Function at 0x140070d30
Capabilities:
Create thread
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
push rbp
mov rbp, rsp
sub rsp, 0x60
mov rax, qword [0x140197010]
xor rax, rsp
mov qword [rbp - 0x10], rax
xor ebx, ebx
call fcn.140071270
lea ecx, [rbx + 0x64]
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [0x140198558], ebx
je 0x1400711eb
mov rax, qword [0x140198530]
dec rax
movabs rcx, 0x7ffffffffffe
cmp rax, rcx
ja 0x140071159
lea ecx, [rbx + 8]
call fcn.14006f708
lea rcx, [0x1400709b0]
mov qword [rax], rcx
mov qword [rbp - 0x30], rax
lea rcx, [rbp - 0x20]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], ebx
mov r9, rax
lea r8, [0x140066340]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 0x28], rax
test rax, rax
je 0x14007114a
lea rcx, [rbp - 0x28]
call fcn.14005bf10
nop
cmp dword [rbp - 0x20], ebx
je 0x140070dde
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 8
call fcn.14006f708
lea rcx, [0x140073ce0]
mov qword [rax], rcx
mov qword [rbp - 0x30], rax
lea rcx, [rbp - 0x20]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], ebx
mov r9, rax
lea r8, [0x140066340]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 0x28], rax
test rax, rax
je 0x14007113b
lea rcx, [rbp - 0x28]
call fcn.14005bf10
nop
cmp dword [rbp - 0x20], 0
je 0x140070e46
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [0x14019760c], 0x34
jg 0x1400710ca
mov ecx, 8
call fcn.14006f708
lea rcx, [0x14007c870]
mov qword [rax], rcx
mov qword [rbp - 0x30], rax
lea rcx, [rbp - 0x20]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], ebx
mov r9, rax
lea r8, [0x140066340]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 0x28], rax
test rax, rax
je 0x14007112c
lea rcx, [rbp - 0x28]
call fcn.14005bf10
nop
cmp dword [rbp - 0x20], 0
je 0x140070ebb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 8
call fcn.14006f708
lea rcx, [0x14007fde0]
mov qword [rax], rcx
mov qword [rbp - 0x30], rax
lea rcx, [rbp - 0x20]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], ebx
mov r9, rax
lea r8, [0x140066340]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 0x28], rax
test rax, rax
je 0x14007111d
lea rcx, [rbp - 0x28]
call fcn.14005bf10
nop
cmp dword [rbp - 0x20], 0
je 0x140070f23
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 8
call fcn.14006f708
lea rcx, [0x140077580]
mov qword [rax], rcx
mov qword [rbp - 0x30], rax
lea rcx, [rbp - 0x20]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], ebx
mov r9, rax
lea r8, [0x140066340]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 0x28], rax
test rax, rax
je 0x14007110e
lea rcx, [rbp - 0x28]
call fcn.14005bf10
nop
cmp dword [rbp - 0x20], 0
je 0x140070f8b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 8
call fcn.14006f708
lea rcx, [0x140076a90]
mov qword [rax], rcx
mov qword [rbp - 0x30], rax
lea rcx, [rbp - 0x20]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], ebx
mov r9, rax
lea r8, [0x140066340]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 0x28], rax
test rax, rax
je 0x1400710ff
lea rcx, [rbp - 0x28]
call fcn.14005bf10
nop
cmp dword [rbp - 0x20], 0
je 0x140070ff3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 8
call fcn.14006f708
lea rcx, [0x14007a5e0]
mov qword [rax], rcx
mov qword [rbp - 0x30], rax
lea rcx, [rbp - 0x20]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], ebx
mov r9, rax
lea r8, [0x140066340]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 0x28], rax
test rax, rax
je 0x1400710f0
lea rcx, [rbp - 0x28]
call fcn.14005bf10
nop
cmp dword [rbp - 0x20], 0
je 0x14007105b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 8
call fcn.14006f708
lea rcx, [0x140078d10]
mov qword [rax], rcx
mov qword [rbp - 0x30], rax
lea rcx, [rbp - 0x20]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], ebx
mov r9, rax
lea r8, [0x140066340]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 0x28], rax
test rax, rax
je 0x1400710e1
lea rcx, [rbp - 0x28]
call fcn.14005bf10
nop
cmp dword [rbp - 0x20], 0
je 0x1400710bf
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [rbp - 0x10]
xor rcx, rsp
call fcn.14006f5c0
mov rbx, qword [rsp + 0x70]
add rsp, 0x60
pop rbp
ret
mov dword [rbp - 0x20], ebx
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp - 0x20], ebx
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp - 0x20], ebx
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp - 0x20], ebx
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp - 0x20], ebx
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp - 0x20], ebx
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp - 0x20], ebx
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp - 0x20], ebx
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
movdqa xmm1, xmmword [0x14015d9a0]
movdqu xmmword [rbp - 0x28], xmm1
mov dl, 0x28
mov r8b, 0x25
mov r9b, 0x31
mov r10b, 0x43
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rbp - 0x27], al
xor byte [rbp - 0x26], cl
xor byte [rbp - 0x25], cl
xor byte [rbp - 0x24], cl
xor byte [rbp - 0x23], cl
xor byte [rbp - 0x22], cl
xor byte [rbp - 0x21], cl
xor byte [rbp - 0x20], cl
xor byte [rbp - 0x1f], cl
xor byte [rbp - 0x1e], cl
xor byte [rbp - 0x1d], cl
xor byte [rbp - 0x1c], cl
xor byte [rbp - 0x1b], cl
xor byte [rbp - 0x1a], cl
xor byte [rbp - 0x19], cl
xor dl, cl
mov byte [rbp - 0x18], dl
xor r8b, cl
mov byte [rbp - 0x17], r8b
xor r9b, cl
mov byte [rbp - 0x16], r9b
xor r10b, cl
mov byte [rbp - 0x15], r10b
mov byte [rbp - 0x14], bl
lea rcx, [rbp - 0x27]
call fcn.14005bb70
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
movdqa xmm1, xmmword [0x14015daf0]
movdqu xmmword [rbp - 0x28], xmm1
mov dl, 0x34
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rbp - 0x27], al
xor byte [rbp - 0x26], cl
xor byte [rbp - 0x25], cl
xor byte [rbp - 0x24], cl
xor byte [rbp - 0x23], cl
xor byte [rbp - 0x22], cl
xor byte [rbp - 0x21], cl
xor byte [rbp - 0x20], cl
xor byte [rbp - 0x1f], cl
xor byte [rbp - 0x1e], cl
xor byte [rbp - 0x1d], cl
xor byte [rbp - 0x1c], cl
xor byte [rbp - 0x1b], cl
xor byte [rbp - 0x1a], cl
xor byte [rbp - 0x19], cl
xor dl, cl
mov byte [rbp - 0x18], dl
mov byte [rbp - 0x17], bl
lea rcx, [rbp - 0x27]
call fcn.14005bb70
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3