Function at 0x1001ca50
Capabilities:
Check for time delay via gettickcount
Create thread

Disassembly:
push ebp
lea ebp, [esp - 0x5c]
mov eax, 0xe44c
call fcn.10025b00
mov eax, dword [ebp + 0x64]
push ebx
push esi
push edi
lea edx, [ebp + 0x58]
push edx
mov esi, ecx
mov ecx, dword [eax]
push 0x1002f698
xor ebx, ebx
push eax
mov dword [ebp + 0x54], esi
mov dword [ebp + 0x58], ebx
call dword [ecx]
cmp dword [ebp + 0x58], ebx
je 0x1001d164
push dword [ebp + 0x58]
mov ecx, esi
call fcn.10019d16
test al, al
je 0x1001d157
call fcn.100013e0
mov edi, dword [ebp + 0x68]
mov eax, dword [edi + 8]
push 0x1002f7c4
push eax
call dword [sym.imp.SHLWAPI.dll_StrStrIW]
test eax, eax
je 0x1001cae6
mov eax, dword [edi + 8]
mov esi, dword [ebp + 0x58]
push ebx
push dword [ebp + 0x6c]
push 0x1002f088
push eax
call dword [sym.imp.SHLWAPI.dll_StrStrIW]
mov ecx, dword [ebp + 0x54]
neg eax
sbb eax, eax
neg eax
push eax
push esi
push edi
call fcn.10008c0e
mov eax, dword [ebp + 0x7c]
or word [eax], 0xffff
jmp 0x1001d157
push dword [edi + 8]
mov word [ebp - 0x49e0], bx
call fcn.10017e1c
test al, al
jne 0x1001cc13
lea eax, [ebp - 0x49e0]
push eax
mov ecx, esi
call fcn.10009666
test al, al
je 0x1001cc13
push dword [edi + 8]
lea eax, [ebp - 0x49e0]
push eax
call fcn.1001d371
mov eax, dword [ebp + 0x58]
push 0x16
pop ecx
mov dword [ebp + 0x68], eax
mov word [ebp - 0x2c], cx
mov word [ebp + 4], cx
mov word [ebp - 0x1c], cx
mov word [ebp - 0xc], cx
mov dword [ebp - 0x24], ebx
mov dword [ebp + 0xc], ebx
mov dword [ebp - 0x14], ebx
mov dword [ebp - 4], ebx
mov esi, dword [eax]
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp + 4]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x49e0]
push eax
lea ecx, [ebp + 0x24]
add esi, 0xd0
call fcn.10009b01
push eax
push dword [ebp + 0x68]
call dword [esi]
mov ebx, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp + 0x24]
push eax
call ebx
lea eax, [ebp - 0xc]
push eax
call ebx
lea eax, [ebp - 0x1c]
push eax
call ebx
lea eax, [ebp + 4]
push eax
call ebx
lea eax, [ebp - 0x2c]
push eax
call ebx
mov eax, dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x54]
or word [eax], 0xffff
call fcn.10012d18
push dword [edi + 8]
lea ecx, [ebp + 0x14]
call fcn.10009b01
mov esi, eax
lea edi, [ebp + 0x24]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov esi, dword [ebp + 0x58]
mov dword [ebp + 0x68], esi
call fcn.1001f62b
push eax
lea ecx, [ebp + 0x6c]
call fcn.1000cd4f
mov eax, dword [eax]
test eax, eax
je 0x1001cbd9
mov eax, dword [eax]
jmp 0x1001cbdb
xor eax, eax
mov ecx, dword [esi]
sub esp, 0x10
mov edi, esp
lea esi, [ebp + 0x24]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push eax
push dword [ebp + 0x68]
movsd dword es:[edi], dword [esi]
call dword [ecx + 0x88]
mov ecx, dword [ebp + 0x6c]
test ecx, ecx
je 0x1001cc03
call fcn.1000eb67
and dword [ebp + 0x6c], 0
lea eax, [ebp + 0x14]
push eax
call ebx
mov eax, dword [ebp + 0x58]
test eax, eax
jmp 0x1001d15c
push dword [edi + 8]
call fcn.10017e1c
test al, al
je 0x1001d00e
push edi
push dword [ebp + 0x58]
mov ecx, esi
call fcn.10001314
test al, al
je 0x1001d00e
call fcn.100195f9
test al, al
jne 0x1001d00e
push 0x2000
lea eax, [ebp + 0x48]
push eax
lea eax, [ebp - 0x2950]
push eax
push dword [edi + 8]
mov word [ebp - 0x1908], bx
mov word [ebp - 0x8c2], bx
mov word [ebp - 0x6a70], bx
mov word [ebp - 0x2950], bx
mov dword [ebp + 0x48], 0x1048
call dword [sym.imp.SHLWAPI.dll_UrlEscapeW]
mov eax, dword [0x1003fdb4]
cmp eax, ebx
mov esi, 0x824
je 0x1001cce1
mov ecx, eax
shr ecx, 0x18
push ecx
mov ecx, eax
shr ecx, 0x10
and ecx, 0xff
push ecx
movzx ecx, ah
push ecx
movzx eax, al
push eax
push str._d._d._d._d
lea eax, [ebp - 0x98]
push 0x13
push eax
call fcn.10017296
push str._feed.php_ref
lea eax, [ebp - 0x98]
push eax
push str._s_s
lea eax, [ebp - 0x1908]
push 0x823
push eax
call fcn.10017296
add esp, 0x30
jmp 0x1001ccfd
call fcn.1000788e
test al, al
lea eax, [ebp - 0x1908]
jne 0x1001ccf4
push 1
jmp 0x1001ccf6
push 2
push esi
push eax
call fcn.1000458e
push 2
push esi
lea eax, [ebp - 0x6a70]
push eax
call fcn.1000458e
mov esi, dword [sym.imp.KERNEL32.dll_lstrcatW]
lea eax, [ebp - 0x2950]
push eax
lea eax, [ebp - 0x1908]
push eax
call esi
lea eax, [ebp - 0x2950]
push eax
lea eax, [ebp - 0x6a70]
push eax
call esi
lea eax, [ebp - 0x1908]
push eax
call fcn.1001c0dc
lea eax, [ebp - 0x6a70]
push eax
call fcn.1001c0dc
push str.Authorization:_Basic
lea eax, [ebp - 0x3998]
push eax
mov word [ebp - 0x3998], bx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
push 1
push ebx
push 1
call fcn.10019615
push eax
lea eax, [ebp - 0x3998]
push eax
call esi
mov eax, dword [ebp + 0x58]
lea edx, [ebp + 0x44]
push edx
mov dword [ebp + 0x44], ebx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x94]
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
inc dword [0x1003fdb0]
call esi
push ebx
lea ecx, [ebp - 0xe3f0]
call fcn.1001156b
lea eax, [ebp - 0x3998]
push eax
push 0xdac
push 0x1002e91c
call fcn.1001bb0a
push eax
lea eax, [ebp - 0x1908]
push eax
lea ecx, [ebp - 0xe3f0]
call fcn.10018b69
mov byte [ebp + 0x6f], al
call esi
cmp byte [ebp + 0x6f], bl
je 0x1001d0bf
cmp byte [ebp - 0xe3ca], bl
je 0x1001d0bf
cmp byte [ebp - 0xe3cb], bl
je 0x1001cdf9
push 0x384
call fcn.10019b2b
lea eax, [ebp - 0x7a71]
push eax
push dword [ebp + 0x54]
call fcn.10017c06
mov esi, 0x825
push esi
lea eax, [ebp - 0x8c0]
push ebx
push eax
call fcn.10025c20
add esp, 0xc
push esi
lea eax, [ebp - 0xa2a9]
push eax
lea eax, [ebp - 0x8c0]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
test eax, eax
je 0x1001d003
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenA]
lea eax, [ebp - 0x8c0]
push eax
call esi
test eax, eax
je 0x1001d003
push 0x1002db08
lea eax, [ebp - 0x8c0]
push eax
call dword [sym.imp.SHLWAPI.dll_StrStrIA]
test eax, eax
je 0x1001ce7c
push 0x1002db08
lea eax, [ebp - 0x8c0]
push eax
call dword [sym.imp.SHLWAPI.dll_StrStrIA]
mov byte [eax], bl
lea eax, [ebp - 0x8c0]
push eax
call esi
test eax, eax
je 0x1001d003
push 0x1002e9a4
lea eax, [ebp - 0x8c0]
push eax
call dword [sym.imp.SHLWAPI.dll_StrStrIA]
test eax, eax
lea eax, [ebp - 0x8c0]
je 0x1001d049
push 0xffffffffffffffff
push eax
call fcn.100086d5
push eax
lea ecx, [ebp + 0x34]
call fcn.10009b01
mov esi, eax
lea edi, [ebp + 0x14]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov esi, dword [ebp + 0x58]
mov dword [ebp + 0x6c], esi
call fcn.10018706
push eax
lea ecx, [ebp + 0x4c]
call fcn.1000cd4f
mov eax, dword [eax]
cmp eax, ebx
je 0x1001cee5
mov eax, dword [eax]
jmp 0x1001cee7
xor eax, eax
mov ecx, dword [esi]
sub esp, 0x10
mov edi, esp
lea esi, [ebp + 0x14]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push eax
push dword [ebp + 0x6c]
movsd dword es:[edi], dword [esi]
call dword [ecx + 0x88]
mov ecx, dword [ebp + 0x4c]
cmp ecx, ebx
je 0x1001cf0e
call fcn.1000eb67
mov dword [ebp + 0x4c], ebx
lea eax, [ebp + 0x34]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov ecx, dword [ebp + 0x54]
push 0xb4
push dword [ebp + 0x68]
push dword [ebp + 0x58]
call fcn.10020867
mov esi, dword [sym.imp.SHLWAPI.dll_StrStrIA]
push 0x1002e9a4
lea eax, [ebp - 0x8c0]
push eax
call esi
lea ecx, [ebp - 0x8c0]
cmp ecx, eax
jne 0x1001d000
mov edi, 0x100305a8
push edi
lea eax, [ebp - 0x8b9]
push eax
call esi
test eax, eax
je 0x1001d000
push edi
lea eax, [ebp - 0x8b9]
push eax
mov word [ebp - 0x5a28], bx
call esi
lea ecx, [ebp - 0x8b9]
sub eax, ecx
inc eax
push eax
push 0xffffffffffffffff
mov eax, ecx
push eax
call fcn.100086d5
push eax
lea eax, [ebp - 0x5a28]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
lea eax, [ebp - 0x5a28]
push eax
lea ecx, [ebp - 0x54]
call fcn.10009b01
mov esi, eax
lea edi, [ebp + 0x34]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov esi, dword [ebp + 0x58]
mov dword [ebp + 0x6c], esi
call fcn.10004e39
push eax
lea ecx, [ebp + 0x50]
call fcn.1000cd4f
mov eax, dword [eax]
cmp eax, ebx
je 0x1001cfcd
mov eax, dword [eax]
jmp 0x1001cfcf
xor eax, eax
mov ecx, dword [esi]
sub esp, 0x10
mov edi, esp
lea esi, [ebp + 0x34]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push eax
push dword [ebp + 0x6c]
movsd dword es:[edi], dword [esi]
call dword [ecx + 0x88]
mov ecx, dword [ebp + 0x50]
cmp ecx, ebx
je 0x1001cff6
call fcn.1000eb67
mov dword [ebp + 0x50], ebx
lea eax, [ebp - 0x54]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov edi, dword [ebp + 0x68]
lea ecx, [ebp - 0xe3f0]
call fcn.1001ed2a
push dword [ebp + 0x64]
mov ecx, dword [ebp + 0x54]
call fcn.100136ff
test al, al
je 0x1001d13b
mov eax, dword [edi + 8]
push str.dnserror
push eax
call dword [sym.imp.SHLWAPI.dll_StrStrIW]
test eax, eax
je 0x1001d0c6
mov eax, dword [ebp + 0x58]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x80]
jmp 0x1001d157
push eax
call esi
cmp eax, 7
jge 0x1001d003
lea eax, [ebp - 0x8c0]
push eax
call esi
cmp eax, ebx
mov dword [ebp + 0x50], eax
mov byte [ebp + 0x6b], 1
mov dword [ebp + 0x6c], ebx
jle 0x1001d0a7
mov esi, dword [ebp + 0x6c]
lea esi, [ebp + esi - 0x8c0]
movsx ax, byte [esi]
push eax
call dword [sym.imp.USER32.dll_IsCharAlphaNumericW]
test eax, eax
je 0x1001d090
movsx ax, byte [esi]
push eax
call dword [sym.imp.USER32.dll_IsCharAlphaW]
test eax, eax
je 0x1001d093
mov byte [ebp + 0x6b], bl
inc dword [ebp + 0x6c]
mov eax, dword [ebp + 0x6c]
cmp eax, dword [ebp + 0x50]
jl 0x1001d068
cmp byte [ebp + 0x6b], bl
je 0x1001d003
lea eax, [ebp - 0x8c0]
push eax
call fcn.100070b9
pop ecx
push eax
call fcn.1000989c
jmp 0x1001d003
push 0x258
jmp 0x1001d0b5
push dword [ebp + 0x58]
lea ecx, [ebp - 0x44]
call fcn.10005144
lea ecx, [ebp - 0x44]
call fcn.1001f3f4
mov esi, eax
imul esi, esi, 0x3e8
cmp esi, ebx
je 0x1001d131
mov eax, dword [ebp + 0x7c]
or word [eax], 0xffff
push 0x18
call fcn.1001db04
cmp eax, ebx
pop ecx
je 0x1001d106
push edi
push ebx
push esi
mov ecx, eax
call fcn.1001f4e8
mov esi, eax
jmp 0x1001d108
xor esi, esi
lea eax, [esi + 4]
push eax
push dword [ebp + 0x58]
push 0x1002f698
call dword [sym.imp.ole32.dll_CoMarshalInterThreadInterfaceInStream]
push ebx
push ebx
push esi
push 0x100177fd
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x44]
call fcn.1001ace3
jmp 0x1001d157
push dword [edi + 8]
lea ecx, [ebp - 0x70]
call fcn.1000c2e8
push eax
call fcn.1001d213
push ebx
push 1
lea ecx, [ebp - 0x70]
call fcn.100221da
mov eax, dword [ebp + 0x58]
cmp eax, ebx
je 0x1001d164
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
pop edi
pop esi
pop ebx
add ebp, 0x5c
leave
ret 0x1c