Function at 0x100003db0
Capabilities:
Check for time delay via gettickcount

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r12
push r13
push r15
sub rsp, 0x70
mov r13d, r8d
mov rdi, rcx
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov edx, dword [rdi + 0x10]
lea r8, [0x100000000]
mov r10d, eax
mov ebx, dword [r8 + rdx*4 + 0x39900]
mov ecx, dword [r8 + rdx*4 + 0x29c98]
sub r10d, dword [rdi + 0x14]
mov r11d, eax
cmp ebx, ecx
jae 0x100003e02
test ebx, ebx
jne 0x100004a9d
mov eax, dword [rdi + 0x10]
cmp r10d, dword [r8 + rax*4 + 0x29c98]
jae 0x1000082f6
mov eax, dword [rdi + 0x10]
mov ecx, dword [rdi + 0x10]
mov eax, dword [r8 + rax*4 + 0x29c98]
cmp dword [r8 + rcx*4 + 0x39900], eax
jae 0x1000082f6
lea r11, [rsp + 0x70]
mov byte [rdi + 0x1c], 0
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r13
pop r12
pop rdi
pop rsi
ret
xor edx, edx
mov eax, ecx
sub eax, ebx
mov ebx, ecx
div r13d
sub ebx, eax
jmp 0x100003e02
xor r12d, r12d
mov dword [rdi + 0x14], r11d
cmp qword [rdi + 0x30], r12
je 0x10000843f
mov rax, qword [rdi + 0x30]
test rax, rax
je 0x10000831b
mov qword [rsp + 0x30], rax
mov r12d, 1
test ebx, ebx
je 0x100003e2f
movabs r15, 0x8000000000400001
and qword [rsp + 0x40], 0
xor edx, edx
lea rcx, [rsp + 0x48]
lea r8d, [rdx + 0x28]
call sub.msvcrt.dll_memset
jmp 0x100008345
lea rcx, [rsp + 0x40]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov dword [rsp + 0x20], 1
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
jne 0x10001ba2e
cmp dword [0x10003994c], eax
je 0x10000838b
mov al, byte [0x100039950]
cmp al, 4
jb 0x10001ba4a
test qword [0x100039938], r15
jne 0x10001ba57
lea rdx, [rsp + 0x30]
mov r9d, ebx
xor r8d, r8d
mov ecx, r12d
mov dword [rsp + 0x20], 0x4ff
call qword [sym.imp.USER32.dll_MsgWaitForMultipleObjects]
mov esi, eax
call qword [sym.imp.KERNEL32.dll_GetTickCount]
cmp dword [0x10003994c], 0
mov ebp, eax
je 0x1000083d6
mov cl, byte [0x100039950]
cmp cl, 4
jb 0x10001ba89
test qword [0x100039938], r15
jne 0x10001ba96
mov eax, dword [rdi + 0x10]
mov ecx, dword [rdi + 0x10]
lea r8, [0x100000000]
mov eax, dword [r8 + rax*4 + 0x29c98]
cmp dword [r8 + rcx*4 + 0x39900], eax
mov eax, dword [rdi + 0x10]
jae 0x10001bac8
mov edx, dword [r8 + rax*4 + 0x39900]
sub ebp, dword [rdi + 0x14]
test edx, edx
je 0x10001bad2
mov ecx, dword [r8 + rax*4 + 0x29c98]
mov eax, ecx
sub eax, edx
xor edx, edx
div r13d
sub ecx, eax
jmp 0x100008424
mov dword [rsp + 0xa0], ecx
mov eax, dword [rsp + 0xa0]
cmp ebp, eax
jae 0x100003e2f
jmp 0x10001bad9
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov rcx, qword [rdi + 0x30]
mov rsi, rax
cmp rax, rcx
je 0x100008464
test rcx, rcx
jne 0x10001ba22
mov qword [rdi + 0x30], rsi
jmp 0x100008307
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
jmp 0x100008464
cmp dword [rsp + 0x48], 0x12
je 0x100003e2f
lea rcx, [rsp + 0x40]
call qword [sym.imp.USER32.dll_DispatchMessageW]
nop
jmp 0x100008345
test al, al
je 0x10000837e
jmp 0x10000838b
mov rcx, qword [0x100039940]
mov rax, rcx
and rax, r15
cmp rax, rcx
jne 0x10000838b
mov rcx, qword [0x100039138]
lea rdx, [0x10002eb08]
mov r8d, ebx
call fcn.10001f3fc
nop
jmp 0x10000838b
test cl, cl
je 0x1000083c9
jmp 0x1000083d6
mov rcx, qword [0x100039940]
mov rax, rcx
and rax, r15
cmp rax, rcx
jne 0x1000083d6
mov rcx, qword [0x100039138]
lea rdx, [0x10002eb18]
mov r8d, esi
call fcn.10001f3fc
nop
jmp 0x1000083d6
mov ebx, dword [r8 + rax*4 + 0x39900]
jmp 0x10001bae2
xor ecx, ecx
jmp 0x100008424
mov ebx, dword [rsp + 0xa0]
sub ebx, ebp
cmp esi, 0x102
je 0x10001bb03
cmp r12d, esi
jbe 0x10001bafd
cmp qword [rsp + rsi*8 + 0x30], 0xffffffffffffffff
je 0x100003e2f
jmp 0x10001bb03
jne 0x100003e2f
test ebx, ebx
je 0x100003e2f
jmp 0x10000832d