Function at 0x14000b23e
Capabilities:
Check for time delay via gettickcount

Disassembly:
push rbp
push rsi
push rdi
push r13
sub rsp, 0x68
xor al, al
mov r13d, 1
cmp qword [0x140189ed8], 0
movzx esi, dl
movzx edi, al
movzx ebp, cl
cmovne edi, r13d
cmp qword [0x140189ed0], 0
je 0x14000b277
or dil, 2
cmp bpl, dil
je 0x14000b5ac
mov qword [rsp + 0xa0], r12
xor r12d, r12d
test dil, dil
jne 0x14000b2e3
test sil, sil
jne 0x14000b2e3
lea rax, [0x14018ada0]
xor r9d, r9d
mov qword [rsp + 0x28], rax
lea r8, [0x14000b636]
mov edx, 0x2000
mov dword [rsp + 0x20], r12d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [0x14018fbb8], rax
test rax, rax
je 0x14000b3ab
lea edx, [r12 + 0xf]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetThreadPriority]
mov qword [rsp + 0x98], rbx
test sil, sil
mov qword [rsp + 0xa8], r14
mov ebx, r12d
mov r14, r12
mov qword [rsp + 0x60], r15
sete r14b
movzx r15d, bpl
nop
mov ecx, dword [0x14018ada0]
mov r9, r14
mov r8, r15
mov edx, 0x417
call qword [sym.imp.USER32.dll_PostThreadMessageW]
test eax, eax
jne 0x14000b33d
lea ecx, [rax + 0xa]
call qword [sym.imp.KERNEL32.dll_Sleep]
inc ebx
cmp ebx, 0x32
jl 0x14000b30a
xor bl, bl
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r15, qword [rsp + 0x60]
mov r14d, eax
nop dword [rax + rax]
test bpl, bpl
je 0x14000b3b5
mov r9d, 0x417
mov dword [rsp + 0x20], r13d
mov r8d, r9d
lea rcx, [rsp + 0x30]
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x14000b3ff
cmp qword [rsp + 0x40], r12
je 0x14000b3cb
movzx ebx, r13b
call fcn.14000ba96
test al, al
jne 0x14000b3cb
test sil, sil
jne 0x14000b56a
xor bpl, bpl
jmp 0x14000b352
call fcn.14000baca
jmp 0x14000b5a4
test sil, sil
je 0x14000b3d9
call fcn.14000ba96
test al, al
jne 0x14000b3ff
test sil, sil
jne 0x14000b562
jmp 0x14000b4c0
mov rcx, qword [0x14018fbb8]
lea rdx, [rsp + 0x90]
call qword [sym.imp.KERNEL32.dll_GetExitCodeThread]
cmp dword [rsp + 0x90], 0x103
jne 0x14000b420
call qword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, r14d
cmp eax, 0x1f4
ja 0x14000b3cb
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x14000b352
mov rcx, qword [0x14018fbb8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [0x14018adb0]
mov qword [0x14018fbb8], r12
test rcx, rcx
je 0x14000b450
call fcn.1400b6512
mov qword [0x14018adb0], r12
mov rcx, qword [0x14018ada8]
test rcx, rcx
je 0x14000b46c
call fcn.1400b6512
mov qword [0x14018ada8], r12
mov rcx, qword [0x14018adc8]
test rcx, rcx
je 0x14000b488
call fcn.1400b6512
mov qword [0x14018adc8], r12
mov rcx, qword [0x14018adc0]
test rcx, rcx
je 0x14000b4a4
call fcn.1400b6512
mov qword [0x14018adc0], r12
mov rcx, qword [0x14018adb8]
test rcx, rcx
je 0x14000b4c0
call fcn.1400b6512
mov qword [0x14018adb8], r12
cmp qword [0x140189ed8], r12
je 0x14000b4f3
test r13b, dil
jne 0x14000b510
lea r8, str.AHK_Keybd
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [0x14018add8], rax
jmp 0x14000b510
test r13b, dil
je 0x14000b510
mov rcx, qword [0x14018add8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [0x14018add8], r12
cmp qword [0x140189ed0], r12
je 0x14000b544
test dil, 2
jne 0x14000b562
lea r8, str.AHK_Mouse
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [0x14018add0], rax
jmp 0x14000b562
test dil, 2
je 0x14000b562
mov rcx, qword [0x14018add0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [0x14018add0], r12
test bl, bl
je 0x14000b594
xorps xmm3, xmm3
mov dword [0x140185a50], r12d
xor r8d, r8d
mov qword [rsp + 0x20], r12
mov edx, 0x10000
lea rcx, str.Warning:_The_keyboard_and_or_mouse_hook_could_not_be_activated__some_parts_of_the_script_will_not_function.
call fcn.14009dabd
mov dword [0x140185a50], r13d
mov rbx, qword [rsp + 0x98]
mov r14, qword [rsp + 0xa8]
mov r12, qword [rsp + 0xa0]
add rsp, 0x68
pop r13
pop rdi
pop rsi
pop rbp
ret