Function at 0x1401518f0
Capabilities:
Write file on windows

Disassembly:
jmp 0x140178090
jmp 0x1401518f0
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x58
lea rbp, [rsp + 0x30]
mov rsi, rcx
lea r10, [0x140000000]
mov r15, r8
mov eax, r15d
mov r14, rdx
mov dword [0x140898f1c], 0
mov r12d, 1
movsxd r9, dword [rsi]
imul r11, r9, 0x138
mov ebx, dword [r10 + r11 + 0x75da38]
mov edi, dword [r10 + r11 + 0x75da20]
mov r13, qword [r10 + r11 + 0x75da30]
test eax, eax
jle 0x140151a7b
movsxd rdx, ebx
mov qword [rbp], rdx
mov qword [rbp + 0x10], r14
mov qword [rbp + 8], r15
mov r15d, eax
mov ecx, r15d
mov r14d, ebx
sub ecx, r12d
sub r14d, edi
lea edx, [rcx + 1]
cmp edx, r14d
jl 0x140151a99
test r14d, r14d
jle 0x140151a0b
test r13, r13
jne 0x1401519c0
mov rdx, rsp
lea r10, [0x1404dcfc8]
lea r11, [0x1404dcfd4]
mov ecx, 0x10100009
mov r8d, 3
mov r9d, 9
mov qword [rdx + 0x20], r10
mov qword [rdx + 0x28], r11
lea rdx, [0x1404dcf60]
call fcn.140002199
movsxd rdi, edi
xor r11d, r11d
movsxd r12, r12d
mov rax, rsp
mov r10, qword [rbp + 0x10]
lea rdx, [rdi + 1]
neg rdx
lea r9, [r12 - 1]
add rdx, qword [rbp]
neg r9
inc rdx
lea rcx, [r13 + rdi]
lea r8, [r10 + r12 - 1]
cmovle rdx, r11
add r9, qword [rbp + 8]
test r9, r9
mov qword [rax + 0x20], r11
cmovle r9, r11
call fcn.1400025f4
add r12d, r14d
movsxd rdi, dword [rsi]
lea rdx, [0x140000000]
imul r9, rdi, 0x138
xor edi, edi
mov rcx, qword [rdx + r9 + 0x75da18]
mov dword [rdx + r9 + 0x75da20], edi
mov dword [rdx + r9 + 0x75da3c], edi
cmp rcx, 0xffffffffffffffff
jne 0x140151a48
mov dword [0x140898f1c], 0x72
jmp 0x140151a72
lea r11, [0x140000000]
mov r10, rsp
mov r8d, ebx
mov rdx, qword [r11 + r9 + 0x75da30]
lea r9, [rbp + 0x18]
mov qword [r10 + 0x20], 0
call sub.KERNEL32.dll_WriteFile
test eax, eax
je 0x140151a8c
cmp r15d, r12d
jge 0x140151964
lea rsp, [rbp + 0x28]
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call sub.KERNEL32.dll_GetLastError
mov dword [0x140898f1c], eax
jmp 0x140151a7b
mov dword [rbp], ecx
mov ebx, edx
mov r14, qword [rbp + 0x10]
mov r15, qword [rbp + 8]
test r13, r13
jne 0x140151ae1
mov r11, rsp
mov ecx, 0x10100009
lea rdx, [0x1404dcf60]
mov r8d, 3
mov r9d, 9
lea rax, [0x1404dcfe0]
lea r10, [0x1404dcfec]
mov qword [r11 + 0x20], rax
mov qword [r11 + 0x28], r10
call fcn.140002199
movsxd rdi, edi
mov r11, rsp
movsxd rbx, ebx
movsxd r12, r12d
add rbx, rdi
movsxd r9, r15d
lea r10, [rdi + 1]
sub rbx, r10
lea rcx, [r13 + rdi]
xor r13d, r13d
inc rbx
lea rax, [r12 - 1]
lea r8, [r14 + r12 - 1]
cmovle rbx, r13
sub r9, rax
mov rdx, rbx
cmovle r9, r13
mov qword [r11 + 0x20], r13
call fcn.1400025f4
movsxd rax, dword [rsi]
lea rcx, [0x140000000]
mov edx, dword [rbp]
imul rbx, rax, 0x138
mov dword [rcx + rbx + 0x75da3c], 1
lea edi, [rdi + rdx + 1]
mov dword [rcx + rbx + 0x75da20], edi
jmp 0x140151a7b
push rbp
push rbx
push rsi
sub rsp, 0x20
lea rbp, [rsp + 0x20]
mov rsi, rcx
movabs rax, 0x5551455354495257
mov rbx, rdx
mov qword [0x140761848], rax
mov r10d, dword [rsi]
mov dword [0x140761844], r10d
lea r9d, [r10 - 1]
cmp r9d, 0x31
jbe 0x1401780d9
mov dword [0x140898f1c], 1
lea rsp, [rbp]
pop rsi
pop rbx
pop rbp
ret
movsxd r10, r10d
lea rax, [0x140000000]
imul r9, r10, 0x138
cmp qword [rax + r9 + 0x75da18], 0xffffffffffffffff
je 0x140178107
lea rax, [0x140000000]
cmp qword [rax + r9 + 0x75da30], 0
jne 0x140178113
mov dword [0x140898f1c], 0x2711
jmp 0x1401780d1
mov rcx, rbx
mov edx, r8d
mov dword [0x140898f1c], 0
call fcn.14000425a
test eax, eax
jle 0x140178160
movsxd rax, eax
xor r8d, r8d
test rax, rax
mov rcx, rsi
mov rdx, rbx
cmovg r8, rax
call 0x1400030c1
mov rcx, rsi
lea rdx, [0x1404e136c]
mov r8d, 2
lea rsp, [rbp]
pop rsi
pop rbx
pop rbp
jmp 0x1400030c1
mov rcx, rsi
lea rdx, [0x1404e1370]
mov r8d, 3
lea rsp, [rbp]
pop rsi
pop rbx
pop rbp
jmp 0x1400030c1