Function at 0x140006b74
Capabilities:
Check for time delay via gettickcount
Query service status

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov dword [rax + 0x20], r9d
push rsi
push rdi
push r12
push r13
push r14
sub rsp, 0x40
mov ebp, r8d
mov rdi, rdx
mov r14, rcx
mov r10, qword [0x1400cf018]
lea r12, [0x1400cf018]
cmp r10, r12
je 0x140006bd4
test byte [r10 + 0x1c], 1
je 0x140006bd4
cmp byte [r10 + 0x19], 5
jb 0x140006bd4
mov r9, rcx
mov dword [rax - 0x40], r8d
mov rcx, qword [r10 + 0x10]
mov qword [rax - 0x48], rdx
call fcn.1400056a0
mov r10, qword [0x1400cf018]
xor ebx, ebx
mov dword [rsp + 0x88], ebx
lea r13, [0x1400af738]
cmp r10, r12
je 0x140006c0d
test byte [r10 + 0x1c], 2
je 0x140006c0d
cmp byte [r10 + 0x19], 5
jb 0x140006c0d
mov rcx, qword [r10 + 0x10]
lea edx, [rbx + 0x33]
mov r8, r13
call fcn.1400034f0
mov r10, qword [0x1400cf018]
cmp dword [rdi + 4], 1
je 0x140006daa
mov edx, 0x7530
mov ecx, dword [rdi + 0x18]
mov eax, edx
cmp ecx, edx
cmovb eax, ecx
cmp eax, 0x1f4
jae 0x140006c34
mov esi, 0x1f4
jmp 0x140006c3b
cmp ecx, edx
mov esi, edx
cmovb esi, ecx
cmp r10, r12
je 0x140006c62
test byte [r10 + 0x1c], 2
je 0x140006c62
cmp byte [r10 + 0x19], 5
jb 0x140006c62
mov rcx, qword [r10 + 0x10]
mov edx, 0x34
mov r9d, esi
mov r8, r13
call fcn.1400035c4
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_Sleep]
nop dword [rax + rax]
lea rax, [rsp + 0x88]
mov r9d, 0x24
mov r8, rdi
mov qword [rsp + 0x20], rax
xor edx, edx
mov rcx, r14
call qword [sym.imp.ADVAPI32.dll_QueryServiceStatusEx]
nop dword [rax + rax]
test eax, eax
je 0x140006d67
cmp dword [rdi + 4], 1
je 0x140006d36
call qword [sym.imp.KERNEL32.dll_GetTickCount]
nop dword [rax + rax]
sub eax, ebp
mov edx, 0x7530
cmp eax, edx
ja 0x140006cd6
cmp dword [rdi + 4], 1
mov r10, qword [0x1400cf018]
jne 0x140006c1c
jmp 0x140006daa
mov ebx, 0x5b4
mov r10, qword [0x1400cf018]
cmp r10, r12
je 0x140006ddf
test byte [r10 + 0x1c], 2
je 0x140006daa
cmp byte [r10 + 0x19], 2
jb 0x140006daa
call qword [sym.imp.KERNEL32.dll_GetTickCount]
nop dword [rax + rax]
mov rcx, qword [0x1400cf018]
mov edx, 0x37
mov dword [rsp + 0x28], 0x7530
mov r9d, ebp
mov r8, r13
mov dword [rsp + 0x20], eax
mov rcx, qword [rcx + 0x10]
call fcn.14000512c
jmp 0x140006da3
mov r10, qword [0x1400cf018]
cmp r10, r12
je 0x140006ddf
test byte [r10 + 0x1c], 2
je 0x140006daa
cmp byte [r10 + 0x19], 5
jb 0x140006daa
mov rcx, qword [r10 + 0x10]
mov edx, 0x36
mov r8, r13
call fcn.1400034f0
jmp 0x140006da3
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
mov ebx, eax
mov r10, qword [0x1400cf018]
cmp r10, r12
je 0x140006ddf
test byte [r10 + 0x1c], 2
je 0x140006daa
cmp byte [r10 + 0x19], 2
jb 0x140006daa
mov rcx, qword [r10 + 0x10]
mov edx, 0x35
mov r9d, eax
mov r8, r13
call fcn.1400035c4
mov r10, qword [0x1400cf018]
cmp r10, r12
je 0x140006ddf
test byte [r10 + 0x1c], 1
je 0x140006ddf
movzx edx, byte [r10 + 0x19]
mov eax, ebx
neg eax
sbb ecx, ecx
and ecx, 0xfffffffd
add ecx, 5
cmp edx, ecx
jb 0x140006ddf
mov rcx, qword [r10 + 0x10]
mov edx, 0x38
mov r9d, ebx
mov r8, r13
call fcn.1400035c4
mov rbp, qword [rsp + 0x78]
mov eax, ebx
mov rbx, qword [rsp + 0x70]
add rsp, 0x40
pop r14
pop r13
pop r12
pop rdi
pop rsi
ret