Function at 0x14008f3b8
Capabilities:
Terminate process

Disassembly:
mov r11, rsp
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xa40
mov qword [r11 - 0x9c8], 0xfffffffffffffffe
mov qword [r11 + 8], rbx
mov qword [r11 + 0x18], rsi
mov rax, qword [0x140100070]
xor rax, rsp
mov qword [rsp + 0xa30], rax
mov rbx, rdx
mov qword [rsp + 0x48], rdx
mov esi, ecx
mov dword [rsp + 0x30], ecx
xor edi, edi
mov dword [rsp + 0x50], edi
lea rcx, [r11 - 0x6d8]
call fcn.140098ce8
nop
lea rax, vtable.esd::ResourceLocker.0
mov qword [rsp + 0x68], rax
lea ecx, [rdi + 0x60]
call fcn.1400a9880
mov qword [rsp + 0x28], rax
lea rdx, [rsp + 0x390]
mov rcx, rax
call fcn.140099eac
mov r13, rax
mov qword [rsp + 0x70], rax
mov rcx, qword [rax + 0x50]
test rcx, rcx
je 0x1400915b5
mov edx, dword [rax + 0x48]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
jne 0x1400915b5
lock inc dword [r13 + 0x4c]
mov qword [rsp + 0x640], rdi
lea eax, [rdi + 7]
mov qword [rsp + 0x648], rax
mov word [rsp + 0x630], di
mov qword [rsp + 0x660], rdi
mov qword [rsp + 0x668], rax
mov word [rsp + 0x650], di
mov qword [rsp + 0x680], rdi
mov qword [rsp + 0x688], rax
mov word [rsp + 0x670], di
mov qword [rsp + 0x6a0], rdi
mov qword [rsp + 0x6a8], rax
mov word [rsp + 0x690], di
mov qword [rsp + 0x6c0], rdi
lea r15d, [rdi + 0xf]
mov qword [rsp + 0x6c8], r15
mov byte [rsp + 0x6b0], dil
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x40], rdi
call fcn.140076bf0
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x224], rdi
mov dword [rsp + 0x22c], edi
lea r14, [0x1400d6958]
mov rdx, r14
lea rcx, [rsp + 0x230]
call fcn.140074e28
nop
mov rdx, r14
lea rcx, [rsp + 0x250]
call fcn.140074e28
nop
mov rdx, r14
lea rcx, [rsp + 0x270]
call fcn.140074e28
nop
mov rdx, r14
lea rcx, [rsp + 0x290]
call fcn.140074e28
nop
mov rdx, r14
lea rcx, [rsp + 0x2b0]
call fcn.140074e28
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x2d0], xmm0
mov qword [rsp + 0x2e0], rdi
mov byte [rsp + 0x20], dil
lea rdx, [0x1400919e0]
mov ecx, r15d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_signal]
lea rdx, [0x1400919e0]
lea ecx, [rdi + 2]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_signal]
call fcn.140098850
mov rdx, r14
lea rcx, [rsp + 0x370]
call fcn.140074e28
nop
mov rdx, r14
lea rcx, [rsp + 0x350]
call fcn.140074e28
nop
mov rdx, r14
lea rcx, [rsp + 0x330]
call fcn.140074e28
nop
mov rdx, r14
lea rcx, [rsp + 0x310]
call fcn.140074e28
nop
mov rdx, r14
lea rcx, [rsp + 0x2f0]
call fcn.140074e28
nop
mov rdx, rbx
mov ecx, esi
call fcn.14008efa4
cmp esi, 6
jl 0x14008fb08
mov r12, qword [rbx + 0x18]
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strlen]
mov r14, rax
cmp rax, qword [rsp + 0x348]
ja 0x14008f661
lea rbx, [rsp + 0x330]
lea esi, [rdi + 0x10]
cmp qword [rsp + 0x348], rsi
cmovae rbx, qword [rsp + 0x330]
mov qword [rsp + 0x340], rax
mov r8, rax
mov rdx, r12
mov rcx, rbx
call qword [sym.imp.VCRUNTIME140.dll_memmove]
nop
mov byte [rbx + r14], dil
mov rbx, qword [rsp + 0x48]
jmp 0x14008f679
mov r9, r12
mov rdx, r14
lea rcx, [rsp + 0x330]
call fcn.140077398
mov esi, 0x10
lea rdx, [0x1400d6764]
lea rcx, [rsp + 0x330]
call fcn.140093ef0
test eax, eax
jne 0x14008fb0d
mov r12, qword [rbx + 0x20]
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strlen]
mov r14, rax
cmp rax, qword [rsp + 0x328]
ja 0x14008f6eb
lea rbx, [rsp + 0x310]
cmp qword [rsp + 0x328], rsi
cmovae rbx, qword [rsp + 0x310]
mov qword [rsp + 0x320], rax
mov r8, rax
mov rdx, r12
mov rcx, rbx
call qword [sym.imp.VCRUNTIME140.dll_memmove]
nop
mov byte [rbx + r14], dil
mov rbx, qword [rsp + 0x48]
jmp 0x14008f6fe
mov r9, r12
mov rdx, r14
lea rcx, [rsp + 0x310]
call fcn.140077398
mov r12, qword [rbx + 0x28]
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strlen]
mov r14, rax
cmp rax, qword [rsp + 0x308]
ja 0x14008f74f
lea rbx, [rsp + 0x2f0]
cmp qword [rsp + 0x308], rsi
cmovae rbx, qword [rsp + 0x2f0]
mov qword [rsp + 0x300], rax
mov r8, rax
mov rdx, r12
mov rcx, rbx
call qword [sym.imp.VCRUNTIME140.dll_memmove]
nop
mov byte [rbx + r14], dil
jmp 0x14008f762
mov r9, r12
mov rdx, r14
lea rcx, [rsp + 0x2f0]
call fcn.140077398
cmp qword [rsp + 0x320], rdi
je 0x14008fb0d
cmp qword [rsp + 0x300], rdi
je 0x14008fb0d
lea rax, [rsp + 0x1e0]
mov qword [rsp + 0x28], rax
lea rdx, [rsp + 0x310]
lea rcx, [rsp + 0x1e0]
call fcn.140074ebc
mov r12, rax
mov qword [rsp + 0x90], rax
mov r14, qword [0x140104be8]
test r14, r14
jne 0x14008f891
mov rbx, qword [0x140104380]
test rbx, rbx
jne 0x14008f805
lea ecx, [rbx + 0x50]
call fcn.1400a9880
mov rbx, rax
mov qword [rsp + 0x58], rax
mov qword [rax], rdi
mov qword [rax + 8], rdi
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], rdi
mov qword [rax + 0x28], rdi
mov qword [rax + 0x30], rdi
mov qword [rax + 0x38], rdi
mov qword [rax + 0x40], rdi
mov qword [rax + 0x48], rdi
mov qword [0x140104380], rax
mov ecx, 0x48
call fcn.1400a9880
mov r14, rax
mov qword [rsp + 0x58], rax
lea rax, vtable.ClientProxyCredential.0
mov qword [r14], rax
lea rcx, [r14 + 8]
lea rdx, [0x1400d6958]
call fcn.140074e28
nop
lea rcx, [r14 + 0x28]
lea rdx, [0x1400d6958]
call fcn.140074e28
nop
lea rcx, [rbx + 8]
mov qword [rsp + 0x58], r14
mov rdx, qword [rcx + 8]
mov qword [rsp + 0xa8], rdx
mov rax, qword [rcx]
jmp 0x14008f866
cmp qword [rax], r14
je 0x14008f86b
add rax, 8
cmp rax, rdx
jne 0x14008f85d
cmp rdx, rax
jne 0x14008f88a
cmp qword [rcx + 0x10], rdx
je 0x14008f880
mov qword [rdx], r14
add qword [rcx + 8], 8
jmp 0x14008f88a
lea r8, [rsp + 0x58]
call fcn.140083d80
mov qword [0x140104be8], r14
mov rdx, r12
lea rcx, [rsp + 0x950]
call fcn.140074ebc
lea rcx, [r14 + 8]
mov rdx, rax
call fcn.140074d10
mov rdx, qword [rsp + 0x968]
mov r14d, 0x1000
cmp rdx, rsi
jb 0x14008f8f5
inc rdx
mov rcx, qword [rsp + 0x950]
mov rax, rcx
cmp rdx, r14
jb 0x14008f8ef
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14008f8ef
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a9870
nop
mov rdx, qword [r12 + 0x18]
cmp rdx, rsi
jb 0x14008f92c
mov rcx, qword [r12]
inc rdx
cmp rdx, r14
jb 0x14008f927
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14008fa24
mov rcx, r8
call fcn.1400a9870
mov qword [r12 + 0x10], rdi
mov qword [r12 + 0x18], r15
mov byte [r12], dil
lea rax, [rsp + 0x200]
mov qword [rsp + 0x90], rax
lea rdx, [rsp + 0x2f0]
lea rcx, [rsp + 0x200]
call fcn.140074ebc
mov rbx, rax
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x98], rax
mov r12, qword [0x140104be8]
test r12, r12
jne 0x14008fa64
mov rbx, qword [0x140104380]
test rbx, rbx
jne 0x14008f9c9
lea ecx, [rbx + 0x50]
call fcn.1400a9880
mov rbx, rax
mov qword [rsp + 0x60], rax
mov qword [rax], rdi
mov qword [rax + 8], rdi
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], rdi
mov qword [rax + 0x28], rdi
mov qword [rax + 0x30], rdi
mov qword [rax + 0x38], rdi
mov qword [rax + 0x40], rdi
mov qword [rax + 0x48], rdi
mov qword [0x140104380], rax
mov ecx, 0x48
call fcn.1400a9880
mov r12, rax
mov qword [rsp + 0x60], rax
lea rax, vtable.ClientProxyCredential.0
mov qword [r12], rax
lea rcx, [r12 + 8]
lea rdx, [0x1400d6958]
call fcn.140074e28
nop
lea rcx, [r12 + 0x28]
lea rdx, [0x1400d6958]
call fcn.140074e28
nop
lea rcx, [rbx + 8]
mov qword [rsp + 0x60], r12
mov rdx, qword [rcx + 8]
mov qword [rsp + 0x88], rdx
mov rax, qword [rcx]
jmp 0x14008fa34
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
cmp qword [rax], r12
je 0x14008fa39
add rax, 8
cmp rax, rdx
jne 0x14008fa2b
cmp rdx, rax
jne 0x14008fa58
cmp qword [rcx + 0x10], rdx
je 0x14008fa4e
mov qword [rdx], r12
add qword [rcx + 8], 8
jmp 0x14008fa58
lea r8, [rsp + 0x60]
call fcn.140083d80
mov qword [0x140104be8], r12
mov rbx, qword [rsp + 0x28]
mov rdx, rbx
lea rcx, [rsp + 0x8b0]
call fcn.140074ebc
lea rcx, [r12 + 0x28]
mov rdx, rax
call fcn.140074d10
mov rdx, qword [rsp + 0x8c8]
cmp rdx, rsi
jb 0x14008fac3
inc rdx
mov rcx, qword [rsp + 0x8b0]
mov rax, rcx
cmp rdx, r14
jb 0x14008fabd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14008fabd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a9870
nop
mov rdx, qword [rbx + 0x18]
cmp rdx, rsi
jb 0x14008faf4
mov rcx, qword [rbx]
inc rdx
cmp rdx, r14
jb 0x14008faef
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14008fb01
mov rcx, r8
call fcn.1400a9870
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], r15
mov byte [rbx], dil
jmp 0x14008fb13
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov esi, 0x10
mov r14d, 0x1000
mov eax, dword [rsp + 0x30]
cmp eax, 3
jl 0x14008fb90
mov rbx, qword [rsp + 0x48]
mov rbx, qword [rbx + 0x10]
mov qword [rsp + 0x28], rbx
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strlen]
mov r12, rax
cmp rax, qword [rsp + 0x368]
ja 0x14008fb79
lea rbx, [rsp + 0x350]
cmp qword [rsp + 0x368], rsi
cmovae rbx, qword [rsp + 0x350]
mov qword [rsp + 0x360], rax
mov r8, rax
mov rdx, qword [rsp + 0x28]
mov rcx, rbx
call qword [sym.imp.VCRUNTIME140.dll_memmove]
nop
mov byte [rbx + r12], dil
jmp 0x14008fb8c
mov r9, rbx
mov rdx, r12
lea rcx, [rsp + 0x350]
call fcn.140077398
mov eax, dword [rsp + 0x30]
cmp eax, 2
jl 0x14009104d
mov rax, qword [rsp + 0x48]
mov rbx, qword [rax + 8]
mov qword [rsp + 0x28], rbx
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strlen]
mov r12, rax
cmp rax, qword [rsp + 0x388]
ja 0x14008fbf6
lea rbx, [rsp + 0x370]
cmp qword [rsp + 0x388], rsi
cmovae rbx, qword [rsp + 0x370]
mov qword [rsp + 0x380], rax
mov r8, rax
mov rdx, qword [rsp + 0x28]
mov rcx, rbx
call qword [sym.imp.VCRUNTIME140.dll_memmove]
nop
mov byte [rbx + r12], dil
jmp 0x14008fc09
mov r9, rbx
mov rdx, r12
lea rcx, [rsp + 0x370]
call fcn.140077398
lea rdx, [0x1400d6764]
lea rcx, [rsp + 0x350]
call fcn.140093ef0
lea rdx, str.e:workspace_rt_win_8_1mainlineheadlightslogtransportmain_application_sourcexplatlogtransportdriver.cpp
test eax, eax
jne 0x14008ffc5
lea rcx, [rsp + 0x730]
call fcn.140074e28
nop
lea rdx, str.Try_to_send_real_time_data_available_in_offline_db
lea rcx, [rsp + 0x3b0]
call fcn.140074e28
nop
mov r8d, 0x34e
lea rdx, [rsp + 0x730]
lea rcx, [rsp + 0x4f0]
call fcn.140087720
mov r8, rax
mov rcx, qword [0x1401043e0]
mov rdx, qword [rcx]
mov rax, qword [rdx + 0x80]
lea rdx, [rsp + 0x3b0]
call qword [case.0x140008940.0]
nop
mov rdx, qword [rsp + 0x508]
cmp rdx, rsi
jb 0x14008fccb
inc rdx
mov rcx, qword [rsp + 0x4f0]
mov rax, rcx
cmp rdx, r14
jb 0x14008fcc6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008fd6a
call fcn.1400a9870
mov qword [rsp + 0x500], rdi
mov qword [rsp + 0x508], r15
mov byte [rsp + 0x4f0], dil
mov rdx, qword [rsp + 0x3c8]
cmp rdx, rsi
jb 0x14008fd1d
inc rdx
mov rcx, qword [rsp + 0x3b0]
mov rax, rcx
cmp rdx, r14
jb 0x14008fd18
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008fd6a
call fcn.1400a9870
mov qword [rsp + 0x3c0], rdi
mov qword [rsp + 0x3c8], r15
mov byte [rsp + 0x3b0], dil
mov rdx, qword [rsp + 0x748]
cmp rdx, rsi
jb 0x14008fd76
inc rdx
mov rcx, qword [rsp + 0x730]
mov rax, rcx
cmp rdx, r14
jb 0x14008fd71
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14008fd71
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.1400a9870
call fcn.14009315c
cmp byte [0x140104390], dil
je 0x14009010f
mov rdx, qword [rsp + 0x308]
cmp rdx, rsi
jb 0x14008fdc6
inc rdx
mov rcx, qword [rsp + 0x2f0]
mov rax, rcx
cmp rdx, r14
jb 0x14008fdc1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400913ee
call fcn.1400a9870
mov qword [rsp + 0x300], rdi
mov qword [rsp + 0x308], r15
mov byte [rsp + 0x2f0], dil
mov rdx, qword [rsp + 0x328]
cmp rdx, rsi
jb 0x14008fe1c
inc rdx
mov rcx, qword [rsp + 0x310]
mov rax, rcx
cmp rdx, r14
jb 0x14008fe17
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400913ee
call fcn.1400a9870
mov qword [rsp + 0x320], rdi
mov qword [rsp + 0x328], r15
mov byte [rsp + 0x310], dil
mov rdx, qword [rsp + 0x348]
cmp rdx, rsi
jb 0x14008fe72
inc rdx
mov rcx, qword [rsp + 0x330]
mov rax, rcx
cmp rdx, r14
jb 0x14008fe6d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400913ee
call fcn.1400a9870
mov qword [rsp + 0x340], rdi
mov qword [rsp + 0x348], r15
mov byte [rsp + 0x330], dil
mov rdx, qword [rsp + 0x368]
cmp rdx, rsi
jb 0x14008fec8
inc rdx
mov rcx, qword [rsp + 0x350]
mov rax, rcx
cmp rdx, r14
jb 0x14008fec3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400913ee
call fcn.1400a9870
mov qword [rsp + 0x360], rdi
mov qword [rsp + 0x368], r15
mov byte [rsp + 0x350], dil
mov rdx, qword [rsp + 0x388]
cmp rdx, rsi
jb 0x14008ff1e
inc rdx
mov rcx, qword [rsp + 0x370]
mov rax, rcx
cmp rdx, r14
jb 0x14008ff19
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400913ee
call fcn.1400a9870
mov qword [rsp + 0x380], rdi
mov qword [rsp + 0x388], r15
mov byte [rsp + 0x370], dil
lea rcx, [rsp + 0x220]
call fcn.14009cfe8
nop
lea rcx, [rsp + 0x38]
call fcn.140072670
nop
lea rcx, [rsp + 0x630]
call fcn.1400917d0
nop
lea rcx, [rsp + 0x68]
call fcn.14009a174
nop
mov rdx, qword [rsp + 0x3a8]
cmp rdx, rsi
jb 0x14008ffa6
inc rdx
mov rcx, qword [rsp + 0x390]
mov rax, rcx
cmp rdx, r14
jb 0x14008ffa1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400913ee
call fcn.1400a9870
mov qword [rsp + 0x3a0], rdi
mov qword [rsp + 0x3a8], r15
mov byte [rsp + 0x390], dil
xor eax, eax
jmp 0x1400917a1
lea rcx, [rsp + 0x750]
call fcn.140074e28
nop
lea rdx, str.Real_Time_data_upload_is_disabled_by_client_or_its_a_split_session_launch
lea rcx, [rsp + 0x3d0]
call fcn.140074e28
nop
mov r8d, 0x358
lea rdx, [rsp + 0x750]
lea rcx, [rsp + 0x510]
call fcn.140087720
mov r8, rax
mov rcx, qword [0x1401043e0]
mov rdx, qword [rcx]
mov rax, qword [rdx + 0x80]
lea rdx, [rsp + 0x3d0]
call qword [case.0x140008940.0]
nop
mov rdx, qword [rsp + 0x528]
cmp rdx, rsi
jb 0x140090064
inc rdx
mov rcx, qword [rsp + 0x510]
mov rax, rcx
cmp rdx, r14
jb 0x14009005f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140090103
call fcn.1400a9870
mov qword [rsp + 0x520], rdi
mov qword [rsp + 0x528], r15
mov byte [rsp + 0x510], dil
mov rdx, qword [rsp + 0x3e8]
cmp rdx, rsi
jb 0x1400900b6
inc rdx
mov rcx, qword [rsp + 0x3d0]
mov rax, rcx
cmp rdx, r14
jb 0x1400900b1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140090103
call fcn.1400a9870
mov qword [rsp + 0x3e0], rdi
mov qword [rsp + 0x3e8], r15
mov byte [rsp + 0x3d0], dil
mov rdx, qword [rsp + 0x768]
cmp rdx, rsi
jb 0x14009010f
inc rdx
mov rcx, qword [rsp + 0x750]
mov rax, rcx
cmp rdx, r14
jb 0x14009010a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14009010a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.1400a9870
lea rdx, [rsp + 0x370]
lea rcx, [rsp + 0x1c0]
call fcn.140074ebc
mov rdx, rax
lea rcx, [rsp + 0x630]
call fcn.14008b938
test al, al
jne 0x140090506
lea rdx, str.e:workspace_rt_win_8_1mainlineheadlightslogtransportmain_application_sourcexplatlogtransportdriver.cpp
lea rcx, [rsp + 0x770]
call fcn.140074e28
nop
lea rdx, str.Get_user_data_fail
lea rcx, [rsp + 0x3f0]
call fcn.140074e28
nop
mov r8d, 0x35d
lea rdx, [rsp + 0x770]
lea rcx, [rsp + 0x530]
call fcn.140087720
mov r8, rax
mov rcx, qword [0x1401043e0]
mov rdx, qword [rcx]
mov rax, qword [rdx + 0x80]
lea rdx, [rsp + 0x3f0]
call qword [case.0x140008940.0]
nop
mov rdx, qword [rsp + 0x548]
cmp rdx, rsi
jb 0x1400901e2
inc rdx
mov rcx, qword [rsp + 0x530]
mov rax, rcx
cmp rdx, r14
jb 0x1400901dd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140090281
call fcn.1400a9870
mov qword [rsp + 0x540], rdi
mov qword [rsp + 0x548], r15
mov byte [rsp + 0x530], dil
mov rdx, qword [rsp + 0x408]
cmp rdx, rsi
jb 0x140090234
inc rdx
mov rcx, qword [rsp + 0x3f0]
mov rax, rcx
cmp rdx, r14
jb 0x14009022f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140090281
call fcn.1400a9870
mov qword [rsp + 0x400], rdi
mov qword [rsp + 0x408], r15
mov byte [rsp + 0x3f0], dil
mov rdx, qword [rsp + 0x788]
cmp rdx, rsi
jb 0x14009028d
inc rdx
mov rcx, qword [rsp + 0x770]
mov rax, rcx
cmp rdx, r14
jb 0x140090288
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140090288
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.1400a9870
cmp qword [r13 + 0x50], rdi
je 0x1400902c8
mov rcx, qword [r13 + 0x58]
test rcx, rcx
je 0x1400902c8
mov edx, dword [r13 + 0x48]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
jne 0x1400902c8
mov rcx, qword [r13 + 0x50]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
test eax, eax
je 0x1400902bd
lock dec dword [r13 + 0x4c]
mov rcx, qword [r13 + 0x58]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
nop
mov rdx, qword [rsp + 0x308]
cmp rdx, rsi
jb 0x140090306
inc rdx
mov rcx, qword [rsp + 0x2f0]
mov rax, rcx
cmp rdx, r14
jb 0x140090301
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400913ee
call fcn.1400a9870
mov qword [rsp + 0x300], rdi
mov qword [rsp + 0x308], r15
mov byte [rsp + 0x2f0], dil
mov rdx, qword [rsp + 0x328]
cmp rdx, rsi
jb 0x14009035c
inc rdx
mov rcx, qword [rsp + 0x310]
mov rax, rcx
cmp rdx, r14
jb 0x140090357
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400913ee
call fcn.1400a9870
mov qword [rsp + 0x320], rdi
mov qword [rsp + 0x328], r15
mov byte [rsp + 0x310], dil
mov rdx, qword [rsp + 0x348]
cmp rdx, rsi
jb 0x1400903b2
inc rdx
mov rcx, qword [rsp + 0x330]
mov rax, rcx
cmp rdx, r14
jb 0x1400903ad
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400913ee
call fcn.1400a9870
mov qword [rsp + 0x340], rdi
mov qword [rsp + 0x348], r15
mov byte [rsp + 0x330], dil
mov rdx, qword [rsp + 0x368]
cmp rdx, rsi
jb 0x140090408
inc rdx
mov rcx, qword [rsp + 0x350]
mov rax, rcx
cmp rdx, r14
jb 0x140090403
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400913ee
call fcn.1400a9870
mov qword [rsp + 0x360], rdi
mov qword [rsp + 0x368], r15
mov byte [rsp + 0x350], dil
mov rdx, qword [rsp + 0x388]
cmp rdx, rsi
jb 0x14009045e
inc rdx
mov rcx, qword [rsp + 0x370]
mov rax, rcx
cmp rdx, r14
jb 0x140090459
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400913ee
call fcn.1400a9870
mov qword [rsp + 0x380], rdi
mov qword [rsp + 0x388], r15
mov byte [rsp + 0x370], dil
lea rcx, [rsp + 0x220]
call fcn.14009cfe8
nop
lea rcx, [rsp + 0x38]
call fcn.140072670
nop
lea rcx, [rsp + 0x630]
call fcn.1400917d0
nop
lea rcx, [rsp + 0x68]
call fcn.14009a174
nop
mov rdx, qword [rsp + 0x3a8]
cmp rdx, rsi
jb 0x1400904e6
inc rdx
mov rcx, qword [rsp + 0x390]
mov r8, rcx
cmp rdx, r14
jb 0x1400904e1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub r8, rcx
add r8, 0xfffffffffffffff8
cmp r8, 0x1f
ja 0x1400913ee
call fcn.1400a9870
mov qword [rsp + 0x3a0], rdi
mov qword [rsp + 0x3a8], r15
mov byte [rsp + 0x390], dil
or eax, 0xffffffff
jmp 0x1400917a1
lea rcx, [rsp + 0x630]
call fcn.14008e864
call fcn.14008ee04
test al, al
jne 0x1400905c8
call fcn.14008c94c
test al, al
je 0x1400905c8
lea rdx, str.e:workspace_rt_win_8_1mainlineheadlightslogtransportmain_application_sourcexplatlogtransportdriver.cpp
lea rcx, [rsp + 0x8f0]
call fcn.140074e28
nop
lea rdx, str.Installer_kill_switch_is_enabled_
lea rcx, [rsp + 0x8d0]
call fcn.140074e28
nop
mov r8d, 0x36b
lea rdx, [rsp + 0x8f0]
lea rcx, [rsp + 0x990]
call fcn.140087720
mov r8, rax
mov rcx, qword [0x1401043e0]
mov rdx, qword [rcx]
mov rax, qword [rdx + 0x80]
lea rdx, [rsp + 0x8d0]
call qword [case.0x140008940.0]
nop
lea rcx, [rsp + 0x990]
call fcn.140074100
nop
lea rcx, [rsp + 0x8d0]
call fcn.140074100
nop
lea rcx, [rsp + 0x8f0]
call fcn.140074100
or ecx, 0xffffffff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rcx, [rsp + 0x630]
call fcn.14008dd08
lea rdx, [rsp + 0x670]
lea rcx, [rsp + 0x38]
call fcn.1400736a8
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0x220]
call fcn.14009d210
lea rax, [0x1400e0eb8]
mov qword [rsp + 0xb0], rax
lea rcx, [rsp + 0x138]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
mov r12d, 1
mov dword [rsp + 0x50], r12d
xor r9d, r9d
xor r8d, r8d
lea rdx, [rsp + 0xb8]
lea rcx, [rsp + 0xb0]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64__bool____ptr64]
nop
mov rax, qword [rsp + 0xb0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ostringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rsp + rcx + 0xb0], rax
mov rax, qword [rsp + 0xb0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x88]
mov dword [rsp + rcx + 0xac], edx
lea rax, [rsp + 0xb8]
mov qword [rsp + 0x88], rax
lea rcx, [rsp + 0xb8]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
lea rax, vtable.std::basic_stringbuf_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rsp + 0xb8], rax
mov qword [rsp + 0x120], rdi
mov dword [rsp + 0x128], 4
lea rdx, str.Local_config
lea rcx, [rsp + 0xb0]
call fcn.140076d30
lea rdx, str.:_maxdiskspace
mov rcx, rax
call fcn.140076d30
mov edx, dword [rsp + 0x224]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
lea rdx, str.__maxretries
mov rcx, rax
call fcn.140076d30
mov edx, dword [rsp + 0x22c]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
lea rdx, str.__retryinterval
mov rcx, rax
call fcn.140076d30
mov edx, dword [rsp + 0x228]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
lea rdx, str.__url
mov rcx, rax
call fcn.140076d30
lea rdx, [rsp + 0x230]
cmp qword [rsp + 0x248], rsi
cmovae rdx, qword [rsp + 0x230]
mov r8, qword [rsp + 0x240]
mov rcx, rax
call fcn.140077c30
lea rdx, str.__ulogstatus
mov rcx, rax
call fcn.140076d30
lea rdx, [rsp + 0x290]
cmp qword [rsp + 0x2a8], rsi
cmovae rdx, qword [rsp + 0x290]
mov r8, qword [rsp + 0x2a0]
mov rcx, rax
call fcn.140077c30
lea rdx, str.e:workspace_rt_win_8_1mainlineheadlightslogtransportmain_application_sourcexplatlogtransportdriver.cpp
lea rcx, [rsp + 0x790]
call fcn.140074e28
nop
mov r8d, 0x380
lea rdx, [rsp + 0x790]
lea rcx, [rsp + 0x550]
call fcn.140087720
mov rbx, rax
lea rdx, [rsp + 0x410]
lea rcx, [rsp + 0xb8]
call fcn.14008ae24
nop
mov rcx, qword [0x1401043e0]
mov rdx, qword [rcx]
mov rax, qword [rdx + 0x80]
mov r8, rbx
lea rdx, [rsp + 0x410]
call qword [case.0x140008940.0]
nop
mov rdx, qword [rsp + 0x428]
cmp rdx, rsi
jb 0x14009083f
inc rdx
mov rcx, qword [rsp + 0x410]
mov rax, rcx
cmp rdx, r14
jb 0x14009083a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400908de
call fcn.1400a9870
mov qword [rsp + 0x420], rdi
mov qword [rsp + 0x428], r15
mov byte [rsp + 0x410], dil
mov rdx, qword [rsp + 0x568]
cmp rdx, rsi
jb 0x140090891
inc rdx
mov rcx, qword [rsp + 0x550]
mov rax, rcx
cmp rdx, r14
jb 0x14009088c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400908de
call fcn.1400a9870
mov qword [rsp + 0x560], rdi
mov qword [rsp + 0x568], r15
mov byte [rsp + 0x550], dil
mov rdx, qword [rsp + 0x7a8]
cmp rdx, rsi
jb 0x1400908ea
inc rdx
mov rcx, qword [rsp + 0x790]
mov rax, rcx
cmp rdx, r14
jb 0x1400908e5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400908e5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.1400a9870
lea rdx, [rsp + 0x670]
lea rcx, [rsp + 0x38]
call fcn.140073970
mov byte [rsp + 0x20], r12b
lea rcx, str.Active
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strlen]
nop
lea rcx, [rsp + 0x290]
cmp qword [rsp + 0x2a8], rsi
cmovae rcx, qword [rsp + 0x290]
mov r8, qword [rsp + 0x2a0]
cmp r8, rax
jne 0x140090aaa
lea rdx, str.Active
call qword [sym.imp.VCRUNTIME140.dll_memcmp]
nop
test eax, eax
jne 0x140090aaa
lea rdx, str.e:workspace_rt_win_8_1mainlineheadlightslogtransportmain_application_sourcexplatlogtransportdriver.cpp
lea rcx, [rsp + 0x7b0]
call fcn.140074e28
nop
lea rdx, str.Try_to_send_logs
lea rcx, [rsp + 0x430]
call fcn.140074e28
nop
mov r8d, 0x389
lea rdx, [rsp + 0x7b0]
lea rcx, [rsp + 0x570]
call fcn.140087720
mov r8, rax
mov rcx, qword [0x1401043e0]
mov rdx, qword [rcx]
mov rax, qword [rdx + 0x80]
lea rdx, [rsp + 0x430]
call qword [case.0x140008940.0]
nop
mov rdx, qword [rsp + 0x588]
cmp rdx, rsi
jb 0x1400909f8
inc rdx
mov rcx, qword [rsp + 0x570]
mov rax, rcx
cmp rdx, r14
jb 0x1400909f3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400909f3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a9870
mov qword [rsp + 0x580], rdi
mov qword [rsp + 0x588], r15
mov byte [rsp + 0x570], dil
mov rdx, qword [rsp + 0x448]
cmp rdx, rsi
jb 0x140090a4a
inc rdx
mov rcx, qword [rsp + 0x430]
mov rax, rcx
cmp rdx, r14
jb 0x140090a45
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140090aa3
call fcn.1400a9870
mov qword [rsp + 0x440], rdi
mov qword [rsp + 0x448], r15
mov byte [rsp + 0x430], dil
mov rdx, qword [rsp + 0x7c8]
cmp rdx, rsi
jb 0x140090ce1
inc rdx
mov rcx, qword [rsp + 0x7b0]
mov rax, rcx
cmp rdx, r14
jb 0x140090cdc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140090cdc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
lea rbx, str.Kill
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strlen]
nop
lea rcx, [rsp + 0x290]
cmp qword [rsp + 0x2a8], rsi
cmovae rcx, qword [rsp + 0x290]
mov r8, qword [rsp + 0x2a0]
cmp r8, rax
jne 0x140090aef
mov rdx, rbx
call qword [sym.imp.VCRUNTIME140.dll_memcmp]
nop
test eax, eax
je 0x140090b3d
lea rcx, str.Hibernate
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strlen]
nop
lea rcx, [rsp + 0x290]
cmp qword [rsp + 0x2a8], rsi
cmovae rcx, qword [rsp + 0x290]
mov r8, qword [rsp + 0x2a0]
cmp r8, rax
jne 0x140090e92
lea rdx, str.Hibernate
call qword [sym.imp.VCRUNTIME140.dll_memcmp]
nop
test eax, eax
jne 0x140090e92
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strlen]
nop
lea rcx, [rsp + 0x290]
cmp qword [rsp + 0x2a8], rsi
cmovae rcx, qword [rsp + 0x290]
mov r8, qword [rsp + 0x2a0]
cmp r8, rax
jne 0x140090d00
mov rdx, rbx
call qword [sym.imp.VCRUNTIME140.dll_memcmp]
nop
test eax, eax
jne 0x140090d00
call fcn.14008ee04
test al, al
je 0x140090d00
lea rdx, str.e:workspace_rt_win_8_1mainlineheadlightslogtransportmain_application_sourcexplatlogtransportdriver.cpp
lea rcx, [rsp + 0x7d0]
call fcn.140074e28
nop
lea rdx, str.Try_to_send_pre_release_logs_only_as_status_is_kill
lea rcx, [rsp + 0x450]
call fcn.140074e28
nop
mov r8d, 0x394
lea rdx, [rsp + 0x7d0]
lea rcx, [rsp + 0x590]
call fcn.140087720
mov r8, rax
mov rcx, qword [0x1401043e0]
mov rdx, qword [rcx]
mov rax, qword [rdx + 0x80]
lea rdx, [rsp + 0x450]
call qword [case.0x140008940.0]
nop
mov rdx, qword [rsp + 0x5a8]
cmp rdx, rsi
jb 0x140090c36
inc rdx
mov rcx, qword [rsp + 0x590]
mov rax, rcx
cmp rdx, r14
jb 0x140090c31
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140090cd5
call fcn.1400a9870
mov qword [rsp + 0x5a0], rdi
mov qword [rsp + 0x5a8], r15
mov byte [rsp + 0x590], dil
mov rdx, qword [rsp + 0x468]
cmp rdx, rsi
jb 0x140090c88
inc rdx
mov rcx, qword [rsp + 0x450]
mov rax, rcx
cmp rdx, r14
jb 0x140090c83
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140090cd5
call fcn.1400a9870
mov qword [rsp + 0x460], rdi
mov qword [rsp + 0x468], r15
mov byte [rsp + 0x450], dil
mov rdx, qword [rsp + 0x7e8]
cmp rdx, rsi
jb 0x140090ce1
inc rdx
mov rcx, qword [rsp + 0x7d0]
mov rax, rcx
cmp rdx, r14
jb 0x140090cdc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140090cdc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.1400a9870
lea r8, [rsp + 0x630]
lea rdx, [rsp + 0x220]
lea rcx, [rsp + 0x38]
call fcn.14008e38c
jmp 0x140090ff4
lea rdx, [rsp + 0x630]
lea rcx, [rsp + 0x1a0]
call fcn.14008bb40
mov r9, rax
lea r8, [rsp + 0x630]
lea rdx, [rsp + 0x220]
lea rcx, [rsp + 0x38]
call fcn.14008cedc
test al, al
jne 0x140090ff4
lea rdx, str.e:workspace_rt_win_8_1mainlineheadlightslogtransportmain_application_sourcexplatlogtransportdriver.cpp
lea rcx, [rsp + 0x7f0]
call fcn.140074e28
nop
lea rdx, str.GetConfigFile_failed
lea rcx, [rsp + 0x470]
call fcn.140074e28
nop
mov r8d, 0x39e
lea rdx, [rsp + 0x7f0]
lea rcx, [rsp + 0x5f0]
call fcn.140087720
mov r8, rax
mov rcx, qword [0x1401043e0]
mov rdx, qword [rcx]
mov rax, qword [rdx + 0x80]
lea rdx, [rsp + 0x470]
call qword [case.0x140008940.0]
nop
mov rdx, qword [rsp + 0x608]
cmp rdx, rsi
jb 0x140090de0
inc rdx
mov rcx, qword [rsp + 0x5f0]
mov rax, rcx
cmp rdx, r14
jb 0x140090ddb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140090e8b
call fcn.1400a9870
mov qword [rsp + 0x600], rdi
mov qword [rsp + 0x608], r15
mov byte [rsp + 0x5f0], dil
mov rdx, qword [rsp + 0x488]
cmp rdx, rsi
jb 0x140090e32
inc rdx
mov rcx, qword [rsp + 0x470]
mov rax, rcx
cmp rdx, r14
jb 0x140090e2d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140090e8b
call fcn.1400a9870
mov qword [rsp + 0x480], rdi
mov qword [rsp + 0x488], r15
mov byte [rsp + 0x470], dil
mov rdx, qword [rsp + 0x808]
cmp rdx, rsi
jb 0x140090ff4
inc rdx
mov rcx, qword [rsp + 0x7f0]
mov rax, rcx
cmp rdx, r14
jb 0x140090fee
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140090fee
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
lea rdx, str.e:workspace_rt_win_8_1mainlineheadlightslogtransportmain_application_sourcexplatlogtransportdriver.cpp
lea rcx, [rsp + 0x6d0]
call fcn.140074e28
nop
lea rdx, str.cfInfo.msUlogStatus___LOGTRANSPORTLIB_ACTIVE
lea rcx, [rsp + 0x490]
call fcn.140074e28
nop
mov r8d, 0x3a7
lea rdx, [rsp + 0x6d0]
lea rcx, [rsp + 0x5b0]
call fcn.140087720
mov r8, rax
mov rcx, qword [0x1401043e0]
mov rdx, qword [rcx]
mov rax, qword [rdx + 0x80]
lea rdx, [rsp + 0x490]
call qword [case.0x140008940.0]
nop
mov rdx, qword [rsp + 0x5c8]
cmp rdx, rsi
jb 0x140090f34
inc rdx
mov rcx, qword [rsp + 0x5b0]
mov rax, rcx
cmp rdx, r14
jb 0x140090f2f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140090f81
call fcn.1400a9870
mov qword [rsp + 0x5c0], rdi
mov qword [rsp + 0x5c8], r15
mov byte [rsp + 0x5b0], dil
mov rdx, qword [rsp + 0x4a8]
cmp rdx, rsi
jb 0x140090f8d
inc rdx
mov rcx, qword [rsp + 0x490]
mov rax, rcx
cmp rdx, r14
jb 0x140090f88
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140090f88
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.1400a9870
mov qword [rsp + 0x4a0], rdi
mov qword [rsp + 0x4a8], r15
mov byte [rsp + 0x490], dil
mov rdx, qword [rsp + 0x6e8]
cmp rdx, rsi
jb 0x140090ff4
inc rdx
mov qword [rsp + 0x78], rdx
mov rcx, qword [rsp + 0x6d0]
mov qword [rsp + 0x80], rcx
cmp rdx, r14
jb 0x140090fee
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x80]
call fcn.140072174
mov rdx, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x80]
call fcn.1400a9870
nop
lea rcx, [rsp + 0xb0]
call fcn.14009197c
nop
lea rcx, [rsp + 0x2f0]
call fcn.140074100
nop
lea rcx, [rsp + 0x310]
call fcn.140074100
nop
lea rcx, [rsp + 0x330]
call fcn.140074100
nop
lea rcx, [rsp + 0x350]
call fcn.140074100
nop
lea rcx, [rsp + 0x370]
call fcn.140074100
nop
jmp 0x14009141f
lea rdx, str.e:workspace_rt_win_8_1mainlineheadlightslogtransportmain_application_sourcexplatlogtransportdriver.cpp
lea rcx, [rsp + 0x6f0]
call fcn.140074e28
nop
lea rdx, str.No_person_GUID_passed_in__will_exit.
lea rcx, [rsp + 0x4b0]
call fcn.140074e28
nop
mov r8d, 0x345
lea rdx, [rsp + 0x6f0]
lea rcx, [rsp + 0x5d0]
call fcn.140087720
mov r8, rax
mov rcx, qword [0x1401043e0]
mov rdx, qword [rcx]
mov rax, qword [rdx + 0x80]
lea rdx, [rsp + 0x4b0]
call qword [case.0x140008940.0]
nop
mov rdx, qword [rsp + 0x5e8]
cmp rdx, rsi
jb 0x1400910f3
inc rdx
mov rcx, qword [rsp + 0x5d0]
mov rax, rcx
cmp rdx, r14
jb 0x1400910ee
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140091192
call fcn.1400a9870
mov qword [rsp + 0x5e0], rdi
mov qword [rsp + 0x5e8], r15
mov byte [rsp + 0x5d0], dil
mov rdx, qword [rsp + 0x4c8]
cmp rdx, rsi
jb 0x140091145
inc rdx
mov rcx, qword [rsp + 0x4b0]
mov rax, rcx
cmp rdx, r14
jb 0x140091140
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140091192
call fcn.1400a9870
mov qword [rsp + 0x4c0], rdi
mov qword [rsp + 0x4c8], r15
mov byte [rsp + 0x4b0], dil
mov rdx, qword [rsp + 0x708]
cmp rdx, rsi
jb 0x14009119e
inc rdx
mov rcx, qword [rsp + 0x6f0]
mov rax, rcx
cmp rdx, r14
jb 0x140091199
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140091199
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.1400a9870
cmp qword [r13 + 0x50], rdi
je 0x1400911d9
mov rcx, qword [r13 + 0x58]
test rcx, rcx
je 0x1400911d9
mov edx, dword [r13 + 0x48]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
jne 0x1400911d9
mov rcx, qword [r13 + 0x50]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
test eax, eax
je 0x1400911ce
lock dec dword [r13 + 0x4c]
mov rcx, qword [r13 + 0x58]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
nop
mov rdx, qword [rsp + 0x308]
cmp rdx, rsi
jb 0x140091217
inc rdx
mov rcx, qword [rsp + 0x2f0]
mov rax, rcx
cmp rdx, r14
jb 0x140091212
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400913ee
call fcn.1400a9870
mov qword [rsp + 0x300], rdi
mov qword [rsp + 0x308], r15
mov byte [rsp + 0x2f0], dil
mov rdx, qword [rsp + 0x328]
cmp rdx, rsi
jb 0x14009126d
inc rdx
mov rcx, qword [rsp + 0x310]
mov rax, rcx
cmp rdx, r14
jb 0x140091268
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400913ee
call fcn.1400a9870
mov qword [rsp + 0x320], rdi
mov qword [rsp + 0x328], r15
mov byte [rsp + 0x310], dil
mov rdx, qword [rsp + 0x348]
cmp rdx, rsi
jb 0x1400912c3
inc rdx
mov rcx, qword [rsp + 0x330]
mov rax, rcx
cmp rdx, r14
jb 0x1400912be
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400913ee
call fcn.1400a9870
mov qword [rsp + 0x340], rdi
mov qword [rsp + 0x348], r15
mov byte [rsp + 0x330], dil
mov rdx, qword [rsp + 0x368]
cmp rdx, rsi
jb 0x140091319
inc rdx
mov rcx, qword [rsp + 0x350]
mov rax, rcx
cmp rdx, r14
jb 0x140091314
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400913ee
call fcn.1400a9870
mov qword [rsp + 0x360], rdi
mov qword [rsp + 0x368], r15
mov byte [rsp + 0x350], dil
mov rdx, qword [rsp + 0x388]
cmp rdx, rsi
jb 0x14009136f
inc rdx
mov rcx, qword [rsp + 0x370]
mov rax, rcx
cmp rdx, r14
jb 0x14009136a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400913ee
call fcn.1400a9870
mov qword [rsp + 0x380], rdi
mov qword [rsp + 0x388], r15
mov byte [rsp + 0x370], dil
lea rcx, [rsp + 0x220]
call fcn.14009cfe8
nop
lea rcx, [rsp + 0x38]
call fcn.140072670
nop
lea rcx, [rsp + 0x630]
call fcn.1400917d0
nop
lea rcx, [rsp + 0x68]
call fcn.14009a174
nop
mov rdx, qword [rsp + 0x3a8]
cmp rdx, rsi
jb 0x1400913fa
inc rdx
mov rcx, qword [rsp + 0x390]
mov rax, rcx
cmp rdx, r14
jb 0x1400913f5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400913f5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.1400a9870
mov qword [rsp + 0x3a0], rdi
mov qword [rsp + 0x3a8], r15
mov byte [rsp + 0x390], dil
or eax, 0xffffffff
jmp 0x1400917a1
test r12b, r12b
je 0x1400914ce
lea rdx, str.e:workspace_rt_win_8_1mainlineheadlightslogtransportmain_application_sourcexplatlogtransportdriver.cpp
lea rcx, [rsp + 0x810]
call fcn.140074e28
nop
lea rdx, str.House_keeping
lea rcx, [rsp + 0x970]
call fcn.140074e28
nop
mov r8d, 0x3b9
lea rdx, [rsp + 0x810]
lea rcx, [rsp + 0x9b0]
call fcn.140087720
mov r8, rax
mov rcx, qword [0x1401043e0]
mov rdx, qword [rcx]
mov rax, qword [rdx + 0x80]
lea rdx, [rsp + 0x970]
call qword [case.0x140008940.0]
nop
lea rcx, [rsp + 0x9b0]
call fcn.140074100
nop
lea rcx, [rsp + 0x970]
call fcn.140074100
nop
lea rcx, [rsp + 0x810]
call fcn.140074100
mov edx, dword [rsp + 0x224]
lea rcx, [rsp + 0x630]
call fcn.14009297c
nop
call fcn.140099684
mov rcx, qword [rsp + 0x70]
call fcn.14009a0a8
lea rdx, str.e:workspace_rt_win_8_1mainlineheadlightslogtransportmain_application_sourcexplatlogtransportdriver.cpp
lea rcx, [rsp + 0x890]
call fcn.140074e28
nop
lea rdx, str.______return_in_main______
lea rcx, [rsp + 0x870]
call fcn.140074e28
nop
mov r8d, 0x3cb
lea rdx, [rsp + 0x890]
lea rcx, [rsp + 0x9f0]
call fcn.140087720
mov r8, rax
mov rcx, qword [0x1401043e0]
mov rdx, qword [rcx]
mov rax, qword [rdx + 0x80]
lea rdx, [rsp + 0x870]
call qword [case.0x140008940.0]
nop
lea rcx, [rsp + 0x9f0]
call fcn.140074100
nop
lea rcx, [rsp + 0x870]
call fcn.140074100
nop
lea rcx, [rsp + 0x890]
call fcn.140074100
nop
lea rcx, [rsp + 0x220]
call fcn.14009cfe8
nop
lea rcx, [rsp + 0x38]
call fcn.140072670
nop
lea rcx, [rsp + 0x630]
call fcn.1400917d0
nop
lea rcx, [rsp + 0x68]
call fcn.14009a174
nop
lea rcx, [rsp + 0x390]
call fcn.140074100
xor eax, eax
jmp 0x1400917a1
lea rdx, str.e:workspace_rt_win_8_1mainlineheadlightslogtransportmain_application_sourcexplatlogtransportdriver.cpp
lea rcx, [rsp + 0x710]
call fcn.140074e28
nop
lea rdx, str.Get_Resource_Locker_fail
lea rcx, [rsp + 0x4d0]
call fcn.140074e28
nop
mov r8d, 0x310
lea rdx, [rsp + 0x710]
lea rcx, [rsp + 0x610]
call fcn.140087720
mov r8, rax
mov rcx, qword [0x1401043e0]
mov rdx, qword [rcx]
mov rax, qword [rdx + 0x80]
lea rdx, [rsp + 0x4d0]
call qword [case.0x140008940.0]
nop
mov rdx, qword [rsp + 0x628]
mov esi, 0x10
mov r14d, 0x1000
cmp rdx, rsi
jb 0x140091666
inc rdx
mov rcx, qword [rsp + 0x610]
mov rax, rcx
cmp rdx, r14
jb 0x140091661
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14009170b
call fcn.1400a9870
mov qword [rsp + 0x620], rdi
mov r15d, 0xf
mov qword [rsp + 0x628], r15
mov byte [rsp + 0x610], dil
mov rdx, qword [rsp + 0x4e8]
cmp rdx, rsi
jb 0x1400916be
inc rdx
mov rcx, qword [rsp + 0x4d0]
mov rax, rcx
cmp rdx, r14
jb 0x1400916b9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14009170b
call fcn.1400a9870
mov qword [rsp + 0x4e0], rdi
mov qword [rsp + 0x4e8], r15
mov byte [rsp + 0x4d0], dil
mov rdx, qword [rsp + 0x728]
cmp rdx, rsi
jb 0x140091717
inc rdx
mov rcx, qword [rsp + 0x710]
mov rax, rcx
cmp rdx, r14
jb 0x140091712
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140091712
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.1400a9870
cmp qword [r13 + 0x50], rdi
je 0x140091752
mov rcx, qword [r13 + 0x58]
test rcx, rcx
je 0x140091752
mov edx, dword [r13 + 0x48]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
jne 0x140091752
mov rcx, qword [r13 + 0x50]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
test eax, eax
je 0x140091747
lock dec dword [r13 + 0x4c]
mov rcx, qword [r13 + 0x58]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
nop
lea rcx, [rsp + 0x68]
call fcn.14009a174
nop
mov rdx, qword [rsp + 0x3a8]
cmp rdx, rsi
jb 0x14009179e
inc rdx
mov rcx, qword [rsp + 0x390]
mov rax, rcx
cmp rdx, r14
jb 0x140091799
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140091799
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a9870
or eax, 0xffffffff
mov rcx, qword [rsp + 0xa30]
xor rcx, rsp
call fcn.1400a95a0
lea r11, [rsp + 0xa40]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret