Function at 0x105162d
Capabilities:
Check for time delay via gettickcount

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x2c
push ebx
push esi
push edi
xor edi, edi
push edi
lea eax, [ebp - 0x14]
push eax
push edi
push edi
push edi
push dword [ebp + 8]
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x18], edi
mov dword [ebp - 0xc], edi
mov dword [ebp - 8], edi
mov dword [ebp - 4], edi
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x10], edi
mov dword [ebp - 0x1c], edi
call fcn.01091774
mov ebx, eax
cmp ebx, edi
je 0x1051673
push ebx
push 0x10c00136
jmp 0x1051713
mov eax, dword [ebp - 0x14]
xor esi, esi
mov dword [ebp + 8], esi
cmp dword [eax], edi
je 0x1051688
inc esi
cmp dword [eax + esi*4], edi
jne 0x105167f
mov dword [ebp + 8], esi
lea eax, [ebp - 0x18]
push eax
call fcn.010abfea
mov ebx, eax
cmp ebx, edi
je 0x105169f
push ebx
push 0x10c60136
jmp 0x1051713
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 0x18]
call dword [sym.imp.NETAPI32.dll_DsGetSiteNameW]
mov ebx, eax
cmp ebx, edi
je 0x10516c5
push ebx
push 0x10c90136
push dword [ebp - 0x18]
call fcn.0108c53e
jmp 0x1051912
push dword [ebp - 0xc]
push dword [ebp - 0x18]
push 0x100d214
call fcn.0109c1c3
mov ebx, esi
mov esi, dword [sym.imp.KERNEL32.dll_LocalAlloc]
add esp, 0xc
shl ebx, 2
push ebx
push edi
call esi
mov dword [ebp - 8], eax
cmp eax, edi
jne 0x10516fb
mov eax, 0x8007000e
push eax
push 0x10d60136
jmp 0x1051711
push ebx
push edi
call esi
mov dword [ebp - 0x1c], eax
cmp eax, edi
jne 0x105171d
mov eax, 0x8007000e
push eax
push 0x10de0136
mov ebx, eax
call fcn.0108c503
jmp 0x1051912
xor ebx, ebx
cmp dword [ebp + 8], edi
jbe 0x105187f
mov eax, dword [ebp - 8]
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x14]
mov edi, dword [eax + ebx*4]
push edi
push dword [ebp - 4]
push ebx
push 0x100d1d8
call fcn.0109c1c3
add esp, 0x10
call esi
push dword [ebp - 0x20]
mov dword [ebp - 0x2c], eax
push edi
call dword [sym.imp.NETAPI32.dll_DsGetSiteNameW]
mov dword [ebp - 0x28], eax
call esi
sub eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x28], 0
push eax
je 0x1051794
push dword [ebp - 0x28]
push 0x100d1bc
call fcn.0109c1c3
add esp, 0xc
push dword [ebp - 0x28]
push 0x10f10136
push edi
call fcn.0108c53e
mov eax, dword [ebp - 0x1c]
mov dword [eax + ebx*4], SysReAllocString
jmp 0x10517b6
mov eax, dword [ebp - 0x20]
push dword [eax]
push 0x100d1a4
call fcn.0109c1c3
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x1c]
add esp, 0xc
inc dword [ebp - 4]
add dword [ebp - 0x20], 4
mov dword [eax + ebx*4], ecx
inc ebx
cmp ebx, dword [ebp + 8]
jb 0x1051734
cmp dword [ebp - 4], 0
je 0x105187d
lea eax, [ebp - 0x24]
push eax
push dword [ebp - 0xc]
call fcn.0105154a
mov ebx, eax
xor esi, esi
cmp ebx, esi
je 0x10517e6
push ebx
push 0x10ff0136
jmp 0x105181a
push dword [ebp - 0xc]
push 0x100d170
call fcn.0109c1c3
pop ecx
pop ecx
lea eax, [ebp - 0x10]
push eax
push esi
push dword [ebp - 4]
push dword [ebp - 8]
push dword [ebp - 0xc]
push dword [ebp - 0x24]
call fcn.0105159c
mov ebx, eax
cmp ebx, esi
je 0x1051826
push ebx
mov dword [ebp - 0x10], esi
push 0x110c0136
call fcn.0108c503
xor edi, edi
jmp 0x1051912
cmp dword [ebp - 4], esi
jbe 0x105187d
mov eax, dword [ebp - 0x10]
cmp dword [eax + esi*8], 0
je 0x1051858
push esi
push 0x11160136
push dword [ebp - 0xc]
call fcn.0108c53e
mov eax, dword [ebp - 0x10]
push dword [eax + esi*8]
mov eax, dword [ebp - 8]
push 0x111a0136
push dword [eax + esi*4]
call fcn.0108c53e
mov eax, dword [ebp - 0x10]
lea eax, [eax + esi*8]
push dword [eax + 4]
push dword [eax]
mov eax, dword [ebp - 8]
push dword [eax + esi*4]
push esi
push 0x100d108
call fcn.0109c1c3
add esp, 0x14
inc esi
cmp esi, dword [ebp - 4]
jb 0x105182b
xor edi, edi
xor ebx, ebx
cmp dword [ebp + 8], edi
jbe 0x1051910
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + ebx*4]
cmp eax, 0x7fffffff
je 0x10518ee
mov ecx, dword [ebp - 0x10]
lea ecx, [ecx + eax*8]
mov edx, dword [ecx]
cmp edx, edi
je 0x10518b6
mov ecx, dword [ebp - 8]
push edx
push 0x112b0136
push dword [ecx + eax*4]
call fcn.0108c53e
jmp 0x10518ee
mov esi, dword [ecx + 4]
mov ecx, dword [ebp - 8]
push esi
push dword [ecx + eax*4]
mov ecx, dword [ebp - 0x14]
push dword [ecx + ebx*4]
push eax
push ebx
push 0x100d0b0
call fcn.0109c1c3
add esp, 0x18
cmp esi, edi
jl 0x10518e1
cmp esi, 0x7ffffffd
jle 0x10518e6
mov esi, 0x7ffffffd
cmp esi, 0x7ffffffe
jne 0x1051906
mov eax, dword [ebp - 0x14]
push SysReAllocString
push dword [eax + ebx*4]
push 0x100d070
call fcn.0109c1c3
add esp, 0xc
inc ebx
cmp ebx, dword [ebp + 8]
jb 0x105188a
xor ebx, ebx
push dword [ebp - 0x14]
call fcn.01091737
cmp dword [ebp - 0x18], edi
je 0x1051928
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_LocalFree]
cmp dword [ebp - 0xc], edi
je 0x1051935
push dword [ebp - 0xc]
call sub.NETAPI32.dll_NetApiBufferFree
cmp dword [ebp - 8], edi
je 0x1051960
xor esi, esi
cmp dword [ebp - 4], edi
jbe 0x1051957
mov eax, dword [ebp - 8]
mov eax, dword [eax + esi*4]
cmp eax, edi
je 0x1051951
push eax
call sub.NETAPI32.dll_NetApiBufferFree
inc esi
cmp esi, dword [ebp - 4]
jb 0x1051941
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_LocalFree]
cmp dword [ebp - 0x1c], edi
je 0x105196e
push dword [ebp - 0x1c]
call dword [sym.imp.KERNEL32.dll_LocalFree]
cmp dword [ebp - 0x10], edi
je 0x105197b
push dword [ebp - 0x10]
call fcn.010515fa
cmp dword [ebp - 0x24], edi
je 0x105198a
lea eax, [ebp - 0x24]
push eax
call dword [sym.imp.NTDSAPI.dll_DsUnBindW]
push ebx
call fcn.01091ee9
pop edi
pop esi
pop ebx
leave
ret 4