Function at 0x1400c0c00
Capabilities:
Check for time delay via gettickcount

Disassembly:
mov qword [rsp + 0x20], r9
push rbx
push rbp
push rsi
push rdi
push r13
push r14
push r15
mov eax, 0x10050
call fcn.1400d7ad0
sub rsp, rax
mov esi, r8d
mov r14, rdx
mov rbp, rcx
test rcx, rcx
je 0x1400c0c3d
xor r9d, r9d
mov byte [rsp + 0x20], 1
xor edx, edx
lea r8, [r9 - 1]
call fcn.1400befb0
mov eax, dword [rsp + 0x100b0]
mov edi, 0x1f4
test eax, eax
mov r13d, 1
mov ebx, r13d
mov r15d, getservbyname
cmovne edi, eax
cmp dword [rsp + 0x100b8], 1
cmovge r15d, dword [rsp + 0x100b8]
cmp esi, ebx
cmovge ebx, esi
test r14, r14
je 0x1400c0d17
lea rax, [rsp + 0x48]
xor r9d, r9d
mov qword [rsp + 0x30], rax
xor r8d, r8d
mov dword [rsp + 0x28], 0x7d0
mov edx, 0x406
mov rcx, r14
mov dword [rsp + 0x20], 2
call qword [sym.imp.USER32.dll_SendMessageTimeoutW]
test rax, rax
je 0x1400c0d17
movsxd rax, ebx
cmp rax, qword [rsp + 0x48]
jg 0x1400c0d17
lea rdx, [rsp + 0x100b0]
mov rcx, r14
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov r8d, dword [rsp + 0x100b0]
xor edx, edx
lea ecx, [rdx + 0x38]
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rsi, rax
test rax, rax
je 0x1400c0d17
xor edx, edx
mov dword [rsp + 0x20], 4
mov r9d, 0x3000
mov r8d, 0x10000
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov qword [rsp + 0x40], rax
test rax, rax
jne 0x1400c0d6a
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test rbp, rbp
lea rax, [0x1400f11dc]
lea rdx, [0x1400f1744]
cmovne rdx, rax
cmp word [rdx], 0x30
jne 0x1400c0d39
cmp word [rdx + 2], 0
je 0x1400c0d4d
mov rax, qword [0x1401101f0]
test byte [rax + 0x140], r13b
jne 0x1400c0f97
mov rcx, qword [0x140113a28]
xor r9d, r9d
mov byte [rsp + 0x20], r13b
lea r8, [r9 - 1]
call fcn.1400befb0
jmp 0x1400c0fad
mov eax, dword gs:[0x48]
dec ebx
mov dword [rsp + 0x100b8], eax
xor eax, eax
mov word [rsp + 0x50], ax
mov qword [rsp + 0x100a0], r12
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r12d, eax
movsxd rax, ebx
mov qword [rsp + 0x10098], rax
lea rcx, [rsp + 0x10090]
xor r9d, r9d
mov qword [rsp + 0x30], rcx
mov r8, rax
mov dword [rsp + 0x28], 0x7d0
mov rcx, r14
mov edx, 0x40c
mov dword [rsp + 0x20], 2
mov ebx, 0x7fff
call qword [sym.imp.USER32.dll_SendMessageTimeoutW]
test rax, rax
je 0x1400c0e76
cmp word [rsp + 0x10090], bx
ja 0x1400c0f28
mov rbx, qword [rsp + 0x40]
lea rax, [rsp + 0x10090]
mov r8, qword [rsp + 0x10098]
mov r9, rbx
mov qword [rsp + 0x30], rax
mov edx, 0x40d
mov dword [rsp + 0x28], 0x7d0
mov rcx, r14
mov dword [rsp + 0x20], 2
call qword [sym.imp.USER32.dll_SendMessageTimeoutW]
test rax, rax
je 0x1400c0e76
movzx r9d, word [rsp + 0x10090]
lea r8, [rsp + 0x50]
inc r9d
mov qword [rsp + 0x20], 0
add r9, r9
mov rdx, rbx
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x1400c0f21
mov rdx, qword [rsp + 0x100a8]
lea rcx, [rsp + 0x50]
call fcn.1400bfe10
test al, al
jne 0x1400c0f00
test rbp, rbp
jne 0x1400c0f2d
mov rcx, r14
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x1400c0f49
mov eax, dword [rsp + 0x100b8]
cmp dword [0x140116f80], eax
jne 0x1400c0ecf
test edi, edi
js 0x1400c0eb7
mov ebx, r12d
call qword [sym.imp.KERNEL32.dll_GetTickCount]
lea ecx, [rdi + r12]
sub ecx, eax
cmp ecx, 5
jle 0x1400c0ed2
mov edx, r13d
mov ecx, r15d
call fcn.140001b10
mov rax, qword [rsp + 0x10098]
jmp 0x1400c0d9e
mov ebx, r12d
test edi, edi
js 0x1400c0eea
call qword [sym.imp.KERNEL32.dll_GetTickCount]
lea ecx, [rdi + rbx]
sub ecx, eax
cmp ecx, 5
jle 0x1400c0f76
mov ecx, r15d
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rax, qword [rsp + 0x10098]
jmp 0x1400c0d9e
mov rcx, qword [0x140113a28]
lea rdx, [0x1400da884]
xor r9d, r9d
mov byte [rsp + 0x20], r13b
lea r8, [r9 - 1]
call fcn.1400befb0
jmp 0x1400c0f28
xor eax, eax
mov word [rsp + 0x50], ax
test rbp, rbp
je 0x1400c0f49
xor r9d, r9d
mov byte [rsp + 0x20], r13b
lea rdx, [rsp + 0x50]
mov rcx, rbp
lea r8, [r9 - 1]
call fcn.1400befb0
mov r13d, eax
mov rdx, qword [rsp + 0x40]
mov r9d, 0x8000
xor r8d, r8d
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r12, qword [rsp + 0x100a0]
mov eax, r13d
jmp 0x1400c0fad
mov rcx, qword [0x140113a28]
lea rdx, [0x1400f11dc]
xor r9d, r9d
mov byte [rsp + 0x20], r13b
lea r8, [r9 - 1]
call fcn.1400befb0
jmp 0x1400c0f49
mov rcx, qword [0x140117680]
lea r9, [0x1400da7a4]
xor r8d, r8d
call fcn.140056cc0
add rsp, 0x10050
pop r15
pop r14
pop r13
pop rdi
pop rsi
pop rbp
pop rbx
ret