Function at 0x180027cc0
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov dword [rsp + 8], ecx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0xe8
imul eax, ecx, 0x999
mov r11, r9
mov rbx, r8
mov dword [rsp + 0x40], ecx
mov r10, rdx
mov r12d, ecx
mov dword [rbp - 0x29], eax
cmp ecx, eax
ja 0x1800280e0
mov r14, qword [rbp - 0x59]
xor r13d, r13d
mov r15d, dword [rbp - 0x61]
lea r9, [r13 - 1]
nop dword [rax + rax]
cmp r12d, 0x65ae
ja 0x18002811a
je 0x180028104
cmp r12d, 0x1112
ja 0x1800280ca
je 0x180027e4b
mov eax, r12d
sub eax, 0x17
je 0x180027e1d
sub eax, 0x72
je 0x180027d86
cmp eax, 0x88
jne 0x180028480
cmp qword [r10 + 0x10], 4
jb 0x1800284a5
cmp qword [r10 + 0x18], 0x10
mov rax, r10
jb 0x180027d7a
mov rax, qword [r10]
cmp dword [rax], 0xffffffff
sete byte [rbp - 0x39]
jmp 0x180028480
mov eax, dword [0x18003cb1c]
xor r9d, r9d
xor r8d, r8d
mov dword [rbp - 0x51], eax
xor edx, edx
mov qword [rsp + 0x20], r13
mov ecx, 0xf6
call fcn.18002c4e0
test al, al
je 0x180028471
movzx edx, byte [0x18003cbb1]
mov ecx, 0x4f
nop word [rax + rax]
mov eax, ecx
sub eax, 0x4c
je 0x180027dda
sub eax, 1
je 0x180027de4
cmp eax, 2
jne 0x180027ddd
mov byte [0x18003900c], 0x2b
jmp 0x180027ddd
or dl, 2
inc ecx
cmp ecx, 0x52
jb 0x180027dc0
mov byte [0x18003cbb1], dl
lea r9, [0x18002fa85]
lea rdx, [0x18002fa85]
mov dword [rsp + 0x40], r13d
lea r8, [rsp + 0x40]
mov ecx, 0x5d
call fcn.180007790
xor edx, edx
mov ecx, 0xcb
call fcn.18002b650
jmp 0x180028471
cmp qword [r10 + 0x18], 0x10
mov rax, r10
jb 0x180027e2a
mov rax, qword [r10]
mov r14, qword [r10 + 0x10]
add rax, 4
mov qword [rbp - 0x41], rax
sub r14, 4
lea rax, [r11 + 0x20]
mov qword [rbp - 0x59], r14
mov qword [rbp - 0x21], rax
jmp 0x180028480
mov rdx, qword [rbp - 0x21]
mov r8d, r13d
nop dword [rax]
nop word [rax + rax]
mov ecx, 0x4b
mov eax, ecx
sub eax, 0x4a
je 0x180027f19
mov rdi, qword [rbp - 0x41]
cmp eax, 1
jne 0x180027e95
mov qword [rdx], rdi
nop dword [rax]
inc r9
cmp byte [rdi + r9], 0
jne 0x180027e80
mov qword [rbp - 0x19], r9
mov r9, 0xffffffffffffffff
mov r10, qword [rbp - 0x59]
dec ecx
cmp ecx, 0x49
ja 0x180027e65
inc r8d
add rdx, 8
cmp r8d, 4
jb 0x180027e60
mov qword [rbp - 9], r11
mov qword [rbp - 1], rbx
movaps xmm0, xmmword [rbp - 9]
mov dword [rbp - 0x69], r13d
lea r13, [rbp + 7]
movdqa xmmword [rbp + 7], xmm0
nop word [rax + rax]
mov r12d, 0x77
nop word [rax + rax]
mov eax, r12d
sub eax, 0x77
je 0x18002807e
sub eax, 0x52
je 0x18002806c
sub eax, 0x52
je 0x180027f4e
cmp eax, 0x52
jne 0x180028090
mov eax, r15d
add rdi, rax
sub r10, rax
mov qword [rbp - 0x41], rdi
mov qword [rbp - 0x59], r10
jmp 0x180028090
mov r10, qword [rbp - 0x59]
mov rax, r9
mov r9, qword [rbp - 0x19]
sub rax, r9
add r10, rax
mov qword [rbp - 0x59], r10
je 0x1800284a5
mov rdi, qword [rbp - 0x41]
inc r9
add rdi, r9
mov r9, 0xffffffffffffffff
mov qword [rbp - 0x41], rdi
jmp 0x180027e99
mov esi, dword [rbp - 0x61]
cmp rsi, r10
ja 0x1800284a5
mov r14, qword [r13]
mov r15, qword [r14 + 0x18]
cmp rsi, r15
ja 0x180027f92
mov rbx, r14
cmp r15, 0x10
jb 0x180027f73
mov rbx, qword [r14]
mov r8, rsi
mov qword [r14 + 0x10], rsi
mov rdx, rdi
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov r15d, dword [rbp - 0x61]
mov byte [rbx + rsi], 0
jmp 0x180028090
mov rcx, r15
movabs rdx, 0x7fffffffffffffff
shr rcx, 1
mov rax, rdx
mov rdi, rsi
sub rax, rcx
or rdi, 0xf
cmp r15, rax
jbe 0x180027fb9
mov rdi, rdx
jmp 0x180027fc4
lea rax, [rcx + r15]
cmp rdi, rax
cmovb rdi, rax
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x180027ffd
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x180028540
mov rcx, rax
call fcn.18002d124
test rax, rax
je 0x18002849e
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x18002800e
test rcx, rcx
je 0x18002800c
call fcn.18002d124
mov rbx, rax
jmp 0x18002800e
xor ebx, ebx
mov qword [r14 + 0x18], rdi
mov r8, rsi
mov rdi, qword [rbp - 0x41]
mov rcx, rbx
mov rdx, rdi
mov qword [r14 + 0x10], rsi
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbx + rsi], 0
cmp r15, 0x10
jb 0x180028063
mov rcx, qword [r14]
lea rdx, [r15 + 1]
cmp rdx, 0x1000
jb 0x18002805e
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x18002849e
mov rcx, r8
call fcn.18002d160
mov r15d, dword [rbp - 0x61]
mov qword [r14], rbx
jmp 0x180028090
sub r10, 4
add rdi, 4
mov qword [rbp - 0x59], r10
mov qword [rbp - 0x41], rdi
jmp 0x180028090
cmp r10, 4
jb 0x1800284a5
mov eax, dword [rdi]
mov r15d, eax
mov dword [rbp - 0x61], eax
mov r10, qword [rbp - 0x59]
add r12d, 0x52
cmp r12d, 0x1bf
jb 0x180027ee0
mov eax, dword [rbp - 0x69]
add r13, 8
inc eax
mov dword [rbp - 0x69], eax
cmp eax, 2
jb 0x180027ed0
mov r12d, dword [rsp + 0x40]
mov r14, r10
xor r13d, r13d
jmp 0x18002846d
cmp r12d, 0x220d
je 0x1800280f8
cmp r12d, 0x3308
jne 0x180028480
mov rax, qword [rbp - 0x39]
add rsp, 0xe8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
test r14, r14
sete byte [rbp - 0x39]
jmp 0x180028480
mov edx, 0x85
mov rcx, r10
call fcn.180016070
mov qword [rbp - 0x31], rax
jmp 0x180028471
cmp r12d, 0x1951d
ja 0x1800282d4
je 0x18002829b
mov eax, r12d
sub eax, 0xca9e
je 0x1800280e0
sub eax, 0x35
je 0x18002815d
cmp eax, 0x6525
jne 0x180028480
mov rcx, qword [rbp - 0x31]
mov eax, dword [rcx + 8]
mov dword [rbp - 0x49], eax
movzx eax, byte [rcx + 0x10]
mov byte [rbp - 0x71], al
jmp 0x180028480
cmp qword [rbp - 0x31], 0
jne 0x180028480
mov esi, 0x27
mov dword [rbp - 0x69], esi
cmp esi, 0x27
je 0x180028186
cmp esi, 0x924
je 0x1800280e0
jmp 0x180028281
xor r9d, r9d
mov qword [rsp + 0x20], r13
xor r8d, r8d
xor edx, edx
mov ecx, 0xf6
call fcn.18002c4e0
test al, al
je 0x18002827d
mov esi, dword [rbp - 0x51]
mov edi, 0x1f
nop dword [rax]
cmp edi, 0x1f
je 0x18002825b
cmp edi, 0x20f
je 0x1800281f1
cmp edi, 0x3ff
jne 0x180028268
lea r9, [0x18002fa85]
mov dword [rsp + 0x40], r13d
lea r8, [rsp + 0x40]
mov ecx, 0x5d
lea rdx, [0x18002fa85]
call fcn.180007790
jmp 0x180028268
cmp esi, dword [0x18003cb1c]
je 0x180028268
mov ebx, 0xb4
nop
mov eax, ebx
sub eax, 0xb2
je 0x180028249
sub eax, 1
je 0x18002822a
cmp eax, 1
jne 0x18002824f
mov r8d, dword [0x18003cb1c]
lea rcx, str.CGatewaySession::Received_RouterAuthentication___TVSession_unknown__aborting
mov edx, esi
call fcn.18002cfd0
jmp 0x18002824f
xor r9d, r9d
lea r8, [0x18002fa85]
lea rdx, [0x18002fa85]
lea rcx, str.could_not_load_delphi_evaluator
call fcn.18002cfd0
jmp 0x18002824f
mov dword [0x18003cb1c], esi
dec ebx
cmp ebx, 0xb1
ja 0x180028200
jmp 0x180028268
xor edx, edx
xor ecx, ecx
lea r8d, [rdx + 0x15]
call fcn.18002a460
add edi, 0x1f0
cmp edi, 0x5d0
jbe 0x1800281b0
mov esi, dword [rbp - 0x69]
mov qword [rbp - 0x39], r13
add esi, 0x8fd
mov dword [rbp - 0x69], esi
cmp esi, 0x11fa
jbe 0x180028170
jmp 0x18002846d
mov rdx, qword [0x18003cb50]
mov r8, r10
mov ecx, 0x56
call fcn.180014e50
mov rax, qword [rbp - 0x31]
xor r9d, r9d
mov qword [rsp + 0x28], r13
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], rax
mov ecx, SHUnicodeToAnsi
call fcn.18000a510
jmp 0x180028471
cmp r12d, 0x1fa42
je 0x1800283df
cmp r12d, 0x25f67
jne 0x180028480
nop
inc r9
cmp byte [r10 + r9], 0
jne 0x1800282f0
mov rbx, qword [rbp - 0x11]
mov r8, r9
mov rcx, rbx
mov rdx, r10
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
movsx eax, byte [rbp - 0x71]
lea rdx, [rbp + 0x67]
mov rsi, qword [rbp - 0x31]
lea rcx, [rbp - 0x49]
mov dword [rbp + 0x67], eax
mov r9d, 0x33
mov eax, dword [rbp - 0x49]
mov r8, rsi
mov dword [rbp - 0x49], eax
mov qword [rsp + 0x20], rbx
call fcn.18001db00
xor r9d, r9d
mov qword [rsp + 0x20], r13
xor r8d, r8d
xor edx, edx
mov ecx, 0xf6
call fcn.18002c4e0
test al, al
je 0x18002850e
mov ebx, dword [rbp - 0x51]
mov edi, 0x3d
mov dword [rbp + 0x67], edi
cmp edi, 0x3d
je 0x1800284ec
cmp edi, 0x1f74
jne 0x1800284f9
mov ecx, dword [0x18003cb1c]
cmp ebx, ecx
je 0x1800284ca
mov edi, dword [rbp - 0x51]
mov ebx, 0x8e
nop
mov eax, ebx
sub eax, 0x8d
je 0x1800284ae
cmp eax, 1
jne 0x1800284b6
mov r8d, ecx
mov edx, edi
lea rcx, str.exports.writeIEEE754__function_buffer__value__offset__isBE__mLen__nBytes__
call fcn.18002cfd0
xor r9d, r9d
lea r8, [0x18002fa85]
lea rdx, [0x18002fa85]
lea rcx, str.peers_hash_had_incorrect_value
call fcn.18002cfd0
mov ecx, dword [0x18003cb1c]
jmp 0x1800284b6
mov rcx, r9
inc rcx
cmp byte [r10 + rcx], 0
jne 0x1800283e2
inc rcx
mov edx, 1
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov qword [rbp - 0x11], rax
mov rbx, rax
test rax, rax
je 0x180028520
xor r9d, r9d
mov qword [rsp + 0x20], r13
xor r8d, r8d
xor edx, edx
mov ecx, 0xf6
call fcn.18002c4e0
test al, al
je 0x18002846d
lea rax, [rsp + 0x48]
mov byte [rsp + 0x48], 1
mov qword [rsp + 0x30], rax
lea r9, [rsp + 0x40]
lea rax, [rbp - 0x79]
mov dword [rsp + 0x28], 0x121
lea r8, [0x18002fa85]
mov qword [rsp + 0x20], rax
lea rdx, [rbp - 0x69]
mov byte [rbp - 0x79], 2
lea rcx, [0x18002fa85]
mov dword [rsp + 0x40], ebx
mov dword [rbp - 0x69], r13d
call fcn.18001c8f0
mov rbx, qword [rbp + 0x77]
mov r11, qword [rbp + 0x7f]
mov r9, 0xffffffffffffffff
mov r10, qword [rbp + 0x6f]
imul eax, dword [rbp + 0x67], 0xbd
add r12d, eax
mov dword [rsp + 0x40], r12d
cmp r12d, dword [rbp - 0x29]
jbe 0x180027d20
jmp 0x1800280e0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov byte [rbp - 0x39], 0
jmp 0x1800280e0
mov ecx, edi
mov dword [0x18003cb1c], ecx
dec ebx
cmp ebx, 0x8c
ja 0x180028390
mov edi, dword [rbp + 0x67]
mov ebx, dword [rbp - 0x51]
lea r9, [0x18002fa85]
mov dword [rbp + 0x67], r13d
lea r8, [rbp + 0x67]
mov ecx, 0x5d
lea rdx, [0x18002fa85]
call fcn.180007790
jmp 0x1800284f9
xor edx, edx
xor ecx, ecx
lea r8d, [rdx + 0x15]
call fcn.18002a460
add edi, 0x1f37
mov dword [rbp + 0x67], edi
cmp edi, 0x3e6e
jbe 0x180028363
mov rax, rsi
jmp 0x1800280e4
mov r8d, 0xe
lea rdx, str.System.ItemUrl
lea ecx, [r8 - 0xd]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__write]
mov ecx, eax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call fcn.18001b110
int3