Function at 0x140023900
Capabilities:
Write file on windows

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov dword [rax + 0x20], r9d
mov qword [rax + 0x18], r8
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x60
xor ebp, ebp
mov rbx, 0xffffffffffffffff
mov qword [rax - 0x50], rbp
mov r14, r8
mov qword [rax - 0x48], rbp
mov rdi, rdx
mov dword [rax + 8], ebp
mov rsi, rcx
mov r12d, ebp
mov r15, rbx
test rcx, rcx
jne 0x14002395f
mov r8d, 0x15e
lea rdx, str.D:_a_rufus_rufus_src_net.c
lea rcx, str.url___NULL
call fcn.1400fbe54
mov rcx, rbx
inc rcx
cmp byte [rsi + rcx], bpl
jne 0x140023962
add rcx, 5
call fcn.1400e8c84
mov r13, rax
test rax, rax
jne 0x14002398d
lea rcx, str.Could_not_allocate_signature_URL
call fcn.14004f2f0
jmp 0x140023c5f
mov rdx, r13
mov rcx, rsi
sub rdx, rsi
nop word [rax + rax]
movzx eax, byte [rcx]
mov byte [rdx + rcx], al
lea rcx, [rcx + 1]
test al, al
jne 0x1400239a0
lea rcx, [r13 - 1]
cmp byte [rcx + 1], bpl
lea rcx, [rcx + 1]
jne 0x1400239b2
mov eax, dword [str..sig]
lea r9, [rsp + 0x48]
mov dword [rcx], eax
xor r8d, r8d
movzx eax, byte [0x14015ea88]
xor edx, edx
mov byte [rcx + 4], al
mov rcx, rsi
mov qword [rsp + 0x20], r14
call fcn.140022d80
mov r15, rax
test eax, eax
je 0x140023c57
lea r9, [rsp + 0x50]
mov qword [rsp + 0x20], rbp
xor r8d, r8d
xor edx, edx
mov rcx, r13
call fcn.140022d80
mov r12, qword [rsp + 0x48]
cmp eax, 0x100
jne 0x140023bf1
mov r8, qword [rsp + 0x50]
mov r9d, eax
mov edx, r15d
mov rcx, r12
call fcn.14002a6e0
test eax, eax
je 0x140023bf1
lea rcx, str.Download_signature_is_valid_
call fcn.14004f2f0
mov rcx, rdi
mov dword [0x1401e89f4], 0xce
call fcn.140021d00
mov qword [rsp + 0x30], rbp
xor r9d, r9d
mov dword [rsp + 0x28], 0x80
mov edx, 0xc0000000
mov r8d, 1
mov dword [rsp + 0x20], 2
mov rcx, rax
mov rsi, rax
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x40], rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r14d, eax
test rsi, rsi
je 0x140023a9a
mov rcx, rsi
call fcn.1400e8c70
mov ecx, r14d
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rax, qword [rsp + 0x40]
cmp rax, rbx
jne 0x140023afc
test rdi, rdi
je 0x140023adb
inc rbx
cmp byte [rdi + rbx], bpl
jne 0x140023ab2
test rbx, rbx
je 0x140023ad7
movzx eax, byte [rbx + rdi]
cmp al, 0x2f
je 0x140023ad4
cmp al, 0x5c
je 0x140023ad4
sub rbx, 1
jne 0x140023ac0
jmp 0x140023ad7
inc rbx
lea rbp, [rbx + rdi]
call fcn.14004fba0
mov r8, rax
lea rcx, str.Unable_to_create_file__s:__s
mov rdx, rbp
call fcn.14004f2f0
mov r15, qword [rsp + 0x40]
jmp 0x140023c5f
lea r9, [rsp + 0xa0]
mov qword [rsp + 0x20], rbp
mov r8d, r15d
mov rdx, r12
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x140023b76
test rdi, rdi
jne 0x140023b26
mov rbx, rbp
jmp 0x140023b4e
inc rbx
cmp byte [rdi + rbx], bpl
jne 0x140023b26
test rbx, rbx
je 0x140023b4b
movzx eax, byte [rbx + rdi]
cmp al, 0x2f
je 0x140023b48
cmp al, 0x5c
je 0x140023b48
sub rbx, 1
jne 0x140023b34
jmp 0x140023b4b
inc rbx
add rbx, rdi
call fcn.14004fba0
mov r8, rax
lea rcx, str.Error_writing_file__s:__s
mov rdx, rbx
call fcn.14004f2f0
mov r15, qword [rsp + 0x40]
mov dword [rsp + 0xa0], ebp
jmp 0x140023c5f
cmp dword [rsp + 0xa0], r15d
je 0x140023be0
test rdi, rdi
jne 0x140023b90
mov rdx, rbp
jmp 0x140023bbb
inc rbx
cmp byte [rdi + rbx], bpl
jne 0x140023b90
test rbx, rbx
je 0x140023bb7
nop
movzx eax, byte [rbx + rdi]
cmp al, 0x2f
je 0x140023bb4
cmp al, 0x5c
je 0x140023bb4
sub rbx, 1
jne 0x140023ba0
jmp 0x140023bb7
inc rbx
lea rdx, [rbx + rdi]
mov r8d, dword [rsp + 0xa0]
lea rcx, str.Error_writing_file__s:_Only__d__d_bytes_written
mov r9d, r15d
call fcn.14004f2f0
mov r15, qword [rsp + 0x40]
mov dword [rsp + 0xa0], ebp
jmp 0x140023c5f
mov r15, qword [rsp + 0x40]
mov dword [0x1401e89f4], 0xc8
jmp 0x140023c5f
lea rcx, str.FATAL:_Download_signature_is_invalid_
call fcn.14004f2f0
mov edx, 0x3f2
mov dword [0x1401e89f4], 0x193
mov rcx, r14
mov dword [0x14019f120], 0xe003120d
call qword [sym.imp.USER32.dll_GetDlgItem]
xor r9d, r9d
mov edx, 0x410
mov rcx, rax
mov r8d, 2
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [0x1401e3f40]
test rcx, rcx
je 0x140023c5c
mov rax, qword [rcx]
mov r8d, 4
mov rdx, qword [0x1401e89e8]
call qword [rax + 0x50]
jmp 0x140023c5c
mov r12, qword [rsp + 0x48]
mov r15, rbx
mov rax, qword [rsp + 0xb0]
test rax, rax
je 0x140023c85
mov r8d, dword [rsp + 0xa0]
xor r9d, r9d
mov edx, 0x8003
mov rcx, rax
call qword [sym.imp.USER32.dll_SendMessageW]
cmp dword [rsp + 0xb8], 0
je 0x140023d63
cmp dword [0x1401e89f4], 0xc8
je 0x140023d63
mov r9d, 0xcaa
xor r8d, r8d
xor edx, edx
mov ecx, 1
call fcn.140021510
mov ecx, dword [0x1401e0f70]
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov ecx, dword [0x14019f120]
test ecx, ecx
jns 0x140023cd5
call fcn.1400503d0
jmp 0x140023cda
call fcn.14004fba0
cmp dword [0x14019f590], 0
mov r14, rax
movzx esi, word [0x1401941e8]
mov eax, 0x180010
mov ebp, 0x10
mov ecx, 0xbe4
cmovne ebp, eax
call fcn.140021050
mov rdi, qword [0x1401e89e8]
mov rcx, r14
mov rbx, rax
call fcn.140021d00
mov rcx, rbx
mov r14, rax
call fcn.140021d00
mov r9d, ebp
mov word [rsp + 0x20], si
mov r8, rax
mov rdx, r14
mov rcx, rdi
mov rbx, rax
call qword [sym.imp.USER32.dll_MessageBoxExW]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
test r14, r14
je 0x140023d4e
mov rcx, r14
call fcn.1400e8c70
test rbx, rbx
je 0x140023d5b
mov rcx, rbx
call fcn.1400e8c70
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_SetLastError]
lea rax, [r15 - 1]
cmp rax, 0xfffffffffffffffd
ja 0x140023d76
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, r13
call fcn.1400e8c70
mov rcx, r12
call fcn.1400e8c70
mov rcx, qword [rsp + 0x50]
call fcn.1400e8c70
mov eax, dword [rsp + 0xa0]
mov rbx, qword [rsp + 0xa8]
add rsp, 0x60
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret