Function at 0x1800110f0
Capabilities:
Create thread
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r14
push rbp
sub rsp, 0x110
movaps xmmword [rax - 0x18], xmm6
movaps xmmword [rax - 0x28], xmm8
movaps xmmword [rax - 0x38], xmm9
lea rbp, [rsp + 0x50]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x1801aa0c0]
xor rax, rsp
mov qword [rbp + 0x80], rax
xor edi, edi
movss xmm0, dword [0x1801abbbc]
movss xmm1, dword [0x1801abbc0]
mov rax, qword [0x1801acf98]
movss dword [rax + 0x47d8], xmm0
movss dword [rax + 0x47dc], xmm1
mov dword [rax + 0x47c0], 1
or dword [rax + 0x47b8], 3
mov qword [rax + 0x47c8], rdi
mov qword [rax + 0x47d0], rdi
mov dword [rax + 0x47bc], 1
movabs rax, 0x6694477c77f4269c
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x20], rax
movabs rsi, 0x1c1c1f2a5ba81ae6
mov qword [rbp + 0x10], rsi
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x28], rax
movabs r14, 0x6694331f129e48f5
mov qword [rbp + 0x10], r14
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x40], rax
mov qword [rbp + 0x10], rsi
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x48], rax
movdqa xmm0, xmmword [rbp + 0x20]
xorps xmm0, xmmword [rbp + 0x40]
movdqa xmmword [rbp + 0x20], xmm0
xor edx, edx
mov r8d, 0x3f
lea rcx, [rbp + 0x20]
call fcn.1800241d0
mov rcx, qword [0x1801acf98]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
mov rbx, qword [rax + 0x298]
call fcn.180007bc0
mov rcx, qword [0x1801acf98]
mov rax, qword [rcx + 0x3ed8]
movss xmm2, dword [rax + 0x28]
movss xmm6, dword [0x180190e1c]
subss xmm2, xmm6
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
addss xmm1, dword [0x180190df4]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm0, xmm2
movss dword [rax + 0x100], xmm0
movss dword [rax + 0x104], xmm1
mov byte [rax + 0x141], 1
lea rcx, [0x18018a900]
call fcn.1800467d0
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.1800277b0
test al, al
je 0x1800112b4
xor ecx, ecx
call fcn.18001dfe0
test al, al
je 0x1800112b4
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov rcx, qword [0x1801acf98]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
addss xmm1, xmm6
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm0, dword [0x180190e0c]
movss dword [rax + 0x100], xmm0
movss dword [rax + 0x104], xmm1
mov byte [rax + 0x141], 1
call fcn.18004f350
test al, al
je 0x180011331
movzx eax, byte [reloc.WS2_32.dll_accept]
neg al
sbb edx, edx
and edx, 0x11
mov rcx, qword [0x1801abbc8]
call qword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
xorps xmm9, xmm9
cmp byte [0x1801ad3b8], dil
jne 0x180011944
mov rcx, qword [0x1801acf98]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
movss xmm2, dword [rax + 0x24]
subss xmm2, dword [rax + 0x88]
addss xmm2, dword [0x180190e44]
movss xmm1, dword [rax + 0x20]
subss xmm1, dword [rax + 0x84]
addss xmm1, dword [0x180190e44]
movss dword [rax + 0x100], xmm1
movss dword [rax + 0x104], xmm2
mov byte [rax + 0x141], 1
call fcn.180029b90
mov rcx, qword [0x1801acf98]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
addss xmm1, dword [0x180190e28]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm0, dword [0x180190e50]
movss dword [rax + 0x100], xmm0
movss dword [rax + 0x104], xmm1
mov byte [rax + 0x141], 1
xorps xmm0, xmm0
movups xmmword [rbp + 0x60], xmm0
movdqa xmm1, xmmword [0x1801913e0]
movups xmmword [rbp], xmm1
mov dword [rbp + 0x40], 0x3f800000
mov dword [rbp + 0x44], 0x3f800000
mov qword [rbp + 0x20], rdi
mov dword [rbp + 0x10], 0x42f00000
mov dword [rbp + 0x14], 0x42f00000
lea rax, [rbp + 0x60]
mov qword [rsp + 0x28], rax
lea rax, [rbp]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x40]
lea r8, [rbp + 0x20]
lea rdx, [rbp + 0x10]
mov rcx, qword [0x1801abc10]
call fcn.180047d70
movdqa xmm0, xmmword [0x1801912f0]
movups xmmword [rbp], xmm0
lea rcx, [rbp]
call fcn.18001aa20
mov dword [rbp + 0x10], 0x43a38000
mov dword [rbp + 0x14], 0x431f0000
mov dword [rbp + 0x20], 0x42400000
mov dword [rbp + 0x24], 0x431f0000
movss xmm0, dword [0x180190dc0]
movss dword [rsp + 0x20], xmm0
mov r9d, eax
lea r8, [rbp + 0x10]
lea rdx, [rbp + 0x20]
mov rcx, rbx
call fcn.18003c950
mov rcx, qword [0x1801acf98]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
addss xmm1, dword [0x180190e58]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm0, dword [0x180190e38]
movss dword [rax + 0x100], xmm0
movss dword [rax + 0x104], xmm1
mov byte [rax + 0x141], 1
movdqa xmm8, xmmword [0x180191370]
movups xmmword [rbp], xmm8
movups xmmword [rbp], xmm8
lea rdx, str.Expires:
lea rcx, [rbp]
call fcn.180046910
movss xmm6, dword [0x180190eb0]
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.1800299d0
movups xmmword [rbp], xmm8
movups xmmword [rbp], xmm8
lea rdx, str.Lifetime
lea rcx, [rbp]
call fcn.180046910
mov rcx, qword [0x1801acf98]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
addss xmm1, dword [0x180190e64]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm0, dword [0x180190e38]
movss dword [rax + 0x100], xmm0
movss dword [rax + 0x104], xmm1
mov byte [rax + 0x141], 1
movups xmmword [rbp], xmm8
movups xmmword [rbp], xmm8
lea rdx, str.Version:
lea rcx, [rbp]
call fcn.180046910
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.1800299d0
lea rdx, [0x1801ad150]
cmp qword [0x1801ad168], 0xf
cmova rdx, qword [0x1801ad150]
movups xmmword [rbp], xmm8
movups xmmword [rbp], xmm8
lea rcx, [rbp]
call fcn.180046910
mov rcx, qword [0x1801acf98]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
movss xmm2, dword [rax + 0x24]
subss xmm2, dword [rax + 0x88]
addss xmm2, dword [0x180190e6c]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm0, dword [0x180190e38]
movss dword [rax + 0x100], xmm0
movss dword [rax + 0x104], xmm2
mov byte [rax + 0x141], 1
movups xmmword [rbp], xmm8
movups xmmword [rbp], xmm8
lea rdx, str.User_Logged:
lea rcx, [rbp]
call fcn.180046910
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.1800299d0
lea rdx, [0x1801ad190]
cmp qword [0x1801ad1a8], 0xf
cmova rdx, qword [0x1801ad190]
movups xmmword [rbp], xmm8
movups xmmword [rbp], xmm8
lea rcx, [rbp]
call fcn.180046910
mov rcx, qword [0x1801acf98]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
movss xmm6, dword [0x180190e80]
addss xmm1, xmm6
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm0, dword [0x180190e2c]
movss dword [rax + 0x100], xmm0
movss dword [rax + 0x104], xmm1
mov byte [rax + 0x141], 1
mov dword [rbp + 0x10], 0x43070000
mov dword [rbp + 0x14], 0x41c80000
movabs rax, 0x6694477c77f426bc
mov qword [rbp + 0x20], rax
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x40], rax
mov qword [rbp + 0x20], rsi
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x48], rax
mov qword [rbp + 0x20], r14
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x60], rax
mov qword [rbp + 0x20], rsi
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x68], rax
movdqa xmm0, xmmword [rbp + 0x60]
xorps xmm0, xmmword [rbp + 0x40]
movdqa xmmword [rbp + 0x40], xmm0
xor r8d, r8d
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x40]
call fcn.18004ec90
lea rbx, [0x1801abb30]
test al, al
je 0x1800117fb
mov ecx, 8
call fcn.18011b698
mov qword [rax], rbx
mov qword [rbp + 0x10], rax
lea rcx, [rbp + 0x28]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], edi
mov r9, rax
lea r8, [0x180017dd0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x20], rax
test rax, rax
je 0x180011b74
mov qword [rbp + 0x10], rdi
cmp dword [rbp + 0x28], 0
je 0x180011b68
movaps xmm0, xmmword [rbp + 0x20]
movdqa xmmword [rbp], xmm0
lea rcx, [rbp]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x180011b68
xorps xmm0, xmm0
movaps xmmword [rbp], xmm0
movdqa xmmword [rbp + 0x20], xmm0
mov rcx, qword [0x1801acf98]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
addss xmm1, xmm6
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm0, dword [0x180190e60]
movss dword [rax + 0x100], xmm0
movss dword [rax + 0x104], xmm1
mov byte [rax + 0x141], 1
mov dword [rbp + 0x10], 0x43070000
mov dword [rbp + 0x14], 0x41c80000
movabs rax, 0x6694337277e821b3
mov qword [rbp + 0x20], rax
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x40], rax
mov qword [rbp + 0x20], rsi
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x48], rax
mov qword [rbp + 0x20], r14
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x60], rax
mov qword [rbp + 0x20], rsi
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x68], rax
movdqa xmm0, xmmword [rbp + 0x60]
xorps xmm0, xmmword [rbp + 0x40]
movdqa xmmword [rbp + 0x40], xmm0
xor r8d, r8d
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x40]
call fcn.18004ec90
test al, al
je 0x180011932
mov ecx, 8
call fcn.18011b698
mov qword [rax], rbx
mov qword [rbp + 0x10], rax
lea rcx, [rbp + 0x28]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], edi
mov r9, rax
lea r8, [0x180017e30]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x20], rax
test rax, rax
je 0x180011b8f
mov qword [rbp + 0x10], rdi
cmp dword [rbp + 0x28], 0
je 0x180011b83
movaps xmm0, xmmword [rbp + 0x20]
movdqa xmmword [rbp], xmm0
lea rcx, [rbp]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x180011b83
xorps xmm0, xmm0
movaps xmmword [rbp], xmm0
movdqa xmmword [rbp + 0x20], xmm0
call fcn.180029cc0
cmp byte [0x1801ad3b8], 0
je 0x180011b23
mov rbx, qword [0x1801acf98]
movss xmm0, dword [rbx + 0x18]
movss xmm6, dword [0x180190d70]
mulss xmm0, xmm6
addss xmm0, dword [0x1801ad37c]
comiss xmm9, xmm0
ja 0x180011978
movss xmm9, dword [0x180190da4]
minss xmm9, xmm0
movss dword [0x1801ad37c], xmm9
mulss xmm9, dword [rbx + 0x37c8]
mov dword [rbp + 0x10], edi
movss xmm0, dword [rbx + 0x37c8]
movss dword [rbp + 0x14], xmm0
lea rcx, [rbx + 0x4838]
lea rdx, [rbp + 0x10]
call fcn.180031750
movss dword [rbx + 0x37c8], xmm9
movss xmm1, dword [0x1801abbbc]
mulss xmm1, xmm6
movss xmm3, dword [0x1801abbc0]
mulss xmm3, xmm6
mov rcx, qword [0x1801acf98]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
movss xmm2, dword [rax + 0x20]
subss xmm2, dword [rax + 0x84]
subss xmm1, dword [0x180190e24]
addss xmm2, xmm1
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
subss xmm3, dword [0x180190e24]
addss xmm1, xmm3
movss dword [rax + 0x100], xmm2
movss dword [rax + 0x104], xmm1
mov byte [rax + 0x141], 1
movdqa xmm0, xmmword [0x1801913d0]
movups xmmword [rbp], xmm0
movabs rax, 0x2ae656717cf738a6
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x60], rax
movabs rax, 0x687d7c5932c67783
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x68], rax
movabs rax, 0x39176bda71b77b2
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x70], rax
movabs rcx, 0xad4be230c777ed18
mov qword [rbp + 0x10], rcx
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x78], rax
mov qword [rbp + 0x10], r14
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x20], rax
mov qword [rbp + 0x10], rsi
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x28], rax
movabs rax, 0x39176bda71b77d7
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x30], rax
mov qword [rbp + 0x10], rcx
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x38], rax
vmovdqu ymm0, ymmword [rbp + 0x20]
vpxor ymm1, ymm0, ymmword [rbp + 0x60]
vmovdqa ymmword [rbp + 0x60], ymm1
vmovss xmm2, dword [0x180190db8]
vmovss dword [rsp + 0x28], xmm2
vmovss xmm0, dword [0x180190dd4]
vmovss dword [rsp + 0x20], xmm0
lea r9, [rbp]
vmovss xmm2, dword [0x180190dd0]
vmovss xmm1, dword [0x180190e20]
lea rcx, [rbp + 0x60]
vzeroupper
call fcn.180007720
mov ecx, 1
call fcn.18001acc0
call fcn.180010250
call fcn.1800263e0
mov rcx, qword [rbp + 0x80]
xor rcx, rsp
call fcn.18011b670
lea r11, [rsp + 0x110]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov r14, qword [r11 + 0x28]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm8, xmmword [r11 - 0x20]
movaps xmm9, xmmword [r11 - 0x30]
mov rsp, r11
pop rbp
ret
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x28], edi
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x28], edi
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3