Function at 0x14004de80
Capabilities:
Check for time delay via gettickcount
Terminate process

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
sub rsp, 0x40
mov r12, rcx
mov rcx, rdx
mov rsi, r9
mov rbp, r8
mov rdi, rdx
call fcn.140043030
movsxd rbx, eax
test eax, eax
jne 0x14004dec5
lea rdx, str.Parameter_1_invalid.
mov r9, rdi
xor r8d, r8d
mov rcx, r12
add rsp, 0x40
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
jmp fcn.1400402d0
cmp ebx, 1
je 0x14004ea1b
mov qword [rsp + 0x70], r13
cmp ebx, 2
je 0x14004e706
cmp ebx, 3
je 0x14004e256
jle 0x14004e244
cmp ebx, 5
jg 0x14004e244
xor edi, edi
mov qword [rsp + 0x78], r14
mov qword [rsp + 0x80], r15
cmp word [rsi], di
je 0x14004df2b
mov rcx, rsi
xor r12b, r12b
call fcn.14001bfd0
mulsd xmm0, qword [0x140100e18]
cvttsd2si r13d, xmm0
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r14d, eax
jmp 0x14004df36
mov r14d, dword [rsp + 0x30]
mov r12b, 1
mov r13d, edi
mov r15, rbx
mov esi, 1
nop
mov rcx, rbp
call fcn.140081d70
mov ebx, eax
cmp r15, 4
jne 0x14004df6b
test eax, eax
je 0x14004df6f
mov rcx, qword [0x1401182a0]
mov rdx, rbx
mov r8b, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.140001090
jmp 0x14004e020
test eax, eax
je 0x14004df93
test r12b, r12b
jne 0x14004df85
call qword [sym.imp.KERNEL32.dll_GetTickCount]
lea ecx, [r14 + r13]
sub ecx, eax
cmp ecx, 5
jle 0x14004df54
mov edx, esi
mov ecx, 0x64
call fcn.140001a70
jmp 0x14004df40
mov rbp, qword [0x1401182a0]
movzx eax, byte [rbp + 0x23]
test al, al
jne 0x14004dfc0
mov rcx, qword [rbp + 0x10]
lea rdx, [0x1400e250c]
xor r9d, r9d
or r8, 0xffffffffffffffff
mov byte [rsp + 0x20], sil
call fcn.1400b0840
jmp 0x14004e01e
lea r12, [0x1400e250c]
cmp qword [rbp + 8], r12
jne 0x14004dfd6
mov r14, qword [rbp + 0x10]
shr r14, 1
jmp 0x14004dfd9
mov r14, rsi
lea rcx, [r14 + 1]
lea r13, [rcx + rcx]
cmp al, 2
jne 0x14004dff2
mov rdx, r14
mov rcx, r12
call fcn.140006100
jmp 0x14004e01e
mov r8, qword [0x140112480]
cmp r13, r8
jbe 0x14004e03f
cmp r13, qword [rbp + 0x18]
jbe 0x14004e03f
lea r8, [0x1400e246c]
lea rdx, str.Memory_limit_reached__see_MaxMem_in_the_help_file_.
lea rcx, [0x140119170]
call fcn.140040620
mov esi, eax
mov r14, qword [rsp + 0x78]
mov r15, qword [rsp + 0x80]
mov eax, esi
mov r13, qword [rsp + 0x70]
add rsp, 0x40
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
cmp rcx, 2
jae 0x14004e056
xor r8d, r8d
mov rcx, rbp
lea edx, [r8 + 4]
call fcn.1400b0ef0
jmp 0x14004e020
movzx eax, byte [rbp + 0x21]
test al, 2
je 0x14004e074
mov rcx, qword [rbp]
and al, 0x3d
mov byte [rbp + 0x21], al
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov r8, qword [0x140112480]
mov r9, qword [rbp + 0x18]
and byte [rbp + 0x21], 0x82
cmp r13, r9
jbe 0x14004e1e6
movzx r10d, byte [rbp + 0x20]
movzx eax, r10b
cmp r10b, sil
jbe 0x14004e0a6
cmp al, 2
je 0x14004e0e6
mov rbx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
jmp 0x14004e1da
mov ebx, pe_nt_image_headers64
cmp r13, rbx
ja 0x14004e0e6
cmp r13, 8
ja 0x14004e0bd
mov ebx, 8
jmp 0x14004e0c9
mov eax, reloc.OLEAUT32.dll_SafeArrayGetDim
cmp r13, rax
cmovbe rbx, rax
mov rcx, rbx
call fcn.1400a99c0
test rax, rax
jne 0x14004e0dd
mov esi, edi
jmp 0x14004e020
mov byte [rbp + 0x20], sil
jmp 0x14004e1da
cmp r13, 0x20
jae 0x14004e0f6
mov ebx, SafeArrayAllocDescriptor
jmp 0x14004e1a0
mov ebx, 0x208
cmp r13, rbx
jb 0x14004e1a0
cmp r13, 0x50000
jae 0x14004e15c
pxor xmm0, xmm0
cvtsi2sd xmm0, r13
test r13, r13
jns 0x14004e123
addsd xmm0, qword [0x140100df8]
mulsd xmm0, qword [0x140100e30]
movsd xmm1, qword [0x140100e28]
xor ecx, ecx
comisd xmm0, xmm1
jbe 0x14004e152
subsd xmm0, xmm1
comisd xmm0, xmm1
jae 0x14004e152
movabs rax, 0x8000000000000000
mov rcx, rax
cvttsd2si rbx, xmm0
add rbx, rcx
jmp 0x14004e1a0
cmp r13, 0x320000
jae 0x14004e16e
lea rbx, [r13 + 0x8000]
jmp 0x14004e1a0
cmp r13, 0xc80000
jae 0x14004e199
movabs rax, 0x47ae147ae147ae15
mov rbx, r13
mul r13
sub rbx, rdx
shr rbx, 1
add rbx, rdx
shr rbx, 6
add rbx, r13
jmp 0x14004e1a0
lea rbx, [r13 + 0x20000]
cmp rbx, r8
cmova rbx, r8
cmp r10b, 2
jne 0x14004e1c1
test r9, r9
je 0x14004e1c1
mov rcx, qword [rbp + 8]
movzx r13d, sil
call fcn.1400ca7a0
jmp 0x14004e1c4
xor r13b, r13b
test rbx, rbx
js 0x14004e210
mov rcx, rbx
call fcn.1400c9d04
test rax, rax
je 0x14004e210
mov byte [rbp + 0x20], 2
and byte [rbp + 0x21], 0x7f
mov qword [rbp + 8], rax
mov qword [rbp + 0x18], rbx
mov rcx, qword [rbp + 8]
cmp rcx, r12
je 0x14004e1fb
lea r8, [r14 + r14]
mov rdx, r12
call fcn.1400ca960
mov rax, qword [rbp + 8]
lea rcx, [r14 + r14]
mov word [rcx + rax], di
mov qword [rbp + 0x10], rcx
jmp 0x14004e020
test r13b, r13b
je 0x14004e226
lea rax, [0x140119128]
mov qword [rbp + 0x18], rdi
mov qword [rbp + 8], rax
jmp 0x14004e22d
mov rax, qword [rbp + 8]
mov word [rax], di
mov qword [rbp + 0x10], rdi
lea r8, [0x1400e246c]
lea rdx, str.Out_of_memory.
jmp 0x14004e012
xor eax, eax
mov r13, qword [rsp + 0x70]
add rsp, 0x40
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
movzx ecx, word [rsi]
call fcn.1400cc0dc
movzx r11d, ax
add r11d, 0xffffffbf
cmp r11d, 0x11
ja case.0x14004e289.67
lea rdx, sym.MZ_mQi__2AXcFXq_ppj624W7rH_FhFt_bkZW__Vxfp1Vv
movsxd rax, r11d
mov ebx, pe_nt_image_headers64
mov ecx, dword [rdx + rax*4 + 0x4ea54]
add rcx, rdx
jmp rcx
mov edi, 0x40
jmp 0x14004e2b0
mov edi, 0x4000
jmp 0x14004e2b0
mov edi, SafeArrayAllocDescriptor
jmp 0x14004e2b0
mov edi, 0x8000
jmp 0x14004e2b0
mov edi, ebx
jmp 0x14004e2b0
mov edi, 0x100
cmp word [rbp], 0
je 0x14004e2c1
mov rcx, rbp
call fcn.140081d70
jmp 0x14004e2c7
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov esi, eax
test eax, eax
je 0x14004e328
mov r8d, eax
xor edx, edx
mov ecx, 0x200
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbp, rax
test rax, rax
je 0x14004e328
mov edx, edi
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetPriorityClass]
mov rcx, rbp
mov ebx, eax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [0x1401182a0]
xor edi, edi
test ebx, ebx
mov r8b, reloc.OLEAUT32.dll_SafeArrayGetElement
cmovne edi, esi
mov edx, edi
call fcn.140001090
mov r13, qword [rsp + 0x70]
mov eax, 1
add rsp, 0x40
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
mov rbp, qword [0x1401182a0]
movzx eax, byte [rbp + 0x23]
test al, al
je 0x14004e77e
lea r12, [0x1400e250c]
mov esi, 1
cmp qword [rbp + 8], r12
jne 0x14004e356
mov r13, qword [rbp + 0x10]
shr r13, 1
jmp 0x14004e359
mov r13, rsi
lea rcx, [r13 + 1]
lea rdi, [rcx + rcx]
cmp al, 2
je 0x14004e7cb
mov r8, qword [0x140112480]
cmp rdi, r8
jbe 0x14004e37f
cmp rdi, qword [rbp + 0x18]
ja 0x14004e7ef
cmp rcx, 2
jb 0x14004e816
movzx eax, byte [rbp + 0x21]
test al, 2
je 0x14004e3a7
mov rcx, qword [rbp]
and al, 0x3d
mov byte [rbp + 0x21], al
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov r8, qword [0x140112480]
mov r9, qword [rbp + 0x18]
and byte [rbp + 0x21], 0x82
cmp rdi, r9
jbe 0x14004e9bf
movzx r10d, byte [rbp + 0x20]
movzx eax, r10b
cmp r10b, sil
jbe 0x14004e3d9
cmp al, 2
je 0x14004e3f2
mov rbx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
jmp 0x14004e9b3
cmp rdi, rbx
ja 0x14004e3f2
cmp rdi, 8
ja 0x14004e5cd
mov ebx, 8
jmp 0x14004e5d9
cmp rdi, 0x20
jae 0x14004e402
mov ebx, SafeArrayAllocDescriptor
jmp 0x14004e4ac
mov ebx, 0x208
cmp rdi, rbx
jb 0x14004e4ac
cmp rdi, 0x50000
jae 0x14004e468
pxor xmm0, xmm0
cvtsi2sd xmm0, rdi
test rdi, rdi
jns 0x14004e42f
addsd xmm0, qword [0x140100df8]
mulsd xmm0, qword [0x140100e30]
movsd xmm1, qword [0x140100e28]
xor ecx, ecx
comisd xmm0, xmm1
jbe 0x14004e45e
subsd xmm0, xmm1
comisd xmm0, xmm1
jae 0x14004e45e
movabs rax, 0x8000000000000000
mov rcx, rax
cvttsd2si rbx, xmm0
add rbx, rcx
jmp 0x14004e4ac
cmp rdi, 0x320000
jae 0x14004e47a
lea rbx, [rdi + 0x8000]
jmp 0x14004e4ac
cmp rdi, 0xc80000
jae 0x14004e4a5
movabs rax, 0x47ae147ae147ae15
mov rbx, rdi
mul rdi
sub rbx, rdx
shr rbx, 1
add rbx, rdx
shr rbx, 6
add rbx, rdi
jmp 0x14004e4ac
lea rbx, [rdi + 0x20000]
cmp rbx, r8
cmova rbx, r8
cmp r10b, 2
jne 0x14004e4cd
test r9, r9
je 0x14004e4cd
mov rcx, qword [rbp + 8]
movzx edi, sil
call fcn.1400ca7a0
jmp 0x14004e4d0
xor dil, dil
test rbx, rbx
js 0x14004e4e6
mov rcx, rbx
call fcn.1400c9d04
test rax, rax
jne 0x14004e9af
test dil, dil
je 0x14004e9ed
lea rax, [0x140119128]
xor edi, edi
mov qword [rbp + 8], rax
mov qword [rbp + 0x18], rdi
jmp 0x14004e9f6
mov rbp, qword [0x1401182a0]
movzx eax, byte [rbp + 0x23]
test al, al
je 0x14004e77e
lea r12, [0x1400e250c]
mov esi, 1
cmp qword [rbp + 8], r12
jne 0x14004e533
mov r13, qword [rbp + 0x10]
shr r13, 1
jmp 0x14004e536
mov r13, rsi
lea rcx, [r13 + 1]
lea rdi, [rcx + rcx]
cmp al, 2
je 0x14004e7cb
mov r8, qword [0x140112480]
cmp rdi, r8
jbe 0x14004e55c
cmp rdi, qword [rbp + 0x18]
ja 0x14004e7ef
cmp rcx, 2
jb 0x14004e816
movzx eax, byte [rbp + 0x21]
test al, 2
je 0x14004e584
mov rcx, qword [rbp]
and al, 0x3d
mov byte [rbp + 0x21], al
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov r8, qword [0x140112480]
mov r9, qword [rbp + 0x18]
and byte [rbp + 0x21], 0x82
cmp rdi, r9
jbe 0x14004e9bf
movzx r10d, byte [rbp + 0x20]
movzx eax, r10b
cmp r10b, sil
jbe 0x14004e5b6
cmp al, 2
je 0x14004e5f3
mov rbx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
jmp 0x14004e9b3
mov ebx, pe_nt_image_headers64
cmp rdi, rbx
ja 0x14004e5f3
cmp rdi, 8
ja 0x14004e5cd
mov ebx, 8
jmp 0x14004e5d9
mov eax, reloc.OLEAUT32.dll_SafeArrayGetDim
cmp rdi, rax
cmovbe rbx, rax
mov rcx, rbx
call fcn.1400a99c0
test rax, rax
je 0x14004e8ae
mov byte [rbp + 0x20], sil
jmp 0x14004e9b3
cmp rdi, 0x20
jae 0x14004e603
mov ebx, SafeArrayAllocDescriptor
jmp 0x14004e6ad
mov ebx, 0x208
cmp rdi, rbx
jb 0x14004e6ad
cmp rdi, 0x50000
jae 0x14004e669
pxor xmm0, xmm0
cvtsi2sd xmm0, rdi
test rdi, rdi
jns 0x14004e630
addsd xmm0, qword [0x140100df8]
mulsd xmm0, qword [0x140100e30]
movsd xmm1, qword [0x140100e28]
xor ecx, ecx
comisd xmm0, xmm1
jbe 0x14004e65f
subsd xmm0, xmm1
comisd xmm0, xmm1
jae 0x14004e65f
movabs rax, 0x8000000000000000
mov rcx, rax
cvttsd2si rbx, xmm0
add rbx, rcx
jmp 0x14004e6ad
cmp rdi, 0x320000
jae 0x14004e67b
lea rbx, [rdi + 0x8000]
jmp 0x14004e6ad
cmp rdi, 0xc80000
jae 0x14004e6a6
movabs rax, 0x47ae147ae147ae15
mov rbx, rdi
mul rdi
sub rbx, rdx
shr rbx, 1
add rbx, rdx
shr rbx, 6
add rbx, rdi
jmp 0x14004e6ad
lea rbx, [rdi + 0x20000]
cmp rbx, r8
cmova rbx, r8
cmp r10b, 2
jne 0x14004e6ce
test r9, r9
je 0x14004e6ce
mov rcx, qword [rbp + 8]
movzx edi, sil
call fcn.1400ca7a0
jmp 0x14004e6d1
xor dil, dil
test rbx, rbx
js 0x14004e6e7
mov rcx, rbx
call fcn.1400c9d04
test rax, rax
jne 0x14004e9af
test dil, dil
je 0x14004e9ed
lea rax, [0x140119128]
xor edi, edi
mov qword [rbp + 0x18], rdi
mov qword [rbp + 8], rax
jmp 0x14004e9f6
mov rcx, rbp
call fcn.140081d70
mov esi, eax
test eax, eax
je 0x14004e76f
mov r8d, eax
xor edx, edx
mov ecx, 0x1f0fff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rdi, rax
test rax, rax
je 0x14004e76f
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov rcx, rdi
mov ebx, eax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [0x1401182a0]
xor edi, edi
test ebx, ebx
mov r8b, reloc.OLEAUT32.dll_SafeArrayGetElement
cmovne edi, esi
mov edx, edi
call fcn.140001090
mov r13, qword [rsp + 0x70]
mov eax, 1
add rsp, 0x40
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
mov rbp, qword [0x1401182a0]
movzx eax, byte [rbp + 0x23]
test al, al
jne 0x14004e7a1
mov rcx, qword [rbp + 0x10]
lea rdx, [0x1400e250c]
xor r9d, r9d
or r8, 0xffffffffffffffff
mov byte [rsp + 0x20], 1
call fcn.1400b0840
mov esi, eax
jmp 0x14004e02d
lea r12, [0x1400e250c]
mov esi, 1
cmp qword [rbp + 8], r12
jne 0x14004e7bc
mov r13, qword [rbp + 0x10]
shr r13, 1
jmp 0x14004e7bf
mov r13, rsi
lea rcx, [r13 + 1]
lea rdi, [rcx + rcx]
cmp al, 2
jne 0x14004e7dd
mov rdx, r13
mov rcx, r12
call fcn.140006100
mov esi, eax
jmp 0x14004e02d
mov r8, qword [0x140112480]
cmp rdi, r8
jbe 0x14004e810
cmp rdi, qword [rbp + 0x18]
jbe 0x14004e810
lea r8, [0x1400e246c]
lea rdx, str.Memory_limit_reached__see_MaxMem_in_the_help_file_.
lea rcx, [0x140119170]
call fcn.140040620
mov esi, eax
jmp 0x14004e02d
cmp rcx, 2
jae 0x14004e82a
xor r8d, r8d
mov rcx, rbp
lea edx, [r8 + 4]
call fcn.1400b0ef0
jmp 0x14004e02d
movzx eax, byte [rbp + 0x21]
test al, 2
je 0x14004e848
mov rcx, qword [rbp]
and al, 0x3d
mov byte [rbp + 0x21], al
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov r8, qword [0x140112480]
mov r9, qword [rbp + 0x18]
and byte [rbp + 0x21], 0x82
cmp rdi, r9
jbe 0x14004e9bf
movzx r10d, byte [rbp + 0x20]
movzx eax, r10b
cmp r10b, sil
jbe 0x14004e87a
cmp al, 2
je 0x14004e8b7
mov rbx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
jmp 0x14004e9b3
mov ebx, pe_nt_image_headers64
cmp rdi, rbx
ja 0x14004e8b7
cmp rdi, 8
ja 0x14004e891
mov ebx, 8
jmp 0x14004e89d
mov eax, reloc.OLEAUT32.dll_SafeArrayGetDim
cmp rdi, rax
cmovbe rbx, rax
mov rcx, rbx
call fcn.1400a99c0
test rax, rax
jne 0x14004e5ea
xor edi, edi
mov esi, edi
jmp 0x14004e02d
cmp rdi, 0x20
jae 0x14004e8c7
mov ebx, SafeArrayAllocDescriptor
jmp 0x14004e971
mov ebx, 0x208
cmp rdi, rbx
jb 0x14004e971
cmp rdi, 0x50000
jae 0x14004e92d
pxor xmm0, xmm0
cvtsi2sd xmm0, rdi
test rdi, rdi
jns 0x14004e8f4
addsd xmm0, qword [0x140100df8]
mulsd xmm0, qword [0x140100e30]
movsd xmm1, qword [0x140100e28]
xor ecx, ecx
comisd xmm0, xmm1
jbe 0x14004e923
subsd xmm0, xmm1
comisd xmm0, xmm1
jae 0x14004e923
movabs rax, 0x8000000000000000
mov rcx, rax
cvttsd2si rbx, xmm0
add rbx, rcx
jmp 0x14004e971
cmp rdi, 0x320000
jae 0x14004e93f
lea rbx, [rdi + 0x8000]
jmp 0x14004e971
cmp rdi, 0xc80000
jae 0x14004e96a
movabs rax, 0x47ae147ae147ae15
mov rbx, rdi
mul rdi
sub rbx, rdx
shr rbx, 1
add rbx, rdx
shr rbx, 6
add rbx, rdi
jmp 0x14004e971
lea rbx, [rdi + 0x20000]
cmp rbx, r8
cmova rbx, r8
cmp r10b, 2
jne 0x14004e992
test r9, r9
je 0x14004e992
mov rcx, qword [rbp + 8]
movzx edi, sil
call fcn.1400ca7a0
jmp 0x14004e995
xor dil, dil
test rbx, rbx
js 0x14004e6e7
mov rcx, rbx
call fcn.1400c9d04
test rax, rax
je 0x14004e6e7
mov byte [rbp + 0x20], 2
mov qword [rbp + 8], rax
mov qword [rbp + 0x18], rbx
and byte [rbp + 0x21], 0x7f
mov rcx, qword [rbp + 8]
cmp rcx, r12
je 0x14004e9d5
lea r8, [r13 + r13]
mov rdx, r12
call fcn.1400ca960
mov rax, qword [rbp + 8]
lea rcx, [r13 + r13]
xor edi, edi
mov word [rcx + rax], di
mov qword [rbp + 0x10], rcx
jmp 0x14004e02d
mov rax, qword [rbp + 8]
xor edi, edi
mov word [rax], di
lea r8, [0x1400e246c]
lea rdx, str.Out_of_memory.
lea rcx, [0x140119170]
mov qword [rbp + 0x10], rdi
call fcn.140040620
mov esi, eax
jmp 0x14004e02d
cmp word [rbp], 0
je 0x14004ea2c
mov rcx, rbp
call fcn.140081d70
jmp 0x14004ea32
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov rcx, qword [0x1401182a0]
mov edx, eax
mov r8b, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.140001090
mov eax, 1
add rsp, 0x40
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret