Function at 0x1401f6e60
Capabilities:
Get disk information
Reference sql statements

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xd00]
sub rsp, 0xe00
mov qword [rbp + 0xa0], 0xfffffffffffffffe
mov qword [rsp + 0xe40], rbx
lea rax, vtable.CUISFunctionEnterExit.0
mov qword [rbp + 0xa8], rax
lea r15, str.SASScanner_SetScannerFoldersToScan
mov qword [rbp + 0xb0], r15
xor edx, edx
mov r8d, 0x200
lea rcx, [rbp + 0xc0]
call fcn.140249b10
mov r8, r15
lea rdx, [0x1402862f8]
lea rcx, [rbp + 0xc0]
call fcn.140006bc0
mov r9d, 1
mov r8d, r9d
lea rdx, [rbp + 0xc0]
lea rcx, vtable.CSASApplicationLogManager.0
call fcn.140004a50
nop
mov rcx, qword [0x14037caf8]
add rcx, 0x1320
call fcn.1400b2c40
mov eax, dword [0x140350860]
test eax, eax
je 0x1401f71b6
cmp eax, 1
jne 0x1401f7b6a
movzx eax, word [0x1402ce5fc]
mov word [rbp + 0xd48], ax
movzx eax, byte [0x1402ce5fe]
mov byte [rbp + 0xd4a], al
mov dword [rbp + 0xd50], 0x5c3a20
xor edx, edx
mov r8d, 0x410
lea rcx, [rbp + 0xc0]
call fcn.140249b10
lea rdx, [rbp + 0xc0]
mov ecx, 0x410
call qword [sym.imp.KERNEL32.dll_GetLogicalDriveStringsA]
xor edx, edx
mov r8d, 0x410
lea rcx, [rbp + 0x8f0]
call fcn.140249b10
lea rdx, [0x14034ec34]
lea rcx, [rbp + 0x8f0]
call qword [sym.imp.KERNEL32.dll_lstrcpyA]
lea rdx, str.EXCLUDE.STG
lea rcx, [rbp + 0x8f0]
call qword [sym.imp.SHLWAPI.dll_PathAppendA]
lea rax, vtable.CSASFolderListManager.0
mov qword [rbp + 0x4d0], rax
lea rdx, [rbp + 0x8f0]
lea rcx, [rbp + 0x4d8]
call qword [sym.imp.KERNEL32.dll_lstrcpyA]
nop
xor r14d, r14d
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x50], r14
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x48]
call fcn.140043220
mov qword [rsp + 0x48], rax
lea rdx, [rsp + 0x48]
lea rcx, [rbp + 0x4d0]
call fcn.1401ed5e0
lea rsi, [rbp + 0xc0]
mov rdi, qword [rsp + 0x48]
cmp byte [rbp + 0xc0], r14b
je 0x1401f716f
lea r12, vtable.CSASScanner::CDiskScanLocation.0
lea r13, vtable.CSABString.0
nop
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetDriveTypeA]
add eax, 0xfffffffe
cmp eax, 1
ja 0x1401f7147
movzx eax, byte [rsi]
mov byte [rbp + 0xd48], al
mov byte [rbp + 0xd50], al
mov r15d, r14d
mov rbx, qword [rdi]
cmp rbx, rdi
je 0x1401f7074
nop
mov rdx, qword [rbx + 0x20]
lea rcx, [rbp + 0xd50]
call fcn.140252114
test eax, eax
je 0x1401f706e
mov rbx, qword [rbx]
cmp rbx, rdi
jne 0x1401f7050
jmp 0x1401f7074
mov r15d, 1
test r15d, r15d
jne 0x1401f7147
mov qword [rbp - 0x50], r12
mov qword [rbp - 0x48], r13
lea rcx, [rbp + 0xd48]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], 0
jne 0x1401f7093
mov dword [rbp - 0x38], eax
inc eax
mov ebx, eax
mov ecx, eax
call fcn.140247068
mov qword [rbp - 0x40], rax
test rax, rax
je 0x1401f70c5
mov r8d, ebx
lea rdx, [rbp + 0xd48]
mov rcx, rax
call fcn.1402496a0
mov dword [rbp - 0x34], 1
mov dword [rbp - 0x30], 0xffffffff
mov rbx, qword [0x14037caf8]
mov r15, qword [rbx + 0x1320]
mov r12, qword [r15 + 8]
lea r9, [rbp - 0x50]
mov r8, r12
mov rdx, r15
lea rcx, [rbx + 0x1320]
call fcn.1401e5ab0
mov rdx, qword [rbx + 0x1328]
movabs rcx, 0x492492492492491
sub rcx, rdx
cmp rcx, 1
jb 0x1401f7bef
lea rcx, [rdx + 1]
mov qword [rbx + 0x1328], rcx
mov qword [r15 + 8], rax
mov qword [r12], rax
cmp dword [rbp - 0x34], 1
jne 0x1401f7140
mov rcx, qword [rbp - 0x40]
test rcx, rcx
je 0x1401f7140
call fcn.140247060
lea r12, vtable.CSASScanner::CDiskScanLocation.0
mov rax, 0xffffffffffffffff
nop
inc rax
cmp byte [rsi + rax], 0
jne 0x1401f7150
inc rsi
add rsi, rax
cmp byte [rsi], 0
jne 0x1401f7020
lea r15, str.SASScanner_SetScannerFoldersToScan
mov rsi, qword [rdi]
mov qword [rdi], rdi
mov qword [rdi + 8], rdi
cmp rsi, rdi
je 0x1401f71a3
nop
mov rbx, qword [rsi]
lea rcx, [rsi + 0x10]
mov rax, qword [rcx]
xor edx, edx
call qword [rax]
mov edx, PathResolve
mov rcx, rsi
call fcn.140247060
mov rsi, rbx
cmp rbx, rdi
jne 0x1401f7180
mov edx, PathResolve
mov rcx, rdi
call fcn.140247060
nop
jmp 0x1401f7b6a
lea rdi, vtable.CSABSQL.0
mov qword [rbp - 0x20], rdi
lea rsi, vtable.CSABByteString.0
mov qword [rbp - 0x18], rsi
xor r14d, r14d
mov qword [rbp - 8], r14
mov qword [rbp], r14
mov qword [rbp - 0x10], r14
lea ecx, [r14 + 1]
call fcn.140247068
mov rbx, rax
mov rdx, qword [rbp - 0x10]
test rdx, rdx
je 0x1401f720c
mov r8, qword [rbp]
inc r8
mov rcx, rax
call fcn.1402496a0
lea edx, [r14 + 1]
mov rcx, qword [rbp - 0x10]
call fcn.140247060
mov qword [rbp - 0x10], rbx
mov qword [rbp - 8], 1
xor r8d, r8d
xor edx, edx
lea rcx, [rbp - 0x18]
call fcn.14000af20
nop
lea rcx, [rbp + 0x20]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov dword [rbp + 8], r14d
mov qword [rbp + 0x10], r14
mov dword [rbp + 0x18], r14d
cmp qword [rbp - 8], 0xc
jae 0x1401f7285
mov ecx, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
call fcn.140247068
mov rbx, rax
mov rdx, qword [rbp - 0x10]
test rdx, rdx
je 0x1401f7277
mov r8, qword [rbp]
inc r8
mov rcx, rax
call fcn.1402496a0
mov edx, 1
mov rcx, qword [rbp - 0x10]
call fcn.140247060
mov qword [rbp - 0x10], rbx
mov qword [rbp - 8], reloc.OLEAUT32.dll_VariantTimeToDosDateTime
jmp 0x1401f7289
mov rbx, qword [rbp - 0x10]
mov byte [rbx], 0
mov r9d, SafeArrayGetDim
lea r8, str.SABRegistry
mov rdx, qword [rbp - 8]
mov rcx, qword [rbp - 0x10]
call fcn.140250550
mov qword [rbp], SafeArrayGetDim
mov qword [rsp + 0x40], r14
lea rcx, [rbp - 0x20]
call fcn.1400e0560
mov ebx, r14d
lea rcx, [rbp + 0x20]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rcx, qword [rbp + 0x10]
test rcx, rcx
je 0x1401f72e8
mov rax, qword [rcx]
xor r9d, r9d
lea r8, [rsp + 0x40]
lea rdx, str.SELECT__FROM_sas_folders_included_WHERE_activeyes_AND_scantype_LIKE__QUICKSCAN__ORDER_BY_scanorder_ASC
call qword [rax]
mov ebx, eax
lea rcx, [rbp + 0x20]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test ebx, ebx
je 0x1401f7b1d
mov esi, r14d
mov dword [rsp + 0x58], r14d
mov qword [rbp + 0x58], r14
mov rcx, qword [rsp + 0x40]
mov rax, qword [rcx]
lea r9, [rbp + 0x58]
lea r8, [0x140294f68]
xor edx, edx
call qword [rax + 0x40]
test eax, eax
je 0x1401f7aeb
lea r15, vtable.CSASScanner::CDiskScanLocation.0
lea rdi, vtable.CSABString.0
lea r12, vtable.CSABEnumFileObjectsFromEnvironmentExpandedRegExp.0
lea r13, vtable.CSABEnvironmentStringsEx.0
mov qword [rsp + 0x68], r14
mov qword [rbp + 0x50], r14
mov rcx, qword [rsp + 0x40]
mov rax, qword [rcx]
lea r9, [rsp + 0x68]
lea r8, str.folder
mov edx, esi
call qword [rax + 0x40]
test eax, eax
je 0x1401f7ab7
mov rdx, qword [rsp + 0x68]
test rdx, rdx
je 0x1401f7ab7
mov r9d, 1
mov r8d, r9d
lea rcx, vtable.CSASApplicationLogManager.0
call fcn.140004a50
mov rbx, qword [rsp + 0x68]
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x78], r14
mov qword [rbp - 0x70], r14
xor r8d, r8d
xor edx, edx
lea rcx, [rbp - 0x78]
call fcn.14000b0b0
mov qword [rbp - 0x78], rax
mov qword [rbp - 0x68], rdi
mov qword [rbp - 0x60], r14
mov dword [rbp - 0x58], r14d
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetDim
call fcn.140247068
mov qword [rbp - 0x60], rax
xor ecx, ecx
mov qword [rax], rcx
mov qword [rax + 8], rcx
mov dword [rbp - 0x54], 1
xor edx, edx
mov r8d, 0x410
lea rcx, [rbp + 0x8f0]
call fcn.140249b10
mov qword [rbp + 0x60], r13
mov qword [rbp + 0x68], rdi
mov dword [rbp + 0x78], r14d
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetDim
call fcn.140247068
mov qword [rbp + 0x70], rax
xor ecx, ecx
mov qword [rax], rcx
mov qword [rax + 8], rcx
mov dword [rbp + 0x7c], 1
mov qword [rbp + 0x80], rdi
mov qword [rbp + 0x88], r14
mov dword [rbp + 0x90], r14d
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetDim
call fcn.140247068
mov qword [rbp + 0x88], rax
xor ecx, ecx
mov qword [rax], rcx
mov qword [rax + 8], rcx
mov dword [rbp + 0x94], 1
mov r9d, 0x410
lea r8, [rbp + 0x8f0]
mov rdx, rbx
lea rcx, [rbp + 0x60]
call fcn.14003ced0
lea rcx, [rbp + 0x8f0]
call fcn.140250f2c
mov dword [rbp + 0xd48], r14d
movzx eax, word [rbp + 0x8f0]
mov word [rbp + 0xd48], ax
movzx eax, byte [rbp + 0x8f2]
mov byte [rbp + 0xd4a], al
lea rcx, [rbp + 0xd48]
call qword [sym.imp.SHLWAPI.dll_PathIsDirectoryA]
test eax, eax
je 0x1401f74c3
lea r8, [rbp + 0xd48]
lea rdx, [rbp + 0x8f3]
lea rcx, [rbp - 0x80]
call fcn.14008c690
nop
cmp dword [rbp + 0x94], 1
jne 0x1401f74dd
mov rcx, qword [rbp + 0x88]
test rcx, rcx
je 0x1401f74dd
call fcn.140247060
cmp dword [rbp + 0x7c], 1
jne 0x1401f74f2
mov rcx, qword [rbp + 0x70]
test rcx, rcx
je 0x1401f74f2
call fcn.140247060
nop
mov r13, qword [rbp - 0x78]
mov rbx, qword [r13]
mov rcx, qword [rsp + 0x40]
mov rax, qword [rcx]
lea r9, [rbp + 0x50]
lea r8, str.scansubfoldersdepth
mov edx, esi
call qword [rax + 0x40]
test eax, eax
je 0x1401f752f
mov rcx, qword [rbp + 0x50]
test rcx, rcx
je 0x1401f752f
xor edx, edx
lea r8d, [rdx + 0xa]
call fcn.140251de0
mov r12d, eax
jmp 0x1401f7535
mov r12d, 0xffffffff
mov dword [rsp + 0x60], r12d
cmp rbx, r13
je 0x1401f7a56
nop dword [rax]
nop word [rax + rax]
mov qword [rbp - 0x50], rdi
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetDim
call fcn.140247068
mov qword [rbp - 0x48], rax
xor ecx, ecx
mov qword [rax], rcx
mov qword [rax + 8], rcx
mov dword [rbp - 0x3c], 1
mov rcx, qword [rbx + 0x10]
mov rsi, qword [rcx + 0x18]
test rax, rax
je 0x1401f758b
mov rcx, rax
call fcn.140247060
mov qword [rbp - 0x48], r14
test rsi, rsi
je 0x1401f7bcc
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp byte [rsi + rax], 0
jne 0x1401f75a0
mov dword [rbp - 0x40], eax
lea ecx, [rax + 1]
mov r15d, ecx
call fcn.140247068
mov rdi, rax
mov qword [rbp - 0x48], rax
test rax, rax
je 0x1401f75d1
mov r8d, r15d
mov rdx, rsi
mov rcx, rax
call fcn.1402496a0
lea r15, vtable.CSASScanner::CDiskScanLocation.0
cmp dword [0x140337eb0], 0
je 0x1401f79a1
mov rax, qword [0x140337ec8]
mov qword [rbp + 0x98], rax
lea rsi, [rax + 8]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
nop
mov dword [rbp + 0xd50], r14d
xor edx, edx
mov r8d, 0x200
lea rcx, [rbp + 0xc0]
call fcn.140249b10
mov rdx, qword [0x140337ea8]
test rdx, rdx
je 0x1401f7643
mov rcx, qword [0x140337ed0]
mov rax, qword [rcx]
xor r8d, r8d
call qword [rax + 0x68]
cmp eax, 0x4000000
ja 0x1401f77b3
lea rcx, [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx eax, word [rsp + 0x7c]
movzx ecx, word [rsp + 0x7a]
movzx edx, word [rsp + 0x78]
movzx r10d, word [rsp + 0x70]
movzx r9d, word [rsp + 0x76]
movzx r8d, word [rsp + 0x72]
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], ecx
mov dword [rsp + 0x28], edx
mov dword [rsp + 0x20], r10d
lea rdx, str._02d__02d__04d____02d:_02d:_02d
lea rcx, [rbp + 0xc0]
call fcn.140006bc0
lea rax, [rbp + 0xc0]
mov r9, 0xffffffffffffffff
inc r9
cmp byte [rax + r9], 0
jne 0x1401f76a1
mov qword [rsp + 0x28], r14
lea rax, [rbp + 0xd50]
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0xc0]
mov rdx, qword [0x140337ea8]
lea rcx, vtable.CSASApplicationLogManager.0
call fcn.140006950
xor edx, edx
mov r8d, 0x100
lea rcx, [rbp + 0x4d0]
call fcn.140249b10
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov r8d, eax
lea rdx, str.__x_
lea rcx, [rbp + 0x4d0]
call fcn.140006bc0
lea rax, [rbp + 0x4d0]
mov r9, 0xffffffffffffffff
inc r9
cmp byte [rax + r9], 0
jne 0x1401f7714
mov qword [rsp + 0x28], r14
lea rax, [rbp + 0xd50]
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x4d0]
mov rdx, qword [0x140337ea8]
lea rcx, vtable.CSASApplicationLogManager.0
call fcn.140006950
mov r9, 0xffffffffffffffff
inc r9
cmp byte [rdi + r9], 0
jne 0x1401f7750
mov qword [rsp + 0x28], r14
lea rax, [rbp + 0xd50]
mov qword [rsp + 0x20], rax
mov r8, rdi
mov rdx, qword [0x140337ea8]
lea rcx, vtable.CSASApplicationLogManager.0
call fcn.140006950
mov qword [rsp + 0x28], r14
lea rax, [rbp + 0xd50]
mov qword [rsp + 0x20], rax
mov r9d, 2
lea r8, [0x140286114]
mov rdx, qword [0x140337ea8]
lea rcx, vtable.CSASApplicationLogManager.0
call fcn.140006950
nop
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp dword [0x140337eb0], 0
je 0x1401f79a1
mov rax, qword [0x140337ec8]
mov qword [rbp + 0x98], rax
lea rsi, [rax + 8]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
nop
mov dword [rbp + 0xd58], r14d
xor edx, edx
mov r8d, 0x200
lea rcx, [rbp + 0xc0]
call fcn.140249b10
mov rdx, qword [0x140337ea8]
test rdx, rdx
je 0x1401f7827
mov rcx, qword [0x140337ed0]
mov rax, qword [rcx]
xor r8d, r8d
call qword [rax + 0x68]
cmp eax, 0x4000000
ja 0x1401f7998
lea rcx, [rsp + 0x48]
call qword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx eax, word [rsp + 0x54]
movzx ecx, word [rsp + 0x52]
movzx edx, word [rsp + 0x50]
movzx r10d, word [rsp + 0x48]
movzx r9d, word [rsp + 0x4e]
movzx r8d, word [rsp + 0x4a]
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], ecx
mov dword [rsp + 0x28], edx
mov dword [rsp + 0x20], r10d
lea rdx, str._02d__02d__04d____02d:_02d:_02d
lea rcx, [rbp + 0xc0]
call fcn.140006bc0
lea rax, [rbp + 0xc0]
mov r9, 0xffffffffffffffff
inc r9
cmp byte [rax + r9], 0
jne 0x1401f7885
mov qword [rsp + 0x28], r14
lea rax, [rbp + 0xd58]
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0xc0]
mov rdx, qword [0x140337ea8]
lea rcx, vtable.CSASApplicationLogManager.0
call fcn.140006950
xor edx, edx
mov r8d, 0x100
lea rcx, [rbp + 0x4d0]
call fcn.140249b10
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov r8d, eax
lea rdx, str.__x_
lea rcx, [rbp + 0x4d0]
call fcn.140006bc0
lea rax, [rbp + 0x4d0]
mov r9, 0xffffffffffffffff
nop dword [rax + rax]
inc r9
cmp byte [rax + r9], 0
jne 0x1401f7900
mov qword [rsp + 0x28], r14
lea rax, [rbp + 0xd58]
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x4d0]
mov rdx, qword [0x140337ea8]
lea rcx, vtable.CSASApplicationLogManager.0
call fcn.140006950
mov qword [rsp + 0x28], r14
lea rax, [rbp + 0xd58]
mov qword [rsp + 0x20], rax
mov r9d, 1
lea r8, reloc.OLEAUT32.dll_VariantCopyInd
mov rdx, qword [0x140337ea8]
lea rcx, vtable.CSASApplicationLogManager.0
call fcn.140006950
mov qword [rsp + 0x28], r14
lea rax, [rbp + 0xd58]
mov qword [rsp + 0x20], rax
mov r9d, 2
lea r8, [0x140286114]
mov rdx, qword [0x140337ea8]
lea rcx, vtable.CSASApplicationLogManager.0
call fcn.140006950
nop
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov qword [rbp + 0x60], r15
mov rdx, rdi
lea rcx, [rbp + 0x68]
call fcn.140006f70
mov dword [rbp + 0x80], r12d
mov rsi, qword [0x14037caf8]
mov r15, qword [rsi + 0x1320]
mov r12, qword [r15 + 8]
lea r9, [rbp + 0x60]
mov r8, r12
mov rdx, r15
lea rcx, [rsi + 0x1320]
call fcn.1401e5ab0
mov rdx, qword [rsi + 0x1328]
movabs rcx, 0x492492492492491
sub rcx, rdx
cmp rcx, 1
jb 0x1401f7bfc
lea rcx, [rdx + 1]
mov qword [rsi + 0x1328], rcx
mov qword [r15 + 8], rax
mov qword [r12], rax
mov rbx, qword [rbx]
cmp dword [rbp + 0x7c], 1
jne 0x1401f7a29
mov rcx, qword [rbp + 0x70]
test rcx, rcx
je 0x1401f7a29
call fcn.140247060
nop
test rdi, rdi
je 0x1401f7a36
mov rcx, rdi
call fcn.140247060
cmp rbx, r13
mov r12d, dword [rsp + 0x60]
lea rdi, vtable.CSABString.0
lea r15, vtable.CSASScanner::CDiskScanLocation.0
jne 0x1401f7550
mov esi, dword [rsp + 0x58]
lea r12, vtable.CSABEnumFileObjectsFromEnvironmentExpandedRegExp.0
mov qword [rbp - 0x80], r12
mov rax, qword [rbp - 0x78]
mov rbx, qword [rax]
cmp rbx, rax
je 0x1401f7a8f
nop dword [rax]
mov rcx, qword [rbx + 0x10]
test rcx, rcx
je 0x1401f7a87
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
mov rax, qword [rbp - 0x78]
mov rbx, qword [rbx]
cmp rbx, rax
jne 0x1401f7a70
mov qword [rbp - 0x68], rdi
add dword [rbp - 0x54], 0xffffffff
jne 0x1401f7aa7
mov rcx, qword [rbp - 0x60]
test rcx, rcx
je 0x1401f7aa7
call fcn.140247060
lea rcx, [rbp - 0x78]
call fcn.140009af0
lea r13, vtable.CSABEnvironmentStringsEx.0
inc esi
mov dword [rsp + 0x58], esi
mov rcx, qword [rsp + 0x40]
mov rax, qword [rcx]
lea r9, [rbp + 0x58]
lea r8, [0x140294f68]
mov edx, esi
call qword [rax + 0x40]
test eax, eax
jne 0x1401f7342
lea rdi, vtable.CSABSQL.0
lea r15, str.SASScanner_SetScannerFoldersToScan
mov rbx, qword [rsp + 0x40]
lea rcx, [rbp + 0x20]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rcx, qword [rbp + 0x10]
test rcx, rcx
je 0x1401f7b0c
mov rax, qword [rcx]
mov rdx, rbx
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
lea rcx, [rbp + 0x20]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
lea rsi, vtable.CSABByteString.0
mov qword [rbp - 0x20], rdi
lea rcx, [rbp + 0x20]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rcx, qword [rbp + 0x10]
test rcx, rcx
je 0x1401f7b43
mov rax, qword [rcx]
mov edx, 1
call qword [rax + 0x40]
mov qword [rbp + 0x10], r14
lea rcx, [rbp + 0x20]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
lea rcx, [rbp + 0x20]
call qword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
mov qword [rbp - 0x18], rsi
mov edx, 1
mov rcx, qword [rbp - 0x10]
call fcn.140247060
nop
xor edx, edx
mov r8d, 0x200
lea rcx, [rbp + 0xc0]
call fcn.140249b10
mov r8, r15
lea rdx, str._s___Leavex
lea rcx, [rbp + 0xc0]
call fcn.140006bc0
mov r9d, 1
mov r8d, r9d
lea rdx, [rbp + 0xc0]
lea rcx, vtable.CSASApplicationLogManager.0
call fcn.140004a50
nop
mov rbx, qword [rsp + 0xe40]
add rsp, 0xe00
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov dword [rbp - 0x40], r14d
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetDim
call fcn.140247068
mov rdi, rax
mov qword [rbp - 0x48], rax
xor eax, eax
mov qword [rdi], rax
mov qword [rdi + 8], rax
jmp 0x1401f75d8
lea rcx, str.list_T__too_long
call fcn.1402453d0
nop
lea rcx, str.list_T__too_long
call fcn.1402453d0
int3