Function at 0x18000a230
Capabilities:
Check for time delay via gettickcount

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x68
xor ebx, ebx
mov qword [rbp - 0x18], r9
and qword [rbp - 0x30], rbx
xor esi, esi
mov qword [rbp - 0x20], rsi
mov r15, r8
mov qword [rbp - 0x38], rbx
mov r14, rdx
mov r13, rcx
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r12d, dword [rbp + 0x70]
mov dword [rbp - 0x28], eax
test r14, r14
je 0x18000a2e5
or rdx, 0xffffffffffffffff
inc rdx
cmp byte [r14 + rdx], bl
jne 0x18000a277
inc rdx
mov rcx, r14
call fcn.18000be54
mov edi, eax
test eax, eax
je 0x18000a2a8
mov edx, eax
mov ecx, 9
mov r8d, 0xc3b4
call fcn.18000c5ec
jmp 0x18000a630
mov rdx, r14
lea rcx, str.session:
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x18000a2c1
lea r14d, [rax + 2]
jmp 0x18000a309
test r15, r15
jne 0x18000a303
lea rdx, [rbp - 0x20]
mov rcx, r14
call fcn.180008fe0
mov rsi, qword [rbp - 0x20]
mov edi, eax
test eax, eax
jne 0x18000a635
mov r14d, dword [rsi]
jmp 0x18000a309
test r15, r15
jne 0x18000a303
lea edx, [r15 + 0x57]
mov r8d, 0xc3b4
lea ecx, [rdx - 0x4e]
mov edi, edx
call fcn.18000c5ec
jmp 0x18000a656
mov r14d, dword [r15]
mov rsi, r15
xor edx, edx
lea rcx, [rbp - 0x38]
call fcn.180009388
mov edi, eax
test eax, eax
jne 0x18000a62c
mov rbx, qword [rbp - 0x38]
mov edi, dword [rbp + 0x68]
test edi, edi
setne cl
mov al, byte [rbx + 0xcc]
and al, 0xfe
or cl, al
or cl, 2
mov byte [rbx + 0xcc], cl
cmp r14d, 2
je 0x18000a363
lea r8, [rsi + 0x108]
mov rcx, rbx
lea rdx, [rsi + 8]
call fcn.1800097a0
mov edi, eax
test eax, eax
jne 0x18000a630
mov edi, dword [rbp + 0x68]
mov r8, r13
mov edx, 1
mov rcx, rbx
call fcn.18000b298
cmp r14d, 2
jne 0x18000a3dd
mov eax, dword [r15 + 0xa8]
mov dword [rbx + 0xa8], eax
mov eax, dword [r15 + 0xac]
mov dword [rbx + 0xac], eax
mov eax, dword [r15 + 0xb0]
mov dword [rbx + 0xb0], eax
mov eax, dword [r15 + 0xb4]
mov dword [rbx + 0xb4], eax
mov rax, qword [r15 + 0xd0]
mov rcx, qword [rbx + 0xd0]
mov eax, dword [rax + 0x14]
mov dword [rcx + 0x14], eax
mov eax, dword [r15 + 0xc8]
mov dword [rbx + 0xc8], eax
movups xmm0, xmmword [r15 + 4]
movdqu xmmword [rbx + 4], xmm0
jmp 0x18000a480
movsxd rax, r14d
lea rcx, [rax + rax*4]
lea rax, [0x180027c20]
lea rdx, [rax + rcx*4]
mov rcx, rbx
call fcn.1800092a8
mov edx, dword [rbx + 0xa8]
or r8d, 0xffffffff
mov ecx, dword [rbx + 0xac]
add ecx, edx
cmp ecx, edx
cmovae r8d, ecx
jb 0x18000a625
cmp r8d, 0x103e8
ja 0x18000a625
test r8d, r8d
jne 0x18000a42b
xor eax, eax
jmp 0x18000a47a
cmp r8d, 0x1000
ja 0x18000a43b
mov eax, 1
jmp 0x18000a47a
cmp r8d, 0x2000
ja 0x18000a44b
mov eax, 2
jmp 0x18000a47a
cmp r8d, 0x4000
ja 0x18000a45b
mov eax, 3
jmp 0x18000a47a
cmp r8d, 0x8000
ja 0x18000a46b
mov eax, 4
jmp 0x18000a47a
xor eax, eax
cmp r8d, 0x10000
seta al
add eax, 5
mov dword [rbx + 0xc8], eax
mov rax, qword [r13 + 8]
mov qword [rbx + 0x98], rax
mov rax, qword [r13 + 0x10]
mov qword [rbx + 0x60], rax
mov rax, qword [r13 + 0x18]
mov qword [rbx + 0x68], rax
mov rax, qword [r13 + 0x20]
mov qword [rbx + 0x70], rax
sub r14d, 1
je 0x18000a58b
sub r14d, 1
je 0x18000a55a
sub r14d, 2
je 0x18000a51a
cmp r14d, 3
je 0x18000a4cf
mov edx, 0x57
mov edi, edx
jmp 0x18000a293
cmp r12d, 0xffffffff
je 0x18000a4ef
call qword [sym.imp.KERNEL32.dll_GetTickCount]
add r12d, dword [rbp - 0x28]
sub r12d, eax
mov eax, 0xfffffffe
cmp r12d, 0xffffffff
cmove r12d, eax
mov r9d, r12d
lea r8, [rbp - 0x30]
mov rdx, rsi
mov rcx, rbx
call fcn.1800131b4
mov edi, eax
test eax, eax
jne 0x18000a630
mov dword [rbx + 0xb4], 7
jmp 0x18000a5ae
xor edx, edx
mov rcx, rbx
call fcn.1800095ac
and qword [rbp - 0x38], 0
lea r9, [rbp - 0x30]
mov r8, rsi
mov dword [rsp + 0x20], edi
lea rdx, [rbp - 0x38]
mov rcx, r13
call fcn.180005c90
mov edi, eax
test eax, eax
jne 0x18000a62c
mov rbx, qword [rbp - 0x38]
mov dword [rbx + 0xb4], 4
jmp 0x18000a5ae
mov al, byte [r15 + 0xcc]
lea r8, [rbp - 0x30]
xor al, byte [rbx + 0xcc]
mov rdx, rbx
and al, 1
xor byte [rbx + 0xcc], al
mov rcx, qword [r15 + 0x48]
call fcn.180008450
mov edi, eax
test eax, eax
jne 0x18000a630
jmp 0x18000a5ae
lea r8, [rbp - 0x30]
mov rdx, rsi
mov rcx, rbx
call fcn.180001d1c
mov edi, eax
test eax, eax
jne 0x18000a630
mov dword [rbx + 0xb4], 1
mov rax, qword [rbp - 0x30]
mov qword [rbx + 0x48], rax
test byte [rbx + 0xcc], 1
jne 0x18000a603
mov rcx, qword [rax + 0x10]
cmp rcx, 0xffffffffffffffff
je 0x18000a603
mov rdx, qword [0x1800238c8]
xor r9d, r9d
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_CreateIoCompletionPort]
test rax, rax
jne 0x18000a5fd
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, 0xc3bd
mov ecx, 9
mov edx, eax
mov edi, eax
call fcn.18000c5ec
jmp 0x18000a5ff
xor edi, edi
test edi, edi
jne 0x18000a630
mov rax, qword [rbp - 0x18]
mov qword [rax], rbx
test r15, r15
jne 0x18000a621
test rsi, rsi
je 0x18000a621
mov edx, 0x410
mov rcx, rsi
call fcn.180014578
xor eax, eax
jmp 0x18000a660
mov edi, 0x80070216
jmp 0x18000a630
mov rbx, qword [rbp - 0x38]
test r15, r15
jne 0x18000a647
test rsi, rsi
je 0x18000a647
mov edx, 0x410
mov rcx, rsi
call fcn.180014578
test rbx, rbx
je 0x18000a656
xor edx, edx
mov rcx, rbx
call fcn.1800095ac
mov rax, qword [rbp - 0x18]
and qword [rax], 0
mov eax, edi
add rsp, 0x68
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret