Function at 0x180018de0
Capabilities:
Check for time delay via gettickcount
Get common file path

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r14
push r15
mov eax, 0x12a0
call fcn.1800401b0
sub rsp, rax
mov rax, qword [0x1800bb120]
xor rax, rsp
mov qword [rsp + 0x1290], rax
mov rax, qword [rcx + 0x2700]
mov rbx, rcx
mov r14d, edx
mov rbp, qword [rax + r14*8]
call qword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [rbx + 0x26f4]
xor r15d, r15d
mov dword [rbx + 0x26f8], eax
mov esi, 1
mov rax, qword [rbp + 0x40]
mov qword [rbp + 0x50], r15
cmp dword [rax + 4], esi
je 0x1800190d5
mov rdx, rbp
mov rcx, rbx
call fcn.18001a040
mov dword [rbx + 0x26f0], eax
mov rcx, qword [rbp + 0x40]
test rcx, rcx
je 0x180018e67
mov dword [rcx + 0x2450], eax
cmp dword [rbx + 0x26f0], 0xc8
jne 0x180018fe2
mov rdx, rbp
mov rcx, rbx
call fcn.18001a2a0
mov rdx, rbp
mov rcx, rbx
call fcn.180019e80
mov rdx, rbp
mov rcx, rbx
call fcn.18001a150
mov rdx, rbp
mov rcx, rbx
call fcn.18001a0a0
mov rdx, rbp
mov rcx, rbx
call fcn.180019f90
mov rcx, qword [rbp + 0x60]
cmp qword [rbx + 0x5d370], rcx
jne 0x180018fe2
cmp dword [rbx + 0x26a4], r15d
je 0x180018ed9
cmp dword [rbp + 0x58], esi
mov eax, r15d
sete al
test eax, eax
je 0x180018fe2
mov rax, qword [rbx + 0x5d378]
test rax, rax
je 0x180018f13
cmp rax, rcx
je 0x180018f13
mov rax, qword [rbp + 0x40]
test rax, rax
je 0x180018ef9
mov dword [rax + 0x244c], esi
mov edx, r14d
mov rcx, rbx
call fcn.180017670
xor edx, edx
mov rcx, rbx
call fcn.180017f20
jmp 0x18001930c
mov eax, dword [rbp + 0x58]
mov rdx, rbp
mov rcx, rbx
mov dword [rbx + 0x2730], eax
call fcn.180018c10
test eax, eax
je 0x18001912f
mov dword [rbx + 0x26a4], esi
lea rcx, [rbx + 0x5d598]
mov dword [rbx + 0x248c], r15d
lea r9, [rbx + 0x5d390]
mov dword [rbx + 0x2730], r15d
lea r8, [0x180090200]
mov dword [rbp + 0x58], r15d
mov edx, 0x103
mov qword [rbx + 0x5d370], 0xffffffffffffffff
mov qword [rbp + 0x60], 0xffffffffffffffff
call fcn.18000ecf0
xor edx, edx
lea rcx, [rbx + 0x5d390]
mov r8d, 0x208
call fcn.18005f7c0
movzx eax, word [0x18008e0a0]
lea rcx, [rsp + 0x32]
xor edx, edx
mov word [rsp + 0x30], ax
mov r8d, 0x206
call fcn.18005f7c0
lea rdx, [rsp + 0x30]
mov ecx, 0x103
call qword [sym.imp.KERNEL32.dll_GetTempPathW]
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r8d, eax
lea r9, [rbx + 0x5d390]
lea rdx, [0x1800905d8]
lea rcx, [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_GetTempFileNameW]
jmp 0x18001912f
cmp dword [rbx + 0x26a4], r15d
jne 0x1800192e5
mov eax, dword [rbx + 0x26f0]
cmp eax, 0x12e
jne 0x1800190bf
movzx eax, word [0x18008e0a0]
lea rcx, [rsp + 0x242]
xor edx, edx
mov word [rsp + 0x240], ax
mov r8d, 0x1046
call fcn.18005f7c0
mov r9d, 0x1048
lea r8, [rsp + 0x240]
mov rdx, rbp
mov rcx, rbx
call fcn.180019ff0
test eax, eax
je 0x1800192ff
mov rdx, qword [rbp + 0x40]
lea rcx, [rsp + 0x240]
xor r8d, r8d
call fcn.180017a80
test eax, eax
je 0x1800192ff
cmp dword [rbp + 0x48], r15d
jne 0x18001909b
xor edx, edx
lea rcx, [rbx + 0x5f830]
mov r8d, 0x1048
call fcn.18005f7c0
lea r9, [rsp + 0x240]
mov edx, 0x823
lea r8, [0x180090200]
lea rcx, [rbx + 0x5f830]
call fcn.18000f390
xor edx, edx
mov rcx, rbx
call fcn.180017f20
test eax, eax
je 0x1800192ff
mov edx, r14d
mov rcx, rbx
call fcn.180017670
mov eax, esi
jmp 0x18001930c
cmp eax, 0x194
jne 0x1800192e5
mov dword [rbx + 0x2480], esi
jmp 0x180018eea
cmp dword [rbp], r15d
jne 0x1800192b7
mov rax, qword [rbp + 8]
test rax, rax
je 0x1800192b7
mov rdx, rbp
mov qword [rbp + 0x38], rax
mov rcx, rbx
call fcn.180019e80
mov rax, qword [rbp + 0x60]
cmp qword [rbx + 0x5d370], rax
jne 0x1800192e5
cmp dword [rbx + 0x26a4], r15d
je 0x180019126
cmp dword [rbp + 0x58], esi
mov eax, r15d
sete al
test eax, eax
je 0x1800192e5
mov eax, dword [rbp + 0x58]
mov dword [rbx + 0x2730], eax
mov rax, qword [rbp + 0x40]
test rax, rax
je 0x180019154
cmp dword [rax + 0x2448], 0xffffffff
jne 0x180019154
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov rcx, qword [rbp + 0x40]
sub eax, dword [rbp + 0x10]
mov dword [rcx + 0x2448], eax
mov rax, qword [rbx]
mov edx, 2
mov r8, qword [rbp + 0x38]
mov rcx, rbx
call qword [rax + 8]
test eax, eax
je 0x18001930a
mov rax, qword [rbx]
xor r8d, r8d
mov rcx, rbx
lea edx, [r8 + 3]
call qword [rax + 8]
test eax, eax
je 0x18001930a
mov rcx, rbx
call fcn.1800180c0
test eax, eax
je 0x1800192ff
mov rax, qword [rbx]
xor r8d, r8d
mov rcx, rbx
lea edx, [r8 + 4]
call qword [rax + 8]
test eax, eax
je 0x18001930a
cmp dword [rbx + 0x2730], r15d
je 0x180019298
mov rax, qword [rbx + 0x5d380]
cmp qword [rbx + 0x5d370], rax
jne 0x1800191e7
mov edx, r14d
mov rcx, rbx
call fcn.180017670
mov eax, esi
mov dword [rbx + 0x5d368], 7
jmp 0x18001930c
mov rcx, qword [rbp + 0x38]
lea r8, [rsp + 0x20]
mov r9d, 4
mov dword [rsp + 0x20], 0x4e20
lea edx, [r9 + 2]
call qword [sym.imp.WININET.dll_InternetSetOptionW]
or r9, 0xffffffffffffffff
xor r8d, r8d
mov rdx, rbp
mov rcx, rbx
call fcn.180016d40
test eax, eax
je 0x1800190ad
mov rax, qword [rbp + 0x8068]
cmp qword [rax + 8], r15
jne 0x18001923b
mov dword [rax + 4], esi
mov dword [rbp + 0x4c], 8
jmp 0x180019250
xor r8d, r8d
mov dword [rbp + 0x4c], 4
mov edx, r14d
mov rcx, rbx
call fcn.18001b180
cmp dword [rbx + 0x26a4], r15d
jne 0x18001927c
cmp dword [rbx + 0x2478], esi
jbe 0x18001927c
mov edx, 4
mov rcx, rbx
call fcn.180017f20
test eax, eax
je 0x18001927c
inc esi
cmp esi, dword [rbx + 0x2478]
jb 0x180019261
mov r9, qword [rbx]
xor r8d, r8d
mov rcx, rbx
lea edx, [r8 + 5]
call qword [r9 + 8]
test eax, eax
setne r15b
mov eax, r15d
jmp 0x18001930c
mov rax, qword [rbx]
xor r8d, r8d
mov rcx, rbx
lea edx, [r8 + 5]
call qword [rax + 8]
test eax, eax
je 0x18001930a
mov dword [rbp + 0x4c], 8
mov eax, esi
jmp 0x18001930c
lea rcx, [rbp + 0x80a8]
lea rdx, [0x1800905e0]
call qword [sym.imp.SHLWAPI.dll_StrStrIW]
test rax, rax
je 0x1800192e5
mov dword [rbx + 0x2730], r15d
mov dword [rbp + 0x58], r15d
mov dword [rbx + 0x26fc], 0x8000000
mov r8d, esi
mov dword [rbp + 0x4c], r15d
mov edx, r14d
mov rcx, rbx
call fcn.18001b180
test eax, eax
jne 0x1800190b8
mov edx, r14d
mov rcx, rbx
call fcn.180017670
xor eax, eax
mov rcx, qword [rsp + 0x1290]
xor rcx, rsp
call fcn.18003ff90
mov rbx, qword [rsp + 0x12e0]
add rsp, 0x12a0
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret