Function at 0x140008a70
Capabilities:
Write file on windows

Disassembly:
push rbp
push rsi
push rdi
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0x90
mov qword [rbp - 0x19], 0xfffffffffffffffe
mov qword [rsp + 0xd0], rbx
mov rax, qword [0x14003a008]
xor rax, rsp
mov qword [rbp + 0x27], rax
movzx r14d, dx
mov rbx, rcx
mov edi, 0xffff
cmp di, dx
jne 0x140008ac6
xor eax, eax
cmp dx, di
cmove r14w, ax
movzx eax, r14w
jmp 0x140008cff
mov rax, qword [rcx + 0x40]
mov r8, qword [rax]
test r8, r8
je 0x140008b03
mov rax, qword [rcx + 0x58]
movsxd r9, dword [rax]
lea rdx, [r8 + r9*2]
cmp r8, rdx
jae 0x140008b03
lea ecx, [r9 - 1]
mov dword [rax], ecx
mov rdx, qword [rbx + 0x40]
mov r8, qword [rdx]
lea rcx, [r8 + 2]
mov qword [rdx], rcx
mov word [r8], r14w
movzx eax, r14w
jmp 0x140008cff
cmp qword [rcx + 0x80], 0
je 0x140008cfc
mov r8, qword [rcx + 0x18]
lea rax, [rcx + 0x70]
cmp qword [r8], rax
jne 0x140008b42
mov rdx, qword [rcx + 0x90]
mov rcx, qword [rcx + 0x88]
mov qword [r8], rcx
mov rax, qword [rbx + 0x38]
mov qword [rax], rcx
sub rdx, rcx
sar rdx, 1
mov rax, qword [rbx + 0x50]
mov dword [rax], edx
cmp qword [rbx + 0x68], 0
jne 0x140008b6c
mov rdx, qword [rbx + 0x80]
movzx ecx, r14w
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fputwc]
cmp ax, di
je 0x140008cfc
movzx edi, r14w
jmp 0x140008cfc
mov word [rbp - 1], r14w
mov qword [rbp + 0x1f], 0xf
xor eax, eax
mov qword [rbp + 0x17], rax
mov byte [rbp + 7], al
lea edx, [rax + 8]
lea rcx, [rbp + 7]
call fcn.140009850
nop
mov r8, qword [rbp + 7]
mov r9, qword [rbp + 0x1f]
nop word [rax + rax]
lea rcx, [rbp + 7]
cmp r9, 0x10
cmovae rcx, r8
lea rdx, [rbp + 7]
cmovae rdx, r8
add rcx, qword [rbp + 0x17]
lea rax, [rbp - 0x11]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rdx
lea rax, [rbp - 9]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 1]
lea r8, [rbp - 1]
lea rdx, [rbx + 0x74]
mov rcx, qword [rbx + 0x68]
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::codecvt_wchar_t__char__struct__Mbstatet_::out_struct__Mbstatet____ptr64__wchar_t_const____ptr64__wchar_t_const____ptr64__wchar_t_const____ptr64____ptr64__char____ptr64__char____ptr64__char____ptr64____ptr64_const___ptr64]
test eax, eax
js 0x140008c9d
cmp eax, 1
jg 0x140008c7e
lea rax, [rbp + 7]
mov r8, qword [rbp + 7]
mov r9, qword [rbp + 0x1f]
cmp r9, 0x10
cmovae rax, r8
mov rsi, qword [rbp - 0x11]
sub rsi, rax
je 0x140008c46
lea rcx, [rbp + 7]
cmp r9, 0x10
cmovae rcx, r8
mov r9, qword [rbx + 0x80]
mov r8, rsi
mov edx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
mov r9, qword [rbp + 0x1f]
mov r8, qword [rbp + 7]
cmp rsi, rax
jne 0x140008ca5
mov byte [rbx + 0x72], 1
lea rax, [rbp - 1]
cmp qword [rbp - 9], rax
jne 0x140008c78
test rsi, rsi
jne 0x140008ba0
cmp qword [rbp + 0x17], 0x20
jae 0x140008ca5
xor r8d, r8d
lea edx, [rsi + 8]
lea rcx, [rbp + 7]
call fcn.140009b90
jmp 0x140008b8f
movzx edi, r14w
jmp 0x140008ca5
cmp eax, 3
jne 0x140008c9d
mov rdx, qword [rbx + 0x80]
movzx ecx, word [rbp - 1]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fputwc]
cmp ax, di
je 0x140008c9d
movzx edi, r14w
mov r8, qword [rbp + 7]
mov r9, qword [rbp + 0x1f]
cmp r9, 0x10
jb 0x140008cfc
lea rax, [r9 + 1]
cmp rax, 0x1000
jb 0x140008cf4
test byte [rbp + 7], 0x1f
je 0x140008cc4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rax, qword [r8 - 8]
cmp rax, r8
jb 0x140008cd4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
sub r8, rax
cmp r8, 8
jae 0x140008ce4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cmp r8, 0x27
jbe 0x140008cf1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov r8, rax
mov rcx, r8
call fcn.1400249e8
movzx eax, di
mov rcx, qword [rbp + 0x27]
xor rcx, rsp
call fcn.140024a00
mov rbx, qword [rsp + 0xd0]
add rsp, 0x90
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret