Function at 0x1400014f4
Capabilities:
Clear file content
Get file size
Move file

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x298]
sub rsp, 0x370
mov rax, qword [0x140028008]
xor rax, rsp
mov qword [rbp + 0x260], rax
xor r15d, r15d
xor r9d, r9d
mov qword [rsp + 0x30], r15
mov edx, 0xc0000000
mov dword [rsp + 0x28], 0x80
mov r14, rcx
mov dword [rsp + 0x20], 3
lea r8d, [r15 + 1]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rsi, rax
or rax, 0xffffffffffffffff
cmp rsi, rax
je 0x14000195e
lea rdx, [rsp + 0x48]
mov rcx, rsi
xor ebx, ebx
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
lea edi, [rbx + 0x6c]
mov rcx, rsi
sub rbx, rdi
lea r8d, [r15 + 2]
mov rdx, rbx
call fcn.1400013a0
mov r8d, edi
lea rcx, [rsp + 0x50]
xor edx, edx
call fcn.14000f770
lea r9, [rsp + 0x40]
mov r8d, edi
lea rdx, [rsp + 0x50]
mov rcx, rsi
call fcn.14000147c
cmp dword [rsp + 0x50], 0x1020102
jne 0x140001955
cmp dword [rbp - 0x48], 0x3040304
jne 0x140001955
lea r8d, [r15 + 0x20]
lea rdx, [0x140028a10]
lea rcx, [rbp - 0x68]
call fcn.140019530
test eax, eax
jne 0x140001955
mov r12, qword [rsp + 0x48]
add r12, 0xffffffffffffff94
cmp r12, qword [rsp + 0x58]
jne 0x140001955
lea rcx, [rbp + 0x170]
call section..text
movups xmm0, xmmword [rbp - 0x78]
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x170]
movdqu xmmword [rbp + 0x220], xmm0
call fcn.14000118c
movaps xmm0, xmmword [rsp + 0x60]
lea r8d, [r15 + 2]
movaps xmm1, xmmword [rsp + 0x70]
mov rdx, rbx
mov rax, qword [rbp - 0x80]
mov rcx, rsi
movups xmmword [rbp + 0x240], xmm0
mov qword [rbp + 0x230], rax
movups xmmword [rbp + 0x250], xmm1
call fcn.1400013a0
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
xor r8d, r8d
mov edx, r15d
mov rcx, rsi
mov ebx, r15d
call fcn.1400013a0
mov rcx, qword [rsp + 0x48]
movabs rax, 0xa3d70a3d70a3d70b
imul rcx
mov r13d, r15d
mov edi, r15d
add rdx, rcx
lea r15d, [rbx + 1]
sar rdx, 6
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rax, [rdx + rdx*4]
shl rax, 3
cmp rcx, 0x800001
jl 0x1400016c7
cqo
mov r13d, 0x800000
and edx, 0x7fffff
lea r15, [rdx + rax]
sar r15, 0x17
jmp 0x1400016ca
mov edi, r15d
xor edx, edx
lea rcx, [rbp - 0x40]
mov r8d, 0x1a8
call fcn.14000f770
mov r9d, 0x100
lea r8, [rbp + 0x240]
mov edx, 2
lea rcx, [rbp - 0x40]
call fcn.1400026c0
lea r8, [rbp + 0x230]
lea rcx, [rbp - 0x40]
call fcn.140002dc0
test edi, edi
je 0x1400017d0
mov ecx, r12d
call fcn.1400105fc
mov ecx, r12d
mov r15, rax
call fcn.1400105fc
xor r13d, r13d
mov rdi, rax
test r15, r15
je 0x1400018c0
test rax, rax
je 0x1400018c0
lea r9, [rsp + 0x40]
mov r8d, r12d
mov rdx, r15
mov rcx, rsi
call fcn.14000147c
mov r8d, dword [rsp + 0x40]
lea rax, [rbp + 0x230]
mov qword [rsp + 0x28], rax
lea rcx, [rbp - 0x40]
mov r9, rdi
mov qword [rsp + 0x20], r8
mov rdx, r15
mov qword [rbp + 0x230], r13
call fcn.140002f00
test eax, eax
jne 0x140001798
lea rax, [rbp + 0x238]
lea r9, [rbp + 0x230]
mov qword [rsp + 0x20], rax
lea rcx, [rbp - 0x40]
call fcn.1400032a0
xor r8d, r8d
mov rdx, rbx
mov rcx, rsi
call fcn.1400013a0
mov r8d, dword [rsp + 0x40]
lea r9, [rsp + 0x40]
mov rdx, rdi
mov rcx, rsi
call fcn.140001404
mov rcx, r15
call fcn.1400105e8
mov rcx, rdi
call fcn.1400105e8
jmp 0x1400018c0
mov ecx, r13d
call fcn.1400105fc
mov ecx, r13d
mov r12, rax
call fcn.1400105fc
mov rdi, rax
test r12, r12
je 0x1400018bd
test rax, rax
je 0x1400018bd
mov ecx, dword [rsp + 0x54]
test ecx, ecx
cmovne r15d, ecx
test r15d, r15d
je 0x1400018ad
xor r8d, r8d
mov rdx, rbx
mov rcx, rsi
call fcn.1400013a0
lea r9, [rsp + 0x40]
mov r8d, r13d
mov rdx, r12
mov rcx, rsi
call fcn.14000147c
mov r8d, dword [rsp + 0x40]
lea rax, [rbp + 0x230]
and qword [rbp + 0x230], 0
lea rcx, [rbp - 0x40]
mov qword [rsp + 0x28], rax
mov r9, rdi
mov rdx, r12
mov qword [rsp + 0x20], r8
call fcn.140002f00
test eax, eax
jne 0x140001879
lea rax, [rbp + 0x238]
lea r9, [rbp + 0x230]
mov qword [rsp + 0x20], rax
lea rcx, [rbp - 0x40]
call fcn.1400032a0
xor r8d, r8d
mov rdx, rbx
mov rcx, rsi
call fcn.1400013a0
mov r8d, dword [rsp + 0x40]
lea r9, [rsp + 0x40]
mov rdx, rdi
mov rcx, rsi
call fcn.140001404
add rbx, 0x800000
sub r15, 1
jne 0x14000180b
mov rcx, r12
call fcn.1400105e8
mov rcx, rdi
call fcn.1400105e8
xor r13d, r13d
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_lstrlenW]
inc eax
movsxd rcx, eax
mov eax, 2
mul rcx
mov rcx, 0xffffffffffffffff
cmovo rax, rcx
mov rcx, rax
call fcn.1400105fc
mov rbx, rax
test rax, rax
je 0x140001933
mov rdx, r14
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
lea rdx, str..mallab
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_StrStrW]
test rax, rax
je 0x14000192b
mov rdx, rbx
mov word [rax], r13w
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_MoveFileW]
mov rcx, rbx
call fcn.1400105e8
mov rcx, qword [0x140029c08]
xor r9d, r9d
mov edx, 0x3e9
mov qword [rsp + 0x20], r14
mov r8d, 0x180
call qword [sym.imp.USER32.dll_SendDlgItemMessageW]
jmp 0x14000195e
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x260]
xor rcx, rsp
call fcn.14000e730
lea r11, [rsp + 0x370]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret