Function at 0x140010d74
Capabilities:
Write file on windows

Disassembly:
mov rax, rsp
mov dword [rax + 0x20], r9d
mov dword [rax + 0x18], r8d
mov qword [rax + 0x10], rdx
mov qword [rax + 8], rcx
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xa0
mov qword [rax - 0x40], 0xfffffffffffffffe
mov eax, r9d
mov r14, rcx
lea r13, str.WmiApRpl
mov qword [rsp + 0x80], r13
mov edi, 0x8000ffff
mov dword [rsp + 0x30], edi
xor esi, esi
cmp word [str.WmiApRpl], si
je 0x140012101
test eax, eax
jne 0x140010ddb
cmp dword [rcx + 0x60], esi
je 0x140012101
mov qword [rsp + 0x50], rsi
mov rcx, r13
call qword [sym.imp.msvcrt.dll_wcslen]
lea ebx, [rax + 0xa]
mov eax, 2
mul rbx
mov r12, 0xffffffffffffffff
cmovo rax, r12
mov rcx, rax
call fcn.140019928
mov r15, rax
mov qword [rsp + 0x50], rax
test rax, rax
jne 0x140010e28
mov edi, 0x8007000e
mov dword [rsp + 0x30], edi
mov r15d, 1
jmp 0x140011150
mov edi, esi
lea rax, [rbx - 1]
mov r11d, 0x80070057
cmp rax, 0x7ffffffe
cmova edi, r11d
mov dword [rsp + 0x78], edi
test edi, edi
js 0x140010e5c
mov r9, r13
mov rdx, rbx
mov rcx, r15
call fcn.140009a30
mov edi, eax
mov dword [rsp + 0x78], eax
jmp 0x140010e65
test rbx, rbx
je 0x140010e65
mov word [r15], si
mov dword [rsp + 0x30], edi
test edi, edi
js 0x140010e1d
lea r8, [rsp + 0xe8]
mov rdx, rbx
mov rcx, r15
call fcn.1400099bc
mov edi, eax
test eax, eax
js 0x140010ea6
mov rax, qword [rsp + 0xe8]
sub rbx, rax
lea rcx, [r15 + rax*2]
lea r9, str._new.ini
mov rdx, rbx
call fcn.140009a30
mov edi, eax
mov dword [rsp + 0x30], edi
test edi, edi
js 0x140010e1d
mov rdx, r15
mov rcx, r14
call fcn.14000edc0
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140010e1d
mov edi, 0x80004005
mov dword [rsp + 0x30], edi
mov dword [rsp + 0xf0], esi
lea rcx, [0x140020444]
call qword [sym.imp.msvcrt.dll_strlen]
mov rbx, rax
mov qword [rsp + 0x20], rsi
lea r9, [rsp + 0xf0]
mov r8d, eax
lea rdx, [0x140020444]
mov rcx, qword [r14 + 0x78]
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_WriteFile]
test eax, eax
je 0x140010e1d
cmp ebx, dword [rsp + 0xf0]
jne 0x140010e1d
mov edi, esi
mov dword [rsp + 0x30], esi
lea r13, vtable.CGenerateComment.0
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x40], rsi
lea rcx, [rsp + 0x38]
call fcn.140013cc8
xor edx, edx
lea rcx, [rsp + 0x38]
call fcn.140013d94
lea rdx, str.Copyright__C__2000_Microsoft_Corporation
lea rcx, [rsp + 0x38]
call fcn.140013d94
xor edx, edx
lea rcx, [rsp + 0x38]
call fcn.140013d94
lea rdx, str.Module_Name:
lea rcx, [rsp + 0x38]
call fcn.140013d94
lea rbx, str.WmiApRpl
mov rdx, rbx
lea rcx, [rsp + 0x38]
call fcn.140013d94
xor edx, edx
lea rcx, [rsp + 0x38]
call fcn.140013d94
lea rdx, str.Abstract:
lea rcx, [rsp + 0x38]
call fcn.140013d94
xor edx, edx
lea rcx, [rsp + 0x38]
call fcn.140013d94
lea rdx, str.Describes_all_the_counters_supported_via_WMI_Hi_Performance_providers
lea rcx, [rsp + 0x38]
call fcn.140013d94
xor edx, edx
lea rcx, [rsp + 0x38]
call fcn.140013d94
lea rcx, [rsp + 0x38]
call fcn.140013d24
nop
xor edx, edx
lea rcx, [rsp + 0x38]
call fcn.140013f00
lea rdx, str._info__r_n
lea rcx, [rsp + 0x38]
call fcn.140013f00
lea rdx, str.drivername
lea rcx, [rsp + 0x38]
call fcn.140013f00
mov rdx, rbx
lea rcx, [rsp + 0x38]
call fcn.140013f00
xor edx, edx
lea rcx, [rsp + 0x38]
call fcn.140013f00
lea rdx, str.symbolfile
lea rcx, [rsp + 0x38]
call fcn.140013f00
mov rdx, rbx
lea rcx, [rsp + 0x38]
call fcn.140013f00
lea rdx, [0x1400203f4]
lea rcx, [rsp + 0x38]
call fcn.140013f00
xor edx, edx
lea rcx, [rsp + 0x38]
call fcn.140013f00
xor edx, edx
lea rcx, [rsp + 0x38]
call fcn.140013f00
lea rdx, str._languages__r_n
lea rcx, [rsp + 0x38]
call fcn.140013f00
mov dword [rsp + 0x68], esi
mov ebx, esi
mov r15d, 1
mov dword [rsp + 0x68], ebx
cmp ebx, dword [r14 + 0x6c]
jae 0x1400110cf
mov eax, ebx
mov edx, dword [r14 + rax*4 + 0x64]
call fcn.1400107e0
mov r12, rax
test rax, rax
je 0x1400110c1
mov rdx, rax
lea rcx, [rsp + 0x38]
call fcn.140013f00
mov rcx, r12
call sub.msvcrt.dll_free
jmp 0x1400110ca
mov edi, 0x8007000e
mov dword [rsp + 0x30], edi
add ebx, r15d
jmp 0x14001108c
xor edx, edx
lea rcx, [rsp + 0x38]
call fcn.140013f00
nop
jmp 0x1400110f7
or r12, 0xffffffffffffffff
test edi, edi
js 0x140011124
mov rdx, qword [rsp + 0x40]
mov rcx, r14
call fcn.14000ed14
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011124
mov rcx, r14
call fcn.140010984
mov edi, eax
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x38], r13
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
jmp 0x140010e23
test edi, edi
js 0x14001140a
mov rax, rsi
cmp dword [r14 + 0x6c], 2
jne 0x140011316
call fcn.140009e40
mov r13, rax
test rax, rax
je 0x14001130a
mov r8d, dword [r14 + 0x64]
lea rdx, str.WMI_Objects
call fcn.1400108d0
mov r12, rax
test rax, rax
je 0x1400112f2
mov r8d, r15d
mov rdx, rax
mov rcx, r14
call fcn.14000ea40
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x1400112fb
mov r8d, r15d
lea rdx, str.NAME
mov rcx, r14
call fcn.14000ea40
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x1400112fb
mov r8d, r15d
lea rdx, [0x14001fe58]
mov rcx, r14
call fcn.14000ea40
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x1400112fb
mov edx, 0xcc
mov rcx, r13
call fcn.140005c38
mov rbx, rax
test rax, rax
je 0x14001123e
mov r8d, r15d
mov rdx, rax
mov rcx, r14
call fcn.14000ea40
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011234
mov r8d, r15d
lea rdx, [0x14001fe00]
mov rcx, r14
call fcn.14000ea40
mov edi, eax
mov dword [rsp + 0x30], eax
mov rcx, rbx
call sub.msvcrt.dll_free
jmp 0x140011247
mov edi, 0x8007000e
mov dword [rsp + 0x30], edi
test edi, edi
js 0x1400112fb
mov r8d, r15d
mov rdx, r12
mov rcx, r14
call fcn.14000ea40
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x1400112fb
mov r8d, r15d
lea rdx, str.HELP
mov rcx, r14
call fcn.14000ea40
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x1400112fb
mov r8d, r15d
lea rdx, [0x14001fe58]
mov rcx, r14
call fcn.14000ea40
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x1400112fb
mov edx, 0xcf
mov rcx, r13
call fcn.140005c38
mov rbx, rax
test rax, rax
je 0x1400112f2
mov r8d, r15d
mov rdx, rax
mov rcx, r14
call fcn.14000ea40
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x1400112e8
mov r8d, r15d
lea rdx, [0x14001fe00]
mov rcx, r14
call fcn.14000ea40
mov edi, eax
mov dword [rsp + 0x30], eax
mov rcx, rbx
call sub.msvcrt.dll_free
jmp 0x1400112fb
mov edi, 0x8007000e
mov dword [rsp + 0x30], edi
mov rcx, r13
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_FreeLibrary]
or r12, 0xffffffffffffffff
jmp 0x140011313
mov edi, 0x80004005
mov dword [rsp + 0x30], edi
mov rax, r15
test edi, edi
js 0x14001140a
mov r8d, dword [r14 + rax*4 + 0x64]
lea rdx, str.WMI_Objects
call fcn.1400108d0
mov rbx, rax
test rax, rax
je 0x1400113e5
mov r8d, r15d
mov rdx, rax
mov rcx, r14
call fcn.14000ea40
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x1400113db
mov r8d, r15d
lea rdx, str.NAMEWMI_Objects
mov rcx, r14
call fcn.14000ea40
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x1400113db
mov r8d, r15d
lea rdx, [0x14001fe00]
mov rcx, r14
call fcn.14000ea40
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x1400113db
mov r8d, r15d
mov rdx, rbx
mov rcx, r14
call fcn.14000ea40
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x1400113db
mov r8d, r15d
lea rdx, str.HELPNumber_of_WMI_High_Performance_provider_returned_by_WMI_Adapter
mov rcx, r14
call fcn.14000ea40
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x1400113db
mov r8d, r15d
lea rdx, [0x14001fe00]
mov rcx, r14
call fcn.14000ea40
mov edi, eax
mov dword [rsp + 0x30], eax
mov rcx, rbx
call sub.msvcrt.dll_free
jmp 0x1400113ee
mov edi, 0x8007000e
mov dword [rsp + 0x30], edi
test edi, edi
js 0x14001140a
mov r8d, r15d
lea rdx, [0x14001fe00]
mov rcx, r14
call fcn.14000ea40
mov edi, eax
mov dword [rsp + 0x30], eax
mov r13d, esi
mov dword [rsp + 0x34], esi
test edi, edi
js 0x1400120c6
cmp dword [rsp + 0xf8], r12d
je 0x1400116ce
mov ecx, esi
mov dword [rsp + 0xf0], ecx
cmp ecx, dword [r14 + 0x60]
jae 0x1400116ce
test edi, edi
js 0x1400120c6
mov eax, ecx
mov qword [rsp + 0x70], rax
lea rbx, [rax + rax*2]
add rbx, rbx
cmp qword [r14 + rbx*8 + 0x28], rsi
je 0x1400116c6
mov rbx, qword [r14 + rbx*8 + 0x20]
mov rbx, qword [rbx]
mov qword [rsp + 0x60], rbx
lea rax, [rax + rax*2]
add rax, rax
cmp rbx, qword [r14 + rax*8 + 0x20]
je 0x1400116a6
test edi, edi
js 0x1400116a6
mov rax, qword [rbx + 0x20]
mov eax, dword [rax + 0x20]
mov dword [rsp + 0xe8], eax
mov r12d, esi
mov dword [rsp + 0x58], esi
cmp r12d, dword [r14 + 0x6c]
jae 0x140011661
test edi, edi
js 0x14001167d
cmp r12d, eax
jae 0x140011661
mov rax, qword [rbx + 0x20]
mov r8d, r13d
mov rdx, qword [rax + 8]
call fcn.14000e91c
mov rdi, rax
test rax, rax
je 0x140011644
mov eax, r12d
mov r8d, dword [r14 + rax*4 + 0x64]
mov rdx, rdi
call fcn.1400108d0
mov r13, rax
mov rcx, rdi
call sub.msvcrt.dll_free
test r13, r13
je 0x140011634
mov r8d, r15d
mov rdx, r13
mov rcx, r14
call fcn.14000ea40
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x14001162a
mov r8d, r15d
lea rdx, str.NAME
mov rcx, r14
call fcn.14000ea40
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x14001162a
mov r8d, r15d
lea rdx, [0x14001fe58]
mov rcx, r14
call fcn.14000ea40
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x14001162a
mov rax, qword [rbx + 0x20]
mov rax, qword [rax + 0x18]
mov ecx, r12d
mov rax, qword [rax + rcx*8]
mov r8d, r15d
mov rdx, qword [rax + 8]
mov rcx, r14
call fcn.14000ea40
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x14001162a
mov r8d, r15d
lea rdx, [0x14001fe00]
mov rcx, r14
call fcn.14000ea40
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x14001162a
mov r8d, r15d
mov rdx, r13
mov rcx, r14
call fcn.14000ea40
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x14001162a
mov r8d, r15d
lea rdx, str.HELP
mov rcx, r14
call fcn.14000ea40
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x14001162a
mov r8d, r15d
lea rdx, [0x14001fe58]
mov rcx, r14
call fcn.14000ea40
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x14001162a
mov rax, qword [rbx + 0x20]
mov rax, qword [rax + 0x18]
mov ecx, r12d
mov rax, qword [rax + rcx*8]
mov r8d, r15d
mov rdx, qword [rax + 0x10]
mov rcx, r14
call fcn.14000ea40
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x14001162a
mov r8d, r15d
lea rdx, [0x14001fe00]
mov rcx, r14
call fcn.14000ea40
mov edi, eax
mov dword [rsp + 0x30], eax
mov rcx, r13
call sub.msvcrt.dll_free
jmp 0x14001163d
mov edi, 0x8007000e
mov dword [rsp + 0x30], edi
mov r13d, dword [rsp + 0x34]
jmp 0x14001164d
mov edi, 0x8007000e
mov dword [rsp + 0x30], edi
add r12d, r15d
mov dword [rsp + 0x58], r12d
mov eax, dword [rsp + 0xe8]
jmp 0x140011497
test edi, edi
js 0x14001167d
mov r8d, r15d
lea rdx, [0x14001fe00]
mov rcx, r14
call fcn.14000ea40
mov edi, eax
mov dword [rsp + 0x30], eax
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x60]
call fcn.14000c0c8
add r13d, r15d
mov dword [rsp + 0x34], r13d
mov rbx, qword [rsp + 0x60]
mov rax, qword [rsp + 0x70]
jmp 0x140011468
jmp 0x1400116bf
mov ecx, dword [rsp + 0xf0]
add ecx, r15d
jmp 0x140011429
test edi, edi
js 0x1400120c6
mov r12, rsi
cmp dword [r14 + 0x6c], 2
jne 0x140011a44
call fcn.140009e40
mov r13, rax
test rax, rax
je 0x140011a38
mov r8d, dword [r14 + 0x64]
lea rdx, str.HiPerf_Classes
call fcn.1400108d0
mov r12, rax
test rax, rax
je 0x140011878
mov r8d, r15d
mov rdx, rax
mov rcx, r14
call fcn.14000ea40
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011a2d
mov r8d, r15d
lea rdx, str.NAME
mov rcx, r14
call fcn.14000ea40
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011a2d
mov r8d, r15d
lea rdx, [0x14001fe58]
mov rcx, r14
call fcn.14000ea40
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011a2d
mov edx, 0xcd
mov rcx, r13
call fcn.140005c38
mov rbx, rax
test rax, rax
je 0x1400117bc
mov r8d, r15d
mov rdx, rax
mov rcx, r14
call fcn.14000ea40
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x1400117b2
mov r8d, r15d
lea rdx, [0x14001fe00]
mov rcx, r14
call fcn.14000ea40
mov edi, eax
mov dword [rsp + 0x30], eax
mov rcx, rbx
call sub.msvcrt.dll_free
jmp 0x1400117c5
mov edi, 0x8007000e
mov dword [rsp + 0x30], edi
test edi, edi
js 0x140011a2d
mov r8d, r15d
mov rdx, r12
mov rcx, r14
call fcn.14000ea40
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011a2d
mov r8d, r15d
lea rdx, str.HELP
mov rcx, r14
call fcn.14000ea40
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011a2d
mov r8d, r15d
lea rdx, [0x14001fe58]
mov rcx, r14
call fcn.14000ea40
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011a2d
mov edx, 0xd0
mov rcx, r13
call fcn.140005c38
mov rbx, rax
test rax, rax
je 0x140011878
mov r8d, r15d
mov rdx, rax
mov rcx, r14
call fcn.14000ea40
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x14001186e
mov r8d, r15d
lea rdx, [0x14001fe00]
mov rcx, r14
call fcn.14000ea40
mov edi, eax
mov dword [rsp + 0x30], eax
mov rcx, rbx
call sub.msvcrt.dll_free
jmp 0x140011881
mov edi, 0x8007000e
mov dword [rsp + 0x30], edi
test edi, edi
js 0x140011a2d
mov r8d, r15d
lea rdx, [0x14001fe00]
mov rcx, r14
call fcn.14000ea40
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011a2d
mov r8d, dword [r14 + 0x64]
lea rdx, str.HiPerf_Validity
call fcn.1400108d0
mov r12, rax
test rax, rax
je 0x140011a24
mov r8d, r15d
mov rdx, rax
mov rcx, r14
call fcn.14000ea40
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011a2d
mov r8d, r15d
lea rdx, str.NAME
mov rcx, r14
call fcn.14000ea40
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011a2d
mov r8d, r15d
lea rdx, [0x14001fe58]
mov rcx, r14
call fcn.14000ea40
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011a2d
mov edx, 0xce
mov rcx, r13
call fcn.140005c38
mov rbx, rax
test rax, rax
je 0x140011970
mov r8d, r15d
mov rdx, rax
mov rcx, r14
call fcn.14000ea40
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011966
mov r8d, r15d
lea rdx, [0x14001fe00]
mov rcx, r14
call fcn.14000ea40
mov edi, eax
mov dword [rsp + 0x30], eax
mov rcx, rbx
call sub.msvcrt.dll_free
jmp 0x140011979
mov edi, 0x8007000e
mov dword [rsp + 0x30], edi
test edi, edi
js 0x140011a2d
mov r8d, r15d
mov rdx, r12
mov rcx, r14
call fcn.14000ea40
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011a2d
mov r8d, r15d
lea rdx, str.HELP
mov rcx, r14
call fcn.14000ea40
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011a2d
mov r8d, r15d
lea rdx, [0x14001fe58]
mov rcx, r14
call fcn.14000ea40
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011a2d
mov edx, 0xd1
mov rcx, r13
call fcn.140005c38
mov rbx, rax
test rax, rax
je 0x140011a24
mov r8d, r15d
mov rdx, rax
mov rcx, r14
call fcn.14000ea40
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011a1a
mov r8d, r15d
lea rdx, [0x14001fe00]
mov rcx, r14
call fcn.14000ea40
mov edi, eax
mov dword [rsp + 0x30], eax
mov rcx, rbx
call sub.msvcrt.dll_free
jmp 0x140011a2d
mov edi, 0x8007000e
mov dword [rsp + 0x30], edi
mov rcx, r13
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_FreeLibrary]
jmp 0x140011a41
mov edi, 0x80004005
mov dword [rsp + 0x30], edi
mov r12, r15
test edi, edi
js 0x1400120c6
mov r8d, dword [r14 + r12*4 + 0x64]
lea rdx, str.HiPerf_Classes
call fcn.1400108d0
mov rbx, rax
test rax, rax
je 0x140011af3
mov r8d, r15d
mov rdx, rax
mov rcx, r14
call fcn.14000ea40
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011ae9
mov r8d, r15d
lea rdx, str.NAMEHiPerf_Classes
mov rcx, r14
call fcn.14000ea40
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011ae9
mov r8d, r15d
lea rdx, [0x14001fe00]
mov rcx, r14
call fcn.14000ea40
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011ae9
mov r8d, r15d
mov rdx, rbx
mov rcx, r14
call fcn.14000ea40
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011ae9
mov r8d, r15d
lea rdx, str.HELPShows_High_Performance_Classes
mov rcx, r14
call fcn.14000ea40
mov edi, eax
mov dword [rsp + 0x30], eax
mov rcx, rbx
call sub.msvcrt.dll_free
jmp 0x140011afc
mov edi, 0x8007000e
mov dword [rsp + 0x30], edi
test edi, edi
js 0x1400120c6
mov r8d, r15d
lea rdx, [0x14001fe00]
mov rcx, r14
call fcn.14000ea40
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x1400120c6
mov r8d, dword [r14 + r12*4 + 0x64]
lea rdx, str.HiPerf_Validity
call fcn.1400108d0
mov rbx, rax
test rax, rax
je 0x140011beb
mov r8d, r15d
lea rdx, [0x14001fe00]
mov rcx, r14
call fcn.14000ea40
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011be1
mov r8d, r15d
mov rdx, rbx
mov rcx, r14
call fcn.14000ea40
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011be1
mov r8d, r15d
lea rdx, str.NAMEHiPerf_Validity
mov rcx, r14
call fcn.14000ea40
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011be1
mov r8d, r15d
lea rdx, [0x14001fe00]
mov rcx, r14
call fcn.14000ea40
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011be1
mov r8d, r15d
mov rdx, rbx
mov rcx, r14
call fcn.14000ea40
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011be1
mov r8d, r15d
lea rdx, str.HELPShows_if_High_Performance_Classes_are_valid
mov rcx, r14
call fcn.14000ea40
mov edi, eax
mov dword [rsp + 0x30], eax
mov rcx, rbx
call sub.msvcrt.dll_free
jmp 0x140011bf4
mov edi, 0x8007000e
mov dword [rsp + 0x30], edi
test edi, edi
js 0x1400120c6
or r12, 0xffffffffffffffff
cmp dword [rsp + 0xf8], r12d
je 0x140011f5c
mov r8d, r15d
lea rdx, [0x14001fe00]
mov rcx, r14
call fcn.14000ea40
mov edi, eax
mov dword [rsp + 0x30], eax
mov r13d, esi
mov dword [rsp + 0x34], esi
mov ebx, esi
mov dword [rsp + 0xf0], ebx
cmp ebx, dword [r14 + 0x60]
jae 0x140011f5c
test edi, edi
js 0x1400120c6
mov r12d, ebx
mov qword [rsp + 0x90], r12
lea rbx, [r12 + r12*2]
add rbx, rbx
cmp qword [r14 + rbx*8 + 0x28], rsi
je 0x140011f49
mov r8d, r15d
lea rdx, [0x14001fe00]
mov rcx, r14
call fcn.14000ea40
mov edi, eax
mov dword [rsp + 0x30], eax
mov rbx, qword [r14 + rbx*8 + 0x20]
mov rbx, qword [rbx]
mov qword [rsp + 0x70], rbx
lea rax, [r12 + r12*2]
add rax, rax
cmp rbx, qword [r14 + rax*8 + 0x20]
je 0x140011f30
test edi, edi
js 0x140011f30
mov edx, esi
mov dword [rsp + 0x48], edx
mov rax, qword [rbx + 0x20]
cmp edx, dword [rax + 0x38]
jae 0x140011f07
test edi, edi
js 0x140011f07
mov r8d, edx
mov qword [rsp + 0x60], r8
mov rax, qword [rax + 0x30]
mov rcx, qword [rax + r8*8]
cmp qword [rcx + 0x20], rsi
je 0x140011eff
mov eax, dword [rcx + 0x28]
mov dword [rsp + 0xe8], eax
mov r12d, esi
mov dword [rsp + 0x58], esi
cmp r12d, dword [r14 + 0x6c]
jae 0x140011edf
test edi, edi
js 0x140011efb
cmp r12d, eax
jae 0x140011edf
mov rax, qword [rbx + 0x20]
mov rax, qword [rax + 0x30]
mov rax, qword [rax + r8*8]
mov r8d, r13d
mov rdx, qword [rax + 8]
call fcn.14000e91c
mov rdi, rax
test rax, rax
je 0x140011ebd
mov eax, r12d
mov r8d, dword [r14 + rax*4 + 0x64]
mov rdx, rdi
call fcn.1400108d0
mov r13, rax
mov rcx, rdi
call sub.msvcrt.dll_free
test r13, r13
je 0x140011ead
mov r8d, r15d
mov rdx, r13
mov rcx, r14
call fcn.14000ea40
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011ea3
mov r8d, r15d
lea rdx, str.NAME
mov rcx, r14
call fcn.14000ea40
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011ea3
mov r8d, r15d
lea rdx, [0x14001fe58]
mov rcx, r14
call fcn.14000ea40
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011ea3
mov rax, qword [rbx + 0x20]
mov rcx, qword [rax + 0x30]
mov rax, qword [rsp + 0x60]
mov rax, qword [rcx + rax*8]
mov rax, qword [rax + 0x20]
mov ecx, r12d
mov rax, qword [rax + rcx*8]
mov r8d, r15d
mov rdx, qword [rax + 8]
mov rcx, r14
call fcn.14000ea40
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011ea3
mov r8d, r15d
lea rdx, [0x14001fe00]
mov rcx, r14
call fcn.14000ea40
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011ea3
mov r8d, r15d
mov rdx, r13
mov rcx, r14
call fcn.14000ea40
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011ea3
mov r8d, r15d
lea rdx, str.HELP
mov rcx, r14
call fcn.14000ea40
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011ea3
mov r8d, r15d
lea rdx, [0x14001fe58]
mov rcx, r14
call fcn.14000ea40
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011ea3
mov rax, qword [rbx + 0x20]
mov rcx, qword [rax + 0x30]
mov rax, qword [rsp + 0x60]
mov rax, qword [rcx + rax*8]
mov rax, qword [rax + 0x20]
mov ecx, r12d
mov rax, qword [rax + rcx*8]
mov r8d, r15d
mov rdx, qword [rax + 0x10]
mov rcx, r14
call fcn.14000ea40
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x140011ea3
mov r8d, r15d
lea rdx, [0x14001fe00]
mov rcx, r14
call fcn.14000ea40
mov edi, eax
mov dword [rsp + 0x30], eax
mov rcx, r13
call sub.msvcrt.dll_free
jmp 0x140011eb6
mov edi, 0x8007000e
mov dword [rsp + 0x30], edi
mov r13d, dword [rsp + 0x34]
jmp 0x140011ec6
mov edi, 0x8007000e
mov dword [rsp + 0x30], edi
add r12d, r15d
mov dword [rsp + 0x58], r12d
mov r8, qword [rsp + 0x60]
mov eax, dword [rsp + 0xe8]
jmp 0x140011cea
test edi, edi
js 0x140011efb
mov r8d, r15d
lea rdx, [0x14001fe00]
mov rcx, r14
call fcn.14000ea40
mov edi, eax
mov dword [rsp + 0x30], eax
mov edx, dword [rsp + 0x48]
add edx, r15d
jmp 0x140011ca6
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0x70]
call fcn.14000c0c8
add r13d, r15d
mov dword [rsp + 0x34], r13d
mov rbx, qword [rsp + 0x70]
mov r12, qword [rsp + 0x90]
jmp 0x140011c8a
jmp 0x140011f49
or r12, 0xffffffffffffffff
mov ebx, dword [rsp + 0xf0]
add ebx, r15d
jmp 0x140011c2f
test edi, edi
js 0x1400120c6
mov edx, r15d
mov rcx, r14
call fcn.14000e9c8
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x1400120a6
mov qword [rsp + 0x88], rsi
mov rcx, qword [rsp + 0x80]
call qword [sym.imp.msvcrt.dll_wcslen]
lea r15d, [rax + 6]
mov eax, 2
mul r15
cmovo rax, r12
mov rcx, rax
call fcn.140019928
mov rbx, rax
mov qword [rsp + 0x88], rax
test rax, rax
jne 0x140011fce
mov edi, 0x8007000e
mov dword [rsp + 0x30], edi
mov r15, qword [rsp + 0x50]
jmp 0x140012093
mov edi, esi
lea rax, [r15 - 1]
cmp rax, 0x7ffffffe
mov eax, 0x80070057
cmova edi, eax
mov dword [rsp + 0x7c], edi
test edi, edi
js 0x140012005
mov r9, qword [rsp + 0x80]
mov rdx, r15
mov rcx, rbx
call fcn.140009a30
mov edi, eax
mov dword [rsp + 0x7c], eax
jmp 0x14001200d
test r15, r15
je 0x14001200d
mov word [rbx], si
mov dword [rsp + 0x30], edi
test edi, edi
js 0x140011fc4
lea r8, [rsp + 0xe8]
mov rdx, r15
mov rcx, rbx
call fcn.1400099bc
mov edi, eax
test eax, eax
js 0x14001204e
mov rax, qword [rsp + 0xe8]
sub r15, rax
lea rcx, [rbx + rax*2]
lea r9, str..ini
mov rdx, r15
call fcn.140009a30
mov edi, eax
mov dword [rsp + 0x30], edi
test edi, edi
js 0x140011fc4
mov r8, rbx
mov r15, qword [rsp + 0x50]
mov rdx, r15
mov rcx, r14
call fcn.14000f1a0
mov edi, eax
mov dword [rsp + 0x30], eax
jmp 0x140011fc9
test rbx, rbx
je 0x1400120a0
mov rcx, rbx
call sub.msvcrt.dll_free
test edi, edi
jns 0x1400120ef
jmp 0x1400120ab
mov r15, qword [rsp + 0x50]
mov rax, qword [0x14002f6b0]
test rax, rax
je 0x1400120e4
mov word [rax], si
mov dword [0x14002efa0], 0x1000
jmp 0x1400120e4
mov rax, qword [0x14002f6b0]
test rax, rax
je 0x1400120df
mov word [rax], si
mov dword [0x14002efa0], 0x1000
mov r15, qword [rsp + 0x50]
mov rdx, r15
mov rcx, r14
call fcn.14000efe4
test r15, r15
je 0x140012101
mov rcx, r15
call sub.msvcrt.dll_free
mov qword [rsp + 0x50], rsi
mov eax, edi
add rsp, 0xa0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret