Function at 0x180014310
Capabilities:
Check for time delay via gettickcount

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x10], rdx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x80
mov edi, dword [rsp + 0xe0]
mov rsi, r9
mov ebx, dword [rsp + 0xe0]
mov r14, r8
imul eax, edi, 0x3f0
mov r15d, edi
mov dword [rsp + 0x48], edi
mov dword [rsp + 0x60], eax
cmp edi, eax
ja 0x18001446e
mov r12d, dword [rsp + 0xe0]
lea rdx, [0x180032a40]
mov ebp, dword [rsp + 0xe0]
movzx r13d, byte [rsp + 0xe0]
nop dword [rax]
cmp r15d, 0x22ca
ja 0x1800147bb
je 0x1800147aa
cmp r15d, 0xe9
ja 0x180014568
je 0x1800144f8
cmp r15d, 0x25
je 0x1800144d2
cmp r15d, 0x59
je 0x1800143e9
cmp r15d, 0x7a
jne 0x1800144b9
mov rcx, qword [r14 + 0x260]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [r14 + 0x268]
call fcn.180064900
mov dword [r14 + 0x270], 0
jmp 0x1800144b2
mov r9, qword [0x180071828]
xor r8d, r8d
xor ecx, ecx
mov qword [rsp + 0x20], 0
lea edx, [r8 + 0x75]
call fcn.1800248e0
test al, al
je 0x180014829
mov r9, qword [0x180071828]
lea rcx, [rsp + 0x40]
xor r8d, r8d
mov byte [rsp + 0x40], 1
mov edx, 0xa2
mov qword [rsp + 0x20], 0
call fcn.1800248e0
xor eax, eax
xor r9d, r9d
mov qword [rsp + 0x28], rax
xor edx, edx
mov r8d, 0x105
mov qword [rsp + 0x20], rax
mov rcx, r14
call fcn.180063b30
test al, al
jne 0x1800144b2
mov edi, 0x128
nop
mov eax, edi
sub eax, 0x128
je 0x18001448b
cmp eax, 1
jne 0x1800144a1
mov eax, ebx
mov rbx, qword [rsp + 0xc0]
add rsp, 0x80
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov rdx, qword [0x180071828]
xor r8d, r8d
mov ecx, 0xc9
call fcn.180057040
xor ebx, ebx
inc edi
cmp edi, 0x12a
jb 0x180014460
mov edi, dword [rsp + 0xe0]
lea rdx, [0x180032a40]
lea eax, [rdi + rdi*8]
lea r15d, [r15 + rax*8]
mov dword [rsp + 0x48], r15d
cmp r15d, dword [rsp + 0x60]
jbe 0x180014380
jmp 0x18001446e
mov rax, qword [rsp + 0xc8]
cmp byte [rax], 0xc2
jb 0x1800144f1
movzx eax, byte [rax + 1]
test al, al
jns 0x1800144f1
and al, 0xc0
cmp al, 0xc0
je 0x1800144f1
xor ebx, ebx
jmp 0x1800144b9
mov ebx, 1
jmp 0x1800144b9
mov rax, qword [rsp + 0xc8]
mov ecx, dword [rax]
cmp ecx, 0xf
je 0x180014830
cmp ecx, 0x1b
jne 0x18001453a
mov ecx, 0xf1
mov eax, ecx
sub eax, 0xf1
je 0x18001452d
cmp eax, 1
jne 0x180014530
mov eax, 0x26
jmp 0x180014470
mov qword [r14], rdx
inc ecx
cmp ecx, 0xf3
jb 0x180014515
mov rax, qword [rsp + 0xc8]
lea r8, [rsp + 0x50]
mov r9, r14
mov dword [rsp + 0x20], 0x1d
xor edx, edx
mov ecx, dword [rax]
mov dword [rsp + 0x50], ecx
xor ecx, ecx
call fcn.180005960
mov ebx, eax
jmp 0x1800144b2
cmp r15d, 0x115
je 0x1800146df
cmp r15d, 0xa8d
je 0x18001446e
cmp r15d, 0x1961
jne 0x1800144b9
mov rcx, qword [r14 + 0x28]
xor r12d, r12d
call qword [r14 + 0x20]
test al, al
je 0x1800146c6
mov r15d, dword [rsp + 0x58]
mov esi, 0xb2
nop dword [rax]
mov eax, esi
sub eax, 0xae
je 0x180014647
sub eax, 1
je 0x180014627
sub eax, 1
je 0x1800145f5
sub eax, 1
je 0x1800145e7
cmp eax, 1
jne 0x18001469f
movzx r13d, al
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r15d, eax
jmp 0x18001469f
mov qword [rsp + 0x70], 0
jmp 0x18001469f
xor r9d, r9d
mov r8, r14
xor ecx, ecx
lea edx, [r9 + 0x5c]
call fcn.18001ae50
lea r9, [rsp + 0x70]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call sub.RPCRT4.dll_MesEncodeIncrementalHandleCreate
mov ebp, eax
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r12d, eax
sub r12d, r15d
jmp 0x18001469f
xor ecx, ecx
mov eax, 0x10624dd3
mul r12d
movzx eax, r13b
mov r12d, edx
shr r12d, 6
test ebp, ebp
cmove ecx, eax
movzx r13d, cl
jmp 0x18001469f
test r13b, r13b
je 0x18001469b
mov edi, 0x2b
cmp edi, 0x2b
je 0x180014665
cmp edi, 0x14d4
jne 0x18001468d
mov rcx, qword [rsp + 0x68]
jmp 0x180014683
lea r8, [rsp + 0x68]
mov qword [rsp + 0x68], 0
xor edx, edx
xor ecx, ecx
call sub.RPCRT4.dll_MesDecodeIncrementalHandleCreate
mov rcx, qword [rsp + 0x70]
mov ebp, eax
test rcx, rcx
je 0x18001468d
call sub.RPCRT4.dll_MesHandleFree
add edi, 0x14a9
cmp edi, 0x2952
jbe 0x180014651
call qword [r14 + 0x50]
dec esi
cmp esi, 0xad
ja 0x1800145b0
mov rsi, qword [rsp + 0xd8]
mov edi, dword [rsp + 0xe0]
mov dword [rsp + 0x58], r15d
mov r15d, dword [rsp + 0x48]
mov rdx, qword [0x180071828]
xor r8d, r8d
mov ecx, 0xc9
call fcn.180057040
jmp 0x1800144b2
mov rax, qword [r14]
lea rdx, [rsp + 0x40]
mov r9, qword [rsp + 0xe8]
lea rcx, [rsp + 0xc8]
mov dword [rsp + 0x30], 0x72
mov qword [rsp + 0x28], rsi
cmp byte [rax + 0x384], 0
mov r8, qword [rax + 0x120]
mov qword [rsp + 0x78], rax
sete byte [rsp + 0x40]
lea rax, [rsp + 0x78]
mov qword [rsp + 0x20], rax
call fcn.1800438f0
mov dword [rsp + 0x5c], eax
test eax, eax
jne 0x180014470
cmp qword [rsp + 0xc8], 0
je 0x1800144b2
mov edi, 0xc6
nop dword [rax + rax]
mov ecx, edi
sub ecx, 0xc6
je 0x18001478a
sub ecx, 1
je 0x18001476a
cmp ecx, 1
je 0x18001446e
jmp 0x18001479b
mov r8, qword [rsp + 0xe8]
mov r9, rsi
mov rdx, qword [rsp + 0xc8]
mov rcx, qword [r14]
call qword [0x180071f68]
mov ebx, eax
jmp 0x18001479b
mov rcx, qword [r14]
mov rax, qword [0x180071f68]
mov qword [rcx + 0x218], rax
inc edi
cmp edi, 0xc9
jb 0x180014750
jmp 0x1800144ab
mov rcx, qword [r14 + 0x278]
call fcn.180064900
jmp 0x1800144b2
cmp r15d, 0x4b71
ja 0x180014805
je 0x18001446e
cmp r15d, 0x3269
je 0x1800147fd
cmp r15d, 0x4271
je 0x18001446e
cmp r15d, 0x451a
jne 0x1800144b9
mov dword [r14 + 0x280], 0
jmp 0x1800144b9
mov ebx, r12d
jmp 0x1800144b9
cmp r15d, 0x4efd
je 0x180014820
cmp r15d, 0x9ce5
je 0x18001446e
jmp 0x1800144b9
mov ebx, dword [rsp + 0x5c]
jmp 0x1800144b9
xor eax, eax
jmp 0x180014470
mov eax, 0x21
jmp 0x180014470