Function at 0x14007b960
Capabilities:
Check for time delay via gettickcount
Write file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1ffe0]
mov eax, 0x200e0
call fcn.1400f7000
sub rsp, rax
mov rbx, rdx
mov rdi, rcx
mov rax, qword [0x140134e40]
mov qword [rbp - 0x60], rax
mov rcx, r8
call fcn.140005d80
mov qword [rbp - 0x58], rax
cmp rax, 1
jge 0x14007b9ca
mov rax, qword [0x14012f240]
mov dword [rax + 0x40], 0x57
mov dl, 1
mov rcx, rdi
call fcn.140063df0
jmp 0x14007c005
lea rax, vtable.TextStream.0
mov qword [rsp + 0x40], rax
xor esi, esi
mov qword [rsp + 0x48], rsi
mov dword [rsp + 0x50], esi
mov dword [rsp + 0x54], 0xffffffff
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x70], xmm0
mov ecx, dword [0x140136ec8]
cmp ecx, 0xffffffff
je 0x14007ba15
mov dword [rsp + 0x54], ecx
lea rdx, [rsp + 0x58]
call qword [sym.imp.KERNEL32.dll_GetCPInfo]
test eax, eax
jne 0x14007ba15
mov byte [rsp + 0x5e], sil
lea rax, vtable.TextFile.0
mov qword [rsp + 0x40], rax
mov qword [rbp - 0x80], 0xffffffffffffffff
mov rax, qword [0x14012f240]
mov r9d, dword [rax + 0x13c]
btr r9d, 0x1f
mov r8d, 0x30c
mov rdx, rbx
lea rcx, [rsp + 0x40]
call fcn.1400d3360
test al, al
jne 0x14007ba68
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [0x14012f240]
mov dword [rcx + 0x40], eax
jmp 0x14007bf58
mov eax, dword gs:[0x48]
mov dword [rbp - 0x6c], eax
mov qword [rbp - 0x68], rsi
mov r14d, 2
nop dword [rax]
mov r13d, 1
mov r8d, dword [rsp + 0x4c]
test r8d, r8d
je 0x14007baae
cmp qword [rsp + 0x70], 0
jne 0x14007baae
mov rdx, qword [rsp + 0x78]
lea rcx, [rsp + 0x40]
mov rax, qword [rsp + 0x40]
call qword [rax + 0x20]
mov dword [rsp + 0x4c], esi
mov word [rsp + 0x6c], si
mov ebx, esi
mov r12d, dword [rsp + 0x54]
mov edi, esi
cmp r12d, 0x4b0
sete dil
inc edi
mov dword [rbp + 0x20038], edi
mov edx, edi
lea rcx, [rsp + 0x40]
call fcn.1400d3220
mov ecx, dword [rsp + 0x4c]
test al, al
jne 0x14007baeb
test ecx, ecx
je 0x14007bda4
mov edx, edi
mov dword [rbp - 0x70], edx
mov rsi, qword [rsp + 0x70]
mov r15, rcx
add r15, qword [rsp + 0x78]
cmp r12d, 0x4b0
jne 0x14007bb1d
movzx eax, r15b
sub al, sil
test al, 1
je 0x14007bb1d
dec r15
cmp r15, rsi
je 0x14007bd8b
cmp rsi, r15
jae 0x14007bd0b
nop word [rax + rax]
cmp ebx, 0xffff
jae 0x14007bd6d
cmp r12d, 0x4b0
jne 0x14007bb8f
movzx eax, word [rsi]
cmp ax, 0xd
jne 0x14007bb85
lea rcx, [rsi + 4]
cmp rcx, r15
ja 0x14007bb7a
cmp word [rsi + 2], 0xa
jne 0x14007bb85
test byte [rsp + 0x48], 4
jne 0x14007bcea
mov ecx, ntohs
mov eax, ebx
mov word [rbp + rax*2 - 0x20], cx
jmp 0x14007bce8
cmp dword [rsp + 0x50], 0
jne 0x14007bd1a
mov word [rsp + 0x30], ax
jmp 0x14007bc75
mov r14d, 1
movsx edx, byte [rsi]
cmp dl, 0x80
jae 0x14007bbca
cmp dl, 0xd
jne 0x14007bbbd
lea rax, [rsi + 1]
cmp rax, r15
jae 0x14007bbb2
cmp byte [rax], 0xa
jne 0x14007bbbd
jmp 0x14007bb5e
cmp dword [rsp + 0x50], 0
jne 0x14007bd27
movzx eax, dx
mov word [rsp + 0x30], dx
jmp 0x14007bc75
cmp r12d, 0xfde9
jne 0x14007bc22
movzx eax, dl
and al, 0xe0
cmp al, 0xc0
jne 0x14007bbe6
mov ecx, 2
mov r14d, ecx
jmp 0x14007bc37
movzx eax, dl
and al, 0xf0
cmp al, 0xe0
jne 0x14007bbfc
mov ecx, 2
mov r14d, 3
jmp 0x14007bc37
and dl, 0xf8
cmp dl, 0xf0
jne 0x14007bc11
mov ecx, 2
mov r14d, 4
jmp 0x14007bc37
mov ecx, 0xfffd
mov eax, ebx
mov word [rbp + rax*2 - 0x20], cx
jmp 0x14007bce8
lea rcx, [rsp + 0x40]
call fcn.1400d3330
test al, al
mov ecx, 2
cmovne r14d, ecx
mov eax, r14d
add rax, rsi
cmp rax, r15
ja 0x14007bd32
mov dword [rsp + 0x28], ecx
lea rax, [rsp + 0x30]
mov qword [rsp + 0x20], rax
mov r9d, r14d
mov r8, rsi
mov edx, 8
mov ecx, r12d
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
movsxd rcx, eax
cmp ecx, 1
jne 0x14007bcae
movzx eax, word [rsp + 0x30]
cmp ax, 0xd
jne 0x14007bc90
test byte [rsp + 0x48], 8
je 0x14007bca5
mov edi, 0xa
mov eax, edi
mov word [rsp + 0x30], ax
jmp 0x14007bc9b
cmp ax, 0xa
jne 0x14007bca5
mov edi, 0xa
sub r13d, 1
je 0x14007bdb5
mov ecx, ebx
mov word [rbp + rcx*2 - 0x20], ax
jmp 0x14007bce8
mov eax, ebx
lea r9, [rbp - 0x20]
lea r9, [r9 + rax*2]
test ecx, ecx
je 0x14007bce2
lea edi, [rcx + rbx]
cmp edi, 0xffff
ja 0x14007bdda
mov r8, rcx
add r8, r8
lea rdx, [rsp + 0x30]
mov rcx, r9
call sub.VCRUNTIME140.dll_memcpy
mov ebx, edi
jmp 0x14007bcea
mov word [r9], 0xfffd
inc ebx
mov eax, r14d
add rsi, rax
mov r14d, 2
cmp rsi, r15
jb 0x14007bb30
mov edx, dword [rbp - 0x70]
mov edi, dword [rbp + 0x20038]
cmp rsi, r15
jne 0x14007bd76
xor esi, esi
mov dword [rsp + 0x4c], esi
mov qword [rsp + 0x70], rsi
jmp 0x14007bd7d
mov edx, 4
mov r14d, 2
jmp 0x14007bd02
mov r14d, 2
mov edx, r14d
jmp 0x14007bd02
mov edi, dword [rbp + 0x20038]
cmp dword [rsp + 0x50], 0
jne 0x14007bd62
mov dword [rsp + 0x4c], 0
xor esi, esi
mov eax, ebx
mov ecx, 0xfffd
mov word [rbp + rax*2 - 0x20], cx
inc ebx
mov edx, dword [rbp - 0x70]
mov r14d, 2
jmp 0x14007bd08
mov edx, r14d
mov r14d, 2
jmp 0x14007bd08
mov edx, dword [rbp - 0x70]
mov edi, dword [rbp + 0x20038]
mov qword [rsp + 0x70], rsi
xor esi, esi
cmp ebx, 0xffff
jb 0x14007bad1
jmp 0x14007bde5
xor esi, esi
mov qword [rsp + 0x70], rsi
mov dword [rsp + 0x4c], esi
mov eax, ebx
mov ecx, 0xfffd
mov word [rbp + rax*2 - 0x20], cx
inc ebx
cmp ebx, 0xffff
jae 0x14007bde5
mov eax, ebx
mov word [rbp + rax*2 - 0x20], si
jmp 0x14007bde5
mov eax, ebx
mov word [rbp + rax*2 - 0x20], di
inc ebx
mov eax, r14d
add rax, rsi
mov qword [rsp + 0x70], rax
xor esi, esi
cmp ebx, 0xffff
jae 0x14007bde5
mov word [rbp + rbx*2 - 0x20], si
jmp 0x14007bde5
mov qword [rsp + 0x70], rsi
xor esi, esi
mov word [r9], si
test ebx, ebx
je 0x14007bf07
call qword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [0x140136c64]
mov rcx, qword [0x14012f240]
cmp eax, dword [rcx + 0x118]
jbe 0x14007be4a
mov dword [rsp + 0x20], esi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp - 0x50]
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x14007be3e
mov r14d, dword [rbp - 0x6c]
cmp dword [0x140136030], r14d
jne 0x14007be3e
mov edx, 1
mov ecx, 0xffffffff
call fcn.140001b00
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x140136c64], eax
mov r14, qword [rbp - 0x68]
inc r14
mov qword [rbp - 0x68], r14
cmp r14, qword [rbp - 0x58]
mov r14d, 2
jl 0x14007ba80
mov r8d, dword [rsp + 0x4c]
test r8d, r8d
je 0x14007bea1
cmp qword [rsp + 0x70], 0
jne 0x14007bea1
mov rdx, qword [rsp + 0x78]
lea rcx, [rsp + 0x40]
mov rax, qword [rsp + 0x40]
call qword [rax + 0x20]
mov dword [rsp + 0x4c], esi
mov word [rsp + 0x6c], si
mov rax, qword [rsp + 0x40]
lea rcx, [rsp + 0x40]
call qword [rax + reloc.WSOCK32.dll_recv]
jmp 0x14007beb3
mov word [rsp + 0x6c], si
lea rcx, [rsp + 0x40]
mov rax, qword [rsp + 0x40]
call qword [rax + reloc.WSOCK32.dll_recv]
lea edx, [rbx - 1]
cmp word [rbp + rdx*2 - 0x20], 0xa
jne 0x14007bed2
mov ebx, edx
test edx, edx
jne 0x14007bed2
xor r9d, r9d
xor edx, edx
mov r8, 0xffffffffffffffff
jmp 0x14007bedc
mov r8d, ebx
xor r9d, r9d
lea rdx, [rbp - 0x20]
mov byte [rsp + 0x20], 1
mov rcx, qword [rbp - 0x60]
call fcn.1400dc860
test eax, eax
jne 0x14007bef2
mov ebx, esi
jmp 0x14007bf64
mov rax, qword [0x14012f240]
mov dword [rax + 0x40], esi
xor edx, edx
mov rcx, qword [rbp + 0x20020]
jmp 0x14007bf5d
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [0x14012f240]
mov dword [rcx + 0x40], eax
mov r8d, dword [rsp + 0x4c]
test r8d, r8d
je 0x14007bf3f
cmp qword [rsp + 0x70], 0
jne 0x14007bf3f
mov rdx, qword [rsp + 0x78]
lea rcx, [rsp + 0x40]
mov rax, qword [rsp + 0x40]
call qword [rax + 0x20]
mov dword [rsp + 0x4c], esi
mov word [rsp + 0x6c], si
lea rcx, [rsp + 0x40]
mov rax, qword [rsp + 0x40]
call qword [rax + reloc.WSOCK32.dll_recv]
mov rdi, qword [rbp + 0x20020]
mov dl, 1
mov rcx, rdi
call fcn.140063df0
mov ebx, eax
lea rax, vtable.TextFile.0
mov qword [rsp + 0x40], rax
mov r8d, dword [rsp + 0x4c]
test r8d, r8d
je 0x14007bfa7
cmp qword [rsp + 0x70], 0
jne 0x14007bfa7
mov dword [rbp + 0x20038], esi
mov qword [rsp + 0x20], rsi
lea r9, [rbp + 0x20038]
mov rdx, qword [rsp + 0x78]
mov rcx, qword [rbp - 0x80]
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov dword [rsp + 0x4c], esi
mov word [rsp + 0x6c], si
mov rcx, qword [rbp - 0x80]
cmp rcx, 0xffffffffffffffff
je 0x14007bfd4
mov eax, dword [rsp + 0x48]
and eax, 0x10000003
cmp eax, 0x10000000
je 0x14007bfcc
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbp - 0x80], 0xffffffffffffffff
lea rax, vtable.TextStream.0
mov qword [rsp + 0x40], rax
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x14007c003
xor edx, edx
mov r8d, 0x2000
call sub.VCRUNTIME140.dll_memset
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
nop
mov eax, ebx
mov rbx, qword [rsp + 0x20128]
add rsp, 0x200e0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret