Function at 0x140057f40
Capabilities:
Create thread
Query environment variable

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
mov rbp, rsp
sub rsp, 0x80
xor ebx, ebx
lea rcx, str.USERNAME
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], rbx
mov qword [rbp - 8], rbx
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rax + r8], bl
jne 0x140057f80
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.140031c80
nop
lea rdx, [rbp - 0x20]
lea rcx, [rbp - 0x40]
call fcn.140062190
nop
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.140134038
movups xmm0, xmmword [rbp - 0x40]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rbp - 0x30]
movups xmmword [rax + 0x10], xmm1
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x28], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x40], 0
mov qword [rbp + 0x10], rax
lea rcx, [rbp - 0x48]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], ebx
mov r9, rax
lea r8, [0x140066e70]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 0x50], rax
test rax, rax
je 0x140058162
cmp dword [rbp - 0x48], 0
jne 0x140058011
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
call qword [sym.imp.MSVCP140.dll__Thrd_id]
cmp dword [rbp - 0x48], eax
jne 0x140058028
mov ecx, 5
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
movaps xmm0, xmmword [rbp - 0x50]
movdqa xmmword [rbp - 0x40], xmm0
xor edx, edx
lea rcx, [rbp - 0x40]
call qword [sym.imp.MSVCP140.dll__Thrd_join]
test eax, eax
je 0x14005804d
mov ecx, 2
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x50], xmm0
lea rcx, [rbp + 0x10]
call fcn.140045650
movabs rax, 0x7fffffffb87973ff
mov rbx, qword [rbp + 0x10]
cmp rbx, rax
jge 0x14005807a
add rbx, 0x47868c00
jmp 0x140058084
movabs rbx, 0x7fffffffffffffff
lea rcx, [rbp + 0x10]
call fcn.140045650
mov rax, qword [rbp + 0x10]
cmp rax, rbx
jge 0x1400580fe
movabs rdi, 0x4e94914f0000
movabs rsi, 0x431bde82d7b634db
nop word [rax + rax]
mov rcx, rbx
sub rcx, rax
cmp rcx, rdi
jl 0x1400580c2
mov ecx, 0x5265c00
jmp 0x1400580e7
mov rax, rsi
imul rcx
sar rdx, 0x12
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rax, rdx, 0xf4240
cmp rax, rcx
jge 0x1400580e5
inc rdx
mov ecx, edx
call sub.KERNEL32.dll_Sleep
lea rcx, [rbp + 0x10]
call fcn.140045650
mov rax, qword [rbp + 0x10]
cmp rax, rbx
jl 0x1400580b0
cmp dword [rbp - 0x48], 0
je 0x14005810b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
nop
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x140058149
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140058144
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140058144
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401342b4
lea r11, [rsp + 0x80]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret
mov dword [rbp - 0x48], ebx
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3