Function at 0x14006b750
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0x90
mov r15, rcx
xor esi, esi
mov dword [rbp + 0x7f], esi
lea r14, [rcx + 0x660]
lea rax, [rcx + 0xfc0]
mov qword [rbp - 0x29], rax
movabs r13, 0x7fffffffffffffff
mov dword [rbp + 0x6f], esi
mov qword [rbp - 0x21], r14
mov byte [rbp - 0x19], 0
mov rcx, r14
call fcn.140114068
test eax, eax
jne 0x14006ba75
mov byte [rbp - 0x19], 1
call fcn.1400604f0
call fcn.140114280
mov rbx, rax
call fcn.140114264
cmp rbx, 0x989680
jne 0x14006b7d0
imul rdi, rax, 0x64
jmp 0x14006b7eb
cqo
idiv rbx
imul rdi, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
add rdi, rax
mov edx, dword [rbp + 0x6f]
mov ecx, edx
mov eax, dword [r15 + rdx*4 + 0x4b0]
cmp dword [r15 + rdx*4 + 0x4a0], eax
jne 0x14006b818
mov rcx, r15
call fcn.1400629e0
nop
mov rcx, r14
call fcn.14011408c
jmp 0x14006b9e1
mov dword [rbp + 0x77], eax
xor r12d, r12d
nop
lea rcx, [rcx + 0x12]
lea rax, [rcx + rcx*8]
lea rsi, [r15 + rax*8]
lea rax, [rbp + 0x77]
mov qword [rbp - 0x11], rax
mov qword [rbp - 9], r15
lea rax, [rbp + 0x6f]
mov qword [rbp - 1], rax
movups xmm0, xmmword [rbp - 0x11]
movaps xmmword [rbp + 7], xmm0
movsd xmm1, qword [rbp - 1]
movsd qword [rbp + 0x17], xmm1
call fcn.140114280
mov rbx, rax
call fcn.140114264
cmp rbx, 0x989680
jne 0x14006b86e
imul rax, rax, 0x64
jmp 0x14006b889
cqo
idiv rbx
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
add rax, rcx
movabs rcx, 0x7fffffffc46535ff
cmp rax, rcx
jge 0x14006b8a4
add rax, 0x3b9aca00
mov qword [rbp - 0x31], rax
jmp 0x14006b8a8
mov qword [rbp - 0x31], r13
lea r9, [rbp + 7]
lea r8, [rbp - 0x31]
lea rdx, [rbp - 0x21]
mov rcx, rsi
call fcn.140051390
movzx r13d, al
call fcn.140114280
mov rbx, rax
call fcn.140114264
cmp rbx, 0x989680
jne 0x14006b8dc
imul rbx, rax, 0x64
jmp 0x14006b8f8
cqo
idiv rbx
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
lea rbx, [rax + rcx]
mov rax, rbx
sub rax, rdi
cmp rax, 0x1ddca740
jl 0x14006b95f
mov r14, qword [0x140202f20]
test r14, r14
je 0x14006b95c
lea rsi, str.HEARTBEAT_n
mov edi, 0xa
nop
mov qword [rsp + 0x20], 0
lea r9, [rbp - 0x39]
mov r8d, edi
mov rdx, rsi
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x14006b95c
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
test eax, eax
je 0x14006b95c
mov eax, dword [rbp - 0x39]
test eax, eax
je 0x14006b95c
add rsi, rax
sub rdi, rax
jne 0x14006b920
mov rdi, rbx
mov edx, dword [rbp + 0x6f]
test r13b, r13b
jne 0x14006b979
mov eax, dword [rbp + 0x77]
cmp dword [r15 + rdx*4 + 0x4b0], eax
jne 0x14006b979
inc r12d
jmp 0x14006b97c
xor r12d, r12d
mov eax, dword [r15 + 0x158]
test eax, eax
je 0x14006b990
cmp r12d, eax
jae 0x14006ba39
mov rcx, rdx
mov eax, dword [r15 + rdx*4 + 0x4b0]
mov dword [rbp + 0x77], eax
mov eax, dword [r15 + rdx*4 + 0x4b0]
cmp dword [r15 + rdx*4 + 0x4a0], eax
movabs r13, 0x7fffffffffffffff
jne 0x14006b820
call fcn.1400604f0
mov edx, dword [rbp + 0x6f]
mov rcx, r15
call fcn.1400629e0
nop
lea r14, [r15 + 0x660]
mov rcx, r14
call fcn.14011408c
mov esi, dword [rbp + 0x7f]
mov rbx, qword [rbp - 0x29]
mov rdx, qword [rbx]
test rdx, rdx
je 0x14006ba01
mov rcx, qword [r15 + 0x1050]
xor r8d, r8d
mov rcx, qword [rcx + 0x18]
call qword [0x1402031f8]
mov qword [rbx], 0
inc esi
mov dword [rbp + 0x7f], esi
add rbx, 8
mov qword [rbp - 0x29], rbx
cmp esi, 4
jb 0x14006b790
mov rbx, qword [rsp + 0xd0]
add rsp, 0x90
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.14006bb70
nop
mov ecx, 2
call fcn.140121458
mov rcx, rax
lea rdx, str.Fossilize_ERROR:_Timed_out_replaying_pipelines__n
call fcn.1400020d0
mov ecx, 2
call fcn.140121458
mov rcx, rax
call fcn.140121814
mov ecx, 2
call fcn.14011d804
nop
mov ecx, eax
call fcn.140114198
int3