Function at 0x180005c70
Capabilities:
Check for time delay via gettickcount
Check if file exists
Read .ini file

Disassembly:
mov rax, rsp
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rax - 0x208]
sub rsp, 0x2e0
mov qword [rsp + 0x40], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov rax, qword [0x18002d340]
xor rax, rsp
mov qword [rbp + 0x1d0], rax
mov r14, rcx
lea rdx, [rsp + 0x68]
call fcn.1800022d0
nop
lea r8, [rsp + 0x68]
cmp qword [rbp - 0x80], 8
cmovae r8, qword [rsp + 0x68]
lea rdx, str.RunOnceTask_hostPath___s
mov rcx, r14
call fcn.180002c90
lea rcx, [rsp + 0x68]
cmp qword [rbp - 0x80], 8
cmovae rcx, qword [rsp + 0x68]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x180005d0a
lea rdx, str.PathFileExists_false
mov rcx, r14
call fcn.180002c90
xor esi, esi
mov ebx, esi
jmp 0x180005f84
xor ecx, ecx
call fcn.180008edc
mov edx, eax
mov rcx, r14
call fcn.180002110
mov ebx, eax
xor esi, esi
mov word [rbp - 0x58], si
xor eax, eax
mov qword [rbp - 0x56], rax
mov qword [rbp - 0x4e], rax
mov word [rbp - 0x46], ax
mov r8d, ebx
lea rdx, [0x18001fd18]
lea rcx, [rbp - 0x58]
call fcn.18000862c
lea rdx, [rbp - 0x78]
mov rcx, r14
call fcn.180001a70
nop
lea rdx, [rsp + 0x48]
mov rcx, r14
call fcn.1800023a0
nop
lea r9, [rsp + 0x48]
cmp qword [rsp + 0x60], 8
cmovae r9, qword [rsp + 0x48]
lea r8, [rbp - 0x78]
cmp qword [rbp - 0x60], 8
cmovae r8, qword [rbp - 0x78]
lea rdx, str.path_Config___s__Vestige___s
mov rcx, r14
call fcn.180002c90
lea r9, [rsp + 0x48]
cmp qword [rsp + 0x60], 8
cmovae r9, qword [rsp + 0x48]
or rdi, 0xffffffffffffffff
mov r8d, edi
lea rdx, str.RunOnceTask
lea rcx, str.Setting
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
cmp eax, ebx
jne 0x180005dda
lea r8, str.RunOnceTask_Has_Run_exit
lea rdx, [0x18001f9d0]
mov rcx, r14
call fcn.180002c90
mov ebx, esi
jmp 0x180005f3f
lea r9, [rsp + 0x48]
cmp qword [rsp + 0x60], 8
cmovae r9, qword [rsp + 0x48]
lea r8, [rbp - 0x58]
lea rdx, str.RunOnceTask
lea rcx, str.Setting
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
lea r9, [rsp + 0x48]
cmp qword [rsp + 0x60], 8
cmovae r9, qword [rsp + 0x48]
xor r8d, r8d
lea rdx, str.TimeDelay
lea rcx, str.Setting
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov r12d, eax
test eax, eax
je 0x180005e93
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r15d, eax
mov r9d, eax
mov r8d, r12d
lea rdx, str.TimeDelay_start___d_dwTickStart___d
mov rcx, r14
call fcn.180002c90
mov ebx, r12d
imul ebx, ebx, 0xea60
test ebx, ebx
je 0x180005e78
nop dword [rax]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, r15d
cmp eax, ebx
jb 0x180005e60
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r9d, eax
mov r8d, r12d
lea rdx, str.TimeDelay_end___d_dwTickEnd___d
mov rcx, r14
call fcn.180002c90
mov word [rbp - 0x40], si
xor edx, edx
mov r8d, 0x206
lea rcx, [rbp - 0x3e]
call fcn.1800098a0
lea r8, [rsp + 0x68]
cmp qword [rbp - 0x80], 8
cmovae r8, qword [rsp + 0x68]
lea rdx, str._s_RunOnceTask
lea rcx, [rbp - 0x40]
call fcn.18000862c
mov qword [rsp + 0x38], 7
mov qword [rsp + 0x30], rsi
mov word [rsp + 0x20], si
cmp word [rbp - 0x40], 0
jne 0x180005ee7
mov rdi, rsi
jmp 0x180005efa
lea rax, [rbp - 0x40]
nop dword [rax + rax]
inc rdi
cmp word [rax + rdi*2], 0
jne 0x180005ef0
mov r8, rdi
lea rdx, [rbp - 0x40]
lea rcx, [rsp + 0x20]
call fcn.180003e80
lea rdx, [rsp + 0x20]
mov rcx, r14
call fcn.180001650
lea r8, [rbp - 0x40]
lea rdx, str.cmd:_s
mov rcx, r14
call fcn.180002f50
lea rdx, str.RunOnceTask_ok
mov rcx, r14
call fcn.180002c90
mov ebx, 1
cmp qword [rsp + 0x60], 8
jb 0x180005f51
mov rcx, qword [rsp + 0x48]
call fcn.180007828
mov qword [rsp + 0x60], 7
mov qword [rsp + 0x58], rsi
mov word [rsp + 0x48], si
cmp qword [rbp - 0x60], 8
jb 0x180005f74
mov rcx, qword [rbp - 0x78]
call fcn.180007828
mov qword [rbp - 0x60], 7
mov qword [rbp - 0x68], rsi
mov word [rbp - 0x78], si
cmp qword [rbp - 0x80], 8
jb 0x180005f95
mov rcx, qword [rsp + 0x68]
call fcn.180007828
mov eax, ebx
mov rcx, qword [rbp + 0x1d0]
xor rcx, rsp
call fcn.180009870
lea r11, [rsp + 0x2e0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret