// File: /workspace/github_cpp_makefile_star2_O1/4n6ist[P]usn_analytics/lib/usnjrnl.cpp
// Function: UsnJrnl::WriteSuspiciousInfo()
int UsnJrnl::WriteSuspiciousInfo() {
  map<string, uint16_t> job_table, exe_table, dll_table, scr_table, ps1_table, vb_table, bat_table, tck_table;
  map<string, string> psexec_table;  // timestamp, filename
  //map<string, uint16_t> stream_table, ea_table;
  int i;
  
  for(i=0; i < usnmain_set.size(); i++) {
    if (usnmain_set[i].file_name.size() < 5 )
      continue;
    if (usnmain_set[i].reasons_i == (SECURITY|CLOSE))
      continue;
      
    FindInsertCount(&(usnmain_set[i].file_name), ".job", &job_table);
    FindInsertCount(&(usnmain_set[i].file_name), ".exe", &exe_table);
    FindInsertCount(&(usnmain_set[i].file_name), ".dll", &dll_table);
    FindInsertCount(&(usnmain_set[i].file_name), ".scr", &scr_table);
    FindInsertCount(&(usnmain_set[i].file_name), ".vba", &vb_table);
    FindInsertCount(&(usnmain_set[i].file_name), ".vbe", &vb_table);
    FindInsertCount(&(usnmain_set[i].file_name), ".vbs", &vb_table);
    FindInsertCount(&(usnmain_set[i].file_name), ".ps1", &ps1_table);
    FindInsertCount(&(usnmain_set[i].file_name), ".bat", &bat_table);
    FindInsertCount(&(usnmain_set[i].file_name), ".tck", &tck_table);

#ifdef _WIN32
    if (stricmp(usnmain_set[i].file_name.c_str(), "PSEXESVC.exe") == 0)      
       psexec_table[usnmain_set[i].timestamp_s] = usnmain_set[i].file_name;
#else
    if (strcasecmp(usnmain_set[i].file_name.c_str(), "PSEXESVC.exe") == 0)      
       psexec_table[usnmain_set[i].timestamp_s] = usnmain_set[i].file_name;    
#endif
        
  }
  
  WriteFileNameList("job", &job_table);
  WriteFileNameList("exe", &exe_table);
  WriteFileNameList("dll", &dll_table);
  WriteFileNameList("scr", &scr_table);
  WriteFileNameList("ps1", &ps1_table);
  WriteFileNameList("vbe/vbs", &vb_table);
  WriteFileNameList("bat", &bat_table);
  WriteFileNameList("tck", &tck_table);

  fprintf(fp_ofreport, "\n[PSEXESVC] %lu files (timestamp, name)\n", psexec_table.size());
  i=0;
  for(auto x: psexec_table) {
    fprintf(fp_ofreport, "%s, %s\n", x.first.c_str(), x.second.c_str());
    i++;
    if(i > 1024) {
      fprintf(fp_ofreport, "reached 1024 files...skip the rest\n");
      break;
    }      
  }

  printf("...Done\n");  

  return 0;
}

// Assembly:
pushq %rbp
pushq %r15
pushq %r14
pushq %r13
pushq %r12
pushq %rbx
subq $0x438, %rsp            # imm = 0x438
movq %rdi, %rbx
leaq 0x410(%rsp), %rcx
xorl %eax, %eax
movl %eax, (%rcx)
movq %rax, 0x8(%rcx)
movq %rcx, 0x10(%rcx)
movq %rcx, 0x18(%rcx)
movq %rax, 0x20(%rcx)
leaq 0x3e0(%rsp), %rcx
movl %eax, (%rcx)
movq %rax, 0x8(%rcx)
movq %rcx, 0x10(%rcx)
movq %rcx, 0x18(%rcx)
movq %rax, 0x20(%rcx)
leaq 0x3b0(%rsp), %rcx
movl %eax, (%rcx)
movq %rax, 0x8(%rcx)
movq %rcx, 0x10(%rcx)
movq %rcx, 0x18(%rcx)
movq %rax, 0x20(%rcx)
leaq 0x380(%rsp), %rcx
movl %eax, (%rcx)
movq %rax, 0x8(%rcx)
movq %rcx, 0x10(%rcx)
movq %rcx, 0x18(%rcx)
movq %rax, 0x20(%rcx)
leaq 0x350(%rsp), %rcx
movl %eax, (%rcx)
movq %rax, 0x8(%rcx)
movq %rcx, 0x10(%rcx)
movq %rcx, 0x18(%rcx)
movq %rax, 0x20(%rcx)
leaq 0x320(%rsp), %rcx
movl %eax, (%rcx)
movq %rax, 0x8(%rcx)
movq %rcx, 0x10(%rcx)
movq %rcx, 0x18(%rcx)
movq %rax, 0x20(%rcx)
leaq 0x2f0(%rsp), %rcx
movl %eax, (%rcx)
movq %rax, 0x8(%rcx)
movq %rcx, 0x10(%rcx)
movq %rcx, 0x18(%rcx)
movq %rax, 0x20(%rcx)
leaq 0x2c0(%rsp), %rcx
movl %eax, (%rcx)
movq %rax, 0x8(%rcx)
movq %rcx, 0x10(%rcx)
movq %rcx, 0x18(%rcx)
movq %rax, 0x20(%rcx)
leaq 0x290(%rsp), %rcx
movl %eax, (%rcx)
movq %rax, 0x8(%rcx)
movq %rcx, 0x10(%rcx)
movq %rcx, 0x18(%rcx)
movq %rax, 0x20(%rcx)
movq 0x50(%rdi), %r13
cmpq %r13, 0x58(%rdi)
je 0x7d55
movl $0x3a, %r14d
xorl %ebp, %ebp
movabsq $0x3a4c0a237c32b16d, %r15 # imm = 0x3A4C0A237C32B16D
leaq 0x8(%rsp), %r12
cmpq $0x5, 0x8(%r13,%r14)
jb 0x7d30
cmpl $0x80000800, 0x20(%r13,%r14) # imm = 0x80000800
je 0x7d30
movq %r12, %r15
leaq 0x138(%rsp), %rax
movq %rax, 0x128(%rsp)
leaq 0x128(%rsp), %r12
movq %r12, %rdi
leaq 0x7b6a(%rip), %rsi      # 0xf487
leaq 0x7b67(%rip), %rdx      # 0xf48b
callq 0x97be
addq %r14, %r13
movq %r13, %rsi
movq %r12, %rdx
leaq 0x408(%rsp), %rcx
callq 0x8542
movq 0x128(%rsp), %rdi
leaq 0x138(%rsp), %rax
cmpq %rax, %rdi
je 0x7964
movq 0x138(%rsp), %rsi
incq %rsi
callq 0x3230
movq 0x50(%rbx), %r13
leaq 0x118(%rsp), %rax
movq %rax, 0x108(%rsp)
leaq 0x108(%rsp), %r12
movq %r12, %rdi
leaq 0x7b32(%rip), %rsi      # 0xf4bc
leaq 0x7b2f(%rip), %rdx      # 0xf4c0
callq 0x97be
addq %r14, %r13
movq %r13, %rsi
movq %r12, %rdx
leaq 0x3d8(%rsp), %rcx
callq 0x8542
movq 0x108(%rsp), %rdi
leaq 0x118(%rsp), %rax
cmpq %rax, %rdi
je 0x79d1
movq 0x118(%rsp), %rsi
incq %rsi
callq 0x3230
movq 0x50(%rbx), %r13
leaq 0x18(%rsp), %rax
movq %rax, 0x8(%rsp)
movq %r15, %rdi
leaq 0x7aa3(%rip), %rsi      # 0xf48c
leaq 0x7aa0(%rip), %rdx      # 0xf490
callq 0x97be
addq %r14, %r13
movq %r13, %rsi
movq %r15, %rdx
leaq 0x3a8(%rsp), %rcx
callq 0x8542
movq 0x8(%rsp), %rdi
leaq 0x18(%rsp), %rax
cmpq %rax, %rdi
je 0x7a27
movq 0x18(%rsp), %rsi
incq %rsi
callq 0x3230
movq 0x50(%rbx), %r13
leaq 0xf8(%rsp), %rax
movq %rax, 0xe8(%rsp)
leaq 0xe8(%rsp), %r12
movq %r12, %rdi
leaq 0x7a44(%rip), %rsi      # 0xf491
leaq 0x7a41(%rip), %rdx      # 0xf495
callq 0x97be
addq %r14, %r13
movq %r13, %rsi
movq %r12, %rdx
leaq 0x378(%rsp), %rcx
callq 0x8542
movq 0xe8(%rsp), %rdi
leaq 0xf8(%rsp), %rax
cmpq %rax, %rdi
leaq 0xc8(%rsp), %r12
je 0x7a9c
movq 0xf8(%rsp), %rsi
incq %rsi
callq 0x3230
movq 0x50(%rbx), %r13
leaq 0xd8(%rsp), %rax
movq %rax, 0xc8(%rsp)
movq %r12, %rdi
leaq 0x79dc(%rip), %rsi      # 0xf496
leaq 0x79d9(%rip), %rdx      # 0xf49a
callq 0x97be
addq %r14, %r13
movq %r13, %rsi
movq %r12, %rdx
leaq 0x318(%rsp), %r12
movq %r12, %rcx
callq 0x8542
movq 0xc8(%rsp), %rdi
leaq 0xd8(%rsp), %rax
cmpq %rax, %rdi
je 0x7b04
movq 0xd8(%rsp), %rsi
incq %rsi
callq 0x3230
movq 0x50(%rbx), %r13
leaq 0xb8(%rsp), %rax
movq %rax, 0xa8(%rsp)
leaq 0xa8(%rsp), %r15
movq %r15, %rdi
leaq 0x7971(%rip), %rsi      # 0xf49b
leaq 0x796e(%rip), %rdx      # 0xf49f
callq 0x97be
addq %r14, %r13
movq %r13, %rsi
movq %r15, %rdx
movq %r12, %rcx
callq 0x8542
movq 0xa8(%rsp), %rdi
leaq 0xb8(%rsp), %rax
cmpq %rax, %rdi
leaq 0x88(%rsp), %r15
je 0x7b74
movq 0xb8(%rsp), %rsi
incq %rsi
callq 0x3230
movq 0x50(%rbx), %r13
leaq 0x98(%rsp), %rax
movq %rax, 0x88(%rsp)
movq %r15, %rdi
leaq 0x790e(%rip), %rsi      # 0xf4a0
leaq 0x790b(%rip), %rdx      # 0xf4a4
callq 0x97be
addq %r14, %r13
movq %r13, %rsi
movq %r15, %rdx
movq %r12, %rcx
callq 0x8542
movq 0x88(%rsp), %rdi
leaq 0x98(%rsp), %rax
cmpq %rax, %rdi
leaq 0x68(%rsp), %r15
leaq 0x8(%rsp), %r12
je 0x7bde
movq 0x98(%rsp), %rsi
incq %rsi
callq 0x3230
movq 0x50(%rbx), %r13
leaq 0x78(%rsp), %rax
movq %rax, 0x68(%rsp)
movq %r15, %rdi
leaq 0x78af(%rip), %rsi      # 0xf4a5
leaq 0x78ac(%rip), %rdx      # 0xf4a9
callq 0x97be
addq %r14, %r13
movq %r13, %rsi
movq %r15, %rdx
leaq 0x348(%rsp), %rcx
callq 0x8542
movq 0x68(%rsp), %rdi
leaq 0x78(%rsp), %rax
cmpq %rax, %rdi
leaq 0x48(%rsp), %r15
je 0x7c39
movq 0x78(%rsp), %rsi
incq %rsi
callq 0x3230
movq 0x50(%rbx), %r13
leaq 0x58(%rsp), %rax
movq %rax, 0x48(%rsp)
movq %r15, %rdi
leaq 0x7859(%rip), %rsi      # 0xf4aa
leaq 0x7856(%rip), %rdx      # 0xf4ae
callq 0x97be
addq %r14, %r13
movq %r13, %rsi
movq %r15, %rdx
leaq 0x2e8(%rsp), %rcx
callq 0x8542
movq 0x48(%rsp), %rdi
leaq 0x58(%rsp), %rax
cmpq %rax, %rdi
leaq 0x28(%rsp), %r15
je 0x7c94
movq 0x58(%rsp), %rsi
incq %rsi
callq 0x3230
movq 0x50(%rbx), %r13
leaq 0x38(%rsp), %rax
movq %rax, 0x28(%rsp)
movq %r15, %rdi
leaq 0x7803(%rip), %rsi      # 0xf4af
leaq 0x7800(%rip), %rdx      # 0xf4b3
callq 0x97be
addq %r14, %r13
movq %r13, %rsi
movq %r15, %rdx
leaq 0x2b8(%rsp), %rcx
callq 0x8542
movq 0x28(%rsp), %rdi
leaq 0x38(%rsp), %rax
cmpq %rax, %rdi
movabsq $0x3a4c0a237c32b16d, %r15 # imm = 0x3A4C0A237C32B16D
je 0x7cf4
movq 0x38(%rsp), %rsi
incq %rsi
callq 0x3230
movq 0x50(%rbx), %r13
movq (%r13,%r14), %rdi
leaq 0x77b0(%rip), %rsi      # 0xf4b4
callq 0x3280
testl %eax, %eax
jne 0x7d30
leaq (%r14,%r13), %rsi
addq $-0x28, %rsi
leaq 0x288(%rsp), %rdi
callq 0x9362
addq %r14, %r13
movq %rax, %rdi
movq %r13, %rsi
callq 0x3120
incq %rbp
movq 0x50(%rbx), %r13
movq 0x58(%rbx), %rax
subq %r13, %rax
sarq %rax
imulq %r15, %rax
addq $0xca, %r14
cmpq %rbp, %rax
ja 0x78dd
leaq 0x278(%rsp), %r14
movq %r14, -0x10(%r14)
leaq 0x7720(%rip), %rsi      # 0xf488
leaq 0x771c(%rip), %rdx      # 0xf48b
leaq 0x268(%rsp), %rdi
callq 0x97be
leaq 0x268(%rsp), %rsi
leaq 0x408(%rsp), %rdx
movq %rbx, %rdi
callq 0x8636
movq 0x268(%rsp), %rdi
cmpq %r14, %rdi
je 0x7db1
movq 0x278(%rsp), %rsi
incq %rsi
callq 0x3230
leaq 0x258(%rsp), %r14
movq %r14, -0x10(%r14)
leaq 0x76f9(%rip), %rsi      # 0xf4bd
leaq 0x76f5(%rip), %rdx      # 0xf4c0
leaq 0x248(%rsp), %rdi
callq 0x97be
leaq 0x248(%rsp), %rsi
leaq 0x3d8(%rsp), %rdx
movq %rbx, %rdi
callq 0x8636
movq 0x248(%rsp), %rdi
cmpq %r14, %rdi
je 0x7e0d
movq 0x258(%rsp), %rsi
incq %rsi
callq 0x3230
leaq 0x238(%rsp), %r14
movq %r14, -0x10(%r14)
leaq 0x766d(%rip), %rsi      # 0xf48d
leaq 0x7669(%rip), %rdx      # 0xf490
leaq 0x228(%rsp), %rdi
callq 0x97be
leaq 0x228(%rsp), %rsi
leaq 0x3a8(%rsp), %rdx
movq %rbx, %rdi
callq 0x8636
movq 0x228(%rsp), %rdi
cmpq %r14, %rdi
je 0x7e69
movq 0x238(%rsp), %rsi
incq %rsi
callq 0x3230
leaq 0x218(%rsp), %r14
movq %r14, -0x10(%r14)
leaq 0x7616(%rip), %rsi      # 0xf492
leaq 0x7612(%rip), %rdx      # 0xf495
leaq 0x208(%rsp), %rdi
callq 0x97be
leaq 0x208(%rsp), %rsi
leaq 0x378(%rsp), %rdx
movq %rbx, %rdi
callq 0x8636
movq 0x208(%rsp), %rdi
cmpq %r14, %rdi
je 0x7ec5
movq 0x218(%rsp), %rsi
incq %rsi
callq 0x3230
leaq 0x1f8(%rsp), %r14
movq %r14, -0x10(%r14)
leaq 0x75ce(%rip), %rsi      # 0xf4a6
leaq 0x75ca(%rip), %rdx      # 0xf4a9
leaq 0x1e8(%rsp), %rdi
callq 0x97be
leaq 0x1e8(%rsp), %rsi
leaq 0x348(%rsp), %rdx
movq %rbx, %rdi
callq 0x8636
movq 0x1e8(%rsp), %rdi
cmpq %r14, %rdi
je 0x7f21
movq 0x1f8(%rsp), %rsi
incq %rsi
callq 0x3230
leaq 0x1d8(%rsp), %r14
movq %r14, -0x10(%r14)
leaq 0x758d(%rip), %rsi      # 0xf4c1
leaq 0x758d(%rip), %rdx      # 0xf4c8
leaq 0x1c8(%rsp), %rdi
callq 0x97be
leaq 0x1c8(%rsp), %rsi
leaq 0x318(%rsp), %rdx
movq %rbx, %rdi
callq 0x8636
movq 0x1c8(%rsp), %rdi
cmpq %r14, %rdi
je 0x7f7d
movq 0x1d8(%rsp), %rsi
incq %rsi
callq 0x3230
leaq 0x1b8(%rsp), %r14
movq %r14, -0x10(%r14)
leaq 0x751b(%rip), %rsi      # 0xf4ab
leaq 0x7517(%rip), %rdx      # 0xf4ae
leaq 0x1a8(%rsp), %rdi
callq 0x97be
leaq 0x1a8(%rsp), %rsi
leaq 0x2e8(%rsp), %rdx
movq %rbx, %rdi
callq 0x8636
movq 0x1a8(%rsp), %rdi
cmpq %r14, %rdi
je 0x7fd9
movq 0x1b8(%rsp), %rsi
incq %rsi
callq 0x3230
leaq 0x198(%rsp), %r14
movq %r14, -0x10(%r14)
leaq 0x74c4(%rip), %rsi      # 0xf4b0
leaq 0x74c0(%rip), %rdx      # 0xf4b3
leaq 0x188(%rsp), %rdi
callq 0x97be
leaq 0x188(%rsp), %rsi
leaq 0x2b8(%rsp), %rdx
movq %rbx, %rdi
callq 0x8636
movq 0x188(%rsp), %rdi
cmpq %r14, %rdi
je 0x8035
movq 0x198(%rsp), %rsi
incq %rsi
callq 0x3230
movq 0x18(%rbx), %rdi
movq 0x2b0(%rsp), %rdx
leaq 0x7481(%rip), %rsi      # 0xf4c9
xorl %eax, %eax
callq 0x3360
movq 0x2a0(%rsp), %r14
leaq 0x290(%rsp), %rax
cmpq %rax, %r14
je 0x8170
leaq 0x178(%rsp), %rbp
movl $0x401, %r13d           # imm = 0x401
leaq 0x148(%rsp), %r15
leaq 0x746d(%rip), %r12      # 0xf4f2
leaq 0x20(%r14), %rsi
movq %r15, %rdi
callq 0x93de
movq 0x18(%rbx), %rdi
movq 0x148(%rsp), %rdx
movq 0x168(%rsp), %rcx
movq %r12, %rsi
xorl %eax, %eax
callq 0x3360
decl %r13d
je 0x8114
movq 0x168(%rsp), %rdi
cmpq %rbp, %rdi
je 0x80d1
movq 0x178(%rsp), %rsi
incq %rsi
callq 0x3230
movq 0x148(%rsp), %rdi
leaq 0x158(%rsp), %rax
cmpq %rax, %rdi
je 0x80f6
movq 0x158(%rsp), %rsi
incq %rsi
callq 0x3230
movq %r14, %rdi
callq 0x3150
movq %rax, %r14
leaq 0x290(%rsp), %rax
cmpq %rax, %r14
jne 0x8085
jmp 0x8170
movq 0x18(%rbx), %rcx
leaq 0x732b(%rip), %rdi      # 0xf44a
movl $0x23, %esi
movl $0x1, %edx
callq 0x34c0
movq 0x168(%rsp), %rdi
cmpq %rbp, %rdi
je 0x814b
movq 0x178(%rsp), %rsi
incq %rsi
callq 0x3230
movq 0x148(%rsp), %rdi
leaq 0x158(%rsp), %rax
cmpq %rax, %rdi
je 0x8170
movq 0x158(%rsp), %rsi
incq %rsi
callq 0x3230
leaq 0x74b6(%rip), %rdi      # 0xf62d
callq 0x33e0
leaq 0x288(%rsp), %rdi
callq 0x967c
leaq 0x2b8(%rsp), %rdi
callq 0x9604
leaq 0x2e8(%rsp), %rdi
callq 0x9604
leaq 0x318(%rsp), %rdi
callq 0x9604
leaq 0x348(%rsp), %rdi
callq 0x9604
leaq 0x378(%rsp), %rdi
callq 0x9604
leaq 0x3a8(%rsp), %rdi
callq 0x9604
leaq 0x3d8(%rsp), %rdi
callq 0x9604
leaq 0x408(%rsp), %rdi
callq 0x9604
xorl %eax, %eax
addq $0x438, %rsp            # imm = 0x438
popq %rbx
popq %r12
popq %r13
popq %r14
popq %r15
popq %rbp
retq
movq %rax, %rbx
movq 0x188(%rsp), %rdi
cmpq %r14, %rdi
je 0x84c5
movq 0x198(%rsp), %rsi
jmp 0x84b8
jmp 0x84c2
movq %rax, %rbx
movq 0x1a8(%rsp), %rdi
cmpq %r14, %rdi
je 0x84c5
movq 0x1b8(%rsp), %rsi
jmp 0x84b8
jmp 0x84c2
movq %rax, %rbx
movq 0x1c8(%rsp), %rdi
cmpq %r14, %rdi
je 0x84c5
movq 0x1d8(%rsp), %rsi
jmp 0x84b8
jmp 0x84c2
movq %rax, %rbx
movq 0x1e8(%rsp), %rdi
cmpq %r14, %rdi
je 0x84c5
movq 0x1f8(%rsp), %rsi
jmp 0x84b8
jmp 0x84c2
movq %rax, %rbx
movq 0x208(%rsp), %rdi
cmpq %r14, %rdi
je 0x84c5
movq 0x218(%rsp), %rsi
jmp 0x84b8
jmp 0x84c2
movq %rax, %rbx
movq 0x228(%rsp), %rdi
cmpq %r14, %rdi
je 0x84c5
movq 0x238(%rsp), %rsi
jmp 0x84b8
jmp 0x84c2
movq %rax, %rbx
movq 0x248(%rsp), %rdi
cmpq %r14, %rdi
je 0x84c5
movq 0x258(%rsp), %rsi
jmp 0x84b8
jmp 0x84c2
movq %rax, %rbx
movq 0x268(%rsp), %rdi
cmpq %r14, %rdi
je 0x84c5
movq 0x278(%rsp), %rsi
jmp 0x84b8
jmp 0x84c2
jmp 0x84c2
jmp 0x84c2
jmp 0x84c2
jmp 0x84c2
movq %rax, %rbx
movq 0xe8(%rsp), %rdi
leaq 0xf8(%rsp), %rax
cmpq %rax, %rdi
je 0x84c5
movq 0xf8(%rsp), %rsi
jmp 0x84b8
movq %rax, %rbx
movq 0x68(%rsp), %rdi
leaq 0x78(%rsp), %rax
cmpq %rax, %rdi
je 0x84c5
movq 0x78(%rsp), %rsi
jmp 0x84b8
jmp 0x84c2
jmp 0x84c2
movq %rax, %rbx
movq 0x8(%rsp), %rdi
leaq 0x18(%rsp), %rax
cmpq %rax, %rdi
je 0x84c5
movq 0x18(%rsp), %rsi
jmp 0x84b8
movq %rax, %rbx
movq 0x88(%rsp), %rdi
leaq 0x98(%rsp), %rax
cmpq %rax, %rdi
je 0x84c5
movq 0x98(%rsp), %rsi
jmp 0x84b8
jmp 0x84c2
jmp 0x84c2
movq %rax, %rbx
movq 0x108(%rsp), %rdi
leaq 0x118(%rsp), %rax
cmpq %rax, %rdi
je 0x84c5
movq 0x118(%rsp), %rsi
jmp 0x84b8
movq %rax, %rbx
movq 0xa8(%rsp), %rdi
leaq 0xb8(%rsp), %rax
cmpq %rax, %rdi
je 0x84c5
movq 0xb8(%rsp), %rsi
jmp 0x84b8
movq %rax, %rbx
movq 0x28(%rsp), %rdi
leaq 0x38(%rsp), %rax
cmpq %rax, %rdi
je 0x84c5
movq 0x38(%rsp), %rsi
jmp 0x84b8
jmp 0x84c2
jmp 0x84c2
jmp 0x84c2
movq %rax, %rbx
movq 0x128(%rsp), %rdi
leaq 0x138(%rsp), %rax
cmpq %rax, %rdi
je 0x84c5
movq 0x138(%rsp), %rsi
jmp 0x84b8
movq %rax, %rbx
movq 0xc8(%rsp), %rdi
leaq 0xd8(%rsp), %rax
cmpq %rax, %rdi
je 0x84c5
movq 0xd8(%rsp), %rsi
jmp 0x84b8
movq %rax, %rbx
movq 0x48(%rsp), %rdi
leaq 0x58(%rsp), %rax
cmpq %rax, %rdi
je 0x84c5
movq 0x58(%rsp), %rsi
incq %rsi
callq 0x3230
jmp 0x84c5
movq %rax, %rbx
leaq 0x288(%rsp), %rdi
callq 0x967c
leaq 0x2b8(%rsp), %rdi
callq 0x9604
leaq 0x2e8(%rsp), %rdi
callq 0x9604
leaq 0x318(%rsp), %rdi
callq 0x9604
leaq 0x348(%rsp), %rdi
callq 0x9604
leaq 0x378(%rsp), %rdi
callq 0x9604
leaq 0x3a8(%rsp), %rdi
callq 0x9604
leaq 0x3d8(%rsp), %rdi
callq 0x9604
leaq 0x408(%rsp), %rdi
callq 0x9604
movq %rbx, %rdi
callq 0x3470