Function at 0x140004400
Capabilities:
Check for time delay via gettickcount

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r14
sub rsp, 0x140
cmp dword [0x14014a394], 0
jg 0x140004746
mov rcx, qword [0x140145a80]
cmp byte [rcx + 0x12d], 0
je 0x140004746
mov eax, dword [0x140145a78]
cmp dword [0x14014a3b8], eax
jge 0x140004746
cmp dword [0x140145a74], 0
je 0x140004746
cmp dword [0x14014a390], 0
jne 0x140004746
cmp byte [rcx + 0x12c], 0
jne 0x1400044b4
cmp byte [rcx + 0x12e], 0
jne 0x1400044a7
cmp dword [rcx + 0x120], 0xffffffff
jle 0x1400044a7
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov rcx, qword [0x140145a80]
sub eax, dword [rcx + 0x11c]
cmp eax, dword [rcx + 0x120]
jb 0x1400044a7
mov byte [rcx + 0x12c], 1
cmp byte [rcx + 0x12c], 0
je 0x140004746
xor r14d, r14d
mov ebp, r14d
mov rbx, qword [0x14014e458]
test rbx, rbx
je 0x140004746
nop word [rax + rax]
cmp byte [rbx + 0x15], 0
je 0x1400044fd
cmp byte [rbx + 0x14], 0
ja 0x1400044fd
mov eax, dword [rcx + 0x3c]
cmp dword [rbx + 0x10], eax
jl 0x1400044fd
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov edi, eax
mov ecx, eax
sub ecx, dword [rbx + 0xc]
cmp ecx, dword [rbx + 8]
jae 0x140004522
mov rcx, qword [0x140145a80]
mov rsi, qword [rbx + 0x18]
mov rbx, rsi
test rsi, rsi
jne 0x1400044d0
test ebp, ebp
je 0x140004746
lea rcx, [rsp + 0x40]
call fcn.140005030
mov al, 1
jmp 0x140004748
test ebp, ebp
jne 0x140004567
mov ebp, 1
xor r8d, r8d
mov edx, ebp
mov rcx, qword [0x14014a3b0]
call fcn.140001670
lea r8d, [rbp + 0x7e]
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.1400eadcc
mov word [rsp + 0x13e], r14w
inc dword [0x14014a3b8]
add qword [0x140145a80], 0x150
mov dword [rbx + 0xc], edi
cmp byte [rbx + 0x16], 0
je 0x1400045bd
mov byte [rbx + 0x15], 0
add dword [0x14014e46c], 0xffffffff
jne 0x1400045bd
cmp dword [0x14014a3dc], 0
jne 0x1400045bd
cmp dword [0x14014b3b0], 0
jne 0x1400045bd
cmp byte [0x14014a232], 0
je 0x1400045bd
mov edx, 9
mov rcx, qword [0x14014a3e0]
call qword [sym.imp.USER32.dll_KillTimer]
movzx ecx, byte [0x14014a232]
test eax, eax
cmovne ecx, r14d
mov byte [0x14014a232], cl
mov dword [0x14014e4dc], edi
mov r9, qword [rbx]
mov rcx, r9
call fcn.1400b1aa0
test eax, eax
je 0x1400045d7
cmp eax, 1
jne 0x1400045e6
mov rax, qword [r9 + 0x10]
test rax, rax
je 0x1400045e6
movzx r9d, byte [rax]
jmp 0x1400045e9
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, dword [rbx + 0x10]
call fcn.140004df0
mov rax, qword [0x140145a80]
mov qword [rax + 0xf0], rbx
inc byte [rbx + 0x14]
mov rcx, qword [rbx]
mov dword [rsp + 0x30], r14d
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], r14d
xor r9d, r9d
lea r8, [0x14010d310]
mov rdx, rcx
call fcn.1400aded0
dec byte [rbx + 0x14]
mov rsi, qword [rbx + 0x18]
cmp byte [rbx + 0x16], 0
je 0x140004661
cmp byte [rbx + 0x15], 0
jne 0x140004661
mov rcx, qword [rbx]
test rcx, rcx
je 0x140004661
call fcn.1400b1aa0
cmp eax, 2
jne 0x140004661
mov rcx, qword [rbx]
test rcx, rcx
je 0x14000465e
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov qword [rbx], r14
cmp qword [rbx], 0
jne 0x14000473a
mov rdi, r14
mov rbx, qword [0x14014e458]
test rbx, rbx
je 0x14000473a
movzx ecx, byte [0x14014a232]
cmp qword [rbx], 0
jne 0x1400046df
cmp byte [rbx + 0x15], 0
je 0x1400046d9
mov byte [rbx + 0x15], 0
add dword [0x14014e46c], 0xffffffff
jne 0x1400046d9
cmp dword [0x14014a3dc], 0
jne 0x1400046d9
cmp dword [0x14014b3b0], 0
jne 0x1400046d9
test cl, cl
je 0x1400046d9
mov edx, 9
mov rcx, qword [0x14014a3e0]
call qword [sym.imp.USER32.dll_KillTimer]
movzx ecx, byte [0x14014a232]
test eax, eax
cmovne ecx, r14d
mov byte [0x14014a232], cl
cmp byte [rbx + 0x14], 0
je 0x1400046ed
mov rdi, rbx
mov rbx, qword [rbx + 0x18]
test rbx, rbx
je 0x14000473a
jmp 0x140004685
mov rax, qword [rbx + 0x18]
test rdi, rdi
je 0x1400046fc
mov qword [rdi + 0x18], rax
jmp 0x140004703
mov qword [0x14014e458], rax
mov rax, qword [0x14014e460]
cmp rax, rbx
cmove rax, rdi
mov qword [0x14014e460], rax
dec dword [0x14014e468]
mov rcx, qword [rbx]
test rcx, rcx
je 0x14000472d
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
nop
mov edx, SafeArrayAllocDescriptor
mov rcx, rbx
call fcn.1400df83c
mov rcx, qword [0x140145a80]
jmp 0x140004501
xor al, al
lea r11, [rsp + 0x140]
mov rbx, qword [r11 + 0x10]
mov rbp, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov rsp, r11
pop r14
ret