Function at 0x10006b6f8
Capabilities:
Check for time delay via gettickcount

Disassembly:
mov rax, rsp
mov qword [rax + 0x20], r9
mov dword [rax + 0x10], edx
mov qword [rax + 8], rcx
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xd8
xor ebx, ebx
mov r14, r8
mov r13, rcx
mov qword [rsp + 0x70], rbx
lea rcx, [rax - 0x78]
lea rdx, [0x1004c6420]
lea r8d, [rbx + 0x28]
mov r15, r9
mov r12, rbx
mov qword [rax - 0x98], rbx
mov qword [rax - 0x90], rbx
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x58], rbx
mov rsi, rbx
mov qword [rsp + 0x50], rbx
mov rbp, rbx
mov qword [rax + 0x18], rbx
call sub.msvcrt.dll_memcpy
call fcn.1002ef378
nop
nop
xor al, 0x94
ror byte [rdx + rbx + 0x4a], 0x70
xlatb
add dword [rax], eax
and byte [rcx - 0x4b], dh
sbb esp, dword [rax + 0x48]
and dword [rsp + 0x68], ebx
and qword [rsp + 0x30], rbx
mov rdi, rbx
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x40], rbx
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [rsp + 0x60], eax
test r14, r14
jne 0x10006b7ae
mov r13d, 0x80070057
jmp 0x10006bf48
test r15, r15
je 0x10006b7a3
cmp qword [rsp + 0x140], rbx
je 0x10006b7a3
mov r15, qword [0x1004c3ff0]
lea r12, [r15 + 8]
test r12, r12
je 0x10006b7da
mov edx, 1
mov rcx, r12
call fcn.1000591f8
cmp qword [r13 + 0x28], rbx
jne 0x10006b7eb
mov r13d, 0x80070005
jmp 0x10006bf48
lea rcx, [rsp + 0x40]
call fcn.100079a9c
mov rbx, qword [rsp + 0x40]
mov r13d, eax
test eax, eax
js 0x10006bf48
mov r9, qword [r15 + 0x70]
mov r8, qword [0x1004c4060]
lea rax, [rsp + 0x68]
xor edx, edx
mov rcx, rbx
mov qword [rsp + 0x20], rax
call fcn.100075bbc
mov r13d, eax
test eax, eax
js 0x10006bf48
mov rcx, qword [rsp + 0x68]
mov qword [rbx + 0x30], rcx
mov rax, qword [rcx]
call qword [rax + 8]
call fcn.10031899c
nop
xor byte [0xf0f2c894], 0x3e
mov al, 0x2e
add byte [rax], al
jo 0x10006b8cd
xor eax, 0x8b447049
pushfq
and al, 0x28
add dword [rax], eax
add byte [rax - 0x73], cl
push rsp
and al, 0x30
lea rcx, [rsp + 0x90]
mov dword [rsp + 0x98], r11d
mov qword [rsp + 0x90], r14
call fcn.10007a0c0
call fcn.1002ef378
nop
cdq
pushfq
xchg ebx, eax
loopne 0x10006b8d9
invalid
mov rcx, qword [rsp + 0x38]
mov rdx, qword [rsp + 0x30]
mov rax, qword [rcx]
call qword [rax + 0x18]
mov r13d, eax
add edi, edi
push rax
sbb byte [rbx + rcx*4 - 0x18], al
test eax, eax
js 0x10006bf48
mov rdx, qword [rsp + 0x30]
lea rcx, [rsp + 0x70]
call fcn.1003d4ac4
nop
stosd dword [rdi], eax
invalid
mov rax, qword [0x1004a9500]
lea r14, [0x1004a9500]
cmp rax, r14
je 0x10006bfda
test byte [rax + 0x3c], 2
je 0x10006bf79
mov rcx, qword [rax + 0x30]
lea r8, [0x10003f820]
mov edx, 0x27
mov r9d, r13d
call fcn.10005c358
mov rax, qword [0x1004a9500]
cmp rax, r14
je 0x10006bfda
call fcn.10042aabc
nop
add byte es:[rax], al
nop
lock sub byte [rdx + 0x4df4b010], dl
or byte [rbx + 0x8b93c40], 0
add byte [rdx], al
and eax, ecx
cmp eax, ecx
jne 0x10006bfda
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov rcx, qword [0x1004a9500]
lea r9, [0x100041b80]
sub eax, dword [rsp + 0x60]
mov rcx, qword [rcx + 0x30]
lea r8, [0x10003f940]
mov edx, 0xa
mov dword [rsp + 0x20], eax
call fcn.100085908
mov rcx, qword [rsp + 0x30]
xor r14d, r14d
cmp rcx, r14
je 0x10006bff2
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [rsp + 0x30], r14
mov rcx, qword [rsp + 0x68]
cmp rcx, r14
je 0x10006c002
mov rax, qword [rcx]
call qword [rax + 0x10]
cmp rbx, r14
je 0x10006c026
call fcn.1002ef378
nop
pop rax
cli
xchg ebx, eax
xor bpl, dil
shr r13b, 0
add al, ah
sbb al, 0x25
sub byte [rax + 0x48038b48], dl
mov ecx, ebx
call qword [rax + 0x10]
mov rcx, qword [rsp + 0x38]
cmp rcx, r14
je 0x10006c03b
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [rsp + 0x38], r14
cmp rdi, r14
je 0x10006c048
mov rcx, rdi
call fcn.100074e38
mov rbx, qword [rsp + 0xb0]
cmp rbx, r14
je 0x10006c072
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
lea r8, [rbx - 4]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov qword [rsp + 0xb0], r14
mov rbx, qword [rsp + 0xa8]
cmp rbx, r14
je 0x10006c0b2
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
lea r8, [rbx - 4]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
call fcn.1002ef378
nop
setne al
test al, 0x87
loopne 0x10006c118
add byte [rax], al
movabs al, byte [0x24b4894c1007856c]
test al, 0
add byte [rax], al
cmp rbp, r14
je 0x10006c0cb
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, rbp
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
call fcn.10009bd44
nop
sub byte [0x14b77f121], bl
sbb edx, eax
and al, 0x1d
shr byte [rdx + 0x49e00001], 0x3b
div byte [rcx + rcx + 0x48]
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_LocalFree]
call fcn.100118cac
nop
sbb byte [rax], bpl
mov al, 0x34
dec byte [rcx + 0x50]
cmp dh, bh
jo 0x10006c10f
add byte [rax], al
movabs al, byte [0xce3b4958244c8b48]
je 0x10006c12b
call fcn.1002ef378
nop
mov eax, 0xe060933d
sahf
ror byte [r9], 0
xor byte [rax], 0x58
loopne 0x10006c125
invalid
call qword [sym.imp.KERNEL32.dll_LocalFree]
adc eax, 0xfff952f5
mov rcx, qword [rsp + 0x48]
cmp rcx, r14
je 0x10006c167
call fcn.1002ef378
nop
xor ecx, ebx
xchg esp, eax
sbb byte [rsp + rbp*2 + 0x1fd004a], 0
movabs al, byte [0x2fbf4e8b00b4024]
add byte [rax - 0x3fb6db24], dl
in al, dx
in eax, 0x40
add al, bl
and al, 0x49
and byte [rdi], 1
add byte [rax + 0x48], ah
mov eax, dword [rcx]
call qword [rax + 0x10]
mov rax, qword [rsp + 0x88]
cmp rax, r14
je 0x10006c1b8
lea rbx, [rax - 4]
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
call fcn.100308588
nop
xlatb
add dword [rax], eax
and al, cl
pop rbx
movabs al, byte [0x100d3fcc404a5bc4]
call fcn.100427050
nop
sub al, 0xb4
cmp eax, 0x493e38c0
xor al, 0x3e
shl byte [r8 + 1], 1
add byte [rax + 0x48c38b4c], dh
mov ecx, eax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rbx, qword [rsp + 0x80]
cmp rbx, r14
je 0x10006c21b
push rsi
call fcn.10042aabc
nop
pop rsp
add byte [rax], al
adc byte [rax - 0x43dfb392], ch
mov edi, 0x6eac1005
loopne 0x10006c1c4
sti
add al, byte [rax]
nop
and al, 0x4c
movabs al, byte [0x494c20f0393250]
sub eax, dword [rax]
add byte [rax], dl
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
call fcn.1002ef378
nop
add byte [rdi - 0x6c], bh
movabs al, byte [0x3000003bd04a3f84]
add byte [0x8b535221], al
ret
mov rbx, qword [rsp + 0x70]
cmp rbx, r14
je 0x10006c239
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
call fcn.100118cac
nop
nop
pop rcx
sub dl, al
invalid