Function at 0x140040100
Capabilities:
Check for time delay via gettickcount

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x948]
sub rsp, 0xa48
mov qword [rsp + 0x60], 0xfffffffffffffffe
mov rax, qword [0x140076010]
xor rax, rsp
mov qword [rbp + 0x930], rax
mov dword [rsp + 0x54], r9d
mov r13d, r8d
mov r14d, edx
mov rbx, rcx
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x58], eax
xor esi, esi
lea r12d, [rsi + 6]
mov dword [rsp + 0x44], esi
mov dword [rsp + 0x48], esi
mov dword [rsp + 0x50], esi
mov byte [rsp + 0x40], sil
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
cmp dword [0x1400800c0], eax
je 0x140040199
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
lea rcx, str._T_d__s:_UI_refused__action_cancelled__not_main_thread
lea r8, str.DarwinMsgBox
mov edx, eax
call fcn.140035fec
mov r12d, 3
jmp 0x1400405de
call qword [sym.imp.Mso20Win32Client.dll_Ordinal_1635]
cmp eax, 3
je 0x1400405de
call qword [sym.imp.Mso30Win32Client.dll_Ordinal_460]
test rax, rax
je 0x1400405de
or r15, 0xffffffffffffffff
cmp r14d, r15d
je 0x1400405de
mov rax, qword [rbp + 0x9b0]
test rax, rax
je 0x1400401d4
mov eax, dword [rax]
jmp 0x1400401df
xor edx, edx
mov rcx, rbx
call fcn.1400371f4
nop
shr eax, 1
mov ecx, 1
test cl, al
jne 0x14004020a
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
lea rcx, str._T_d__s:_UI_refused_by_host
lea r8, str.DarwinMsgBox
mov edx, eax
call fcn.140035fec
jmp 0x1400405de
call qword [sym.imp.USER32.dll_GetCapture]
test rax, rax
je 0x140040224
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
lea rcx, str._T_d__s:_UI_refused__app_set_mouse_capture__thus_user_is_not_able_to_respond_to_confirmation_dialog.
jmp 0x1400401f7
cmp dword [0x140080300], esi
jle 0x14004023e
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
lea rcx, str._T_d__s:_UI_refused__UI_already_being_shown
jmp 0x140040180
mov edi, 0x12c
test r14d, r14d
jne 0x140040251
lea esi, [r14 + 1]
jmp 0x14004032a
test rbx, rbx
je 0x1400402ae
lea rax, [0x140076040]
cmp rbx, rax
je 0x1400402ae
mov rcx, qword [rbx + 0x98]
test rcx, rcx
je 0x1400405de
mov rax, qword [rcx]
lea rdx, [rsp + 0x44]
mov qword [rsp + 0x20], rdx
mov r9d, edi
lea r8, [rbp + 0x210]
mov edx, r14d
mov rax, qword [rax + 8]
call qword [case.0x140044c3e.0]
test eax, eax
je 0x1400405de
cmp dword [rsp + 0x44], esi
jne 0x1400402e8
mov dword [rsp + 0x44], 0xab507
jmp 0x1400402e8
mov ecx, 0xf902f7ed
call qword [sym.imp.Mso30Win32Client.dll_Ordinal_342]
mov rcx, rax
mov r9d, edi
lea r8, [rbp + 0x210]
mov edx, r14d
call qword [sym.imp.Mso30Win32Client.dll_Ordinal_1694]
test eax, eax
je 0x1400405de
lea r8, [rsp + 0x44]
xor edx, edx
mov ecx, r14d
call qword [sym.imp.Mso30Win32Client.dll_Ordinal_1484]
nop
mov r8d, 0x12b
lea rdx, [rbp + 0x6d2]
lea rcx, [rbp + 0x212]
call qword [sym.imp.Mso30Win32Client.dll_Ordinal_1344]
movzx esi, ax
lea eax, [rsi - 1]
cmp eax, 0x12a
ja 0x1400405de
mov ecx, 0xa
mov word [rbp + rsi*2 + 0x6d0], cx
inc esi
cmp esi, edi
je 0x1400405de
movzx ebx, r13w
mov dword [rsp + 0x4c], ebx
call qword [sym.imp.Mso30Win32Client.dll_Ordinal_460]
mov rcx, rax
mov r8d, ebx
mov edx, 4
call qword [sym.imp.Mso30Win32Client.dll_Ordinal_426]
mov ebx, eax
call qword [sym.imp.Mso30Win32Client.dll_Ordinal_460]
mov r9d, edi
lea r8, [rbp + 0x210]
mov edx, ebx
mov rcx, rax
call qword [sym.imp.Mso30Win32Client.dll_Ordinal_1694]
nop word [rax + rax]
test eax, eax
je 0x1400405de
mov ebx, dword [rbp + 0x9b8]
cmp r13d, 0xd10
jne 0x1400404bc
mov r9d, 0xa
mov r8d, ebx
lea edx, [r9 + 0x15]
lea rcx, [rsp + 0x72]
call qword [sym.imp.Mso20Win32Client.dll_Ordinal_966]
mov word [rsp + 0x70], ax
lea rax, [rsp + 0x70]
mov qword [rsp + 0x20], rax
mov r9d, 1
lea r8, [rbp + 0x210]
mov edx, edi
lea rcx, [rbp - 0x50]
call qword [sym.imp.Mso20Win32Client.dll_Ordinal_447]
call qword [sym.imp.Mso30Win32Client.dll_Ordinal_827]
mov r9d, eax
mov dword [rsp + 0x28], 0x12b
lea rax, [rbp + 0x472]
mov qword [rsp + 0x20], rax
mov r8d, ebx
xor edx, edx
mov ecx, 0x1000
call qword [sym.imp.Mso20Win32Client.dll_Ordinal_276]
mov ecx, eax
mov word [rbp + 0x470], ax
xor r8d, r8d
test ax, ax
jne 0x14004043c
mov r8d, 0x12b
lea rdx, [rbp + 0x472]
mov ecx, ebx
call fcn.140036d30
lea rax, [rbp + 0x472]
xor r8d, r8d
inc r15
cmp word [rax + r15*2], r8w
jne 0x140040427
movzx ecx, r15w
mov word [rbp + 0x470], cx
test cx, cx
je 0x1400404a0
movzx edx, word [rbp - 0x50]
movzx ecx, cx
lea eax, [rsi + rdx]
inc ecx
add ecx, eax
cmp ecx, edi
jae 0x1400404a4
inc dx
mov word [rbp - 0x50], dx
movzx eax, dx
mov ecx, 0xa
mov word [rbp + rax*2 - 0x50], cx
movzx eax, word [rbp - 0x50]
lea rax, [rax*2 + 2]
cmp rax, 0x258
jae 0x14004060f
mov word [rbp + rax - 0x50], r8w
mov r8d, edi
lea rdx, [rbp - 0x50]
lea rcx, [rbp + 0x470]
call qword [sym.imp.Mso20Win32Client.dll_Ordinal_1984]
nop
nop word [rax + rax]
movzx edx, word [rbp - 0x50]
movzx edx, dx
mov r9d, edi
lea r8, [rbp + 0x210]
lea rcx, [rbp - 0x4e]
call qword [sym.imp.Mso20Win32Client.dll_Ordinal_1976]
nop
test r14d, r14d
je 0x14004050c
cmp r13d, 0xd10
jne 0x1400404d7
mov eax, dword [rsp + 0x44]
mov dword [rsp + 0x48], eax
jmp 0x140040558
call qword [sym.imp.Mso30Win32Client.dll_Ordinal_460]
mov rcx, rax
mov r8d, dword [rsp + 0x4c]
mov edx, 4
call qword [sym.imp.Mso30Win32Client.dll_Ordinal_426]
lea r8, [rsp + 0x48]
xor edx, edx
mov ecx, eax
call qword [sym.imp.Mso30Win32Client.dll_Ordinal_1484]
mov r15d, dword [rsp + 0x44]
mov r14d, 1
jmp 0x14004053e
call qword [sym.imp.Mso30Win32Client.dll_Ordinal_460]
mov rcx, rax
mov r8d, dword [rsp + 0x4c]
mov edx, 4
call qword [sym.imp.Mso30Win32Client.dll_Ordinal_426]
lea r8, [rsp + 0x48]
xor edx, edx
mov ecx, eax
call qword [sym.imp.Mso30Win32Client.dll_Ordinal_1484]
mov r14b, byte [rsp + 0x40]
mov r15d, dword [rsp + 0x50]
cmp r13d, 0xd10
jne 0x140040565
test r14b, r14b
je 0x140040558
mov ecx, 0x74f0a1
call qword [sym.imp.Mso20Win32Client.dll_Ordinal_154]
nop
mov r15d, ebx
mov ebx, 1
mov r14b, bl
jmp 0x14004056a
mov ebx, 1
sub edi, esi
mov eax, esi
lea rdx, [rbp + 0x6d0]
lea rdx, [rdx + rax*2]
mov r8d, edi
lea rcx, [rbp + 0x212]
call qword [sym.imp.Mso30Win32Client.dll_Ordinal_1344]
movzx ecx, ax
xor edx, edx
test ecx, ecx
je 0x1400405de
cmp ecx, edi
jge 0x1400405de
sub ax, 2
add ax, si
mov word [rbp + 0x6d0], ax
add dword [0x140080300], ebx
movzx eax, r14b
mov qword [rsp + 0x30], rdx
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], eax
mov r9d, dword [rsp + 0x48]
mov r8d, r13d
mov edx, dword [rsp + 0x54]
lea rcx, [rbp + 0x6d0]
call qword [sym.imp.Mso30Win32Client.dll_Ordinal_1624]
mov r12d, eax
sub dword [0x140080300], ebx
mov ecx, dword [rsp + 0x58]
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov eax, r12d
mov rcx, qword [rbp + 0x930]
xor rcx, rsp
call fcn.1400443a0
nop
add rsp, 0xa48
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.140044df8
nop
jmp 0x140040617
nop
nop
nop
nop
nop
nop
nop
nop
nop