Function at 0x14001e010
Capabilities:
Write file on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xf8
mov rsi, rcx
lea rax, [rcx + 0x80]
mov qword [rsp + 0xa8], rax
lea rdi, [rcx + 0x74]
lea rax, [rcx + 0x71]
mov qword [rsp + 0xa0], rax
lea rax, [rcx + 0x68]
mov qword [rsp + 0x98], rax
mov eax, 0xb97b1218
mov ebp, 0x1314be3b
lea r15, [rsp + 0xd0]
lea r14, [rsp + 0xb0]
jmp 0x14001e090
mov rax, qword [rsp + 0x90]
mov rax, qword [rsp + 0x88]
mov eax, 0xb48a17a0
mov ebx, r12d
nop word cs:[rax + rax]
nop
cmp eax, 0xeda56ce
jg 0x14001e0e0
cmp eax, 0xe1a50c26
jg 0x14001e140
cmp eax, 0xacc41a00
jg 0x14001e1e0
cmp eax, 0x9c97d1b2
jle 0x14001e2d3
cmp eax, 0x9c97d1b3
je 0x14001e4b6
cmp eax, 0xa8678dfd
je 0x14001e4c0
cmp eax, 0xaa0c368e
jne 0x14001e090
mov eax, 0x42efb998
mov r12d, r13d
jmp 0x14001e090
cmp eax, 0x42efb997
jg 0x14001e190
cmp eax, 0x2554f0de
jle 0x14001e226
cmp eax, 0x39378d9b
jle 0x14001e2fb
cmp eax, 0x39378d9c
je 0x14001e4ca
cmp eax, 0x3e615fae
je 0x14001e4fb
cmp eax, 0x422e5604
jne 0x14001e090
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0x40], rax
mov eax, 0x69641720
jmp 0x14001e090
cmp eax, 0xee8b31e1
jle 0x14001e260
cmp eax, 0xfcabd452
jle 0x14001e354
cmp eax, 0xfcabd453
je 0x14001e512
cmp eax, 0x34a862d
je 0x14001e521
cmp eax, 0x859ecc9
jne 0x14001e090
mov eax, 0xb48a17a0
mov bl, 1
jmp 0x14001e090
cmp eax, 0x511712d9
jle 0x14001e298
cmp eax, 0x6964171f
jle 0x14001e383
cmp eax, 0x69641720
je 0x14001e547
cmp eax, 0x70543c90
je 0x14001e55e
cmp eax, 0x7bb0c4f9
jne 0x14001e090
mov eax, dword [rsp + 0x34]
cmp eax, 1
mov eax, 0x9c97d1b3
mov ecx, 0x470e58e4
cmove eax, ecx
jmp 0x14001e090
cmp eax, 0xbd5d18b5
jg 0x14001e3c8
cmp eax, 0xacc41a01
je 0x14001e568
cmp eax, 0xb97b1218
jne 0x14001e6da
mov rax, qword [rsp + 0x98]
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0x70]
cmp qword [rax], 0
setne byte [rsp + 0x30]
mov eax, 0xe1b5ea6a
jmp 0x14001e090
cmp eax, 0x1314be3a
jg 0x14001e3eb
cmp eax, 0xeda56cf
je 0x14001e582
cmp eax, 0x10b29eb5
jne 0x14001e090
mov eax, dword [rsp + 0x34]
cmp eax, 3
mov eax, 0xfb2e329a
mov ecx, 0x7bb0c4f9
cmovl eax, ecx
jmp 0x14001e090
cmp eax, 0xe40c2a4f
jg 0x14001e414
cmp eax, 0xe1a50c27
je 0x14001e58f
cmp eax, 0xe1b5ea6a
jne 0x14001e090
cmp byte [rsp + 0x30], 0
mov eax, 0x859ecc9
mov ecx, 0x422e5604
cmovne eax, ecx
jmp 0x14001e090
cmp eax, 0x4e37a8d4
jg 0x14001e444
cmp eax, 0x42efb998
je 0x14001e06d
cmp eax, 0x470e58e4
jne 0x14001e090
mov rax, qword [rsp + 0xb0]
mov qword [rsp + 0xb8], rax
mov eax, 0xee8b31e2
jmp 0x14001e090
cmp eax, 0x80b8114c
je 0x14001e59c
cmp eax, 0x914f7f47
jne 0x14001e090
mov rax, qword [rsp + 0x40]
mov byte [rax], 0
mov eax, 0xa8678dfd
jmp 0x14001e090
cmp eax, 0x2554f0df
je 0x14001e5ae
cmp eax, 0x33dfdc07
jne 0x14001e090
mov eax, dword [rsp + 0x38]
mov dword [rsp + 0x60], eax
mov edx, 0xf94d40b3
mov eax, dword [rsp + 0x3c]
nop word cs:[rax + rax]
nop dword [rax]
cmp edx, 0x38f4db23
je 0x14001e5c5
cmp edx, 0xf94d40b3
jne 0x14001e330
mov ecx, dword [rsp + 0x60]
cmp ecx, eax
sete cl
mov edx, 0x38f4db23
jmp 0x14001e330
cmp eax, 0xee8b31e2
je 0x14001e5f0
cmp eax, 0xfb2e329a
jne 0x14001e090
mov eax, dword [rsp + 0x34]
cmp eax, 3
mov eax, 0x9c97d1b3
mov ecx, 0x80b8114c
cmove eax, ecx
jmp 0x14001e090
cmp eax, 0x511712da
je 0x14001e634
cmp eax, 0x64a14f38
jne 0x14001e090
mov eax, dword [rsp + 0x6c]
mov dword [rsp + 0x3c], eax
lea rax, [rsp + 0x38]
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0x80]
mov dword [rsp + 0x38], 0xffffffff
mov eax, 0x33dfdc07
jmp 0x14001e090
cmp eax, 0xbd5d18b6
je 0x14001e640
cmp eax, 0xc8d75b7e
jne 0x14001e090
mov eax, 0x42efb998
mov r12b, 1
jmp 0x14001e090
cmp eax, 0x1314be3b
je 0x14001e66b
cmp eax, 0x1c88994c
jne 0x14001e090
cmp qword [rsp + 0x50], 0
mov eax, 0xe9d4c983
cmove eax, ebp
jmp 0x14001e090
cmp eax, 0xe40c2a50
je 0x14001e680
cmp eax, 0xe9d4c983
jne 0x14001e090
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0xc0], rax
mov eax, 0x39378d9c
jmp 0x14001e090
cmp eax, 0x4e37a8d5
je 0x14001e697
cmp eax, 0x4ecd5b5b
jne 0x14001e090
mov rax, qword [rsp + 0x90]
mov rax, qword [rsp + 0x70]
mov rcx, qword [rax]
mov qword [rsp + 0x48], r15
mov r9, qword [rsp + 0x48]
mov r8, qword [rsp + 0x48]
mov rax, qword [rcx]
add rax, 0x40
mov qword [rsp + 0x58], rax
mov eax, 0xf9ed2769
nop word [rax + rax]
cmp eax, 0xcbfddcae
je 0x14001e6b9
cmp eax, 0xf9ed2769
jne 0x14001e490
mov rax, qword [rsp + 0x58]
mov rax, qword [rax]
mov qword [rsp + 0x60], rax
mov eax, 0xcbfddcae
jmp 0x14001e490
mov eax, 0xeda56cf
jmp 0x14001e090
mov eax, 0x470e58e4
jmp 0x14001e090
mov rax, qword [rsp + 0xc0]
mov r9, qword [rax]
mov rcx, qword [rsp + 0x48]
mov r8, qword [rsp + 0x50]
mov edx, 1
call fcn.140033fcc
mov qword [rsp + 0xc8], rax
mov eax, 0xacc41a01
jmp 0x14001e090
cmp dword [rsp + 0x34], 0
mov eax, 0x9c97d1b3
mov ecx, 0x914f7f47
cmove eax, ecx
jmp 0x14001e090
mov eax, 0xaa0c368e
mov r13b, byte [rsp + 0x33]
jmp 0x14001e090
mov al, byte [rsp + 0x32]
mov ecx, eax
not cl
mov edx, ecx
and dl, 0x7e
and al, 0x81
or al, dl
xor al, 0x7f
or al, cl
cmp al, 0xff
sete byte [rsp + 0x33]
mov eax, 0xfcabd453
jmp 0x14001e090
mov rax, qword [rsp + 0x40]
cmp byte [rax], 0
setne byte [rsp + 0x31]
mov eax, 0x2554f0df
jmp 0x14001e090
mov eax, 0xe40c2a50
jmp 0x14001e090
mov rax, qword [rsp + 0x50]
cmp rax, qword [rsp + 0xc8]
mov eax, 0xe1a50c27
cmove eax, ebp
jmp 0x14001e090
mov eax, 0x42efb998
xor r12d, r12d
jmp 0x14001e090
mov eax, 0xaa0c368e
xor r13d, r13d
jmp 0x14001e090
mov rax, qword [rsp + 0x40]
mov byte [rax], 0
mov eax, 0xc8d75b7e
jmp 0x14001e090
cmp byte [rsp + 0x31], 0
mov eax, 0x859ecc9
mov ecx, 0xbd5d18b6
cmovne eax, ecx
jmp 0x14001e090
and cl, 1
mov byte [rsp + 0x58], cl
cmp byte [rsp + 0x58], 0
mov rax, qword [rsp + 0x80]
mov rax, qword [rsp + 0x78]
mov eax, 0x4e37a8d5
mov ecx, 0x511712da
cmovne eax, ecx
jmp 0x14001e090
mov rax, qword [rsp + 0x48]
mov rcx, qword [rsp + 0xb8]
movabs rbp, 0x2cd49266670d9912
add rcx, rbp
movabs rdx, 0x2f954e9ffde73457
add rcx, rdx
sub rcx, rbp
mov ebp, 0x1314be3b
sub rcx, rax
sub rcx, rdx
mov qword [rsp + 0x50], rcx
mov eax, 0x1c88994c
jmp 0x14001e090
mov eax, 0xb48a17a0
xor ebx, ebx
jmp 0x14001e090
lea rax, [rsp + 0x3c]
mov qword [rsp + 0x78], rax
mov rax, qword [rsp + 0x78]
mov rax, qword [rsi]
mov rcx, rsi
mov edx, 0xffffffff
call qword [rax + 0x18]
mov dword [rsp + 0x6c], eax
mov eax, 0x64a14f38
jmp 0x14001e090
mov rax, qword [rsp + 0x40]
mov al, byte [rax]
mov byte [rsp + 0x32], al
mov eax, 0x34a862d
jmp 0x14001e090
cmp dword [rsp + 0x34], 0
mov eax, 0x10b29eb5
mov ecx, 0x3e615fae
cmovle eax, ecx
jmp 0x14001e090
mov qword [rsp + 0x88], r15
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0x90], r14
mov eax, 0x4ecd5b5b
jmp 0x14001e090
add r9, 0x20
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x20], r14
mov rdx, rdi
call rax
mov dword [rsp + 0x34], eax
mov eax, 0x70543c90
jmp 0x14001e090
cmp eax, 0xb48a17a0
jne 0x14001e090
and bl, 1
mov eax, ebx
add rsp, 0xf8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret