Function at 0x10002d528
Capabilities:
Check for time delay via gettickcount
Create process on windows

Disassembly:
push rsi
mov eax, 0x10d0
call fcn.10009a630
sub rsp, rax
mov qword [rsp + 0x30], 0xfffffffffffffffe
mov qword [rsp + 0x10e0], rbx
mov qword [rsp + 0x10e8], rbp
mov rax, qword [0x1000a5140]
xor rax, rsp
mov qword [rsp + 0x10c0], rax
xor esi, esi
mov eax, 0x9c5f
cmp edx, eax
jg 0x10002d87f
cmp edx, eax
je 0x10002d94e
mov eax, 0x9c47
cmp edx, eax
jg 0x10002d750
cmp edx, eax
je 0x10002d6a6
sub edx, 0x9c40
je 0x10002d695
sub edx, 1
je 0x10002d60a
sub edx, 1
je 0x10002d5f3
sub edx, 1
je 0x10002d5dc
sub edx, 1
je 0x10002d5d2
cmp edx, 1
jne 0x10002d9b9
xor r9d, r9d
xor r8d, r8d
lea edx, [rsi + 0x10]
mov rcx, qword [0x1000b1078]
call qword [sym.imp.USER32.dll_PostMessageW]
jmp 0x10002d9b9
call fcn.10002be2c
jmp 0x10002d9b9
cmp byte [0x1000b10f2], sil
jne 0x10002d9b9
call fcn.10002ca30
jmp 0x10002d9b9
cmp byte [0x1000b10f2], sil
jne 0x10002d9b9
call fcn.10002b6b4
jmp 0x10002d9b9
cmp byte [0x1000b1cb0], sil
jne 0x10002d628
mov byte [0x1000b1cb0], 1
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x1000b1cb4], eax
jmp 0x10002d64b
call qword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [0x1000b1cb4]
cmp eax, 0x4e2
jb 0x10002d9b9
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x1000b1cb4], eax
mov rcx, qword [0x1000b0fb8]
cmp dword [rcx + 8], 3
jne 0x10002d68b
call fcn.1000332ac
mov rbx, qword [0x1000b0fb8]
mov rax, qword [rbx]
mov edx, dword [rbx + 8]
mov rcx, rbx
call qword [rax + 0x10]
mov r11d, dword [rbx + 8]
mov dword [rbx + 0xc], r11d
mov dword [rbx + 8], esi
mov rax, qword [rbx]
xor edx, edx
mov rcx, rbx
call qword [rax + 8]
jmp 0x10002d9b9
call fcn.100037420
jmp 0x10002d9b9
mov byte [0x1000a7e93], 1
call fcn.10002c2f0
jmp 0x10002d9b9
mov edx, 0x79
mov rcx, qword [0x1000b0f60]
call qword [sym.imp.USER32.dll_LoadIconW]
mov rbp, rax
mov rcx, qword [0x1000b0fb8]
cmp dword [rcx + 8], 1
jne 0x10002d6d2
xor edx, edx
lea ecx, [rdx + 3]
call fcn.10003a828
mov edx, 0x38b
lea rcx, [rsp + 0x50]
call fcn.100064be8
mov rbx, rax
mov edx, 0x65
lea rcx, [rsp + 0x38]
call fcn.100064be8
mov r9, rbp
mov r8, qword [rbx + 0x10]
mov rdx, qword [rax + 0x10]
mov rcx, qword [0x1000b1078]
call qword [sym.imp.SHELL32.dll_ShellAboutW]
mov rcx, qword [rsp + 0x48]
call sub.msvcrt.dll_free
nop
mov rcx, qword [rsp + 0x60]
call sub.msvcrt.dll_free
mov rcx, qword [0x1000b0fb8]
cmp dword [rcx + 8], 1
jne 0x10002d746
mov rax, qword [rcx + 0x58]
cmp byte [rax + 0x1d], sil
je 0x10002d746
xor r9d, r9d
mov r8b, 1
lea edx, [r9 + 3]
call fcn.10002f310
call fcn.100038cc8
jmp 0x10002d9b9
sub edx, 0x9c48
je 0x10002d875
sub edx, 3
je 0x10002d864
sub edx, 1
je 0x10002d84d
sub edx, 6
je 0x10002d7fb
sub edx, 9
je 0x10002d7ba
cmp edx, 1
jne 0x10002d9b9
mov rbx, qword [0x1000b0fb8]
mov rax, qword [rbx]
mov edx, dword [rbx + 8]
mov rcx, rbx
call qword [rax + 0x10]
mov r11d, dword [rbx + 8]
mov dword [rbx + 0xc], r11d
mov dword [rbx + 8], 4
mov rax, qword [rbx]
mov edx, 4
mov rcx, rbx
call qword [rax + 8]
jmp 0x10002d9b9
mov rcx, qword [0x1000b0fb8]
call fcn.10003375c
mov rbx, qword [0x1000b0fb8]
mov rax, qword [rbx]
mov edx, dword [rbx + 8]
mov rcx, rbx
call qword [rax + 0x10]
mov r11d, dword [rbx + 8]
mov dword [rbx + 0xc], r11d
mov dword [rbx + 8], 3
mov rax, qword [rbx]
mov edx, 3
mov rcx, rbx
call qword [rax + 8]
jmp 0x10002d9b9
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, rax
mov r9d, 0x824
lea r8, [rsp + 0x70]
mov edx, 0x88
call qword [sym.imp.USER32.dll_LoadStringW]
cmp eax, esi
jle 0x10002d9b9
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], rsi
xor r9d, r9d
lea r8, [rsp + 0x70]
lea rdx, [0x1000024c8]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
jmp 0x10002d9b9
mov r8b, 1
mov dl, r8b
mov rcx, qword [0x1000b0fb8]
call fcn.10002f574
jmp 0x10002d9b9
mov rcx, qword [0x1000b0fb8]
call fcn.100030acc
jmp 0x10002d9b9
call fcn.100038e6c
jmp 0x10002d9b9
mov eax, 0x9c69
cmp edx, eax
jg 0x10002d8df
cmp edx, eax
je 0x10002d8cc
sub edx, 0x9c60
je 0x10002d94c
sub edx, 1
je 0x10002d94a
sub edx, 1
je 0x10002d90f
sub edx, 1
je 0x10002d90d
sub edx, 1
je 0x10002d90b
cmp edx, 4
jne 0x10002d9b9
mov rax, qword [0x1000b0fb8]
mov byte [rax + 0x177], 1
jmp 0x10002d9b9
mov rax, qword [0x1000b0fb8]
mov byte [rax + 0x177], sil
jmp 0x10002d9b9
sub edx, 0x9c6a
je 0x10002d9ab
sub edx, 4
je 0x10002d984
sub edx, 1
je 0x10002d945
sub edx, 1
je 0x10002d909
cmp edx, 1
jne 0x10002d9b9
mov esi, edx
inc esi
inc esi
inc esi
mov edx, esi
mov rcx, qword [0x1000b0fb8]
call fcn.100034ab4
mov rcx, qword [0x1000b0fb8]
call fcn.1000312ac
mov r11, qword [0x1000b0fb8]
mov rax, qword [r11 + 0xb0]
mov rcx, qword [rax + 0x60]
mov rax, qword [rcx]
xorps xmm1, xmm1
call qword [rax]
jmp 0x10002d9b9
mov esi, 1
inc esi
inc esi
mov edx, esi
mov rcx, qword [0x1000b0fb8]
call fcn.100034a74
mov rcx, qword [0x1000b0fb8]
call fcn.1000312ac
mov r11, qword [0x1000b0fb8]
mov rax, qword [r11 + 0xb0]
mov rcx, qword [rax + 0x60]
mov rax, qword [rcx]
xorps xmm1, xmm1
call qword [rax]
jmp 0x10002d9b9
mov rbx, qword [0x1000b0fb8]
cmp dword [rbx + 8], 2
jne 0x10002d9b9
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call fcn.1000322f0
cmp eax, esi
seta al
mov byte [rbx + 0x16a], al
jmp 0x10002d9b9
cmp byte [0x1000b0f58], sil
sete byte [0x1000b0f58]
mov rcx, qword [rsp + 0x10c0]
xor rcx, rsp
call fcn.1000995a0
lea r11, [rsp + 0x10d0]
mov rbx, qword [r11 + 0x10]
mov rbp, qword [r11 + 0x18]
mov rsp, r11
pop rsi
ret