Function at 0x14000a660
Capabilities:
Allocate or change rwx memory
Check for time delay via queryperformancecounter
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x30]
sub rsp, 0x130
mov rax, qword [0x140024010]
xor rax, rsp
mov qword [rbp + 0x20], rax
mov rdi, rcx
xor r12d, r12d
mov qword [rbp - 0x58], r12
mov qword [rbp - 0x50], r12
mov qword [rbp - 0x48], r12
mov edx, 0x2000
mov r9d, 0x10000000
lea r8d, [r12 + 1]
mov rcx, qword [rcx]
call fcn.140001ed0
add rax, 0xc
mov qword [rbp - 0x60], rax
mov ebx, r12d
mov rdx, qword [rbp - 0x50]
nop dword [rax + rax]
movzx eax, byte [rax + rbx]
mov byte [rsp + 0x30], al
cmp rdx, qword [rbp - 0x48]
je 0x14000a6ed
mov byte [rdx], al
mov rdx, qword [rbp - 0x50]
inc rdx
mov qword [rbp - 0x50], rdx
jmp 0x14000a6ff
lea r8, [rsp + 0x30]
lea rcx, [rbp - 0x58]
call fcn.1400148a0
mov rdx, qword [rbp - 0x50]
inc rbx
cmp rbx, 7
jae 0x14000a70e
mov rax, qword [rbp - 0x60]
jmp 0x14000a6d0
mov qword [rbp - 0x38], r12
mov qword [rbp - 0x30], r12
mov qword [rbp - 0x28], r12
mov edx, 0x2001
mov r9d, 0x10000000
mov r8d, 1
mov rcx, qword [rdi + 8]
call fcn.140001ed0
add rax, 0xc
mov qword [rbp - 0x40], rax
mov rbx, r12
mov rdx, qword [rbp - 0x30]
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [rax + rbx]
mov byte [rsp + 0x30], al
cmp rdx, qword [rbp - 0x28]
je 0x14000a76d
mov byte [rdx], al
mov rdx, qword [rbp - 0x30]
inc rdx
mov qword [rbp - 0x30], rdx
jmp 0x14000a77f
lea r8, [rsp + 0x30]
lea rcx, [rbp - 0x38]
call fcn.1400148a0
mov rdx, qword [rbp - 0x30]
inc rbx
cmp rbx, 7
jae 0x14000a78e
mov rax, qword [rbp - 0x40]
jmp 0x14000a750
mov qword [rbp - 0x18], r12
mov qword [rbp - 0x10], r12
mov qword [rbp - 8], r12
mov edx, 0x2002
mov r9d, 0x10000000
mov r8d, 1
mov rcx, qword [rdi + 0x10]
call fcn.140001ed0
add rax, 0xc
mov qword [rbp - 0x20], rax
mov rbx, r12
mov rdx, qword [rbp - 0x10]
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [rax + rbx]
mov byte [rsp + 0x30], al
cmp rdx, qword [rbp - 8]
je 0x14000a7ed
mov byte [rdx], al
mov rdx, qword [rbp - 0x10]
inc rdx
mov qword [rbp - 0x10], rdx
jmp 0x14000a7ff
lea r8, [rsp + 0x30]
lea rcx, [rbp - 0x18]
call fcn.1400148a0
mov rdx, qword [rbp - 0x10]
inc rbx
cmp rbx, 7
jae 0x14000a80e
mov rax, qword [rbp - 0x20]
jmp 0x14000a7d0
mov qword [rbp + 8], r12
mov qword [rbp + 0x10], r12
mov qword [rbp + 0x18], r12
mov edx, 0x2003
mov r9d, 0x10000000
mov r8d, 1
mov rcx, qword [rdi + 0x18]
call fcn.140001ed0
add rax, 0xc
mov qword [rbp], rax
mov rbx, r12
mov rdx, qword [rbp + 0x10]
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [rax + rbx]
mov byte [rsp + 0x30], al
cmp rdx, qword [rbp + 0x18]
je 0x14000a86d
mov byte [rdx], al
mov rdx, qword [rbp + 0x10]
inc rdx
mov qword [rbp + 0x10], rdx
jmp 0x14000a87f
lea r8, [rsp + 0x30]
lea rcx, [rbp + 8]
call fcn.1400148a0
mov rdx, qword [rbp + 0x10]
inc rbx
cmp rbx, 7
jae 0x14000a88e
mov rax, qword [rbp]
jmp 0x14000a850
mov rbx, r12
movzx eax, byte [0x140024e64]
test al, al
jne 0x14000abc1
movabs r13, 0x2492492492492493
lea r15, [0x140000000]
mov r14, r12
lea rsi, [rbp - 0x58]
nop dword [rax + rax]
lea rcx, [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
lea rcx, [rbp - 0x80]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
imul rax, qword [rsp + 0x50], 0xf4240
cqo
idiv qword [rbp - 0x80]
mov qword [rsp + 0x50], rax
sub rax, rbx
cmp rax, 0x5208
jb 0x14000a8fd
test rbx, rbx
jne 0x14000ac07
lea rcx, [rbp - 0x78]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rcx, qword [rbp - 0x78]
mov rax, r13
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
sub rcx, rax
cmp rcx, 6
ja case.default.0x14000a93d
mov eax, dword [r15 + rcx*4 + 0xac14]
add rax, r15
jmp rax
mov rdi, qword [rsi - 8]
mov ebx, dword [rsi + 8]
sub ebx, dword [rsi]
lea rax, [rsp + 0x34]
mov qword [rsp + 0x20], rax
mov r9d, 0x40
mov r8d, ebx
mov rdx, rdi
mov rcx, qword [0x140025938]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov r8d, ebx
lea rdx, [0x14001ad70]
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rsp + 0x60]
mov r9d, dword [rsp + 0x34]
jmp 0x14000ab52
mov rdi, qword [rsi - 8]
mov ebx, dword [rsi + 8]
sub ebx, dword [rsi]
lea rax, [rsp + 0x38]
mov qword [rsp + 0x20], rax
mov r9d, 0x40
mov r8d, ebx
mov rdx, rdi
mov rcx, qword [0x140025938]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov r8d, ebx
lea rdx, [0x14001ad78]
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rsp + 0x64]
mov r9d, dword [rsp + 0x38]
jmp 0x14000ab52
mov rdi, qword [rsi - 8]
mov ebx, dword [rsi + 8]
sub ebx, dword [rsi]
lea rax, [rsp + 0x3c]
mov qword [rsp + 0x20], rax
mov r9d, 0x40
mov r8d, ebx
mov rdx, rdi
mov rcx, qword [0x140025938]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov r8d, ebx
lea rdx, [0x14001ad80]
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rsp + 0x68]
mov r9d, dword [rsp + 0x3c]
jmp 0x14000ab52
mov rdi, qword [rsi - 8]
mov ebx, dword [rsi + 8]
sub ebx, dword [rsi]
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
mov r9d, 0x40
mov r8d, ebx
mov rdx, rdi
mov rcx, qword [0x140025938]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov r8d, ebx
lea rdx, [0x14001ad88]
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rsp + 0x6c]
mov r9d, dword [rsp + 0x40]
jmp 0x14000ab52
mov rdi, qword [rsi - 8]
mov ebx, dword [rsi + 8]
sub ebx, dword [rsi]
lea rax, [rsp + 0x44]
mov qword [rsp + 0x20], rax
mov r9d, 0x40
mov r8d, ebx
mov rdx, rdi
mov rcx, qword [0x140025938]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov r8d, ebx
lea rdx, [0x14001ad90]
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rsp + 0x70]
mov r9d, dword [rsp + 0x44]
jmp 0x14000ab52
mov rdi, qword [rsi - 8]
mov ebx, dword [rsi + 8]
sub ebx, dword [rsi]
lea rax, [rsp + 0x48]
mov qword [rsp + 0x20], rax
mov r9d, 0x40
mov r8d, ebx
mov rdx, rdi
mov rcx, qword [0x140025938]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov r8d, ebx
lea rdx, [0x14001ad98]
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rsp + 0x74]
mov r9d, dword [rsp + 0x48]
jmp 0x14000ab52
mov rdi, qword [rsi - 8]
mov ebx, dword [rsi + 8]
sub ebx, dword [rsi]
lea rax, [rsp + 0x4c]
mov qword [rsp + 0x20], rax
mov r9d, 0x40
mov r8d, ebx
mov rdx, rdi
mov rcx, qword [0x140025938]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov r8d, ebx
lea rdx, [0x14001ada0]
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rsp + 0x78]
mov r9d, dword [rsp + 0x4c]
mov qword [rsp + 0x20], rax
mov r8, rbx
mov rdx, rdi
mov rcx, qword [0x140025938]
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
lea rcx, [rsp + 0x58]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
lea rcx, [rbp - 0x70]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
imul rax, qword [rsp + 0x58], 0xf4240
cqo
idiv qword [rbp - 0x70]
mov rbx, rax
mov qword [rsp + 0x58], rax
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_Sleep]
inc r14
add rsi, 0x20
cmp r14, 4
jb 0x14000a8c0
movzx ecx, byte [0x140024e64]
test cl, cl
je 0x14000a8b1
lea r9, [fcn.140004d40]
mov edx, 0x20
lea r8d, [rdx - 0x1c]
lea rcx, [rbp - 0x60]
call fcn.140016980
mov rcx, qword [rbp + 0x20]
xor rcx, rsp
call fcn.1400167a0
lea r11, [rsp + 0x130]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov ecx, 0xb1ade5
call qword [sym.imp.KERNEL32.dll_ExitProcess]