Function at 0x1003d9a0
Capabilities:
Check for time delay via gettickcount
Check for unmoving mouse cursor
Check http status code
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0xc8
mov eax, dword [0x1012f580]
push esi
push edi
mov dword [esp + 0x30], eax
cmp byte [eax], 0
jne 0x1003dbba
push 0x100e8a8e
jmp loc.102a72e2
cmp byte [eax + 1], 0
jne 0x1003e016
cmp byte [0x101344b2], 0
mov edi, dword [ebp + 8]
je 0x1003dce4
cmp byte [eax + 2], 0
jne 0x1003dce4
movaps xmm0, xmmword [0x100ed690]
lea ecx, [esp + 0x2c]
mov byte [eax + 2], 1
mov eax, dword [edi]
movups xmmword [esp + 0x78], xmm0
mov dword [esp + 0x1c], 0x65726944
movaps xmm0, xmmword [0x100ed420]
mov edx, dword [eax]
mov dword [esp + 0x20], 0x2e587463
mov dword [esp + 0x24], 0x676f6c
mov dword [esp + 0x88], 0x2e64656d
mov byte [esp + 0x8c], 0
movups xmmword [esp + 0x40], xmm0
mov dword [esp + 0x50], 0x20642520
mov dword [esp + 0x54], 0x38302528
mov dword [esp + 0x58], 0x2e2958
mov dword [esp + 0x2c], 0
mov dword [esp + 0x10], 0
call fcn.100052f0
push eax
push 0x100ea3a4
push edi
call edx
test eax, eax
js 0x1003dccf
mov esi, dword [esp + 0x2c]
lea ecx, [esp + 0x10]
mov eax, dword [esi]
mov edx, dword [eax + 0xc]
call fcn.100052f0
push eax
push 0x100ea394
push esi
call edx
test eax, eax
js 0x1003dcae
lea eax, [esp + 0x78]
push eax
lea eax, [esp + 0x20]
push eax
call fcn.10035c70
mov eax, dword [esp + 0x18]
add esp, 8
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [esp + 0x2c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
jmp 0x1003dce4
push eax
push 1
lea eax, [esp + 0x48]
push eax
lea eax, [esp + 0x28]
push eax
call fcn.10035c70
mov eax, dword [esp + 0x3c]
add esp, 0x10
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x1003dce4
push eax
push 2
lea eax, [esp + 0x48]
push eax
lea eax, [esp + 0x28]
push eax
call fcn.10035c70
add esp, 0x10
mov eax, dword [0x1012f57c]
mov eax, dword [eax + 0x488]
call eax
mov ecx, dword [0x1012f58c]
movd xmm1, eax
cvtdq2pd xmm1, xmm1
shr eax, 0x1f
addsd xmm1, qword [eax*8 + 0x100ed2a0]
movaps xmm0, xmm1
movsd qword [0x10148bf8], xmm1
subsd xmm0, qword [0x10148bf0]
movsd qword [0x10148bf0], xmm1
mulsd xmm0, qword [0x100ece18]
cvtpd2ps xmm0, xmm0
movss dword [0x101402a0], xmm0
call fcn.1004ce30
mov ecx, dword [0x1012f574]
call fcn.10001220
mov ecx, dword [0x10148b84]
call fcn.1006eed0
lea eax, [esp + 0xc0]
push eax
mov eax, dword [esp + 0x34]
push dword [eax + 4]
call dword [sym.imp.USER32.dll_GetWindowRect]
mov esi, dword [sym.imp.USER32.dll_GetCursorPos]
push 0x10148c00
call esi
mov eax, dword [esp + 0x30]
push 0x10148c00
push dword [eax + 4]
call dword [sym.imp.USER32.dll_ScreenToClient]
lea eax, [esp + 0x70]
push eax
call esi
push dword [esp + 0x74]
lea eax, [esp + 0xc4]
push dword [esp + 0x74]
push eax
call dword [sym.imp.USER32.dll_PtInRect]
mov eax, dword [0x1012f580]
mov ecx, dword [edi]
add eax, 0x4c
push eax
push edi
call dword [ecx + 0xc0]
mov eax, dword [0x1012f580]
mov ecx, dword [edi]
add eax, 0x64
push eax
push 2
push edi
call dword [ecx + 0xb4]
mov eax, dword [0x1012f580]
mov ecx, dword [edi]
add eax, 0xe4
push eax
push 3
push edi
call dword [ecx + 0xb4]
call fcn.1003e020
cmp dword [0x10148b80], 0
je 0x1003ddf5
call fcn.10003e40
cmp dword [0x101344cc], 0
je 0x1003de03
call fcn.10048830
mov ecx, dword [0x101344bc]
call fcn.10025ad0
mov esi, dword [esp + 0x30]
mov ecx, dword [esi + 0x124]
call fcn.10046880
mov ecx, dword [esi + 0x128]
call fcn.10043fb0
mov ecx, dword [esi + 0x12c]
call fcn.1003fb60
mov eax, dword [edi]
lea ecx, [esp + 0x34]
push ecx
push 0x1b
push edi
mov dword [esp + 0x40], 0
mov dword [esp + 0x48], 0
mov dword [esp + 0x44], 0
call dword [eax + 0xe8]
mov eax, dword [edi]
lea ecx, [esp + 0x3c]
push ecx
push 0x13
push edi
call dword [eax + 0xe8]
mov eax, dword [edi]
lea ecx, [esp + 0x38]
push ecx
push 0x14
push edi
call dword [eax + 0xe8]
mov eax, dword [edi]
push edi
call dword [eax + 0xa4]
mov eax, dword [edi]
push 1
push 0x1b
push edi
call dword [eax + 0xe4]
mov eax, dword [edi]
push 5
push 0x13
push edi
call dword [eax + 0xe4]
mov eax, dword [edi]
push 6
push 0x14
push edi
call dword [eax + 0xe4]
cmp dword [0x1014839c], 0
je 0x1003deb9
call fcn.10052510
mov eax, dword [0x10148c24]
push 0x10
push eax
mov ecx, dword [eax]
call dword [ecx + 0x20]
mov ecx, dword [0x1014839c]
test ecx, ecx
je 0x1003dee7
cmp byte [ecx + 0x230a], 0
jne 0x1003dee7
cmp byte [0x1013447f], 0
je 0x1003dee7
call fcn.100527e0
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
imul ecx, dword [0x10148c0c], 0x3e8
sub eax, dword [0x10148c08]
cmp eax, ecx
jae 0x1003dfa6
call esi
sub eax, dword [0x10148c08]
cmp eax, 0x12c
sbb esi, esi
and esi, 0xff0000ff
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [0x10148c08]
mov ecx, 0xff00ff00
cmp eax, 0xc8
cmovb esi, ecx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [0x10148c08]
mov ecx, 0xffff0000
push 0
push ecx
cmp eax, 0x64
mov dword [esp], 0x3f800000
mov eax, dword [0x1012f580]
cmovb esi, ecx
mov dword [esp + 0x24], 0
push esi
push 1
mov dword [esp + 0x30], 0
lea ecx, [esp + 0x2c]
mov eax, dword [eax + 0x54]
push ecx
mov dword [esp + 0x38], eax
mov eax, dword [edi]
push 1
push edi
mov dword [esp + 0x44], 0x14
call dword [eax + 0xac]
mov eax, dword [0x1012f580]
sub esp, 0xc
push dword [eax + 0x54]
sub esp, 0x10
call fcn.1003e0d0
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
sub eax, dword [0x10148c10]
cmp eax, 0x3e8
jbe 0x1003dfca
call esi
mov dword [0x10148c10], eax
mov eax, dword [0x10148c18]
mov dword [0x10148c14], eax
xor eax, eax
jmp 0x1003dfd0
mov eax, dword [0x10148c18]
inc eax
mov dword [0x10148c18], eax
mov eax, dword [0x10148c24]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x2c]
push dword [esp + 0x38]
mov eax, dword [edi]
push 0x14
push edi
call dword [eax + 0xe4]
push dword [esp + 0x3c]
mov eax, dword [edi]
push 0x13
push edi
call dword [eax + 0xe4]
push dword [esp + 0x34]
mov eax, dword [edi]
push 0x1b
push edi
call dword [eax + 0xe4]
mov eax, dword [edi]
push edi
call dword [eax + 0xa8]
pop edi
pop esi
mov esp, ebp
pop ebp
ret 8