Function at 0x18004b6b0
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xa0]
sub rsp, 0x1a0
mov rax, qword [0x1800ce080]
xor rax, rsp
mov qword [rbp + 0x90], rax
mov dword [rbp + 0x80], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x40], xmm0
movdqa xmm1, xmmword [0x1800c05f0]
movdqu xmmword [rbp + 0x50], xmm1
mov byte [rbp + 0x40], 0
call fcn.180058830
mov r14, rax
test rax, rax
je 0x18004bfc0
lea rdx, [0x180158fd8]
cmp qword [0x180158ff0], 0xf
cmova rdx, qword [0x180158fd8]
mov r8d, dword [0x180158fe8]
mov rcx, rax
call fcn.180058670
mov rdx, rax
lea rcx, [rbp + 0x20]
call fcn.180048920
nop
lea rdx, [0x180158ff8]
cmp qword [0x180159010], 0xf
cmova rdx, qword [0x180158ff8]
mov r8d, dword [0x180159008]
mov rcx, r14
call fcn.180058670
mov rdx, rax
lea rcx, [rbp + 0x60]
call fcn.180048920
nop
movabs rdi, 0x7fffffffffffffff
mov rax, rdi
mov rdx, qword [rbp + 0x30]
sub rax, rdx
cmp rax, 0x2b
jb 0x18004c081
lea r13, [rbp + 0x20]
mov r12, qword [rbp + 0x20]
cmp qword [rbp + 0x38], 0xf
cmova r13, r12
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x80], xmm1
lea r15, [rdx + 0x2b]
mov ebx, reloc.WS2_32.dll_ntohs
lea rsi, [rsp + 0x70]
movabs rax, 0x8000000000000000
lea ecx, [rbx + 7]
cmp r15, rbx
jbe 0x18004b856
mov rbx, r15
or rbx, 0xf
cmp rbx, rdi
jbe 0x18004b812
mov rbx, rdi
add rax, 0x27
mov rcx, rax
call fcn.1800a6854
test rax, rax
je 0x18004b835
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
mov rdx, qword [rbp + 0x30]
jmp 0x18004b851
cmp rbx, rcx
cmovb rbx, rcx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x18004b83c
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18004c075
jmp 0x18004b7f3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x18004b84f
call fcn.1800a6854
mov rsi, rax
mov rdx, qword [rbp + 0x30]
jmp 0x18004b851
xor esi, esi
mov qword [rsp + 0x70], rsi
mov qword [rbp - 0x80], r15
mov qword [rbp - 0x78], rbx
movups xmm0, xmmword [str.http:__3.142.247.110:3030_api_init_version]
movups xmmword [rsi], xmm0
movups xmm1, xmmword [0x1800bf508]
movups xmmword [rsi + 0x10], xmm1
movsd xmm0, qword [0x1800bf518]
movsd qword [rsi + 0x20], xmm0
movzx eax, word [0x1800bf520]
mov word [rsi + 0x28], ax
movzx eax, byte [0x1800bf522]
mov byte [rsi + 0x2a], al
lea rcx, [rsi + 0x2b]
mov r8, rdx
mov rdx, r13
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsi + r15], 0
mov r8d, reloc.WS2_32.dll_ntohs
lea rdx, str.applicationId
lea rcx, [rsp + 0x70]
call fcn.180048b60
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x60], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x60], xmm1
xor r15d, r15d
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], r15b
lea rdx, [rbp + 0x60]
lea rcx, [rbp - 0x70]
call fcn.18004c0a0
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x10], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], r15b
mov rdx, qword [rbp - 0x58]
cmp rdx, 0xf
jbe 0x18004b968
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004b963
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18004b963
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800a6c00
movdqa xmm0, xmmword [0x1800c05f0]
movdqu xmmword [rbp - 0x60], xmm0
mov byte [rbp - 0x70], 0
mov rdx, qword [rbp - 0x78]
cmp rdx, 0xf
jbe 0x18004b9b8
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004b9b3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18004b9b3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800a6c00
movdqa xmm0, xmmword [0x1800c05f0]
movdqu xmmword [rbp - 0x80], xmm0
mov byte [rsp + 0x70], 0
lea r8, [rbp - 0x10]
cmp qword [rbp + 8], 0xf
cmova r8, qword [rbp - 0x10]
mov edx, 0x2712
mov rcx, r14
call fcn.18005b1a0
lea rdx, str.Content_Type:_application_json
xor ecx, ecx
call fcn.180058ae0
lea rdx, str.user_agent:_xrc
mov rcx, rax
call fcn.180058ae0
mov r8, rax
mov edx, 0x2727
mov rcx, r14
call fcn.18005b1a0
lea r8, [0x18004b630]
mov edx, 0x4e2b
mov rcx, r14
call fcn.18005b1a0
lea r8, [rbp + 0x40]
mov edx, 0x2711
mov rcx, r14
call fcn.18005b1a0
mov rcx, r14
call fcn.1800588f0
mov ebx, eax
lea r8, [rbp - 0x50]
mov edx, 0x200002
mov rcx, r14
call fcn.180058800
test ebx, ebx
jne 0x18004c01c
mov qword [rsp + 0x68], r15
lea r8, [rsp + 0x30]
lea rdx, [rbp + 0x40]
lea rcx, [rbp + 0x10]
call fcn.18004c7c0
nop
movabs r13, 0x94a21cf1e7f13c65
mov qword [rbp + 0x80], r13
movabs r14, 0xd40426096d53c4e
mov qword [rbp + 0x88], r14
movabs rax, 0x94c77b9094825908
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], r14
movaps xmm0, xmmword [rbp - 0x40]
xorps xmm0, xmmword [rbp + 0x80]
movdqa xmmword [rsp + 0x70], xmm0
lea rdx, [rsp + 0x70]
lea rcx, [rbp + 0x10]
call fcn.18004c8e0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], r15
mov qword [rbp - 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x30], bl
mov dword [rbp + 0x80], Ordinal_41
cmp byte [rax], 3
jne 0x18004baf1
mov rdx, qword [rax + 8]
jmp 0x18004baf4
mov rdx, r15
lea rcx, [rbp - 0x30]
call fcn.18004c140
nop
mov ecx, dword [rbp - 0x50]
cmp ecx, 0xc8
jne 0x18004be6f
mov byte [0x180158fd0], 1
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], r15
mov qword [rbp - 0x78], r15
mov rbx, qword [rbp - 0x20]
lea rsi, [rbp - 0x30]
cmp qword [rbp - 0x18], 0xf
cmova rsi, qword [rbp - 0x30]
cmp rbx, rdi
ja 0x18004c06f
cmp rbx, 0xf
ja 0x18004bb5e
mov qword [rbp - 0x80], rbx
mov qword [rbp - 0x78], reloc.WS2_32.dll_ntohs
movups xmm0, xmmword [rsi]
movups xmmword [rsp + 0x70], xmm0
jmp 0x18004bbf4
mov rax, rbx
or rax, 0xf
cmp rax, rdi
jbe 0x18004bb96
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1800a6854
mov rcx, rax
test rax, rax
je 0x18004bbc2
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x18004bbd8
mov rdi, rax
cmp rax, 0x16
mov eax, reloc.WLDAP32.dll_Ordinal_22
cmovb rdi, rax
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x18004bbc9
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18004c07b
jmp 0x18004bb78
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x18004bbd5
call fcn.1800a6854
jmp 0x18004bbd8
mov rax, r15
mov qword [rsp + 0x70], rax
mov qword [rbp - 0x80], rbx
mov qword [rbp - 0x78], rdi
lea r8, [rbx + 1]
mov rdx, rsi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
lea r8, [rsp + 0x70]
call fcn.18004a780
mov qword [rsp + 0x68], r15
lea r8, [rsp + 0x30]
lea rdx, [rbp + 0x40]
lea rcx, [rbp - 0x40]
call fcn.18004c7c0
nop
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x78], r14
movabs rax, 0x94a21cf1e788590e
mov qword [rbp + 0x80], rax
mov qword [rbp + 0x88], r14
movaps xmm0, xmmword [rbp + 0x80]
xorps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm0
lea rdx, [rsp + 0x70]
lea rcx, [rbp - 0x40]
call fcn.18004c8e0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], r15
mov qword [rbp - 0x58], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x70], 0
mov dword [rbp + 0x80], reloc.WS2_32.dll___WSAFDIsSet
cmp byte [rax], 3
jne 0x18004bc85
mov rdx, qword [rax + 8]
jmp 0x18004bc88
mov rdx, r15
lea rcx, [rbp - 0x70]
call fcn.18004c140
nop
mov qword [rbp + 0x80], r13
mov qword [rbp + 0x88], r14
movabs rax, 0x94cc739894835913
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], r14
movaps xmm0, xmmword [rsp + 0x70]
xorps xmm0, xmmword [rbp + 0x80]
movdqa xmmword [rsp + 0x70], xmm0
lea rdx, [rsp + 0x70]
lea rcx, [rbp - 0x40]
call fcn.18004c8e0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], r15
mov qword [rbp - 0x78], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x70], 0
mov dword [rbp + 0x80], 0x257
cmp byte [rax], 3
jne 0x18004bd03
mov rdx, qword [rax + 8]
jmp 0x18004bd06
mov rdx, r15
lea rcx, [rsp + 0x70]
call fcn.18004c140
nop
lea r9, [rbp - 0x70]
mov rdi, qword [rbp - 0x70]
mov r13, qword [rbp - 0x58]
cmp r13, 0xf
cmova r9, rdi
mov rax, qword [0x1801590f0]
mov rsi, qword [rbp - 0x60]
cmp rsi, rax
ja 0x18004bd63
lea rbx, [0x1801590d8]
cmp rax, 0xf
cmova rbx, qword [0x1801590d8]
mov qword [0x1801590e8], rsi
mov r8, rsi
mov rdx, r9
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rsi + rbx], 0
jmp 0x18004bd7a
mov rdx, rsi
lea rcx, [0x1801590d8]
call fcn.180048be0
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x70]
lea r9, [rsp + 0x70]
mov rbx, qword [rsp + 0x70]
mov r15, qword [rbp - 0x78]
cmp r15, 0xf
cmova r9, rbx
mov rax, qword [0x180159110]
mov r14, qword [rbp - 0x80]
cmp r14, rax
ja 0x18004bdcf
lea rsi, [0x1801590f8]
cmp rax, 0xf
cmova rsi, qword [0x1801590f8]
mov qword [0x180159108], r14
mov r8, r14
mov rdx, r9
mov rcx, rsi
call sub.VCRUNTIME140.dll_memmove
mov byte [r14 + rsi], 0
jmp 0x18004bde7
mov rdx, r14
lea rcx, [0x1801590f8]
call fcn.180048be0
mov r15, qword [rbp - 0x78]
mov rbx, qword [rsp + 0x70]
cmp r15, 0xf
jbe 0x18004be22
lea rdx, [r15 + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x18004be19
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18004be19
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.1800a6c00
nop
cmp r13, 0xf
jbe 0x18004be5d
lea rdx, [r13 + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x18004be54
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18004be54
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rdi
call fcn.1800a6c00
nop
movzx edx, byte [rbp - 0x40]
lea rcx, [rbp - 0x38]
call fcn.18004c1d0
xor r15d, r15d
jmp 0x18004be96
lea eax, [rcx - 0x190]
cmp eax, 1
jbe 0x18004bff9
cmp ecx, 0x194
je 0x18004bff9
cmp ecx, 0x1f4
je 0x18004bff9
mov rdx, qword [rbp - 0x18]
cmp rdx, 0xf
jbe 0x18004bed4
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004becf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18004becf
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800a6c00
mov qword [rbp - 0x20], r15
mov qword [rbp - 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x30], 0
movzx edx, byte [rbp + 0x10]
lea rcx, [rbp + 0x18]
call fcn.18004c1d0
nop
mov rdx, qword [rbp + 8]
cmp rdx, 0xf
jbe 0x18004bf30
inc rdx
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004bf2b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18004bf2b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800a6c00
movdqa xmm0, xmmword [0x1800c05f0]
movdqu xmmword [rbp], xmm0
mov byte [rbp - 0x10], 0
mov rdx, qword [rbp + 0x78]
cmp rdx, 0xf
jbe 0x18004bf80
inc rdx
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004bf7a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18004bf7a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800a6c00
nop
mov rax, qword [rbp + 0x38]
cmp rax, 0xf
jbe 0x18004bfc0
lea rdx, [rax + 1]
mov rax, r12
cmp rdx, 0x1000
jb 0x18004bfb7
add rdx, 0x27
mov r12, qword [r12 - 8]
sub rax, r12
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18004bfb7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r12
call fcn.1800a6c00
nop
mov rdx, qword [rbp + 0x58]
cmp rdx, 0xf
jbe 0x18004c03f
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004c03a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18004c03a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
lea rcx, [rbp - 0x30]
call fcn.180048820
mov rdx, rax
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
xor r9d, r9d
xor r8d, r8d
lea rdx, str.auth_offline
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
call fcn.1800a6c00
mov rcx, qword [rbp + 0x90]
xor rcx, rsp
call fcn.1800a6750
lea r11, [rsp + 0x1a0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.180046c40
nop
call fcn.1800011b0
nop
call fcn.1800011b0
nop
call fcn.180046c40
int3