Function at 0x1401048e0
Capabilities:
Check for time delay via gettickcount

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov dword [rsp + 0x10], edx
mov qword [rsp + 8], rcx
push rdi
mov eax, 0x10100
call fcn.1401354c0
sub rsp, rax
lea rdi, [rsp + 0x40]
mov ecx, 0x4030
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0x10110]
mov rax, qword [0x14031eae8]
xor rax, rsp
mov qword [rsp + 0x100f8], rax
lea rdx, str.msctls_statusbar321
mov rcx, qword [rsp + 0x10110]
call fcn.140102480
mov qword [rsp + 0x40], rax
cmp qword [rsp + 0x40], 0
jne 0x140104967
mov r8, qword [0x140325a28]
xor edx, edx
lea rcx, str.No_StatusBar.
call fcn.14001f840
jmp 0x140104ca5
cmp dword [rsp + 0x10138], 1
jge 0x14010497c
mov dword [rsp + 0x10138], 0x32
cmp dword [rsp + 0x10118], 1
jge 0x140104991
mov dword [rsp + 0x10118], 1
lea rax, [rsp + 0x78]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0x7d0
mov dword [rsp + 0x20], 2
xor r9d, r9d
xor r8d, r8d
mov edx, 0x406
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.USER32.dll_SendMessageTimeoutW]
test rax, rax
jne 0x1401049d0
mov eax, 0xa0070000
jmp 0x140104ca5
movsxd rax, dword [rsp + 0x10118]
cmp rax, qword [rsp + 0x78]
jle 0x140104a13
cmp qword [rsp + 0x10128], 0
je 0x1401049f7
mov dword [rsp + 0x100e8], 2
jmp 0x140104a02
mov dword [rsp + 0x100e8], 0
mov eax, dword [rsp + 0x100e8]
or eax, 0xa00a0000
jmp 0x140104ca5
xor r9d, r9d
mov r8, qword [rsp + 0x40]
mov edx, 0x10000
lea rcx, [rsp + 0x58]
call fcn.1400f7d20
mov qword [rsp + 0x68], rax
cmp qword [rsp + 0x68], 0
jne 0x140104a41
mov eax, 0xa0070000
jmp 0x140104ca5
mov eax, dword [rsp + 0x10118]
dec eax
mov dword [rsp + 0x10118], eax
mov eax, 2
imul rax, rax, 0
mov qword [rsp + 0x100d8], rax
cmp qword [rsp + 0x100d8], 0x10000
jae 0x140104a72
jmp 0x140104a77
call fcn.1401357e0
xor eax, eax
mov rcx, qword [rsp + 0x100d8]
mov word [rsp + rcx + 0xa0], ax
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov eax, eax
mov qword [rsp + 0x100c8], rax
movsxd rax, dword [rsp + 0x10118]
lea rcx, [rsp + 0x100b8]
mov qword [rsp + 0x30], rcx
mov dword [rsp + 0x28], 0x7d0
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8, rax
mov edx, 0x40c
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.USER32.dll_SendMessageTimeoutW]
test rax, rax
je 0x140104bee
mov rax, qword [rsp + 0x100b8]
and rax, 0xffff
movzx eax, ax
cmp eax, 0x7fff
jle 0x140104afa
jmp 0x140104c63
movsxd rax, dword [rsp + 0x10118]
lea rcx, [rsp + 0x100b8]
mov qword [rsp + 0x30], rcx
mov dword [rsp + 0x28], 0x7d0
mov dword [rsp + 0x20], 2
mov r9, qword [rsp + 0x68]
mov r8, rax
mov edx, 0x40d
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.USER32.dll_SendMessageTimeoutW]
test rax, rax
je 0x140104bee
mov rax, qword [rsp + 0x100b8]
and rax, 0xffff
movzx eax, ax
inc eax
cdqe
shl rax, 1
mov qword [rsp + 0x20], 0
mov r9, rax
lea r8, [rsp + 0xa0]
mov rdx, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
jne 0x140104bbd
mov eax, 2
imul rax, rax, 0
mov qword [rsp + 0x100e0], rax
cmp qword [rsp + 0x100e0], 0x10000
jae 0x140104ba1
jmp 0x140104ba6
call fcn.1401357e0
xor eax, eax
mov rcx, qword [rsp + 0x100e0]
mov word [rsp + rcx + 0xa0], ax
jmp 0x140104c63
cmp qword [rsp + 0x10128], 0
je 0x140104bee
mov rdx, qword [rsp + 0x10128]
lea rcx, [rsp + 0xa0]
call fcn.140103690
movzx eax, al
test eax, eax
je 0x140104bee
mov eax, 1
jmp 0x140104ca5
cmp qword [rsp + 0x10128], 0
jne 0x140104bfb
jmp 0x140104c63
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x140104c5a
cmp dword [rsp + 0x10130], 0
jl 0x140104c47
movsxd rax, dword [rsp + 0x10130]
mov qword [rsp + 0x100f0], rax
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov eax, eax
sub rax, qword [rsp + 0x100c8]
mov rcx, qword [rsp + 0x100f0]
sub rcx, rax
mov rax, rcx
cmp eax, 5
jle 0x140104c5a
mov edx, 1
mov ecx, dword [rsp + 0x10138]
call fcn.1400070b0
jmp 0x140104c5e
xor eax, eax
jmp 0x140104ca5
jmp 0x140104a99
mov rdx, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x58]
call fcn.1400fa390
cmp qword [rsp + 0x10120], 0
je 0x140104ca0
lea rdx, [rsp + 0xa0]
mov rcx, qword [rsp + 0x10120]
call fcn.140046ae0
movzx eax, al
test eax, eax
jne 0x140104ca0
mov eax, 0xa00e0001
jmp 0x140104ca5
mov eax, 1
mov rdi, rax
mov rcx, rsp
lea rdx, reloc.WSOCK32.dll_connect
call fcn.140134a00
mov rax, rdi
mov rcx, qword [rsp + 0x100f8]
xor rcx, rsp
call fcn.140135520
add rsp, 0x10100
pop rdi
ret