Function at 0x140043380
Capabilities:
Check for time delay via gettickcount
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r14
sub rsp, 0x40
mov r14, rcx
mov rsi, r9
mov rcx, rdx
mov rdi, r8
mov rbp, rdx
call fcn.14003bf50
movsxd rbx, eax
test eax, eax
jne 0x1400433c7
mov r9, rbp
lea rdx, [0x1400e2de8]
xor r8d, r8d
mov rcx, r14
call fcn.1400392a0
jmp 0x140043458
cmp ebx, 1
je 0x1400435d4
cmp ebx, 2
je 0x140043552
cmp ebx, 3
je 0x1400434b9
lea eax, [rbx - 4]
cmp eax, 1
ja 0x1400434b5
cmp word [rsi], 0
mov qword [rsp + 0x60], r15
je 0x14004341b
mov rcx, rsi
xor bpl, bpl
call fcn.1400179b0
mulsd xmm0, qword [0x1400edbe8]
cvttsd2si esi, xmm0
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r14d, eax
jmp 0x140043425
mov r14d, dword [rsp + 0x30]
mov bpl, 1
xor esi, esi
mov r15, rbx
mov rcx, rdi
call fcn.1400655c0
mov ebx, eax
cmp r15, 4
jne 0x14004346b
test eax, eax
je 0x14004346f
mov rcx, qword [0x140104d40]
mov rdx, rbx
mov r8b, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.140001280
mov eax, 1
mov r15, qword [rsp + 0x60]
mov rbx, qword [rsp + 0x68]
mov rbp, qword [rsp + 0x70]
add rsp, 0x40
pop r14
pop rdi
pop rsi
ret
test eax, eax
je 0x140043494
test bpl, bpl
jne 0x140043485
call qword [sym.imp.KERNEL32.dll_GetTickCount]
lea ecx, [r14 + rsi]
sub ecx, eax
cmp ecx, 5
jle 0x14004343c
mov edx, 1
lea ecx, [rdx + 0x63]
call fcn.1400016f0
jmp 0x140043428
mov rcx, qword [0x140104d40]
lea rdx, [0x1400cefdc]
xor r9d, r9d
mov byte [rsp + 0x20], 1
or r8, 0xffffffffffffffff
call fcn.14008f120
jmp 0x140043453
xor eax, eax
jmp 0x140043458
movzx ecx, word [rsi]
call fcn.1400b30d8
movzx eax, ax
add eax, 0xffffffbf
cmp eax, 0x11
ja case.0x1400434e3.67
lea rdx, [0x140000000]
cdqe
mov ecx, dword [rdx + rax*4 + 0x435f0]
add rcx, rdx
jmp rcx
mov ebx, 0x40
jmp 0x14004350d
mov ebx, 0x4000
jmp 0x14004350d
mov ebx, SafeArrayAllocDescriptor
jmp 0x14004350d
mov ebx, 0x8000
jmp 0x14004350d
mov ebx, 0x80
jmp 0x14004350d
mov ebx, 0x100
cmp word [rdi], 0
je 0x14004351d
mov rcx, rdi
call fcn.1400655c0
jmp 0x140043523
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov edi, eax
test eax, eax
je case.0x1400434e3.67
mov r8d, eax
xor edx, edx
mov ecx, 0x200
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rsi, rax
test rax, rax
je case.0x1400434e3.67
mov edx, ebx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetPriorityClass]
jmp 0x140043583
mov rcx, rdi
call fcn.1400655c0
mov edi, eax
test eax, eax
je case.0x1400434e3.67
mov r8d, eax
xor edx, edx
mov ecx, 0x1f0fff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rsi, rax
test rax, rax
je case.0x1400434e3.67
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov rcx, rsi
mov ebx, eax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor esi, esi
test ebx, ebx
cmovne esi, edi
mov edx, esi
mov rcx, qword [0x140104d40]
mov r8b, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.140001280
mov eax, 1
jmp 0x140043458
mov rcx, qword [0x140104d40]
lea rdx, [0x1400cefdc]
xor r9d, r9d
mov byte [rsp + 0x20], 1
or r8, 0xffffffffffffffff
call fcn.14008f120
jmp 0x140043458
cmp word [rdi], 0
je 0x1400435e6
mov rcx, rdi
call fcn.1400655c0
mov edx, eax
jmp 0x140043597
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov edx, eax
jmp 0x140043597