Function at 0x18000a610
Capabilities:
Check for time delay via gettickcount

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x70
mov qword [rsp + 0x30], 0xfffffffffffffffe
mov qword [rsp + 0xb8], rbx
mov rax, qword [0x180101090]
xor rax, rsp
mov qword [rsp + 0x60], rax
mov rbp, r8
mov r13d, edx
mov r14, rcx
mov eax, dword [0x18010e4c8]
lea r12, [0x18010e498]
xor r15d, r15d
test al, 1
jne 0x18000a6a5
or eax, 1
mov dword [0x18010e4c8], eax
lea ecx, [r15 + 8]
call fcn.18009a960
test rax, rax
je 0x18000a679
mov qword [rax], r12
jmp 0x18000a67c
mov rax, r15
mov qword [0x18010e498], rax
mov qword [0x18010e4b0], r15
mov qword [0x18010e4b8], r15
mov qword [0x18010e4c0], r15
lea rcx, [0x1800c8bc0]
call fcn.18009a3f8
nop
mov rdx, rbp
mov rcx, r12
call fcn.180012ef0
test al, al
je 0x18000a716
lea rcx, str.kernel32.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, rax
lea rdx, str.GetTickCount64
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x18000a6da
call rax
jmp 0x18000a6e2
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov eax, eax
sub rax, qword [0x1801087b0]
cmp rax, 0x2710
jae 0x18000a716
mov r8d, dword [0x1801087b8]
lea rdx, str.use_cached_action:__d
lea rcx, str.banSendFileDbg
call fcn.18005c640
mov eax, dword [0x1801087b8]
jmp 0x18000abbd
cmp r13d, 2
jne 0x18000a820
lea rdx, str.ban_dt_sel_folder
lea rcx, str.banSendFileDbg
call fcn.18005c640
mov qword [rsp + 0x58], 7
mov qword [rsp + 0x50], r15
mov word [rsp + 0x40], r15w
xor r8d, r8d
lea rdx, [0x1800cda60]
lea rcx, [rsp + 0x38]
call fcn.18000f510
nop
mov rcx, qword [rbp + 0x20]
sub rcx, qword [rbp + 0x18]
movabs rax, 0x6666666666666667
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
jne 0x18000a786
call fcn.18009a80c
mov rax, qword [rbp + 0x18]
cmp qword [rax + 0x20], 8
jb 0x18000a797
mov rbx, qword [rax + 8]
jmp 0x18000a79b
lea rbx, [rax + 8]
mov rcx, rbx
call fcn.180004ed0
test eax, eax
jne 0x18000a7bb
lea r9, [rsp + 0x38]
xor r8d, r8d
mov rdx, rbx
lea ecx, [rax + 2]
call fcn.1800084d0
nop
cmp qword [rsp + 0x58], 8
jb 0x18000a7cd
mov rcx, qword [rsp + 0x40]
call fcn.18009a864
cmp r12, rbp
je 0x18000a7dd
mov rdx, rbp
mov rcx, r12
call fcn.18000d0f0
lea rcx, str.kernel32.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, rax
lea rdx, str.GetTickCount64
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x18000a803
call rax
jmp 0x18000a80b
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov eax, eax
mov qword [0x1801087b0], rax
mov dword [0x1801087b8], r15d
xor eax, eax
jmp 0x18000abbd
mov r8, rbp
mov edx, r13d
mov rcx, r14
call fcn.180009150
test eax, eax
je 0x18000a84f
lea rdx, str.allow_pass_file_path
lea rcx, str.banSendFileDbg
call fcn.18005c640
mov eax, 1
jmp 0x18000abbd
mov rdx, rbp
mov rcx, r14
call fcn.180009240
test eax, eax
je 0x18000a8bc
xor edx, edx
mov rcx, rbp
call fcn.18000d2a0
cmp qword [rax + 0x20], 8
jb 0x18000a875
mov r8, qword [rax + 8]
jmp 0x18000a879
lea r8, [rax + 8]
lea rdx, str.allow_authorized_file:__s
lea rcx, str.banSendFileDbg
call fcn.18005c640
cmp r12, rbp
je 0x18000a89c
mov rdx, rbp
mov rcx, r12
call fcn.18000d0f0
call fcn.180051e0c
mov qword [0x1801087b0], rax
mov dword [0x1801087b8], 1
mov eax, 1
jmp 0x18000abbd
mov rcx, qword [0x18010c870]
sub rcx, qword [0x18010c868]
movabs rax, 0x6666666666666667
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
je 0x18000aa81
lea r9, [0x180108f60]
lea r8, str.SoftwareWOW6432Nodeprojonepodlp_smpcache_activeUrl_
mov rdx, 0xffffffff80000002
lea rcx, [rsp + 0x38]
call fcn.180053c64
nop
cmp qword [rsp + 0x50], 0
je 0x18000aa6f
mov rcx, qword [0x18010c868]
mov rbx, rcx
mov rsi, qword [0x18010c870]
cmp rcx, rsi
jbe 0x18000a940
call fcn.18009a80c
mov rsi, qword [0x18010c870]
mov rcx, qword [0x18010c868]
mov rax, qword [0x18010c850]
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x28], rbx
movaps xmm0, xmmword [rsp + 0x20]
movdqa xmmword [rsp + 0x20], xmm0
mov rdi, qword [rsp + 0x20]
mov rbx, qword [rsp + 0x28]
cmp rcx, rsi
jbe 0x18000a970
call fcn.18009a80c
test rdi, rdi
je 0x18000a97e
cmp rdi, qword [0x18010c850]
je 0x18000a983
call fcn.18009a80c
cmp rbx, rsi
je 0x18000aa6f
test rdi, rdi
jne 0x18000a99b
call fcn.18009a80c
mov r11, r15
jmp 0x18000a99e
mov r11, qword [rdi]
cmp rbx, qword [r11 + 0x20]
jb 0x18000a9a9
call fcn.18009a80c
cmp qword [rbx + 0x20], 8
jb 0x18000a9b6
mov rdx, qword [rbx + 8]
jmp 0x18000a9ba
lea rdx, [rbx + 8]
lea rcx, [rsp + 0x40]
cmp qword [rsp + 0x58], 8
cmovae rcx, qword [rsp + 0x40]
call qword [sym.imp.SHLWAPI.dll_PathMatchSpecW]
test eax, eax
jne 0x18000aa09
test rdi, rdi
jne 0x18000a9e4
call fcn.18009a80c
mov r11, r15
jmp 0x18000a9e7
mov r11, qword [rdi]
cmp rbx, qword [r11 + 0x20]
jb 0x18000a9f2
call fcn.18009a80c
add rbx, 0x28
mov rsi, qword [0x18010c870]
mov rcx, qword [0x18010c868]
jmp 0x18000a966
lea r8, [rsp + 0x40]
cmp qword [rsp + 0x58], 8
cmovae r8, qword [rsp + 0x40]
lea rdx, str.allow_white_url_send_file:__s
lea rcx, str.banSendFileDbg
call fcn.18005c640
cmp r12, rbp
je 0x18000aa3d
mov rdx, rbp
mov rcx, r12
call fcn.18000d0f0
call fcn.180051e0c
mov qword [0x1801087b0], rax
mov dword [0x1801087b8], 1
cmp qword [rsp + 0x58], 8
jb 0x18000aa65
mov rcx, qword [rsp + 0x40]
call fcn.18009a864
mov eax, 1
jmp 0x18000abbd
cmp qword [rsp + 0x58], 8
jb 0x18000aa81
mov rcx, qword [rsp + 0x40]
call fcn.18009a864
mov rdi, qword [rbp + 0x18]
cmp rdi, qword [rbp + 0x20]
jbe 0x18000aa90
call fcn.18009a80c
mov rbx, qword [rbp]
mov rsi, qword [rbp + 0x20]
cmp qword [rbp + 0x18], rsi
jbe 0x18000aaa3
call fcn.18009a80c
mov r12, qword [rbp]
test rbx, rbx
je 0x18000aab1
cmp rbx, r12
je 0x18000aab6
call fcn.18009a80c
cmp rdi, rsi
je 0x18000ab65
test rbx, rbx
jne 0x18000aace
call fcn.18009a80c
mov r11, r15
jmp 0x18000aad1
mov r11, qword [rbx]
cmp rdi, qword [r11 + 0x20]
jb 0x18000aadc
call fcn.18009a80c
mov r8, rdi
mov edx, r13d
mov rcx, r14
call fcn.18000a070
test eax, eax
je 0x18000ab11
test rbx, rbx
jne 0x18000aafd
call fcn.18009a80c
mov r11, r15
jmp 0x18000ab00
mov r11, qword [rbx]
cmp rdi, qword [r11 + 0x20]
jb 0x18000ab0b
call fcn.18009a80c
add rdi, 0x28
jmp 0x18000aaa7
lea rcx, [0x18010e498]
cmp rcx, rbp
je 0x18000ab25
mov rdx, rbp
call fcn.18000d0f0
lea rcx, str.kernel32.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, rax
lea rdx, str.GetTickCount64
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x18000ab4b
call rax
jmp 0x18000ab53
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov eax, eax
mov qword [0x1801087b0], rax
mov dword [0x1801087b8], r15d
xor eax, eax
jmp 0x18000abbd
lea rcx, [0x18010e498]
cmp rcx, rbp
je 0x18000ab79
mov rdx, rbp
call fcn.18000d0f0
lea rcx, str.kernel32.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, rax
lea rdx, str.GetTickCount64
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x18000ab9f
call rax
jmp 0x18000aba7
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov eax, eax
mov qword [0x1801087b0], rax
mov dword [0x1801087b8], 1
mov eax, 1
mov rcx, qword [rsp + 0x60]
xor rcx, rsp
call fcn.180099fe0
mov rbx, qword [rsp + 0xb8]
add rsp, 0x70
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret