Function at 0x14000e64c
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x30
mov r14, rdx
xor r15d, r15d
mov edx, r8d
mov ebp, r9d
mov esi, r8d
mov rbx, rcx
mov r12d, r15d
call fcn.14000ad5c
call fcn.14000e20c
cmp word [r14], r15w
je 0x14000e699
xor edx, edx
mov rcx, r14
call fcn.14001319c
jmp 0x14000e6a4
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
cmp rax, 0xffffffffffffffff
mov rdi, rax
je 0x14000e8db
cmp ebp, r15d
mov r13d, 2
jne 0x14000e6f7
cmp dword [rbx + 0x40], r15d
je 0x14000e6f7
cmp dword [rbx + 0x44], r15d
mov dword [rsp + 0x68], r15d
mov qword [rsp + 0x20], r15
lea r9, [rsp + 0x68]
mov rcx, rax
je 0x14000e6e7
lea r8d, [r13 + 1]
lea rdx, [0x14001fa00]
jmp 0x14000e6f1
mov r8d, r13d
lea rdx, [0x14001fa04]
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov r12d, 1
call fcn.14001333c
cmp esi, 5
je 0x14000e70c
cmp esi, 6
jne 0x14000e71e
mov rax, qword [rbx]
mov r8d, esi
mov rdx, rdi
mov rcx, rbx
call qword [rax + 0xb0]
cmp esi, 7
jne 0x14000e72f
mov rax, qword [rbx]
mov rdx, rdi
mov rcx, rbx
call qword [rax + 0x50]
cmp esi, r13d
jne 0x14000e74b
cmp dword [rbx + 0x36c], r15d
je 0x14000e767
xor r8d, r8d
mov rdx, rdi
mov rcx, rbx
call fcn.14000d39c
cmp esi, 4
jne 0x14000e767
cmp dword [rbx + 0x36c], r15d
je 0x14000e767
xor r8d, r8d
mov rdx, rdi
mov rcx, rbx
call fcn.14000dd7c
cmp dword [rsp + 0x80], r15d
mov rcx, qword [rbx + 0x310]
je 0x14000e804
mov r9, r13
or r8, 0xffffffffffffffff
mov edx, 0x100c
call qword [sym.imp.USER32.dll_SendMessageW]
mov rbp, rax
cmp eax, r15d
jl 0x14000e891
lea rdx, [rsp + 0x68]
mov r8d, ebp
mov rcx, rbx
call fcn.14000d67c
cmp eax, r15d
je 0x14000e7e8
mov rax, qword [rbx]
mov rdx, qword [rsp + 0x68]
mov r8d, ebp
mov rcx, rbx
call qword [rax + 0xe8]
cmp eax, r15d
je 0x14000e7e8
mov rax, qword [rbx]
mov r8, qword [rsp + 0x68]
mov r9d, esi
mov rdx, rdi
mov rcx, rbx
call qword [rax + 0x100]
cmp eax, r15d
je 0x14000e88e
mov rcx, qword [rbx + 0x310]
movsxd r8, ebp
mov r9, r13
mov edx, 0x100c
call qword [sym.imp.USER32.dll_SendMessageW]
mov ebp, eax
jmp 0x14000e791
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1004
call qword [sym.imp.USER32.dll_SendMessageW]
mov ebp, r15d
cmp eax, r15d
mov r13, rax
jle 0x14000e891
lea rdx, [rsp + 0x68]
mov r8d, ebp
mov rcx, rbx
call fcn.14000d67c
cmp eax, r15d
je 0x14000e884
cmp dword [rbx + 0x368], r15d
mov edx, ebp
mov rcx, rbx
je 0x14000e84a
call fcn.14000b42c
jmp 0x14000e84f
call fcn.14000d63c
mov rax, qword [rbx]
mov rdx, qword [rsp + 0x68]
mov r8d, ebp
mov rcx, rbx
call qword [rax + 0xe8]
cmp eax, r15d
je 0x14000e884
mov rax, qword [rbx]
mov r8, qword [rsp + 0x68]
mov r9d, esi
mov rdx, rdi
mov rcx, rbx
call qword [rax + 0x100]
cmp eax, r15d
je 0x14000e88e
add ebp, r12d
cmp ebp, r13d
jge 0x14000e891
jmp 0x14000e820
mov r12d, r15d
cmp esi, 5
je 0x14000e89b
cmp esi, 6
jne 0x14000e8ad
mov rax, qword [rbx]
mov r8d, esi
mov rdx, rdi
mov rcx, rbx
call qword [rax + 0xa8]
cmp esi, 7
jne 0x14000e8bf
mov r8, qword [rbx]
mov rdx, rdi
mov rcx, rbx
call qword [r8 + 0x58]
cmp word [r14], r15w
je 0x14000e8ce
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [0x1400253f0]
call qword [sym.imp.USER32.dll_SetCursor]
mov rbx, qword [rsp + 0x60]
mov rbp, qword [rsp + 0x70]
mov rsi, qword [rsp + 0x78]
mov eax, r12d
add rsp, 0x30
pop r15
pop r14
pop r13
pop r12
pop rdi
ret