145990
mov ebx, eax
add esp, 8
mov dword [ebp - 0x228], ebx
mov eax, 0x11195264
jmp 0x110ffc17
mov eax, dword [ebp - 0x224]
mov ecx, dword [ebp - 0x220]
push ecx
push eax
push ebx
lea edx, [ebp - 0x218]
push 0x111b4e60
push edx
call dword [sym.imp.uSEr32.dll_wsprintfA]
push 0x44
lea eax, [ebp - 0x27c]
push 0
push eax
call fcn.11162be0
add esp, 0x20
xor ecx, ecx
lea edx, [ebp - 0x238]
push edx
lea eax, [ebp - 0x27c]
push eax
push ecx
push ecx
push 0x8000
push ecx
push ecx
push ecx
mov word [ebp - 0x24c], cx
lea ecx, [ebp - 0x218]
push ecx
push 0
mov dword [ebp - 0x27c], 0x44
mov dword [ebp - 0x250], 0x81
call dword [sym.imp.KeRneL32.DLl_CreateProcessA]
test eax, eax
je 0x110ffd28
mov edx, dword [ebp - 0x220]
push edx
push 0x111b4e54
call fcn.11147060
mov ecx, dword [ebp - 0x234]
mov eax, dword [ebp - 0x238]
mov edi, dword [sym.imp.KeRneL32.DLl_CloseHandle]
add esp, 8
push ecx
mov dword [esi + 0x7b0], eax
call edi
cmp byte [ebp + 8], 0
lea ecx, [ebp - 0x21c]
je 0x110ffcda
push 1
push 0x111b4ec8
call fcn.110eda50
jmp 0x110ffce4
push 0x111b4ec8
call fcn.110edad0
cmp byte [ebp + 0xc], 0
je 0x110ffd36
push 0x111b4e48
call fcn.11147060
mov edx, dword [esi + 0x7b0]
add esp, 4
push 0xffffffffffffffff
push edx
call dword [sym.imp.KeRneL32.DLl_WaitForSingleObject]
mov eax, dword [esi + 0x7b0]
push eax
call edi
push 0x111b4e40
mov dword [esi + 0x7b0], 0
call fcn.11147060
add esp, 4
jmp 0x110ffd36
push edi
push 0x111b4e24
call fcn.11147060
add esp, 8
push ebx
call fcn.11162777
add esp, 4
lea ecx, [ebp - 0x21c]
mov dword [ebp - 4], 0xffffffff
call fcn.110edb10
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.11162bb7
mov esp, ebp
pop ebp
ret 8