Function at 0x14000a620
Capabilities:
Check for time delay via gettickcount
Create thread

Disassembly:
push rbp
push rsi
push rdi
push r13
sub rsp, 0x68
xor al, al
mov r13d, 1
cmp qword [0x140134450], 0
movzx esi, dl
movzx edi, al
movzx ebp, cl
cmovne edi, r13d
cmp qword [0x140134448], 0
je 0x14000a655
or dil, 2
cmp bpl, dil
je 0x14000a921
mov qword [rsp + 0xa0], r12
xor r12d, r12d
test dil, dil
jne 0x14000a6b9
test sil, sil
jne 0x14000a6b9
lea rax, [0x140135364]
xor r9d, r9d
mov qword [rsp + 0x28], rax
lea r8, [0x14000a9a0]
mov edx, 0x2000
mov dword [rsp + 0x20], r12d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [0x14013ae88], rax
test rax, rax
je 0x14000a766
lea edx, [r12 + 0xf]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetThreadPriority]
mov qword [rsp + 0x98], rbx
test sil, sil
mov qword [rsp + 0xa8], r14
mov ebx, r12d
mov r14, r12
mov qword [rsp + 0x60], r15
sete r14b
movzx r15d, bpl
nop
mov ecx, dword [0x140135364]
mov r9, r14
mov r8, r15
mov edx, 0x417
call qword [sym.imp.USER32.dll_PostThreadMessageW]
test eax, eax
jne 0x14000a70b
lea ecx, [rax + 0xa]
call qword [sym.imp.KERNEL32.dll_Sleep]
inc ebx
cmp ebx, 0x32
jl 0x14000a6e0
xor bl, bl
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r15, qword [rsp + 0x60]
mov r14d, eax
nop dword [rax + rax]
test bpl, bpl
je 0x14000a770
mov r9d, 0x417
mov dword [rsp + 0x20], r13d
mov r8d, r9d
lea rcx, [rsp + 0x30]
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x14000a7ae
cmp qword [rsp + 0x40], r12
je 0x14000a77e
movzx ebx, r13b
call fcn.14000ada0
test al, al
jne 0x14000a77e
test sil, sil
jne 0x14000a8df
xor bpl, bpl
jmp 0x14000a720
call fcn.14000add0
jmp 0x14000a919
test sil, sil
je 0x14000a78c
call fcn.14000ada0
test al, al
jne 0x14000a7ae
test sil, sil
jne 0x14000a8db
jmp 0x14000a857
mov rcx, qword [0x14013ae88]
lea rdx, [rsp + 0x90]
call qword [sym.imp.KERNEL32.dll_GetExitCodeThread]
cmp dword [rsp + 0x90], 0x103
jne 0x14000a7cb
call qword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, r14d
cmp eax, 0x1f4
ja 0x14000a77e
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x14000a720
mov rcx, qword [0x14013ae88]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [0x140135380]
mov qword [0x14013ae88], r12
test rcx, rcx
je 0x14000a7f7
call fcn.1400c44c0
mov qword [0x140135380], r12
mov rcx, qword [0x140135378]
test rcx, rcx
je 0x14000a80f
call fcn.1400c44c0
mov qword [0x140135378], r12
mov rcx, qword [0x140135398]
test rcx, rcx
je 0x14000a827
call fcn.1400c44c0
mov qword [0x140135398], r12
mov rcx, qword [0x140135390]
test rcx, rcx
je 0x14000a83f
call fcn.1400c44c0
mov qword [0x140135390], r12
mov rcx, qword [0x140135388]
test rcx, rcx
je 0x14000a857
call fcn.1400c44c0
mov qword [0x140135388], r12
cmp qword [0x140134450], r12
je 0x14000a87f
test r13b, dil
jne 0x14000a898
lea r8, str.Melon
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [0x1401353a8], rax
jmp 0x14000a898
test r13b, dil
je 0x14000a898
mov rcx, qword [0x1401353a8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [0x1401353a8], r12
cmp qword [0x140134448], r12
je 0x14000a8c1
test dil, 2
jne 0x14000a8db
lea r8, str.Strawberry
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [0x1401353a0], rax
jmp 0x14000a8db
test dil, 2
je 0x14000a8db
mov rcx, qword [0x1401353a0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [0x1401353a0], r12
test bl, bl
je 0x14000a909
xorps xmm3, xmm3
mov dword [0x14012fa50], r12d
xor r8d, r8d
mov qword [rsp + 0x20], r12
mov edx, 0x10000
lea rcx, str.Warning:_The_keyboard_and_or_mouse_hook_could_not_be_activated__some_parts_of_the_script_will_not_function.
call fcn.1400ad390
mov dword [0x14012fa50], r13d
mov rbx, qword [rsp + 0x98]
mov r14, qword [rsp + 0xa8]
mov r12, qword [rsp + 0xa0]
add rsp, 0x68
pop r13
pop rdi
pop rsi
pop rbp
ret