Function at 0x1400eb564
Capabilities:
Clear file content
Write file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x530
mov rax, qword [0x1401e7e78]
xor rax, rsp
mov qword [rsp + 0x520], rax
mov rdi, rcx
mov qword [rsp + 0x68], rcx
mov rax, qword [rcx]
call qword [rax + reloc.COMCTL32.dll_CreateMappedBitmap]
xor ebx, ebx
cmp byte [rdi + 0x48], bl
je 0x1400eb776
cmp qword [rdi + 0x38], rbx
je 0x1400eb776
mov rsi, qword [rdi + 0x10]
mov qword [rsp + 0x60], rsi
test rsi, rsi
je 0x1400eb776
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
lea r8d, [rbx + 3]
mov dword [rsp + 0x20], r8d
xor r9d, r9d
mov edx, 0xc0000000
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
jne 0x1400eb627
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r9d, eax
mov r8, rsi
lea rdx, str.Cant_open_file_for_writing__n_s_nErrCode0x_08X
lea rcx, [rsp + 0x110]
call fcn.140007a70
mov byte [rsp + 0x20], 1
or r9, 0xffffffffffffffff
xor r8d, r8d
lea edx, [rbx + 0x40]
lea rcx, [rsp + 0x110]
call fcn.14002b0f8
jmp 0x1400eb776
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
call fcn.140120014
xorps xmm0, xmm0
movdqu xmmword [rsp + 0xd8], xmm0
mov qword [rsp + 0xe8], rbx
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov edx, 0x40000000
lea r8d, [r9 + 1]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xd0], rax
dec rax
cmp rax, 0xfffffffffffffffd
ja 0x1400eb7e2
mov rax, qword [rsp + 0xe8]
sub rax, qword [rsp + 0xd8]
mov edx, 0x20000
cmp rax, rdx
jae 0x1400eb6b1
lea rcx, [rsp + 0xd8]
call fcn.1400ed98c
nop
lea rax, [rsp + 0xd0]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], rbx
mov dword [rsp + 0x20], ebx
xor r9d, r9d
mov r8, qword [rdi + 0x38]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x70]
call fcn.1400ea5dc
mov rax, qword [rsp + 0xe0]
mov rcx, qword [rsp + 0xd8]
sub rax, rcx
test rax, rax
jle 0x1400eb73f
mov dword [rsp + 0x50], ebx
mov qword [rsp + 0x20], rbx
lea r9, [rsp + 0x50]
mov r8d, eax
mov rdx, rcx
mov rcx, qword [rsp + 0xd0]
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x1400eb7b8
cmp dword [rsp + 0x50], ebx
je 0x1400eb7b8
mov rcx, qword [rsp + 0xd0]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov rcx, qword [rsp + 0xd8]
mov rdx, qword [rsp + 0xd0]
lea rax, [rdx - 1]
cmp rax, 0xfffffffffffffffd
ja 0x1400eb762
mov rcx, rdx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0xd8]
test rcx, rcx
je 0x1400eb76d
call fcn.14012008c
nop
jmp 0x1400eb776
lea rcx, [rdi + 0x28]
call fcn.140120de4
lea rcx, [rdi + 0x38]
call fcn.1400e7c34
and word [rdi + 0x48], 0
mov byte [rdi + 0x4a], bl
mov dword [rdi + 0x4c], ebx
mov rcx, qword [rsp + 0x520]
xor rcx, rsp
call fcn.140139b10
lea r11, [rsp + 0x530]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, [rsp + 0x90]
call fcn.1400eb0c8
lea rdx, [0x1401deda8]
lea rcx, [rsp + 0x90]
call fcn.14013b5dc
nop
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, [rsp + 0xb0]
call fcn.1400eb0c8
lea rdx, [0x1401deda8]
lea rcx, [rsp + 0xb0]
call fcn.14013b5dc
int3