Function at 0x1400d03e0
Capabilities:
Create thread
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
mov qword [rax + 0x20], rdi
push rbp
lea rbp, [rax - 0x5f]
sub rsp, 0xa0
mov r8, qword [0x140587680]
xor ebx, ebx
cmp byte [0x140587668], bl
movaps xmmword [rax - 0x18], xmm6
movaps xmmword [rax - 0x28], xmm7
movaps xmmword [rax - 0x38], xmm8
mov rax, qword [r8 + 0x3ed8]
mov byte [rax + 0x98], 1
mov rax, qword [r8 + 0x3ed8]
mov rdi, qword [rax + 0x288]
jne 0x1400d046f
mov qword [rsp + 0x28], rbx
lea r8, [0x140024a00]
xor r9d, r9d
mov dword [rsp + 0x20], ebx
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov r8, qword [0x140587680]
mov byte [0x140587668], 1
mov rcx, qword [r8 + 0x3ed8]
movss xmm6, dword [rcx + 0x18]
movss xmm7, dword [rcx + 0x1c]
jmp 0x1400d0479
movss xmm6, dword [rax + 0x18]
movss xmm7, dword [rax + 0x1c]
mov eax, dword [str.Z_R8]
lea rcx, [rbp + 0xf]
movss xmm0, dword [r8 + 0x37f8]
mulss xmm0, dword [0x1404f4e20]
mov dword [rbp + 7], eax
movzx eax, byte [0x1404f4810]
xor byte [rbp + 8], 0x35
xor al, 0x38
xor byte [rbp + 9], 0x36
xor byte [rbp + 0xa], 0x37
mov byte [rbp + 0xb], al
cvttss2si eax, xmm0
mov byte [rbp + 7], 0x48
mov dword [rbp + 0xf], 0x3ed2d2d4
mov dword [rbp + 0x13], 0x3ed2d2d4
mov dword [rbp + 0x17], 0x3ed2d2d4
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mulss xmm1, dword [0x1404f4b8c]
movss dword [rbp + 0x1b], xmm1
call fcn.140017040
movss xmm8, dword [0x1404f4d4c]
mov r9d, eax
mov rcx, qword [0x140587758]
addss xmm6, xmm8
xorps xmm1, xmm1
addss xmm7, dword [0x1404f4da0]
movss dword [rbp + 0x67], xmm6
movss dword [rbp + 0x6b], xmm7
test eax, 0xff000000
je 0x1400d0595
lea rdx, [rbp + 7]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rdx + rax], bl
jne 0x1400d0524
lea rdx, [rbp + 7]
add rdx, rax
lea rax, [rbp + 7]
cmp rax, rdx
je 0x1400d0595
test rcx, rcx
jne 0x1400d0549
mov rax, qword [rdi + 0x38]
mov rcx, qword [rax + 8]
movups xmm0, xmmword [rdi + 0x88]
lea rax, [rbp + 7]
mov byte [rsp + 0x48], bl
movss xmm2, dword [0x1404f4d58]
movss dword [rsp + 0x40], xmm1
mov qword [rsp + 0x38], rdx
mov rdx, rdi
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0xf]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r9d
lea r9, [rbp + 0x67]
movups xmmword [rbp + 0xf], xmm0
call fcn.14003f1c0
mov r8, qword [0x140587680]
mov rax, qword [r8 + 0x3ed8]
lea rdx, [rbp + 0x67]
cmp dword [0x1405b9078], ebx
lea rcx, [0x1404f2f34]
mov byte [rax + 0x98], 1
mov rax, qword [r8 + 0x3ed8]
sete r8b
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x64]
movss xmm2, dword [rax + 0x1c]
subss xmm2, dword [rax + 0x68]
addss xmm0, xmm8
addss xmm2, dword [0x1404f4db0]
movss dword [rax + 0xe0], xmm0
movss dword [rax + 0xe4], xmm2
movss xmm1, dword [rax + 0xf8]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xfc]
maxss xmm0, xmm2
movss dword [rax + 0xf8], xmm1
movss dword [rax + 0xfc], xmm0
mov eax, dword [0x1404f40b8]
mov dword [rbp + 0x67], eax
movzx eax, word [0x1404f40bc]
xor byte [rbp + 0x68], 0x35
xor byte [rbp + 0x69], 0x36
xor byte [rbp + 0x6a], 0x37
mov word [rbp + 0x6b], ax
xor al, 0x38
xor byte [rbp + 0x6c], 0x39
mov byte [rbp + 0x6b], al
mov byte [rbp + 0x67], Ordinal_79
call fcn.140052ca0
test al, al
je 0x1400d0656
mov dword [0x1405b9078], ebx
jmp 0x1400d065c
mov ebx, dword [0x1405b9078]
mov rcx, qword [0x140587680]
lea rdx, [rbp + 0xf]
cmp ebx, 1
sete r8b
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0x98], 1
mov rax, qword [rcx + 0x3ed8]
lea rcx, [0x1404f34bc]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x64]
movss xmm2, dword [rax + 0x1c]
subss xmm2, dword [rax + 0x68]
addss xmm0, xmm8
addss xmm2, dword [0x1404f4dd8]
movss dword [rax + 0xe0], xmm0
movss dword [rax + 0xe4], xmm2
movss xmm1, dword [rax + 0xf8]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xfc]
maxss xmm0, xmm2
movss dword [rax + 0xf8], xmm1
movss dword [rax + 0xfc], xmm0
movzx eax, byte [reloc.WLDAP32.dll_Ordinal_60]
movsd xmm0, qword [str.fPQKM_I_]
xor al, 0x3c
movsd qword [rbp + 0xf], xmm0
xor byte [rbp + 0x10], 0x35
xor byte [rbp + 0x11], 0x36
xor byte [rbp + 0x12], 0x37
xor byte [rbp + 0x13], 0x38
xor byte [rbp + 0x14], 0x39
xor byte [rbp + 0x15], 0x3a
xor byte [rbp + 0x16], 0x3b
mov byte [rbp + 0x17], al
mov byte [rbp + 0xf], 0x52
call fcn.140052ca0
test al, al
je 0x1400d072f
mov dword [0x1405b9078], 1
mov rcx, qword [0x140587680]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0x98], 1
mov rax, qword [rcx + 0x3ed8]
cmp byte [rax + 0x9b], 0
jne 0x1400d0774
movss xmm1, dword [0x1404f4edc]
lea rcx, [rbp + 0x67]
mov qword [rbp + 0x67], 0
call fcn.140025a10
mov rcx, qword [0x140587680]
mov rax, qword [rcx + 0x3ed8]
lea rdx, [rbp + 0x6f]
mov dword [rbp + 0x6f], 0x43070000
mov dword [rbp + 0x73], 0x41f00000
mov byte [rax + 0x98], 1
mov rax, qword [rcx + 0x3ed8]
lea rcx, [rbp + 0x67]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x64]
movss xmm2, dword [rax + 0x1c]
subss xmm2, dword [rax + 0x68]
addss xmm0, xmm8
addss xmm2, dword [0x1404f4e1c]
movss dword [rax + 0xe0], xmm0
movss dword [rax + 0xe4], xmm2
movss xmm1, dword [rax + 0xf8]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xfc]
maxss xmm0, xmm2
movss dword [rax + 0xf8], xmm1
movss dword [rax + 0xfc], xmm0
mov eax, dword [str.wYYD_9]
mov dword [rbp + 0x67], eax
movzx eax, word [0x1404f49b4]
xor byte [rbp + 0x68], 0x35
xor byte [rbp + 0x69], 0x36
xor byte [rbp + 0x6a], 0x37
mov word [rbp + 0x6b], ax
xor al, 0x38
xor byte [rbp + 0x6c], 0x39
mov byte [rbp + 0x6b], al
mov byte [rbp + 0x67], 0x43
call fcn.1400463b0
test al, al
je 0x1400d083a
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, dword [0x1405b9078]
test ecx, ecx
je 0x1400d0850
cmp ecx, 1
jne 0x1400d0855
call fcn.1400cfb90
jmp 0x1400d0855
call fcn.1400cf610
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
mov rsp, r11
pop rbp
ret