Function at 0x140013120
Capabilities:
Check for time delay via gettickcount

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
mov qword [rax + 0x20], rdi
push r12
push r14
push r15
sub rsp, 0x60
mov r15d, dword gs:[0x48]
movzx r12d, dl
cmp dword [0x140137320], 1
mov rdi, rcx
jne 0x1400133a1
mov qword [rax + 8], rbp
mov ebx, 1
mov qword [rax + 0x10], rsi
xor al, al
cmp qword [0x140134450], 0
movzx ebp, al
cmovne ebp, ebx
cmp qword [0x140134448], 0
je 0x14001317d
or bpl, 2
test bpl, bpl
je 0x140013196
movzx ecx, byte [0x14013a45f]
movzx edx, bl
not cl
and cl, bpl
call fcn.14000a620
mov ecx, dword [0x14013a488]
xor r14d, r14d
mov r9, qword [0x140137328]
mov r10d, r14d
mov esi, r14d
test ecx, ecx
je 0x140013254
mov eax, esi
lea rdi, [rax + rax*4]
cmp dword [r9 + rdi*8], ebx
jne 0x140013235
cmp word [r9 + rdi*8 + 8], r14w
jne 0x140013235
cmp word [r9 + rdi*8 + 0xa], r14w
jne 0x140013235
mov eax, r10d
mov r8d, 0x28
lea rcx, [rax + rax*4]
lea rdx, [r9 + rcx*8]
mov ecx, esi
sub ecx, r10d
call qword [0x14013a3c0]
cmp dword [0x140139538], r15d
mov rax, qword [0x140137328]
mov dword [0x14012fa50], r14d
je 0x140013213
mov ecx, dword [rax + rdi*8 + 0x18]
test ecx, ecx
js 0x140013213
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x14001321e
mov ecx, dword [rax + rdi*8 + 0x18]
mov edx, ebx
call fcn.1400018b0
mov ecx, dword [0x14013a488]
lea r10d, [rsi + 1]
mov r9, qword [0x140137328]
mov dword [0x14012fa50], ebx
inc esi
cmp esi, ecx
jb 0x1400131b4
test r10d, r10d
je 0x140013254
mov eax, r10d
mov ecx, r10d
lea rdx, [rax + rax*4]
lea rdx, [r9 + rdx*8]
jmp 0x140013257
mov rdx, r9
mov r8d, 0x28
call qword [0x14013a3c0]
test bpl, bpl
je 0x14001337a
movzx eax, byte [0x14013a45f]
and al, bpl
test bl, al
je 0x1400132ad
movzx ecx, bl
call fcn.140014120
movzx edx, al
xor dl, r12b
movzx ecx, dl
and dl, al
and cl, r12b
not cl
and cl, byte [0x14013522c]
or cl, dl
mov byte [0x14013522c], cl
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov qword [0x140134678], rax
xor al, al
cmp qword [0x140134450], r14
movzx eax, al
cmovne eax, ebx
cmp qword [0x140134448], r14
je 0x1400132c7
or al, 2
cmp bpl, al
je 0x14001337a
mov edi, r14d
movzx esi, bpl
nop word [rax + rax]
mov ecx, dword [0x140135364]
xor r9d, r9d
mov r8, rsi
mov edx, 0x417
call qword [sym.imp.USER32.dll_PostThreadMessageW]
test eax, eax
jne 0x14001330b
lea ecx, [rax + 0xa]
call qword [sym.imp.KERNEL32.dll_Sleep]
inc edi
cmp edi, 0x32
jl 0x1400132e0
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov edi, eax
mov r9d, 0x417
mov dword [rsp + 0x20], ebx
mov r8d, r9d
lea rcx, [rsp + 0x30]
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
jne 0x14001334a
call qword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, edi
cmp eax, 0x1f4
ja 0x14001337a
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140013313
cmp qword [rsp + 0x40], r14
je 0x14001337a
xorps xmm3, xmm3
mov dword [0x14012fa50], r14d
xor r8d, r8d
mov qword [rsp + 0x20], r14
mov edx, 0x10000
lea rcx, str.Warning:_The_keyboard_and_or_mouse_hook_could_not_be_activated__some_parts_of_the_script_will_not_function.
call fcn.1400ad390
mov dword [0x14012fa50], ebx
mov rbp, qword [rsp + 0x80]
mov rsi, qword [rsp + 0x88]
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop r12
ret
xor r14d, r14d
xor ecx, ecx
mov dword [0x14013a490], r14d
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov ebx, 1
lea rdx, [0x140011160]
mov r8, rax
mov ecx, ebx
xor r9d, r9d
call qword [sym.imp.USER32.dll_SetWindowsHookExW]
mov qword [0x1401343f8], rax
test rax, rax
je 0x14001338a
mov byte [0x1401344ff], bl
nop
mov edx, ebx
mov dword [0x14012fa50], r14d
mov ecx, 0x8000012f
call fcn.1400018b0
cmp qword [0x1401343f8], r14
mov dword [0x14012fa50], ebx
jne 0x1400133e0
mov ecx, dword [0x14013a488]
mov rax, qword [0x140131498]
dec ecx
mov byte [0x1401344ff], r14b
mov rdx, qword [rax]
cmp dword [rdx + rcx*8], r14d
jne 0x14001338a
mov eax, dword [rdx + rcx*8 + 4]
mov dword [rdi], eax
jmp 0x14001338a