Function at 0x14006df60
Capabilities:
Write file on windows

Disassembly:
push rbp
sub rsp, 0x440
xor edx, edx
mov rbp, rcx
call fcn.140024c30
mov edx, eax
shr edx, 0x1f
test dl, dl
jne 0x14006e0f1
mov qword [rsp + 0x450], rbx
lea rcx, [rbp + 0x28]
mov qword [rsp + 0x460], rsi
mov edx, 2
mov qword [rsp + 0x438], rdi
call fcn.140025da0
xor ebx, ebx
lea r8, [0x14012dcb0]
mov edx, ebx
nop dword [rax]
nop word [rax + rax]
movzx ecx, word [rax + rdx*2]
mov rsi, 0xffffffffffffffff
cmp cx, word [r8 + rdx*2]
jne 0x14006dff8
movzx ecx, word [rax + rdx*2 + 2]
cmp cx, word [r8 + rdx*2 + 2]
jne 0x14006dff8
add rdx, 2
cmp rdx, 0xa
jne 0x14006dfc0
mov dword [rbp + 0x290], 1
jmp 0x14006e11c
mov edx, 2
lea rcx, [rbp + 0x28]
call fcn.140025da0
mov r8, rax
lea r9, [0x14012bb38]
mov rdx, rsi
nop dword [rax]
nop word [rax + rax]
movzx ecx, word [r8 + rdx*2 + 2]
cmp cx, word [r9 + rdx*2 + 2]
jne 0x14006e048
add rdx, 2
cmp rdx, 0xb
je 0x14006e0fa
movzx eax, word [r8 + rdx*2]
cmp ax, word [r9 + rdx*2]
je 0x14006e020
mov edx, 2
lea rcx, [rbp + 0x28]
call fcn.140025da0
mov r8, rax
lea r9, [0x14012dc98]
mov rdx, rsi
nop dword [rax]
nop word [rax + rax]
movzx ecx, word [r8 + rdx*2 + 2]
cmp cx, word [r9 + rdx*2 + 2]
jne 0x14006e094
add rdx, 2
cmp rdx, 0xb
je 0x14006e106
movzx eax, word [r8 + rdx*2]
cmp ax, word [r9 + rdx*2]
je 0x14006e070
mov edx, 2
lea rcx, [rbp + 0x28]
call fcn.140025da0
mov r8, rax
lea r9, [0x140130280]
mov rdx, rsi
nop
movzx ecx, word [r8 + rdx*2 + 2]
cmp cx, word [r9 + rdx*2 + 2]
jne 0x14006e0d4
add rdx, 2
cmp rdx, 0xb
je 0x14006e112
movzx eax, word [r8 + rdx*2]
cmp ax, word [r9 + rdx*2]
je 0x14006e0b0
mov eax, 0x80040208
mov rsi, qword [rsp + 0x460]
mov rbx, qword [rsp + 0x450]
mov rdi, qword [rsp + 0x438]
add rsp, 0x440
pop rbp
ret
mov dword [rbp + 0x290], 2
jmp 0x14006e11c
mov dword [rbp + 0x290], 3
jmp 0x14006e11c
mov dword [rbp + 0x290], 4
mov r8d, 0x400
lea rcx, [rsp + 0x30]
mov dl, 0x20
call fcn.1400ba240
mov rcx, qword [rbp + 0x38]
lea r9, [rsp + 0x458]
mov r8d, 0x400
mov dword [rsp + 0x458], ebx
lea rdx, [rsp + 0x30]
mov qword [rsp + 0x20], rbx
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov ecx, dword [rbp + 0x264]
imul ecx, dword [rbp + 0x258]
mov rdi, qword [rbp + 0x270]
imul ecx, dword [rbp + 0x290]
call fcn.1400b609c
mov qword [rbp + 0x270], rax
test rdi, rdi
je 0x14006e18b
mov rcx, rdi
call fcn.1400b60a4
cmp qword [rbp + 0x270], rbx
jne 0x14006e19e
mov eax, 0x80040202
jmp 0x14006e0d9
mov edx, dword [rbp + 0x290]
mov rcx, rbp
mov r9d, dword [rbp + 0x260]
mov r8d, dword [rbp + 0x258]
shl edx, 3
mov qword [rsp + 0x430], r14
mov qword [rbp + 0x298], rbx
call fcn.140024600
mov rcx, rbp
call fcn.1400246e0
mov rcx, qword [rbp + 0x270]
mov r14d, eax
mov qword [rbp + 0x270], rbx
test rcx, rcx
je 0x14006e1ef
call fcn.1400b60a4
mov rcx, qword [rbp + 0x38]
xor r9d, r9d
xor r8d, r8d
mov rdx, rbx
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov r8d, 0x400
lea rdx, str.NIST_1A_n____d_n
lea rcx, [rsp + 0x30]
call fcn.1400100f0
lea rcx, [rsp + 0x30]
mov rax, rsi
inc rax
cmp byte [rcx + rax], bl
jne 0x14006e221
mov r8d, dword [rbp + 0x258]
lea rdi, [rsp + 0x30]
add rdi, rax
lea rdx, str.channel_count__i__d_n
mov rcx, rdi
call fcn.1400100f0
mov rax, rsi
nop word [rax + rax]
inc rax
cmp byte [rdi + rax], bl
jne 0x14006e250
mov r8d, dword [rbp + 0x268]
lea rdx, str.sample_count__i__d_n
add rdi, rax
mov rcx, rdi
call fcn.1400100f0
mov rax, rsi
inc rax
cmp byte [rdi + rax], bl
jne 0x14006e274
mov r8d, dword [rbp + 0x260]
lea rdx, str.sample_rate__i__d_n
add rdi, rax
mov rcx, rdi
call fcn.1400100f0
mov rax, rsi
inc rax
cmp byte [rdi + rax], bl
jne 0x14006e298
mov r8d, dword [rbp + 0x290]
lea rdx, str.sample_n_bytes__i__d_n
add rdi, rax
mov rcx, rdi
call fcn.1400100f0
mov rax, rsi
nop dword [rax]
inc rax
cmp byte [rdi + rax], bl
jne 0x14006e2c0
mov r8d, dword [rbp + 0x290]
lea rdx, str.sample_sig_bits__i__d_n
add rdi, rax
shl r8d, 3
mov rcx, rdi
call fcn.1400100f0
mov rax, rsi
inc rax
cmp byte [rdi + rax], bl
jne 0x14006e2e8
add rdi, rax
lea rdx, str.sample_coding__s3_pcm_n
mov rcx, rdi
call fcn.1400100f0
mov rax, rsi
inc rax
cmp byte [rdi + rax], bl
jne 0x14006e305
add rdi, rax
lea rdx, str.sample_byte_format__s2_10_n
mov rcx, rdi
call fcn.1400100f0
mov rax, rsi
inc rax
cmp byte [rdi + rax], bl
jne 0x14006e322
mov r8d, dword [rbp + 0x298]
lea rdx, str.sample_min__i__d_n
add rdi, rax
mov rcx, rdi
call fcn.1400100f0
mov rax, rsi
inc rax
cmp byte [rdi + rax], bl
jne 0x14006e346
mov r8d, dword [rbp + 0x29c]
lea rdx, str.sample_max__i__d_n
add rdi, rax
mov rcx, rdi
call fcn.1400100f0
mov rax, rsi
nop word [rax + rax]
inc rax
cmp byte [rdi + rax], bl
jne 0x14006e370
add rdi, rax
lea rdx, str.end_head_n
mov rcx, rdi
call fcn.1400100f0
nop word [rax + rax]
cmp byte [rdi + rsi + 1], bl
lea rsi, [rsi + 1]
jne 0x14006e390
mov byte [rsi + rdi], 0x20
lea r9, [rsp + 0x458]
mov rcx, qword [rbp + 0x38]
lea rdx, [rsp + 0x30]
mov r8d, 0x400
mov dword [rsp + 0x458], ebx
mov qword [rsp + 0x20], rbx
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov eax, r14d
mov r14, qword [rsp + 0x430]
jmp 0x14006e0d9