Function at 0x10003047
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20c
push ebx
xor ebx, ebx
cmp dword [0x10008abc], ebx
jne 0x10003062
xor eax, eax
jmp 0x100032bf
mov eax, dword [ebp + 8]
push esi
sub eax, 0x259
push edi
mov dword [ebp - 4], ebx
je 0x100032b5
dec eax
je 0x100032ae
dec eax
je 0x100032a7
dec eax
je 0x1000323f
dec eax
je 0x10003174
dec eax
jne 0x100032ba
mov eax, dword [ebp + 0xc]
push 0x40
pop ecx
lea edi, [ebp - 0x107]
mov edx, dword [eax]
xor eax, eax
mov byte [ebp - 0x108], bl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea ecx, [ebp + 0xc]
stosb byte es:[edi], al
mov eax, dword [edx]
push ecx
push edx
call dword [eax + 0x78]
push ebx
mov esi, 0x104
push ebx
lea eax, [ebp - 0x108]
push esi
push eax
push dword [ebp + 0xc]
call dword [sym.imp.MSVCRT.dll_wcslen]
pop ecx
push eax
push dword [ebp + 0xc]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
push dword [ebp + 0xc]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
push 0x40
xor eax, eax
pop ecx
lea edi, [ebp - 0x20b]
mov byte [ebp - 0x20c], bl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0x108]
push eax
push 1
call fcn.10002eaf
lea eax, [ebp - 0x20c]
push esi
push eax
lea eax, [ebp - 0x108]
push eax
call fcn.10001f14
add esp, 0x14
test eax, eax
je 0x100032ba
lea eax, [ebp - 0x108]
mov esi, 0x10008c88
push eax
mov ecx, esi
call fcn.10004b39
lea eax, [ebp - 0x20c]
mov ecx, esi
push eax
call fcn.10004b39
push str._URLCUSTOM_EXCLUDE_
push str.eheulec.dat
call fcn.100047f6
pop ecx
pop ecx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [0x10008abc]
mov dword [ecx + 0x14], eax
jmp 0x100032ba
mov eax, dword [ebp + 0xc]
push 0x40
pop ecx
lea edi, [ebp - 0x20b]
mov esi, dword [eax]
xor eax, eax
mov byte [ebp - 0x20c], bl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea ecx, [ebp + 0xc]
stosb byte es:[edi], al
mov eax, dword [esi]
push ecx
push esi
call dword [eax + 0x78]
push ebx
push ebx
lea eax, [ebp - 0x20c]
push 0x103
push eax
push dword [ebp + 0xc]
call dword [sym.imp.MSVCRT.dll_wcslen]
pop ecx
push eax
push dword [ebp + 0xc]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
push dword [ebp + 0xc]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
push 0x40
xor eax, eax
pop ecx
lea edi, [ebp - 0x107]
mov byte [ebp - 0x108], bl
push 0x104
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0x108]
mov dword [ebp + 8], ebx
push eax
lea eax, [ebp - 0x20c]
push eax
call fcn.10001f14
add esp, 0xc
test eax, eax
je 0x100032ba
lea eax, [ebp - 0x108]
mov ecx, 0x10008c88
push eax
call fcn.10004ab0
push str._URLCUSTOM_EXCLUDE_
push str.eheulec.dat
call fcn.100047f6
pop ecx
pop ecx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [0x10008abc]
mov dword [ecx + 0x14], eax
mov eax, dword [esi]
lea ecx, [ebp + 8]
push ecx
push esi
call dword [eax + 0x34]
jmp 0x100032ba
call fcn.1000245b
push 0x40
xor eax, eax
pop ecx
lea edi, [ebp - 0x107]
mov byte [ebp - 0x108], bl
mov esi, dword [ebp + 0xc]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
push ebx
push ebx
lea eax, [ebp - 0x108]
push 0x104
push eax
push dword [esi]
call dword [sym.imp.MSVCRT.dll_wcslen]
pop ecx
push eax
push dword [esi]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
lea eax, [ebp - 0x108]
push eax
push ebx
call fcn.10002eaf
pop ecx
cmp eax, ebx
pop ecx
mov dword [ebp - 4], eax
jne 0x100032ba
lea eax, [ebp - 0x108]
push eax
call fcn.10001e90
pop ecx
mov dword [ebp - 4], eax
jmp 0x100032ba
call fcn.10002e1a
jmp 0x100032ba
call fcn.10002dc3
jmp 0x100032ba
call fcn.10003729
mov eax, dword [ebp - 4]
pop edi
pop esi
pop ebx
leave
ret