Function at 0x1400e3b4c
Capabilities:
Check for time delay via gettickcount
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x20
mov bl, r8b
mov rdi, rcx
mov esi, 0xea60
mov dword [rbp + 0x50], esi
call qword [sym.imp.mpclient.dll_MpClientUtilExportFunctions]
lea r8, [rbp + 0x50]
mov edx, esi
lea rcx, str.MpService_SpyNetServiceWaitTimout
mov rax, qword [rax + 0xa0]
call fcn.1400fece0
nop
mov r13d, dword [rbp + 0x50]
test eax, eax
cmovs r13d, esi
test bl, bl
jne 0x1400e3bde
xor edx, edx
mov ecx, 0xa0000
call fcn.1400f4b34
test eax, eax
jns 0x1400e3bde
mov esi, 0x927c0
mov dword [rbp + 0x50], esi
call qword [sym.imp.mpclient.dll_MpClientUtilExportFunctions]
lea r8, [rbp + 0x50]
mov edx, esi
lea rcx, str.MpService_SpyNetServiceLifeTimout
mov rax, qword [rax + 0xa0]
call fcn.1400fece0
nop
jmp 0x1400e3c06
mov esi, 0x5265c00
mov dword [rbp + 0x50], esi
call qword [sym.imp.mpclient.dll_MpClientUtilExportFunctions]
lea r8, [rbp + 0x50]
mov edx, esi
lea rcx, str.MpService_SpyNetServiceLifeTimout
mov rax, qword [rax + 0xa0]
call fcn.1400fece0
nop
mov ebx, dword [rbp + 0x50]
test eax, eax
cmovs ebx, esi
lea r15, [0x140162280]
mov rcx, qword [0x140162280]
cmp rcx, r15
je 0x1400e3c4a
test byte [rcx + 0x1c], 4
je 0x1400e3c4a
mov eax, 0x10624dd3
mul ebx
mov r9d, edx
shr r9d, 6
mov edx, 0xa
lea r8, [0x14013cee0]
mov rcx, qword [rcx + 0x10]
call fcn.140044450
mov r14d, 0x1b7740
mov dword [rbp + 0x50], r14d
call qword [sym.imp.mpclient.dll_MpClientUtilExportFunctions]
lea r8, [rbp + 0x50]
mov edx, r14d
lea rcx, str.MpService_SpyNetServiceBusyTimout
mov rax, qword [rax + 0xa0]
call fcn.1400fece0
nop
mov esi, dword [rbp + 0x50]
test eax, eax
cmovs esi, r14d
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r14d, eax
mov edx, r13d
mov rcx, qword [rdi + 0x38]
call fcn.1400f1e80
test al, al
je 0x1400e3d1b
lea r12d, [r13 + 0x3a98]
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r15d, eax
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
sub ecx, r14d
cmp r12d, ecx
ja 0x1400e3cc3
sub r14d, eax
cmp r12d, r14d
jbe 0x1400e3cfb
mov ecx, dword [rdi + 0x78]
test ecx, ecx
je 0x1400e3cde
mov eax, r15d
sub eax, ecx
cmp esi, eax
ja 0x1400e3cde
sub ecx, r15d
cmp esi, ecx
jbe 0x1400e3d8a
cmp dword [rdi + 0x70], 0
je 0x1400e3cfb
mov ecx, dword [rdi + 0x74]
mov eax, r15d
sub eax, ecx
cmp ebx, eax
ja 0x1400e3cfb
sub ecx, r15d
cmp ebx, ecx
jbe 0x1400e3dbd
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r14d, eax
mov edx, r13d
mov rcx, qword [rdi + 0x38]
call fcn.1400f1e80
test al, al
jne 0x1400e3ca2
lea r15, [0x140162280]
mov ecx, dword [rdi + 0x60]
test ecx, ecx
jns 0x1400e3d75
cmp ecx, 0x80070008
je 0x1400e3d75
cmp ecx, 0x8007000e
je 0x1400e3d75
cmp ecx, 0x800705aa
je 0x1400e3d75
cmp ecx, 0x8077ffff
je 0x1400e3d75
call fcn.1400f11a8
test eax, eax
jne 0x1400e3d75
mov rax, qword [0x140162280]
cmp rax, r15
je 0x1400e3d75
test byte [rax + 0x1c], 1
je 0x1400e3d75
mov edx, 0xb
mov r9d, ecx
lea r8, [0x14013cee0]
mov rcx, qword [rax + 0x10]
call fcn.140044450
mov rbx, qword [rsp + 0x60]
add rsp, 0x20
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov rcx, qword [0x140162280]
lea rbx, [0x140162280]
cmp rcx, rbx
je 0x1400e3dc4
test byte [rcx + 0x1c], 1
je 0x1400e3dc4
mov edx, 0xc
mov r9d, esi
lea r8, [0x14013cee0]
mov rcx, qword [rcx + 0x10]
call fcn.140044450
jmp 0x1400e3dc4
lea rbx, [0x140162280]
mov rcx, qword [rbp + 0x48]
mov rax, qword [rcx]
mov rax, qword [rax + 0x18]
call fcn.1400fece0
mov edx, esi
mov rcx, qword [rdi + 0x38]
call fcn.1400f5a38
test al, al
je 0x1400e3d75
mov rcx, qword [0x140162280]
cmp rcx, rbx
je 0x1400e3e0d
test byte [rcx + 0x1c], 1
je 0x1400e3e0d
mov edx, 0xd
mov r9d, esi
lea r8, [0x14013cee0]
mov rcx, qword [rcx + 0x10]
call fcn.140044450
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov edx, 0x5b4
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
jmp 0x1400e3d75