Function at 0x140002df0
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x20], r9
push rbp
push rbx
push rsi
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0xd0
mov rax, qword [0x14003a0c0]
xor rax, rsp
mov qword [rbp + 0x1f], rax
movzx ebx, dl
mov rsi, rcx
xor dil, dil
test r8, r8
je 0x140003075
mov edx, 1
call fcn.140003580
test al, al
je 0x140003075
lea r12, [0x14003a4f0]
mov qword [rbp - 0x79], r12
mov rcx, r12
call fcn.140010bcc
test eax, eax
jne 0x1400030aa
cmp dword [0x14003a53c], 0x7fffffff
je 0x140003095
xorps xmm0, xmm0
movups xmmword [rbp - 0x41], xmm0
movups xmmword [rbp - 0x31], xmm0
movups xmmword [rbp - 0x21], xmm0
lea r15, [0x14002e968]
mov qword [rbp - 0x41], r15
xor r14d, r14d
mov qword [rbp - 0x39], r14
mov qword [rbp - 0x31], r14
mov qword [rbp - 0x29], r14
mov qword [rbp - 0x21], 0x104
mov word [rbp - 0x19], r14w
lea rdx, [rbp + 0x7f]
mov r8, qword [rbp + 0x77]
lea rcx, [rbp - 0x41]
call fcn.140003410
cmp qword [rbp - 0x39], r14
je 0x140002ec4
cmp qword [rbp - 0x31], r14
je 0x140002ec4
xor al, al
jmp 0x140002ec6
mov al, 1
test al, al
jne 0x140003033
xorps xmm0, xmm0
movups xmmword [rbp - 0x11], xmm0
movups xmmword [rbp - 1], xmm0
movups xmmword [rbp + 0xf], xmm0
mov qword [rbp - 0x11], r15
mov qword [rbp - 9], r14
mov qword [rbp - 1], r14
mov qword [rbp + 7], r14
mov qword [rbp + 0xf], 0x104
mov word [rbp + 0x17], r14w
cmp bl, 5
jne 0x140002f30
mov qword [rbp + 7], r14
mov qword [rbp - 1], r14
mov rax, qword [rbp - 0x29]
mov qword [rbp + 7], rax
mov rax, qword [rbp - 0x31]
mov qword [rbp - 1], rax
mov rdx, qword [rbp - 0x39]
mov qword [rbp - 9], rdx
mov qword [rbp - 0x39], r14
mov qword [rbp - 0x31], r14
mov qword [rbp - 0x29], r14
jmp 0x140002fed
cmp bl, 4
jne 0x140002f7b
mov rbx, qword [rbp - 0x39]
test rbx, rbx
je 0x140002f45
cmp qword [rbp - 0x31], 0
ja 0x140002f48
mov rbx, r14
lea rcx, [rbp - 0x71]
call fcn.140002a30
nop
mov r8, qword [rax + 8]
test r8, r8
je 0x140002f62
cmp qword [rax + 0x10], 0
ja 0x140002f65
mov r8, r14
mov r9, rbx
lea rdx, str._r_n_s__s
lea rcx, [rbp - 0x11]
call fcn.140003520
nop
jmp 0x140002fd7
cmp bl, 3
je 0x140002fe9
mov rdi, qword [rbp - 0x39]
test rdi, rdi
je 0x140002f90
cmp qword [rbp - 0x31], 0
ja 0x140002f93
mov rdi, r14
mov rax, rbx
lea rbx, str.error
mov rbx, qword [rbx + rax*8]
lea rcx, [rbp - 0x71]
call fcn.140002a30
nop
mov r8, qword [rax + 8]
test r8, r8
je 0x140002fbb
cmp qword [rax + 0x10], 0
ja 0x140002fbe
mov r8, r14
mov qword [rsp + 0x20], rdi
mov r9, rbx
lea rdx, str._r_n_s___s___s
lea rcx, [rbp - 0x11]
call fcn.140003520
nop
mov rcx, qword [rbp - 0x69]
test rcx, rcx
mov qword [rbp - 0x71], r15
je 0x140002fe9
call fcn.1400119f8
mov rdx, qword [rbp - 9]
mov rax, r14
mov rcx, qword [rbp - 1]
test rdx, rdx
cmovne rax, rcx
lea r8d, [rax + rax]
je 0x140003006
test rcx, rcx
jne 0x140003009
mov rdx, r14
mov qword [rsp + 0x20], r14
xor r9d, r9d
mov rcx, qword [rsi + 0x30]
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
setne dil
mov qword [rbp - 0x11], r15
mov rcx, qword [rbp - 9]
test rcx, rcx
je 0x140003033
call fcn.1400119f8
cmp byte [0x14003a4b0], 0
je 0x140003054
mov rcx, qword [rsi + 0x30]
cmp rcx, 0xffffffffffffffff
je 0x14000304c
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rsi + 0x30], 0xffffffffffffffff
mov qword [rbp - 0x41], r15
mov rcx, qword [rbp - 0x39]
test rcx, rcx
je 0x140003067
call fcn.1400119f8
nop
mov rcx, r12
call fcn.140010bd4
movzx eax, dil
jmp 0x140003077
xor al, al
mov rcx, qword [rbp + 0x1f]
xor rcx, rsp
call fcn.140011e80
add rsp, 0xd0
pop r15
pop r14
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov dword [0x14003a53c], 0x7ffffffe
mov ecx, 6
call fcn.14001150c
int3
mov ecx, 5
call fcn.14001150c
int3