Function at 0x18001e4b0
Capabilities:
Check for time delay via gettickcount

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
mov rbp, rsp
sub rsp, 0x70
mov qword [rbp - 0x40], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov rdi, rcx
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov esi, eax
call fcn.18000ccf0
xor r12d, r12d
lea r13d, [r12 + 1]
cmp dword [rdi + 0x50], r12d
jbe 0x18001e59a
mov dword [rdi + 0x50], r12d
call fcn.180010be0
test eax, eax
jne 0x18001e50b
call fcn.180048aa0
test eax, eax
jne 0x18001e57c
cmp qword [rdi + 0x40], r12
jne 0x18001e542
call fcn.18000c6f0
test eax, eax
je 0x18001e542
mov ecx, 0xa8
call fcn.180032838
mov qword [rbp + 0x20], rax
test rax, rax
je 0x18001e539
xor edx, edx
mov rcx, rax
call fcn.180013a70
jmp 0x18001e53c
mov rax, r12
mov qword [rdi + 0x40], rax
jmp 0x18001e56f
cmp qword [rdi + 0x48], r12
jne 0x18001e57c
mov ecx, 0xa8
call fcn.180032838
mov qword [rbp + 0x20], rax
test rax, rax
je 0x18001e568
mov edx, r13d
mov rcx, rax
call fcn.180013a70
jmp 0x18001e56b
mov rax, r12
mov qword [rdi + 0x48], rax
test rax, rax
je 0x18001e57c
mov rcx, rax
call fcn.1800280d0
mov rax, qword [rdi + 0x40]
test rax, rax
je 0x18001e58b
inc dword [rax + 0xa0]
mov rax, qword [rdi + 0x48]
test rax, rax
je 0x18001e59a
inc dword [rax + 0xa0]
mov eax, dword [0x1800dfdc0]
test eax, eax
je 0x18001e5b1
cmp esi, eax
jb 0x18001e5b1
add eax, 0x7530
cmp eax, esi
jae 0x18001e621
call fcn.1800138a0
mov ecx, r12d
test eax, eax
cmovne ecx, r13d
call fcn.180004210
mov ebx, dword [rdi + 0x18]
call fcn.1800138a0
mov ecx, r12d
test eax, eax
cmovne ecx, r13d
xor r8d, r8d
mov edx, ebx
call fcn.180004b50
mov dword [rdi + 0x18], r12d
call fcn.18001e9b0
cmp dword [0x1800dfdbc], 0
jne 0x18001e610
call fcn.180001100
test eax, eax
je 0x18001e610
call fcn.180015880
call fcn.180015550
call fcn.180015690
mov dword [0x1800dfdbc], r13d
call fcn.18001f3e0
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x1800dfdc0], eax
mov eax, dword [0x1800dfdc4]
test eax, eax
je 0x18001e638
cmp esi, eax
jb 0x18001e638
add eax, 0x1d4c0
cmp eax, esi
jae 0x18001e68e
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
sub ecx, dword [0x1800de654]
cmp ecx, 0x1d4c0
jb 0x18001e682
mov dword [0x1800de654], eax
lea r8, str.TICKCOUNT
lea rdx, [0x1800dde38]
lea rcx, vtable.CDbgCfgMgr.0
call fcn.18000f2d0
cmp eax, dword [0x1800de04c]
je 0x18001e682
lea rcx, [0x1800ddd60]
call fcn.1800101e0
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x1800dfdc4], eax
mov eax, dword [0x1800dfdc8]
test eax, eax
je 0x18001e6a5
cmp esi, eax
jb 0x18001e6a5
add eax, 0x493e0
cmp eax, esi
jae 0x18001e706
cmp dword [0x1800dde20], 0
je 0x18001e6cd
lea r9, str.CAgentU64::DoMonitor__M5________
lea r8, str.CheckApp
mov edx, reloc.WS2_32.dll_ntohs
lea rcx, [0x1800ddd68]
call fcn.180017680
call fcn.180001810
cmp dword [0x1800dde20], 0
je 0x18001e6fa
lea r9, str.CAgentU64::DoMonitor__M5____
lea r8, str.CheckApp
mov edx, reloc.WS2_32.dll_ntohs
lea rcx, [0x1800ddd68]
call fcn.180017680
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x1800dfdc8], eax
mov eax, dword [0x1800dfdcc]
test eax, eax
je 0x18001e721
cmp esi, eax
jb 0x18001e721
add eax, 0x1b7740
cmp eax, esi
jae 0x18001e989
lea rdi, vtable.CObjectID.0
mov qword [rbp - 0x38], rdi
mov dword [rbp - 0x30], 0x36
lea rcx, [rbp - 0x38]
call fcn.180005970
lea rcx, [rbp - 0x38]
call fcn.1800060d0
test eax, eax
jne 0x18001e7c6
mov dword [rbp + 0x20], r12d
lea rdx, [rbp + 0x20]
lea rcx, [rbp - 0x38]
call fcn.180005be0
cmp dword [rbp + 0x20], 0
je 0x18001e7c6
mov ebx, dword [rbp - 0x30]
cmp dword [0x1800dde20], 0
je 0x18001e78f
mov dword [rsp + 0x20], ebx
lea r9, str.CheckOneModule_Ignore_Check_Nexttime_ID__d_
lea r8, str.CheckModule
mov edx, reloc.WS2_32.dll_ntohs
lea rcx, [0x1800ddd68]
call fcn.180017680
mov r8d, r13d
lea rdx, [0x1800ddb90]
lea rcx, [rbp - 0x18]
call fcn.1800266d0
nop
mov qword [rbp - 0x28], rdi
mov dword [rbp - 0x20], ebx
lea rdx, [rbp - 0x38]
lea rcx, [0x1800ddbc8]
call fcn.180006fc0
mov dword [rax + 8], ebx
lea rcx, [rbp - 0x18]
call fcn.180026710
cmp dword [0x1800dde20], 0
je 0x18001e7ef
lea r9, str.CAgentU64::DoMonitor__M5__________CheckOneModule_TSAFEWORDADDIN64_
lea r8, str.CheckRegInfo
mov edx, reloc.WS2_32.dll_ntohs
lea rcx, [0x1800ddd68]
call fcn.180017680
nop
mov qword [rbp - 0x38], rdi
mov dword [rbp - 0x30], 0x38
lea rcx, [rbp - 0x38]
call fcn.180005970
lea rcx, [rbp - 0x38]
call fcn.1800060d0
test eax, eax
jne 0x18001e88d
mov dword [rbp + 0x20], r12d
lea rdx, [rbp + 0x20]
lea rcx, [rbp - 0x38]
call fcn.180005be0
cmp dword [rbp + 0x20], 0
je 0x18001e88d
mov ebx, dword [rbp - 0x30]
cmp dword [0x1800dde20], 0
je 0x18001e856
mov dword [rsp + 0x20], ebx
lea r9, str.CheckOneModule_Ignore_Check_Nexttime_ID__d_
lea r8, str.CheckModule
mov edx, reloc.WS2_32.dll_ntohs
lea rcx, [0x1800ddd68]
call fcn.180017680
mov r8d, r13d
lea rdx, [0x1800ddb90]
lea rcx, [rbp - 0x18]
call fcn.1800266d0
nop
mov qword [rbp - 0x28], rdi
mov dword [rbp - 0x20], ebx
lea rdx, [rbp - 0x38]
lea rcx, [0x1800ddbc8]
call fcn.180006fc0
mov dword [rax + 8], ebx
lea rcx, [rbp - 0x18]
call fcn.180026710
cmp dword [0x1800dde20], 0
je 0x18001e8b6
lea r9, str.CAgentU64::DoMonitor__M5__________CheckOneModule_TSAFEEXCELADDIN64_
lea r8, str.CheckRegInfo
mov edx, reloc.WS2_32.dll_ntohs
lea rcx, [0x1800ddd68]
call fcn.180017680
nop
mov qword [rbp - 0x38], rdi
mov dword [rbp - 0x30], 0x3a
lea rcx, [rbp - 0x38]
call fcn.180005970
lea rcx, [rbp - 0x38]
call fcn.1800060d0
test eax, eax
jne 0x18001e954
mov dword [rbp + 0x20], r12d
lea rdx, [rbp + 0x20]
lea rcx, [rbp - 0x38]
call fcn.180005be0
cmp dword [rbp + 0x20], 0
je 0x18001e954
mov ebx, dword [rbp - 0x30]
cmp dword [0x1800dde20], 0
je 0x18001e91d
mov dword [rsp + 0x20], ebx
lea r9, str.CheckOneModule_Ignore_Check_Nexttime_ID__d_
lea r8, str.CheckModule
mov edx, reloc.WS2_32.dll_ntohs
lea rcx, [0x1800ddd68]
call fcn.180017680
mov r8d, r13d
lea rdx, [0x1800ddb90]
lea rcx, [rbp - 0x18]
call fcn.1800266d0
nop
mov qword [rbp - 0x28], rdi
mov dword [rbp - 0x20], ebx
lea rdx, [rbp - 0x38]
lea rcx, [0x1800ddbc8]
call fcn.180006fc0
mov dword [rax + 8], ebx
lea rcx, [rbp - 0x18]
call fcn.180026710
cmp dword [0x1800dde20], 0
je 0x18001e97d
lea r9, str.CAgentU64::DoMonitor__M5__________CheckOneModule_TSAFEPPTADDIN64_
lea r8, str.CheckRegInfo
mov edx, reloc.WS2_32.dll_ntohs
lea rcx, [0x1800ddd68]
call fcn.180017680
nop
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x1800dfdcc], eax
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r13
pop r12
pop rbp
ret