Function at 0x7ff7e1a59ed0
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r14
push r15
sub rsp, 0x20
mov rbx, rcx
mov rax, qword [rcx + 0xa8]
test rax, rax
je 0x7ff7e1a59f35
cmp byte [rcx + 1], 0
je 0x7ff7e1a59f35
mov byte [rax], 0
mov rdi, qword [rcx + 0xa8]
test rdi, rdi
je 0x7ff7e1a59f35
mov rcx, rdi
call fcn.7ff7e1a85750
mov rax, qword [0x7ff7e1d9b2a0]
test rax, rax
je 0x7ff7e1a59f26
dec dword [rax + 0x3b0]
mov rdx, qword [0x7ff7e1d9b290]
mov rcx, rdi
call fcn.7ff7e1a53ba0
xor r15d, r15d
mov qword [rbx + 0xa8], r15
cmp byte [rbx], r15b
je 0x7ff7e1a5a68e
cmp byte [rbx + 0x2fb8], r15b
je 0x7ff7e1a59fb6
mov rdi, qword [rbx + 0x20]
test rdi, rdi
je 0x7ff7e1a59fb6
mov rsi, qword [0x7ff7e1d9b2a0]
mov qword [0x7ff7e1d9b2a0], rbx
mov dword [rbx + 0x2fbc], r15d
mov qword [rsp + 0x40], r15
lea rcx, [rsp + 0x40]
call fcn.7ff7e1a6ba60
mov rbp, rax
lea rdx, [0x7ff7e1d50df4]
mov rcx, rdi
call fcn.7ff7e1a54460
mov rdi, rax
test rax, rax
je 0x7ff7e1a59fbd
mov r9, rax
mov r8, qword [rsp + 0x40]
lea edx, [r15 + 1]
mov rcx, rbp
call fcn.7ff7e1c7a6f0
mov rcx, rdi
call fcn.7ff7e1c79c74
jmp 0x7ff7e1a59fbd
mov rsi, qword [0x7ff7e1d9b2a0]
mov qword [0x7ff7e1d9b2a0], rbx
call fcn.7ff7e1a6e950
mov qword [0x7ff7e1d9b2a0], rsi
mov esi, r15d
mov eax, dword [rbx + 0x2f80]
test eax, eax
jle 0x7ff7e1a5a08f
mov rbp, r15
mov r14, r15
test rbp, rbp
js 0x7ff7e1a59ff0
cmp esi, eax
jl 0x7ff7e1a5a009
mov r8d, 0x5c6
lea rdx, [0x7ff7e1d4cc90]
lea rcx, [0x7ff7e1d52c80]
call fcn.7ff7e1c744f8
mov rax, qword [rbx + 0x2f88]
mov rdi, qword [rax + r14 + 8]
test rdi, rdi
je 0x7ff7e1a5a078
mov rcx, qword [rdi + 0x38]
call fcn.7ff7e1a79b00
mov qword [rdi + 0x38], r15
mov qword [rdi + 0x20], r15
mov qword [rdi + 0x18], r15
mov rcx, qword [rdi + 0x30]
test rcx, rcx
je 0x7ff7e1a5a057
mov rax, qword [0x7ff7e1d9b2a0]
test rax, rax
je 0x7ff7e1a5a04a
dec dword [rax + 0x3b0]
mov rdx, qword [0x7ff7e1d9b290]
call fcn.7ff7e1a53ba0
nop
mov rax, qword [0x7ff7e1d9b2a0]
test rax, rax
je 0x7ff7e1a5a069
dec dword [rax + 0x3b0]
mov rdx, qword [0x7ff7e1d9b290]
mov rcx, rdi
call fcn.7ff7e1a53ba0
inc esi
inc rbp
add r14, 0x10
mov eax, dword [rbx + 0x2f80]
cmp esi, eax
jl 0x7ff7e1a59fe7
mov edx, 6
mov rcx, rbx
call fcn.7ff7e1a572e0
mov ebp, r15d
mov eax, dword [rbx + 0x1b38]
test eax, eax
jle 0x7ff7e1a5a11a
mov rsi, r15
nop dword [rax]
test rsi, rsi
js 0x7ff7e1a5a0b9
cmp ebp, eax
jl 0x7ff7e1a5a0d2
mov r8d, 0x5c6
lea rdx, [0x7ff7e1d4cc90]
lea rcx, [0x7ff7e1d52c80]
call fcn.7ff7e1c744f8
mov rax, qword [rbx + 0x1b40]
mov rdi, qword [rax + rsi*8]
test rdi, rdi
je 0x7ff7e1a5a10b
mov rcx, rdi
call fcn.7ff7e1a56980
mov rax, qword [0x7ff7e1d9b2a0]
test rax, rax
je 0x7ff7e1a5a0fc
dec dword [rax + 0x3b0]
mov rdx, qword [0x7ff7e1d9b290]
mov rcx, rdi
call fcn.7ff7e1a53ba0
inc ebp
inc rsi
mov eax, dword [rbx + 0x1b38]
cmp ebp, eax
jl 0x7ff7e1a5a0b0
mov rcx, qword [rbx + 0x1b40]
test rcx, rcx
je 0x7ff7e1a5a152
mov qword [rbx + 0x1b38], r15
mov rax, qword [0x7ff7e1d9b2a0]
test rax, rax
je 0x7ff7e1a5a13f
dec dword [rax + 0x3b0]
mov rdx, qword [0x7ff7e1d9b290]
call fcn.7ff7e1a53ba0
mov qword [rbx + 0x1b40], r15
mov rcx, qword [rbx + 0x1b50]
test rcx, rcx
je 0x7ff7e1a5a18a
mov qword [rbx + 0x1b48], r15
mov rax, qword [0x7ff7e1d9b2a0]
test rax, rax
je 0x7ff7e1a5a177
dec dword [rax + 0x3b0]
mov rdx, qword [0x7ff7e1d9b290]
call fcn.7ff7e1a53ba0
mov qword [rbx + 0x1b50], r15
mov rcx, qword [rbx + 0x1b60]
test rcx, rcx
je 0x7ff7e1a5a1c2
mov qword [rbx + 0x1b58], r15
mov rax, qword [0x7ff7e1d9b2a0]
test rax, rax
je 0x7ff7e1a5a1af
dec dword [rax + 0x3b0]
mov rdx, qword [0x7ff7e1d9b290]
call fcn.7ff7e1a53ba0
mov qword [rbx + 0x1b60], r15
mov qword [rbx + 0x1b90], r15
mov rcx, qword [rbx + 0x1b70]
test rcx, rcx
je 0x7ff7e1a5a201
mov qword [rbx + 0x1b68], r15
mov rax, qword [0x7ff7e1d9b2a0]
test rax, rax
je 0x7ff7e1a5a1ee
dec dword [rax + 0x3b0]
mov rdx, qword [0x7ff7e1d9b290]
call fcn.7ff7e1a53ba0
mov qword [rbx + 0x1b70], r15
mov rcx, qword [rbx + 0x1b80]
test rcx, rcx
je 0x7ff7e1a5a239
mov qword [rbx + 0x1b78], r15
mov rax, qword [0x7ff7e1d9b2a0]
test rax, rax
je 0x7ff7e1a5a226
dec dword [rax + 0x3b0]
mov rdx, qword [0x7ff7e1d9b290]
call fcn.7ff7e1a53ba0
mov qword [rbx + 0x1b80], r15
mov qword [rbx + 0x1d70], r15
mov qword [rbx + 0x1ba8], r15
mov qword [rbx + 0x1ba0], r15
mov qword [rbx + 0x1b98], r15
mov qword [rbx + 0x1c30], r15
mov qword [rbx + 0x1c18], r15
mov qword [rbx + 0x1bb8], r15
mov rcx, qword [rbx + 0x1cf0]
test rcx, rcx
je 0x7ff7e1a5a2a2
mov qword [rbx + 0x1ce8], r15
mov rax, qword [0x7ff7e1d9b2a0]
test rax, rax
je 0x7ff7e1a5a28f
dec dword [rax + 0x3b0]
mov rdx, qword [0x7ff7e1d9b290]
call fcn.7ff7e1a53ba0
mov qword [rbx + 0x1cf0], r15
mov rcx, qword [rbx + 0x1d00]
test rcx, rcx
je 0x7ff7e1a5a2da
mov qword [rbx + 0x1cf8], r15
mov rax, qword [0x7ff7e1d9b2a0]
test rax, rax
je 0x7ff7e1a5a2c7
dec dword [rax + 0x3b0]
mov rdx, qword [0x7ff7e1d9b290]
call fcn.7ff7e1a53ba0
mov qword [rbx + 0x1d00], r15
mov rcx, qword [rbx + 0x1d10]
test rcx, rcx
je 0x7ff7e1a5a312
mov qword [rbx + 0x1d08], r15
mov rax, qword [0x7ff7e1d9b2a0]
test rax, rax
je 0x7ff7e1a5a2ff
dec dword [rax + 0x3b0]
mov rdx, qword [0x7ff7e1d9b290]
call fcn.7ff7e1a53ba0
mov qword [rbx + 0x1d10], r15
mov rcx, qword [rbx + 0x1d20]
test rcx, rcx
je 0x7ff7e1a5a34a
mov qword [rbx + 0x1d18], r15
mov rax, qword [0x7ff7e1d9b2a0]
test rax, rax
je 0x7ff7e1a5a337
dec dword [rax + 0x3b0]
mov rdx, qword [0x7ff7e1d9b290]
call fcn.7ff7e1a53ba0
mov qword [rbx + 0x1d20], r15
mov rcx, qword [rbx + 0x1d30]
test rcx, rcx
je 0x7ff7e1a5a382
mov qword [rbx + 0x1d28], r15
mov rax, qword [0x7ff7e1d9b2a0]
test rax, rax
je 0x7ff7e1a5a36f
dec dword [rax + 0x3b0]
mov rdx, qword [0x7ff7e1d9b290]
call fcn.7ff7e1a53ba0
mov qword [rbx + 0x1d30], r15
mov qword [rbx + 0x1d60], r15
mov qword [rbx + 0x1d58], r15
mov qword [rbx + 0x1d50], r15
mov edi, r15d
mov eax, dword [rbx + 0x1d38]
test eax, eax
jle 0x7ff7e1a5a3e8
mov rsi, r15
test rsi, rsi
js 0x7ff7e1a5a3b0
cmp edi, eax
jl 0x7ff7e1a5a3c9
mov r8d, 0x5c6
lea rdx, [0x7ff7e1d4cc90]
lea rcx, [0x7ff7e1d52c80]
call fcn.7ff7e1c744f8
mov rcx, qword [rbx + 0x1d40]
mov rcx, qword [rcx + rsi*8]
call fcn.7ff7e1a799d0
inc edi
inc rsi
mov eax, dword [rbx + 0x1d38]
cmp edi, eax
jl 0x7ff7e1a5a3a7
mov rcx, qword [rbx + 0x1d40]
test rcx, rcx
je 0x7ff7e1a5a420
mov qword [rbx + 0x1d38], r15
mov rax, qword [0x7ff7e1d9b2a0]
test rax, rax
je 0x7ff7e1a5a40d
dec dword [rax + 0x3b0]
mov rdx, qword [0x7ff7e1d9b290]
call fcn.7ff7e1a53ba0
mov qword [rbx + 0x1d40], r15
lea rcx, [rbx + 0x1fa0]
call fcn.7ff7e1a78c80
mov rcx, qword [rbx + 0x1fd0]
test rcx, rcx
je 0x7ff7e1a5a464
mov qword [rbx + 0x1fc8], r15
mov rax, qword [0x7ff7e1d9b2a0]
test rax, rax
je 0x7ff7e1a5a451
dec dword [rax + 0x3b0]
mov rdx, qword [0x7ff7e1d9b290]
call fcn.7ff7e1a53ba0
mov qword [rbx + 0x1fd0], r15
mov rcx, qword [rbx + 0x1fe0]
test rcx, rcx
je 0x7ff7e1a5a49c
mov qword [rbx + 0x1fd8], r15
mov rax, qword [0x7ff7e1d9b2a0]
test rax, rax
je 0x7ff7e1a5a489
dec dword [rax + 0x3b0]
mov rdx, qword [0x7ff7e1d9b290]
call fcn.7ff7e1a53ba0
mov qword [rbx + 0x1fe0], r15
mov rcx, qword [rbx + 0x2f48]
test rcx, rcx
je 0x7ff7e1a5a4d4
mov qword [rbx + 0x2f40], r15
mov rax, qword [0x7ff7e1d9b2a0]
test rax, rax
je 0x7ff7e1a5a4c1
dec dword [rax + 0x3b0]
mov rdx, qword [0x7ff7e1d9b290]
call fcn.7ff7e1a53ba0
mov qword [rbx + 0x2f48], r15
mov rcx, qword [rbx + 0x2f58]
test rcx, rcx
je 0x7ff7e1a5a50c
mov qword [rbx + 0x2f50], r15
mov rax, qword [0x7ff7e1d9b2a0]
test rax, rax
je 0x7ff7e1a5a4f9
dec dword [rax + 0x3b0]
mov rdx, qword [0x7ff7e1d9b290]
call fcn.7ff7e1a53ba0
mov qword [rbx + 0x2f58], r15
mov rcx, qword [rbx + 0x2008]
test rcx, rcx
je 0x7ff7e1a5a544
mov qword [rbx + 0x2000], r15
mov rax, qword [0x7ff7e1d9b2a0]
test rax, rax
je 0x7ff7e1a5a531
dec dword [rax + 0x3b0]
mov rdx, qword [0x7ff7e1d9b290]
call fcn.7ff7e1a53ba0
mov qword [rbx + 0x2008], r15
mov rcx, qword [rbx + 0x2018]
test rcx, rcx
je 0x7ff7e1a5a57c
mov qword [rbx + 0x2010], r15
mov rax, qword [0x7ff7e1d9b2a0]
test rax, rax
je 0x7ff7e1a5a569
dec dword [rax + 0x3b0]
mov rdx, qword [0x7ff7e1d9b290]
call fcn.7ff7e1a53ba0
mov qword [rbx + 0x2018], r15
mov rcx, qword [rbx + 0x2028]
test rcx, rcx
je 0x7ff7e1a5a5b4
mov qword [rbx + 0x2020], r15
mov rax, qword [0x7ff7e1d9b2a0]
test rax, rax
je 0x7ff7e1a5a5a1
dec dword [rax + 0x3b0]
mov rdx, qword [0x7ff7e1d9b290]
call fcn.7ff7e1a53ba0
mov qword [rbx + 0x2028], r15
mov rcx, qword [rbx + 0x2fe8]
test rcx, rcx
je 0x7ff7e1a5a5ec
mov qword [rbx + 0x2fe0], r15
mov rax, qword [0x7ff7e1d9b2a0]
test rax, rax
je 0x7ff7e1a5a5d9
dec dword [rax + 0x3b0]
mov rdx, qword [0x7ff7e1d9b290]
call fcn.7ff7e1a53ba0
mov qword [rbx + 0x2fe8], r15
mov rcx, qword [rbx + 0x2fd8]
test rcx, rcx
je 0x7ff7e1a5a624
mov qword [rbx + 0x2fd0], r15
mov rax, qword [0x7ff7e1d9b2a0]
test rax, rax
je 0x7ff7e1a5a611
dec dword [rax + 0x3b0]
mov rdx, qword [0x7ff7e1d9b290]
call fcn.7ff7e1a53ba0
mov qword [rbx + 0x2fd8], r15
cmp qword [rbx + 0x3008], 0
je 0x7ff7e1a5a653
mov rdi, qword [rbx + 0x3008]
mov ecx, 1
call fcn.7ff7e1c74724
cmp rdi, rax
je 0x7ff7e1a5a64c
mov rcx, rdi
call fcn.7ff7e1c79c74
mov qword [rbx + 0x3008], r15
mov rcx, qword [rbx + 0x3018]
test rcx, rcx
je 0x7ff7e1a5a68b
mov qword [rbx + 0x3010], r15
mov rax, qword [0x7ff7e1d9b2a0]
test rax, rax
je 0x7ff7e1a5a678
dec dword [rax + 0x3b0]
mov rdx, qword [0x7ff7e1d9b290]
call fcn.7ff7e1a53ba0
mov qword [rbx + 0x3018], r15
mov byte [rbx], 0
mov rbx, qword [rsp + 0x48]
mov rbp, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x58]
add rsp, 0x20
pop r15
pop r14
pop rdi
ret