Function at 0x140001000
Capabilities:
Accept command line arguments
Write file on windows

Disassembly:
push r15
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x38
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
lea rdx, [rsp + 0x24]
mov rcx, rax
call qword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov rsi, rax
mov eax, dword [rsp + 0x24]
cmp eax, 2
jge 0x140001048
jmp 0x140001072
mov rdi, rsi
lea ecx, [rax - 1]
mov dword [rsp + 0x24], ecx
add rdi, 8
mov rsi, rdi
cmp eax, 2
mov eax, ecx
jle 0x140001072
lea rdi, [rsi + 8]
mov rcx, qword [rsi + 8]
cmp word [rcx], 0x2d
jne 0x140001077
cmp word [rcx + 2], 0x6c
jne 0x140001072
cmp word [rcx + 4], 0
jne 0x140001030
lea ecx, [rax - 1]
mov dword [rsp + 0x24], ecx
cmp eax, 2
mov eax, ecx
ja 0x140001033
call fcn.140001680
cmp eax, 3
jne 0x140001072
lea rdx, [rsp + 0x28]
mov r8d, 0xa
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_wcstoll]
test rax, rax
jle 0x140001620
mov r14, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
cmp dword [rax], 0x16
je 0x140001620
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
cmp dword [rax], 0x22
je 0x140001620
mov rax, qword [rsp + 0x28]
movzx eax, word [rax]
cmp eax, 0x47
je 0x1400010d4
cmp eax, 0x4d
je 0x1400010da
cmp eax, 0x4b
jne 0x1400010de
shl r14, 0xa
jmp 0x1400010de
shl r14, 0x1e
jmp 0x1400010de
shl r14, 0x14
cmp r14, 0x8fffff
jle 0x140001637
movabs rax, 0xfffffffe01
cmp r14, rax
jae 0x14000164e
mov r15, r14
shr r15, 9
cmp r14, 0x10400000
jae 0x140001134
lea eax, [r14 - 0x4000]
shr eax, 9
lea rcx, [rax - 1]
sub eax, 0xffffff80
imul rdi, rax, 0x1fc07f1
shr rdi, 0x20
mov ebp, 1
jmp 0x1400011d5
mov rax, r14
shr rax, 0x21
jne 0x140001165
lea rax, [r14 - 0x4000]
shr rax, 9
lea rcx, [rax - 1]
add eax, 0x200
mov edi, 0xff803fe1
imul rdi, rax
shr rdi, 0x29
mov ebp, 4
jmp 0x1400011d5
mov rax, r14
shr rax, 0x22
jne 0x140001196
lea rax, [r14 - 0x4000]
shr rax, 9
lea rcx, [rax - 1]
add eax, 0x400
mov edi, 0xffc00ffd
imul rdi, rax
shr rdi, 0x2a
mov ebp, 8
jmp 0x1400011d5
xor ebp, ebp
mov rax, r14
shr rax, 0x23
setne bpl
mov edx, ebp
shl edx, 0xb
lea rcx, [r14 - 0x4000]
shr rcx, 9
dec rcx
lea eax, [rdx + rcx]
add eax, 0x801
mov r8d, edx
add r8d, 0x801
xor edx, edx
div r8d
mov edi, eax
shl ebp, 4
add ebp, 0x10
mov edx, ebp
shl edx, 7
lea eax, [rdx + rcx]
inc eax
mov ecx, edx
or ecx, 1
xor edx, edx
div ecx
mov ebx, eax
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov qword [rsp + 0x30], rax
lea rcx, [rsp + 0x30]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__gmtime64]
mov r9d, dword [rax + 8]
mov edx, dword [rax + 0xc]
mov ecx, dword [rax + 0x10]
add ecx, dword [rax]
mov r10d, dword [rax + 0x14]
shl r9d, 8
add r9d, dword [rax + 4]
lea r8d, [rdx + 0x100]
lea eax, [r10 + r9]
add eax, 0x76c
mov word [0x140005240], 0x5aeb
mov byte [0x140005242], 0x90
movabs r9, 0x312e344e4957534d
mov qword [0x140005243], r9
mov word [0x14000524b], 0x200
mov byte [0x14000524d], bpl
mov word [0x14000524e], 0x20
mov byte [0x140005250], 2
movabs r9, 0x90000f800000000
mov qword [0x140005251], r9
mov word [0x140005259], 0x200
mov dword [0x14000525b], 0
mov byte [0x14000525f], 0
mov byte [0x140005260], r15b
mov r9, r14
shr r9, 0x11
mov byte [0x140005261], r9b
mov r9, r14
shr r9, 0x19
mov byte [0x140005262], r9b
shr r14, 0x21
mov byte [0x140005263], r14b
mov byte [0x140005264], bl
mov byte [0x140005265], bh
mov r9, rbx
shr r9, 0x10
mov byte [0x140005266], r9b
mov r9, rbx
shr r9, 0x18
mov byte [0x140005267], r9b
mov dword [0x140005268], 0
movabs r9, 0x6000100000002
mov qword [0x14000526c], r9
mov byte [0x140005280], 0x80
mov byte [0x140005282], 0x29
mov byte [0x140005283], dl
shr r8d, 8
add r8d, ecx
mov byte [0x140005284], r8b
mov byte [0x140005285], al
mov byte [0x140005286], ah
movabs rax, 0x445241434453
mov qword [0x140005287], rax
mov dword [0x14000528e], 0
movabs rax, 0x2020203233544146
mov qword [0x140005292], rax
mov word [0x14000543e], 0xaa55
lea ebp, [r15 - 0x20]
add ebx, ebx
mov eax, ebp
sub eax, ebx
mov dword [0x140005040], 0x41615252
mov dword [0x140005224], 0x61417272
mov byte [0x140005228], al
mov byte [0x140005229], ah
mov ecx, eax
shr ecx, 0x10
mov byte [0x14000522a], cl
shr eax, 0x18
mov byte [0x14000522b], al
mov dword [0x14000522c], 3
mov dword [0x14000523c], 0xaa550000
movabs rax, 0xfffffff0ffffff8
mov qword [0x140005440], rax
mov dword [0x140005448], 0xfffffff
mov rcx, qword [rsi + 0x10]
lea rdx, [0x140003082]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__wfopen]
test rax, rax
je 0x1400015a8
mov rbx, rax
lea rcx, [0x140005240]
mov edx, 1
mov r8d, 0x200
mov r9, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rax, 0x200
jne 0x14000153e
lea rcx, [0x140005040]
mov edx, 1
mov r8d, 0x200
mov r9, rbx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rax, 0x200
jne 0x14000153e
lea r14, [0x140005650]
mov r8d, 0x40000
mov rcx, r14
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov edx, 1
mov r8d, 0x800
mov rcx, r14
mov r9, rbx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rax, 0x800
jne 0x1400015ef
lea rcx, [0x140005240]
mov edx, 1
mov r8d, 0x200
mov r9, rbx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rax, 0x200
jne 0x14000153e
lea rdx, [0x140005040]
mov rcx, rbx
call fcn.140001800
test eax, eax
jne 0x140001572
mov edx, 0x18
mov rcx, rbx
call fcn.140001880
test eax, eax
jne 0x140001572
lea rdx, [0x140005440]
mov rcx, rbx
call fcn.140001800
test eax, eax
jne 0x140001572
lea r14d, [rdi - 1]
mov rcx, rbx
mov rdx, r14
call fcn.140001880
test eax, eax
jne 0x140001572
lea rdx, [0x140005440]
mov rcx, rbx
call fcn.140001800
test eax, eax
jne 0x140001572
mov rcx, rbx
mov rdx, r14
call fcn.140001880
test eax, eax
jne 0x140001572
add edi, edi
sub ebp, edi
movsxd rdx, ebp
mov rcx, rbx
call fcn.140001880
test eax, eax
jne 0x140001572
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
xor eax, eax
jmp 0x1400015e2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov ecx, dword [rax]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_strerror]
mov rdi, rax
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rdx, str.Failed_to_write_sector_of__d_bytes:__s_n
mov rcx, rax
mov r8d, 0x200
mov r9, rdi
call fcn.1400017b0
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov rcx, qword [rsi + 0x10]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__wunlink]
mov rsi, qword [rsi + 0x10]
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rdx, str.File__S_was_not_created._n
mov rcx, rax
mov r8, rsi
call fcn.1400017b0
jmp 0x1400015dd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov ecx, dword [rax]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_strerror]
mov rdi, rax
mov rsi, qword [rsi + 0x10]
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rdx, str.Could_not_create_file__S:__s_n
mov rcx, rax
mov r8, rsi
mov r9, rdi
call fcn.1400017b0
mov eax, 1
add rsp, 0x38
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
pop r15
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov ecx, dword [rax]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_strerror]
mov rdi, rax
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rdx, str.Failed_to_write__d_bytes:__s_n
mov rcx, rax
mov r8d, 0x800
jmp 0x14000156a
mov rsi, qword [rdi]
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rdx, str.Invalid_argument_size__S_n_n
jmp 0x140001663
mov rsi, qword [rdi]
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rdx, str.Invalid_argument:_size__S_is_too_small._n_n
jmp 0x140001663
mov rsi, qword [rdi]
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rdx, str.Invalid_argument:_size__S_is_too_large._n_n
mov rcx, rax
mov r8, rsi
call fcn.1400017b0
call fcn.140001680
int3