Function at 0x1400ab750
Capabilities:
Check for time delay via gettickcount

Disassembly:
mov qword [rsp + 0x18], r8
push rbx
push rbp
push rsi
push rdi
push r12
mov eax, 0x10060
call fcn.1400e19f0
sub rsp, rax
mov ebx, dword [rsp + 0x100b8]
mov ebp, edx
lea rdx, str.msctls_statusbar321
mov rdi, r9
call fcn.1400aba90
mov rsi, rax
test rax, rax
jne 0x1400ab7d7
mov rax, qword [0x140131858]
lea rdx, str.No_StatusBar.
mov qword [rsp + 0x28], rax
lea rcx, [0x1401319c0]
xor r12d, r12d
mov r9d, 9
xor r8d, r8d
mov qword [rsp + 0x20], r12
call fcn.14000fec0
test eax, eax
mov ecx, 0xa0000000
mov edx, 0x20000000
cmovne ecx, edx
mov eax, ecx
add rsp, 0x10060
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
cmp ebx, 1
mov qword [rsp + 0x10098], r14
mov eax, gethostbyaddr
mov qword [rsp + 0x100a8], r15
cmovge eax, ebx
mov r14d, 1
mov ebx, r14d
mov dword [rsp + 0x48], eax
lea rax, [rsp + 0x58]
cmp ebp, ebx
mov qword [rsp + 0x30], rax
mov edx, 0x406
cmovge ebx, ebp
mov dword [rsp + 0x28], 0x7d0
xor r9d, r9d
mov dword [rsp + 0x20], 2
xor r8d, r8d
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageTimeoutW]
test rax, rax
je 0x1400aba7f
movsxd rax, ebx
cmp rax, qword [rsp + 0x58]
jle 0x1400ab857
neg rdi
sbb eax, eax
and eax, 2
or eax, 0xa00a0000
jmp 0x1400aba5d
lea rdx, [rsp + 0x40]
mov rcx, rsi
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov r8d, dword [rsp + 0x40]
xor edx, edx
mov ecx, reloc.WSOCK32.dll_getservbyport
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbp, rax
test rax, rax
je 0x1400aba7f
xor edx, edx
mov dword [rsp + 0x20], 4
mov r9d, 0x3000
mov r8d, 0x10000
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov r15, rax
test rax, rax
jne 0x1400ab8b3
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test r15, r15
je 0x1400aba7f
xor r12d, r12d
mov qword [rsp + 0x10090], r13
dec ebx
mov word [rsp + 0x60], r12w
call qword [sym.imp.KERNEL32.dll_GetTickCount]
movsxd r13, ebx
mov ebx, dword [rsp + 0x100b0]
mov dword [rsp + 0x44], eax
nop dword [rax]
nop word [rax + rax]
lea rax, [rsp + 0x50]
xor r9d, r9d
mov qword [rsp + 0x30], rax
mov r8, r13
mov dword [rsp + 0x28], 0x7d0
mov edx, 0x40c
mov rcx, rsi
mov dword [rsp + 0x20], 2
call qword [sym.imp.USER32.dll_SendMessageTimeoutW]
test rax, rax
je 0x1400ab9aa
mov eax, 0x7fff
cmp word [rsp + 0x50], ax
ja 0x1400ab9f2
lea rax, [rsp + 0x50]
mov r9, r15
mov qword [rsp + 0x30], rax
mov r8, r13
mov dword [rsp + 0x28], 0x7d0
mov edx, 0x40d
mov rcx, rsi
mov dword [rsp + 0x20], 2
call qword [sym.imp.USER32.dll_SendMessageTimeoutW]
test rax, rax
je 0x1400ab9aa
movzx r9d, word [rsp + 0x50]
lea r8, [rsp + 0x60]
inc r9d
mov qword [rsp + 0x20], r12
add r9, r9
mov rdx, r15
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x1400ab9ec
test rdi, rdi
je 0x1400ab9f2
mov rdx, rdi
lea rcx, [rsp + 0x60]
call fcn.1400aa260
test al, al
jne 0x1400aba52
test rdi, rdi
je 0x1400ab9f2
mov rcx, rsi
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x1400aba7b
test ebx, ebx
js 0x1400ab9db
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [rsp + 0x44]
add ecx, ebx
sub ecx, eax
cmp ecx, 5
jle 0x1400aba7b
mov ecx, dword [rsp + 0x48]
mov edx, r14d
call fcn.140001800
jmp 0x1400ab8f0
mov word [rsp + 0x60], r12w
mov r9d, 0x8000
xor r8d, r8d
mov rdx, r15
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rax, qword [rsp + 0x100a0]
test rax, rax
je 0x1400aba52
lea rcx, [rsp + 0x60]
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp word [rcx + r8*2], r12w
jne 0x1400aba30
lea rdx, [rsp + 0x60]
mov rcx, rax
call fcn.14002b520
test al, al
mov ecx, 0xa00e0001
cmove r14d, ecx
mov eax, r14d
mov r13, qword [rsp + 0x10090]
mov r14, qword [rsp + 0x10098]
mov r15, qword [rsp + 0x100a8]
add rsp, 0x10060
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
xor eax, eax
jmp 0x1400aba55
mov eax, 0xa0070000
jmp 0x1400aba5d