Function at 0x180029f80
Capabilities:
Check for time delay via gettickcount
Create process on windows

Disassembly:
mov rax, rsp
push rbp
push rdi
push r14
lea rbp, [rax - 0x8d8]
sub rsp, 0x9c0
mov qword [rsp + 0x30], 0xfffffffffffffffe
mov qword [rax + 0x18], rbx
mov qword [rax + 0x20], rsi
mov rax, qword [0x180146748]
xor rax, rsp
mov qword [rbp + 0x8b0], rax
mov r14d, edx
mov rsi, rcx
call fcn.180068070
mov r8, qword [rax]
mov edx, 1
mov rcx, rax
call qword [r8 + 0x10]
cmp al, 1
jne 0x18002a123
movdqa xmm0, xmmword [0x1800f5220]
movdqu xmmword [rbp + 0x5f0], xmm0
mov byte [rbp + 0x5e0], 0
mov r8d, 0x5a
lea rdx, str.d:jenkins.jenkinsworkspacelib_commoncomputerz12hookhomepage_normalconfigconfig.cpp
lea rcx, [rbp + 0x5e0]
call fcn.18000c180
nop
movdqa xmm0, xmmword [0x1800f5220]
movdqu xmmword [rbp + 0x530], xmm0
mov byte [rbp + 0x520], 0
mov r8d, 3
lea rdx, [0x1800f4f90]
lea rcx, [rbp + 0x520]
call fcn.18000c180
nop
call fcn.180068070
mov rdi, rax
mov r9d, 0x5f
lea r8, [rbp + 0x5e0]
lea rdx, [rbp + 0x520]
lea rcx, [rbp - 0x50]
call fcn.180008390
mov rbx, rax
lea rdx, str.RunCheck_3_60_Sa_feLock
mov rcx, rax
call fcn.180009250
mov r8, qword [rdi]
mov rdx, rbx
mov rcx, rdi
call qword [r8 + 0x38]
nop
lea rcx, [rbp - 0x50]
call fcn.1800093c0
nop
mov rdx, qword [rbp + 0x538]
cmp rdx, 0x10
jb 0x18002a0cb
inc rdx
mov rcx, qword [rbp + 0x520]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002a0c6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002aa2a
call fcn.18008c16c
movdqa xmm0, xmmword [0x1800f5220]
movdqu xmmword [rbp + 0x530], xmm0
mov byte [rbp + 0x520], 0
mov rdx, qword [rbp + 0x5f8]
cmp rdx, 0x10
jb 0x18002a123
inc rdx
mov rcx, qword [rbp + 0x5e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002a11e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002aa30
call fcn.18008c16c
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x18]
test eax, eax
je 0x18002a9f7
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov edx, dword [0x180155390]
add edx, r14d
cmp eax, edx
jbe 0x18002a874
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x180155390], eax
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x6a0]
call fcn.1800bbd80
mov r8d, 0x104
lea rdx, [rbp + 0x6a0]
mov rcx, qword [0x180155660]
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea rcx, [rbp + 0x6a0]
call qword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
lea rcx, [rbp + 0x6a0]
call qword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
lea rcx, [rsp + 0x20]
call fcn.180027520
mov rdx, rax
lea rcx, [rbp + 0x6a0]
call qword [sym.imp.SHLWAPI.dll_PathAppendW]
lea rcx, [rbp + 0x6a0]
call fcn.180088860
test eax, eax
jne 0x18002a350
call fcn.180068070
mov r9, qword [rax]
mov edx, 2
mov rcx, rax
call qword [r9 + 0x10]
cmp al, 1
jne 0x18002a9f7
movdqa xmm0, xmmword [0x1800f5220]
movdqu xmmword [rbp + 0x610], xmm0
mov byte [rbp + 0x600], 0
mov r8d, 0x5a
lea rdx, str.d:jenkins.jenkinsworkspacelib_commoncomputerz12hookhomepage_normalconfigconfig.cpp
lea rcx, [rbp + 0x600]
call fcn.18000c180
nop
movdqa xmm0, xmmword [0x1800f5220]
movdqu xmmword [rbp + 0x550], xmm0
mov byte [rbp + 0x540], 0
mov r8d, 3
lea rdx, [0x1800f9d7c]
lea rcx, [rbp + 0x540]
call fcn.18000c180
nop
call fcn.180068070
mov rdi, rax
mov r9d, 0x6f
lea r8, [rbp + 0x600]
lea rdx, [rbp + 0x540]
lea rcx, [rbp + 0x98]
call fcn.180008390
mov rbx, rax
lea rdx, str.SignCheck_error.
mov rcx, rax
call fcn.180009250
lea rdx, [rbp + 0x6a0]
mov rcx, rbx
call fcn.180007080
mov r8, qword [rdi]
mov rdx, rbx
mov rcx, rdi
call qword [r8 + 0x38]
nop
lea rcx, [rbp + 0x98]
call fcn.1800093c0
nop
mov rdx, qword [rbp + 0x558]
cmp rdx, 0x10
jb 0x18002a2f0
inc rdx
mov rcx, qword [rbp + 0x540]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002a2eb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002aa36
call fcn.18008c16c
movdqa xmm0, xmmword [0x1800f5220]
movdqu xmmword [rbp + 0x550], xmm0
mov byte [rbp + 0x540], 0
mov rdx, qword [rbp + 0x618]
cmp rdx, 0x10
jb 0x18002a9f7
inc rdx
mov rcx, qword [rbp + 0x600]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002a9f2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002aa24
jmp 0x18002a9f2
call fcn.18000a3f0
mov rcx, rax
test rax, rax
je 0x18002aa3c
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x28], rax
lea rdx, str._check
lea rcx, [rsp + 0x28]
cmp rdx, 0x10000
jae 0x18002a38f
movzx edx, dx
call fcn.18000af40
jmp 0x18002a395
call fcn.180020850
nop
xor edx, edx
lea r8d, [rdx + 0x70]
lea rcx, [rsp + 0x40]
call fcn.1800bbd80
mov dword [rsp + 0x40], 0x70
lea rax, [rbp + 0x6a0]
mov qword [rsp + 0x58], rax
mov rbx, qword [rsp + 0x28]
mov qword [rsp + 0x60], rbx
mov dword [rsp + 0x70], 0
mov dword [rsp + 0x44], 0x440
call fcn.180068070
mov r8, qword [rax]
mov edx, 1
mov rcx, rax
call qword [r8 + 0x10]
cmp al, 1
jne 0x18002a53f
movdqa xmm0, xmmword [0x1800f5220]
movdqu xmmword [rbp + 0x630], xmm0
mov byte [rbp + 0x620], 0
mov r8d, 0x5a
lea rdx, str.d:jenkins.jenkinsworkspacelib_commoncomputerz12hookhomepage_normalconfigconfig.cpp
lea rcx, [rbp + 0x620]
call fcn.18000c180
nop
movdqa xmm0, xmmword [0x1800f5220]
movdqu xmmword [rbp + 0x570], xmm0
mov byte [rbp + 0x560], 0
mov r8d, 3
lea rdx, [0x1800f4f90]
lea rcx, [rbp + 0x560]
call fcn.18000c180
nop
call fcn.180068070
mov rsi, rax
mov r9d, 0x7c
lea r8, [rbp + 0x620]
lea rdx, [rbp + 0x560]
lea rcx, [rbp + 0x180]
call fcn.180008390
mov rdi, rax
lea rdx, str.Check36OSafeLock_start
mov rcx, rax
call fcn.180009250
mov r8, qword [rsi]
mov rdx, rdi
mov rcx, rsi
call qword [r8 + 0x38]
nop
lea rcx, [rbp + 0x180]
call fcn.1800093c0
nop
mov rdx, qword [rbp + 0x578]
cmp rdx, 0x10
jb 0x18002a4e7
inc rdx
mov rcx, qword [rbp + 0x560]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002a4e2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002aa47
call fcn.18008c16c
movdqa xmm0, xmmword [0x1800f5220]
movdqu xmmword [rbp + 0x570], xmm0
mov byte [rbp + 0x560], 0
mov rdx, qword [rbp + 0x638]
cmp rdx, 0x10
jb 0x18002a53f
inc rdx
mov rcx, qword [rbp + 0x620]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002a53a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002aa4d
call fcn.18008c16c
lea rcx, [rsp + 0x40]
call qword [sym.imp.SHELL32.dll_ShellExecuteExW]
test eax, eax
je 0x18002a6e2
mov edx, 0x1f4
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
jne 0x18002a6d8
call fcn.180068070
mov r8, qword [rax]
mov edx, 1
mov rcx, rax
call qword [r8 + 0x10]
cmp al, 1
jne 0x18002a6d8
movdqa xmm0, xmmword [0x1800f5220]
movdqu xmmword [rbp + 0x650], xmm0
mov byte [rbp + 0x640], 0
mov r8d, 0x5a
lea rdx, str.d:jenkins.jenkinsworkspacelib_commoncomputerz12hookhomepage_normalconfigconfig.cpp
lea rcx, [rbp + 0x640]
call fcn.18000c180
nop
movdqa xmm0, xmmword [0x1800f5220]
movdqu xmmword [rbp + 0x590], xmm0
mov byte [rbp + 0x580], 0
mov r8d, 3
lea rdx, [0x1800f4f90]
lea rcx, [rbp + 0x580]
call fcn.18000c180
nop
call fcn.180068070
mov rsi, rax
mov r9d, 0x82
lea r8, [rbp + 0x640]
lea rdx, [rbp + 0x580]
lea rcx, [rbp + 0x268]
call fcn.180008390
mov rdi, rax
lea rdx, str.Check36OSafeLock_timeout.
mov rcx, rax
call fcn.180009250
mov r8, qword [rsi]
mov rdx, rdi
mov rcx, rsi
call qword [r8 + 0x38]
nop
lea rcx, [rbp + 0x268]
call fcn.1800093c0
nop
mov rdx, qword [rbp + 0x598]
cmp rdx, 0x10
jb 0x18002a680
inc rdx
mov rcx, qword [rbp + 0x580]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002a67b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002aa53
call fcn.18008c16c
movdqa xmm0, xmmword [0x1800f5220]
movdqu xmmword [rbp + 0x590], xmm0
mov byte [rbp + 0x580], 0
mov rdx, qword [rbp + 0x658]
cmp rdx, 0x10
jb 0x18002a6d8
inc rdx
mov rcx, qword [rbp + 0x640]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002a6d3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002aa59
call fcn.18008c16c
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.180068070
mov r8, qword [rax]
mov edx, 1
mov rcx, rax
call qword [r8 + 0x10]
cmp al, 1
jne 0x18002a84f
movdqa xmm0, xmmword [0x1800f5220]
movdqu xmmword [rbp + 0x670], xmm0
mov byte [rbp + 0x660], 0
mov r8d, 0x5a
lea rdx, str.d:jenkins.jenkinsworkspacelib_commoncomputerz12hookhomepage_normalconfigconfig.cpp
lea rcx, [rbp + 0x660]
call fcn.18000c180
nop
movdqa xmm0, xmmword [0x1800f5220]
movdqu xmmword [rbp + 0x5b0], xmm0
mov byte [rbp + 0x5a0], 0
mov r8d, 3
lea rdx, [0x1800f4f90]
lea rcx, [rbp + 0x5a0]
call fcn.18000c180
nop
call fcn.180068070
mov rsi, rax
mov r9d, 0x86
lea r8, [rbp + 0x660]
lea rdx, [rbp + 0x5a0]
lea rcx, [rbp + 0x350]
call fcn.180008390
mov rdi, rax
lea rdx, str.Check36OSafeLock_end
mov rcx, rax
call fcn.180009250
mov r8, qword [rsi]
mov rdx, rdi
mov rcx, rsi
call qword [r8 + 0x38]
nop
lea rcx, [rbp + 0x350]
call fcn.1800093c0
nop
mov rdx, qword [rbp + 0x5b8]
cmp rdx, 0x10
jb 0x18002a7f6
inc rdx
mov rcx, qword [rbp + 0x5a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002a7f1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002aa5f
call fcn.18008c16c
movdqa xmm0, xmmword [0x1800f5220]
movdqu xmmword [rbp + 0x5b0], xmm0
mov byte [rbp + 0x5a0], 0
mov rdx, qword [rbp + 0x678]
cmp rdx, 0x10
jb 0x18002a84f
inc rdx
mov rcx, qword [rbp + 0x660]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002a849
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002aa65
call fcn.18008c16c
nop
lea rdx, [rbx - 0x18]
mov eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x18002a9f7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
jmp 0x18002a9f7
call fcn.180068070
mov r8, qword [rax]
mov edx, 1
mov rcx, rax
call qword [r8 + 0x10]
cmp al, 1
jne 0x18002a9f7
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov esi, dword [0x180155390]
add esi, r14d
sub esi, eax
movdqa xmm0, xmmword [0x1800f5220]
movdqu xmmword [rbp + 0x690], xmm0
mov byte [rbp + 0x680], 0
mov r8d, 0x5a
lea rdx, str.d:jenkins.jenkinsworkspacelib_commoncomputerz12hookhomepage_normalconfigconfig.cpp
lea rcx, [rbp + 0x680]
call fcn.18000c180
nop
movdqa xmm0, xmmword [0x1800f5220]
movdqu xmmword [rbp + 0x5d0], xmm0
mov byte [rbp + 0x5c0], 0
mov r8d, 3
lea rdx, [0x1800f4f90]
lea rcx, [rbp + 0x5c0]
call fcn.18000c180
nop
call fcn.180068070
mov rdi, rax
mov r9d, 0x65
lea r8, [rbp + 0x680]
lea rdx, [rbp + 0x5c0]
lea rcx, [rbp + 0x438]
call fcn.180008390
mov rbx, rax
lea rdx, str.wait
mov rcx, rax
call fcn.180009250
mov edx, esi
mov rcx, rbx
call fcn.180014e30
mov r8, qword [rdi]
mov rdx, rbx
mov rcx, rdi
call qword [r8 + 0x38]
nop
lea rcx, [rbp + 0x438]
call fcn.1800093c0
nop
mov rdx, qword [rbp + 0x5d8]
cmp rdx, 0x10
jb 0x18002a9a3
inc rdx
mov rcx, qword [rbp + 0x5c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002a99e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002aa6b
call fcn.18008c16c
movdqa xmm0, xmmword [0x1800f5220]
movdqu xmmword [rbp + 0x5d0], xmm0
mov byte [rbp + 0x5c0], 0
mov rdx, qword [rbp + 0x698]
cmp rdx, 0x10
jb 0x18002a9f7
inc rdx
mov rcx, qword [rbp + 0x680]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002a9f2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002aa1e
call fcn.18008c16c
mov rcx, qword [rbp + 0x8b0]
xor rcx, rsp
call fcn.18008c720
lea r11, [rsp + 0x9c0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rsp, r11
pop r14
pop rdi
pop rbp
ret
call fcn.1800beee8
int3
call fcn.1800beee8
nop
call fcn.1800beee8
nop
call fcn.1800beee8
nop
call fcn.1800beee8
nop
mov ecx, 0x80004005
call fcn.180009990
nop
call fcn.1800beee8
nop
call fcn.1800beee8
nop
call fcn.1800beee8
nop
call fcn.1800beee8
nop
call fcn.1800beee8
nop
call fcn.1800beee8
nop
call fcn.1800beee8
int3