Function at 0x180008340
Capabilities:
Check for time delay via queryperformancecounter

Disassembly:
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x1c0
mov rax, qword [0x1800b7160]
xor rax, rsp
mov qword [rsp + 0x1b0], rax
mov eax, r9d
mov dword [rsp + 0x70], eax
mov edi, r8d
mov dword [rsp + 0x74], r8d
movzx r13d, dx
mov r12, rcx
mov qword [rsp + 0xd0], rcx
mov word [rsp + 0x68], r13w
mov dword [rsp + 0xc0], r8d
mov dword [rsp + 0xb8], eax
mov rax, qword [rsp + 0x228]
mov qword [rsp + 0xc8], rax
mov qword [rsp + 0xe8], rax
mov rax, qword [rsp + 0x230]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0xe0], rax
mov rax, qword [rsp + 0x238]
mov qword [rsp + 0x90], rax
mov qword [rsp + 0xd8], rax
mov rsi, qword [rsp + 0x240]
mov qword [rsp + 0xf0], rsi
xor r15d, r15d
mov ebx, r15d
mov dword [rsp + 0x60], ebx
xorps xmm0, xmm0
movups xmmword [rsp + 0xa8], xmm0
mov qword [rsp + 0x100], r15
mov qword [rsp + 0xf8], r15
lea rcx, [rsp + 0x100]
call qword [sym.imp.api_ms_win_core_profile_l1_1_0.dll_QueryPerformanceCounter]
nop dword [rax + rax]
mov r14d, dword [rsp + 0x220]
test byte [0x1800b78f1], 0x40
jne 0x1800353d4
lea rcx, [rsp + 0xa8]
call fcn.1800085a0
mov edi, eax
test eax, eax
jne 0x180008509
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0xc8]
mov qword [rsp + 0x48], rax
mov dword [rsp + 0x40], r14d
mov eax, dword [rsp + 0x70]
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x74]
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r12
mov r9, qword [rsp + 0xb0]
xor r8d, r8d
lea edx, [rdi + 4]
lea rcx, [0x180095090]
call qword [sym.imp.RPCRT4.dll_NdrClientCall3]
nop dword [rax + rax]
mov rbx, rax
mov qword [rsp + 0xc8], rax
mov dword [rsp + 0x60], eax
jmp 0x1800084fa
test byte [0x1800b78f1], 0x40
jne 0x180035501
mov dword [rsi], ebx
lea rcx, [rsp + 0xa8]
call fcn.180007aa4
test byte [0x1800b78f1], 0x40
jne 0x180035527
lea rcx, [rsp + 0xf8]
call qword [sym.imp.api_ms_win_core_profile_l1_1_0.dll_QueryPerformanceCounter]
nop dword [rax + rax]
mov r8, qword [rsp + 0xf8]
sub r8, qword [rsp + 0x100]
mov r9d, dword [0x1800b7018]
test r9d, r9d
je 0x180008567
lea rcx, [0x1800b7018]
call fcn.180008044
test al, al
jne 0x180035541
mov eax, edi
mov rcx, qword [rsp + 0x1b0]
xor rcx, rsp
call fcn.18002d5c0
add rsp, 0x1c0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
mov r9d, r13d
mov ecx, 0xa
mov dword [rsp + 0x30], r14d
mov eax, dword [rsp + 0x70]
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], edi
mov r8, r12
call fcn.18008a4a4
nop
jmp 0x18000843b
mov ecx, 0xe
mov r8d, ebx
lea rdx, [0x18009f0b0]
call fcn.1800876bc
nop
jmp 0x180008507
mov ecx, 0xf
mov r8d, edi
lea rdx, [0x18009f0b0]
call fcn.1800876bc
nop
jmp 0x180008523
cmp r9d, 5
jbe 0x180035775
lea rcx, [0x1800b7018]
call fcn.180008044
test al, al
je 0x180035775
mov esi, 1
mov qword [rsp + 0xf0], rsi
lea rax, [rsp + 0xf0]
mov qword [rsp + 0x130], rax
mov qword [rsp + 0x138], 8
mov qword [rsp + 0xd0], r8
lea rax, [rsp + 0xd0]
mov qword [rsp + 0x140], rax
mov qword [rsp + 0x148], 8
mov qword [rsp + 0xe8], r8
lea rax, [rsp + 0xe8]
mov qword [rsp + 0x150], rax
mov qword [rsp + 0x158], 8
mov qword [rsp + 0xe0], r8
lea rax, [rsp + 0xe0]
mov qword [rsp + 0x160], rax
mov qword [rsp + 0x168], 8
mov rax, qword [0x1800b79a8]
mov qword [rsp + 0xd8], rax
lea rax, [rsp + 0xd8]
mov qword [rsp + 0x170], rax
mov qword [rsp + 0x178], 8
mov dword [rsp + 0xc0], r15d
lea rax, [rsp + 0xc0]
mov qword [rsp + 0x180], rax
mov qword [rsp + 0x188], 4
mov dword [rsp + 0xb8], ebx
lea rax, [rsp + 0xb8]
mov qword [rsp + 0x190], rax
mov qword [rsp + 0x198], 4
mov qword [rsp + 0xc8], 0x1000000
lea rax, [rsp + 0xc8]
mov qword [rsp + 0x1a0], rax
mov qword [rsp + 0x1a8], 8
mov dword [rsp + 0x78], 0xb000000
movzx eax, word [0x1800a1e34]
mov dword [rsp + 0x7c], eax
movabs rax, 0x400000000000
mov qword [rsp + 0x80], rax
mov rax, qword [0x1800b7020]
mov qword [rsp + 0x110], rax
movzx eax, word [rax]
mov dword [rsp + 0x118], eax
mov dword [rsp + 0x11c], 2
lea rax, [0x1800a1e3e]
mov qword [rsp + 0x120], rax
mov dword [rsp + 0x128], 0xbc
mov dword [rsp + 0x12c], esi
lea rax, [0x1800a2368]
lea rcx, str.ETW0
sub eax, ecx
mov dword [rsp + 0x74], eax
lea rbx, [0x180020ee0]
cmp qword [0x1800b7040], rbx
jne 0x180035781
lea rdx, [rsp + 0x110]
call fcn.180085a30
lea rdx, [rsp + 0x78]
test al, al
je 0x180035745
mov byte [rsp + 0x20], al
lea r9, [rsp + 0x110]
call fcn.180085c90
jmp 0x180035781
lea rax, [rsp + 0x110]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xa
xor r9d, r9d
xor r8d, r8d
mov rcx, qword [0x1800b7038]
call qword [sym.imp.api_ms_win_eventing_provider_l1_1_0.dll_EventWriteTransfer]
nop dword [rax + rax]
jmp 0x180035781
mov esi, 1
lea rbx, [0x180020ee0]
lock xadd dword [0x1800b7fd0], esi
inc esi
cmp esi, 0x400
jne 0x180008567
xchg dword [0x1800b7fd0], r15d
cmp qword [0x1800b7040], rbx
jne 0x180008567
mov rcx, qword [0x1800b7048]
call fcn.180020f2c
nop
jmp 0x180008567