Function at 0x14004b2c0
Capabilities:
Check for time delay via gettickcount

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x70]
sub rsp, 0x170
lea rax, [0x140003b30]
mov rsi, r8
mov r15, rcx
mov qword [rbp - 0x38], rax
lea rax, [0x140003a28]
mov r14, rdx
xor r12d, r12d
lea r13, [0x140003a40]
lea rcx, [rbp - 0x18]
lea r8d, [r12 + 0x78]
xor edx, edx
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x40], r13
mov dword [rbp - 0x28], 0x7b
mov dword [rbp - 0x24], 1
mov dword [rbp - 0x20], 0xff
mov dword [rbp + 0x60], 0x1000000
call sub.msvcrt.dll_memset
mov rax, qword [rbp - 0x38]
mov dword [rsp + 0x58], r12d
mov qword [rsp + 0x78], rax
mov rax, qword [rbp - 0x40]
mov qword [rsp + 0x60], rax
mov rax, qword [rbp - 0x30]
mov qword [rsp + 0x68], rax
mov eax, dword [rbp - 0x28]
mov dword [rsp + 0x70], eax
mov eax, dword [rbp - 0x24]
mov dword [rsp + 0x74], eax
call qword [sym.imp.api_ms_win_core_sysinfo_l1_2_1.dll_GetTickCount]
lea rcx, [rbp + 0xa0]
mov dword [rbp - 0x7c], eax
mov eax, dword [rbp - 0x20]
mov dword [rsp + 0x54], 0xffffffff
mov dword [rsp + 0x50], r12d
mov qword [rbp - 0x50], r12
mov qword [rbp - 0x70], r12
mov dword [rbp - 0x78], eax
mov qword [rbp - 0x68], r12
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], r12
mov qword [rbp + 0xa0], r12
call qword [sym.imp.VssTrace.DLL_Ordinal_10]
test eax, eax
js 0x14004b5cf
lea rcx, [rsp + 0x50]
call qword [sym.imp.VssTrace.DLL_Ordinal_9]
test eax, eax
js 0x14004b5cf
mov rax, qword [rbp + 0xa0]
mov qword [rbp - 0x50], rax
test rax, rax
je 0x14004b5d8
mov eax, dword [rax + 0x30]
inc eax
mov dword [rbp - 0x80], eax
mov ebx, dword [rbp - 0x78]
cmp ebx, 0xff
jne 0x14004b3f6
mov ebx, RegisterTypeLib
mov edi, dword [rsp + 0x74]
call qword [sym.imp.VssTrace.DLL_Ordinal_5]
test eax, eax
jne 0x140064722
cmp byte [rbp + 0x63], r12b
je 0x14004b435
lea rbx, [rbp - 0x18]
mov edi, 0xf
nop word [rax + rax]
mov rcx, qword [rbx]
test rcx, rcx
jne 0x14006478d
add rbx, 8
dec rdi
jne 0x14004b420
mov rdi, qword [r15 + 8]
mov rax, qword [rdi]
mov rbx, qword [rax]
mov rcx, rbx
call qword [fcn.14005e6a0]
mov r8, rsi
mov rdx, r14
mov rcx, rdi
call rbx
mov edi, eax
mov dword [rsp + 0x58], eax
test eax, eax
js 0x14004b569
mov rbx, r12
mov rcx, qword [rbp + rbx*8 - 0x70]
call qword [sym.imp.api_ms_win_core_com_l1_1_1.dll_CoTaskMemFree]
mov qword [rbp + rbx*8 - 0x70], r12
inc rbx
cmp rbx, 4
jl 0x14004b464
call qword [sym.imp.api_ms_win_core_sysinfo_l1_2_1.dll_GetTickCount]
mov r8d, dword [rbp - 0x78]
mov r9d, eax
mov eax, 0x10624dd3
sub r9d, dword [rbp - 0x7c]
mov esi, r9d
mul r9d
mov eax, 0x88888889
mov r10d, edx
shr r10d, 6
mul r10d
imul ecx, r10d, 0x3e8
shr edx, 5
sub esi, ecx
imul eax, edx, 0x3c
sub r10d, eax
mov eax, 0x45e7b273
mul r9d
mov eax, 0x88888889
mov r11d, edx
shr r11d, 0xe
mul r11d
mov eax, 0x95217cb1
shr edx, 5
imul ecx, edx, 0x3c
mul r9d
mov eax, 0x88888889
mov ebx, edx
sub r11d, ecx
shr ebx, 0x15
mul ebx
shr edx, 5
imul eax, edx, 0x3c
sub ebx, eax
cmp r8d, 0xff
jne 0x14004b505
mov r8d, RegisterTypeLib
mov ecx, dword [rsp + 0x58]
lea rdx, [0x1400043d0]
mov dword [rsp + 0x48], ecx
mov dword [rsp + 0x40], r9d
mov dword [rsp + 0x38], esi
mov dword [rsp + 0x30], r10d
mov dword [rsp + 0x28], r11d
lea r9, [0x1400043e0]
lea rcx, [rsp + 0x50]
mov dword [rsp + 0x20], ebx
call fcn.140051070
mov rcx, qword [rbp - 0x50]
call qword [sym.imp.VssTrace.DLL_Ordinal_9]
lea r11, [rsp + 0x170]
mov eax, edi
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
lea rax, [0x140003b30]
xor edx, edx
lea rcx, [rbp - 0x18]
mov qword [rbp - 0x38], rax
lea rax, [0x140003a28]
lea r8d, [rdx + 0x78]
mov qword [rbp - 0x40], r13
mov dword [rbp - 0x28], 0x80
mov dword [rbp - 0x24], 1
mov qword [rbp - 0x30], rax
mov dword [rbp - 0x20], 0xff
mov dword [rbp + 0x60], 0x1000000
call sub.msvcrt.dll_memset
lea r8, [0x140003ba0]
lea rdx, [rbp - 0x40]
lea rcx, [rsp + 0x50]
mov r9d, edi
call fcn.1400510b0
mov edi, dword [rsp + 0x58]
jmp 0x14004b461
mov rax, qword [rbp - 0x50]
jmp 0x14004b3d5
mov dword [rbp - 0x80], r12d
jmp 0x14004b3e6
mov ecx, edi
call qword [sym.imp.VssTrace.DLL_Ordinal_7]
test eax, eax
je 0x14004b408
lea rcx, [rsp + 0x50]
call fcn.140103ce0
cmp dword [rsp + 0x50], r12d
je 0x14004b408
mov r9d, dword [rbp - 0x80]
mov r8d, dword [rsp + 0x70]
mov rdx, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x60]
mov qword [rsp + 0x40], r12
mov dword [rsp + 0x38], ebx
lea rax, [0x1400043c0]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x28], rax
mov eax, dword [rsp + 0x74]
mov dword [rsp + 0x20], eax
call qword [sym.imp.VssTrace.DLL_Ordinal_3]
nop
jmp 0x14004b408
call qword [sym.imp.api_ms_win_core_com_l1_1_1.dll_CoTaskMemFree]
mov qword [rbx], r12
jmp 0x14004b42c