Function at 0x140049b0c
Capabilities:
Check for time delay via gettickcount
Terminate process

Disassembly:
mov rax, rsp
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0xba0
mov qword [rax - 0xae0], 0xfffffffffffffffe
mov qword [rax + 0x18], rbx
mov rax, qword [0x14019be90]
xor rax, rsp
mov qword [rsp + 0xb90], rax
mov r15, rdx
mov rsi, rcx
mov qword [rsp + 0xa0], rcx
mov ecx, dword [0x1401a3d80]
lea r8d, [rcx + 2]
lea eax, [rcx + 1]
imul r8d, eax
imul r8d, ecx
mov eax, 0x78787879
imul r8d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x11
sub r8d, edx
cmp r8d, 2
jne 0x140049ba1
lea ecx, [r8 + 2]
call fcn.1400bb888
mov rbx, rax
call fcn.1400bba88
mov dword [rbx], eax
mov dword [0x1401a3d80], eax
mov rcx, rbx
call fcn.1400bb0b4
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r14d, eax
and dword [rsp + 0x20], 0
lea rdx, [rsp + 0x20]
mov rcx, qword [r15 + 0x1d8]
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov edi, eax
mov ebx, dword [rsi + 0x1ec]
call qword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, ebx
cmp eax, dword [r15 + 0x1f0]
jbe 0x140049bf5
test ebx, ebx
jne 0x140049be9
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [r15 + 0x1f8]
call fcn.1400598a8
mov eax, dword [rsp + 0x20]
test edi, edi
je 0x140049c13
cmp eax, 0x103
jne 0x140049c13
mov ecx, dword [r15 + 0x1e4]
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140049baa
test eax, eax
je 0x140049f19
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
sub ecx, r14d
mov eax, 0x10624dd3
mul ecx
mov r14d, edx
shr r14d, 6
mov r8d, dword [0x1401a3d80]
mov ecx, r8d
imul ecx, r8d
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
shl eax, 3
sub ecx, eax
cmp ecx, 0xe
jne 0x140049ca6
xor ecx, ecx
mov r9d, 0x84210843
jmp 0x140049c80
mov eax, r8d
or eax, 0xffffffb7
add r8d, eax
inc ecx
mov eax, r8d
imul eax, r8d
cmp ecx, eax
jg 0x140049ca0
mov eax, r9d
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x3e
mov eax, r8d
sub eax, edx
cmp eax, 0x7f
jne 0x140049c6a
mov dword [0x1401a3d80], ecx
lea rcx, [rsi + 0x48]
mov r8d, 8
lea rdx, [rsp + 0x78]
call fcn.140018a98
nop
mov r8d, 4
lea rdx, [rsp + 0xe0]
mov rcx, rax
call fcn.140018b50
nop
xor edx, edx
lea r8d, [rdx + 0x10]
mov rcx, qword [rax]
call fcn.1400bfe48
mov ebx, eax
mov rdx, qword [rsp + 0xe0]
add rdx, 0xffffffffffffffe8
or edi, 0xffffffff
mov ecx, edi
lock xadd dword [rdx + 0x10], ecx
add ecx, edi
test ecx, ecx
jg 0x140049d08
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140049d27
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov r8d, dword [0x1401a3d80]
lea ecx, [r8 + 2]
lea eax, [r8 + 1]
imul ecx, eax
imul ecx, r8d
mov r11d, 0x66666667
mov eax, r11d
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
cmp ecx, 5
jne 0x140049dc1
xor r9d, r9d
mov r10d, 0x6bca1af3
mov eax, r10d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x26
mov eax, r8d
sub eax, edx
cmp eax, 0x51
je 0x140049dba
mov eax, r8d
or eax, 0xfffffff5
add r8d, eax
inc r9d
mov eax, r8d
imul eax, r8d
cmp r9d, eax
jg 0x140049dba
mov eax, r10d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x26
mov ecx, r8d
sub ecx, edx
cmp ecx, 0x51
jne 0x140049d85
mov dword [0x1401a3d80], r9d
mov eax, r11d
imul ebx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
add eax, eax
sub ebx, eax
cmp ebx, 7
jne 0x140049f1c
xor ecx, ecx
call fcn.1400bc320
mov rbx, rax
call fcn.1400212b0
movsxd rcx, eax
sub rbx, rcx
cmp rbx, 0x93a80
jge 0x140049f1c
call fcn.140043ffc
mov rdx, rax
lea rcx, [rsp + 0x38]
call fcn.1400020f8
nop
call fcn.1400415dc
mov rdx, rax
lea rcx, [rsp + 0x50]
call fcn.1400020f8
nop
mov r8d, dword [rsp + 0x20]
mov rdx, rax
lea rcx, [rsp + 0x88]
call fcn.14001d998
nop
lea r8, [rsp + 0x38]
mov rdx, rax
lea rcx, [rsp + 0xc0]
call fcn.14001da0c
nop
mov r8d, r14d
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.14001d998
nop
mov rdx, qword [rsp + 0xc0]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140049e88
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x88]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140049eab
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140049ecb
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x38]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140049eea
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rdx, [rsp + 0x40]
mov rcx, rsi
call fcn.14004b1f4
nop
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140049f1c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x140049f1c
or edi, 0xffffffff
mov r14d, dword [0x1401a3d80]
lea ecx, [r14 + 1]
imul ecx, r14d
mov eax, 0x2e8ba2e9
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0xb
sub ecx, edx
cmp ecx, 3
jne 0x140049fc3
xor r11d, r11d
mov dword [rsp + 0x24], r11d
cmp r11d, 0xc
jge 0x140049fc3
xor r10d, r10d
mov dword [rsp + 0x34], r10d
cmp r10d, 0xe
jge 0x140049fbe
xor ebx, ebx
mov dword [rsp + 0x30], ebx
cmp ebx, 0x10
jge 0x140049fb9
lea r12d, [rbx + 1]
lea ecx, [r10 + 1]
mov eax, r14d
cdq
idiv ecx
mov r9d, edx
mov eax, r14d
cdq
idiv r12d
imul r9d, eax
mov eax, r14d
sub eax, r11d
imul r9d, eax
movsxd r8, r11d
imul r8, r8, 0xe
movsxd rax, r10d
add r8, rax
add r8, r8
movsxd rax, ebx
lea rcx, [rsp + 0x110]
add rcx, rax
mov byte [rcx + r8*8], r9b
mov ebx, r12d
jmp 0x140049f63
inc r10d
jmp 0x140049f56
inc r11d
jmp 0x140049f48
and dword [rsi + 0x1e0], 0
lea r12, [r15 + 0x1f8]
mov rcx, r12
call fcn.1400598a8
mov eax, dword [0x1401a3d80]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, 0x30c30c31
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x15
sub ecx, edx
cmp ecx, 0xf
jne 0x14004a02a
mov ecx, 4
call fcn.1400bb888
mov rbx, rax
mov qword [rsp + 0xf0], rax
call fcn.1400bba88
mov dword [rbx], eax
mov dword [0x1401a3d80], eax
mov rcx, rbx
call fcn.1400bb0b4
lea r14, [rsi + 0x190]
mov rdx, r14
lea rcx, [rsp + 0x28]
call fcn.140002cf8
nop
mov ecx, dword [0x1401a3d80]
imul ecx, ecx
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
shl eax, 3
sub ecx, eax
cmp ecx, 0xe
jne 0x14004a08a
mov rax, qword [str.5x4GIzSMdH6]
mov qword [rsp + 0xd0], rax
mov eax, dword [0x1401370e0]
mov dword [rsp + 0xd8], eax
mov byte [rsp + 0xd0], 0x99
mov rcx, r15
call fcn.140048f84
mov ebx, eax
mov dword [rsp + 0x68], eax
test eax, eax
je 0x14004a0c8
lea rdx, str.task
mov rcx, qword [rsi + 0xe0]
call fcn.1400cf0b4
test eax, eax
sete dl
test dl, dl
je 0x14004a0c0
mov rcx, rsi
call fcn.140014628
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov rcx, qword [r14]
mov qword [rsp + 0xf8], rcx
xor eax, eax
test rcx, rcx
setne al
mov dword [rsp + 0xb0], eax
test eax, eax
jne 0x14004a0f0
mov ecx, 0x80004005
call fcn.14000187c
mov rax, qword [rsp + 0x28]
sub rcx, rax
movzx edx, word [rax]
cmp dx, word [rax + rcx]
jne 0x14004a10e
add rax, 2
test dx, dx
jne 0x14004a0f8
xor eax, eax
jmp 0x14004a113
sbb eax, eax
or eax, 1
mov dword [rsp + 0xc8], eax
test eax, eax
je 0x14004a23b
lea rdx, [0x140135b50]
lea rcx, [rsp + 0x48]
call fcn.140002d94
nop
call fcn.140042480
mov rdx, rax
lea r8, [rsp + 0x28]
lea rcx, [rsp + 0x60]
call fcn.140018cd0
nop
lea r8, [rsp + 0x48]
mov rdx, rax
lea rcx, [rsp + 0xa8]
call fcn.14000dac8
nop
mov r8, r14
mov rdx, rax
lea rcx, [rsp + 0x98]
call fcn.14000dac8
nop
mov rdx, rax
mov rcx, rsi
call fcn.14004b1f4
nop
mov rcx, qword [rsp + 0x98]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0xb8], rcx
mov eax, edi
lock xadd dword [rcx + 0x10], eax
add eax, edi
test eax, eax
jg 0x14004a1b5
mov rdx, qword [rsp + 0xb8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0xa8]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x58], rcx
mov eax, edi
lock xadd dword [rcx + 0x10], eax
add eax, edi
test eax, eax
jg 0x14004a1e2
mov rdx, qword [rsp + 0x58]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x60]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x70], rcx
mov eax, edi
lock xadd dword [rcx + 0x10], eax
add eax, edi
test eax, eax
jg 0x14004a20c
mov rdx, qword [rsp + 0x70]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
mov qword [rsp + 0x80], rdx
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x14004a23b
mov rdx, qword [rsp + 0x80]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rcx, r12
call fcn.1400598a8
nop
mov rcx, qword [rsp + 0x28]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x90], rcx
mov eax, edi
lock xadd dword [rcx + 0x10], eax
add eax, edi
test eax, eax
jg 0x14004a274
mov rdx, qword [rsp + 0x90]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
xor eax, eax
mov rcx, qword [rsp + 0xb90]
xor rcx, rsp
call fcn.1400bb0d0
mov rbx, qword [rsp + 0xbe0]
add rsp, 0xba0
pop r15
pop r14
pop r12
pop rdi
pop rsi
ret