Function at 0x1400072b0
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r14
mov rbp, rsp
sub rsp, 0x50
and qword [rbp + 0x48], 0
lea rax, [0x140019c88]
lea r8, [rbp - 0x10]
mov qword [rbp - 8], rax
lea rdx, [rbp + 0x48]
mov dword [rbp - 0x10], 0x67727473
mov r12, rcx
call fcn.14000892c
xor esi, esi
mov edi, eax
mov r14d, 0x80070000
test eax, eax
js 0x140007337
mov rcx, qword [rbp + 0x48]
xor edx, edx
call qword [sym.imp.mscms.dll_WcsCreateIccProfile]
nop dword [rax + rax]
mov rsi, rax
test rax, rax
jne 0x140007329
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
movzx edi, ax
or edi, r14d
test eax, eax
cmovle edi, eax
test edi, edi
js 0x140007337
mov rcx, rsi
call fcn.140008ec4
mov edi, eax
and dword [rbp + 0x38], 0
test edi, edi
js 0x140007384
lea r8, [rbp + 0x38]
xor edx, edx
mov rcx, rsi
call qword [sym.imp.mscms.dll_GetColorProfileFromHandle]
nop dword [rax + rax]
test eax, eax
jne 0x140007384
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
cmp eax, 0x7a
je 0x140007384
test eax, eax
jne 0x140007379
mov edi, 0x80004005
xor ebx, ebx
jmp 0x14000750d
movzx edi, ax
or edi, r14d
test eax, eax
cmovle edi, eax
xor ebx, ebx
test edi, edi
js 0x14000750d
mov ecx, dword [rbp + 0x38]
call fcn.1400107ac
mov rbx, rax
mov eax, 0x8007000e
test rbx, rbx
cmove edi, eax
test edi, edi
js 0x14000750d
lea r8, [rbp + 0x38]
mov rdx, rbx
mov rcx, rsi
call qword [sym.imp.mscms.dll_GetColorProfileFromHandle]
nop dword [rax + rax]
test eax, eax
jne 0x1400073dd
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
movzx edi, ax
or edi, r14d
test eax, eax
cmovle edi, eax
test edi, edi
js 0x14000750d
and qword [rsp + 0x30], 0
xor r9d, r9d
mov rcx, qword [r12 + 0x1d0]
mov edx, 0x40000000
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 2
lea r8d, [r9 + 1]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
nop dword [rax + rax]
mov r14, rax
cmp rax, 0xffffffffffffffff
jne 0x14000743e
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
movzx edi, ax
or edi, 0x80070000
test eax, eax
cmovle edi, eax
test edi, edi
js 0x1400074f8
mov r8d, dword [rbp + 0x38]
lea r9, [rbp + 0x40]
and qword [rsp + 0x20], 0
mov rdx, rbx
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_WriteFile]
nop dword [rax + rax]
test eax, eax
je 0x140007479
mov eax, dword [rbp + 0x38]
cmp dword [rbp + 0x40], eax
je 0x140007493
mov edi, 0x80004005
jmp 0x140007493
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
movzx edi, ax
or edi, 0x80070000
test eax, eax
cmovle edi, eax
test edi, edi
js 0x1400074f8
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop dword [rax + rax]
mov rdx, qword [r12 + 0x1b0]
xor ecx, ecx
or r14, 0xffffffffffffffff
call qword [sym.imp.mscms.dll_InstallColorProfileW]
nop dword [rax + rax]
test eax, eax
jne 0x1400074de
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
movzx edi, ax
or edi, 0x80070000
test eax, eax
cmovle edi, eax
test edi, edi
js 0x14000750d
mov rax, qword [r12]
mov rcx, r12
mov rax, qword [rax + 0x1e0]
call qword [0x140013cf8]
mov edi, eax
cmp r14, 0xffffffffffffffff
je 0x14000750d
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop dword [rax + rax]
cmp qword [rbp + 0x48], 0
je 0x140007524
mov rcx, qword [rbp + 0x48]
call qword [sym.imp.mscms.dll_CloseColorProfile]
nop dword [rax + rax]
test rsi, rsi
je 0x140007538
mov rcx, rsi
call qword [sym.imp.mscms.dll_CloseColorProfile]
nop dword [rax + rax]
mov rcx, rbx
call fcn.140010760
lea rcx, [rbp - 0x10]
call fcn.14000fe5c
mov rbx, qword [rsp + 0x80]
mov eax, edi
add rsp, 0x50
pop r14
pop r12
pop rdi
pop rsi
pop rbp
ret