Function at 0x140057e90
Capabilities:
Create thread
Query environment variable

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
mov rbp, rsp
sub rsp, 0x80
xor ebx, ebx
lea rcx, str.USERNAME
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], rbx
mov qword [rbp - 8], rbx
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rax + r8], bl
jne 0x140057ed0
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.140031bd0
nop
lea rdx, [rbp - 0x20]
lea rcx, [rbp - 0x40]
call fcn.140063720
nop
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.140135608
movups xmm0, xmmword [rbp - 0x40]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rbp - 0x30]
movups xmmword [rax + 0x10], xmm1
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x28], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x40], 0
mov qword [rbp + 0x10], rax
lea rcx, [rbp - 0x48]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], ebx
mov r9, rax
lea r8, [0x140068440]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 0x50], rax
test rax, rax
je 0x1400580b2
cmp dword [rbp - 0x48], 0
jne 0x140057f61
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
call qword [sym.imp.MSVCP140.dll__Thrd_id]
cmp dword [rbp - 0x48], eax
jne 0x140057f78
mov ecx, 5
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
movaps xmm0, xmmword [rbp - 0x50]
movdqa xmmword [rbp - 0x40], xmm0
xor edx, edx
lea rcx, [rbp - 0x40]
call qword [sym.imp.MSVCP140.dll__Thrd_join]
test eax, eax
je 0x140057f9d
mov ecx, 2
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x50], xmm0
lea rcx, [rbp + 0x10]
call fcn.1400461b0
movabs rax, 0x7fffffffb87973ff
mov rbx, qword [rbp + 0x10]
cmp rbx, rax
jge 0x140057fca
add rbx, 0x47868c00
jmp 0x140057fd4
movabs rbx, 0x7fffffffffffffff
lea rcx, [rbp + 0x10]
call fcn.1400461b0
mov rax, qword [rbp + 0x10]
cmp rax, rbx
jge 0x14005804e
movabs rdi, 0x4e94914f0000
movabs rsi, 0x431bde82d7b634db
nop word [rax + rax]
mov rcx, rbx
sub rcx, rax
cmp rcx, rdi
jl 0x140058012
mov ecx, 0x5265c00
jmp 0x140058037
mov rax, rsi
imul rcx
sar rdx, 0x12
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rax, rdx, 0xf4240
cmp rax, rcx
jge 0x140058035
inc rdx
mov ecx, edx
call sub.KERNEL32.dll_Sleep
lea rcx, [rbp + 0x10]
call fcn.1400461b0
mov rax, qword [rbp + 0x10]
cmp rax, rbx
jl 0x140058000
cmp dword [rbp - 0x48], 0
je 0x14005805b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
nop
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x140058099
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140058094
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140058094
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140135884
lea r11, [rsp + 0x80]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret
mov dword [rbp - 0x48], ebx
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3