Function at 0x14003d840
Capabilities:
Check http status code
Get geographical location

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1230]
mov eax, 0x1330
call fcn.1401427f0
sub rsp, rax
mov rax, qword [0x1401c4de0]
xor rax, rsp
mov qword [rbp + 0x1220], rax
mov r13, rcx
xor r14d, r14d
mov qword [rbp + 0xb8], r14
mov qword [rbp + 0xc8], r14
mov qword [rbp + 0xd0], 7
mov word [rbp + 0xb8], r14w
mov qword [rbp + 0x98], r14
mov qword [rbp + 0xa8], r14
mov qword [rbp + 0xb0], 7
mov word [rbp + 0x98], r14w
mov qword [rbp + 0x78], r14
mov qword [rbp + 0x88], r14
mov qword [rbp + 0x90], 7
mov word [rbp + 0x78], r14w
mov qword [rbp + 0x58], r14
mov qword [rbp + 0x68], r14
mov qword [rbp + 0x70], 7
mov word [rbp + 0x58], r14w
mov qword [rbp + 0x38], r14
mov qword [rbp + 0x48], r14
mov qword [rbp + 0x50], 7
mov word [rbp + 0x38], r14w
mov qword [rbp + 0x18], r14
mov qword [rbp + 0x28], r14
mov qword [rbp + 0x30], 7
mov word [rbp + 0x18], r14w
xorps xmm0, xmm0
movsxd rbx, dword [rcx + 0xd8]
movdqu xmmword [rbp], xmm0
mov qword [rbp + 0x10], r14
test rbx, rbx
je 0x14003d9dd
movabs rax, 0x7ffffffffffffff
cmp rbx, rax
ja 0x14003ff21
mov rdi, rbx
shl rdi, 5
cmp rdi, 0x1000
jb 0x14003d992
lea rcx, [rdi + 0x27]
cmp rcx, rdi
jbe 0x14003ff27
call fcn.1401420a0
mov rcx, rax
test rax, rax
je 0x14003ff2d
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
lea rcx, [rax + rdi]
mov rdx, rax
jmp 0x14003d9b2
test rdi, rdi
je 0x14003d9a8
mov rcx, rdi
call fcn.1401420a0
lea rcx, [rax + rdi]
mov rdx, rax
jmp 0x14003d9b2
mov rax, r14
lea rcx, [r14 + rdi]
mov rdx, r14
mov qword [rbp], rdx
mov qword [rbp + 0x10], rcx
nop word [rax + rax]
mov qword [rax], r14
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 7
add rax, 0x20
sub rbx, 1
jne 0x14003d9c0
mov qword [rbp + 8], rax
mov rsi, 0xffffffffffffffff
mov dword [rbp - 0x74], esi
call fcn.1400563c0
mov rdi, rax
call fcn.140056140
mov rbx, rax
test rax, rax
jne 0x14003da07
mov rbx, rdi
mov rcx, rdi
call fcn.140056280
cmp rbx, rsi
je 0x14003da32
mov rdx, rbx
mov rcx, rdi
call fcn.14014e954
cvttsd2si ecx, xmm0
mov eax, 0xc22e4507
imul ecx
lea esi, [rcx + rdx]
sar esi, 0x10
mov eax, esi
shr eax, 0x1f
add esi, eax
mov dword [rbp - 0x74], esi
mov byte [rsp + 0x40], 0
cmp esi, 0xffffffff
je 0x14003fe9b
mov ebx, 1
cmp dword [r13 + 0xd8], ebx
jl 0x14003db02
mov rcx, qword [rbp + 0xc8]
mov rdx, qword [rbp + 0xd0]
mov rax, rdx
sub rax, rcx
cmp rax, 1
jb 0x14003da93
lea rax, [rcx + 1]
mov qword [rbp + 0xc8], rax
lea rax, [rbp + 0xb8]
cmp rdx, 8
cmovae rax, qword [rbp + 0xb8]
mov dword [rax + rcx*2], 0x5f
jmp 0x14003dab6
mov qword [rsp + 0x20], 1
lea r9, [0x1401a159c]
xor r8d, r8d
lea edx, [r8 + 1]
lea rcx, [rbp + 0xb8]
call fcn.14000f410
lea eax, [rbx - 1]
movsxd rcx, eax
shl rcx, 5
add rcx, qword [rbp]
lea rax, [rbp + 0xb8]
cmp rcx, rax
je 0x14003daf3
lea rdx, [rbp + 0xb8]
cmp qword [rbp + 0xd0], 8
cmovae rdx, qword [rbp + 0xb8]
mov r8, qword [rbp + 0xc8]
call fcn.140012600
inc ebx
cmp ebx, dword [r13 + 0xd8]
jle 0x14003da52
xor edi, edi
mov qword [rbp + 0x158], rdi
movdqa xmm0, xmmword [0x1401a2c40]
movdqu xmmword [rbp + 0x168], xmm0
mov word [rbp + 0x158], di
lea r8d, [rdi + 2]
lea rdx, [0x140180090]
lea rcx, [rbp + 0x158]
call fcn.140012600
nop
mov qword [rbp + 0x138], rdi
movdqa xmm0, xmmword [0x1401a2c40]
movdqu xmmword [rbp + 0x148], xmm0
mov word [rbp + 0x138], di
lea r8d, [rdi + 2]
lea rdx, [0x140180090]
lea rcx, [rbp + 0x138]
call fcn.140012600
nop
mov qword [rbp + 0x118], rdi
movdqa xmm0, xmmword [0x1401a2c40]
movdqu xmmword [rbp + 0x128], xmm0
mov word [rbp + 0x118], di
lea r8d, [rdi + 2]
lea rdx, [0x140180090]
lea rcx, [rbp + 0x118]
call fcn.140012600
nop
mov qword [rbp + 0xf8], rdi
movdqa xmm0, xmmword [0x1401a2c40]
movdqu xmmword [rbp + 0x108], xmm0
mov word [rbp + 0xf8], di
lea r8d, [rdi + 2]
lea rdx, [0x140180090]
lea rcx, [rbp + 0xf8]
call fcn.140012600
nop
mov qword [rbp + 0xd8], rdi
movdqa xmm0, xmmword [0x1401a2c40]
movdqu xmmword [rbp + 0xe8], xmm0
mov word [rbp + 0xd8], di
lea r8d, [rdi + 2]
lea rdx, [0x140180090]
lea rcx, [rbp + 0xd8]
call fcn.140012600
nop
movsxd rax, dword [r13 + 0xd8]
mov dword [rbp - 0x78], eax
movabs r12, 0x7ffffffffffffffe
cmp rax, 1
jl 0x14003efe0
movabs r8, 0x7fffffffffffffff
mov ecx, 0xa
lea rsi, [rax - 1]
mov qword [rbp - 0x70], rsi
shl rsi, 5
mov r14, qword [rbp]
add r14, rsi
mov rdx, qword [r14 + 0x10]
mov qword [rbp - 0x10], rdx
mov rax, r12
sub rax, rdx
cmp rax, 0x20
jb 0x14003ffab
cmp qword [r14 + 0x18], 8
jb 0x14003dc74
mov r14, qword [r14]
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x58], rdi
mov qword [rsp + 0x60], rdi
lea r15, [rdx + 0x20]
mov ebx, 7
lea rdi, [rsp + 0x48]
cmp r15, rbx
jbe 0x14003dd25
mov rbx, r15
or rbx, 7
cmp rbx, r12
jbe 0x14003dcab
mov rbx, r12
jmp 0x14003dcb3
cmp rbx, 0xa
cmovb rbx, rcx
mov rax, rbx
add rax, 1
mov rcx, 0xffffffffffffffff
cmovb rax, rcx
cmp rax, r8
ja 0x14003ff33
lea rcx, [rax + rax]
cmp rcx, 0x1000
jb 0x14003dd0b
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14003ff33
mov rcx, rax
call fcn.1401420a0
test rax, rax
je 0x14003ff3f
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
mov rdx, qword [rbp - 0x10]
jmp 0x14003dd20
test rcx, rcx
je 0x14003dd1e
call fcn.1401420a0
mov rdi, rax
mov rdx, qword [rbp - 0x10]
jmp 0x14003dd20
xor edi, edi
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x60], rbx
lea rbx, [rdx + rdx]
mov r8, rbx
mov rdx, r14
mov rcx, rdi
call fcn.1401441e0
movaps xmm0, xmmword [str.ActivityLog_UserInteractions.csv]
movups xmmword [rdi + rbx], xmm0
movaps xmm1, xmmword [0x14017fd10]
movups xmmword [rdi + rbx + 0x10], xmm1
movaps xmm0, xmmword [0x14017fd20]
movups xmmword [rdi + rbx + 0x20], xmm0
movaps xmm1, xmmword [0x14017fd30]
movups xmmword [rdi + rbx + 0x30], xmm1
xor eax, eax
mov word [rdi + r15*2], ax
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x68]
call fcn.14002fcf0
mov rbx, rax
lea rax, [rbp + 0x98]
cmp rax, rbx
je 0x14003de20
mov rdx, qword [rbp + 0xb0]
cmp rdx, 8
jb 0x14003dddf
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x98]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003ddda
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003ff39
call fcn.1401420dc
xor edi, edi
mov qword [rbp + 0xa8], rdi
mov qword [rbp + 0xb0], 7
mov word [rbp + 0x98], di
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x98], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0xa8], xmm1
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], 7
mov word [rbx], di
jmp 0x14003de22
xor edi, edi
mov rdx, qword [rbp - 0x80]
cmp rdx, 8
jb 0x14003de63
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003de5e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003ff39
call fcn.1401420dc
mov qword [rsp + 0x78], rdi
mov qword [rbp - 0x80], 7
mov word [rsp + 0x68], di
mov rdx, qword [rsp + 0x60]
cmp rdx, 8
jb 0x14003deb7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003deb2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003ff3f
call fcn.1401420dc
mov r14, qword [rbp]
add r14, rsi
mov rdx, qword [r14 + 0x10]
mov qword [rbp - 0x10], rdx
mov rax, r12
sub rax, rdx
cmp rax, 0x23
jb 0x14003ffa5
cmp qword [r14 + 0x18], 8
jb 0x14003dee0
mov r14, qword [r14]
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x58], rdi
mov qword [rsp + 0x60], rdi
lea r15, [rdx + 0x23]
mov ebx, 7
lea rdi, [rsp + 0x48]
cmp r15, rbx
jbe 0x14003dfa0
mov rbx, r15
or rbx, 7
cmp rbx, r12
jbe 0x14003df17
mov rbx, r12
jmp 0x14003df24
cmp rbx, 0xa
mov eax, 0xa
cmovb rbx, rax
mov rax, rbx
add rax, 1
mov rcx, 0xffffffffffffffff
cmovb rax, rcx
movabs rcx, 0x7fffffffffffffff
cmp rax, rcx
ja 0x14003ff45
lea rcx, [rax + rax]
cmp rcx, 0x1000
jb 0x14003df86
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14003ff45
mov rcx, rax
call fcn.1401420a0
test rax, rax
je 0x14003ff51
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
mov rdx, qword [rbp - 0x10]
jmp 0x14003df9b
test rcx, rcx
je 0x14003df96
call fcn.1401420a0
mov rdx, qword [rbp - 0x10]
jmp 0x14003df98
xor eax, eax
mov rdi, rax
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x60], rbx
lea rbx, [rdx + rdx]
mov r8, rbx
mov rdx, r14
mov rcx, rdi
call fcn.1401441e0
movaps xmm0, xmmword [str.ActivityLog_AppDomainStatistics.csv]
movups xmmword [rbx + rdi], xmm0
movaps xmm1, xmmword [0x14017fd60]
movups xmmword [rbx + rdi + 0x10], xmm1
movaps xmm0, xmmword [0x14017fd70]
movups xmmword [rbx + rdi + 0x20], xmm0
movaps xmm1, xmmword [0x14017fd80]
movups xmmword [rbx + rdi + 0x30], xmm1
mov eax, dword [0x14017fd90]
mov dword [rbx + rdi + 0x40], eax
movzx eax, word [0x14017fd94]
mov word [rbx + rdi + 0x44], ax
xor eax, eax
mov word [rdi + r15*2], ax
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x68]
call fcn.14002fcf0
mov rbx, rax
lea rax, [rbp + 0x78]
cmp rax, rbx
je 0x14003e0a5
mov rdx, qword [rbp + 0x90]
cmp rdx, 8
jb 0x14003e06a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003e065
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003ff4b
call fcn.1401420dc
xor edi, edi
mov qword [rbp + 0x88], rdi
mov qword [rbp + 0x90], 7
mov word [rbp + 0x78], di
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x78], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0x88], xmm1
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], 7
mov word [rbx], di
jmp 0x14003e0a7
xor edi, edi
mov rdx, qword [rbp - 0x80]
cmp rdx, 8
jb 0x14003e0e8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003e0e3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003ff4b
call fcn.1401420dc
mov qword [rsp + 0x78], rdi
mov qword [rbp - 0x80], 7
mov word [rsp + 0x68], di
mov rdx, qword [rsp + 0x60]
cmp rdx, 8
jb 0x14003e13c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003e137
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003ff51
call fcn.1401420dc
mov r14, qword [rbp]
add r14, rsi
mov rdx, qword [r14 + 0x10]
mov qword [rbp - 0x10], rdx
mov rax, r12
sub rax, rdx
cmp rax, 0x22
jb 0x14003ff9f
cmp qword [r14 + 0x18], 8
jb 0x14003e165
mov r14, qword [r14]
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x58], rdi
mov qword [rsp + 0x60], rdi
lea r15, [rdx + 0x22]
mov ebx, 7
lea rdi, [rsp + 0x48]
cmp r15, rbx
jbe 0x14003e225
mov rbx, r15
or rbx, 7
cmp rbx, r12
jbe 0x14003e19c
mov rbx, r12
jmp 0x14003e1a9
cmp rbx, 0xa
mov eax, 0xa
cmovb rbx, rax
mov rax, rbx
add rax, 1
mov rcx, 0xffffffffffffffff
cmovb rax, rcx
movabs rcx, 0x7fffffffffffffff
cmp rax, rcx
ja 0x14003ff57
lea rcx, [rax + rax]
cmp rcx, 0x1000
jb 0x14003e20b
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14003ff57
mov rcx, rax
call fcn.1401420a0
test rax, rax
je 0x14003ff63
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
mov rdx, qword [rbp - 0x10]
jmp 0x14003e220
test rcx, rcx
je 0x14003e21b
call fcn.1401420a0
mov rdx, qword [rbp - 0x10]
jmp 0x14003e21d
xor eax, eax
mov rdi, rax
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x60], rbx
lea rbx, [rdx + rdx]
mov r8, rbx
mov rdx, r14
mov rcx, rdi
call fcn.1401441e0
movaps xmm0, xmmword [str.ActivityLog_IntelligenceEvents.csv]
movups xmmword [rbx + rdi], xmm0
movaps xmm1, xmmword [0x14017fdb0]
movups xmmword [rbx + rdi + 0x10], xmm1
movaps xmm0, xmmword [0x14017fdc0]
movups xmmword [rbx + rdi + 0x20], xmm0
movaps xmm1, xmmword [0x14017fdd0]
movups xmmword [rbx + rdi + 0x30], xmm1
mov eax, dword [0x14017fde0]
mov dword [rbx + rdi + 0x40], eax
xor eax, eax
mov word [rdi + r15*2], ax
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x68]
call fcn.14002fcf0
mov rbx, rax
lea rax, [rbp + 0x58]
cmp rax, rbx
je 0x14003e30e
mov rdx, qword [rbp + 0x70]
cmp rdx, 8
jb 0x14003e2dc
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003e2d7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003ff5d
call fcn.1401420dc
xor edi, edi
mov qword [rbp + 0x68], rdi
mov qword [rbp + 0x70], 7
mov word [rbp + 0x58], di
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x58], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0x68], xmm1
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], 7
mov word [rbx], di
jmp 0x14003e310
xor edi, edi
mov rdx, qword [rbp - 0x80]
cmp rdx, 8
jb 0x14003e351
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003e34c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003ff5d
call fcn.1401420dc
mov qword [rsp + 0x78], rdi
mov qword [rbp - 0x80], 7
mov word [rsp + 0x68], di
mov rdx, qword [rsp + 0x60]
cmp rdx, 8
jb 0x14003e3a5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003e3a0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003ff63
call fcn.1401420dc
mov r14, qword [rbp]
add r14, rsi
mov rdx, qword [r14 + 0x10]
mov qword [rbp - 0x10], rdx
mov rax, r12
sub rax, rdx
cmp rax, 0x21
jb 0x14003ff99
cmp qword [r14 + 0x18], 8
jb 0x14003e3ce
mov r14, qword [r14]
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x58], rdi
mov qword [rsp + 0x60], rdi
lea r15, [rdx + 0x21]
mov ebx, 7
lea rdi, [rsp + 0x48]
cmp r15, rbx
jbe 0x14003e48e
mov rbx, r15
or rbx, 7
cmp rbx, r12
jbe 0x14003e405
mov rbx, r12
jmp 0x14003e412
cmp rbx, 0xa
mov eax, 0xa
cmovb rbx, rax
mov rax, rbx
add rax, 1
mov rcx, 0xffffffffffffffff
cmovb rax, rcx
movabs rcx, 0x7fffffffffffffff
cmp rax, rcx
ja 0x14003ff69
lea rcx, [rax + rax]
cmp rcx, 0x1000
jb 0x14003e474
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14003ff69
mov rcx, rax
call fcn.1401420a0
test rax, rax
je 0x14003ff75
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
mov rdx, qword [rbp - 0x10]
jmp 0x14003e489
test rcx, rcx
je 0x14003e484
call fcn.1401420a0
mov rdx, qword [rbp - 0x10]
jmp 0x14003e486
xor eax, eax
mov rdi, rax
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x60], rbx
lea rbx, [rdx + rdx]
mov r8, rbx
mov rdx, r14
mov rcx, rdi
call fcn.1401441e0
movaps xmm0, xmmword [str.ActivityLog_InstalledSoftware.csv]
movups xmmword [rbx + rdi], xmm0
movaps xmm1, xmmword [0x14017fe00]
movups xmmword [rbx + rdi + 0x10], xmm1
movaps xmm0, xmmword [0x14017fe10]
movups xmmword [rbx + rdi + 0x20], xmm0
movaps xmm1, xmmword [0x14017fe20]
movups xmmword [rbx + rdi + 0x30], xmm1
movzx eax, word [0x14017fe30]
mov word [rbx + rdi + 0x40], ax
xor r14d, r14d
mov word [rdi + r15*2], r14w
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x68]
call fcn.14002fcf0
mov rbx, rax
lea rax, [rbp + 0x38]
cmp rax, rbx
je 0x14003e578
mov rdx, qword [rbp + 0x50]
cmp rdx, 8
jb 0x14003e548
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003e543
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003ff6f
call fcn.1401420dc
mov qword [rbp + 0x48], r14
mov qword [rbp + 0x50], 7
mov word [rbp + 0x38], r14w
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x38], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0x48], xmm1
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], 7
mov word [rbx], r14w
mov rdx, qword [rbp - 0x80]
cmp rdx, 8
jb 0x14003e5b9
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003e5b4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003ff6f
call fcn.1401420dc
mov qword [rsp + 0x78], r14
mov qword [rbp - 0x80], 7
mov word [rsp + 0x68], r14w
mov rdx, qword [rsp + 0x60]
cmp rdx, 8
jb 0x14003e60e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003e609
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003ff75
call fcn.1401420dc
add rsi, qword [rbp]
mov r15, qword [rsi + 0x10]
mov rax, r12
sub rax, r15
cmp rax, 0x1b
jb 0x14003ff93
cmp qword [rsi + 0x18], 8
jb 0x14003e630
mov rsi, qword [rsi]
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x58], r14
mov qword [rsp + 0x60], r14
lea r14, [r15 + 0x1b]
mov ebx, 7
lea rdi, [rsp + 0x48]
cmp r14, rbx
jbe 0x14003e6e8
mov rbx, r14
or rbx, 7
cmp rbx, r12
jbe 0x14003e667
mov rbx, r12
jmp 0x14003e674
cmp rbx, 0xa
mov eax, 0xa
cmovb rbx, rax
mov rax, rbx
add rax, 1
mov rcx, 0xffffffffffffffff
cmovb rax, rcx
movabs rcx, 0x7fffffffffffffff
cmp rax, rcx
ja 0x14003ff7b
lea rcx, [rax + rax]
cmp rcx, 0x1000
jb 0x14003e6d2
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14003ff7b
mov rcx, rax
call fcn.1401420a0
test rax, rax
je 0x14003ff87
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14003e6e3
test rcx, rcx
je 0x14003e6de
call fcn.1401420a0
jmp 0x14003e6e0
xor eax, eax
mov rdi, rax
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x58], r14
mov qword [rsp + 0x60], rbx
lea rbx, [r15 + r15]
mov r8, rbx
mov rdx, rsi
mov rcx, rdi
call fcn.1401441e0
movups xmm0, xmmword [str.ActivityLog_PowerEvents.csv]
movups xmmword [rdi + rbx], xmm0
movups xmm1, xmmword [0x14017fe48]
movups xmmword [rdi + rbx + 0x10], xmm1
movups xmm0, xmmword [0x14017fe58]
movups xmmword [rdi + rbx + 0x20], xmm0
mov eax, dword [0x14017fe68]
mov dword [rdi + rbx + 0x30], eax
movzx eax, word [0x14017fe6c]
mov word [rdi + rbx + 0x34], ax
xor esi, esi
mov word [rdi + r14*2], si
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x68]
call fcn.14002fcf0
mov rbx, rax
lea rax, [rbp + 0x18]
cmp rax, rbx
je 0x14003e7cd
mov rdx, qword [rbp + 0x30]
cmp rdx, 8
jb 0x14003e79f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003e79a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003ff81
call fcn.1401420dc
mov qword [rbp + 0x28], rsi
mov qword [rbp + 0x30], 7
mov word [rbp + 0x18], si
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x18], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0x28], xmm1
mov qword [rbx + 0x10], rsi
mov qword [rbx + 0x18], 7
mov word [rbx], si
mov rdx, qword [rbp - 0x80]
cmp rdx, 8
jb 0x14003e80e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003e809
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003ff81
call fcn.1401420dc
mov qword [rsp + 0x78], rsi
mov qword [rbp - 0x80], 7
mov word [rsp + 0x68], si
mov rdx, qword [rsp + 0x60]
cmp rdx, 8
jb 0x14003e862
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003e85d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003ff87
call fcn.1401420dc
lea rdx, [r13 + 0x130]
mov r15d, dword [rbp - 0x78]
cmp r15d, dword [r13 + 0xd8]
setl r9b
lea r8, [rbp + 0x98]
mov rcx, r13
call fcn.14003b000
mov ebx, eax
lea rdx, [r13 + 0x150]
cmp r15d, dword [r13 + 0xd8]
setl r9b
lea r8, [rbp + 0x78]
mov rcx, r13
call fcn.14003b000
mov edi, eax
lea rdx, [r13 + 0x170]
cmp r15d, dword [r13 + 0xd8]
setl r9b
lea r8, [rbp + 0x58]
mov rcx, r13
call fcn.14003b000
mov esi, eax
lea rdx, [r13 + 0x190]
cmp r15d, dword [r13 + 0xd8]
setl r9b
lea r8, [rbp + 0x38]
mov rcx, r13
call fcn.14003b000
mov r14d, eax
lea rdx, [r13 + 0x1b0]
cmp r15d, dword [r13 + 0xd8]
setl r9b
lea r8, [rbp + 0x18]
mov rcx, r13
call fcn.14003b000
mov r15d, eax
lea ecx, [rax + r14]
add ecx, esi
add ecx, edi
add ecx, ebx
setne byte [rsp + 0x40]
lea rdx, [0x1401a146c]
mov eax, dword [rbp - 0x78]
cmp eax, dword [r13 + 0xd8]
lea rax, [0x1401a10f8]
cmove rdx, rax
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x14003e940
lea rcx, [rbp + 0x158]
call fcn.14000e8f0
lea r9, [rbp + 0x1e2]
test ebx, ebx
jns 0x14003e9b0
neg ebx
nop dword [rax]
nop dword [rax + rax]
sub r9, 2
mov eax, 0xcccccccd
mul ebx
shr edx, 3
movzx eax, dx
shl ax, 2
lea ecx, [rax + rdx]
add cx, cx
sub bx, cx
add bx, 0x30
mov word [r9], bx
mov ebx, edx
test edx, edx
jne 0x14003e970
add r9, 0xfffffffffffffffe
mov eax, 0x2d
mov word [r9], ax
jmp 0x14003e9dc
sub r9, 2
mov eax, 0xcccccccd
mul ebx
shr edx, 3
movzx eax, dx
shl ax, 2
lea ecx, [rax + rdx]
add cx, cx
sub bx, cx
add bx, 0x30
mov word [r9], bx
mov ebx, edx
test edx, edx
jne 0x14003e9b0
xor ecx, ecx
mov qword [rsp + 0x48], rcx
mov r8d, ecx
mov qword [rsp + 0x58], rcx
mov eax, 7
mov qword [rsp + 0x60], rax
mov word [rsp + 0x48], cx
lea rcx, [rbp + 0x1e2]
cmp r9, rcx
je 0x14003ea2a
lea r8, [rbp + 0x1e2]
sub r8, r9
sar r8, 1
mov rdx, r9
lea rcx, [rsp + 0x48]
call fcn.140012600
mov rax, qword [rsp + 0x60]
mov r8, qword [rsp + 0x58]
lea rdx, [rsp + 0x48]
cmp rax, 8
cmovae rdx, qword [rsp + 0x48]
lea rcx, [rbp + 0x158]
call fcn.14000e8f0
nop
mov rdx, qword [rsp + 0x60]
cmp rdx, 8
jb 0x14003ea88
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003ea83
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003ff8d
call fcn.1401420dc
lea rdx, [0x1401a146c]
mov ebx, dword [rbp - 0x78]
cmp ebx, dword [r13 + 0xd8]
lea rax, [0x1401a10f8]
cmove rdx, rax
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x14003eab0
lea rcx, [rbp + 0x138]
call fcn.14000e8f0
lea r9, [rbp + 0x1e2]
test edi, edi
jns 0x14003eb20
neg edi
nop dword [rax]
nop dword [rax + rax]
sub r9, 2
mov eax, 0xcccccccd
mul edi
shr edx, 3
movzx eax, dx
shl ax, 2
lea ecx, [rax + rdx]
add cx, cx
sub di, cx
add di, 0x30
mov word [r9], di
mov edi, edx
test edx, edx
jne 0x14003eae0
add r9, 0xfffffffffffffffe
mov eax, 0x2d
mov word [r9], ax
jmp 0x14003eb4c
sub r9, 2
mov eax, 0xcccccccd
mul edi
shr edx, 3
movzx eax, dx
shl ax, 2
lea ecx, [rax + rdx]
add cx, cx
sub di, cx
add di, 0x30
mov word [r9], di
mov edi, edx
test edx, edx
jne 0x14003eb20
xor edi, edi
mov qword [rsp + 0x48], rdi
mov r8d, edi
mov qword [rsp + 0x58], rdi
mov eax, 7
mov qword [rsp + 0x60], rax
mov word [rsp + 0x48], di
lea rcx, [rbp + 0x1e2]
cmp r9, rcx
je 0x14003eb9a
lea r8, [rbp + 0x1e2]
sub r8, r9
sar r8, 1
mov rdx, r9
lea rcx, [rsp + 0x48]
call fcn.140012600
mov rax, qword [rsp + 0x60]
mov r8, qword [rsp + 0x58]
lea rdx, [rsp + 0x48]
cmp rax, 8
cmovae rdx, qword [rsp + 0x48]
lea rcx, [rbp + 0x138]
call fcn.14000e8f0
nop
mov rdx, qword [rsp + 0x60]
cmp rdx, 8
jb 0x14003ebf8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003ebf3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003ff8d
call fcn.1401420dc
lea rdx, [0x1401a146c]
cmp ebx, dword [r13 + 0xd8]
lea rax, [0x1401a10f8]
cmove rdx, rax
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x14003ec20
lea rcx, [rbp + 0x118]
call fcn.14000e8f0
lea r9, [rbp + 0x1e2]
test esi, esi
jns 0x14003ec90
neg esi
nop dword [rax]
nop dword [rax + rax]
sub r9, 2
mov eax, 0xcccccccd
mul esi
shr edx, 3
movzx eax, dx
shl ax, 2
lea ecx, [rax + rdx]
add cx, cx
sub si, cx
add si, 0x30
mov word [r9], si
mov esi, edx
test edx, edx
jne 0x14003ec50
add r9, 0xfffffffffffffffe
mov eax, 0x2d
mov word [r9], ax
jmp 0x14003ecbc
sub r9, 2
mov eax, 0xcccccccd
mul esi
shr edx, 3
movzx eax, dx
shl ax, 2
lea ecx, [rax + rdx]
add cx, cx
sub si, cx
add si, 0x30
mov word [r9], si
mov esi, edx
test edx, edx
jne 0x14003ec90
mov qword [rsp + 0x48], rdi
mov r8, rdi
mov qword [rsp + 0x58], rdi
mov eax, 7
mov qword [rsp + 0x60], rax
mov word [rsp + 0x48], di
lea rcx, [rbp + 0x1e2]
cmp r9, rcx
je 0x14003ed08
lea r8, [rbp + 0x1e2]
sub r8, r9
sar r8, 1
mov rdx, r9
lea rcx, [rsp + 0x48]
call fcn.140012600
mov rax, qword [rsp + 0x60]
mov r8, qword [rsp + 0x58]
lea rdx, [rsp + 0x48]
cmp rax, 8
cmovae rdx, qword [rsp + 0x48]
lea rcx, [rbp + 0x118]
call fcn.14000e8f0
nop
mov rdx, qword [rsp + 0x60]
cmp rdx, 8
jb 0x14003ed66
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003ed61
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003ff8d
call fcn.1401420dc
lea rdx, [0x1401a146c]
cmp ebx, dword [r13 + 0xd8]
lea rax, [0x1401a10f8]
cmove rdx, rax
mov rsi, 0xffffffffffffffff
mov r8, rsi
nop dword [rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x14003ed90
lea rcx, [rbp + 0xf8]
call fcn.14000e8f0
lea r9, [rbp + 0x1e2]
test r14d, r14d
jns 0x14003ee00
neg r14d
nop word [rax + rax]
sub r9, 2
mov eax, 0xcccccccd
mul r14d
shr edx, 3
movzx eax, dx
shl ax, 2
lea ecx, [rax + rdx]
add cx, cx
sub r14w, cx
add r14w, 0x30
mov word [r9], r14w
mov r14d, edx
test edx, edx
jne 0x14003edc0
add r9, 0xfffffffffffffffe
mov r14d, 0x2d
mov word [r9], r14w
jmp 0x14003ee34
sub r9, 2
mov eax, 0xcccccccd
mul r14d
shr edx, 3
movzx eax, dx
shl ax, 2
lea ecx, [rax + rdx]
add cx, cx
sub r14w, cx
add r14w, 0x30
mov word [r9], r14w
mov r14d, edx
test edx, edx
jne 0x14003ee00
lea r14d, [rdx + 0x2d]
mov qword [rsp + 0x48], rdi
mov r8, rdi
mov qword [rsp + 0x58], rdi
mov eax, 7
mov qword [rsp + 0x60], rax
mov word [rsp + 0x48], di
lea rcx, [rbp + 0x1e2]
cmp r9, rcx
je 0x14003ee80
lea r8, [rbp + 0x1e2]
sub r8, r9
sar r8, 1
mov rdx, r9
lea rcx, [rsp + 0x48]
call fcn.140012600
mov rax, qword [rsp + 0x60]
mov r8, qword [rsp + 0x58]
lea rdx, [rsp + 0x48]
cmp rax, 8
cmovae rdx, qword [rsp + 0x48]
lea rcx, [rbp + 0xf8]
call fcn.14000e8f0
nop
lea rcx, [rsp + 0x48]
call fcn.140013190
lea rdx, [0x1401a146c]
cmp ebx, dword [r13 + 0xd8]
lea rax, [0x1401a10f8]
cmove rdx, rax
mov r8, rsi
inc r8
cmp word [rdx + r8*2], 0
jne 0x14003eec2
lea rcx, [rbp + 0xd8]
call fcn.14000e8f0
lea r9, [rbp + 0x1e2]
test r15d, r15d
jns 0x14003ef30
neg r15d
nop dword [rax + rax]
sub r9, 2
mov eax, 0xcccccccd
mul r15d
shr edx, 3
movzx eax, dx
shl ax, 2
lea ecx, [rax + rdx]
add cx, cx
sub r15w, cx
add r15w, 0x30
mov word [r9], r15w
mov r15d, edx
test edx, edx
jne 0x14003eef0
add r9, 0xfffffffffffffffe
mov word [r9], r14w
jmp 0x14003ef60
sub r9, 2
mov eax, 0xcccccccd
mul r15d
shr edx, 3
movzx eax, dx
shl ax, 2
lea ecx, [rax + rdx]
add cx, cx
sub r15w, cx
add r15w, 0x30
mov word [r9], r15w
mov r15d, edx
test edx, edx
jne 0x14003ef30
mov qword [rsp + 0x48], rdi
mov r8, rdi
mov qword [rsp + 0x58], rdi
mov eax, 7
mov qword [rsp + 0x60], rax
mov word [rsp + 0x48], di
lea rcx, [rbp + 0x1e2]
cmp r9, rcx
je 0x14003efac
lea r8, [rbp + 0x1e2]
sub r8, r9
sar r8, 1
mov rdx, r9
lea rcx, [rsp + 0x48]
call fcn.140012600
mov rax, qword [rsp + 0x60]
mov r8, qword [rsp + 0x58]
lea rdx, [rsp + 0x48]
cmp rax, 8
cmovae rdx, qword [rsp + 0x48]
lea rcx, [rbp + 0xd8]
call fcn.14000e8f0
nop
lea rcx, [rsp + 0x48]
call fcn.140013190
dec ebx
mov dword [rbp - 0x78], ebx
mov rax, qword [rbp - 0x70]
jmp 0x14003dc26
lea r15, [r13 + 0x190]
lea r14, [r13 + 0x170]
lea rsi, [r13 + 0x150]
lea rbx, [r13 + 0x130]
mov r8d, 3
lea rdx, [0x140180098]
lea rcx, [rbp + 0x158]
call fcn.14000e8f0
mov r8d, 3
lea rdx, [0x140180098]
lea rcx, [rbp + 0x138]
call fcn.14000e8f0
mov r8d, 3
lea rdx, [0x140180098]
lea rcx, [rbp + 0x118]
call fcn.14000e8f0
mov r8d, 3
lea rdx, [0x140180098]
lea rcx, [rbp + 0xf8]
call fcn.14000e8f0
mov r8d, 3
lea rdx, [0x140180098]
lea rcx, [rbp + 0xd8]
call fcn.14000e8f0
mov qword [rsp + 0x68], rdi
movdqa xmm0, xmmword [0x1401a2c40]
movdqu xmmword [rsp + 0x78], xmm0
mov word [rsp + 0x68], di
mov r8d, 0x20
lea rdx, str.ActivityLog_UserInteractions.csv
lea rcx, [rsp + 0x68]
call fcn.140012600
nop
lea rdx, [rsp + 0x68]
lea rcx, [rbp - 0x30]
call fcn.14002fcf0
mov rdx, rax
lea rcx, [rbp + 0x98]
call fcn.14000c1b0
lea rcx, [rbp - 0x30]
call fcn.140013190
nop
lea rcx, [rsp + 0x68]
call fcn.140013190
mov qword [rsp + 0x68], rdi
movdqa xmm0, xmmword [0x1401a2c40]
movdqu xmmword [rsp + 0x78], xmm0
mov word [rsp + 0x68], di
mov r8d, 0x23
lea rdx, str.ActivityLog_AppDomainStatistics.csv
lea rcx, [rsp + 0x68]
call fcn.140012600
nop
lea rdx, [rsp + 0x68]
lea rcx, [rbp - 0x30]
call fcn.14002fcf0
mov rdx, rax
lea rcx, [rbp + 0x78]
call fcn.14000c1b0
lea rcx, [rbp - 0x30]
call fcn.140013190
nop
lea rcx, [rsp + 0x68]
call fcn.140013190
mov qword [rsp + 0x68], rdi
movdqa xmm0, xmmword [0x1401a2c40]
movdqu xmmword [rsp + 0x78], xmm0
mov word [rsp + 0x68], di
mov r8d, 0x22
lea rdx, str.ActivityLog_IntelligenceEvents.csv
lea rcx, [rsp + 0x68]
call fcn.140012600
nop
lea rdx, [rsp + 0x68]
lea rcx, [rbp - 0x30]
call fcn.14002fcf0
mov rdx, rax
lea rcx, [rbp + 0x58]
call fcn.14000c1b0
lea rcx, [rbp - 0x30]
call fcn.140013190
nop
lea rcx, [rsp + 0x68]
call fcn.140013190
mov qword [rsp + 0x68], rdi
movdqa xmm0, xmmword [0x1401a2c40]
movdqu xmmword [rsp + 0x78], xmm0
mov word [rsp + 0x68], di
mov r8d, 0x21
lea rdx, str.ActivityLog_InstalledSoftware.csv
lea rcx, [rsp + 0x68]
call fcn.140012600
nop
lea rdx, [rsp + 0x68]
lea rcx, [rbp - 0x30]
call fcn.14002fcf0
mov rdx, rax
lea rcx, [rbp + 0x38]
call fcn.14000c1b0
lea rcx, [rbp - 0x30]
call fcn.140013190
nop
lea rcx, [rsp + 0x68]
call fcn.140013190
mov qword [rsp + 0x68], rdi
movdqa xmm0, xmmword [0x1401a2c40]
movdqu xmmword [rsp + 0x78], xmm0
mov word [rsp + 0x68], di
mov r8d, 0x1b
lea rdx, str.ActivityLog_PowerEvents.csv
lea rcx, [rsp + 0x68]
call fcn.140012600
nop
lea rdx, [rsp + 0x68]
lea rcx, [rbp - 0x30]
call fcn.14002fcf0
mov rdx, rax
lea rcx, [rbp + 0x18]
call fcn.14000c1b0
lea rcx, [rbp - 0x30]
call fcn.140013190
nop
lea rcx, [rsp + 0x68]
call fcn.140013190
mov r9b, 1
lea r8, [rbp + 0x98]
mov rdx, rbx
mov rcx, r13
call fcn.14003b000
mov edi, eax
mov r9b, 1
lea r8, [rbp + 0x78]
mov rdx, rsi
mov rcx, r13
call fcn.14003b000
mov esi, eax
mov r9b, 1
lea r8, [rbp + 0x58]
mov rdx, r14
mov rcx, r13
call fcn.14003b000
mov r14d, eax
mov r9b, 1
lea r8, [rbp + 0x38]
mov rdx, r15
mov rcx, r13
call fcn.14003b000
mov r15d, eax
mov r9b, 1
lea r8, [rbp + 0x18]
lea rdx, [r13 + 0x1b0]
mov rcx, r13
call fcn.14003b000
mov dword [rbp - 0x78], eax
cmp byte [rsp + 0x40], 0
je 0x14003f2ce
mov ebx, 1
jmp 0x14003f2d9
lea ebx, [rax + r15]
add ebx, r14d
add ebx, esi
add ebx, edi
test ebx, ebx
setne byte [rsp + 0x40]
mov edx, edi
lea rcx, [rbp - 0x30]
call fcn.14001bd40
nop
mov rdx, rax
cmp qword [rax + 0x18], 8
jb 0x14003f2f9
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
lea rcx, [rbp + 0x158]
call fcn.14000e8f0
nop
lea rcx, [rbp - 0x30]
call fcn.140013190
mov edx, esi
lea rcx, [rbp - 0x30]
call fcn.14001bd40
nop
mov rdx, rax
cmp qword [rax + 0x18], 8
jb 0x14003f32c
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
lea rcx, [rbp + 0x138]
call fcn.14000e8f0
nop
lea rcx, [rbp - 0x30]
call fcn.140013190
mov edx, r14d
lea rcx, [rbp - 0x30]
call fcn.14001bd40
nop
mov rdx, rax
cmp qword [rax + 0x18], 8
jb 0x14003f360
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
lea rcx, [rbp + 0x118]
call fcn.14000e8f0
nop
lea rcx, [rbp - 0x30]
call fcn.140013190
mov edx, r15d
lea rcx, [rbp - 0x30]
call fcn.14001bd40
nop
mov rdx, rax
cmp qword [rax + 0x18], 8
jb 0x14003f394
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
lea rcx, [rbp + 0xf8]
call fcn.14000e8f0
nop
lea rcx, [rbp - 0x30]
call fcn.140013190
mov edx, dword [rbp - 0x78]
lea rcx, [rbp - 0x30]
call fcn.14001bd40
nop
mov rdx, rax
cmp qword [rax + 0x18], 8
jb 0x14003f3c8
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
lea rcx, [rbp + 0xd8]
call fcn.14000e8f0
nop
lea rcx, [rbp - 0x30]
call fcn.140013190
cmp qword [r13 + 0xe0], 0
je 0x14003f7ba
mov r8d, 7
lea rdx, str.DTOR:_
lea rcx, [rbp + 0x158]
call fcn.14000e8f0
mov r8d, 7
lea rdx, str.DTOR:_
lea rcx, [rbp + 0x138]
call fcn.14000e8f0
mov r8d, 7
lea rdx, str.DTOR:_
lea rcx, [rbp + 0x118]
call fcn.14000e8f0
mov r8d, 7
lea rdx, str.DTOR:_
lea rcx, [rbp + 0xf8]
call fcn.14000e8f0
mov r8d, 7
lea rdx, str.DTOR:_
lea rcx, [rbp + 0xd8]
call fcn.14000e8f0
lea rdx, [rbp - 0x30]
mov rcx, qword [r13 + 0xe0]
call fcn.14002fca0
nop
mov rdx, rax
cmp qword [rax + 0x18], 8
jb 0x14003f48b
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
lea rcx, [rbp + 0x158]
call fcn.14000e8f0
nop
lea rcx, [rbp - 0x30]
call fcn.140013190
lea rdx, [rbp - 0x30]
mov rcx, qword [r13 + 0xe0]
call fcn.14002fb60
nop
mov rdx, rax
cmp qword [rax + 0x18], 8
jb 0x14003f4c3
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
lea rcx, [rbp + 0x138]
call fcn.14000e8f0
nop
lea rcx, [rbp - 0x30]
call fcn.140013190
lea rdx, [rbp - 0x30]
mov rcx, qword [r13 + 0xe0]
call fcn.14002fc00
nop
mov rdx, rax
cmp qword [rax + 0x18], 8
jb 0x14003f4fb
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
lea rcx, [rbp + 0x118]
call fcn.14000e8f0
nop
lea rcx, [rbp - 0x30]
call fcn.140013190
lea rdx, [rbp - 0x30]
mov rcx, qword [r13 + 0xe0]
call fcn.14002fbb0
nop
mov rdx, rax
cmp qword [rax + 0x18], 8
jb 0x14003f533
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
lea rcx, [rbp + 0xf8]
call fcn.14000e8f0
nop
lea rcx, [rbp - 0x30]
call fcn.140013190
lea rdx, [rbp - 0x30]
mov rcx, qword [r13 + 0xe0]
call fcn.14002fc50
nop
mov rdx, rax
cmp qword [rax + 0x18], 8
jb 0x14003f56b
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
lea rcx, [rbp + 0xd8]
call fcn.14000e8f0
nop
lea rcx, [rbp - 0x30]
call fcn.140013190
mov r8d, 1
lea rdx, [0x1401a1328]
lea rcx, [rbp + 0x158]
call fcn.14000e8f0
mov r8d, 1
lea rdx, [0x1401a1328]
lea rcx, [rbp + 0x138]
call fcn.14000e8f0
mov r8d, 1
lea rdx, [0x1401a1328]
lea rcx, [rbp + 0x118]
call fcn.14000e8f0
mov r8d, 1
lea rdx, [0x1401a1328]
lea rcx, [rbp + 0xf8]
call fcn.14000e8f0
mov r8d, 1
lea rdx, [0x1401a1328]
lea rcx, [rbp + 0xd8]
call fcn.14000e8f0
mov r8d, 4
lea rdx, str.RC:
lea rcx, [rbp + 0x158]
call fcn.14000e8f0
mov r8d, 4
lea rdx, str.RC:
lea rcx, [rbp + 0x138]
call fcn.14000e8f0
mov r8d, 4
lea rdx, str.RC:
lea rcx, [rbp + 0x118]
call fcn.14000e8f0
mov r8d, 4
lea rdx, str.RC:
lea rcx, [rbp + 0xf8]
call fcn.14000e8f0
mov r8d, 4
lea rdx, str.RC:
lea rcx, [rbp + 0xd8]
call fcn.14000e8f0
mov rcx, qword [r13 + 0xe0]
call fcn.14002fff0
mov edx, eax
lea rcx, [rbp - 0x30]
call fcn.14001bd40
nop
mov rdx, rax
cmp qword [rax + 0x18], 8
jb 0x14003f6a4
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
lea rcx, [rbp + 0x158]
call fcn.14000e8f0
nop
lea rcx, [rbp - 0x30]
call fcn.140013190
mov rcx, qword [r13 + 0xe0]
call fcn.14002feb0
mov edx, eax
lea rcx, [rbp - 0x30]
call fcn.14001bd40
nop
mov rdx, rax
cmp qword [rax + 0x18], 8
jb 0x14003f6e3
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
lea rcx, [rbp + 0x138]
call fcn.14000e8f0
nop
lea rcx, [rbp - 0x30]
call fcn.140013190
mov rcx, qword [r13 + 0xe0]
call fcn.14002ff50
mov edx, eax
lea rcx, [rbp - 0x30]
call fcn.14001bd40
nop
mov rdx, rax
cmp qword [rax + 0x18], 8
jb 0x14003f722
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
lea rcx, [rbp + 0x118]
call fcn.14000e8f0
nop
lea rcx, [rbp - 0x30]
call fcn.140013190
mov rcx, qword [r13 + 0xe0]
call fcn.14002ff00
mov edx, eax
lea rcx, [rbp - 0x30]
call fcn.14001bd40
nop
mov rdx, rax
cmp qword [rax + 0x18], 8
jb 0x14003f761
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
lea rcx, [rbp + 0xf8]
call fcn.14000e8f0
nop
lea rcx, [rbp - 0x30]
call fcn.140013190
mov rcx, qword [r13 + 0xe0]
call fcn.14002ffa0
mov edx, eax
lea rcx, [rbp - 0x30]
call fcn.14001bd40
nop
mov rdx, rax
cmp qword [rax + 0x18], 8
jb 0x14003f7a0
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
lea rcx, [rbp + 0xd8]
call fcn.14000e8f0
nop
lea rcx, [rbp - 0x30]
call fcn.140013190
test ebx, ebx
je 0x14003fe5a
lea rcx, [rsp + 0x48]
call fcn.140055280
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x10], xmm0
lea rdx, [rbp - 0x10]
lea rcx, [rbp - 0x30]
call fcn.140016630
nop
mov edx, dword [rbp - 0x74]
lea rcx, [rbp + 0x198]
call fcn.14001bd40
nop
xor r15d, r15d
mov qword [rsp + 0x68], r15
movdqa xmm0, xmmword [0x1401a2c40]
movdqu xmmword [rsp + 0x78], xmm0
mov word [rsp + 0x68], r15w
lea r8d, [r15 + 0xe]
lea rdx, str.ActivityLog.db
lea rcx, [rsp + 0x68]
call fcn.140012600
nop
lea rdx, [rsp + 0x68]
lea rcx, [rbp - 0x50]
call fcn.14002fcf0
nop
mov rcx, rax
call fcn.14001f6e0
mov rbx, rax
lea rcx, [rbp - 0x50]
call fcn.140013190
nop
lea rcx, [rsp + 0x68]
call fcn.140013190
lea r9, [rbp + 0x212]
movabs r8, 0xcccccccccccccccd
sub r9, 2
mov rax, r8
mul rbx
shr rdx, 3
movzx eax, dx
shl ax, 2
lea ecx, [rax + rdx]
add cx, cx
sub bx, cx
add bx, 0x30
mov word [r9], bx
mov rbx, rdx
test rdx, rdx
jne 0x14003f862
mov qword [rbp + 0x178], r15
movdqa xmm0, xmmword [0x1401a2c40]
movdqu xmmword [rbp + 0x188], xmm0
mov word [rbp + 0x178], r15w
lea rax, [rbp + 0x212]
cmp r9, rax
je 0x14003f8d8
lea r8, [rbp + 0x212]
sub r8, r9
sar r8, 1
mov rdx, r9
lea rcx, [rbp + 0x178]
call fcn.140012600
nop
lea r8, [r13 + 0xf0]
lea rdx, str.SysVersion
lea rcx, [rbp + 0x220]
call fcn.140034e40
nop
mov qword [rbp + 0x260], r15
movdqa xmm0, xmmword [0x1401a2c40]
movdqa xmmword [rbp + 0x270], xmm0
mov word [rbp + 0x260], r15w
mov r8d, 4
lea rdx, str.GUID
lea rcx, [rbp + 0x260]
call fcn.140012600
nop
lea rdx, [rbp - 0x30]
lea rcx, [rbp + 0x280]
call fcn.1400130b0
nop
lea rcx, [rbp + 0x1b8]
call fcn.140055a50
nop
mov r8, rax
lea rdx, str.SystemModel
lea rcx, [rbp + 0x2a0]
call fcn.140034dc0
nop
lea rcx, [rsp + 0x68]
call fcn.140055a00
nop
mov r8, rax
lea rdx, str.SystemManufacturer
lea rcx, [rbp + 0x2e0]
call fcn.140034dc0
nop
lea rcx, [rbp - 0x50]
call fcn.1400551b0
nop
mov r8, rax
lea rdx, str.Country
lea rcx, [rbp + 0x320]
call fcn.140034dc0
nop
mov qword [rbp + 0x360], r15
movdqa xmm0, xmmword [0x1401a2c40]
movdqa xmmword [rbp + 0x370], xmm0
mov word [rbp + 0x360], r15w
mov r8d, 0x14
lea rdx, str.DaysSinceFirstUpload
lea rcx, [rbp + 0x360]
call fcn.140012600
nop
lea rdx, [rbp + 0x198]
lea rcx, [rbp + 0x380]
call fcn.1400130b0
nop
lea r8, [rbp + 0x178]
lea rdx, str.DBFileSize
lea rcx, [rbp + 0x3a0]
call fcn.140034e40
nop
mov qword [rbp + 0x3e0], r15
movdqa xmm0, xmmword [0x1401a2c40]
movdqa xmmword [rbp + 0x3f0], xmm0
mov word [rbp + 0x3e0], r15w
mov r8d, 0xf
lea rdx, str.UserInteraction
lea rcx, [rbp + 0x3e0]
call fcn.140012600
nop
lea rdx, [rbp + 0x158]
lea rcx, [rbp + 0x400]
call fcn.1400130b0
nop
mov qword [rbp + 0x420], r15
movdqa xmm0, xmmword [0x1401a2c40]
movdqa xmmword [rbp + 0x430], xmm0
mov word [rbp + 0x420], r15w
mov r8d, 0x13
lea rdx, str.AppDomainStatistics
lea rcx, [rbp + 0x420]
call fcn.140012600
nop
lea rdx, [rbp + 0x138]
lea rcx, [rbp + 0x440]
call fcn.1400130b0
nop
mov qword [rbp + 0x460], r15
movdqa xmm0, xmmword [0x1401a2c40]
movdqa xmmword [rbp + 0x470], xmm0
mov word [rbp + 0x460], r15w
mov r8d, 0x12
lea rdx, str.IntelligenceEvents
lea rcx, [rbp + 0x460]
call fcn.140012600
nop
lea rdx, [rbp + 0x118]
lea rcx, [rbp + 0x480]
call fcn.1400130b0
nop
mov qword [rbp + 0x4a0], r15
movdqa xmm0, xmmword [0x1401a2c40]
movdqa xmmword [rbp + 0x4b0], xmm0
mov word [rbp + 0x4a0], r15w
mov r8d, 0x11
lea rdx, str.InstalledSoftware
lea rcx, [rbp + 0x4a0]
call fcn.140012600
nop
lea rdx, [rbp + 0xf8]
lea rcx, [rbp + 0x4c0]
call fcn.1400130b0
nop
mov qword [rbp + 0x4e0], r15
movdqa xmm0, xmmword [0x1401a2c40]
movdqa xmmword [rbp + 0x4f0], xmm0
mov word [rbp + 0x4e0], r15w
mov r8d, VariantTimeToDosDateTime
lea rdx, str.PowerEvents
lea rcx, [rbp + 0x4e0]
call fcn.140012600
nop
lea rdx, [rbp + 0xd8]
lea rcx, [rbp + 0x500]
call fcn.1400130b0
nop
lea rax, [rbp + 0x220]
mov qword [rbp - 0x70], rax
lea rax, [rbp + 0x520]
mov qword [rbp - 0x68], rax
lea rdx, [rbp - 0x70]
lea rcx, [rsp + 0x48]
call fcn.1400351f0
lea rbx, [r13 + 0x1d0]
mov r8, rax
mov rdx, rbx
mov rcx, r13
call fcn.14003a950
mov r14d, eax
lea r9, [0x140036a50]
mov edx, 0x40
lea r8d, [rdx - 0x34]
lea rcx, [rbp + 0x220]
call fcn.1401421cc
nop
lea rcx, [rbp - 0x50]
call fcn.140013190
nop
lea rcx, [rsp + 0x68]
call fcn.140013190
nop
lea rcx, [rbp + 0x1b8]
call fcn.140013190
cmp r14d, 0xc8
je 0x14003fe36
cmp r14d, 0x191
jne 0x14003fc2e
mov rcx, 0xffffffffffffffff
call fcn.140056280
jmp 0x14003fe36
mov rax, qword [0x1401c8980]
cmp dword [rax], 1
jbe 0x14003fce5
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
lea rcx, str.Killer_Network_Tracking_Service
mov qword [rsp + 0x38], rcx
mov dword [rsp + 0x30], 0x1ff
lea rcx, str.D:jenk11workspacewsg_citKiller_Release_3.5_srcKillerNetwork_TrackingServiceKillerNetworkTrackingServiceActivityLogDBUploader.cpp
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], eax
lea r9, str.__d___hs__d__:__ls__
mov esi, 0x7ff
mov r8d, esi
mov edi, 0x800
mov edx, edi
lea rcx, [rbp + 0x220]
call fcn.140034d50
mov edx, edi
lea rcx, [rbp + 0x220]
call fcn.14014de6c
mov rdx, rbx
cmp qword [rbx + 0x18], 8
jb 0x14003fca5
mov rdx, qword [rbx]
sub rsi, rax
sub rdi, rax
lea rcx, [rbp + 0x220]
lea rcx, [rcx + rax*2]
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], rdx
lea r9, str.SendInfoToDestination_URL_ls____Failure____Status_ld
mov r8, rsi
mov rdx, rdi
call fcn.140034d50
lea rdx, [rbp + 0x220]
lea rcx, [0x1401c8970]
call fcn.14002ae20
mov qword [rsp + 0x48], r15
movdqa xmm0, xmmword [0x1401a2c40]
movdqu xmmword [rsp + 0x58], xmm0
mov word [rsp + 0x48], r15w
mov r8d, 0x18
lea rdx, [0x14017ec10]
lea rcx, [rsp + 0x48]
call fcn.140012600
nop
mov edx, r14d
lea rcx, [rbp + 0x212]
call fcn.1400351a0
mov qword [rsp + 0x68], r15
movdqa xmm0, xmmword [0x1401a2c40]
movdqu xmmword [rsp + 0x78], xmm0
mov word [rsp + 0x68], r15w
lea rcx, [rbp + 0x212]
cmp rax, rcx
je 0x14003fd65
lea r8, [rbp + 0x212]
sub r8, rax
sar r8, 1
mov rdx, rax
lea rcx, [rsp + 0x68]
call fcn.140012600
nop
mov rcx, qword [rbx + 0x10]
sub r12, rcx
cmp r12, 0x30
jb 0x14003ff1b
mov rax, rbx
cmp qword [rbx + 0x18], 8
jb 0x14003fd83
mov rax, qword [rbx]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0x30
lea r9, str.Error_Uploading_Upload_Complete_Statistics_Data
mov r8, rbx
movzx edx, byte [rsp + 0x40]
lea rcx, [rbp - 0x50]
call fcn.14001b920
nop
lea r8, [0x1401a14a4]
lea rdx, [rbp - 0x50]
lea rcx, [rbp + 0x1b8]
call fcn.140026bf0
nop
lea r9, [rsp + 0x68]
mov r8, rax
movzx edx, byte [rsp + 0x40]
lea rcx, [rbp - 0x70]
call fcn.14002afb0
nop
mov edx, 1
lea r8d, [rdx + 3]
lea rax, [rsp + 0x48]
mov qword [rsp + 0x20], rax
lea r9d, [rdx + 0x13]
lea rcx, [rbp - 0x70]
call fcn.14001e220
nop
lea rcx, [rbp - 0x70]
call fcn.140013190
nop
lea rcx, [rbp + 0x1b8]
call fcn.140013190
nop
lea rcx, [rbp - 0x50]
call fcn.140013190
nop
lea rcx, [rsp + 0x68]
call fcn.140013190
nop
lea rcx, [rsp + 0x48]
call fcn.140013190
nop
lea rcx, [rbp + 0x178]
call fcn.140013190
nop
lea rcx, [rbp + 0x198]
call fcn.140013190
nop
lea rcx, [rbp - 0x30]
call fcn.140013190
nop
lea rcx, [rbp + 0xd8]
call fcn.140013190
nop
lea rcx, [rbp + 0xf8]
call fcn.140013190
nop
lea rcx, [rbp + 0x118]
call fcn.140013190
nop
lea rcx, [rbp + 0x138]
call fcn.140013190
nop
lea rcx, [rbp + 0x158]
call fcn.140013190
nop
lea rcx, [rbp]
call fcn.140014620
nop
lea rcx, [rbp + 0x18]
call fcn.140013190
nop
lea rcx, [rbp + 0x38]
call fcn.140013190
nop
lea rcx, [rbp + 0x58]
call fcn.140013190
nop
lea rcx, [rbp + 0x78]
call fcn.140013190
nop
lea rcx, [rbp + 0x98]
call fcn.140013190
nop
lea rcx, [rbp + 0xb8]
call fcn.140013190
movzx eax, byte [rsp + 0x40]
mov rcx, qword [rbp + 0x1220]
xor rcx, rsp
call fcn.140142180
lea r11, [rsp + 0x1330]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1400124e0
nop
call fcn.14000fde0
int3
call fcn.140012f70
int3
call fcn.140149044
nop
call fcn.140012f70
nop
call fcn.140149044
nop
call fcn.140149044
int3
call fcn.140012f70
nop
call fcn.140149044
nop
call fcn.140149044
int3
call fcn.140012f70
nop
call fcn.140149044
nop
call fcn.140149044
int3
call fcn.140012f70
nop
call fcn.140149044
nop
call fcn.140149044
int3
call fcn.140012f70
nop
call fcn.140149044
nop
call fcn.140149044
int3
call fcn.140149044
int3
call fcn.1400124e0
int3
call fcn.1400124e0
int3
call fcn.1400124e0
int3
call fcn.1400124e0
int3
call fcn.1400124e0
int3