Function at 0x180035190
Capabilities:
Check for time delay via gettickcount

Disassembly:
mov rax, rsp
mov qword [rax + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x120
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
movaps xmmword [rax - 0x68], xmm8
movaps xmmword [rax - 0x78], xmm9
movaps xmmword [rax - 0x88], xmm10
movaps xmmword [rax - 0x98], xmm11
mov rax, qword [0x18008a300]
xor rax, rsp
mov qword [rsp + 0xb0], rax
imul eax, r9d, 0x78
mov r12d, r9d
mov qword [rsp + 0x70], r8
mov r14, rcx
mov qword [rsp + 0x78], rdx
mov r15d, r9d
mov dword [rsp + 0x80], eax
cmp r9d, eax
ja 0x1800354d9
mov edi, dword [rsp + 0x80]
xor ebx, ebx
mov r13, qword [rsp + 0x70]
cmp r15d, 0x2cb
ja 0x18003548e
je 0x180035472
mov eax, r15d
sub eax, 0x18
je 0x180035377
sub eax, 0x1f
je 0x18003534e
sub eax, 0xa1
je 0x180035309
sub eax, 0xe
je 0x18003526f
cmp eax, 0x52
jne 0x180035605
lea r8d, [rax + 0x1f]
mov rdx, r14
lea rcx, [rsp + 0xa0]
call fcn.1800516e0
mov rax, r14
jmp 0x1800354de
mov rax, qword [0x18008a3c8]
xor r9d, r9d
mov qword [rsp + 0x50], rbx
xor r8d, r8d
mov qword [rsp + 0x48], rbx
xor edx, edx
mov qword [rsp + 0x40], rbx
xor ecx, ecx
mov dword [rsp + 0x38], 0x50
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rax
call fcn.180012e40
test al, al
je 0x180035636
mov rax, qword [0x18008a3c8]
lea rdx, [rsp + 0x60]
mov r9d, 0x101
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov byte [rsp + 0x60], 1
xor ecx, ecx
call fcn.180020150
xor r9d, r9d
mov dword [rsp + 0x20], 0x32
mov r8, r14
xor edx, edx
xor ecx, ecx
call fcn.180057dc0
test al, al
je 0x180035620
mov rdx, qword [rsp + 0x78]
mov edi, ebx
mov r8, qword [rsp + 0x70]
jmp 0x180035605
mov eax, dword [rdx]
lea r8, [rsp + 0x88]
mov dword [rsp + 0x90], eax
lea rcx, [rsp + 0x90]
mov eax, dword [r14]
mov edx, 0xb1
mov dword [rsp + 0x88], eax
call fcn.1800314b0
cmp eax, 0xffffffff
je 0x18003563f
mov rdx, qword [rsp + 0x78]
mov r8, qword [rsp + 0x70]
jmp 0x180035605
xor r8d, r8d
xor edx, edx
mov ecx, SHSetFolderPathW
call fcn.1800495f0
mov rax, qword [0x18008a3c0]
mov rdx, qword [rsp + 0x78]
mov r8, qword [rsp + 0x70]
mov r13, qword [rax + 0x48]
jmp 0x180035605
movss xmm5, dword [r14]
movss xmm6, dword [rdx]
movaps xmm0, xmm5
movss xmm4, dword [rdx + 0xc]
movaps xmm2, xmm6
movss xmm11, dword [r14 + 0xc]
movss xmm9, dword [rdx + 8]
movss xmm8, dword [r14 + 4]
movaps xmm1, xmm9
movss xmm7, dword [rdx + 4]
movss xmm10, dword [r14 + 8]
movaps xmm3, xmm7
mulss xmm2, xmm11
mulss xmm0, xmm4
mulss xmm3, xmm11
addss xmm2, xmm0
mulss xmm1, xmm8
movaps xmm0, xmm7
mulss xmm0, xmm10
addss xmm2, xmm1
movaps xmm1, xmm8
mulss xmm1, xmm4
subss xmm2, xmm0
movaps xmm0, xmm9
mulss xmm0, xmm5
subss xmm3, xmm0
movss dword [rsp + 0xa0], xmm2
movaps xmm0, xmm10
movaps xmm2, xmm9
mulss xmm2, xmm11
mulss xmm0, xmm6
addss xmm3, xmm1
mulss xmm11, xmm4
movaps xmm1, xmm8
mulss xmm1, xmm6
addss xmm3, xmm0
mulss xmm6, xmm5
movaps xmm0, xmm7
mulss xmm7, xmm8
mulss xmm0, xmm5
subss xmm11, xmm6
movss dword [rsp + 0xa4], xmm3
addss xmm2, xmm0
movaps xmm0, xmm10
subss xmm11, xmm7
mulss xmm0, xmm4
mulss xmm10, xmm9
subss xmm2, xmm1
subss xmm11, xmm10
addss xmm2, xmm0
movss dword [rsp + 0xac], xmm11
movss dword [rsp + 0xa8], xmm2
jmp 0x180035605
mov edx, 8
mov rcx, r13
call fcn.18006a9d8
mov rdx, qword [rsp + 0x78]
mov r8, qword [rsp + 0x70]
jmp 0x180035605
cmp r15d, 0x55f
je 0x1800355fe
cmp r15d, 0xaf8
je 0x1800355be
cmp r15d, 0xbae
je 0x1800354bf
cmp r15d, 0x1518
je 0x1800354d9
jmp 0x180035605
mov ebp, 0x3e
cmp ebp, 0x3e
je 0x180035527
cmp ebp, 0x1648
jne 0x18003559e
mov dword [rsp + 0x68], edi
mov rax, qword [rsp + 0x68]
mov rcx, qword [rsp + 0xb0]
xor rcx, rsp
call fcn.18006b180
lea r11, [rsp + 0x120]
mov rbx, qword [r11 + 0x58]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov rcx, qword [r14 + 0x28]
call qword [r14 + 0x20]
test al, al
je 0x180035588
mov esi, 0x2a
cmp esi, 0x2a
je 0x180035557
cmp esi, 0x2a0
jne 0x18003557a
mov eax, 0x10624dd3
mul edi
mov edi, edx
shr edi, 6
call qword [r14 + 0x50]
jmp 0x18003557a
call qword [sym.imp.KERNEL32.dll_GetTickCount]
xor r8d, r8d
mov r9, r14
xor ecx, ecx
mov ebx, eax
lea edx, [r8 + 0x3b]
call fcn.180014dd0
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov edi, eax
sub edi, ebx
add esi, 0x276
cmp esi, 0x4ec
jbe 0x180035538
mov r9, qword [0x18008a3c8]
xor edx, edx
xor ecx, ecx
mov r8d, 0x89
call fcn.180057680
add ebp, 0x160a
cmp ebp, 0x2c14
jbe 0x1800354c4
mov rdx, qword [rsp + 0x78]
xor ebx, ebx
mov r8, qword [rsp + 0x70]
jmp 0x180035605
mov r9, qword [0x18008a9d8]
lea rcx, [rsp + 0x98]
mov qword [rsp + 0x20], r8
mov edx, 0x9d
xor r8d, r8d
mov eax, dword [r9 + 0xc]
sub eax, dword [r9 + 4]
mov dword [rsp + 0x98], eax
call fcn.180066850
mov rdx, qword [rsp + 0x78]
mov r8, qword [rsp + 0x70]
mov dword [rsp + 0x68], eax
jmp 0x180035605
mov qword [0x18008a3c0], rbx
lea eax, [r12 + r12*2]
lea r15d, [r15 + rax*4]
cmp r15d, dword [rsp + 0x80]
jbe 0x180035212
jmp 0x1800354d9
mov r9, qword [0x18008a3c8]
xor edx, edx
xor ecx, ecx
mov r8d, 0x89
call fcn.180057680
mov dword [rsp + 0x68], ebx
jmp 0x1800354d9
mov dword [rsp + 0x68], 0xffffffff
jmp 0x1800354d9