Function at 0x140001cb0
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xfb0]
mov eax, 0x10b0
call fcn.1400035e0
sub rsp, rax
mov qword [rbp - 0x58], 0xfffffffffffffffe
mov qword [rsp + 0x10f8], rbx
mov r15, r8
mov rdi, rcx
movups xmm0, xmmword [str.set_dialogs_off__n]
movaps xmmword [rbp - 0x50], xmm0
movzx eax, word [reloc.WSOCK32.dll_inet_addr]
mov word [rbp - 0x40], ax
movzx eax, word [rbp + 0x1010]
cmp ax, 1
jne 0x140001d25
mov rax, qword [str.expand__n]
mov qword [rbp - 0x50], rax
movzx eax, byte [0x140186238]
mov byte [rbp - 0x48], al
jmp 0x140001d7c
cmp ax, 2
jne 0x140001d7c
lea rcx, [rbp - 0x50]
dec rcx
lea rcx, [rcx + 1]
cmp byte [rcx], 0
jne 0x140001d32
mov rax, qword [str.expand__n]
mov qword [rcx], rax
movzx eax, byte [0x140186238]
mov byte [rcx + 8], al
lea rcx, [rbp - 0x50]
dec rcx
lea rcx, [rcx + 1]
cmp byte [rcx], 0
jne 0x140001d56
mov rax, qword [str.occedit_on__n]
mov qword [rcx], rax
mov eax, dword [0x140186248]
mov dword [rcx + 8], eax
movzx eax, byte [0x14018624c]
mov byte [rcx + 0xc], al
mov rsi, qword [r9 + 8]
movsxd r13, edx
test rsi, rsi
jne 0x140001f82
lea rcx, [rbp - 0x50]
dec rcx
lea rcx, [rcx + 1]
cmp byte [rcx], 0
jne 0x140001d93
mov rax, qword [str.publishpdf]
mov qword [rcx], rax
mov eax, dword [0x140186258]
mov dword [rcx + 8], eax
lea rax, [rbp - 0x50]
or r12, 0xffffffffffffffff
mov rbx, r12
nop word [rax + rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x140001dc0
xor r14d, r14d
test edx, edx
jle 0x140001f59
nop word [rax + rax]
mov rdx, qword [r15 + r14*8]
lea rcx, [rsp + 0x30]
call qword [sym.imp.mfc110.dll_Ordinal_310]
nop
inc r14
movsxd rax, ebx
lea rcx, [rbp - 0x50]
add rcx, rax
mov r8, qword [rsp + 0x30]
lea rdx, str.___s_
call qword [sym.imp.MSVCR110.dll_sprintf]
add ebx, eax
lea rdx, str._file
lea rcx, [rsp + 0x30]
call qword [sym.imp.mfc110.dll_Ordinal_2850]
test eax, eax
jne 0x140001f45
mov rdx, qword [r15 + r14*8]
lea rcx, [rbp + 0x1008]
call qword [sym.imp.mfc110.dll_Ordinal_310]
nop
inc r14
lea rdx, [0x140186262]
lea rcx, [rsp + 0x38]
call qword [sym.imp.mfc110.dll_Ordinal_310]
nop
xor r8d, r8d
lea rdx, [0x140186264]
lea rcx, [rbp + 0x1008]
call qword [sym.imp.mfc110.dll_Ordinal_4442]
test eax, eax
jne 0x140001eb5
lea rdx, str._
lea rcx, [rsp + 0x38]
call qword [sym.imp.mfc110.dll_Ordinal_1498]
mov r8d, 2
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x1008]
call qword [sym.imp.mfc110.dll_Ordinal_8270]
nop
mov rdx, rax
lea rcx, [rbp + 0x1008]
call qword [sym.imp.mfc110.dll_Ordinal_1495]
nop
lea rcx, [rsp + 0x40]
call qword [sym.imp.mfc110.dll_Ordinal_1026]
lea r8, [0x1401861f4]
lea rdx, [0x140186264]
lea rcx, [rbp + 0x1008]
call qword [sym.imp.mfc110.dll_Ordinal_12223]
lea r8, [0x1401861f4]
lea rdx, [0x140186270]
lea rcx, [rbp + 0x1008]
call qword [sym.imp.mfc110.dll_Ordinal_12223]
lea r8, [0x140186264]
lea rdx, [0x1401861f4]
lea rcx, [rbp + 0x1008]
call qword [sym.imp.mfc110.dll_Ordinal_12223]
movsxd rax, ebx
lea rcx, [rbp - 0x50]
add rcx, rax
mov r9, qword [rbp + 0x1008]
mov r8, qword [rsp + 0x38]
lea rdx, str.___s_s_
call qword [sym.imp.MSVCR110.dll_sprintf]
add ebx, eax
lea rcx, [rsp + 0x38]
call qword [sym.imp.mfc110.dll_Ordinal_1026]
nop
lea rcx, [rbp + 0x1008]
call qword [sym.imp.mfc110.dll_Ordinal_1026]
nop
lea rcx, [rsp + 0x30]
call qword [sym.imp.mfc110.dll_Ordinal_1026]
cmp r14, r13
jl 0x140001de0
lea rcx, [rbp - 0x50]
dec rcx
lea rcx, [rcx + 1]
cmp byte [rcx], 0
jne 0x140001f60
movzx eax, word [0x140186280]
mov word [rcx], ax
movzx eax, byte [0x140186282]
mov byte [rcx + 2], al
jmp 0x140002389
movsxd rax, dword [r9 + 0x18]
mov qword [rbp - 0x60], rax
or r12, 0xffffffffffffffff
xor r14d, r14d
mov rdi, r14
mov rdx, rsi
test rsi, rsi
je 0x140002440
mov rsi, qword [rsi]
mov qword [rbp - 0x78], rsi
add rdx, 0x10
lea rcx, [rsp + 0x40]
call qword [sym.imp.mfc110.dll_Ordinal_300]
nop
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc110.dll_Ordinal_316]
nop
mov r8, qword [rsp + 0x40]
lea rdx, str.variant__s_n
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc110.dll_Ordinal_4587]
lea rcx, [rbp - 0x50]
dec rcx
lea rcx, [rcx + 1]
cmp byte [rcx], 0
jne 0x140001fe1
mov r8, qword [rsp + 0x50]
xor edx, edx
nop word [rax + rax]
movzx eax, byte [r8 + rdx]
mov byte [rcx + rdx], al
lea rdx, [rdx + 1]
test al, al
jne 0x140002000
lea rcx, [rbp - 0x50]
dec rcx
lea rcx, [rcx + 1]
cmp byte [rcx], 0
jne 0x140002017
mov rax, qword [str.publishpdf]
mov qword [rcx], rax
mov eax, dword [0x140186258]
mov dword [rcx + 8], eax
lea rax, [rbp - 0x50]
mov rbx, r12
nop word [rax + rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x140002040
test r13, r13
jle 0x14000233e
mov r14, qword [rbp - 0x60]
nop word [rax + rax]
mov rdx, qword [r15 + rdi*8]
lea rcx, [rsp + 0x38]
call qword [sym.imp.mfc110.dll_Ordinal_310]
nop
inc rdi
lea rdx, str._file
lea rcx, [rsp + 0x38]
call qword [sym.imp.mfc110.dll_Ordinal_2850]
test eax, eax
jne 0x140002305
mov rdx, qword [r15 + rdi*8]
lea rcx, [rbp + 0x1008]
call qword [sym.imp.mfc110.dll_Ordinal_310]
nop
inc rdi
lea rdx, [rbp + 0x1008]
lea rcx, [rsp + 0x30]
call qword [sym.imp.mfc110.dll_Ordinal_300]
nop
lea rdx, [0x140186262]
lea rcx, [rsp + 0x58]
call qword [sym.imp.mfc110.dll_Ordinal_310]
nop
xor r8d, r8d
lea rdx, [0x140186264]
lea rcx, [rsp + 0x30]
call qword [sym.imp.mfc110.dll_Ordinal_4442]
test eax, eax
jne 0x140002124
lea rdx, [0x140186264]
lea rcx, [rsp + 0x58]
call qword [sym.imp.mfc110.dll_Ordinal_1498]
mov r8d, 2
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x30]
call qword [sym.imp.mfc110.dll_Ordinal_8270]
nop
mov rdx, rax
lea rcx, [rsp + 0x30]
call qword [sym.imp.mfc110.dll_Ordinal_1495]
nop
lea rcx, [rsp + 0x68]
call qword [sym.imp.mfc110.dll_Ordinal_1026]
lea r8, [0x140186270]
lea rdx, [0x140186264]
lea rcx, [rsp + 0x30]
call qword [sym.imp.mfc110.dll_Ordinal_12223]
lea r8, [0x1401861f4]
lea rdx, [0x140186270]
lea rcx, [rsp + 0x30]
call qword [sym.imp.mfc110.dll_Ordinal_12223]
lea r8, [rsp + 0x30]
lea rdx, [rsp + 0x58]
lea rcx, [rbp - 0x80]
call fcn.140001790
nop
mov rdx, rax
lea rcx, [rbp + 0x1008]
call qword [sym.imp.mfc110.dll_Ordinal_1495]
nop
lea rcx, [rbp - 0x80]
call qword [sym.imp.mfc110.dll_Ordinal_1026]
cmp r14, 1
je 0x140002291
lea rdx, [rbp + 0x1008]
lea rcx, [rsp + 0x48]
call qword [sym.imp.mfc110.dll_Ordinal_300]
nop
lea rdx, [0x140186262]
lea rcx, [rsp + 0x60]
call qword [sym.imp.mfc110.dll_Ordinal_310]
nop
mov dl, 0x2e
lea rcx, [rbp + 0x1008]
call qword [sym.imp.mfc110.dll_Ordinal_12342]
mov esi, eax
cmp eax, 0xffffffff
je 0x140002227
mov r8d, eax
lea rdx, [rbp - 0x68]
lea rcx, [rbp + 0x1008]
call qword [sym.imp.mfc110.dll_Ordinal_8270]
nop
mov rdx, rax
lea rcx, [rsp + 0x60]
call qword [sym.imp.mfc110.dll_Ordinal_1495]
nop
lea rcx, [rbp - 0x68]
call qword [sym.imp.mfc110.dll_Ordinal_1026]
mov r8d, esi
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0x1008]
call qword [sym.imp.mfc110.dll_Ordinal_7869]
nop
mov rdx, rax
lea rcx, [rsp + 0x48]
call qword [sym.imp.mfc110.dll_Ordinal_1495]
nop
lea rcx, [rbp - 0x70]
call qword [sym.imp.mfc110.dll_Ordinal_1026]
lea rax, [rbp + 0x7b0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8, qword [rsp + 0x40]
lea rdx, str.Filesys
lea rcx, str.Ascii
call qword [sym.imp.nmp64.dll_nmpMapName]
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x7b0]
mov r8, qword [rsp + 0x48]
lea rdx, str.__s__s_s_
lea rcx, [rbp + 0x1008]
call qword [sym.imp.mfc110.dll_Ordinal_4587]
nop
lea rcx, [rsp + 0x60]
call qword [sym.imp.mfc110.dll_Ordinal_1026]
nop
lea rcx, [rsp + 0x48]
call qword [sym.imp.mfc110.dll_Ordinal_1026]
lea rdx, [0x1401862b4]
lea rcx, [rsp + 0x78]
call qword [sym.imp.mfc110.dll_Ordinal_310]
nop
lea r8, [rbp + 0x1008]
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.140001790
nop
mov rdx, rax
lea rcx, [rsp + 0x38]
call qword [sym.imp.mfc110.dll_Ordinal_1661]
nop
lea rcx, [rsp + 0x70]
call qword [sym.imp.mfc110.dll_Ordinal_1026]
nop
lea rcx, [rsp + 0x78]
call qword [sym.imp.mfc110.dll_Ordinal_1026]
nop
lea rcx, [rsp + 0x58]
call qword [sym.imp.mfc110.dll_Ordinal_1026]
nop
lea rcx, [rsp + 0x30]
call qword [sym.imp.mfc110.dll_Ordinal_1026]
nop
lea rcx, [rbp + 0x1008]
call qword [sym.imp.mfc110.dll_Ordinal_1026]
movsxd rax, ebx
lea rcx, [rbp - 0x50]
add rcx, rax
mov r8, qword [rsp + 0x38]
lea rdx, [0x1401862b8]
call qword [sym.imp.MSVCR110.dll_sprintf]
add ebx, eax
lea rcx, [rsp + 0x38]
call qword [sym.imp.mfc110.dll_Ordinal_1026]
cmp rdi, r13
jl 0x140002060
xor r14d, r14d
mov rsi, qword [rbp - 0x78]
lea rax, [rbp - 0x50]
dec rax
lea rax, [rax + 1]
cmp byte [rax], 0
jne 0x140002345
movzx ecx, word [0x140186280]
mov word [rax], cx
movzx ecx, byte [0x140186282]
mov byte [rax + 2], cl
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc110.dll_Ordinal_1026]
nop
lea rcx, [rsp + 0x40]
call qword [sym.imp.mfc110.dll_Ordinal_1026]
test rsi, rsi
jne 0x140001f91
mov rdi, qword [rbp + 0xff0]
lea rcx, [rbp - 0x50]
dec rcx
lea rcx, [rcx + 1]
cmp byte [rcx], 0
jne 0x140002390
mov rax, qword [str.set_dialogs_on__n]
mov qword [rcx], rax
mov rax, qword [0x1401862c8]
mov qword [rcx + 8], rax
movzx eax, byte [0x1401862d0]
mov byte [rcx + 0x10], al
lea rcx, [rbp - 0x50]
dec rcx
nop
lea rcx, [rcx + 1]
cmp byte [rcx], 0
jne 0x1400023c0
mov eax, dword [str.exit__n]
mov dword [rcx], eax
movzx eax, word [0x1401862d8]
mov word [rcx + 4], ax
movzx eax, byte [0x1401862da]
mov byte [rcx + 6], al
test rdi, rdi
je 0x14000243c
lea rdx, [0x140186204]
mov rcx, rdi
call qword [sym.imp.MSVCR110.dll_fopen]
mov rbx, rax
test rax, rax
je 0x14000243c
lea rax, [rbp - 0x50]
nop word [rax + rax]
inc r12
cmp byte [rax + r12], 0
jne 0x140002410
mov r8, r12
mov r9, rbx
mov edx, 1
lea rcx, [rbp - 0x50]
call qword [sym.imp.MSVCR110.dll_fwrite]
mov rcx, rbx
call qword [sym.imp.MSVCR110.dll_fclose]
mov al, 1
jmp 0x140002446
xor al, al
jmp 0x140002446
call sub.mfc110.dll_Ordinal_2288
int3
mov rbx, qword [rsp + 0x10f8]
add rsp, 0x10b0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret