Function at 0x1400c2368
Capabilities:
Write file on windows

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x30
mov r12w, word [rcx + 0x20]
xor r15d, r15d
mov rbx, rcx
mov r14d, edx
mov r8d, 0xffffffff
mov ecx, 0x7fffffff
lea esi, [r15 + 1]
mov qword [rax + 0x18], r15
mov qword [rax + 8], r15
mov qword [rax + 0x20], r15
mov r13d, r15d
cmp edx, r15d
jne 0x1400c2409
mov eax, dword [0x1400fe740]
mov dword [0x1401360ac], r15d
cmp qword [rbx + 0x10], rcx
ja 0x1400c23d0
cmp qword [rbx + 0x18], rcx
ja 0x1400c23d0
cmp eax, esi
jne 0x1400c24e3
cmp eax, r15d
jne 0x1400c23df
mov ecx, 6
call fcn.1400bd484
mov eax, esi
mov ecx, 0x2d
mov dword [0x1401360b0], esi
mov dword [0x1401360ac], eax
cmp word [rbx + 2], cx
jae 0x1400c2402
mov word [rbx + 2], cx
mov eax, dword [0x1401360ac]
mov ebp, esi
jmp 0x1400c24d1
mov ebp, dword [0x1401360ac]
mov edx, dword [0x1400fe740]
mov eax, r15d
mov dword [0x1401360ac], eax
mov edi, 6
cmp qword [rbx + 0x10], rcx
ja 0x1400c243a
cmp qword [rbx + 0x18], rcx
ja 0x1400c243a
cmp edx, esi
je 0x1400c243a
cmp edx, r15d
je 0x1400c2478
jmp 0x1400c245b
mov eax, esi
mov dword [0x1401360ac], eax
cmp ebp, r15d
jne 0x1400c245b
cmp qword [rbx + 0x10], r8
ja 0x1400c245b
cmp qword [rbx + 0x18], r8
cmovbe eax, r15d
mov dword [0x1401360ac], eax
cmp edx, r15d
jne 0x1400c2478
cmp eax, r15d
je 0x1400c2478
mov ecx, edi
call fcn.1400bd484
mov eax, dword [0x1401360ac]
mov edx, dword [0x1400fe740]
cmp ebp, r15d
jne 0x1400c248e
cmp eax, esi
jne 0x1400c248e
mov ecx, edi
call fcn.1400bd484
mov eax, dword [0x1401360ac]
cmp eax, r15d
je 0x1400c24b0
mov ecx, 0x2d
mov dword [0x1401360b0], esi
cmp word [rbx + 2], cx
jae 0x1400c24b9
mov word [rbx + 2], cx
mov eax, dword [0x1401360ac]
jmp 0x1400c24b9
mov eax, r15d
mov dword [0x1401360ac], eax
cmp ebp, r15d
je 0x1400c24d1
cmp eax, esi
je 0x1400c24d1
mov eax, 0x14
mov word [rbx + 2], ax
mov eax, dword [0x1401360ac]
cmp eax, r15d
jne 0x1400c24db
cmp ebp, r15d
je 0x1400c24e3
mov rcx, rbx
call fcn.1400c060c
cmp qword [rbx + 0x78], r15
je 0x1400c2554
mov eax, 0x800
cmp dword [0x1401360b8], r15d
jne 0x1400c2500
cmp dword [0x14013607c], r15d
je 0x1400c2508
or word [rbx + 0x2e], ax
or word [rbx + 4], ax
test word [rbx + 4], ax
je 0x1400c254a
mov rdx, qword [0x140134c38]
or rcx, 0xffffffffffffffff
movzx eax, r12w
sub rdx, rax
xor eax, eax
mov r13d, esi
mov qword [0x140134c38], rdx
mov rdi, qword [rbx + 0x78]
repne scasb al, byte [rdi]
not rcx
sub rcx, rsi
movzx eax, cx
mov r12, rcx
add rdx, rax
mov qword [0x140134c38], rdx
jmp 0x1400c2561
mov rcx, rbx
call fcn.1400c0840
jmp 0x1400c2561
mov eax, 0xf7ff
and word [rbx + 4], ax
and word [rbx + 0x2e], ax
mov rbp, qword [rbx + 0x60]
cmp r13d, r15d
je 0x1400c256e
mov rbp, qword [rbx + 0x78]
lea r9, [rsp + 0x88]
lea r8, [rsp + 0x70]
lea rdx, [rsp + 0x80]
mov ecx, 0x4034b50
call fcn.1400bf990
movzx ecx, word [rbx + 2]
lea r9, [rsp + 0x88]
lea r8, [rsp + 0x70]
lea rdx, [rsp + 0x80]
call fcn.1400bf910
movzx ecx, word [rbx + 0x2e]
lea r9, [rsp + 0x88]
lea r8, [rsp + 0x70]
lea rdx, [rsp + 0x80]
call fcn.1400bf910
movzx ecx, word [rbx + 6]
lea r9, [rsp + 0x88]
lea r8, [rsp + 0x70]
lea rdx, [rsp + 0x80]
call fcn.1400bf910
mov ecx, dword [rbx + 8]
lea r9, [rsp + 0x88]
lea r8, [rsp + 0x70]
lea rdx, [rsp + 0x80]
call fcn.1400bf990
mov ecx, dword [rbx + 0xc]
lea r9, [rsp + 0x88]
lea r8, [rsp + 0x70]
lea rdx, [rsp + 0x80]
call fcn.1400bf990
lea r9, [rsp + 0x88]
lea r8, [rsp + 0x70]
lea rdx, [rsp + 0x80]
cmp dword [0x1401360ac], r15d
je 0x1400c264f
mov edi, 0xffffffff
mov ecx, edi
call fcn.1400bf990
mov ecx, edi
jmp 0x1400c265a
mov ecx, dword [rbx + 0x10]
call fcn.1400bf990
mov ecx, dword [rbx + 0x18]
lea r9, [rsp + 0x88]
lea r8, [rsp + 0x70]
lea rdx, [rsp + 0x80]
call fcn.1400bf990
lea r9, [rsp + 0x88]
lea r8, [rsp + 0x70]
lea rdx, [rsp + 0x80]
movzx ecx, r12w
call fcn.1400bf910
movzx ecx, word [rbx + 0x22]
lea r9, [rsp + 0x88]
lea r8, [rsp + 0x70]
lea rdx, [rsp + 0x80]
call fcn.1400bf910
cmp r13d, r15d
jne 0x1400c2726
mov eax, 0xff00
test word [rbx], ax
jne 0x1400c2726
or rcx, 0xffffffffffffffff
xor eax, eax
mov rdi, rbp
repne scasb al, byte [rdi]
not rcx
sub rcx, rsi
add rcx, rsi
call fcn.1400c799c
mov rdi, rax
cmp rax, r15
jne 0x1400c26ea
mov ecx, 4
call fcn.1400bd484
mov rdx, rdi
mov rcx, rbp
call qword [sym.imp.USER32.dll_CharToOemA]
lea rax, [rsp + 0x88]
lea r9, [rsp + 0x70]
lea r8, [rsp + 0x80]
movzx edx, r12w
mov rcx, rdi
mov qword [rsp + 0x20], rax
call fcn.1400bfad4
mov rcx, rdi
call fcn.1400c7040
jmp 0x1400c274c
lea rax, [rsp + 0x88]
lea r9, [rsp + 0x70]
lea r8, [rsp + 0x80]
movzx edx, r12w
mov rcx, rbp
mov qword [rsp + 0x20], rax
call fcn.1400bfad4
cmp word [rbx + 0x22], r15w
je 0x1400c277a
movzx edx, word [rbx + 0x22]
mov rcx, qword [rbx + 0x48]
lea rax, [rsp + 0x88]
lea r9, [rsp + 0x70]
lea r8, [rsp + 0x80]
mov qword [rsp + 0x20], rax
call fcn.1400bfad4
mov rdi, qword [rsp + 0x80]
mov r8, qword [rsp + 0x70]
mov rdx, rsi
mov rcx, rdi
cmp r14d, esi
jne 0x1400c2834
cmp dword [0x140136158], esi
jne 0x1400c280b
mov r9, qword [0x140136140]
call fcn.1400c8f54
cmp rax, qword [rsp + 0x70]
je 0x1400c27d5
mov rcx, rdi
call fcn.1400c7040
mov r8, qword [0x140134c50]
lea rcx, [0x140134b90]
xor edx, edx
call fcn.1400335e0
mov eax, 0xa
jmp 0x1400c2851
mov ecx, dword [0x140136108]
cmp ecx, dword [0x14013610c]
je 0x1400c2847
mov r8, qword [0x140136138]
mov rdx, qword [0x140136140]
call fcn.14003e610
mov rcx, qword [0x140136138]
mov qword [0x140136140], r15
call fcn.1400c7040
jmp 0x1400c2847
mov r9, qword [0x1401360c8]
call fcn.1400c8f54
cmp rax, qword [rsp + 0x70]
je 0x1400c2847
mov rcx, rdi
call fcn.1400c7040
mov r8, qword [0x1401360c0]
cmp r8, r15
je 0x1400c27ce
jmp 0x1400c27c0
mov r9d, esi
call fcn.14003e65c
cmp rax, qword [rsp + 0x70]
jne 0x1400c27b1
mov rcx, rdi
call fcn.1400c7040
xor eax, eax
mov rbx, qword [rsp + 0x78]
add rsp, 0x30
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret