Function at 0x1400095d0
Capabilities:
Write file on windows

Disassembly:
mov r11, rsp
sub rsp, 0x98
mov rax, qword [0x14003f010]
xor rax, rsp
mov qword [rsp + 0x80], rax
mov rcx, qword [0x140040fb0]
cmp dword [rcx + 0x24cdab4], 0
je 0x140009869
mov r9d, 0xa
mov qword [r11 - 8], rdi
add rcx, 0x24cca20
mov qword [r11 + 8], rbx
lea rdx, str.S_0_0_0_c_c
lea r8d, [r9 + 3]
call fcn.1400010b0
mov rdx, qword [0x140040fb0]
xor edi, edi
cmp dword [rdx + 0x24cda50], 1
jne 0x140009678
mov rbx, qword [rdx + 0x2582e38]
cmp dword [rbx + 8], 1
je 0x140009678
add rdx, 0x24cca20
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], dil
jne 0x140009652
mov rcx, qword [rbx + 0xe00028]
lea r9, [rsp + 0x30]
mov qword [rsp + 0x20], rdi
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov dword [rbx + 0xe00020], edi
mov r8d, 0x1f4
call fcn.14000ade0
movsxd r8, eax
test eax, eax
jle 0x140009859
mov rbx, qword [0x140040fb0]
mov edx, edi
mov qword [rsp + 0xa8], rsi
mov byte [r8 + rbx + 0x1db2a20], dil
mov rcx, qword [rbx + 0x2582e38]
mov r9d, dword [rcx + 0xe00018]
mov eax, dword [rcx + 0xe0001c]
cmp r9d, eax
je 0x1400096dc
inc eax
mov dword [rcx + 0xe0001c], eax
cmp eax, 0x700000
jb 0x1400096d5
mov dword [rcx + 0xe0001c], edi
inc edx
cmp edx, r8d
jl 0x1400096b5
xorps xmm0, xmm0
mov dword [rbx + 0x2582e0c], 1
movabs rax, 0x4000000000000000
mov dword [rbx + 0x2582e08], 1
movups xmmword [rsp + 0x40], xmm0
mov qword [rbx + 0x90], rax
lea r10, [rbx + 0x1db2a26]
movups xmmword [rsp + 0x50], xmm0
mov dword [rbx + 0x60], InitCommonControls
mov esi, edi
movups xmmword [rsp + 0x60], xmm0
mov dword [rbx + 0x2582ea4], edi
mov r11, rdi
mov dword [rbx + 0x24cda6c], 1
mov dword [rbx + 0x2582eac], edi
mov dword [rbx + 0x24cdaf0], 1
nop word [rax + rax]
mov r8d, edi
mov r9d, edi
mov rdx, rdi
nop dword [rax]
movzx ecx, byte [rdx + r10]
lea eax, [rcx - 0x30]
cmp al, 9
ja 0x140009779
movsx eax, al
lea ecx, [r8 + r8*4]
lea r8d, [rax + rcx*2]
jmp 0x140009784
cmp cl, 0x2d
jne 0x14000978f
mov r9d, 1
inc rdx
cmp rdx, 0x10
jl 0x140009760
jmp 0x140009797
cmp cl, 0x2c
jne 0x140009797
inc rdx
add r10, rdx
mov eax, r8d
neg eax
cmp r9d, 1
movzx ecx, byte [r10]
cmovne eax, r8d
mov dword [rsp + r11*4 + 0x40], eax
lea eax, [rcx - 0x30]
cmp al, 9
jbe 0x1400097bf
sub cl, 0x2c
cmp cl, 1
ja 0x1400097cd
inc esi
inc r11
cmp r11, 0x1000
jl 0x140009750
mov eax, dword [rsp + 0x40]
mov dword [rbx + 0x2582e0c], eax
mov eax, dword [rsp + 0x44]
mov dword [rbx + 0x2582e08], eax
mov eax, dword [rsp + 0x48]
mov dword [rbx + 0x60], eax
mov eax, dword [rsp + 0x4c]
mov dword [rbx + 0x2582ea4], eax
mov eax, dword [rsp + 0x50]
mov dword [rbx + 0x24cda6c], eax
mov eax, dword [rsp + 0x54]
mov dword [rbx + 0x2582eac], eax
mov eax, dword [rsp + 0x58]
mov dword [rbx + 0x24cdaf0], eax
cmp esi, 7
jl 0x14000983d
mov eax, dword [rsp + 0x5c]
cmp eax, 0x3e8
jle 0x14000983d
movd xmm0, eax
mov edi, 1
cvtdq2pd xmm0, xmm0
mulsd xmm0, qword [0x14003a660]
movsd qword [rbx + 0x90], xmm0
cmp esi, 8
mov rsi, qword [rsp + 0xa8]
jl 0x140009859
cmp edi, 1
jne 0x140009859
mov eax, dword [rsp + 0x60]
mov dword [rbx + 0x2582dcc], eax
mov rbx, qword [rsp + 0xa0]
mov rdi, qword [rsp + 0x90]
mov rcx, qword [rsp + 0x80]
xor rcx, rsp
call fcn.140011800
add rsp, 0x98
ret