Function at 0x10003288c
Capabilities:
Check for time delay via gettickcount
Create process on windows

Disassembly:
push rdi
mov eax, 0x1100
call fcn.1000a31e0
sub rsp, rax
mov qword [rsp + 0x48], 0xfffffffffffffffe
mov qword [rsp + 0x1118], rbx
mov qword [rsp + 0x1120], rbp
mov qword [rsp + 0x1128], rsi
mov rax, qword [0x1000af140]
xor rax, rsp
mov qword [rsp + 0x10f0], rax
xor ebp, ebp
mov ebx, ebp
mov eax, 0x9c5b
cmp edx, eax
jg 0x100032c1f
cmp edx, eax
je 0x100032c03
mov eax, 0x9c4b
cmp edx, eax
jg 0x100032a9d
cmp edx, eax
je 0x100032a8c
sub edx, 0x9c41
je 0x100032a3a
sub edx, 1
je 0x100032a23
sub edx, 1
je 0x100032a0c
sub edx, 1
je 0x100032a02
sub edx, 1
je 0x1000329ed
sub edx, 2
je 0x100032944
cmp edx, 1
jne 0x100032f32
call fcn.1000403e8
jmp 0x100032f32
mov edx, 0x6c
mov rcx, qword [0x1000baf50]
call qword [sym.imp.USER32.dll_LoadIconW]
mov rdi, rax
mov rcx, qword [0x1000bafa8]
cmp dword [rcx + 8], 6
jne 0x100032970
xor edx, edx
lea ecx, [rdx + 3]
call fcn.100041e10
mov edx, 0x387
lea rcx, [rsp + 0x68]
call fcn.100064280
mov rbx, rax
mov edx, 0x65
lea rcx, [rsp + 0x50]
call fcn.100064280
mov r9, rdi
mov r8, qword [rbx + 0x10]
mov rdx, qword [rax + 0x10]
mov rcx, qword [0x1000bafc8]
call qword [sym.imp.SHELL32.dll_ShellAboutW]
mov rcx, qword [rsp + 0x60]
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0x78]
call sub.msvcrt.dll_free
mov rax, qword [0x1000bafa8]
cmp dword [rax + 8], 6
jne 0x1000329e3
mov rax, qword [rax + 0x48]
cmp byte [rax + 0x19], bpl
je 0x1000329e3
xor r8d, r8d
mov dl, 1
lea ecx, [r8 + 3]
call fcn.100041dd4
call fcn.100040244
jmp 0x100032f32
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x10]
call qword [sym.imp.USER32.dll_PostMessageW]
jmp 0x100032f32
call fcn.100030664
jmp 0x100032f32
cmp byte [0x1000bb01d], bpl
jne 0x100032f32
call fcn.100030fc0
jmp 0x100032f32
cmp byte [0x1000bb01d], bpl
jne 0x100032f32
call fcn.10002fc04
jmp 0x100032f32
cmp byte [0x1000bbdc0], bpl
jne 0x100032a58
mov byte [0x1000bbdc0], 1
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x1000bbdc4], eax
jmp 0x100032a7b
call qword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [0x1000bbdc4]
cmp eax, 0x4e2
jb 0x100032f32
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x1000bbdc4], eax
mov rcx, qword [0x1000bafa8]
call fcn.1000360c8
jmp 0x100032f32
mov rcx, qword [0x1000bafa8]
call fcn.1000369d8
jmp 0x100032f32
sub edx, 0x9c4c
je 0x100032bce
sub edx, 6
je 0x100032b76
sub edx, 3
je 0x100032b59
sub edx, 1
je 0x100032b3a
sub edx, 2
je 0x100032b0c
cmp edx, 1
jne 0x100032f32
mov rcx, qword [0x1000bafa8]
call fcn.10003956c
mov ebx, eax
mov rdi, qword [0x1000bafa8]
mov r8, qword [rdi]
mov edx, dword [rdi + 8]
mov rcx, rdi
call qword [r8 + 0x10]
mov r11d, dword [rdi + 8]
mov dword [rdi + 0xc], r11d
mov dword [rdi + 8], ebx
mov r8, qword [rdi]
mov edx, ebx
mov rcx, rdi
call qword [r8 + 8]
jmp 0x100032f32
mov rcx, qword [0x1000bafa8]
mov rdx, qword [rcx + 0x48]
mov eax, dword [rdx + 0x54]
mov dword [rdx + 0xc], eax
mov dword [rdx + 0x54], 1
call fcn.1000360c8
mov rcx, qword [0x1000bafa8]
call fcn.100035eb8
jmp 0x100032f32
mov rcx, qword [0x1000bafa8]
call fcn.100039b38
xor edx, edx
mov rcx, qword [0x1000bafa8]
call fcn.100039d2c
jmp 0x100032f32
mov rcx, qword [0x1000bafa8]
call fcn.10003a034
mov rcx, qword [0x1000bafa8]
call fcn.10003a1d0
jmp 0x100032f32
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, rax
mov r9d, 0x824
lea r8, [rsp + 0xa0]
mov edx, 0x7535
call qword [sym.imp.USER32.dll_LoadStringW]
cmp eax, ebp
jle 0x100032f32
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], rbp
xor r9d, r9d
lea r8, [rsp + 0xa0]
lea rdx, [0x100002950]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
jmp 0x100032f32
mov rcx, qword [0x1000bafa8]
cmp dword [rcx + 8], 2
jne 0x100032f32
mov rax, qword [rcx + 0x80]
mov rdx, qword [rax + 0x58]
cmp dword [rdx + 0x28], ebp
ja 0x100032f32
mov r8b, 1
mov dl, r8b
call fcn.10003cfe0
jmp 0x100032f32
mov rcx, qword [0x1000bafa8]
cmp byte [rcx + 0x138], bpl
sete al
mov byte [rcx + 0x138], al
jmp 0x100032f32
mov eax, 0x9c63
cmp edx, eax
jg 0x100032cd7
cmp edx, eax
je 0x100032e87
sub edx, 0x9c5c
je 0x100032cc4
sub edx, 1
je 0x100032cb1
sub edx, 1
je 0x100032c73
sub edx, 1
je 0x100032d43
sub edx, 1
je 0x100032d41
sub edx, 1
je 0x100032d3f
cmp edx, 1
je 0x100032e89
jmp 0x100032f32
mov rbx, qword [0x1000bafa8]
cmp dword [rbx + 8], 2
jne 0x100032f32
mov byte [rbx + 0x13e], 1
mov dl, 1
mov rcx, rbx
call fcn.100036eac
cmp al, 1
jne 0x100032ca5
mov byte [rbx + 0x139], al
mov dword [rbx + 0xc8], ebp
mov byte [rbx + 0x13e], bpl
jmp 0x100032f32
mov rax, qword [0x1000bafa8]
mov byte [rax + 0x13d], bpl
jmp 0x100032f32
mov rax, qword [0x1000bafa8]
mov byte [rax + 0x13d], 1
jmp 0x100032f32
sub edx, 0x9c64
je 0x100032e85
sub edx, 1
je 0x100032dec
sub edx, 1
je 0x100032d3a
sub edx, 1
je 0x100032d33
sub edx, 1
je 0x100032d2e
cmp edx, 1
jne 0x100032f32
mov rcx, qword [0x1000bafa8]
mov rdx, qword [rcx + 0x48]
mov eax, dword [rdx + 0x54]
mov dword [rdx + 0xc], eax
mov dword [rdx + 0x54], ebp
call fcn.1000360c8
mov rcx, qword [0x1000bafa8]
call fcn.100035eb8
jmp 0x100032f32
mov ebx, 1
inc ebx
jmp 0x100032e85
mov ebx, 1
inc ebx
inc ebx
mov dword [rsp + 0x30], ebp
mov dword [rsp + 0x34], ebp
mov dword [rsp + 0x38], 0x10
mov qword [rsp + 0x40], rbp
mov rax, qword [0x1000bafa8]
lea rdx, [rsp + 0x30]
mov rcx, qword [rax + 0x80]
call fcn.100072a5c
mov r11, qword [0x1000bafa8]
mov rdi, qword [rsp + 0x40]
mov rdx, qword [rdi + rbx*8]
mov rcx, qword [r11 + 0x80]
call fcn.100073014
mov rax, qword [0x1000bafa8]
mov rcx, qword [rax + 0x48]
add rcx, 0x38
mov rdx, qword [rdi + rbx*8]
call fcn.100064394
mov rcx, qword [0x1000bafa8]
call fcn.10003a034
mov r11d, dword [rsp + 0x30]
cmp r11d, ebp
jbe 0x100032dd5
mov rbx, rdi
mov rsi, r11
mov rcx, qword [rbx]
call sub.msvcrt.dll_free
mov qword [rbx], rbp
add rbx, 8
sub rsi, 1
jne 0x100032dc0
cmp rdi, rbp
je 0x100032f32
mov rcx, rdi
call qword [sym.imp.msvcrt.dll_free]
jmp 0x100032f32
mov rbx, qword [0x1000bafa8]
cmp dword [rbx + 8], 2
jne 0x100032f32
mov rcx, qword [0x1000bb030]
cmp qword [rcx + 0x40], rbp
jne 0x100032f32
mov rax, qword [rbx + 0x80]
mov rdx, qword [rax + 0x58]
cmp dword [rdx + 0x28], ebp
ja 0x100032f32
call fcn.100047c38
xor edx, edx
mov rcx, rbx
call fcn.100036ad8
mov rdx, qword [rbx + 0x88]
cmp dword [rdx + 0x130], ebp
jbe 0x100032e4d
mov rcx, rbx
call fcn.100038308
jmp 0x100032f32
mov rax, qword [rbx + 0x50]
cmp byte [rax + 0x20], bpl
jne 0x100032e73
mov rax, qword [rbx + 0x90]
cmp dword [rax + 0x130], ebp
jbe 0x100032e73
mov rcx, rbx
call fcn.10003886c
jmp 0x100032f32
xor r8d, r8d
xor edx, edx
lea ecx, [rdx + 7]
call fcn.100041dd4
jmp 0x100032f32
inc ebx
inc ebx
mov dword [rsp + 0x30], ebp
mov dword [rsp + 0x34], ebp
mov dword [rsp + 0x38], 0x10
mov qword [rsp + 0x40], rbp
mov rax, qword [0x1000bafa8]
lea rdx, [rsp + 0x30]
mov rcx, qword [rax + 0x80]
call fcn.1000729b0
mov rdi, qword [rsp + 0x40]
mov rdx, qword [rdi + rbx*8]
lea rcx, [rsp + 0x80]
call fcn.100064160
mov rdx, rax
mov rcx, qword [0x1000bafa8]
call fcn.1000372d8
mov rax, qword [0x1000bafa8]
mov rcx, qword [rax + 0x48]
add rcx, 0x20
mov rdx, qword [rdi + rbx*8]
call fcn.100064394
mov rcx, qword [0x1000bafa8]
call fcn.10003a034
mov r11d, dword [rsp + 0x30]
cmp r11d, ebp
jbe 0x100032f24
mov rbx, rdi
mov rsi, r11
mov rcx, qword [rbx]
call sub.msvcrt.dll_free
mov qword [rbx], rbp
add rbx, 8
sub rsi, 1
jne 0x100032f0f
cmp rdi, rbp
je 0x100032f32
mov rcx, rdi
call qword [sym.imp.msvcrt.dll_free]
mov rcx, qword [rsp + 0x10f0]
xor rcx, rsp
call fcn.1000a2150
lea r11, [rsp + 0x1100]
mov rbx, qword [r11 + 0x18]
mov rbp, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rsp, r11
pop rdi
ret