Function at 0x140001a60
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x18], rbx
push rsi
push r12
push r13
push r14
push r15
sub rsp, 0x20
mov r13d, 1
mov qword [0x1402832e0], rdx
xor edx, edx
mov dword [0x1402832dc], ecx
mov eax, r13d
mov dword [0x1402832b8], ecx
shl eax, cl
lea r14d, [r9 - 1]
dec eax
mov dword [section..data], 0xc
mov dword [0x1402832bc], eax
lea rbx, [0x1402831b0]
dec ecx
mov dword [0x14027d004], 0x1000
mov r9d, r13d
mov dword [0x14027d008], 0x138b
shl r9d, cl
lea r15, [r8 + 1]
mov dword [0x1402832b0], edx
mov dword [0x1402832b4], edx
mov dword [0x1402832d8], edx
lea eax, [r9 + 1]
mov dword [0x1402832d4], edx
mov dword [0x1402832ec], eax
lea eax, [r9 + 2]
mov dword [0x1402832d0], eax
movzx eax, byte [r8]
mov dword [0x14027d00c], r13d
mov dword [0x1402832e8], r9d
mov dword [0x1402832f0], edx
movzx esi, byte [rax + rbx]
mov eax, 0x138b
nop dword [rax]
inc edx
add eax, eax
cmp eax, 0x10000
jl 0x140001b20
mov r12d, 8
mov ecx, 0x138b
sub r12d, edx
call fcn.1400019d0
mov ecx, r9d
call fcn.140001e50
test r14d, r14d
je 0x140001d05
mov r10, qword [0x1402832c0]
mov r8, qword [0x1402832c8]
mov qword [rsp + 0x50], rbp
mov qword [rsp + 0x58], rdi
nop word [rax + rax]
movzx eax, byte [r15]
lea r15, [r15 + 1]
mov ecx, dword [section..data]
dec r14d
inc dword [0x14027d00c]
movzx ebp, byte [rax + rbx]
mov edi, ebp
mov ebx, ebp
shl edi, cl
mov ecx, r12d
shl ebx, cl
add edi, esi
xor ebx, esi
movsxd rdx, ebx
mov eax, dword [r10 + rdx*4]
cmp eax, edi
jne 0x140001baf
movzx esi, word [r8 + rdx*2]
jmp 0x140001ceb
test eax, eax
js 0x140001bf3
mov r9d, 0x138b
sub r9d, ebx
test ebx, ebx
cmove r9d, r13d
movsxd r11, r9d
sub ebx, r9d
sub rdx, r11
mov ecx, ebx
mov rax, rdx
lea rdx, [rdx + 0x138b]
cmovns rdx, rax
add ebx, 0x138b
test rax, rax
cmovns ebx, ecx
mov eax, dword [r10 + rdx*4]
cmp eax, edi
je 0x140001c37
test eax, eax
jns 0x140001bc5
mov ecx, esi
call fcn.140001e50
inc dword [0x1402832d8]
mov esi, ebp
mov ecx, dword [0x1402832d0]
cmp ecx, dword [0x14027d004]
jge 0x140001c44
mov r8, qword [0x1402832c8]
mov r10, qword [0x1402832c0]
movsxd rax, ebx
mov word [r8 + rax*2], cx
inc ecx
mov dword [0x1402832d0], ecx
mov dword [r10 + rax*4], edi
jmp 0x140001ceb
movsxd rax, ebx
movzx esi, word [r8 + rax*2]
jmp 0x140001ceb
movsxd rdx, dword [0x14027d008]
mov rax, qword [0x1402832c0]
lea r8d, [rdx - 0x10]
lea rax, [rax + rdx*4]
nop word [rax + rax]
mov qword [rax - 0x40], 0xffffffffffffffff
mov edx, r8d
mov qword [rax - 0x38], 0xffffffffffffffff
mov qword [rax - 0x30], 0xffffffffffffffff
mov qword [rax - 0x28], 0xffffffffffffffff
mov qword [rax - 0x20], 0xffffffffffffffff
mov qword [rax - 0x18], 0xffffffffffffffff
mov qword [rax - 0x10], 0xffffffffffffffff
mov qword [rax - 8], 0xffffffffffffffff
add rax, 0xffffffffffffffc0
sub r8d, 0x10
jns 0x140001c60
test edx, edx
jle 0x140001cc2
dec edx
mov dword [rax - 4], 0xffffffff
lea rax, [rax - 4]
test edx, edx
jg 0x140001cb1
mov ecx, dword [0x1402832e8]
mov dword [0x1402832d4], r13d
lea eax, [rcx + 2]
mov dword [0x1402832d0], eax
call fcn.140001e50
mov r10, qword [0x1402832c0]
mov r8, qword [0x1402832c8]
lea rbx, [0x1402831b0]
test r14d, r14d
jne 0x140001b70
mov rdi, qword [rsp + 0x58]
mov rbp, qword [rsp + 0x50]
mov ecx, esi
call fcn.140001e50
mov ecx, dword [0x1402832ec]
inc dword [0x1402832d8]
mov rbx, qword [rsp + 0x60]
add rsp, 0x20
pop r15
pop r14
pop r13
pop r12
pop rsi
jmp fcn.140001e50