Function at 0x1400580a0
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x100]
sub rsp, 0x200
mov rax, qword [0x1402ca080]
xor rax, rsp
mov qword [rbp + 0xf0], rax
mov rbx, rdx
mov r15, rcx
mov qword [rbp - 0x58], rdx
xor edi, edi
mov dword [rsp + 0x40], edi
cmp byte [rcx], dil
jne 0x140058172
xor r9d, r9d
xor r8d, r8d
lea rdx, str.auth_not_initialized
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
nop
mov rdx, qword [rbx + 0x18]
cmp rdx, 0xf
jbe 0x140058139
inc rdx
mov rcx, qword [rbx]
cmp rdx, 0x1000
jb 0x140058134
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140058e4f
mov rcx, r8
call fcn.1400b2d6c
mov byte [rbx], 0
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov qword [rbx + 0x10], rdi
mov rcx, qword [rbp + 0xf0]
xor rcx, rsp
call fcn.1400b2d10
mov rbx, qword [rsp + 0x250]
add rsp, 0x200
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
xorps xmm0, xmm0
movups xmmword [rbp + 0xa8], xmm0
movdqa xmm1, xmmword [0x1402bac10]
movdqu xmmword [rbp + 0xb8], xmm1
mov byte [rbp + 0xa8], 0
call fcn.140064df0
mov qword [rsp + 0x30], rax
test rax, rax
je 0x140058de4
mov rdx, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x1400581b3
mov rdx, qword [rbx]
mov r8d, dword [rbx + 0x10]
mov rcx, rax
call fcn.140064c30
xorps xmm0, xmm0
movups xmmword [rbp + 0x68], xmm0
mov qword [rbp + 0x78], rdi
mov qword [rbp + 0x80], rdi
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400581e0
mov rdx, rax
lea rcx, [rbp + 0x68]
call fcn.1400017c0
nop
lea rdx, [rsp + 0x48]
call fcn.140058e70
mov qword [rbp + 0xd0], rax
movabs rsi, 0x7fffffffffffffff
mov rcx, rsi
mov r13, qword [rbp + 0x78]
sub rcx, r13
cmp rcx, 0x2b
jb 0x140058e68
lea rdx, [rbp + 0x68]
cmp qword [rbp + 0x80], 0xf
cmova rdx, qword [rbp + 0x68]
mov qword [rsp + 0x40], rdx
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
lea r12, [r13 + 0x2b]
mov edi, reloc.WS2_32.dll_ntohs
lea r14, [rbp - 0x50]
movabs rax, 0x8000000000000000
lea ecx, [rdi + 7]
cmp r12, rdi
jbe 0x1400582e2
mov rdi, r12
or rdi, 0xf
cmp rdi, rsi
jbe 0x14005829d
mov rdi, rsi
add rax, 0x27
mov rcx, rax
call fcn.1400b2d30
test rax, rax
je 0x1400582c0
lea r14, [rax + 0x27]
and r14, 0xffffffffffffffe0
mov qword [r14 - 8], rax
mov rdx, qword [rsp + 0x40]
jmp 0x1400582de
cmp rdi, rcx
cmovb rdi, rcx
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x1400582c7
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140058e5c
jmp 0x14005827d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x1400582db
call fcn.1400b2d30
mov r14, rax
mov rdx, qword [rsp + 0x40]
jmp 0x1400582de
xor r14d, r14d
mov qword [rbp - 0x50], r14
mov qword [rbp - 0x40], r12
mov qword [rbp - 0x38], rdi
movups xmm0, xmmword [str.http:__3.142.247.110:3030_api_login_userId]
movups xmmword [r14], xmm0
movups xmm1, xmmword [0x1402b9b20]
movups xmmword [r14 + 0x10], xmm1
movsd xmm0, qword [0x1402b9b30]
movsd qword [r14 + 0x20], xmm0
movzx eax, word [0x1402b9b38]
mov word [r14 + 0x28], ax
movzx eax, byte [0x1402b9b3a]
mov byte [r14 + 0x2a], al
lea rcx, [r14 + 0x2b]
mov r8, r13
call sub.VCRUNTIME140.dll_memcpy
mov byte [r14 + r12], 0
mov r8d, 6
lea rdx, str.hwid
lea rcx, [rbp - 0x50]
call fcn.1400547b0
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x68], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x78], xmm1
xor r13d, r13d
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], r13b
mov r9, qword [rbp + 0xd0]
lea r8, [rsp + 0x68]
lea rcx, [rbp + 0x88]
call fcn.14005a460
nop
mov rdx, qword [rbp - 0x80]
cmp rdx, 0xf
jbe 0x1400583c9
inc rdx
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400583c3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400583c3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b2d6c
nop
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x140058407
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140058402
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140058402
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b2d6c
movdqa xmm0, xmmword [0x1402bac10]
movdqu xmmword [rbp - 0x40], xmm0
mov byte [rbp - 0x50], 0
mov rdx, qword [rsp + 0x60]
cmp rdx, 0xf
jbe 0x140058458
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140058453
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140058453
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b2d6c
movdqa xmm0, xmmword [0x1402bac10]
movdqu xmmword [rsp + 0x58], xmm0
mov byte [rsp + 0x48], 0
lea r8, [rbp + 0x88]
cmp qword [rbp + 0xa0], 0xf
cmova r8, qword [rbp + 0x88]
mov edx, 0x2712
mov rdi, qword [rsp + 0x30]
mov rcx, rdi
call fcn.140067760
lea rdx, str.user_agent:_xrc
xor ecx, ecx
call fcn.1400650a0
mov r8, rax
mov edx, 0x2727
mov rcx, rdi
call fcn.140067760
lea r8, [0x1400575a0]
mov edx, 0x4e2b
mov rcx, rdi
call fcn.140067760
lea r8, [rbp + 0xa8]
mov edx, 0x2711
mov rcx, rdi
call fcn.140067760
mov rcx, rdi
call fcn.140064eb0
mov r14d, eax
lea r8, [rbp - 0x30]
mov edx, 0x200002
mov rcx, rdi
call fcn.140064dc0
mov qword [rbp - 0x60], r13
lea r8, [rsp + 0x68]
lea rdx, [rbp + 0xa8]
lea rcx, [rbp - 0x28]
call fcn.140059870
nop
movabs rax, 0x94a21cf1e7f13c65
mov qword [rbp + 0xd0], rax
movabs r12, 0xd40426096d53c4e
mov qword [rbp + 0xd8], r12
movabs rax, 0x94c77b9094825908
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], r12
movaps xmm0, xmmword [rsp + 0x30]
xorps xmm0, xmmword [rbp + 0xd0]
movdqa xmmword [rsp + 0x30], xmm0
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x28]
call fcn.140059990
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], r13
mov qword [rbp - 0x38], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x50], 0
mov dword [rsp + 0x40], Ordinal_41
cmp byte [rax], 3
jne 0x140058591
mov rdx, qword [rax + 8]
jmp 0x140058594
mov rdx, r13
lea rcx, [rbp - 0x50]
call fcn.140059200
nop
test r14d, r14d
jne 0x140058e27
mov ecx, dword [rbp - 0x30]
cmp ecx, 0xc8
jne 0x140058b70
lea rdx, [rbp - 0x50]
lea rcx, [rsp + 0x48]
call fcn.1400016a0
mov rdi, rax
mov qword [rsp + 0x30], rax
mov byte [r15 + 0x148], 1
lea rcx, [r15 + 0xe8]
mov rdx, rax
call fcn.140059200
nop
mov rdx, qword [rdi + 0x18]
cmp rdx, 0xf
jbe 0x14005861e
mov rcx, qword [rdi]
inc rdx
cmp rdx, 0x1000
jb 0x140058619
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400586a4
mov rcx, r8
call fcn.1400b2d6c
mov qword [rdi + 0x10], r13
mov qword [rdi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rdi], 0
movabs rdi, 0x94a21cf1e7f13c65
mov qword [rbp + 0xd0], rdi
mov qword [rbp + 0xd8], r12
movabs rax, 0xf1cf7d9f95944f10
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], r12
movaps xmm0, xmmword [rsp + 0x30]
xorps xmm0, xmmword [rbp + 0xd0]
movdqa xmmword [rsp + 0x30], xmm0
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x28]
call fcn.140059990
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x48], xmm0
mov qword [rbp + 0x58], r13
mov qword [rbp + 0x60], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x48], 0
mov dword [rsp + 0x40], reloc.WS2_32.dll___WSAFDIsSet
cmp byte [rax], 3
jne 0x1400586ab
mov rdx, qword [rax + 8]
jmp 0x1400586ae
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov rdx, r13
lea rcx, [rbp + 0x48]
call fcn.140059200
nop
mov qword [rbp + 0xd0], rdi
mov qword [rbp + 0xd8], r12
movabs rax, 0x94a265838e814400
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], r12
movaps xmm0, xmmword [rsp + 0x30]
xorps xmm0, xmmword [rbp + 0xd0]
movdqa xmmword [rsp + 0x30], xmm0
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x28]
call fcn.140059990
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x28], xmm0
mov qword [rbp + 0x38], r13
mov qword [rbp + 0x40], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x28], 0
mov dword [rsp + 0x40], 0x857
cmp byte [rax], 3
jne 0x140058725
mov rdx, qword [rax + 8]
jmp 0x140058728
mov rdx, r13
lea rcx, [rbp + 0x28]
call fcn.140059200
nop
mov qword [rbp + 0xd0], rdi
mov qword [rbp + 0xd8], r12
movabs rsi, 0xd6c6798586944e06
mov qword [rsp + 0x30], rsi
movabs r14, 0xd40426096d53c37
mov qword [rsp + 0x38], r14
movaps xmm0, xmmword [rsp + 0x30]
xorps xmm0, xmmword [rbp + 0xd0]
movdqa xmmword [rsp + 0x30], xmm0
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x28]
call fcn.140059990
lea rdx, [0x1402b9b3c]
mov rcx, rax
call fcn.140059990
nop
xorps xmm0, xmm0
movups xmmword [rbp + 8], xmm0
mov qword [rbp + 0x18], r13
mov qword [rbp + 0x20], reloc.WS2_32.dll_ntohs
mov byte [rbp + 8], 0
mov dword [rsp + 0x40], 0x2457
cmp byte [rax], 3
jne 0x1400587b8
mov rdx, qword [rax + 8]
jmp 0x1400587bb
mov rdx, r13
lea rcx, [rbp + 8]
call fcn.140059200
nop
mov qword [rbp + 0xd0], rdi
mov qword [rbp + 0xd8], r12
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x38], r14
movaps xmm0, xmmword [rsp + 0x30]
xorps xmm0, xmmword [rbp + 0xd0]
movdqa xmmword [rsp + 0x30], xmm0
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x28]
call fcn.140059990
lea rdx, str.username
mov rcx, rax
call fcn.140059990
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x18], xmm0
mov qword [rbp - 8], r13
mov qword [rbp], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x18], 0
mov dword [rsp + 0x40], 0x1657
cmp byte [rax], 3
jne 0x140058837
mov rdx, qword [rax + 8]
jmp 0x14005883a
mov rdx, r13
lea rcx, [rbp - 0x18]
call fcn.140059200
nop
lea rcx, [r15 + 0x48]
lea rax, [rbp + 0x48]
cmp rcx, rax
je 0x140058898
lea r9, [rbp + 0x48]
cmp qword [rbp + 0x60], 0xf
cmova r9, qword [rbp + 0x48]
mov rax, qword [rcx + 0x18]
mov rdi, qword [rbp + 0x58]
cmp rdi, rax
ja 0x140058890
mov rsi, rcx
cmp rax, 0xf
jbe 0x140058878
mov rsi, qword [rcx]
mov qword [rcx + 0x10], rdi
mov r8, rdi
mov rdx, r9
mov rcx, rsi
call sub.VCRUNTIME140.dll_memmove
mov byte [rdi + rsi], 0
jmp 0x140058898
mov rdx, rdi
call fcn.140054d20
lea rcx, [r15 + 0x88]
lea rax, [rbp + 0x28]
mov r12, qword [rbp + 0x40]
cmp rcx, rax
je 0x1400588f6
lea r9, [rbp + 0x28]
cmp r12, 0xf
cmova r9, qword [rbp + 0x28]
mov rax, qword [rcx + 0x18]
mov rdi, qword [rbp + 0x38]
cmp rdi, rax
ja 0x1400588ea
mov rsi, rcx
cmp rax, 0xf
jbe 0x1400588d2
mov rsi, qword [rcx]
mov qword [rcx + 0x10], rdi
mov r8, rdi
mov rdx, r9
mov rcx, rsi
call sub.VCRUNTIME140.dll_memmove
mov byte [rdi + rsi], 0
jmp 0x1400588f6
mov rdx, rdi
call fcn.140054d20
mov r12, qword [rbp + 0x40]
lea rcx, [r15 + 0xa8]
lea rax, [rbp + 8]
mov r13, qword [rbp + 0x20]
cmp rcx, rax
je 0x140058954
lea r9, [rbp + 8]
cmp r13, 0xf
cmova r9, qword [rbp + 8]
mov rax, qword [rcx + 0x18]
mov rdi, qword [rbp + 0x18]
cmp rdi, rax
ja 0x140058948
mov rsi, rcx
cmp rax, 0xf
jbe 0x140058930
mov rsi, qword [rcx]
mov qword [rcx + 0x10], rdi
mov r8, rdi
mov rdx, r9
mov rcx, rsi
call sub.VCRUNTIME140.dll_memmove
mov byte [rdi + rsi], 0
jmp 0x140058954
mov rdx, rdi
call fcn.140054d20
mov r13, qword [rbp + 0x20]
lea rcx, [r15 + 0xc8]
lea rax, [rbp - 0x18]
mov r14, qword [rbp]
cmp rcx, rax
je 0x1400589b2
lea r9, [rbp - 0x18]
cmp r14, 0xf
cmova r9, qword [rbp - 0x18]
mov rax, qword [rcx + 0x18]
mov rdi, qword [rbp - 8]
cmp rdi, rax
ja 0x1400589a6
mov rsi, rcx
cmp rax, 0xf
jbe 0x14005898e
mov rsi, qword [rcx]
mov qword [rcx + 0x10], rdi
mov r8, rdi
mov rdx, r9
mov rcx, rsi
call sub.VCRUNTIME140.dll_memmove
mov byte [rdi + rsi], 0
jmp 0x1400589b2
mov rdx, rdi
call fcn.140054d20
mov r14, qword [rbp]
lea rdx, [rsp + 0x48]
call fcn.140058e70
mov rsi, rax
lea rdi, [r15 + 0x68]
cmp rdi, rax
je 0x140058a32
mov rdx, qword [rdi + 0x18]
cmp rdx, 0xf
jbe 0x1400589fe
mov rcx, qword [rdi]
inc rdx
cmp rdx, 0x1000
jb 0x1400589f9
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140058a66
mov rcx, r8
call fcn.1400b2d6c
mov qword [rdi + 0x10], 0
mov qword [rdi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rdi], 0
movups xmm0, xmmword [rsi]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsi + 0x10]
movups xmmword [rdi + 0x10], xmm1
mov qword [rsi + 0x10], 0
mov qword [rsi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rsi], 0
mov rdx, qword [rsp + 0x60]
cmp rdx, 0xf
jbe 0x140058a73
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140058a6d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140058a6d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b2d6c
nop
cmp r14, 0xf
jbe 0x140058aaf
lea rdx, [r14 + 1]
mov rcx, qword [rbp - 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140058aa9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140058aa9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b2d6c
nop
cmp r13, 0xf
jbe 0x140058aeb
lea rdx, [r13 + 1]
mov rcx, qword [rbp + 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140058ae5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140058ae5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b2d6c
nop
cmp r12, 0xf
jbe 0x140058b28
lea rdx, [r12 + 1]
mov rcx, qword [rbp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140058b22
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140058b22
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b2d6c
nop
mov rax, qword [rbp + 0x60]
cmp rax, 0xf
jbe 0x140058b8b
lea rdx, [rax + 1]
mov rcx, qword [rbp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140058b62
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140058b62
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b2d6c
mov r14, qword [rbp - 0x38]
jmp 0x140058cfb
lea eax, [rcx - 0x190]
cmp eax, 1
jbe 0x140058b94
cmp ecx, 0x194
je 0x140058b94
cmp ecx, 0x1f4
je 0x140058b94
mov r14, qword [rbp - 0x38]
jmp 0x140058cfb
xorps xmm0, xmm0
movups xmmword [rbp + 0xd0], xmm0
mov qword [rbp + 0xe0], r13
mov qword [rbp + 0xe8], r13
lea r12, [rbp - 0x50]
mov r14, qword [rbp - 0x38]
cmp r14, 0xf
cmova r12, qword [rbp - 0x50]
mov rdi, qword [rbp - 0x40]
cmp rdi, rsi
ja 0x140058e56
cmp rdi, 0xf
ja 0x140058bf3
mov qword [rbp + 0xe0], rdi
mov qword [rbp + 0xe8], reloc.WS2_32.dll_ntohs
movups xmm0, xmmword [r12]
movups xmmword [rbp + 0xd0], xmm0
jmp 0x140058c8e
mov rax, rdi
or rax, 0xf
cmp rax, rsi
jbe 0x140058c2f
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1400b2d30
mov rcx, rax
test rax, rax
je 0x140058cee
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140058c6a
mov rsi, rax
cmp rax, 0x16
mov eax, reloc.WLDAP32.dll_Ordinal_22
cmovb rsi, rax
lea rcx, [rsi + 1]
cmp rcx, 0x1000
jb 0x140058c5b
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140058e62
jmp 0x140058c0d
test rcx, rcx
je 0x140058c67
call fcn.1400b2d30
jmp 0x140058c6a
mov rax, r13
mov qword [rbp + 0xd0], rax
mov qword [rbp + 0xe0], rdi
mov qword [rbp + 0xe8], rsi
lea r8, [rdi + 1]
mov rdx, r12
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rbp + 0xd0]
mov qword [rsp + 0x30], rax
mov byte [r15 + 0x148], 0
lea rcx, [r15 + 0xe8]
lea rdx, [rbp + 0xd0]
call fcn.140059200
nop
mov rdx, qword [rbp + 0xe8]
cmp rdx, 0xf
jbe 0x140058cfb
inc rdx
mov rcx, qword [rbp + 0xd0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140058cf5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140058cf5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b2d6c
nop
cmp r14, 0xf
jbe 0x140058d37
lea rdx, [r14 + 1]
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140058d31
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140058d31
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b2d6c
nop
movzx edx, byte [rbp - 0x28]
lea rcx, [rbp - 0x20]
call fcn.140059290
nop
mov rdx, qword [rbp + 0xa0]
cmp rdx, 0xf
jbe 0x140058d89
inc rdx
mov rcx, qword [rbp + 0x88]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140058d84
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140058d84
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b2d6c
movdqa xmm0, xmmword [0x1402bac10]
movdqu xmmword [rbp + 0x98], xmm0
mov byte [rbp + 0x88], 0
mov rax, qword [rbp + 0x80]
cmp rax, 0xf
jbe 0x140058de2
lea rdx, [rax + 1]
mov rcx, qword [rbp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140058ddd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140058ddd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b2d6c
xor edi, edi
mov rdx, qword [rbp + 0xc0]
cmp rdx, 0xf
jbe 0x1400580ff
inc rdx
mov rcx, qword [rbp + 0xa8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140058e45
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140058e45
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
xor r9d, r9d
xor r8d, r8d
lea rdx, str.auth_offline
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
call fcn.1400b2d6c
jmp 0x1400580ff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.140001580
nop
call fcn.1400014e0
nop
call fcn.1400014e0
nop
call fcn.140001580
int3