Function at 0x10003880
Capabilities:
Acquire debug privileges
Check for time delay via gettickcount
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x108
mov eax, dword [0x100203e0]
xor eax, ebp
mov dword [ebp - 4], eax
jmp 0x100038a3
call fcn.10006dc0
push str.Protect.sse
mov ecx, 0x1001b1a0
call fcn.10006a20
test al, al
jne 0x100038ce
call fcn.10009720
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1000ab64
mov esp, ebp
pop ebp
ret
call fcn.100072a0
test al, al
je 0x100038bb
call fcn.10008190
test al, al
je 0x100038bb
push str.SeDebugPrivilege
call fcn.10009bb0
add esp, 4
test al, al
je 0x100038bb
call fcn.100074d0
test al, al
je 0x100038bb
mov ecx, 0x100204a8
call fcn.10006320
test al, al
je 0x100038bb
call fcn.10007000
test al, al
je 0x100038bb
call fcn.10007120
test al, al
je 0x100038bb
push 0x10002e80
mov ecx, 0x10012020
call fcn.10001380
mov ecx, 0x10016340
test al, al
jne 0x1000395e
push 0x1388
push 4
call fcn.100045d0
push eax
push 1
push 2
push 0x100201f8
call fcn.10009a00
add esp, 0x14
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1000ab64
mov esp, ebp
pop ebp
ret
push 0x1001b1c6
push 5
call fcn.100045d0
push eax
lea eax, [ebp - 0x104]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
push 0
lea ecx, [ebp - 0x104]
push ecx
push 1
push 0
push 0x1001ffa8
call fcn.10009a00
movzx edx, word [0x1001b1c4]
add esp, 0x20
push edx
push 0x1001b1a4
mov ecx, 0x10012020
call fcn.10001930
test al, al
jne 0x100039de
push 0x1388
push 6
mov ecx, 0x10016340
call fcn.100045d0
push eax
push 1
push 2
push 0x100201f8
call fcn.10009a00
add esp, 0x14
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1000ab64
mov esp, ebp
pop ebp
ret
push ebx
push esi
push edi
call fcn.100029c0
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
push 1
push 0x1f4
mov edi, eax
call fcn.100097b0
add esp, 8
test al, al
jne 0x10003b56
call esi
sub eax, edi
cmp eax, 0xea60
ja 0x10003b93
mov ecx, 0x10012020
call fcn.10001470
test al, al
jne 0x10003a5c
push 0x10002e80
mov ecx, 0x10012020
call fcn.10001380
test al, al
je 0x10003a5c
movzx eax, word [0x1001b1c4]
push eax
push 0x1001b1a4
mov ecx, 0x10012020
call fcn.10001930
test al, al
je 0x10003a5c
call fcn.100029c0
jmp 0x10003b3f
cmp dword [0x10020424], 0
je 0x10003b3f
cmp dword [0x10020428], 0
je 0x10003b3f
cmp dword [0x1002042c], 0
je 0x10003b3f
cmp dword [0x10020430], 0
je 0x10003b3f
cmp dword [0x10020434], 0
je 0x10003b3f
mov ecx, dword [0x10016290]
sub ecx, dword [0x1001628c]
mov eax, 0x7d8c42b3
imul ecx
mov ecx, dword [0x10016280]
sub ecx, dword [0x1001627c]
sar edx, 7
mov ebx, edx
shr ebx, 0x1f
add ebx, edx
mov eax, 0x3e0f83e1
imul ecx
mov ecx, dword [0x100162a0]
sub ecx, dword [0x1001629c]
sar edx, 6
add ebx, edx
mov eax, edx
shr eax, 0x1f
add eax, ebx
mov dword [ebp - 0x108], eax
mov eax, 0x7e07e07f
imul ecx
mov eax, dword [ebp - 0x108]
mov ecx, dword [0x10016270]
sub ecx, dword [0x1001626c]
sar edx, 5
mov ebx, edx
add eax, edx
shr ebx, 0x1f
add ebx, eax
mov eax, 0x38e38e39
imul ecx
sar edx, 4
add ebx, edx
mov ecx, edx
mov edx, dword [0x10020444]
add edx, dword [0x10020440]
shr ecx, 0x1f
add edx, dword [0x1002043c]
add ecx, ebx
add edx, dword [0x10020438]
cmp ecx, edx
je 0x10003b56
push 1
push 0x1f4
call fcn.100097b0
add esp, 8
test al, al
je 0x10003a07
call fcn.10008190
test al, al
jne 0x10003bc7
push 0x1388
push 0x14
mov ecx, 0x10016340
call fcn.100045d0
push eax
push 1
push 2
push 0x100201f8
call fcn.10009a00
add esp, 0x14
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1000ab64
mov esp, ebp
pop ebp
ret
push 0x1388
push 7
mov ecx, 0x10016340
call fcn.100045d0
push eax
push 1
push 2
push 0x100201f8
call fcn.10009a00
add esp, 0x14
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1000ab64
mov esp, ebp
pop ebp
ret
call fcn.10003260
mov ecx, 0x1001b1a0
call fcn.10006bd0
mov ecx, 0x1001b1a0
call fcn.10006ce0
mov esi, dword [sym.imp.KERNEL32.dll_CreateThread]
push 0x10020358
push 0
push 0
push 0x100035d0
push 0
push 0
call esi
push 0x1002035c
push 0
push 0
push 0x100034d0
push 0
push 0
mov dword [0x10020494], eax
call esi
push 0x10020360
push 0
push 0
push 0x10003400
push 0
push 0
mov dword [0x10020498], eax
call esi
mov dword [0x1002049c], eax
mov eax, 0x10020494
cmp dword [eax], 0
je 0x10003ca9
add eax, 4
cmp eax, 0x100204a0
jl 0x10003c36
push 0x7d0
push 1
push 0x10020494
push 3
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov ecx, dword [0x100204a0]
push ecx
mov ecx, 0x1001630c
call fcn.10004420
mov ecx, 0x10020338
call fcn.10009580
mov ecx, 0x100160e0
call fcn.10001000
mov ecx, 0x1001ffa8
call fcn.10009180
jmp 0x10003c98
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1000ab64
mov esp, ebp
pop ebp
ret
push 0x1388
push 0x19
mov ecx, 0x10016340
call fcn.100045d0
push eax
push 1
push 2
push 0x100201f8
call fcn.10009a00
mov ecx, dword [ebp - 4]
add esp, 0x14
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.1000ab64
mov esp, ebp
pop ebp
ret