Function at 0x1000fc10
Capabilities:
Check for time delay via gettickcount
Create thread

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x1016f2e8
push 0x10118480
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x1498
call fcn.10126240
mov eax, dword [0x1017455c]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x1c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
mov esi, ecx
mov dword [ebp - 0x146c], esi
xor ebx, ebx
mov dword [ebp - 0x148c], ebx
mov dword [esi + 0x14], 1
mov dword [ebp - 4], ebx
call fcn.1004fe90
mov dword [0x1019b1e0], eax
mov dword [ebp - 0x1494], ebx
mov byte [ebp - 0x658], bl
push 0x103
push ebx
lea eax, [ebp - 0x657]
push eax
call fcn.10116880
add esp, 0xc
mov dword [ebp - 0x14a4], 0x104
lea ecx, [ebp - 0x1494]
push ecx
push str.AsyncDebug
mov ecx, str.SoftwareMicroWorld
mov edx, reloc.OLEAUT32.dll_SysReAllocString
call fcn.10031670
cmp dword [ebp - 0x1494], ebx
jne 0x1000fcef
push str.Debug
lea eax, [ebp - 0x14a4]
lea edi, [ebp - 0x658]
mov ecx, 0x10149700
mov edx, closesocket
call fcn.100315c0
test al, al
je 0x1000fd00
cmp byte [ebp - 0x658], 0x31
jne 0x1000fd00
push str._NWCONN__CheckAndWaitForIC_Started...
push ebx
call fcn.10053700
add esp, 8
lea ecx, [ecx]
mov dword [ebp - 0x1488], ebx
mov byte [ebp - 0x550], bl
push 0x103
push ebx
lea edx, [ebp - 0x54f]
push edx
call fcn.10116880
add esp, 0xc
mov byte [ebp - 0x28], bl
xor eax, eax
mov dword [ebp - 0x27], eax
mov dword [ebp - 0x23], eax
mov byte [ebp - 0x1f], al
mov byte [ebp - 0xc68], bl
push 0x3ff
push ebx
lea eax, [ebp - 0xc67]
push eax
call fcn.10116880
add esp, 0xc
mov dword [ebp - 0x1470], ebx
mov dword [ebp - 0x1474], ebx
mov dword [ebp - 0x1490], ebx
mov byte [ebp - 0x1468], bl
push 0x7ff
push ebx
lea ecx, [ebp - 0x1467]
push ecx
call fcn.10116880
add esp, 0xc
mov edi, 1
mov dword [ebp - 0x1478], edi
lea edx, [ebp - 0x1478]
push edx
push str.DirectConnectAvailable
mov ecx, str.SoftwareMicroWorld
mov edx, reloc.OLEAUT32.dll_SysReAllocString
call fcn.10031670
test al, al
jne 0x1000fda7
mov dword [ebp - 0x1478], edi
cmp dword [0x1019b1d8], ebx
jne 0x1000fdc0
mov dword [0x1019b1d8], edi
lea ecx, [ebp - 0x1468]
call fcn.1004d810
cmp dword [ebp - 0x148c], ebx
jne 0x1000fdd2
mov eax, dword [esi]
mov dword [eax], ebx
mov dword [ebp - 0x148c], edi
mov ecx, dword [esi + 8]
mov byte [ecx], bl
mov edx, dword [esi + 4]
mov byte [edx], bl
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1498], eax
cmp dword [ebp - 0x1478], ebx
je 0x1000fe4c
push str.www.microsoft.com
lea eax, [ebp - 0x550]
push eax
mov edi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
call edi
push 0x1014965c
lea ecx, [ebp - 0x28]
push ecx
call edi
cmp dword [ebp - 0x1478], 0xa
je 0x1000ffa9
push ebx
push ebx
push ebx
push ebx
push 0x2710
push ebx
lea edx, [ebp - 0xc68]
push edx
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x550]
push ecx
xor edx, edx
xor ecx, ecx
call fcn.1000d1d0
add esp, 0x24
cmp eax, ebx
jne 0x1000ffa9
mov byte [ebp - 0x868], bl
push 0x103
push ebx
lea edx, [ebp - 0x867]
push edx
call fcn.10116880
add esp, 0xc
mov eax, 0x104
mov dword [ebp - 0x149c], eax
mov dword [ebp - 0x14b0], eax
mov byte [ebp - 0x130], bl
mov byte [ebp - 0x238], bl
push ebx
call sym.EncDec.dll_IsSystemUser
test eax, eax
je 0x1000fed4
push str.ProxyServer
lea eax, [ebp - 0x14b0]
lea edi, [ebp - 0x238]
mov ecx, str.SoftwareMicroWorldeScan_for_WindowsMwMonitorRegMsg
mov edx, reloc.OLEAUT32.dll_SysReAllocString
call fcn.100315c0
cmp al, 1
jne 0x1000fee8
push str.ProxyPort
lea eax, [ebp - 0x149c]
lea edi, [ebp - 0x130]
mov ecx, str.SoftwareMicroWorldeScan_for_WindowsMwMonitorRegMsg
mov edx, reloc.OLEAUT32.dll_SysReAllocString
call fcn.100315c0
jmp 0x1000fee8
push ebx
lea eax, [ebp - 0x130]
push eax
lea ecx, [ebp - 0x238]
push ecx
call sym.EncDec.dll_GetProxySettingsOfDefaultBrowser
cmp byte [ebp - 0x238], bl
je 0x1000ff5c
cmp byte [ebp - 0x130], bl
je 0x1000ff5c
push ebx
push ebx
push ebx
push ebx
push 0x2710
push ebx
lea edx, [ebp - 0x868]
push edx
lea eax, [ebp - 0x130]
push eax
lea ecx, [ebp - 0x238]
push ecx
xor edx, edx
xor ecx, ecx
call fcn.1000d1d0
add esp, 0x24
cmp eax, 1
jne 0x1000ff5c
lea edx, [ebp - 0x238]
push edx
mov eax, dword [esi + 4]
push eax
mov edi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
call edi
lea ecx, [ebp - 0x130]
push ecx
mov edx, dword [esi + 8]
push edx
call edi
xor esi, esi
mov dword [ebp - 0x1488], 1
mov edi, dword [ebp - 0x146c]
jmp 0x1000ff6b
mov esi, 1
mov edi, dword [ebp - 0x146c]
mov eax, dword [edi]
mov dword [eax], ebx
cmp esi, ebx
je 0x1000ffb1
cmp dword [edi + 0x10], ebx
jne 0x1000ffb1
cmp dword [ebp - 0x1490], ebx
jne 0x10010004
mov dword [ebp - 0x1490], 1
push ebx
lea ecx, [ebp - 0x1470]
push ecx
call sym.EncDec.dll_GetIPUsingAdapterInfo
lea ecx, [ebp - 0x1474]
call fcn.10066a00
push 0x1f4
jmp 0x10010009
xor esi, esi
mov edi, dword [ebp - 0x146c]
mov eax, dword [ebp - 0x1470]
cmp eax, ebx
je 0x1000ffca
push eax
call fcn.1010dc10
add esp, 4
mov dword [ebp - 0x1470], ebx
mov eax, dword [ebp - 0x1474]
cmp eax, ebx
je 0x1000ffe3
push eax
call fcn.1010dc10
add esp, 4
mov dword [ebp - 0x1474], ebx
cmp esi, ebx
jne 0x10010202
cmp dword [ebp - 0x1488], ebx
je 0x100101fa
mov eax, dword [edi]
mov dword [eax], 2
jmp 0x10010202
push 0xfa0
call dword [sym.imp.KERNEL32.dll_Sleep]
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call edi
sub eax, dword [ebp - 0x1498]
cmp eax, 0x6d60
jbe 0x100101ef
mov dword [ebp - 0x1480], ebx
call edi
mov dword [ebp - 0x14ac], eax
call edi
sub eax, dword [ebp - 0x14ac]
cmp eax, 0xea60
jae 0x100101e7
mov dword [ebp - 0x147c], ebx
mov dword [ebp - 0x1484], ebx
push ebx
lea edx, [ebp - 0x147c]
push edx
call sym.EncDec.dll_GetIPUsingAdapterInfo
lea ecx, [ebp - 0x1484]
call fcn.10066a00
mov esi, dword [ebp - 0x147c]
cmp esi, ebx
je 0x100100a8
mov eax, dword [ebp - 0x1470]
cmp eax, ebx
je 0x1001008f
push eax
push esi
call fcn.1011c280
add esp, 8
test eax, eax
je 0x10010099
mov dword [ebp - 0x1480], 1
push esi
call fcn.1010dc10
add esp, 4
mov dword [ebp - 0x147c], ebx
mov esi, dword [ebp - 0x1484]
cmp esi, ebx
je 0x100100e3
mov eax, dword [ebp - 0x1474]
cmp eax, ebx
je 0x100100ca
push eax
push esi
call fcn.1011c280
add esp, 8
test eax, eax
je 0x100100d4
mov dword [ebp - 0x1480], 1
push esi
call fcn.1010dc10
add esp, 4
mov dword [ebp - 0x1484], ebx
cmp dword [ebp - 0x1480], ebx
jne 0x100101e7
mov byte [ebp - 0x760], bl
push 0x103
push ebx
lea eax, [ebp - 0x75f]
push eax
call fcn.10116880
add esp, 0xc
mov eax, 0x104
mov dword [ebp - 0x14a8], eax
mov dword [ebp - 0x14a0], eax
mov byte [ebp - 0x340], bl
mov byte [ebp - 0x448], bl
push ebx
call sym.EncDec.dll_IsSystemUser
test eax, eax
je 0x10010177
push str.ProxyServer
lea eax, [ebp - 0x14a0]
lea edi, [ebp - 0x448]
mov ecx, str.SoftwareMicroWorldeScan_for_WindowsMwMonitorRegMsg
mov edx, reloc.OLEAUT32.dll_SysReAllocString
call fcn.100315c0
cmp al, 1
jne 0x1001018b
push str.ProxyPort
lea eax, [ebp - 0x14a8]
lea edi, [ebp - 0x340]
mov ecx, str.SoftwareMicroWorldeScan_for_WindowsMwMonitorRegMsg
mov edx, reloc.OLEAUT32.dll_SysReAllocString
call fcn.100315c0
jmp 0x1001018b
push ebx
lea ecx, [ebp - 0x340]
push ecx
lea edx, [ebp - 0x448]
push edx
call sym.EncDec.dll_GetProxySettingsOfDefaultBrowser
cmp byte [ebp - 0x448], bl
je 0x100101cb
cmp byte [ebp - 0x340], bl
je 0x100101cb
push ebx
push ebx
push ebx
push ebx
push 0x2710
push ebx
lea eax, [ebp - 0x760]
push eax
lea ecx, [ebp - 0x340]
push ecx
lea edx, [ebp - 0x448]
push edx
xor edx, edx
xor ecx, ecx
call fcn.1000d1d0
add esp, 0x24
cmp eax, 1
je 0x100101e1
push 0x2328
call dword [sym.imp.KERNEL32.dll_Sleep]
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0x10010036
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call edi
mov dword [ebp - 0x1498], eax
mov esi, dword [ebp - 0x146c]
jmp 0x1000fde8
mov ecx, dword [edi]
mov dword [ecx], 1
cmp dword [edi + 0xc], ebx
je 0x1001028e
cmp dword [0x1019b1e0], ebx
je 0x1001028e
cmp dword [0x1019b1dc], ebx
jne 0x10010250
mov dword [0x101902ac], ebx
mov dword [edi + 0x14], ebx
push edi
push ebx
push 0x1000f7d0
call fcn.1010d93f
add esp, 0xc
cmp dword [edi + 0x14], ebx
jne 0x10010246
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x10010237
mov dword [0x1019b1dc], 1
cmp dword [0x101902ac], ebx
jne 0x10010265
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x10010250
mov dword [0x101902ac], ebx
mov esi, dword [ebp - 0x146c]
jmp 0x1000fd00
mov dword [ebp - 4], 0xfffffffe
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x1c]
xor ecx, ebp
call fcn.1010d699
mov esp, ebp
pop ebp
ret