Function at 0x14000ed4f
Capabilities:
Write file on windows

Disassembly:
or byte [rax - 0x77], cl
ror byte [r8 - 0x77], 0x7d
mov eax, 0x73633b81
insd dword [rdi], dx
loopne 0x14000ed6e
test dword [rbx - 0x7cfffffe], edi
jnp 0x14000ed7f
add al, 0xf
test dword [rcx - 0x74fffffe], esi
and byte [0x15993f296], bpl
mov eax, dword [rbx + 0x20]
sub eax, 0x19930520
cmp eax, 2
ja 0x14000f01f
xor r15d, r15d
cmp dword [rdi + 0xc], r15d
jbe 0x14000ef50
mov eax, dword [rbp + 0xa0]
lea rdx, [rbp - 0x48]
mov dword [rsp + 0x28], eax
lea rcx, [rbp - 0x28]
mov r9, rsi
mov qword [rsp + 0x20], rdi
mov r8d, r14d
call fcn.14001c556
movups xmm0, xmmword [rbp - 0x28]
movdqu xmmword [rbp - 0x38], xmm0
psrldq xmm0, 8
movd eax, xmm0
cmp eax, dword [rbp - 0x10]
jae 0x14000ef50
mov r9, qword [rbp - 0x28]
mov r13d, dword [rbp - 0x30]
mov qword [rbp - 0x80], r9
mov rax, qword [rbp - 0x38]
mov rax, qword [rax]
movsxd rdx, dword [rax + 0x10]
mov eax, r13d
lea rcx, [rax + rax*4]
mov rax, qword [r9 + 8]
lea r8, [rdx + rcx*4]
movups xmm0, xmmword [r8 + rax]
movsxd rcx, dword [r8 + rax + 0x10]
mov dword [rbp - 0x50], ecx
movd eax, xmm0
movups xmmword [rbp - 0x60], xmm0
cmp eax, r14d
jg 0x14000ef43
mov rax, qword [rbp - 0x60]
shr rax, 0x20
cmp r14d, eax
jg 0x14000ef43
mov r12d, r15d
mov rdx, rcx
add rdx, qword [rsi + 8]
mov r15, qword [rbp - 0x58]
shr r15, 0x20
mov qword [rbp - 0x70], rdx
test r15d, r15d
je 0x14000ef30
mov eax, r12d
lea rcx, [rax + rax*4]
movups xmm0, xmmword [rdx + rcx*4]
movups xmmword [rbp - 8], xmm0
mov eax, dword [rdx + rcx*4 + 0x10]
mov dword [rbp + 8], eax
call fcn.14001c8e8
mov rcx, qword [rbx + 0x30]
add rax, 4
movsxd rdx, dword [rcx + 0xc]
add rax, rdx
mov qword [rsp + 0x70], rax
call fcn.14001c901
mov rcx, qword [rbx + 0x30]
movsxd rdx, dword [rcx + 0xc]
mov ecx, dword [rax + rdx]
mov dword [rsp + 0x64], ecx
test ecx, ecx
jle 0x14000eec0
call fcn.14001c919
mov rcx, qword [rsp + 0x70]
mov r8, qword [rbx + 0x30]
movsxd rcx, dword [rcx]
add rax, rcx
lea rcx, [rbp - 8]
mov rdx, rax
mov qword [rbp - 0x78], rax
call fcn.14001d598
test eax, eax
jne 0x14000eed1
mov eax, dword [rsp + 0x64]
add qword [rsp + 0x70], 4
dec eax
mov dword [rsp + 0x64], eax
test eax, eax
jg 0x14000ee84
inc r12d
cmp r12d, r15d
je 0x14000ef37
mov rdx, qword [rbp - 0x70]
jmp 0x14001d10a
mov al, byte [rbp + 0x98]
mov r9, rsi
mov r12, qword [rsp + 0x78]
mov rcx, rbx
mov r8, qword [rsp + 0x68]
mov rdx, r12
mov byte [rsp + 0x58], al
mov al, byte [rsp + 0x60]
mov byte [rsp + 0x50], al
mov rax, qword [rbp - 0x68]
mov qword [rsp + 0x48], rax
mov eax, dword [rbp + 0xa0]
mov dword [rsp + 0x40], eax
lea rax, [rbp - 0x60]
mov qword [rsp + 0x38], rax
mov rax, qword [rbp - 0x78]
mov qword [rsp + 0x30], rax
lea rax, [rbp - 8]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdi
call fcn.14001ce56
sub bh, bl
add byte [rax], al
jmp 0x14000ef3c
mov r12, qword [rsp + 0x78]
jmp 0x14000ef40
mov r12, qword [rsp + 0x78]
mov r9, qword [rbp - 0x80]
xor r15d, r15d
inc r13d
cmp r13d, dword [rbp - 0x10]
jb 0x14000edd5
mov eax, dword [rdi]
and eax, 0x1fffffff
cmp eax, 0x19930521
jb 0x14000f05c
cmp dword [rdi + 0x20], r15d
je 0x14000ef76
call fcn.14001c9e9
movsxd rcx, dword [rdi + 0x20]
add rax, rcx
jne 0x14000ef97
mov eax, dword [rdi + 0x24]
shr eax, 2
test al, 1
je 0x14000f05c
mov rdx, rdi
mov rcx, rsi
call fcn.14001c5db
test al, al
jne 0x14000f05c
mov eax, dword [rdi + 0x24]
shr eax, 2
test al, 1
jne 0x14000f0b2
cmp dword [rdi + 0x20], r15d
je 0x14000efbc
call 0x14001ca2c
mov rdx, rax
movsxd rax, dword [rdi + 0x20]
add rdx, rax
jmp 0x14000efbf
mov rdx, r15
mov rcx, rbx
call fcn.14001dfcb
test al, al
jne 0x14000f05c
lea r9, [rbp - 0x78]
mov r8, rdi
mov rdx, rsi
mov rcx, r12
call fcn.14001c6bd
mov cl, byte [rbp + 0x98]
mov r9, rax
mov r8, qword [rsp + 0x68]
mov rdx, rbx
mov byte [rsp + 0x50], cl
or ecx, 0xffffffff
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x40], r15
mov dword [rsp + 0x38], ecx
mov dword [rsp + 0x30], ecx
mov rcx, r12
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], r15
call fcn.14001c905
jmp 0x14000f05c
cmp dword [rdi + 0xc], 0
jbe 0x14000f05c
cmp byte [rbp + 0x98], 0
jne 0x14000f0cf
mov eax, dword [rbp + 0xa0]
call fcn.14001c1a3
mov qword [rax + 0x20], rbx
call 0x14001c1ac
mov rcx, qword [rsp + 0x68]
mov qword [rax + 0x28], rcx
call fcn.140028f32
int3
stc
mov rax, r10
mov ebp, r9d
sar rax, 6
lea rcx, [0x140040980]
and r10d, 0x3f
add rbp, r8
mov rsi, r8
mov rax, qword [rcx + rax*8]
lea rdx, [r10 + r10*8]
mov r14, qword [rax + rdx*8 + 0x28]
xor eax, eax
mov qword [rdi], rax
mov dword [rdi + 8], eax
cmp r8, rbp
jae 0x14001d1af
lea rbx, [rsp + 0x40]
cmp rsi, rbp
jae 0x14001d16e
mov al, byte [rsi]
inc rsi
cmp al, 0xa
jne 0x14001d15c
inc dword [rdi + 8]
mov byte [rbx], 0xd
inc rbx
mov byte [rbx], al
inc rbx
lea rax, [rsp + 0x143f]
cmp rbx, rax
jb 0x14001d145
and qword [rsp + 0x20], 0
lea rax, [rsp + 0x40]
sub ebx, eax
lea r9, [rsp + 0x30]
mov r8d, ebx
lea rdx, [rsp + 0x40]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x14001d1a7
mov eax, dword [rsp + 0x30]
add dword [rdi + 4], eax
cmp eax, ebx
jb 0x14001d1af
cmp rsi, rbp
jb 0x14001d140
jmp 0x14001d1af
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rdi], eax
invalid
invalid