Function at 0x14003a9b0
Capabilities:
Write file on windows

Disassembly:
push rbp
push rsi
push rdi
sub rsp, 0x40
mov qword [rsp + 0x30], 0xfffffffffffffffe
mov qword [rsp + 0x68], rbx
mov ebp, r8d
mov rdi, rdx
mov rsi, rcx
cmp qword [rcx + 0x20], 0
je 0x14003aa7d
cmp qword [rdx + 0x10], 0
jne 0x14003aa84
mov ecx, 0x800
call fcn.1400bbc88
mov rdi, rax
mov ecx, 0x800
call fcn.1400bbc88
mov rbx, rax
test rdi, rdi
je 0x14003aa70
test rax, rax
je 0x14003aa68
xor edx, edx
mov r8d, 0x800
mov rcx, rdi
call fcn.1400c2130
lea rax, [0x1401297d0]
mov qword [rsp + 0x20], rax
lea r9, str.RC::RCResourceLoaderBase::SaveToFile
lea r8, str._s__:__s
mov edx, 0x400
mov rcx, rdi
call fcn.140007140
xor edx, edx
mov r8d, 0x800
mov rcx, rbx
call fcn.1400c2130
mov r8, rdi
mov edx, 0x400
mov rcx, rbx
call fcn.140007140
mov rcx, rbx
call fcn.140015100
mov rcx, rdi
call fcn.1400bd2dc
test rbx, rbx
je 0x14003aa7d
mov rcx, rbx
call fcn.1400bd2dc
xor al, al
jmp 0x14003acc2
cmp r8d, dword [rcx + 0x28]
jbe 0x14003ab18
mov ecx, 0x800
call fcn.1400bbc88
mov rdi, rax
mov ecx, 0x800
call fcn.1400bbc88
mov rbx, rax
test rdi, rdi
je 0x14003aa70
test rax, rax
je 0x14003aa68
xor edx, edx
mov r8d, 0x800
mov rcx, rdi
call fcn.1400c2130
lea rax, [0x14012a370]
mov qword [rsp + 0x20], rax
lea r9, str.RC::RCResourceLoaderBase::SaveToFile
lea r8, str._s__:__s
mov edx, 0x400
mov rcx, rdi
call fcn.140007140
xor edx, edx
mov r8d, 0x800
mov rcx, rbx
call fcn.1400c2130
mov eax, dword [rsi + 0x28]
mov dword [rsp + 0x20], eax
mov r9d, ebp
mov r8, rdi
mov edx, 0x400
mov rcx, rbx
call fcn.140007140
jmp 0x14003aa60
lea rcx, [rsp + 0x78]
call fcn.14006d290
nop
mov dword [rsp + 0x20], 2
mov r9d, 2
mov r8d, 0x40000000
mov rdx, rdi
lea rcx, [rsp + 0x78]
call fcn.14006fad0
test al, al
jne 0x14003ab90
mov ecx, 0x800
call fcn.1400bbc88
mov rsi, rax
mov ecx, 0x800
call fcn.1400bbc88
mov rbx, rax
test rsi, rsi
je 0x14003aca6
test rax, rax
je 0x14003ac9e
xor edx, edx
mov r8d, 0x800
mov rcx, rsi
call fcn.1400c2130
lea rax, [0x140129840]
jmp 0x14003ac49
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x28]
xor edx, edx
mov dword [rsp + 0x60], edx
mov rbx, qword [rsp + 0x78]
test rbx, rbx
je 0x14003ac0e
test rax, rax
jne 0x14003abb3
xor sil, sil
jmp 0x14003abe8
mov rcx, qword [rbx]
cmp rcx, 0xffffffffffffffff
jne 0x14003abc1
xor sil, sil
jmp 0x14003abe8
mov qword [rsp + 0x20], rdx
lea r9, [rsp + 0x60]
mov r8d, ebp
mov rdx, rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x14003abe0
xor sil, sil
jmp 0x14003abe8
cmp ebp, dword [rsp + 0x60]
sete sil
mov rcx, qword [rbx]
cmp rcx, 0xffffffffffffffff
je 0x14003ac02
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
je 0x14003ac02
mov qword [rbx], 0xffffffffffffffff
test sil, sil
je 0x14003ac0e
mov bl, 1
jmp 0x14003acb5
mov ecx, 0x800
call fcn.1400bbc88
mov rsi, rax
mov ecx, 0x800
call fcn.1400bbc88
mov rbx, rax
test rsi, rsi
je 0x14003aca6
test rax, rax
je 0x14003ac9e
xor edx, edx
mov r8d, 0x800
mov rcx, rsi
call fcn.1400c2130
lea rax, [0x14012a340]
mov qword [rsp + 0x20], rax
lea r9, str.RC::RCResourceLoaderBase::SaveToFile
lea r8, str._s__:__s
mov edx, 0x400
mov rcx, rsi
call fcn.140007140
mov r8d, 0x800
xor edx, edx
mov rcx, rbx
call fcn.1400c2130
cmp qword [rdi + 0x18], 8
jb 0x14003ac83
mov rdi, qword [rdi]
mov r9, rdi
mov r8, rsi
mov edx, 0x400
mov rcx, rbx
call fcn.140007140
mov rcx, rbx
call fcn.140015100
mov rcx, rsi
call fcn.1400bd2dc
test rbx, rbx
je 0x14003acb3
mov rcx, rbx
call fcn.1400bd2dc
xor bl, bl
lea rcx, [rsp + 0x78]
call fcn.14006fa80
movzx eax, bl
mov rbx, qword [rsp + 0x68]
add rsp, 0x40
pop rdi
pop rsi
pop rbp
ret