Function at 0x10008211
Capabilities:
Check for time delay via gettickcount
Parse url

Disassembly:
push 0xb0
mov eax, 0x1002873f
call fcn.10015c84
mov eax, dword [ebp + 0xc]
mov ebx, dword [ebp + 8]
push 0x200
mov dword [ebp - 0x70], ecx
mov dword [ebp - 0x7c], eax
call fcn.100152a7
mov edi, eax
mov dword [ebp - 0x6c], edi
mov dword [esp], 0x1000
call fcn.100152a7
mov esi, eax
xor eax, eax
and dword [ebp - 0x74], 0
movzx edx, ax
mov eax, edx
shl edx, 0x10
or eax, edx
mov ecx, 0x80
rep stosd dword es:[edi], eax
xor eax, eax
movzx edx, ax
mov eax, edx
shl edx, 0x10
or eax, edx
mov ecx, 0x400
mov edi, esi
push 0x38
rep stosd dword es:[edi], eax
lea eax, [ebp - 0xb8]
push 0
push eax
call fcn.100154e0
mov eax, dword [ebp - 0x6c]
add esp, 0x10
cmp dword [ebx + 0x14], 8
mov edi, 0x100
mov dword [ebp - 0xac], eax
mov eax, dword [ebx + 0x10]
mov dword [ebp - 0xbc], 0x3c
mov dword [ebp - 0xa8], edi
mov dword [ebp - 0x8c], 0x800
mov dword [ebp - 0x90], esi
jb 0x100082c3
mov ecx, dword [ebx]
jmp 0x100082c5
mov ecx, ebx
lea edx, [ebp - 0xbc]
push edx
push 0
push eax
push ecx
call dword [sym.imp.WININET.dll_InternetCrackUrlW]
push dword [ebp - 0x6c]
call fcn.10015f5f
pop ecx
push dword [ebp - 0x6c]
lea ecx, [ebp - 0x2c]
call fcn.10003ab6
mov eax, dword [ebp - 0x70]
and dword [ebp - 4], 0
push eax
mov dword [ebp - 0x80], eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push esi
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 1
call fcn.10003ab6
mov eax, dword [ebp - 0x70]
add eax, 0x18
push eax
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x2c]
push eax
mov ecx, 0x1003b934
mov byte [ebp - 4], 2
call fcn.100142cf
mov byte [ebp - 0x65], al
test al, al
je 0x100084bc
cmp dword [ebp - 0x18], 8
mov eax, dword [ebp - 0x2c]
jae 0x1000833c
lea eax, [ebp - 0x2c]
push dword [ebp - 0x6c]
push eax
call fcn.100156e4
pop ecx
pop ecx
test eax, eax
je 0x10008386
cmp dword [ebp - 0x18], 8
mov eax, dword [ebp - 0x2c]
jae 0x10008357
lea eax, [ebp - 0x2c]
push 0xffffffffffffffff
push eax
push edi
push dword [ebp - 0x6c]
call fcn.10018a5a
push dword [ebp - 0x6c]
call fcn.1001539a
push 0xffffffffffffffff
push 0x1002c3e0
push 0x800
push esi
mov dword [ebp - 0xa8], eax
call fcn.10018a5a
add esp, 0x24
mov ecx, dword [ebp - 0x70]
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x78]
push eax
add ecx, 0x18
call fcn.10007fb3
mov edi, dword [eax]
mov eax, dword [ebp - 0x70]
cmp edi, dword [eax + 0x1c]
je 0x100084bc
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [0x10037154]
cmp eax, 0xbb8
jbe 0x100083c1
and dword [0x10037150], 0
cmp dword [0x10037150], 6
jae 0x100084ea
inc dword [0x10037150]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push esi
lea ecx, [ebp - 0x48]
mov dword [0x10037154], eax
call fcn.10003ab6
mov eax, dword [edi + 0x60]
mov byte [ebp - 4], 3
test eax, eax
je 0x100084a3
add edi, 0x28
lea ecx, [ebp - 0x48]
push edi
push ecx
call eax
pop ecx
pop ecx
test al, al
je 0x100084a3
push 0x1048
mov dword [ebp - 0x78], 0x824
call fcn.100152a7
mov ebx, eax
xor eax, eax
movzx edx, ax
mov eax, edx
shl edx, 0x10
or eax, edx
pop ecx
mov ecx, 0x412
mov edi, ebx
rep stosd dword es:[edi], eax
xor eax, eax
movzx edx, ax
mov eax, edx
shl edx, 0x10
or eax, edx
cmp dword [ebp - 0x34], 8
mov ecx, 0x400
mov edi, esi
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x74], ebx
jae 0x10008458
lea eax, [ebp - 0x48]
push 0xffffffffffffffff
push eax
push 0x800
push esi
call fcn.10018a5a
mov eax, dword [ebp - 0x38]
add esp, 0x10
mov dword [ebp - 0x8c], eax
lea eax, [ebp - 0x78]
push eax
push ebx
push 0
lea eax, [ebp - 0xbc]
push eax
mov dword [ebp - 0x90], esi
call dword [sym.imp.WININET.dll_InternetCreateUrlW]
push ebx
call fcn.1001539a
pop ecx
mov ecx, dword [ebp - 0x7c]
push eax
push ebx
call fcn.100027d1
mov byte [ebp - 0x65], 1
jmp 0x100084b0
mov ecx, dword [ebp - 0x7c]
push 0xffffffffffffffff
push 0
push ebx
call fcn.10002736
push 0
push 1
lea ecx, [ebp - 0x48]
call fcn.1000246b
cmp dword [ebp - 0x6c], 0
je 0x100084cb
push dword [ebp - 0x6c]
call fcn.10018240
pop ecx
test esi, esi
je 0x100084d6
push esi
call fcn.10018240
pop ecx
cmp dword [ebp - 0x74], 0
je 0x100084e5
push dword [ebp - 0x74]
call fcn.10018240
pop ecx
mov bl, byte [ebp - 0x65]
jmp 0x100084ec
xor bl, bl
push 0
push 1
lea ecx, [ebp - 0x64]
call fcn.1000246b
push dword [ebp - 0x70]
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 0
push 1
lea ecx, [ebp - 0x2c]
call fcn.1000246b
mov al, bl
call fcn.10015d07
ret 8