Function at 0x14001d610
Capabilities:
Write file on windows

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x2f8]
sub rsp, 0x3d0
mov qword [rbp - 0x68], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov rax, qword [0x14010d268]
xor rax, rsp
mov qword [rbp + 0x2c0], rax
mov rbx, rcx
mov qword [rsp + 0x38], rcx
xor r8d, r8d
lea rdx, [0x1400c9dd8]
add rcx, 0x88
call fcn.140028b00
lea rdx, [rbp - 0x80]
mov rcx, rbx
call fcn.140019ad0
nop
lea rcx, [rbx + 0x50]
mov qword [rbp - 0x70], rcx
mov rdx, rax
call fcn.140001ae0
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
mov rsi, 0xffffffffffffffff
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14001d6af
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
call fcn.140027660
cmp al, 1
je 0x14001d6c0
mov rcx, rbx
call fcn.14001aaf0
lea rcx, [rbp - 0x30]
call fcn.140016c90
nop
lea rax, [rbx + 0x60]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x20], rax
mov r9, qword [rbx + 0x28]
mov r8, qword [rbx + 0x88]
mov rdx, qword [rbx + 0x20]
lea rcx, [rbp - 0x30]
call fcn.1400237f0
xor edi, edi
cmp byte [rbx + 0x80], dil
jne 0x14001d7a8
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rbx, rax
mov rax, qword [rbp - 8]
test rax, rax
jne 0x14001d72a
call fcn.1400bd658
mov qword [rbp - 8], rax
test rax, rax
jne 0x14001d72a
lea ecx, [rdi + 0xe]
call qword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x14001d7a3
xor r8d, r8d
xor edx, edx
mov rcx, rax
call fcn.1400bd788
lea rax, [rbp - 0x30]
mov qword [rbp - 0x20], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [rbp - 0x18], eax
lea rcx, [0x1401113c8]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rax, qword [0x1401113f0]
mov qword [rbp - 0x10], rax
lea rax, [rbp - 0x20]
mov qword [0x1401113f0], rax
lea rcx, [0x1401113c8]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov qword [rsp + 0x20], rdi
lea r9, [0x140012670]
mov r8, rbx
mov edx, 0x3e8
mov rcx, qword [0x1401121c0]
call qword [sym.imp.USER32.dll_DialogBoxParamW]
cmp rax, 2
je 0x14001e511
mov rbx, qword [rsp + 0x38]
cmp byte [rbp + 0x188], dil
jne 0x14001d7b9
mov rcx, rbx
call fcn.14001aaf0
lea rcx, [rbp - 0x78]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
lea rdx, [rbp - 0x78]
lea rcx, [rbp - 0x60]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__localtime64_s]
lea r9, [rbp - 0x60]
lea r8, [0x1400c9d60]
mov edx, 0x40
lea rcx, [rbp + 0x240]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll_wcsftime]
call fcn.140002320
mov rcx, rax
test rax, rax
je 0x14001e564
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x78], rax
mov rax, qword [rbx + 0x18]
mov qword [rsp + 0x20], rax
mov r9, qword [rbx + 0x10]
mov r8, qword [rbx + 8]
lea rdx, [0x1400c9de0]
lea rcx, [rsp + 0x78]
call fcn.14000bc50
mov dword [rsp + 0x4c], edi
mov dword [rsp + 0x48], edi
lea r8, [rsp + 0x4c]
lea rdx, str.CrashCount
mov rcx, qword [rsp + 0x78]
call fcn.140029240
lea r8, [rsp + 0x48]
lea rdx, str.TotalUptime
mov rcx, qword [rsp + 0x78]
call fcn.140029240
call fcn.140002320
mov rcx, rax
test rax, rax
je 0x14001e56f
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x70], rax
call fcn.140002320
mov rcx, rax
test rax, rax
je 0x14001e57a
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x68], rax
mov r8d, dword [rsp + 0x48]
lea rdx, [0x1400c9e28]
lea rcx, [rsp + 0x70]
call fcn.14000bc50
mov r8d, dword [rsp + 0x4c]
lea rdx, [0x1400c9e28]
lea rcx, [rsp + 0x68]
call fcn.14000bc50
call fcn.140002320
mov rcx, rax
test rax, rax
je 0x14001e585
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x30], rax
lea rdx, str.__xml_version_1.0__encoding_utf_8___
mov rax, rsi
nop word [rax + rax]
inc rax
cmp word [rdx + rax*2], 0
jne 0x14001d900
mov r8d, eax
lea rcx, [rsp + 0x30]
call fcn.140002f50
lea rdi, str._BugReport__BsSndRptVersion_
mov rax, rsi
inc rax
cmp word [rdi + rax*2], 0
jne 0x14001d921
mov r15, rdi
mov rbx, qword [rsp + 0x30]
sub r15, rbx
sar r15, 1
mov r13d, dword [rbx - 0x10]
test eax, eax
js 0x14001e590
movsxd rdx, eax
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsnlen]
mov r12, rax
mov ecx, 0x7fffffff
sub ecx, eax
cmp ecx, r13d
jl 0x14001e59b
lea r14d, [rax + r13]
test r14d, r14d
js 0x14001e5a6
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, r14d
or eax, ecx
jge 0x14001d995
mov edx, r14d
lea rcx, [rsp + 0x30]
call fcn.140002930
mov rbx, qword [rsp + 0x30]
cmp r15, r13
ja 0x14001d99e
lea rdi, [rbx + r15*2]
movsxd rdx, r12d
lea rcx, [rbx + r13*2]
mov r9d, r12d
mov r8, rdi
call fcn.1400020b0
cmp r14d, dword [rbx - 0xc]
jg 0x14001e559
mov dword [rbx - 0x10], r14d
movsxd rax, r14d
xor ecx, ecx
mov word [rbx + rax*2], cx
lea rdx, [0x1400c9ebc]
lea rcx, [rsp + 0x30]
call fcn.140018590
lea rdi, [0x1400c9ec0]
mov rax, rsi
inc rax
cmp word [rdi + rax*2], 0
jne 0x14001d9e2
mov r15, rdi
mov rbx, qword [rsp + 0x30]
sub r15, rbx
sar r15, 1
mov r13d, dword [rbx - 0x10]
test eax, eax
js 0x14001e5b1
movsxd rdx, eax
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsnlen]
mov r12, rax
mov ecx, 0x7fffffff
sub ecx, eax
cmp ecx, r13d
jl 0x14001e5bc
lea r14d, [rax + r13]
test r14d, r14d
js 0x14001e5c7
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, r14d
or eax, ecx
jge 0x14001da56
mov edx, r14d
lea rcx, [rsp + 0x30]
call fcn.140002930
mov rbx, qword [rsp + 0x30]
cmp r15, r13
ja 0x14001da5f
lea rdi, [rbx + r15*2]
movsxd rdx, r12d
lea rcx, [rbx + r13*2]
mov r9d, r12d
mov r8, rdi
call fcn.1400020b0
cmp r14d, dword [rbx - 0xc]
jg 0x14001e54e
mov dword [rbx - 0x10], r14d
movsxd rax, r14d
xor ecx, ecx
mov word [rbx + rax*2], cx
mov rdx, qword [rsp + 0x38]
mov rdx, qword [rdx + 8]
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x30]
call fcn.140001f00
lea rdi, str.__Vendor__AppName_
mov rax, rsi
nop dword [rax]
inc rax
cmp word [rdi + rax*2], 0
jne 0x14001dab0
mov r15, rdi
mov rbx, qword [rsp + 0x30]
sub r15, rbx
sar r15, 1
mov r13d, dword [rbx - 0x10]
test eax, eax
js 0x14001e5d2
movsxd rdx, eax
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsnlen]
mov r12, rax
mov ecx, 0x7fffffff
sub ecx, eax
cmp ecx, r13d
jl 0x14001e5dd
lea r14d, [rax + r13]
test r14d, r14d
js 0x14001e5e8
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, r14d
or eax, ecx
jge 0x14001db24
mov edx, r14d
lea rcx, [rsp + 0x30]
call fcn.140002930
mov rbx, qword [rsp + 0x30]
cmp r15, r13
ja 0x14001db2d
lea rdi, [rbx + r15*2]
movsxd rdx, r12d
lea rcx, [rbx + r13*2]
mov r9d, r12d
mov r8, rdi
call fcn.1400020b0
cmp r14d, dword [rbx - 0xc]
jg 0x14001e74d
mov dword [rbx - 0x10], r14d
movsxd rax, r14d
xor ecx, ecx
mov word [rbx + rax*2], cx
mov rax, qword [rsp + 0x38]
mov rdx, qword [rax + 0x10]
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x30]
call fcn.140001f00
lea rdi, str.__AppName__Version_
mov rax, rsi
nop word [rax + rax]
inc rax
cmp word [rdi + rax*2], 0
jne 0x14001db80
mov r15, rdi
mov rbx, qword [rsp + 0x30]
sub r15, rbx
sar r15, 1
mov r13d, dword [rbx - 0x10]
test eax, eax
js 0x14001e5f3
movsxd rdx, eax
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsnlen]
mov r12, rax
mov ecx, 0x7fffffff
sub ecx, eax
cmp ecx, r13d
jl 0x14001e5fe
lea r14d, [rax + r13]
test r14d, r14d
js 0x14001e609
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, r14d
or eax, ecx
jge 0x14001dbf4
mov edx, r14d
lea rcx, [rsp + 0x30]
call fcn.140002930
mov rbx, qword [rsp + 0x30]
cmp r15, r13
ja 0x14001dbfd
lea rdi, [rbx + r15*2]
movsxd rdx, r12d
lea rcx, [rbx + r13*2]
mov r9d, r12d
mov r8, rdi
call fcn.1400020b0
cmp r14d, dword [rbx - 0xc]
jg 0x14001e742
mov dword [rbx - 0x10], r14d
movsxd rax, r14d
xor ecx, ecx
mov word [rbx + rax*2], cx
mov rax, qword [rsp + 0x38]
mov rdx, qword [rax + 0x18]
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x30]
call fcn.140001f00
lea rdi, str.__Version__Description_
mov rax, rsi
nop word [rax + rax]
inc rax
cmp word [rdi + rax*2], 0
jne 0x14001dc50
mov r15, rdi
mov rbx, qword [rsp + 0x30]
sub r15, rbx
sar r15, 1
mov r13d, dword [rbx - 0x10]
test eax, eax
js 0x14001e614
movsxd rdx, eax
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsnlen]
mov r12, rax
mov ecx, 0x7fffffff
sub ecx, eax
cmp ecx, r13d
jl 0x14001e61f
lea r14d, [rax + r13]
test r14d, r14d
js 0x14001e62a
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, r14d
or eax, ecx
jge 0x14001dcc4
mov edx, r14d
lea rcx, [rsp + 0x30]
call fcn.140002930
mov rbx, qword [rsp + 0x30]
cmp r15, r13
ja 0x14001dccd
lea rdi, [rbx + r15*2]
movsxd rdx, r12d
lea rcx, [rbx + r13*2]
mov r9d, r12d
mov r8, rdi
call fcn.1400020b0
cmp r14d, dword [rbx - 0xc]
jg 0x14001e737
mov dword [rbx - 0x10], r14d
movsxd rax, r14d
xor ecx, ecx
mov word [rbx + rax*2], cx
lea rdi, str.___CDATA_
mov rax, rsi
inc rax
cmp word [rdi + rax*2], cx
jne 0x14001dd00
mov r15, rdi
sub r15, rbx
sar r15, 1
mov r13d, dword [rbx - 0x10]
test eax, eax
js 0x14001e635
movsxd rdx, eax
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsnlen]
mov r12, rax
mov ecx, 0x7fffffff
sub ecx, eax
cmp ecx, r13d
jl 0x14001e640
lea r14d, [rax + r13]
test r14d, r14d
js 0x14001e64b
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, r14d
or eax, ecx
jge 0x14001dd6e
mov edx, r14d
lea rcx, [rsp + 0x30]
call fcn.140002930
mov rbx, qword [rsp + 0x30]
cmp r15, r13
ja 0x14001dd77
lea rdi, [rbx + r15*2]
movsxd rdx, r12d
lea rcx, [rbx + r13*2]
mov r9d, r12d
mov r8, rdi
call fcn.1400020b0
cmp r14d, dword [rbx - 0xc]
jg 0x14001e72c
mov dword [rbx - 0x10], r14d
movsxd rax, r14d
xor ecx, ecx
mov word [rbx + rax*2], cx
mov rax, qword [rsp + 0x38]
mov rdx, qword [rax + 0x30]
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x30]
call fcn.140001f00
lea rdi, str._____Description___AppInfo__ReportOccurence__User__Name____CDATA_
mov rax, rsi
inc rax
cmp word [rdi + rax*2], 0
jne 0x14001ddc1
mov r15, rdi
mov rbx, qword [rsp + 0x30]
sub r15, rbx
sar r15, 1
mov r13d, dword [rbx - 0x10]
test eax, eax
js 0x14001e656
movsxd rdx, eax
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsnlen]
mov r12, rax
mov ecx, 0x7fffffff
sub ecx, eax
cmp ecx, r13d
jl 0x14001e661
lea r14d, [rax + r13]
test r14d, r14d
js 0x14001e66c
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, r14d
or eax, ecx
jge 0x14001de35
mov edx, r14d
lea rcx, [rsp + 0x30]
call fcn.140002930
mov rbx, qword [rsp + 0x30]
cmp r15, r13
ja 0x14001de3e
lea rdi, [rbx + r15*2]
movsxd rdx, r12d
lea rcx, [rbx + r13*2]
mov r9d, r12d
mov r8, rdi
call fcn.1400020b0
cmp r14d, dword [rbx - 0xc]
jg 0x14001e721
mov dword [rbx - 0x10], r14d
movsxd rax, r14d
xor r14d, r14d
mov word [rbx + rax*2], r14w
call fcn.140002320
mov rcx, rax
test rax, rax
je 0x14001e677
mov rax, qword [rax]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x40], rbx
lea rdx, [rbx - 0x18]
mov rdi, qword [rdx]
cmp dword [rdx + 8], r14d
je 0x14001ded7
cmp dword [rdx + 0x10], r14d
jge 0x14001deb0
cmp dword [rbx - 0xc], r14d
jl 0x14001e682
mov dword [rbx - 0x10], r14d
mov word [rbx], r14w
jmp 0x14001ded7
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14001dec5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x38]
mov edi, dword [rax + 0x68]
test edi, edi
jle 0x14001dfd1
xor r14b, r14b
sub edi, 1
movsxd rbx, edi
js 0x14001dfb6
mov r15d, 1
nop dword [rax]
test rbx, rbx
js 0x14001e68d
mov rax, qword [rsp + 0x50]
cmp edi, dword [rax + 8]
jge 0x14001e68d
mov rax, qword [rax]
xor r8d, r8d
mov rdx, qword [rax + rbx*8]
lea rcx, [rbp + 0x1b0]
call fcn.1400017b0
nop
lea rdx, [rsp + 0x58]
lea rcx, [rbp + 0x1b0]
call fcn.140002440
mov rax, qword [rsp + 0x58]
cmp dword [rax - 0x10], 0
jl 0x14001df76
lea rdx, [0x1400ca028]
mov rcx, rax
call sub.VCRUNTIME140.dll_wcsstr
mov rcx, rax
test rax, rax
mov rax, qword [rsp + 0x58]
je 0x14001df76
sub rcx, rax
sar rcx, 1
movzx r14d, r14b
test ecx, ecx
cmovns r14d, r15d
lea rdx, [rax - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14001df90
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
lea rcx, [rbp + 0x1b0]
call fcn.1400019b0
dec edi
sub rbx, 1
jns 0x14001df00
test r14b, r14b
je 0x14001dfb6
lea rdx, str._a_hrefhttp:__s3browser.nitropdf.com_nitrobuilds_s3nitrobuilds_Default.aspx_searchBugSplatCrashIdbucketbugsplatfiles_pro10folderrows100_PDF__Logs_Attached__a_
jmp 0x14001dfbd
lea rdx, str._a_hrefhttp:__s3browser.nitropdf.com_nitrobuilds_s3nitrobuilds_Default.aspx_searchBugSplatCrashIdbucketbugsplatfiles_pro10folderrows100_Logs_Attached__a_
lea rcx, [rsp + 0x40]
call fcn.14000bc50
mov rax, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x40]
mov r8d, dword [rbx - 0x10]
lea rcx, [rsp + 0x30]
test r8d, r8d
jle 0x14001dfe4
mov rdx, rbx
jmp 0x14001dfec
mov rdx, qword [rax + 0x38]
mov r8d, dword [rdx - 0x10]
call fcn.140001f00
lea r14, str._____Name__Email____CDATA_
mov rax, rsi
nop dword [rax + rax]
inc rax
cmp word [r14 + rax*2], 0
jne 0x14001e000
mov r12, r14
mov rdi, qword [rsp + 0x30]
sub r12, rdi
sar r12, 1
mov r15d, dword [rdi - 0x10]
mov dword [rsp + 0x50], r15d
test eax, eax
js 0x14001e69d
movsxd rdx, eax
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsnlen]
mov r13, rax
mov ecx, 0x7fffffff
sub ecx, eax
cmp ecx, r15d
jl 0x14001e6a8
add r15d, r13d
js 0x14001e6b3
mov ecx, 1
sub ecx, dword [rdi - 8]
mov eax, dword [rdi - 0xc]
sub eax, r15d
or eax, ecx
jge 0x14001e076
mov edx, r15d
lea rcx, [rsp + 0x30]
call fcn.140002930
mov rdi, qword [rsp + 0x30]
mov eax, dword [rsp + 0x50]
cmp r12, rax
ja 0x14001e083
lea r14, [rdi + r12*2]
movsxd rdx, r13d
lea rcx, [rdi + rax*2]
mov r9d, r13d
mov r8, r14
call fcn.1400020b0
cmp r15d, dword [rdi - 0xc]
jg 0x14001e716
mov dword [rdi - 0x10], r15d
movsxd rax, r15d
xor ecx, ecx
mov word [rdi + rax*2], cx
mov rdx, qword [rbp + 0x18]
lea rcx, [rdx - 0x18]
lea rdi, [rbx - 0x18]
cmp rcx, rdi
je 0x14001e10a
cmp dword [rdi + 0x10], 0
jl 0x14001e0f7
mov rax, qword [rdi]
cmp qword [rcx], rax
jne 0x14001e0f7
call fcn.140002030
mov rbx, rax
mov ecx, esi
lock xadd dword [rdi + 0x10], ecx
sub ecx, 1
jg 0x14001e0ec
mov rcx, qword [rdi]
mov r8, qword [rcx]
mov rdx, rdi
call qword [rreloc.WS2_32.dll_htonl + 8]
add rbx, 0x18
mov qword [rsp + 0x40], rbx
jmp 0x14001e10a
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x40]
call fcn.140002f50
mov rbx, qword [rsp + 0x40]
mov r8d, dword [rbx - 0x10]
lea rcx, [rsp + 0x30]
test r8d, r8d
jle 0x14001e11d
mov rdx, rbx
jmp 0x14001e12a
mov rax, qword [rsp + 0x38]
mov rdx, qword [rax + 0x40]
mov r8d, dword [rdx - 0x10]
call fcn.140001f00
lea rdi, str._____Email__IPAddress____CDATA_
mov rax, rsi
nop dword [rax]
inc rax
cmp word [rdi + rax*2], 0
jne 0x14001e140
mov r15, rdi
mov rbx, qword [rsp + 0x30]
sub r15, rbx
sar r15, 1
mov r13d, dword [rbx - 0x10]
test eax, eax
js 0x14001e6be
movsxd rdx, eax
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsnlen]
mov r12, rax
mov ecx, 0x7fffffff
sub ecx, eax
cmp ecx, r13d
jl 0x14001e6c9
lea r14d, [rax + r13]
test r14d, r14d
js 0x14001e6d4
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, r14d
or eax, ecx
jge 0x14001e1b4
mov edx, r14d
lea rcx, [rsp + 0x30]
call fcn.140002930
mov rbx, qword [rsp + 0x30]
cmp r15, r13
ja 0x14001e1bd
lea rdi, [rbx + r15*2]
movsxd rdx, r12d
lea rcx, [rbx + r13*2]
mov r9d, r12d
mov r8, rdi
call fcn.1400020b0
cmp r14d, dword [rbx - 0xc]
jg 0x14001e70b
mov dword [rbx - 0x10], r14d
movsxd rax, r14d
xor ecx, ecx
mov word [rbx + rax*2], cx
mov rdx, qword [rbp - 0x70]
mov rdx, qword [rdx]
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x30]
call fcn.140001f00
lea rdi, str._____IPAddress___User__DateTime_
mov rax, rsi
inc rax
cmp word [rdi + rax*2], 0
jne 0x14001e205
mov r15, rdi
mov rbx, qword [rsp + 0x30]
sub r15, rbx
sar r15, 1
mov r13d, dword [rbx - 0x10]
test eax, eax
js 0x14001e6df
movsxd rdx, eax
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsnlen]
mov r12, rax
mov eax, 0x7fffffff
sub eax, r12d
cmp eax, r13d
jl 0x14001e6ea
lea r14d, [r12 + r13]
test r14d, r14d
js 0x14001e6f5
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, r14d
or eax, ecx
jge 0x14001e27a
mov edx, r14d
lea rcx, [rsp + 0x30]
call fcn.140002930
mov rbx, qword [rsp + 0x30]
cmp r15, r13
ja 0x14001e283
lea rdi, [rbx + r15*2]
movsxd rdx, r12d
lea rcx, [rbx + r13*2]
mov r9d, r12d
mov r8, rdi
call fcn.1400020b0
cmp r14d, dword [rbx - 0xc]
jg 0x14001e700
mov dword [rbx - 0x10], r14d
movsxd rax, r14d
xor r14d, r14d
mov word [rbx + rax*2], r14w
lea rcx, [rbp + 0x240]
mov rax, rsi
nop dword [rax + rax]
inc rax
cmp word [rcx + rax*2], r14w
jne 0x14001e2c0
mov r8d, eax
lea rdx, [rbp + 0x240]
lea rcx, [rsp + 0x30]
call fcn.140001f00
lea rdx, str.__DateTime__Description____CDATA_
mov rax, rsi
nop dword [rax + rax]
inc rax
cmp word [rdx + rax*2], r14w
jne 0x14001e2f0
mov r8d, eax
lea rcx, [rsp + 0x30]
call fcn.140001f00
lea rdx, [rbp + 0x20]
lea rcx, [rsp + 0x40]
call fcn.140001ae0
mov rbx, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x38]
cmp dword [rbx - 0x10], r14d
jle 0x14001e333
lea rcx, [rdi + 0x48]
lea rdx, [rsp + 0x40]
call fcn.140001ae0
mov rdx, qword [rdi + 0x48]
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x30]
call fcn.140001f00
lea rdx, str._____Description__MFA_
mov rax, rsi
nop
inc rax
cmp word [rdx + rax*2], r14w
jne 0x14001e350
mov r8d, eax
lea rcx, [rsp + 0x30]
call fcn.140001f00
mov rdx, qword [rdi + 0x58]
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x30]
call fcn.140001f00
lea rdx, str.__MFA__TotalAppUptime_
mov rax, rsi
inc rax
cmp word [rdx + rax*2], r14w
jne 0x14001e383
mov r8d, eax
lea rcx, [rsp + 0x30]
call fcn.140001f00
mov rdx, qword [rsp + 0x70]
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x30]
call fcn.140001f00
lea rdx, str.__TotalAppUptime__TotalCrashCount_
mov rax, rsi
nop word [rax + rax]
inc rax
cmp word [rdx + rax*2], r14w
jne 0x14001e3c0
mov r8d, eax
lea rcx, [rsp + 0x30]
call fcn.140001f00
mov rdx, qword [rsp + 0x68]
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x30]
call fcn.140001f00
lea rdx, str.__TotalCrashCount___ReportOccurence_
mov rax, rsi
inc rax
cmp word [rdx + rax*2], r14w
jne 0x14001e3f4
mov r8d, eax
lea rcx, [rsp + 0x30]
call fcn.140001f00
lea rdx, str.__BugReport_
mov rax, rsi
inc rax
cmp word [rdx + rax*2], r14w
jne 0x14001e415
mov r8d, eax
lea rcx, [rsp + 0x30]
call fcn.140001f00
mov qword [rsp + 0x60], r14
lea r8, str.w__ccsUNICODE
mov rdx, qword [rdi + 0x88]
lea rcx, [rsp + 0x60]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__wfopen_s]
mov r9, qword [rsp + 0x60]
test r9, r9
jne 0x14001e459
xor dil, dil
jmp 0x14001e47c
mov rcx, qword [rsp + 0x30]
movsxd rdx, dword [rcx - 0x10]
mov r8d, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov dil, 1
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14001e496
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [rsp + 0x30]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14001e4b5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14001e4d4
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14001e4f3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rax, qword [rsp + 0x78]
lea rdx, [rax - 0x18]
lock xadd dword [rdx + 0x10], esi
sub esi, 1
jg 0x14001e511
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [rreloc.WS2_32.dll_htonl + 8]
nop
lea rcx, [rbp - 0x30]
call fcn.140017d50
movzx eax, dil
mov rcx, qword [rbp + 0x2c0]
xor rcx, rsp
call fcn.14005f850
lea r11, [rsp + 0x3d0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov ecx, 0x80070057
call fcn.140001ff0
int3
mov ecx, 0x80070057
call fcn.140001ff0
nop
mov ecx, 0x80004005
call fcn.140001ff0
nop
mov ecx, 0x80004005
call fcn.140001ff0
nop
mov ecx, 0x80004005
call fcn.140001ff0
nop
mov ecx, 0x80004005
call fcn.140001ff0
nop
mov ecx, 0x80070057
call fcn.140001ff0
int3
mov ecx, 0x80070057
call fcn.140001ff0
int3
mov ecx, 0x80070057
call fcn.140001ff0
int3
mov ecx, 0x80070057
call fcn.140001ff0
int3
mov ecx, 0x80070057
call fcn.140001ff0
int3
mov ecx, 0x80070057
call fcn.140001ff0
int3
mov ecx, 0x80070057
call fcn.140001ff0
int3
mov ecx, 0x80070057
call fcn.140001ff0
int3
mov ecx, 0x80070057
call fcn.140001ff0
int3
mov ecx, 0x80070057
call fcn.140001ff0
int3
mov ecx, 0x80070057
call fcn.140001ff0
int3
mov ecx, 0x80070057
call fcn.140001ff0
int3
mov ecx, 0x80070057
call fcn.140001ff0
int3
mov ecx, 0x80070057
call fcn.140001ff0
int3
mov ecx, 0x80070057
call fcn.140001ff0
int3
mov ecx, 0x80070057
call fcn.140001ff0
int3
mov ecx, 0x80070057
call fcn.140001ff0
int3
mov ecx, 0x80070057
call fcn.140001ff0
int3
mov ecx, 0x80070057
call fcn.140001ff0
int3
mov ecx, 0x80070057
call fcn.140001ff0
int3
mov ecx, 0x80070057
call fcn.140001ff0
int3
mov ecx, 0x80004005
call fcn.140001ff0
nop
mov ecx, 0x80070057
call fcn.140001ff0
int3
mov edx, 1
mov ecx, 0xc000008c
call fcn.140003110
int3
mov ecx, 0x80070057
call fcn.140001ff0
int3
mov ecx, 0x80070057
call fcn.140001ff0
int3
mov ecx, 0x80070057
call fcn.140001ff0
int3
mov ecx, 0x80070057
call fcn.140001ff0
int3
mov ecx, 0x80070057
call fcn.140001ff0
int3
mov ecx, 0x80070057
call fcn.140001ff0
int3
mov ecx, 0x80070057
call fcn.140001ff0
int3
mov ecx, 0x80070057
call fcn.140001ff0
int3
mov ecx, 0x80070057
call fcn.140001ff0
int3
mov ecx, 0x80070057
call fcn.140001ff0
int3
mov ecx, 0x80070057
call fcn.140001ff0
int3
mov ecx, 0x80070057
call fcn.140001ff0
nop
mov ecx, 0x80070057
call fcn.140001ff0
int3
mov ecx, 0x80070057
call fcn.140001ff0
int3
mov ecx, 0x80070057
call fcn.140001ff0
int3
mov ecx, 0x80070057
call fcn.140001ff0
int3
mov ecx, 0x80070057
call fcn.140001ff0
int3