Function at 0x14001cc50
Capabilities:
Write file on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xa8
mov r13, r8
mov rdi, rdx
mov rbp, rcx
lea rax, [rcx + 0x68]
mov qword [rsp + 0x68], rax
mov eax, 0x17e6cb51
jmp 0x14001cc90
mov eax, 0xc197fe12
mov rbx, qword [rsp + 0x88]
nop dword [rax]
cmp eax, 0xdb5709e4
jg 0x14001cce0
cmp eax, 0xb4a66898
jle 0x14001cd20
cmp eax, 0xbad49ce2
jg 0x14001cdbb
cmp eax, 0xb4a66899
je 0x14001ce8a
cmp eax, 0xb4d931a2
je 0x14001cea0
cmp eax, 0xb8915572
jne 0x14001cc90
mov eax, 0x21b86586
mov r15, qword [rsp + 0x80]
jmp 0x14001cc90
cmp eax, 0x17e6cb50
jle 0x14001cd60
cmp eax, 0x375d0263
jle 0x14001ce0c
cmp eax, 0x375d0264
je 0x14001cebc
cmp eax, 0x54a61ad1
je 0x14001ced8
cmp eax, 0x7efb2098
jne 0x14001cc90
mov eax, 0xf9a0bb1b
mov r14, r13
jmp 0x14001cc90
cmp eax, 0xa197de92
jle 0x14001ce39
cmp eax, 0xa197de93
je 0x14001cf03
cmp eax, 0xafbf4d7a
je 0x14001cf12
cmp eax, 0xb2fe6d6e
jne 0x14001cc90
mov qword [rsp + 0x48], rbp
mov eax, 0x84cd68a3
jmp 0x14001cc90
cmp eax, 0xf9a0bb1a
jle 0x14001ce6a
cmp eax, 0xf9a0bb1b
je 0x14001cf74
cmp eax, 0x7c10ef1
je 0x14001cc7c
cmp eax, 0x1116efe4
jne 0x14001cc90
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0x90], rax
cmp qword [rsp + 0x30], 0
mov eax, 0xc197fe12
mov ecx, 0xb4a66899
cmovg eax, ecx
mov rbx, qword [rsp + 0x30]
jmp 0x14001cc90
cmp eax, 0xbad49ce3
je 0x14001cfac
cmp eax, 0xbd872a34
je 0x14001cfc1
cmp eax, 0xc197fe12
jne 0x14001cc90
movabs rax, 0xd9a97948f7ddef27
mov r15, rax
sub r15, rbx
sub r15, rax
movabs rcx, 0x15da5e2f0ed5f0eb
add r15, r13
add r15, rcx
sub r15, rcx
mov eax, 0x21b86586
jmp 0x14001cc90
cmp eax, 0x17e6cb51
je 0x14001cfe3
cmp eax, 0x30380bba
jne 0x14001d192
mov rax, qword [rsp + 0x50]
cmp rax, r13
setg byte [rsp + 0x2e]
mov eax, 0xb4d931a2
jmp 0x14001cc90
cmp eax, 0x84cd68a3
je 0x14001cff7
cmp eax, 0x84ffbdd1
jne 0x14001cc90
mov rax, qword [rsp + 0x70]
cmp qword [rax], 0
mov eax, 0xa197de93
mov ecx, 0xb2fe6d6e
cmove eax, ecx
jmp 0x14001cc90
cmp eax, 0xdb5709e5
je 0x14001d0c9
cmp eax, 0xedfbdf14
jne 0x14001cc90
mov eax, 0x7efb2098
jmp 0x14001cc90
mov rax, qword [rbp + 0x80]
mov qword [rsp + 0x60], rax
mov eax, 0xbad49ce3
jmp 0x14001cc90
cmp byte [rsp + 0x2e], 0
mov eax, 0xf9a0bb1b
mov ecx, 0xedfbdf14
cmovne eax, ecx
mov r14, qword [rsp + 0x50]
jmp 0x14001cc90
cmp byte [rsp + 0x2f], 0
mov eax, 0xc197fe12
mov ecx, 0xafbf4d7a
cmovne eax, ecx
mov rbx, qword [rsp + 0x30]
jmp 0x14001cc90
cmp qword [rsp + 0x50], 0
mov eax, 0x1116efe4
mov ecx, 0x30380bba
cmovg eax, ecx
test r13, r13
mov ecx, 0x1116efe4
cmovle eax, ecx
mov r12, r13
mov qword [rsp + 0x58], rdi
jmp 0x14001cc90
mov qword [rsp + 0x78], rbp
mov eax, 0xbd872a34
jmp 0x14001cc90
mov r9, qword [rsp + 0x60]
mov r8, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x90]
mov edx, 1
call fcn.140033fcc
mov rcx, qword [rsp + 0x30]
movabs r8, 0x9ed8015e3f03da1c
add rcx, r8
mov rsi, rbx
movabs rbx, 0x1ed8e62ebcd02f4f
mov rdx, rbx
sub rdx, rcx
add rdx, rax
mov rax, rbx
mov rbx, rsi
sub rax, rdx
sub rax, r8
mov qword [rsp + 0x88], rax
mov eax, 0xdb5709e5
jmp 0x14001cc90
mov rax, qword [rsp + 0x48]
add rax, 0x40
mov ecx, 0x83bcc0d8
nop word cs:[rax + rax]
nop dword [rax]
cmp ecx, 0x83bcc0d8
je 0x14001cfa5
cmp ecx, 0xb9e284a0
jne 0x14001cf90
jmp 0x14001d0d3
mov ecx, 0xb9e284a0
jmp 0x14001cf90
cmp qword [rsp + 0x60], 0
setne byte [rsp + 0x2f]
mov eax, 0x375d0264
jmp 0x14001cc90
mov rcx, qword [rsp + 0x78]
mov rdx, rdi
mov r8, r13
call fcn.14001f4f0
mov qword [rsp + 0x80], rax
mov eax, 0xb8915572
jmp 0x14001cc90
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x70], rax
mov eax, 0x84ffbdd1
jmp 0x14001cc90
mov rax, qword [rsp + 0x48]
lea rcx, [rax + 0x40]
mov qword [rsp + 0x98], rcx
add rax, 0x58
mov edx, 0x62a2c03
nop word cs:[rax + rax]
nop dword [rax + rax]
cmp edx, 0x62a2c02
jg 0x14001d050
cmp edx, 0xabcf50cb
je 0x14001d089
cmp edx, 0xad94eb8e
je 0x14001d095
cmp edx, 0xd2eb313e
jne 0x14001d020
mov rcx, qword [rsp + 0x38]
mov ecx, dword [rcx]
mov edx, 0x5d803823
jmp 0x14001d020
cmp edx, 0x5d803823
je 0x14001d146
cmp edx, 0x3c95d93c
je 0x14001d0ac
cmp edx, 0x62a2c03
jne 0x14001d020
mov rdx, qword [rsp + 0x98]
mov rdx, qword [rdx]
mov rdx, qword [rdx]
mov qword [rsp + 0xa0], rdx
mov edx, 0x3c95d93c
jmp 0x14001d020
mov qword [rsp + 0x40], rax
mov edx, 0xad94eb8e
jmp 0x14001d020
mov rdx, qword [rsp + 0x40]
mov rdx, qword [rdx]
mov qword [rsp + 0x38], rdx
mov edx, 0xd2eb313e
jmp 0x14001d020
cmp qword [rsp + 0xa0], 0
mov edx, 0xabcf50cb
mov ecx, 0x5d803823
cmove edx, ecx
xor ecx, ecx
jmp 0x14001d020
mov eax, 0x7c10ef1
jmp 0x14001cc90
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
mov rax, qword [rax]
mov rcx, qword [rax]
mov rdx, rdi
mov r8, r14
call fcn.14002b320
lea rax, [rdi + r14]
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0x48]
movsxd rcx, r14d
mov edx, 0x341805bb
nop word cs:[rax + rax]
nop
cmp edx, 0xdb1ece36
je 0x14001d158
cmp edx, 0x341805bb
jne 0x14001d110
mov rdx, qword [rax + 0x58]
sub dword [rdx], ecx
mov rdx, qword [rax + 0x40]
mov qword [rsp + 0x40], rdx
mov rdx, qword [rsp + 0x40]
mov rdx, qword [rdx]
add rdx, rcx
mov qword [rsp + 0x38], rdx
mov edx, 0xdb1ece36
jmp 0x14001d110
movsxd rax, ecx
mov qword [rsp + 0x50], rax
mov eax, 0x54a61ad1
jmp 0x14001cc90
movabs r12, 0x9b8557d0311d35d9
sub r12, r12
sub r12, r14
movabs rcx, 0x113f11547e3a26f
add r12, r13
add r12, rcx
sub r12, rcx
mov rax, qword [rsp + 0x40]
mov rcx, qword [rsp + 0x38]
mov qword [rax], rcx
mov eax, 0x1116efe4
jmp 0x14001cc90
cmp eax, 0x21b86586
jne 0x14001cc90
mov rax, r15
add rsp, 0xa8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret