Function at 0x14001108c
Capabilities:
Write file on windows

Disassembly:
mov rax, rsp
mov dword [rax + 0x20], r9d
mov dword [rax + 0x18], r8d
mov qword [rax + 0x10], rdx
mov qword [rax + 8], rcx
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xa0
mov qword [rax - 0x48], 0xfffffffffffffffe
mov eax, r9d
mov r14, rcx
lea rcx, str.WmiApRpl
mov qword [rsp + 0x80], rcx
mov edi, 0x8000ffff
mov dword [rsp + 0x30], edi
xor esi, esi
cmp word [str.WmiApRpl], si
je 0x14001250d
test eax, eax
jne 0x1400110f4
cmp dword [r14 + 0x50], esi
je 0x14001250d
mov qword [rsp + 0x50], rsi
call qword [sym.imp.msvcrt.dll_wcslen]
nop dword [rax + rax]
lea ebx, [rax + 0xa]
mov eax, 2
mul rbx
mov r13, 0xffffffffffffffff
cmovo rax, r13
mov rcx, rax
call fcn.14001a244
mov r15, rax
mov qword [rsp + 0x50], rax
test rax, rax
jne 0x140011144
mov edi, 0x8007000e
mov dword [rsp + 0x30], edi
mov r15d, 1
jmp 0x140011491
mov edi, esi
lea rax, [rbx - 1]
mov r12d, 0x80070057
cmp rax, 0x7ffffffe
cmova edi, r12d
mov dword [rsp + 0x68], edi
test edi, edi
js 0x14001117c
lea r9, str.WmiApRpl
mov rdx, rbx
mov rcx, r15
call fcn.14000a170
mov edi, eax
mov dword [rsp + 0x68], eax
jmp 0x140011185
test rbx, rbx
je 0x140011185
mov word [r15], si
mov dword [rsp + 0x30], edi
test edi, edi
js 0x140011139
lea r8, [rsp + 0xe8]
mov rdx, rbx
mov rcx, r15
call fcn.14000a0fc
mov edi, eax
test eax, eax
js 0x1400111c6
mov rax, qword [rsp + 0xe8]
sub rbx, rax
lea rcx, [r15 + rax*2]
lea r9, str._new.ini
mov rdx, rbx
call fcn.14000a170
mov edi, eax
mov dword [rsp + 0x30], edi
test edi, edi
js 0x140011139
mov rdx, r15
mov rcx, r14
call fcn.14000eea0
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011139
mov edi, 0x80004005
mov dword [rsp + 0x30], edi
mov dword [rsp + 0xf0], esi
lea rcx, [0x140022b74]
call qword [sym.imp.msvcrt.dll_strlen]
nop dword [rax + rax]
mov rbx, rax
mov qword [rsp + 0x20], rsi
lea r9, [rsp + 0xf0]
mov r8d, eax
lea rdx, [0x140022b74]
mov rcx, qword [r14 + 0x68]
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_WriteFile]
nop dword [rax + rax]
test eax, eax
je 0x140011139
cmp ebx, dword [rsp + 0xf0]
jne 0x140011139
mov edi, esi
mov dword [rsp + 0x30], esi
lea r13, vtable.CGenerateComment.0
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x40], rsi
lea rcx, [rsp + 0x38]
call fcn.1400142fc
xor edx, edx
lea rcx, [rsp + 0x38]
call fcn.1400143e0
lea rdx, str.Copyright__C__2000_Microsoft_Corporation
lea rcx, [rsp + 0x38]
call fcn.1400143e0
xor edx, edx
lea rcx, [rsp + 0x38]
call fcn.1400143e0
lea rdx, str.Module_Name:
lea rcx, [rsp + 0x38]
call fcn.1400143e0
lea rdx, str.WmiApRpl
lea rcx, [rsp + 0x38]
call fcn.1400143e0
xor edx, edx
lea rcx, [rsp + 0x38]
call fcn.1400143e0
lea rdx, str.Abstract:
lea rcx, [rsp + 0x38]
call fcn.1400143e0
xor edx, edx
lea rcx, [rsp + 0x38]
call fcn.1400143e0
lea rdx, str.Describes_all_the_counters_supported_via_WMI_Hi_Performance_providers
lea rcx, [rsp + 0x38]
call fcn.1400143e0
xor edx, edx
lea rcx, [rsp + 0x38]
call fcn.1400143e0
lea rcx, [rsp + 0x38]
call fcn.140014364
nop
xor edx, edx
lea rcx, [rsp + 0x38]
call fcn.140014588
lea rdx, str._info__r_n
lea rcx, [rsp + 0x38]
call fcn.140014588
lea rdx, str.drivername
lea rcx, [rsp + 0x38]
call fcn.140014588
lea rdx, str.WmiApRpl
lea rcx, [rsp + 0x38]
call fcn.140014588
xor edx, edx
lea rcx, [rsp + 0x38]
call fcn.140014588
lea rdx, str.symbolfile
lea rcx, [rsp + 0x38]
call fcn.140014588
lea rdx, str.WmiApRpl
lea rcx, [rsp + 0x38]
call fcn.140014588
lea rdx, [0x140022b24]
lea rcx, [rsp + 0x38]
call fcn.140014588
xor edx, edx
lea rcx, [rsp + 0x38]
call fcn.140014588
xor edx, edx
lea rcx, [rsp + 0x38]
call fcn.140014588
lea rdx, str._languages__r_n
lea rcx, [rsp + 0x38]
call fcn.140014588
mov dword [rsp + 0x5c], esi
mov ebx, esi
mov r15d, 1
mov dword [rsp + 0x5c], ebx
cmp ebx, dword [r14 + 0x5c]
jae 0x140011407
mov eax, ebx
mov edx, dword [r14 + rax*4 + 0x54]
call fcn.140010a9c
mov r12, rax
test rax, rax
je 0x1400113f9
mov rdx, rax
lea rcx, [rsp + 0x38]
call fcn.140014588
mov rcx, r12
call qword [sym.imp.msvcrt.dll_void___cdecl_operator_delete___void____ptr64_]
nop dword [rax + rax]
jmp 0x140011402
mov edi, 0x8007000e
mov dword [rsp + 0x30], edi
add ebx, r15d
jmp 0x1400113bd
xor edx, edx
lea rcx, [rsp + 0x38]
call fcn.140014588
nop
jmp 0x14001142f
test edi, edi
js 0x140011458
mov rdx, qword [rsp + 0x40]
mov rcx, r14
call fcn.14000ede0
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011458
mov rcx, r14
call fcn.140010c54
mov edi, eax
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x38], r13
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop dword [rax + rax]
nop
mov r13, 0xffffffffffffffff
jmp 0x14001113f
test edi, edi
js 0x140011766
mov rax, rsi
cmp dword [r14 + 0x5c], 2
jne 0x14001166b
call fcn.14000a5c0
mov r13, rax
test rax, rax
je 0x14001165b
mov r8d, dword [r14 + 0x54]
lea rdx, str.WMI_Objects
call fcn.140010b9c
mov r12, rax
test rax, rax
je 0x140011641
mov r8d, r15d
mov rdx, rax
mov rcx, r14
call fcn.14000eadc
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x14001164a
mov r8d, r15d
lea rdx, str.NAME
mov rcx, r14
call fcn.14000eadc
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x14001164a
mov r8d, r15d
lea rdx, [0x140022588]
mov rcx, r14
call fcn.14000eadc
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x14001164a
mov edx, 0xcc
mov rcx, r13
call fcn.140006064
mov rbx, rax
test rax, rax
je 0x140011586
mov r8d, r15d
mov rdx, rax
mov rcx, r14
call fcn.14000eadc
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011575
mov r8d, r15d
lea rdx, [0x140022530]
mov rcx, r14
call fcn.14000eadc
mov edi, eax
mov dword [rsp + 0x30], eax
mov rcx, rbx
call qword [sym.imp.msvcrt.dll_void___cdecl_operator_delete___void____ptr64_]
nop dword [rax + rax]
jmp 0x14001158f
mov edi, 0x8007000e
mov dword [rsp + 0x30], edi
test edi, edi
js 0x14001164a
mov r8d, r15d
mov rdx, r12
mov rcx, r14
call fcn.14000eadc
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x14001164a
mov r8d, r15d
lea rdx, str.HELP
mov rcx, r14
call fcn.14000eadc
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x14001164a
mov r8d, r15d
lea rdx, [0x140022588]
mov rcx, r14
call fcn.14000eadc
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x14001164a
mov edx, 0xcf
mov rcx, r13
call fcn.140006064
mov rbx, rax
test rax, rax
je 0x140011641
mov r8d, r15d
mov rdx, rax
mov rcx, r14
call fcn.14000eadc
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011630
mov r8d, r15d
lea rdx, [0x140022530]
mov rcx, r14
call fcn.14000eadc
mov edi, eax
mov dword [rsp + 0x30], eax
mov rcx, rbx
call qword [sym.imp.msvcrt.dll_void___cdecl_operator_delete___void____ptr64_]
nop dword [rax + rax]
jmp 0x14001164a
mov edi, 0x8007000e
mov dword [rsp + 0x30], edi
mov rcx, r13
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_FreeLibrary]
nop dword [rax + rax]
jmp 0x140011664
mov edi, 0x80004005
mov dword [rsp + 0x30], edi
mov rax, r15
or r13, 0xffffffffffffffff
test edi, edi
js 0x140011766
mov r8d, dword [r14 + rax*4 + 0x54]
lea rdx, str.WMI_Objects
call fcn.140010b9c
mov rbx, rax
test rax, rax
je 0x140011741
mov r8d, r15d
mov rdx, rax
mov rcx, r14
call fcn.14000eadc
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011730
mov r8d, r15d
lea rdx, str.NAMEWMI_Objects
mov rcx, r14
call fcn.14000eadc
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011730
mov r8d, r15d
lea rdx, [0x140022530]
mov rcx, r14
call fcn.14000eadc
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011730
mov r8d, r15d
mov rdx, rbx
mov rcx, r14
call fcn.14000eadc
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011730
mov r8d, r15d
lea rdx, str.HELPNumber_of_WMI_High_Performance_provider_returned_by_WMI_Adapter
mov rcx, r14
call fcn.14000eadc
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011730
mov r8d, r15d
lea rdx, [0x140022530]
mov rcx, r14
call fcn.14000eadc
mov edi, eax
mov dword [rsp + 0x30], eax
mov rcx, rbx
call qword [sym.imp.msvcrt.dll_void___cdecl_operator_delete___void____ptr64_]
nop dword [rax + rax]
jmp 0x14001174a
mov edi, 0x8007000e
mov dword [rsp + 0x30], edi
test edi, edi
js 0x140011766
mov r8d, r15d
lea rdx, [0x140022530]
mov rcx, r14
call fcn.14000eadc
mov edi, eax
mov dword [rsp + 0x30], eax
mov edx, esi
mov dword [rsp + 0x34], edx
test edi, edi
js 0x1400124cb
cmp dword [rsp + 0xf8], r13d
je 0x140011a5e
mov ecx, esi
mov dword [rsp + 0xf0], ecx
cmp ecx, dword [r14 + 0x50]
jae 0x140011a5e
test edi, edi
js 0x1400124cb
mov eax, ecx
mov qword [rsp + 0x60], rax
lea rbx, [rax + rax*4]
cmp qword [r14 + rbx*8 + 0x20], rsi
je 0x140011a56
mov rbx, qword [r14 + rbx*8 + 0x18]
mov rbx, qword [rbx]
mov qword [rsp + 0x70], rbx
lea rax, [rax + rax*4]
cmp rbx, qword [r14 + rax*8 + 0x18]
je 0x140011a33
test edi, edi
js 0x140011a33
mov rax, qword [rbx + 0x28]
mov eax, dword [rax + 0x20]
mov dword [rsp + 0xe8], eax
mov r12d, esi
mov dword [rsp + 0x58], esi
cmp r12d, dword [r14 + 0x5c]
jae 0x1400119b8
test edi, edi
js 0x1400119d8
cmp r12d, eax
jae 0x1400119b8
mov rax, qword [rbx + 0x28]
mov r8d, edx
mov rdx, qword [rax + 8]
call fcn.14000e9b0
mov rdi, rax
test rax, rax
je 0x140011997
mov eax, r12d
mov r8d, dword [r14 + rax*4 + 0x54]
mov rdx, rdi
call fcn.140010b9c
mov r13, rax
mov rcx, rdi
call qword [sym.imp.msvcrt.dll_void___cdecl_operator_delete___void____ptr64_]
nop dword [rax + rax]
test r13, r13
je 0x140011997
mov r8d, r15d
mov rdx, r13
mov rcx, r14
call fcn.14000eadc
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011986
mov r8d, r15d
lea rdx, str.NAME
mov rcx, r14
call fcn.14000eadc
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011986
mov r8d, r15d
lea rdx, [0x140022588]
mov rcx, r14
call fcn.14000eadc
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011986
mov rax, qword [rbx + 0x28]
mov rax, qword [rax + 0x18]
mov ecx, r12d
mov rax, qword [rax + rcx*8]
mov r8d, r15d
mov rdx, qword [rax + 8]
mov rcx, r14
call fcn.14000eadc
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011986
mov r8d, r15d
lea rdx, [0x140022530]
mov rcx, r14
call fcn.14000eadc
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011986
mov r8d, r15d
mov rdx, r13
mov rcx, r14
call fcn.14000eadc
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011986
mov r8d, r15d
lea rdx, str.HELP
mov rcx, r14
call fcn.14000eadc
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011986
mov r8d, r15d
lea rdx, [0x140022588]
mov rcx, r14
call fcn.14000eadc
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011986
mov rax, qword [rbx + 0x28]
mov rax, qword [rax + 0x18]
mov ecx, r12d
mov rax, qword [rax + rcx*8]
mov r8d, r15d
mov rdx, qword [rax + 0x10]
mov rcx, r14
call fcn.14000eadc
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011986
mov r8d, r15d
lea rdx, [0x140022530]
mov rcx, r14
call fcn.14000eadc
mov edi, eax
mov dword [rsp + 0x30], eax
mov rcx, r13
call qword [sym.imp.msvcrt.dll_void___cdecl_operator_delete___void____ptr64_]
nop dword [rax + rax]
jmp 0x1400119a0
mov edi, 0x8007000e
mov dword [rsp + 0x30], edi
add r12d, r15d
mov dword [rsp + 0x58], r12d
mov eax, dword [rsp + 0xe8]
mov edx, dword [rsp + 0x34]
jmp 0x1400117ec
test edi, edi
js 0x1400119d8
mov r8d, r15d
lea rdx, [0x140022530]
mov rcx, r14
call fcn.14000eadc
mov edi, eax
mov dword [rsp + 0x30], eax
mov edx, dword [rsp + 0x34]
cmp byte [rbx + 0x19], sil
jne 0x1400119fe
mov rax, qword [rbx + 0x10]
cmp byte [rax + 0x19], sil
jne 0x140011a00
mov rbx, rax
mov rax, qword [rbx]
cmp byte [rax + 0x19], sil
jne 0x1400119f9
mov rbx, rax
jmp 0x1400119eb
mov qword [rsp + 0x70], rbx
jmp 0x140011a22
mov rax, qword [rbx + 8]
cmp byte [rax + 0x19], sil
jne 0x140011a1a
cmp rbx, qword [rax + 0x10]
jne 0x140011a1a
mov rbx, rax
mov qword [rsp + 0x70], rax
jmp 0x140011a00
mov rbx, rax
mov qword [rsp + 0x70], rax
add edx, r15d
mov dword [rsp + 0x34], edx
mov rax, qword [rsp + 0x60]
jmp 0x1400117c0
jmp 0x140011a4b
mov ecx, dword [rsp + 0xf0]
or r13, 0xffffffffffffffff
add ecx, r15d
jmp 0x140011784
test edi, edi
js 0x1400124cb
mov r12, rsi
cmp dword [r14 + 0x5c], 2
jne 0x140011dfa
call fcn.14000a5c0
mov r13, rax
test rax, rax
je 0x140011dea
mov r8d, dword [r14 + 0x54]
lea rdx, str.HiPerf_Classes
call fcn.140010b9c
mov r12, rax
test rax, rax
je 0x140011c16
mov r8d, r15d
mov rdx, rax
mov rcx, r14
call fcn.14000eadc
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011dd9
mov r8d, r15d
lea rdx, str.NAME
mov rcx, r14
call fcn.14000eadc
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011dd9
mov r8d, r15d
lea rdx, [0x140022588]
mov rcx, r14
call fcn.14000eadc
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011dd9
mov edx, 0xcd
mov rcx, r13
call fcn.140006064
mov rbx, rax
test rax, rax
je 0x140011b53
mov r8d, r15d
mov rdx, rax
mov rcx, r14
call fcn.14000eadc
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011b42
mov r8d, r15d
lea rdx, [0x140022530]
mov rcx, r14
call fcn.14000eadc
mov edi, eax
mov dword [rsp + 0x30], eax
mov rcx, rbx
call qword [sym.imp.msvcrt.dll_void___cdecl_operator_delete___void____ptr64_]
nop dword [rax + rax]
jmp 0x140011b5c
mov edi, 0x8007000e
mov dword [rsp + 0x30], edi
test edi, edi
js 0x140011dd9
mov r8d, r15d
mov rdx, r12
mov rcx, r14
call fcn.14000eadc
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011dd9
mov r8d, r15d
lea rdx, str.HELP
mov rcx, r14
call fcn.14000eadc
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011dd9
mov r8d, r15d
lea rdx, [0x140022588]
mov rcx, r14
call fcn.14000eadc
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011dd9
mov edx, 0xd0
mov rcx, r13
call fcn.140006064
mov rbx, rax
test rax, rax
je 0x140011c16
mov r8d, r15d
mov rdx, rax
mov rcx, r14
call fcn.14000eadc
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011c05
mov r8d, r15d
lea rdx, [0x140022530]
mov rcx, r14
call fcn.14000eadc
mov edi, eax
mov dword [rsp + 0x30], eax
mov rcx, rbx
call qword [sym.imp.msvcrt.dll_void___cdecl_operator_delete___void____ptr64_]
nop dword [rax + rax]
jmp 0x140011c1f
mov edi, 0x8007000e
mov dword [rsp + 0x30], edi
test edi, edi
js 0x140011dd9
mov r8d, r15d
lea rdx, [0x140022530]
mov rcx, r14
call fcn.14000eadc
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011dd9
mov r8d, dword [r14 + 0x54]
lea rdx, str.HiPerf_Validity
call fcn.140010b9c
mov r12, rax
test rax, rax
je 0x140011dd0
mov r8d, r15d
mov rdx, rax
mov rcx, r14
call fcn.14000eadc
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011dd9
mov r8d, r15d
lea rdx, str.NAME
mov rcx, r14
call fcn.14000eadc
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011dd9
mov r8d, r15d
lea rdx, [0x140022588]
mov rcx, r14
call fcn.14000eadc
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011dd9
mov edx, 0xce
mov rcx, r13
call fcn.140006064
mov rbx, rax
test rax, rax
je 0x140011d15
mov r8d, r15d
mov rdx, rax
mov rcx, r14
call fcn.14000eadc
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011d04
mov r8d, r15d
lea rdx, [0x140022530]
mov rcx, r14
call fcn.14000eadc
mov edi, eax
mov dword [rsp + 0x30], eax
mov rcx, rbx
call qword [sym.imp.msvcrt.dll_void___cdecl_operator_delete___void____ptr64_]
nop dword [rax + rax]
jmp 0x140011d1e
mov edi, 0x8007000e
mov dword [rsp + 0x30], edi
test edi, edi
js 0x140011dd9
mov r8d, r15d
mov rdx, r12
mov rcx, r14
call fcn.14000eadc
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011dd9
mov r8d, r15d
lea rdx, str.HELP
mov rcx, r14
call fcn.14000eadc
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011dd9
mov r8d, r15d
lea rdx, [0x140022588]
mov rcx, r14
call fcn.14000eadc
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011dd9
mov edx, 0xd1
mov rcx, r13
call fcn.140006064
mov rbx, rax
test rax, rax
je 0x140011dd0
mov r8d, r15d
mov rdx, rax
mov rcx, r14
call fcn.14000eadc
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011dbf
mov r8d, r15d
lea rdx, [0x140022530]
mov rcx, r14
call fcn.14000eadc
mov edi, eax
mov dword [rsp + 0x30], eax
mov rcx, rbx
call qword [sym.imp.msvcrt.dll_void___cdecl_operator_delete___void____ptr64_]
nop dword [rax + rax]
jmp 0x140011dd9
mov edi, 0x8007000e
mov dword [rsp + 0x30], edi
mov rcx, r13
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_FreeLibrary]
nop dword [rax + rax]
jmp 0x140011df3
mov edi, 0x80004005
mov dword [rsp + 0x30], edi
mov r12, r15
or r13, 0xffffffffffffffff
test edi, edi
js 0x1400124cb
mov r8d, dword [r14 + r12*4 + 0x54]
lea rdx, str.HiPerf_Classes
call fcn.140010b9c
mov rbx, rax
test rax, rax
je 0x140011eb0
mov r8d, r15d
mov rdx, rax
mov rcx, r14
call fcn.14000eadc
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011e9f
mov r8d, r15d
lea rdx, str.NAMEHiPerf_Classes
mov rcx, r14
call fcn.14000eadc
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011e9f
mov r8d, r15d
lea rdx, [0x140022530]
mov rcx, r14
call fcn.14000eadc
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011e9f
mov r8d, r15d
mov rdx, rbx
mov rcx, r14
call fcn.14000eadc
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011e9f
mov r8d, r15d
lea rdx, str.HELPShows_High_Performance_Classes
mov rcx, r14
call fcn.14000eadc
mov edi, eax
mov dword [rsp + 0x30], eax
mov rcx, rbx
call qword [sym.imp.msvcrt.dll_void___cdecl_operator_delete___void____ptr64_]
nop dword [rax + rax]
jmp 0x140011eb9
mov edi, 0x8007000e
mov dword [rsp + 0x30], edi
test edi, edi
js 0x1400124cb
mov r8d, r15d
lea rdx, [0x140022530]
mov rcx, r14
call fcn.14000eadc
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x1400124cb
mov r8d, dword [r14 + r12*4 + 0x54]
lea rdx, str.HiPerf_Validity
call fcn.140010b9c
mov rbx, rax
test rax, rax
je 0x140011faf
mov r8d, r15d
lea rdx, [0x140022530]
mov rcx, r14
call fcn.14000eadc
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011f9e
mov r8d, r15d
mov rdx, rbx
mov rcx, r14
call fcn.14000eadc
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011f9e
mov r8d, r15d
lea rdx, str.NAMEHiPerf_Validity
mov rcx, r14
call fcn.14000eadc
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011f9e
mov r8d, r15d
lea rdx, [0x140022530]
mov rcx, r14
call fcn.14000eadc
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011f9e
mov r8d, r15d
mov rdx, rbx
mov rcx, r14
call fcn.14000eadc
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011f9e
mov r8d, r15d
lea rdx, str.HELPShows_if_High_Performance_Classes_are_valid
mov rcx, r14
call fcn.14000eadc
mov edi, eax
mov dword [rsp + 0x30], eax
mov rcx, rbx
call qword [sym.imp.msvcrt.dll_void___cdecl_operator_delete___void____ptr64_]
nop dword [rax + rax]
jmp 0x140011fb8
mov edi, 0x8007000e
mov dword [rsp + 0x30], edi
test edi, edi
js 0x1400124cb
cmp dword [rsp + 0xf8], r13d
je 0x140012354
mov r8d, r15d
lea rdx, [0x140022530]
mov rcx, r14
call fcn.14000eadc
mov edi, eax
mov dword [rsp + 0x30], eax
mov r13d, esi
mov dword [rsp + 0x34], esi
mov ebx, esi
mov dword [rsp + 0xf0], ebx
cmp ebx, dword [r14 + 0x50]
jae 0x140012350
test edi, edi
js 0x1400124cb
mov r12d, ebx
mov qword [rsp + 0x38], r12
lea rbx, [r12 + r12*4]
cmp qword [r14 + rbx*8 + 0x20], rsi
je 0x140012341
mov r8d, r15d
lea rdx, [0x140022530]
mov rcx, r14
call fcn.14000eadc
mov edi, eax
mov dword [rsp + 0x30], eax
mov rbx, qword [r14 + rbx*8 + 0x18]
mov rbx, qword [rbx]
mov qword [rsp + 0x78], rbx
lea rax, [r12 + r12*4]
cmp rbx, qword [r14 + rax*8 + 0x18]
je 0x140012328
test edi, edi
js 0x140012328
mov edx, esi
mov dword [rsp + 0x48], edx
mov rax, qword [rbx + 0x28]
cmp edx, dword [rax + 0x38]
jae 0x1400122cc
test edi, edi
js 0x1400122cc
mov r8d, edx
mov qword [rsp + 0x60], r8
mov rax, qword [rax + 0x30]
mov rcx, qword [rax + r8*8]
cmp qword [rcx + 0x20], rsi
je 0x1400122c4
mov eax, dword [rcx + 0x28]
mov dword [rsp + 0xe8], eax
mov r12d, esi
mov dword [rsp + 0x58], esi
cmp r12d, dword [r14 + 0x5c]
jae 0x1400122a4
test edi, edi
js 0x1400122c0
cmp r12d, eax
jae 0x1400122a4
mov rax, qword [rbx + 0x28]
mov rax, qword [rax + 0x30]
mov rax, qword [rax + r8*8]
mov r8d, r13d
mov rdx, qword [rax + 8]
call fcn.14000e9b0
mov rdi, rax
test rax, rax
je 0x140012282
mov eax, r12d
mov r8d, dword [r14 + rax*4 + 0x54]
mov rdx, rdi
call fcn.140010b9c
mov r13, rax
mov rcx, rdi
call qword [sym.imp.msvcrt.dll_void___cdecl_operator_delete___void____ptr64_]
nop dword [rax + rax]
test r13, r13
je 0x140012272
mov r8d, r15d
mov rdx, r13
mov rcx, r14
call fcn.14000eadc
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140012261
mov r8d, r15d
lea rdx, str.NAME
mov rcx, r14
call fcn.14000eadc
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140012261
mov r8d, r15d
lea rdx, [0x140022588]
mov rcx, r14
call fcn.14000eadc
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140012261
mov rax, qword [rbx + 0x28]
mov rcx, qword [rax + 0x30]
mov rax, qword [rsp + 0x60]
mov rax, qword [rcx + rax*8]
mov rax, qword [rax + 0x20]
mov ecx, r12d
mov rax, qword [rax + rcx*8]
mov r8d, r15d
mov rdx, qword [rax + 8]
mov rcx, r14
call fcn.14000eadc
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140012261
mov r8d, r15d
lea rdx, [0x140022530]
mov rcx, r14
call fcn.14000eadc
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140012261
mov r8d, r15d
mov rdx, r13
mov rcx, r14
call fcn.14000eadc
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140012261
mov r8d, r15d
lea rdx, str.HELP
mov rcx, r14
call fcn.14000eadc
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140012261
mov r8d, r15d
lea rdx, [0x140022588]
mov rcx, r14
call fcn.14000eadc
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140012261
mov rax, qword [rbx + 0x28]
mov rcx, qword [rax + 0x30]
mov rax, qword [rsp + 0x60]
mov rax, qword [rcx + rax*8]
mov rax, qword [rax + 0x20]
mov ecx, r12d
mov rax, qword [rax + rcx*8]
mov r8d, r15d
mov rdx, qword [rax + 0x10]
mov rcx, r14
call fcn.14000eadc
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140012261
mov r8d, r15d
lea rdx, [0x140022530]
mov rcx, r14
call fcn.14000eadc
mov edi, eax
mov dword [rsp + 0x30], eax
mov rcx, r13
call qword [sym.imp.msvcrt.dll_void___cdecl_operator_delete___void____ptr64_]
nop dword [rax + rax]
jmp 0x14001227b
mov edi, 0x8007000e
mov dword [rsp + 0x30], edi
mov r13d, dword [rsp + 0x34]
jmp 0x14001228b
mov edi, 0x8007000e
mov dword [rsp + 0x30], edi
add r12d, r15d
mov dword [rsp + 0x58], r12d
mov r8, qword [rsp + 0x60]
mov eax, dword [rsp + 0xe8]
jmp 0x1400120a1
test edi, edi
js 0x1400122c0
mov r8d, r15d
lea rdx, [0x140022530]
mov rcx, r14
call fcn.14000eadc
mov edi, eax
mov dword [rsp + 0x30], eax
mov edx, dword [rsp + 0x48]
add edx, r15d
jmp 0x14001205d
cmp byte [rbx + 0x19], sil
jne 0x1400122f2
mov rax, qword [rbx + 0x10]
cmp byte [rax + 0x19], sil
jne 0x1400122f4
mov rbx, rax
mov rax, qword [rbx]
cmp byte [rax + 0x19], sil
jne 0x1400122ed
mov rbx, rax
jmp 0x1400122df
mov qword [rsp + 0x78], rbx
jmp 0x140012316
mov rax, qword [rbx + 8]
cmp byte [rax + 0x19], sil
jne 0x14001230e
cmp rbx, qword [rax + 0x10]
jne 0x14001230e
mov rbx, rax
mov qword [rsp + 0x78], rax
jmp 0x1400122f4
mov rbx, rax
mov qword [rsp + 0x78], rax
add r13d, r15d
mov dword [rsp + 0x34], r13d
mov r12, qword [rsp + 0x38]
jmp 0x140012044
jmp 0x140012341
mov ebx, dword [rsp + 0xf0]
add ebx, r15d
jmp 0x140011fef
or r13, 0xffffffffffffffff
test edi, edi
js 0x1400124cb
mov edx, r15d
mov rcx, r14
call fcn.14000ea64
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x1400124ab
mov qword [rsp + 0x88], rsi
mov rcx, qword [rsp + 0x80]
call qword [sym.imp.msvcrt.dll_wcslen]
nop dword [rax + rax]
lea r15d, [rax + 6]
mov eax, 2
mul r15
cmovo rax, r13
mov rcx, rax
call fcn.14001a244
mov rbx, rax
mov qword [rsp + 0x88], rax
test rax, rax
jne 0x1400123cc
mov edi, 0x8007000e
mov dword [rsp + 0x30], edi
mov r15, qword [rsp + 0x50]
jmp 0x140012491
mov edi, esi
lea rax, [r15 - 1]
cmp rax, 0x7ffffffe
mov eax, 0x80070057
cmova edi, eax
mov dword [rsp + 0x6c], edi
test edi, edi
js 0x140012403
mov r9, qword [rsp + 0x80]
mov rdx, r15
mov rcx, rbx
call fcn.14000a170
mov edi, eax
mov dword [rsp + 0x6c], eax
jmp 0x14001240b
test r15, r15
je 0x14001240b
mov word [rbx], si
mov dword [rsp + 0x30], edi
test edi, edi
js 0x1400123c2
lea r8, [rsp + 0xe8]
mov rdx, r15
mov rcx, rbx
call fcn.14000a0fc
mov edi, eax
test eax, eax
js 0x14001244c
mov rax, qword [rsp + 0xe8]
sub r15, rax
lea rcx, [rbx + rax*2]
lea r9, str..ini
mov rdx, r15
call fcn.14000a170
mov edi, eax
mov dword [rsp + 0x30], edi
test edi, edi
js 0x1400123c2
mov r8, rbx
mov r15, qword [rsp + 0x50]
mov rdx, r15
mov rcx, r14
call fcn.14000f2e4
mov edi, eax
mov dword [rsp + 0x30], eax
jmp 0x1400123c7
test rbx, rbx
je 0x1400124a5
mov rcx, rbx
call qword [sym.imp.msvcrt.dll_void___cdecl_operator_delete___void____ptr64_]
nop dword [rax + rax]
test edi, edi
jns 0x1400124f4
jmp 0x1400124b0
mov r15, qword [rsp + 0x50]
mov rax, qword [0x1400326f0]
test rax, rax
je 0x1400124e9
mov word [rax], si
mov dword [0x140031fb0], 0x1000
jmp 0x1400124e9
mov rax, qword [0x1400326f0]
test rax, rax
je 0x1400124e4
mov word [rax], si
mov dword [0x140031fb0], 0x1000
mov r15, qword [rsp + 0x50]
mov rdx, r15
mov rcx, r14
call fcn.14000f0fc
test r15, r15
je 0x14001250d
mov rcx, r15
call qword [sym.imp.msvcrt.dll_void___cdecl_operator_delete___void____ptr64_]
nop dword [rax + rax]
mov qword [rsp + 0x50], rsi
mov eax, edi
add rsp, 0xa0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret