Function at 0x180013e60
Capabilities:
Move file
Write file on windows

Disassembly:
mov r11, rsp
push rsi
push rdi
push r14
sub rsp, 0x180
mov qword [rsp + 0x48], 0xfffffffffffffffe
mov qword [r11 + 0x18], rbx
mov rax, qword [0x18006c040]
xor rax, rsp
mov qword [rsp + 0x170], rax
mov rdi, rdx
mov r14, rcx
mov esi, 9
xor ebx, ebx
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x68], shutdown
mov qword [rsp + 0x60], rbx
mov byte [rsp + 0x50], bl
mov qword [r11 - 0x118], rbx
mov qword [r11 - 0x110], rbx
mov qword [r11 - 0x110], 0xf
mov qword [r11 - 0x118], rbx
mov byte [rsp + 0x70], bl
mov qword [r11 - 0xd8], rbx
mov qword [r11 - 0xd0], rbx
mov qword [r11 - 0xd0], 0xf
mov qword [r11 - 0xd8], rbx
mov byte [rsp + 0xb0], bl
lea r8d, [rsi - 6]
lea rdx, [0x1800459ac]
lea rcx, [r11 - 0xe8]
call fcn.180002320
nop
mov qword [rsp + 0xa0], rbx
mov qword [rsp + 0xa8], rbx
mov qword [rsp + 0xa8], shutdown
mov qword [rsp + 0xa0], rbx
mov byte [rsp + 0x90], bl
lea r8d, [rsi - 6]
lea rdx, [0x1800459b0]
lea rcx, [rsp + 0x90]
call fcn.180002320
nop
test rdi, rdi
je 0x1800142f4
cmp byte [rdi], bl
je 0x1800142f4
mov qword [rsp + 0xe0], rbx
mov qword [rsp + 0xe8], rbx
mov qword [rsp + 0xe8], shutdown
mov qword [rsp + 0xe0], rbx
mov byte [rsp + 0xd0], bl
or r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rdi + r8], 0
jne 0x180013fa0
mov rdx, rdi
lea rcx, [rsp + 0xd0]
call fcn.180002320
nop
or r8, 0xffffffffffffffff
mov dl, 0x2e
lea rcx, [rsp + 0xd0]
call fcn.180014500
mov rdi, rax
cmp rax, 0xffffffffffffffff
jne 0x180014089
mov r8b, 0x2e
lea rdx, [rsp + 0xd0]
lea rcx, [rsp + 0xf0]
call fcn.1800127b0
nop
lea r8, [rsp + 0xb0]
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.180012740
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call fcn.180002630
nop
lea rcx, [rsp + 0x110]
call fcn.1800025a0
nop
lea rcx, [rsp + 0xf0]
call fcn.1800025a0
mov r8b, 0x2e
lea rdx, [rsp + 0xd0]
lea rcx, [rsp + 0xf0]
call fcn.1800127b0
nop
lea r8, [rsp + 0x90]
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.180012740
nop
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.180002630
nop
lea rcx, [rsp + 0x110]
call fcn.1800025a0
nop
jmp 0x18001421e
mov r9, rdi
xor r8d, r8d
lea rdx, [rsp + 0xf0]
lea rcx, [rsp + 0xd0]
call fcn.180002150
nop
inc rdi
or r9, 0xffffffffffffffff
mov r8, rdi
lea rdx, [rsp + 0x110]
lea rcx, [rsp + 0xd0]
call fcn.180002150
nop
cmp qword [rsp + 0x120], 0
jne 0x18001418f
mov r8b, 0x2e
lea rdx, [rsp + 0xf0]
lea rcx, [rsp + 0x150]
call fcn.1800127b0
nop
lea r8, [rsp + 0xb0]
mov rdx, rax
lea rcx, [rsp + 0x130]
call fcn.180012740
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call fcn.180002630
nop
lea rcx, [rsp + 0x130]
call fcn.1800025a0
nop
lea rcx, [rsp + 0x150]
call fcn.1800025a0
mov r8b, 0x2e
lea rdx, [rsp + 0xf0]
lea rcx, [rsp + 0x130]
call fcn.1800127b0
nop
lea r8, [rsp + 0x90]
mov rdx, rax
lea rcx, [rsp + 0x150]
call fcn.180012740
nop
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.180002630
nop
lea rcx, [rsp + 0x150]
call fcn.1800025a0
nop
lea rcx, [rsp + 0x130]
call fcn.1800025a0
jmp 0x180014210
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rsp + 0xd0]
lea rcx, [rsp + 0x50]
call fcn.180002e50
mov qword [rsp + 0x28], 0xffffffffffffffff
mov qword [rsp + 0x20], rbx
lea r9, [rsp + 0xb0]
or r8, 0xffffffffffffffff
mov rdx, rdi
lea rcx, [rsp + 0x50]
call fcn.180002960
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rsp + 0xd0]
lea rcx, [rsp + 0x70]
call fcn.180002e50
mov qword [rsp + 0x28], 0xffffffffffffffff
mov qword [rsp + 0x20], rbx
lea r9, [rsp + 0x90]
or r8, 0xffffffffffffffff
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.180002960
nop
lea rcx, [rsp + 0x110]
call fcn.1800025a0
nop
lea rcx, [rsp + 0xf0]
call fcn.1800025a0
lea rcx, [rsp + 0x50]
cmp qword [rsp + 0x68], 0x10
cmovae rcx, qword [rsp + 0x50]
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 2
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov rdi, rax
cmp rax, 0xffffffffffffffff
je 0x1800142c7
lea rdx, [r14 + 0x548]
mov qword [rsp + 0x20], rbx
lea r9, [rsp + 0x44]
mov r8d, 0x26c
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, [rsp + 0x70]
cmp qword [rsp + 0x88], 0x10
cmovae rdx, qword [rsp + 0x70]
lea rcx, [rsp + 0x50]
cmp qword [rsp + 0x68], 0x10
cmovae rcx, qword [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_MoveFileA]
mov esi, ebx
mov dword [rsp + 0x40], ebx
jmp 0x1800142e6
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r9d, eax
lea r8, str.Error_in_CreateFile___i_
xor edx, edx
lea rcx, str.WriteClientInfoFile
call fcn.180012f00
nop
lea rcx, [rsp + 0xd0]
call fcn.1800025a0
nop
jmp 0x1800142fc
mov rax, qword [rsp + 0xa8]
cmp rax, 0x10
jb 0x18001435a
inc rax
mov rcx, qword [rsp + 0x90]
cmp rax, 0x1000
jb 0x180014355
test cl, 0x1f
je 0x180014328
call fcn.180021508
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x180014337
call fcn.180021508
int3
sub rcx, rax
cmp rcx, 8
jae 0x180014346
call fcn.180021508
int3
cmp rcx, 0x27
jbe 0x180014352
call fcn.180021508
int3
mov rcx, rax
call fcn.18000c2a0
mov qword [rsp + 0xa8], shutdown
mov qword [rsp + 0xa0], rbx
mov byte [rsp + 0x90], 0
mov rax, qword [rsp + 0xc8]
cmp rax, 0x10
jb 0x1800143d4
inc rax
mov rcx, qword [rsp + 0xb0]
cmp rax, 0x1000
jb 0x1800143cf
test cl, 0x1f
je 0x1800143a2
call fcn.180021508
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x1800143b1
call fcn.180021508
int3
sub rcx, rax
cmp rcx, 8
jae 0x1800143c0
call fcn.180021508
int3
cmp rcx, 0x27
jbe 0x1800143cc
call fcn.180021508
int3
mov rcx, rax
call fcn.18000c2a0
mov qword [rsp + 0xc8], shutdown
mov qword [rsp + 0xc0], rbx
mov byte [rsp + 0xb0], 0
mov rax, qword [rsp + 0x88]
cmp rax, 0x10
jb 0x18001444b
inc rax
mov rcx, qword [rsp + 0x70]
cmp rax, 0x1000
jb 0x180014446
test cl, 0x1f
je 0x180014419
call fcn.180021508
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x180014428
call fcn.180021508
int3
sub rcx, rax
cmp rcx, 8
jae 0x180014437
call fcn.180021508
int3
cmp rcx, 0x27
jbe 0x180014443
call fcn.180021508
int3
mov rcx, rax
call fcn.18000c2a0
mov qword [rsp + 0x88], shutdown
mov qword [rsp + 0x80], rbx
mov byte [rsp + 0x70], 0
mov rax, qword [rsp + 0x68]
cmp rax, 0x10
jb 0x1800144bc
inc rax
mov rcx, qword [rsp + 0x50]
cmp rax, 0x1000
jb 0x1800144b7
test cl, 0x1f
je 0x18001448a
call fcn.180021508
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x180014499
call fcn.180021508
int3
sub rcx, rax
cmp rcx, 8
jae 0x1800144a8
call fcn.180021508
int3
cmp rcx, 0x27
jbe 0x1800144b4
call fcn.180021508
int3
mov rcx, rax
call fcn.18000c2a0
mov qword [rsp + 0x68], shutdown
mov qword [rsp + 0x60], rbx
mov byte [rsp + 0x50], 0
mov eax, esi
mov rcx, qword [rsp + 0x170]
xor rcx, rsp
call fcn.18001a230
mov rbx, qword [rsp + 0x1b0]
add rsp, 0x180
pop r14
pop rdi
pop rsi
ret