Function at 0x140043ab0
Capabilities:
Check for time delay via gettickcount

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x70
mov r15, rdx
mov r14, rcx
cmp byte [rcx + 0x18], 0
jne 0x140043af5
cmp byte [rcx + 0x2c], 0
jne 0x140043d65
lea rdx, str.____Failed_to_initialize_symbols__n
lea rcx, [0x140382470]
call fcn.140001910
jmp 0x140043d65
mov ebx, dword [rdx + 0x48]
mov rcx, qword [rcx]
call fcn.140044520
cmp byte [r14 + 0x2c], 0
jne 0x140043b22
lea rdx, str.Scanning_threads.
lea rcx, [0x140382350]
call fcn.140001910
mov rcx, rax
call fcn.1400038c0
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r12d, eax
mov dword [rbp + 0x50], eax
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x50], xmm0
mov ecx, 0x58
call fcn.14009c500
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbp - 0x50], rax
lea rdx, [rbp - 0x50]
mov ecx, ebx
call fcn.140058f30
test al, al
jne 0x140043b9d
lea rdx, [rbp - 0x50]
mov ecx, ebx
call fcn.140058db0
test al, al
jne 0x140043b9d
cmp byte [r14 + 0x2c], al
jne 0x140043d1c
lea rdx, str.____Failed_enumerating_threads.
lea rcx, [0x140382470]
call fcn.140001910
mov rcx, rax
call fcn.1400038c0
jmp 0x140043d1c
lea rcx, [rbp - 0x50]
call fcn.140059120
test al, al
jne 0x140043bcb
cmp byte [r14 + 0x2c], al
jne 0x140043bcb
lea rdx, str.____Failed_quering_thread_details.
lea rcx, [0x140382350]
call fcn.140001910
mov rcx, rax
call fcn.1400038c0
mov rax, qword [rbp - 0x50]
mov rbx, qword [rax]
cmp rbx, rax
je 0x140043cfd
xor r13d, r13d
lea r12, vtable.pesieve::ThreadScanner.0
mov dword [rbp + 0x40], r13d
lea rdx, [rbp + 0x40]
mov rcx, qword [r14]
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
test eax, eax
je 0x140043c07
cmp dword [rbp + 0x40], 0x103
je 0x140043c07
xor al, al
jmp 0x140043c09
mov al, 1
test al, al
je 0x140043cf9
lea rdx, [rbx + 0x28]
mov r8, qword [r15 + 0x40]
movzx ecx, byte [r14 + 9]
mov rax, qword [r14]
mov qword [rbp - 0x38], rax
mov qword [rbp - 0x40], r12
mov byte [rbp - 0x30], cl
mov qword [rbp - 0x28], rdx
lea rsi, [r15 + 0x60]
mov qword [rbp - 0x20], rsi
mov qword [rbp - 0x18], r8
lea rax, [r14 + 0x10]
mov qword [rbp - 0x10], rax
lea rcx, [rbp - 0x40]
call fcn.14005b960
mov rdi, rax
mov qword [rbp + 0x40], rax
test rax, rax
je 0x140043ca1
lea rcx, [r15 + 0x28]
mov rdx, qword [rcx + 8]
cmp rdx, qword [rcx + 0x10]
je 0x140043c71
mov qword [rdx], rax
add qword [rcx + 8], 8
jmp 0x140043c7a
lea r8, [rbp + 0x40]
call fcn.1400405f0
cmp dword [rdi + 0x50], 0xffffffff
jne 0x140043c84
inc qword [r15 + 0x58]
mov rdx, rdi
mov rcx, r15
call fcn.140038d60
cmp dword [rdi + 0x50], 0xffffffff
je 0x140043ca1
mov rdx, rdi
mov rcx, rsi
call fcn.140038660
nop
mov rax, qword [rbx + 0x10]
cmp byte [rax + 0x19], 0
je 0x140043ccd
mov rax, qword [rbx + 8]
cmp byte [rax + 0x19], 0
jne 0x140043cc8
cmp rbx, qword [rax + 0x10]
jne 0x140043cc8
mov rbx, rax
mov rax, qword [rax + 8]
cmp byte [rax + 0x19], 0
je 0x140043cb5
mov rbx, rax
jmp 0x140043cef
mov rbx, rax
mov rcx, qword [rax]
cmp byte [rcx + 0x19], 0
jne 0x140043cef
nop dword [rax]
mov rbx, rcx
mov rax, qword [rcx]
mov rcx, rax
cmp byte [rax + 0x19], 0
je 0x140043ce0
cmp rbx, qword [rbp - 0x50]
jne 0x140043be5
mov r12d, dword [rbp + 0x50]
cmp byte [r14 + 0x2c], 0
jne 0x140043d1c
call qword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, r12d
mov edx, eax
lea rcx, str.Threads
call fcn.140041940
nop
mov rax, qword [rbp - 0x50]
mov rbx, qword [rax + 8]
cmp byte [rbx + 0x19], 0
jne 0x140043d57
nop word [rax + rax]
mov r8, qword [rbx + 0x10]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x50]
call fcn.140040790
mov rcx, rbx
mov rbx, qword [rbx]
mov edx, 0x58
call fcn.14006b0f0
cmp byte [rbx + 0x19], 0
je 0x140043d30
mov edx, 0x58
mov rcx, qword [rbp - 0x50]
call fcn.14006b0f0
xor eax, eax
mov rbx, qword [rsp + 0xb8]
add rsp, 0x70
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret