Function at 0x180049a50
Capabilities:
Check for time delay via gettickcount

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0xf0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
mov rax, qword [0x18006b3c0]
xor rax, rsp
mov qword [rbp - 9], rax
mov rdi, rcx
xor r12d, r12d
cmp byte [rcx + 0x89], r12b
je 0x180049b05
movzx ecx, byte [0x180084a16]
movzx edx, byte [0x180084a14]
test dl, dl
je 0x180049acd
test cl, cl
jne 0x180049acd
add dl, 0xff
mov byte [0x180084a14], dl
movzx eax, byte [0x180084a15]
inc al
mov byte [0x180084a15], al
jmp 0x180049ad4
movzx eax, byte [0x180084a15]
test al, al
je 0x180049aec
test dl, dl
jne 0x180049aec
add al, 0xff
mov byte [0x180084a15], al
inc cl
mov byte [0x180084a16], cl
test cl, cl
je 0x180049b05
test al, al
jne 0x180049b05
inc dl
mov byte [0x180084a14], dl
add cl, 0xff
mov byte [0x180084a16], cl
mov ecx, dword [rdi + 0x9c]
mov r13d, 1
movss xmm6, dword [0x18005d4dc]
test ecx, ecx
je 0x18004a12e
sub ecx, r13d
je 0x18004a005
sub ecx, r13d
je 0x180049ed9
sub ecx, r13d
je 0x180049e31
cmp ecx, r13d
jne 0x18004a164
call qword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [0x180089838]
cmp eax, dword [rdi + 0x80]
jb 0x180049d95
mov r8d, dword [0x180089700]
cmp r8d, 0x60
jl 0x180049b6f
mov r8d, r12d
jmp 0x180049b72
inc r8d
mov dword [0x180089700], r8d
lea r9, [rbp - 0xc]
test r8d, r8d
jns 0x180049bd0
neg r8d
nop word [rax + rax]
dec r9
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r9], r8b
mov r8d, edx
test edx, edx
jne 0x180049b90
dec r9
mov byte [r9], 0x2d
jmp 0x180049bfa
dec r9
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r9], r8b
mov r8d, edx
test edx, edx
jne 0x180049bd0
lea r8, [rbp - 0xc]
mov rdx, r9
lea rcx, [rbp - 0x41]
call fcn.180009d60
nop
mov r8, qword [rbp - 0x31]
mov rcx, qword [rbp - 0x29]
mov rax, rcx
sub rax, r8
mov r14d, 0xc
cmp rax, r14
jb 0x180049ca3
lea rax, [r8 + 0xc]
mov qword [rbp - 0x31], rax
lea rbx, [rbp - 0x41]
cmp rcx, 0xf
cmova rbx, qword [rbp - 0x41]
lea rax, [0x18005d254]
lea r15, str.ModhubIntro_
cmp rax, rbx
jbe 0x180049c67
lea rax, [rbx + r8]
cmp r15, rax
ja 0x180049c67
cmp rbx, r15
ja 0x180049c5f
mov rsi, r12
jmp 0x180049c6a
mov rsi, rbx
sub rsi, r15
jmp 0x180049c6a
mov rsi, r14
inc r8
lea rcx, [rbx + 0xc]
mov rdx, rbx
call sub.VCRUNTIME140.dll_memmove
mov r8, rsi
mov rdx, r15
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
sub r14, rsi
lea rdx, [r15 + 0xc]
add rdx, rsi
lea rcx, [rbx + rsi]
mov r8, r14
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rbp - 0x41]
jmp 0x180049cb4
mov qword [rsp + 0x28], r14
mov rdx, r14
lea rcx, [rbp - 0x41]
call fcn.18004b7c0
xorps xmm0, xmm0
movups xmmword [rbp - 0x61], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x51], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x61], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x51], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rcx, [rbp - 0x61]
cmp qword [rbp - 0x49], 0xf
cmova rcx, qword [rbp - 0x61]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__strdup]
mov qword [0x1800896f0], rax
mov rdx, qword [rbp - 0x49]
cmp rdx, 0xf
jbe 0x180049d3a
inc rdx
mov rcx, qword [rbp - 0x61]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180049d35
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180049d35
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18004fc20
movdqa xmm0, xmmword [0x18005d6d0]
movdqu xmmword [rbp - 0x51], xmm0
mov byte [rbp - 0x61], 0
mov rdx, qword [rbp - 0x29]
cmp rdx, 0xf
jbe 0x180049d89
inc rdx
mov rcx, qword [rbp - 0x41]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180049d84
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180049d84
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18004fc20
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x180089838], eax
cmp byte [rdi + 0xa1], 0
je 0x180049da8
movss xmm5, dword [0x18005d638]
jmp 0x180049dab
xorps xmm5, xmm5
mov eax, dword [rdi + 0xac]
movss xmm4, dword [rdi + 0x84]
movss xmm0, dword [rdi + 0xa4]
movaps xmm2, xmm0
addss xmm2, dword [rdi + 0x5c]
addss xmm2, dword [rdi + 0xa8]
movaps xmm1, xmm4
mulss xmm1, xmm6
addss xmm1, dword [rdi + 0x134]
mulss xmm0, xmm6
movss xmm3, dword [rdi + 0x54]
subss xmm3, xmm0
lea rdx, [0x180084cf0]
cmp qword [0x180084d08], 0xf
cmova rdx, qword [0x180084cf0]
movss dword [rsp + 0x40], xmm5
mov dword [rsp + 0x38], eax
movss dword [rsp + 0x30], xmm4
movss dword [rsp + 0x28], xmm2
movss dword [rsp + 0x20], xmm1
mov r8, qword [0x1800896f0]
call fcn.18004b2a0
jmp 0x18004a164
lea rdx, [0x180084cf0]
cmp qword [0x180084d08], 0xf
cmova rdx, qword [0x180084cf0]
lea r8, [0x180084d10]
cmp qword [0x180084d28], 0xf
cmova r8, qword [0x180084d10]
cmp byte [rdi + 0xa1], r12b
je 0x180049e72
movss xmm4, dword [0x18005d638]
jmp 0x180049e75
xorps xmm4, xmm4
movss xmm2, dword [rdi + 0x84]
movss xmm3, dword [rdi + 0xa4]
movaps xmm1, xmm3
addss xmm1, dword [rdi + 0x5c]
addss xmm1, dword [rdi + 0xa8]
movaps xmm0, xmm2
mulss xmm0, xmm6
addss xmm0, dword [rdi + 0x134]
mulss xmm3, xmm6
addss xmm3, dword [rdi + 0x54]
movss dword [rsp + 0x40], xmm4
mov eax, dword [rdi + 0xac]
mov dword [rsp + 0x38], eax
movss dword [rsp + 0x30], xmm2
movss dword [rsp + 0x28], xmm1
movss dword [rsp + 0x20], xmm0
call fcn.18004b2a0
jmp 0x18004a164
mov rbx, r12
movss xmm7, dword [0x18005d638]
cmp byte [rdi + 0xa1], r12b
je 0x180049ef2
xorps xmm5, xmm5
jmp 0x180049ef5
movaps xmm5, xmm7
movss xmm4, dword [rdi + 0x84]
movss xmm0, dword [rdi + 0xa4]
movaps xmm2, xmm0
addss xmm2, dword [rdi + 0x5c]
addss xmm2, dword [rdi + 0xa8]
movaps xmm1, xmm4
mulss xmm1, xmm6
addss xmm1, dword [rdi + 0x134]
mulss xmm0, xmm6
movss xmm3, dword [rdi + 0x54]
subss xmm3, xmm0
movss dword [rsp + 0x40], xmm5
mov eax, dword [rdi + 0xb0]
mov dword [rsp + 0x38], eax
movss dword [rsp + 0x30], xmm4
movss dword [rsp + 0x28], xmm2
movss dword [rsp + 0x20], xmm1
lea r8, str.omega
lea rdx, str.prop_screen_nightclub
call fcn.18004b2a0
cmp byte [rdi + 0xa1], r12b
je 0x180049f74
movaps xmm4, xmm7
jmp 0x180049f77
xorps xmm4, xmm4
movss xmm2, dword [rdi + 0x84]
movss xmm3, dword [rdi + 0xa4]
movaps xmm1, xmm3
addss xmm1, dword [rdi + 0x5c]
addss xmm1, dword [rdi + 0xa8]
movaps xmm0, xmm2
mulss xmm0, xmm6
addss xmm0, dword [rdi + 0x134]
mulss xmm3, xmm6
addss xmm3, dword [rdi + 0x54]
movss dword [rsp + 0x40], xmm4
mov eax, dword [rdi + 0xac]
mov dword [rsp + 0x38], eax
movss dword [rsp + 0x30], xmm2
movss dword [rsp + 0x28], xmm1
movss dword [rsp + 0x20], xmm0
lea r8, str.omega
lea rdx, str.prop_screen_nightclub
call fcn.18004b2a0
inc rbx
mov eax, 0x14
cmp byte [rdi + 0xa0], r12b
cmovne rax, r13
cmp rbx, rax
jb 0x180049ee4
jmp 0x18004a164
mov rbx, r12
movss xmm7, dword [0x18005d638]
cmp byte [rdi + 0xa1], r12b
je 0x18004a01e
xorps xmm5, xmm5
jmp 0x18004a021
movaps xmm5, xmm7
movss xmm4, dword [rdi + 0x84]
movss xmm0, dword [rdi + 0xa4]
movaps xmm2, xmm0
addss xmm2, dword [rdi + 0x5c]
addss xmm2, dword [rdi + 0xa8]
movaps xmm1, xmm4
mulss xmm1, xmm6
addss xmm1, dword [rdi + 0x134]
mulss xmm0, xmm6
movss xmm3, dword [rdi + 0x54]
subss xmm3, xmm0
movss dword [rsp + 0x40], xmm5
mov eax, dword [rdi + 0xb0]
mov dword [rsp + 0x38], eax
movss dword [rsp + 0x30], xmm4
movss dword [rsp + 0x28], xmm2
movss dword [rsp + 0x20], xmm1
lea r8, str.aircraft_dials_g0
lea rdx, str.aircraft_dials
call fcn.18004b2a0
cmp byte [rdi + 0xa1], r12b
je 0x18004a0a0
movaps xmm4, xmm7
jmp 0x18004a0a3
xorps xmm4, xmm4
movss xmm2, dword [rdi + 0x84]
movss xmm3, dword [rdi + 0xa4]
movaps xmm1, xmm3
addss xmm1, dword [rdi + 0x5c]
addss xmm1, dword [rdi + 0xa8]
movaps xmm0, xmm2
mulss xmm0, xmm6
addss xmm0, dword [rdi + 0x134]
mulss xmm3, xmm6
addss xmm3, dword [rdi + 0x54]
movss dword [rsp + 0x40], xmm4
mov eax, dword [rdi + 0xac]
mov dword [rsp + 0x38], eax
movss dword [rsp + 0x30], xmm2
movss dword [rsp + 0x28], xmm1
movss dword [rsp + 0x20], xmm0
lea r8, str.aircraft_dials_g0
lea rdx, str.aircraft_dials
call fcn.18004b2a0
inc rbx
mov eax, 0x14
cmp byte [rdi + 0xa0], r12b
cmovne rax, r13
cmp rbx, rax
jb 0x18004a010
jmp 0x18004a164
movss xmm0, dword [rdi + 0x84]
movaps xmm2, xmm0
mulss xmm2, xmm6
addss xmm2, dword [rdi + 0x134]
mov eax, dword [rdi + 0x94]
mov dword [rsp + 0x28], eax
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [rdi + 0x5c]
movss xmm1, dword [rdi + 0x54]
call fcn.18004b190
cmp byte [rdi + 0x88], 0
je 0x18004a265
movabs rax, 0xdb88a37483346780
mov qword [0x18008abc0], rax
mov esi, dword [rdi + 0x90]
movss xmm8, dword [rdi + 0x8c]
mov qword [rbp - 0x69], r12
movss dword [rbp - 0x69], xmm8
mov rax, qword [rbp - 0x69]
mov qword [rbp - 0x69], r12
mov dword [rbp - 0x69], esi
cmp byte [rdi + 0x89], 0
mov ebx, dword [0x180084a14]
jne 0x18004a1bb
mov ebx, dword [rdi + 0x98]
mov qword [0x180084c50], rax
mov rax, qword [rbp - 0x69]
mov dword [0x180084b88], r12d
mov qword [0x180084c58], rax
mov dword [0x180084b78], 2
call fcn.180047520
movss xmm0, dword [rax]
movss xmm7, dword [rdi + 0x84]
movabs rax, 0xc02f4dbfb51d988b
mov qword [rbp - 0x69], r12
mulss xmm7, xmm6
mulss xmm0, xmm6
mov qword [0x18008abc0], rax
mov dword [rbp - 0x69], r13d
addss xmm7, dword [rdi + 0x134]
movss xmm6, dword [rdi + 0x54]
mov rax, qword [rbp - 0x69]
subss xmm7, xmm0
mov dword [0x180084b88], r12d
mov qword [0x180084c50], rax
mov dword [0x180084b78], r13d
call fcn.180047520
mov byte [rsp + 0x40], 1
mov dword [rsp + 0x30], ebx
mov dword [rsp + 0x28], esi
movss dword [rsp + 0x20], xmm8
movaps xmm3, xmm7
movaps xmm2, xmm6
lea rdx, [0x18005b6b8]
call fcn.18004b460
movss xmm0, dword [rdi + 0x84]
addss xmm0, dword [rdi + 0x134]
movss dword [rdi + 0x134], xmm0
mov rcx, qword [rbp - 9]
xor rcx, rsp
call fcn.18004fc00
lea r11, [rsp + 0xf0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret