Function at 0x1400a281e
Capabilities:
Clear file content
Get file size
Get graphical window text
Write file on windows

Disassembly:
jmp 0x1400e8a70
mov qword [rsp + 8], rcx
push rbp
push rdi
sub rsp, 0x5b8
lea rbp, [rsp + 0x40]
lea rdi, [rsp + 0x40]
mov ecx, 0xfe
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0x5d8]
mov rax, qword [0x140248940]
xor rax, rbp
mov qword [rbp + 0x568], rax
lea rcx, [0x140266107]
call fcn.1400a4e07
mov dword [rbp + 4], 0
mov qword [rbp + 0x88], 0
mov qword [rbp + 0xc8], 0xffffffffffffffff
lea rax, [rbp + 0xf0]
mov rdi, rax
xor eax, eax
mov ecx, 0x20a
rep stosb byte [rdi], al
mov r8d, 0x20
lea rdx, [rbp + 0xf0]
mov rax, qword [rbp + 0x590]
mov rcx, qword [rax + 0x50]
call qword [sym.imp.USER32.dll_GetWindowTextW]
mov rax, qword [rbp + 0x590]
add rax, 0x70
mov r9, rax
lea r8, [rbp + 0xf0]
lea rdx, str.version
lea rcx, str.Package
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov r8d, 0x104
lea rdx, [rbp + 0xf0]
mov rax, qword [rbp + 0x590]
mov rcx, qword [rax + 0x48]
call qword [sym.imp.USER32.dll_GetWindowTextW]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov r8d, 1
mov edx, 0xc0000000
lea rcx, [rbp + 0xf0]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rbp + 0xc8], rax
cmp qword [rbp + 0xc8], 0xffffffffffffffff
jne 0x1400e8b9d
jmp 0x1400e8d9c
mov rcx, qword [rbp + 0xc8]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rbp + 0xa4], 0x2000
mov eax, dword [rbp + 0xa4]
mov ecx, eax
call fcn.1400a2e31
mov qword [rbp + 0x88], rax
cmp qword [rbp + 0x88], 0
jne 0x1400e8bdc
jmp 0x1400e8d9c
mov r8d, 0x58
xor edx, edx
lea rcx, [rbp + 0x380]
call fcn.1400a39d0
mov dword [rbp + 0x380], 1
lea rax, [rbp + 0xf0]
mov qword [rbp + 0x398], rax
mov dword [rbp + 0x3a0], 0x104
mov dword [rbp + 0x388], 1
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1004
mov rax, qword [rbp + 0x590]
mov rcx, qword [rax + 0x58]
call qword [sym.imp.USER32.dll_SendMessageW]
mov dword [rbp + 0x334], eax
mov r8d, 0x1c
xor edx, edx
lea rcx, [rbp + 0x28]
call fcn.1400a39d0
mov eax, dword [rbp + 0x334]
mov dword [rbp + 0x2c], eax
mov r8d, 0x20
lea rdx, [rbp + 0xf0]
mov rax, qword [rbp + 0x590]
mov rcx, qword [rax + 0x50]
call qword [sym.imp.USER32.dll_GetWindowTextW]
lea rcx, [rbp + 0xf0]
call fcn.1400a2b66
mov dword [rbp + 0x28], eax
mov qword [rsp + 0x20], 0
lea r9, [rbp + 0x64]
mov r8d, 0x1c
lea rdx, [rbp + 0x28]
mov rcx, qword [rbp + 0xc8]
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x1400e8cb7
jmp 0x1400e8d9c
mov dword [rbp + 0x314], 0
jmp 0x1400e8cd1
mov eax, dword [rbp + 0x314]
inc eax
mov dword [rbp + 0x314], eax
mov eax, dword [rbp + 0x334]
cmp dword [rbp + 0x314], eax
jge 0x1400e8d40
mov eax, dword [rbp + 0x314]
mov dword [rbp + 0x384], eax
lea r9, [rbp + 0x380]
xor r8d, r8d
mov edx, 0x104b
mov rax, qword [rbp + 0x590]
mov rcx, qword [rax + 0x58]
call qword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [rbp + 0xa4]
mov dword [rsp + 0x20], eax
mov r9, qword [rbp + 0x88]
lea r8, [rbp + 0xf0]
mov rdx, qword [rbp + 0xc8]
mov rcx, qword [rbp + 0x590]
call fcn.1400a4ae2
test eax, eax
jne 0x1400e8d3e
jmp 0x1400e8d9c
jmp 0x1400e8cc3
lea rdx, [rbp + 0x358]
mov rcx, qword [rbp + 0xc8]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
test eax, eax
jne 0x1400e8d5c
jmp 0x1400e8d9c
mov eax, dword [rbp + 0x358]
mov dword [rbp + 0x30], eax
mov eax, dword [rbp + 0xa4]
mov dword [rsp + 0x20], eax
mov r9, qword [rbp + 0x88]
lea r8, [rbp + 0x28]
mov rdx, qword [rbp + 0xc8]
mov rcx, qword [rbp + 0x590]
call fcn.1400a073f
test eax, eax
jne 0x1400e8d95
jmp 0x1400e8d9c
mov dword [rbp + 4], 1
cmp qword [rbp + 0xc8], 0xffffffffffffffff
je 0x1400e8db3
mov rcx, qword [rbp + 0xc8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp qword [rbp + 0x88], 0
je 0x1400e8dc9
mov rcx, qword [rbp + 0x88]
call fcn.1400a1bcb
mov eax, dword [rbp + 4]
mov edi, eax
lea rcx, [rbp - 0x40]
lea rdx, [0x140200540]
call fcn.1400a3fe8
mov eax, edi
mov rcx, qword [rbp + 0x568]
xor rcx, rbp
call fcn.1400a25bc
lea rsp, [rbp + 0x578]
pop rdi
pop rbp
ret