Function at 0x14002a0d8
Capabilities:
Check for time delay via gettickcount
Terminate process

Disassembly:
mov qword [rsp + 0x20], rbx
mov qword [rsp + 0x10], rdx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x20
mov esi, 0xea60
mov bl, r8b
mov dword [rbp + 0x40], esi
mov rdi, rcx
call qword [sym.imp.mpclient.dll_MpClientUtilExportFunctions]
lea r8, [rbp + 0x40]
mov edx, esi
lea rcx, str.MpService_SpyNetServiceWaitTimout
mov rax, qword [rax + 0xa0]
call qword [0x14003b4b0]
test bl, bl
jne 0x14002a13b
xor edx, edx
mov ecx, 0xa0000
call fcn.1400300cc
mov ebx, 0x927c0
test eax, eax
js 0x14002a140
mov ebx, 0x5265c00
mov dword [rbp + 0x50], ebx
call qword [sym.imp.mpclient.dll_MpClientUtilExportFunctions]
lea r8, [rbp + 0x50]
mov edx, ebx
lea rcx, str.MpService_SpyNetServiceLifeTimout
mov rax, qword [rax + 0xa0]
call qword [0x14003b4b0]
mov r15d, dword [rbp + 0x50]
mov rcx, qword [0x140060048]
lea r14, [0x140060048]
cmp rcx, r14
je 0x14002a1a4
test byte [rcx + 0x1c], 4
je 0x14002a1a4
mov rcx, qword [rcx + 0x10]
lea r8, [0x140052380]
mov eax, 0x10624dd3
mul r15d
mov r9d, edx
mov edx, 0xa
shr r9d, 6
call fcn.1400012f0
mov ebx, 0x1b7740
mov dword [rbp + 0x50], ebx
call qword [sym.imp.mpclient.dll_MpClientUtilExportFunctions]
lea r8, [rbp + 0x50]
mov edx, ebx
lea rcx, str.MpService_SpyNetServiceBusyTimout
mov rax, qword [rax + 0xa0]
call qword [0x14003b4b0]
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r13d, dword [rbp + 0x40]
mov edx, r13d
mov rcx, qword [rdi + 0x38]
mov esi, eax
call fcn.14002d800
test al, al
je 0x14002a26e
mov ebx, dword [rbp + 0x50]
lea r12d, [r13 + 0x3a98]
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r14d, eax
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
sub ecx, esi
cmp r12d, ecx
ja 0x14002a215
sub esi, eax
cmp r12d, esi
jbe 0x14002a24f
mov ecx, dword [rdi + 0x78]
test ecx, ecx
je 0x14002a230
mov eax, r14d
sub eax, ecx
cmp ebx, eax
ja 0x14002a230
sub ecx, r14d
cmp ebx, ecx
jbe 0x14002a2c6
cmp dword [rdi + 0x70], 0
je 0x14002a24f
mov ecx, dword [rdi + 0x74]
mov eax, r14d
sub eax, ecx
cmp r15d, eax
ja 0x14002a24f
sub ecx, r14d
cmp r15d, ecx
jbe 0x14002a2f9
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov rcx, qword [rdi + 0x38]
mov edx, r13d
mov esi, eax
call fcn.14002d800
test al, al
jne 0x14002a1f6
lea r14, [0x140060048]
mov r9d, dword [rdi + 0x60]
test r9d, r9d
jns 0x14002a2b1
mov ecx, r9d
call fcn.14002e70c
test eax, eax
jne 0x14002a2b1
call fcn.14002e6d8
test eax, eax
jne 0x14002a2b1
mov rcx, qword [0x140060048]
cmp rcx, r14
je 0x14002a2b1
test byte [rcx + 0x1c], 1
je 0x14002a2b1
mov rcx, qword [rcx + 0x10]
lea edx, [rax + 0xb]
lea r8, [0x140052380]
call fcn.1400012f0
mov rbx, qword [rsp + 0x78]
add rsp, 0x20
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov rcx, qword [0x140060048]
lea rsi, [0x140060048]
cmp rcx, rsi
je 0x14002a300
test byte [rcx + 0x1c], 1
je 0x14002a300
mov rcx, qword [rcx + 0x10]
lea r8, [0x140052380]
mov edx, 0xc
mov r9d, ebx
call fcn.1400012f0
jmp 0x14002a300
lea rsi, [0x140060048]
mov rcx, qword [rbp + 0x48]
mov rax, qword [rcx]
mov rax, qword [rax + 0x18]
call qword [0x14003b4b0]
mov rcx, qword [rdi + 0x38]
mov edx, ebx
call fcn.14002d87c
test al, al
je 0x14002a2b1
mov rcx, qword [0x140060048]
cmp rcx, rsi
je 0x14002a34a
test byte [rcx + 0x1c], 1
je 0x14002a34a
mov rcx, qword [rcx + 0x10]
lea r8, [0x140052380]
mov edx, 0xd
mov r9d, ebx
call fcn.1400012f0
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov edx, 0x5b4
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
jmp 0x14002a2b1