Function at 0x14001aa00
Capabilities:
Print debug messages

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xa0]
sub rsp, 0x1a0
mov rax, qword [0x140106010]
xor rax, rsp
mov qword [rbp + 0x90], rax
mov r12, r9
movzx ebx, r8b
mov rdi, rdx
mov rsi, rcx
xor r13d, r13d
mov dword [rsp + 0x40], r13d
cmp byte [0x14010cff0], r13b
jne 0x14001aa55
xor al, al
jmp 0x14001af64
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
mov qword [rbp - 0x50], r13
movdqa xmm1, xmmword [0x1400eb150]
movdqa xmmword [rbp - 0x40], xmm1
mov byte [rbp - 0x50], r13b
mov r8d, 9
lea rdx, str.threat_id
lea rcx, [rbp - 0x50]
call fcn.140009300
nop
mov rdx, rdi
lea rcx, [rbp - 0x30]
call fcn.14007f7f0
nop
mov qword [rbp - 0x20], r13
movdqa xmm0, xmmword [0x1400eb150]
movdqa xmmword [rbp - 0x10], xmm0
mov byte [rbp - 0x20], 0
mov r8d, 0x11
lea rdx, str.delete_from_store
lea rcx, [rbp - 0x20]
call fcn.140009300
nop
call fcn.14007f3e0
mov rdx, rbx
xor rdx, 1
inc rdx
shl rdx, 4
add rdx, rax
xorps xmm0, xmm0
movdqa xmmword [rbp], xmm0
mov rax, qword [rdx + 8]
test rax, rax
je 0x14001aaec
lock inc dword [rax + 8]
mov rax, qword [rdx]
mov qword [rbp], rax
mov rax, qword [rdx + 8]
mov qword [rbp + 8], rax
lea rax, [rbp - 0x50]
mov qword [rbp - 0x60], rax
lea rax, [rbp + 0x10]
mov qword [rbp - 0x58], rax
lea rdx, [rbp - 0x60]
lea rcx, [rsp + 0x68]
call fcn.140008970
nop
mov rdx, rax
lea rcx, [rbp + 0x20]
call fcn.14007fba0
nop
mov rcx, qword [rsp + 0x68]
mov rdi, qword [rcx + 8]
cmp byte [rdi + 0x19], 0
jne 0x14001ab7a
nop word [rax + rax]
mov r8, qword [rdi + 0x10]
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x68]
call fcn.14000a970
mov rbx, rdi
mov rdi, qword [rdi]
lea rcx, [rbx + 0x20]
call fcn.1400029f0
mov edx, 0x50
mov rcx, rbx
call fcn.140091bc0
cmp byte [rdi + 0x19], 0
je 0x14001ab40
mov rcx, qword [rsp + 0x68]
mov edx, 0x50
call fcn.140091bc0
nop
lea r9, [fcn.1400029f0]
mov edx, 0x30
lea r8d, [rdx - 0x2e]
lea rcx, [rbp - 0x50]
call fcn.140091c04
lea rdx, [rbp + 0x50]
lea rcx, [rbp + 0x20]
call fcn.140011350
nop
lea rcx, [rbp + 0x50]
cmp qword [rbp + 0x68], 0x10
cmovae rcx, qword [rbp + 0x50]
call qword [sym.imp.KERNEL32.dll_OutputDebugStringA]
xor r15b, r15b
mov qword [rbp + 0x30], r13
mov qword [rbp + 0x40], r13
mov qword [rbp + 0x48], 0xf
mov byte [rbp + 0x30], r15b
lea rax, [rsp + 0x78]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x30]
mov qword [rsp + 0x28], rax
mov eax, dword [rsi + 8]
mov dword [rsp + 0x20], eax
mov r9, qword [rsi + 0x10]
lea r8, [rbp + 0x50]
lea rdx, str.restorethreat
mov ecx, dword [rsi + 0x18]
call fcn.14001bb40
mov rdi, 0xffffffffffffffff
test al, al
je 0x14001ae94
mov qword [rbp + 0x70], r13
mov qword [rbp + 0x80], r13
mov qword [rbp + 0x88], 0xf
mov byte [rbp + 0x70], r15b
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
lea rdx, [rbp + 0x30]
cmp qword [rbp + 0x48], 0x10
jb 0x14001ac90
mov rdx, qword [rbp + 0x30]
test rdx, rdx
jne 0x14001ac90
lea r8d, [rdi + 0xb]
lea rdx, str.null_input
lea rcx, [rbp + 0x70]
call fcn.140009300
nop
call fcn.14007f3e0
mov rbx, qword [rax + 8]
test rbx, rbx
je 0x14001ac77
lock inc dword [rbx + 8]
mov rbx, qword [rax + 8]
mov r14, qword [rax]
mov qword [rbp + 0x10], r14
mov qword [rbp + 0x18], rbx
mov esi, 4
mov dword [rsp + 0x40], esi
jmp 0x14001ad38
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x58], r13
mov qword [rsp + 0x60], 0xf
mov byte [rsp + 0x48], 0
mov r8, rdi
nop dword [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x14001acb0
lea rcx, [rsp + 0x48]
call fcn.140009300
nop
lea r8, [rbp + 0x70]
lea rdx, [rsp + 0x48]
lea rcx, [rbp + 0x10]
call fcn.140082bc0
mov esi, 4
mov dword [rsp + 0x40], esi
mov rdx, qword [rsp + 0x60]
cmp rdx, 0x10
jb 0x14001ad1d
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001ad18
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001af94
call fcn.140091bc0
mov qword [rsp + 0x58], r13
mov qword [rsp + 0x60], 0xf
mov byte [rsp + 0x48], 0
mov rbx, qword [rbp + 0x18]
mov r14, qword [rbp + 0x10]
mov rax, qword [r14]
mov rcx, r14
mov rax, qword [rax]
call qword [case.0x14007fe1f.0]
test eax, eax
je 0x14001adb6
cmp qword [rbp + 0x80], 0
jne 0x14001adb6
mov qword [rbp - 0x80], r13
mov qword [rbp - 0x70], r13
mov qword [rbp - 0x68], 0xf
mov byte [rbp - 0x80], 0
mov r8d, 0xa
lea rdx, str.error_code
lea rcx, [rbp - 0x80]
call fcn.140009300
nop
mov esi, 5
mov dword [rsp + 0x40], esi
mov rax, qword [r14]
lea rdx, [rbp - 0x80]
mov rcx, r14
mov rax, qword [rax + 0x48]
call qword [case.0x14007fe1f.0]
mov rcx, qword [rax]
mov rax, qword [rcx]
mov rax, qword [rax + 0x28]
call qword [case.0x14007fe1f.0]
test eax, eax
jne 0x14001adb6
mov r14b, 1
jmp 0x14001adb9
xor r14b, r14b
test sil, 1
je 0x14001adfa
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
jb 0x14001adfa
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001adf5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001af9a
call fcn.140091bc0
test r14b, r14b
je 0x14001ae12
lea rdx, [rbp + 0x10]
mov rcx, r12
call fcn.140003590
mov r15b, 1
mov rbx, qword [rbp + 0x18]
test rbx, rbx
je 0x14001ae55
mov eax, edi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x14001ae55
mov rbx, qword [rbp + 0x18]
mov rax, qword [rbx]
mov rcx, rbx
mov rax, qword [rax]
call qword [case.0x14007fe1f.0]
nop
mov eax, edi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x14001ae55
mov rcx, qword [rbp + 0x18]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x14007fe1f.0]
nop
mov rdx, qword [rbp + 0x88]
cmp rdx, 0x10
jb 0x14001ae94
inc rdx
mov rcx, qword [rbp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001ae8e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001afa0
call fcn.140091bc0
nop
mov rdx, qword [rbp + 0x48]
cmp rdx, 0x10
jb 0x14001aed0
inc rdx
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001aeca
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001afa6
call fcn.140091bc0
nop
mov rdx, qword [rbp + 0x68]
cmp rdx, 0x10
jb 0x14001af0b
inc rdx
mov rcx, qword [rbp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001af06
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001af8e
call fcn.140091bc0
mov qword [rbp + 0x60], r13
mov qword [rbp + 0x68], 0xf
mov byte [rbp + 0x50], 0
mov rcx, qword [rbp + 0x28]
test rcx, rcx
je 0x14001af60
mov eax, edi
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x14001af60
mov rbx, qword [rbp + 0x28]
mov rax, qword [rbx]
mov rcx, rbx
mov rax, qword [rax]
call qword [case.0x14007fe1f.0]
nop
lock xadd dword [rbx + 0xc], edi
cmp edi, 1
jne 0x14001af60
mov rcx, qword [rbp + 0x28]
mov rdx, qword [rcx]
mov rax, qword [rdx + 8]
call qword [case.0x14007fe1f.0]
nop
movzx eax, r15b
mov rcx, qword [rbp + 0x90]
xor rcx, rsp
call fcn.140091ba0
mov rbx, qword [rsp + 0x1f0]
add rsp, 0x1a0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.14009b188
nop
call fcn.14009b188
nop
call fcn.14009b188
nop
call fcn.14009b188
nop
call fcn.14009b188
int3