Function at 0x1400575d0
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xd0]
sub rsp, 0x1d0
mov rax, qword [0x1402ca080]
xor rax, rsp
mov qword [rbp + 0xc0], rax
mov r14, rcx
xor edi, edi
mov dword [rbp + 0x90], edi
xorps xmm0, xmm0
movups xmmword [rbp + 0x68], xmm0
movdqa xmm1, xmmword [0x1402bac10]
movdqu xmmword [rbp + 0x78], xmm1
mov byte [rbp + 0x68], dil
call fcn.140064df0
mov r15, rax
test rax, rax
je 0x140057fd1
lea rdx, [r14 + 8]
cmp qword [rdx + 0x18], 0xf
jbe 0x14005764a
mov rdx, qword [rdx]
mov r8d, dword [r14 + 0x18]
mov rcx, r15
call fcn.140064c30
xorps xmm0, xmm0
movups xmmword [rbp + 0x38], xmm0
mov qword [rbp + 0x48], rdi
mov qword [rbp + 0x50], rdi
mov rbx, 0xffffffffffffffff
mov r8, rbx
nop
inc r8
cmp byte [rax + r8], 0
jne 0x140057670
mov rdx, rax
lea rcx, [rbp + 0x38]
call fcn.1400017c0
nop
lea rdx, [r14 + 0x28]
cmp qword [rdx + 0x18], 0xf
jbe 0x140057695
mov rdx, qword [rdx]
mov r8d, dword [r14 + 0x38]
mov rcx, r15
call fcn.140064c30
xorps xmm0, xmm0
movups xmmword [rbp + 0x18], xmm0
mov qword [rbp + 0x28], rdi
mov qword [rbp + 0x30], rdi
inc rbx
cmp byte [rax + rbx], 0
jne 0x1400576b0
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x18]
call fcn.1400017c0
nop
movabs rdi, 0x7fffffffffffffff
mov rax, rdi
mov r13, qword [rbp + 0x48]
sub rax, r13
cmp rax, 0x2b
jb 0x140058095
lea rdx, [rbp + 0x38]
mov r12, qword [rbp + 0x38]
cmp qword [rbp + 0x50], 0xf
cmova rdx, r12
mov qword [rbp + 0x90], rdx
xorps xmm0, xmm0
movups xmmword [rbp + 0xa0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xb0], xmm1
lea rax, [r13 + 0x2b]
mov ebx, reloc.WS2_32.dll_ntohs
lea rsi, [rbp + 0xa0]
movabs rcx, 0x8000000000000000
lea r8d, [rbx + 7]
cmp rax, rbx
jbe 0x1400577c1
mov rbx, rax
or rbx, 0xf
cmp rbx, rdi
jbe 0x140057774
mov rbx, rdi
lea rax, [rcx + 0x27]
mov rcx, rax
call fcn.1400b2d30
test rax, rax
je 0x140057797
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
lea rax, [r13 + 0x2b]
mov rdx, qword [rbp + 0x90]
jmp 0x1400577ba
cmp rbx, r8
cmovb rbx, r8
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x14005779e
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140058089
jmp 0x14005774e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x1400577b8
call fcn.1400b2d30
mov rsi, rax
lea rax, [r13 + 0x2b]
mov rdx, qword [rbp + 0x90]
jmp 0x1400577ba
xor esi, esi
mov qword [rbp + 0xa0], rsi
mov qword [rbp + 0xb0], rax
mov qword [rbp + 0xb8], rbx
movups xmm0, xmmword [str.http:__3.142.247.110:3030_api_init_version]
movups xmmword [rsi], xmm0
movups xmm1, xmmword [0x1402b9a80]
movups xmmword [rsi + 0x10], xmm1
movsd xmm0, qword [0x1402b9a90]
movsd qword [rsi + 0x20], xmm0
movzx eax, word [0x1402b9a98]
mov word [rsi + 0x28], ax
movzx eax, byte [0x1402b9a9a]
mov byte [rsi + 0x2a], al
lea rcx, [rsi + 0x2b]
mov r8, r13
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsi + r13 + 0x2b], 0
mov r8d, reloc.WS2_32.dll_ntohs
lea rdx, str.applicationId
lea rcx, [rbp + 0xa0]
call fcn.1400547b0
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x80], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x80], xmm1
xor r13d, r13d
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], r13b
lea rdx, [rbp + 0x18]
cmp qword [rbp + 0x30], 0xf
cmova rdx, qword [rbp + 0x18]
mov r8, qword [rbp + 0x28]
lea rcx, [rsp + 0x70]
call fcn.1400547b0
xorps xmm0, xmm0
movups xmmword [rbp - 8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 8], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 8], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], r13b
mov rdx, qword [rbp - 0x78]
cmp rdx, 0xf
jbe 0x1400578eb
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400578e6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400578e6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b2d6c
movdqa xmm0, xmmword [0x1402bac10]
movdqu xmmword [rbp - 0x80], xmm0
mov byte [rsp + 0x70], 0
mov rdx, qword [rbp + 0xb8]
cmp rdx, 0xf
jbe 0x140057941
inc rdx
mov rcx, qword [rbp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005793c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005793c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b2d6c
movdqa xmm0, xmmword [0x1402bac10]
movdqu xmmword [rbp + 0xb0], xmm0
mov byte [rbp + 0xa0], 0
lea r8, [rbp - 8]
cmp qword [rbp + 0x10], 0xf
cmova r8, qword [rbp - 8]
mov edx, 0x2712
mov rcx, r15
call fcn.140067760
lea rdx, str.Content_Type:_application_json
xor ecx, ecx
call fcn.1400650a0
lea rdx, str.user_agent:_xrc
mov rcx, rax
call fcn.1400650a0
mov r8, rax
mov edx, 0x2727
mov rcx, r15
call fcn.140067760
lea r8, [0x1400575a0]
mov edx, 0x4e2b
mov rcx, r15
call fcn.140067760
lea r8, [rbp + 0x68]
mov edx, 0x2711
mov rcx, r15
call fcn.140067760
mov rcx, r15
call fcn.140064eb0
mov ebx, eax
lea r8, [rbp - 0x70]
mov edx, 0x200002
mov rcx, r15
call fcn.140064dc0
test ebx, ebx
jne 0x140058030
mov qword [rsp + 0x68], r13
lea r8, [rsp + 0x30]
lea rdx, [rbp + 0x68]
lea rcx, [rbp + 0x58]
call fcn.140059870
nop
movabs rax, 0x94a21cf1e7f13c65
mov qword [rbp + 0x90], rax
movabs r15, 0xd40426096d53c4e
mov qword [rbp + 0x98], r15
movabs rax, 0x94c77b9094825908
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], r15
movaps xmm0, xmmword [rsp + 0x70]
xorps xmm0, xmmword [rbp + 0x90]
movdqa xmmword [rbp + 0xa0], xmm0
lea rdx, [rbp + 0xa0]
lea rcx, [rbp + 0x58]
call fcn.140059990
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x68], xmm0
mov qword [rbp - 0x58], r13
mov qword [rbp - 0x50], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x68], bl
mov dword [rbp + 0x90], Ordinal_41
cmp byte [rax], 3
jne 0x140057a86
mov rdx, qword [rax + 8]
jmp 0x140057a89
mov rdx, r13
lea rcx, [rbp - 0x68]
call fcn.140059200
nop
mov ecx, dword [rbp - 0x70]
cmp ecx, 0xc8
jne 0x140057e80
mov byte [r14], 1
xorps xmm0, xmm0
movups xmmword [rbp + 0xa0], xmm0
mov qword [rbp + 0xb0], r13
mov qword [rbp + 0xb8], r13
mov rbx, qword [rbp - 0x58]
lea rsi, [rbp - 0x68]
cmp qword [rbp - 0x50], 0xf
cmova rsi, qword [rbp - 0x68]
cmp rbx, rdi
ja 0x140058083
cmp rbx, 0xf
ja 0x140057b00
mov qword [rbp + 0xb0], rbx
mov qword [rbp + 0xb8], reloc.WS2_32.dll_ntohs
movups xmm0, xmmword [rsi]
movups xmmword [rbp + 0xa0], xmm0
jmp 0x140057b9b
mov rax, rbx
or rax, 0xf
cmp rax, rdi
jbe 0x140057b3c
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1400b2d30
mov rcx, rax
test rax, rax
je 0x140057bfd
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140057b77
mov rdi, rax
cmp rax, 0x16
mov eax, reloc.WLDAP32.dll_Ordinal_22
cmovb rdi, rax
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x140057b68
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14005808f
jmp 0x140057b1a
test rcx, rcx
je 0x140057b74
call fcn.1400b2d30
jmp 0x140057b77
mov rax, r13
mov qword [rbp + 0xa0], rax
mov qword [rbp + 0xb0], rbx
mov qword [rbp + 0xb8], rdi
lea r8, [rbx + 1]
mov rdx, rsi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rbp + 0xa0]
mov qword [rbp + 0x90], rax
mov byte [r14 + 0x148], 1
lea rcx, [r14 + 0xe8]
lea rdx, [rbp + 0xa0]
call fcn.140059200
nop
mov rdx, qword [rbp + 0xb8]
cmp rdx, 0xf
jbe 0x140057c09
inc rdx
mov rcx, qword [rbp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140057c04
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140057c04
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b2d6c
mov qword [rsp + 0x68], r13
lea r8, [rsp + 0x30]
lea rdx, [rbp + 0x68]
lea rcx, [rsp + 0x70]
call fcn.140059870
nop
movabs rbx, 0x94a21cf1e7f13c65
mov qword [rbp + 0xa0], rbx
mov qword [rbp + 0xa8], r15
movabs rax, 0x94a21cf1e788590e
mov qword [rbp + 0x90], rax
mov qword [rbp + 0x98], r15
movaps xmm0, xmmword [rbp + 0x90]
xorps xmm0, xmmword [rbp + 0xa0]
movdqa xmmword [rbp + 0xa0], xmm0
lea rdx, [rbp + 0xa0]
lea rcx, [rsp + 0x70]
call fcn.140059990
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
mov qword [rbp - 0x18], r13
mov qword [rbp - 0x10], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x28], 0
mov dword [rbp + 0x90], reloc.WS2_32.dll___WSAFDIsSet
cmp byte [rax], 3
jne 0x140057ca6
mov rdx, qword [rax + 8]
jmp 0x140057ca9
mov rdx, r13
lea rcx, [rbp - 0x28]
call fcn.140059200
nop
mov qword [rbp + 0x90], rbx
mov qword [rbp + 0x98], r15
movabs rax, 0x94cc739894835913
mov qword [rbp + 0xa0], rax
mov qword [rbp + 0xa8], r15
movaps xmm0, xmmword [rbp + 0xa0]
xorps xmm0, xmmword [rbp + 0x90]
movdqa xmmword [rbp + 0xa0], xmm0
lea rdx, [rbp + 0xa0]
lea rcx, [rsp + 0x70]
call fcn.140059990
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
mov qword [rbp - 0x38], r13
mov qword [rbp - 0x30], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x48], 0
mov dword [rbp + 0x90], 0x257
cmp byte [rax], 3
jne 0x140057d2d
mov rdx, qword [rax + 8]
jmp 0x140057d30
mov rdx, r13
lea rcx, [rbp - 0x48]
call fcn.140059200
nop
lea rcx, [r14 + 0x108]
lea rax, [rbp - 0x28]
mov rdi, qword [rbp - 0x10]
cmp rcx, rax
je 0x140057d98
lea r9, [rbp - 0x28]
cmp rdi, 0xf
cmova r9, qword [rbp - 0x28]
mov rax, qword [rcx + 0x18]
mov rbx, qword [rbp - 0x18]
cmp rbx, rax
ja 0x140057d8c
mov rsi, rcx
cmp rax, 0xf
jbe 0x140057d74
mov rsi, qword [rcx]
mov qword [rcx + 0x10], rbx
mov r8, rbx
mov rdx, r9
mov rcx, rsi
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + rsi], 0
jmp 0x140057d98
mov rdx, rbx
call fcn.140054d20
mov rdi, qword [rbp - 0x10]
lea rcx, [r14 + 0x128]
lea rax, [rbp - 0x48]
mov rbx, qword [rbp - 0x30]
cmp rcx, rax
je 0x140057df7
lea r9, [rbp - 0x48]
cmp rbx, 0xf
cmova r9, qword [rbp - 0x48]
mov rax, qword [rcx + 0x18]
mov rsi, qword [rbp - 0x38]
cmp rsi, rax
ja 0x140057deb
mov r14, rcx
cmp rax, 0xf
jbe 0x140057dd2
mov r14, qword [rcx]
mov qword [rcx + 0x10], rsi
mov r8, rsi
mov rdx, r9
mov rcx, r14
call sub.VCRUNTIME140.dll_memmove
mov byte [rsi + r14], 0
jmp 0x140057df7
mov rdx, rsi
call fcn.140054d20
mov rbx, qword [rbp - 0x30]
cmp rbx, 0xf
jbe 0x140057e33
lea rdx, [rbx + 1]
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140057e2d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140057e2d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b2d6c
nop
cmp rdi, 0xf
jbe 0x140057e6f
lea rdx, [rdi + 1]
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140057e69
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140057e69
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b2d6c
nop
movzx edx, byte [rsp + 0x70]
lea rcx, [rsp + 0x78]
call fcn.140059290
jmp 0x140057ea7
lea eax, [rcx - 0x190]
cmp eax, 1
jbe 0x14005800d
cmp ecx, 0x194
je 0x14005800d
cmp ecx, 0x1f4
je 0x14005800d
mov rdx, qword [rbp - 0x50]
cmp rdx, 0xf
jbe 0x140057ee5
inc rdx
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140057ee0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140057ee0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b2d6c
mov qword [rbp - 0x58], r13
mov qword [rbp - 0x50], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x68], 0
movzx edx, byte [rbp + 0x58]
lea rcx, [rbp + 0x60]
call fcn.140059290
nop
mov rdx, qword [rbp + 0x10]
cmp rdx, 0xf
jbe 0x140057f41
inc rdx
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140057f3c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140057f3c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b2d6c
movdqa xmm0, xmmword [0x1402bac10]
movdqu xmmword [rbp + 8], xmm0
mov byte [rbp - 8], 0
mov rdx, qword [rbp + 0x30]
cmp rdx, 0xf
jbe 0x140057f91
inc rdx
mov rcx, qword [rbp + 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140057f8b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140057f8b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b2d6c
nop
mov rax, qword [rbp + 0x50]
cmp rax, 0xf
jbe 0x140057fd1
lea rdx, [rax + 1]
mov rax, r12
cmp rdx, 0x1000
jb 0x140057fc8
add rdx, 0x27
mov r12, qword [r12 - 8]
sub rax, r12
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140057fc8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r12
call fcn.1400b2d6c
nop
mov rdx, qword [rbp + 0x80]
cmp rdx, 0xf
jbe 0x140058053
inc rdx
mov rcx, qword [rbp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005804e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005804e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
lea rcx, [rbp - 0x68]
call fcn.140001a70
mov rdx, rax
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
xor r9d, r9d
xor r8d, r8d
lea rdx, str.auth_offline
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
call fcn.1400b2d6c
mov rcx, qword [rbp + 0xc0]
xor rcx, rsp
call fcn.1400b2d10
lea r11, [rsp + 0x1d0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140001580
nop
call fcn.1400014e0
nop
call fcn.1400014e0
nop
call fcn.140001580
int3