Function at 0x14001b1c0
Capabilities:
Check for time delay via gettickcount

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x50
xor ebx, ebx
movsxd r14, edx
cmp dword [rcx + 8], 1
mov rbp, r9
mov r15, r8
mov rdi, rcx
mov esi, ebx
mov r13d, ebx
je 0x14001b63e
cmp dword [rcx + 0x90], ebx
jne 0x14001b208
xor eax, eax
jmp 0x14001b643
cmp r14d, 0x20
ja 0x14001b637
call fcn.1400307f8
test eax, eax
je 0x14001b630
call fcn.140030ba0
test eax, eax
je 0x14001b630
cmp dword [rdi + 8], 1
je 0x14001b63e
lea rax, [rdi + 0x40]
mov rcx, rax
mov qword [rsp + 0x48], rax
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp dword [rdi + 8], 1
jne 0x14001b258
mov esi, 0x8007045b
jmp 0x14001b60e
test rbp, rbp
je 0x14001b29a
mov rcx, qword [rdi + 0x88]
test rcx, rcx
je 0x14001b276
call qword [sym.imp.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_]
mov qword [rdi + 0x88], rbx
cmp qword [rdi + 0x78], rbx
je 0x14001b29a
mov rcx, qword [rdi + 0x70]
xor r8d, r8d
mov rdx, rbp
call qword [sym.imp.KERNEL32.dll_DeleteTimerQueueTimer]
cmp rbp, qword [rdi + 0x78]
jne 0x14001b60e
mov qword [rdi + 0x78], rbx
cmp qword [rdi + 0x10], rbx
je 0x14001b60e
lea eax, [r14 + 2]
movsxd rcx, eax
mov eax, 4
mul rcx
mov rcx, 0xffffffffffffffff
cmovo rax, rcx
mov rcx, rax
call fcn.1400c0694
mov r13, rax
test rax, rax
jne 0x14001b2d8
mov esi, 0x8007000e
jmp 0x14001b60e
mov ebp, ebx
mov word [rsp + 0x80], bx
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r12d, eax
test r14, r14
jle 0x14001b384
mov rdx, rbx
mov r8, r13
mov r10d, dword [rdi + 0x38]
mov eax, ebx
mov r9, rbx
test r10d, r10d
jle 0x14001b323
mov r11d, dword [r15 + rdx*4]
lea rcx, [rdi + 0x18]
cmp dword [rcx], r11d
je 0x14001b323
inc eax
inc r9
add rcx, 0x10
cmp eax, r10d
jl 0x14001b310
cmp eax, r10d
jne 0x14001b331
mov eax, dword [r15 + rdx*4]
mov dword [r8], eax
jmp 0x14001b372
mov rcx, r9
add rcx, rcx
cmp byte [rdi + rcx*8 + 0x24], 1
jne 0x14001b35d
lea rax, [r9 + 2]
add rax, rax
cmp r12d, dword [rdi + rax*8]
jb 0x14001b356
mov eax, dword [rdi + rcx*8 + 0x1c]
not eax
cmp r12d, eax
jbe 0x14001b35d
mov byte [rdi + rcx*8 + 0x25], 1
jmp 0x14001b378
mov eax, dword [r15 + rdx*4]
mov dword [r8], eax
mov word [rdi + rcx*8 + 0x24], bx
mov byte [rsp + r9 + 0x80], 1
inc ebp
add r8, 4
inc rdx
cmp rdx, r14
jl 0x14001b2fa
or r14d, 0xffffffff
mov edx, ebx
mov r15d, r14d
cmp dword [rdi + 0x38], ebx
jle 0x14001b3ed
movsxd rax, ebp
lea r8, [rsp + 0x80]
lea rcx, [rdi + 0x25]
lea r9, [rax*4]
add r9, r13
cmp byte [rcx], bl
je 0x14001b3df
cmp r12d, dword [rcx - 5]
jb 0x14001b3d6
mov eax, dword [rcx - 9]
not eax
cmp r12d, eax
ja 0x14001b3d6
mov eax, dword [rcx - 0xd]
inc ebp
mov dword [r9], eax
add r9, 4
mov word [rcx - 1], bx
mov byte [r8], 1
jmp 0x14001b3df
cmp r15d, dword [rcx - 9]
cmova r15d, dword [rcx - 9]
inc edx
inc r8
add rcx, 0x10
cmp edx, dword [rdi + 0x38]
jl 0x14001b3ac
cmp dword [rdi + 8], 1
je 0x14001b24e
test ebp, ebp
jle 0x14001b4ae
mov rcx, qword [rdi + 0x10]
xor r9d, r9d
xor r8d, r8d
mov rdx, rbx
mov rax, qword [rcx]
mov rax, qword [rax + 0x28]
call qword [str.__f_]
mov rcx, qword [rdi + 0x10]
lea r8, [rsp + 0x40]
lea rdx, [0x1400cbee0]
call qword [sym.imp.ole32.dll_CoUnmarshalInterface]
mov esi, eax
test eax, eax
js 0x14001b4f5
mov rcx, qword [rsp + 0x40]
mov r8, r13
mov edx, ebp
mov rax, qword [rcx]
mov rax, qword [rax + 0x18]
call qword [str.__f_]
mov rcx, qword [rsp + 0x40]
mov esi, eax
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [str.__f_]
test esi, esi
js 0x14001b4f5
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r10d, ebx
cmp dword [rdi + 0x38], ebx
jle 0x14001b4ab
lea r9, [rsp + 0x80]
lea r8, [rdi + 0x20]
cmp byte [r9], bl
je 0x14001b49b
mov edx, dword [r8 - 4]
add edx, eax
mov word [r8 + 4], 1
mov dword [r8], edx
inc r10d
inc r9
add r8, 0x10
cmp r10d, dword [rdi + 0x38]
jl 0x14001b486
mov dword [rdi + 0x68], ebx
cmp r15d, r14d
je 0x14001b60e
mov rcx, qword [rdi + 0x70]
cmp rcx, 0xffffffffffffffff
je 0x14001b60e
mov rdx, qword [rdi + 0x78]
test rdx, rdx
je 0x14001b541
lea eax, [r15 + r12]
cmp eax, dword [rdi + 0x80]
jae 0x14001b4ee
xor r9d, r9d
mov r8d, r15d
call qword [sym.imp.KERNEL32.dll_ChangeTimerQueueTimer]
test eax, eax
jne 0x14001b60e
mov esi, ebx
jmp 0x14001b60e
mov ecx, dword [rdi + 0x68]
lea eax, [rcx + 1]
mov dword [rdi + 0x68], eax
cmp ecx, 3
jae 0x14001b4ab
mov edx, ebx
cmp dword [rdi + 0x38], ebx
jle 0x14001b53a
lea rcx, [rsp + 0x80]
mov r8d, 0x64
lea rax, [rdi + 0x24]
cmp byte [rcx], bl
je 0x14001b52c
cmp r15d, r8d
mov word [rax], 0x101
cmova r15d, r8d
inc edx
inc rcx
add rax, 0x10
cmp edx, dword [rdi + 0x38]
jl 0x14001b51c
mov esi, ebx
jmp 0x14001b4ae
cmp dword [rdi + 8], 1
je 0x14001b24e
mov rcx, qword [rdi + 0x88]
test rcx, rcx
je 0x14001b564
call qword [sym.imp.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_]
mov qword [rdi + 0x88], rbx
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetDim
call fcn.1400c065c
mov qword [rsp + 0x80], rax
mov r14, rax
test rax, rax
je 0x14001b583
mov qword [rax], rdi
jmp 0x14001b586
mov r14, rbx
test r14, r14
je 0x14001b2ce
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov rdx, qword [rdi + 0x70]
lea rbp, [r14 + 8]
mov dword [rsp + 0x30], 0x28
lea r8, [0x14001b670]
mov rcx, rbp
mov dword [rsp + 0x28], ebx
mov r9, r14
mov qword [rdi + 0x88], r14
mov r12d, eax
mov dword [rsp + 0x20], r15d
call qword [sym.imp.KERNEL32.dll_CreateTimerQueueTimer]
test eax, eax
jne 0x14001b5fc
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov qword [rdi + 0x88], rbx
mov rcx, r14
movzx esi, ax
or esi, 0x80070000
mov qword [rbp], rbx
test eax, eax
mov qword [r14], rbx
cmovle esi, eax
call qword [sym.imp.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_]
jmp 0x14001b60e
mov rax, qword [rbp]
mov qword [rdi + 0x78], rax
lea eax, [r12 + r15]
mov dword [rdi + 0x80], eax
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test r13, r13
je 0x14001b627
mov rcx, r13
call qword [sym.imp.msvcrt.dll_void___cdecl_operator_delete___void____ptr64_]
test esi, esi
cmovns esi, ebx
mov eax, esi
jmp 0x14001b643
mov eax, 0x8000ffff
jmp 0x14001b643
mov eax, 0x80070057
jmp 0x14001b643
mov eax, 0x8007045b
lea r11, [rsp + 0x50]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret