Function at 0x1400c0280
Capabilities:
Check for time delay via gettickcount

Disassembly:
mov qword [rsp + 0x20], r9
push rbx
push rbp
push rsi
push rdi
push r13
push r14
push r15
mov eax, 0x10050
call fcn.1400f3640
sub rsp, rax
mov esi, r8d
mov r14, rdx
mov rbp, rcx
test rcx, rcx
je 0x1400c02bd
xor r9d, r9d
mov byte [rsp + 0x20], 1
xor edx, edx
lea r8, [r9 - 1]
call fcn.1400be640
mov eax, dword [rsp + 0x100b0]
mov edi, 0x1f4
test eax, eax
mov r13d, 1
mov ebx, r13d
mov r15d, gethostbyname
cmovne edi, eax
cmp dword [rsp + 0x100b8], 1
cmovge r15d, dword [rsp + 0x100b8]
cmp esi, ebx
cmovge ebx, esi
test r14, r14
je 0x1400c0397
lea rax, [rsp + 0x48]
xor r9d, r9d
mov qword [rsp + 0x30], rax
xor r8d, r8d
mov dword [rsp + 0x28], 0x7d0
mov edx, 0x406
mov rcx, r14
mov dword [rsp + 0x20], 2
call qword [sym.imp.USER32.dll_SendMessageTimeoutW]
test rax, rax
je 0x1400c0397
movsxd rax, ebx
cmp rax, qword [rsp + 0x48]
jg 0x1400c0397
lea rdx, [rsp + 0x100b0]
mov rcx, r14
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov r8d, dword [rsp + 0x100b0]
xor edx, edx
lea ecx, [rdx + 0x38]
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rsi, rax
test rax, rax
je 0x1400c0397
xor edx, edx
mov dword [rsp + 0x20], 4
mov r9d, 0x3000
mov r8d, 0x10000
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov qword [rsp + 0x40], rax
test rax, rax
jne 0x1400c03ea
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test rbp, rbp
lea rax, [0x140119fac]
lea rdx, [0x14011a514]
cmovne rdx, rax
cmp word [rdx], 0x30
jne 0x1400c03b9
cmp word [rdx + 2], 0
je 0x1400c03cd
mov rax, qword [0x14013dbf0]
test byte [rax + 0x140], r13b
jne 0x1400c0617
mov rcx, qword [0x140142748]
xor r9d, r9d
mov byte [rsp + 0x20], r13b
lea r8, [r9 - 1]
call fcn.1400be640
jmp 0x1400c062d
mov eax, dword gs:[0x48]
dec ebx
mov dword [rsp + 0x100b8], eax
xor eax, eax
mov word [rsp + 0x50], ax
mov qword [rsp + 0x100a0], r12
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r12d, eax
movsxd rax, ebx
mov qword [rsp + 0x10098], rax
lea rcx, [rsp + 0x10090]
xor r9d, r9d
mov qword [rsp + 0x30], rcx
mov r8, rax
mov dword [rsp + 0x28], 0x7d0
mov rcx, r14
mov edx, 0x40c
mov dword [rsp + 0x20], 2
mov ebx, 0x7fff
call qword [sym.imp.USER32.dll_SendMessageTimeoutW]
test rax, rax
je 0x1400c04f6
cmp word [rsp + 0x10090], bx
ja 0x1400c05a8
mov rbx, qword [rsp + 0x40]
lea rax, [rsp + 0x10090]
mov r8, qword [rsp + 0x10098]
mov r9, rbx
mov qword [rsp + 0x30], rax
mov edx, 0x40d
mov dword [rsp + 0x28], 0x7d0
mov rcx, r14
mov dword [rsp + 0x20], 2
call qword [sym.imp.USER32.dll_SendMessageTimeoutW]
test rax, rax
je 0x1400c04f6
movzx r9d, word [rsp + 0x10090]
lea r8, [rsp + 0x50]
inc r9d
mov qword [rsp + 0x20], 0
add r9, r9
mov rdx, rbx
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x1400c05a1
mov rdx, qword [rsp + 0x100a8]
lea rcx, [rsp + 0x50]
call fcn.1400bf490
test al, al
jne 0x1400c0580
test rbp, rbp
jne 0x1400c05ad
mov rcx, r14
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x1400c05c9
mov eax, dword [rsp + 0x100b8]
cmp dword [0x140145ca0], eax
jne 0x1400c054f
test edi, edi
js 0x1400c0537
mov ebx, r12d
call qword [sym.imp.KERNEL32.dll_GetTickCount]
lea ecx, [rdi + r12]
sub ecx, eax
cmp ecx, 5
jle 0x1400c0552
mov edx, r13d
mov ecx, r15d
call fcn.140001b10
mov rax, qword [rsp + 0x10098]
jmp 0x1400c041e
mov ebx, r12d
test edi, edi
js 0x1400c056a
call qword [sym.imp.KERNEL32.dll_GetTickCount]
lea ecx, [rdi + rbx]
sub ecx, eax
cmp ecx, 5
jle 0x1400c05f6
mov ecx, r15d
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rax, qword [rsp + 0x10098]
jmp 0x1400c041e
mov rcx, qword [0x140142748]
lea rdx, [0x140103654]
xor r9d, r9d
mov byte [rsp + 0x20], r13b
lea r8, [r9 - 1]
call fcn.1400be640
jmp 0x1400c05a8
xor eax, eax
mov word [rsp + 0x50], ax
test rbp, rbp
je 0x1400c05c9
xor r9d, r9d
mov byte [rsp + 0x20], r13b
lea rdx, [rsp + 0x50]
mov rcx, rbp
lea r8, [r9 - 1]
call fcn.1400be640
mov r13d, eax
mov rdx, qword [rsp + 0x40]
mov r9d, 0x8000
xor r8d, r8d
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r12, qword [rsp + 0x100a0]
mov eax, r13d
jmp 0x1400c062d
mov rcx, qword [0x140142748]
lea rdx, [0x140119fac]
xor r9d, r9d
mov byte [rsp + 0x20], r13b
lea r8, [r9 - 1]
call fcn.1400be640
jmp 0x1400c05c9
mov rcx, qword [0x1401463a0]
lea r9, [0x140103574]
xor r8d, r8d
call fcn.140056750
add rsp, 0x10050
pop r15
pop r14
pop r13
pop rdi
pop rsi
pop rbp
pop rbx
ret