Function at 0x1800431e0
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rdi
mov qword [rsp + 8], rcx
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xc0
lea rax, [rbp + 0x37]
mov qword [rbp + 0x67], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x29], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x19], xmm1
mov r8d, 0x4d
lea rdx, str.49_8B_4E_78_48_3B_CE_74____48_85_F6_74_14_48_8B_06_48_8B_CE_48_8B_40_08_FF_15
lea rcx, [rbp - 0x29]
call fcn.18000c040
nop
lea rax, [rbp - 0x29]
mov qword [rbp - 0x39], rax
lea rax, [rbp - 9]
mov qword [rbp - 0x31], rax
lea rdx, [rbp - 0x39]
lea rcx, [rbp + 0x37]
call fcn.18000eaa0
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rbp - 9], xmm0
xor edi, edi
mov qword [rbp + 7], rdi
mov qword [rbp + 0xf], rdi
lea r8d, [rdi + 0x29]
lea rdx, str.UserSelectionView__RuntimeClassInitialize
lea rcx, [rbp - 9]
call fcn.18000c040
nop
mov rdx, rbx
lea rcx, [rbp - 9]
call fcn.18003dcb0
mov qword [0x1800c7b00], rax
lea r9, [fcn.180003e10]
lea edx, [rdi + 0x20]
lea r8d, [rdi + 1]
lea rcx, [rbp - 0x29]
call fcn.18004bff4
lea rax, [rbp + 0x37]
mov qword [rbp + 0x67], rax
xorps xmm0, xmm0
movups xmmword [rbp - 9], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 7], xmm1
lea r8d, [rdi + 0x47]
lea rdx, str.48_89_5C_24_08_48_89_6C_24_10_48_89_74_24_18_57_48_83_EC_20_48_8D_79_58
lea rcx, [rbp - 9]
call fcn.18000c040
nop
lea rax, [rbp - 9]
mov qword [rbp - 0x39], rax
lea rax, [rbp + 0x17]
mov qword [rbp - 0x31], rax
lea rdx, [rbp - 0x39]
lea rcx, [rbp + 0x37]
call fcn.18000eaa0
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x29], xmm0
mov qword [rbp - 0x19], rdi
mov qword [rbp - 0x11], rdi
lea r8d, [rdi + 0x39]
lea rdx, str.SelectableUserOrCredentialControl__RuntimeClassInitialize
lea rcx, [rbp - 0x29]
call fcn.18000c040
nop
mov rdx, rbx
lea rcx, [rbp - 0x29]
call fcn.18003e270
mov qword [0x1800c7af8], rax
lea r9, [fcn.180003e10]
lea edx, [rdi + 0x20]
lea r8d, [rdi + 1]
lea rcx, [rbp - 9]
call fcn.18004bff4
lea rax, [rbp + 0x37]
mov qword [rbp + 0x67], rax
xorps xmm0, xmm0
movups xmmword [rbp - 9], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 7], xmm1
lea r8d, [rdi + 0x50]
lea rdx, str.48_89_5C_24_10_48_89_74_24_18_48_89_7C_24_20_55_41_56_41_57_48_8B_EC_48_83_EC_60
lea rcx, [rbp - 9]
call fcn.18000c040
nop
lea rax, [rbp - 9]
mov qword [rbp - 0x39], rax
lea rax, [rbp + 0x17]
mov qword [rbp - 0x31], rax
lea rdx, [rbp - 0x39]
lea rcx, [rbp + 0x37]
call fcn.18000eaa0
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x29], xmm0
mov qword [rbp - 0x19], rdi
mov qword [rbp - 0x11], rdi
lea r8d, [rdi + 0x2d]
lea rdx, str.CredProvSelectionView__RuntimeClassInitialize
lea rcx, [rbp - 0x29]
call fcn.18000c040
nop
mov rdx, rbx
lea rcx, [rbp - 0x29]
call fcn.18003e270
mov qword [0x1800c7ad8], rax
lea r9, [fcn.180003e10]
lea edx, [rdi + 0x20]
lea r8d, [rdi + 1]
lea rcx, [rbp - 9]
call fcn.18004bff4
lea rax, [rbp + 0x37]
mov qword [rbp + 0x67], rax
xorps xmm0, xmm0
movups xmmword [rbp - 9], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 7], xmm1
mov r8d, 0xdd
lea rdx, str.48_89_5C_24_08_57_48_83_EC_20_8B_FA_48_8B_D9_48_8B_49_58_48_85_C9_74_13_48_83_63_58_00_48_8B_01_48_8B_40_10_FF_15_____________90_48_8B_4B_50_48_85_C9_74_13_48_83_63_50_00_48_8B_01_48_8B_40_10_FF_15_____________90_48_8B_CB
lea rcx, [rbp - 9]
call fcn.18000c040
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x17], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x27], xmm1
mov r8d, 0xd7
lea rdx, str.48_89_5C_24_08_57_48_83_EC_20_48_8B_D9_8B_FA_48_8B_49_58_48_85_C9_74____48_83_63_58_00_48_8B_01_48_8B_40_10_FF_15_____________48_8B_4B_50_48_85_C9_74____48_83_63_50_00_48_8B_01_48_8B_40_10_FF_15_____________48_8B_CB
lea rcx, [rbp + 0x17]
call fcn.18000c040
nop
lea rax, [rbp - 9]
mov qword [rbp - 0x39], rax
lea rax, [rbp + 0x37]
mov qword [rbp - 0x31], rax
lea rdx, [rbp - 0x39]
lea rcx, [rbp + 0x37]
call fcn.18000eaa0
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x29], xmm0
mov qword [rbp - 0x19], rdi
mov qword [rbp - 0x11], rdi
lea r8d, [rdi + 0x2c]
lea rdx, str.SelectableUserOrCredentialControl_Destructor
lea rcx, [rbp - 0x29]
call fcn.18000c040
nop
mov rdx, rbx
lea rcx, [rbp - 0x29]
call fcn.18003e270
mov qword [0x1800c7b08], rax
lea r9, [fcn.180003e10]
lea edx, [rdi + 0x20]
lea r8d, [rdi + 2]
lea rcx, [rbp - 9]
call fcn.18004bff4
lea rax, [rbp + 0x37]
mov qword [rbp + 0x67], rax
xorps xmm0, xmm0
movups xmmword [rbp - 9], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 7], xmm1
lea r8d, [rdi + 0x2c]
lea rdx, str.48_89_5C_24_08_57_48_83_EC_30_83_64_24_48_00
lea rcx, [rbp - 9]
call fcn.18000c040
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x17], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x27], xmm1
lea r8d, [rdi + 0x68]
lea rdx, str.48_83_60_D8_00_41_B9_01_00_00_00_4C_8B_F1_45_33_C0_B9_00_00_00_C0_____________FF_15_____________48_8B_D8
lea rcx, [rbp + 0x17]
call fcn.18000c040
nop
lea rax, [rbp - 9]
mov qword [rbp - 0x39], rax
lea rax, [rbp + 0x37]
mov qword [rbp - 0x31], rax
lea rdx, [rbp - 0x39]
lea rcx, [rbp + 0x37]
call fcn.18000eaa0
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x29], xmm0
mov qword [rbp - 0x19], rdi
mov qword [rbp - 0x11], rdi
lea r8d, [rdi + 0x19]
lea rdx, str.ConsoleUIView__Initialize
lea rcx, [rbp - 0x29]
call fcn.18000c040
nop
mov rdx, rbx
lea rcx, [rbp - 0x29]
call fcn.18003dcb0
mov qword [0x1800c7fd0], rax
lea r9, [fcn.180003e10]
lea edx, [rdi + 0x20]
lea r8d, [rdi + 2]
lea rcx, [rbp - 9]
call fcn.18004bff4
lea rax, [rbp + 0x37]
mov qword [rbp + 0x67], rax
xorps xmm0, xmm0
movups xmmword [rbp - 9], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 7], xmm1
lea r8d, [rdi + 0x44]
lea rdx, str.48_89_5C_24_10_48_89_74_24_18_57_48_83_EC_20_83_64_24_30_00_48_8B_FA
lea rcx, [rbp - 9]
call fcn.18000c040
nop
lea rax, [rbp - 9]
mov qword [rbp - 0x39], rax
lea rax, [rbp + 0x17]
mov qword [rbp - 0x31], rax
lea rdx, [rbp - 0x39]
lea rcx, [rbp + 0x37]
call fcn.18000eaa0
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x29], xmm0
mov qword [rbp - 0x19], rdi
mov qword [rbp - 0x11], rdi
lea r8d, [rdi + 0x1d]
lea rdx, str.ConsoleUIView__HandleKeyInput
lea rcx, [rbp - 0x29]
call fcn.18000c040
nop
mov rdx, rbx
lea rcx, [rbp - 0x29]
call fcn.18003e270
mov qword [0x1800c7fc8], rax
lea r9, [fcn.180003e10]
lea edx, [rdi + 0x20]
lea r8d, [rdi + 1]
lea rcx, [rbp - 9]
call fcn.18004bff4
lea rax, [rbp + 0x37]
mov qword [rbp + 0x67], rax
xorps xmm0, xmm0
movups xmmword [rbp - 9], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 7], xmm1
lea r8d, [rdi + 0x68]
lea rdx, str.48_89_5C_24_18_89_54_24_10_55_56_57_41_54_41_55_41_56_41_57_48_8B_EC_48_83_EC_70_49_8B_F9_45_8A_E8_8B_F2
lea rcx, [rbp - 9]
call fcn.18000c040
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x17], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x27], xmm1
lea r8d, [rdi + 0x65]
lea rdx, str.48_89_5C_24_10_48_89_74_24_18_48_89_7C_24_20_55_41_54_41_55_41_56_41_57_48_8B_EC_48_83_EC_40_4C_8B_F9
lea rcx, [rbp + 0x17]
call fcn.18000c040
nop
lea rax, [rbp - 9]
mov qword [rbp - 0x39], rax
lea rax, [rbp + 0x37]
mov qword [rbp - 0x31], rax
lea rdx, [rbp - 0x39]
lea rcx, [rbp + 0x37]
call fcn.18000eaa0
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x29], xmm0
mov qword [rbp - 0x19], rdi
mov qword [rbp - 0x11], rdi
lea r8d, [rdi + 0x16]
lea rdx, str.LogonViewManager__Lock
lea rcx, [rbp - 0x29]
call fcn.18000c040
nop
mov rdx, rbx
lea rcx, [rbp - 0x29]
call fcn.18003e270
mov qword [0x1800c7af0], rax
lea r9, [fcn.180003e10]
lea edx, [rdi + 0x20]
lea r8d, [rdi + 2]
lea rcx, [rbp - 9]
call fcn.18004bff4
call fcn.1800482e0
cmp qword [0x1800c7af0], rdi
je 0x1800436c7
lea rdx, [0x180042f00]
lea rcx, [0x1800c7af0]
call fcn.180047ae0
call fcn.180048350
call fcn.1800482e0
cmp qword [0x1800c7b00], 0
je 0x1800436ee
lea rdx, [0x1800420c0]
lea rcx, [0x1800c7b00]
call fcn.180047ae0
call fcn.180048350
call fcn.1800482e0
cmp qword [0x1800c7af8], 0
je 0x180043715
lea rdx, [0x1800425a0]
lea rcx, [0x1800c7af8]
call fcn.180047ae0
call fcn.180048350
call fcn.1800482e0
cmp qword [0x1800c7ad8], 0
je 0x18004373c
lea rdx, [0x1800423e0]
lea rcx, [0x1800c7ad8]
call fcn.180047ae0
call fcn.180048350
call fcn.1800482e0
cmp qword [0x1800c7b08], 0
je 0x180043763
lea rdx, [0x180042c70]
lea rcx, [0x1800c7b08]
call fcn.180047ae0
call fcn.180048350
call fcn.1800482e0
cmp qword [0x1800c7fd0], 0
je 0x18004378a
lea rdx, [0x180042580]
lea rcx, [0x1800c7fd0]
call fcn.180047ae0
call fcn.180048350
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], edi
xor r9d, r9d
lea r8, [0x1800430e0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [0x1800c7e40], rax
lea r11, [rsp + 0xc0]
mov rbx, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret