Function at 0x14006d014
Capabilities:
Check for time delay via gettickcount

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x80
mov rax, qword [0x1400a9008]
xor rax, rsp
mov qword [rbp - 8], rax
mov esi, dword [rcx + 0x48]
lea rbx, [0x1400a92b0]
mov qword [rbp - 0x28], rdx
mov r12, rdx
mov r14, rcx
test esi, esi
js 0x14006d493
lea r15, [rcx + 0x20]
mov rcx, r15
call qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_EnterCriticalSection]
inc dword [r14 + 0x60]
mov eax, dword [r14 + 0x60]
cmp eax, dword [r14 + 0x5c]
jae 0x14006d41d
call qword [sym.imp.api_ms_win_core_sysinfo_l1_2_1.dll_GetTickCount]
sub eax, dword [r14 + 0x64]
cmp eax, dword [r14 + 0x58]
jae 0x14006d41d
lea r13, [r14 + 0x50]
cmp qword [r13], 0
jne 0x14006d455
mov rcx, r15
call qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_LeaveCriticalSection]
mov rcx, qword [0x1400a92b0]
cmp rcx, rbx
je 0x14006d0d1
test byte [rcx + 0x1c], 2
je 0x14006d0d1
mov rcx, qword [rcx + 0x10]
lea r8, [0x14009d7f0]
mov edx, 0xb
call fcn.14003d1bc
mov rcx, qword [0x1400a92b0]
and qword [rbp - 0x38], 0
mov r9d, dword [r14 + 0x68]
test r9d, r9d
jne 0x14006d109
xor edx, edx
lea rax, [rbp - 0x38]
lea r9, [0x14009d820]
mov qword [rsp + 0x20], rax
lea rcx, [0x14009d830]
lea r8d, [rdx + 4]
call qword [sym.imp.api_ms_win_core_com_l1_1_1.dll_CoCreateInstance]
mov esi, eax
jmp 0x14006d322
cmp rcx, rbx
je 0x14006d129
test byte [rcx + 0x1c], 2
je 0x14006d129
mov rcx, qword [rcx + 0x10]
lea r8, [0x14009d7f0]
mov edx, 0xc
call fcn.14003d1e0
xor edx, edx
lea rcx, str.ole32.dll
mov r8d, 0x800
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov rdi, rax
test rax, rax
jne 0x14006d14d
call fcn.14004f934
mov esi, eax
xor ebx, ebx
xor r15d, r15d
test esi, esi
js 0x14006d18d
lea rdx, str.CreateBindCtx
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.MkParseDisplayName
mov rcx, rdi
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r15, rax
test rbx, rbx
je 0x14006d186
test rax, rax
jne 0x14006d18d
call fcn.14004f934
mov esi, eax
and qword [rbp - 0x30], 0
test esi, esi
js 0x14006d1a9
mov rcx, rbx
call qword [0x1400719c8]
lea rdx, [rbp - 0x30]
xor ecx, ecx
call rbx
mov esi, eax
mov dword [rbp - 0x18], 0x67727473
lea r12, [0x1400ab2c0]
mov qword [rbp - 0x10], r12
test esi, esi
js 0x14006d1d9
mov r8d, dword [r14 + 0x68]
lea rdx, str.Session:_u_clsid:E7B3C0E0_FB47_49F6_A66B_8A7C2E4E7B9C
lea rcx, [rbp - 0x18]
call fcn.1400167e4
mov r12, qword [rbp - 0x10]
mov esi, eax
xor ebx, ebx
mov qword [rbp - 0x50], rbx
test esi, esi
js 0x14006d204
mov rcx, r15
call qword [0x1400719c8]
mov rcx, qword [rbp - 0x30]
lea r9, [rbp - 0x50]
lea r8, [rbp - 0x20]
mov rdx, r12
call r15
mov rbx, qword [rbp - 0x50]
mov esi, eax
xor r15d, r15d
test rdi, rdi
je 0x14006d219
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov rbx, qword [rbp - 0x50]
mov qword [rbp - 0x40], r15
test esi, esi
js 0x14006d2d6
mov rax, qword [rbx]
mov rdi, qword [rax + 0x40]
mov rcx, rdi
call qword [0x1400719c8]
mov rdx, qword [rbp - 0x30]
lea rax, [rbp - 0x40]
lea r9, [0x14009d7e0]
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rcx, rbx
call rdi
mov esi, eax
test eax, eax
jns 0x14006d28a
mov rcx, qword [0x1400a92b0]
lea rax, [0x1400a92b0]
cmp rcx, rax
je 0x14006d2b0
test byte [rcx + 0x1c], 1
je 0x14006d2b0
mov rcx, qword [rcx + 0x10]
lea r8, [0x14009d7f0]
mov edx, 0xd
mov r9d, esi
call fcn.14003d1e0
jmp 0x14006d2b0
mov rbx, qword [rbp - 0x40]
mov rax, qword [rbx]
mov rdi, qword [rax + 0x18]
mov rcx, rdi
call qword [0x1400719c8]
lea r9, [rbp - 0x38]
xor edx, edx
lea r8, [0x14009d7d0]
mov rcx, rbx
call rdi
mov rbx, qword [rbp - 0x40]
test rbx, rbx
je 0x14006d2d2
mov rax, qword [rbx]
mov rdi, qword [rax + 0x10]
mov rcx, rdi
call qword [0x1400719c8]
mov rcx, rbx
call rdi
mov qword [rbp - 0x40], r15
mov rbx, qword [rbp - 0x50]
test rbx, rbx
je 0x14006d2f4
mov rax, qword [rbx]
mov rdi, qword [rax + 0x10]
mov rcx, rdi
call qword [0x1400719c8]
mov rcx, rbx
call rdi
mov qword [rbp - 0x50], r15
mov rdx, r12
call fcn.140016834
mov rbx, qword [rbp - 0x30]
test rbx, rbx
je 0x14006d31a
mov rax, qword [rbx]
mov rdi, qword [rax + 0x10]
mov rcx, rdi
call qword [0x1400719c8]
mov rcx, rbx
call rdi
mov r12, qword [rbp - 0x28]
lea r15, [r14 + 0x20]
and qword [rbp - 0x48], 0
test esi, esi
js 0x14006d3b2
mov rbx, qword [rbp - 0x38]
mov rax, qword [rbx]
mov rdi, qword [rax + 0x18]
mov rcx, rdi
call qword [0x1400719c8]
lea rdx, [rbp - 0x48]
mov rcx, rbx
call rdi
mov esi, eax
test eax, eax
jns 0x14006d372
mov rcx, qword [0x1400a92b0]
lea rax, [0x1400a92b0]
cmp rcx, rax
je 0x14006d3b2
test byte [rcx + 0x1c], 1
je 0x14006d3b2
mov edx, 0xf
jmp 0x14006d39f
mov rcx, qword [rbp - 0x48]
call fcn.14006de38
mov esi, eax
test eax, eax
jns 0x14006d3b2
mov rcx, qword [0x1400a92b0]
lea rax, [0x1400a92b0]
cmp rcx, rax
je 0x14006d3b2
test byte [rcx + 0x1c], 1
je 0x14006d3b2
mov edx, 0x10
mov rcx, qword [rcx + 0x10]
lea r8, [0x14009d7f0]
mov r9d, esi
call fcn.14003d1e0
mov rcx, r15
call qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_EnterCriticalSection]
test esi, esi
js 0x14006d3f4
cmp qword [r13], 0
jne 0x14006d3f4
mov rax, qword [rbp - 0x48]
xor ebx, ebx
test rax, rax
je 0x14006d3d9
and qword [rbp - 0x48], 0
mov rbx, rax
mov rcx, r13
call fcn.1400242b8
mov qword [r13], rbx
and dword [r14 + 0x60], 0
call qword [sym.imp.api_ms_win_core_sysinfo_l1_2_1.dll_GetTickCount]
mov dword [r14 + 0x64], eax
lea rcx, [rbp - 0x48]
call fcn.1400242b8
mov rbx, qword [rbp - 0x38]
test rbx, rbx
je 0x14006d455
mov rax, qword [rbx]
mov rdi, qword [rax + 0x10]
mov rcx, rdi
call qword [0x1400719c8]
mov rcx, rbx
call rdi
jmp 0x14006d455
mov esi, 0x800106ba
mov rcx, qword [0x1400a92b0]
cmp rcx, rbx
je 0x14006d455
test byte [rcx + 0x1c], 2
je 0x14006d455
mov eax, dword [r14 + 0x58]
lea r8, [0x14009d7f0]
mov r9d, dword [r14 + 0x60]
mov edx, 0xa
mov rcx, qword [rcx + 0x10]
mov dword [rsp + 0x20], eax
call fcn.140057a4c
test r12, r12
je 0x14006d47f
test esi, esi
js 0x14006d47f
mov rax, qword [r14 + 0x50]
mov qword [r12], rax
mov rdi, qword [r14 + 0x50]
mov rax, qword [rdi]
mov rbx, qword [rax + 8]
mov rcx, rbx
call qword [0x1400719c8]
mov rcx, rdi
call rbx
mov rcx, r15
call qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_LeaveCriticalSection]
test esi, esi
jns 0x14006d4bd
lea rbx, [0x1400a92b0]
mov rcx, qword [0x1400a92b0]
cmp rcx, rbx
je 0x14006d4bd
test byte [rcx + 0x1c], 1
je 0x14006d4bd
mov rcx, qword [rcx + 0x10]
lea r8, [0x14009d7f0]
mov edx, 0x11
mov r9d, esi
call fcn.14003d1e0
mov eax, esi
mov rcx, qword [rbp - 8]
xor rcx, rsp
call fcn.140024ca0
mov rbx, qword [rsp + 0xd0]
add rsp, 0x80
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret