Function at 0x100039c0
Capabilities:
Acquire debug privileges
Check for time delay via gettickcount
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x108
mov eax, dword [0x1013ba6c]
xor eax, ebp
mov dword [ebp - 4], eax
jmp 0x100039e3
push 0x10013734
push 1
mov ecx, 0x101313f0
call fcn.10004490
call fcn.1000b050
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
push eax
call fcn.10001000
add esp, 4
push str.Protect.Info
mov ecx, 0x10136790
call fcn.1000a310
test al, al
jne 0x10003a3b
call fcn.1000d230
push str.Could_not_load_Main.Info_
call fcn.1000d7b0
add esp, 4
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1001092b
mov esp, ebp
pop ebp
ret
push str.SeDebugPrivilege
call fcn.1000d6f0
add esp, 4
test al, al
jne 0x10003a6c
call fcn.1000d230
push str.Set_Admin_Privilege
call fcn.1000d7b0
add esp, 4
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1001092b
mov esp, ebp
pop ebp
ret
call fcn.1000b640
test al, al
jne 0x10003a95
push str.Api_Init
call fcn.1000d7b0
add esp, 4
call fcn.1000d230
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1001092b
mov esp, ebp
pop ebp
ret
call fcn.1000b290
test al, al
jne 0x10003abe
push str.Memory_Protection
call fcn.1000d7b0
add esp, 4
call fcn.1000d230
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1001092b
mov esp, ebp
pop ebp
ret
call fcn.1000b3b0
test al, al
jne 0x10003ae7
push str.Handle_Protection
call fcn.1000d7b0
add esp, 4
call fcn.1000d230
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1001092b
mov esp, ebp
pop ebp
ret
push 0x10002fb0
mov ecx, 0x10031108
call fcn.100014b0
mov ecx, 0x10131660
test al, al
jne 0x10003b2b
push 0x1388
push 4
call fcn.10004b40
push eax
push 1
push 2
push 0x1013b8a0
call fcn.1000d4d0
add esp, 0x14
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1001092b
mov esp, ebp
pop ebp
ret
push 0x101367b6
push 5
call fcn.10004b40
push eax
lea eax, [ebp - 0x104]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
push 0
lea ecx, [ebp - 0x104]
push ecx
push 1
push 0
push 0x1013b650
call fcn.1000d4d0
movzx edx, word [0x101367b4]
add esp, 0x20
push edx
push 0x10136794
mov ecx, 0x10031108
call fcn.10001a70
test al, al
jne 0x10003bab
push 0x1388
push 6
mov ecx, 0x10131660
call fcn.10004b40
push eax
push 1
push 2
push 0x1013b8a0
call fcn.1000d4d0
add esp, 0x14
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1001092b
mov esp, ebp
pop ebp
ret
push ebx
push esi
push edi
call fcn.10002b00
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
push 1
push 0x1f4
mov edi, eax
call fcn.1000d280
add esp, 8
test al, al
jne 0x10003d22
call esi
sub eax, edi
cmp eax, 0xea60
ja 0x10003d5f
mov ecx, 0x10031108
call fcn.100015a0
test al, al
jne 0x10003c29
push 0x10002fb0
mov ecx, 0x10031108
call fcn.100014b0
test al, al
je 0x10003c29
movzx eax, word [0x101367b4]
push eax
push 0x10136794
mov ecx, 0x10031108
call fcn.10001a70
test al, al
je 0x10003c29
call fcn.10002b00
jmp 0x10003d0b
cmp dword [0x1013bac4], 0
je 0x10003d0b
cmp dword [0x1013bac8], 0
je 0x10003d0b
cmp dword [0x1013bacc], 0
je 0x10003d0b
cmp dword [0x1013bad0], 0
je 0x10003d0b
cmp dword [0x1013bad4], 0
je 0x10003d0b
mov ecx, dword [0x10131378]
sub ecx, dword [0x10131374]
mov eax, 0x7d8c42b3
imul ecx
mov ecx, dword [0x10131368]
sub ecx, dword [0x10131364]
sar edx, 7
mov ebx, edx
shr ebx, 0x1f
add ebx, edx
mov eax, 0x3e0f83e1
imul ecx
mov ecx, dword [0x10131388]
sub ecx, dword [0x10131384]
sar edx, 6
add ebx, edx
mov eax, edx
shr eax, 0x1f
add eax, ebx
mov dword [ebp - 0x108], eax
mov eax, 0x7e07e07f
imul ecx
mov eax, dword [ebp - 0x108]
mov ecx, dword [0x10131358]
sub ecx, dword [0x10131354]
sar edx, 5
add eax, edx
mov ebx, edx
shr ebx, 0x1f
add ebx, eax
mov eax, 0x38e38e39
imul ecx
mov eax, dword [0x1013bae4]
add eax, dword [0x1013bae0]
sar edx, 4
add eax, dword [0x1013badc]
mov ecx, edx
add eax, dword [0x1013bad8]
shr ecx, 0x1f
add ebx, edx
add ecx, ebx
cmp ecx, eax
je 0x10003d22
push 1
push 0x1f4
call fcn.1000d280
add esp, 8
test al, al
je 0x10003bd4
call fcn.1000bf10
test al, al
jne 0x10003d93
push 0x1388
push 0x14
mov ecx, 0x10131660
call fcn.10004b40
push eax
push 1
push 2
push 0x1013b8a0
call fcn.1000d4d0
add esp, 0x14
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1001092b
mov esp, ebp
pop ebp
ret
push 0x1388
push 7
mov ecx, 0x10131660
call fcn.10004b40
push eax
push 1
push 2
push 0x1013b8a0
call fcn.1000d4d0
add esp, 0x14
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1001092b
mov esp, ebp
pop ebp
ret
call fcn.100033c0
mov ecx, 0x10136790
call fcn.1000a480
mov ecx, 0x10136790
call fcn.1000a590
mov esi, dword [sym.imp.KERNEL32.dll_CreateThread]
push 0x1013ba00
push 0
push 0
push 0x10003730
push 0
push 0
call esi
push 0x1013ba04
push 0
push 0
push 0x10003630
push 0
push 0
mov dword [0x1013bb3c], eax
call esi
push 0x1013ba08
push 0
push 0
push 0x10003560
push 0
push 0
mov dword [0x1013bb40], eax
call esi
mov ecx, dword [0x1013bb3c]
push 2
push ecx
mov dword [0x1013bb44], eax
call dword [sym.imp.KERNEL32.dll_SetThreadPriority]
push 0x7d0
push 1
push 0x1013bb3c
push 3
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov edx, dword [0x1013bb48]
push edx
mov ecx, 0x10131628
call fcn.10004990
mov ecx, 0x1013b9e0
call fcn.1000d1d0
mov ecx, 0x101311c8
call fcn.10001050
mov ecx, 0x1013b650
call fcn.1000cdd0
jmp 0x10003e5f
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.1001092b
mov esp, ebp
pop ebp
ret