Function at 0x140265700
Capabilities:
Write file on windows

Disassembly:
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x890
mov qword [rsp + 0x1d8], 0xfffffffffffffffe
mov rax, qword [0x14049e510]
xor rax, rsp
mov qword [rsp + 0x880], rax
mov r14, r8
mov qword [rsp + 0x90], r8
mov rbx, rdx
mov qword [rsp + 0x110], rdx
mov r12, rcx
mov qword [rsp + 0xa8], rcx
mov qword [rsp + 0x1c0], rdx
mov qword [rsp + 0x70], r8
lea rdx, [rcx + 8]
mov r8, rbx
lea rcx, [rsp + 0x50]
call fcn.1401bf110
nop
xor edi, edi
mov dword [rsp + 0x30], edi
mov rcx, qword [r12 + 0x30]
sub rcx, qword [r12 + 0x28]
movabs rax, 0xe38e38e38e38e39
imul rcx
sar rdx, 3
mov rax, rdx
shr rax, 0x3f
add rdx, rax
jne 0x140265909
mov dword [rsp + 0x30], 0x64a
call fcn.14004d8a4
mov r10, qword [rax + 8]
cmp dword [r10], 2
jbe 0x1402658a8
lea rax, [rsp + 0x30]
mov qword [rsp + 0x5d0], rax
mov qword [rsp + 0x5d8], 4
lea rax, str.DataCollection_adapter_failed_due_to_empty_list_of_collection_command
mov qword [rsp + 0x5e0], rax
mov qword [rsp + 0x5e8], 0x8c
cmp qword [rbx + 0x18], 8
jb 0x1402657fb
mov rbx, qword [rbx]
lea r13, [0x140344690]
mov rcx, r13
mov rax, rdi
or rsi, 0xffffffffffffffff
test rbx, rbx
je 0x140265820
mov rcx, rbx
mov rax, rsi
inc rax
cmp word [rbx + rax*2], di
jne 0x140265817
mov qword [rsp + 0x5f0], rcx
lea eax, [rax*2 + 2]
mov dword [rsp + 0x5f8], eax
mov dword [rsp + 0x5fc], edi
cmp qword [r14 + 0x18], 8
jb 0x140265847
mov r14, qword [r14]
mov rax, rdi
test r14, r14
je 0x14026585f
mov r13, r14
mov rax, rsi
inc rax
cmp word [r14 + rax*2], di
jne 0x140265855
mov qword [rsp + 0x600], r13
lea eax, [rax*2 + 2]
mov dword [rsp + 0x608], eax
mov dword [rsp + 0x60c], edi
lea rax, [rsp + 0x5b0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 6
xor r9d, r9d
xor r8d, r8d
lea rdx, [0x1403e4018]
mov rcx, r10
call fcn.140001158
jmp 0x1402658ac
or rsi, 0xffffffffffffffff
mov rbx, qword [rsp + 0x50]
mov eax, dword [rsp + 0x30]
mov dword [rbx + 0x80], eax
lea rcx, [rbx + 0x60]
lea rdx, [0x1404a0300]
call fcn.140064f70
mov byte [rbx + 0x58], 0xfe
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x120], xmm0
mov rbx, qword [rsp + 0x58]
test rbx, rbx
je 0x1402658ee
lock inc dword [rbx + 8]
mov rbx, qword [rsp + 0x58]
movaps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rsp + 0x120], xmm0
lea rdx, [rsp + 0x120]
jmp 0x140266d55
cmp qword [0x1404b9838], rdi
je 0x140266c39
cmp qword [0x1404b9858], rdi
je 0x140266c39
call fcn.14004d8a4
mov r10, qword [rax + 8]
mov r15d, 4
cmp dword [r10], r15d
jbe 0x140265a15
lea rax, str.DataCollection_adapter_started
mov qword [rsp + 0x790], rax
mov qword [rsp + 0x798], 0x3e
mov rcx, rbx
cmp qword [rbx + 0x18], 8
jb 0x140265963
mov rcx, qword [rbx]
lea r13, [0x140344690]
mov rdx, r13
mov rax, rdi
or rsi, 0xffffffffffffffff
test rcx, rcx
je 0x140265988
mov rdx, rcx
mov rax, rsi
inc rax
cmp word [rcx + rax*2], di
jne 0x14026597f
mov qword [rsp + 0x7a0], rdx
lea eax, [rax*2 + 2]
mov dword [rsp + 0x7a8], eax
mov dword [rsp + 0x7ac], edi
mov rcx, r14
cmp qword [r14 + 0x18], 8
jb 0x1402659b2
mov rcx, qword [r14]
mov rdx, r13
mov rax, rdi
test rcx, rcx
je 0x1402659cc
mov rdx, rcx
mov rax, rsi
inc rax
cmp word [rcx + rax*2], di
jne 0x1402659c3
mov qword [rsp + 0x7b0], rdx
lea eax, [rax*2 + 2]
mov dword [rsp + 0x7b8], eax
mov dword [rsp + 0x7bc], edi
lea rax, [rsp + 0x770]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 5
xor r9d, r9d
xor r8d, r8d
lea rdx, [0x1403e4128]
mov rcx, r10
call fcn.140001158
jmp 0x140265a20
lea r13, [0x140344690]
or rsi, 0xffffffffffffffff
mov word [rsp + 0x78], di
movdqa xmm0, xmmword [0x14038ac40]
movdqu xmmword [rsp + 0x238], xmm0
mov word [rsp + 0x228], di
lea r9, [rsp + 0x228]
lea r8, [rsp + 0x78]
mov rdx, r14
call fcn.140266eac
mov dword [rsp + 0x30], eax
test eax, eax
jns 0x140265acb
mov rbx, qword [rsp + 0x50]
mov dword [rbx + 0x80], eax
lea rcx, [rbx + 0x60]
lea rdx, [0x1404a0340]
call fcn.140064f70
mov byte [rbx + 0x58], 0xfc
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x130], xmm0
mov rbx, qword [rsp + 0x58]
test rbx, rbx
je 0x140265a99
lock inc dword [rbx + 8]
mov rbx, qword [rsp + 0x58]
movaps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rsp + 0x130], xmm0
lea rdx, [rsp + 0x130]
call fcn.140267498
mov r14d, dword [rsp + 0x30]
lea rcx, [rsp + 0x228]
call fcn.14004e0f0
jmp 0x140266d5f
mov rax, qword [rsp + 0x50]
mov byte [rax + 0x58], 2
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x140], xmm0
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x140265aee
lock inc dword [rcx + 8]
movaps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rsp + 0x140], xmm0
lea rdx, [rsp + 0x140]
call fcn.140267498
mov r8, rbx
lea rdx, [r12 + 8]
lea rcx, [rsp + 0x40]
call fcn.1401bf110
nop
call fcn.140246f5c
test al, al
je 0x140265bfa
mov eax, 0x80070142
mov dword [rsp + 0x30], eax
mov rbx, qword [rsp + 0x40]
mov dword [rbx + 0x80], eax
lea rcx, [rbx + 0x60]
lea rdx, [0x1404a03a0]
call fcn.140064f70
mov byte [rbx + 0x58], 0xfb
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x150], xmm0
mov rbx, qword [rsp + 0x48]
test rbx, rbx
je 0x140265b70
lock inc dword [rbx + 8]
mov rbx, qword [rsp + 0x48]
movaps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x150], xmm0
lea rdx, [rsp + 0x150]
call fcn.140267498
mov r14d, dword [rsp + 0x30]
test rbx, rbx
je 0x140265bd2
mov eax, esi
lock xadd dword [rbx + 8], eax
add eax, esi
jne 0x140265bd2
mov rbx, qword [rsp + 0x48]
mov rax, qword [rbx]
mov rcx, rbx
mov rax, qword [rax]
call qword [case.0x140245398.0]
mov eax, esi
lock xadd dword [rbx + 0xc], eax
add eax, esi
jne 0x140265bd2
mov rcx, qword [rsp + 0x48]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140245398.0]
nop
lea rcx, [rsp + 0x228]
call fcn.14004e0f0
nop
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x140266da0
mov eax, esi
lock xadd dword [rcx + 8], eax
jmp 0x140266d6b
lea rcx, [rsp + 0x4d0]
call fcn.140204f68
nop
mov r8d, SafeArrayGetLBound
lea rdx, str.CollectedData_
mov rcx, rax
call fcn.14005e1e8
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x2b8], xmm0
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x2a8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x2b8], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 7
mov word [rax], di
lea rcx, [rsp + 0x4d0]
call fcn.14004e0f0
movdqa xmm0, xmmword [0x14038ac40]
movdqu xmmword [rsp + 0x1f8], xmm0
mov word [rsp + 0x1e8], di
movdqu xmmword [rsp + 0x218], xmm0
mov word [rsp + 0x208], di
lea r9, [rsp + 0x208]
lea r8, [rsp + 0x1e8]
lea rdx, [rsp + 0x2a8]
call fcn.140267bd8
mov dword [rsp + 0x30], eax
test eax, eax
jns 0x140265d3b
mov rbx, qword [rsp + 0x40]
mov dword [rbx + 0x80], eax
lea rcx, [rbx + 0x60]
lea rdx, [0x1404a03c0]
call fcn.140064f70
mov byte [rbx + 0x58], 0xfe
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x160], xmm0
mov rbx, qword [rsp + 0x48]
test rbx, rbx
je 0x140265ced
lock inc dword [rbx + 8]
mov rbx, qword [rsp + 0x48]
movaps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x160], xmm0
lea rdx, [rsp + 0x160]
call fcn.140267498
mov r14d, dword [rsp + 0x30]
lea rcx, [rsp + 0x208]
call fcn.14004e0f0
nop
lea rcx, [rsp + 0x1e8]
call fcn.14004e0f0
nop
lea rcx, [rsp + 0x2a8]
call fcn.14004e0f0
jmp 0x140265b90
mov rcx, r12
call fcn.140268234
mov r8, qword [rsp + 0x40]
mov byte [r8 + 0x58], 3
mov dword [rsp + 0x64], edi
mov dword [rsp + 0x68], edi
mov rcx, qword [r12 + 0x30]
sub rcx, qword [r12 + 0x28]
movabs r10, 0xe38e38e38e38e39
mov rax, r10
imul rcx
mov r9, rdx
sar r9, 3
mov rcx, r9
shr rcx, 0x3f
add r9, rcx
add r8, 0xd8
mov qword [rsp + 0xb0], r8
mov rcx, qword [r8 + 0x10]
sub rcx, qword [r8]
mov rax, r10
imul rcx
sar rdx, 3
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp r9, rdx
jbe 0x140265dcd
movabs rax, 0x1c71c71c71c71c7
cmp r9, rax
ja 0x140266dc6
mov rdx, r9
mov rcx, r8
call fcn.14026b0d4
lea rcx, [rsp + 0x3e0]
call fcn.1402686fc
nop
xorps xmm0, xmm0
movdqu xmmword [rsp + 0xf8], xmm0
mov qword [rsp + 0x108], rdi
movdqu xmmword [rsp + 0xe0], xmm0
mov qword [rsp + 0xf0], rdi
mov qword [rsp + 0xa0], rdi
lea rax, [rsp + 0xa0]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0xe0]
lea r8, [rsp + 0xf8]
lea rdx, [rsp + 0x1e8]
lea rcx, [rsp + 0x3e0]
call fcn.140268938
movdqa xmm0, xmmword [0x14038ac40]
movdqu xmmword [rsp + 0x298], xmm0
mov word [rsp + 0x288], di
lea rdx, [rsp + 0x288]
call fcn.140269f40
mov r12, qword [r12 + 0x28]
mov qword [rsp + 0x80], r12
mov rax, qword [rsp + 0xa8]
mov rax, qword [rax + 0x30]
mov qword [rsp + 0xb8], rax
cmp r12, rax
je 0x1402661a8
lea r15, [r12 + 0x20]
mov qword [rsp + 0xc0], r15
mov rbx, qword [rsp + 0xa8]
mov r13, qword [rsp + 0xb0]
xorps xmm0, xmm0
movdqu xmmword [rsp + 0xc8], xmm0
mov qword [rsp + 0xd8], rdi
lea rax, [rsp + 0xc8]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0xa0]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0xe0]
lea r8, [rsp + 0xf8]
mov rdx, r12
mov rcx, rbx
call fcn.140268dd8
mov r14, qword [rsp + 0xd0]
mov r12, qword [rsp + 0xc8]
cmp byte [r15 + 0x68], 1
jne 0x140265ff8
mov rax, r14
sub rax, r12
cmp rax, 0x40
jae 0x140265ff8
mov r12, qword [rsp + 0x80]
mov rdx, r12
lea rcx, [rsp + 0x440]
call fcn.140087b3c
nop
mov rdx, r15
lea rcx, [rsp + 0x460]
call fcn.140087b3c
nop
mov byte [rsp + 0x480], 0xfe
lea rdx, [0x1404a0380]
lea rcx, [rsp + 0x488]
call fcn.14004cf4c
mov dword [rsp + 0x4a8], 0x8007000d
mov qword [rsp + 0x4c0], rdi
mov qword [rsp + 0x4c8], 7
mov word [rsp + 0x4b0], di
lea r8, [rsp + 0x440]
mov rdx, r13
call fcn.140266e00
inc dword [rsp + 0x68]
inc dword [rsp + 0x64]
mov qword [rsp + 0x20], r15
mov r9, r12
lea r8, [rsp + 0x440]
lea rdx, [rsp + 0x288]
call fcn.140269ce4
nop
lea rcx, [rsp + 0x4b0]
call fcn.14004e0f0
lea rcx, [rsp + 0x488]
call fcn.14004e0f0
lea rcx, [rsp + 0x460]
call fcn.1400550a8
lea rcx, [rsp + 0x440]
call fcn.1400550a8
nop
jmp 0x140266155
cmp r12, r14
je 0x14026614d
mov r15, qword [rsp + 0x80]
mov rbx, qword [rsp + 0xb0]
mov qword [rsp + 0x360], rdi
mov eax, SafeArrayGetLBound
mov qword [rsp + 0x368], rax
mov byte [rsp + 0x350], dil
mov qword [rsp + 0x380], rdi
mov qword [rsp + 0x388], rax
mov byte [rsp + 0x370], dil
mov byte [rsp + 0x390], sil
mov qword [rsp + 0x3a8], rdi
mov eax, 7
mov qword [rsp + 0x3b0], rax
mov word [rsp + 0x398], di
mov dword [rsp + 0x3b8], edi
mov qword [rsp + 0x3d0], rdi
mov qword [rsp + 0x3d8], rax
mov word [rsp + 0x3c0], di
lea r9, [r12 + 0x20]
lea rax, [rsp + 0x350]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x1e8]
mov qword [rsp + 0x20], rax
mov r8, r12
mov rdx, r15
call fcn.140269030
inc dword [rsp + 0x68]
cmp byte [rsp + 0x390], 3
je 0x1402660d6
inc dword [rsp + 0x64]
lea r8, [rsp + 0x350]
mov rdx, rbx
call fcn.140266e00
mov qword [rsp + 0x20], r12
mov r9, r15
lea r8, [rsp + 0x350]
lea rdx, [rsp + 0x288]
call fcn.140269ce4
nop
lea rcx, [rsp + 0x3c0]
call fcn.14004e0f0
lea rcx, [rsp + 0x398]
call fcn.14004e0f0
lea rcx, [rsp + 0x370]
call fcn.1400550a8
lea rcx, [rsp + 0x350]
call fcn.1400550a8
add r12, 0x40
cmp r12, r14
jne 0x140266011
mov r15, qword [rsp + 0xc0]
mov rbx, qword [rsp + 0xa8]
mov r13, qword [rsp + 0xb0]
mov r12, qword [rsp + 0x80]
lea rcx, [rsp + 0xc8]
call fcn.14005b9c4
mov ecx, 0x90
add r12, rcx
mov qword [rsp + 0x80], r12
add r15, rcx
mov qword [rsp + 0xc0], r15
cmp r12, qword [rsp + 0xb8]
jne 0x140265ea7
mov rbx, qword [rsp + 0x110]
mov r14, qword [rsp + 0x90]
mov r15d, 4
lea r13, [0x140344690]
mov eax, dword [rsp + 0x64]
test eax, eax
je 0x1402663a5
cmp eax, dword [rsp + 0x68]
jne 0x14026631a
mov eax, 0x80004005
mov dword [rsp + 0x30], eax
mov rbx, qword [rsp + 0x40]
mov dword [rbx + 0x80], eax
lea rcx, [rbx + 0x60]
lea rdx, [0x1404a0380]
call fcn.140064f70
mov byte [rbx + 0x58], 0xfe
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x170], xmm0
mov rbx, qword [rsp + 0x48]
test rbx, rbx
je 0x140266205
lock inc dword [rbx + 8]
mov rbx, qword [rsp + 0x48]
movaps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x170], xmm0
lea rdx, [rsp + 0x170]
call fcn.140267498
call fcn.14004d8a4
mov rcx, qword [rax + 8]
cmp dword [rcx], 2
jbe 0x1402662bf
lea rax, [rsp + 0x30]
mov qword [rsp + 0x630], rax
mov qword [rsp + 0x638], 4
lea rax, str.all_commands_failed_____return
mov qword [rsp + 0x640], rax
mov qword [rsp + 0x648], 0x1f
lea rax, [rsp + 0x64]
mov qword [rsp + 0x650], rax
mov qword [rsp + 0x658], 4
lea rax, [rsp + 0x68]
mov qword [rsp + 0x660], rax
mov qword [rsp + 0x668], 4
lea rax, [rsp + 0x610]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 6
xor r9d, r9d
xor r8d, r8d
lea rdx, [0x1403e408e]
call fcn.140001158
mov r14d, dword [rsp + 0x30]
lea rcx, [rsp + 0x288]
call fcn.14004e0f0
nop
lea rcx, [rsp + 0xe0]
call fcn.1400593e8
nop
lea rcx, [rsp + 0xf8]
call fcn.1400593e8
nop
lea rcx, [rsp + 0x420]
call fcn.14004e0f0
lea rcx, [rsp + 0x400]
call fcn.14004e0f0
lea rcx, [rsp + 0x3e0]
call fcn.14004e0f0
jmp 0x140265d0d
call fcn.14004d8a4
mov rcx, qword [rax + 8]
cmp dword [rcx], 3
jbe 0x14026639c
lea rax, str.part_of_commands_failed_____continue
mov qword [rsp + 0x6f0], rax
mov qword [rsp + 0x6f8], 0x25
lea rax, [rsp + 0x64]
mov qword [rsp + 0x700], rax
mov qword [rsp + 0x708], 4
lea rax, [rsp + 0x68]
mov qword [rsp + 0x710], rax
mov qword [rsp + 0x718], 4
lea rax, [rsp + 0x6d0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 5
xor r9d, r9d
xor r8d, r8d
lea rdx, [0x1403e3f75]
call fcn.140001158
mov rax, qword [rsp + 0x40]
mov byte [rax + 0x58], r15b
lea r8, [0x140347380]
lea rdx, [rsp + 0x1e8]
lea rcx, [rsp + 0x590]
call fcn.14005d2c0
nop
lea r12, [0x1404a02e0]
mov rdx, r12
cmp qword [reloc.OLEAUT32.dll_VariantInit], 8
cmovae rdx, qword [0x1404a02e0]
mov r8, qword [0x1404a02f0]
mov rcx, rax
call fcn.14005e1e8
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x338], xmm0
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x328], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x338], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 7
mov word [rax], di
lea rcx, [rsp + 0x590]
call fcn.14004e0f0
mov qword [rsp + 0x88], rdi
lea rdx, [rsp + 0x88]
lea rcx, [rsp + 0x328]
call fcn.14027578c
mov rcx, qword [rsp + 0x88]
cmp rcx, rsi
je 0x14026660f
lea rdx, [0x140376300]
lea rcx, [rsp + 0x2e8]
call fcn.1400673e4
nop
lea rdx, [rsp + 0x288]
lea rcx, [rsp + 0x4f0]
call fcn.140087b3c
nop
lea r8, [rsp + 0x2e8]
cmp qword [rsp + 0x300], 0x10
cmovae r8, qword [rsp + 0x2e8]
mov r9, qword [rsp + 0x2f8]
mov rcx, rax
call fcn.1400879c8
mov qword [rsp + 0x258], rdi
mov qword [rsp + 0x260], rdi
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x248], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x258], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], SafeArrayUnlock
mov byte [rax], dil
lea rcx, [rsp + 0x4f0]
call fcn.1400550a8
mov dword [rsp + 0x7c], edi
mov rax, qword [rsp + 0x258]
mov qword [rsp + 0x90], rax
lea rdx, [rsp + 0x248]
cmp qword [rsp + 0x260], 0x10
cmovae rdx, qword [rsp + 0x248]
mov qword [rsp + 0x20], rdi
lea r9, [rsp + 0x7c]
mov r8d, eax
mov rcx, qword [rsp + 0x88]
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x14026654f
mov rax, qword [rsp + 0x90]
cmp dword [rsp + 0x7c], eax
je 0x1402665ec
call fcn.14004d8a4
mov r10, qword [rax + 8]
cmp dword [r10], 3
jbe 0x1402665ec
lea rax, str.Failed_to_write_content_to_file
mov qword [rsp + 0x7e0], rax
mov qword [rsp + 0x7e8], 0x20
cmp qword [reloc.OLEAUT32.dll_VariantInit], 8
cmovae r12, qword [0x1404a02e0]
mov rcx, r13
mov rax, rdi
test r12, r12
je 0x1402665a8
mov rcx, r12
mov rax, rsi
inc rax
cmp word [r12 + rax*2], di
jne 0x14026659e
mov qword [rsp + 0x7f0], rcx
lea eax, [rax*2 + 2]
mov dword [rsp + 0x7f8], eax
mov dword [rsp + 0x7fc], edi
lea rax, [rsp + 0x7c0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
lea rdx, [0x1403e3fd1]
mov rcx, r10
call fcn.140001158
lea rcx, [rsp + 0x248]
call fcn.1400550a8
nop
lea rcx, [rsp + 0x2e8]
call fcn.1400550a8
mov rcx, qword [rsp + 0x88]
lea rax, [rcx - 1]
cmp rax, 0xfffffffffffffffd
ja 0x140266620
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
nop
lea rcx, [rsp + 0x328]
call fcn.14004e0f0
lea rdx, [rsp + 0x208]
lea rcx, [rsp + 0x1e8]
call fcn.1401f9b44
mov dword [rsp + 0x30], eax
test eax, eax
jns 0x14026666e
lea rcx, [rsp + 0x40]
mov qword [rsp + 0x20], rcx
mov r9b, 0xfe
lea r8, [0x1404a0460]
mov edx, eax
call fcn.140265224
mov ebx, dword [rsp + 0x30]
jmp 0x1402668ff
lea rcx, [rsp + 0x510]
call fcn.140204f68
nop
lea r8, str.CompressedCollectedData_
mov rdx, rax
lea rcx, [rsp + 0x2c8]
call fcn.14005d25c
nop
lea rcx, [rsp + 0x510]
call fcn.14004e0f0
mov dl, 1
lea rcx, [rsp + 0x2c8]
call fcn.140274e38
mov dword [rsp + 0x30], eax
test eax, eax
jns 0x1402666dc
lea rcx, [rsp + 0x40]
mov qword [rsp + 0x20], rcx
mov r9b, 0xfe
lea r8, [0x1404a0480]
mov edx, eax
call fcn.140265224
mov ebx, dword [rsp + 0x30]
jmp 0x1402668f1
movdqa xmm0, xmmword [0x14038ac40]
movdqu xmmword [rsp + 0x278], xmm0
mov word [rsp + 0x268], di
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x180], xmm0
mov r12, qword [rsp + 0x48]
test r12, r12
je 0x140266716
lock inc dword [r12 + 8]
mov r12, qword [rsp + 0x48]
movaps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x180], xmm0
lea rax, [rsp + 0x268]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x180]
lea r8, [rsp + 0x2c8]
lea rdx, [rsp + 0x208]
call fcn.1402697c4
mov dword [rsp + 0x30], eax
test eax, eax
jns 0x14026681f
lea rcx, [rsp + 0x268]
call fcn.1401f7d58
test eax, eax
je 0x1402667e4
call fcn.14004d8a4
mov rbx, qword [rax + 8]
cmp dword [rbx], 2
jbe 0x1402667e4
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov dword [rsp + 0x98], eax
lea rax, [rsp + 0x98]
mov qword [rsp + 0x820], rax
mov qword [rsp + 0x828], 4
lea rax, str.Failed_to_delete_data_collection_zip_after_AdjustPackageSize_has_failed
mov qword [rsp + 0x830], rax
mov qword [rsp + 0x838], 0x90
lea rax, [rsp + 0x800]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
lea rdx, [0x1403e3ea5]
mov rcx, rbx
call fcn.140001158
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x190], xmm0
test r12, r12
je 0x1402667fb
lock inc dword [r12 + 8]
movaps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x190], xmm0
lea rdx, [rsp + 0x190]
call fcn.140267498
mov ebx, dword [rsp + 0x30]
jmp 0x1402668e3
lea rdx, [rsp + 0x1e8]
call fcn.140268130
lea rdx, [rsp + 0x208]
call fcn.140268130
lea rcx, [rsp + 0x550]
call fcn.140248124
nop
lea rcx, [rsp + 0x530]
call fcn.1402d55e4
nop
mov r9, rax
lea r8, [rsp + 0x228]
lea rdx, [rsp + 0x268]
lea rcx, [rsp + 0x550]
call fcn.140247170
mov dword [rsp + 0x30], eax
lea rcx, [rsp + 0x530]
call fcn.14004e0f0
nop
jmp 0x1402668ac
mov edx, dword [rsp + 0x30]
test edx, edx
jns 0x1402669a5
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
mov r9b, 0xfe
lea r8, [0x1404a04a0]
call fcn.140265224
mov ebx, dword [rsp + 0x30]
lea rcx, [rsp + 0x550]
call fcn.14024714c
nop
lea rcx, [rsp + 0x268]
call fcn.14004e0f0
nop
lea rcx, [rsp + 0x2c8]
call fcn.14004e0f0
nop
lea rcx, [rsp + 0x288]
call fcn.14004e0f0
nop
lea rcx, [rsp + 0xe0]
call fcn.1400593e8
nop
lea rcx, [rsp + 0xf8]
call fcn.1400593e8
nop
lea rcx, [rsp + 0x420]
call fcn.14004e0f0
lea rcx, [rsp + 0x400]
call fcn.14004e0f0
lea rcx, [rsp + 0x3e0]
call fcn.14004e0f0
nop
lea rcx, [rsp + 0x208]
call fcn.14004e0f0
nop
lea rcx, [rsp + 0x1e8]
call fcn.14004e0f0
nop
lea rcx, [rsp + 0x2a8]
call fcn.14004e0f0
nop
lea rcx, [rsp + 0x40]
call fcn.14004c5f0
nop
lea rcx, [rsp + 0x228]
call fcn.14004e0f0
nop
lea rcx, [rsp + 0x50]
call fcn.14004c5f0
mov eax, ebx
jmp 0x140266da3
lea rcx, [rsp + 0x268]
call fcn.1401f7d58
test eax, eax
je 0x140266a3a
call fcn.14004d8a4
mov rax, qword [rax + 8]
mov qword [rsp + 0x70], rax
cmp dword [rax], 2
jbe 0x140266a3a
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov dword [rsp + 0x9c], eax
lea rax, [rsp + 0x9c]
mov qword [rsp + 0x860], rax
mov qword [rsp + 0x868], 4
lea rax, str.Failed_to_delete_data_collection_zip_after_successful_uploading
mov qword [rsp + 0x870], rax
mov qword [rsp + 0x878], 0x80
lea rax, [rsp + 0x840]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
lea rdx, [0x1403e3ea5]
mov rcx, qword [rsp + 0x70]
call fcn.140001158
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x1a0], xmm0
test r12, r12
je 0x140266a51
lock inc dword [r12 + 8]
movaps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x1a0], xmm0
lea rdx, [rsp + 0x1a0]
call fcn.140267498
call fcn.14004d8a4
mov r10, qword [rax + 8]
cmp dword [r10], r15d
jbe 0x140266b69
lea rax, str.DataCollection_adapter_finished
mov qword [rsp + 0x690], rax
mov qword [rsp + 0x698], 0x40
cmp qword [rbx + 0x18], 8
jb 0x140266aa3
mov rbx, qword [rbx]
mov rcx, r13
mov rax, rdi
test rbx, rbx
je 0x140266abd
mov rcx, rbx
mov rax, rsi
inc rax
cmp word [rbx + rax*2], di
jne 0x140266ab4
mov qword [rsp + 0x6a0], rcx
lea eax, [rax*2 + 2]
mov dword [rsp + 0x6a8], eax
mov dword [rsp + 0x6ac], edi
cmp qword [r14 + 0x18], 8
jb 0x140266ae4
mov r14, qword [r14]
mov rax, rdi
test r14, r14
je 0x140266afc
mov r13, r14
mov rax, rsi
inc rax
cmp word [r14 + rax*2], di
jne 0x140266af2
mov qword [rsp + 0x6b0], r13
lea eax, [rax*2 + 2]
mov dword [rsp + 0x6b8], eax
mov dword [rsp + 0x6bc], edi
mov rax, qword [rsp + 0x40]
mov al, byte [rax + 0x58]
mov byte [rsp + 0x60], al
lea rax, [rsp + 0x60]
mov qword [rsp + 0x6c0], rax
mov qword [rsp + 0x6c8], 1
lea rax, [rsp + 0x670]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 6
xor r9d, r9d
xor r8d, r8d
lea rdx, [0x1403e3ed8]
mov rcx, r10
call fcn.140001158
nop
lea rcx, [rsp + 0x550]
call fcn.14024714c
nop
lea rcx, [rsp + 0x268]
call fcn.14004e0f0
nop
lea rcx, [rsp + 0x2c8]
call fcn.14004e0f0
nop
lea rcx, [rsp + 0x288]
call fcn.14004e0f0
nop
lea rcx, [rsp + 0xe0]
call fcn.1400593e8
nop
lea rcx, [rsp + 0xf8]
call fcn.1400593e8
nop
lea rcx, [rsp + 0x420]
call fcn.14004e0f0
lea rcx, [rsp + 0x400]
call fcn.14004e0f0
lea rcx, [rsp + 0x3e0]
call fcn.14004e0f0
nop
lea rcx, [rsp + 0x208]
call fcn.14004e0f0
nop
lea rcx, [rsp + 0x1e8]
call fcn.14004e0f0
nop
lea rcx, [rsp + 0x2a8]
call fcn.14004e0f0
nop
lea rcx, [rsp + 0x40]
call fcn.14004c5f0
nop
lea rcx, [rsp + 0x228]
call fcn.14004e0f0
nop
lea rcx, [rsp + 0x50]
call fcn.14004c5f0
xor eax, eax
jmp 0x140266da3
mov dword [rsp + 0x30], 0x80070490
call fcn.14004d8a4
mov rcx, qword [rax + 8]
cmp dword [rcx], 2
jbe 0x140266cf9
lea rax, [rsp + 0x30]
mov qword [rsp + 0x740], rax
mov qword [rsp + 0x748], 4
lea rax, str.DataCollection_adapter_failed_due_to_emptiness_of_windows_or_and_profiles_folder_values
mov qword [rsp + 0x750], rax
mov qword [rsp + 0x758], 0xb0
cmp qword [rbx + 0x18], 8
jb 0x140266c91
mov rbx, qword [rbx]
lea r13, [0x140344690]
mov rax, rdi
or rsi, 0xffffffffffffffff
test rbx, rbx
je 0x140266cb3
mov r13, rbx
mov rax, rsi
inc rax
cmp word [rbx + rax*2], di
jne 0x140266caa
mov qword [rsp + 0x760], r13
lea eax, [rax*2 + 2]
mov dword [rsp + 0x768], eax
mov dword [rsp + 0x76c], edi
lea rax, [rsp + 0x720]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 5
xor r9d, r9d
xor r8d, r8d
lea rdx, [0x1403e4059]
call fcn.140001158
jmp 0x140266cfd
or rsi, 0xffffffffffffffff
mov rbx, qword [rsp + 0x50]
mov eax, dword [rsp + 0x30]
mov dword [rbx + 0x80], eax
lea rcx, [rbx + 0x60]
lea rdx, [0x1404a0320]
call fcn.140064f70
mov byte [rbx + 0x58], 0xfe
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x1b0], xmm0
mov rbx, qword [rsp + 0x58]
test rbx, rbx
je 0x140266d3f
lock inc dword [rbx + 8]
mov rbx, qword [rsp + 0x58]
movaps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rsp + 0x1b0], xmm0
lea rdx, [rsp + 0x1b0]
call fcn.140267498
mov r14d, dword [rsp + 0x30]
test rbx, rbx
je 0x140266da0
mov eax, esi
lock xadd dword [rbx + 8], eax
add eax, esi
jne 0x140266da0
mov rbx, qword [rsp + 0x58]
mov rax, qword [rbx]
mov rcx, rbx
mov rax, qword [rax]
call qword [case.0x140245398.0]
mov ecx, esi
lock xadd dword [rbx + 0xc], ecx
add ecx, esi
jne 0x140266da0
mov rcx, qword [rsp + 0x58]
mov rdx, qword [rcx]
mov rax, qword [rdx + 8]
call qword [case.0x140245398.0]
mov eax, r14d
mov rcx, qword [rsp + 0x880]
xor rcx, rsp
call fcn.1402dfdb0
add rsp, 0x890
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
call fcn.14005510c
nop
push rbx
sub rsp, 0x20
mov rbx, rcx
add rcx, 0x70
call fcn.14004e0f0
lea rcx, [rbx + 0x48]
call fcn.14004e0f0
lea rcx, [rbx + 0x20]
call fcn.1400550a8
mov rcx, rbx
add rsp, 0x20
pop rbx
jmp fcn.1400550a8