Function at 0x140027e50
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x20], r9
mov dword [rsp + 0x18], r8d
mov dword [rsp + 8], ecx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x1fb0
call fcn.1400bd490
sub rsp, rax
lea rbp, [rsp + 0x60]
mov qword [rbp + 0x1f98], rbx
mov rdi, r9
mov esi, r8d
mov r12, rdx
mov r14d, ecx
call fcn.140035ca0
lea r10, [rax + 0xf]
cmp r10, rax
ja 0x140027ea6
movabs r10, 0xffffffffffffff0
and r10, 0xfffffffffffffff0
mov rax, r10
call fcn.1400bd490
mov rcx, qword [rbp + 0x1fc0]
sub rsp, rax
lea rdx, [rsp + 0x60]
call fcn.140035c70
mov qword [rbp + 0x48], rax
call fcn.14002e630
cmp r14d, 0x8511008e
sete byte [rbp + 0x10]
cmp byte [rbp + 0x1fb0], 0
je 0x1400280d4
cmp dword [0x140129f54], 0
jne 0x140029694
cmp r14d, 0x8511008e
jne 0x140027f0a
cmp dword [0x140129f5c], 4
je 0x140029694
mov rdx, r12
mov r8, r12
mov r9, r12
shr rdx, 8
mov r10, r12
shr r8, 0x10
mov r11, r12
shr r9, 0x18
mov rbx, r12
shr r10, 0x20
mov rdi, r12
shr r11, 0x28
shr rbx, 0x30
movzx ecx, r12b
shr rdi, 0x38
cmp esi, 0xfffffff8
jne 0x140027fa6
mov rcx, qword [r12]
lea rdx, [r12 + 8]
shl rcx, 3
mov r8d, 0x811c9dc5
test rcx, rcx
je 0x140027f77
nop dword [rax]
movzx eax, byte [rdx]
lea rdx, [rdx + 1]
xor eax, r8d
imul r8d, eax, 0x1000193
sub rcx, 1
jne 0x140027f60
mov ecx, r8d
mov edx, r8d
mov r9d, ecx
mov r10d, ecx
shr r9, 0x18
mov r11d, ecx
shr r10, 0x20
mov ebx, ecx
shr r11, 0x28
shr rbx, 0x30
mov edi, ecx
shr rdx, 8
shr r8, 0x10
shr rdi, 0x38
movzx eax, cl
xor eax, 0x811c9dc5
imul ecx, eax, 0x1000193
movzx eax, dl
xor ecx, eax
movzx eax, r8b
imul edx, ecx, 0x1000193
xor edx, eax
movzx eax, r9b
imul ecx, edx, 0x1000193
lea r9, [0x140128c70]
xor ecx, eax
movzx eax, r10b
imul edx, ecx, 0x1000193
xor edx, eax
movzx eax, r11b
imul ecx, edx, 0x1000193
xor ecx, eax
movzx eax, bl
imul edx, ecx, 0x1000193
xor edx, eax
movzx eax, dil
imul ecx, edx, 0x1000193
xor ecx, eax
movzx eax, r14b
imul edx, ecx, 0x1000193
xor edx, eax
movzx eax, byte [rbp + 0x1f91]
imul ecx, edx, 0x1000193
xor ecx, eax
movzx eax, byte [rbp + 0x1f92]
imul edx, ecx, 0x1000193
xor edx, eax
movzx eax, byte [rbp + 0x1f93]
imul ecx, edx, 0x1000193
xor ecx, eax
movzx eax, sil
imul edx, ecx, 0x1000193
xor edx, eax
movzx eax, byte [rbp + 0x1fa1]
imul ecx, edx, 0x1000193
xor ecx, eax
movzx eax, byte [rbp + 0x1fa2]
imul edx, ecx, 0x1000193
xor edx, eax
movzx eax, byte [rbp + 0x1fa3]
imul ecx, edx, 0x1000193
xor ecx, eax
imul r8d, ecx, 0x1000193
mov rcx, r9
xor eax, eax
mov edx, dword [rcx]
cmp edx, r8d
je 0x1400280b3
test edx, edx
je 0x14002809d
inc eax
add rcx, 8
cmp eax, 0x20
jl 0x140028085
jmp 0x1400280cd
cmp eax, 0x20
jge 0x1400280cd
cdqe
mov dword [r9 + rax*8], r8d
mov dword [r9 + rax*8 + 4], 1
jmp 0x1400280cd
cdqe
mov edx, dword [r9 + rax*8 + 4]
lea rcx, [r9 + rax*8]
lea eax, [rdx + 1]
mov dword [rcx + 4], eax
cmp edx, 3
jge 0x140029694
mov rdi, qword [rbp + 0x1fa8]
cmp dword [0x140129f4c], 0
je 0x1400280ea
test r12, r12
jne 0x1400280ea
test esi, esi
je 0x140029694
movzx ebx, r14w
lea rdx, [rbp + 0x120]
mov r9d, ebx
mov dword [rsp + 0x20], r14d
mov r8d, 0x100
mov ecx, r14d
call fcn.140027340
test al, al
jne 0x140028150
lea rcx, [rbp + 0x120]
mov r8d, 0xff
lea rdx, str.unknown_error
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [rdx]
lea rdx, [rdx + 1]
mov byte [rcx], al
lea rcx, [rcx + 1]
test al, al
je 0x140028150
sub r8, 1
jne 0x140028130
mov byte [rcx], r8b
nop word [rax + rax]
mov r13, r12
test r12, r12
je 0x140028190
cmp byte [r12], 0
je 0x140028190
lea eax, [rsi + 3]
cmp eax, 1
ja 0x140028190
mov r8d, 0x100
lea rdx, [rbp + 0xc40]
mov rcx, r12
call fcn.140029d30
test eax, eax
je 0x140028190
lea r13, [rbp + 0xc40]
mov byte [rbp + 0x440], 0
jmp 0x14002819c
mov byte [rbp + 0x440], 0
test r12, r12
je 0x1400281f2
lea eax, [rsi + 8]
cmp eax, 1
jbe 0x1400281f2
lea rcx, [rbp + 0x440]
mov rdx, r13
mov eax, 0x800
dec rax
cmp byte [rcx], 0
je 0x1400281c3
inc rcx
test rax, rax
jne 0x1400281b3
lea r8, [rbp + 0xc40]
sub r8, rcx
je 0x1400281f2
cmp byte [r13], 0
je 0x1400281ef
cmp r8, 1
je 0x1400281e7
movzx eax, byte [rdx]
mov byte [rcx], al
inc rcx
dec r8
inc rdx
cmp byte [rdx], 0
jne 0x1400281d6
mov byte [rcx], 0
test esi, esi
jle 0x14002820c
mov r8d, esi
lea rdx, str.__u_
lea rcx, [rbp + 0x440]
call fcn.1400261f0
mov r15, 0xffffffffffffffff
lea rcx, [rbp + 0x440]
mov rax, r15
nop dword [rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x140028220
test rax, rax
lea rcx, [0x1400dfa18]
lea rsi, [0x1400de310]
mov r9d, ebx
mov r8, rsi
lea rdx, str._serror__u:
cmovne r8, rcx
lea rcx, [rbp + 0x440]
call fcn.1400261f0
test rdi, rdi
lea r8, [rbp + 0x120]
mov rax, rsi
lea rdx, str._s__s_n
cmovne rax, rdi
lea rcx, [rbp + 0x440]
mov r9, rax
mov qword [rbp + 0x60], rax
call fcn.1400261f0
lea rdx, [rbp + 0x440]
lea rcx, [0x1400dfa38]
call fcn.14002d860
mov ebx, 2
mov ecx, ebx
mov dword [rbp + 0x50], ebx
call fcn.1400c37fc
mov rcx, rax
lea r8, [rbp + 0x440]
lea rdx, [0x1400dfa38]
call fcn.14002a280
mov ecx, ebx
call fcn.1400c37fc
mov rcx, rax
call fcn.1400c3b70
mov ecx, dword [0x1401d32c8]
mov rax, qword gs:[0x58]
mov rax, qword [rax + rcx*8]
mov ecx, setsockopt
mov qword [rbp + 0x18], rax
add rax, rcx
mov qword [rbp + 0x70], rax
cmp dword [rax], 0
jne 0x140029694
lea rcx, [0x1401290d0]
mov dword [rax], 1
call sub.KERNEL32.dll_AcquireSRWLockExclusive
mov edx, 0x104
mov byte [0x140129750], 0
lea rcx, [0x140129750]
mov byte [0x140129860], 0
mov byte [0x140129970], 0
call fcn.1400b94a0
lea rsi, [0x140129860]
mov edx, 0x104
mov rcx, rsi
lea r8, [0x140129750]
call fcn.1400b7480
mov rbx, r15
nop dword [rax + rax]
inc rbx
cmp byte [rsi + rbx], 0
jne 0x140028350
mov edi, 0x103
mov rdx, rsi
cmp rbx, rdi
lea rsi, [0x140129970]
mov rcx, rsi
cmova rbx, rdi
mov r8, rbx
call fcn.1400bddc0
mov rcx, rsi
mov byte [rbx + rsi], 0
call fcn.1400b79d0
mov byte [rbp + 0x440], 0
lea rsi, [0x1401290e0]
cmp r14d, 0x8511008e
jne 0x1400283d4
call fcn.14002d8b0
mov rcx, rax
lea r9d, [rdi - 3]
mov r8, rsi
mov edx, 0x5108
call qword [sym.imp.USER32.dll_LoadStringA]
mov r8, qword [rbp + 0x60]
lea rcx, [rbp + 0x440]
test eax, eax
mov rdx, rsi
cmove rdx, qword [str._n_s_n_n]
call fcn.1400261f0
call fcn.14002d8b0
mov rcx, rax
mov r9d, 0x100
mov r8, rsi
mov edx, 0x5101
call qword [sym.imp.USER32.dll_LoadStringA]
mov rdx, rsi
lea r8, [rbp + 0x120]
test eax, eax
lea rcx, [rbp + 0x440]
cmove rdx, qword [str.This_application_has_encountered_a_critical_error:_n_n_s_n]
call fcn.1400261f0
call fcn.14002d8b0
mov rcx, rax
mov r9d, 0x100
mov r8, rsi
mov edx, 0x5102
call qword [sym.imp.USER32.dll_LoadStringA]
mov rdx, rsi
lea r8, [0x140129750]
test eax, eax
lea rcx, [rbp + 0x440]
cmove rdx, qword [str.Program:_t_s_n]
call fcn.1400261f0
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ebx, eax
call fcn.14002d8b0
mov rcx, rax
mov r9d, 0x100
mov r8, rsi
mov edx, 0x5115
call qword [sym.imp.USER32.dll_LoadStringA]
mov rdx, rsi
lea rcx, [rbp + 0x440]
test eax, eax
mov r8d, ebx
cmove rdx, qword [str.ProcessID:_t_d_n]
call fcn.1400261f0
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov ebx, eax
call fcn.14002d8b0
mov rcx, rax
mov r9d, 0x100
mov r8, rsi
mov edx, 0x5118
call qword [sym.imp.USER32.dll_LoadStringA]
mov rdx, rsi
lea rcx, [rbp + 0x440]
test eax, eax
mov r8d, ebx
cmove rdx, qword [str.ThreadID:_t_d_n]
call fcn.1400261f0
lea rdx, [0x140000000]
test r13, r13
je 0x140028616
cmp byte [r13], 0
je 0x140028616
mov ebx, dword [rbp + 0x1fa0]
lea eax, [rbx + 8]
cmp eax, 7
ja case.0x140028505.6
cdqe
mov ecx, dword [rdx + rax*4 + 0x297a0]
add rcx, rdx
jmp rcx
mov rbx, qword [r13 + 8]
mov ecx, reloc.WS2_32.dll_socket
call fcn.1400273f0
mov rdx, rax
lea r9, [0x140129860]
mov r8, rbx
lea rcx, [rbp + 0x440]
call fcn.1400261f0
jmp 0x140028616
mov ecx, 4
call fcn.1400273f0
mov rdx, rax
lea rcx, [rbp + 0x440]
mov r8, r13
call fcn.1400261f0
jmp 0x140028616
mov ecx, 5
call fcn.1400273f0
mov rdx, rax
lea rcx, [rbp + 0x440]
mov r8, r13
call fcn.1400261f0
jmp 0x140028616
mov ecx, 6
call fcn.1400273f0
mov rdx, rax
lea rcx, [rbp + 0x440]
mov r8, r13
call fcn.1400261f0
jmp 0x140028616
mov ecx, ntohs
call fcn.1400273f0
mov rdx, rax
lea rcx, [rbp + 0x440]
mov r8, r13
call fcn.1400261f0
jmp 0x140028616
mov ecx, reloc.WS2_32.dll_ntohl
call fcn.1400273f0
mov rdx, rax
lea rcx, [rbp + 0x440]
mov r8, r13
call fcn.1400261f0
jmp 0x140028616
mov ecx, reloc.WS2_32.dll_socket
call fcn.1400273f0
mov rdx, rax
lea r9, [0x140129860]
mov r8, r13
lea rcx, [rbp + 0x440]
call fcn.1400261f0
jmp 0x140028616
mov ecx, 3
call fcn.1400273f0
mov rdx, rax
lea rcx, [rbp + 0x440]
mov r9d, ebx
mov r8, r13
call fcn.1400261f0
cmp r14d, 0x8511008e
je 0x140028682
xor ebx, ebx
cmp r14d, 0x85100000
setne bl
call fcn.14002d8b0
mov rcx, rax
lea edx, [rbx + 0x5107]
mov r9d, 0x100
mov r8, rsi
call qword [sym.imp.USER32.dll_LoadStringA]
test eax, eax
jne 0x14002866f
cmp r14d, 0x85100000
lea rsi, [0x140000000]
mov eax, 0x40
mov ecx, 0x38
cmove eax, ecx
mov rsi, qword [rax + rsi + 0xdef90]
mov r8, qword [rbp + 0x60]
lea rcx, [rbp + 0x440]
mov rdx, rsi
call fcn.1400261f0
xor ecx, ecx
call fcn.140002920
mov qword [rbp + 0x78], rax
test rax, rax
je 0x1400286a1
mov rdx, rax
lea rcx, [0x1400dfa38]
call fcn.14002d860
cmp dword [0x140129f44], 0
jne 0x140029675
mov rax, qword [rbp + 0x1fc0]
lea rcx, [0x140129a78]
mov rax, qword [rax + 8]
mov qword [rbp + 0x58], rax
call sub.KERNEL32.dll_GetLocalTime
mov eax, dword [rbp + 0x1f90]
xor sil, sil
xor r14b, r14b
cmp eax, 0x85100084
je 0x1400286e6
cmp eax, 0x8510008a
jne 0x1400286e9
mov r14b, 1
mov sil, 1
lea rax, str.Crash
test sil, sil
lea rbx, str.Error
cmovne rbx, rax
mov qword [rbp + 0x68], rbx
call sub.KERNEL32.dll_GetCurrentProcessId
movzx ecx, word [0x140129a84]
lea rbx, [0x1400df49c]
movzx edx, word [0x140129a82]
movzx r10d, word [0x140129a80]
movzx r11d, word [0x140129a7e]
movzx r9d, word [0x140129a7a]
movzx r8d, word [0x140129a78]
mov qword [rsp + 0x50], rbx
mov rbx, qword [rbp + 0x68]
mov dword [rsp + 0x48], eax
mov qword [rsp + 0x40], rbx
mov dword [rsp + 0x38], ecx
lea rcx, [rbp + 0x330]
mov dword [rsp + 0x30], edx
lea rdx, str._04d__02d__02d__02d._02d._02d__s____d._s
mov dword [rsp + 0x28], r10d
mov dword [rsp + 0x20], r11d
call fcn.140025310
lea r8, [rbp + 0x330]
mov edx, 0x104
lea rcx, [rbp + 0x220]
call fcn.1400264c0
xor ebx, ebx
lea r8, [rbp + 0x220]
mov qword [rsp + 0x28], rbx
lea rcx, [rbp + 0x1d40]
mov r9d, 0x7fffffff
mov qword [rsp + 0x20], rbx
mov edx, 0x104
call fcn.14002b9c0
mov eax, 2
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], 0x80
lea rcx, [rbp + 0x1d40]
xor r9d, r9d
mov dword [rsp + 0x20], eax
xor r8d, r8d
mov edx, 0x40000000
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rbx, rax
cmp rax, r15
je 0x140029354
lea r9, [rbp + 0x20]
mov r8d, 3
lea rdx, [0x1400df4a0]
mov rcx, rax
call fcn.140017270
test al, al
je 0x14002933d
cmp dword [rbp + 0x20], 3
jne 0x14002933d
lea rax, [0x140129a78]
mov r8, rbx
lea r9, [0x140128dd0]
mov qword [rsp + 0x20], rax
lea rdx, [fcn.140029ff0]
mov ecx, 1
call fcn.14002da60
lea rdx, [rbp + 0x440]
mov rcx, rbx
call fcn.140029f00
lea rdx, [0x140128e60]
lea rcx, [rbp + 0x220]
nop
movzx eax, byte [rcx]
inc rcx
mov byte [rdx], al
lea rdx, [rdx + 1]
test al, al
je 0x14002888b
sub rdi, 1
jne 0x140028860
mov byte [rdx], dil
nop dword [rax]
movzx eax, byte [rcx]
lea rcx, [rcx + 1]
test al, al
jne 0x140028880
test sil, sil
mov qword [rbp + 8], rbx
lea rsi, [0x140129a90]
mov byte [0x140129a90], 0
mov byte [rbp], 0
je 0x1400288da
mov r8, qword [rbp + 0x1fa8]
lea rax, [rbp]
mov rcx, qword [rbp + 0x48]
movzx r9d, r14b
mov qword [rsp + 0x30], rax
mov rdx, r13
mov eax, 0x200
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rsi
call fcn.1400277e0
jmp 0x140028c1d
mov r14d, 0x200
lea rdx, [rbp + 0x120]
mov eax, r14d
mov rcx, rsi
nop dword [rax]
dec rax
cmp byte [rcx], 0
je 0x140028900
inc rcx
test rax, rax
jne 0x1400288f0
lea rbx, [0x140129c90]
mov r8, rbx
sub r8, rcx
je 0x140028934
cmp byte [rbp + 0x120], 0
je 0x140028931
cmp r8, 1
je 0x140028929
movzx eax, byte [rdx]
mov byte [rcx], al
inc rcx
dec r8
inc rdx
cmp byte [rdx], 0
jne 0x140028918
mov byte [rcx], 0
mov r9, qword [rbp + 0x1fa8]
test r9, r9
je 0x1400289cf
mov rcx, rsi
lea rdx, [0x1400df4a4]
mov rax, r14
dec rax
cmp byte [rcx], 0
je 0x140028961
inc rcx
test rax, rax
jne 0x140028951
mov r8, rbx
sub r8, rcx
je 0x14002898c
nop dword [rax]
cmp r8, 1
je 0x140028981
movzx eax, byte [rdx]
mov byte [rcx], al
inc rcx
dec r8
inc rdx
cmp byte [rdx], 0
jne 0x140028970
mov byte [rcx], 0
mov rcx, rsi
mov rdx, r9
mov rax, r14
dec rax
cmp byte [rcx], 0
je 0x1400289a5
inc rcx
test rax, rax
jne 0x140028995
mov r8, rbx
sub r8, rcx
je 0x1400289cf
cmp byte [r9], 0
je 0x1400289cc
cmp r8, 1
je 0x1400289c4
movzx eax, byte [rdx]
mov byte [rcx], al
inc rcx
dec r8
inc rdx
cmp byte [rdx], 0
jne 0x1400289b3
mov byte [rcx], 0
mov eax, dword [rbp + 0x1fa0]
test eax, eax
jle 0x1400289f7
mov r9, r13
mov dword [rsp + 0x20], eax
lea r8, str._at__s__u_
mov rdx, r14
mov rcx, rsi
call fcn.14002b5e0
jmp 0x140028c1d
cmp eax, 0xfffffff8
jne 0x140028b5b
mov rcx, rsi
lea rdx, str._r_n_DBG_OPTIONS_FunctionsOnly_SingleLine_
mov rax, r14
nop dword [rax]
dec rax
cmp byte [rcx], 0
je 0x140028a20
inc rcx
test rax, rax
jne 0x140028a10
mov r8, rbx
sub r8, rcx
je 0x140028a44
cmp r8, 1
je 0x140028a39
movzx eax, byte [rdx]
mov byte [rcx], al
inc rcx
dec r8
inc rdx
cmp byte [rdx], 0
jne 0x140028a28
mov byte [rcx], 0
mov rdi, r15
inc rdi
cmp byte [rsi + rdi], 0
jne 0x140028a47
mov r14, qword [rbp + 0x48]
lea rdx, [rbp + 0xd40]
lea rcx, [rbp + 0x28]
mov qword [rbp + 0x28], r14
mov byte [rbp + 0x3c], 0
mov qword [rbp + 0x30], r13
mov dword [rbp + 0x38], 3
call fcn.140035670
lea rax, [fcn.140002a40]
mov qword [rbp + 0xd0], r14
mov qword [rbp + 0xf8], rax
lea rcx, [rbp + 0xd0]
lea rax, [rdi + rsi]
mov qword [rbp + 0xf0], 0
mov qword [rbp + 0xe0], rax
mov r14d, 0x200
mov eax, r14d
mov byte [rbp + 0x110], 1
sub rax, rdi
mov dword [rbp + 0x118], 0x40
mov qword [rbp + 0xe8], rax
lea rax, [rbp + 0xd40]
mov qword [rbp + 0xd8], rax
mov byte [rbp + 0x11c], 1
mov dword [rbp + 0x114], 3
call fcn.1400358f0
mov rcx, rsi
lea rdx, str._DBG_OPTIONS____r_n
mov eax, r14d
nop
dec rax
cmp byte [rcx], 0
je 0x140028b10
inc rcx
test rax, rax
jne 0x140028b00
sub rbx, rcx
je 0x140028b31
cmp rbx, 1
je 0x140028b26
movzx eax, byte [rdx]
mov byte [rcx], al
inc rcx
dec rbx
inc rdx
cmp byte [rdx], 0
jne 0x140028b15
mov byte [rcx], 0
mov rax, qword [rbp + 0xf8]
lea rcx, [fcn.140002a40]
cmp rax, rcx
je 0x140028c1d
xor r8d, r8d
lea rcx, [rbp + 0x100]
xor edx, edx
call rax
jmp 0x140028c1d
cmp eax, 0xfffffff9
jne 0x140028b86
lea rax, [0x140129860]
mov r9, r13
lea r8, str._at_DBG_ADDR__p____s__
mov qword [rsp + 0x20], rax
mov rdx, r14
mov rcx, rsi
call fcn.14002b5e0
jmp 0x140028c1d
test r13, r13
je 0x140028c1d
cmp byte [r13], 0
je 0x140028c1d
mov rcx, rsi
lea rdx, [0x1400df464]
mov rax, r14
dec rax
cmp byte [rcx], 0
je 0x140028bb7
inc rcx
test rax, rax
jne 0x140028ba7
mov r8, rbx
sub r8, rcx
je 0x140028bdc
nop
cmp r8, 1
je 0x140028bd1
movzx eax, byte [rdx]
mov byte [rcx], al
inc rcx
dec r8
inc rdx
cmp byte [rdx], 0
jne 0x140028bc0
mov byte [rcx], 0
mov rcx, rsi
mov rdx, r13
mov rax, r14
dec rax
cmp byte [rcx], 0
je 0x140028bf5
inc rcx
test rax, rax
jne 0x140028be5
sub rbx, rcx
je 0x140028c1d
cmp byte [r13], 0
je 0x140028c1a
cmp rbx, 1
je 0x140028c12
movzx eax, byte [rdx]
mov byte [rcx], al
inc rcx
dec rbx
inc rdx
cmp byte [rdx], 0
jne 0x140028c01
mov byte [rcx], 0
mov rax, qword [0x140129080]
mov rbx, qword [rbp + 8]
test rax, rax
je 0x140028c4f
mov edx, 0x40
lea rcx, [rbp + 0x80]
call rax
test al, al
je 0x140028c4f
mov r14d, dword [rbp + 0x1f90]
lea rdi, [rbp + 0x80]
jmp 0x140028c61
mov r14d, dword [rbp + 0x1f90]
mov ecx, r14d
call fcn.14002c6a0
mov rdi, rax
lea rdx, str._Exception.IssueType__Exception
mov rcx, rbx
call fcn.140029ff0
mov r8, rdi
lea rdx, str._ExceptionType___s
mov rcx, rbx
call fcn.140029ff0
lea rdx, str._Exception.Summary:_
mov rcx, rbx
call fcn.140029ff0
mov rdi, qword [rbp + 0x18]
mov eax, 0x6224
movzx eax, byte [rax + rdi]
test al, al
jne 0x140028cb0
call fcn.1400bd7b4
mov ecx, 0x6224
movzx eax, byte [rcx + rdi]
mov ecx, 0x18
cmp qword [rcx + rdi], 0
je 0x140028cd1
test al, al
jne 0x140028cca
call fcn.1400bd7b4
mov ecx, 0x18
cmp byte [rcx + rdi + 0x20], 0
je 0x140028cf1
mov rdx, rsi
mov rcx, rbx
call fcn.140029f00
cmp byte [rbp], 0
je 0x140028cf1
lea rdx, str.Note:_trace_is_estimated
mov rcx, rbx
call fcn.140029ff0
mov eax, 0x6224
cmp byte [rax + rdi], 0
jne 0x140028d06
call fcn.1400bd7b4
mov eax, 0x6224
mov ecx, 0x18
cmp qword [rcx + rdi], 0
je 0x140028d81
cmp byte [rax + rdi], 0
jne 0x140028d1d
call fcn.1400bd7b4
mov eax, 0x18
mov ecx, 0x6224
mov rdi, qword [rax + rdi + 0x18]
mov rax, qword [rbp + 0x18]
cmp byte [rcx + rax], 0
jne 0x140028d3b
call fcn.1400bd7b4
mov rcx, rdi
mov eax, 0x18
mov rdi, qword [rbp + 0x18]
lea rdx, [rbp + 0xd40]
mov r8d, 0x1000
call qword [rax + rdi]
lea rax, [rbp + 0xd40]
mov r8, r15
inc r8
cmp byte [rax + r8], 0
jne 0x140028d61
lea r9, [rbp + 0x1f90]
mov rcx, rbx
lea rdx, [rbp + 0xd40]
call fcn.140017270
lea rdx, str._:Exception.Summary_
mov rcx, rbx
call fcn.140029ff0
mov rbx, qword [rbp + 8]
lea rdx, str._Exception.Assertion:_
mov rcx, rbx
call fcn.140029ff0
mov eax, 0x6224
cmp byte [rax + rdi], 0
jne 0x140028db8
call fcn.1400bd7b4
mov eax, 0x6224
mov ecx, 0x18
cmp qword [rcx + rdi + 8], 0
je 0x140028e35
cmp byte [rax + rdi], 0
jne 0x140028dd0
call fcn.1400bd7b4
mov eax, 0x18
mov ecx, 0x6224
mov rdi, qword [rax + rdi + 0x18]
mov rax, qword [rbp + 0x18]
cmp byte [rcx + rax], 0
jne 0x140028dee
call fcn.1400bd7b4
mov rcx, rdi
mov eax, 0x18
mov rdi, qword [rbp + 0x18]
lea rdx, [rbp + 0xd40]
mov r8d, 0x1000
call qword [rax + rdi + reloc.WS2_32.dll_htonl]
lea rax, [rbp + 0xd40]
mov r8, r15
inc r8
cmp byte [rax + r8], 0
jne 0x140028e15
lea r9, [rbp + 0x1f90]
mov rcx, rbx
lea rdx, [rbp + 0xd40]
call fcn.140017270
mov eax, 0x6224
movzx eax, byte [rax + rdi]
test al, al
jne 0x140028e50
call fcn.1400bd7b4
mov ecx, 0x6224
movzx eax, byte [rcx + rdi]
mov ecx, 0x18
cmp qword [rcx + rdi + 8], 0
je 0x140028e72
test al, al
jne 0x140028e66
call fcn.1400bd7b4
mov eax, 0x18
cmp byte [rax + rdi + 0x20], 0
je 0x140028ec8
cmp byte [rbp], 0
je 0x140028e87
lea rdx, str.Trace_is_estimated
mov rcx, rbx
call fcn.140029ff0
mov eax, dword [rbp + 0x1fa0]
lea rdx, [fcn.140029ff0]
mov r9, qword [rbp + 0x48]
mov r8, rbx
mov dword [rsp + 0x40], eax
mov ecx, 0x20040
mov rax, qword [rbp + 0x1fc0]
mov qword [rsp + 0x38], r12
mov dword [rsp + 0x30], r14d
mov qword [rsp + 0x28], rax
mov rax, qword [rbp + 0x58]
mov qword [rsp + 0x20], rax
call fcn.14002dd80
lea rdx, str._:Exception.Assertion_
mov rcx, rbx
call fcn.140029ff0
mov rbx, qword [rbp + 8]
lea rdx, str._Exception.HashBlock:_
mov rcx, rbx
call fcn.140029ff0
mov eax, 0x6224
cmp byte [rax + rdi], 0
jne 0x140028eff
call fcn.1400bd7b4
mov eax, 0x6224
mov ecx, 0x18
cmp qword [rcx + rdi + 0x10], 0
je 0x140028f80
cmp byte [rax + rdi], 0
jne 0x140028f17
call fcn.1400bd7b4
mov eax, 0x18
mov ecx, 0x6224
mov rdi, qword [rax + rdi + 0x18]
mov rax, qword [rbp + 0x18]
cmp byte [rcx + rax], 0
jne 0x140028f35
call fcn.1400bd7b4
mov rcx, rdi
mov eax, 0x18
mov rdi, qword [rbp + 0x18]
lea rdx, [rbp + 0xd40]
mov r8d, 0x1000
call qword [rax + rdi + reloc.WS2_32.dll_recv]
lea rax, [rbp + 0xd40]
mov r8, r15
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140028f60
lea r9, [rbp + 0x1f90]
mov rcx, rbx
lea rdx, [rbp + 0xd40]
call fcn.140017270
mov eax, 0x6224
cmp byte [rax + rdi], 0
jne 0x140028f95
call fcn.1400bd7b4
mov eax, 0x6224
mov ecx, 0x18
cmp qword [rcx + rdi + 0x10], 0
je 0x140028fb9
cmp byte [rax + rdi], 0
jne 0x140028fad
call fcn.1400bd7b4
mov eax, 0x18
cmp byte [rax + rdi + 0x20], 0
je 0x140028ffa
mov eax, dword [rbp + 0x1fa0]
lea rdx, [fcn.140029ff0]
mov r9, qword [rbp + 0x48]
mov r8, rbx
mov dword [rsp + 0x40], eax
mov ecx, 0x40040
mov rax, qword [rbp + 0x1fc0]
mov qword [rsp + 0x38], r12
mov dword [rsp + 0x30], r14d
mov qword [rsp + 0x28], rax
mov rax, qword [rbp + 0x58]
mov qword [rsp + 0x20], rax
call fcn.14002dd80
lea rdx, str._:Exception.HashBlock_
mov rcx, rbx
call fcn.140029ff0
mov r8, qword [rbp + 0x1fa8]
lea rdx, str._ErrorDescription___s
mov rcx, qword [rbp + 8]
call fcn.140029ff0
cmp byte [rbp], 0
lea rax, [0x1400dfa68]
mov rcx, qword [rbp + 8]
lea rdi, [0x1400dfa6c]
mov r8, rdi
lea rdx, str._EstimatedTrace___s
cmovne r8, rax
call fcn.140029ff0
mov rdx, qword [0x140128dc8]
test rdx, rdx
je 0x140029067
mov rax, qword [rbp + 8]
lea rcx, [rbp + 0x28]
mov qword [rbp + 0x28], rax
mov qword [rbp + 0x30], rsi
call rdx
mov rbx, qword [rbp + 8]
call fcn.1400b71b0
mov r8, rax
lea rdx, str._r_n_________________________________________r_nInfo_stack_for_thread_with_exception___llu_
mov rcx, rbx
call fcn.140029ff0
lea rdx, [fcn.140029ff0]
mov rcx, rbx
call fcn.14002c9c0
lea rdx, str.________________________________________
mov rcx, rbx
call fcn.140029ff0
lea rcx, [0x1400261e0]
call fcn.14002ca40
mov rcx, qword [rbp + 8]
lea rbx, [0x1400de310]
mov rdx, rbx
call fcn.140029ff0
lea rax, [0x14002a210]
mov qword [rbp + 0x28], rax
lea rcx, [rbp + 0x28]
lea rax, [0x140002a50]
mov qword [rbp + 0x30], rax
lea rax, [rbp + 8]
mov qword [rbp + 0x38], rax
call fcn.140033960
mov rcx, qword [rbp + 8]
mov rdx, rbx
call fcn.140029ff0
mov rbx, qword [rbp + 0x78]
test rbx, rbx
je 0x140029153
mov ecx, socket
call fcn.1400273f0
mov r8, r15
mov dword [rbp + 0x20], 0xa0d3a
nop
inc r8
cmp byte [rax + r8], 0
jne 0x140029110
mov rcx, qword [rbp + 8]
lea r9, [rbp + 0x1f90]
mov rdx, rax
call fcn.140017270
mov rcx, qword [rbp + 8]
lea r9, [rbp + 0x1f90]
mov r8d, 3
lea rdx, [rbp + 0x20]
call fcn.140017270
mov rcx, qword [rbp + 8]
mov rdx, rbx
call fcn.140029f00
mov eax, dword [rbp + 0x1fa0]
lea rdx, [fcn.140029ff0]
mov r9, qword [rbp + 0x48]
mov ecx, 0x1000001
mov r8, qword [rbp + 8]
mov dword [rsp + 0x40], eax
mov rax, qword [rbp + 0x58]
mov qword [rsp + 0x38], r12
mov r12, qword [rbp + 0x1fc0]
mov dword [rsp + 0x30], r14d
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], rax
call fcn.14002dd80
mov rax, qword [r12]
cmp dword [rax], 0xc0000005
jne 0x140029289
mov rsi, qword [rax + 0x28]
mov rcx, rsi
call fcn.140002920
mov rcx, qword [rbp + 8]
lea rdx, str._r_n_FreePageAccessViolation___s
test rax, rax
mov rbx, rax
lea rax, [0x1400dfa68]
cmovne rdi, rax
mov r8, rdi
call fcn.140029ff0
test rbx, rbx
je 0x140029276
xor eax, eax
mov byte [rbp + 0xc0], 1
mov qword [rbp + 0x80], rax
lea rdi, [0x140002a50]
mov qword [rbp + 0x90], rax
lea rcx, [rbp + 0x80]
mov qword [rbp + 0x98], rax
mov dword [rbp + 0xc4], eax
mov byte [rbp + 0xcc], al
lea rax, [0x14002a230]
mov qword [rbp + 0xa0], rax
lea rax, [rbp + 8]
mov qword [rbp + 0xb0], rax
mov dword [rbp + 0xc8], 0x40
mov qword [rbp + 0xa8], rdi
mov qword [rbp + 0x88], rbx
call fcn.1400358f0
mov rcx, qword [rbp + 8]
lea rdx, [0x1400de310]
call fcn.140029ff0
mov rax, qword [rbp + 0xa8]
cmp rax, rdi
je 0x140029276
xor r8d, r8d
lea rcx, [rbp + 0xb0]
xor edx, edx
call rax
mov r8, qword [rbp + 8]
lea rdx, [fcn.140029ff0]
mov rcx, rsi
call fcn.140002a40
mov rax, qword [0x140128e50]
test rax, rax
je 0x1400292a2
mov rdx, qword [0x140128e58]
mov rcx, qword [rbp + 8]
call rax
mov rbx, qword [rbp + 8]
lea rdi, [0x140129860]
mov r8, rdi
lea rdx, str._r_nList_of_running__s_processes
mov rcx, rbx
call fcn.140029ff0
lea rdx, [rbp + 0x28]
mov qword [rbp + 0x28], rdi
lea rcx, [0x140027ad0]
mov qword [rbp + 0x30], rbx
call fcn.1400da140
test al, al
jne 0x1400292ea
lea rdx, str._r_nCould_not_list_processes
mov rcx, rbx
call fcn.140029ff0
mov rbx, qword [rbp + 8]
lea rdi, str.Agent.exe
mov r8, rdi
lea rdx, str._r_nList_of_running__s_processes
mov rcx, rbx
call fcn.140029ff0
lea rdx, [rbp + 0x28]
mov qword [rbp + 0x28], rdi
lea rcx, [0x140027ad0]
mov qword [rbp + 0x30], rbx
call fcn.1400da140
test al, al
jne 0x140029332
lea rdx, str._r_nCould_not_list_processes
mov rcx, rbx
call fcn.140029ff0
mov rcx, qword [rbp + 8]
call fcn.140017200
jmp 0x140029366
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor edx, edx
lea rcx, [rbp + 0x220]
call fcn.1400171b0
mov r12, qword [rbp + 0x1fc0]
mov r14d, dword [rbp + 0x1f90]
mov qword [rbp + 8], r15
cmp dword [0x140128f64], 0
jne 0x140029382
mov rax, qword [rbp + 0x18]
mov ecx, reloc.WS2_32.dll_recv
cmp byte [rcx + rax], 0
je 0x140029382
mov al, 1
jmp 0x140029384
xor al, al
cmp r14d, 0x8511008e
jne 0x14002939e
xor ecx, ecx
movzx eax, al
cmp dword [0x140129f5c], ecx
cmovne ecx, eax
movzx eax, cl
test al, al
je 0x140029665
mov eax, dword [0x1400df9d8]
lea rcx, [rbp + 0xd55]
movsd xmm0, qword [str.miniDump.dmp]
xor edx, edx
mov dword [rbp + 0xd50], eax
mov r8d, 0x2ff
movzx eax, byte [0x1400df9dc]
mov byte [rbp + 0xd54], al
movsd qword [rbp + 0xd48], xmm0
call fcn.1400be550
movups xmm0, xmmword [str.Postmortem_Generated_Dump]
lea rcx, [rbp + 0x106e]
movzx eax, word [reloc.WS2_32.dll_WSASetLastError]
movsd xmm1, qword [0x1400df9f0]
xor edx, edx
mov r8d, 0x2f2
movsd qword [rbp + 0x1064], xmm1
movups xmmword [rbp + 0x1054], xmm0
mov word [rbp + 0x106c], ax
call fcn.1400be550
mov rax, qword [rbp + 0x48]
mov qword [rbp + 0xd40], rax
mov byte [rbp + 0x1360], 0
call sub.KERNEL32.dll_GetCurrentProcessId
movzx ecx, word [0x140129a84]
lea rdi, [0x1400dda4c]
movzx r10d, word [0x140129a82]
lea rdx, str._04d__02d__02d__02d._02d._02d__s____d._s
movzx r11d, word [0x140129a80]
movzx ebx, word [0x140129a7e]
movzx r9d, word [0x140129a7a]
movzx r8d, word [0x140129a78]
mov qword [rsp + 0x50], rdi
mov dword [rsp + 0x48], eax
mov rax, qword [rbp + 0x68]
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x38], ecx
lea rcx, [rbp + 0x330]
mov dword [rsp + 0x30], r10d
mov dword [rsp + 0x28], r11d
mov dword [rsp + 0x20], ebx
call fcn.140025310
lea r8, [rbp + 0x330]
mov edx, 0x30c
lea rcx, [rbp + 0xd48]
call fcn.1400264c0
mov rax, qword [r12]
cmp dword [rax], 0xc00000fd
jne 0x1400294e0
mov rdx, qword [0x1401290a0]
mov rcx, qword [0x1401290a8]
sub rdx, rcx
call fcn.140034bd0
mov rbx, r15
lea rcx, [0x140128dd0]
nop word [rax + rax]
inc rbx
cmp byte [rcx + rbx], 0
jne 0x1400294f0
mov eax, 0x30b
mov rdx, rcx
cmp rbx, rax
lea rcx, [rbp + 0x1054]
cmova rbx, rax
mov r8, rbx
call fcn.1400bddc0
movzx eax, byte [0x140128db1]
lea rdx, [rbp + 0x1f90]
mov byte [rbp + rbx + 0x1054], 0
lea rcx, [rbp + 0xd40]
mov byte [rbp + 0x1360], al
call fcn.140035370
mov r8d, dword [rbp + 0x1f90]
lea rax, [rbp + 0x40]
xorps xmm0, xmm0
mov qword [rsp + 0x30], 0
lea rbx, [0x1400def50]
mov dword [rsp + 0x28], 0
xor edx, edx
mov qword [rsp + 0x20], rax
mov ecx, 0x1300
mov qword [rbp + 0x28], rbx
mov r9d, 0x400
mov dword [rbp + 0x30], r8d
movdqu xmmword [rbp + 0x38], xmm0
call qword [sym.imp.KERNEL32.dll_FormatMessageA]
mov rax, qword [rbp + 0x40]
test rax, rax
je 0x1400295cd
inc r15
cmp byte [rax + r15], 0
jne 0x140029593
cmp r15, 1
jbe 0x140029629
cmp byte [rax + r15 - 1], 0xa
lea rcx, [rax + r15]
jne 0x140029629
mov byte [rcx - 1], 0
mov rax, qword [rbp + 0x40]
cmp byte [rax + r15 - 2], 0xd
lea rcx, [rax + r15]
jne 0x140029629
mov byte [rcx - 2], 0
jmp 0x140029625
mov edx, 0x20
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LocalAlloc]
mov qword [rbp + 0x40], rax
test rax, rax
je 0x140029629
mov r9d, dword [rbp + 0x30]
lea ecx, [r9 + 0x7ffbfe00]
cmp ecx, 0xfdff
ja 0x140029611
movzx ecx, r9w
mov edx, 0x200
sub cx, dx
je 0x140029611
movzx r9d, cx
lea r8, str.IDispatch_error__d
jmp 0x140029618
lea r8, str.Unknown_error_0x_0lX
mov edx, 0x20
mov rcx, rax
call fcn.14002a2d0
mov rax, qword [rbp + 0x40]
mov r8d, dword [rbp + 0x1f90]
lea rdx, str._r_nDump_file_written_with_return:___x___s
mov rcx, qword [rbp + 8]
mov r9, rax
call fcn.140029ff0
mov rcx, qword [rbp + 0x38]
mov qword [rbp + 0x28], rbx
test rcx, rcx
je 0x140029656
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp + 0x40]
test rcx, rcx
je 0x140029665
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov rcx, qword [rbp + 8]
cmp rcx, 0xffffffffffffffff
je 0x140029675
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [0x140129f4c], 0
je 0x1400296b0
mov rax, qword [rbp + 0x70]
lea rcx, [0x1401290d0]
mov dword [rax], 0
call fcn.1400b80f0
xor al, al
mov rbx, qword [rbp + 0x1f98]
lea rsp, [rbp + 0x1f50]
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
lea rcx, [0x140128d78]
call fcn.14002c580
mov r10, qword [0x140128da8]
test r10, r10
je 0x140029702
mov ecx, dword [rbp + 0x1fa0]
lea rdx, [rbp + 0x120]
xor r8d, r8d
mov r9d, ecx
lea eax, [rcx + 8]
mov ecx, r14d
cmp eax, 1
lea rax, [0x1400de310]
mov qword [rsp + 0x28], rax
mov rax, qword [rbp + 0x60]
cmova r8, r13
mov qword [rsp + 0x20], rax
call r10
jmp 0x140029707
mov eax, 1
cmp r14d, 0x8511008e
jne 0x14002971c
xor eax, eax
cmp dword [0x140129f5c], 1
sete al
test eax, eax
je 0x140029755
cmp byte [0x140128db0], 0
jne 0x140029755
movzx edx, byte [rbp + 0x10]
lea rax, [0x140129970]
movzx ecx, byte [rbp + 0x1fb0]
lea r8, [rbp + 0x440]
mov r9d, 0x800
mov qword [rsp + 0x20], rax
call fcn.140026890
mov dword [rbp + 0x50], eax
lea rcx, [0x140128d78]
call fcn.14002c620
mov rax, qword [rbp + 0x70]
lea rcx, [0x1401290d0]
mov dword [rax], 0
call fcn.1400b80f0
mov eax, dword [rbp + 0x50]
test eax, eax
je 0x140029791
cmp eax, 2
je 0x140029694
call fcn.1400da120
jmp 0x140029696
mov ecx, dword [rbp + 0x1fb8]
call fcn.140029d10
int3