Function at 0x14005ba80
Capabilities:
Create thread
Query environment variable

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
mov rbp, rsp
sub rsp, 0x80
xor ebx, ebx
lea rcx, str.USERNAME
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], rbx
mov qword [rbp - 8], rbx
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rax + r8], bl
jne 0x14005bac0
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.140031a50
nop
lea rdx, [rbp - 0x20]
lea rcx, [rbp - 0x40]
call fcn.140043060
nop
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.140139918
movups xmm0, xmmword [rbp - 0x40]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rbp - 0x30]
movups xmmword [rax + 0x10], xmm1
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x28], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x40], 0
mov qword [rbp + 0x10], rax
lea rcx, [rbp - 0x48]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], ebx
mov r9, rax
lea r8, [0x14006dcb0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 0x50], rax
test rax, rax
je 0x14005bca2
cmp dword [rbp - 0x48], 0
jne 0x14005bb51
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
call qword [sym.imp.MSVCP140.dll__Thrd_id]
cmp dword [rbp - 0x48], eax
jne 0x14005bb68
mov ecx, 5
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
movaps xmm0, xmmword [rbp - 0x50]
movdqa xmmword [rbp - 0x40], xmm0
xor edx, edx
lea rcx, [rbp - 0x40]
call qword [sym.imp.MSVCP140.dll__Thrd_join]
test eax, eax
je 0x14005bb8d
mov ecx, 2
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x50], xmm0
lea rcx, [rbp + 0x10]
call fcn.1400482d0
movabs rax, 0x7fffffffb87973ff
mov rbx, qword [rbp + 0x10]
cmp rbx, rax
jge 0x14005bbba
add rbx, 0x47868c00
jmp 0x14005bbc4
movabs rbx, 0x7fffffffffffffff
lea rcx, [rbp + 0x10]
call fcn.1400482d0
mov rax, qword [rbp + 0x10]
cmp rax, rbx
jge 0x14005bc3e
movabs rdi, 0x4e94914f0000
movabs rsi, 0x431bde82d7b634db
nop word [rax + rax]
mov rcx, rbx
sub rcx, rax
cmp rcx, rdi
jl 0x14005bc02
mov ecx, 0x5265c00
jmp 0x14005bc27
mov rax, rsi
imul rcx
sar rdx, 0x12
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rax, rdx, 0xf4240
cmp rax, rcx
jge 0x14005bc25
inc rdx
mov ecx, edx
call sub.KERNEL32.dll_Sleep
lea rcx, [rbp + 0x10]
call fcn.1400482d0
mov rax, qword [rbp + 0x10]
cmp rax, rbx
jl 0x14005bbf0
cmp dword [rbp - 0x48], 0
je 0x14005bc4b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
nop
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x14005bc89
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005bc84
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005bc84
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140139b94
lea r11, [rsp + 0x80]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret
mov dword [rbp - 0x48], ebx
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3