Function at 0x14006bd40
Capabilities:
Write file on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xa8
mov rbx, r8
mov r15, rdx
mov r14, rcx
lea rax, [rcx + 0x68]
mov qword [rsp + 0x78], rax
lea rax, [rcx + 0x80]
mov qword [rsp + 0x70], rax
mov eax, 0x5301bac8
jmp 0x14006bd90
mov eax, 0xa147e147
mov rbp, qword [rsp + 0x98]
nop word cs:[rax + rax]
nop
cmp eax, 0x1514f53d
jg 0x14006bde0
cmp eax, 0xd8337ff7
jle 0x14006be50
cmp eax, 0xf0037972
jg 0x14006bed9
cmp eax, 0xd8337ff8
je 0x14006bf7f
cmp eax, 0xdc25e725
je 0x14006c041
cmp eax, 0xe81b1996
jne 0x14006bd90
cmp byte [rsp + 0x2c], 0
mov eax, 0xcfdf7b8c
mov ecx, 0x1514f53e
cmovne eax, ecx
jmp 0x14006bd90
cmp eax, 0x5301bac7
jle 0x14006be90
cmp eax, 0x5a938141
jg 0x14006bf11
cmp eax, 0x5301bac8
je 0x14006c04b
cmp eax, 0x536700d5
je 0x14006c063
cmp eax, 0x5630c826
jne 0x14006bd90
mov r9, qword [rsp + 0x68]
mov r8, qword [rsp + 0x30]
mov rcx, qword [rsp + 0xa0]
mov edx, 1
call fcn.14008ec1c
mov rcx, qword [rsp + 0x30]
sub rcx, rax
mov qword [rsp + 0x98], rcx
mov eax, 0x1b599f40
jmp 0x14006bd90
cmp eax, 0xa1cbf51c
jle 0x14006bf39
cmp eax, 0xa1cbf51d
je 0x14006c088
cmp eax, 0xcbb4109f
je 0x14006c0a4
cmp eax, 0xcfdf7b8c
jne 0x14006bd90
mov qword [rsp + 0x48], r14
mov eax, 0xd8337ff8
jmp 0x14006bd90
cmp eax, 0x3be6c13e
jle 0x14006bf5f
cmp eax, 0x3be6c13f
je 0x14006c0bb
cmp eax, 0x41865c51
je 0x14006c0e5
cmp eax, 0x4845f069
jne 0x14006bd90
cmp byte [rsp + 0x2d], 0
mov eax, 0x3be6c13f
mov ecx, 0xd1d9b81
cmovne eax, ecx
mov r13, rbx
mov rdi, r15
jmp 0x14006bd90
cmp eax, 0xf0037973
je 0x14006bd78
cmp eax, 0x2b54e0d
je 0x14006c120
cmp eax, 0xd1d9b81
jne 0x14006bd90
mov rax, qword [rsp + 0x50]
cmp rax, rbx
setg byte [rsp + 0x2e]
mov eax, 0x2b54e0d
jmp 0x14006bd90
cmp eax, 0x5c150f7e
je 0x14006c13c
cmp eax, 0x72564925
jne 0x14006c257
mov eax, 0x5a938142
mov r12, qword [rsp + 0x88]
jmp 0x14006bd90
cmp eax, 0x99c52cc2
je 0x14006c149
cmp eax, 0xa147e147
jne 0x14006bd90
mov r12, rbx
sub r12, rbp
mov eax, 0x5a938142
jmp 0x14006bd90
cmp eax, 0x1514f53e
je 0x14006c16e
cmp eax, 0x1b599f40
jne 0x14006bd90
mov eax, 0xf0037973
jmp 0x14006bd90
mov rax, qword [rsp + 0x48]
lea rcx, [rax + 0x40]
mov qword [rsp + 0x40], rcx
add rax, 0x58
mov edx, 0xe9dc933d
nop word cs:[rax + rax]
cmp edx, 0xbf61568
jg 0x14006bfe0
cmp edx, 0xa5ebe2b7
je 0x14006c00d
cmp edx, 0xb9bb7529
je 0x14006c180
cmp edx, 0xe9dc933d
jne 0x14006bfa0
mov rdx, qword [rsp + 0x40]
mov rdx, qword [rdx]
mov rdx, qword [rdx]
mov qword [rsp + 0x58], rdx
mov edx, 0x625b7c24
jmp 0x14006bfa0
cmp edx, 0xbf61569
je 0x14006c019
cmp edx, 0x625b7c24
je 0x14006c027
cmp edx, 0x6c1d87b8
jne 0x14006bfa0
mov rdx, qword [rsp + 0x38]
mov rdx, qword [rdx]
mov edx, dword [rdx]
mov dword [rsp + 0x64], edx
mov edx, 0xbf61569
jmp 0x14006bfa0
mov qword [rsp + 0x38], rax
mov edx, 0x6c1d87b8
jmp 0x14006bfa0
mov edx, 0xb9bb7529
mov ecx, dword [rsp + 0x64]
jmp 0x14006bfa0
cmp qword [rsp + 0x58], 0
mov edx, 0xa5ebe2b7
mov ecx, 0xb9bb7529
cmove edx, ecx
xor ecx, ecx
jmp 0x14006bfa0
mov eax, 0x5c150f7e
jmp 0x14006bd90
mov rax, qword [rsp + 0x78]
cmp qword [rax], 0
setne byte [rsp + 0x2c]
mov eax, 0xe81b1996
jmp 0x14006bd90
mov rax, qword [rsp + 0x90]
mov rax, qword [rax]
mov qword [rsp + 0x68], rax
cmp qword [rsp + 0x68], 0
setne byte [rsp + 0x2f]
mov eax, 0xa1cbf51d
jmp 0x14006bd90
cmp byte [rsp + 0x2f], 0
mov eax, 0xa147e147
mov ecx, 0x5630c826
cmovne eax, ecx
mov rbp, qword [rsp + 0x30]
jmp 0x14006bd90
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x90], rax
mov eax, 0x536700d5
jmp 0x14006bd90
mov qword [rsp + 0x30], r13
mov qword [rsp + 0xa0], rdi
cmp qword [rsp + 0x30], 0
mov eax, 0xa147e147
mov ecx, 0xcbb4109f
cmovg eax, ecx
mov rbp, qword [rsp + 0x30]
jmp 0x14006bd90
mov rax, qword [rsp + 0x48]
add rax, 0x40
mov ecx, 0x1120647a
nop word cs:[rax + rax]
nop dword [rax]
cmp ecx, 0xb0d3a5cf
je 0x14006c1a7
cmp ecx, 0x1120647a
jne 0x14006c100
mov qword [rsp + 0x38], rax
mov ecx, 0xb0d3a5cf
jmp 0x14006c100
cmp byte [rsp + 0x2e], 0
mov eax, 0x41865c51
mov ecx, 0xdc25e725
cmovne eax, ecx
mov rsi, qword [rsp + 0x50]
jmp 0x14006bd90
mov eax, 0x41865c51
mov rsi, rbx
jmp 0x14006bd90
mov rcx, qword [rsp + 0x80]
mov rdx, r15
mov r8, rbx
call fcn.14006e4c0
mov qword [rsp + 0x88], rax
mov eax, 0x72564925
jmp 0x14006bd90
mov qword [rsp + 0x80], r14
mov eax, 0x99c52cc2
jmp 0x14006bd90
test rbx, rbx
setg al
movsxd rcx, ecx
mov qword [rsp + 0x50], rcx
cmp qword [rsp + 0x50], 0
setg cl
and cl, al
mov byte [rsp + 0x2d], cl
mov eax, 0x4845f069
jmp 0x14006bd90
mov rax, qword [rsp + 0x38]
mov rax, qword [rax]
mov rdi, qword [rax]
mov eax, 0x4f59fcd2
nop word [rax + rax]
cmp eax, 0x989aabd2
je 0x14006c1e3
cmp eax, 0x4f59fcd2
jne 0x14006c1c0
mov rcx, rdi
mov rdx, r15
mov r8, rsi
call fcn.140082960
mov eax, 0x989aabd2
jmp 0x14006c1c0
lea rdi, [r15 + rsi]
mov rax, qword [rsp + 0x48]
mov rcx, qword [rax + 0x58]
sub dword [rcx], esi
mov rax, qword [rax + 0x40]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov rax, qword [rax]
mov qword [rsp + 0x58], rax
movsxd rax, esi
mov qword [rsp + 0x38], rax
mov eax, 0x2ab4ebfe
nop word cs:[rax + rax]
nop
cmp eax, 0xd960974e
je 0x14006c247
cmp eax, 0x2ab4ebfe
jne 0x14006c220
mov rax, qword [rsp + 0x58]
add rax, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x40]
mov qword [rcx], rax
mov eax, 0xd960974e
jmp 0x14006c220
mov r13, rbx
sub r13, rsi
mov eax, 0x3be6c13f
jmp 0x14006bd90
cmp eax, 0x5a938142
jne 0x14006bd90
mov rax, r12
add rsp, 0xa8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret