Function at 0x140099380
Capabilities:
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x68]
sub rsp, 0x140
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
mov rax, qword [0x1402de140]
xor rax, rsp
mov qword [rbp + 0x10], rax
mov rcx, qword [0x140300750]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
mov r10, qword [rax + 0x2b0]
movss xmm6, dword [rax + 0x28]
movss xmm7, dword [rax + 0x2c]
movaps xmm0, xmmword [0x1402c06a0]
movups xmmword [rsp + 0x40], xmm0
lea rcx, [rsp + 0x40]
call fcn.14005db90
movaps xmm1, xmm7
addss xmm1, dword [0x1402c04f8]
movaps xmm0, xmm6
addss xmm0, dword [0x1402c0514]
movss dword [rbp - 0x70], xmm0
movss dword [rbp - 0x6c], xmm1
movss xmm0, dword [0x1402c0424]
addss xmm7, xmm0
addss xmm6, xmm0
movss dword [rsp + 0x40], xmm6
movss dword [rsp + 0x44], xmm7
movss dword [rsp + 0x30], xmm0
xorps xmm0, xmm0
movss dword [rsp + 0x20], xmm0
mov r9d, eax
lea r8, [rbp - 0x70]
lea rdx, [rsp + 0x40]
mov rcx, r10
call fcn.140080d70
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.1400ffe40
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x60], Ordinal_27
mov qword [rsp + 0x68], Ordinal_33
movups xmm0, xmmword [str.http:__193.0.166.91:1337]
movups xmmword [rax], xmm0
movsd xmm0, qword [0x1402be7f8]
movsd qword [rax + 0x10], xmm0
mov byte [rax + 0x18], 0
mov byte [rbp - 0x60], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x58], xmm0
xor r12d, r12d
mov qword [rbp - 0x48], r12
mov qword [rbp - 0x40], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x58], r12b
lea rdx, [rsp + 0x50]
lea rcx, [rbp - 0x38]
call fcn.14009b120
lea ecx, [r12 + 3]
call fcn.1400aabb0
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x140099516
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140099511
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140099511
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400ffe84
mov rcx, qword [0x140300750]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x9c]
addss xmm1, dword [0x1402c047c]
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x98]
addss xmm0, dword [0x1402c0490]
movss dword [rax + 0x118], xmm0
movss dword [rax + 0x11c], xmm1
mov byte [rax + 0x159], 1
movss xmm7, dword [0x1402c04ec]
movaps xmm0, xmm7
call fcn.14006d7b0
lea r9, [0x1402be570]
lea r14, [0x1403009b0]
mov rdx, r14
lea rcx, str.username
call fcn.1400963c0
mov r9, qword [0x140300750]
mov rax, qword [r9 + 0x4040]
mov byte [rax + 0xcc], 1
mov r8, qword [r9 + 0x4040]
movsxd rdx, dword [r8 + 0x1e0]
mov rax, qword [r8 + 0x1e8]
mov ecx, dword [rax + rdx*4 - 4]
mov dword [r8 + 0x1d8], ecx
lea eax, [rdx - 1]
mov dword [r8 + 0x1e0], eax
mov rax, qword [r9 + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [r9 + 0x4040]
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x9c]
addss xmm1, dword [0x1402c0494]
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x98]
addss xmm0, dword [0x1402c0490]
movss dword [rax + 0x118], xmm0
movss dword [rax + 0x11c], xmm1
mov byte [rax + 0x159], 1
movaps xmm0, xmm7
call fcn.14006d7b0
lea r9, [0x1402bdc70]
lea r13, [0x140300a30]
mov rdx, r13
lea rcx, str.password
call fcn.1400963c0
mov r9, qword [0x140300750]
mov rax, qword [r9 + 0x4040]
mov byte [rax + 0xcc], 1
mov r8, qword [r9 + 0x4040]
movsxd rdx, dword [r8 + 0x1e0]
mov rax, qword [r8 + 0x1e8]
mov ecx, dword [rax + rdx*4 - 4]
mov dword [r8 + 0x1d8], ecx
lea eax, [rdx - 1]
mov dword [r8 + 0x1e0], eax
mov rax, qword [r9 + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [r9 + 0x4040]
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x9c]
addss xmm1, dword [0x1402c04a8]
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x98]
movss xmm6, dword [0x1402c04a4]
addss xmm0, xmm6
movss dword [rax + 0x118], xmm0
movss dword [rax + 0x11c], xmm1
mov byte [rax + 0x159], 1
movaps xmm0, xmm7
call fcn.14006d7b0
mov dword [rsp + 0x40], 0x42be0000
mov dword [rsp + 0x44], 0x41a00000
lea rdx, [rsp + 0x40]
lea rcx, str.Login
call fcn.140096230
test al, al
je 0x140099a17
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], r12
mov rbx, 0xffffffffffffffff
mov rdi, rbx
inc rdi
cmp byte [rdi + r13], 0
jne 0x140099740
movabs rsi, 0x7fffffffffffffff
cmp rdi, rsi
ja 0x140099c4a
mov eax, reloc.WS2_32.dll_shutdown
movabs r15, 0x8000000000000000
mov qword [rsp + 0x68], reloc.WS2_32.dll_ntohs
cmp rdi, 0xf
ja 0x14009979a
mov qword [rsp + 0x60], rdi
mov r8, rdi
mov rdx, r13
lea rcx, [rsp + 0x50]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsp + rdi + 0x50], 0
jmp 0x140099834
mov r14, rdi
or r14, 0xf
cmp r14, rsi
jbe 0x1400997cc
mov r14, rsi
lea rax, [r15 + 0x27]
mov rcx, rax
call fcn.1400ffe40
test rax, rax
je 0x1400999fa
lea r15, [rax + 0x27]
and r15, 0xffffffffffffffe0
mov qword [r15 - 8], rax
jmp 0x140099801
cmp r14, rax
cmovb r14, rax
lea rcx, [r14 + 1]
cmp rcx, 0x1000
jb 0x1400997ef
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140099c3e
jmp 0x1400997ad
test rcx, rcx
je 0x1400997fe
call fcn.1400ffe40
mov r15, rax
jmp 0x140099801
mov r15, r12
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x68], r14
mov r8, rdi
mov rdx, r13
mov rcx, r15
call sub.VCRUNTIME140.dll_memcpy
mov byte [r15 + rdi], 0
lea r14, [0x1403009b0]
movabs r15, 0x8000000000000000
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x78], r12
inc rbx
cmp byte [r14 + rbx], 0
jne 0x140099844
cmp rbx, rsi
ja 0x140099c38
mov qword [rbp - 0x78], reloc.WS2_32.dll_ntohs
cmp rbx, 0xf
ja 0x140099883
mov qword [rbp - 0x80], rbx
mov r8, rbx
mov rdx, r14
lea rcx, [rsp + 0x70]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsp + rbx + 0x70], 0
jmp 0x14009990f
mov rax, rbx
or rax, 0xf
cmp rax, rsi
jbe 0x1400998b2
lea rax, [r15 + 0x27]
mov rcx, rax
call fcn.1400ffe40
test rax, rax
je 0x14009995a
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x1400998f0
mov rsi, rax
cmp rax, 0x16
mov eax, reloc.WS2_32.dll_shutdown
cmovb rsi, rax
lea rcx, [rsi + 1]
cmp rcx, 0x1000
jb 0x1400998de
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140099c44
jmp 0x140099893
test rcx, rcx
je 0x1400998ed
call fcn.1400ffe40
mov rdi, rax
jmp 0x1400998f0
mov rdi, r12
mov qword [rsp + 0x70], rdi
mov qword [rbp - 0x80], rbx
mov qword [rbp - 0x78], rsi
mov r8, rbx
mov rdx, r14
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + rbx], 0
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x70]
lea rdx, [rbp - 0x10]
lea rcx, [rbp - 0x60]
call fcn.140093ca0
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 0xf
jbe 0x140099967
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140099961
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140099961
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400ffe84
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x1400999a0
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14009999b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400999fa
call fcn.1400ffe84
cmp byte [rbp - 0x60], 0
je 0x1400999c8
mov dword [0x1402fc508], 0x43dd0000
mov dword [0x1402fc50c], 0x43a50000
mov byte [0x1402fc505], 0
mov byte [0x1402fc507], 1
mov rdx, qword [rbp + 8]
cmp rdx, 0xf
jbe 0x140099a06
inc rdx
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140099a01
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140099a01
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400ffe84
movdqa xmm0, xmmword [0x1402c05a0]
movdqu xmmword [rbp], xmm0
mov byte [rbp - 0x10], 0
mov rcx, qword [0x140300750]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x9c]
addss xmm1, dword [0x1402c04c0]
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x98]
addss xmm0, xmm6
movss dword [rax + 0x118], xmm0
movss dword [rax + 0x11c], xmm1
mov byte [rax + 0x159], 1
movaps xmm0, xmm7
call fcn.14006d7b0
mov dword [rsp + 0x40], 0x42be0000
mov dword [rsp + 0x44], 0x41a00000
lea rdx, [rsp + 0x40]
lea rcx, str.Exit
call fcn.140096230
test al, al
je 0x140099aa9
mov ecx, 0x539
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rcx, qword [0x140300750]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4040]
movss xmm2, dword [rax + 0x2c]
subss xmm2, dword [rax + 0x9c]
addss xmm2, dword [0x1402c04e0]
movss xmm1, dword [rax + 0x28]
subss xmm1, dword [rax + 0x98]
addss xmm1, xmm6
movss dword [rax + 0x118], xmm1
movss dword [rax + 0x11c], xmm2
mov byte [rax + 0x159], 1
movaps xmm0, xmm7
call fcn.14006d7b0
mov dword [rsp + 0x40], 0x42be0000
mov dword [rsp + 0x44], 0x41a00000
lea rdx, [rsp + 0x40]
lea rcx, str.Registration_page
call fcn.140096230
test al, al
je 0x140099b38
mov word [0x1402fc505], 0x100
mov rcx, qword [0x140300750]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov r8, qword [rcx + 0x4040]
movsxd rdx, dword [r8 + 0x1e0]
mov rax, qword [r8 + 0x1e8]
mov ecx, dword [rax + rdx*4 - 4]
mov dword [r8 + 0x1d8], ecx
lea eax, [rdx - 1]
mov dword [r8 + 0x1e0], eax
call fcn.1400aab70
mov rdx, qword [rbp - 0x20]
cmp rdx, 0xf
jbe 0x140099bb3
inc rdx
mov rcx, qword [rbp - 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140099bae
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140099bf5
call fcn.1400ffe84
mov qword [rbp - 0x28], r12
mov qword [rbp - 0x20], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x38], 0
mov rdx, qword [rbp - 0x40]
cmp rdx, 0xf
jbe 0x140099c01
inc rdx
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140099bfc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140099bfc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400ffe84
mov rcx, qword [rbp + 0x10]
xor rcx, rsp
call fcn.1400ffe20
lea r11, [rsp + 0x140]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.14005af10
nop
call fcn.14005ae70
nop
call fcn.14005ae70
nop
call fcn.14005af10
int3