Function at 0x14008e180
Capabilities:
Check for time delay via gettickcount

Disassembly:
mov qword [rsp + 0x20], r9
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
mov eax, 0x10050
call fcn.1400be180
sub rsp, rax
mov esi, r8d
mov rbp, rdx
mov rdi, rcx
test rcx, rcx
je 0x14008e1bd
xor r9d, r9d
mov byte [rsp + 0x20], 1
or r8, 0xffffffffffffffff
xor edx, edx
call fcn.14008c5a0
mov eax, dword [rsp + 0x100b0]
mov r12d, 0x1f4
test eax, eax
mov qword [rsp + 0x100a0], r15
mov r14d, 1
mov r13d, gethostbyname
cmovne r12d, eax
mov ebx, r14d
cmp dword [rsp + 0x100b8], 1
cmovge r13d, dword [rsp + 0x100b8]
cmp esi, ebx
cmovge ebx, esi
test rbp, rbp
je 0x14008e2a5
lea rax, [rsp + 0x10098]
xor r9d, r9d
mov qword [rsp + 0x30], rax
xor r8d, r8d
mov dword [rsp + 0x28], 0x7d0
mov edx, 0x406
mov rcx, rbp
mov dword [rsp + 0x20], 2
call qword [sym.imp.USER32.dll_SendMessageTimeoutW]
test rax, rax
je 0x14008e2a5
movsxd rax, ebx
cmp rax, qword [rsp + 0x10098]
jg 0x14008e2a5
lea rdx, [rsp + 0x100b0]
mov rcx, rbp
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov r8d, dword [rsp + 0x100b0]
xor edx, edx
lea ecx, [rdx + 0x38]
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rsi, rax
test rax, rax
je 0x14008e2a5
xor edx, edx
mov dword [rsp + 0x20], 4
mov r9d, 0x3000
mov r8d, 0x10000
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov r15, rax
test rax, rax
jne 0x14008e2f8
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test rdi, rdi
lea rax, [0x1400e04fc]
lea rdx, [0x1400e0a84]
cmovne rdx, rax
cmp word [rdx], 0x30
jne 0x14008e2c7
cmp word [rdx + 2], 0
je 0x14008e2db
mov rax, qword [0x1400fda58]
test byte [rax + 0x140], r14b
jne 0x14008e4b1
mov rcx, qword [0x140101f48]
xor r9d, r9d
or r8, 0xffffffffffffffff
mov byte [rsp + 0x20], r14b
call fcn.14008c5a0
jmp 0x14008e4c7
xor eax, eax
dec ebx
mov word [rsp + 0x50], ax
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov eax, eax
mov qword [rsp + 0x40], rax
movsxd rbx, ebx
nop dword [rax]
nop word [rax + rax]
lea rax, [rsp + 0x10090]
xor r9d, r9d
mov qword [rsp + 0x30], rax
mov r8, rbx
mov dword [rsp + 0x28], 0x7d0
mov edx, 0x40c
mov rcx, rbp
mov dword [rsp + 0x20], 2
call qword [sym.imp.USER32.dll_SendMessageTimeoutW]
test rax, rax
je 0x14008e3e8
mov eax, 0x7fff
cmp word [rsp + 0x10090], ax
ja 0x14008e44c
lea rax, [rsp + 0x10090]
mov r9, r15
mov qword [rsp + 0x30], rax
mov r8, rbx
mov dword [rsp + 0x28], 0x7d0
mov edx, 0x40d
mov rcx, rbp
mov dword [rsp + 0x20], 2
call qword [sym.imp.USER32.dll_SendMessageTimeoutW]
test rax, rax
je 0x14008e3e8
movzx r9d, word [rsp + 0x10090]
lea r8, [rsp + 0x50]
mov rdx, r15
mov qword [rsp + 0x20], 0
mov rcx, rsi
lea r9, [r9*2 + 2]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x14008e445
mov rdx, qword [rsp + 0x100a8]
lea rcx, [rsp + 0x50]
call fcn.14008d4b0
test al, al
jne 0x14008e424
test rdi, rdi
jne 0x14008e451
mov rcx, rbp
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x14008e46d
test r12d, r12d
js 0x14008e414
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov rcx, qword [rsp + 0x40]
add ecx, r12d
sub ecx, eax
cmp ecx, 5
jle 0x14008e490
mov edx, r14d
mov ecx, r13d
call fcn.140001710
jmp 0x14008e320
mov rcx, qword [0x140101f48]
lea rdx, [0x1400ccfe4]
xor r9d, r9d
mov byte [rsp + 0x20], r14b
or r8, 0xffffffffffffffff
call fcn.14008c5a0
jmp 0x14008e44c
xor eax, eax
mov word [rsp + 0x50], ax
test rdi, rdi
je 0x14008e46d
xor r9d, r9d
mov byte [rsp + 0x20], r14b
or r8, 0xffffffffffffffff
lea rdx, [rsp + 0x50]
mov rcx, rdi
call fcn.14008c5a0
mov r14d, eax
mov r9d, 0x8000
xor r8d, r8d
mov rdx, r15
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, r14d
jmp 0x14008e4c7
mov rcx, qword [0x140101f48]
lea rdx, [0x1400e04fc]
xor r9d, r9d
mov byte [rsp + 0x20], r14b
or r8, 0xffffffffffffffff
call fcn.14008c5a0
jmp 0x14008e46d
mov rcx, qword [0x140104b88]
lea r9, [0x1400ccf5c]
xor r8d, r8d
call fcn.140036900
mov r15, qword [rsp + 0x100a0]
add rsp, 0x10050
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret