Function at 0x140040a40
Capabilities:
Check for time delay via gettickcount
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r14
sub rsp, 0x40
mov r14, rcx
mov rsi, r9
mov rcx, rdx
mov rdi, r8
mov rbp, rdx
call fcn.1400399d0
movsxd rbx, eax
test eax, eax
jne 0x140040a87
mov r9, rbp
lea rdx, [0x1400e0d08]
xor r8d, r8d
mov rcx, r14
call fcn.140036b90
jmp 0x140040b18
cmp ebx, 1
je 0x140040c94
cmp ebx, 2
je 0x140040c12
cmp ebx, 3
je 0x140040b79
lea eax, [rbx - 4]
cmp eax, 1
ja 0x140040b75
cmp word [rsi], 0
mov qword [rsp + 0x60], r15
je 0x140040adb
mov rcx, rsi
xor bpl, bpl
call fcn.140016830
mulsd xmm0, qword [0x1400eb7c8]
cvttsd2si esi, xmm0
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r14d, eax
jmp 0x140040ae5
mov r14d, dword [rsp + 0x30]
mov bpl, 1
xor esi, esi
mov r15, rbx
mov rcx, rdi
call fcn.140062b60
mov ebx, eax
cmp r15, 4
jne 0x140040b2b
test eax, eax
je 0x140040b2f
mov rcx, qword [0x140101f48]
mov rdx, rbx
mov r8b, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.1400012a0
mov eax, 1
mov r15, qword [rsp + 0x60]
mov rbx, qword [rsp + 0x68]
mov rbp, qword [rsp + 0x70]
add rsp, 0x40
pop r14
pop rdi
pop rsi
ret
test eax, eax
je 0x140040b54
test bpl, bpl
jne 0x140040b45
call qword [sym.imp.KERNEL32.dll_GetTickCount]
lea ecx, [r14 + rsi]
sub ecx, eax
cmp ecx, 5
jle 0x140040afc
mov edx, 1
lea ecx, [rdx + 0x63]
call fcn.140001710
jmp 0x140040ae8
mov rcx, qword [0x140101f48]
lea rdx, [0x1400ccfe4]
xor r9d, r9d
mov byte [rsp + 0x20], 1
or r8, 0xffffffffffffffff
call fcn.14008c5a0
jmp 0x140040b13
xor eax, eax
jmp 0x140040b18
movzx ecx, word [rsi]
call fcn.1400b12e0
movzx eax, ax
add eax, 0xffffffbf
cmp eax, 0x11
ja case.0x140040ba3.67
lea rdx, [0x140000000]
cdqe
mov ecx, dword [rdx + rax*4 + 0x40cb0]
add rcx, rdx
jmp rcx
mov ebx, 0x40
jmp 0x140040bcd
mov ebx, 0x4000
jmp 0x140040bcd
mov ebx, SafeArrayAllocDescriptor
jmp 0x140040bcd
mov ebx, 0x8000
jmp 0x140040bcd
mov ebx, 0x80
jmp 0x140040bcd
mov ebx, 0x100
cmp word [rdi], 0
je 0x140040bdd
mov rcx, rdi
call fcn.140062b60
jmp 0x140040be3
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov edi, eax
test eax, eax
je case.0x140040ba3.67
mov r8d, eax
xor edx, edx
mov ecx, 0x200
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rsi, rax
test rax, rax
je case.0x140040ba3.67
mov edx, ebx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetPriorityClass]
jmp 0x140040c43
mov rcx, rdi
call fcn.140062b60
mov edi, eax
test eax, eax
je case.0x140040ba3.67
mov r8d, eax
xor edx, edx
mov ecx, 0x1f0fff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rsi, rax
test rax, rax
je case.0x140040ba3.67
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov rcx, rsi
mov ebx, eax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor esi, esi
test ebx, ebx
cmovne esi, edi
mov edx, esi
mov rcx, qword [0x140101f48]
mov r8b, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.1400012a0
mov eax, 1
jmp 0x140040b18
mov rcx, qword [0x140101f48]
lea rdx, [0x1400ccfe4]
xor r9d, r9d
mov byte [rsp + 0x20], 1
or r8, 0xffffffffffffffff
call fcn.14008c5a0
jmp 0x140040b18
cmp word [rdi], 0
je 0x140040ca6
mov rcx, rdi
call fcn.140062b60
mov edx, eax
jmp 0x140040c57
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov edx, eax
jmp 0x140040c57