Function at 0x18001c2e0
Capabilities:
Check for time delay via gettickcount

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
mov rbp, rsp
sub rsp, 0x70
mov qword [rbp - 0x40], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov rdi, rcx
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov esi, eax
call fcn.18000c9f0
xor r12d, r12d
lea r13d, [r12 + 1]
cmp dword [rdi + 0x50], r12d
jbe 0x18001c3ca
mov dword [rdi + 0x50], r12d
call fcn.180010710
test eax, eax
jne 0x18001c33b
call fcn.1800463f0
test eax, eax
jne 0x18001c3ac
cmp qword [rdi + 0x40], r12
jne 0x18001c372
call fcn.18000c3f0
test eax, eax
je 0x18001c372
mov ecx, 0xa8
call fcn.180030188
mov qword [rbp + 0x20], rax
test rax, rax
je 0x18001c369
xor edx, edx
mov rcx, rax
call fcn.180011d50
jmp 0x18001c36c
mov rax, r12
mov qword [rdi + 0x40], rax
jmp 0x18001c39f
cmp qword [rdi + 0x48], r12
jne 0x18001c3ac
mov ecx, 0xa8
call fcn.180030188
mov qword [rbp + 0x20], rax
test rax, rax
je 0x18001c398
mov edx, r13d
mov rcx, rax
call fcn.180011d50
jmp 0x18001c39b
mov rax, r12
mov qword [rdi + 0x48], rax
test rax, rax
je 0x18001c3ac
mov rcx, rax
call fcn.180025ad0
mov rax, qword [rdi + 0x40]
test rax, rax
je 0x18001c3bb
inc dword [rax + 0xa0]
mov rax, qword [rdi + 0x48]
test rax, rax
je 0x18001c3ca
inc dword [rax + 0xa0]
mov eax, dword [0x1800d8a88]
test eax, eax
je 0x18001c3e1
cmp esi, eax
jb 0x18001c3e1
add eax, 0x7530
cmp eax, esi
jae 0x18001c451
call fcn.180011b80
mov ecx, r12d
test eax, eax
cmovne ecx, r13d
call fcn.180004240
mov ebx, dword [rdi + 0x18]
call fcn.180011b80
mov ecx, r12d
test eax, eax
cmovne ecx, r13d
xor r8d, r8d
mov edx, ebx
call fcn.180004b80
mov dword [rdi + 0x18], r12d
call fcn.18001c7e0
cmp dword [0x1800d8a84], 0
jne 0x18001c440
call fcn.180001100
test eax, eax
je 0x18001c440
call fcn.180013b60
call fcn.180013830
call fcn.180013970
mov dword [0x1800d8a84], r13d
call fcn.18001d210
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x1800d8a88], eax
mov eax, dword [0x1800d8a8c]
test eax, eax
je 0x18001c468
cmp esi, eax
jb 0x18001c468
add eax, 0x1d4c0
cmp eax, esi
jae 0x18001c4be
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
sub ecx, dword [0x1800d7384]
cmp ecx, 0x1d4c0
jb 0x18001c4b2
mov dword [0x1800d7384], eax
lea r8, str.TICKCOUNT
lea rdx, [0x1800d6b68]
lea rcx, vtable.CDbgCfgMgr.0
call fcn.18000ef20
cmp eax, dword [0x1800d6d7c]
je 0x18001c4b2
lea rcx, [0x1800d6a90]
call fcn.18000fe30
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x1800d8a8c], eax
mov eax, dword [0x1800d8a90]
test eax, eax
je 0x18001c4d5
cmp esi, eax
jb 0x18001c4d5
add eax, 0x493e0
cmp eax, esi
jae 0x18001c536
cmp dword [0x1800d6b50], 0
je 0x18001c4fd
lea r9, str.CAgentU64::DoMonitor__M5________
lea r8, str.CheckApp
mov edx, reloc.WS2_32.dll_ntohs
lea rcx, [0x1800d6a98]
call fcn.1800157c0
call fcn.180001810
cmp dword [0x1800d6b50], 0
je 0x18001c52a
lea r9, str.CAgentU64::DoMonitor__M5____
lea r8, str.CheckApp
mov edx, reloc.WS2_32.dll_ntohs
lea rcx, [0x1800d6a98]
call fcn.1800157c0
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x1800d8a90], eax
mov eax, dword [0x1800d8a94]
test eax, eax
je 0x18001c551
cmp esi, eax
jb 0x18001c551
add eax, 0x1b7740
cmp eax, esi
jae 0x18001c7b9
lea rdi, vtable.CObjectID.0
mov qword [rbp - 0x38], rdi
mov dword [rbp - 0x30], 0x36
lea rcx, [rbp - 0x38]
call fcn.180005720
lea rcx, [rbp - 0x38]
call fcn.180005e80
test eax, eax
jne 0x18001c5f6
mov dword [rbp + 0x20], r12d
lea rdx, [rbp + 0x20]
lea rcx, [rbp - 0x38]
call fcn.180005990
cmp dword [rbp + 0x20], 0
je 0x18001c5f6
mov ebx, dword [rbp - 0x30]
cmp dword [0x1800d6b50], 0
je 0x18001c5bf
mov dword [rsp + 0x20], ebx
lea r9, str.CheckOneModule_Ignore_Check_Nexttime_ID__d_
lea r8, str.CheckModule
mov edx, reloc.WS2_32.dll_ntohs
lea rcx, [0x1800d6a98]
call fcn.1800157c0
mov r8d, r13d
lea rdx, [0x1800d68c0]
lea rcx, [rbp - 0x18]
call fcn.1800240d0
nop
mov qword [rbp - 0x28], rdi
mov dword [rbp - 0x20], ebx
lea rdx, [rbp - 0x38]
lea rcx, [0x1800d68f8]
call fcn.180006d70
mov dword [rax + 8], ebx
lea rcx, [rbp - 0x18]
call fcn.180024110
cmp dword [0x1800d6b50], 0
je 0x18001c61f
lea r9, str.CAgentU64::DoMonitor__M5__________CheckOneModule_TSAFEWORDADDIN64_
lea r8, str.CheckRegInfo
mov edx, reloc.WS2_32.dll_ntohs
lea rcx, [0x1800d6a98]
call fcn.1800157c0
nop
mov qword [rbp - 0x38], rdi
mov dword [rbp - 0x30], 0x38
lea rcx, [rbp - 0x38]
call fcn.180005720
lea rcx, [rbp - 0x38]
call fcn.180005e80
test eax, eax
jne 0x18001c6bd
mov dword [rbp + 0x20], r12d
lea rdx, [rbp + 0x20]
lea rcx, [rbp - 0x38]
call fcn.180005990
cmp dword [rbp + 0x20], 0
je 0x18001c6bd
mov ebx, dword [rbp - 0x30]
cmp dword [0x1800d6b50], 0
je 0x18001c686
mov dword [rsp + 0x20], ebx
lea r9, str.CheckOneModule_Ignore_Check_Nexttime_ID__d_
lea r8, str.CheckModule
mov edx, reloc.WS2_32.dll_ntohs
lea rcx, [0x1800d6a98]
call fcn.1800157c0
mov r8d, r13d
lea rdx, [0x1800d68c0]
lea rcx, [rbp - 0x18]
call fcn.1800240d0
nop
mov qword [rbp - 0x28], rdi
mov dword [rbp - 0x20], ebx
lea rdx, [rbp - 0x38]
lea rcx, [0x1800d68f8]
call fcn.180006d70
mov dword [rax + 8], ebx
lea rcx, [rbp - 0x18]
call fcn.180024110
cmp dword [0x1800d6b50], 0
je 0x18001c6e6
lea r9, str.CAgentU64::DoMonitor__M5__________CheckOneModule_TSAFEEXCELADDIN64_
lea r8, str.CheckRegInfo
mov edx, reloc.WS2_32.dll_ntohs
lea rcx, [0x1800d6a98]
call fcn.1800157c0
nop
mov qword [rbp - 0x38], rdi
mov dword [rbp - 0x30], 0x3a
lea rcx, [rbp - 0x38]
call fcn.180005720
lea rcx, [rbp - 0x38]
call fcn.180005e80
test eax, eax
jne 0x18001c784
mov dword [rbp + 0x20], r12d
lea rdx, [rbp + 0x20]
lea rcx, [rbp - 0x38]
call fcn.180005990
cmp dword [rbp + 0x20], 0
je 0x18001c784
mov ebx, dword [rbp - 0x30]
cmp dword [0x1800d6b50], 0
je 0x18001c74d
mov dword [rsp + 0x20], ebx
lea r9, str.CheckOneModule_Ignore_Check_Nexttime_ID__d_
lea r8, str.CheckModule
mov edx, reloc.WS2_32.dll_ntohs
lea rcx, [0x1800d6a98]
call fcn.1800157c0
mov r8d, r13d
lea rdx, [0x1800d68c0]
lea rcx, [rbp - 0x18]
call fcn.1800240d0
nop
mov qword [rbp - 0x28], rdi
mov dword [rbp - 0x20], ebx
lea rdx, [rbp - 0x38]
lea rcx, [0x1800d68f8]
call fcn.180006d70
mov dword [rax + 8], ebx
lea rcx, [rbp - 0x18]
call fcn.180024110
cmp dword [0x1800d6b50], 0
je 0x18001c7ad
lea r9, str.CAgentU64::DoMonitor__M5__________CheckOneModule_TSAFEPPTADDIN64_
lea r8, str.CheckRegInfo
mov edx, reloc.WS2_32.dll_ntohs
lea rcx, [0x1800d6a98]
call fcn.1800157c0
nop
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x1800d8a94], eax
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r13
pop r12
pop rbp
ret