Function at 0x140009fd0
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r14
push r15
sub rsp, 0x20
mov rdi, qword [0x14005b820]
mov rax, qword [rdi + 0x38]
test rax, rax
je 0x14000a04c
cmp byte [rdi + 1], 0
je 0x14000a04c
mov byte [rax + 0x18], 0
mov rbx, qword [rdi + 0x38]
test rbx, rbx
je 0x14000a04c
mov rcx, rbx
call fcn.14002cb80
nop
mov rcx, qword [rbx + 0x80]
test rcx, rcx
je 0x14000a026
call fcn.14000b420
nop
mov rcx, qword [rbx + 0x70]
test rcx, rcx
je 0x14000a035
call fcn.14000b420
nop
mov rcx, qword [rbx + 0x60]
test rcx, rcx
je 0x14000a044
call fcn.14000b420
nop
mov rcx, rbx
call fcn.14000b420
xor r15d, r15d
mov qword [rdi + 0x38], r15
mov rcx, qword [rdi + 0x3da8]
test rcx, rcx
je 0x14000a072
mov qword [rdi + 0x3da0], r15
call fcn.14000b420
mov qword [rdi + 0x3da8], r15
cmp byte [rdi], r15b
je 0x14000a67a
cmp byte [rdi + 0x5f98], r15b
je 0x14000a0e3
mov rbx, qword [rdi + 0x20]
test rbx, rbx
je 0x14000a0e3
mov rax, qword [0x14005b820]
mov dword [rax + 0x5f9c], r15d
mov qword [rsp + 0x40], r15
lea rcx, [rsp + 0x40]
call fcn.14001f940
mov rsi, rax
lea rdx, [0x140052414]
mov rcx, rbx
call fcn.140007940
mov rbx, rax
test rax, rax
je 0x14000a0e3
mov r9, rax
mov r8, qword [rsp + 0x40]
mov edx, 1
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov rbx, qword [rdi + 0x5fe8]
movsxd rsi, dword [rdi + 0x5fe0]
shl rsi, 5
add rsi, rbx
cmp rbx, rsi
je 0x14000a11b
nop dword [rax]
cmp dword [rbx + 4], 6
jne 0x14000a112
mov rax, qword [rbx + 0x10]
mov rdx, rbx
mov rcx, rdi
call rax
add rbx, 0x20
cmp rbx, rsi
jne 0x14000a100
mov ebx, r15d
cmp dword [rdi + 0x3fe0], r15d
jle 0x14000a15e
mov r14, r15
nop word [rax + rax]
mov rax, qword [rdi + 0x3fe8]
mov rsi, qword [r14 + rax]
test rsi, rsi
je 0x14000a150
mov rcx, rsi
call fcn.14000ab60
mov rcx, rsi
call fcn.14000b420
inc ebx
add r14, 8
cmp ebx, dword [rdi + 0x3fe0]
jl 0x14000a130
mov rcx, qword [rdi + 0x3fe8]
test rcx, rcx
je 0x14000a17d
mov qword [rdi + 0x3fe0], r15
call fcn.14000b420
mov qword [rdi + 0x3fe8], r15
mov rcx, qword [rdi + 0x3ff8]
test rcx, rcx
je 0x14000a19c
mov qword [rdi + 0x3ff0], r15
call fcn.14000b420
mov qword [rdi + 0x3ff8], r15
mov rcx, qword [rdi + 0x4008]
test rcx, rcx
je 0x14000a1bb
mov qword [rdi + 0x4000], r15
call fcn.14000b420
mov qword [rdi + 0x4008], r15
mov qword [rdi + 0x4040], r15
mov rcx, qword [rdi + 0x4018]
test rcx, rcx
je 0x14000a1e1
mov qword [rdi + 0x4010], r15
call fcn.14000b420
mov qword [rdi + 0x4018], r15
mov rcx, qword [rdi + 0x4028]
test rcx, rcx
je 0x14000a200
mov qword [rdi + 0x4020], r15
call fcn.14000b420
mov qword [rdi + 0x4028], r15
mov qword [rdi + 0x4b68], r15
mov qword [rdi + 0x4050], r15
mov qword [rdi + 0x4048], r15
mov qword [rdi + 0x40e8], r15
mov qword [rdi + 0x40d0], r15
mov qword [rdi + 0x4060], r15
lea rcx, [rdi + 0x4860]
call fcn.1400058f0
mov rcx, qword [rdi + 0x4ad0]
test rcx, rcx
je 0x14000a255
mov qword [rdi + 0x4ac8], r15
call fcn.14000b420
mov qword [rdi + 0x4ad0], r15
mov rcx, qword [rdi + 0x4ae0]
test rcx, rcx
je 0x14000a274
mov qword [rdi + 0x4ad8], r15
call fcn.14000b420
mov qword [rdi + 0x4ae0], r15
mov rcx, qword [rdi + 0x4af0]
test rcx, rcx
je 0x14000a293
mov qword [rdi + 0x4ae8], r15
call fcn.14000b420
mov qword [rdi + 0x4af0], r15
mov rcx, qword [rdi + 0x4b30]
test rcx, rcx
je 0x14000a2b2
mov qword [rdi + 0x4b28], r15
call fcn.14000b420
mov qword [rdi + 0x4b30], r15
mov rcx, qword [rdi + 0x4b40]
test rcx, rcx
je 0x14000a2d1
mov qword [rdi + 0x4b38], r15
call fcn.14000b420
mov qword [rdi + 0x4b40], r15
mov rcx, qword [rdi + 0x4b50]
test rcx, rcx
je 0x14000a2f0
mov qword [rdi + 0x4b48], r15
call fcn.14000b420
mov qword [rdi + 0x4b50], r15
mov ebp, r15d
cmp dword [rdi + 0x4b58], r15d
jle 0x14000a37a
mov r14, r15
nop
mov rax, qword [rdi + 0x4b60]
mov rbx, qword [r14 + rax]
test rbx, rbx
je 0x14000a36c
mov rsi, qword [rbx + 0x38]
test rsi, rsi
je 0x14000a329
mov rcx, rsi
call fcn.140005770
mov rcx, rsi
call fcn.14000b420
mov rsi, qword [rbx + 0x40]
test rsi, rsi
je 0x14000a343
mov rcx, rsi
call fcn.140005770
mov rcx, rsi
call fcn.14000b420
nop
mov rcx, qword [rbx + 0xa0]
test rcx, rcx
je 0x14000a355
call fcn.14000b420
nop
mov rcx, qword [rbx + 0x60]
test rcx, rcx
je 0x14000a364
call fcn.14000b420
nop
mov rcx, rbx
call fcn.14000b420
inc ebp
add r14, 8
cmp ebp, dword [rdi + 0x4b58]
jl 0x14000a300
mov rcx, qword [rdi + 0x4b60]
test rcx, rcx
je 0x14000a399
mov qword [rdi + 0x4b58], r15
call fcn.14000b420
mov qword [rdi + 0x4b60], r15
lea rcx, [rdi + 0x4eb0]
call fcn.140020ca0
mov rcx, qword [rdi + 0x4ee0]
test rcx, rcx
je 0x14000a3c4
mov qword [rdi + 0x4ed8], r15
call fcn.14000b420
mov qword [rdi + 0x4ee0], r15
mov rcx, qword [rdi + 0x4ef0]
test rcx, rcx
je 0x14000a3e3
mov qword [rdi + 0x4ee8], r15
call fcn.14000b420
mov qword [rdi + 0x4ef0], r15
mov ebx, r15d
cmp dword [rdi + 0x4e30], r15d
jle 0x14000a425
mov rsi, r15
nop dword [rax]
nop word [rax + rax]
mov rax, qword [rdi + 0x4e38]
mov rcx, qword [rsi + rax + 0x20]
test rcx, rcx
je 0x14000a417
call fcn.14000b420
nop
inc ebx
add rsi, 0x28
cmp ebx, dword [rdi + 0x4e30]
jl 0x14000a400
mov rcx, qword [rdi + 0x4e38]
test rcx, rcx
je 0x14000a444
mov qword [rdi + 0x4e30], r15
call fcn.14000b420
mov qword [rdi + 0x4e38], r15
lea rcx, [rdi + 0x4e60]
call fcn.140020da0
mov ebp, r15d
cmp dword [rdi + 0x4e50], r15d
jle 0x14000a4a5
mov rsi, r15
nop
mov r14, qword [rdi + 0x4e58]
lea rbx, [rsi + r14]
lea rcx, [rbx + 0x28]
call fcn.14002c040
nop
mov rcx, qword [rbx + 0x38]
test rcx, rcx
je 0x14000a484
call fcn.14000b420
nop
mov rcx, qword [rsi + r14 + 0x18]
test rcx, rcx
je 0x14000a494
call fcn.14000b420
nop
inc ebp
add rsi, 0x88
cmp ebp, dword [rdi + 0x4e50]
jl 0x14000a460
mov rcx, qword [rdi + 0x4e58]
test rcx, rcx
je 0x14000a4c4
mov qword [rdi + 0x4e50], r15
call fcn.14000b420
mov qword [rdi + 0x4e58], r15
mov rcx, qword [rdi + 0x4ea0]
test rcx, rcx
je 0x14000a4e3
mov qword [rdi + 0x4e98], r15
call fcn.14000b420
mov qword [rdi + 0x4ea0], r15
mov rcx, qword [rdi + 0x5ef8]
test rcx, rcx
je 0x14000a502
mov qword [rdi + 0x5ef0], r15
call fcn.14000b420
mov qword [rdi + 0x5ef8], r15
mov rcx, qword [rdi + 0x5f08]
test rcx, rcx
je 0x14000a521
mov qword [rdi + 0x5f00], r15
call fcn.14000b420
mov qword [rdi + 0x5f08], r15
mov rcx, qword [rdi + 0x4f40]
test rcx, rcx
je 0x14000a540
mov qword [rdi + 0x4f38], r15
call fcn.14000b420
mov qword [rdi + 0x4f40], r15
mov rcx, qword [rdi + 0x4f50]
test rcx, rcx
je 0x14000a55f
mov qword [rdi + 0x4f48], r15
call fcn.14000b420
mov qword [rdi + 0x4f50], r15
mov rcx, qword [rdi + 0x4f60]
test rcx, rcx
je 0x14000a57e
mov qword [rdi + 0x4f58], r15
call fcn.14000b420
mov qword [rdi + 0x4f60], r15
mov dword [rdi + 0x5db8], r15d
mov rcx, qword [rdi + 0x5dc8]
test rcx, rcx
je 0x14000a5a4
mov qword [rdi + 0x5dc0], r15
call fcn.14000b420
mov qword [rdi + 0x5dc8], r15
mov rcx, qword [rdi + 0x5fc8]
test rcx, rcx
je 0x14000a5c3
mov qword [rdi + 0x5fc0], r15
call fcn.14000b420
mov qword [rdi + 0x5fc8], r15
mov rcx, qword [rdi + 0x5fb8]
test rcx, rcx
je 0x14000a5e2
mov qword [rdi + 0x5fb0], r15
call fcn.14000b420
mov qword [rdi + 0x5fb8], r15
cmp qword [rdi + 0x6040], 0
je 0x14000a613
mov rbx, qword [rdi + 0x6040]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
cmp rbx, rax
je 0x14000a60c
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov qword [rdi + 0x6040], r15
mov rcx, qword [rdi + 0x6050]
test rcx, rcx
je 0x14000a632
mov qword [rdi + 0x6048], r15
call fcn.14000b420
mov qword [rdi + 0x6050], r15
mov rcx, qword [rdi + 0x6088]
test rcx, rcx
je 0x14000a651
mov qword [rdi + 0x6080], r15
call fcn.14000b420
mov qword [rdi + 0x6088], r15
mov rcx, qword [rdi + 0x6098]
test rcx, rcx
je 0x14000a670
mov qword [rdi + 0x6090], r15
call fcn.14000b420
mov qword [rdi + 0x6098], r15
mov dword [rdi + 0x60a0], r15d
mov byte [rdi], 0
mov rbx, qword [rsp + 0x48]
mov rbp, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x58]
add rsp, 0x20
pop r15
pop r14
pop rdi
ret