Function at 0x1400082c0
Capabilities:
Terminate process

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xd0
mov qword [rsp + 0x48], 0xfffffffffffffffe
mov qword [rsp + 0x120], rbx
mov rax, qword [0x14002a008]
xor rax, rsp
mov qword [rsp + 0xc0], rax
mov rbx, rdx
mov rdi, rcx
mov dword [rsp + 0x20], 0
xor r12d, r12d
xor r14d, r14d
xor r15d, r15d
xor ebp, ebp
xor esi, esi
lea rcx, [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx eax, word [rsp + 0x76]
mov dword [rsp + 0x24], eax
mov rdx, rbx
mov rcx, rdi
call fcn.140007bf0
test eax, eax
je 0x140008613
mov rcx, rdi
call fcn.1400081c0
mov rcx, rdi
call fcn.140007210
mov eax, dword [0x14002d9f0]
mov dword [rdi + 8], eax
test eax, eax
jne 0x14000837e
mov ecx, dword [rdi + 0xc]
cmp ecx, 4
jae 0x140008366
mov dword [rdi + 8], 1
jmp 0x14000837e
lea eax, [rcx - 4]
test eax, 0xfffffffd
je 0x140008377
shr ecx, 1
mov dword [rdi + 8], ecx
jmp 0x14000837e
mov dword [rdi + 8], 2
mov eax, dword [0x14002da04]
cmp dword [rdi + 0xc], eax
jb 0x140008613
cmp dword [rdi + 8], esi
je 0x140008613
call fcn.140007000
test eax, eax
je 0x140008613
call fcn.140002ec0
mov rdx, rax
xor ebx, ebx
mov ecx, ebx
test rax, rax
setne cl
test ecx, ecx
jne 0x1400083c4
mov ecx, 0x80004005
call fcn.140003000
int3
mov rax, qword [rax]
mov rcx, rdx
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x68], rax
lea r8, [rsp + 0x68]
call fcn.140008000
test eax, eax
jne 0x1400083f1
mov ecx, 0x493e0
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x1400083d6
lea rdx, str.eda0
lea rcx, [rsp + 0x30]
call fcn.140001dc0
mov rdx, rax
mov rcx, rdi
call fcn.1400064a0
mov r13d, 1
xor r9d, r9d
xor edx, edx
xor ecx, ecx
mov r8d, 0x1f4
call qword [sym.imp.USER32.dll_SetTimer]
mov qword [rsp + 0x28], rax
nop dword [rax + rax]
inc r15d
cmp r15d, 0x78
jb 0x140008442
mov r15d, ebx
inc r12d
inc r14d
lea rcx, [rsp + 0x50]
call fcn.140009260
mov ebx, eax
call fcn.140006920
test eax, eax
jne 0x14000845f
mov rcx, rdi
call fcn.140006740
cmp ebx, dword [0x14002da00]
ja 0x140008472
cmp ebp, 6
jge 0x14000846e
inc ebp
xor esi, esi
jmp 0x140008474
xor ebp, ebp
cmp ebx, dword [0x14002d9fc]
jbe 0x14000848e
cmp esi, 4
jge 0x140008483
inc esi
xor ebx, ebx
mov ebp, ebx
cmp esi, 4
jge 0x1400084dc
jmp 0x1400084d8
xor ebx, ebx
mov esi, ebx
cmp ebp, 6
jl 0x1400084d8
test eax, eax
jne 0x1400084dc
mov rcx, qword [rdi]
test rcx, rcx
je 0x1400084b6
lea edx, [rbx + 0x64]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
je 0x140008511
mov qword [rdi], rbx
mov r15d, ebx
mov r12d, ebx
mov r14d, ebx
lea rdx, [rsp + 0x68]
mov rcx, rdi
call fcn.140006a20
test eax, eax
je 0x140008511
mov r13d, 2
jmp 0x14000851b
test eax, eax
je 0x140008511
mov rcx, qword [rdi]
test rcx, rcx
je 0x140008511
mov edx, 0x64
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
je 0x1400084fb
mov qword [rdi], rbx
jmp 0x140008511
xor edx, edx
mov rcx, qword [rdi]
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov r13d, 3
jmp 0x1400085a3
cmp r13d, 2
jne 0x1400085a3
cmp r12d, dword [0x14002d9f8]
jb 0x14000856c
mov r12d, ebx
lea rdx, [0x140024a78]
lea rcx, [rsp + 0x40]
call fcn.140001dc0
mov rdx, rax
mov rcx, rdi
call fcn.1400064a0
lea rcx, [rsp + 0x80]
call qword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx eax, word [rsp + 0x86]
cmp dword [rsp + 0x24], eax
je 0x14000856c
mov dword [rsp + 0x20], ebx
mov dword [rsp + 0x24], eax
mov r14d, ebx
jmp 0x140008573
cmp dword [rsp + 0x20], 0
jne 0x1400085a3
cmp r14d, dword [0x14002d9f4]
jb 0x1400085a3
mov r14d, ebx
lea rdx, str.eda1
lea rcx, [rsp + 0x38]
call fcn.140001dc0
mov rdx, rax
mov rcx, rdi
call fcn.1400064a0
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x90]
call qword [sym.imp.USER32.dll_GetMessageW]
test eax, eax
je 0x140008430
cmp dword [rsp + 0x98], 0x12
je 0x1400085ec
lea rcx, [rsp + 0x90]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rsp + 0x90]
call qword [sym.imp.USER32.dll_DispatchMessageW]
jmp 0x140008430
mov rdx, qword [rsp + 0x28]
xor ecx, ecx
call qword [sym.imp.USER32.dll_KillTimer]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140008613
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
xor eax, eax
mov rcx, qword [rsp + 0xc0]
xor rcx, rsp
call fcn.140009a40
mov rbx, qword [rsp + 0x120]
add rsp, 0xd0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret