Function at 0x10516ec
Capabilities:
Check for time delay via gettickcount

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x2c
push ebx
push esi
push edi
xor edi, edi
push edi
lea eax, [ebp - 0x14]
push eax
push edi
push edi
push edi
push dword [ebp + 8]
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x18], edi
mov dword [ebp - 0xc], edi
mov dword [ebp - 8], edi
mov dword [ebp - 4], edi
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x10], edi
mov dword [ebp - 0x1c], edi
call fcn.01091799
mov ebx, eax
cmp ebx, edi
je 0x1051732
push ebx
push 0x10b70136
jmp 0x10517d2
mov eax, dword [ebp - 0x14]
xor esi, esi
mov dword [ebp + 8], esi
cmp dword [eax], edi
je 0x1051747
inc esi
cmp dword [eax + esi*4], edi
jne 0x105173e
mov dword [ebp + 8], esi
lea eax, [ebp - 0x18]
push eax
call fcn.010abf7f
mov ebx, eax
cmp ebx, edi
je 0x105175e
push ebx
push 0x10bd0136
jmp 0x10517d2
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 0x18]
call dword [sym.imp.NETAPI32.dll_DsGetSiteNameW]
mov ebx, eax
cmp ebx, edi
je 0x1051784
push ebx
push 0x10c00136
push dword [ebp - 0x18]
call fcn.0108c595
jmp 0x10519d1
push dword [ebp - 0xc]
push dword [ebp - 0x18]
push 0x100d204
call fcn.0109c1a8
mov ebx, esi
mov esi, dword [sym.imp.KERNEL32.dll_LocalAlloc]
add esp, 0xc
shl ebx, 2
push ebx
push edi
call esi
mov dword [ebp - 8], eax
cmp eax, edi
jne 0x10517ba
mov eax, 0x8007000e
push eax
push 0x10cd0136
jmp 0x10517d0
push ebx
push edi
call esi
mov dword [ebp - 0x1c], eax
cmp eax, edi
jne 0x10517dc
mov eax, 0x8007000e
push eax
push 0x10d50136
mov ebx, eax
call fcn.0108c55a
jmp 0x10519d1
xor ebx, ebx
cmp dword [ebp + 8], edi
jbe 0x105193e
mov eax, dword [ebp - 8]
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x14]
mov edi, dword [eax + ebx*4]
push edi
push dword [ebp - 4]
push ebx
push 0x100d1c8
call fcn.0109c1a8
add esp, 0x10
call esi
push dword [ebp - 0x20]
mov dword [ebp - 0x2c], eax
push edi
call dword [sym.imp.NETAPI32.dll_DsGetSiteNameW]
mov dword [ebp - 0x28], eax
call esi
sub eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x28], 0
push eax
je 0x1051853
push dword [ebp - 0x28]
push 0x100d1ac
call fcn.0109c1a8
add esp, 0xc
push dword [ebp - 0x28]
push 0x10e80136
push edi
call fcn.0108c595
mov eax, dword [ebp - 0x1c]
mov dword [eax + ebx*4], SysReAllocString
jmp 0x1051875
mov eax, dword [ebp - 0x20]
push dword [eax]
push 0x100d194
call fcn.0109c1a8
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x1c]
add esp, 0xc
inc dword [ebp - 4]
add dword [ebp - 0x20], 4
mov dword [eax + ebx*4], ecx
inc ebx
cmp ebx, dword [ebp + 8]
jb 0x10517f3
cmp dword [ebp - 4], 0
je 0x105193c
lea eax, [ebp - 0x24]
push eax
push dword [ebp - 0xc]
call fcn.01051609
mov ebx, eax
xor esi, esi
cmp ebx, esi
je 0x10518a5
push ebx
push 0x10f60136
jmp 0x10518d9
push dword [ebp - 0xc]
push 0x100d160
call fcn.0109c1a8
pop ecx
pop ecx
lea eax, [ebp - 0x10]
push eax
push esi
push dword [ebp - 4]
push dword [ebp - 8]
push dword [ebp - 0xc]
push dword [ebp - 0x24]
call fcn.0105165b
mov ebx, eax
cmp ebx, esi
je 0x10518e5
push ebx
mov dword [ebp - 0x10], esi
push 0x11030136
call fcn.0108c55a
xor edi, edi
jmp 0x10519d1
cmp dword [ebp - 4], esi
jbe 0x105193c
mov eax, dword [ebp - 0x10]
cmp dword [eax + esi*8], 0
je 0x1051917
push esi
push 0x110d0136
push dword [ebp - 0xc]
call fcn.0108c595
mov eax, dword [ebp - 0x10]
push dword [eax + esi*8]
mov eax, dword [ebp - 8]
push 0x11110136
push dword [eax + esi*4]
call fcn.0108c595
mov eax, dword [ebp - 0x10]
lea eax, [eax + esi*8]
push dword [eax + 4]
push dword [eax]
mov eax, dword [ebp - 8]
push dword [eax + esi*4]
push esi
push 0x100d0f8
call fcn.0109c1a8
add esp, 0x14
inc esi
cmp esi, dword [ebp - 4]
jb 0x10518ea
xor edi, edi
xor ebx, ebx
cmp dword [ebp + 8], edi
jbe 0x10519cf
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + ebx*4]
cmp eax, 0x7fffffff
je 0x10519ad
mov ecx, dword [ebp - 0x10]
lea ecx, [ecx + eax*8]
mov edx, dword [ecx]
cmp edx, edi
je 0x1051975
mov ecx, dword [ebp - 8]
push edx
push 0x11220136
push dword [ecx + eax*4]
call fcn.0108c595
jmp 0x10519ad
mov esi, dword [ecx + 4]
mov ecx, dword [ebp - 8]
push esi
push dword [ecx + eax*4]
mov ecx, dword [ebp - 0x14]
push dword [ecx + ebx*4]
push eax
push ebx
push 0x100d0a0
call fcn.0109c1a8
add esp, 0x18
cmp esi, edi
jl 0x10519a0
cmp esi, 0x7ffffffd
jle 0x10519a5
mov esi, 0x7ffffffd
cmp esi, 0x7ffffffe
jne 0x10519c5
mov eax, dword [ebp - 0x14]
push SysReAllocString
push dword [eax + ebx*4]
push 0x100d060
call fcn.0109c1a8
add esp, 0xc
inc ebx
cmp ebx, dword [ebp + 8]
jb 0x1051949
xor ebx, ebx
push dword [ebp - 0x14]
call fcn.0109175c
cmp dword [ebp - 0x18], edi
je 0x10519e7
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_LocalFree]
cmp dword [ebp - 0xc], edi
je 0x10519f4
push dword [ebp - 0xc]
call sub.NETAPI32.dll_NetApiBufferFree
cmp dword [ebp - 8], edi
je 0x1051a1f
xor esi, esi
cmp dword [ebp - 4], edi
jbe 0x1051a16
mov eax, dword [ebp - 8]
mov eax, dword [eax + esi*4]
cmp eax, edi
je 0x1051a10
push eax
call sub.NETAPI32.dll_NetApiBufferFree
inc esi
cmp esi, dword [ebp - 4]
jb 0x1051a00
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_LocalFree]
cmp dword [ebp - 0x1c], edi
je 0x1051a2d
push dword [ebp - 0x1c]
call dword [sym.imp.KERNEL32.dll_LocalFree]
cmp dword [ebp - 0x10], edi
je 0x1051a3a
push dword [ebp - 0x10]
call fcn.010516b9
cmp dword [ebp - 0x24], edi
je 0x1051a49
lea eax, [ebp - 0x24]
push eax
call dword [sym.imp.NTDSAPI.dll_DsUnBindW]
push ebx
call fcn.01091f0e
pop edi
pop esi
pop ebx
leave
ret 4