Function at 0x1400232e0
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x850]
sub rsp, 0x950
mov rax, qword [section..data]
xor rax, rsp
mov qword [rbp + 0x840], rax
mov r13, rdx
mov r15, rcx
mov dil, 1
mov r12d, 0xa
xor r14d, r14d
inc r12w
cmp r12w, 0x64
jbe 0x140023331
movzx r12d, r14w
lea rdx, [0x140033b50]
xor ecx, ecx
movzx r8d, r12w
call qword [0x140041aa8]
test ax, ax
jne 0x140023738
lea r9, [rsp + 0x30]
lea r8, [rbp + 0x40]
movzx edx, dil
mov rcx, r15
mov esi, r14d
lea rbx, [rbp + 0x440]
call qword [sym.imp.wtli.dll_wsupIterate]
mov ecx, reloc.mfc120u.dll_Ordinal_1030
cmp ax, cx
je 0x140023734
movzx ecx, byte [rsp + 0x30]
dec ecx
je 0x140023570
dec ecx
je 0x1400233ef
test dil, dil
jne 0x1400233a4
mov byte [rbp + 0x440], 0xcc
lea rbx, [rbp + 0x441]
mov esi, 1
movzx eax, word [rbp + 0x40]
lea rcx, [rbp + 0x40]
movzx edx, r14w
test ax, ax
je 0x1400233e0
nop word [rax + rax]
mov byte [rbx], 0xf0
mov word [rbx + 1], ax
movzx eax, word [rcx + 2]
lea rcx, [rcx + 2]
mov byte [rbx + 3], 0xf0
add rbx, 4
add dx, 4
test ax, ax
jne 0x1400233c0
movzx eax, dx
mov word [rbx], 0
add esi, eax
jmp 0x1400236d1
movzx ecx, word [rbp + 0x40]
mov byte [rbp + 0x440], 0xcc
lea rax, [rbp + 0x441]
lea rdx, [rbp + 0x40]
movzx r8d, r14w
test cx, cx
je 0x140023431
nop
mov byte [rax], 0xf0
mov word [rax + 1], cx
movzx ecx, word [rdx + 2]
lea rdx, [rdx + 2]
mov byte [rax + 3], 0xf0
add rax, 4
add r8w, 4
test cx, cx
jne 0x140023410
mov word [rax], 0
movzx eax, r8w
lea rdi, [rbp + 0x441]
lea esi, [rax + 1]
mov bl, 1
add rdi, rax
nop dword [rax]
lea rdx, [rsp + 0x40]
movzx r8d, bl
mov rcx, r15
call qword [sym.imp.wtli.dll_wsupGetAlternate]
movzx ecx, word [rsp + 0x40]
mov r14d, eax
mov eax, 0x3fe
cmp cx, ax
jb 0x140023476
mov ecx, eax
movzx ebx, cx
lea rdx, [rsp + 0x42]
lea rcx, [rbp + 0x40]
mov r8d, ebx
call qword [sym.imp.MSVCR120.dll_memmove]
xor eax, eax
mov word [rbp + rbx + 0x40], ax
mov eax, reloc.mfc120u.dll_Ordinal_1030
cmp r14d, eax
je 0x1400236ce
movzx ecx, word [rbp + 0x40]
mov word [rdi], 0x5ccc
xor r14d, r14d
mov byte [rdi + 2], 0x7c
add rdi, 3
xor bl, bl
add esi, 3
lea rdx, [rbp + 0x40]
movzx r8d, r14w
mov rax, rdi
test cx, cx
je 0x1400234f1
nop dword [rax]
mov byte [rax], 0xf0
mov word [rax + 1], cx
movzx ecx, word [rdx + 2]
lea rdx, [rdx + 2]
mov byte [rax + 3], 0xf0
add rax, 4
add r8w, 4
test cx, cx
jne 0x1400234d0
mov word [rax], r14w
movzx eax, r8w
lea rdx, [rbp + 0x40]
mov rcx, r15
add esi, eax
add rdi, rax
call qword [sym.imp.wtli.dll_wsupGetComment]
test eax, eax
jne 0x140023450
movzx ecx, word [rbp + 0x40]
mov word [rdi], 0x5ccc
mov byte [rdi + 2], 0x23
add rdi, 3
add esi, 3
lea rdx, [rbp + 0x40]
mov rax, rdi
movzx r8d, r14w
test cx, cx
je 0x140023561
nop word [rax + rax]
mov byte [rax], 0xf0
mov word [rax + 1], cx
movzx ecx, word [rdx + 2]
lea rdx, [rdx + 2]
mov byte [rax + 3], 0xf0
add rax, 4
add r8w, 4
test cx, cx
jne 0x140023540
mov word [rax], r14w
movzx eax, r8w
add esi, eax
jmp 0x140023446
movzx ecx, word [rbp + 0x40]
mov byte [rbp + 0x440], 0xcc
lea rax, [rbp + 0x441]
lea rdx, [rbp + 0x40]
movzx r8d, r14w
test cx, cx
je 0x1400235b1
nop
mov byte [rax], 0xf0
mov word [rax + 1], cx
movzx ecx, word [rdx + 2]
lea rdx, [rdx + 2]
mov byte [rax + 3], 0xf0
add rax, 4
add r8w, 4
test cx, cx
jne 0x140023590
movzx ecx, r8w
mov word [rax], 0
lea rdi, [rbp + 0x441]
add rdi, rcx
mov eax, ecx
lea esi, [rcx + 4]
mov word [rdi], 0x5ccc
mov byte [rdi + 2], 0x3d
lea rdx, [rsp + 0x40]
mov r8d, 1
mov rcx, r15
add rdi, 3
call qword [sym.imp.wtli.dll_wsupGetAlternate]
movzx eax, word [rsp + 0x40]
mov ecx, 0x3fe
cmp ax, cx
jb 0x1400235fb
mov eax, ecx
movzx ebx, ax
lea rdx, [rsp + 0x42]
lea rcx, [rbp + 0x40]
mov r8d, ebx
call qword [sym.imp.MSVCR120.dll_memmove]
xor eax, eax
lea rcx, [rbp + 0x40]
mov word [rbp + rbx + 0x40], ax
movzx edx, word [rbp + 0x40]
movzx r8d, r14w
mov rax, rdi
test dx, dx
je 0x140023651
nop dword [rax + rax]
mov byte [rax], 0xf0
mov word [rax + 1], dx
movzx edx, word [rcx + 2]
lea rcx, [rcx + 2]
mov byte [rax + 3], 0xf0
add rax, 4
add r8w, 4
test dx, dx
jne 0x140023630
mov word [rax], 0
movzx eax, r8w
lea rdx, [rbp + 0x40]
mov rcx, r15
add esi, eax
add rdi, rax
call qword [sym.imp.wtli.dll_wsupGetComment]
test eax, eax
jne 0x1400236d1
movzx ecx, word [rbp + 0x40]
mov word [rdi], 0x5ccc
add rdi, 2
add esi, 3
lea rdx, [rbp + 0x40]
movzx r8d, r14w
mov byte [rdi], 0x23
lea rax, [rdi + 1]
test cx, cx
je 0x1400236c1
nop dword [rax]
nop dword [rax + rax]
mov byte [rax], 0xf0
mov word [rax + 1], cx
movzx ecx, word [rdx + 2]
lea rdx, [rdx + 2]
mov byte [rax + 3], 0xf0
add rax, 4
add r8w, 4
test cx, cx
jne 0x1400236a0
mov word [rax], 0
movzx eax, r8w
add esi, eax
jmp 0x1400236d1
xor r14d, r14d
mov rcx, qword [r13]
lea r9, [rsp + 0x34]
lea rdx, [rbp + 0x440]
mov r8d, esi
xor dil, dil
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x140023322
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x58
jae 0x140023713
lea rcx, [0x1400310a0]
mov eax, eax
mov ecx, dword [rcx + rax*4]
jmp 0x140023718
mov ecx, 0x106
mov dword [0x1400430b8], ecx
mov dword [0x1400434c8], 2
mov byte [0x1400433c0], 0
jmp 0x140023322
xor eax, eax
jmp 0x14002373d
mov eax, 6
mov rcx, qword [rbp + 0x840]
xor rcx, rsp
call fcn.14002c960
mov rbx, qword [rsp + 0x9a0]
add rsp, 0x950
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret