Function at 0x14001e1e8
Capabilities:
Check for time delay via gettickcount

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x50
xor ebx, ebx
movsxd r14, edx
cmp dword [rcx + 8], 1
mov rbp, r9
mov r15, r8
mov rdi, rcx
mov esi, ebx
mov r13d, ebx
je 0x14001e6b0
cmp dword [rcx + 0x90], ebx
jne 0x14001e230
xor eax, eax
jmp 0x14001e6b5
cmp r14d, 0x20
ja 0x14001e6a9
call fcn.140034a20
test eax, eax
je 0x14001e6a2
call fcn.1400349a8
test eax, eax
je 0x14001e6a2
cmp dword [rdi + 8], 1
je 0x14001e6b0
lea rax, [rdi + 0x40]
mov rcx, rax
mov qword [rsp + 0x48], rax
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
nop dword [rax + rax]
cmp dword [rdi + 8], 1
jne 0x14001e286
mov esi, 0x8007045b
jmp 0x14001e67b
test rbp, rbp
je 0x14001e2d2
mov rcx, qword [rdi + 0x88]
test rcx, rcx
je 0x14001e2a8
mov edx, reloc.OLEAUT32.dll_SafeArrayGetDim
call fcn.1400037a4
mov qword [rdi + 0x88], rbx
cmp qword [rdi + 0x78], rbx
je 0x14001e2d2
mov rcx, qword [rdi + 0x70]
xor r8d, r8d
mov rdx, rbp
call qword [sym.imp.KERNEL32.dll_DeleteTimerQueueTimer]
nop dword [rax + rax]
cmp rbp, qword [rdi + 0x78]
jne 0x14001e67b
mov qword [rdi + 0x78], rbx
cmp qword [rdi + 0x10], rbx
je 0x14001e67b
lea eax, [r14 + 2]
movsxd rcx, eax
mov eax, 4
mul rcx
mov rcx, 0xffffffffffffffff
cmovo rax, rcx
mov rcx, rax
call fcn.140003b34
mov r13, rax
mov word [rsp + 0x80], bx
mov ebp, ebx
call qword [sym.imp.KERNEL32.dll_GetTickCount]
nop dword [rax + rax]
mov r8, rbx
mov r12d, eax
test r14, r14
jle 0x14001e3b1
mov rdx, r13
mov r10d, dword [rdi + 0x38]
mov ecx, ebx
mov r9, rbx
test r10d, r10d
jle 0x14001e352
mov r11d, dword [r15 + r8*4]
lea rax, [rdi + 0x18]
cmp dword [rax], r11d
je 0x14001e35f
inc ecx
inc r9
add rax, 0x10
cmp ecx, r10d
jl 0x14001e33f
cmp ecx, r10d
jne 0x14001e35f
mov eax, dword [r15 + r8*4]
mov dword [rdx], eax
jmp 0x14001e39f
mov rcx, r9
add rcx, rcx
cmp byte [rdi + rcx*8 + 0x24], 1
jne 0x14001e38b
lea rax, [r9 + 2]
add rax, rax
cmp r12d, dword [rdi + rax*8]
jb 0x14001e384
mov eax, dword [rdi + rcx*8 + 0x1c]
not eax
cmp r12d, eax
jbe 0x14001e38b
mov byte [rdi + rcx*8 + 0x25], 1
jmp 0x14001e3a5
mov eax, dword [r15 + r8*4]
mov dword [rdx], eax
mov word [rdi + rcx*8 + 0x24], bx
mov byte [rsp + r9 + 0x80], 1
inc ebp
add rdx, 4
inc r8
cmp r8, r14
jl 0x14001e329
or r15d, 0xffffffff
mov edx, ebx
mov r14d, r15d
cmp dword [rdi + 0x38], ebx
jle 0x14001e41a
movsxd rax, ebp
lea r8, [rsp + 0x80]
lea rcx, [rdi + 0x25]
lea r9, [rax*4]
add r9, r13
cmp byte [rcx], bl
je 0x14001e40c
cmp r12d, dword [rcx - 5]
jb 0x14001e403
mov eax, dword [rcx - 9]
not eax
cmp r12d, eax
ja 0x14001e403
mov eax, dword [rcx - 0xd]
inc ebp
mov dword [r9], eax
add r9, 4
mov word [rcx - 1], bx
mov byte [r8], 1
jmp 0x14001e40c
cmp r14d, dword [rcx - 9]
cmova r14d, dword [rcx - 9]
inc edx
inc r8
add rcx, 0x10
cmp edx, dword [rdi + 0x38]
jl 0x14001e3d9
cmp dword [rdi + 8], 1
je 0x14001e27c
test ebp, ebp
jle 0x14001e505
mov rcx, qword [rdi + 0x10]
mov rax, qword [rcx]
movabs r10, 0xd4c5bf9b5ad58070
mov rax, qword [rax + 0x28]
xor r9d, r9d
xor r8d, r8d
mov rdx, rbx
call qword [case.0x140071786.0]
mov rcx, qword [rdi + 0x10]
lea r8, [rsp + 0x40]
lea rdx, [0x1400b1980]
call qword [sym.imp.ole32.dll_CoUnmarshalInterface]
nop dword [rax + rax]
mov esi, eax
test eax, eax
js 0x14001e5f3
mov rcx, qword [rsp + 0x40]
mov rax, qword [rcx]
movabs r10, 0xc7d4be21105a2170
mov rax, qword [rax + 0x18]
mov r8, r13
mov edx, ebp
call qword [case.0x140071786.0]
mov rcx, qword [rsp + 0x40]
mov esi, eax
mov rax, qword [rcx]
movabs r10, 0xbaac1f10365eb170
mov rax, qword [rax + 0x10]
call qword [case.0x140071786.0]
test esi, esi
js 0x14001e5f3
call qword [sym.imp.KERNEL32.dll_GetTickCount]
nop dword [rax + rax]
mov r10d, ebx
cmp dword [rdi + 0x38], ebx
jle 0x14001e502
lea r9, [rsp + 0x80]
lea r8, [rdi + 0x20]
cmp byte [r9], bl
je 0x14001e4f2
mov edx, dword [r8 - 4]
add edx, eax
mov word [r8 + 4], 1
mov dword [r8], edx
inc r10d
inc r9
add r8, 0x10
cmp r10d, dword [rdi + 0x38]
jl 0x14001e4dd
mov dword [rdi + 0x68], ebx
cmp r14d, r15d
je 0x14001e67b
mov rcx, qword [rdi + 0x70]
cmp rcx, 0xffffffffffffffff
je 0x14001e67b
mov rdx, qword [rdi + 0x78]
test rdx, rdx
jne 0x14001e657
cmp dword [rdi + 8], 1
je 0x14001e27c
mov rcx, qword [rdi + 0x88]
test rcx, rcx
je 0x14001e550
mov edx, reloc.OLEAUT32.dll_SafeArrayGetDim
call fcn.1400037a4
mov qword [rdi + 0x88], rbx
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetDim
call fcn.140003ae4
mov qword [rsp + 0x80], rax
mov r15, rax
mov qword [rax], rdi
call qword [sym.imp.KERNEL32.dll_GetTickCount]
nop dword [rax + rax]
mov rdx, qword [rdi + 0x70]
lea rbp, [r15 + 8]
mov dword [rsp + 0x30], 0x28
lea r8, [0x14001e6e0]
mov rcx, rbp
mov dword [rsp + 0x28], ebx
mov r9, r15
mov qword [rdi + 0x88], r15
mov r12d, eax
mov dword [rsp + 0x20], r14d
call qword [sym.imp.KERNEL32.dll_CreateTimerQueueTimer]
nop dword [rax + rax]
test eax, eax
jne 0x14001e643
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
mov esi, eax
test eax, eax
jle 0x14001e5d3
movzx esi, ax
or esi, 0x80070000
mov qword [rdi + 0x88], rbx
mov edx, reloc.OLEAUT32.dll_SafeArrayGetDim
mov rcx, r15
mov qword [rbp], rbx
mov qword [r15], rbx
call fcn.1400037a4
jmp 0x14001e67b
mov ecx, dword [rdi + 0x68]
lea eax, [rcx + 1]
mov dword [rdi + 0x68], eax
cmp ecx, 3
jae 0x14001e502
mov edx, ebx
cmp dword [rdi + 0x38], ebx
jle 0x14001e63c
lea rcx, [rsp + 0x80]
mov r8d, 0x64
lea rax, [rdi + 0x24]
cmp byte [rcx], bl
je 0x14001e62e
cmp r14d, r8d
mov word [rax], 0x101
cmova r14d, r8d
inc edx
inc rcx
add rax, 0x10
cmp edx, dword [rdi + 0x38]
jl 0x14001e61e
mov esi, ebx
jmp 0x14001e505
mov rax, qword [rbp]
mov qword [rdi + 0x78], rax
lea eax, [r12 + r14]
mov dword [rdi + 0x80], eax
jmp 0x14001e67b
lea eax, [r14 + r12]
cmp eax, dword [rdi + 0x80]
jae 0x14001e679
xor r9d, r9d
mov r8d, r14d
call qword [sym.imp.KERNEL32.dll_ChangeTimerQueueTimer]
nop dword [rax + rax]
test eax, eax
jne 0x14001e67b
mov esi, ebx
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop dword [rax + rax]
test r13, r13
je 0x14001e699
mov rcx, r13
call fcn.140003b28
test esi, esi
cmovns esi, ebx
mov eax, esi
jmp 0x14001e6b5
mov eax, 0x8000ffff
jmp 0x14001e6b5
mov eax, 0x80070057
jmp 0x14001e6b5
mov eax, 0x8007045b
lea r11, [rsp + 0x50]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret