Function at 0x1401a7990
Capabilities:
Write file on windows

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r14
lea rbp, [rsp - 0x37]
sub rsp, 0xe0
mov rax, qword [0x1404779b8]
xor rax, rsp
mov qword [rbp + 0x2f], rax
mov r14d, r8d
mov rsi, rdx
mov rdi, rcx
lea r8, [0x14035ada4]
mov rdx, rcx
lea rcx, [rsp + 0x28]
call fcn.14028c01c
mov r9, qword [rsp + 0x28]
test r9, r9
jne 0x1401a7a76
xor ebx, ebx
mov qword [rbp - 0x51], rbx
mov qword [rbp - 0x41], rbx
mov qword [rbp - 0x39], SafeArrayLock
mov byte [rbp - 0x51], bl
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rdi + r8], bl
jne 0x1401a7a00
mov rdx, rdi
lea rcx, [rbp - 0x51]
call fcn.140101ee0
nop
lea r8, [rbp - 0x51]
lea rdx, str._AES256__writeFile__Can_not_open_output_file:
lea rcx, [rbp - 0x71]
call fcn.1400eafe0
mov rcx, rax
call fcn.1401a7f60
nop
mov rdx, qword [rbp - 0x39]
cmp rdx, 0x10
jb 0x1401a7baf
inc rdx
mov rcx, qword [rbp - 0x51]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401a7baa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401a7d8f
jmp 0x1401a7baa
mov r8, r14
mov edx, 1
mov rcx, rsi
call fcn.140286c9c
mov rcx, qword [rsp + 0x28]
cmp rax, r14
je 0x1401a7bb6
call fcn.1402858fc
xor ebx, ebx
mov qword [rbp - 0x51], rbx
mov qword [rbp - 0x41], rbx
mov qword [rbp - 0x39], SafeArrayLock
mov byte [rbp - 0x51], bl
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdi + r8], bl
jne 0x1401a7ab5
mov rdx, rdi
lea rcx, [rbp - 0x51]
call fcn.140101ee0
nop
lea r8, [rbp - 0x51]
lea rdx, str._AES256__writeFile__Write_to_file
lea rcx, [rbp - 0x11]
call fcn.1400eafe0
nop
mov r8d, 7
lea rdx, str._failed
mov rcx, rax
call fcn.140101b30
mov qword [rbp - 0x31], rbx
mov qword [rbp - 0x21], rbx
mov qword [rbp - 0x19], rbx
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x31], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x21], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], SafeArrayLock
mov byte [rax], 0
lea rcx, [rbp - 0x31]
call fcn.1401a7f60
nop
mov rdx, qword [rbp + 7]
cmp rdx, 0x10
jb 0x1401a7b64
inc rdx
mov rcx, qword [rbp - 0x11]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401a7b5f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401a7d95
call fcn.14021ecec
mov qword [rbp - 1], rbx
mov qword [rbp + 7], SafeArrayLock
mov byte [rbp - 0x11], 0
mov rdx, qword [rbp - 0x39]
cmp rdx, 0x10
jb 0x1401a7baf
inc rdx
mov rcx, qword [rbp - 0x51]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401a7baa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401a7d9b
call fcn.14021ecec
xor eax, eax
jmp 0x1401a7d6f
call fcn.1402858fc
xor ebx, ebx
mov qword [rbp - 0x51], rbx
mov qword [rbp - 0x41], rbx
mov qword [rbp - 0x39], SafeArrayLock
mov byte [rbp - 0x51], bl
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdi + r8], bl
jne 0x1401a7bd7
mov rdx, rdi
lea rcx, [rbp - 0x51]
call fcn.140101ee0
nop
mov edx, r14d
lea rcx, [rbp - 0x31]
call fcn.140127290
nop
mov r8, rax
lea rdx, str._AES256__writeFile__Write
lea rcx, [rbp - 0x11]
call fcn.1400eafe0
nop
mov r8d, SafeArrayLock
lea rdx, str._bytes_to_file
mov rcx, rax
call fcn.140101b30
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xf], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x1f], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], SafeArrayLock
mov byte [rax], 0
lea r9, [rbp - 0x51]
lea r8, [rbp + 0xf]
movzx edx, byte [rsp + 0x20]
lea rcx, [rbp - 0x71]
call fcn.1400f3f30
lea rcx, [rbp - 0x71]
call fcn.1401a7f60
nop
mov rdx, qword [rbp + 0x27]
cmp rdx, 0x10
jb 0x1401a7c9d
inc rdx
mov rcx, qword [rbp + 0xf]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401a7c97
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401a7da1
call fcn.14021ecec
nop
mov rdx, qword [rbp + 7]
cmp rdx, 0x10
jb 0x1401a7cd8
inc rdx
mov rcx, qword [rbp - 0x11]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401a7cd3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401a7da7
call fcn.14021ecec
mov qword [rbp - 1], rbx
mov qword [rbp + 7], SafeArrayLock
mov byte [rbp - 0x11], 0
mov rdx, qword [rbp - 0x19]
cmp rdx, 0x10
jb 0x1401a7d23
inc rdx
mov rcx, qword [rbp - 0x31]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401a7d1e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401a7dad
call fcn.14021ecec
mov qword [rbp - 0x21], rbx
mov qword [rbp - 0x19], SafeArrayLock
mov byte [rbp - 0x31], 0
mov rdx, qword [rbp - 0x39]
cmp rdx, 0x10
jb 0x1401a7d6a
inc rdx
mov rcx, qword [rbp - 0x51]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401a7d65
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401a7d89
call fcn.14021ecec
mov eax, 1
mov rcx, qword [rbp + 0x2f]
xor rcx, rsp
call fcn.14021f250
add rsp, 0xe0
pop r14
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.140260f54
int3
call fcn.140260f54
nop
call fcn.140260f54
nop
call fcn.140260f54
nop
call fcn.140260f54
nop
call fcn.140260f54
nop
call fcn.140260f54
int3