Function at 0x1005972b
Capabilities:
Check for time delay via queryperformancecounter

Disassembly:
sub esp, 0x130
mov eax, dword [0x10184508]
xor eax, esp
mov dword [esp + 0x12c], eax
mov ecx, dword [esp + 0x138]
push ebx
push ebp
push esi
mov esi, dword [esp + 0x140]
push edi
mov dword [esp + 0x18], ecx
lea ebp, [esi + 0x28]
mov eax, dword [ebp]
mov dword [esp + 0x1c], ebp
test eax, eax
jne 0x100598a6
push 0xffffffffffffffff
push str.com.apple.distributed_notifications.2
mov edi, 0x105
lea eax, [esp + 0x3c]
push edi
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy_s]
lea eax, [esp + 0x44]
push edi
push eax
call sym.CoreFoundation.dll__CFGetDistnotedServerName
add esp, 0x18
lea eax, [esp + 0x34]
push 0x600
push eax
push esi
call sym.CoreFoundation.dll_CFGetAllocator
pop ecx
push eax
call sym.CoreFoundation.dll_CFStringCreateWithCString
add esp, 0xc
mov dword [esp + 0x24], esi
mov ebx, eax
xor eax, eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x28], eax
push eax
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], eax
lea eax, [esp + 0x24]
push eax
push 0x10059668
push ebx
push esi
call sym.CoreFoundation.dll_CFGetAllocator
pop ecx
push eax
call sym.CoreFoundation.dll_CFWindowsNamedPipeCreateConnectToName
mov edi, eax
add esp, 0x14
test edi, edi
jne 0x1005981e
call fcn.10001a91
test al, al
je 0x10059876
push 0
lea eax, [esp + 0x24]
push eax
push 0x10059668
push ebx
push esi
call sym.CoreFoundation.dll_CFGetAllocator
pop ecx
push eax
call sym.CoreFoundation.dll_CFWindowsNamedPipeCreateConnectToName
mov edi, eax
add esp, 0x14
test edi, edi
jne 0x1005981e
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x100597ee
push 0x10059b13
push edi
call sym.CoreFoundation.dll_CFWindowsNamedPipeSetInvalidationCallBack
pop ecx
pop ecx
push 0
push edi
push esi
call sym.CoreFoundation.dll_CFGetAllocator
pop ecx
push eax
call sym.CoreFoundation.dll_CFWindowsNamedPipeCreateRunLoopSource
mov ebx, eax
add esp, 0xc
mov eax, dword [esi + 0x2c]
test eax, eax
jne 0x1005984c
call sym.CoreFoundation.dll_CFRunLoopGetMain
push dword [sym.CoreFoundation.dll_NSRunLoopCommonModes]
push ebx
push eax
call sym.CoreFoundation.dll_CFRunLoopAddSource
push ebx
call sym.CoreFoundation.dll_CFRelease
push ebp
push edi
push 0
call sym.CoreFoundation.dll_OSAtomicCompareAndSwapPtr
add esp, 0x1c
test al, al
jne 0x10059876
push edi
call sym.CoreFoundation.dll_CFRelease
pop ecx
movsd xmm0, qword [0x10144ab0]
push ecx
push ecx
movsd qword [esp], xmm0
call fcn.10001839
pop ecx
mov dword [0x10186dd0], eax
mov eax, dword [esi + 0x28]
mov dword [0x10186dd4], edx
pop ecx
mov ecx, dword [esp + 0x18]
test eax, eax
je 0x10059a30
push 0
push 0
push 0xc8
push ecx
push dword [sym.CoreFoundation.dll_kCFAllocatorSystemDefault]
call sym.CoreFoundation.dll_CFPropertyListCreateData
add esp, 0x14
mov dword [esp + 0x10], eax
test eax, eax
je 0x10059a30
push eax
call sym.CoreFoundation.dll_CFDataGetLength
mov ebx, eax
lea edi, [ebx + 3]
mov esi, edi
and esi, 0xfffffffc
add esi, 0x1c
push esi
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov ebp, eax
mov eax, dword [esp + 0x24]
mov dword [ebp + 0x10], 4
mov dword [ebp + 4], esi
push dword [eax]
call sym.CoreFoundation.dll_CFWindowsNamedPipeGetHandle
mov esi, dword [esp + 0x1c]
add esp, 0xc
and dword [ebp + 0xc], 0
and dword [ebp + 0x14], 0
mov dword [ebp + 8], eax
push ebx
push esi
mov dword [ebp], 0x1413
mov dword [ebp + 0x18], ebx
call sym.CoreFoundation.dll_CFDataGetBytePtr
pop ecx
push eax
lea eax, [ebp + 0x1c]
push eax
call sub.VCRUNTIME140.dll_memmove
and edi, 0xfffffffc
lea eax, [ebp + 0x1c]
sub edi, ebx
add eax, ebx
push edi
push 0
push eax
call sub.VCRUNTIME140.dll_memset
push esi
call sym.CoreFoundation.dll_CFRelease
mov ebx, dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
lea eax, [esp + 0x2c]
add esp, 0x1c
push eax
call ebx
mov ecx, dword [0x10186f18]
mov esi, dword [0x10186f1c]
jmp 0x10059996
mov edx, dword [esp + 0x10]
sub edx, dword [ecx*8 + 0x10186dd8]
mov eax, dword [esp + 0x14]
sbb eax, dword [ecx*8 + 0x10186ddc]
cmp dword [0x10186dd4], eax
ja 0x1005999a
jb 0x10059988
cmp dword [0x10186dd0], edx
ja 0x1005999a
inc ecx
cmp ecx, 0x28
sbb eax, eax
and ecx, eax
mov dword [0x10186f18], ecx
cmp ecx, esi
jne 0x10059960
lea eax, [esi + 1]
cmp eax, 0x28
sbb edi, edi
and edi, eax
cmp edi, ecx
jne 0x100599c5
push str.This_client_has_sent_too_many_distributed_notifications
call sym.CoreFoundation.dll___CFStringMakeConstantString
push eax
push 6
call sym.CoreFoundation.dll_CFLog
add esp, 0xc
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push 0
push dword [ebp + 4]
push 1
push ebp
call sym.CoreFoundation.dll_windows_msg
add esp, 0x14
mov esi, eax
lea eax, [esp + 0x10]
push eax
call ebx
mov edx, dword [0x10186f1c]
mov ecx, dword [esp + 0x10]
push ebp
mov dword [0x10186f1c], edi
mov dword [edx*8 + 0x10186dd8], ecx
mov ecx, dword [esp + 0x18]
mov dword [edx*8 + 0x10186ddc], ecx
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
pop ecx
test esi, esi
je 0x10059a2b
push dword [esp + 0x18]
push esi
push str.Unable_to_send_message_to_distnoted.exe___d_:___
call sym.CoreFoundation.dll___CFStringMakeConstantString
pop ecx
push eax
push 3
call sym.CoreFoundation.dll_CFLog
add esp, 0x10
test esi, esi
sete al
jmp 0x10059a32
xor al, al
mov ecx, dword [esp + 0x13c]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.1000234c
add esp, 0x130
ret