Function at 0x140057cf0
Capabilities:
Create thread
Query environment variable

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
mov rbp, rsp
sub rsp, 0x80
xor ebx, ebx
lea rcx, str.USERNAME
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], rbx
mov qword [rbp - 8], rbx
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rax + r8], bl
jne 0x140057d30
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.1400312d0
nop
lea rdx, [rbp - 0x20]
lea rcx, [rbp - 0x40]
call fcn.140061ee0
nop
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.1401310a4
movups xmm0, xmmword [rbp - 0x40]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rbp - 0x30]
movups xmmword [rax + 0x10], xmm1
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x28], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x40], 0
mov qword [rbp + 0x10], rax
lea rcx, [rbp - 0x48]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], ebx
mov r9, rax
lea r8, [0x140066720]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 0x50], rax
test rax, rax
je 0x140057f11
cmp dword [rbp - 0x48], 0
jne 0x140057dc1
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
call qword [sym.imp.MSVCP140.dll__Thrd_id]
cmp dword [rbp - 0x48], eax
jne 0x140057dd8
mov ecx, 5
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
movaps xmm0, xmmword [rbp - 0x50]
movdqa xmmword [rbp - 0x40], xmm0
xor edx, edx
lea rcx, [rbp - 0x40]
call qword [sym.imp.MSVCP140.dll__Thrd_join]
test eax, eax
je 0x140057dfd
mov ecx, 2
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x50], xmm0
lea rcx, [rbp + 0x10]
call fcn.140044c50
movabs rax, 0x7fffffffb87973ff
mov rbx, qword [rbp + 0x10]
cmp rbx, rax
jge 0x140057e2a
add rbx, 0x47868c00
jmp 0x140057e34
movabs rbx, 0x7fffffffffffffff
lea rcx, [rbp + 0x10]
call fcn.140044c50
mov rax, qword [rbp + 0x10]
cmp rax, rbx
jge 0x140057ead
movabs rdi, 0x4e94914f0000
movabs rsi, 0x431bde82d7b634db
nop word [rax + rax]
mov rcx, rbx
sub rcx, rax
cmp rcx, rdi
jle 0x140057e72
mov edx, 0x5265c00
jmp 0x140057e94
mov rax, rsi
imul rcx
sar rdx, 0x12
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rax, rdx, 0xf4240
cmp rax, rcx
jge 0x140057e94
inc edx
mov ecx, edx
call sub.KERNEL32.dll_Sleep
lea rcx, [rbp + 0x10]
call fcn.140044c50
mov rax, qword [rbp + 0x10]
cmp rax, rbx
jl 0x140057e60
cmp dword [rbp - 0x48], 0
je 0x140057eba
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
nop
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x140057ef8
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140057ef3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140057ef3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140131320
lea r11, [rsp + 0x80]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret
mov dword [rbp - 0x48], ebx
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3