Function at 0x140006920
Capabilities:
Write file on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xa8
mov rsi, rcx
mov rax, qword [0x1401132d8]
xor rax, rsp
mov qword [rsp + 0xa0], rax
lea rax, [rcx + 0x68]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x50]
mov rax, qword [rax]
mov qword [rsp + 0x70], rax
lea rdi, [rcx + 0x74]
lea rax, [rcx + 0x71]
mov qword [rsp + 0x68], rax
mov eax, 0x2c7a4f14
mov ebp, 0x3ae42560
lea r15, [rsp + 0x80]
lea r12, [rsp + 0x78]
jmp 0x1400069b0
mov rax, qword [rsp + 0x78]
sub rax, qword [rsp + 0x40]
mov qword [rsp + 0x48], rax
cmp qword [rsp + 0x48], 0
mov eax, 0xdbe73c2a
mov ecx, 0x38955f1e
cmove eax, ecx
nop word cs:[rax + rax]
cmp eax, 0xee83fe03
jle 0x1400069f0
cmp eax, 0x38955f1d
jle 0x140006a30
cmp eax, 0x5e371351
jg 0x140006abb
cmp eax, 0x38955f1e
je 0x140006ba8
cmp eax, 0x3ae42560
je 0x140006bbe
cmp eax, 0x5d7cd5e5
jne 0x1400069b0
mov eax, 0xb3491148
jmp 0x1400069b0
cmp eax, 0xa950b8e2
jle 0x140006a70
cmp eax, 0xd807ff5a
jle 0x140006af5
cmp eax, 0xd807ff5b
je 0x140006bca
cmp eax, 0xdbe73c2a
je 0x140006bd6
cmp eax, 0xed969d2a
jne 0x1400069b0
mov eax, 0xa950b8e3
xor r14d, r14d
jmp 0x1400069b0
cmp eax, 0x17bae159
jle 0x140006b18
cmp eax, 0x17bae15a
je 0x140006c04
cmp eax, 0x20d192df
je 0x140006c16
cmp eax, 0x2c7a4f14
jne 0x1400069b0
cmp qword [rsp + 0x70], 0
mov eax, 0xa7de9a32
cmove eax, ebp
jmp 0x1400069b0
cmp eax, 0x991cb8ce
jle 0x140006b79
cmp eax, 0x991cb8cf
je 0x140006c39
cmp eax, 0xa62ac0e1
je 0x140006c4e
cmp eax, 0xa7de9a32
jne 0x1400069b0
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
cmp byte [rax], 0
mov eax, 0x20d192df
cmove eax, ebp
jmp 0x1400069b0
cmp eax, 0x5e371352
je 0x140006c67
cmp eax, 0x69be1ca5
je 0x140006c7e
cmp eax, 0x70db20aa
jne 0x1400069b0
mov eax, dword [rsp + 0x34]
cmp eax, 3
mov eax, 0x8eaf6dce
mov ecx, 0xa62ac0e1
cmovl eax, ecx
jmp 0x1400069b0
cmp eax, 0xa950b8e3
je 0x140006c95
cmp eax, 0xb3491148
jne 0x140006cb9
mov eax, 0x69be1ca5
xor r13d, r13d
jmp 0x1400069b0
cmp eax, 0xee83fe04
je 0x140006ca2
cmp eax, 0x134d31c8
jne 0x1400069b0
mov qword [rsp + 0x58], r15
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0x60], r12
mov rax, qword [rsp + 0x60]
mov rax, qword [rsp + 0x50]
mov rcx, qword [rax]
mov qword [rsp + 0x40], r15
mov r9, qword [rsp + 0x40]
add r9, 0x20
mov r8, qword [rsp + 0x40]
mov rax, qword [rcx]
mov qword [rsp + 0x20], r12
mov rdx, rdi
call qword [rax + 0x40]
mov dword [rsp + 0x34], eax
mov eax, 0x5e371352
jmp 0x1400069b0
cmp eax, 0x801427f8
je 0x140006984
cmp eax, 0x8eaf6dce
jne 0x1400069b0
mov eax, dword [rsp + 0x34]
cmp eax, 3
mov eax, 0x5d7cd5e5
mov ecx, 0x991cb8cf
cmove eax, ecx
jmp 0x1400069b0
mov rax, qword [rsp + 0x38]
cmp byte [rax], 0
sete r14b
mov eax, 0xa950b8e3
jmp 0x1400069b0
mov eax, 0xbbb5f793
mov bl, 1
jmp 0x1400069b0
mov eax, 0xbbb5f793
xor ebx, ebx
jmp 0x1400069b0
mov r9, qword [rsi + 0x80]
mov rcx, qword [rsp + 0x40]
mov r8, qword [rsp + 0x48]
mov edx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
mov rcx, qword [rsp + 0x48]
cmp rcx, rax
mov eax, 0xed969d2a
jmp 0x14000699e
mov rax, qword [rsp + 0x38]
mov byte [rax], 0
mov eax, 0x801427f8
jmp 0x1400069b0
mov rax, qword [rsi]
mov rcx, rsi
mov edx, 0xffffffff
call qword [rax + 0x18]
cmp eax, 0xffffffff
mov eax, 0x134d31c8
mov ecx, 0xd807ff5b
cmove eax, ecx
jmp 0x1400069b0
mov rax, qword [rsp + 0x38]
mov byte [rax], 0
mov eax, 0x69be1ca5
mov r13b, 1
jmp 0x1400069b0
mov eax, dword [rsp + 0x34]
cmp eax, 1
mov eax, 0x5d7cd5e5
mov ecx, 0x801427f8
cmove eax, ecx
jmp 0x1400069b0
cmp dword [rsp + 0x34], 0
mov eax, 0x70db20aa
mov ecx, 0xee83fe04
cmovle eax, ecx
jmp 0x1400069b0
mov rax, qword [rsp + 0x60]
mov rax, qword [rsp + 0x58]
mov eax, 0xbbb5f793
mov ebx, r13d
jmp 0x1400069b0
mov eax, 0x69be1ca5
mov r13d, r14d
jmp 0x1400069b0
cmp dword [rsp + 0x34], 0
mov eax, 0x5d7cd5e5
mov ecx, 0x17bae15a
cmove eax, ecx
jmp 0x1400069b0
cmp eax, 0xbbb5f793
jne 0x1400069b0
and bl, 1
mov rcx, qword [rsp + 0xa0]
xor rcx, rsp
call fcn.140009900
mov eax, ebx
add rsp, 0xa8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret