Function at 0x1400088f0
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r14
push r15
sub rsp, 0x20
mov rdi, qword [0x140179590]
mov rax, qword [rdi + 0x38]
test rax, rax
je 0x14000896c
cmp byte [rdi + 1], 0
je 0x14000896c
mov byte [rax + 0x18], 0
mov rbx, qword [rdi + 0x38]
test rbx, rbx
je 0x14000896c
mov rcx, rbx
call fcn.14002b7e0
nop
mov rcx, qword [rbx + 0x80]
test rcx, rcx
je 0x140008946
call fcn.140009d40
nop
mov rcx, qword [rbx + 0x70]
test rcx, rcx
je 0x140008955
call fcn.140009d40
nop
mov rcx, qword [rbx + 0x60]
test rcx, rcx
je 0x140008964
call fcn.140009d40
nop
mov rcx, rbx
call fcn.140009d40
xor r15d, r15d
mov qword [rdi + 0x38], r15
mov rcx, qword [rdi + 0x3da8]
test rcx, rcx
je 0x140008992
mov qword [rdi + 0x3da0], r15
call fcn.140009d40
mov qword [rdi + 0x3da8], r15
cmp byte [rdi], r15b
je 0x140008f9a
cmp byte [rdi + 0x5f98], r15b
je 0x140008a03
mov rbx, qword [rdi + 0x20]
test rbx, rbx
je 0x140008a03
mov rax, qword [0x140179590]
mov dword [rax + 0x5f9c], r15d
mov qword [rsp + 0x40], r15
lea rcx, [rsp + 0x40]
call fcn.14001e260
mov rsi, rax
lea rdx, [0x1400e6b74]
mov rcx, rbx
call fcn.140006220
mov rbx, rax
test rax, rax
je 0x140008a03
mov r9, rax
mov r8, qword [rsp + 0x40]
mov edx, 1
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov rbx, qword [rdi + 0x5fe8]
movsxd rsi, dword [rdi + 0x5fe0]
shl rsi, 5
add rsi, rbx
cmp rbx, rsi
je 0x140008a3b
nop dword [rax]
cmp dword [rbx + 4], 6
jne 0x140008a32
mov rax, qword [rbx + 0x10]
mov rdx, rbx
mov rcx, rdi
call rax
add rbx, 0x20
cmp rbx, rsi
jne 0x140008a20
mov ebx, r15d
cmp dword [rdi + 0x3fe0], r15d
jle 0x140008a7e
mov r14, r15
nop word [rax + rax]
mov rax, qword [rdi + 0x3fe8]
mov rsi, qword [r14 + rax]
test rsi, rsi
je 0x140008a70
mov rcx, rsi
call fcn.140009480
mov rcx, rsi
call fcn.140009d40
inc ebx
add r14, 8
cmp ebx, dword [rdi + 0x3fe0]
jl 0x140008a50
mov rcx, qword [rdi + 0x3fe8]
test rcx, rcx
je 0x140008a9d
mov qword [rdi + 0x3fe0], r15
call fcn.140009d40
mov qword [rdi + 0x3fe8], r15
mov rcx, qword [rdi + 0x3ff8]
test rcx, rcx
je 0x140008abc
mov qword [rdi + 0x3ff0], r15
call fcn.140009d40
mov qword [rdi + 0x3ff8], r15
mov rcx, qword [rdi + 0x4008]
test rcx, rcx
je 0x140008adb
mov qword [rdi + 0x4000], r15
call fcn.140009d40
mov qword [rdi + 0x4008], r15
mov qword [rdi + 0x4040], r15
mov rcx, qword [rdi + 0x4018]
test rcx, rcx
je 0x140008b01
mov qword [rdi + 0x4010], r15
call fcn.140009d40
mov qword [rdi + 0x4018], r15
mov rcx, qword [rdi + 0x4028]
test rcx, rcx
je 0x140008b20
mov qword [rdi + 0x4020], r15
call fcn.140009d40
mov qword [rdi + 0x4028], r15
mov qword [rdi + 0x4b68], r15
mov qword [rdi + 0x4050], r15
mov qword [rdi + 0x4048], r15
mov qword [rdi + 0x40e8], r15
mov qword [rdi + 0x40d0], r15
mov qword [rdi + 0x4060], r15
lea rcx, [rdi + 0x4860]
call fcn.1400041d0
mov rcx, qword [rdi + 0x4ad0]
test rcx, rcx
je 0x140008b75
mov qword [rdi + 0x4ac8], r15
call fcn.140009d40
mov qword [rdi + 0x4ad0], r15
mov rcx, qword [rdi + 0x4ae0]
test rcx, rcx
je 0x140008b94
mov qword [rdi + 0x4ad8], r15
call fcn.140009d40
mov qword [rdi + 0x4ae0], r15
mov rcx, qword [rdi + 0x4af0]
test rcx, rcx
je 0x140008bb3
mov qword [rdi + 0x4ae8], r15
call fcn.140009d40
mov qword [rdi + 0x4af0], r15
mov rcx, qword [rdi + 0x4b30]
test rcx, rcx
je 0x140008bd2
mov qword [rdi + 0x4b28], r15
call fcn.140009d40
mov qword [rdi + 0x4b30], r15
mov rcx, qword [rdi + 0x4b40]
test rcx, rcx
je 0x140008bf1
mov qword [rdi + 0x4b38], r15
call fcn.140009d40
mov qword [rdi + 0x4b40], r15
mov rcx, qword [rdi + 0x4b50]
test rcx, rcx
je 0x140008c10
mov qword [rdi + 0x4b48], r15
call fcn.140009d40
mov qword [rdi + 0x4b50], r15
mov ebp, r15d
cmp dword [rdi + 0x4b58], r15d
jle 0x140008c9a
mov r14, r15
nop
mov rax, qword [rdi + 0x4b60]
mov rbx, qword [r14 + rax]
test rbx, rbx
je 0x140008c8c
mov rsi, qword [rbx + 0x38]
test rsi, rsi
je 0x140008c49
mov rcx, rsi
call fcn.140004050
mov rcx, rsi
call fcn.140009d40
mov rsi, qword [rbx + 0x40]
test rsi, rsi
je 0x140008c63
mov rcx, rsi
call fcn.140004050
mov rcx, rsi
call fcn.140009d40
nop
mov rcx, qword [rbx + 0xa0]
test rcx, rcx
je 0x140008c75
call fcn.140009d40
nop
mov rcx, qword [rbx + 0x60]
test rcx, rcx
je 0x140008c84
call fcn.140009d40
nop
mov rcx, rbx
call fcn.140009d40
inc ebp
add r14, 8
cmp ebp, dword [rdi + 0x4b58]
jl 0x140008c20
mov rcx, qword [rdi + 0x4b60]
test rcx, rcx
je 0x140008cb9
mov qword [rdi + 0x4b58], r15
call fcn.140009d40
mov qword [rdi + 0x4b60], r15
lea rcx, [rdi + 0x4eb0]
call fcn.14001f5c0
mov rcx, qword [rdi + 0x4ee0]
test rcx, rcx
je 0x140008ce4
mov qword [rdi + 0x4ed8], r15
call fcn.140009d40
mov qword [rdi + 0x4ee0], r15
mov rcx, qword [rdi + 0x4ef0]
test rcx, rcx
je 0x140008d03
mov qword [rdi + 0x4ee8], r15
call fcn.140009d40
mov qword [rdi + 0x4ef0], r15
mov ebx, r15d
cmp dword [rdi + 0x4e30], r15d
jle 0x140008d45
mov rsi, r15
nop dword [rax]
nop word [rax + rax]
mov rax, qword [rdi + 0x4e38]
mov rcx, qword [rsi + rax + 0x20]
test rcx, rcx
je 0x140008d37
call fcn.140009d40
nop
inc ebx
add rsi, 0x28
cmp ebx, dword [rdi + 0x4e30]
jl 0x140008d20
mov rcx, qword [rdi + 0x4e38]
test rcx, rcx
je 0x140008d64
mov qword [rdi + 0x4e30], r15
call fcn.140009d40
mov qword [rdi + 0x4e38], r15
lea rcx, [rdi + 0x4e60]
call fcn.14001f6c0
mov ebp, r15d
cmp dword [rdi + 0x4e50], r15d
jle 0x140008dc5
mov rsi, r15
nop
mov r14, qword [rdi + 0x4e58]
lea rbx, [rsi + r14]
lea rcx, [rbx + 0x28]
call fcn.14002a9d0
nop
mov rcx, qword [rbx + 0x38]
test rcx, rcx
je 0x140008da4
call fcn.140009d40
nop
mov rcx, qword [rsi + r14 + 0x18]
test rcx, rcx
je 0x140008db4
call fcn.140009d40
nop
inc ebp
add rsi, 0x88
cmp ebp, dword [rdi + 0x4e50]
jl 0x140008d80
mov rcx, qword [rdi + 0x4e58]
test rcx, rcx
je 0x140008de4
mov qword [rdi + 0x4e50], r15
call fcn.140009d40
mov qword [rdi + 0x4e58], r15
mov rcx, qword [rdi + 0x4ea0]
test rcx, rcx
je 0x140008e03
mov qword [rdi + 0x4e98], r15
call fcn.140009d40
mov qword [rdi + 0x4ea0], r15
mov rcx, qword [rdi + 0x5ef8]
test rcx, rcx
je 0x140008e22
mov qword [rdi + 0x5ef0], r15
call fcn.140009d40
mov qword [rdi + 0x5ef8], r15
mov rcx, qword [rdi + 0x5f08]
test rcx, rcx
je 0x140008e41
mov qword [rdi + 0x5f00], r15
call fcn.140009d40
mov qword [rdi + 0x5f08], r15
mov rcx, qword [rdi + 0x4f40]
test rcx, rcx
je 0x140008e60
mov qword [rdi + 0x4f38], r15
call fcn.140009d40
mov qword [rdi + 0x4f40], r15
mov rcx, qword [rdi + 0x4f50]
test rcx, rcx
je 0x140008e7f
mov qword [rdi + 0x4f48], r15
call fcn.140009d40
mov qword [rdi + 0x4f50], r15
mov rcx, qword [rdi + 0x4f60]
test rcx, rcx
je 0x140008e9e
mov qword [rdi + 0x4f58], r15
call fcn.140009d40
mov qword [rdi + 0x4f60], r15
mov dword [rdi + 0x5db8], r15d
mov rcx, qword [rdi + 0x5dc8]
test rcx, rcx
je 0x140008ec4
mov qword [rdi + 0x5dc0], r15
call fcn.140009d40
mov qword [rdi + 0x5dc8], r15
mov rcx, qword [rdi + 0x5fc8]
test rcx, rcx
je 0x140008ee3
mov qword [rdi + 0x5fc0], r15
call fcn.140009d40
mov qword [rdi + 0x5fc8], r15
mov rcx, qword [rdi + 0x5fb8]
test rcx, rcx
je 0x140008f02
mov qword [rdi + 0x5fb0], r15
call fcn.140009d40
mov qword [rdi + 0x5fb8], r15
cmp qword [rdi + 0x6040], 0
je 0x140008f33
mov rbx, qword [rdi + 0x6040]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
cmp rbx, rax
je 0x140008f2c
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov qword [rdi + 0x6040], r15
mov rcx, qword [rdi + 0x6050]
test rcx, rcx
je 0x140008f52
mov qword [rdi + 0x6048], r15
call fcn.140009d40
mov qword [rdi + 0x6050], r15
mov rcx, qword [rdi + 0x6088]
test rcx, rcx
je 0x140008f71
mov qword [rdi + 0x6080], r15
call fcn.140009d40
mov qword [rdi + 0x6088], r15
mov rcx, qword [rdi + 0x6098]
test rcx, rcx
je 0x140008f90
mov qword [rdi + 0x6090], r15
call fcn.140009d40
mov qword [rdi + 0x6098], r15
mov dword [rdi + 0x60a0], r15d
mov byte [rdi], 0
mov rbx, qword [rsp + 0x48]
mov rbp, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x58]
add rsp, 0x20
pop r15
pop r14
pop rdi
ret