Function at 0x18001c500
Capabilities:
Check for time delay via gettickcount

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
mov rbp, rsp
sub rsp, 0x70
mov qword [rbp - 0x40], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov rdi, rcx
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov esi, eax
call fcn.18000cb00
xor r12d, r12d
lea r13d, [r12 + 1]
cmp dword [rdi + 0x50], r12d
jbe 0x18001c5ea
mov dword [rdi + 0x50], r12d
call fcn.180010860
test eax, eax
jne 0x18001c55b
call fcn.180046610
test eax, eax
jne 0x18001c5cc
cmp qword [rdi + 0x40], r12
jne 0x18001c592
call fcn.18000c500
test eax, eax
je 0x18001c592
mov ecx, 0xa8
call fcn.1800303a8
mov qword [rbp + 0x20], rax
test rax, rax
je 0x18001c589
xor edx, edx
mov rcx, rax
call fcn.180011c80
jmp 0x18001c58c
mov rax, r12
mov qword [rdi + 0x40], rax
jmp 0x18001c5bf
cmp qword [rdi + 0x48], r12
jne 0x18001c5cc
mov ecx, 0xa8
call fcn.1800303a8
mov qword [rbp + 0x20], rax
test rax, rax
je 0x18001c5b8
mov edx, r13d
mov rcx, rax
call fcn.180011c80
jmp 0x18001c5bb
mov rax, r12
mov qword [rdi + 0x48], rax
test rax, rax
je 0x18001c5cc
mov rcx, rax
call fcn.180025cf0
mov rax, qword [rdi + 0x40]
test rax, rax
je 0x18001c5db
inc dword [rax + 0xa0]
mov rax, qword [rdi + 0x48]
test rax, rax
je 0x18001c5ea
inc dword [rax + 0xa0]
mov eax, dword [0x1800d8a88]
test eax, eax
je 0x18001c601
cmp esi, eax
jb 0x18001c601
add eax, 0x7530
cmp eax, esi
jae 0x18001c671
call fcn.180011ab0
mov ecx, r12d
test eax, eax
cmovne ecx, r13d
call fcn.1800042c0
mov ebx, dword [rdi + 0x18]
call fcn.180011ab0
mov ecx, r12d
test eax, eax
cmovne ecx, r13d
xor r8d, r8d
mov edx, ebx
call fcn.180004c00
mov dword [rdi + 0x18], r12d
call fcn.18001ca00
cmp dword [0x1800d8a84], 0
jne 0x18001c660
call fcn.180001100
test eax, eax
je 0x18001c660
call fcn.180013a90
call fcn.180013760
call fcn.1800138a0
mov dword [0x1800d8a84], r13d
call fcn.18001d430
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x1800d8a88], eax
mov eax, dword [0x1800d8a8c]
test eax, eax
je 0x18001c688
cmp esi, eax
jb 0x18001c688
add eax, 0x1d4c0
cmp eax, esi
jae 0x18001c6de
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
sub ecx, dword [0x1800d7384]
cmp ecx, 0x1d4c0
jb 0x18001c6d2
mov dword [0x1800d7384], eax
lea r8, str.TICKCOUNT
lea rdx, [0x1800d6b68]
lea rcx, vtable.CDbgCfgMgr.0
call fcn.18000f070
cmp eax, dword [0x1800d6d7c]
je 0x18001c6d2
lea rcx, [0x1800d6a90]
call fcn.18000ff80
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x1800d8a8c], eax
mov eax, dword [0x1800d8a90]
test eax, eax
je 0x18001c6f5
cmp esi, eax
jb 0x18001c6f5
add eax, 0x493e0
cmp eax, esi
jae 0x18001c756
cmp dword [0x1800d6b50], 0
je 0x18001c71d
lea r9, str.CAgentU64::DoMonitor__M5________
lea r8, str.CheckApp
mov edx, reloc.WS2_32.dll_ntohs
lea rcx, [0x1800d6a98]
call fcn.180015770
call fcn.1800018b0
cmp dword [0x1800d6b50], 0
je 0x18001c74a
lea r9, str.CAgentU64::DoMonitor__M5____
lea r8, str.CheckApp
mov edx, reloc.WS2_32.dll_ntohs
lea rcx, [0x1800d6a98]
call fcn.180015770
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x1800d8a90], eax
mov eax, dword [0x1800d8a94]
test eax, eax
je 0x18001c771
cmp esi, eax
jb 0x18001c771
add eax, 0x1b7740
cmp eax, esi
jae 0x18001c9d9
lea rdi, vtable.CObjectID.0
mov qword [rbp - 0x38], rdi
mov dword [rbp - 0x30], 0x36
lea rcx, [rbp - 0x38]
call fcn.1800057a0
lea rcx, [rbp - 0x38]
call fcn.180005f00
test eax, eax
jne 0x18001c816
mov dword [rbp + 0x20], r12d
lea rdx, [rbp + 0x20]
lea rcx, [rbp - 0x38]
call fcn.180005a10
cmp dword [rbp + 0x20], 0
je 0x18001c816
mov ebx, dword [rbp - 0x30]
cmp dword [0x1800d6b50], 0
je 0x18001c7df
mov dword [rsp + 0x20], ebx
lea r9, str.CheckOneModule_Ignore_Check_Nexttime_ID__d_
lea r8, str.CheckModule
mov edx, reloc.WS2_32.dll_ntohs
lea rcx, [0x1800d6a98]
call fcn.180015770
mov r8d, r13d
lea rdx, [0x1800d68c0]
lea rcx, [rbp - 0x18]
call fcn.1800242f0
nop
mov qword [rbp - 0x28], rdi
mov dword [rbp - 0x20], ebx
lea rdx, [rbp - 0x38]
lea rcx, [0x1800d68f8]
call fcn.180006df0
mov dword [rax + 8], ebx
lea rcx, [rbp - 0x18]
call fcn.180024330
cmp dword [0x1800d6b50], 0
je 0x18001c83f
lea r9, str.CAgentU64::DoMonitor__M5__________CheckOneModule_TSAFEWORDADDIN64_
lea r8, str.CheckRegInfo
mov edx, reloc.WS2_32.dll_ntohs
lea rcx, [0x1800d6a98]
call fcn.180015770
nop
mov qword [rbp - 0x38], rdi
mov dword [rbp - 0x30], 0x38
lea rcx, [rbp - 0x38]
call fcn.1800057a0
lea rcx, [rbp - 0x38]
call fcn.180005f00
test eax, eax
jne 0x18001c8dd
mov dword [rbp + 0x20], r12d
lea rdx, [rbp + 0x20]
lea rcx, [rbp - 0x38]
call fcn.180005a10
cmp dword [rbp + 0x20], 0
je 0x18001c8dd
mov ebx, dword [rbp - 0x30]
cmp dword [0x1800d6b50], 0
je 0x18001c8a6
mov dword [rsp + 0x20], ebx
lea r9, str.CheckOneModule_Ignore_Check_Nexttime_ID__d_
lea r8, str.CheckModule
mov edx, reloc.WS2_32.dll_ntohs
lea rcx, [0x1800d6a98]
call fcn.180015770
mov r8d, r13d
lea rdx, [0x1800d68c0]
lea rcx, [rbp - 0x18]
call fcn.1800242f0
nop
mov qword [rbp - 0x28], rdi
mov dword [rbp - 0x20], ebx
lea rdx, [rbp - 0x38]
lea rcx, [0x1800d68f8]
call fcn.180006df0
mov dword [rax + 8], ebx
lea rcx, [rbp - 0x18]
call fcn.180024330
cmp dword [0x1800d6b50], 0
je 0x18001c906
lea r9, str.CAgentU64::DoMonitor__M5__________CheckOneModule_TSAFEEXCELADDIN64_
lea r8, str.CheckRegInfo
mov edx, reloc.WS2_32.dll_ntohs
lea rcx, [0x1800d6a98]
call fcn.180015770
nop
mov qword [rbp - 0x38], rdi
mov dword [rbp - 0x30], 0x3a
lea rcx, [rbp - 0x38]
call fcn.1800057a0
lea rcx, [rbp - 0x38]
call fcn.180005f00
test eax, eax
jne 0x18001c9a4
mov dword [rbp + 0x20], r12d
lea rdx, [rbp + 0x20]
lea rcx, [rbp - 0x38]
call fcn.180005a10
cmp dword [rbp + 0x20], 0
je 0x18001c9a4
mov ebx, dword [rbp - 0x30]
cmp dword [0x1800d6b50], 0
je 0x18001c96d
mov dword [rsp + 0x20], ebx
lea r9, str.CheckOneModule_Ignore_Check_Nexttime_ID__d_
lea r8, str.CheckModule
mov edx, reloc.WS2_32.dll_ntohs
lea rcx, [0x1800d6a98]
call fcn.180015770
mov r8d, r13d
lea rdx, [0x1800d68c0]
lea rcx, [rbp - 0x18]
call fcn.1800242f0
nop
mov qword [rbp - 0x28], rdi
mov dword [rbp - 0x20], ebx
lea rdx, [rbp - 0x38]
lea rcx, [0x1800d68f8]
call fcn.180006df0
mov dword [rax + 8], ebx
lea rcx, [rbp - 0x18]
call fcn.180024330
cmp dword [0x1800d6b50], 0
je 0x18001c9cd
lea r9, str.CAgentU64::DoMonitor__M5__________CheckOneModule_TSAFEPPTADDIN64_
lea r8, str.CheckRegInfo
mov edx, reloc.WS2_32.dll_ntohs
lea rcx, [0x1800d6a98]
call fcn.180015770
nop
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x1800d8a94], eax
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r13
pop r12
pop rbp
ret