Function at 0x1400308b8
Capabilities:
Timestomp file
Write file on windows

Disassembly:
mov rax, rsp
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0xc0
mov qword [rbp - 0x21], 0xfffffffffffffffe
mov qword [rax + 0x20], rbx
mov rax, qword [section..data]
xor rax, rsp
mov qword [rbp + 0x1f], rax
mov qword [rbp - 0x61], r8
mov r13, rcx
movsxd rdx, edx
mov rax, qword [rcx + 0xf8]
mov rdi, qword [rax + rdx*8]
mov rcx, qword [rdi + 0x20]
mov r12b, byte [rcx + 0x80d]
test r12b, r12b
je 0x140030915
mov eax, dword [rdi + 0x30]
jmp 0x140030918
mov eax, dword [rdi + 0x32]
mov r14d, eax
test r12b, r12b
je 0x140030925
mov eax, dword [rdi + 0x2c]
jmp 0x140030928
mov eax, dword [rdi + 0x2a]
mov qword [rbp - 0x59], rax
test r12b, r12b
mov ebx, 0x800
jne 0x14003093d
movzx ebx, word [rcx + 0x80]
mov r15d, 1
mov dword [rbp - 0x49], r15d
cmp ebx, dword [r13 + 0xd4]
jne 0x14003095c
lea ebx, [rbx + rbx*4]
add ebx, ebx
mov dword [rbp - 0x49], 0xa
mov rcx, qword [r13 + 0xa0]
lea rsi, [0x14012da68]
test rcx, rcx
je 0x140030986
mov rdx, rsi
cmp qword [r8 + 8], 0
cmovne rdx, qword [r8 + 8]
mov rax, qword [rcx]
call qword [rax + 0x20]
mov r8, qword [rbp - 0x61]
cmp qword [r8 + 8], 0
cmovne rsi, qword [r8 + 8]
mov r8d, 0x1000
mov rdx, rsi
lea rcx, [rbp - 0x39]
call fcn.1400e825c
nop
cmp qword [rbp - 0x31], 0
jne 0x1400309b2
xor r15b, r15b
jmp 0x140030b49
mov edx, ebx
lea rcx, [rbp - 0x19]
call fcn.140024ca0
nop
and dword [rbp - 0x69], 0
mov rdx, r14
mov qword [rbp - 0x61], rdx
xor ecx, ecx
mov qword [rbp - 0x51], rcx
test r14, r14
js 0x140030a9a
mov esi, r14d
mov eax, ebx
cmp rax, r14
cmovl esi, ebx
test esi, esi
je 0x140030a31
lea rcx, [r13 + 0xa8]
mov r9, qword [rbp + 7]
mov r8d, esi
mov edx, dword [rbp - 0x59]
call fcn.14002e380
cmp eax, esi
jne 0x140030a92
and dword [rbp - 0x69], 0
and qword [rsp + 0x20], 0
lea r9, [rbp - 0x69]
mov r8d, esi
mov rdx, qword [rbp + 7]
mov rcx, qword [rbp - 0x31]
call qword [sym.imp.KERNEL32.DLL_WriteFile]
cmp dword [rbp - 0x69], esi
jne 0x140030a92
mov rcx, qword [rbp - 0x51]
mov rdx, qword [rbp - 0x61]
add rcx, rsi
mov qword [rbp - 0x51], rcx
mov r9, qword [r13 + 0xa0]
test r9, r9
je 0x140030a78
mov rax, qword [r9]
mov r8, rdx
mov rdx, rcx
mov rcx, r9
call qword [rax + 0x28]
mov rcx, qword [r13 + 0xa0]
mov rax, qword [rcx]
mov rdx, rsi
call qword [rax + 0x40]
mov rcx, qword [r13 + 0xa0]
mov rax, qword [rcx]
call qword [rax + 0x48]
test al, al
jne 0x140030a9a
mov rcx, qword [rbp - 0x51]
mov eax, ebx
sub r14, rax
mov eax, dword [rbp - 0x49]
add qword [rbp - 0x59], rax
test r14, r14
js 0x140030a9a
mov rdx, qword [rbp - 0x61]
jmp 0x1400309d8
xor r15b, r15b
jmp 0x140030b2e
test r12b, r12b
jne 0x140030b2e
xor edx, edx
lea r8d, [rdx + 0x10]
lea rcx, [rbp + 0xf]
call qword [sym.imp.msvcrt.dll_memset]
movzx eax, byte [rdi + 0x3a]
mov ecx, 0x76c
add ax, cx
mov word [rbp + 0xf], ax
movzx eax, byte [rdi + 0x3b]
mov word [rbp + 0x11], ax
movzx eax, byte [rdi + 0x3c]
mov word [rbp + 0x15], ax
movzx eax, byte [rdi + 0x3d]
mov word [rbp + 0x17], ax
movzx eax, byte [rdi + 0x3e]
mov word [rbp + 0x19], ax
movzx eax, byte [rdi + 0x3f]
mov word [rbp + 0x1b], ax
lea rdx, [rbp - 0x61]
lea rcx, [rbp + 0xf]
call qword [sym.imp.KERNEL32.DLL_SystemTimeToFileTime]
lea rdx, [rbp - 0x59]
lea rcx, [rbp - 0x61]
call qword [sym.imp.KERNEL32.DLL_LocalFileTimeToFileTime]
mov rax, qword [rbp - 0x59]
mov qword [rbp - 0x51], rax
mov qword [rbp - 0x49], rax
mov qword [rbp - 0x41], rax
lea r9, [rbp - 0x51]
lea r8, [rbp - 0x49]
lea rdx, [rbp - 0x41]
mov rcx, qword [rbp - 0x31]
call qword [sym.imp.KERNEL32.DLL_SetFileTime]
nop
lea rax, vtable.micro::utils::QBaseArray.0
mov qword [rbp - 0x19], rax
mov rcx, qword [rbp + 7]
test rcx, rcx
je 0x140030b49
call qword [sym.imp.msvcrt.dll_void___cdecl_operator_delete___void____ptr64_]
nop
lea rax, vtable.micro::files::QFile.0
mov qword [rbp - 0x39], rax
lea rcx, [rbp - 0x39]
call fcn.1400e8500
mov al, r15b
mov rcx, qword [rbp + 0x1f]
xor rcx, rsp
call fcn.140001010
mov rbx, qword [rsp + 0x118]
add rsp, 0xc0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret