Function at 0x18000a2e0
Capabilities:
Create thread
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdi
push rbp
mov rbp, rsp
sub rsp, 0x70
mov rax, qword [0x18015b080]
xor rax, rsp
mov qword [rbp - 0x10], rax
xor ebx, ebx
movss xmm0, dword [0x18015dc88]
movss xmm1, dword [0x18015dc8c]
mov rax, qword [0x18015ef70]
movss dword [rax + 0x47d8], xmm0
movss dword [rax + 0x47dc], xmm1
mov dword [rax + 0x47c0], 1
or dword [rax + 0x47b8], 3
mov qword [rax + 0x47c8], rbx
mov qword [rax + 0x47d0], rbx
mov dword [rax + 0x47bc], 1
xor edx, edx
mov r8d, Ordinal_50
lea rcx, str.login
call fcn.18001a5f0
mov rcx, qword [0x18015ef70]
mov rax, qword [rcx + 0x3ed8]
movss xmm2, dword [rax + 0x28]
subss xmm2, dword [0x180142fac]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
addss xmm1, dword [0x180142f9c]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm0, xmm2
movss dword [rax + 0x100], xmm0
movss dword [rax + 0x104], xmm1
mov byte [rax + 0x141], 1
lea rcx, [0x18013c798]
call fcn.18003c910
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.18001da90
test al, al
je 0x18000a3fc
xor ecx, ecx
call fcn.180014960
test al, al
je 0x18000a3fc
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
cmp byte [0x18015ef60], bl
jne 0x18000a620
mov rcx, qword [0x18015ef70]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
addss xmm1, dword [0x180142fd0]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm0, dword [0x180142fc0]
movss dword [rax + 0x100], xmm0
movss dword [rax + 0x104], xmm1
mov byte [rax + 0x141], 1
call fcn.18001fe40
mov dword [rbp - 0x30], 0x43520000
mov dword [rbp - 0x2c], 0x420c0000
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
lea rax, [rbp - 0x30]
mov qword [rsp + 0x20], rax
mov r9d, reloc.WLDAP32.dll_Ordinal_50
lea rdi, [0x18015dc20]
mov r8, rdi
lea rdx, [0x18013c7a0]
lea rcx, str.Username
call fcn.18003fe50
mov rcx, qword [0x18015ef70]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
cmp byte [rax + 0xbb], bl
jne 0x18000a4eb
mov qword [rbp - 0x30], rbx
movss xmm1, dword [0x180143014]
lea rcx, [rbp - 0x30]
call fcn.18001f960
mov dword [rbp - 0x30], 0x43520000
mov dword [rbp - 0x2c], 0x420c0000
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
lea rax, [rbp - 0x30]
mov qword [rsp + 0x20], rax
mov r9d, reloc.WLDAP32.dll_Ordinal_50
lea r8, [0x18015dc52]
lea rdx, [0x18013c7c0]
lea rcx, str.Password
call fcn.18003fe50
mov rcx, qword [0x18015ef70]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
cmp byte [rax + 0xbb], bl
jne 0x18000a569
mov qword [rbp - 0x30], rbx
movss xmm1, dword [0x180143014]
lea rcx, [rbp - 0x30]
call fcn.18001f960
mov dword [rbp - 0x30], 0x43520000
mov dword [rbp - 0x2c], 0x420c0000
lea rdx, [rbp - 0x30]
lea rcx, str.Log_in
call fcn.1800430c0
test al, al
je 0x18000a5f7
mov ecx, 8
call fcn.18010d3a0
mov qword [rax], rdi
mov qword [rbp - 0x30], rax
lea rcx, [rbp - 0x18]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], ebx
mov r9, rax
lea r8, [0x18000eff0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 0x20], rax
test rax, rax
je 0x18000a719
cmp dword [rbp - 0x18], 0
je 0x18000a70d
movaps xmm0, xmmword [rbp - 0x20]
movdqa xmmword [rbp - 0x30], xmm0
lea rcx, [rbp - 0x30]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x18000a70d
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x20], xmm0
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.18001da90
test al, al
je 0x18000a60e
xor ecx, ecx
call fcn.180014960
call fcn.18001ff70
cmp byte [0x18015ef60], 0
je 0x18000a6e5
movss xmm2, dword [0x18015dc88]
mulss xmm2, dword [0x180142f20]
movss xmm3, dword [0x18015dc8c]
mulss xmm3, dword [0x180142f20]
mov rcx, qword [0x18015ef70]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
movss xmm1, dword [rax + 0x20]
subss xmm1, dword [rax + 0x84]
subss xmm2, dword [0x180142fbc]
addss xmm1, xmm2
movss xmm0, dword [rax + 0x24]
subss xmm0, dword [rax + 0x88]
subss xmm3, dword [0x180142fc0]
addss xmm0, xmm3
movss dword [rax + 0x100], xmm1
movss dword [rax + 0x104], xmm0
mov byte [rax + 0x141], 1
movups xmm0, xmmword [0x18015f330]
movups xmmword [rbp - 0x20], xmm0
movss xmm1, dword [0x180142f68]
movss dword [rsp + 0x28], xmm1
movss xmm0, dword [0x180142f88]
movss dword [rsp + 0x20], xmm0
lea r9, [rbp - 0x20]
movss xmm2, dword [0x180142f7c]
movss xmm1, dword [0x180142fb8]
call fcn.1800027b0
call fcn.18000a0a0
call fcn.18001c800
mov rcx, qword [rbp - 0x10]
xor rcx, rsp
call fcn.18010d380
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x10]
mov rdi, qword [r11 + 0x18]
mov rsp, r11
pop rbp
ret
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp - 0x18], ebx
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3