Function at 0x180019a00
Capabilities:
Check for time delay via gettickcount

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x80
mov rax, qword [0x18002e518]
xor rax, rsp
mov qword [rsp + 0x78], rax
lea ebp, [rcx + 0x64]
mov dword [rsp + 0x44], ecx
mov dword [rsp + 0x38], ebp
mov r15, rdx
mov esi, ecx
cmp ecx, ebp
jae 0x180019d47
mov r14d, dword [rsp + 0x3c]
xor r12d, r12d
mov r13d, dword [rsp + 0x3c]
movzx ebp, byte [rsp + 0x30]
mov eax, dword [rsp + 0x38]
movabs rdi, 0x5f005800450048
cmp esi, 0xb
je 0x180019cf8
cmp esi, 0x5d
je 0x180019ca6
cmp esi, 0x76
je 0x180019a96
cmp esi, 0x7a
jne 0x180019d38
cmp dword [r15 + 0x14], r12d
setne r12b
mov eax, r12d
jmp 0x180019d4b
mov ebx, ILRemoveLastID
mov dword [rsp + 0x40], ebx
nop
cmp ebx, 0x10
je 0x180019aca
cmp ebx, 0x9d
jne 0x180019c87
mov r8, qword [0x18002e5f8]
lea edx, [rbx + 0x3b]
xor ecx, ecx
call fcn.180013240
mov eax, r14d
jmp 0x180019d4b
mov rcx, qword [r15 + 0x28]
call qword [r15 + 0x20]
test al, al
je 0x180019c87
mov esi, 0x43
nop
cmp esi, 0x107
ja 0x180019b88
je 0x180019b7a
mov eax, esi
sub eax, 0x43
je 0x180019b62
sub eax, 0x31
je 0x180019b45
sub eax, 0x31
je 0x180019b1c
cmp eax, 0x31
jne 0x180019c74
mov dword [rsp + 0x70], 0x58
mov bpl, 1
jmp 0x180019c74
movsd xmm0, qword [0x1800298ee]
mov eax, 0x50
mov word [rsp + 0x64], ax
movzx eax, word [0x1800298f6]
mov word [rsp + 0x6e], ax
movsd qword [rsp + 0x66], xmm0
jmp 0x180019c74
mov r8d, 4
lea rdx, [0x180029904]
lea rcx, [rsp + 0x50]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
jmp 0x180019c74
mov dword [rsp + 0x50], 0x5f0052
mov qword [rsp + 0x54], rdi
mov word [rsp + 0x5c], r12w
jmp 0x180019c74
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r13d, eax
jmp 0x180019c74
mov eax, esi
sub eax, 0x138
je 0x180019c52
sub eax, 0x31
je 0x180019bac
cmp eax, 0x31
jne 0x180019c74
call qword [r15 + 0x50]
jmp 0x180019c74
mov r8d, dword [rsp + 0x3c]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
mov rbx, rax
mov eax, 0x10624dd3
mul r14d
mov r14d, edx
shr r14d, 6
test rbx, rbx
jne 0x180019bda
xor bpl, bpl
jmp 0x180019c74
test bpl, bpl
je 0x180019c74
mov r8d, 0xf01ff
lea rdx, [rsp + 0x50]
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_OpenServiceW]
mov rdi, rax
test rax, rax
jne 0x180019c17
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
xor bpl, bpl
movabs rdi, 0x5f005800450048
jmp 0x180019c74
xor r9d, r9d
lea rax, [rsp + 0x48]
xor r8d, r8d
mov qword [rsp + 0x20], rax
mov rcx, rdi
lea edx, [r9 + 2]
call qword [sym.imp.ADVAPI32.dll_QueryServiceObjectSecurity]
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
movabs rdi, 0x5f005800450048
jmp 0x180019c74
xor edx, edx
mov rcx, r15
lea r8d, [rdx + 0x45]
call fcn.180010450
mov dword [rsp + 0x3c], 1
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r14d, eax
sub r14d, r13d
add esi, 0x31
cmp esi, 0x1cb
jb 0x180019ae0
mov ebx, dword [rsp + 0x40]
add ebx, 0x8d
mov dword [rsp + 0x40], ebx
cmp ebx, 0x12a
jb 0x180019aa0
mov esi, dword [rsp + 0x44]
jmp 0x180019d34
mov rcx, qword [0x18002e5f8]
xor r8d, r8d
lea edx, [r8 + 0x6f]
call fcn.180011090
test al, al
je 0x180019a8e
mov rcx, qword [0x18002e5f8]
lea r8, [rsp + 0x30]
mov edx, 0xaf
mov byte [rsp + 0x30], 1
call fcn.180015170
mov r8, r15
xor edx, edx
mov ecx, 0x92
call fcn.1800134e0
test al, al
je 0x180019d79
mov r14d, r12d
jmp 0x180019d34
cmp qword [r15], r12
je 0x180019d38
cmp word [r15 + 8], r12w
jle 0x180019d38
mov ebx, r12d
mov rdi, r12
nop word [rax + rax]
mov r8, qword [r15]
mov ecx, 0x4e
mov rdx, qword [r15 + 0x10]
mov r8, qword [r8 + rdi]
call fcn.18001fa10
movsx eax, word [r15 + 8]
lea rdi, [rdi + 8]
inc ebx
cmp ebx, eax
jl 0x180019d10
mov eax, dword [rsp + 0x38]
add esi, 0x19
mov dword [rsp + 0x44], esi
cmp esi, eax
jb 0x180019a5c
mov eax, dword [rsp + 0x48]
mov rcx, qword [rsp + 0x78]
xor rcx, rsp
call fcn.1800250d0
lea r11, [rsp + 0x80]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
mov r8, qword [0x18002e5f8]
mov edx, 0xd8
xor ecx, ecx
call fcn.180013240
mov eax, r12d
jmp 0x180019d4b