Function at 0x140057170
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xe0]
sub rsp, 0x1e0
mov rax, qword [0x140124080]
xor rax, rsp
mov qword [rbp + 0xd0], rax
mov r15, rcx
xor r14d, r14d
mov dword [rbp + 0xc0], r14d
xorps xmm0, xmm0
movups xmmword [rbp + 0x98], xmm0
movdqa xmm1, xmmword [0x14010ce30]
movdqu xmmword [rbp + 0xa8], xmm1
mov byte [rbp + 0x98], r14b
call fcn.14009b480
mov r13, rax
test rax, rax
je 0x14005795c
lea rdx, [r15 + 8]
cmp qword [rdx + 0x18], 0xf
jbe 0x1400571f5
mov rdx, qword [rdx]
mov r8d, dword [r15 + 0x18]
mov rcx, r13
call fcn.14009b2c0
xorps xmm0, xmm0
movups xmmword [rbp + 0x18], xmm0
mov qword [rbp + 0x28], r14
mov qword [rbp + 0x30], r14
mov rsi, 0xffffffffffffffff
mov r8, rsi
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140057220
mov rdx, rax
lea rcx, [rbp + 0x18]
call fcn.1400559a0
nop
lea rdx, [r15 + 0x28]
cmp qword [rdx + 0x18], 0xf
jbe 0x140057245
mov rdx, qword [rdx]
mov r8d, dword [r15 + 0x38]
mov rcx, r13
call fcn.14009b2c0
xorps xmm0, xmm0
movups xmmword [rbp + 0x38], xmm0
mov qword [rbp + 0x48], r14
mov qword [rbp + 0x50], r14
mov r8, rsi
inc r8
cmp byte [rax + r8], 0
jne 0x140057263
mov rdx, rax
lea rcx, [rbp + 0x38]
call fcn.1400559a0
nop
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
mov rdx, qword [rbp + 0x28]
sub rax, rdx
cmp rax, 0x2a
jb 0x1400579d9
lea r9, [rbp + 0x18]
cmp qword [rbp + 0x30], 0xf
cmova r9, qword [rbp + 0x18]
mov qword [rsp + 0x30], r9
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x70], xmm1
lea rax, [rdx + 0x2a]
mov qword [rbp + 0xc0], rax
mov r12d, reloc.WS2_32.dll_ntohs
mov ebx, r12d
lea rdi, [rsp + 0x60]
cmp rax, rbx
jbe 0x14005736b
mov rbx, rax
or rbx, r12
cmp rbx, rcx
jbe 0x140057315
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1400e9780
test rax, rax
je 0x140057347
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140057356
mov ecx, reloc.WLDAP32.dll_Ordinal_22
cmp rbx, rcx
cmovb rbx, rcx
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x14005732f
mov rdi, r14
jmp 0x140057366
cmp rcx, 0x1000
jb 0x14005734e
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400579df
jmp 0x1400572fa
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e9780
mov rdi, rax
mov r9, qword [rsp + 0x30]
mov rdx, qword [rbp + 0x28]
mov rax, qword [rbp + 0xc0]
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], rbx
movups xmm0, xmmword [str.http:__18.188.35.86:3030_api_init_version]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [0x14010a678]
movups xmmword [rdi + 0x10], xmm1
movsd xmm0, qword [0x14010a688]
movsd qword [rdi + 0x20], xmm0
movzx eax, word [0x14010a690]
mov word [rdi + 0x28], ax
lea rcx, [rdi + 0x2a]
mov r8, rdx
mov rdx, r9
call sub.VCRUNTIME140.dll_memcpy
mov rax, qword [rbp + 0x28]
mov byte [rdi + rax + 0x2a], 0
mov edi, 1
mov r8, r12
lea rdx, str.applicationId
lea rcx, [rsp + 0x60]
call fcn.1400553e0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x50], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], r12
mov byte [rax], 0
or edi, 2
lea rdx, [rbp + 0x38]
cmp qword [rbp + 0x50], 0xf
cmova rdx, qword [rbp + 0x38]
mov r8, qword [rbp + 0x48]
lea rcx, [rsp + 0x40]
call fcn.1400553e0
xorps xmm0, xmm0
movups xmmword [rbp + 0x58], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x68], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x58], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x68], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], r12
mov byte [rax], 0
or edi, 4
lea rcx, [rsp + 0x40]
call fcn.140055220
nop
lea rcx, [rsp + 0x60]
call fcn.140055220
lea r8, [rbp + 0x58]
cmp qword [rbp + 0x70], 0xf
cmova r8, qword [rbp + 0x58]
mov edx, 0x2712
mov rcx, r13
call fcn.14009ddf0
lea rdx, str.Content_Type:_application_json
xor ecx, ecx
call fcn.14009b730
lea rdx, str.user_agent:_nyache
mov rcx, rax
call fcn.14009b730
mov r8, rax
mov edx, 0x2727
mov rcx, r13
call fcn.14009ddf0
lea r8, [0x140057140]
mov edx, 0x4e2b
mov rcx, r13
call fcn.14009ddf0
lea r8, [rbp + 0x98]
mov edx, 0x2711
mov rcx, r13
call fcn.14009ddf0
mov rcx, r13
call fcn.14009b540
mov ebx, eax
lea r8, [rbp - 0x30]
mov edx, 0x200002
mov rcx, r13
call fcn.14009b450
test ebx, ebx
jne 0x1400579bb
mov qword [rbp - 0x48], r14
lea r8, [rbp - 0x80]
lea rdx, [rbp + 0x98]
lea rcx, [rbp - 0x40]
call fcn.140059840
nop
movabs rax, 0xf2ab9632cd312827
mov qword [rbp + 0xc0], rax
movabs r13, 0x9d89a95bc0f52eb0
mov qword [rbp + 0xc8], r13
movabs rax, 0xf2cef153be424d4a
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], r13
movaps xmm0, xmmword [rsp + 0x30]
xorps xmm0, xmmword [rbp + 0xc0]
movdqa xmmword [rbp + 0xc0], xmm0
movzx eax, byte [rbp - 0x40]
test al, al
jne 0x14005757d
mov byte [rbp - 0x40], 1
mov dl, 1
lea rcx, [rsp + 0x30]
call fcn.14005a210
mov rbx, qword [rsp + 0x30]
mov qword [rbp - 0x38], rbx
movzx eax, byte [rbp - 0x40]
jmp 0x140057581
mov rbx, qword [rbp - 0x38]
cmp al, 1
jne 0x1400575d8
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
lea rax, [rbp + 0xc0]
mov r8, rsi
inc r8
cmp byte [rax + r8], 0
jne 0x1400575a0
lea rdx, [rbp + 0xc0]
lea rcx, [rsp + 0x40]
call fcn.1400559a0
nop
lea rdx, [rsp + 0x40]
mov rcx, rbx
call fcn.14005a370
mov rbx, rax
lea rcx, [rsp + 0x40]
call fcn.140055220
jmp 0x1400575dd
mov rbx, qword [rsp + 0x30]
xorps xmm0, xmm0
movups xmmword [rbp + 0x78], xmm0
movdqa xmm1, xmmword [0x14010ce30]
movdqu xmmword [rbp + 0x88], xmm1
mov byte [rbp + 0x78], 0
or edi, 0x20
mov dword [rbp + 0xc0], edi
cmp byte [rbx], 3
jne 0x140057615
mov rdx, qword [rbx + 8]
lea rax, [rbp + 0x78]
cmp rax, rdx
je 0x14005762f
jmp 0x140057618
mov rdx, r14
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0xf
jbe 0x140057626
mov rdx, qword [rdx]
lea rcx, [rbp + 0x78]
call fcn.140055280
and edi, 0xffffffdf
or edi, 0x10
cmp dword [rbp - 0x30], 0xc8
jne 0x140057998
mov byte [r15], 1
lea rdx, [rbp + 0x78]
lea rcx, [rsp + 0x40]
call fcn.140054f60
mov rbx, rax
mov qword [rsp + 0x30], rax
mov byte [r15 + 0x168], 1
lea rcx, [r15 + 0x108]
cmp rcx, rax
je 0x140057687
mov rdx, rax
cmp qword [rax + 0x18], 0xf
jbe 0x14005767d
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
call fcn.140055280
nop
mov rcx, rbx
call fcn.140055220
movabs rax, 0xf2ab9632cd312827
mov qword [rbp + 0xc0], rax
mov qword [rbp + 0xc8], r13
movabs rax, 0xf2ab9632cd484d4c
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], r13
movaps xmm0, xmmword [rsp + 0x30]
xorps xmm0, xmmword [rbp + 0xc0]
movdqa xmmword [rbp + 0xc0], xmm0
cmp byte [rbp - 0x40], 0
jne 0x1400576ee
mov byte [rbp - 0x40], 1
mov dl, 1
lea rcx, [rsp + 0x30]
call fcn.14005a210
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x38], rax
cmp byte [rbp - 0x40], 1
jne 0x14005774b
mov rbx, qword [rbp - 0x38]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
lea rax, [rbp + 0xc0]
mov r8, rsi
inc r8
cmp byte [rax + r8], 0
jne 0x140057713
lea rdx, [rbp + 0xc0]
lea rcx, [rsp + 0x40]
call fcn.1400559a0
nop
lea rdx, [rsp + 0x40]
mov rcx, rbx
call fcn.14005a370
mov rbx, rax
lea rcx, [rsp + 0x40]
call fcn.140055220
jmp 0x140057750
mov rbx, qword [rsp + 0x30]
xorps xmm0, xmm0
movups xmmword [rbp - 8], xmm0
mov r13, r14
mov qword [rbp + 8], r14
mov qword [rbp + 0x10], r12
mov byte [rbp - 8], r13b
bts edi, 7
mov dword [rbp + 0xc0], edi
cmp byte [rbx], 3
jne 0x140057784
mov rdx, qword [rbx + 8]
lea rax, [rbp - 8]
cmp rax, rdx
je 0x1400577a2
jmp 0x140057787
mov rdx, r14
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0xf
jbe 0x140057795
mov rdx, qword [rdx]
lea rcx, [rbp - 8]
call fcn.140055280
mov r13, qword [rbp + 8]
btr edi, 7
or edi, 0x40
movabs rax, 0xf2ab9632cd312827
mov qword [rbp + 0xc0], rax
movabs rcx, 0x9d89a95bc0f52eb0
mov qword [rbp + 0xc8], rcx
movabs rax, 0xf2c5f95bbe434d51
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rcx
movaps xmm0, xmmword [rsp + 0x30]
xorps xmm0, xmmword [rbp + 0xc0]
movdqa xmmword [rbp + 0xc0], xmm0
cmp byte [rbp - 0x40], 0
jne 0x140057812
mov byte [rbp - 0x40], 1
mov dl, 1
lea rcx, [rsp + 0x30]
call fcn.14005a210
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x38], rax
cmp byte [rbp - 0x40], 1
jne 0x14005786e
mov rbx, qword [rbp - 0x38]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
lea rax, [rbp + 0xc0]
inc rsi
cmp byte [rax + rsi], 0
jne 0x140057834
mov r8, rsi
lea rdx, [rbp + 0xc0]
lea rcx, [rsp + 0x40]
call fcn.1400559a0
nop
lea rdx, [rsp + 0x40]
mov rcx, rbx
call fcn.14005a370
mov rbx, rax
lea rcx, [rsp + 0x40]
call fcn.140055220
jmp 0x140057873
mov rbx, qword [rsp + 0x30]
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
mov qword [rbp - 0x18], r14
mov qword [rbp - 0x10], r12
mov byte [rbp - 0x28], 0
bts edi, 9
mov dword [rbp + 0xc0], edi
cmp byte [rbx], 3
jne 0x1400578a4
mov rdx, qword [rbx + 8]
lea rax, [rbp - 0x28]
cmp rax, rdx
je 0x1400578c6
jmp 0x1400578a7
mov rdx, r14
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0xf
jbe 0x1400578b5
mov rdx, qword [rdx]
lea rcx, [rbp - 0x28]
call fcn.140055280
mov r12, qword [rbp - 0x10]
mov r14, qword [rbp - 0x18]
lea rcx, [r15 + 0x128]
lea rax, [rbp - 8]
cmp rcx, rax
je 0x1400578ec
lea rdx, [rbp - 8]
cmp qword [rbp + 0x10], 0xf
cmova rdx, qword [rbp - 8]
mov r8, r13
call fcn.140055280
lea rcx, [r15 + 0x148]
lea rax, [rbp - 0x28]
cmp rcx, rax
je 0x140057912
lea rdx, [rbp - 0x28]
cmp r12, 0xf
cmova rdx, qword [rbp - 0x28]
mov r8, r14
call fcn.140055280
nop
lea rcx, [rbp - 0x28]
call fcn.140055220
nop
lea rcx, [rbp - 8]
call fcn.140055220
nop
lea rcx, [rbp + 0x78]
call fcn.140055220
nop
movzx edx, byte [rbp - 0x40]
lea rcx, [rbp - 0x38]
call fcn.140058f40
nop
lea rcx, [rbp + 0x58]
call fcn.140055220
nop
lea rcx, [rbp + 0x38]
call fcn.140055220
nop
lea rcx, [rbp + 0x18]
call fcn.140055220
nop
lea rcx, [rbp + 0x98]
call fcn.140055220
mov rcx, qword [rbp + 0xd0]
xor rcx, rsp
call fcn.1400e9640
lea r11, [rsp + 0x1e0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
lea rcx, [rbp + 0x78]
call fcn.140054f40
mov rdx, rax
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
xor r9d, r9d
xor r8d, r8d
lea rdx, str.auth_offline
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
call fcn.14004e850
int3
call fcn.140001490
int3