Function at 0x140007d60
Capabilities:
Create thread
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
lea rbp, [rax - 0x5f]
sub rsp, 0xb0
movaps xmmword [rax - 0x18], xmm6
movaps xmmword [rax - 0x28], xmm7
movaps xmmword [rax - 0x38], xmm9
mov rax, qword [0x140094040]
xor rax, rsp
mov qword [rbp + 0x17], rax
xor esi, esi
mov rcx, qword [0x1400cc950]
mov eax, dword [rcx + 0x47b8]
or eax, 2
mov dword [rcx + 0x47b8], eax
movsd xmm0, qword [0x1400cbd68]
movsd qword [rcx + 0x47d8], xmm0
mov dword [rcx + 0x47c0], 1
or eax, 1
mov dword [rcx + 0x47b8], eax
mov qword [rcx + 0x47c8], rsi
mov qword [rcx + 0x47d0], rsi
mov dword [rcx + 0x47bc], 1
xor edx, edx
mov r8d, 0x2f
lea rcx, str.login
call fcn.140019f70
mov edx, 4
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x1400ccb14], eax
jle 0x140007e64
lea rcx, [0x1400ccb14]
call fcn.1400448b0
cmp dword [0x1400ccb14], 0xffffffff
jne 0x140007e64
mov rcx, qword [0x1400cc950]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
mov rcx, qword [rax + 0x298]
mov qword [0x1400ccb90], rcx
lea rcx, [0x1400ccb14]
call fcn.140044844
mov rax, qword [0x1400cc950]
movss xmm6, dword [rax + 0x37d8]
movdqa xmm0, xmmword [0x14008b080]
movups xmmword [rbp - 9], xmm0
lea rcx, [rbp - 9]
call fcn.140010da0
movss xmm0, dword [0x1400cbd68]
movss dword [rbp + 7], xmm0
mov dword [rbp + 0xb], 0x42200000
xorps xmm7, xmm7
mov qword [rbp - 9], rsi
mov dword [rsp + 0x28], 0x30
movss dword [rsp + 0x20], xmm6
mov r9d, eax
lea r8, [rbp + 7]
lea rdx, [rbp - 9]
mov rcx, qword [0x1400ccb90]
call fcn.140032450
movdqa xmm0, xmmword [0x14008b0a0]
movups xmmword [rbp - 9], xmm0
lea rcx, [rbp - 9]
call fcn.140010da0
movss xmm0, dword [0x1400cbd68]
movss dword [rbp - 9], xmm0
mov dword [rbp - 5], 0x42240000
mov dword [rbp + 7], esi
mov dword [rbp + 0xb], 0x42240000
movss xmm0, dword [0x14008ac94]
movss dword [rsp + 0x20], xmm0
mov r9d, eax
lea r8, [rbp - 9]
lea rdx, [rbp + 7]
mov rcx, qword [0x1400ccb90]
call fcn.1400321e0
movdqa xmm0, xmmword [0x14008b020]
movups xmmword [rbp - 9], xmm0
lea rcx, [rbp - 9]
call fcn.140010da0
mov ecx, eax
mov dword [rbp - 9], 0x41700000
mov dword [rbp - 5], 0x41200000
mov r8, qword [0x1400cbcf0]
test eax, 0xff000000
je 0x140007fbd
mov rdx, qword [0x1400ccb90]
test r8, r8
jne 0x140007f67
mov rax, qword [rdx + 0x38]
mov r8, qword [rax + 8]
movups xmm0, xmmword [rdx + 0x88]
movups xmmword [rbp + 7], xmm0
mov byte [rsp + 0x48], sil
movss dword [rsp + 0x40], xmm7
lea rax, [0x14008459d]
mov qword [rsp + 0x38], rax
lea rax, str.Caiman_Bypass
mov qword [rsp + 0x30], rax
lea rax, [rbp + 7]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ecx
lea r9, [rbp - 9]
movss xmm2, dword [0x14008ace0]
mov rcx, r8
call fcn.1400363d0
mov r8, qword [0x1400cbcf0]
movdqa xmm0, xmmword [0x14008b110]
movups xmmword [rbp - 9], xmm0
lea rcx, [rbp - 9]
call fcn.140010da0
mov ecx, eax
movss xmm2, dword [0x1400cbd68]
movaps xmm0, xmm2
subss xmm0, dword [0x14008ace8]
movss dword [rbp - 9], xmm0
mov dword [rbp - 5], 0x41200000
test eax, 0xff000000
je 0x140008065
mov rdx, qword [0x1400ccb90]
test r8, r8
jne 0x14000800e
mov rax, qword [rdx + 0x38]
mov r8, qword [rax + 8]
movups xmm0, xmmword [rdx + 0x88]
movups xmmword [rbp + 7], xmm0
mov byte [rsp + 0x48], sil
movss dword [rsp + 0x40], xmm7
lea rax, [0x1400845a1]
mov qword [rsp + 0x38], rax
lea rax, [0x1400845a0]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 7]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ecx
lea r9, [rbp - 9]
movss xmm2, dword [0x14008ace0]
mov rcx, r8
call fcn.1400363d0
movss xmm2, dword [0x1400cbd68]
subss xmm2, dword [0x14008acec]
mov rcx, qword [0x1400cc950]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
addss xmm1, dword [0x14008acc0]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm0, xmm2
movss dword [rax + 0x100], xmm0
movss dword [rax + 0x104], xmm1
mov byte [rax + 0x141], 1
mov dword [rbp - 9], 0x41700000
mov dword [rbp - 5], 0x41900000
lea rdx, [rbp - 9]
lea rcx, [0x1400845a4]
call fcn.14003cb00
test al, al
je 0x1400080f1
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
movdqa xmm0, xmmword [0x14008b0a0]
movups xmmword [rbp - 9], xmm0
lea rcx, [rbp - 9]
call fcn.140010da0
mov edi, eax
mov rbx, qword [0x1400ccb90]
movss xmm9, dword [0x14008ac80]
test eax, 0xff000000
je 0x14000819c
mov dword [rbp + 7], 0x42bd0000
mov dword [rbp + 0xb], 0x429f0000
mov dword [rsp + 0x20], esi
movss xmm3, dword [0x14008acbc]
lea r8, [rbp - 9]
lea rdx, [rbp + 7]
mov rcx, rbx
test byte [rbx + 0x30], 1
je 0x14000815a
mov dword [rbp - 9], 0x43cac000
mov dword [rbp - 5], 0x43984000
jmp 0x140008168
mov dword [rbp - 9], 0x43cac148
mov dword [rbp - 5], 0x43984148
call fcn.140031df0
movss dword [rsp + 0x28], xmm9
mov dword [rsp + 0x20], 1
mov r9d, edi
mov r8d, dword [rbx + 0x78]
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
call fcn.14002ff60
mov dword [rbx + 0x78], esi
mov rbx, qword [0x1400ccb90]
mov rax, qword [0x1400cc950]
movss xmm6, dword [rax + 0x37d8]
movdqa xmm0, xmmword [0x14008b090]
movups xmmword [rbp - 9], xmm0
lea rcx, [rbp - 9]
call fcn.140010da0
mov dword [rbp - 9], 0x43ca8000
mov dword [rbp - 5], 0x42e60000
mov dword [rbp + 7], 0x42be0000
mov dword [rbp + 0xb], 0x42a00000
mov dword [rsp + 0x28], 0x30
movss dword [rsp + 0x20], xmm6
mov r9d, eax
lea r8, [rbp - 9]
lea rdx, [rbp + 7]
mov rcx, rbx
call fcn.140032450
movdqa xmm0, xmmword [0x14008b0c0]
movups xmmword [rbp - 9], xmm0
lea rcx, [rbp - 9]
call fcn.140010da0
mov dword [rbp - 9], 0x43ca8000
mov dword [rbp - 5], 0x42e60000
mov dword [rbp + 7], 0x42be0000
mov dword [rbp + 0xb], 0x42e60000
movss dword [rsp + 0x20], xmm9
mov r9d, eax
lea r8, [rbp - 9]
lea rdx, [rbp + 7]
mov rcx, qword [0x1400ccb90]
call fcn.1400321e0
movdqa xmm0, xmmword [0x14008b190]
movups xmmword [rbp - 9], xmm0
lea rcx, [rbp - 9]
call fcn.140010da0
mov r8d, eax
movss xmm9, dword [0x14008ad04]
mov dword [rbp - 9], 0x42d20000
mov dword [rbp - 5], 0x42aa0000
mov rcx, qword [0x1400cbcf0]
lea rbx, str.Login
test eax, 0xff000000
je 0x1400082ea
mov rdx, qword [0x1400ccb90]
test rcx, rcx
jne 0x1400082a4
mov rax, qword [rdx + 0x38]
mov rcx, qword [rax + 8]
movups xmm0, xmmword [rdx + 0x88]
movups xmmword [rbp + 7], xmm0
mov byte [rsp + 0x48], sil
movss dword [rsp + 0x40], xmm7
lea rax, [0x1400845b1]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rbx
lea rax, [rbp + 7]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r8d
lea r9, [rbp - 9]
movss xmm2, dword [0x14008ace0]
call fcn.1400363d0
mov rcx, qword [0x1400cbcf8]
call fcn.14001c960
mov rcx, qword [0x1400cc950]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
addss xmm1, dword [0x14008ad14]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm0, dword [0x14008ad08]
movss dword [rax + 0x100], xmm0
movss dword [rax + 0x104], xmm1
mov byte [rax + 0x141], 1
lea rcx, str.username
call fcn.14003be60
mov rcx, qword [0x1400cc950]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
addss xmm1, dword [0x14008ad1c]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm0, xmm9
movss dword [rax + 0x100], xmm0
movss dword [rax + 0x104], xmm1
mov byte [rax + 0x141], 1
or dword [rcx + 0x4760], 1
mov dword [rcx + 0x4768], 0x43910000
mov qword [rbp - 9], rsi
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], esi
lea rax, [rbp - 9]
mov qword [rsp + 0x20], rax
mov r9d, 0x28
lea r8, [0x1400cc900]
xor edx, edx
lea rcx, str.user
call fcn.14003f6f0
mov rcx, qword [0x1400cc950]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
addss xmm1, dword [0x14008ad24]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm0, dword [0x14008ad08]
movss dword [rax + 0x100], xmm0
movss dword [rax + 0x104], xmm1
mov byte [rax + 0x141], 1
lea rcx, str.password
call fcn.14003be60
mov rcx, qword [0x1400cc950]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
addss xmm1, dword [0x14008ad28]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm0, xmm9
movss dword [rax + 0x100], xmm0
movss dword [rax + 0x104], xmm1
mov byte [rax + 0x141], 1
or dword [rcx + 0x4760], 1
mov dword [rcx + 0x4768], 0x43910000
mov qword [rbp - 9], rsi
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], esi
lea rax, [rbp - 9]
mov qword [rsp + 0x20], rax
mov r9d, 0x28
lea r8, [0x1400cc8d8]
xor edx, edx
lea rcx, str.pass
call fcn.14003f6f0
mov rcx, qword [0x1400cc950]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
addss xmm1, dword [0x14008ad38]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm0, xmm9
movss dword [rax + 0x100], xmm0
movss dword [rax + 0x104], xmm1
mov byte [rax + 0x141], 1
mov dword [rbp - 9], 0x42f00000
mov dword [rbp - 5], 0x41f00000
lea rdx, [rbp - 9]
mov rcx, rbx
call fcn.14003c7c0
test al, al
je 0x1400085f5
mov ecx, 8
call fcn.140044928
lea rcx, [0x1400cbcf0]
mov qword [rax], rcx
mov qword [rbp - 9], rax
lea rcx, [rbp + 0xf]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], esi
mov r9, rax
lea r8, [0x14000e230]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 7], rax
test rax, rax
je 0x1400086d1
cmp dword [rbp + 0xf], 0
je 0x1400086c5
movaps xmm0, xmmword [rbp + 7]
movdqa xmmword [rbp - 9], xmm0
lea rcx, [rbp - 9]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x1400086c5
xorps xmm0, xmm0
movdqa xmmword [rbp + 7], xmm0
mov rcx, qword [0x1400cc950]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
movss xmm1, dword [rax + 0x20]
subss xmm1, dword [rax + 0x84]
addss xmm1, dword [0x14008ad34]
movss xmm0, dword [rax + 0x24]
subss xmm0, dword [rax + 0x88]
addss xmm0, dword [0x14008ad3c]
movss dword [rax + 0x100], xmm1
movss dword [rax + 0x104], xmm0
mov byte [rax + 0x141], 1
lea rcx, str._Register
call fcn.14003be60
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.14001d550
test al, al
je 0x140008682
xor ecx, ecx
call fcn.1400142e0
test al, al
je 0x140008682
mov word [0x1400cbd64], 0x100
call fcn.14001ca00
call fcn.1400078d0
call fcn.14001c180
mov rcx, qword [rbp + 0x17]
xor rcx, rsp
call fcn.1400447e0
lea r11, [rsp + 0xb0]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm9, xmmword [r11 - 0x30]
mov rsp, r11
pop rbp
ret
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0xf], esi
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3