Function at 0x14007e4d4
Capabilities:
Check for time delay via gettickcount

Disassembly:
mov qword [rsp + 0x10], rdx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x58
mov edi, dword [rcx + 0x48]
lea rbx, [0x1400be2f8]
xor r15d, r15d
mov r14, rdx
mov rsi, rcx
test edi, edi
js 0x14007e944
lea r13, [rcx + 0x20]
mov rcx, r13
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_EnterCriticalSection]
nop dword [rax + rax]
inc dword [rsi + 0x60]
mov eax, dword [rsi + 0x60]
cmp eax, dword [rsi + 0x5c]
jae 0x14007e982
call qword [sym.imp.api_ms_win_core_sysinfo_l1_1_0.dll_GetTickCount]
nop dword [rax + rax]
sub eax, dword [rsi + 0x64]
cmp eax, dword [rsi + 0x58]
jae 0x14007e982
lea r12, [rsi + 0x50]
cmp qword [r12], r15
jne 0x14007e906
mov rcx, r13
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
nop dword [rax + rax]
mov rcx, qword [0x1400be2f8]
cmp rcx, rbx
je 0x14007e58b
test byte [rcx + 0x1c], 2
je 0x14007e58b
mov rcx, qword [rcx + 0x10]
lea edx, [r15 + 0xb]
lea r8, [0x1400b42e8]
call fcn.14002c20c
mov rcx, qword [0x1400be2f8]
mov r9d, dword [rsi + 0x68]
mov qword [rbp - 0x18], r15
test r9d, r9d
jne 0x14007e5c8
xor edx, edx
lea rax, [rbp - 0x18]
lea r9, [0x1400b4318]
mov qword [rsp + 0x20], rax
lea rcx, [0x1400b4328]
lea r8d, [rdx + 4]
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoCreateInstance]
nop dword [rax + rax]
mov edi, eax
jmp 0x14007e80c
cmp rcx, rbx
je 0x14007e5e8
test byte [rcx + 0x1c], 2
je 0x14007e5e8
mov rcx, qword [rcx + 0x10]
lea r8, [0x1400b42e8]
mov edx, 0xc
call fcn.14002c238
xor edx, edx
lea rcx, str.ole32.dll
mov r8d, 0x800
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
nop dword [rax + rax]
mov r14, rax
test rax, rax
jne 0x14007e612
call fcn.1400434c8
mov edi, eax
mov rbx, r15
test edi, edi
js 0x14007e65c
lea rdx, str.CreateBindCtx
mov rcx, r14
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
nop dword [rax + rax]
lea rdx, str.MkParseDisplayName
mov rcx, r14
mov rbx, rax
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
nop dword [rax + rax]
mov r15, rax
test rbx, rbx
je 0x14007e655
test rax, rax
jne 0x14007e65c
call fcn.1400434c8
mov edi, eax
and qword [rbp - 0x20], 0
test edi, edi
js 0x14007e680
movabs r10, 0xeb4597f53e5f8270
lea rdx, [rbp - 0x20]
xor ecx, ecx
mov rax, rbx
call qword [case.0x140007f48.0]
mov edi, eax
lea rbx, [0x1400bff64]
mov qword [rbp + 0x48], rbx
test edi, edi
js 0x14007e6a9
mov r8d, dword [rsi + 0x68]
lea rdx, str.Session:_u_clsid:E7B3C0E0_FB47_49F6_A66B_8A7C2E4E7B9C
lea rcx, [rbp + 0x48]
call fcn.14005d600
mov rbx, qword [rbp + 0x48]
mov edi, eax
xor ecx, ecx
mov qword [rbp + 0x58], rcx
test edi, edi
js 0x14007e6db
movabs r10, 0xefdc86b6505ca070
mov rcx, qword [rbp - 0x20]
lea r9, [rbp + 0x58]
lea r8, [rbp + 0x48]
mov rdx, rbx
mov rax, r15
call qword [case.0x140007f48.0]
mov rcx, qword [rbp + 0x58]
mov edi, eax
xor r15d, r15d
test r14, r14
je 0x14007e6f6
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
nop dword [rax + rax]
mov rcx, qword [rbp + 0x58]
mov qword [rbp - 0x28], r15
test edi, edi
js 0x14007e7b9
mov rax, qword [rcx]
movabs r10, 0xf664bf965cd27270
mov rax, qword [rax + 0x40]
lea rdx, [rbp - 0x28]
mov qword [rsp + 0x20], rdx
lea r9, [0x1400b42d8]
mov rdx, qword [rbp - 0x20]
xor r8d, r8d
call qword [case.0x140007f48.0]
mov edi, eax
test eax, eax
jns 0x14007e769
mov rcx, qword [0x1400be2f8]
lea rax, [0x1400be2f8]
cmp rcx, rax
je 0x14007e791
test byte [rcx + 0x1c], 1
je 0x14007e791
mov rcx, qword [rcx + 0x10]
lea r8, [0x1400b42e8]
mov edx, 0xd
mov r9d, edi
call fcn.14002c27c
jmp 0x14007e791
mov rcx, qword [rbp - 0x28]
mov rax, qword [rcx]
movabs r10, 0xee2c9ee752dd2a70
mov rax, qword [rax + 0x18]
lea r9, [rbp - 0x18]
lea r8, [0x1400b42c8]
xor edx, edx
call qword [case.0x140007f48.0]
mov rcx, qword [rbp - 0x28]
test rcx, rcx
je 0x14007e7b5
mov rax, qword [rcx]
movabs r10, 0xbaac1f10365eb170
mov rax, qword [rax + 0x10]
call qword [case.0x140007f48.0]
mov qword [rbp - 0x28], r15
mov rcx, qword [rbp + 0x58]
test rcx, rcx
je 0x14007e7d9
mov rax, qword [rcx]
movabs r10, 0xbaac1f10365eb170
mov rax, qword [rax + 0x10]
call qword [case.0x140007f48.0]
mov qword [rbp + 0x58], r15
mov rdx, rbx
call fcn.1400105ac
mov rcx, qword [rbp - 0x20]
test rcx, rcx
je 0x14007e801
mov rax, qword [rcx]
movabs r10, 0xbaac1f10365eb170
mov rax, qword [rax + 0x10]
call qword [case.0x140007f48.0]
mov r14, qword [rbp + 0x50]
lea rbx, [0x1400be2f8]
mov qword [rbp + 0x60], r15
test edi, edi
js 0x14007e88b
mov rcx, qword [rbp - 0x18]
mov rax, qword [rcx]
movabs r10, 0xf1543eb258563970
mov rax, qword [rax + 0x18]
lea rdx, [rbp + 0x60]
call qword [case.0x140007f48.0]
mov edi, eax
test eax, eax
jns 0x14007e852
mov rcx, qword [0x1400be2f8]
cmp rcx, rbx
je 0x14007e88b
test byte [rcx + 0x1c], 1
je 0x14007e88b
mov edx, 0xf
jmp 0x14007e878
mov rcx, qword [rbp + 0x60]
call fcn.14007f294
mov edi, eax
test eax, eax
jns 0x14007e88b
mov rcx, qword [0x1400be2f8]
cmp rcx, rbx
je 0x14007e88b
test byte [rcx + 0x1c], 1
je 0x14007e88b
mov edx, 0x10
mov rcx, qword [rcx + 0x10]
lea r8, [0x1400b42e8]
mov r9d, eax
call fcn.14002c27c
mov rcx, r13
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_EnterCriticalSection]
nop dword [rax + rax]
test edi, edi
js 0x14007e8d6
cmp qword [r12], r15
jne 0x14007e8d6
mov rax, qword [rbp + 0x60]
mov rbx, r15
test rax, rax
je 0x14007e8b7
mov rbx, rax
mov qword [rbp + 0x60], r15
mov rcx, r12
call fcn.14007c1bc
mov qword [r12], rbx
mov dword [rsi + 0x60], r15d
call qword [sym.imp.api_ms_win_core_sysinfo_l1_1_0.dll_GetTickCount]
nop dword [rax + rax]
mov dword [rsi + 0x64], eax
lea rcx, [rbp + 0x60]
call fcn.14007c1bc
mov rcx, qword [rbp - 0x18]
test rcx, rcx
je 0x14007e8ff
mov rax, qword [rcx]
movabs r10, 0xbaac1f10365eb170
mov rax, qword [rax + 0x10]
call qword [case.0x140007f48.0]
lea rbx, [0x1400be2f8]
test r14, r14
je 0x14007e931
test edi, edi
js 0x14007e931
mov rax, qword [rsi + 0x50]
mov qword [r14], rax
mov rcx, qword [rsi + 0x50]
mov rax, qword [rcx]
movabs r10, 0xfd41b67356dad870
mov rax, qword [rax + 8]
call qword [case.0x140007f48.0]
mov rcx, r13
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
nop dword [rax + rax]
test edi, edi
jns 0x14007e96e
mov rcx, qword [0x1400be2f8]
cmp rcx, rbx
je 0x14007e96e
test byte [rcx + 0x1c], 1
je 0x14007e96e
mov rcx, qword [rcx + 0x10]
lea r8, [0x1400b42e8]
mov edx, 0x11
mov r9d, edi
call fcn.14002c27c
mov eax, edi
add rsp, 0x58
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov edi, 0x800106ba
mov rcx, qword [0x1400be2f8]
cmp rcx, rbx
je 0x14007e906
test byte [rcx + 0x1c], 2
je 0x14007e906
mov eax, dword [rsi + 0x58]
lea r8, [0x1400b42e8]
mov r9d, dword [rsi + 0x60]
mov edx, 0xa
mov rcx, qword [rcx + 0x10]
mov dword [rsp + 0x20], eax
call fcn.14003340c
jmp 0x14007e906