Function at 0x1400091b0
Capabilities:
Write file on windows

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0xe8]
sub rsp, 0x1c0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
mov rax, qword [0x140182fd8]
xor rax, rsp
mov qword [rbp + 0x98], rax
xor r15d, r15d
mov qword [rbp + 0x18], r15
mov qword [rbp + 0x28], r15
mov qword [rbp + 0x30], 0xf
mov byte [rbp + 0x18], r15b
mov qword [rbp - 8], r15
mov qword [rbp + 8], r15
mov qword [rbp + 0x10], 0xf
mov byte [rbp - 8], r15b
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x78], xmm0
mov qword [rbp - 0x78], r15
movdqu xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], r15
call fcn.140007820
mov rbx, rax
mov qword [rbp + 0x58], r15
mov qword [rbp + 0x68], r15
mov qword [rbp + 0x70], 0xf
mov byte [rbp + 0x58], r15b
xor r8d, r8d
lea rdx, [0x14002abd0]
lea rcx, [rbp + 0x58]
call fcn.140001530
nop
lea r8, [0x140182f1b]
lea rdx, [0x140182f0b]
lea rcx, [rbp - 0x48]
call fcn.140004f40
lea rcx, [rsp + 0x78]
cmp rcx, rax
je 0x1400092a8
mov rdi, qword [rax]
mov qword [rsp + 0x78], rdi
mov rsi, qword [rax + 8]
mov qword [rbp - 0x80], rsi
mov rcx, qword [rax + 0x10]
mov qword [rbp - 0x78], rcx
mov qword [rax], r15
mov qword [rax + 8], r15
mov qword [rax + 0x10], r15
jmp 0x1400092b1
mov rsi, qword [rbp - 0x80]
mov rdi, qword [rsp + 0x78]
mov rcx, qword [rbp - 0x48]
test rcx, rcx
je 0x1400092eb
mov rdx, qword [rbp - 0x38]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400092e6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009b1f
call fcn.14000d000
sub rsi, rdi
lea r8, [rsi - 1]
mov rdx, rdi
lea rcx, [rbp + 0x18]
call fcn.140001530
mov qword [rbp - 0x80], rdi
lea rcx, [rbp + 0x18]
cmp qword [rbp + 0x30], 0x10
cmovae rcx, qword [rbp + 0x18]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov r13, rax
lea rcx, [rbp + 0x18]
cmp qword [rbp + 0x30], 0x10
cmovae rcx, qword [rbp + 0x18]
mov qword [rbp + 0x28], r15
mov byte [rcx], 0
test rax, rax
je 0x140009a9e
lea r8, [0x14002f16b]
lea rdx, [0x14002f14b]
lea rcx, [rbp - 0x48]
call fcn.140004f40
lea rcx, [rsp + 0x60]
cmp rcx, rax
je 0x14000937f
mov rdi, qword [rax]
mov qword [rsp + 0x60], rdi
mov rsi, qword [rax + 8]
mov qword [rsp + 0x68], rsi
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x70], rcx
mov qword [rax], r15
mov qword [rax + 8], r15
mov qword [rax + 0x10], r15
jmp 0x140009389
mov rsi, qword [rsp + 0x68]
mov rdi, qword [rsp + 0x60]
mov rcx, qword [rbp - 0x48]
test rcx, rcx
je 0x1400093c3
mov rdx, qword [rbp - 0x38]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400093be
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009b25
call fcn.14000d000
sub rsi, rdi
lea r8, [rsi - 1]
mov rdx, rdi
lea rcx, [rbp - 8]
call fcn.140001530
mov qword [rsp + 0x68], rdi
lea rdx, [rbp - 8]
cmp qword [rbp + 0x10], 0x10
cmovae rdx, qword [rbp - 8]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
test rax, rax
jne 0x140009402
mov rcx, r13
jmp 0x140009aa0
lea rax, [rbp - 8]
cmp qword [rbp + 0x10], 0x10
cmovae rax, qword [rbp - 8]
mov qword [rbp + 8], r15
mov byte [rax], 0
lea rdx, [rbx + 0x20]
mov qword [rbp + 0x38], r15
mov qword [rbp + 0x48], r15
mov qword [rbp + 0x50], 0xf
mov byte [rbp + 0x38], 0
mov rax, qword [rdx + 0x10]
cmp rax, 2
jb 0x140009b2b
add rax, 0xfffffffffffffffe
mov r8d, 4
cmp rax, r8
cmovb r8, rax
cmp qword [rdx + 0x18], 0x10
jb 0x140009458
mov rdx, qword [rdx]
add rdx, 2
lea rcx, [rbp + 0x38]
call fcn.140001530
nop
mov qword [rbp - 0x28], r15
mov qword [rbp - 0x18], r15
mov qword [rbp - 0x10], 0xf
mov byte [rbp - 0x28], 0
mov rax, qword [rbx + 0x10]
cmp rax, 4
jb 0x140009b31
add rax, 0xfffffffffffffffc
mov r8d, 4
cmp rax, r8
cmovb r8, rax
cmp qword [rbx + 0x18], 0x10
jb 0x1400094a3
mov rbx, qword [rbx]
lea rdx, [rbx + 4]
lea rcx, [rbp - 0x28]
call fcn.140001530
nop
lea r9, [rbp + 0x38]
lea r8, [rbp - 0x28]
lea rcx, [rbp - 0x48]
call fcn.14000c7d0
nop
mov rcx, qword [rbp - 0x38]
mov rdx, qword [rbp - 0x30]
mov rax, rdx
sub rax, rcx
cmp rax, 4
jb 0x1400094fe
lea rax, [rcx + 4]
mov qword [rbp - 0x38], rax
lea rax, [rbp - 0x48]
cmp rdx, 0x10
cmovae rax, qword [rbp - 0x48]
mov dword [rax + rcx], 0x7461642e
mov byte [rax + rcx + 4], 0
lea rax, [rbp - 0x48]
jmp 0x14000951c
mov qword [rsp + 0x20], 4
lea r9, str..dat
mov edx, 4
lea rcx, [rbp - 0x48]
call fcn.14000c650
movups xmm6, xmmword [rax]
movups xmmword [rbp + 0x78], xmm6
movups xmm7, xmmword [rax + 0x10]
movups xmmword [rbp + 0x88], xmm7
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp + 0x70]
cmp rdx, 0x10
jb 0x140009578
inc rdx
mov rcx, qword [rbp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009573
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009b37
call fcn.14000d000
movups xmmword [rbp + 0x58], xmm6
movups xmmword [rbp + 0x68], xmm7
mov rdx, qword [rbp - 0x30]
cmp rdx, 0x10
jb 0x1400095bb
inc rdx
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400095b6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009b3d
call fcn.14000d000
mov qword [rbp - 0x38], r15
mov qword [rbp - 0x30], 0xf
mov byte [rbp - 0x48], 0
mov rdx, qword [rbp - 0x10]
cmp rdx, 0x10
jb 0x140009607
inc rdx
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009601
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009b43
call fcn.14000d000
nop
mov rdx, qword [rbp + 0x50]
cmp rdx, 0x10
jb 0x140009642
inc rdx
mov rcx, qword [rbp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000963d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009b49
call fcn.14000d000
mov qword [rbp + 0x38], r15
movdqa xmm0, xmmword [0x14002ac90]
movdqu xmmword [rbp + 0x48], xmm0
mov byte [rbp + 0x38], 0
lea r8, [0x14002f010]
lea rdx, section..data
lea rcx, [rbp - 0x60]
call fcn.140004f40
nop
mov r8, qword [rbp - 0x58]
mov rdx, qword [rbp - 0x60]
sub r8, rdx
dec r8
lea rcx, [rbp + 0x38]
call fcn.140001530
mov rax, qword [rbp - 0x60]
mov qword [rbp - 0x58], rax
lea r8, [0x14007c41b]
lea rdx, [0x14002f20b]
lea rcx, [rsp + 0x40]
call fcn.140004f40
nop
mov rax, qword [rsp + 0x48]
cmp rax, qword [rsp + 0x40]
je 0x140009a7b
lea r12, [0x140183c80]
mov rcx, r12
cmp qword [0x140183c98], 0x10
cmovae rcx, qword [0x140183c80]
xor edx, edx
call rdi
test eax, eax
jne 0x1400096f0
mov rcx, r12
cmp qword [0x140183c98], 0x10
cmovae rcx, qword [0x140183c80]
xor edx, edx
call rdi
lea rdx, [0x140183c60]
cmp qword [0x140183c78], 0x10
cmovae rdx, qword [0x140183c60]
lea r8, [0x14002ac48]
lea rcx, [rbp - 0x70]
call fcn.14001237c
mov r9, qword [rbp - 0x70]
test r9, r9
je 0x140009a7b
mov r8, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x40]
sub r8, rcx
dec r8
mov r14d, 1
mov edx, r14d
call fcn.14001223c
mov rcx, qword [rbp - 0x70]
call fcn.140011ae0
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x48], rax
lea r8, [0x140182e2b]
lea rdx, [0x14007c41b]
lea rcx, [rbp - 0x48]
call fcn.140004f40
mov rbx, rax
lea rax, [rsp + 0x40]
cmp rax, rbx
je 0x1400097e8
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x1400097c3
mov rdx, qword [rsp + 0x50]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400097b0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009b4f
call fcn.14000d000
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r15
mov rax, qword [rbx]
mov qword [rsp + 0x40], rax
mov rax, qword [rbx + 8]
mov qword [rsp + 0x48], rax
mov rax, qword [rbx + 0x10]
mov qword [rsp + 0x50], rax
mov qword [rbx], r15
mov qword [rbx + 8], r15
mov qword [rbx + 0x10], r15
mov rcx, qword [rbp - 0x48]
test rcx, rcx
je 0x140009822
mov rdx, qword [rbp - 0x38]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000981d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009b4f
call fcn.14000d000
mov rax, qword [rsp + 0x48]
cmp rax, qword [rsp + 0x40]
je 0x140009a7b
lea rdx, [0x140183c40]
cmp qword [0x140183c58], 0x10
cmovae rdx, qword [0x140183c40]
lea r8, [0x14002ac48]
lea rcx, [rsp + 0x58]
call fcn.14001237c
mov r9, qword [rsp + 0x58]
test r9, r9
je 0x140009a7b
mov r8, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x40]
sub r8, rcx
dec r8
mov rdx, r14
call fcn.14001223c
mov rcx, qword [rsp + 0x58]
call fcn.140011ae0
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x48], rax
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x48], xmm0
mov qword [rbp - 0x38], r15
lea rbx, [0x14002f10b]
lea rax, str.eItUphFlgsIzRWqkqiqbLFPSDyzDlVLaJNKQiGksREPrgTkoXIPAtNDZlMuEErsIxuMGhKCYgx_na
sub rbx, rax
movabs r15, 0x7fffffffffffffff
je 0x140009927
cmp rbx, r15
ja 0x140009b55
cmp rbx, 0x1000
jb 0x1400098f8
lea rcx, [rbx + 0x27]
cmp rcx, rbx
jbe 0x140009b5b
call fcn.14000d008
test rax, rax
je 0x140009b61
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140009903
mov rcx, rbx
call fcn.14000d008
mov rdi, rax
mov qword [rbp - 0x48], rdi
lea rsi, [rdi + rbx]
mov qword [rbp - 0x38], rsi
mov r8, rbx
lea rdx, str.eItUphFlgsIzRWqkqiqbLFPSDyzDlVLaJNKQiGksREPrgTkoXIPAtNDZlMuEErsIxuMGhKCYgx_na
mov rcx, rdi
call fcn.1400113a0
mov qword [rbp - 0x40], rsi
jmp 0x14000992f
mov rsi, qword [rbp - 0x40]
mov rdi, qword [rbp - 0x48]
sub rsi, rdi
je 0x140009a6d
mov rax, qword [0x140183c90]
sub r15, rax
cmp r15, 1
jb 0x140009b19
cmp qword [0x140183c98], 0x10
cmovae r12, qword [0x140183c80]
mov qword [rsp + 0x30], r14
lea rcx, [0x14002ac4c]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rax
mov r9, r12
lea rcx, [rbp - 0x28]
call fcn.14000c9d0
nop
lea r9, [rbp + 0x58]
cmp qword [rbp + 0x90], 0x10
cmovae r9, qword [rbp + 0x78]
mov rcx, qword [rbp - 0x18]
mov rdx, qword [rbp - 0x10]
mov rax, rdx
sub rax, rcx
mov r15, qword [rbp + 0x88]
cmp r15, rax
ja 0x1400099db
lea rax, [r15 + rcx]
mov qword [rbp - 0x18], rax
lea rbx, [rbp - 0x28]
cmp rdx, 0x10
cmovae rbx, qword [rbp - 0x28]
add rbx, rcx
mov r8, r15
mov rdx, r9
mov rcx, rbx
call fcn.1400113a0
mov byte [r15 + rbx], 0
lea rax, [rbp - 0x28]
jmp 0x1400099ec
mov qword [rsp + 0x20], r15
mov rdx, r15
lea rcx, [rbp - 0x28]
call fcn.14000c650
mov rdx, rax
lea rcx, [rbp + 0x78]
call fcn.14000bda0
lea rdx, [rbp + 0x78]
lea rcx, [0x140183be0]
call fcn.14000bd00
lea rcx, [rbp + 0x78]
call fcn.14000bca0
nop
lea rcx, [rbp - 0x28]
call fcn.14000bca0
lea rcx, [0x140183be0]
call fcn.14000ba50
mov rdx, rax
lea r8, [0x14002ac48]
lea rcx, [rsp + 0x58]
call fcn.14001237c
mov r9, qword [rsp + 0x58]
test r9, r9
je 0x140009a6d
lea r8, [rsi - 1]
mov rdx, r14
mov rcx, rdi
call fcn.14001223c
mov rcx, qword [rsp + 0x58]
call fcn.140011ae0
mov qword [rbp - 0x40], rdi
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
jmp 0x140009a70
xor r14d, r14d
lea rcx, [rbp - 0x48]
call fcn.14000b7b0
jmp 0x140009a7e
mov r14d, r15d
lea rcx, [rsp + 0x40]
call fcn.14000b7b0
nop
lea rcx, [rbp - 0x60]
call fcn.14000b7b0
nop
lea rcx, [rbp + 0x38]
call fcn.14000bca0
jmp 0x140009aa9
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov r14d, r15d
lea rcx, [rbp + 0x58]
call fcn.14000bca0
nop
lea rcx, [rsp + 0x60]
call fcn.14000b7b0
nop
lea rcx, [rsp + 0x78]
call fcn.14000b7b0
nop
lea rcx, [rbp - 8]
call fcn.14000bca0
nop
lea rcx, [rbp + 0x18]
call fcn.14000bca0
mov eax, r14d
mov rcx, qword [rbp + 0x98]
xor rcx, rsp
call fcn.14000cfe0
lea r11, [rsp + 0x1c0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1400014b0
nop
call fcn.1400129bc
int3
call fcn.1400129bc
int3
call fcn.14000c080
nop
call fcn.14000c080
nop
call fcn.1400129bc
nop
call fcn.1400129bc
nop
call fcn.1400129bc
nop
call fcn.1400129bc
nop
call fcn.1400129bc
int3
call fcn.14000bdd0
int3
call fcn.140001410
int3
call fcn.1400129bc
int3