Function at 0x18000f890
Capabilities:
Create thread
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rdi
push rbp
lea rbp, [rax - 0x5f]
sub rsp, 0xb0
movaps xmmword [rax - 0x18], xmm6
mov rax, qword [0x18019d080]
xor rax, rsp
mov qword [rbp + 0x37], rax
xor edi, edi
movss xmm0, dword [0x1801b7bcc]
movss xmm1, dword [0x1801b7bd0]
mov rax, qword [0x1801b9918]
movss dword [rax + 0x47d8], xmm0
movss dword [rax + 0x47dc], xmm1
mov dword [rax + 0x47c0], 1
or dword [rax + 0x47b8], 3
mov qword [rax + 0x47c8], rdi
mov qword [rax + 0x47d0], rdi
mov dword [rax + 0x47bc], 1
xor edx, edx
mov r8d, Ordinal_50
lea rcx, str.login
call fcn.180031240
call fcn.1800030b0
movzx ebx, byte [0x1801b9910]
call fcn.18005d720
movzx eax, byte [0x1801b9910]
cmp al, bl
je 0x18000f99c
mov rcx, qword [0x1801b7bd8]
test al, al
je 0x18000f969
mov edx, reloc.WS2_32.dll_recvfrom
call qword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
mov edx, 0xffffffec
mov rcx, qword [0x1801b7bd8]
call qword [sym.imp.USER32.dll_GetWindowLongA]
bts eax, 7
jmp 0x18000f987
xor edx, edx
call qword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
mov edx, 0xffffffec
mov rcx, qword [0x1801b7bd8]
call qword [sym.imp.USER32.dll_GetWindowLongA]
btr eax, 7
mov r8d, eax
mov edx, 0xffffffec
mov rcx, qword [0x1801b7bd8]
call qword [sym.imp.USER32.dll_SetWindowLongA]
mov rcx, qword [0x1801b9918]
mov rax, qword [rcx + 0x3ed8]
movss xmm2, dword [rax + 0x28]
subss xmm2, dword [0x18018175c]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
addss xmm1, dword [0x180181740]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm0, xmm2
movss dword [rax + 0x100], xmm0
movss dword [rax + 0x104], xmm1
mov byte [rax + 0x141], 1
lea rcx, [0x180158210]
call fcn.180053700
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.180034820
test al, al
je 0x18000fa32
xor ecx, ecx
call fcn.18002af80
test al, al
je 0x18000fa32
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
cmp byte [0x1801b9ca8], dil
jne 0x180010032
mov rcx, qword [0x1801b9918]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
addss xmm1, dword [0x180181764]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm0, dword [0x1801817bc]
movss dword [rax + 0x100], xmm0
movss dword [rax + 0x104], xmm1
mov byte [rax + 0x141], 1
xorps xmm0, xmm0
movups xmmword [rbp + 7], xmm0
movdqa xmm1, xmmword [0x180181cb0]
movups xmmword [rbp - 9], xmm1
mov dword [rbp - 0x19], 0x3f800000
mov dword [rbp - 0x15], 0x3f800000
mov qword [rbp + 0x27], rdi
mov dword [rbp + 0x17], 0x42f00000
mov dword [rbp + 0x1b], 0x42f00000
lea rax, [rbp + 7]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 9]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x19]
lea r8, [rbp + 0x27]
lea rdx, [rbp + 0x17]
mov rcx, qword [0x1801b7c00]
call fcn.180054c90
mov rcx, qword [0x1801b9918]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
addss xmm1, dword [0x180181794]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm0, dword [0x1801817b0]
movss dword [rax + 0x100], xmm0
movss dword [rax + 0x104], xmm1
mov byte [rax + 0x141], 1
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
addss xmm1, dword [0x1801817b8]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm0, dword [0x1801817a8]
movss dword [rax + 0x100], xmm0
movss dword [rax + 0x104], xmm1
mov byte [rax + 0x141], 1
call fcn.180036c00
mov dword [rbp + 0x17], 0x437a0000
mov dword [rbp + 0x1b], 0x420c0000
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], edi
lea rax, [rbp + 0x17]
mov qword [rsp + 0x20], rax
mov r9d, reloc.WLDAP32.dll_Ordinal_50
lea rbx, [0x1801b7b30]
mov r8, rbx
lea rdx, [0x180158218]
lea rcx, str.Username
call fcn.180057710
mov rcx, qword [0x1801b9918]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
movss xmm6, dword [0x180181808]
cmp byte [rax + 0xbb], dil
jne 0x18000fc36
mov qword [rbp + 0x17], rdi
movaps xmm1, xmm6
lea rcx, [rbp + 0x17]
call fcn.180036720
mov dword [rbp + 0x17], 0x437a0000
mov dword [rbp + 0x1b], 0x420c0000
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], 0x8000
lea rax, [rbp + 0x17]
mov qword [rsp + 0x20], rax
mov r9d, reloc.WLDAP32.dll_Ordinal_50
lea r8, [0x1801b7b62]
lea rdx, [0x180158238]
lea rcx, str.Password
call fcn.180057710
mov rcx, qword [0x1801b9918]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
cmp byte [rax + 0xbb], dil
jne 0x18000fcbb
mov qword [rbp + 0x27], rdi
movaps xmm1, xmm6
lea rcx, [rbp + 0x27]
call fcn.180036720
mov rcx, qword [0x1801b9918]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
cmp byte [rax + 0xbb], dil
jne 0x18000fcf0
mov qword [rbp + 0x27], rdi
movaps xmm1, xmm6
lea rcx, [rbp + 0x27]
call fcn.180036720
mov rcx, qword [0x1801b9918]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
cmp byte [rax + 0xbb], dil
jne 0x18000fd25
mov qword [rbp + 0x27], rdi
movaps xmm1, xmm6
lea rcx, [rbp + 0x27]
call fcn.180036720
mov rcx, qword [0x1801b9918]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
cmp byte [rax + 0xbb], dil
jne 0x18000fd5a
mov qword [rbp + 0x27], rdi
movaps xmm1, xmm6
lea rcx, [rbp + 0x27]
call fcn.180036720
mov rcx, qword [0x1801b9918]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
addss xmm1, dword [0x1801817d4]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm0, dword [0x1801817c8]
movss dword [rax + 0x100], xmm0
movss dword [rax + 0x104], xmm1
mov byte [rax + 0x141], 1
lea rcx, [0x180158254]
call fcn.180053700
mov r8, qword [0x1801b9918]
mov rax, qword [r8 + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [r8 + 0x3ed8]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
addss xmm1, dword [0x1801817d4]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm0, dword [0x1801817d0]
movss dword [rax + 0x100], xmm0
movss dword [rax + 0x104], xmm1
mov byte [rax + 0x141], 1
movups xmm0, xmmword [r8 + 0x38a4]
movups xmmword [rbp + 0x17], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [r8 + 0x37c8]
movss dword [rbp + 0x23], xmm0
lea rcx, [rbp + 0x17]
call fcn.180027a40
movzx ecx, al
xorps xmm3, xmm3
cvtsi2ss xmm3, rcx
movss xmm6, dword [0x180181688]
mulss xmm3, xmm6
mov ecx, eax
shr ecx, 8
movzx ecx, cl
xorps xmm2, xmm2
cvtsi2ss xmm2, rcx
mulss xmm2, xmm6
shr eax, 0x10
movzx eax, al
xorps xmm1, xmm1
cvtsi2ss xmm1, rax
mulss xmm1, xmm6
movss xmm0, dword [r8 + 0x37c8]
movss dword [rbp + 0x17], xmm3
movss dword [rbp + 0x1b], xmm2
movss dword [rbp + 0x1f], xmm1
movss dword [rbp + 0x23], xmm0
lea rcx, [rbp + 0x17]
call fcn.180027a40
mov r8d, eax
movzx ecx, al
xorps xmm0, xmm0
cvtsi2ss xmm0, rcx
mulss xmm0, xmm6
movss dword [rbp + 0x17], xmm0
mov ecx, eax
shr ecx, 8
movzx ecx, cl
xorps xmm0, xmm0
cvtsi2ss xmm0, rcx
mulss xmm0, xmm6
movss dword [rbp + 0x1b], xmm0
mov ecx, eax
shr ecx, 0x10
movzx eax, cl
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
mulss xmm0, xmm6
movss dword [rbp + 0x1f], xmm0
shr r8d, 0x18
mov eax, r8d
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
mulss xmm0, xmm6
movss dword [rbp + 0x23], xmm0
lea rdx, str.Register
lea rcx, [rbp + 0x17]
call fcn.180053840
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.180034820
test al, al
je 0x18000ff3d
xor ecx, ecx
call fcn.18002af80
test al, al
je 0x18000ff3d
mov byte [0x1801b7bc8], 1
mov byte [reloc.WS2_32.dll_accept], dil
mov rcx, qword [0x1801b9918]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
addss xmm1, dword [0x1801817d0]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm0, dword [0x1801817a8]
movss dword [rax + 0x100], xmm0
movss dword [rax + 0x104], xmm1
mov byte [rax + 0x141], 1
mov dword [rbp + 0x17], 0x42f00000
mov dword [rbp + 0x1b], 0x41f00000
lea rdx, [rbp + 0x17]
lea rcx, str.Log_In
call fcn.18005bf90
test al, al
je 0x180010020
mov ecx, 8
call fcn.180127b80
mov qword [rax], rbx
mov qword [rbp + 0x17], rax
lea rcx, [rbp + 0x2f]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], edi
mov r9, rax
lea r8, [0x18001ac40]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x27], rax
test rax, rax
je 0x180010147
cmp dword [rbp + 0x2f], 0
je 0x18001013b
movaps xmm0, xmmword [rbp + 0x27]
movdqa xmmword [rbp - 9], xmm0
lea rcx, [rbp - 9]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x18001013b
call fcn.180036d30
cmp byte [0x1801b9ca8], 0
je 0x18001010b
movss xmm2, dword [0x1801b7bcc]
mulss xmm2, dword [0x1801816bc]
movss xmm3, dword [0x1801b7bd0]
mulss xmm3, dword [0x1801816bc]
mov rcx, qword [0x1801b9918]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
movss xmm1, dword [rax + 0x20]
subss xmm1, dword [rax + 0x84]
movss xmm4, dword [0x180181770]
subss xmm2, xmm4
addss xmm1, xmm2
movss xmm0, dword [rax + 0x24]
subss xmm0, dword [rax + 0x88]
subss xmm3, dword [0x18018175c]
addss xmm0, xmm3
movss dword [rax + 0x100], xmm1
movss dword [rax + 0x104], xmm0
mov byte [rax + 0x141], 1
movdqa xmm0, xmmword [0x180181830]
movups xmmword [rbp - 9], xmm0
movups xmm0, xmmword [0x1801b9d00]
movups xmmword [rbp + 7], xmm0
movss xmm2, dword [0x180181718]
movss dword [rsp + 0x30], xmm2
movss xmm0, dword [0x180181710]
movss dword [rsp + 0x28], xmm0
lea rax, [rbp - 9]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 7]
movss xmm2, dword [0x180181708]
invalid
invalid
add byte [rdi], cl
sub ah, cl
call fcn.1800028c0
call fcn.18000f650
call fcn.180033450
mov rcx, qword [rbp + 0x37]
xor rcx, rsp
call fcn.180127b60
lea r11, [rsp + 0xb0]
mov rbx, qword [r11 + 0x10]
mov rdi, qword [r11 + 0x18]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop rbp
ret
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x2f], edi
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3