Function at 0x1400070e0
Capabilities:
Check for time delay via gettickcount
Terminate process

Disassembly:
mov qword [rsp + 0x20], r9
mov dword [rsp + 0x18], r8d
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rsi
push rdi
sub rsp, 0xe8
cmp dword [rsp + 0x120], 0xc
jb 0x14000711c
mov rax, qword [rsp + 0x118]
movzx eax, word [rax + 0x48]
mov dword [rsp + 0xb0], eax
jmp 0x14000712f
mov rax, qword [rsp + 0x118]
movzx eax, byte [rax + 0x44]
mov dword [rsp + 0xb0], eax
movzx eax, word [rsp + 0xb0]
mov word [rsp + 0x48], ax
cmp dword [rsp + 0x120], 0xc
jb 0x14000715a
mov rax, qword [rsp + 0x118]
mov eax, dword [rax + 0x4c]
mov dword [rsp + 0xb4], eax
jmp 0x140007165
mov dword [rsp + 0xb4], 0
mov eax, dword [rsp + 0xb4]
mov dword [rsp + 0x58], eax
mov rax, qword [rsp + 0x100]
mov rax, qword [rax + 0x20]
cmp qword [rsp + 0x108], rax
jne 0x1400077b3
mov dword [rsp + 0x44], 0
mov eax, dword [rsp + 0x120]
dec eax
cmp dword [rsp + 0x44], eax
jae 0x1400076ee
cmp dword [rsp + 0x120], 0
jbe 0x1400076ee
mov eax, dword [rsp + 0x44]
mov rcx, qword [rsp + 0x118]
lea rax, [rcx + rax + 0x44]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x100]
movzx eax, byte [rax + 0x51]
test eax, eax
je 0x1400073f7
mov rax, qword [rsp + 0x50]
movzx eax, word [rax + 4]
cmp eax, 0xb
jne 0x14000724c
mov rax, qword [rsp + 0x50]
add rax, 0x10
mov qword [rsp + 0x68], rax
mov rax, qword [rsp + 0x50]
movzx eax, word [rax + 6]
mov rcx, qword [rsp + 0x50]
movzx ecx, word [rcx + 4]
mov rdx, qword [rsp + 0x68]
mov edx, dword [rdx]
mov dword [rsp + 0x30], edx
mov edx, dword [rsp + 0x110]
mov dword [rsp + 0x28], edx
mov rdx, qword [rsp + 0x50]
mov edx, dword [rdx + 0xc]
mov dword [rsp + 0x20], edx
mov rdx, qword [rsp + 0x50]
mov r9d, dword [rdx + 8]
mov r8d, eax
mov edx, ecx
lea rcx, [0x140001d80]
call fcn.140005070
jmp 0x1400073f7
mov rax, qword [rsp + 0x50]
movzx eax, word [rax + 4]
cmp eax, 2
jne 0x1400072bb
mov rax, qword [rsp + 0x50]
add rax, 0x10
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0x50]
movzx eax, word [rax + 6]
mov rcx, qword [rsp + 0x50]
movzx ecx, word [rcx + 4]
mov rdx, qword [rsp + 0x70]
mov edx, dword [rdx]
mov dword [rsp + 0x30], edx
mov edx, dword [rsp + 0x110]
mov dword [rsp + 0x28], edx
mov rdx, qword [rsp + 0x50]
mov edx, dword [rdx + 0xc]
mov dword [rsp + 0x20], edx
mov rdx, qword [rsp + 0x50]
mov r9d, dword [rdx + 8]
mov r8d, eax
mov edx, ecx
lea rcx, [0x140001e00]
call fcn.140005070
jmp 0x1400073f7
mov rax, qword [rsp + 0x50]
movzx eax, word [rax + 4]
cmp eax, 7
jne 0x1400073b4
mov rax, qword [rsp + 0x50]
add rax, 0x10
mov qword [rsp + 0x78], rax
mov rax, qword [rsp + 0x50]
movzx eax, word [rax + 6]
mov rcx, qword [rsp + 0x50]
movzx ecx, word [rcx + 4]
mov rdx, qword [rsp + 0x78]
mov edx, dword [rdx]
mov dword [rsp + 0x30], edx
mov edx, dword [rsp + 0x110]
mov dword [rsp + 0x28], edx
mov rdx, qword [rsp + 0x50]
mov edx, dword [rdx + 0xc]
mov dword [rsp + 0x20], edx
mov rdx, qword [rsp + 0x50]
mov r9d, dword [rdx + 8]
mov r8d, eax
mov edx, ecx
lea rcx, [0x140001e80]
call fcn.140005070
mov rax, qword [rsp + 0x78]
cmp dword [rax], 0x3030
jne 0x14000734c
mov rax, qword [rsp + 0x78]
mov edx, dword [rax + 0x20]
lea rcx, [0x140001f00]
call fcn.140005070
jmp 0x1400073b2
mov rax, qword [rsp + 0x78]
cmp dword [rax], 0x3031
jne 0x1400073b2
mov rax, qword [rsp + 0x78]
movzx eax, byte [rax + 0x40]
test eax, eax
je 0x1400073b2
mov rax, qword [rsp + 0x78]
mov r9d, dword [rax + 0x3c]
mov rax, qword [rsp + 0x78]
mov r8, qword [rax + 0x30]
mov rax, qword [rsp + 0x78]
mov rdx, qword [rax + 0x28]
lea rcx, [0x140001f20]
call fcn.140005070
mov rax, qword [rsp + 0x78]
cmp qword [rax + 0x28], 0xffffffffffffffff
jne 0x1400073b2
mov rax, qword [rsp + 0x50]
movzx eax, word [rax + 6]
add rax, 0x10
mov edx, eax
mov rcx, qword [rsp + 0x50]
call fcn.140004c70
jmp 0x1400073f7
mov rax, qword [rsp + 0x50]
movzx eax, word [rax + 6]
mov rcx, qword [rsp + 0x50]
movzx ecx, word [rcx + 4]
mov edx, dword [rsp + 0x110]
mov dword [rsp + 0x28], edx
mov rdx, qword [rsp + 0x50]
mov edx, dword [rdx + 0xc]
mov dword [rsp + 0x20], edx
mov rdx, qword [rsp + 0x50]
mov r9d, dword [rdx + 8]
mov r8d, eax
mov edx, ecx
lea rcx, [0x140001f70]
call fcn.140005070
mov rax, qword [rsp + 0x50]
movzx eax, word [rax + 4]
cmp eax, 0xc
jge 0x14000748f
mov rax, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x100]
mov ecx, dword [rcx + 0x5c]
cmp dword [rax + 8], ecx
jne 0x140007445
mov rax, qword [rsp + 0x50]
cmp dword [rax], 0x30303030
jne 0x140007445
mov rax, qword [rsp + 0x100]
mov eax, dword [rax + 0x58]
inc eax
mov rcx, qword [rsp + 0x100]
mov dword [rcx + 0x58], eax
jmp 0x14000747c
mov rax, qword [rsp + 0x50]
movzx eax, word [rax + 4]
cmp eax, 5
jne 0x14000746d
mov rax, qword [rsp + 0x100]
mov eax, dword [rax + 0x58]
inc eax
mov rcx, qword [rsp + 0x100]
mov dword [rcx + 0x58], eax
jmp 0x14000747c
mov rax, qword [rsp + 0x100]
mov dword [rax + 0x58], 0
mov rax, qword [rsp + 0x100]
mov rcx, qword [rsp + 0x50]
mov ecx, dword [rcx + 8]
mov dword [rax + 0x5c], ecx
mov rax, qword [rsp + 0x100]
mov eax, dword [rax + 0x3260]
mov dword [rsp + 0x40], eax
mov rax, qword [rsp + 0x100]
mov eax, dword [rax + 0x3260]
inc eax
mov rcx, qword [rsp + 0x100]
mov dword [rcx + 0x3260], eax
mov eax, dword [rsp + 0x40]
dec eax
xor edx, edx
mov ecx, 0xc8
div ecx
mov eax, edx
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x40]
imul rax, rax, 0x40
mov rcx, qword [rsp + 0x100]
mov rdx, qword [rsp + 0x50]
movzx edx, word [rdx + 6]
mov word [rcx + rax + 0x62], dx
mov eax, dword [rsp + 0x40]
imul rax, rax, 0x40
mov rcx, qword [rsp + 0x100]
mov rdx, qword [rsp + 0x50]
mov edx, dword [rdx + 0xc]
mov dword [rcx + rax + 0x68], edx
mov eax, dword [rsp + 0x40]
imul rax, rax, 0x40
mov rcx, qword [rsp + 0x100]
mov edx, dword [rsp + 0x110]
mov dword [rcx + rax + 0x6c], edx
mov eax, dword [rsp + 0x40]
imul rax, rax, 0x40
mov rcx, qword [rsp + 0x100]
mov rdx, qword [rsp + 0x50]
mov edx, dword [rdx + 8]
mov dword [rcx + rax + 0x64], edx
mov eax, dword [rsp + 0x40]
imul rax, rax, 0x40
mov rcx, qword [rsp + 0x100]
mov rdx, qword [rsp + 0x50]
movzx edx, word [rdx + 4]
mov word [rcx + rax + 0x60], dx
mov rax, qword [rsp + 0x50]
movzx eax, word [rax + 6]
add rax, 0x10
cmp rax, 0x30
jae 0x14000758d
mov rax, qword [rsp + 0x50]
movzx eax, word [rax + 6]
add rax, 0x10
mov qword [rsp + 0xb8], rax
jmp 0x140007599
mov qword [rsp + 0xb8], 0x30
mov eax, dword [rsp + 0x40]
imul rax, rax, 0x40
mov rcx, qword [rsp + 0x100]
lea rax, [rcx + rax + 0x70]
mov rdi, rax
mov rsi, qword [rsp + 0x50]
mov rcx, qword [rsp + 0xb8]
rep movsb byte [rdi], byte [rsi]
cmp dword [rsp + 0x120], 0x1000
ja 0x1400075df
mov rax, qword [rsp + 0x50]
movzx eax, word [rax + 6]
cmp eax, dword [rsp + 0x120]
jbe 0x1400075fc
mov r8, qword [rsp + 0x50]
mov edx, dword [rsp + 0x120]
lea rcx, [0x140001ff0]
call fcn.140005070
jmp 0x1400076ee
mov rax, qword [rsp + 0x50]
movzx eax, word [rax + 6]
add rax, 0x10
mov dword [rsp + 0x60], eax
mov rax, qword [rsp + 0x50]
movzx eax, word [rax + 4]
cmp eax, 0x80
jle 0x1400076d3
mov eax, dword [rsp + 0x60]
mov ecx, dword [rsp + 0x44]
add ecx, eax
mov eax, ecx
cmp dword [rsp + 0x120], eax
jbe 0x1400076b2
mov eax, dword [rsp + 0x60]
mov ecx, dword [rsp + 0x44]
add ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x120]
sub ecx, eax
mov eax, ecx
mov eax, eax
mov ecx, dword [rsp + 0x60]
mov edx, dword [rsp + 0x44]
add edx, ecx
mov ecx, edx
mov ecx, ecx
mov rdx, qword [rsp + 0x118]
lea rcx, [rdx + rcx + 0x44]
mov edx, dword [rsp + 0x44]
mov rdi, qword [rsp + 0x118]
lea rdx, [rdi + rdx + 0x44]
mov qword [rsp + 0xc0], rdx
mov r8d, eax
mov rdx, rcx
mov rax, qword [rsp + 0xc0]
mov rcx, rax
call qword [sym.imp.msvcrt.dll_memmove]
mov eax, dword [rsp + 0x60]
mov ecx, dword [rsp + 0x120]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x120], eax
jmp 0x1400076d1
mov rdx, qword [rsp + 0x118]
lea rcx, [0x140002040]
call fcn.140005070
mov eax, dword [rsp + 0x44]
mov dword [rsp + 0x120], eax
jmp 0x1400076e9
mov rax, qword [rsp + 0x50]
movzx eax, word [rax + 6]
mov ecx, dword [rsp + 0x44]
lea rax, [rcx + rax + 0x10]
mov dword [rsp + 0x44], eax
jmp 0x140007192
cmp dword [rsp + 0x120], 0
jne 0x140007717
mov rax, qword [rsp + 0x118]
mov qword [rsp + 0x98], rax
mov rcx, qword [rsp + 0x98]
call sub.msvcrt.dll_free
jmp 0x140007772
mov rax, qword [rsp + 0x118]
mov dword [rax + 0x40], 0
mov r9d, dword [rsp + 0x120]
mov r8, qword [rsp + 0x118]
mov edx, dword [rsp + 0x110]
mov rcx, qword [rsp + 0x100]
call fcn.140007c60
mov dword [rsp + 0x5c], eax
cmp dword [rsp + 0x5c], 0
jge 0x140007772
mov rax, qword [rsp + 0x118]
mov qword [rsp + 0xa0], rax
mov rcx, qword [rsp + 0xa0]
call sub.msvcrt.dll_free
mov rax, qword [rsp + 0x108]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x108]
call qword [rax + 0x28]
mov dword [rsp + 0x5c], eax
cmp dword [rsp + 0x5c], 0
jge 0x1400077ae
lea rdx, [0x140002080]
mov ecx, dword [rsp + 0x5c]
call fcn.140004f80
mov ecx, 1
call qword [sym.imp.msvcrt.dll_exit]
jmp 0x140007c48
mov rax, qword [rsp + 0x118]
add rax, 0x44
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x100]
movzx eax, byte [rax + 0x51]
test eax, eax
je 0x140007869
mov rax, qword [rsp + 0x50]
movzx eax, word [rax + 4]
cmp eax, 2
jne 0x14000783e
mov rax, qword [rsp + 0x50]
add rax, 0x10
mov qword [rsp + 0x80], rax
movzx eax, word [rsp + 0x48]
mov rcx, qword [rsp + 0x80]
mov ecx, dword [rcx]
mov dword [rsp + 0x30], ecx
mov ecx, dword [rsp + 0x110]
mov dword [rsp + 0x28], ecx
mov rcx, qword [rsp + 0x50]
mov ecx, dword [rcx + 0xc]
mov dword [rsp + 0x20], ecx
mov r9d, dword [rsp + 0x58]
mov r8d, dword [rsp + 0x120]
mov edx, eax
lea rcx, [0x1400020c0]
call fcn.140005070
jmp 0x140007869
movzx eax, word [rsp + 0x48]
mov ecx, dword [rsp + 0x110]
mov dword [rsp + 0x20], ecx
mov r9d, dword [rsp + 0x58]
mov r8d, dword [rsp + 0x120]
mov edx, eax
lea rcx, [0x140002150]
call fcn.140005070
mov rax, qword [rsp + 0x100]
mov eax, dword [rax + 0x3260]
mov dword [rsp + 0x40], eax
mov rax, qword [rsp + 0x100]
mov eax, dword [rax + 0x3260]
inc eax
mov rcx, qword [rsp + 0x100]
mov dword [rcx + 0x3260], eax
mov eax, dword [rsp + 0x40]
dec eax
xor edx, edx
mov ecx, 0xc8
div ecx
mov eax, edx
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x40]
imul rax, rax, 0x40
mov rcx, qword [rsp + 0x100]
mov rdx, qword [rsp + 0x50]
movzx edx, word [rdx + 6]
mov word [rcx + rax + 0x62], dx
mov eax, dword [rsp + 0x40]
imul rax, rax, 0x40
mov rcx, qword [rsp + 0x100]
mov rdx, qword [rsp + 0x50]
mov edx, dword [rdx + 0xc]
mov dword [rcx + rax + 0x68], edx
mov eax, dword [rsp + 0x110]
bts eax, 0x1f
mov ecx, dword [rsp + 0x40]
imul rcx, rcx, 0x40
mov rdx, qword [rsp + 0x100]
mov dword [rdx + rcx + 0x6c], eax
mov eax, dword [rsp + 0x40]
imul rax, rax, 0x40
mov rcx, qword [rsp + 0x100]
mov rdx, qword [rsp + 0x50]
mov edx, dword [rdx + 8]
mov dword [rcx + rax + 0x64], edx
mov eax, dword [rsp + 0x40]
imul rax, rax, 0x40
mov rcx, qword [rsp + 0x100]
mov rdx, qword [rsp + 0x50]
movzx edx, word [rdx + 4]
mov word [rcx + rax + 0x60], dx
mov rax, qword [rsp + 0x50]
movzx eax, word [rax + 6]
add rax, 0x10
cmp rax, 0x30
jae 0x14000796b
mov rax, qword [rsp + 0x50]
movzx eax, word [rax + 6]
add rax, 0x10
mov qword [rsp + 0xc8], rax
jmp 0x140007977
mov qword [rsp + 0xc8], 0x30
mov eax, dword [rsp + 0x40]
imul rax, rax, 0x40
mov rcx, qword [rsp + 0x100]
lea rax, [rcx + rax + 0x70]
mov rdi, rax
mov rsi, qword [rsp + 0x50]
mov rcx, qword [rsp + 0xc8]
rep movsb byte [rdi], byte [rsi]
mov rax, qword [rsp + 0x118]
mov dword [rax + 0x40], 0
mov rax, qword [rsp + 0x100]
cmp dword [rax + 0x58], 2
jbe 0x140007a2e
xor edx, edx
mov rax, qword [rsp + 0x100]
mov eax, dword [rax + 0x58]
mov ecx, 3
div ecx
mov eax, edx
test eax, eax
je 0x140007a2e
mov rax, qword [rsp + 0x100]
mov edx, dword [rax + 0x58]
lea rcx, [0x1400021c0]
call fcn.140005070
mov rax, qword [rsp + 0x100]
cmp dword [rax + 0x58], 0x1f4
jae 0x140007a11
mov rax, qword [rsp + 0x100]
mov eax, dword [rax + 0x58]
mov dword [rsp + 0xd0], eax
jmp 0x140007a1c
mov dword [rsp + 0xd0], 0x1f4
mov rax, qword [rsp + 0x118]
mov ecx, dword [rsp + 0xd0]
mov dword [rax + 0x40], ecx
cmp dword [rsp + 0x120], 0xc
jb 0x140007b8b
movzx eax, word [rsp + 0x48]
mov dword [rsp + 0xd4], eax
cmp dword [rsp + 0xd4], 6
je 0x140007a57
jmp 0x140007b8b
cmp dword [rsp + 0x110], 1
jne 0x140007a7f
mov rax, qword [rsp + 0x100]
mov rax, qword [rax + 0x20]
mov rcx, qword [rsp + 0x100]
mov rcx, qword [rcx + 0x20]
mov rax, qword [rax]
call qword [rax + 0x40]
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov rcx, qword [rsp + 0x100]
sub eax, dword [rcx + 0x54]
cmp eax, 0x1d4c0
jbe 0x140007b8b
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov rcx, qword [rsp + 0x100]
mov dword [rcx + 0x54], eax
lea rdx, [0x140013534]
mov ecx, 0x1048
call fcn.14000f894
mov qword [rsp + 0xa8], rax
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0x90], rax
cmp qword [rsp + 0x90], 0
jne 0x140007af3
lea rdx, [0x140002240]
xor ecx, ecx
call fcn.140004f80
jmp 0x140007b8b
mov rax, qword [rsp + 0x90]
add rax, 0x44
mov qword [rsp + 0x88], rax
mov rdi, qword [rsp + 0x88]
xor eax, eax
mov ecx, 0x10
rep stosb byte [rdi], al
mov rax, qword [rsp + 0x88]
mov dword [rax], 0x11223344
xor eax, eax
mov rcx, qword [rsp + 0x88]
mov word [rcx + 0xc], ax
xor eax, eax
mov rcx, qword [rsp + 0x88]
mov word [rcx + 6], ax
mov eax, 3
mov rcx, qword [rsp + 0x88]
mov word [rcx + 4], ax
lea rcx, [0x1400022b0]
call fcn.140005070
mov rax, qword [rsp + 0x100]
mov rax, qword [rax + 0x28]
mov rcx, qword [rsp + 0x100]
mov rcx, qword [rcx + 0x28]
mov rax, qword [rax]
mov r8d, 0x10
mov rdx, qword [rsp + 0x90]
call qword [rax + 0x30]
mov rax, qword [rsp + 0x100]
mov rax, qword [rax + 0x28]
mov rcx, qword [rsp + 0x100]
mov rcx, qword [rcx + 0x28]
mov rax, qword [rax]
mov r9d, dword [rsp + 0x120]
mov r8, qword [rsp + 0x118]
mov edx, dword [rsp + 0x110]
call qword [rax + 0x28]
mov dword [rsp + 0x5c], eax
cmp dword [rsp + 0x5c], 0
jge 0x140007beb
mov r8d, dword [rsp + 0x5c]
lea rdx, [0x140001ce0]
mov ecx, dword [rsp + 0x5c]
call fcn.140004f80
mov ecx, 1
call qword [sym.imp.msvcrt.dll_exit]
mov rax, qword [rsp + 0x108]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x108]
call qword [rax + 0x28]
mov dword [rsp + 0x5c], eax
cmp dword [rsp + 0x5c], 0
jge 0x140007c48
lea rdx, [0x140002310]
mov ecx, dword [rsp + 0x5c]
call fcn.140004f80
lea rax, [0x140001ab8]
mov qword [rsp + 0x20], rax
mov r9d, dword [rsp + 0x5c]
mov r8d, 3
mov rdx, qword [rsp + 0x108]
mov rcx, qword [rsp + 0x100]
call fcn.140006e60
add rsp, 0xe8
pop rdi
pop rsi
ret