Function at 0x1400f5cf0
Capabilities:
Enumerate files on windows

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x6c0]
sub rsp, 0x7c0
mov qword [rbp + 0x68], 0xfffffffffffffffe
mov qword [rsp + 0x800], rbx
mov rax, qword [0x14027f238]
xor rax, rsp
mov qword [rbp + 0x6b0], rax
mov qword [rbp - 0x20], r8
mov r13, rdx
mov qword [rbp - 0x28], rdx
mov qword [rbp - 8], rdx
xor r15d, r15d
mov r14d, r15d
mov dword [rsp + 0x48], r15d
lea r12, vtable.WaJson.0
mov qword [rbp - 0x58], r12
mov qword [rbp - 0x48], r15
mov dword [rbp - 0x48], r15d
mov byte [rbp - 0x48], r15b
mov dword [rbp - 0x50], 5
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x68], r15
mov dword [rsp + 0x68], r15d
mov byte [rsp + 0x68], r15b
mov dword [rsp + 0x60], 5
mov qword [rbp - 0x40], r12
mov qword [rbp - 0x30], r15
mov dword [rbp - 0x30], r15d
mov byte [rbp - 0x30], r15b
mov dword [rbp - 0x38], 5
mov rbx, qword [fcn.1400c02b0]
mov rcx, rbx
call qword [fcn.1400059b0]
lea rcx, [rsp + 0x58]
call rbx
mov dword [rsp + 0x60], 3
lea ecx, [r15 + 0x18]
call fcn.140165194
mov qword [rsp + 0x50], rax
mov qword [rax], r15
mov qword [rax + 8], r15
mov qword [rax + 0x10], r15
mov qword [rsp + 0x68], rax
mov qword [rbp + 0x308], 7
mov qword [rbp + 0x300], r15
mov word [rbp + 0x2f0], r15w
mov qword [rbp + 0x450], 7
mov qword [rbp + 0x448], r15
mov word [rbp + 0x438], r15w
mov qword [rbp + 0x1a8], 7
mov qword [rbp + 0x1a0], r15
mov word [rbp + 0x190], r15w
mov qword [rbp + 0x2e8], 7
mov qword [rbp + 0x2e0], r15
mov word [rbp + 0x2d0], r15w
mov qword [rbp + 0x2a8], 7
mov qword [rbp + 0x2a0], r15
mov word [rbp + 0x290], r15w
lea rcx, [rbp + 0x2f0]
call fcn.1400f3a40
test eax, eax
js 0x1400f794b
lea r8, str.Logs_
lea rdx, [rbp + 0x2f0]
lea rcx, [rbp + 0x210]
call fcn.1400dc1b0
mov rbx, rax
lea rax, [rbp + 0x2d0]
cmp rax, rbx
je 0x1400f5ee0
mov r8, qword [rbp + 0x2e8]
cmp r8, 8
jb 0x1400f5eb6
inc r8
mov rdx, qword [rbp + 0x2d0]
lea rcx, [rbp + 0x2d0]
call fcn.1400be810
mov qword [rbp + 0x2e8], 7
mov qword [rbp + 0x2e0], r15
mov word [rbp + 0x2d0], r15w
mov rdx, rbx
lea rcx, [rbp + 0x2d0]
call fcn.1400be780
nop
mov r8, qword [rbp + 0x228]
cmp r8, 8
jb 0x1400f5f03
inc r8
mov rdx, qword [rbp + 0x210]
lea rcx, [rbp + 0x210]
call fcn.1400be810
lea r8, str.LogseScan_
lea rdx, [rbp + 0x2f0]
lea rcx, [rbp + 0x210]
call fcn.1400dc1b0
mov rbx, rax
lea rax, [rbp + 0x290]
cmp rax, rbx
je 0x1400f5f79
mov r8, qword [rbp + 0x2a8]
cmp r8, 8
jb 0x1400f5f4f
inc r8
mov rdx, qword [rbp + 0x290]
lea rcx, [rbp + 0x290]
call fcn.1400be810
mov qword [rbp + 0x2a8], 7
mov qword [rbp + 0x2a0], r15
mov word [rbp + 0x290], r15w
mov rdx, rbx
lea rcx, [rbp + 0x290]
call fcn.1400be780
nop
mov r8, qword [rbp + 0x228]
cmp r8, 8
jb 0x1400f5f9c
inc r8
mov rdx, qword [rbp + 0x210]
lea rcx, [rbp + 0x210]
call fcn.1400be810
lea r8, [0x14022a6e8]
lea rdx, [rbp + 0x2d0]
lea rcx, [rbp + 0x1b0]
call fcn.1400dc1b0
cmp qword [rax + 0x18], 8
jb 0x1400f5fc0
mov rax, qword [rax]
lea rdx, [rbp + 0x460]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov rsi, rax
mov r8, qword [rbp + 0x1c8]
cmp r8, 8
jb 0x1400f5ff6
inc r8
mov rdx, qword [rbp + 0x1b0]
lea rcx, [rbp + 0x1b0]
call fcn.1400be810
mov qword [rbp + 0x1c8], 7
mov qword [rbp + 0x1c0], r15
mov word [rbp + 0x1b0], r15w
cmp rsi, 0xffffffffffffffff
je 0x1400f61b1
nop word [rax + rax]
cmp word [rbp + 0x48c], 0
jne 0x1400f602f
mov r8, r15
jmp 0x1400f604b
lea rax, [rbp + 0x48c]
or r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x1400f6040
lea rdx, [rbp + 0x48c]
lea rcx, [rbp + 0x190]
call fcn.1400be520
lea rcx, [rbp + 0x190]
mov rbx, qword [rbp + 0x190]
mov rdi, qword [rbp + 0x1a8]
cmp rdi, 8
cmovae rcx, rbx
mov r9d, 0xa
lea r8, str.virlog.dat
mov rdx, qword [rbp + 0x1a0]
call fcn.1400c4840
test eax, eax
je 0x1400f60e6
lea rcx, [rbp + 0x190]
cmp rdi, 8
cmovae rcx, rbx
mov r9d, SafeArrayDestroy
lea r8, str.spamlog.dat
call fcn.1400c4840
test eax, eax
je 0x1400f60e6
lea rcx, [rbp + 0x190]
cmp rdi, 8
cmovae rcx, rbx
mov r9d, SafeArrayDestroy
lea r8, str.warnlog.dat
call fcn.1400c4840
test eax, eax
jne 0x1400f6190
lea r8, [rbp + 0x190]
lea rdx, [rbp + 0x2d0]
lea rcx, [rbp + 0x210]
call fcn.1400c5640
mov rbx, rax
lea rax, [rbp + 0x190]
cmp rax, rbx
je 0x1400f615c
mov r8, qword [rbp + 0x1a8]
cmp r8, 8
jb 0x1400f6132
inc r8
mov rdx, qword [rbp + 0x190]
lea rcx, [rbp + 0x190]
call fcn.1400be810
mov qword [rbp + 0x1a8], 7
mov qword [rbp + 0x1a0], r15
mov word [rbp + 0x190], r15w
mov rdx, rbx
lea rcx, [rbp + 0x190]
call fcn.1400be780
nop
mov r8, qword [rbp + 0x228]
cmp r8, 8
jb 0x1400f617f
inc r8
mov rdx, qword [rbp + 0x210]
lea rcx, [rbp + 0x210]
call fcn.1400be810
lea rdx, [rsp + 0x58]
lea rcx, [rbp + 0x190]
call fcn.1400f4c10
lea rdx, [rbp + 0x460]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x1400f6020
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_FindClose]
lea r8, [0x14022a6e8]
lea rdx, [rbp + 0x290]
lea rcx, [rbp + 0x1b0]
call fcn.1400dc1b0
cmp qword [rax + 0x18], 8
jb 0x1400f61d5
mov rax, qword [rax]
lea rdx, [rbp + 0x460]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov rsi, rax
mov r8, qword [rbp + 0x1c8]
cmp r8, 8
jb 0x1400f620b
inc r8
mov rdx, qword [rbp + 0x1b0]
lea rcx, [rbp + 0x1b0]
call fcn.1400be810
mov qword [rbp + 0x1c8], 7
mov qword [rbp + 0x1c0], r15
mov word [rbp + 0x1b0], r15w
cmp rsi, 0xffffffffffffffff
je 0x1400f6415
nop
cmp word [rbp + 0x48c], 0
jne 0x1400f623f
mov r8, r15
jmp 0x1400f625b
lea rax, [rbp + 0x48c]
or r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x1400f6250
lea rdx, [rbp + 0x48c]
lea rcx, [rbp + 0x190]
call fcn.1400be520
lea rcx, [rbp + 0x190]
mov rbx, qword [rbp + 0x190]
mov rdi, qword [rbp + 0x1a8]
cmp rdi, 8
cmovae rcx, rbx
mov r9d, 1
lea r8, [0x14022724c]
mov rdx, qword [rbp + 0x1a0]
call fcn.1400c4840
test eax, eax
je 0x1400f63f4
lea rcx, [rbp + 0x190]
cmp rdi, 8
cmovae rcx, rbx
mov r9d, 2
lea r8, [0x14022a6e0]
call fcn.1400c4840
test eax, eax
je 0x1400f63f4
lea r8, [rbp + 0x190]
lea rdx, [rbp + 0x290]
lea rcx, [rbp + 0x210]
call fcn.1400c5640
mov rbx, rax
lea rax, [rbp + 0x190]
cmp rax, rbx
je 0x1400f634b
mov r8, qword [rbp + 0x1a8]
cmp r8, 8
jb 0x1400f6321
inc r8
mov rdx, qword [rbp + 0x190]
lea rcx, [rbp + 0x190]
call fcn.1400be810
mov qword [rbp + 0x1a8], 7
mov qword [rbp + 0x1a0], r15
mov word [rbp + 0x190], r15w
mov rdx, rbx
lea rcx, [rbp + 0x190]
call fcn.1400be780
nop
mov r8, qword [rbp + 0x228]
cmp r8, 8
jb 0x1400f636e
inc r8
mov rdx, qword [rbp + 0x210]
lea rcx, [rbp + 0x210]
call fcn.1400be810
lea rcx, [rbp + 0x190]
cmp qword [rbp + 0x1a8], 8
cmovae rcx, qword [rbp + 0x190]
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0x80000000
lea r8d, [r9 + 3]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rbx, rax
mov qword [rsp + 0x50], r15
mov qword [rbp - 0x78], r15
mov qword [rsp + 0x48], r15
cmp rax, 0xffffffffffffffff
je 0x1400f63e3
lea r9, [rsp + 0x48]
lea r8, [rbp - 0x78]
lea rdx, [rsp + 0x50]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetFileTime]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, [rsp + 0x58]
lea rcx, [rbp + 0x190]
call fcn.1400f4c10
lea rdx, [rbp + 0x460]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x1400f6230
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_FindClose]
mov qword [rbp + 0x350], 7
xor esi, esi
mov qword [rbp + 0x348], rsi
mov word [rbp + 0x338], si
lea r8, [rsp + 0x40]
lea rdx, [rbp + 0x338]
lea rcx, [rsp + 0x58]
call fcn.1400f4d90
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x60], rsi
mov dword [rbp - 0x60], esi
mov byte [rbp - 0x60], sil
mov dword [rbp - 0x68], 3
lea ecx, [rsi + 0x18]
call fcn.140165194
mov qword [rsp + 0x50], rax
mov qword [rax], rsi
mov qword [rax + 8], rsi
mov qword [rax + 0x10], rsi
mov qword [rbp - 0x60], rax
lea r8, [0x14022a718]
lea rdx, [rbp + 0x290]
lea rcx, [rbp + 0x358]
call fcn.1400dc1b0
cmp qword [rax + 0x18], 8
jb 0x1400f649c
mov rax, qword [rax]
lea rdx, [rbp + 0x460]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov r12, rax
mov r8, qword [rbp + 0x370]
cmp r8, 8
jb 0x1400f64d2
inc r8
mov rdx, qword [rbp + 0x358]
lea rcx, [rbp + 0x358]
call fcn.1400be810
mov qword [rbp + 0x370], 7
mov qword [rbp + 0x368], rsi
mov word [rbp + 0x358], si
movzx r15d, byte [rsp + 0x40]
cmp r12, 0xffffffffffffffff
je 0x1400f77d9
nop dword [rax + rax]
cmp word [rbp + 0x48c], 0
jne 0x1400f650f
mov r8, rsi
jmp 0x1400f652b
lea rax, [rbp + 0x48c]
or r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x1400f6520
lea rdx, [rbp + 0x48c]
lea rcx, [rbp + 0x190]
call fcn.1400be520
lea rcx, [rbp + 0x190]
mov rbx, qword [rbp + 0x190]
mov rdi, qword [rbp + 0x1a8]
cmp rdi, 8
cmovae rcx, rbx
mov r9d, 1
lea r8, [0x14022724c]
mov rdx, qword [rbp + 0x1a0]
call fcn.1400c4840
test eax, eax
je 0x1400f773f
lea rcx, [rbp + 0x190]
cmp rdi, 8
cmovae rcx, rbx
mov r9d, 2
lea r8, [0x14022a6e0]
call fcn.1400c4840
test eax, eax
je 0x1400f773f
lea r8, [rbp + 0x190]
lea rdx, [rbp + 0x290]
lea rcx, [rbp + 0x210]
call fcn.1400c5640
mov rbx, rax
lea rax, [rbp + 0x190]
cmp rax, rbx
je 0x1400f661a
mov r8, qword [rbp + 0x1a8]
cmp r8, 8
jb 0x1400f65f1
inc r8
mov rdx, qword [rbp + 0x190]
lea rcx, [rbp + 0x190]
call fcn.1400be810
mov qword [rbp + 0x1a8], 7
mov qword [rbp + 0x1a0], rsi
mov word [rbp + 0x190], si
mov rdx, rbx
lea rcx, [rbp + 0x190]
call fcn.1400be780
nop
mov r8, qword [rbp + 0x228]
cmp r8, 8
jb 0x1400f663d
inc r8
mov rdx, qword [rbp + 0x210]
lea rcx, [rbp + 0x210]
call fcn.1400be810
lea rax, [0x14022a7f0]
mov qword [rbp + 0x70], rax
lea rax, [0x140227dd8]
mov qword [rbp + 0x80], rax
lea rax, vtable.std::basic_ios_char__struct_std::char_traits_char__.0
mov qword [rbp + 0x128], rax
or r14d, 4
mov dword [rsp + 0x48], r14d
lea rdx, [rbp + 0x88]
lea rcx, [rbp + 0x70]
call fcn.1400f8410
nop
mov rax, qword [rbp + 0x70]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_fstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x70], rax
mov rax, qword [rbp + 0x70]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb8]
mov dword [rbp + rcx + 0x6c], edx
lea rcx, [rbp + 0x88]
call fcn.1400f0cf0
lea rax, vtable.std::basic_filebuf_char__struct_std::char_traits_char__.0
mov qword [rbp + 0x88], rax
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x88]
call fcn.1400f0960
nop
lea rdx, [rbp + 0x190]
cmp qword [rbp + 0x1a8], 8
cmovae rdx, qword [rbp + 0x190]
lea rcx, [rbp + 0x88]
call fcn.1400f0b20
test rax, rax
mov rax, qword [rbp + 0x70]
movsxd rcx, dword [rax + 4]
jne 0x1400f671c
lea r9, [rbp + 0x70]
add rcx, r9
mov eax, dword [rcx + 0x10]
or eax, 2
mov edx, eax
or edx, 4
cmp qword [rcx + 0x48], 0
cmovne edx, eax
jmp 0x1400f6730
lea rax, [rbp + 0x70]
add rcx, rax
mov edx, 4
cmp qword [rcx + 0x48], 0
cmovne edx, esi
xor r8d, r8d
call fcn.1400cb440
cmp qword [rbp + 0x108], 0
je 0x1400f7736
lea rcx, [rbp - 0x70]
call fcn.1400c02b0
mov qword [rbp + 0x228], reloc.OLEAUT32.dll_SafeArrayDestroy
mov qword [rbp + 0x220], rsi
mov byte [rbp + 0x210], 0
xor r8d, r8d
lea rdx, [0x140219000]
lea rcx, [rbp + 0x210]
call fcn.1400ccaa0
nop
mov qword [rbp + 0x3b0], reloc.OLEAUT32.dll_SafeArrayDestroy
mov qword [rbp + 0x3a8], rsi
mov byte [rbp + 0x398], 0
xor r8d, r8d
lea rdx, [0x140219000]
lea rcx, [rbp + 0x398]
call fcn.1400ccaa0
nop
mov qword [rbp + 0x390], reloc.OLEAUT32.dll_SafeArrayDestroy
mov qword [rbp + 0x388], rsi
mov byte [rbp + 0x378], 0
xor r8d, r8d
lea rdx, [0x140219000]
lea rcx, [rbp + 0x378]
call fcn.1400ccaa0
nop
mov qword [rbp + 0x268], reloc.OLEAUT32.dll_SafeArrayDestroy
mov qword [rbp + 0x260], rsi
mov byte [rbp + 0x250], 0
mov rax, qword [rbp + 0x70]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x70]
add rcx, rax
mov dl, 0xa
call fcn.1400f0da0
movzx r8d, al
lea rdx, [rbp + 0x250]
lea rcx, [rbp + 0x70]
call fcn.1400f1cd0
mov rcx, qword [rax]
movsxd rdx, dword [rcx + 4]
test byte [rdx + rax + 0x10], 6
jne 0x1400f76f8
nop dword [rax]
nop dword [rax + rax]
mov r9d, 5
xor r8d, r8d
lea rdx, str.name
lea rcx, [rbp + 0x250]
call fcn.1400f8320
xor r8d, r8d
lea rcx, [rbp + 0x250]
cmp rax, 0xffffffffffffffff
je 0x1400f71e6
lea r9d, [r8 + 6]
lea rdx, str.name_
call fcn.1400f8320
mov rbx, rax
lea ecx, [rax + 6]
movsxd rdi, ecx
mov r9d, 1
mov r8, rdi
lea rdx, [0x14022a710]
lea rcx, [rbp + 0x250]
call fcn.1400f8320
sub eax, ebx
sub eax, 6
movsxd r9, eax
mov r8, rdi
lea rdx, [rbp + 0x2b0]
lea rcx, [rbp + 0x250]
call fcn.1400f7dd0
nop
mov qword [rbp + 0x248], reloc.OLEAUT32.dll_SafeArrayDestroy
mov qword [rbp + 0x240], rsi
mov byte [rbp + 0x230], 0
xor r8d, r8d
lea rdx, [0x140219000]
lea rcx, [rbp + 0x230]
call fcn.1400ccaa0
nop
lea rbx, [rbp + 0x2b0]
mov rdx, qword [rbp + 0x2b0]
cmp qword [rbp + 0x2c8], 0x10
cmovae rbx, rdx
lea rdi, [rbp + 0x2b0]
cmovae rdi, rdx
add rdi, qword [rbp + 0x2c0]
cmp rbx, rdi
je 0x1400f6aee
mov r9, qword [rbp + 0x240]
movzx edx, byte [rbx]
cmp dl, 0xbb
je 0x1400f6952
cmp dl, 0x7c
je 0x1400f6952
lea rcx, [rbp + 0x230]
call fcn.1400f23a0
mov r9, qword [rbp + 0x240]
jmp 0x1400f695e
mov eax, esi
test r9, r9
setne al
test eax, eax
jne 0x1400f696b
inc rbx
cmp rbx, rdi
jne 0x1400f6930
jmp 0x1400f6aee
lea rax, [rbp + 0x230]
cmp qword [rbp + 0x248], 0x10
cmovae rax, qword [rbp + 0x230]
xor r8d, r8d
cmp byte [r9 + rax - 1], 0x20
jne 0x1400f69aa
dec r9
lea rdx, [rbp + 0x418]
lea rcx, [rbp + 0x230]
call fcn.1400f7dd0
nop
or r14d, 1
jmp 0x1400f69e5
mov qword [rbp + 0x1e8], reloc.OLEAUT32.dll_SafeArrayDestroy
mov qword [rbp + 0x1e0], rsi
mov byte [rbp + 0x1d0], 0
or r9, 0xffffffffffffffff
lea rdx, [rbp + 0x230]
lea rcx, [rbp + 0x1d0]
call fcn.1400ccbd0
lea rax, [rbp + 0x1d0]
or r14d, 2
mov dword [rsp + 0x48], r14d
mov rdx, rax
lea rcx, [rbp + 0x2b0]
call fcn.1400f7e80
test r14b, 2
je 0x1400f6a75
and r14d, 0xfffffffd
mov dword [rsp + 0x48], r14d
mov rax, qword [rbp + 0x1e8]
cmp rax, 0x10
jb 0x1400f6a5c
inc rax
mov rcx, qword [rbp + 0x1d0]
cmp rax, 0x1000
jb 0x1400f6a57
test cl, 0x1f
jne 0x1400f776a
mov rax, qword [rcx - 8]
cmp rax, rcx
jae 0x1400f7764
sub rcx, rax
cmp rcx, 8
jb 0x1400f775e
cmp rcx, 0x27
ja 0x1400f7758
mov rcx, rax
call fcn.140005910
mov qword [rbp + 0x1e8], reloc.OLEAUT32.dll_SafeArrayDestroy
mov qword [rbp + 0x1e0], rsi
mov byte [rbp + 0x1d0], 0
test r14b, 1
je 0x1400f6ad8
and r14d, 0xfffffffe
mov dword [rsp + 0x48], r14d
mov rax, qword [rbp + 0x430]
cmp rax, 0x10
jb 0x1400f6ad8
inc rax
mov rcx, qword [rbp + 0x418]
cmp rax, 0x1000
jb 0x1400f6ad3
test cl, 0x1f
jne 0x1400f7782
mov rax, qword [rcx - 8]
cmp rax, rcx
jae 0x1400f777c
sub rcx, rax
cmp rcx, 8
jb 0x1400f7776
cmp rcx, 0x27
ja 0x1400f7770
mov rcx, rax
call fcn.140005910
xor r8d, r8d
lea rdx, [0x140219000]
lea rcx, [rbp + 0x230]
call fcn.1400ccaa0
mov r9d, 8
xor r8d, r8d
lea rdx, str.result_
lea rcx, [rbp + 0x250]
call fcn.1400f8320
mov rbx, rax
lea ecx, [rax + 8]
movsxd rdi, ecx
mov r9d, 1
mov r8, rdi
lea rdx, [0x14022a710]
lea rcx, [rbp + 0x250]
call fcn.1400f8320
sub eax, ebx
sub eax, 8
movsxd r9, eax
mov r8, rdi
lea rdx, [rbp + 0x270]
lea rcx, [rbp + 0x250]
call fcn.1400f7dd0
nop
cmp qword [rbp + 0x280], 0
ja 0x1400f6c93
mov rax, qword [rbp + 0x288]
cmp rax, 0x10
jb 0x1400f6bb0
inc rax
mov rcx, qword [rbp + 0x270]
cmp rax, 0x1000
jb 0x1400f6bab
test cl, 0x1f
jne 0x1400f779a
mov rax, qword [rcx - 8]
cmp rax, rcx
jae 0x1400f7794
sub rcx, rax
cmp rcx, 8
jb 0x1400f778e
cmp rcx, 0x27
ja 0x1400f7788
mov rcx, rax
call fcn.140005910
mov qword [rbp + 0x288], reloc.OLEAUT32.dll_SafeArrayDestroy
mov qword [rbp + 0x280], rsi
mov byte [rbp + 0x270], 0
mov rax, qword [rbp + 0x248]
cmp rax, 0x10
jb 0x1400f6c1d
inc rax
mov rcx, qword [rbp + 0x230]
cmp rax, 0x1000
jb 0x1400f6c18
test cl, 0x1f
jne 0x1400f77b2
mov rax, qword [rcx - 8]
cmp rax, rcx
jae 0x1400f77ac
sub rcx, rax
cmp rcx, 8
jb 0x1400f77a6
cmp rcx, 0x27
ja 0x1400f77a0
mov rcx, rax
call fcn.140005910
mov qword [rbp + 0x248], reloc.OLEAUT32.dll_SafeArrayDestroy
mov qword [rbp + 0x240], rsi
mov byte [rbp + 0x230], 0
mov rax, qword [rbp + 0x2c8]
cmp rax, 0x10
jb 0x1400f76bc
inc rax
mov rcx, qword [rbp + 0x2b0]
cmp rax, 0x1000
jb 0x1400f6c89
test cl, 0x1f
jne 0x1400f77ca
mov rax, qword [rcx - 8]
cmp rax, rcx
jae 0x1400f77c4
sub rcx, rax
cmp rcx, 8
jb 0x1400f77be
cmp rcx, 0x27
ja 0x1400f77b8
mov rcx, rax
call fcn.140005910
jmp 0x1400f76bc
mov qword [rbp + 0x1c8], reloc.OLEAUT32.dll_SafeArrayDestroy
mov qword [rbp + 0x1c0], rsi
mov byte [rbp + 0x1b0], 0
xor r8d, r8d
lea rdx, [0x140219000]
lea rcx, [rbp + 0x1b0]
call fcn.1400ccaa0
nop
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x270]
call fcn.1400cb8a0
lea rdx, [rbp - 0x78]
lea rcx, [rbp + 0x270]
call fcn.1400cb870
mov rbx, qword [rsp + 0x50]
mov rdi, qword [rbp - 0x78]
cmp rbx, rdi
je 0x1400f6d67
movzx edx, byte [rbx]
lea rcx, [rbp + 0x1b0]
cmp dl, 0x20
je 0x1400f6d08
call fcn.1400f23a0
jmp 0x1400f6d4a
call fcn.1400f88b0
test al, al
je 0x1400f6d4a
xor edx, edx
lea rcx, [rbp + 0x1b0]
call fcn.1400cb850
cmp byte [rax], 0x41
jl 0x1400f6d37
xor edx, edx
lea rcx, [rbp + 0x1b0]
call fcn.1400cb850
cmp byte [rax], 0x5a
jle 0x1400f6d54
lea rdx, [0x140219000]
lea rcx, [rbp + 0x1b0]
call fcn.1400f7e30
inc rbx
mov qword [rsp + 0x50], rbx
jmp 0x1400f6ced
lea rdx, [rbp + 0x1b0]
lea rcx, [rbp + 0x270]
call fcn.1400f7e50
xor r8d, r8d
lea rdx, str.action_
lea rcx, [rbp + 0x250]
call fcn.1400f7e10
mov rbx, rax
lea ecx, [rax + 8]
movsxd rdi, ecx
mov r8, rdi
lea rdx, [0x14022a710]
lea rcx, [rbp + 0x250]
call fcn.1400f7e10
sub eax, ebx
sub eax, 8
movsxd r9, eax
mov r8, rdi
lea rdx, [rbp + 0x1f0]
lea rcx, [rbp + 0x250]
call fcn.1400f7dd0
nop
xor r8d, r8d
lea rdx, str.quarant
lea rcx, [rbp + 0x1f0]
call fcn.1400f7e10
cmp rax, 0xffffffffffffffff
je 0x1400f6de0
lea rdx, str.quarantined
jmp 0x1400f6e0c
xor r8d, r8d
lea rdx, [0x14022a778]
lea rcx, [rbp + 0x1f0]
call fcn.1400f7e10
lea rdx, str.unknown
cmp rax, 0xffffffffffffffff
lea rax, str.deleted
cmovne rdx, rax
lea rcx, [rbp + 0x1f0]
call fcn.1400f7e30
lea rdx, str.unknown
lea rcx, [rbp + 0x1f0]
call fcn.1400f88c0
test al, al
jne 0x1400f6e5d
lea rdx, [0x14021b498]
lea rcx, [rbp + 0x1f0]
call fcn.1400f88c0
test al, al
jne 0x1400f6e5d
lea rdx, [0x14021d730]
lea rcx, [rbp + 0x1f0]
call fcn.1400f88c0
test al, al
je 0x1400f6e60
xor r15b, r15b
lea rdx, [rbp + 0x210]
lea rcx, [rbp + 0x270]
call fcn.1400f8940
test al, al
je 0x1400f6ea9
lea rdx, [rbp + 0x398]
lea rcx, [rbp + 0x2b0]
call fcn.1400f8940
test al, al
je 0x1400f6ea9
lea rdx, [rbp + 0x378]
lea rcx, [rbp + 0x1f0]
call fcn.1400f8940
test al, al
jne 0x1400f71a1
lea rdx, [rbp + 0x270]
lea rcx, [rbp + 0x210]
call fcn.1400f7e50
lea rdx, [rbp + 0x2b0]
lea rcx, [rbp + 0x398]
call fcn.1400f7e50
lea rdx, [rbp + 0x1f0]
lea rcx, [rbp + 0x378]
call fcn.1400f7e50
xor r8d, r8d
lea rdx, str.info_
lea rcx, [rbp + 0x250]
call fcn.1400f7e10
mov rbx, rax
lea ecx, [rax + 6]
movsxd rdi, ecx
mov r8, rdi
lea rdx, [0x14022a710]
lea rcx, [rbp + 0x250]
call fcn.1400f7e10
sub eax, ebx
sub eax, 6
movsxd r9, eax
mov r8, rdi
lea rdx, [rbp + 0x310]
lea rcx, [rbp + 0x250]
call fcn.1400f7dd0
nop
mov r8d, 0x20
mov rdx, qword [rbp + 0x2c0]
lea rcx, [rbp + 0x3f8]
call fcn.1400f7da0
nop
lea rdx, [rbp]
lea rcx, [rbp + 0x3f8]
call fcn.1400c48d0
mov rdi, rax
lea rdx, [rbp + 8]
lea rcx, [rbp + 0x2b0]
call fcn.1400cb870
mov rbx, rax
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x2b0]
call fcn.1400cb8a0
mov r9, qword [rdi]
mov r8, qword [rbx]
mov rdx, qword [rax]
lea rcx, [rbp - 0x18]
call fcn.1400f89c0
mov r8d, 0x20
mov rdx, qword [rbp + 0x280]
lea rcx, [rbp + 0x3d8]
call fcn.1400f7da0
nop
lea rdx, [rbp + 0x18]
lea rcx, [rbp + 0x3d8]
call fcn.1400c48d0
mov rdi, rax
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x270]
call fcn.1400cb870
mov rbx, rax
lea rdx, [rbp + 0x28]
lea rcx, [rbp + 0x270]
call fcn.1400cb8a0
mov r9, qword [rdi]
mov r8, qword [rbx]
mov rdx, qword [rax]
lea rcx, [rbp + 0x30]
call fcn.1400f89c0
mov r8d, 0x20
mov rdx, qword [rbp + 0x200]
lea rcx, [rbp + 0x3b8]
call fcn.1400f7da0
nop
lea rdx, [rbp + 0x38]
lea rcx, [rbp + 0x3b8]
call fcn.1400c48d0
mov rdi, rax
lea rdx, [rbp + 0x40]
lea rcx, [rbp + 0x1f0]
call fcn.1400cb870
mov rbx, rax
lea rdx, [rbp + 0x48]
lea rcx, [rbp + 0x1f0]
call fcn.1400cb8a0
mov r9, qword [rdi]
mov r8, qword [rbx]
mov rdx, qword [rax]
lea rcx, [rbp - 0x10]
call fcn.1400f89c0
mov edx, 2
lea rcx, [rsp + 0x70]
call fcn.1400bf370
nop
lea rcx, [rbp + 0x3d8]
call fcn.1400be280
mov rdx, rax
lea rcx, [rbp + 0x1d0]
call fcn.1400bf130
nop
lea r8, [rbp + 0x1d0]
lea rdx, str.threat_name
lea rcx, [rsp + 0x70]
call fcn.1400c0720
nop
lea rbx, vtable.WaJson.0
mov qword [rbp + 0x1d0], rbx
lea rcx, [rbp + 0x1d0]
call fcn.1400c02b0
nop
lea rcx, [rbp + 0x3b8]
call fcn.1400be280
mov rdx, rax
lea rcx, [rbp + 0x1d0]
call fcn.1400bf130
nop
lea r8, [rbp + 0x1d0]
lea rdx, str.remediation
lea rcx, [rsp + 0x70]
call fcn.1400c0720
nop
mov qword [rbp + 0x1d0], rbx
lea rcx, [rbp + 0x1d0]
call fcn.1400c02b0
nop
lea rcx, [rbp + 0x3f8]
call fcn.1400be280
mov rdx, rax
lea rcx, [rbp + 0x1d0]
call fcn.1400bf130
nop
lea r8, [rbp + 0x1d0]
lea rdx, str.path
lea rcx, [rsp + 0x70]
call fcn.1400c0720
nop
mov qword [rbp + 0x1d0], rbx
lea rcx, [rbp + 0x1d0]
call fcn.1400c02b0
nop
lea rdx, [rsp + 0x70]
lea rcx, [rbp - 0x70]
call fcn.1400c0420
nop
mov qword [rsp + 0x70], rbx
lea rcx, [rsp + 0x70]
call fcn.1400c02b0
nop
lea rcx, [rbp + 0x3b8]
call fcn.1400be290
nop
lea rcx, [rbp + 0x3d8]
call fcn.1400be290
nop
lea rcx, [rbp + 0x3f8]
call fcn.1400be290
nop
lea rcx, [rbp + 0x310]
call fcn.1400cb8c0
nop
lea rcx, [rbp + 0x1f0]
call fcn.1400cb8c0
nop
lea rcx, [rbp + 0x1b0]
call fcn.1400cb8c0
nop
lea rcx, [rbp + 0x270]
call fcn.1400cb8c0
nop
lea rcx, [rbp + 0x230]
call fcn.1400cb8c0
nop
lea rcx, [rbp + 0x2b0]
call fcn.1400cb8c0
jmp 0x1400f76bc
lea rdx, str.Scan_completed_at:
call fcn.1400f7e10
cmp rax, 0xffffffffffffffff
je 0x1400f76bc
xor r8d, r8d
lea rdx, str.Scan_completed_at:
lea rcx, [rbp + 0x250]
call fcn.1400f7e10
mov r9, qword [rbp + 0x260]
add r9, 0xffffffffffffffe9
mov r8d, SafeArrayCopy
lea rdx, [rbp + 0x1b0]
lea rcx, [rbp + 0x250]
call fcn.1400f7dd0
nop
mov r9d, 2
lea r8d, [r9 + 2]
lea rdx, [rbp + 0x230]
lea rcx, [rbp + 0x1b0]
call fcn.1400f7dd0
nop
lea rcx, [rbp + 0x230]
call fcn.1400f39a0
mov dword [rbp + 0x31c], eax
mov r9d, 3
xor r8d, r8d
lea rdx, [rbp + 0x1f0]
lea rcx, [rbp + 0x1b0]
call fcn.1400f7dd0
nop
lea rdx, [0x14022a7a4]
lea rcx, [rbp + 0x1f0]
call fcn.1400f88c0
test al, al
je 0x1400f72a5
mov ecx, 1
jmp 0x1400f7405
lea rdx, [0x14022a788]
lea rcx, [rbp + 0x1f0]
call fcn.1400f88c0
test al, al
je 0x1400f72c6
mov ecx, 2
jmp 0x1400f7405
lea rdx, [0x14022a78c]
lea rcx, [rbp + 0x1f0]
call fcn.1400f88c0
test al, al
je 0x1400f72e7
mov ecx, 3
jmp 0x1400f7405
lea rdx, [0x14022a7b0]
lea rcx, [rbp + 0x1f0]
call fcn.1400f88c0
test al, al
je 0x1400f7308
mov ecx, 4
jmp 0x1400f7405
lea rdx, [0x14022a7b4]
lea rcx, [rbp + 0x1f0]
call fcn.1400f88c0
test al, al
je 0x1400f7329
mov ecx, 5
jmp 0x1400f7405
lea rdx, [0x14022a7a8]
lea rcx, [rbp + 0x1f0]
call fcn.1400f88c0
test al, al
je 0x1400f734a
mov ecx, 6
jmp 0x1400f7405
lea rdx, [0x14022a7ac]
lea rcx, [rbp + 0x1f0]
call fcn.1400f88c0
test al, al
je 0x1400f736b
mov ecx, 7
jmp 0x1400f7405
lea rdx, [0x14022a7c0]
lea rcx, [rbp + 0x1f0]
call fcn.1400f88c0
test al, al
je 0x1400f7389
mov ecx, 8
jmp 0x1400f7405
lea rdx, [0x14022a7c4]
lea rcx, [rbp + 0x1f0]
call fcn.1400f88c0
test al, al
je 0x1400f73a7
mov ecx, 9
jmp 0x1400f7405
lea rdx, [0x14022a7b8]
lea rcx, [rbp + 0x1f0]
call fcn.1400f88c0
test al, al
je 0x1400f73c5
mov ecx, 0xa
jmp 0x1400f7405
lea rdx, [0x14022a7bc]
lea rcx, [rbp + 0x1f0]
call fcn.1400f88c0
test al, al
je 0x1400f73e3
mov ecx, SafeArrayDestroy
jmp 0x1400f7405
lea rdx, [0x14022a7c8]
lea rcx, [rbp + 0x1f0]
call fcn.1400f88c0
mov ecx, 1
test al, al
mov eax, SafeArrayDestroy
cmovne ecx, eax
lea eax, [rcx - 1]
mov dword [rbp + 0x320], eax
mov r9d, 4
lea r8d, [r9 + 0xc]
lea rdx, [rbp + 0x3b8]
lea rcx, [rbp + 0x1b0]
call fcn.1400f7dd0
nop
lea rcx, [rbp + 0x3b8]
call fcn.1400f39a0
sub eax, 0x76c
mov dword [rbp + 0x324], eax
mov r9d, 2
lea r8d, [r9 + 5]
lea rdx, [rbp + 0x3d8]
lea rcx, [rbp + 0x1b0]
call fcn.1400f7dd0
nop
lea rcx, [rbp + 0x3d8]
call fcn.1400f39a0
mov dword [rbp + 0x318], eax
mov r9d, 2
lea r8d, [r9 + 8]
lea rdx, [rbp + 0x3f8]
lea rcx, [rbp + 0x1b0]
call fcn.1400f7dd0
nop
lea rcx, [rbp + 0x3f8]
call fcn.1400f39a0
mov dword [rbp + 0x314], eax
mov r9d, 2
lea r8d, [r9 + 0xb]
lea rdx, [rbp + 0x418]
lea rcx, [rbp + 0x1b0]
call fcn.1400f7dd0
nop
lea rcx, [rbp + 0x418]
call fcn.1400f39a0
mov dword [rbp + 0x310], eax
lea rcx, [rbp + 0x310]
call fcn.1401b2658
mov edx, eax
lea rcx, [rbp + 0x270]
call fcn.1400f3a20
nop
mov r8d, 0x20
mov rdx, qword [rbp + 0x280]
lea rcx, [rbp + 0x2b0]
call fcn.1400f7da0
nop
lea rdx, [rbp + 0x60]
lea rcx, [rbp + 0x2b0]
call fcn.1400c48d0
mov rdi, rax
lea rdx, [rbp + 0x50]
lea rcx, [rbp + 0x270]
call fcn.1400cb870
mov rbx, rax
lea rdx, [rbp + 0x58]
lea rcx, [rbp + 0x270]
call fcn.1400cb8a0
mov r9, qword [rdi]
mov r8, qword [rbx]
mov rdx, qword [rax]
lea rcx, [rbp - 0x10]
call fcn.1400f89c0
lea rcx, [rbp - 0x70]
call fcn.1400c03e0
test rax, rax
je 0x1400f7646
xor edi, edi
lea r13, vtable.WaJson.0
nop dword [rax + rax]
mov rax, qword [rbp - 0x70]
mov rbx, qword [rax + 0x70]
mov rcx, rbx
call qword [fcn.1400059b0]
mov rdx, rdi
lea rcx, [rbp - 0x70]
call rbx
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.1400bf000
nop
lea rcx, [rbp + 0x2b0]
call fcn.1400be280
mov rdx, rax
lea rcx, [rbp + 0x1d0]
call fcn.1400bf130
nop
lea r8, [rbp + 0x1d0]
lea rdx, str.scan_time
lea rcx, [rsp + 0x70]
call fcn.1400c0720
nop
mov qword [rbp + 0x1d0], r13
lea rcx, [rbp + 0x1d0]
call fcn.1400c02b0
nop
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x58]
call fcn.1400c0420
lea rdx, [rbp + 0x338]
lea rcx, [rbp + 0x2b0]
call fcn.1400f8a00
test al, al
je 0x1400f761b
lea rdx, [rbp + 0x2b0]
lea rcx, [rbp + 0x338]
call fcn.1400c44a0
nop
mov qword [rsp + 0x70], r13
lea rcx, [rsp + 0x70]
call fcn.1400c02b0
nop
inc esi
movsxd rdi, esi
lea rcx, [rbp - 0x70]
call fcn.1400c03e0
cmp rdi, rax
jb 0x1400f7570
mov r13, qword [rbp - 0x28]
lea rcx, [rbp + 0x2b0]
call fcn.1400be290
nop
lea rcx, [rbp + 0x270]
call fcn.1400cb8c0
nop
lea rcx, [rbp + 0x418]
call fcn.1400cb8c0
nop
lea rcx, [rbp + 0x3f8]
call fcn.1400cb8c0
nop
lea rcx, [rbp + 0x3d8]
call fcn.1400cb8c0
nop
lea rcx, [rbp + 0x3b8]
call fcn.1400cb8c0
nop
lea rcx, [rbp + 0x1f0]
call fcn.1400cb8c0
nop
lea rcx, [rbp + 0x230]
call fcn.1400cb8c0
nop
lea rcx, [rbp + 0x1b0]
call fcn.1400cb8c0
xor esi, esi
mov rax, qword [rbp + 0x70]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x70]
add rcx, rax
mov dl, 0xa
call fcn.1400f0da0
movzx r8d, al
lea rdx, [rbp + 0x250]
lea rcx, [rbp + 0x70]
call fcn.1400f1cd0
mov rcx, qword [rax]
movsxd rdx, dword [rcx + 4]
test byte [rdx + rax + 0x10], 6
je 0x1400f6840
lea rcx, [rbp + 0x70]
call fcn.1400f7f40
nop
lea rcx, [rbp + 0x250]
call fcn.1400cb8c0
nop
lea rcx, [rbp + 0x378]
call fcn.1400cb8c0
nop
lea rcx, [rbp + 0x398]
call fcn.1400cb8c0
nop
lea rcx, [rbp + 0x210]
call fcn.1400cb8c0
nop
lea rcx, [rbp + 0x70]
call fcn.1400f7ab0
lea rdx, [rbp + 0x460]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
je 0x1400f77d0
jmp 0x1400f6500
call fcn.1401ab16c
int3
call fcn.1401ab16c
int3
call fcn.1401ab16c
int3
call fcn.1401ab16c
nop
call fcn.1401ab16c
int3
call fcn.1401ab16c
int3
call fcn.1401ab16c
int3
call fcn.1401ab16c
int3
call fcn.1401ab16c
int3
call fcn.1401ab16c
int3
call fcn.1401ab16c
int3
call fcn.1401ab16c
nop
call fcn.1401ab16c
int3
call fcn.1401ab16c
int3
call fcn.1401ab16c
int3
call fcn.1401ab16c
nop
call fcn.1401ab16c
int3
call fcn.1401ab16c
int3
call fcn.1401ab16c
int3
call fcn.1401ab16c
nop
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_FindClose]
movzx edx, r15b
lea rcx, [rbp + 0x1d0]
call fcn.1400bf280
nop
lea r8, [rbp + 0x1d0]
lea rdx, str.no_threats
lea rcx, [rbp - 0x58]
call fcn.1400c0720
nop
lea rbx, vtable.WaJson.0
mov qword [rbp + 0x1d0], rbx
lea rcx, [rbp + 0x1d0]
call fcn.1400c02b0
nop
lea rcx, [rbp + 0x338]
call fcn.1400be280
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.1400bf130
nop
lea r8, [rsp + 0x70]
lea rdx, str.last_threat_time
lea rcx, [rbp - 0x58]
call fcn.1400c0720
nop
mov qword [rsp + 0x70], rbx
lea rcx, [rsp + 0x70]
call fcn.1400c02b0
nop
lea r8, [rsp + 0x58]
lea rdx, str.threats
lea rcx, [rbp - 0x58]
call fcn.1400c05d0
lea r8, [rbp - 0x58]
lea rdx, str.result
lea rcx, [rbp - 0x40]
call fcn.1400c05d0
lea rdx, [rbp + 0x310]
lea rcx, [rbp - 0x40]
call fcn.1400c2f60
mov rdx, rax
mov rcx, qword [rbp - 0x20]
call fcn.1400c44d0
lea rcx, [rbp + 0x310]
call fcn.1400be290
nop
mov qword [rbp - 0x70], rbx
lea rcx, [rbp - 0x70]
call fcn.1400c02b0
nop
lea rcx, [rbp + 0x338]
call fcn.1400be290
nop
lea rcx, [rbp + 0x290]
call fcn.1400be290
nop
lea rcx, [rbp + 0x2d0]
call fcn.1400be290
nop
lea rcx, [rbp + 0x190]
call fcn.1400be290
nop
lea rcx, [rbp + 0x438]
call fcn.1400be290
nop
lea rcx, [rbp + 0x2f0]
call fcn.1400be290
nop
mov qword [rbp - 0x40], rbx
lea rcx, [rbp - 0x40]
call fcn.1400c02b0
nop
mov qword [rsp + 0x58], rbx
lea rcx, [rsp + 0x58]
call fcn.1400c02b0
nop
mov qword [rbp - 0x58], rbx
lea rcx, [rbp - 0x58]
call fcn.1400c02b0
nop
mov qword [r13], rbx
mov rcx, r13
call fcn.1400c02b0
nop
xor eax, eax
jmp 0x1400f7a7b
mov r8, qword [rbp + 0x2a8]
cmp r8, 8
jb 0x1400f796e
inc r8
mov rdx, qword [rbp + 0x290]
lea rcx, [rbp + 0x290]
call fcn.1400be810
mov qword [rbp + 0x2a8], 7
mov qword [rbp + 0x2a0], r15
mov word [rbp + 0x290], r15w
mov r8, qword [rbp + 0x2e8]
cmp r8, 8
jb 0x1400f79ab
inc r8
mov rdx, qword [rbp + 0x2d0]
lea rcx, [rbp + 0x2d0]
call fcn.1400be810
mov qword [rbp + 0x2e8], 7
mov qword [rbp + 0x2e0], r15
mov word [rbp + 0x2d0], r15w
mov r8, qword [rbp + 0x1a8]
cmp r8, 8
jb 0x1400f79e8
inc r8
mov rdx, qword [rbp + 0x190]
lea rcx, [rbp + 0x190]
call fcn.1400be810
mov qword [rbp + 0x1a8], 7
mov qword [rbp + 0x1a0], r15
mov word [rbp + 0x190], r15w
mov r8, qword [rbp + 0x308]
cmp r8, 8
jb 0x1400f7a25
inc r8
mov rdx, qword [rbp + 0x2f0]
lea rcx, [rbp + 0x2f0]
call fcn.1400be810
mov qword [rbp + 0x308], 7
mov qword [rbp + 0x300], r15
mov word [rbp + 0x2f0], r15w
mov qword [rbp - 0x40], r12
lea rcx, [rbp - 0x40]
call fcn.1400c02b0
nop
mov qword [rsp + 0x58], r12
lea rcx, [rsp + 0x58]
call fcn.1400c02b0
nop
mov qword [rbp - 0x58], r12
lea rcx, [rbp - 0x58]
call fcn.1400c02b0
nop
mov qword [r13], r12
mov rcx, r13
call fcn.1400c02b0
nop
or eax, 0xffffffff
mov rcx, qword [rbp + 0x6b0]
xor rcx, rsp
call fcn.140164ec0
mov rbx, qword [rsp + 0x800]
add rsp, 0x7c0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret