Function at 0x14000ba60
Capabilities:
Write file on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xb8
mov r14, qword [0x14003da78]
mov rax, qword [r14]
xor rax, rsp
mov qword [rsp + 0xb0], rax
mov dword [rsp + 0x44], 0
mov qword [rsp + 0x38], 0
xorps xmm0, xmm0
movaps xmmword [rsp + 0x90], xmm0
movaps xmmword [rsp + 0xa0], xmm0
movaps xmmword [rsp + 0x50], xmm0
movaps xmmword [rsp + 0x60], xmm0
movaps xmmword [rsp + 0x70], xmm0
movaps xmmword [rsp + 0x80], xmm0
test rcx, rcx
je 0x14000bafe
mov esi, r9d
mov rdi, r8
mov rbx, rcx
lea rdx, [rsp + 0x38]
mov r8d, 0x10
call fcn.14000d9b0
test eax, eax
je 0x14000bb17
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rcx, str.ERROR:_Could_not_seek_to_the_signature_block._n
mov edx, 0x2e
jmp 0x14000bb4a
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rcx, str.ERROR:_Invalid_file_pointer_passed._n
mov edx, 0x24
jmp 0x14000bb4a
lea rdx, [rsp + 0x4c]
lea r8, [rsp + 0x38]
mov r9d, 4
mov rcx, rbx
call fcn.14000d930
test eax, eax
je 0x14000bb8a
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rcx, str.ERROR:_Could_not_read_number_of_signatures._n
mov edx, 0x2c
mov r8d, 1
mov r9, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fwrite
mov edi, 0xffffffff
mov rax, qword [rsp + 0xb0]
xor rax, rsp
mov rcx, qword [r14]
cmp rcx, rax
jne 0x14000be6a
mov eax, edi
add rsp, 0xb8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov ecx, dword [rsp + 0x4c]
call qword [sym.imp.WS2_32.dll_ntohl]
mov dword [rsp + 0x4c], eax
cmp eax, 8
jbe 0x14000bbbf
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rdx, str.ERROR:_At_most__d_signatures_can_be_specified._n
mov rcx, rax
mov r8d, 8
call fcn.140018b90
jmp 0x14000bb58
test eax, eax
je 0x14000bc8e
lea r14, [rsp + 0x90]
xor r12d, r12d
lea r15, [rsp + 0x38]
mov rbp, qword [sym.imp.WS2_32.dll_ntohl]
mov r9d, 4
mov rcx, rbx
mov rdx, r14
mov r8, r15
call fcn.14000d930
test eax, eax
jne 0x14000bd27
mov ecx, dword [r14]
call rbp
mov dword [r14], eax
mov r9d, 4
mov rcx, rbx
lea rdx, [rsp + 0x48]
mov r8, r15
call fcn.14000d930
test eax, eax
jne 0x14000bd40
mov ecx, dword [rsp + 0x48]
call rbp
mov dword [rsp + 0x48], eax
cmp eax, 0x801
jae 0x14000bd59
mov r13d, eax
mov rcx, r13
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
mov qword [rsp + r12*8 + 0x50], rax
test rax, rax
je 0x14000bd6d
mov rcx, rbx
mov rdx, rax
mov r8, r15
mov r9, r13
call fcn.14000d930
test eax, eax
jne 0x14000bda3
cmp dword [r14], 2
jne 0x14000bdf8
inc r12
mov eax, dword [rsp + 0x4c]
add r14, 4
cmp r12, rax
jb 0x14000bbde
mov r14, qword [0x14003da78]
jmp 0x14000bc90
xor eax, eax
lea rcx, [rsp + 0x44]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], eax
lea r9, [rsp + 0x50]
mov rcx, rbx
mov r8, rdi
call fcn.14000be70
mov edi, 0xffffffff
cmp eax, 0xffffffff
je 0x14000bb5d
xor edi, edi
cmp dword [rsp + 0x4c], 0
mov eax, 0
je 0x14000bce6
xor ebx, ebx
nop dword [rax]
mov rcx, qword [rsp + rbx*8 + 0x50]
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
inc rbx
mov eax, dword [rsp + 0x4c]
cmp rbx, rax
jb 0x14000bcd0
mov ebx, dword [rsp + 0x44]
cmp ebx, eax
jne 0x14000bcf6
cmp ebx, esi
je 0x14000bb5d
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
test ebx, ebx
je 0x14000be59
mov r8d, dword [rsp + 0x44]
mov r9d, dword [rsp + 0x4c]
lea rdx, str.ERROR:_Only__d_of__d_signatures_were_verified._n
mov rcx, rax
call fcn.140018b90
jmp 0x14000bb58
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rcx, str.ERROR:_Could_not_read_signatures_algorithm_ID._n
mov edx, 0x2f
jmp 0x14000bd84
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rcx, [0x14003fc00]
mov edx, 0x29
jmp 0x14000bd84
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rcx, str.ERROR:_Signature_length_is_too_large_to_verify._n
jmp 0x14000bd7f
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rcx, str.ERROR:_Could_not_allocate_buffer_for_signature._n
mov edx, 0x30
mov r8d, 1
mov r9, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fwrite
mov edi, 0xffffffff
mov r14, qword [0x14003da78]
jmp 0x14000bb5d
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rcx, str.ERROR:_Could_not_read_extracted_signature._n
mov edx, 0x2b
mov r8d, 1
mov r9, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fwrite
mov edi, 0xffffffff
cmp dword [rsp + 0x4c], 0
je 0x14000be4d
xor esi, esi
mov r14, qword [0x14003da78]
mov rcx, qword [rsp + rsi*8 + 0x50]
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
inc rsi
mov eax, dword [rsp + 0x4c]
cmp rsi, rax
jb 0x14000bddd
jmp 0x14000bb5d
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rcx, str.ERROR:_Unknown_signature_algorithm_ID._n
mov edx, 0x27
mov r8d, 1
mov r9, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fwrite
mov edi, 0xffffffff
cmp dword [rsp + 0x4c], 0
je 0x14000be4d
xor esi, esi
mov r14, qword [0x14003da78]
mov rcx, qword [rsp + rsi*8 + 0x50]
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
inc rsi
mov eax, dword [rsp + 0x4c]
cmp rsi, rax
jb 0x14000be32
jmp 0x14000bb5d
mov r14, qword [0x14003da78]
jmp 0x14000bb5d
lea rcx, str.ERROR:_Not_all_signatures_were_verified._n
mov edx, 0x29
jmp 0x14000bb4a
call fcn.140018700
int3