Function at 0x180020010
Capabilities:
Check for time delay via gettickcount

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
mov rbp, rsp
sub rsp, 0x70
mov qword [rbp - 0x40], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov rdi, rcx
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov esi, eax
call fcn.1800084d0
test eax, eax
je 0x18002004c
call fcn.18000dbd0
xor r12d, r12d
lea r13d, [r12 + 1]
cmp dword [rdi + 0x50], r12d
jbe 0x180020103
mov dword [rdi + 0x50], r12d
call fcn.180011ea0
test eax, eax
jne 0x180020074
call fcn.18004ba50
test eax, eax
jne 0x1800200e5
cmp qword [rdi + 0x40], r12
jne 0x1800200ab
call fcn.18000d580
test eax, eax
je 0x1800200ab
mov ecx, 0xa8
call fcn.180035738
mov qword [rbp + 0x20], rax
test rax, rax
je 0x1800200a2
xor edx, edx
mov rcx, rax
call fcn.1800152e0
jmp 0x1800200a5
mov rax, r12
mov qword [rdi + 0x40], rax
jmp 0x1800200d8
cmp qword [rdi + 0x48], r12
jne 0x1800200e5
mov ecx, 0xa8
call fcn.180035738
mov qword [rbp + 0x20], rax
test rax, rax
je 0x1800200d1
mov edx, r13d
mov rcx, rax
call fcn.1800152e0
jmp 0x1800200d4
mov rax, r12
mov qword [rdi + 0x48], rax
test rax, rax
je 0x1800200e5
mov rcx, rax
call fcn.18002ae10
mov rax, qword [rdi + 0x40]
test rax, rax
je 0x1800200f4
inc dword [rax + 0xa0]
mov rax, qword [rdi + 0x48]
test rax, rax
je 0x180020103
inc dword [rax + 0xa0]
mov eax, dword [0x1800e7838]
test eax, eax
je 0x18002011a
cmp esi, eax
jb 0x18002011a
add eax, 0x7530
cmp eax, esi
jae 0x18002018d
call fcn.180014e70
mov ecx, r12d
test eax, eax
cmovne ecx, r13d
call fcn.180004530
mov ebx, dword [rdi + 0x18]
call fcn.180014e70
mov ecx, r12d
test eax, eax
cmovne ecx, r13d
xor r8d, r8d
mov edx, ebx
call fcn.180004e00
mov dword [rdi + 0x18], r12d
call fcn.180020510
cmp dword [0x1800e7834], 0
jne 0x180020179
call fcn.180001100
test eax, eax
je 0x180020179
call fcn.180017220
call fcn.180016ef0
call fcn.180017030
mov dword [0x1800e7834], r13d
mov rcx, rdi
call fcn.180020f70
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x1800e7838], eax
mov eax, dword [0x1800e783c]
test eax, eax
je 0x1800201a4
cmp esi, eax
jb 0x1800201a4
add eax, 0x1d4c0
cmp eax, esi
jae 0x1800201fa
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
sub ecx, dword [0x1800e5af4]
cmp ecx, 0x1d4c0
jb 0x1800201ee
mov dword [0x1800e5af4], eax
lea r8, str.TICKCOUNT
lea rdx, [0x1800e52d8]
lea rcx, vtable.CDbgCfgMgr.0
call fcn.180010590
cmp eax, dword [0x1800e54ec]
je 0x1800201ee
lea rcx, [0x1800e5200]
call fcn.1800114a0
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x1800e783c], eax
mov eax, dword [0x1800e7840]
test eax, eax
je 0x180020211
cmp esi, eax
jb 0x180020211
add eax, 0x493e0
cmp eax, esi
jae 0x180020272
cmp dword [0x1800e52c0], 0
je 0x180020239
lea r9, str.CAgentU64::DoMonitor__M5________
lea r8, str.CheckApp
mov edx, reloc.WS2_32.dll_ntohs
lea rcx, [0x1800e5208]
call fcn.180018f90
call fcn.180001b90
cmp dword [0x1800e52c0], 0
je 0x180020266
lea r9, str.CAgentU64::DoMonitor__M5____
lea r8, str.CheckApp
mov edx, reloc.WS2_32.dll_ntohs
lea rcx, [0x1800e5208]
call fcn.180018f90
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x1800e7840], eax
mov eax, dword [0x1800e7844]
test eax, eax
je 0x18002028d
cmp esi, eax
jb 0x18002028d
add eax, 0x1b7740
cmp eax, esi
jae 0x1800204f5
lea rdi, vtable.CObjectID.0
mov qword [rbp - 0x38], rdi
mov dword [rbp - 0x30], 0x36
lea rcx, [rbp - 0x38]
call fcn.180005bb0
lea rcx, [rbp - 0x38]
call fcn.1800066f0
test eax, eax
jne 0x180020332
mov dword [rbp + 0x20], r12d
lea rdx, [rbp + 0x20]
lea rcx, [rbp - 0x38]
call fcn.180005e20
cmp dword [rbp + 0x20], 0
je 0x180020332
mov ebx, dword [rbp - 0x30]
cmp dword [0x1800e52c0], 0
je 0x1800202fb
mov dword [rsp + 0x20], ebx
lea r9, str.CheckOneModule_Ignore_Check_Nexttime_ID__d_
lea r8, str.CheckModule
mov edx, reloc.WS2_32.dll_ntohs
lea rcx, [0x1800e5208]
call fcn.180018f90
mov r8d, r13d
lea rdx, [0x1800e5030]
lea rcx, [rbp - 0x18]
call fcn.180029410
nop
mov qword [rbp - 0x28], rdi
mov dword [rbp - 0x20], ebx
lea rdx, [rbp - 0x38]
lea rcx, [0x1800e5068]
call fcn.180007810
mov dword [rax + 8], ebx
lea rcx, [rbp - 0x18]
call fcn.180029450
cmp dword [0x1800e52c0], 0
je 0x18002035b
lea r9, str.CAgentU64::DoMonitor__M5__________CheckOneModule_TSAFEWORDADDIN64_
lea r8, str.CheckRegInfo
mov edx, reloc.WS2_32.dll_ntohs
lea rcx, [0x1800e5208]
call fcn.180018f90
nop
mov qword [rbp - 0x38], rdi
mov dword [rbp - 0x30], 0x38
lea rcx, [rbp - 0x38]
call fcn.180005bb0
lea rcx, [rbp - 0x38]
call fcn.1800066f0
test eax, eax
jne 0x1800203f9
mov dword [rbp + 0x20], r12d
lea rdx, [rbp + 0x20]
lea rcx, [rbp - 0x38]
call fcn.180005e20
cmp dword [rbp + 0x20], 0
je 0x1800203f9
mov ebx, dword [rbp - 0x30]
cmp dword [0x1800e52c0], 0
je 0x1800203c2
mov dword [rsp + 0x20], ebx
lea r9, str.CheckOneModule_Ignore_Check_Nexttime_ID__d_
lea r8, str.CheckModule
mov edx, reloc.WS2_32.dll_ntohs
lea rcx, [0x1800e5208]
call fcn.180018f90
mov r8d, r13d
lea rdx, [0x1800e5030]
lea rcx, [rbp - 0x18]
call fcn.180029410
nop
mov qword [rbp - 0x28], rdi
mov dword [rbp - 0x20], ebx
lea rdx, [rbp - 0x38]
lea rcx, [0x1800e5068]
call fcn.180007810
mov dword [rax + 8], ebx
lea rcx, [rbp - 0x18]
call fcn.180029450
cmp dword [0x1800e52c0], 0
je 0x180020422
lea r9, str.CAgentU64::DoMonitor__M5__________CheckOneModule_TSAFEEXCELADDIN64_
lea r8, str.CheckRegInfo
mov edx, reloc.WS2_32.dll_ntohs
lea rcx, [0x1800e5208]
call fcn.180018f90
nop
mov qword [rbp - 0x38], rdi
mov dword [rbp - 0x30], 0x3a
lea rcx, [rbp - 0x38]
call fcn.180005bb0
lea rcx, [rbp - 0x38]
call fcn.1800066f0
test eax, eax
jne 0x1800204c0
mov dword [rbp + 0x20], r12d
lea rdx, [rbp + 0x20]
lea rcx, [rbp - 0x38]
call fcn.180005e20
cmp dword [rbp + 0x20], 0
je 0x1800204c0
mov ebx, dword [rbp - 0x30]
cmp dword [0x1800e52c0], 0
je 0x180020489
mov dword [rsp + 0x20], ebx
lea r9, str.CheckOneModule_Ignore_Check_Nexttime_ID__d_
lea r8, str.CheckModule
mov edx, reloc.WS2_32.dll_ntohs
lea rcx, [0x1800e5208]
call fcn.180018f90
mov r8d, r13d
lea rdx, [0x1800e5030]
lea rcx, [rbp - 0x18]
call fcn.180029410
nop
mov qword [rbp - 0x28], rdi
mov dword [rbp - 0x20], ebx
lea rdx, [rbp - 0x38]
lea rcx, [0x1800e5068]
call fcn.180007810
mov dword [rax + 8], ebx
lea rcx, [rbp - 0x18]
call fcn.180029450
cmp dword [0x1800e52c0], 0
je 0x1800204e9
lea r9, str.CAgentU64::DoMonitor__M5__________CheckOneModule_TSAFEPPTADDIN64_
lea r8, str.CheckRegInfo
mov edx, reloc.WS2_32.dll_ntohs
lea rcx, [0x1800e5208]
call fcn.180018f90
nop
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x1800e7844], eax
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r13
pop r12
pop rbp
ret