Function at 0x14006e440
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x20], rbp
push rdi
sub rsp, 0x50
mov ebp, r8d
mov rdi, rdx
mov rbx, rcx
test r8d, r8d
je 0x14006e78c
mov edx, 2
mov qword [rsp + 0x60], rsi
add rcx, 0x28
call fcn.140025da0
mov r9d, dword [rbx + 0x258]
mov rdx, rdi
mov r8, qword [rbx + 0x280]
mov rcx, qword [rbx + 0x270]
mov byte [rsp + 0x40], 1
mov byte [rsp + 0x38], 0
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], ebp
mov dword [rsp + 0x20], 0
call fcn.140026dd0
mov edx, 2
lea rcx, [rbx + 0x28]
call fcn.140025da0
lea r8, [0x14012dcb0]
xor edx, edx
movzx ecx, word [rax + rdx*2]
cmp cx, word [r8 + rdx*2]
jne 0x14006e541
movzx ecx, word [rax + rdx*2 + 2]
cmp cx, word [r8 + rdx*2 + 2]
jne 0x14006e541
add rdx, 2
cmp rdx, 0xa
jne 0x14006e4c3
mov edx, dword [rbx + 0x258]
mov r9, qword [rbx + 0x270]
imul edx, ebp
test edx, edx
je 0x14006e73c
mov r8d, dword [rbx + 0x298]
nop dword [rax]
nop dword [rax + rax]
movsx eax, byte [r9]
lea r9, [r9 + 1]
dec edx
cmp eax, r8d
jge 0x14006e52a
mov r8d, eax
mov dword [rbx + 0x298], eax
jmp 0x14006e538
cmp eax, dword [rbx + 0x29c]
jle 0x14006e538
mov dword [rbx + 0x29c], eax
test edx, edx
jne 0x14006e510
jmp 0x14006e73c
mov edx, 2
lea rcx, [rbx + 0x28]
call fcn.140025da0
mov rdi, 0xffffffffffffffff
lea r9, [0x14012bb38]
mov rdx, rdi
mov r8, rax
nop dword [rax]
nop word [rax + rax]
movzx ecx, word [r8 + rdx*2 + 2]
cmp cx, word [r9 + rdx*2 + 2]
jne 0x14006e598
add rdx, 2
cmp rdx, 0xb
je 0x14006e62f
movzx eax, word [r8 + rdx*2]
cmp ax, word [r9 + rdx*2]
je 0x14006e570
mov edx, 2
lea rcx, [rbx + 0x28]
call fcn.140025da0
mov r8, rax
lea r9, [0x14012dc98]
mov rdx, rdi
nop dword [rax]
nop word [rax + rax]
movzx ecx, word [r8 + rdx*2 + 2]
cmp cx, word [r9 + rdx*2 + 2]
jne 0x14006e5e8
add rdx, 2
cmp rdx, 0xb
je 0x14006e688
movzx eax, word [r8 + rdx*2]
cmp ax, word [r9 + rdx*2]
je 0x14006e5c0
mov edx, 2
lea rcx, [rbx + 0x28]
call fcn.140025da0
mov rdx, rax
lea r8, [0x140130280]
movzx ecx, word [rdx + rdi*2 + 2]
cmp cx, word [r8 + rdi*2 + 2]
jne 0x14006e73c
add rdi, 2
cmp rdi, 0xb
je 0x14006e6f3
movzx eax, word [rdx + rdi*2]
cmp ax, word [r8 + rdi*2]
je 0x14006e600
jmp 0x14006e73c
mov edx, dword [rbx + 0x258]
mov r9, qword [rbx + 0x270]
imul edx, ebp
test edx, edx
je 0x14006e73c
mov r8d, dword [rbx + 0x298]
nop
movzx eax, word [r9]
lea r9, [r9 + 2]
ror ax, 8
dec edx
movsx ecx, ax
cmp ecx, r8d
jge 0x14006e671
mov r8d, ecx
mov dword [rbx + 0x298], ecx
jmp 0x14006e67f
cmp ecx, dword [rbx + 0x29c]
jle 0x14006e67f
mov dword [rbx + 0x29c], ecx
test edx, edx
jne 0x14006e650
jmp 0x14006e73c
mov r8d, dword [rbx + 0x258]
mov r10, qword [rbx + 0x270]
imul r8d, ebp
test r8d, r8d
je 0x14006e73c
mov r9d, dword [rbx + 0x298]
nop word [rax + rax]
movzx ecx, byte [r10]
dec r8d
movzx eax, byte [r10 + 1]
mov edx, ecx
shl edx, 8
or edx, eax
shl edx, 8
or edx, ecx
shl edx, 8
sar edx, 8
cmp edx, r9d
jge 0x14006e6de
mov r9d, edx
mov dword [rbx + 0x298], edx
jmp 0x14006e6ec
cmp edx, dword [rbx + 0x29c]
jle 0x14006e6ec
mov dword [rbx + 0x29c], edx
test r8d, r8d
jne 0x14006e6b0
jmp 0x14006e73c
mov ecx, dword [rbx + 0x258]
mov rdx, qword [rbx + 0x270]
imul ecx, ebp
test ecx, ecx
je 0x14006e73c
mov r8d, dword [rbx + 0x298]
nop
mov eax, dword [rdx]
lea rdx, [rdx + 4]
bswap eax
dec ecx
cmp eax, r8d
jge 0x14006e72a
mov r8d, eax
mov dword [rbx + 0x298], eax
jmp 0x14006e738
cmp eax, dword [rbx + 0x29c]
jle 0x14006e738
mov dword [rbx + 0x29c], eax
test ecx, ecx
jne 0x14006e710
mov edi, dword [rbx + 0x290]
lea r9, [rsp + 0x70]
imul edi, dword [rbx + 0x258]
mov rdx, qword [rbx + 0x270]
mov rcx, qword [rbx + 0x38]
mov dword [rsp + 0x70], 0
mov qword [rsp + 0x20], 0
imul edi, ebp
mov r8d, edi
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rsi, qword [rsp + 0x60]
test eax, eax
je 0x14006e79e
cmp dword [rsp + 0x70], edi
jne 0x14006e79e
add qword [rbx + 0x268], rbp
xor eax, eax
mov rbx, qword [rsp + 0x68]
mov rbp, qword [rsp + 0x78]
add rsp, 0x50
pop rdi
ret
mov rbx, qword [rsp + 0x68]
mov eax, 0x80040206
mov rbp, qword [rsp + 0x78]
add rsp, 0x50
pop rdi
ret