Function at 0x140054a50
Capabilities:
Create thread

Disassembly:
mov r11, rsp
mov qword [r11 + 0x10], rbx
mov qword [r11 + 0x18], rdi
mov qword [r11 + 0x20], r14
push rbp
lea rbp, [r11 - 0x5f]
sub rsp, 0xd0
mov rax, qword [0x14009e180]
xor rax, rsp
mov qword [rbp - 9], rax
mov rcx, qword [0x14009e200]
xor r14d, r14d
movaps xmmword [r11 - 0x18], xmm6
movaps xmmword [r11 - 0x28], xmm7
movaps xmmword [r11 - 0x38], xmm8
mov rax, qword [rcx + 0x1778]
movaps xmmword [r11 - 0x48], xmm10
movaps xmmword [r11 - 0x58], xmm11
mov dword [rbp - 0x25], 0x42280000
movss xmm11, dword [rax + 0x24]
movss xmm10, dword [rax + 0x28]
movaps xmm8, xmm11
subss xmm8, dword [0x14008cb30]
movaps xmm1, xmm10
mov byte [rax + 0x8a], 1
subss xmm1, dword [0x14008cb7c]
mov rax, qword [rcx + 0x1778]
movaps xmm7, xmm11
lea rcx, [0x1400ca2f8]
movaps xmm0, xmm8
addss xmm0, dword [0x14008ca80]
mov rbx, qword [rax + 0x290]
subss xmm10, xmm1
movaps xmm1, xmm11
divss xmm1, dword [0x14008caf4]
movss dword [rbp - 0x11], xmm0
movaps xmm0, xmm10
addss xmm0, dword [0x14008cb2c]
mulss xmm1, dword [0x14008cae8]
movss dword [rbp - 0xd], xmm0
movaps xmm0, xmm11
divss xmm0, dword [0x14008cae4]
subss xmm1, xmm0
subss xmm7, xmm1
addss xmm7, dword [0x14008cb34]
movaps xmm0, xmm7
subss xmm0, dword [0x14008ca80]
movss dword [rbp - 0x29], xmm0
call fcn.1400032e0
movss xmm6, dword [0x14008cac4]
lea r8, [rbp - 0x11]
mov rdi, 0xffffffffffffffff
lea rdx, [rbp - 0x29]
mov dword [rsp + 0x28], edi
mov r9d, eax
mov rcx, rbx
movss dword [rsp + 0x20], xmm6
call fcn.14001e9f0
movaps xmm0, xmm10
movss dword [rbp - 0x29], xmm8
addss xmm0, dword [0x14008cb28]
lea rcx, [0x1400ca388]
movss dword [rbp - 0x11], xmm7
mov dword [rbp - 0xd], 0x422c0000
movss dword [rbp - 0x25], xmm0
call fcn.1400032e0
mov r9d, eax
mov dword [rsp + 0x28], edi
lea rdx, [rbp - 0x11]
movss dword [rsp + 0x20], xmm6
lea r8, [rbp - 0x29]
mov rcx, rbx
call fcn.14001e9f0
mov rcx, qword [0x14009e200]
movaps xmm0, xmm11
mulss xmm0, dword [0x14008ca5c]
mov rax, qword [rcx + 0x1778]
subss xmm0, dword [0x14008ca80]
mov byte [rax + 0x8a], 1
mov rax, qword [rcx + 0x1778]
subss xmm11, xmm0
movss xmm0, dword [rax + 0x1c]
movss xmm2, dword [rax + 0x20]
subss xmm0, dword [rax + 0x60]
subss xmm2, dword [rax + 0x64]
addss xmm11, xmm0
addss xmm2, xmm10
movss dword [rax + 0xc0], xmm11
movss dword [rax + 0xc4], xmm2
movss xmm1, dword [rax + 0xd8]
maxss xmm1, xmm11
movss xmm0, dword [rax + 0xdc]
mov cl, 0xc
movss dword [rax + 0xd8], xmm1
maxss xmm0, xmm2
xor cl, 0x43
mov dword [rbp - 0x29], 0x43200000
mov dl, 2
mov byte [rbp - 0xf], cl
xor dl, 0x43
mov dword [rbp - 0x25], 0x42700000
mov r8b, 7
mov byte [rbp - 0xe], dl
movss dword [rax + 0xdc], xmm0
lea rdx, [rbp - 0x29]
mov al, 0xf
mov byte [rbp - 0x11], 0x43
xor al, 0x43
lea rcx, [rbp - 0x10]
xor r9d, r9d
mov byte [rbp - 0x10], al
xor r8b, 0x43
mov byte [rbp - 0xc], r9b
mov byte [rbp - 0xd], r8b
call fcn.14000d210
movaps xmm11, xmmword [rsp + 0x80]
movaps xmm10, xmmword [rsp + 0x90]
movaps xmm8, xmmword [rsp + 0xa0]
movaps xmm7, xmmword [rsp + 0xb0]
movaps xmm6, xmmword [rsp + 0xc0]
test al, al
je 0x140054f51
cmp byte [0x1400cdd67], r14b
mov byte [0x1400cde75], r14b
jne 0x140054f51
lea rcx, [rbp - 0x49]
call fcn.1400490e0
mov rcx, qword [0x1400cdf88]
mov rdx, rax
call fcn.14002b8b0
test al, al
je 0x140054f51
movdqa xmm1, xmmword [0x14008d150]
mov r8, rdi
movd ecx, xmm1
movdqa xmm0, xmm1
movdqu xmmword [rbp - 0x29], xmm1
mov byte [rbp - 0x19], r14b
xor byte [rbp - 0x27], cl
xor byte [rbp - 0x26], cl
xor byte [rbp - 0x25], cl
xor byte [rbp - 0x24], cl
xor byte [rbp - 0x23], cl
xor byte [rbp - 0x22], cl
xor byte [rbp - 0x21], cl
xor byte [rbp - 0x20], cl
xor byte [rbp - 0x1f], cl
xor byte [rbp - 0x1e], cl
xor byte [rbp - 0x1d], cl
xor byte [rbp - 0x1c], cl
xor byte [rbp - 0x1b], cl
psrldq xmm0, 1
movd eax, xmm0
xorps xmm0, xmm0
movups xmmword [rbp - 0x49], xmm0
mov qword [rbp - 0x39], r14
xor al, cl
mov qword [rbp - 0x31], r14
xor byte [rbp - 0x1a], cl
mov byte [rbp - 0x28], al
lea rax, [rbp - 0x28]
inc r8
cmp byte [rax + r8], r14b
jne 0x140054d76
lea rdx, [rbp - 0x28]
lea rcx, [rbp - 0x49]
call fcn.140027cd0
lea rcx, [rbp - 0x49]
call fcn.14003b760
test al, al
je 0x140054f51
mov eax, r14d
mov ebx, r14d
mov dword [rbp - 0x11], eax
cmp ebx, 5
jge 0x140054e3a
movdqa xmm1, xmmword [0x14008d7f0]
mov dl, 0x49
movd ecx, xmm1
movdqa xmm0, xmm1
movdqu xmmword [rbp - 0x29], xmm1
mov byte [rbp - 0x18], r14b
xor byte [rbp - 0x27], cl
xor dl, cl
xor byte [rbp - 0x26], cl
xor byte [rbp - 0x25], cl
xor byte [rbp - 0x24], cl
xor byte [rbp - 0x23], cl
xor byte [rbp - 0x22], cl
xor byte [rbp - 0x21], cl
xor byte [rbp - 0x20], cl
xor byte [rbp - 0x1f], cl
xor byte [rbp - 0x1e], cl
xor byte [rbp - 0x1d], cl
xor byte [rbp - 0x1c], cl
xor byte [rbp - 0x1b], cl
xor byte [rbp - 0x1a], cl
psrldq xmm0, 1
movd eax, xmm0
mov byte [rbp - 0x19], dl
lea rdx, [rbp - 0x28]
xor al, cl
xor ecx, ecx
mov byte [rbp - 0x28], al
call qword [sym.imp.USER32.dll_FindWindowA]
mov rcx, rax
lea rdx, [rbp - 0x11]
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov ecx, 0x14
call qword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [rbp - 0x11]
inc ebx
test eax, eax
je 0x140054da6
jmp 0x140054e42
test eax, eax
je 0x140054f51
mov cl, 0x1f
mov qword [rsp + 0xe0], rsi
xor esi, esi
mov byte [rbp - 0x29], 0x73
movzx edx, cl
mov byte [rbp - 0x20], sil
mov rsi, qword [rsp + 0xe0]
mov al, 0x17
xor al, 0x73
mov qword [rbp - 0x39], r14
xor dl, 0x73
mov byte [rbp - 0x28], al
xor cl, 0x73
mov byte [rbp - 0x26], dl
mov r8b, 0x11
mov byte [rbp - 0x27], cl
xor r8b, 0x73
mov qword [rbp - 0x31], r14
mov r9b, 0xa
mov byte [rbp - 0x25], r8b
xor r9b, 0x73
lea rax, [rbp - 0x28]
mov r10b, 7
mov byte [rbp - 0x24], r9b
xor r10b, 0x73
mov r11b, 0x16
xor r11b, 0x73
mov byte [rbp - 0x23], r10b
xor bl, bl
mov byte [rbp - 0x22], r11b
xor bl, 0x73
xorps xmm0, xmm0
mov byte [rbp - 0x21], bl
movups xmmword [rbp - 0x49], xmm0
nop dword [rax + rax]
inc rdi
cmp byte [rax + rdi], r14b
jne 0x140054ec0
mov r8, rdi
lea rdx, [rbp - 0x28]
lea rcx, [rbp - 0x49]
call fcn.140027cd0
lea rcx, [rbp - 0x49]
call fcn.140039ff0
lea rdx, [rbp - 0x11]
lea rcx, [0x1400485a0]
call qword [sym.imp.KERNEL32.dll_GetExitCodeThread]
cmp dword [rbp - 0x11], 0x103
jne 0x140054f09
lea rcx, [0x1400485a0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rsp + 0x28], r14
lea r8, [0x1400485a0]
xor r9d, r9d
mov dword [rsp + 0x20], r14d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rdx, qword [0x1400d1aa8]
cmp rdx, qword [0x1400d1ab0]
mov qword [rbp - 0x29], rax
je 0x140054f48
mov qword [rdx], rax
add qword [0x1400d1aa8], 8
jmp 0x140054f51
lea r8, [rbp - 0x29]
call fcn.140069120
mov rcx, qword [rbp - 9]
xor rcx, rsp
call fcn.14007c640
lea r11, [rsp + 0xd0]
mov rbx, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov r14, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret