Function at 0x10005e258
Capabilities:
Check for time delay via gettickcount

Disassembly:
mov rax, rsp
mov qword [rax + 0x20], r9
mov dword [rax + 0x10], edx
mov qword [rax + 8], rcx
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xd8
xor ebx, ebx
mov r15, r8
mov r13, rcx
mov qword [rsp + 0x70], rbx
lea rcx, [rax - 0x78]
lea rdx, [0x100349a70]
lea r8d, [rbx + 0x28]
mov r14, r9
mov r12, rbx
mov qword [rax - 0x98], rbx
mov qword [rax - 0x90], rbx
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x58], rbx
mov rsi, rbx
mov qword [rsp + 0x50], rbx
mov rbp, rbx
mov qword [rax + 0x18], rbx
call sub.msvcrt.dll_memcpy
and qword [rsp + 0x68], rbx
and qword [rsp + 0x30], rbx
mov rdi, rbx
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x40], rbx
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [rsp + 0x60], eax
test r15, r15
jne 0x10005e2f8
mov r13d, 0x80070057
jmp 0x10005e9dd
call fcn.10006fffc
nop
invalid
mov rax, qword [0x100331948]
lea r14, [0x100331948]
cmp rax, r14
je 0x10005ea6f
test byte [rax + 0x3c], 2
je 0x10005ea24
call fcn.1000f8a58
nop
xchg ecx, eax
add byte [rax], al
invalid
mov rax, qword [0x100331948]
cmp rax, r14
je 0x10005ea6f
mov eax, dword [rax + 0x3c]
mov ecx, 0x2000008
and eax, ecx
cmp eax, ecx
jne 0x10005ea6f
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov rcx, qword [0x100331948]
lea r9, [0x100037f00]
sub eax, dword [rsp + 0x60]
mov rcx, qword [rcx + 0x30]
lea r8, [0x1000214f0]
mov edx, 0xa
mov dword [rsp + 0x20], eax
call fcn.100076e34
call fcn.10006fffc
nop
test al, 0xed
xor dl, al
lodsb al, byte [rsi]
in eax, dx
xor al, byte [rax + 0x23]
add dword [rax], eax
add byte [rsi + rsi], cl
or esp, eax
mov rcx, qword [rsp + 0x30]
xor r14d, r14d
cmp rcx, r14
je 0x10005eab3
mov rax, qword [rcx]
call qword [rax + 0x10]
call fcn.100296c1c
nop
rcr dword [rdx - 0x7c9eff36], 0x13
mov al, 0xb4
cmpsb byte [rsi], byte [rdi]
xor al, byte [rax - 0x53]
add dword [rax], eax
push rax
mov qword [rsp + 0x30], r14
mov rcx, qword [rsp + 0x68]
cmp rcx, r14
je 0x10005ead9
call fcn.10024ae48
nop
add dword [rsp + riz*2], edx
or byte [rbp], 0
sar ah, 9
xor dl, byte [rax + 0x702bab48]
mov rax, qword [rcx]
call qword [rax + 0x10]
cmp rbx, r14
je 0x10005eae7
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
mov rcx, qword [rsp + 0x38]
cmp rcx, r14
je 0x10005eb12
mov rax, qword [rcx]
call qword [rax + 0x10]
call fcn.100248ac0
nop
int3
cmp rdi, r14
je 0x10005eb4b
call fcn.100041938
nop
mov al, 0x6e
xor ah, byte [rax]
cmp ah, byte [0x100070e58]
mov al, 0xac
outsb dx, byte [rsi]
xor al, al
call fcn.10022d6f0
nop
adc eax, dword [rax]
add al, al
enter 0x3228, 0x50
int3
mov rbx, qword [rsp + 0xb0]
cmp rbx, r14
je 0x10005eb8b
call fcn.100296c1c
nop
insd dword [rdi], dx
leave
add byte [rdi + rbx*2 + 0x26], dh
add byte [rbx + rbx*2 + 0x32], dl
or byte [rax + rax], 0
nop
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
lea r8, [rbx - 4]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov qword [rsp + 0xb0], r14
call fcn.10022d6f0
nop
out dx, al
add eax, dword [rax]
movabs al, byte [0x329a54b0329a50]
xchg edi, eax
mov esp, 0x8b480021
pushfq
and al, 0xa8
add byte [rax], al
add byte [rcx + 0x3b], cl
fidiv word [rbx + rsi - 1]
adc eax, 0xfffa28ec
call fcn.1000f8a58
nop
movabs dword [0x982032a0a4900001], eax
push rbx
sbb al, byte [rax - 0x4fcd5f58]
lea r8, [rbx - 4]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov qword [rsp + 0xa8], r14
call fcn.10006fffc
nop
js 0x10005ec61
xor dl, byte [rax]
jl 0x10005ec65
xor al, al
mov edx, 0x50b00000
mov al, 0x24
movabs al, byte [0x9e15ff1474ee3b49]
sub dl, bh
dec dword [rbx + rcx*4 - 0x3b]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp rsi, r14
je 0x10005ec1e
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov rcx, qword [rsp + 0x58]
cmp rcx, r14
je 0x10005ec2e
call qword [sym.imp.KERNEL32.dll_LocalFree]
call fcn.100296c1c
nop
sub ecx, r12d
adc al, 0xcb
invalid
xor al, 0x32
mov rax, qword [rcx]
mov eax, dword [rcx]
call qword [rax + 0x10]
mov rax, qword [rsp + 0x88]
cmp rax, r14
je 0x10005eca5
call fcn.100248ac0
nop
sub byte [rdi + 0x13085032], bh
adc dword [rax], eax
add al, byte [rax]
invalid
mov rbx, qword [rsp + 0x80]
cmp rbx, r14
je 0x10005ecc6
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rbx, qword [rsp + 0x70]
cmp rbx, r14
je 0x10005ecfa
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
call fcn.1002fa81c
nop
invalid
cmp r12, r14
je 0x10005ed1d
call fcn.1000f8a58
nop
inc byte [rcx]
add byte [rax + 0x3300b0], al
sub dword [rsi + 0xb41008], edi
xor eax, dword [rax]
mov rcx, r12
call fcn.10004d4f4
mov eax, r13d
add rsp, 0xd8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret