Function at 0x14005c120
Capabilities:
Terminate process
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x70
xor r12d, r12d
mov r15, rdx
mov r13, rcx
mov r14d, r12d
lea rsi, [r12 - 1]
cmp dword [rdx + 0xb8], r12d
jbe 0x14005c1fc
nop word [rax + rax]
mov r8d, r14d
lea rdx, str.MODULE__llx_n
lea rcx, [rsp + 0x30]
mov r8, qword [r15 + r8*8 + 0x38]
call fcn.140031820
mov rbp, qword [0x140201e00]
lea rax, [rsp + 0x30]
lea rdi, [rsp + 0x30]
mov rbx, rsi
nop dword [rax]
inc rbx
cmp byte [rax + rbx], r12b
jne 0x14005c190
test rbx, rbx
je 0x14005c1ec
nop
lea r9, [rsp + 0xa8]
mov qword [rsp + 0x20], r12
mov r8d, ebx
mov rdx, rdi
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x14005c402
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
test eax, eax
je 0x14005c402
mov eax, dword [rsp + 0xa8]
test eax, eax
je 0x14005c402
add rdi, rax
sub rbx, rax
jne 0x14005c1a0
inc r14d
cmp r14d, dword [r15 + 0xb8]
jb 0x14005c160
mov r9, qword [r15 + 0x20]
test r9, r9
jne 0x14005c215
cmp qword [r15 + 0x28], r12
jne 0x14005c215
cmp qword [r15 + 0x30], r12
je 0x14005c3b0
mov r8d, dword [r15 + 0xc]
lea rdx, str.GRAPHICS__d__llx_n
lea rcx, [rsp + 0x30]
call fcn.140031820
mov rbp, qword [0x140201e00]
lea rax, [rsp + 0x30]
lea rdi, [rsp + 0x30]
mov rbx, rsi
nop
inc rbx
cmp byte [rax + rbx], r12b
jne 0x14005c240
test rbx, rbx
je 0x14005c29c
nop
lea r9, [rsp + 0xa8]
mov qword [rsp + 0x20], r12
mov r8d, ebx
mov rdx, rdi
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x14005c402
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
test eax, eax
je 0x14005c402
mov eax, dword [rsp + 0xa8]
test eax, eax
je 0x14005c402
add rdi, rax
sub rbx, rax
jne 0x14005c250
mov r9, qword [r15 + 0x28]
lea rdx, str.COMPUTE__d__llx_n
mov r8d, dword [r15 + 0x10]
lea rcx, [rsp + 0x30]
call fcn.140031820
mov rbp, qword [0x140201e00]
lea rax, [rsp + 0x30]
lea rdi, [rsp + 0x30]
mov rbx, rsi
nop dword [rax]
inc rbx
cmp byte [rax + rbx], r12b
jne 0x14005c2d0
test rbx, rbx
je 0x14005c32c
nop
lea r9, [rsp + 0xa8]
mov qword [rsp + 0x20], r12
mov r8d, ebx
mov rdx, rdi
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x14005c402
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
test eax, eax
je 0x14005c402
mov eax, dword [rsp + 0xa8]
test eax, eax
je 0x14005c402
add rdi, rax
sub rbx, rax
jne 0x14005c2e0
mov r9, qword [r15 + 0x30]
lea rdx, str.RAYTRACE__d__llx_n
mov r8d, dword [r15 + 0x14]
lea rcx, [rsp + 0x30]
call fcn.140031820
mov rdi, qword [0x140201e00]
lea rax, [rsp + 0x30]
lea rbx, [rsp + 0x30]
inc rsi
cmp byte [rax + rsi], r12b
jne 0x14005c356
test rsi, rsi
je 0x14005c3b0
nop dword [rax]
nop dword [rax + rax]
lea r9, [rsp + 0xa8]
mov qword [rsp + 0x20], r12
mov r8d, esi
mov rdx, rbx
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x14005c402
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
test eax, eax
je 0x14005c402
mov eax, dword [rsp + 0xa8]
test eax, eax
je 0x14005c402
add rbx, rax
sub rsi, rax
jne 0x14005c370
mov rcx, r13
call fcn.14005e3a0
mov rcx, r13
call fcn.14005e5c0
mov rcx, qword [r13 + 0x7d0]
test rcx, rcx
je 0x14005c3d2
mov rax, qword [rcx]
call qword [rax + 0x30]
mov rcx, qword [r13 + 0x7d8]
test rcx, rcx
je 0x14005c3e4
mov rax, qword [rcx]
call qword [rax + 0x30]
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_ExitProcess]