Function at 0x180020f70
Capabilities:
Check for time delay via gettickcount

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x80
mov qword [rbp - 0x50], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov r13, rcx
call fcn.1800212c0
xor r15d, r15d
cmp dword [0x1800e7848], r15d
je 0x180020fb6
test eax, eax
je 0x18002106a
mov dword [0x1800e7848], 1
mov dword [0x1800e784c], 1
mov ebx, 1
mov r12d, ebx
mov rsi, r15
cmp rbx, 4
je 0x18002101f
mov edi, 1
lea rdx, [r13 + 0x58]
mov r8d, edi
lea rcx, [rbp - 0x38]
call fcn.180029410
mov r11, qword [r13 + 0x90]
test r11, r11
je 0x180021012
test rbx, rbx
jle 0x180021012
cmp r12d, dword [r13 + 0x98]
ja 0x180021012
cmp dword [rsi + r11], r15d
cmove edi, r15d
lea rcx, [rbp - 0x38]
call fcn.180029450
test edi, edi
je 0x180021031
inc r12d
inc rbx
add rsi, 4
cmp rsi, 0x10
jg 0x180021038
jmp 0x180020fd5
mov dword [0x1800e784c], r15d
cmp dword [0x1800e52c0], r15d
je 0x18002106a
mov eax, dword [0x1800e784c]
mov dword [rsp + 0x20], eax
lea r9, str.CAgentU64::CheckComModule_s_bIsOutOfLicenseEx__d__
lea r8, str.CheckModule
mov edx, reloc.WS2_32.dll_ntohs
lea rcx, [0x1800e5208]
call fcn.180018f90
cmp dword [0x1800e784c], r15d
je 0x1800210f2
call fcn.1800086c0
test eax, eax
je 0x180021292
cmp dword [0x1800e7850], r15d
jne 0x180021292
lea rbx, vtable.CObjectID.0
mov qword [rbp - 0x48], rbx
mov dword [rbp - 0x40], reloc.WS2_32.dll_inet_ntoa
lea rcx, [rbp - 0x48]
call fcn.180005bb0
lea rcx, [rbp - 0x48]
call fcn.180006310
lea rcx, [rbp - 0x48]
call fcn.180006c50
mov dword [0x1800e7850], 1
cmp dword [0x1800e52c0], 0
je 0x1800210ed
lea r9, str.CAgentU64::CheckComModule_Uninstal_
lea r8, str.CheckModule
mov edx, reloc.WS2_32.dll_ntohs
lea rcx, [0x1800e5208]
call fcn.180018f90
nop
jmp 0x180021292
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ebx, eax
call fcn.180003a80
mov r12d, eax
call fcn.1800089e0
mov r13d, eax
call fcn.180008b80
mov r14d, eax
mov dword [rbp + 0x38], r15d
lea rcx, [rbp + 0x38]
call fcn.180003f40
test eax, eax
jne 0x180021137
call fcn.180008300
test eax, eax
je 0x180021132
cmp dword [rbp + 0x38], r15d
je 0x180021137
mov edi, r15d
jmp 0x18002113c
mov edi, 1
cmp dword [0x1800e7850], r15d
jne 0x180021183
mov eax, dword [0x1800e7854]
test eax, eax
je 0x180021183
cmp ebx, eax
jb 0x180021183
add eax, 0x1b7740
cmp eax, ebx
jb 0x180021183
cmp dword [0x1800e7858], r12d
jne 0x180021183
cmp dword [0x1800e785c], r13d
jne 0x180021183
cmp dword [0x1800e7860], r14d
jne 0x180021183
cmp dword [0x1800e7864], edi
je 0x180021292
call fcn.18000cfd0
test eax, eax
je 0x180021243
lea rbx, vtable.CObjectID.0
mov qword [rbp - 0x48], rbx
mov dword [rbp - 0x40], reloc.WS2_32.dll_inet_ntoa
lea rcx, [rbp - 0x48]
call fcn.180005bb0
lea rcx, [rbp - 0x48]
call fcn.1800066f0
test eax, eax
jne 0x18002123c
mov dword [rbp + 0x38], r15d
lea rdx, [rbp + 0x38]
lea rcx, [rbp - 0x48]
call fcn.180005e20
cmp dword [rbp + 0x38], 0
je 0x18002123c
mov esi, dword [rbp - 0x40]
cmp dword [0x1800e52c0], 0
je 0x180021202
mov dword [rsp + 0x20], esi
lea r9, str.CheckOneModule_Ignore_Check_Nexttime_ID__d_
lea r8, str.CheckModule
mov edx, reloc.WS2_32.dll_ntohs
lea rcx, [0x1800e5208]
call fcn.180018f90
mov r8d, 1
lea rdx, [0x1800e5030]
lea rcx, [rbp - 0x20]
call fcn.180029410
nop
mov qword [rbp - 0x38], rbx
mov dword [rbp - 0x30], esi
lea rdx, [rbp - 0x48]
lea rcx, [0x1800e5068]
call fcn.180007810
mov dword [rax + 8], esi
lea rcx, [rbp - 0x20]
call fcn.180029450
mov dword [0x1800e7850], r15d
mov dword [0x1800e7858], r12d
mov dword [0x1800e785c], r13d
mov dword [0x1800e7860], r14d
mov dword [0x1800e7864], edi
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x1800e7854], eax
cmp dword [0x1800e52c0], 0
je 0x180021292
lea r9, str.CAgentU64::DoMonitor__M5__________CheckOneModule_2_
lea r8, str.CheckApp
mov edx, reloc.WS2_32.dll_ntohs
lea rcx, [0x1800e5208]
call fcn.180018f90
lea r11, [rsp + 0x80]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret