Function at 0x100112d0
Capabilities:
Check for time delay via gettickcount
Create thread

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x101853f0
push 0x10132540
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x149c
call fcn.10140530
mov eax, dword [0x10189710]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x20], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
mov esi, dword [ebp + 8]
mov dword [ebp - 0x1470], esi
xor ebx, ebx
mov dword [ebp - 0x1490], ebx
mov dword [esi + 0x14], 1
mov dword [ebp - 4], ebx
call fcn.1006bbf0
mov dword [0x101c3c28], eax
mov dword [ebp - 0x1498], ebx
mov byte [ebp - 0x65c], bl
push 0x103
push ebx
lea eax, [ebp - 0x65b]
push eax
call fcn.1012e060
add esp, 0xc
mov dword [ebp - 0x14a8], 0x104
lea ecx, [ebp - 0x1498]
push ecx
push str.AsyncDebug
mov ecx, str.SoftwareMicroWorld
mov edx, reloc.WS2_32.dll_bind
call fcn.10059e30
cmp dword [ebp - 0x1498], ebx
jne 0x100113b0
push str.Debug
lea eax, [ebp - 0x14a8]
lea edi, [ebp - 0x65c]
mov ecx, 0x10157b08
mov edx, bind
call fcn.10059d80
test al, al
je 0x100113c0
cmp byte [ebp - 0x65c], 0x31
jne 0x100113c0
push str._NWCONN__CheckAndWaitForIC_Started...
push ebx
call fcn.1006ed90
add esp, 8
mov edi, edi
mov dword [ebp - 0x148c], ebx
mov byte [ebp - 0x554], bl
push 0x103
push ebx
lea edx, [ebp - 0x553]
push edx
call fcn.1012e060
add esp, 0xc
mov byte [ebp - 0x2c], bl
xor eax, eax
mov dword [ebp - 0x2b], eax
mov dword [ebp - 0x27], eax
mov byte [ebp - 0x23], al
mov byte [ebp - 0xc6c], bl
push 0x3ff
push ebx
lea eax, [ebp - 0xc6b]
push eax
call fcn.1012e060
add esp, 0xc
mov dword [ebp - 0x1474], ebx
mov dword [ebp - 0x1478], ebx
mov dword [ebp - 0x1494], ebx
mov byte [ebp - 0x146c], bl
push 0x7ff
push ebx
lea ecx, [ebp - 0x146b]
push ecx
call fcn.1012e060
add esp, 0xc
mov edi, 1
mov dword [ebp - 0x147c], edi
lea edx, [ebp - 0x147c]
push edx
push str.DirectConnectAvailable
mov ecx, str.SoftwareMicroWorld
mov edx, reloc.WS2_32.dll_bind
call fcn.10059e30
test al, al
jne 0x10011467
mov dword [ebp - 0x147c], edi
cmp dword [0x101c3c20], ebx
jne 0x10011480
mov dword [0x101c3c20], edi
lea ecx, [ebp - 0x146c]
call fcn.10068b00
cmp dword [ebp - 0x1490], ebx
jne 0x10011492
mov eax, dword [esi]
mov dword [eax], ebx
mov dword [ebp - 0x1490], edi
mov ecx, dword [esi + 8]
mov byte [ecx], bl
mov edx, dword [esi + 4]
mov byte [edx], bl
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x149c], eax
cmp dword [ebp - 0x147c], ebx
je 0x1001150c
push str.www.microsoft.com
lea eax, [ebp - 0x554]
push eax
mov edi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
call edi
push 0x10157ac0
lea ecx, [ebp - 0x2c]
push ecx
call edi
cmp dword [ebp - 0x147c], 0xa
je 0x10011667
push ebx
push ebx
push ebx
push ebx
push 0x2710
push ebx
lea edx, [ebp - 0xc6c]
push edx
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x554]
push ecx
xor edx, edx
xor ecx, ecx
call fcn.100104e0
add esp, 0x24
cmp eax, ebx
jne 0x10011667
mov byte [ebp - 0x86c], bl
push 0x103
push ebx
lea edx, [ebp - 0x86b]
push edx
call fcn.1012e060
add esp, 0xc
mov eax, 0x104
mov dword [ebp - 0x14a0], eax
mov dword [ebp - 0x14b4], eax
mov byte [ebp - 0x134], bl
mov byte [ebp - 0x23c], bl
xor ecx, ecx
call fcn.1007aaf0
test eax, eax
je 0x10011595
push str.ProxyServer
lea eax, [ebp - 0x14b4]
lea edi, [ebp - 0x23c]
mov ecx, str.SoftwareMicroWorldeScan_for_WindowsMwMonitorRegMsg
mov edx, reloc.WS2_32.dll_bind
call fcn.10059d80
cmp al, 1
jne 0x100115a6
push str.ProxyPort
lea eax, [ebp - 0x14a0]
lea edi, [ebp - 0x134]
mov ecx, str.SoftwareMicroWorldeScan_for_WindowsMwMonitorRegMsg
mov edx, reloc.WS2_32.dll_bind
call fcn.10059d80
jmp 0x100115a6
lea edx, [ebp - 0x134]
lea ecx, [ebp - 0x23c]
call fcn.10086e40
cmp byte [ebp - 0x23c], bl
je 0x1001161a
cmp byte [ebp - 0x134], bl
je 0x1001161a
push ebx
push ebx
push ebx
push ebx
push 0x2710
push ebx
lea eax, [ebp - 0x86c]
push eax
lea ecx, [ebp - 0x134]
push ecx
lea edx, [ebp - 0x23c]
push edx
xor edx, edx
xor ecx, ecx
call fcn.100104e0
add esp, 0x24
cmp eax, 1
jne 0x1001161a
lea eax, [ebp - 0x23c]
push eax
mov ecx, dword [esi + 4]
push ecx
mov edi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
call edi
lea edx, [ebp - 0x134]
push edx
mov eax, dword [esi + 8]
push eax
call edi
xor esi, esi
mov dword [ebp - 0x148c], 1
mov edi, dword [ebp - 0x1470]
jmp 0x10011629
mov esi, 1
mov edi, dword [ebp - 0x1470]
mov ecx, dword [edi]
mov dword [ecx], ebx
cmp esi, ebx
je 0x1001166f
cmp dword [edi + 0x10], ebx
jne 0x1001166f
cmp dword [ebp - 0x1494], ebx
jne 0x100116c2
mov dword [ebp - 0x1494], 1
push ebx
lea edx, [ebp - 0x1474]
push edx
call fcn.10081c10
lea ecx, [ebp - 0x1478]
call fcn.10082260
push 0x1f4
jmp 0x100116c7
xor esi, esi
mov edi, dword [ebp - 0x1470]
mov eax, dword [ebp - 0x1474]
cmp eax, ebx
je 0x10011688
push eax
call fcn.10128243
add esp, 4
mov dword [ebp - 0x1474], ebx
mov eax, dword [ebp - 0x1478]
cmp eax, ebx
je 0x100116a1
push eax
call fcn.10128243
add esp, 4
mov dword [ebp - 0x1478], ebx
cmp esi, ebx
jne 0x100118be
cmp dword [ebp - 0x148c], ebx
je 0x100118b6
mov edx, dword [edi]
mov dword [edx], 2
jmp 0x100118be
push 0xfa0
call dword [sym.imp.KERNEL32.dll_Sleep]
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call edi
sub eax, dword [ebp - 0x149c]
cmp eax, 0x6d60
jbe 0x100118ab
mov dword [ebp - 0x1484], ebx
call edi
mov dword [ebp - 0x14b0], eax
call edi
sub eax, dword [ebp - 0x14b0]
cmp eax, 0xea60
jae 0x100118a3
mov dword [ebp - 0x1480], ebx
mov dword [ebp - 0x1488], ebx
push ebx
lea eax, [ebp - 0x1480]
push eax
call fcn.10081c10
lea ecx, [ebp - 0x1488]
call fcn.10082260
mov esi, dword [ebp - 0x1480]
cmp esi, ebx
je 0x10011766
mov eax, dword [ebp - 0x1474]
cmp eax, ebx
je 0x1001174d
push eax
push esi
call fcn.10135887
add esp, 8
test eax, eax
je 0x10011757
mov dword [ebp - 0x1484], 1
push esi
call fcn.10128243
add esp, 4
mov dword [ebp - 0x1480], ebx
mov esi, dword [ebp - 0x1488]
cmp esi, ebx
je 0x100117a1
mov eax, dword [ebp - 0x1478]
cmp eax, ebx
je 0x10011788
push eax
push esi
call fcn.10135887
add esp, 8
test eax, eax
je 0x10011792
mov dword [ebp - 0x1484], 1
push esi
call fcn.10128243
add esp, 4
mov dword [ebp - 0x1488], ebx
cmp dword [ebp - 0x1484], ebx
jne 0x100118a3
mov byte [ebp - 0x764], bl
push 0x103
push ebx
lea ecx, [ebp - 0x763]
push ecx
call fcn.1012e060
add esp, 0xc
mov eax, 0x104
mov dword [ebp - 0x14ac], eax
mov dword [ebp - 0x14a4], eax
mov byte [ebp - 0x344], bl
mov byte [ebp - 0x44c], bl
xor ecx, ecx
call fcn.1007aaf0
test eax, eax
je 0x10011836
push str.ProxyServer
lea eax, [ebp - 0x14a4]
lea edi, [ebp - 0x44c]
mov ecx, str.SoftwareMicroWorldeScan_for_WindowsMwMonitorRegMsg
mov edx, reloc.WS2_32.dll_bind
call fcn.10059d80
cmp al, 1
jne 0x10011847
push str.ProxyPort
lea eax, [ebp - 0x14ac]
lea edi, [ebp - 0x344]
mov ecx, str.SoftwareMicroWorldeScan_for_WindowsMwMonitorRegMsg
mov edx, reloc.WS2_32.dll_bind
call fcn.10059d80
jmp 0x10011847
lea edx, [ebp - 0x344]
lea ecx, [ebp - 0x44c]
call fcn.10086e40
cmp byte [ebp - 0x44c], bl
je 0x10011887
cmp byte [ebp - 0x344], bl
je 0x10011887
push ebx
push ebx
push ebx
push ebx
push 0x2710
push ebx
lea edx, [ebp - 0x764]
push edx
lea eax, [ebp - 0x344]
push eax
lea ecx, [ebp - 0x44c]
push ecx
xor edx, edx
xor ecx, ecx
call fcn.100104e0
add esp, 0x24
cmp eax, 1
je 0x1001189d
push 0x2328
call dword [sym.imp.KERNEL32.dll_Sleep]
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0x100116f4
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call edi
mov dword [ebp - 0x149c], eax
mov esi, dword [ebp - 0x1470]
jmp 0x100114a8
mov eax, dword [edi]
mov dword [eax], 1
cmp dword [edi + 0xc], ebx
je 0x1001194e
cmp dword [0x101c3c28], ebx
je 0x1001194e
cmp dword [0x101c3c24], ebx
jne 0x10011910
mov dword [0x101a8db0], ebx
mov dword [edi + 0x14], ebx
push edi
push ebx
push 0x10010e90
call fcn.10127f7d
add esp, 0xc
cmp dword [edi + 0x14], ebx
jne 0x10011902
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x100118f3
mov dword [0x101c3c24], 1
lea esp, [esp]
cmp dword [0x101a8db0], ebx
jne 0x10011925
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x10011910
mov dword [0x101a8db0], ebx
mov esi, dword [ebp - 0x1470]
jmp 0x100113c0
mov dword [ebp - 4], 0xfffffffe
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x20]
xor ecx, ebp
call fcn.10127db1
mov esp, ebp
pop ebp
ret