Function at 0x140009c20
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x1c0
mov rax, qword [0x140050010]
xor rax, rsp
mov qword [rsp + 0x1b0], rax
mov rcx, qword [0x140108af0]
xor esi, esi
mov rbx, 0xffffffffffffffff
mov eax, dword [rcx + 0xbb0b44]
bt eax, 0xb
jae 0x140009efb
btr eax, 0xb
mov dword [rcx + 0xbb0b44], eax
call fcn.1400149c0
mov r8, qword [0x140108af0]
mov eax, InitCommonControls
mov r9d, dword [r8 + 0x12ca39c]
test r9d, r9d
mov edx, dword [r8 + 0x4174750]
mov dword [r8 + 0x12ca3a0], r9d
cmove r9d, eax
mov eax, dword [r8 + 0x4174754]
cmp edx, eax
je 0x140009caf
mov dword [r8 + 0x4174750], eax
mov edx, eax
cmp r9d, 0x10
jne 0x140009cf2
mov ecx, dword [r8 + 0x41746f8]
mov eax, edx
cmp ecx, 1
jne 0x140009cd1
cmp dword [r8 + 0x12ca3ac], ecx
jne 0x140009cd1
cmp edx, 0xc
jl 0x140009ce6
mov edx, eax
test ecx, ecx
jne 0x140009cf2
cmp dword [r8 + 0x12ca3a8], 1
jne 0x140009cf2
cmp eax, 0xc
jge 0x140009cf2
mov edx, 0xc
mov dword [r8 + 0x4174750], edx
mov eax, dword [r8 + 0x5c]
lea rcx, [r8 + 0x12c92e0]
movsd xmm0, qword [r8 + 8]
movsd xmm3, qword [r8 + 0x12ca330]
mov dword [rsp + 0x118], r9d
movq r9, xmm3
mov dword [rsp + 0x110], 0x2c
mov dword [rsp + 0x108], eax
mov eax, dword [r8 + 0x58]
mov dword [rsp + 0x100], 0x2c
mov dword [rsp + 0xf8], eax
mov eax, dword [r8 + 0x50]
mov dword [rsp + 0xf0], 0x2c
mov dword [rsp + 0xe8], eax
mov eax, dword [r8 + 0x12ca308]
mov dword [rsp + 0xe0], 0x2c
mov dword [rsp + 0xd8], eax
mov eax, dword [r8 + 0x12ca328]
mov dword [rsp + 0xd0], 0x2c
mov dword [rsp + 0xc8], eax
mov eax, dword [r8 + 0x12ca30c]
mov dword [rsp + 0xc0], 0x2c
mov dword [rsp + 0xb8], eax
mov eax, dword [r8 + 0x12ca310]
mov dword [rsp + 0xb0], 0x2c
mov dword [rsp + 0xa8], eax
mov eax, dword [r8 + 0x12ca318]
mov dword [rsp + 0xa0], 0x2c
mov dword [rsp + 0x98], eax
mov eax, dword [r8 + 0x12ca324]
mov dword [rsp + 0x90], 0x2c
mov dword [rsp + 0x88], eax
mov eax, dword [r8]
mov dword [rsp + 0x80], 0x2c
mov dword [rsp + 0x78], edx
lea rdx, str.B290_START_c_.3lf_c_d_c_lf_c_d_c_d_c_d_c_d_c_d_c_d_c_d_c_d_c_d_c_d_c_d_c_d_c_d_c_d_r
mov dword [rsp + 0x70], 0x2c
mov dword [rsp + 0x68], eax
mov eax, dword [r8 + 0x10]
mov dword [rsp + 0x60], 0x2c
mov dword [rsp + 0x58], eax
mov eax, dword [r8 + 0x12ca2fc]
mov dword [rsp + 0x50], 0x2c
mov dword [rsp + 0x48], eax
mov eax, dword [r8 + 0x14]
mov r8d, 0x2c
mov dword [rsp + 0x40], 0x2c
movsd qword [rsp + 0x38], xmm0
mov dword [rsp + 0x30], 0x2c
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 0x2c
call fcn.140001190
mov rdx, qword [0x140108af0]
cmp dword [rdx + 0x12ca2f8], 1
jne 0x140009eb9
mov rdi, qword [rdx + 0x4174770]
cmp dword [rdi + 8], 1
je 0x140009eb9
add rdx, 0x12c92e0
mov r8, rbx
nop dword [rax]
inc r8
cmp byte [rdx + r8], sil
jne 0x140009e90
mov rcx, qword [rdi + 0xe00028]
lea r9, [rsp + 0x120]
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov dword [rdi + 0xe00020], esi
call fcn.14000fe40
call fcn.140002a30
call fcn.140012a70
mov rdx, qword [0x140108af0]
mov eax, dword [rdx + 0x14]
mov dword [rdx + 0x41746c0], eax
call fcn.140010ad0
call fcn.140012510
call qword [sym.imp.WINMM.dll_timeGetTime]
mov rcx, qword [0x140108af0]
mov dword [rcx + 0x12ca37c], eax
mov dword [rcx + 0x41746f4], esi
mov eax, dword [rcx + 0xbb0b44]
bt eax, 0xf
jae 0x140009ffd
btr eax, 0xf
mov dword [rcx + 0xbb0b44], eax
call fcn.1400149c0
mov rcx, qword [0x140108af0]
cmp dword [rcx + 0x41746fc], 1
jne 0x140009f6f
lea rdx, [rsp + 0x130]
mov dword [rcx + 0x41746fc], esi
call fcn.1400134d0
mov rcx, qword [0x140108af0]
lea r8, [rsp + 0x130]
add rcx, 0x12c92e0
mov dword [rsp + 0x20], 0xa
mov r9d, InitCommonControls
lea rdx, str.START_MAP__s_c_c
call fcn.140001190
jmp 0x140009f8c
mov r9d, 0xa
lea rdx, str.START_MAP_c_c
add rcx, 0x12c92e0
lea r8d, [r9 + 3]
call fcn.140001190
mov rdx, qword [0x140108af0]
cmp dword [rdx + 0x12ca2f8], 1
jne 0x140009fdc
mov rdi, qword [rdx + 0x4174770]
cmp dword [rdi + 8], 1
je 0x140009fdc
add rdx, 0x12c92e0
mov r8, rbx
inc r8
cmp byte [rdx + r8], sil
jne 0x140009fb3
mov rcx, qword [rdi + 0xe00028]
lea r9, [rsp + 0x120]
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov dword [rdi + 0xe00020], esi
call fcn.140014790
call fcn.14000fe40
call fcn.140011e20
call fcn.140010ad0
mov rcx, qword [0x140108af0]
mov dword [rcx + 0x41746f4], esi
mov eax, dword [rcx + 0xbb0b44]
bt eax, 0x10
jae 0x14000a0ff
btr eax, 0x10
mov dword [rcx + 0xbb0b44], eax
call fcn.1400149c0
mov rcx, qword [0x140108af0]
cmp dword [rcx + 0x41746fc], 1
jne 0x14000a071
lea rdx, [rsp + 0x130]
mov dword [rcx + 0x41746fc], esi
call fcn.1400134d0
mov rcx, qword [0x140108af0]
lea r8, [rsp + 0x130]
add rcx, 0x12c92e0
mov dword [rsp + 0x20], 0xa
mov r9d, InitCommonControls
lea rdx, str.START_PPI__s_c_c
call fcn.140001190
jmp 0x14000a08e
mov r9d, 0xa
lea rdx, str.START_PPI_c_c
add rcx, 0x12c92e0
lea r8d, [r9 + 3]
call fcn.140001190
mov rdx, qword [0x140108af0]
cmp dword [rdx + 0x12ca2f8], 1
jne 0x14000a0de
mov rdi, qword [rdx + 0x4174770]
cmp dword [rdi + 8], 1
je 0x14000a0de
add rdx, 0x12c92e0
mov r8, rbx
inc r8
cmp byte [rdx + r8], sil
jne 0x14000a0b5
mov rcx, qword [rdi + 0xe00028]
lea r9, [rsp + 0x120]
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov dword [rdi + 0xe00020], esi
call fcn.140014790
call fcn.14000fe40
call fcn.140010ad0
call fcn.140012510
mov rcx, qword [0x140108af0]
mov dword [rcx + 0x41746f4], esi
mov eax, dword [rcx + 0xbb0b44]
bt eax, 0x11
jae 0x14000a22d
btr eax, 0x11
mov dword [rcx + 0xbb0b44], eax
call fcn.1400149c0
call fcn.14000fe40
mov rax, qword [0x140108af0]
mov qword [rax + 0x12ca348], rsi
mov qword [rax + 0x12ca340], rsi
mov qword [rax + 0x12ca350], rsi
call fcn.140010380
call fcn.140012a70
mov rcx, qword [0x140108af0]
cmp dword [rcx + 0x41746fc], 1
jne 0x14000a19e
lea rdx, [rsp + 0x130]
mov dword [rcx + 0x41746fc], esi
call fcn.1400134d0
mov rcx, qword [0x140108af0]
lea r8, [rsp + 0x130]
add rcx, 0x12c92e0
mov dword [rsp + 0x20], 0xa
mov r9d, InitCommonControls
lea rdx, str.START_RAW__s_c_c
call fcn.140001190
jmp 0x14000a1bb
mov r9d, 0xa
lea rdx, str.START_RAW_c_c
add rcx, 0x12c92e0
lea r8d, [r9 + 3]
call fcn.140001190
mov rdx, qword [0x140108af0]
cmp dword [rdx + 0x12ca2f8], 1
jne 0x14000a20c
mov rdi, qword [rdx + 0x4174770]
cmp dword [rdi + 8], 1
je 0x14000a20c
add rdx, 0x12c92e0
nop
inc rbx
cmp byte [rdx + rbx], sil
jne 0x14000a1e0
mov rcx, qword [rdi + 0xe00028]
lea r9, [rsp + 0x120]
mov r8, rbx
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov dword [rdi + 0xe00020], esi
call fcn.140014790
call fcn.140011e20
call fcn.140010ad0
call fcn.140012510
mov rax, qword [0x140108af0]
mov dword [rax + 0x41746f4], esi
mov rcx, qword [rsp + 0x1b0]
xor rcx, rsp
call fcn.14001d8d0
lea r11, [rsp + 0x1c0]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rsp, r11
pop rdi
ret