Function at 0x14006cf90
Capabilities:
Check for time delay via gettickcount
Terminate process

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
sub rsp, 0x40
mov r12, rcx
mov rcx, rdx
mov rsi, r9
mov rbp, r8
mov rdi, rdx
call fcn.1400322d0
movsxd rbx, eax
test eax, eax
jne 0x14006cfd5
lea rdx, str.Parameter_1_invalid.
mov r9, rdi
xor r8d, r8d
mov rcx, r12
add rsp, 0x40
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
jmp fcn.14005f3f0
cmp ebx, 1
je 0x14006da21
mov qword [rsp + 0x70], r13
cmp ebx, 2
je 0x14006d709
cmp ebx, 3
je 0x14006d38c
jle 0x14006d37a
cmp ebx, 5
jg 0x14006d37a
xor edi, edi
mov qword [rsp + 0x78], r14
mov qword [rsp + 0x80], r15
cmp word [rsi], di
je 0x14006d03b
mov rcx, rsi
xor r12b, r12b
call fcn.14002f9a0
mulsd xmm0, qword [0x1401279c8]
cvttsd2si r13d, xmm0
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r14d, eax
jmp 0x14006d046
mov r14d, dword [rsp + 0x30]
mov r12b, 1
mov r13d, edi
mov r15d, dword gs:[0x48]
mov qword [rsp + 0x30], rbx
mov esi, 1
nop dword [rax]
mov rcx, rbp
call fcn.1400a7db0
cmp qword [rsp + 0x30], 4
mov ebx, eax
jne 0x14006d08d
test eax, eax
je 0x14006d091
mov rcx, qword [0x140140268]
mov rdx, rbx
mov r8b, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.140001090
jmp 0x14006d153
test eax, eax
je 0x14006d0c6
test r12b, r12b
jne 0x14006d0a7
call qword [sym.imp.KERNEL32.dll_GetTickCount]
lea ecx, [r14 + r13]
sub ecx, eax
cmp ecx, 5
jle 0x14006d076
cmp dword [0x1401430c0], r15d
mov ecx, WSAAsyncSelect
jne 0x14006d0be
mov edx, esi
call fcn.140001b80
jmp 0x14006d060
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x14006d060
mov rbp, qword [0x140140268]
movzx eax, byte [rbp + 0x23]
test al, al
jne 0x14006d0f3
mov rcx, qword [rbp + 0x10]
lea rdx, [0x140103674]
xor r9d, r9d
or r8, 0xffffffffffffffff
mov byte [rsp + 0x20], sil
call fcn.1400e6e20
jmp 0x14006d151
lea r12, [0x140103674]
cmp qword [rbp + 8], r12
jne 0x14006d109
mov r14, qword [rbp + 0x10]
shr r14, 1
jmp 0x14006d10c
mov r14, rsi
lea rcx, [r14 + 1]
lea r13, [rcx + rcx]
cmp al, 2
jne 0x14006d125
mov rdx, r14
mov rcx, r12
call fcn.140006bc0
jmp 0x14006d151
mov r8, qword [0x14013b0d0]
cmp r13, r8
jbe 0x14006d172
cmp r13, qword [rbp + 0x18]
jbe 0x14006d172
lea r8, [0x1401035ac]
lea rdx, [0x140124720]
lea rcx, [0x140143150]
call fcn.14005f7b0
mov esi, eax
mov r14, qword [rsp + 0x78]
mov r15, qword [rsp + 0x80]
mov eax, esi
mov r13, qword [rsp + 0x70]
add rsp, 0x40
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
cmp rcx, 2
jae 0x14006d189
xor r8d, r8d
mov rcx, rbp
lea edx, [r8 + 3]
call fcn.1400e74d0
jmp 0x14006d153
movzx eax, byte [rbp + 0x21]
test al, 2
je 0x14006d1a7
mov rcx, qword [rbp]
and al, 0x3d
mov byte [rbp + 0x21], al
mov rax, qword [rcx]
call qword [rax + reloc.WSOCK32.dll_recv]
mov r8, qword [0x14013b0d0]
mov r9, qword [rbp + 0x18]
and byte [rbp + 0x21], 0x82
cmp r13, r9
jbe 0x14006d31b
movzx r10d, byte [rbp + 0x20]
movzx eax, r10b
cmp r10b, sil
jbe 0x14006d1d9
cmp al, 2
je 0x14006d219
mov rbx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
jmp 0x14006d30f
mov ebx, 0x80
cmp r13, rbx
ja 0x14006d219
cmp r13, 8
ja 0x14006d1f0
mov ebx, 8
jmp 0x14006d1fc
mov eax, reloc.WSOCK32.dll_recv
cmp r13, rax
cmovbe rbx, rax
mov rcx, rbx
call fcn.1400dd290
test rax, rax
jne 0x14006d210
mov esi, edi
jmp 0x14006d153
mov byte [rbp + 0x20], sil
jmp 0x14006d30f
cmp r13, 0x20
jae 0x14006d229
mov ebx, SafeArrayAllocDescriptor
jmp 0x14006d2d3
mov ebx, 0x208
cmp r13, rbx
jb 0x14006d2d3
cmp r13, 0x50000
jae 0x14006d28f
pxor xmm0, xmm0
cvtsi2sd xmm0, r13
test r13, r13
jns 0x14006d256
addsd xmm0, qword [0x1401279a8]
mulsd xmm0, qword [0x1401279e0]
movsd xmm1, qword [0x1401279d8]
xor ecx, ecx
comisd xmm0, xmm1
jbe 0x14006d285
subsd xmm0, xmm1
comisd xmm0, xmm1
jae 0x14006d285
movabs rax, 0x8000000000000000
mov rcx, rax
cvttsd2si rbx, xmm0
add rbx, rcx
jmp 0x14006d2d3
cmp r13, 0x320000
jae 0x14006d2a1
lea rbx, [r13 + 0x8000]
jmp 0x14006d2d3
cmp r13, 0xc80000
jae 0x14006d2cc
movabs rax, 0x47ae147ae147ae15
mov rbx, r13
mul r13
sub rbx, rdx
shr rbx, 1
add rbx, rdx
shr rbx, 6
add rbx, r13
jmp 0x14006d2d3
lea rbx, [r13 + 0x20000]
cmp rbx, r8
cmova rbx, r8
cmp r10b, 2
jne 0x14006d2f5
test r9, r9
je 0x14006d2f5
mov rcx, qword [rbp + 8]
movzx r13d, sil
call qword [sym.imp.MSVCR100.dll_free]
jmp 0x14006d2f8
xor r13b, r13b
test rbx, rbx
js 0x14006d346
mov rcx, rbx
call qword [sym.imp.MSVCR100.dll_malloc]
test rax, rax
je 0x14006d346
mov byte [rbp + 0x20], 2
and byte [rbp + 0x21], 0x7f
mov qword [rbp + 8], rax
mov qword [rbp + 0x18], rbx
mov rcx, qword [rbp + 8]
cmp rcx, r12
je 0x14006d331
lea r8, [r14 + r14]
mov rdx, r12
call qword [sym.imp.MSVCR100.dll_memmove]
mov rax, qword [rbp + 8]
lea rcx, [r14 + r14]
mov word [rcx + rax], di
mov qword [rbp + 0x10], rcx
jmp 0x14006d153
test r13b, r13b
je 0x14006d35c
lea rax, [0x140141fa8]
mov qword [rbp + 0x18], rdi
mov qword [rbp + 8], rax
jmp 0x14006d363
mov rax, qword [rbp + 8]
mov word [rax], di
mov qword [rbp + 0x10], rdi
lea r8, [0x1401035ac]
lea rdx, str.Out_of_memory.
jmp 0x14006d145
xor eax, eax
mov r13, qword [rsp + 0x70]
add rsp, 0x40
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
movzx ecx, word [rsi]
call qword [sym.imp.MSVCR100.dll_towupper]
movzx r11d, ax
add r11d, 0xffffffbf
cmp r11d, 0x11
ja case.0x14006d3c0.67
lea rdx, [0x140000000]
movsxd rax, r11d
mov ebx, 0x80
mov ecx, dword [rdx + rax*4 + 0x6da5c]
add rcx, rdx
jmp rcx
mov edi, 0x40
jmp 0x14006d3e7
mov edi, 0x4000
jmp 0x14006d3e7
mov edi, SafeArrayAllocDescriptor
jmp 0x14006d3e7
mov edi, 0x8000
jmp 0x14006d3e7
mov edi, ebx
jmp 0x14006d3e7
mov edi, 0x100
cmp word [rbp], 0
je 0x14006d3f8
mov rcx, rbp
call fcn.1400a7db0
jmp 0x14006d3fe
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov esi, eax
test eax, eax
je 0x14006d45f
mov r8d, eax
xor edx, edx
mov ecx, 0x200
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbp, rax
test rax, rax
je 0x14006d45f
mov edx, edi
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetPriorityClass]
mov rcx, rbp
mov ebx, eax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [0x140140268]
xor edi, edi
test ebx, ebx
mov r8b, reloc.OLEAUT32.dll_SafeArrayGetElement
cmovne edi, esi
mov edx, edi
call fcn.140001090
mov r13, qword [rsp + 0x70]
mov eax, 1
add rsp, 0x40
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
mov rbp, qword [0x140140268]
movzx eax, byte [rbp + 0x23]
test al, al
je 0x14006d781
lea r12, [0x140103674]
mov esi, 1
cmp qword [rbp + 8], r12
jne 0x14006d48d
mov r13, qword [rbp + 0x10]
shr r13, 1
jmp 0x14006d490
mov r13, rsi
lea rcx, [r13 + 1]
lea rdi, [rcx + rcx]
cmp al, 2
je 0x14006d7ce
mov r8, qword [0x14013b0d0]
cmp rdi, r8
jbe 0x14006d4b6
cmp rdi, qword [rbp + 0x18]
ja 0x14006d7f2
cmp rcx, 2
jb 0x14006d819
movzx eax, byte [rbp + 0x21]
test al, 2
je 0x14006d4de
mov rcx, qword [rbp]
and al, 0x3d
mov byte [rbp + 0x21], al
mov rax, qword [rcx]
call qword [rax + reloc.WSOCK32.dll_recv]
mov r8, qword [0x14013b0d0]
mov r9, qword [rbp + 0x18]
and byte [rbp + 0x21], 0x82
cmp rdi, r9
jbe 0x14006d9c4
movzx r10d, byte [rbp + 0x20]
movzx eax, r10b
cmp r10b, sil
jbe 0x14006d5bc
jmp 0x14006d5a4
mov rbp, qword [0x140140268]
movzx eax, byte [rbp + 0x23]
test al, al
je 0x14006d781
lea r12, [0x140103674]
mov esi, 1
cmp qword [rbp + 8], r12
jne 0x14006d534
mov r13, qword [rbp + 0x10]
shr r13, 1
jmp 0x14006d537
mov r13, rsi
lea rcx, [r13 + 1]
lea rdi, [rcx + rcx]
cmp al, 2
je 0x14006d7ce
mov r8, qword [0x14013b0d0]
cmp rdi, r8
jbe 0x14006d55d
cmp rdi, qword [rbp + 0x18]
ja 0x14006d7f2
cmp rcx, 2
jb 0x14006d819
movzx eax, byte [rbp + 0x21]
test al, 2
je 0x14006d585
mov rcx, qword [rbp]
and al, 0x3d
mov byte [rbp + 0x21], al
mov rax, qword [rcx]
call qword [rax + reloc.WSOCK32.dll_recv]
mov r8, qword [0x14013b0d0]
mov r9, qword [rbp + 0x18]
and byte [rbp + 0x21], 0x82
cmp rdi, r9
jbe 0x14006d9c4
movzx r10d, byte [rbp + 0x20]
movzx eax, r10b
cmp r10b, sil
jbe 0x14006d5b7
cmp al, 2
je 0x14006d5f4
mov rbx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
jmp 0x14006d9b8
mov ebx, 0x80
cmp rdi, rbx
ja 0x14006d5f4
cmp rdi, 8
ja 0x14006d5ce
mov ebx, 8
jmp 0x14006d5da
mov eax, reloc.WSOCK32.dll_recv
cmp rdi, rax
cmovbe rbx, rax
mov rcx, rbx
call fcn.1400dd290
test rax, rax
je 0x14006d8b1
mov byte [rbp + 0x20], sil
jmp 0x14006d9b8
cmp rdi, 0x20
jae 0x14006d604
mov ebx, SafeArrayAllocDescriptor
jmp 0x14006d6ae
mov ebx, 0x208
cmp rdi, rbx
jb 0x14006d6ae
cmp rdi, 0x50000
jae 0x14006d66a
pxor xmm0, xmm0
cvtsi2sd xmm0, rdi
test rdi, rdi
jns 0x14006d631
addsd xmm0, qword [0x1401279a8]
mulsd xmm0, qword [0x1401279e0]
movsd xmm1, qword [0x1401279d8]
xor ecx, ecx
comisd xmm0, xmm1
jbe 0x14006d660
subsd xmm0, xmm1
comisd xmm0, xmm1
jae 0x14006d660
movabs rax, 0x8000000000000000
mov rcx, rax
cvttsd2si rbx, xmm0
add rbx, rcx
jmp 0x14006d6ae
cmp rdi, 0x320000
jae 0x14006d67c
lea rbx, [rdi + 0x8000]
jmp 0x14006d6ae
cmp rdi, 0xc80000
jae 0x14006d6a7
movabs rax, 0x47ae147ae147ae15
mov rbx, rdi
mul rdi
sub rbx, rdx
shr rbx, 1
add rbx, rdx
shr rbx, 6
add rbx, rdi
jmp 0x14006d6ae
lea rbx, [rdi + 0x20000]
cmp rbx, r8
cmova rbx, r8
cmp r10b, 2
jne 0x14006d6d0
test r9, r9
je 0x14006d6d0
mov rcx, qword [rbp + 8]
movzx edi, sil
call qword [sym.imp.MSVCR100.dll_free]
jmp 0x14006d6d3
xor dil, dil
test rbx, rbx
js 0x14006d6ea
mov rcx, rbx
call qword [sym.imp.MSVCR100.dll_malloc]
test rax, rax
jne 0x14006d9b4
test dil, dil
je 0x14006d9f3
lea rax, [0x140141fa8]
xor edi, edi
mov qword [rbp + 0x18], rdi
mov qword [rbp + 8], rax
jmp 0x14006d9fc
mov rcx, rbp
call fcn.1400a7db0
mov esi, eax
test eax, eax
je 0x14006d772
mov r8d, eax
xor edx, edx
mov ecx, 0x1f0fff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rdi, rax
test rax, rax
je 0x14006d772
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov rcx, rdi
mov ebx, eax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [0x140140268]
xor edi, edi
test ebx, ebx
mov r8b, reloc.OLEAUT32.dll_SafeArrayGetElement
cmovne edi, esi
mov edx, edi
call fcn.140001090
mov r13, qword [rsp + 0x70]
mov eax, 1
add rsp, 0x40
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
mov rbp, qword [0x140140268]
movzx eax, byte [rbp + 0x23]
test al, al
jne 0x14006d7a4
mov rcx, qword [rbp + 0x10]
lea rdx, [0x140103674]
xor r9d, r9d
or r8, 0xffffffffffffffff
mov byte [rsp + 0x20], 1
call fcn.1400e6e20
mov esi, eax
jmp 0x14006d160
lea r12, [0x140103674]
mov esi, 1
cmp qword [rbp + 8], r12
jne 0x14006d7bf
mov r13, qword [rbp + 0x10]
shr r13, 1
jmp 0x14006d7c2
mov r13, rsi
lea rcx, [r13 + 1]
lea rdi, [rcx + rcx]
cmp al, 2
jne 0x14006d7e0
mov rdx, r13
mov rcx, r12
call fcn.140006bc0
mov esi, eax
jmp 0x14006d160
mov r8, qword [0x14013b0d0]
cmp rdi, r8
jbe 0x14006d813
cmp rdi, qword [rbp + 0x18]
jbe 0x14006d813
lea r8, [0x1401035ac]
lea rdx, [0x140124720]
lea rcx, [0x140143150]
call fcn.14005f7b0
mov esi, eax
jmp 0x14006d160
cmp rcx, 2
jae 0x14006d82d
xor r8d, r8d
mov rcx, rbp
lea edx, [r8 + 3]
call fcn.1400e74d0
jmp 0x14006d160
movzx eax, byte [rbp + 0x21]
test al, 2
je 0x14006d84b
mov rcx, qword [rbp]
and al, 0x3d
mov byte [rbp + 0x21], al
mov rax, qword [rcx]
call qword [rax + reloc.WSOCK32.dll_recv]
mov r8, qword [0x14013b0d0]
mov r9, qword [rbp + 0x18]
and byte [rbp + 0x21], 0x82
cmp rdi, r9
jbe 0x14006d9c4
movzx r10d, byte [rbp + 0x20]
movzx eax, r10b
cmp r10b, sil
jbe 0x14006d87d
cmp al, 2
je 0x14006d8ba
mov rbx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
jmp 0x14006d9b8
mov ebx, 0x80
cmp rdi, rbx
ja 0x14006d8ba
cmp rdi, 8
ja 0x14006d894
mov ebx, 8
jmp 0x14006d8a0
mov eax, reloc.WSOCK32.dll_recv
cmp rdi, rax
cmovbe rbx, rax
mov rcx, rbx
call fcn.1400dd290
test rax, rax
jne 0x14006d5eb
xor edi, edi
mov esi, edi
jmp 0x14006d160
cmp rdi, 0x20
jae 0x14006d8ca
mov ebx, SafeArrayAllocDescriptor
jmp 0x14006d974
mov ebx, 0x208
cmp rdi, rbx
jb 0x14006d974
cmp rdi, 0x50000
jae 0x14006d930
pxor xmm0, xmm0
cvtsi2sd xmm0, rdi
test rdi, rdi
jns 0x14006d8f7
addsd xmm0, qword [0x1401279a8]
mulsd xmm0, qword [0x1401279e0]
movsd xmm1, qword [0x1401279d8]
xor ecx, ecx
comisd xmm0, xmm1
jbe 0x14006d926
subsd xmm0, xmm1
comisd xmm0, xmm1
jae 0x14006d926
movabs rax, 0x8000000000000000
mov rcx, rax
cvttsd2si rbx, xmm0
add rbx, rcx
jmp 0x14006d974
cmp rdi, 0x320000
jae 0x14006d942
lea rbx, [rdi + 0x8000]
jmp 0x14006d974
cmp rdi, 0xc80000
jae 0x14006d96d
movabs rax, 0x47ae147ae147ae15
mov rbx, rdi
mul rdi
sub rbx, rdx
shr rbx, 1
add rbx, rdx
shr rbx, 6
add rbx, rdi
jmp 0x14006d974
lea rbx, [rdi + 0x20000]
cmp rbx, r8
cmova rbx, r8
cmp r10b, 2
jne 0x14006d996
test r9, r9
je 0x14006d996
mov rcx, qword [rbp + 8]
movzx edi, sil
call qword [sym.imp.MSVCR100.dll_free]
jmp 0x14006d999
xor dil, dil
test rbx, rbx
js 0x14006d6ea
mov rcx, rbx
call qword [sym.imp.MSVCR100.dll_malloc]
test rax, rax
je 0x14006d6ea
mov byte [rbp + 0x20], 2
mov qword [rbp + 8], rax
mov qword [rbp + 0x18], rbx
and byte [rbp + 0x21], 0x7f
mov rcx, qword [rbp + 8]
cmp rcx, r12
je 0x14006d9db
lea r8, [r13 + r13]
mov rdx, r12
call qword [sym.imp.MSVCR100.dll_memmove]
mov rax, qword [rbp + 8]
lea rcx, [r13 + r13]
xor edi, edi
mov word [rcx + rax], di
mov qword [rbp + 0x10], rcx
jmp 0x14006d160
mov rax, qword [rbp + 8]
xor edi, edi
mov word [rax], di
lea r8, [0x1401035ac]
lea rdx, str.Out_of_memory.
lea rcx, [0x140143150]
mov qword [rbp + 0x10], rdi
call fcn.14005f7b0
mov esi, eax
jmp 0x14006d160
cmp word [rbp], 0
je 0x14006da32
mov rcx, rbp
call fcn.1400a7db0
jmp 0x14006da38
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov rcx, qword [0x140140268]
mov edx, eax
mov r8b, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.140001090
mov eax, 1
add rsp, 0x40
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret