Function at 0x14008a500
Capabilities:
Check for time delay via queryperformancecounter
Create process on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x120]
sub rsp, 0x220
mov rax, qword [0x1401740a0]
xor rax, rsp
mov qword [rbp + 0x110], rax
mov rbx, rcx
xor r14d, r14d
mov esi, r14d
mov dword [rsp + 0x50], r14d
call fcn.14003cbe0
mov r13, rax
mov qword [rbp - 0x78], r14
lea rax, [0x14014c798]
mov qword [rbp - 0x70], rax
mov qword [rbp - 0x68], r13
mov qword [rbp - 0x60], r14
mov rcx, qword [r13]
lea rdi, [0x140148370]
cmp dword [rcx], r14d
je 0x14008a5b4
mov qword [rsp + 0x50], r14
lea rcx, [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x50]
mov qword [rbp - 0x78], rax
mov qword [rsp + 0x28], rdi
lea rax, str._BDREINIT__::_CReinitProcess::RestartProcess___
mov qword [rsp + 0x20], rax
lea r9, str._s_s
mov r8, rdi
xor edx, edx
mov rcx, r13
call fcn.14003bea0
nop
lea rdx, [rbp + 0xb0]
mov rcx, rbx
call fcn.140089140
nop
call fcn.14003cbe0
mov rcx, qword [rax]
mov rdi, 0xffffffffffffffff
cmp dword [rcx], 0
je 0x14008a75a
lea rdx, [rbp + 0xf0]
call fcn.14008ad30
mov rdx, rax
mov dword [rsp + 0x50], 1
cmp qword [rax + 0x18], 8
jb 0x14008a5fd
mov rdx, qword [rax]
lea rcx, [rbp + 0xb0]
cmp qword [rbp + 0xc8], 8
cmovae rcx, qword [rbp + 0xb0]
mov qword [rsp + 0x60], rcx
mov rax, qword [rbp + 0xc0]
mov qword [rsp + 0x68], rax
movaps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rbp + 0xe0], xmm0
mov qword [rsp + 0x60], 0xd
lea rax, [rbp + 0xe0]
mov qword [rsp + 0x68], rax
movaps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rbp + 0xd0], xmm0
mov qword [rsp + 0x60], rdx
mov rax, rdi
nop dword [rax]
inc rax
cmp word [rdx + rax*2], 0
jne 0x14008a660
mov qword [rsp + 0x68], rax
lea r8, [rbp + 0xd0]
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x90]
call fcn.140022420
nop
mov dword [rsp + 0x50], 0xb
mov qword [rbp + 0x20], r14
mov qword [rbp + 0x30], r14
mov qword [rbp + 0x38], r14
lea rsi, [rbp + 0x90]
mov r15, qword [rbp + 0x90]
mov r12, qword [rbp + 0xa8]
cmp r12, 8
cmovae rsi, r15
mov rbx, qword [rbp + 0xa0]
cmp rbx, 8
jae 0x14008a6dd
movups xmm0, xmmword [rsi]
movups xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x38], 7
mov r14d, 7
jmp 0x14008a71d
mov r14, rbx
or r14, 7
movabs rax, 0x7ffffffffffffffe
cmp r14, rax
cmova r14, rax
lea rdx, [r14 + 1]
lea rcx, [rbp + 0x20]
call fcn.140043b70
mov qword [rbp + 0x20], rax
lea r8, [rbx*2 + 2]
mov rdx, rsi
mov rcx, rax
call fcn.1400f8070
mov qword [rbp + 0x38], r14
mov qword [rbp + 0x30], rbx
mov esi, 0x1f
mov dword [rsp + 0x50], esi
lea rbx, [rbp + 0x20]
cmp r14, 8
cmovae rbx, qword [rbp + 0x20]
call fcn.14003cbe0
mov qword [rsp + 0x20], rbx
xor r9d, r9d
lea r8, str._BDREINIT__::_CReinitProcess::RestartProcess____
xor edx, edx
mov rcx, rax
call fcn.14003f620
xor r14d, r14d
jmp 0x14008a768
mov r12, qword [rbp + 0xa8]
mov r15, qword [rbp + 0x90]
test sil, 4
je 0x14008a7c2
and esi, 0xfffffffb
mov rdx, qword [rbp + 0x38]
cmp rdx, 8
jb 0x14008a7b1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008a7ac
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008acee
call fcn.1400f5c2c
mov qword [rbp + 0x30], r14
mov qword [rbp + 0x38], 7
mov word [rbp + 0x20], r14w
test sil, 2
je 0x14008a807
and esi, 0xfffffffd
cmp r12, 8
jb 0x14008a807
lea rdx, [r12*2 + 2]
mov rax, r15
cmp rdx, 0x1000
jb 0x14008a7fe
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008acf4
mov rcx, r15
call fcn.1400f5c2c
nop
test sil, 1
je 0x14008a853
mov rdx, qword [rbp + 0x108]
cmp rdx, 8
jb 0x14008a853
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xf0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008a84e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008acfa
call fcn.1400f5c2c
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], rax
movups xmmword [rbp - 0x4c], xmm0
movups xmmword [rbp - 0x3c], xmm0
movups xmmword [rbp - 0x2c], xmm0
movups xmmword [rbp - 0x1c], xmm0
movups xmmword [rbp - 0xc], xmm0
movups xmmword [rbp + 4], xmm0
mov dword [rbp + 0x14], eax
mov dword [rbp - 0x50], 0x68
lea rdx, [rbp + 0xb0]
cmp qword [rbp + 0xc8], 8
cmovae rdx, qword [rbp + 0xb0]
lea rax, [rsp + 0x70]
mov qword [rsp + 0x48], rax
lea rax, [rbp - 0x50]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], r14d
mov dword [rsp + 0x20], r14d
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x14008aba4
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
mov dword [rbp + 0x40], 0x80728045
mov dword [rbp + 0x44], 0x806f8072
mov dword [rbp + 0x48], 0x802c8072
mov dword [rbp + 0x4c], 0x80638020
mov dword [rbp + 0x50], 0x806c8061
mov dword [rbp + 0x54], 0x8069806c
mov dword [rbp + 0x58], 0x8067806e
mov dword [rbp + 0x5c], 0x80438020
mov dword [rbp + 0x60], 0x80658072
mov dword [rbp + 0x64], 0x80748061
mov dword [rbp + 0x68], 0x80508065
mov dword [rbp + 0x6c], 0x806f8072
mov dword [rbp + 0x70], 0x80658063
mov dword [rbp + 0x74], 0x80738073
mov dword [rbp + 0x78], 0x803a8057
mov dword [rbp + 0x7c], 0x807b8020
mov dword [rbp + 0x80], 0x8000807d
mov word [rbp + 0x84], r14w
lea rdx, [rbp + 0x40]
lea rcx, [rbp + 0x90]
call fcn.14001a400
nop
lea rax, [rbp + 0x90]
cmp qword [rbp + 0xa8], 8
cmovae rax, qword [rbp + 0x90]
mov dword [rbp + 0xd0], ebx
movaps xmm0, xmmword [rbp + 0xd0]
movdqa xmmword [rbp + 0xd0], xmm0
mov qword [rsp + 0x60], 2
lea rcx, [rbp + 0xd0]
mov qword [rsp + 0x68], rcx
movaps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rbp + 0xe0], xmm0
mov qword [rsp + 0x60], rax
inc rdi
cmp word [rax + rdi*2], 0
jne 0x14008a9c5
mov qword [rsp + 0x68], rdi
lea r8, [rbp + 0xe0]
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0xf0]
call fcn.140022420
nop
mov qword [rbp + 0x20], r14
mov qword [rbp + 0x30], r14
mov qword [rbp + 0x38], r14
lea r14, [rbp + 0xf0]
mov r15, qword [rbp + 0x108]
cmp r15, 8
setae r12b
mov rsi, qword [rbp + 0xf0]
cmovae r14, rsi
mov rbx, qword [rbp + 0x100]
cmp rbx, 8
jae 0x14008aa3e
movups xmm0, xmmword [r14]
movups xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x38], 7
mov edi, 7
jmp 0x14008aa7e
mov rdi, rbx
or rdi, 7
movabs rax, 0x7ffffffffffffffe
cmp rdi, rax
cmova rdi, rax
lea rdx, [rdi + 1]
lea rcx, [rbp + 0x20]
call fcn.140043b70
mov qword [rbp + 0x20], rax
lea r8, [rbx*2 + 2]
mov rdx, r14
mov rcx, rax
call fcn.1400f8070
mov qword [rbp + 0x38], rdi
mov qword [rbp + 0x30], rbx
lea rbx, [rbp + 0x20]
cmp rdi, 8
cmovae rbx, qword [rbp + 0x20]
call fcn.14003cbe0
mov qword [rsp + 0x20], rbx
xor r9d, r9d
lea r8, str._BDREINIT__::_CReinitProcess::RestartProcess____
lea edx, [r9 + 8]
mov rcx, rax
call fcn.14003f620
nop
mov rdx, qword [rbp + 0x38]
cmp rdx, 8
jb 0x14008aaf0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008aaeb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008ad00
call fcn.1400f5c2c
xor r14d, r14d
mov qword [rbp + 0x30], r14
mov qword [rbp + 0x38], 7
mov word [rbp + 0x20], r14w
test r12b, r12b
je 0x14008ab3f
lea rdx, [r15*2 + 2]
mov rax, rsi
cmp rdx, 0x1000
jb 0x14008ab36
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008ad06
mov rcx, rsi
call fcn.1400f5c2c
nop
mov rdx, qword [rbp + 0xa8]
cmp rdx, 8
jb 0x14008ab85
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x90]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008ab80
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008ad0c
call fcn.1400f5c2c
mov qword [rbp + 0xa0], r14
mov qword [rbp + 0xa8], 7
mov word [rbp + 0x90], r14w
xor dil, dil
jmp 0x14008aba7
mov dil, 1
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x14008abc6
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x148]
test eax, eax
je 0x14008ad12
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x14008abe5
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x148]
test eax, eax
je 0x14008ad1d
mov rdx, qword [rbp + 0xc8]
cmp rdx, 8
jb 0x14008ac2b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xb0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008ac26
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008ace8
call fcn.1400f5c2c
mov qword [rbp + 0xc0], r14
mov qword [rbp + 0xc8], 7
mov word [rbp + 0xb0], r14w
mov rax, qword [r13]
cmp dword [rax], 0
je 0x14008acb4
mov rbx, qword [0x14017ade0]
mov qword [rsp + 0x50], r14
lea rcx, [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x50]
sub rax, qword [rbp - 0x78]
xorps xmm1, xmm1
cvtsi2sd xmm1, rax
xorps xmm0, xmm0
cvtsi2sd xmm0, qword [rbx]
divsd xmm1, xmm0
cvtpd2ps xmm1, xmm1
cvtps2pd xmm2, xmm1
movsd qword [rsp + 0x28], xmm2
lea rax, [0x140148370]
mov qword [rsp + 0x20], rax
lea r9, str._s_n____.6f___
lea r8, [0x14014c798]
xor edx, edx
mov rcx, r13
call fcn.14003bea0
nop
movzx eax, dil
mov rcx, qword [rbp + 0x110]
xor rcx, rsp
call fcn.1400f5be0
lea r11, [rsp + 0x220]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1400fcb20
nop
call fcn.1400fcb20
nop
call fcn.1400fcb20
nop
call fcn.1400fcb20
nop
call fcn.1400fcb20
nop
call fcn.1400fcb20
nop
call fcn.1400fcb20
nop
mov edx, 0x93e
call fcn.140054140
int3
mov edx, 0x93e
call fcn.140054140
int3