Function at 0x14006d110
Capabilities:
Write file on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xf8
mov r15, rcx
mov rax, qword [0x141746c90]
xor rax, rsp
mov qword [rsp + 0xf0], rax
lea rax, [rcx + 0x80]
mov qword [rsp + 0x88], rax
lea rax, [rcx + 0x74]
mov qword [rsp + 0x70], rax
lea rax, [rcx + 0x71]
mov qword [rsp + 0x80], rax
lea rax, [rcx + 0x68]
mov qword [rsp + 0x78], rax
mov eax, 0xcc56a677
mov esi, 0xb1b8ff41
mov edi, 0x7b55036e
lea rbx, [rsp + 0xd0]
jmp 0x14006d190
mov rax, qword [rsp + 0x68]
mov rax, qword [rsp + 0x60]
mov eax, 0xada035fe
mov ebp, r13d
cmp eax, 0x2989a4a2
jg 0x14006d1f0
cmp eax, 0xcc56a676
jg 0x14006d240
cmp eax, 0x921616d2
jg 0x14006d2e1
cmp eax, 0x8ac8e79f
jle 0x14006d3af
cmp eax, 0x8ac8e7a0
je 0x14006d51e
cmp eax, 0x8cef1193
je 0x14006d52b
cmp eax, 0x8d68af99
jne 0x14006d190
cmp qword [rsp + 0x90], 0
mov eax, 0x64c9a46d
cmove eax, esi
jmp 0x14006d190
cmp eax, 0x503a3a23
jg 0x14006d290
cmp eax, 0x38d54f0d
jle 0x14006d30f
cmp eax, 0x490e47c2
jle 0x14006d3da
cmp eax, 0x490e47c3
je 0x14006d544
cmp eax, 0x4ea42566
je 0x14006d560
cmp eax, 0x4ee5d536
jne 0x14006d190
mov eax, 0x900cc3e
jmp 0x14006d190
cmp eax, 0xf7727b61
jle 0x14006d342
cmp eax, 0xe7e07e6
jle 0x14006d407
cmp eax, 0xe7e07e7
je 0x14006d576
cmp eax, 0x109593f1
je 0x14006d580
cmp eax, 0x11b8c7b3
jne 0x14006d190
mov eax, 0xada035fe
xor ebp, ebp
jmp 0x14006d190
cmp eax, 0x64fdb959
jle 0x14006d37c
cmp eax, 0x73ccdff1
jle 0x14006d430
cmp eax, 0x73ccdff2
je 0x14006d58d
cmp eax, 0x7b55036e
je 0x14006d5b3
cmp eax, 0x7d3f7fff
jne 0x14006d190
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0xa8], rax
mov eax, 0x69103dd2
jmp 0x14006d190
cmp eax, 0xada035fd
jle 0x14006d477
cmp eax, 0xb1b8ff41
je 0x14006d5ca
cmp eax, 0xba5c6dee
jne 0x14006d764
mov eax, 0x97881f5c
xor r12d, r12d
jmp 0x14006d190
cmp eax, 0x2d2b59ca
jg 0x14006d49a
cmp eax, 0x2989a4a3
je 0x14006d5d7
cmp eax, 0x29f16ab4
jne 0x14006d190
mov rax, qword [rsp + 0x30]
mov byte [rax], 0
mov eax, 0x921616d3
jmp 0x14006d190
cmp eax, 0xecc18b19
jg 0x14006d4c9
cmp eax, 0xcc56a677
je 0x14006d5e6
cmp eax, 0xd9cc0809
jne 0x14006d190
mov eax, dword [rsp + 0x2c]
cmp eax, 3
mov eax, 0xe7e07e7
mov ecx, 0xeef535a4
cmove eax, ecx
jmp 0x14006d190
cmp eax, 0x5bd66f1e
jg 0x14006d4f1
cmp eax, 0x503a3a24
je 0x14006d60a
cmp eax, 0x562a7317
jne 0x14006d190
test byte [rsp + 0x29], 1
mov eax, 0x64fdb95a
cmove eax, esi
jmp 0x14006d190
cmp eax, 0x810f991f
je 0x14006d614
cmp eax, 0x872d6f16
jne 0x14006d190
mov rax, qword [rsp + 0x30]
mov al, byte [rax]
mov byte [rsp + 0x29], al
mov eax, 0x562a7317
jmp 0x14006d190
cmp eax, 0x38d54f0e
je 0x14006d646
cmp eax, 0x48c99a6a
jne 0x14006d190
cmp dword [rsp + 0x2c], 0
mov eax, 0x8cef1193
mov ecx, 0xecc18b1a
cmovle eax, ecx
jmp 0x14006d190
cmp eax, 0xf7727b62
je 0x14006d664
cmp eax, 0x900cc3e
jne 0x14006d190
cmp qword [rsp + 0x40], 0
mov eax, 0x7d3f7fff
cmove eax, edi
jmp 0x14006d190
cmp eax, 0x64fdb95a
je 0x14006d67e
cmp eax, 0x69103dd2
jne 0x14006d190
mov rax, qword [rsp + 0xa8]
mov r9, qword [rax]
mov rcx, qword [rsp + 0x38]
mov r8, qword [rsp + 0x40]
mov edx, 1
call fcn.14008ec1c
mov qword [rsp + 0xb0], rax
mov eax, 0xf7727b62
jmp 0x14006d190
cmp eax, 0x921616d3
je 0x14006d6ad
cmp eax, 0x97881f5c
jne 0x14006d190
mov eax, 0x5bd66f1f
mov r13d, r12d
jmp 0x14006d190
cmp eax, 0x2d2b59cb
je 0x14006d6b7
cmp eax, 0x34cb2922
jne 0x14006d190
mov eax, dword [rsp + 0x2c]
cmp eax, 1
mov eax, 0xe7e07e7
mov ecx, 0x490e47c3
cmove eax, ecx
jmp 0x14006d190
cmp eax, 0xecc18b1a
je 0x14006d72e
cmp eax, 0xeef535a4
jne 0x14006d190
mov rax, qword [rsp + 0x30]
mov byte [rax], 0
mov eax, 0x8ac8e7a0
jmp 0x14006d190
cmp eax, 0x5bd66f1f
je 0x14006d17e
cmp eax, 0x64c9a46d
jne 0x14006d190
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x30], rax
mov eax, 0x872d6f16
jmp 0x14006d190
mov eax, 0x5bd66f1f
mov r13b, 1
jmp 0x14006d190
mov eax, dword [rsp + 0x2c]
cmp eax, 3
mov eax, 0xd9cc0809
mov ecx, 0x34cb2922
cmovl eax, ecx
jmp 0x14006d190
mov rax, qword [rsp + 0xc0]
sub rax, qword [rsp + 0x38]
mov qword [rsp + 0x40], rax
mov eax, 0x4ee5d536
jmp 0x14006d190
mov al, byte [rsp + 0x2a]
not al
and al, 1
mov byte [rsp + 0x2b], al
mov eax, 0x2989a4a3
jmp 0x14006d190
mov eax, 0x109593f1
jmp 0x14006d190
mov eax, 0x5bd66f1f
xor r13d, r13d
jmp 0x14006d190
mov qword [rsp + 0x60], rbx
mov rax, qword [rsp + 0x60]
lea rax, [rsp + 0xc0]
mov qword [rsp + 0x68], rax
mov rax, qword [rsp + 0x68]
mov eax, 0x2d2b59cb
jmp 0x14006d190
mov rax, qword [rsp + 0x30]
cmp byte [rax], 0
setne byte [rsp + 0x2a]
mov eax, 0x4ea42566
jmp 0x14006d190
mov eax, 0xada035fe
mov bpl, 1
jmp 0x14006d190
mov eax, 0x97881f5c
mov r12b, byte [rsp + 0x2b]
jmp 0x14006d190
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x50]
mov rax, qword [rax]
mov qword [rsp + 0x90], rax
mov eax, 0x8d68af99
jmp 0x14006d190
mov eax, 0x73ccdff2
jmp 0x14006d190
mov edx, dword [rsp + 0x48]
mov rax, qword [rsp + 0xa0]
mov rcx, r15
call rax
mov dword [rsp + 0xcc], eax
cmp eax, 0xffffffff
mov rax, qword [rsp + 0x58]
mov eax, 0x503a3a24
mov ecx, 0x11b8c7b3
cmove eax, ecx
jmp 0x14006d190
mov rax, qword [rsp + 0x98]
mov rax, qword [rax + 0x18]
mov qword [rsp + 0xa0], rax
mov eax, 0x810f991f
jmp 0x14006d190
mov rax, qword [rsp + 0x40]
cmp rax, qword [rsp + 0xb0]
mov eax, 0xba5c6dee
cmove eax, edi
jmp 0x14006d190
lea rax, [rsp + 0xcc]
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0x58]
mov dword [rsp + 0x48], 0xffffffff
mov rax, qword [r15]
mov qword [rsp + 0x98], rax
mov eax, 0x38d54f0e
jmp 0x14006d190
mov eax, 0x490e47c3
jmp 0x14006d190
mov rax, qword [rsp + 0x50]
mov rdi, qword [rax]
mov r14, rbx
mov qword [rsp + 0x38], rbx
mov rsi, qword [rsp + 0x38]
add rsi, 0x20
mov rbx, qword [rsp + 0x38]
mov rax, qword [rdi]
mov rax, qword [rax + 0x40]
mov qword [rsp + 0xb8], rax
mov eax, 0x4af380cd
nop dword [rax]
cmp eax, 0xf7cef44b
je 0x14006d745
cmp eax, 0x4af380cd
jne 0x14006d6f0
mov rax, qword [rsp + 0xb8]
lea rcx, [rsp + 0xc0]
mov qword [rsp + 0x20], rcx
mov rcx, rdi
mov rdx, qword [rsp + 0x70]
mov r8, rbx
mov r9, rsi
call rax
mov dword [rsp + 0x4c], eax
mov eax, 0xf7cef44b
jmp 0x14006d6f0
cmp dword [rsp + 0x2c], 0
mov eax, 0xe7e07e7
mov ecx, 0x29f16ab4
cmove eax, ecx
jmp 0x14006d190
mov eax, dword [rsp + 0x4c]
mov dword [rsp + 0x2c], eax
mov eax, 0x48c99a6a
mov esi, 0xb1b8ff41
mov edi, 0x7b55036e
mov rbx, r14
jmp 0x14006d190
cmp eax, 0xada035fe
jne 0x14006d190
and bpl, 1
mov rcx, qword [rsp + 0xf0]
xor rcx, rsp
call fcn.14007f670
mov eax, ebp
add rsp, 0xf8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret