Function at 0x180019a50
Capabilities:
Check for time delay via gettickcount

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xa0
lea r13d, [rdx + 0xa48]
mov rbp, r8
mov r14d, edx
mov rax, rcx
cmp edx, r13d
jae 0x180019d78
mov r15d, dword [rsp + 0xe8]
mov r12d, dword [rsp + 0xe8]
mov rdi, qword [rsp + 0xf8]
nop dword [rax]
cmp r14d, 0x225
ja 0x180019dc2
je 0x180019dba
cmp r14d, 0x15e
ja 0x180019cd9
je 0x180019bbb
mov eax, r14d
sub eax, 0xa2
je 0x180019b89
sub eax, 0xb
je 0x180019b49
cmp eax, 0x47
jne 0x180019e8f
cmp qword [rbp + 0x28], 0
jne 0x180019b13
mov ecx, SHSetInstanceExplorer
nop
mov eax, ecx
sub eax, 0xad
je 0x180019b04
cmp eax, 1
je 0x180019d78
jmp 0x180019b09
mov byte [rsp + 0x50], 0
inc ecx
cmp ecx, 0xaf
jb 0x180019af0
cmp qword [rbp + 0x30], 0
jne 0x180019e8f
mov ecx, SHSetInstanceExplorer
mov eax, ecx
sub eax, 0xae
je 0x180019d78
cmp eax, 1
jne 0x180019b3a
mov byte [rsp + 0x50], 0
dec ecx
cmp ecx, 0xad
ja 0x180019b23
jmp 0x180019e8f
mov rdx, qword [0x180089bd8]
mov ecx, 0xa7
call fcn.180055fd0
test al, al
je 0x180019d70
mov rcx, qword [0x180089bd8]
lea rdx, [rsp + 0xe8]
mov r8d, 0x7b
mov byte [rsp + 0xe8], 1
call fcn.180056370
jmp 0x180019e8f
mov qword [rsp + 0x28], 0
mov r9d, 0x123
xor r8d, r8d
mov qword [rsp + 0x20], 0
mov rdx, rbp
xor ecx, ecx
call fcn.180030e80
mov qword [rsp + 0x98], rax
jmp 0x180019e8f
mov esi, dword [rax]
mov ecx, 3
mov dword [rsp + 0xf8], ecx
mov edi, 0xdf
nop
mov eax, edi
sub eax, 0xdf
je 0x180019c07
cmp eax, 0x1a
jne 0x180019cba
lea rdx, [rsp + 0xf8]
mov rcx, rbp
call qword [rbp + 0x280]
mov dword [rsp + 0x90], eax
mov rdi, qword [rsp + 0x90]
jmp 0x180019e8f
mov ebx, 0x48
nop dword [rax]
mov eax, ebx
sub eax, 0x47
je 0x180019bfa
cmp eax, 1
jne 0x180019caf
lea rax, [rsp + 0x58]
mov dword [rsp + 0x78], ecx
mov qword [rsp + 0x40], rax
lea r9, [rsp + 0x70]
mov dword [rsp + 0x38], ILFree
lea rax, [rsp + 0x60]
mov qword [rsp + 0x30], rax
lea r8, [rsp + 0x78]
lea rax, [rsp + 0x68]
mov dword [rsp + 0x58], esi
mov qword [rsp + 0x28], rax
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0x88]
mov qword [rsp + 0x20], rbp
mov dword [rsp + 0x60], 0
mov dword [rsp + 0x68], reloc.SHELL32.dll_ILFindLastID
mov dword [rsp + 0x80], ILFindLastID
mov dword [rsp + 0x88], reloc.SHELL32.dll_ILFindLastID
mov dword [rsp + 0x70], 2
call fcn.18003dc30
mov ecx, dword [rsp + 0xf8]
mov qword [rsp + 0x90], rax
dec ebx
cmp ebx, 0x46
ja 0x180019c10
add edi, 0x57fb
cmp edi, 0xaff6
jbe 0x180019bd0
mov rdi, qword [rsp + 0x90]
jmp 0x180019e8f
mov eax, r14d
sub eax, 0x169
je 0x180019d43
sub eax, 0x47
je 0x180019d09
cmp eax, 0x6a
jne 0x180019e8f
mov r8, qword [rsp + 0x98]
lea edx, [rax - 0x52]
mov rcx, rdi
call fcn.180030ac0
jmp 0x180019e8f
cmp qword [rbp + 0x38], 0
jne 0x180019d34
mov ecx, 0xec
mov eax, ecx
sub eax, 0xec
je 0x180019d25
cmp eax, 1
je 0x180019d78
jmp 0x180019d2a
mov byte [rsp + 0x50], 0
inc ecx
cmp ecx, 0xee
jb 0x180019d15
cmp qword [rbp + 0x20], 0
setne byte [rsp + 0x50]
jmp 0x180019e8f
mov r8, rbp
mov edx, 0xff
xor ecx, ecx
call fcn.180006f60
test al, al
jne 0x180019e8f
mov ebx, 0xa
nop
mov eax, ebx
sub eax, 0xa
je 0x180019d98
cmp eax, 1
jne 0x180019dae
nop dword [rax]
mov dword [rsp + 0x50], 0
mov rax, qword [rsp + 0x50]
mov rbx, qword [rsp + 0xf0]
add rsp, 0xa0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov rcx, qword [0x180089bd8]
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x1b]
call fcn.1800437c0
inc ebx
cmp ebx, 0xc
jb 0x180019d60
jmp 0x180019e8f
xor r15d, r15d
jmp 0x180019e97
cmp r14d, 0x392
ja 0x180019e5c
je 0x180019d78
mov eax, r14d
sub eax, 0x26c
je 0x180019d78
sub eax, 0x6a
je 0x180019e55
cmp eax, 0xb
jne 0x180019e8f
mov rcx, qword [rbp + 0x28]
call qword [rbp + 0x20]
test al, al
je 0x180019e8f
mov ebx, 0x10a
nop dword [rax]
mov eax, ebx
sub eax, 0x10a
je 0x180019e33
sub eax, 1
je 0x180019e18
cmp eax, 1
jne 0x180019e49
call qword [rbp + 0x50]
jmp 0x180019e49
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
mov eax, 0x10624dd3
sub ecx, r12d
mul ecx
mov r15d, edx
shr r15d, 6
jmp 0x180019e49
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov rdx, rbp
mov ecx, PathMakeUniqueName
mov r12d, eax
call fcn.180017280
inc ebx
cmp ebx, 0x10d
jb 0x180019e00
jmp 0x180019e8f
mov qword [rsp + 0x50], rdi
jmp 0x180019e8f
cmp r14d, 0x39d
je 0x180019e74
cmp r14d, 0x459
je 0x180019d78
jmp 0x180019e97
mov rcx, qword [0x180089bd8]
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x1b]
call fcn.1800437c0
mov dword [rsp + 0x50], r15d
mov rax, qword [rsp + 0xe0]
add r14d, 0xbc
cmp r14d, r13d
jb 0x180019aa0
jmp 0x180019d78