Function at 0x1400ec320
Capabilities:
Create directory

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x460]
sub rsp, 0x560
mov qword [rbp - 0x58], 0xfffffffffffffffe
mov qword [rsp + 0x5a0], rbx
mov rax, qword [0x14027f238]
xor rax, rsp
mov qword [rbp + 0x450], rax
mov qword [rbp - 0x60], r8
mov r12, rdx
mov qword [rbp - 0x68], rdx
mov qword [rbp - 0x50], rdx
mov qword [rbp + 0x158], 7
xor r14d, r14d
mov qword [rbp + 0x150], r14
mov word [rbp + 0x140], r14w
lea r8, [rbp + 0x140]
lea rdx, str.path
mov rcx, r12
call fcn.1400c0ad0
test eax, eax
js 0x1400ed4c4
cmp qword [rbp + 0x150], r14
je 0x1400ed4c4
lea rsi, vtable.WaJson.0
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x68], r14
mov dword [rsp + 0x68], r14d
mov byte [rsp + 0x68], r14b
mov dword [rsp + 0x60], 3
lea ecx, [r14 + 0x18]
call fcn.140165194
mov qword [rbp - 0x70], rax
mov qword [rax], r14
mov qword [rax + 8], r14
mov qword [rax + 0x10], r14
mov qword [rsp + 0x68], rax
lea rcx, [rbp + 0x140]
cmp qword [rbp + 0x158], 8
cmovae rcx, qword [rbp + 0x140]
lea rdx, [rbp + 0x200]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
movabs rbx, 0x2aaaaaaaaaaaaaab
cmp rax, 0xffffffffffffffff
je 0x1400ec630
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_FindClose]
mov eax, dword [rbp + 0x200]
shr eax, 4
and al, 1
je 0x1400ec636
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x48], r14
mov dword [rsp + 0x48], r14d
mov byte [rsp + 0x48], r14b
mov dword [rsp + 0x40], 5
mov dword [rsp + 0x20], r14d
or r9d, 0xffffffff
lea rdx, [rsp + 0x38]
lea rcx, [rbp + 0x140]
call fcn.14013a0b0
test eax, eax
js 0x1400ec61b
mov eax, dword [rsp + 0x40]
cmp eax, 3
jne 0x1400ec4ae
mov rax, qword [rsp + 0x48]
mov rcx, qword [rax + 8]
sub rcx, qword [rax]
mov rax, rbx
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
jmp 0x1400ec4c1
cmp eax, 2
jne 0x1400ec4be
mov rax, qword [rsp + 0x48]
mov rdx, qword [rax + 0x10]
jmp 0x1400ec4c1
mov rdx, r14
test edx, edx
jle 0x1400ec61b
mov r15d, edx
xor r13d, r13d
nop
mov qword [rbp + 0x118], 7
mov qword [rbp + 0x110], r13
mov word [rbp + 0x100], r13w
mov r8, r14
lea rdx, [rbp + 0x120]
lea rcx, [rsp + 0x38]
call fcn.1400c0570
mov rdi, rax
mov rcx, qword [rax]
mov rbx, qword [rcx + 0x250]
mov rcx, rbx
call qword [fcn.1400059b0]
lea rdx, [rbp + 0x100]
mov rcx, rdi
call rbx
nop
mov qword [rbp + 0x120], rsi
lea rcx, [rbp + 0x120]
call fcn.1400c02b0
nop
lea rdx, [rbp + 0x100]
cmp qword [rbp + 0x118], 8
cmovae rdx, qword [rbp + 0x100]
mov qword [rsp + 0x70], rsi
mov qword [rbp - 0x80], r13
mov dword [rbp - 0x80], r13d
mov byte [rbp - 0x80], 0
mov dword [rsp + 0x78], 5
lea rcx, [rsp + 0x70]
call fcn.1400c2c80
nop
cmp dword [rsp + 0x60], 3
je 0x1400ec5a0
mov dword [rsp + 0x50], 3
mov rax, qword [rsp + 0x58]
mov rbx, qword [rax + 0x90]
mov rcx, rbx
call qword [fcn.1400059b0]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x58]
call rbx
mov rbx, qword [rsp + 0x68]
mov rax, qword [rbx + 0x10]
cmp qword [rbx + 8], rax
jne 0x1400ec5b7
mov rcx, rbx
call fcn.1400c5b30
mov rcx, qword [rbx + 8]
mov qword [rbp - 0x70], rcx
mov qword [rbp - 0x78], rcx
test rcx, rcx
je 0x1400ec5d3
lea rdx, [rsp + 0x70]
call fcn.1400bf000
nop
add qword [rbx + 8], 0x18
mov qword [rsp + 0x70], rsi
lea rcx, [rsp + 0x70]
call fcn.1400c02b0
nop
mov r8, qword [rbp + 0x118]
cmp r8, 8
jb 0x1400ec60b
inc r8
mov rdx, qword [rbp + 0x100]
lea rcx, [rbp + 0x100]
call fcn.1400be810
inc r14
sub r15, 1
jne 0x1400ec4d0
xor r14d, r14d
mov qword [rsp + 0x38], rsi
lea rcx, [rsp + 0x38]
call fcn.1400c02b0
nop
jmp 0x1400ec6ec
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rdx, [rbp + 0x140]
cmp qword [rbp + 0x158], 8
cmovae rdx, qword [rbp + 0x140]
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x48], r14
mov dword [rsp + 0x48], r14d
mov byte [rsp + 0x48], 0
mov dword [rsp + 0x40], 5
lea rcx, [rsp + 0x38]
call fcn.1400c2c80
nop
cmp dword [rsp + 0x60], 3
je 0x1400ec6a4
mov dword [rsp + 0x50], 3
mov rax, qword [rsp + 0x58]
mov rbx, qword [rax + 0x90]
mov rcx, rbx
call qword [fcn.1400059b0]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x58]
call rbx
mov rbx, qword [rsp + 0x68]
mov rax, qword [rbx + 0x10]
cmp qword [rbx + 8], rax
jne 0x1400ec6bb
mov rcx, rbx
call fcn.1400c5b30
mov rcx, qword [rbx + 8]
mov qword [rbp - 0x70], rcx
mov qword [rbp - 0x78], rcx
test rcx, rcx
je 0x1400ec6d7
lea rdx, [rsp + 0x38]
call fcn.1400bf000
nop
add qword [rbx + 8], 0x18
mov qword [rsp + 0x38], rsi
lea rcx, [rsp + 0x38]
call fcn.1400c02b0
nop
lea rbx, [0x14028c980]
mov qword [rbp - 0x40], rbx
mov rcx, rbx
call fcn.140166958
test eax, eax
je 0x1400ec70a
mov ecx, eax
call fcn.1401664c4
mov byte [rbp - 0x38], 1
or edi, 0xffffffff
call fcn.1400e8c30
mov r13, rax
mov qword [rbp - 0x70], rax
test rax, rax
je 0x1400ed3be
mov rdx, rax
call fcn.1400e8f40
test al, al
je 0x1400ed3be
mov rdx, r13
call fcn.1400edac0
cmp eax, 1
jne 0x1400ec7bb
mov rcx, rbx
call fcn.14016697c
test eax, eax
je 0x1400ec757
mov ecx, eax
call fcn.1401664c4
nop
mov qword [rsp + 0x58], rsi
lea rcx, [rsp + 0x58]
call fcn.1400c02b0
nop
mov r8, qword [rbp + 0x158]
cmp r8, 8
jb 0x1400ec78a
inc r8
mov rdx, qword [rbp + 0x140]
lea rcx, [rbp + 0x140]
call fcn.1400be810
mov qword [rbp + 0x158], 7
mov qword [rbp + 0x150], r14
mov word [rbp + 0x140], r14w
mov qword [r12], rsi
mov rcx, r12
call fcn.1400c02b0
nop
mov eax, 0xffffffea
jmp 0x1400ed51a
lea rdx, str.oiScan
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbp - 0x78], rax
test rax, rax
je 0x1400ed3c3
mov qword [rsp + 0x38], rsi
xor r12d, r12d
mov qword [rsp + 0x48], r12
mov dword [rsp + 0x48], r12d
mov byte [rsp + 0x48], r12b
mov dword [rsp + 0x40], 3
lea ecx, [r12 + 0x18]
call fcn.140165194
mov qword [rsp + 0x50], rax
mov qword [rax], r12
mov qword [rax + 8], r12
mov qword [rax + 0x10], r12
mov qword [rsp + 0x48], rax
xor al, al
mov byte [rsp + 0x31], al
mov byte [rsp + 0x30], 1
mov r14d, r12d
movabs r13, 0x2aaaaaaaaaaaaaab
nop
mov eax, dword [rsp + 0x60]
cmp eax, 3
jne 0x1400ec85b
mov rax, qword [rsp + 0x68]
mov rcx, qword [rax + 8]
sub rcx, qword [rax]
mov rax, r13
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
jmp 0x1400ec86e
cmp eax, 2
jne 0x1400ec86b
mov rax, qword [rsp + 0x68]
mov rdx, qword [rax + 0x10]
jmp 0x1400ec86e
mov rdx, r12
movsxd r8, r14d
cmp r8, rdx
jae 0x1400ecdaf
mov qword [rbp + 0x178], 7
mov qword [rbp + 0x170], r12
mov word [rbp + 0x160], r12w
lea rdx, [rbp + 0x120]
lea rcx, [rsp + 0x58]
call fcn.1400c0570
mov rdi, rax
mov rcx, qword [rax]
mov rbx, qword [rcx + 0x250]
mov rcx, rbx
call qword [fcn.1400059b0]
lea rdx, [rbp + 0x160]
mov rcx, rdi
call rbx
nop
mov qword [rbp + 0x120], rsi
lea rcx, [rbp + 0x120]
call fcn.1400c02b0
nop
lea rcx, [rbp + 0x160]
cmp qword [rbp + 0x178], 8
cmovae rcx, qword [rbp + 0x160]
call fcn.1401bbcc4
mov r15, rax
mov ecx, 0x420
call fcn.140165194
mov rdi, rax
mov rbx, qword [rbp - 0x78]
mov rcx, rbx
call qword [fcn.1400059b0]
mov rdx, rdi
mov rcx, r15
call rbx
test eax, eax
jle 0x1400ecd6a
mov byte [rsp + 0x31], 1
mov byte [rsp + 0x30], 0
xor ecx, ecx
call fcn.1401b48a4
mov dword [rsp + 0x50], eax
mov qword [rbp + 0x100], rsi
mov qword [rbp + 0x110], r12
mov dword [rbp + 0x110], r12d
mov byte [rbp + 0x110], 0
mov dword [rbp + 0x108], 5
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x180]
call fcn.1400c59b0
nop
cmp qword [rax + 0x18], 8
jb 0x1400ec97c
mov rax, qword [rax]
mov qword [rbp + 0x120], rsi
mov qword [rbp + 0x130], r12
mov dword [rbp + 0x130], r12d
mov byte [rbp + 0x130], 0
mov dword [rbp + 0x128], 5
mov rdx, rax
lea rcx, [rbp + 0x120]
call fcn.1400c2c80
nop
mov qword [rbp + 0xf8], 7
mov qword [rbp + 0xf0], r12
mov word [rbp + 0xe0], r12w
mov r8d, 9
lea rdx, str.scan_time
lea rcx, [rbp + 0xe0]
call fcn.1400be520
nop
mov rax, qword [rbp + 0x100]
mov rbx, qword [rax + 0xf0]
mov rcx, rbx
call qword [fcn.1400059b0]
lea r8, [rbp + 0x120]
lea rdx, [rbp + 0xe0]
lea rcx, [rbp + 0x100]
call rbx
nop
mov r8, qword [rbp + 0xf8]
cmp r8, 8
jb 0x1400eca39
inc r8
mov rdx, qword [rbp + 0xe0]
lea rcx, [rbp + 0xe0]
call fcn.1400be810
nop
mov qword [rbp + 0x120], rsi
lea rcx, [rbp + 0x120]
call fcn.1400c02b0
nop
mov r8, qword [rbp + 0x198]
cmp r8, 8
jb 0x1400eca70
inc r8
mov rdx, qword [rbp + 0x180]
lea rcx, [rbp + 0x180]
call fcn.1400be810
mov qword [rbp + 0x120], rsi
mov qword [rbp + 0x130], r12
mov dword [rbp + 0x130], r12d
mov byte [rbp + 0x130], 0
mov dword [rbp + 0x128], 5
mov rdx, rdi
lea rcx, [rbp + 0x120]
call fcn.1400c2c80
nop
mov qword [rbp + 0xf8], 7
mov qword [rbp + 0xf0], r12
mov word [rbp + 0xe0], r12w
mov r8d, SafeArrayDestroy
lea rdx, str.threat_name
lea rcx, [rbp + 0xe0]
call fcn.1400be520
nop
mov rax, qword [rbp + 0x100]
mov rbx, qword [rax + 0xf0]
mov rcx, rbx
call qword [fcn.1400059b0]
lea r8, [rbp + 0x120]
lea rdx, [rbp + 0xe0]
lea rcx, [rbp + 0x100]
call rbx
nop
mov r8, qword [rbp + 0xf8]
cmp r8, 8
jb 0x1400ecb2d
inc r8
mov rdx, qword [rbp + 0xe0]
lea rcx, [rbp + 0xe0]
call fcn.1400be810
nop
mov qword [rbp + 0x120], rsi
lea rcx, [rbp + 0x120]
call fcn.1400c02b0
nop
mov qword [rbp + 0x120], rsi
mov qword [rbp + 0x130], r12
mov dword [rbp + 0x130], r12d
mov byte [rbp + 0x130], 0
mov dword [rbp + 0x128], 5
lea rdx, [rdi + 0x20c]
lea rcx, [rbp + 0x120]
call fcn.1400c2c80
nop
mov qword [rbp + 0xf8], 7
mov qword [rbp + 0xf0], r12
mov word [rbp + 0xe0], r12w
mov r8d, 4
lea rdx, str.path
lea rcx, [rbp + 0xe0]
call fcn.1400be520
nop
mov rax, qword [rbp + 0x100]
mov rbx, qword [rax + 0xf0]
mov rcx, rbx
call qword [fcn.1400059b0]
lea r8, [rbp + 0x120]
lea rdx, [rbp + 0xe0]
lea rcx, [rbp + 0x100]
call rbx
nop
mov r8, qword [rbp + 0xf8]
cmp r8, 8
jb 0x1400ecc02
inc r8
mov rdx, qword [rbp + 0xe0]
lea rcx, [rbp + 0xe0]
call fcn.1400be810
nop
mov qword [rbp + 0x120], rsi
lea rcx, [rbp + 0x120]
call fcn.1400c02b0
nop
mov qword [rbp + 0x120], rsi
mov qword [rbp + 0x130], r12
mov dword [rbp + 0x130], r12d
mov byte [rbp + 0x130], 0
mov dword [rbp + 0x128], 5
lea rdx, str.none
lea rcx, [rbp + 0x120]
call fcn.1400c2c80
nop
mov qword [rbp + 0xf8], 7
mov qword [rbp + 0xf0], r12
mov word [rbp + 0xe0], r12w
mov r8d, SafeArrayDestroy
lea rdx, str.remediation
lea rcx, [rbp + 0xe0]
call fcn.1400be520
nop
mov rax, qword [rbp + 0x100]
mov rbx, qword [rax + 0xf0]
mov rcx, rbx
call qword [fcn.1400059b0]
lea r8, [rbp + 0x120]
lea rdx, [rbp + 0xe0]
lea rcx, [rbp + 0x100]
call rbx
nop
mov r8, qword [rbp + 0xf8]
cmp r8, 8
jb 0x1400eccd7
inc r8
mov rdx, qword [rbp + 0xe0]
lea rcx, [rbp + 0xe0]
call fcn.1400be810
nop
mov qword [rbp + 0x120], rsi
lea rcx, [rbp + 0x120]
call fcn.1400c02b0
nop
cmp dword [rsp + 0x40], 3
je 0x1400ecd1b
mov dword [rsp + 0x50], 3
mov rax, qword [rsp + 0x38]
mov rbx, qword [rax + 0x90]
mov rcx, rbx
call qword [fcn.1400059b0]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x38]
call rbx
mov rbx, qword [rsp + 0x48]
mov rax, qword [rbx + 0x10]
cmp qword [rbx + 8], rax
jne 0x1400ecd32
mov rcx, rbx
call fcn.1400c5b30
mov rcx, qword [rbx + 8]
mov qword [rsp + 0x50], rcx
mov qword [rbp - 0x48], rcx
test rcx, rcx
je 0x1400ecd51
lea rdx, [rbp + 0x100]
call fcn.1400bf000
nop
add qword [rbx + 8], 0x18
mov qword [rbp + 0x100], rsi
lea rcx, [rbp + 0x100]
call fcn.1400c02b0
nop
mov edx, 0x420
mov rcx, rdi
call fcn.14016591c
mov rcx, r15
call fcn.14016591c
mov edi, 0x138b
mov r8, qword [rbp + 0x178]
cmp r8, 8
jb 0x1400ecda7
inc r8
mov rdx, qword [rbp + 0x160]
lea rcx, [rbp + 0x160]
call fcn.1400be810
inc r14d
jmp 0x1400ec830
lea rcx, str.PROGRAMDATA
call fcn.1401b9ce8
mov qword [rbp + 0x1b8], reloc.OLEAUT32.dll_SafeArrayDestroy
mov qword [rbp + 0x1b0], r12
mov byte [rbp + 0x1a0], 0
cmp byte [rax], 0
jne 0x1400ecdde
mov r8, r12
jmp 0x1400ecdec
or r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x1400ecde2
mov rdx, rax
lea rcx, [rbp + 0x1a0]
call fcn.1400ccaa0
nop
lea r8, str.EmsisoftLogsOPSWAT
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x1e0]
call fcn.1400f1320
nop
lea rcx, [rbp + 0x1e0]
cmp qword [rbp + 0x1f8], 0x10
cmovae rcx, qword [rbp + 0x1e0]
call fcn.1401b9984
xor ecx, ecx
call fcn.1401b48a4
mov qword [rbp - 0x78], rax
lea rcx, [rbp - 0x30]
call fcn.1400ef340
nop
lea rdx, [rbp - 0x78]
lea rcx, [rbp + 0x120]
call fcn.1400f1490
mov rbx, rax
lea r8, str.EmsisoftLogsOPSWATOPSWAT_PathScan_
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x160]
call fcn.1400f1320
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0xe0]
call fcn.1400f14b0
nop
mov rdx, rax
lea rcx, [rbp + 0x1c0]
call fcn.1400f12b0
nop
lea rcx, [rbp + 0xe0]
call fcn.1400cb8c0
nop
lea rcx, [rbp + 0x160]
call fcn.1400cb8c0
nop
lea rcx, [rbp + 0x120]
call fcn.1400cb8c0
lea rdx, [rbp + 0x1c0]
cmp qword [rbp + 0x1d8], 0x10
cmovae rdx, qword [rbp + 0x1c0]
lea rcx, [rbp - 0x28]
call fcn.1400f0bf0
test rax, rax
mov rax, qword [rbp - 0x30]
movsxd rcx, dword [rax + 4]
jne 0x1400ecf08
lea r9, [rbp - 0x30]
add rcx, r9
mov eax, dword [rcx + 0x10]
or eax, 2
mov edx, eax
or edx, 4
cmp qword [rcx + 0x48], 0
cmovne edx, eax
jmp 0x1400ecf1d
lea rax, [rbp - 0x30]
add rcx, rax
mov edx, 4
cmp qword [rcx + 0x48], 0
cmovne edx, r12d
xor r8d, r8d
call fcn.1400cb440
lea rdx, [rbp + 0x180]
lea rcx, [rsp + 0x38]
call fcn.1400c2f60
nop
mov rdx, rax
lea rcx, [rbp + 0x100]
call fcn.1400f1590
nop
mov rdx, rax
lea rcx, [rbp - 0x30]
call fcn.1400f15b0
nop
lea rcx, [rbp + 0x100]
call fcn.1400cb8c0
nop
mov r8, qword [rbp + 0x198]
cmp r8, 8
mov r12, qword [rbp - 0x68]
mov r13, qword [rbp - 0x70]
jb 0x1400ecf8c
inc r8
mov rdx, qword [rbp + 0x180]
lea rcx, [rbp + 0x180]
call fcn.1400be810
lea rcx, [rbp - 0x28]
call fcn.1400f0a50
test rax, rax
jne 0x1400ecfc4
mov rax, qword [rbp - 0x30]
movsxd rcx, dword [rax + 4]
lea r9, [rbp - 0x30]
add rcx, r9
mov eax, dword [rcx + 0x10]
or eax, 2
mov edx, eax
or edx, 4
cmp qword [rcx + 0x48], 0
cmovne edx, eax
xor r8d, r8d
call fcn.1400cb440
mov qword [rsp + 0x70], rsi
xor r14d, r14d
mov qword [rbp - 0x80], r14
mov dword [rbp - 0x80], r14d
mov byte [rbp - 0x80], r14b
mov dword [rsp + 0x78], 5
mov qword [rbp + 0xf8], 7
mov qword [rbp + 0xf0], r14
mov word [rbp + 0xe0], r14w
lea r8d, [r14 + 7]
lea rdx, str.threats
lea rcx, [rbp + 0xe0]
call fcn.1400be520
nop
mov rax, qword [rsp + 0x70]
mov rbx, qword [rax + 0xf8]
mov rcx, rbx
call qword [fcn.1400059b0]
lea r8, [rsp + 0x38]
lea rdx, [rbp + 0xe0]
lea rcx, [rsp + 0x70]
call rbx
nop
mov r8, qword [rbp + 0xf8]
cmp r8, 8
jb 0x1400ed05e
inc r8
mov rdx, qword [rbp + 0xe0]
lea rcx, [rbp + 0xe0]
call fcn.1400be810
mov qword [rbp + 0x100], rsi
mov qword [rbp + 0x110], r14
mov dword [rbp + 0x110], r14d
mov byte [rbp + 0x110], 0
mov dword [rbp + 0x108], 5
mov rbx, qword [fcn.1400c02b0]
mov rcx, rbx
call qword [fcn.1400059b0]
lea rcx, [rbp + 0x100]
call rbx
movzx eax, byte [rsp + 0x31]
mov byte [rbp + 0x110], al
mov dword [rbp + 0x108], 4
mov qword [rbp + 0xf8], 7
mov qword [rbp + 0xf0], r14
mov word [rbp + 0xe0], r14w
mov r8d, SafeArrayDestroy
lea rdx, str.malware_found
lea rcx, [rbp + 0xe0]
call fcn.1400be520
nop
mov rax, qword [rsp + 0x70]
mov rbx, qword [rax + 0xf0]
mov rcx, rbx
call qword [fcn.1400059b0]
lea r8, [rbp + 0x100]
lea rdx, [rbp + 0xe0]
lea rcx, [rsp + 0x70]
call rbx
nop
mov r8, qword [rbp + 0xf8]
cmp r8, 8
jb 0x1400ed135
inc r8
mov rdx, qword [rbp + 0xe0]
lea rcx, [rbp + 0xe0]
call fcn.1400be810
nop
mov qword [rbp + 0x100], rsi
lea rcx, [rbp + 0x100]
call fcn.1400c02b0
nop
mov qword [rbp + 0x100], rsi
mov qword [rbp + 0x110], r14
mov dword [rbp + 0x110], r14d
mov byte [rbp + 0x110], 0
mov dword [rbp + 0x108], 5
mov rbx, qword [fcn.1400c02b0]
mov rcx, rbx
call qword [fcn.1400059b0]
lea rcx, [rbp + 0x100]
call rbx
movzx ecx, byte [rsp + 0x30]
mov byte [rbp + 0x110], cl
mov dword [rbp + 0x108], 4
mov qword [rbp + 0xf8], 7
mov qword [rbp + 0xf0], r14
mov word [rbp + 0xe0], r14w
mov r8d, 5
lea rdx, str.clean
lea rcx, [rbp + 0xe0]
call fcn.1400be520
nop
mov rax, qword [rsp + 0x70]
mov rbx, qword [rax + 0xf0]
mov rcx, rbx
call qword [fcn.1400059b0]
lea r8, [rbp + 0x100]
lea rdx, [rbp + 0xe0]
lea rcx, [rsp + 0x70]
call rbx
nop
mov r8, qword [rbp + 0xf8]
cmp r8, 8
jb 0x1400ed220
inc r8
mov rdx, qword [rbp + 0xe0]
lea rcx, [rbp + 0xe0]
call fcn.1400be810
nop
mov qword [rbp + 0x100], rsi
lea rcx, [rbp + 0x100]
call fcn.1400c02b0
nop
mov qword [rbp + 0xf8], 7
mov qword [rbp + 0xf0], r14
mov word [rbp + 0xe0], r14w
mov r8d, 6
lea rdx, str.result
lea rcx, [rbp + 0xe0]
call fcn.1400be520
nop
mov qword [rbp + 0x100], rsi
mov qword [rbp + 0x110], r14
mov dword [rbp + 0x110], r14d
mov byte [rbp + 0x110], 0
mov dword [rbp + 0x108], 5
lea r8, [rsp + 0x70]
lea rdx, [rbp + 0xe0]
lea rcx, [rbp + 0x100]
call fcn.1400c0690
nop
mov rax, qword [rbp + 0x100]
mov rbx, qword [rax + 0x260]
mov rcx, rbx
call qword [fcn.1400059b0]
lea rdx, [rbp + 0x160]
lea rcx, [rbp + 0x100]
call rbx
mov rdx, rax
mov rcx, qword [rbp - 0x60]
call fcn.1400c44d0
mov r8, qword [rbp + 0x178]
cmp r8, 8
jb 0x1400ed2fd
inc r8
mov rdx, qword [rbp + 0x160]
lea rcx, [rbp + 0x160]
call fcn.1400be810
mov qword [rbp + 0x178], 7
mov qword [rbp + 0x170], r14
mov word [rbp + 0x160], r14w
mov qword [rbp + 0x100], rsi
lea rcx, [rbp + 0x100]
call fcn.1400c02b0
nop
mov r8, qword [rbp + 0xf8]
cmp r8, 8
jb 0x1400ed34f
inc r8
mov rdx, qword [rbp + 0xe0]
lea rcx, [rbp + 0xe0]
call fcn.1400be810
nop
mov qword [rsp + 0x70], rsi
lea rcx, [rsp + 0x70]
call fcn.1400c02b0
nop
lea rcx, [rbp + 0x1c0]
call fcn.1400cb8c0
nop
lea rcx, [rbp + 0x78]
call fcn.1400ef2c0
nop
lea rax, vtable.std::ios_base.0
mov qword [rbp + 0x78], rax
lea rcx, [rbp + 0x78]
call fcn.14016c12c
nop
lea rcx, [rbp + 0x1e0]
call fcn.1400cb8c0
nop
lea rcx, [rbp + 0x1a0]
call fcn.1400cb8c0
nop
mov qword [rsp + 0x38], rsi
lea rcx, [rsp + 0x38]
call fcn.1400c02b0
nop
lea rbx, [0x14028c980]
jmp 0x1400ed3c3
mov edi, 0xffffffe5
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
nop
test eax, eax
jne 0x1400ed452
mov rcx, rbx
call fcn.14016697c
test eax, eax
je 0x1400ed3f0
mov ecx, eax
call fcn.1401664c4
nop
mov qword [rsp + 0x58], rsi
lea rcx, [rsp + 0x58]
call fcn.1400c02b0
nop
mov r8, qword [rbp + 0x158]
cmp r8, 8
jb 0x1400ed423
inc r8
mov rdx, qword [rbp + 0x140]
lea rcx, [rbp + 0x140]
call fcn.1400be810
mov qword [rbp + 0x158], 7
mov qword [rbp + 0x150], r14
mov word [rbp + 0x140], r14w
mov qword [r12], rsi
mov rcx, r12
call fcn.1400c02b0
nop
or eax, 0xffffffff
jmp 0x1400ed51a
mov rcx, rbx
call fcn.14016697c
test eax, eax
je 0x1400ed466
mov ecx, eax
call fcn.1401664c4
nop
mov qword [rsp + 0x58], rsi
lea rcx, [rsp + 0x58]
call fcn.1400c02b0
nop
mov r8, qword [rbp + 0x158]
cmp r8, 8
jb 0x1400ed499
inc r8
mov rdx, qword [rbp + 0x140]
lea rcx, [rbp + 0x140]
call fcn.1400be810
mov qword [rbp + 0x158], 7
mov qword [rbp + 0x150], r14
mov word [rbp + 0x140], r14w
mov qword [r12], rsi
mov rcx, r12
call fcn.1400c02b0
nop
mov eax, edi
jmp 0x1400ed51a
mov r8, qword [rbp + 0x158]
cmp r8, 8
jb 0x1400ed4e7
inc r8
mov rdx, qword [rbp + 0x140]
lea rcx, [rbp + 0x140]
call fcn.1400be810
mov qword [rbp + 0x158], 7
mov qword [rbp + 0x150], r14
mov word [rbp + 0x140], r14w
lea rsi, vtable.WaJson.0
mov qword [r12], rsi
mov rcx, r12
call fcn.1400c02b0
nop
mov eax, 0xffffffec
mov rcx, qword [rbp + 0x450]
xor rcx, rsp
call fcn.140164ec0
mov rbx, qword [rsp + 0x5a0]
add rsp, 0x560
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret