Function at 0x180036d80
Capabilities:
Check for time delay via gettickcount
Create thread
Read file on windows

Disassembly:
mov qword [rsp + 0x18], rbx
mov dword [rsp + 0x10], edx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0xc0
mov r14, qword [rbp + 0x7f]
lea r15d, [rdx + 0x348]
mov r12, r9
mov r13, r8
mov ebx, edx
mov edi, edx
cmp edx, r15d
jae 0x180036fc5
mov rsi, qword [rbp - 0x51]
mov ebx, dword [rbp + 0x67]
nop word [rax + rax]
cmp edi, 0xee
ja 0x180036f46
je 0x180036f2b
mov eax, edi
sub eax, 0x1c
je 0x180036edc
sub eax, 0x54
je 0x180037081
sub eax, 3
je 0x180036e8e
sub eax, 0x13
je 0x180036e14
cmp eax, 0x28
jne 0x180036fb6
xor esi, esi
jmp 0x180036fb6
mov rdx, qword [0x1800b44b8]
xor r9d, r9d
mov r8d, 0x8f
mov qword [rsp + 0x20], 0
xor ecx, ecx
call fcn.180015e60
test al, al
je 0x18003706e
mov rcx, qword [0x1800b44b8]
lea r8, [rbp - 0x69]
mov edx, 0x2b
mov byte [rbp - 0x69], 1
call fcn.180014240
mov edx, 0xa1
mov rcx, r14
call fcn.180046ea0
test al, al
jne 0x180036fb6
mov rcx, qword [0x1800b44b8]
xor edi, edi
xor r8d, r8d
mov qword [rsp + 0x20], rdi
xor edx, edx
lea r9d, [rdi + 0x1c]
call fcn.180012bd0
mov dword [rbp - 0x71], edi
jmp 0x18003724e
mov qword [rsp + 0x28], 0
lea r8, [0x18000d8e0]
mov r9, r14
mov dword [rsp + 0x20], 0
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [r14], rax
test rax, rax
je 0x180037078
lea r8, [rbp - 0x59]
mov dword [rbp - 0x59], 1
mov edx, 6
mov rcx, r14
call fcn.180014240
jmp 0x180036fb6
lea rdx, [rbp + 7]
mov ecx, 0x76
call fcn.18003ac40
test eax, eax
jne 0x1800370af
lea r9d, [rax + 0x60]
mov r8, r14
mov rdx, r12
lea rcx, [rbp + 7]
call fcn.180036c30
lea rdx, [rbp + 7]
mov ebx, eax
test eax, eax
jne 0x18003709a
mov rcx, qword [rbp + 0x5f]
lea r8d, [rax + 0x24]
mov r9, r13
call fcn.18005ba20
mov rbx, rax
jmp 0x180036fb6
mov rax, qword [0x1800b44e8]
test rax, rax
je 0x180036fb6
mov rcx, qword [r14]
xor edx, edx
mov r8d, 0x8000
call rax
jmp 0x180036fb6
mov eax, edi
sub eax, 0x102
je 0x180036fad
sub eax, 0x54
je 0x180036f6e
sub eax, 0x54
je 0x180036f64
cmp eax, 0x54
je 0x18003724e
jmp 0x180036fb6
lea rax, [rsi + rsi*2]
mov qword [rbp - 0x71], rax
jmp 0x180036fb6
mov edx, 3
mov dword [r14], 0
mov r9, qword [0x1800c9d18]
lea rcx, [rbp - 0x61]
lea r8d, [rdx - 2]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
movzx ecx, byte [rbp - 0x60]
mov rsi, rax
movzx edx, byte [rbp - 0x61]
shl edx, 8
or edx, ecx
movzx ecx, byte [rbp - 0x5f]
shl edx, 8
or edx, ecx
mov dword [r14], edx
jmp 0x180036fb6
xor eax, eax
mov word [rbp - 0x61], ax
mov byte [rbp - 0x5f], al
add edi, 0x54
cmp edi, r15d
jb 0x180036dd0
mov ebx, dword [rbp + 0x67]
lea r12d, [rbx + 0x2f8]
cmp ebx, r12d
jae 0x18003724e
mov r15, qword [rbp - 0x51]
lea rdi, [0x18005fce0]
mov esi, dword [rbp + 0x67]
mov r13, qword [rbp - 0x51]
nop word [rax + rax]
cmp ebx, 0x16d
ja 0x180037174
je 0x18003714c
mov eax, ebx
sub eax, 0x73
je 0x18003724a
sub eax, 0x13
je 0x1800370bf
sub eax, 0x4c
je 0x1800370b7
sub eax, 0x4c
je 0x18003724e
cmp eax, 3
jne 0x180037239
xor edx, edx
mov dword [rbp - 0x59], 4
lea rax, [rbp - 0x59]
mov qword [rbp - 0x11], rdi
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x49]
lea rax, [rbp - 0x11]
mov dword [rbp - 0x49], 0x80
lea ecx, [rdx + 0x59]
mov qword [rsp + 0x20], rax
xor r8d, r8d
call fcn.180034b90
mov r13, rax
jmp 0x180037239
xor edi, edi
mov dword [rbp - 0x71], edi
jmp 0x18003724e
mov byte [rbp - 0x71], 0
jmp 0x18003724e
mov r8d, 0xa5
lea rdx, [rbp + 7]
xor ecx, ecx
call fcn.180059240
mov dword [rbp - 0x71], ebx
jmp 0x18003724e
mov r8d, 0xa5
xor ecx, ecx
call fcn.180059240
mov dword [rbp - 0x71], ebx
jmp 0x18003724e
mov dword [rbp - 0x71], eax
jmp 0x18003724e
mov dword [rbp - 0x71], esi
jmp 0x180037239
mov rcx, qword [r14 + 0x28]
xor esi, esi
call qword [r14 + 0x20]
test al, al
je 0x180037124
mov ebx, 0x119
cmp ebx, 0x119
je 0x1800370f4
cmp ebx, 0x3d78
jne 0x180037113
mov eax, 0x10624dd3
mul esi
mov esi, edx
shr esi, 6
call qword [r14 + 0x50]
jmp 0x180037113
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov edx, 0x82
mov rcx, r14
mov edi, eax
call fcn.180011ea0
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov esi, eax
sub esi, edi
add ebx, 0x3c5f
cmp ebx, 0x78be
jbe 0x1800370d2
mov ebx, dword [rbp + 0x67]
mov rcx, qword [0x1800b44b8]
xor edi, edi
xor r8d, r8d
mov qword [rsp + 0x20], rdi
xor edx, edx
lea r9d, [rdi + 0x1c]
call fcn.180012bd0
lea rdi, [0x18005fce0]
jmp 0x180037239
lea rax, [rbp - 0x41]
mov dword [rbp - 0x41], 4
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x39]
lea rax, [rbp - 9]
mov qword [rbp - 9], rdi
mov dword [rbp - 0x39], 0x40
jmp 0x180037224
mov eax, ebx
sub eax, 0x1b9
je 0x1800371eb
sub eax, 0x4c
je 0x1800371b7
sub eax, 0x4c
je 0x1800371a3
cmp eax, 0x4c
jne 0x180037239
xor r8d, r8d
lea ecx, [rax + 0x1c]
mov rdx, r13
call fcn.1800344c0
jmp 0x180037239
xor r8d, r8d
mov rdx, r15
lea ecx, [r8 + 0x68]
call fcn.1800344c0
jmp 0x180037239
xor r8d, r8d
mov rdx, r15
lea ecx, [r8 + 0x68]
call fcn.1800344c0
lea rax, [rbp - 0x31]
mov dword [rbp - 0x31], 0x20
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x29]
lea rax, [rbp - 1]
mov qword [rbp - 1], rdi
mov dword [rbp - 0x29], 0x80
jmp 0x180037224
xor r8d, r8d
mov rdx, r15
lea ecx, [r8 + 0x68]
call fcn.1800344c0
lea rax, [0x18005fcf0]
mov dword [rbp - 0x21], 4
mov qword [rbp - 0x51], rax
lea r9, [rbp - 0x19]
lea rax, [rbp - 0x21]
mov dword [rbp - 0x19], 0x80
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x51]
xor edx, edx
mov qword [rsp + 0x20], rax
xor r8d, r8d
lea ecx, [rdx + 0x59]
call fcn.180034b90
mov r15, rax
add ebx, 0x4c
mov dword [rbp + 0x67], ebx
cmp ebx, r12d
jb 0x180036ff0
jmp 0x18003724e
mov byte [rbp - 0x71], 1
mov rax, qword [rbp - 0x71]
mov rbx, qword [rsp + 0x110]
add rsp, 0xc0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret