Function at 0x14000c260
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xa0
mov rax, qword [0x14009b020]
xor rax, rsp
mov qword [rbp + 0x27], rax
call fcn.140002a20
test al, al
je 0x14000c864
xor esi, esi
mov dword [rbp - 0x29], esi
lea rcx, [rbp - 0x21]
call fcn.140003460
cmp qword [rax + 0x18], 8
jb 0x14000c2b7
mov rax, qword [rax]
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
mov edx, 0x10000000
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rdi, rax
mov rdx, qword [rbp - 9]
cmp rdx, 8
jb 0x14000c323
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x21]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c31e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000c8e9
call fcn.140014b60
mov qword [rbp - 0x11], rsi
mov qword [rbp - 9], 7
mov word [rbp - 0x21], si
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x50
je 0x14000c37a
cmp rdi, 0xffffffffffffffff
je 0x14000c8ef
mov qword [rsp + 0x20], rsi
lea r9, [rbp - 0x29]
mov r8d, 0xa8d0
lea rdx, [0x14009d840]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov ebx, eax
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test bl, bl
je 0x14000c8ef
call fcn.140003720
test eax, eax
js 0x14000c96a
mov ecx, 0x1000
call fcn.140025480
mov rbx, rax
test rax, rax
je 0x14000c77f
mov rdi, rsi
movabs r14, 0x1000600e9
movabs r15, 0xfffff80000000003
movabs r12, 0xfffff80000000000
movabs r13, 0xffffff0000000fff
nop dword [rax + rax]
xor r9d, r9d
mov r8d, 0x1000
mov rdx, rbx
mov rcx, rdi
call fcn.1400050f0
test al, al
je 0x14000c777
mov rax, qword [rbx]
and rax, 0xffffffffffff00ff
cmp rax, r14
jne 0x14000c412
mov rax, qword [rbx + 0x70]
and rax, r15
cmp rax, r12
jne 0x14000c412
mov rax, qword [rbx + 0xa0]
test r13, rax
je 0x14000c428
add rdi, 0x1000
cmp rdi, 0x100000
jae 0x14000c777
jmp 0x14000c3d0
mov qword [0x1400a9eb8], rax
mov rcx, rbx
call fcn.14002488c
mov cl, 0x68
mov dword [rbp + 7], 0x71c0668
mov dword [rbp + 0xb], 0x61a031b
mov dword [rbp + 0xf], 0x100d4604
mov word [rbp + 0x13], 0xd
mov rax, rsi
nop word [rax + rax]
xor byte [rbp + rax + 8], cl
inc rax
cmp rax, 0xc
jae 0x14000c473
movzx ecx, byte [rbp + 7]
jmp 0x14000c460
mov byte [rbp + 0x14], sil
mov qword [rbp - 0x21], rsi
mov qword [rbp - 0x11], rsi
mov qword [rbp - 9], 0xf
mov byte [rbp - 0x21], sil
lea rax, [rbp + 8]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], sil
jne 0x14000c496
lea rdx, [rbp + 8]
lea rcx, [rbp - 0x21]
call fcn.14000e710
nop
lea rcx, [rbp - 0x21]
call fcn.140005480
mov qword [0x1400a9ec0], rax
mov rdx, qword [rbp - 9]
cmp rdx, 0x10
jb 0x14000c4ff
inc rdx
mov rcx, qword [rbp - 0x21]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c4f3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000c9e5
call fcn.140014b60
mov rax, qword [0x1400a9ec0]
test rax, rax
je 0x14000c9eb
call fcn.1400059f0
test al, al
je 0x14000c6c3
call fcn.140006a00
test al, al
je 0x14000c588
call fcn.140007400
test al, al
je 0x14000c588
call fcn.140007bb0
test al, al
je 0x14000c588
mov byte [rbp + 0x17], 0x70
mov al, 3
mov cl, 5
mov dl, 0x13
movzx r8d, dl
mov r9b, 0x15
movzx r10d, al
movzx r11d, al
xor ebx, ebx
xor al, 0x70
mov byte [rbp + 0x18], al
xor cl, 0x70
mov byte [rbp + 0x19], cl
xor dl, 0x70
mov byte [rbp + 0x1a], dl
xor r8b, 0x70
mov byte [rbp + 0x1b], r8b
xor r9b, 0x70
mov byte [rbp + 0x1c], r9b
xor r10b, 0x70
mov byte [rbp + 0x1d], r10b
xor r11b, 0x70
mov byte [rbp + 0x1e], r11b
mov byte [rbp + 0x1f], bl
lea r15, [rbp + 0x18]
jmp 0x14000c612
mov byte [rbp - 0x21], 0x76
mov al, 3
mov cl, 0x18
mov dl, 5
movzx r8d, al
mov r9b, 0x15
movzx r10d, r9b
mov r11b, 0x13
movzx ebx, dl
movzx edi, dl
mov sil, 0x10
movzx r14d, al
mov r15b, 0x1a
xor r12d, r12d
xor al, 0x76
mov byte [rbp - 0x20], al
xor cl, 0x76
mov byte [rbp - 0x1f], cl
xor dl, 0x76
mov byte [rbp - 0x1e], dl
xor r8b, 0x76
mov byte [rbp - 0x1d], r8b
xor r9b, 0x76
mov byte [rbp - 0x1c], r9b
xor r10b, 0x76
mov byte [rbp - 0x1b], r10b
xor r11b, 0x76
mov byte [rbp - 0x1a], r11b
xor bl, 0x76
mov byte [rbp - 0x19], bl
xor dil, 0x76
mov byte [rbp - 0x18], dil
xor sil, 0x76
mov byte [rbp - 0x17], sil
xor r14b, 0x76
mov byte [rbp - 0x16], r14b
xor r15b, 0x76
mov byte [rbp - 0x15], r15b
mov byte [rbp - 0x14], r12b
lea r15, [rbp - 0x20]
mov byte [rbp + 7], 0x2b
mov al, 0x48
mov cl, 0x47
mov dl, 0x4e
mov r8b, 0x4a
mov r9b, 0x45
mov r10b, 0x11
mov r11b, 0xb
mov bl, 0xe
mov dil, 0x58
mov sil, 0x21
movzx r14d, sil
xor r12d, r12d
xor al, 0x2b
mov byte [rbp + 8], al
xor cl, 0x2b
mov byte [rbp + 9], cl
xor dl, 0x2b
mov byte [rbp + 0xa], dl
xor r8b, 0x2b
mov byte [rbp + 0xb], r8b
xor r9b, 0x2b
mov byte [rbp + 0xc], r9b
xor r10b, 0x2b
mov byte [rbp + 0xd], r10b
xor r11b, 0x2b
mov byte [rbp + 0xe], r11b
xor bl, 0x2b
mov byte [rbp + 0xf], bl
xor dil, 0x2b
mov byte [rbp + 0x10], dil
xor sil, 0x2b
mov byte [rbp + 0x11], sil
xor r14b, 0x2b
mov byte [rbp + 0x12], r14b
mov byte [rbp + 0x13], r12b
mov rdx, r15
lea rcx, [rbp + 8]
call fcn.140001bc0
mov rcx, qword [rbp + 0x27]
xor rcx, rsp
call fcn.140014b40
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
movdqa xmm1, xmmword [str.I____si______r]
movdqu xmmword [rbp - 0x21], xmm1
movdqa xmm2, xmmword [0x140094e90]
movdqu xmmword [rbp - 0x11], xmm2
mov dl, 0x2c
mov r8b, 0x3a
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rbp - 0x20], al
xor byte [rbp - 0x1f], cl
xor byte [rbp - 0x1e], cl
xor byte [rbp - 0x1d], cl
xor byte [rbp - 0x1c], cl
xor byte [rbp - 0x1b], cl
xor byte [rbp - 0x1a], cl
xor byte [rbp - 0x19], cl
xor byte [rbp - 0x18], cl
xor byte [rbp - 0x17], cl
xor byte [rbp - 0x16], cl
xor byte [rbp - 0x15], cl
xor byte [rbp - 0x14], cl
xor byte [rbp - 0x13], cl
xor byte [rbp - 0x12], cl
movd eax, xmm2
xor al, cl
mov byte [rbp - 0x11], al
xor byte [rbp - 0x10], cl
xor byte [rbp - 0xf], cl
xor byte [rbp - 0xe], cl
xor byte [rbp - 0xd], cl
xor byte [rbp - 0xc], cl
xor byte [rbp - 0xb], cl
xor byte [rbp - 0xa], cl
xor byte [rbp - 9], cl
xor byte [rbp - 8], cl
xor byte [rbp - 7], cl
xor byte [rbp - 6], cl
xor byte [rbp - 5], cl
xor byte [rbp - 4], cl
xor byte [rbp - 3], cl
xor byte [rbp - 2], cl
xor dl, cl
mov byte [rbp - 1], dl
xor r8b, cl
mov byte [rbp], r8b
mov byte [rbp + 1], 0
mov r8b, 1
xor edx, edx
lea rcx, [rbp - 0x20]
call fcn.14000c210
int3
mov rcx, rbx
call fcn.14002488c
movdqa xmm1, xmmword [0x140094ef0]
movdqu xmmword [rbp - 0x21], xmm1
mov cl, 0x49
mov dl, 0xc
mov r8b, 0x58
mov r10b, 0x4d
mov r11b, 0x4e
mov bl, 0x40
movzx edi, cl
movzx esi, dl
movzx r14d, r11b
movzx r15d, r10b
mov r12b, 0x5f
movzx r13d, cl
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd r9d, xmm1
xor al, r9b
mov byte [rbp - 0x20], al
xor byte [rbp - 0x1f], r9b
xor byte [rbp - 0x1e], r9b
xor byte [rbp - 0x1d], r9b
xor byte [rbp - 0x1c], r9b
xor byte [rbp - 0x1b], r9b
xor byte [rbp - 0x1a], r9b
xor byte [rbp - 0x19], r9b
xor byte [rbp - 0x18], r9b
xor byte [rbp - 0x17], r9b
xor byte [rbp - 0x16], r9b
xor byte [rbp - 0x15], r9b
xor byte [rbp - 0x14], r9b
xor byte [rbp - 0x13], r9b
xor byte [rbp - 0x12], r9b
xor cl, r9b
mov byte [rbp - 0x11], cl
xor dl, r9b
mov byte [rbp - 0x10], dl
xor r8b, r9b
mov byte [rbp - 0xf], r8b
xor r10b, r9b
mov byte [rbp - 0xe], r10b
xor r11b, r9b
mov byte [rbp - 0xd], r11b
xor bl, r9b
mov byte [rbp - 0xc], bl
xor dil, r9b
mov byte [rbp - 0xb], dil
xor sil, r9b
mov byte [rbp - 0xa], sil
xor r14b, r9b
mov byte [rbp - 9], r14b
xor r15b, r9b
mov byte [rbp - 8], r15b
xor r12b, r9b
mov byte [rbp - 7], r12b
xor r13b, r9b
mov byte [rbp - 6], r13b
mov byte [rbp - 5], 0
mov r8b, 1
xor edx, edx
lea rcx, [rbp - 0x20]
call fcn.14000c210
int3
movdqa xmm1, xmmword [0x140094df0]
movdqu xmmword [rbp - 0x21], xmm1
mov dl, 0x32
mov r8b, 0x23
mov r9b, 0x22
mov r10b, 0x27
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rbp - 0x20], al
xor byte [rbp - 0x1f], cl
xor byte [rbp - 0x1e], cl
xor byte [rbp - 0x1d], cl
xor byte [rbp - 0x1c], cl
xor byte [rbp - 0x1b], cl
xor byte [rbp - 0x1a], cl
xor byte [rbp - 0x19], cl
xor byte [rbp - 0x18], cl
xor byte [rbp - 0x17], cl
xor byte [rbp - 0x16], cl
xor byte [rbp - 0x15], cl
xor byte [rbp - 0x14], cl
xor byte [rbp - 0x13], cl
xor byte [rbp - 0x12], cl
xor dl, cl
mov byte [rbp - 0x11], dl
xor r8b, cl
mov byte [rbp - 0x10], r8b
xor r9b, cl
mov byte [rbp - 0xf], r9b
xor r10b, cl
mov byte [rbp - 0xe], r10b
mov byte [rbp - 0xd], 0
xor r8d, r8d
mov dl, 1
lea rcx, [rbp - 0x20]
call fcn.14000c210
int3
call fcn.140025408
int3
movdqa xmm1, xmmword [0x140094d30]
movdqu xmmword [rbp - 0x21], xmm1
mov dl, 0x18
mov r8b, 0xb
mov r9b, 0x1c
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rbp - 0x20], al
xor byte [rbp - 0x1f], cl
xor byte [rbp - 0x1e], cl
xor byte [rbp - 0x1d], cl
xor byte [rbp - 0x1c], cl
xor byte [rbp - 0x1b], cl
xor byte [rbp - 0x1a], cl
xor byte [rbp - 0x19], cl
xor byte [rbp - 0x18], cl
xor byte [rbp - 0x17], cl
xor byte [rbp - 0x16], cl
xor byte [rbp - 0x15], cl
xor byte [rbp - 0x14], cl
xor byte [rbp - 0x13], cl
xor byte [rbp - 0x12], cl
xor dl, cl
mov byte [rbp - 0x11], dl
xor r8b, cl
mov byte [rbp - 0x10], r8b
xor r9b, cl
mov byte [rbp - 0xf], r9b
mov byte [rbp - 0xe], sil
xor r8d, r8d
mov dl, 1
lea rcx, [rbp - 0x20]
call fcn.14000c210
int3
movdqa xmm1, xmmword [0x140094e20]
movdqu xmmword [rbp - 0x21], xmm1
mov dl, 0x2f
mov r8b, 0x3c
mov r9b, 0x2b
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rbp - 0x20], al
xor byte [rbp - 0x1f], cl
xor byte [rbp - 0x1e], cl
xor byte [rbp - 0x1d], cl
xor byte [rbp - 0x1c], cl
xor byte [rbp - 0x1b], cl
xor byte [rbp - 0x1a], cl
xor byte [rbp - 0x19], cl
xor byte [rbp - 0x18], cl
xor byte [rbp - 0x17], cl
xor byte [rbp - 0x16], cl
xor byte [rbp - 0x15], cl
xor byte [rbp - 0x14], cl
xor byte [rbp - 0x13], cl
xor byte [rbp - 0x12], cl
xor dl, cl
mov byte [rbp - 0x11], dl
xor r8b, cl
mov byte [rbp - 0x10], r8b
xor r9b, cl
mov byte [rbp - 0xf], r9b
mov byte [rbp - 0xe], sil
xor r8d, r8d
mov dl, 1
lea rcx, [rbp - 0x20]
call fcn.14000c210
int3
call fcn.140025408
int3
movdqa xmm1, xmmword [0x140094f80]
movdqu xmmword [rbp - 0x21], xmm1
mov cl, 0x6b
mov dl, 0x79
mov r8b, 0x6f
mov r9b, 0x2a
mov r11b, 0x64
mov bl, 0x65
mov dil, 0x7e
movzx esi, r9b
mov r14b, 0x6c
movzx r15d, bl
mov r12b, 0x7f
movzx r13d, r11b
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd r10d, xmm1
xor al, r10b
mov byte [rbp - 0x20], al
xor byte [rbp - 0x1f], r10b
xor byte [rbp - 0x1e], r10b
xor byte [rbp - 0x1d], r10b
xor byte [rbp - 0x1c], r10b
xor byte [rbp - 0x1b], r10b
xor byte [rbp - 0x1a], r10b
xor byte [rbp - 0x19], r10b
xor byte [rbp - 0x18], r10b
xor byte [rbp - 0x17], r10b
xor byte [rbp - 0x16], r10b
xor byte [rbp - 0x15], r10b
xor byte [rbp - 0x14], r10b
xor byte [rbp - 0x13], r10b
xor byte [rbp - 0x12], r10b
xor cl, r10b
mov byte [rbp - 0x11], cl
xor dl, r10b
mov byte [rbp - 0x10], dl
xor r8b, r10b
mov byte [rbp - 0xf], r8b
xor r9b, r10b
mov byte [rbp - 0xe], r9b
xor r11b, r10b
mov byte [rbp - 0xd], r11b
xor bl, r10b
mov byte [rbp - 0xc], bl
xor dil, r10b
mov byte [rbp - 0xb], dil
xor sil, r10b
mov byte [rbp - 0xa], sil
xor r14b, r10b
mov byte [rbp - 9], r14b
xor r15b, r10b
mov byte [rbp - 8], r15b
xor r12b, r10b
mov byte [rbp - 7], r12b
xor r13b, r10b
mov byte [rbp - 6], r13b
mov al, 0x6e
xor al, r10b
mov byte [rbp - 5], al
mov byte [rbp - 4], 0
mov r8b, 1
xor edx, edx
lea rcx, [rbp - 0x20]
call fcn.14000c210
int3