Function at 0x1400a1440
Capabilities:
Check for time delay via gettickcount

Disassembly:
mov qword [rsp + 0x18], r8
push rbx
push rbp
push rdi
push r14
push r15
mov eax, 0x10060
call fcn.1400d8050
sub rsp, rax
mov ebx, dword [rsp + 0x100b8]
mov r14d, edx
lea rdx, [0x140108b28]
mov rdi, r9
call fcn.1400a17c0
mov rbp, rax
test rax, rax
jne 0x1400a151e
mov rax, qword [0x14011c188]
mov rcx, qword [0x140124458]
cmp dword [rax + 0x60], ebp
jne 0x1400a14d4
cmp dword [0x140124cb8], ebp
jne 0x1400a14d4
cmp byte [0x14011ea7a], bpl
jne 0x1400a14d4
test rcx, rcx
jne 0x1400a14d4
xor r15d, r15d
lea r9, [0x1400f9b70]
mov qword [rsp + 0x28], r15
lea r8d, [rbp + 9]
lea rdx, [0x140108b50]
mov qword [rsp + 0x20], r15
lea rcx, [0x1401245b0]
call fcn.1400106f0
jmp 0x1400a14fe
mov qword [rsp + 0x28], rcx
lea r8, [0x1400f9b70]
lea rcx, [0x1401245b0]
mov dword [rsp + 0x20], 9
xor r9d, r9d
lea rdx, [0x140108b50]
call fcn.14000f030
mov ecx, eax
mov edx, 0x20000000
test ecx, ecx
mov eax, 0xa0000000
cmovne eax, edx
add rsp, 0x10060
pop r15
pop r14
pop rdi
pop rbp
pop rbx
ret
cmp ebx, 1
mov qword [rsp + 0x10090], rsi
mov eax, gethostbyaddr
mov qword [rsp + 0x10098], r12
cmovge eax, ebx
mov esi, 1
mov ebx, esi
mov dword [rsp + 0x44], eax
lea rax, [rsp + 0x50]
cmp r14d, ebx
mov qword [rsp + 0x30], rax
mov edx, 0x406
cmovge ebx, r14d
mov dword [rsp + 0x28], 0x7d0
xor r9d, r9d
mov dword [rsp + 0x20], 2
xor r8d, r8d
mov rcx, rbp
call qword [sym.imp.USER32.dll_SendMessageTimeoutW]
test rax, rax
je 0x1400a15f0
movsxd rax, ebx
cmp rax, qword [rsp + 0x50]
jle 0x1400a159a
neg rdi
sbb eax, eax
and eax, 2
or eax, 0xa00a0000
jmp 0x1400a179b
lea rdx, [rsp + 0x40]
mov rcx, rbp
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov r8d, dword [rsp + 0x40]
xor edx, edx
lea ecx, [rdx + 0x38]
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r14, rax
test rax, rax
je 0x1400a15f0
xor edx, edx
mov dword [rsp + 0x20], 4
mov r9d, 0x3000
mov r8d, 0x10000
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov r12, rax
test rax, rax
jne 0x1400a15fa
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, 0xa0070000
jmp 0x1400a179b
xor r15d, r15d
mov qword [rsp + 0x100a8], r13
dec ebx
mov word [rsp + 0x60], r15w
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov eax, eax
movsxd r13, ebx
mov ebx, dword [rsp + 0x100b0]
mov qword [rsp + 0x58], rax
nop dword [rax]
nop dword [rax + rax]
lea rax, [rsp + 0x48]
xor r9d, r9d
mov qword [rsp + 0x30], rax
mov r8, r13
mov dword [rsp + 0x28], 0x7d0
mov edx, 0x40c
mov rcx, rbp
mov dword [rsp + 0x20], 2
call qword [sym.imp.USER32.dll_SendMessageTimeoutW]
test rax, rax
je 0x1400a16ea
mov eax, 0x7fff
cmp word [rsp + 0x48], ax
ja 0x1400a1732
lea rax, [rsp + 0x48]
mov r9, r12
mov qword [rsp + 0x30], rax
mov r8, r13
mov dword [rsp + 0x28], 0x7d0
mov edx, 0x40d
mov rcx, rbp
mov dword [rsp + 0x20], 2
call qword [sym.imp.USER32.dll_SendMessageTimeoutW]
test rax, rax
je 0x1400a16ea
movzx r9d, word [rsp + 0x48]
lea r8, [rsp + 0x60]
inc r9d
mov qword [rsp + 0x20], r15
add r9, r9
mov rdx, r12
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x1400a172c
test rdi, rdi
je 0x1400a1732
mov rdx, rdi
lea rcx, [rsp + 0x60]
call fcn.14009fe70
test al, al
jne 0x1400a1791
test rdi, rdi
je 0x1400a1732
mov rcx, rbp
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x1400a17ba
test ebx, ebx
js 0x1400a171c
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov rcx, qword [rsp + 0x58]
add ecx, ebx
sub ecx, eax
cmp ecx, 5
jle 0x1400a17ba
mov ecx, dword [rsp + 0x44]
mov edx, esi
call fcn.140001710
jmp 0x1400a1630
mov word [rsp + 0x60], r15w
mov r9d, 0x8000
xor r8d, r8d
mov rdx, r12
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rax, qword [rsp + 0x100a0]
test rax, rax
je 0x1400a1791
lea rcx, [rsp + 0x60]
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp word [rcx + r8*2], r15w
jne 0x1400a1770
lea rdx, [rsp + 0x60]
mov rcx, rax
call fcn.140029b10
test al, al
mov ecx, 0xa00e0001
cmove esi, ecx
mov eax, esi
mov r13, qword [rsp + 0x100a8]
mov rsi, qword [rsp + 0x10090]
mov r12, qword [rsp + 0x10098]
add rsp, 0x10060
pop r15
pop r14
pop rdi
pop rbp
pop rbx
ret
xor eax, eax
jmp 0x1400a1793