Function at 0x1400988b0
Capabilities:
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x60]
sub rsp, 0x160
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
mov rax, qword [0x1402de140]
xor rax, rsp
mov qword [rbp + 0x30], rax
mov rcx, qword [0x140300750]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
mov r10, qword [rax + 0x2b0]
movss xmm6, dword [rax + 0x28]
movss xmm7, dword [rax + 0x2c]
movaps xmm0, xmmword [0x1402c06a0]
movups xmmword [rsp + 0x40], xmm0
lea rcx, [rsp + 0x40]
call fcn.14005db90
movaps xmm1, xmm7
addss xmm1, dword [0x1402c04f8]
movaps xmm0, xmm6
addss xmm0, dword [0x1402c0514]
movss dword [rbp - 0x50], xmm0
movss dword [rbp - 0x4c], xmm1
movss xmm0, dword [0x1402c0424]
addss xmm7, xmm0
addss xmm6, xmm0
movss dword [rsp + 0x40], xmm6
movss dword [rsp + 0x44], xmm7
movss dword [rsp + 0x30], xmm0
xorps xmm0, xmm0
movss dword [rsp + 0x20], xmm0
mov r9d, eax
lea r8, [rbp - 0x50]
lea rdx, [rsp + 0x40]
mov rcx, r10
call fcn.140080d70
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.1400ffe40
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x60], Ordinal_27
mov qword [rsp + 0x68], Ordinal_33
movups xmm0, xmmword [str.http:__193.0.166.91:1337]
movups xmmword [rax], xmm0
movsd xmm0, qword [0x1402be7f8]
movsd qword [rax + 0x10], xmm0
mov byte [rax + 0x18], 0
mov byte [rbp - 0x40], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x38], xmm0
xor r14d, r14d
mov qword [rbp - 0x28], r14
mov qword [rbp - 0x20], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x38], r14b
lea rdx, [rsp + 0x50]
lea rcx, [rbp - 0x18]
call fcn.14009b120
lea ecx, [r14 + 3]
call fcn.1400aabb0
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x140098a46
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140098a41
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140098a41
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400ffe84
mov rcx, qword [0x140300750]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x9c]
addss xmm1, dword [0x1402c0470]
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x98]
movss xmm6, dword [0x1402c0490]
addss xmm0, xmm6
movss dword [rax + 0x118], xmm0
movss dword [rax + 0x11c], xmm1
mov byte [rax + 0x159], 1
movss xmm7, dword [0x1402c04ec]
movaps xmm0, xmm7
call fcn.14006d7b0
lea r9, [0x1402be570]
lea rdx, [0x1403009b0]
lea rcx, str.username
call fcn.1400963c0
mov r9, qword [0x140300750]
mov rax, qword [r9 + 0x4040]
mov byte [rax + 0xcc], 1
mov r8, qword [r9 + 0x4040]
movsxd rdx, dword [r8 + 0x1e0]
mov rax, qword [r8 + 0x1e8]
mov ecx, dword [rax + rdx*4 - 4]
mov dword [r8 + 0x1d8], ecx
lea eax, [rdx - 1]
mov dword [r8 + 0x1e0], eax
mov rax, qword [r9 + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [r9 + 0x4040]
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x9c]
addss xmm1, dword [0x1402c0488]
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x98]
addss xmm0, xmm6
movss dword [rax + 0x118], xmm0
movss dword [rax + 0x11c], xmm1
mov byte [rax + 0x159], 1
movaps xmm0, xmm7
call fcn.14006d7b0
lea r9, [0x1402bdc70]
lea r15, [0x140300a30]
mov rdx, r15
lea rcx, str.password
call fcn.1400963c0
mov r9, qword [0x140300750]
mov rax, qword [r9 + 0x4040]
mov byte [rax + 0xcc], 1
mov r8, qword [r9 + 0x4040]
movsxd rdx, dword [r8 + 0x1e0]
mov rax, qword [r8 + 0x1e8]
mov ecx, dword [rax + rdx*4 - 4]
mov dword [r8 + 0x1d8], ecx
lea eax, [rdx - 1]
mov dword [r8 + 0x1e0], eax
mov rax, qword [r9 + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [r9 + 0x4040]
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x9c]
addss xmm1, dword [0x1402c049c]
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x98]
addss xmm0, xmm6
movss dword [rax + 0x118], xmm0
movss dword [rax + 0x11c], xmm1
mov byte [rax + 0x159], 1
movaps xmm0, xmm7
call fcn.14006d7b0
lea r9, [0x1402be874]
lea r13, [0x140300ab0]
mov rdx, r13
lea rcx, str.key
call fcn.1400963c0
mov r9, qword [0x140300750]
mov rax, qword [r9 + 0x4040]
mov byte [rax + 0xcc], 1
mov r8, qword [r9 + 0x4040]
movsxd rdx, dword [r8 + 0x1e0]
mov rax, qword [r8 + 0x1e8]
mov ecx, dword [rax + rdx*4 - 4]
mov dword [r8 + 0x1d8], ecx
lea eax, [rdx - 1]
mov dword [r8 + 0x1e0], eax
mov rax, qword [r9 + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [r9 + 0x4040]
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x9c]
addss xmm1, dword [0x1402c04b0]
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x98]
movss xmm6, dword [0x1402c04a4]
addss xmm0, xmm6
movss dword [rax + 0x118], xmm0
movss dword [rax + 0x11c], xmm1
mov byte [rax + 0x159], 1
movaps xmm0, xmm7
call fcn.14006d7b0
mov dword [rsp + 0x40], 0x42be0000
mov dword [rsp + 0x44], 0x41a00000
lea rdx, [rsp + 0x40]
lea rcx, str.Register
call fcn.140096230
test al, al
je 0x14009913a
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], r14
mov rbx, 0xffffffffffffffff
mov rdi, rbx
inc rdi
cmp byte [rdi + r13], 0
jne 0x140098d23
movabs rsi, 0x7fffffffffffffff
cmp rdi, rsi
ja 0x140099374
mov eax, reloc.WS2_32.dll_shutdown
movabs r12, 0x8000000000000000
mov qword [rsp + 0x68], reloc.WS2_32.dll_ntohs
cmp rdi, 0xf
ja 0x140098d7d
mov qword [rsp + 0x60], rdi
mov r8, rdi
mov rdx, r13
lea rcx, [rsp + 0x50]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsp + rdi + 0x50], 0
jmp 0x140098e19
mov r15, rdi
or r15, 0xf
cmp r15, rsi
jbe 0x140098db1
mov r15, rsi
lea rax, [r12 + 0x27]
mov rcx, rax
call fcn.1400ffe40
test rax, rax
je 0x14009911d
lea r12, [rax + 0x27]
and r12, 0xffffffffffffffe0
mov qword [r12 - 8], rax
jmp 0x140098de6
cmp r15, rax
cmovb r15, rax
lea rcx, [r15 + 1]
cmp rcx, 0x1000
jb 0x140098dd4
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140099362
jmp 0x140098d91
test rcx, rcx
je 0x140098de3
call fcn.1400ffe40
mov r12, rax
jmp 0x140098de6
mov r12, r14
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x68], r15
mov r8, rdi
mov rdx, r13
mov rcx, r12
call sub.VCRUNTIME140.dll_memcpy
mov byte [r12 + rdi], 0
lea r15, [0x140300a30]
movabs r12, 0x8000000000000000
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x58], r14
mov rdi, rbx
nop dword [rax + rax]
inc rdi
cmp byte [r15 + rdi], 0
jne 0x140098e30
cmp rdi, rsi
ja 0x14009937a
mov qword [rbp - 0x58], reloc.WS2_32.dll_ntohs
cmp rdi, 0xf
ja 0x140098e74
mov qword [rbp - 0x60], rdi
mov r8, rdi
mov rdx, r15
lea rcx, [rbp - 0x70]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbp + rdi - 0x70], 0
mov r13d, reloc.WS2_32.dll_shutdown
jmp 0x140098f07
mov r15, rdi
or r15, 0xf
mov r13d, reloc.WS2_32.dll_shutdown
cmp r15, rsi
jbe 0x140098eae
mov r15, rsi
lea rax, [r12 + 0x27]
mov rcx, rax
call fcn.1400ffe40
test rax, rax
je 0x14009907e
lea r12, [rax + 0x27]
and r12, 0xffffffffffffffe0
mov qword [r12 - 8], rax
jmp 0x140098ee4
cmp r15, 0x16
cmovb r15, r13
lea rcx, [r15 + 1]
cmp rcx, 0x1000
jb 0x140098ed2
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140099368
jmp 0x140098e8e
test rcx, rcx
je 0x140098ee1
call fcn.1400ffe40
mov r12, rax
jmp 0x140098ee4
mov r12, r14
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x58], r15
mov r8, rdi
lea rdx, [0x140300a30]
mov rcx, r12
call sub.VCRUNTIME140.dll_memcpy
mov byte [r12 + rdi], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], r14
mov qword [rbp - 0x78], r14
lea rdi, [0x1403009b0]
nop
inc rbx
cmp byte [rdi + rbx], 0
jne 0x140098f20
cmp rbx, rsi
ja 0x14009935c
mov qword [rbp - 0x78], reloc.WS2_32.dll_ntohs
cmp rbx, 0xf
ja 0x140098f5e
mov qword [rbp - 0x80], rbx
mov r8, rbx
mov rdx, rdi
lea rcx, [rsp + 0x70]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsp + rbx + 0x70], 0
jmp 0x140098feb
mov rax, rbx
or rax, 0xf
cmp rax, rsi
jbe 0x140098f97
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1400ffe40
test rax, rax
je 0x14009903f
lea r14, [rax + 0x27]
and r14, 0xffffffffffffffe0
mov qword [r14 - 8], rax
jmp 0x140098fcb
mov rsi, rax
cmp rax, 0x16
cmovb rsi, r13
lea rcx, [rsi + 1]
cmp rcx, 0x1000
jb 0x140098fbe
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14009936e
jmp 0x140098f78
test rcx, rcx
je 0x140098fcb
call fcn.1400ffe40
mov r14, rax
mov qword [rsp + 0x70], r14
mov qword [rbp - 0x80], rbx
mov qword [rbp - 0x78], rsi
mov r8, rbx
mov rdx, rdi
mov rcx, r14
call sub.VCRUNTIME140.dll_memcpy
mov byte [r14 + rbx], 0
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x70]
lea r8, [rsp + 0x70]
lea rdx, [rbp + 0x10]
lea rcx, [rbp - 0x40]
call fcn.1400948b0
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 0xf
jbe 0x14009904c
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140099046
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140099046
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400ffe84
nop
mov rdx, qword [rbp - 0x58]
cmp rdx, 0xf
jbe 0x14009908b
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140099085
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140099085
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400ffe84
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x1400990c4
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400990bf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14009911d
call fcn.1400ffe84
cmp byte [rbp - 0x40], 0
je 0x1400991cc
mov dword [0x1402fc508], 0x43dd0000
mov dword [0x1402fc50c], 0x43a50000
mov word [0x1402fc506], 0x100
mov rdx, qword [rbp + 0x28]
cmp rdx, 0xf
jbe 0x140099129
inc rdx
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140099124
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140099124
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400ffe84
movdqa xmm0, xmmword [0x1402c05a0]
movdqu xmmword [rbp + 0x20], xmm0
mov byte [rbp + 0x10], 0
mov rcx, qword [0x140300750]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x9c]
addss xmm1, dword [0x1402c04cc]
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x98]
addss xmm0, xmm6
movss dword [rax + 0x118], xmm0
movss dword [rax + 0x11c], xmm1
mov byte [rax + 0x159], 1
movaps xmm0, xmm7
call fcn.14006d7b0
mov dword [rsp + 0x40], 0x42be0000
mov dword [rsp + 0x44], 0x41a00000
lea rdx, [rsp + 0x40]
lea rcx, str.Exit
call fcn.140096230
test al, al
je 0x1400991d8
mov ecx, 0x539
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 0x539
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rcx, qword [0x140300750]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
movss xmm2, dword [rax + 0x2c]
subss xmm2, dword [rax + 0x9c]
addss xmm2, dword [0x1402c04e8]
movss xmm1, dword [rax + 0x28]
subss xmm1, dword [rax + 0x98]
addss xmm1, xmm6
movss dword [rax + 0x118], xmm1
movss dword [rax + 0x11c], xmm2
mov byte [rax + 0x159], 1
movaps xmm0, xmm7
call fcn.14006d7b0
mov dword [rsp + 0x40], 0x42be0000
mov dword [rsp + 0x44], 0x41a00000
lea rdx, [rsp + 0x40]
lea rcx, str.Login_page
call fcn.140096230
test al, al
je 0x14009926c
mov byte [reloc.WS2_32.dll_accept], 1
mov byte [0x1402fc506], 0
mov rcx, qword [0x140300750]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov r8, qword [rcx + 0x4040]
movsxd rdx, dword [r8 + 0x1e0]
mov rax, qword [r8 + 0x1e8]
mov ecx, dword [rax + rdx*4 - 4]
mov dword [r8 + 0x1d8], ecx
lea eax, [rdx - 1]
mov dword [r8 + 0x1e0], eax
call fcn.1400aab70
mov rdx, qword [rbp]
cmp rdx, 0xf
jbe 0x1400992e7
inc rdx
mov rcx, qword [rbp - 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400992e2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140099319
call fcn.1400ffe84
mov rdx, qword [rbp - 0x20]
cmp rdx, 0xf
jbe 0x140099325
inc rdx
mov rcx, qword [rbp - 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140099320
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140099320
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400ffe84
mov rcx, qword [rbp + 0x30]
xor rcx, rsp
call fcn.1400ffe20
lea r11, [rsp + 0x160]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.14005af10
nop
call fcn.14005ae70
nop
call fcn.14005ae70
nop
call fcn.14005ae70
nop
call fcn.14005af10
nop
call fcn.14005af10
int3