Function at 0x18006e6d0
Capabilities:
Check for time delay via gettickcount

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x120
mov rax, qword [0x180080a28]
xor rax, rsp
mov qword [rsp + 0x110], rax
mov ebx, dword [rsp + 0x78]
lea eax, [r8 - 0xb]
mov dword [rsp + 0x70], r8d
mov r13d, r8d
mov qword [rsp + 0x88], rdx
mov rdi, rdx
mov dword [rsp + 0x80], r8d
mov r14, rcx
mov r9d, r8d
cmp r8d, eax
jbe 0x18006ebe2
mov eax, dword [rsp + 0x78]
lea rdx, [0x180000000]
movzx ecx, byte [rsp + 0x68]
lea r10, str.a___NULL
movsxd r13, dword [rsp + 0x78]
mov r15d, dword [rsp + 0x78]
mov r12, r13
mov esi, dword [rsp + 0x78]
mov dword [rsp + 0x84], eax
movzx eax, byte [rsp + 0x68]
mov byte [rsp + 0x61], cl
mov ecx, r8d
mov byte [rsp + 0x60], al
lea eax, [r9 - 0x6f]
lea r8, str.b___NULL
cmp eax, 0x2d
ja case.default.0x18006e790
movzx eax, byte [rdx + rax + 0x6eddc]
mov ecx, dword [rdx + rax*4 + 0x6edac]
add rcx, rdx
jmp rcx
movsxd rcx, dword [r14]
xor r13d, r13d
mov rax, qword [r14 + 8]
xor r12d, r12d
movsx r15d, byte [rcx + rax - 1]
movzx r8d, byte [rsp + 0x60]
mov ecx, dword [rsp + 0x70]
dec r9d
lea eax, [rcx - 0xb]
mov dword [rsp + 0x80], r9d
cmp r9d, eax
ja 0x18006e76a
mov edi, dword [rsp + 0x84]
mov r13d, dword [rsp + 0x70]
movzx r12d, byte [rsp + 0x61]
mov esi, dword [rsp + 0x78]
mov ebp, r13d
mov r15d, dword [rsp + 0x78]
lea eax, [r13 + 0x71c]
cmp ebp, eax
jae 0x18006ea94
cmp ebp, 0x1e7
ja 0x18006ecd2
je 0x18006ecbf
mov eax, ebp
sub eax, 0x70
je 0x18006ea94
sub eax, 0xb
je 0x18006ebd5
sub eax, 0xb
je 0x18006ec59
sub eax, 0xab
je 0x18006ec08
cmp eax, 0xb
jne 0x18006ed81
xor esi, esi
jmp 0x18006ed81
test rdi, rdi
jne 0x18006e886
mov qword [rsp + 0x58], rdi
lea rax, [rsp + 0x78]
mov qword [rsp + 0x50], rdi
lea rdx, [0x180077149]
mov qword [rsp + 0x48], rdi
mov r9d, SHSetInstanceExplorer
mov qword [rsp + 0x40], r8
xor ecx, ecx
mov qword [rsp + 0x38], rdi
xor r8d, r8d
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdi
mov dword [rsp + 0x78], edi
call fcn.18002b8a0
mov r9, rdi
mov r8, r14
mov edx, 0x1a
xor ecx, ecx
call fcn.180025520
xor r9d, r9d
mov dword [rsp + 0x78], eax
lea r8, [rsp + 0x78]
xor ecx, ecx
lea edx, [r9 + 0x4f]
call fcn.18004f620
mov rbx, rax
mov r9d, dword [rsp + 0x80]
lea rdx, [0x180000000]
lea r10, str.a___NULL
jmp case.0x18006e790.122
mov dword [rsp + 0x84], 1
cmp r15d, 0x2d
jne case.0x18006e790.122
movsxd rdx, dword [r14]
movzx r8d, byte [rsp + 0x60]
mov ecx, dword [rsp + 0x70]
mov dword [rsp + 0x84], 0xffffffff
cmp edx, dword [r14 + 0x10]
jl 0x18006e90f
xor r15d, r15d
lea rdx, [0x180000000]
jmp 0x18006e7af
mov rax, qword [r14 + 8]
movsx r15d, byte [rdx + rax]
lea eax, [rdx + 1]
mov dword [r14], eax
lea rdx, [0x180000000]
jmp 0x18006e7af
mov rdx, qword [0x180080b08]
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x20], IUnknown_GetWindow
xor ecx, ecx
call fcn.180036950
test al, al
je 0x18006ebc0
mov rdx, qword [0x180080b08]
lea rcx, [rsp + 0x68]
xor r9d, r9d
mov byte [rsp + 0x68], 1
xor r8d, r8d
mov dword [rsp + 0x20], 0x90
call fcn.18004a5b0
jmp 0x18006e8b2
movzx r8d, byte [rsp + 0x60]
xor cl, cl
mov byte [rsp + 0x61], cl
mov ecx, dword [rsp + 0x70]
cmp r15d, 0x24
jne 0x18006e997
mov byte [rsp + 0x61], 1
jmp 0x18006e7af
dec dword [r14]
jmp 0x18006e7af
mov dword [r14], 0
mov r8d, 0x64
nop dword [rax]
mov eax, r8d
sub eax, 0x64
je 0x18006e9f8
cmp eax, 1
jne 0x18006ea17
mov eax, dword [r14]
mov r9d, 0x91
cmp esi, eax
jne 0x18006ea17
cmp eax, 0x40
jae 0x18006ea17
mov edx, 0x40
mov eax, edx
sub eax, 0x40
je 0x18006e9e5
cmp eax, 1
jne 0x18006e9ef
inc dword [r14]
jmp 0x18006e9ef
mov rax, qword [rdi]
mov ecx, esi
mov qword [r14 + rcx*8 + 8], rax
inc edx
cmp edx, 0x42
jb 0x18006e9d4
jmp 0x18006ea17
mov ecx, dword [r14]
xor esi, esi
test ecx, ecx
je 0x18006ea11
mov rdx, qword [rdi]
cmp qword [r14 + rsi*8 + 8], rdx
je 0x18006ea11
inc esi
cmp esi, ecx
jb 0x18006ea04
mov r8d, 0x64
inc r8d
cmp r8d, 0x66
jb 0x18006e9b0
lea rdx, [0x180000000]
jmp case.0x18006e790.122
xorps xmm0, xmm0
movaps xmmword [rsp + 0x90], xmm0
movaps xmmword [rsp + 0xa0], xmm0
movaps xmmword [rsp + 0xb0], xmm0
movaps xmmword [rsp + 0xc0], xmm0
movaps xmmword [rsp + 0xd0], xmm0
movaps xmmword [rsp + 0xe0], xmm0
movaps xmmword [rsp + 0xf0], xmm0
movaps xmmword [rsp + 0x100], xmm0
jmp case.0x18006e790.122
mov r8b, 1
mov byte [rsp + 0x60], r8b
jmp 0x18006e7ab
mov ecx, 0x11b
mov eax, ecx
sub eax, 0x11b
je 0x18006eac1
cmp eax, 0x7e
jne 0x18006eac8
mov eax, ebx
mov rcx, qword [rsp + 0x110]
xor rcx, rsp
call fcn.180072740
mov rbx, qword [rsp + 0x170]
add rsp, 0x120
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov ebx, dword [r14 + 0x3b8]
add ecx, 0x7e
cmp ecx, 0x217
jb 0x18006ea86
movsxd rdx, dword [r14]
cmp edx, dword [r14 + 0x10]
jge 0x18006eb45
mov rax, qword [r14 + 8]
movsx ebp, byte [rdx + rax]
lea eax, [rdx + 1]
mov dword [r14], eax
mov r15d, ebp
test bpl, bpl
je 0x18006eb50
mov edi, ILFindLastID
mov eax, edi
sub eax, 0xf
je 0x18006eb27
sub eax, 1
je 0x18006eb18
cmp eax, 1
jne 0x18006eb3c
inc r13d
mov byte [rsp + r12 + 0x90], bpl
inc r12
jmp 0x18006eb3c
cmp ebp, 0x2e
jne 0x18006eb3c
xor r8b, r8b
mov byte [rsp + 0x60], r8b
jmp 0x18006eb3c
mov ecx, ebp
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isdigit]
test eax, eax
jne 0x18006eb3c
cmp ebp, 0x2e
jne 0x18006ebc7
inc edi
cmp edi, 0x12
jb 0x18006eaf7
jmp case.0x18006e790.113
xor r15d, r15d
nop dword [rax + rax]
mov rdi, qword [rsp + 0x88]
jmp 0x18006e8b2
test r14, r14
jne case.0x18006e790.122
mov qword [rsp + 0x58], r14
lea rax, [rsp + 0x78]
mov qword [rsp + 0x50], r14
lea rdx, [0x180077149]
mov qword [rsp + 0x48], r14
mov r9d, SHSetInstanceExplorer
mov qword [rsp + 0x40], r10
xor r8d, r8d
mov qword [rsp + 0x38], r14
xor ecx, ecx
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r14
mov dword [rsp + 0x78], r14d
call fcn.18002b8a0
jmp 0x18006e8b2
movzx r8d, byte [rsp + 0x60]
jmp 0x18006e7af
xor eax, eax
jmp 0x18006ea96
mov esi, dword [rsp + 0x78]
mov r15d, dword [rsp + 0x78]
mov r13d, dword [rsp + 0x70]
dec dword [r14]
mov ebp, 0x7b
jmp 0x18006ed81
movzx r12d, byte [rsp + 0x68]
movzx r8d, byte [rsp + 0x68]
mov edi, dword [rsp + 0x78]
mov byte [rsp + 0x61], r12b
mov byte [rsp + 0x60], r8b
mov dword [rsp + 0x84], edi
jmp 0x18006e7d4
lea rcx, [rsp + 0x90]
test r8b, r8b
je 0x18006ec27
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
imul eax, edi
mov dword [r14 + 0x1820], eax
jmp 0x18006ec46
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atof]
movd xmm1, edi
cvtdq2pd xmm1, xmm1
mulsd xmm0, xmm1
cvtsd2ss xmm0, xmm0
movss dword [r14 + 0x1824], xmm0
test r12b, r12b
je 0x18006ed81
mov eax, 0x3b
jmp 0x18006ea96
xor edx, edx
mov r8d, 0xca
mov rcx, r14
call fcn.180019560
test al, al
jne 0x18006ed81
mov edi, 0x13
cmp edi, 0x13
je 0x18006ec95
cmp edi, 0xa8
je 0x18006ec91
cmp edi, 0x13d
je 0x18006ea94
jmp 0x18006ecac
xor ebx, ebx
jmp 0x18006ecac
mov rdx, qword [0x180080b08]
xor r9d, r9d
xor r8d, r8d
mov ecx, 0xf1
call fcn.180042740
add edi, 0x95
cmp edi, 0x1d2
jb 0x18006ec76
jmp 0x18006ed81
test r8b, r8b
je 0x18006eda0
mov ebx, 0x3f
jmp 0x18006ed81
mov eax, ebp
sub eax, 0x1f2
je 0x18006ed02
sub eax, 0xab
je 0x18006ea94
sub eax, 0xb
je 0x18006ecfb
cmp eax, 0xb6
je 0x18006ea94
jmp 0x18006ed81
mov ebx, esi
jmp 0x18006ed81
mov rcx, qword [r14 + 0x28]
call qword [r14 + 0x20]
test al, al
je 0x18006ed6a
mov edi, 0x63
mov eax, edi
sub eax, 0x63
je 0x18006ed43
sub eax, 0x13
je 0x18006ed2a
cmp eax, 0x13
jne 0x18006ed5f
call qword [r14 + 0x50]
jmp 0x18006ed5f
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
mov eax, 0x10624dd3
sub ecx, r15d
mul ecx
mov esi, edx
shr esi, 6
jmp 0x18006ed5f
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r9d, 0xeb
xor r8d, r8d
mov rdx, r14
xor ecx, ecx
mov r15d, eax
call fcn.18005e500
add edi, 0x13
cmp edi, 0x9c
jb 0x18006ed13
mov rdx, qword [0x180080b08]
xor r9d, r9d
xor r8d, r8d
mov ecx, 0xf1
call fcn.180042740
movzx r8d, byte [rsp + 0x60]
add ebp, 0xb6
mov edi, dword [rsp + 0x84]
movzx r12d, byte [rsp + 0x61]
jmp 0x18006e7e0
mov eax, 0x40
jmp 0x18006ea96