Function at 0x140022fb0
Capabilities:
Write file on windows

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0xa8
mov rax, qword [0x1400f2688]
xor rax, rsp
mov qword [rbp + 7], rax
mov rbx, r9
mov r15, r8
mov r12, rdx
mov rsi, rcx
mov rcx, r9
call fcn.14004f040
test al, al
jne 0x140023278
mov r13, qword [rsi + 0x10]
movabs rcx, 0x7ffffffffffffffe
mov rax, rcx
sub rax, r13
cmp rax, 1
jb 0x1400232da
mov qword [rbp - 0x41], rsi
cmp qword [rsi + 0x18], 8
jb 0x140023023
mov rax, qword [rsi]
mov qword [rbp - 0x41], rax
xor eax, eax
mov qword [rbp - 0x39], rax
mov qword [rbp - 0x29], rax
mov qword [rbp - 0x21], rax
lea rax, [r13 + 1]
mov edi, 7
lea r14, [rbp - 0x39]
cmp rax, rdi
jbe 0x140023078
mov rdi, rax
or rdi, 7
cmp rdi, rcx
jbe 0x140023054
mov rdi, rcx
jmp 0x140023060
mov eax, 0xa
cmp rdi, rax
cmovb rdi, rax
lea rdx, [rdi + 1]
lea rcx, [rbp - 0x39]
call fcn.140029380
mov r14, rax
mov qword [rbp - 0x39], rax
lea rax, [r13 + 1]
mov qword [rbp - 0x29], rax
mov qword [rbp - 0x21], rdi
mov eax, 0x5b
mov word [r14], ax
lea rcx, [r14 + 2]
lea r8, [r13*2]
mov rdx, qword [rbp - 0x41]
call fcn.14008a080
xor eax, eax
mov word [r14 + r13*2 + 2], ax
mov rdx, qword [rbp - 0x29]
mov r8, qword [rbp - 0x21]
mov rax, r8
sub rax, rdx
cmp rax, 1
jb 0x1400230e8
lea rcx, [rdx + 1]
mov qword [rbp - 0x29], rcx
lea rax, [rbp - 0x39]
cmp r8, 8
cmovae rax, qword [rbp - 0x39]
mov r8d, 0x5d
mov word [rax + rdx*2], r8w
xor r14d, r14d
mov word [rax + rcx*2], r14w
lea rax, [rbp - 0x39]
jmp 0x14002310e
mov qword [rsp + 0x20], 1
lea r9, [0x1400b60cc]
movzx r8d, byte [rbp - 0x49]
mov edx, 1
lea rcx, [rbp - 0x39]
call fcn.140005170
xor r14d, r14d
mov qword [rbp - 0x19], r14
mov qword [rbp - 9], r14
mov qword [rbp - 1], r14
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x19], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 9], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 7
mov word [rax], r14w
mov rcx, rbx
call fcn.14004f040
test al, al
jne 0x1400231eb
mov rcx, rbx
cmp qword [rbx + 0x18], 8
jb 0x140023156
mov rcx, qword [rbx]
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov edx, 0xc0000000
lea r8d, [r9 + 1]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rdi, rax
cmp rax, 0xffffffffffffffff
je 0x1400231eb
mov eax, 0xfeff
mov word [rbp - 0x49], ax
mov dword [rbp - 0x41], r14d
mov qword [rsp + 0x20], r14
lea r9, [rbp - 0x41]
mov r8d, 2
lea rdx, [rbp - 0x49]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x1400231e1
mov r8d, dword [rbp - 9]
cmp qword [rbp - 9], 0
jbe 0x1400231e1
add r8d, r8d
lea rdx, [rbp - 0x19]
cmp qword [rbp - 1], 8
cmovae rdx, qword [rbp - 0x19]
mov qword [rsp + 0x20], r14
lea r9, [rbp - 0x41]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rdx, qword [rbp - 1]
cmp rdx, 8
jb 0x14002322b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140023226
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400232e0
call fcn.140087c4c
mov qword [rbp - 9], r14
mov qword [rbp - 1], 7
mov word [rbp - 0x19], r14w
mov rdx, qword [rbp - 0x21]
cmp rdx, 8
jb 0x140023278
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x39]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140023273
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400232d4
call fcn.140087c4c
cmp qword [rbx + 0x18], 8
jb 0x140023282
mov rbx, qword [rbx]
cmp qword [r15 + 0x18], 8
jb 0x14002328c
mov r15, qword [r15]
cmp qword [r12 + 0x18], 8
jb 0x140023298
mov r12, qword [r12]
cmp qword [rsi + 0x18], 8
jb 0x1400232a2
mov rsi, qword [rsi]
mov r9, rbx
mov r8, r15
mov rdx, r12
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov rcx, qword [rbp + 7]
xor rcx, rsp
call fcn.140088250
add rsp, 0xa8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.14008e46c
int3
call fcn.140029080
nop
call fcn.14008e46c
nop
int3