Function at 0x1003f7a0
Capabilities:
Check for time delay via queryperformancecounter
Execute anti-debugging instructions

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x40
push ebx
mov ebx, ecx
mov eax, dword [ebx + 0x11c]
test eax, eax
push esi
push edi
jne 0x1003f7c1
mov eax, dword [ebx + 0x120]
test eax, eax
je 0x1003f7d8
mov eax, dword [ebx + 0x23c]
mov ecx, dword [ebx + 0x254]
push 1
push eax
push ecx
mov ecx, ebx
call fcn.10011f60
mov ecx, dword [ebx + 0xf74]
push 1
call fcn.10012390
imul eax, eax, 0x3f
mov edi, dword [ebx + 0x9b4]
mov ecx, dword [ebx + 0x9b8]
mov dword [ebx + 0xe4], eax
mov eax, dword [ebx + 0x19c]
add eax, edi
mov dword [ebp - 0x28], eax
mov eax, dword [ebx + 0x1a0]
add ecx, eax
mov dword [ebp - 0x2c], ecx
mov ecx, dword [ebx + 0x9bc]
add ecx, eax
cmp dword [ebx + 8], 6
mov dword [ebp - 0x30], ecx
jne 0x1003f831
mov edx, dword [ebx + 0x88]
push edx
mov ecx, ebx
call fcn.1002cee0
jmp 0x1003f869
mov ecx, dword [ebx + 0x88]
mov eax, ecx
and eax, 0x80000001
mov dword [ebx + 0x1b0], ecx
jns 0x1003f84b
dec eax
or eax, 0xfffffffe
inc eax
neg eax
sbb eax, eax
inc eax
mov edx, ecx
sub edx, eax
mov dword [ebx + 0x1e4], eax
lea eax, [ecx + ecx]
mov dword [ebx + 0x1ec], edx
mov dword [ebx + 0x1e8], eax
mov ecx, dword [ebx + 0x1b0]
mov edx, dword [ebx + 0xf54]
push 1
push ecx
mov ecx, dword [ebx + 0x638]
push edx
call fcn.10021840
inc dword [0x1009e324]
mov ecx, dword [ebx + 0x1e8]
sar ecx, 1
cmp ecx, 4
mov dword [ebx + 0x1d8], ecx
mov dword [ebx + 0x1d4], ecx
jle 0x1003f8b1
lea eax, [ecx + 3]
sar eax, 3
add eax, ecx
mov dword [ebx + 0x1d8], eax
mov eax, ecx
sar eax, 1
add eax, 0x10000
cdq
idiv ecx
mov ecx, dword [ebx + 0x1d8]
mov edi, dword [ebx + 0xf5c]
mov dword [ebp - 0x34], eax
mov eax, ecx
sar eax, 1
add eax, 0x10000
cdq
idiv ecx
mov ecx, 0x40
mov dword [ebp - 0x20], eax
xor eax, eax
rep stosd dword es:[edi], eax
mov eax, dword [0x100c21c0]
test eax, eax
je 0x1003f90e
mov ecx, dword [ebx + 0x34]
mov dword [0x100b8eac], ecx
mov edx, dword [ebx + 0x2c]
mov dword [0x100b8eb0], edx
mov eax, dword [ebx + 0x30]
mov dword [0x100b8eb8], 0x1003d1b0
jmp 0x1003f92d
mov ecx, dword [ebx + 0x38]
mov dword [0x100b8eac], ecx
mov edx, dword [ebx + 0x20]
mov dword [0x100b8eb0], edx
mov eax, dword [ebx + 0x24]
mov dword [0x100b8eb8], 0x1003c0b0
mov dword [0x100b8eb4], eax
mov eax, dword [ebx + 0x21c]
test eax, eax
je 0x1003f956
mov ecx, dword [ebx + 0x38]
mov dword [0x100b8eac], ecx
mov edx, dword [ebx + 0x20]
mov dword [0x100b8eb0], edx
mov eax, dword [ebx + 0x24]
mov dword [0x100b8eb4], eax
mov ecx, dword [ebx + 0xbc]
shl ecx, 1
xor esi, esi
test ecx, ecx
jle 0x1003fb98
jmp 0x1003f970
mov edx, dword [ebx + 0x18c]
mov eax, dword [ebp - 0x28]
imul edx, esi
lea ecx, [eax + edx*8]
mov eax, dword [ebx + 0x190]
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 4], ecx
mov ecx, esi
sar ecx, 1
imul eax, ecx
shl eax, 3
mov dword [ebp - 0x1c], ecx
lea ecx, [eax + edx]
mov edx, dword [ebp - 0x30]
add eax, edx
mov dword [ebp - 0x10], eax
mov eax, dword [ebx + 0xb8]
shl eax, 1
xor edi, edi
test eax, eax
mov dword [ebp - 0xc], ecx
jle 0x1003fb87
jmp 0x1003f9c0
mov eax, dword [ebx + 0x1b0]
lea ecx, [ebp - 0x38]
push ecx
mov ecx, dword [ebx + 0x634]
lea edx, [ebp - 0x18]
push edx
push eax
push esi
push edi
call fcn.1003f330
mov ecx, dword [ebx + 0x1d4]
push 0
push ecx
mov ecx, dword [ebx + 0xb8]
lea edx, [ebp - 0x14]
push edx
mov edx, dword [ebx + 0x18c]
lea eax, [ebp - 0x18]
push eax
mov eax, dword [ebp - 4]
shl ecx, 1
push ecx
mov ecx, dword [ebx + 0x630]
push esi
push edi
push edx
push eax
call fcn.10080470
mov ecx, dword [ebp - 0x18]
mov edx, eax
xor eax, eax
test edx, edx
mov dword [ebp - 8], ecx
je 0x1003fa37
mov ecx, dword [ebx + 0xf74]
push ecx
mov ecx, dword [ebx + 0x638]
call fcn.100217e0
mov edx, dword [ebp - 0x14]
mov ecx, dword [edx + eax*4]
mov dword [ebp - 8], ecx
mov edx, dword [ebx + 0xf74]
cmp dword [edx + 0x10], 0
jne 0x1003fbda
mov edx, dword [ebp - 0x34]
push 0
push edx
push ecx
mov ecx, dword [ebp - 4]
push eax
mov eax, dword [ebp - 0x38]
push eax
push ecx
push esi
push edi
mov ecx, ebx
call fcn.1003f4c0
cmp eax, 0xffffff9c
je 0x1003fbda
add dword [ebp - 4], 8
mov edx, edi
and edx, esi
test dl, 1
je 0x1003fb76
cmp edi, 1
jle 0x1003fa98
cmp esi, 1
jle 0x1003faa2
mov eax, dword [ebx + 0x634]
mov ecx, dword [eax + 0xc]
xor eax, eax
mov al, byte [ecx + edi - 1]
and eax, 3
jmp 0x1003faa7
cmp esi, 1
mov eax, 1
jg 0x1003faa7
mov eax, 2
mov edx, dword [ebx + 0x1d8]
push 1
push edx
lea ecx, [ebp - 0x14]
push ecx
mov ecx, dword [ebx + 0xb8]
lea edx, [ebp - 8]
push edx
mov edx, dword [ebp - 0x1c]
push ecx
mov ecx, dword [ebp - 0xc]
mov dword [ebp - 8], eax
mov dword [ebp - 0x24], eax
push edx
mov eax, edi
sar eax, 1
push eax
mov dword [ebp - 0x3c], eax
mov eax, dword [ebx + 0x190]
push eax
push ecx
mov ecx, dword [ebx + 0x630]
call fcn.10080470
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 0xc]
push 1
push edx
push eax
push 0
push 0
push ecx
push esi
push edi
mov ecx, ebx
call fcn.1003f4c0
cmp eax, 0xffffff9c
je 0x1003fbda
mov edx, dword [ebx + 0x1d8]
push 1
push edx
mov edx, dword [ebx + 0xb8]
lea eax, [ebp - 0x14]
push eax
mov eax, dword [ebp - 0x1c]
lea ecx, [ebp - 0x24]
push ecx
mov ecx, dword [ebp - 0x3c]
push edx
mov edx, dword [ebx + 0x190]
push eax
mov eax, dword [ebp - 0x10]
push ecx
mov ecx, dword [ebx + 0x630]
push edx
push eax
call fcn.10080470
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x10]
push 1
push ecx
push edx
push 0
push 0
push eax
push esi
push edi
mov ecx, ebx
call fcn.1003f4c0
cmp eax, 0xffffff9c
je 0x1003fbda
mov edx, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x10]
mov eax, 8
add edx, eax
add ecx, eax
mov dword [ebp - 0xc], edx
mov dword [ebp - 0x10], ecx
mov ecx, dword [ebx + 0xb8]
inc edi
shl ecx, 1
cmp edi, ecx
jl 0x1003f9c0
mov edx, dword [ebx + 0xbc]
inc esi
shl edx, 1
cmp esi, edx
jl 0x1003f970
mov eax, dword [ebx + 0x11c]
test eax, eax
jne 0x1003fbac
mov eax, dword [ebx + 0x120]
test eax, eax
je 0x1003fbf1
mov eax, dword [ebx + 0xbc]
mov ecx, dword [ebx + 0xb8]
mov esi, 1
push esi
push eax
push ecx
mov ecx, ebx
call fcn.1000f180
mov ecx, ebx
call fcn.1000f1c0
mov dword [ebx + 0x1974], 0
jmp 0x1003fbf6
mov eax, dword [0x100c21c0]
test eax, eax
je 0x1003fbe5
emms
pop edi
pop esi
mov eax, 0xffffff9c
pop ebx
mov esp, ebp
pop ebp
ret
mov esi, 1
mov ecx, dword [ebx + 0x1b88]
xor eax, eax
cmp ecx, eax
mov dword [ebx + 0x1bb0], eax
mov dword [ebx + 0x2e20], eax
je 0x1003fc22
mov dword [ebx + 0x1ba0], eax
mov dword [ebx + 0x1ba8], eax
mov dword [ebx + 0x2e20], esi
jmp 0x1003fc28
mov dword [ebx + 0x1ba8], esi
cmp dword [ebx + 0x254], eax
jne 0x1003fc4c
mov ecx, dword [ebx + 0xc0]
mov edi, dword [ebx + 0xf60]
mov edx, ecx
shr ecx, 2
xor eax, eax
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
mov eax, dword [ebx + 0xa4c]
test eax, eax
je 0x1004010b
mov eax, dword [ebx + 0x9e0]
test eax, eax
jne 0x1004010b
mov ecx, ebx
call fcn.10018020
mov eax, dword [ebx + 0x1b88]
test eax, eax
jne 0x1003fd01
mov eax, dword [ebx + 0x1bac]
test eax, eax
mov dword [ebx + 0x2e1c], esi
jne 0x1003ff14
mov eax, dword [ebx + 0x1a0]
mov ecx, dword [ebx + 0x19c]
mov esi, dword [ebx + 0x9c0]
mov edx, dword [ebx + 0x9c8]
mov edi, dword [ebx + 0x9c4]
add esi, ecx
mov ecx, dword [ebx + 0x9bc]
add ecx, eax
add edx, eax
push edx
mov dword [ebp - 0x3c], ecx
mov ecx, dword [ebx + 0x9b8]
mov edx, dword [ebp - 0x3c]
add edi, eax
push edi
add ecx, eax
mov eax, dword [ebx + 0x9b4]
push esi
mov dword [ebp - 0x38], ecx
mov ecx, dword [ebx + 0x19c]
push edx
mov edx, dword [ebp - 0x38]
add eax, ecx
push edx
lea ecx, [ebx + 0x640]
push eax
call dword [ecx + 0x364]
mov esi, 1
mov dword [ebx + 0x2e20], esi
jmp 0x1003ff14
mov eax, dword [ebx + 0x1a6c]
test eax, eax
jne 0x1003fd34
lea eax, [ebp - 0x40]
push eax
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x3c]
neg ecx
adc edx, 0
neg edx
mov dword [ebx + 0x1a60], ecx
mov dword [ebx + 0x1a64], edx
mov dword [ebx + 0x1a6c], esi
mov eax, dword [ebx + 0x1bac]
test eax, eax
mov edi, dword [ebx + 0x9c4]
mov dword [ebx + 0x2e20], esi
je 0x1003fe66
mov esi, dword [ebx + 0x19c]
mov eax, dword [ebx + 0x9b4]
mov ecx, dword [ebx + 0x1a0]
mov edx, dword [ebx + 0x9b8]
add eax, esi
mov dword [ebp - 4], eax
mov eax, dword [ebx + 0x9bc]
add eax, ecx
mov dword [ebp - 8], eax
mov eax, dword [ebx + 0x9c0]
add eax, esi
mov esi, dword [ebx + 0x9c8]
add edx, ecx
add edi, ecx
add esi, ecx
mov ecx, dword [ebx + 0x174]
test ecx, ecx
mov dword [ebp - 0x10], edx
mov dword [ebp - 0x14], edi
mov dword [ebp - 0xc], esi
mov dword [ebp - 0x24], 0
jle 0x1003fec0
jmp 0x1003fdb0
mov edi, dword [ebp - 0x14]
mov edx, dword [ebp - 0x10]
mov ecx, dword [ebx + 0x190]
mov esi, edx
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [ebx + 0x190]
mov edi, dword [ebp - 0x14]
mov esi, dword [ebp - 0x10]
add edi, ecx
add esi, ecx
mov edx, ecx
shr ecx, 2
mov dword [ebp - 0x14], edi
mov edi, dword [ebp - 0xc]
mov dword [ebp - 0x10], esi
mov esi, dword [ebp - 8]
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [ebx + 0x190]
mov edi, dword [ebp - 0xc]
mov esi, dword [ebp - 8]
add edi, ecx
add esi, ecx
mov ecx, dword [ebx + 0x18c]
mov edx, ecx
shr ecx, 2
mov dword [ebp - 0xc], edi
mov dword [ebp - 8], esi
mov esi, dword [ebp - 4]
mov edi, eax
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [ebx + 0x18c]
mov esi, dword [ebp - 4]
add eax, ecx
add esi, ecx
mov edx, ecx
shr ecx, 2
mov dword [ebp - 4], esi
mov edi, eax
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [ebx + 0x18c]
mov edi, dword [ebp - 4]
mov edx, dword [ebx + 0x174]
add edi, ecx
add eax, ecx
mov ecx, dword [ebp - 0x24]
inc ecx
cmp ecx, edx
mov dword [ebp - 4], edi
mov dword [ebp - 0x24], ecx
jl 0x1003fdaa
jmp 0x1003fec0
mov eax, dword [ebx + 0x1a0]
mov ecx, dword [ebx + 0x19c]
mov esi, dword [ebx + 0x9c0]
mov edx, dword [ebx + 0x9c8]
add esi, ecx
mov ecx, dword [ebx + 0x9bc]
add ecx, eax
add edx, eax
push edx
mov dword [ebp - 0x3c], ecx
mov ecx, dword [ebx + 0x9b8]
mov edx, dword [ebp - 0x3c]
add edi, eax
push edi
add ecx, eax
mov eax, dword [ebx + 0x9b4]
push esi
mov dword [ebp - 0x38], ecx
mov ecx, dword [ebx + 0x19c]
push edx
mov edx, dword [ebp - 0x38]
add eax, ecx
push edx
lea ecx, [ebx + 0x640]
push eax
call dword [ecx + 0x364]
mov esi, 1
push 9
mov ecx, ebx
mov dword [ebx + 0x2e1c], esi
call fcn.10034aa0
mov eax, dword [ebx + 0x1a6c]
test eax, eax
je 0x1003ff14
lea eax, [ebp - 0x40]
push eax
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov edx, dword [ebx + 0x1a60]
mov ecx, dword [ebp - 0x40]
mov eax, dword [ebx + 0x1a64]
add edx, ecx
mov dword [ebx + 0x1a60], edx
mov edx, dword [ebp - 0x3c]
adc eax, edx
mov dword [ebx + 0x1a64], eax
mov dword [ebx + 0x1a6c], 0
mov eax, dword [ebx + 0x25c]
test eax, eax
je 0x10040040
mov eax, dword [ebx + 0xc]
test eax, eax
je 0x10040040
push 0
mov ecx, ebx
call fcn.10087d90
mov ecx, ebx
call fcn.1003be20
mov eax, dword [ebx + 0x28c]
mov edi, dword [ebx + 0xc]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebx + 0x1b88]
test eax, eax
mov dword [ebx + 0x28c], edi
mov dword [ebx + 0xc], 0
jne 0x1003ffc5
mov eax, dword [ebx + 0x1bac]
test eax, eax
je 0x1003ffc5
mov eax, dword [ebx + 0x1a0]
mov esi, dword [ebx + 0x9c8]
add esi, eax
push esi
mov esi, dword [ebx + 0x9c4]
add esi, eax
mov eax, dword [ebx + 0x9c0]
mov ecx, edi
imul ecx, ecx, 0x58
mov edx, dword [ecx + ebx + 0x2dc]
push esi
add eax, dword [ebx + 0x19c]
push eax
mov eax, dword [ebx + 0x9bc]
add ecx, ebx
mov ecx, dword [ecx + 0x2d8]
add eax, edx
push eax
mov eax, dword [ebx + 0x9b8]
add eax, edx
add ecx, dword [ebx + 0x9b4]
push eax
push ecx
mov ecx, ebx
call fcn.10089290
jmp 0x10040029
mov eax, dword [ebx + 0x1a0]
mov edx, dword [ebx + 0x28c]
mov esi, dword [ebx + 0x18ac]
imul edx, edx, 0x58
add esi, eax
push esi
mov esi, dword [ebx + 0x18a8]
add esi, eax
mov eax, dword [ebx + 0x18a4]
push esi
add eax, dword [ebx + 0x19c]
push eax
mov eax, dword [ebx + 0x9c8]
lea ecx, [edx + ebx]
mov edx, dword [ecx + 0x2dc]
mov ecx, dword [ecx + 0x2d8]
add eax, edx
push eax
mov eax, dword [ebx + 0x9c4]
add eax, edx
add ecx, dword [ebx + 0x9c0]
push eax
push ecx
mov ecx, ebx
call fcn.10089290
mov ecx, ebx
call fcn.100146b0
mov edx, dword [ebp - 0x3c]
mov esi, 1
mov dword [ebx + 0x28c], edx
mov dword [ebx + 0xc], edi
mov dword [ebx + 0x2e20], esi
mov ecx, 0x1009e2d0
mov dword [ebx + 0x2e1c], esi
call fcn.1000e490
test eax, eax
je 0x100400a9
rdtsc
mov esi, dword [0x1009e2e0]
mov ecx, dword [0x1009e2e4]
sub esi, eax
mov eax, dword [0x1009e304]
sbb ecx, edx
test eax, eax
mov dword [0x1009e2e0], esi
mov dword [0x1009e2e4], ecx
jne 0x10040081
inc dword [0x1009e358]
mov eax, dword [0x1009e308]
test eax, eax
jne 0x100400a3
mov edx, dword [0x1009e2fc]
mov eax, dword [0x1009e378]
inc edx
mov dword [0x1009e2fc], edx
inc dword [eax*4 + 0x1009e364]
inc dword [0x1009e308]
mov eax, dword [ebx + 0x2e20]
mov ecx, dword [ebx + 0x9c8]
mov edx, dword [ebx + 0x9c4]
push eax
mov eax, dword [ebx + 0x9c0]
push ecx
mov ecx, dword [ebx + 0x9bc]
push edx
mov edx, dword [ebx + 0x9b8]
push eax
mov eax, dword [ebx + 0x9b4]
push ecx
push edx
push eax
mov ecx, ebx
call fcn.100336f0
mov ecx, 0x1009e2d0
call fcn.1000e490
test eax, eax
je 0x1004010b
rdtsc
mov ecx, dword [0x1009e2e0]
add ecx, eax
mov eax, dword [0x1009e2e4]
adc eax, edx
mov dword [0x1009e2e0], ecx
mov dword [0x1009e2e4], eax
mov eax, dword [0x100c21c0]
test eax, eax
je 0x10040116
emms
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret