Function at 0x140060010
Capabilities:
Check for time delay via gettickcount
Resolve function by parsing pe exports
Terminate process

Disassembly:
push rsi
push rdi
push r13
push r14
push r15
mov eax, 0x14140
call fcn.1400d8890
sub rsp, rax
mov qword [rsp + 0xe8], 0xfffffffffffffffe
mov qword [rsp + 0x14180], rbx
mov rax, qword [0x1401cde90]
xor rax, rsp
mov qword [rsp + 0x14130], rax
mov r15, rdx
mov r13, rcx
mov qword [rsp + 0x88], rcx
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r14d, eax
xor edi, edi
nop word [rax + rax]
mov dword [rsp + 0x20], edi
lea rdx, [rsp + 0x20]
mov rcx, qword [r15 + 0x1d0]
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov esi, eax
mov ebx, dword [r13 + 0x1e4]
call qword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, ebx
cmp eax, dword [r15 + 0x1e8]
jbe 0x140060101
test ebx, ebx
jne 0x1400600af
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rbx, [r15 + 0x1f0]
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov rcx, qword [rbx + 0xb8]
mov dword [rcx + 0x1e4], eax
mov rax, qword [rbx + 0xb8]
mov dword [rax + 0x2c8], edi
mov rax, qword [rbx + 0xb8]
mov dword [rax + 0x2cc], edi
xor edx, edx
mov rcx, qword [rbx + 0xb8]
call fcn.140061240
mov rax, qword [rbx]
lea rdx, [rbx + 0xc8]
mov rcx, rbx
call qword [rax + 0x50]
mov eax, dword [rsp + 0x20]
test esi, esi
je 0x140060122
cmp eax, 0x103
jne 0x140060122
mov ecx, dword [r15 + 0x1dc]
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140060070
test eax, eax
je 0x1400602ff
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
sub ecx, r14d
mov eax, 0x10624dd3
mul ecx
mov esi, edx
shr esi, 6
lea rcx, [r13 + 0x48]
mov r8d, 8
lea rdx, [rsp + 0xd0]
call fcn.14001b1c0
nop
mov r8d, 4
lea rdx, [rsp + 0x80]
mov rcx, rax
call fcn.14001b280
nop
xor edx, edx
lea r8d, [rdx + 0x10]
mov rcx, qword [rax]
call fcn.1400d8558
mov ebx, eax
mov rdx, qword [rsp + 0x80]
add rdx, 0xffffffffffffffe8
or r14d, 0xffffffff
lock add dword [rdx + 0x10], r14d
jg 0x1400601a1
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0xd0]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400601bd
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov eax, 0x66666667
imul ebx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
add eax, eax
sub ebx, eax
cmp ebx, 7
jne 0x140060303
xor ecx, ecx
call fcn.1400d6434
mov rbx, rax
call fcn.1400283d0
movsxd rcx, eax
sub rbx, rcx
cmp rbx, 0x93a80
jge 0x140060303
call fcn.140058d50
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.1400022b0
nop
call fcn.140055f10
mov rdx, rax
lea rcx, [rsp + 0xd8]
call fcn.1400022b0
nop
mov r8d, dword [rsp + 0x20]
mov rdx, rax
lea rcx, [rsp + 0xe0]
call fcn.140022da0
nop
lea r8, [rsp + 0x40]
mov rdx, rax
lea rcx, [rsp + 0x90]
call fcn.140022e40
nop
mov r8d, esi
mov rdx, rax
lea rcx, [rsp + 0x50]
call fcn.140022da0
nop
mov rdx, qword [rsp + 0x90]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140060283
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0xe0]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400602a0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0xd8]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400602bd
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400602d6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rdx, [rsp + 0x50]
mov rcx, r13
call fcn.140061a30
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140060303
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x140060303
or r14d, 0xffffffff
mov ecx, dword [0x1401d5d60]
lea r8d, [rcx + 2]
lea eax, [rcx + 1]
imul r8d, eax
imul r8d, ecx
mov eax, 0x2aaaaaab
imul r8d
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
shl eax, 3
sub r8d, eax
cmp r8d, 0xa
jne 0x1400603e6
mov word [rsp + 0x64b0], di
xor edx, edx
mov r8d, 0xdc7e
lea rcx, [rsp + 0x64b2]
call fcn.1400d8c20
mov dword [0x1401d5d60], edi
mov r10d, edi
mov dword [rsp + 0x30], edi
cmp r10d, 0xa8
jge 0x1400603d8
mov r9d, edi
mov dword [rsp + 0x34], edi
cmp r9d, 0xa8
jge 0x1400603ce
test r10d, r10d
je 0x1400603c4
test r9d, r9d
je 0x1400603c4
movsxd r8, r10d
movsxd rcx, r9d
mov rdx, r8
imul rdx, rdx, 0xa8
add rdx, rcx
imul r8, r8, 0xa8
add r8, rcx
movsx ecx, word [rsp + r8*2 + 0x6360]
movsx eax, word [rsp + rdx*2 + 0x64ae]
inc ecx
add ecx, eax
mov word [rsp + rdx*2 + 0x64b0], cx
inc r9d
mov dword [rsp + 0x34], r9d
jmp 0x140060377
inc r10d
mov dword [rsp + 0x30], r10d
jmp 0x140060367
movsx ecx, word [rsp + 0x1412e]
mov dword [0x1401d5d60], ecx
mov dword [r13 + 0x1d8], edi
lea rcx, [r15 + 0x1f0]
call fcn.140071f10
mov edx, dword [0x1401d5d60]
lea r8d, [rdx + 2]
lea ecx, [rdx + 1]
imul r8d, ecx
imul r8d, edx
mov eax, 0x2aaaaaab
imul r8d
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
shl eax, 3
sub r8d, eax
cmp r8d, 0xa
jne 0x140060444
mov dword [rsp + 0x1250], edi
mov dword [rsp + 0xd70], edi
mov dword [rsp + 0x120], edi
mov rbx, qword [r13 + 0x188]
sub rbx, 0x18
mov qword [rsp + 0x100], rbx
mov rcx, qword [rbx]
mov rax, qword [rcx]
call qword [rax + 0x20]
mov rcx, rax
mov qword [rsp + 0xf0], rax
cmp dword [rbx + 0x10], 0
jl 0x140060486
cmp rax, qword [rbx]
jne 0x140060486
mov qword [rsp + 0x48], rbx
lock inc dword [rbx + 0x10]
mov rsi, qword [rsp + 0x48]
jmp 0x1400604d0
mov rax, qword [rax]
mov r8d, 2
mov edx, dword [rbx + 8]
call qword [rax]
mov rsi, rax
mov qword [rsp + 0x48], rax
test rax, rax
jne 0x1400604a6
call fcn.140002650
mov eax, dword [rbx + 8]
mov dword [rsi + 8], eax
mov eax, dword [rbx + 8]
inc eax
movsxd rdx, eax
mov qword [rsp + 0xf8], rdx
lea r9, [rdx + rdx]
lea r8, [rbx + 0x18]
add rdx, rdx
lea rcx, [rsi + 0x18]
call fcn.1400d41cc
lea rbx, [rsi + 0x18]
mov qword [rsp + 0x28], rbx
mov r8d, dword [0x1401d5d60]
lea ecx, [r8 + 2]
lea eax, [r8 + 1]
imul ecx, eax
imul ecx, r8d
mov eax, 0x6bca1af3
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x13
sub ecx, edx
cmp ecx, 0xc
jne 0x14006053e
mov r9d, edi
mov dword [rsp + 0x3c], edi
test r8d, r8d
je 0x140060537
mov ecx, r8d
and ecx, 1
add r9d, ecx
mov dword [rsp + 0x3c], r9d
mov eax, r8d
cdq
sub eax, edx
sar eax, 1
mov r8d, eax
mov dword [0x1401d5d60], eax
jmp 0x140060511
mov dword [0x1401d5d60], r9d
mov rcx, r15
call fcn.14005f470
mov esi, eax
mov dword [rsp + 0x70], eax
call fcn.140055320
test al, al
jne 0x1400605f8
mov word [rsp + 0x1e20], di
xor edx, edx
mov r8d, 0x4680
lea rcx, [rsp + 0x1e22]
call fcn.1400d8c20
mov dword [0x1401d5d60], edi
mov r10d, edi
mov dword [rsp + 0x24], edi
cmp r10d, 0x5f
jge 0x1400605e8
mov r9d, edi
mov dword [rsp + 0x38], edi
cmp r9d, 0x5f
jge 0x1400605de
test r10d, r10d
je 0x1400605d4
test r9d, r9d
je 0x1400605d4
movsxd r8, r10d
movsxd rcx, r9d
mov rdx, r8
imul rdx, rdx, 0x5f
add rdx, rcx
imul r8, r8, 0x5f
add r8, rcx
movsx ecx, word [rsp + r8*2 + 0x1d62]
movsx eax, word [rsp + rdx*2 + 0x1e1e]
inc ecx
add ecx, eax
mov word [rsp + rdx*2 + 0x1e20], cx
inc r9d
mov dword [rsp + 0x38], r9d
jmp 0x140060590
inc r10d
mov dword [rsp + 0x24], r10d
jmp 0x140060583
movsx eax, word [rsp + 0x64a0]
mov dword [0x1401d5d60], eax
jmp 0x1400605fe
mov eax, dword [0x1401d5d60]
test esi, esi
je 0x140060685
lea ecx, [rax + 1]
imul ecx, eax
mov eax, 0x38e38e39
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*8]
sub ecx, eax
cmp ecx, 8
jne 0x140060639
lea edx, [rcx + 0x53]
lea r8d, [rcx + 0x54]
lea rcx, [0x14015d394]
call fcn.1400d40f4
mov rdx, qword [r13 + 0xe0]
mov rcx, rdi
lea r8, str.task
nop word [rax + rax]
movzx eax, word [rdx + rcx*2]
inc rcx
cmp ax, word [r8 + rcx*2 - 2]
jne 0x140060667
cmp rcx, 5
jne 0x140060650
jmp 0x14006066c
sbb edi, edi
or edi, 1
test edi, edi
sete al
test al, al
je 0x14006067d
mov rcx, r13
call fcn.140017220
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov rdx, qword [r13 + 0x188]
mov qword [rsp + 0x108], rdx
mov eax, edi
test rdx, rdx
setne al
mov dword [rsp + 0xc0], eax
test eax, eax
jne 0x1400606b1
mov ecx, 0x80004005
call fcn.140001920
mov rax, rbx
sub rdx, rbx
movzx ecx, word [rax]
cmp cx, word [rax + rdx]
jne 0x1400606cb
add rax, 2
test cx, cx
jne 0x1400606b7
jmp 0x1400606d0
sbb edi, edi
or edi, 1
mov dword [rsp + 0xa8], edi
test edi, edi
je 0x140060803
lea rdx, [0x14015d404]
lea rcx, [rsp + 0x58]
call fcn.140003310
nop
call fcn.140056f70
mov rdx, rax
lea r8, [rsp + 0x28]
lea rcx, [rsp + 0xa0]
call fcn.14001b400
nop
lea r8, [rsp + 0x58]
mov rdx, rax
lea rcx, [rsp + 0xb8]
call fcn.14000ff10
nop
lea r8, [r13 + 0x188]
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.14000ff10
nop
mov rdx, rax
mov rcx, r13
call fcn.140061a30
nop
mov rcx, qword [rsp + 0x60]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0xc8], rcx
mov eax, r14d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x140060772
mov rdx, qword [rsp + 0xc8]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0xb8]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x98], rcx
mov eax, r14d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x1400607a4
mov rdx, qword [rsp + 0x98]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0xa0]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0xb0], rcx
mov eax, r14d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x1400607d6
mov rdx, qword [rsp + 0xb0]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x58]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x68], rcx
mov eax, r14d
lock xadd dword [rcx + 0x10], eax
dec eax
jg 0x1400607fe
mov rdx, qword [rsp + 0x68]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rbx, qword [rsp + 0x28]
lea rcx, [r15 + 0x1f0]
call fcn.140071f10
nop
add rbx, 0xffffffffffffffe8
mov qword [rsp + 0x78], rbx
lock xadd dword [rbx + 0x10], r14d
dec r14d
jg 0x140060833
mov rdx, qword [rsp + 0x78]
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
xor eax, eax
mov rcx, qword [rsp + 0x14130]
xor rcx, rsp
call fcn.1400d37e0
mov rbx, qword [rsp + 0x14180]
add rsp, 0x14140
pop r15
pop r14
pop r13
pop rdi
pop rsi
ret