Function at 0x140004490
Capabilities:
Write file on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x128
mov r15d, edx
mov r13, rcx
mov rax, qword [0x1401132d8]
xor rax, rsp
mov qword [rsp + 0x120], rax
lea rax, [rsp + 0xfc]
mov qword [rsp + 0x98], rax
mov rax, qword [rsp + 0x98]
cmp edx, 0xffffffff
sete byte [rsp + 0x4f]
mov dword [rsp + 0xfc], 0xffffffff
lea rax, [rcx + 0x74]
mov qword [rsp + 0xe0], rax
movsx eax, r15b
mov dword [rsp + 0x94], eax
lea rax, [rcx + 0x70]
mov qword [rsp + 0xd8], rax
lea rax, [rcx + 0x68]
mov qword [rsp + 0xd0], rax
lea rax, [rcx + 0x80]
mov qword [rsp + 0xc8], rax
mov eax, 0xa2a48c38
lea rdi, [rsp + 0xfb]
mov rsi, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fputc]
mov ebx, 0x98543037
jmp 0x140004550
mov eax, 0xffa0a346
mov r14d, 0xffffffff
nop word [rax + rax]
cmp eax, 0x8c25c50
jg 0x1400045a0
cmp eax, 0xbc48a756
jg 0x1400045e0
cmp eax, 0x98543036
jg 0x140004673
cmp eax, 0x85fab953
jg 0x140004768
cmp eax, 0x81656459
je 0x1400048c8
cmp eax, 0x857ff190
jne 0x140004550
mov eax, 0xe74658c7
mov r12d, 0xffffffff
jmp 0x140004550
cmp eax, 0x325066f0
jle 0x140004620
cmp eax, 0x50908a46
jg 0x1400046b3
cmp eax, 0x48ac77ea
jg 0x1400047a6
cmp eax, 0x325066f1
je 0x1400048e1
cmp eax, 0x38049c9a
jne 0x140004550
mov eax, 0x54b91ce2
mov dword [rsp + 0x5c], r15d
jmp 0x140004550
cmp eax, 0xe3d688e6
jg 0x1400046e6
cmp eax, 0xdc318316
jg 0x1400047d5
cmp eax, 0xbc48a757
je 0x1400048f3
cmp eax, 0xc2ca50f1
jne 0x140004550
mov eax, 0x54b91ce2
mov dword [rsp + 0x5c], 0xffffffff
jmp 0x140004550
cmp eax, 0x15129e26
jle 0x140004716
cmp eax, 0x2a7c8633
jg 0x140004812
cmp eax, 0x15129e27
je 0x140004902
cmp eax, 0x1dc0c036
jne 0x140004550
mov rax, qword [rsp + 0xb8]
mov rax, qword [rsp + 0xb0]
mov rax, qword [rsp + 0xa8]
mov eax, 0xe74658c7
mov r12d, dword [rsp + 0x50]
jmp 0x140004550
cmp eax, 0xa9d87f10
jg 0x140004852
cmp eax, 0x98543037
je 0x140004979
cmp eax, 0xa2a48c38
jne 0x140004550
mov rax, qword [rsp + 0x98]
cmp byte [rsp + 0x4f], 0
mov eax, 0xba07f3f
mov ecx, 0x15129e27
cmovne eax, ecx
jmp 0x140004550
cmp eax, 0x70d92d72
jg 0x140004872
cmp eax, 0x50908a47
je 0x140004998
cmp eax, 0x54b91ce2
jne 0x140004550
mov eax, 0x1dc0c036
mov ecx, dword [rsp + 0x5c]
mov dword [rsp + 0x50], ecx
jmp 0x140004550
cmp eax, 0xfda46d10
jle 0x140004897
cmp eax, 0xfda46d11
je 0x1400049ca
cmp eax, 0xffa0a346
jne 0x140004550
mov eax, 0x1dc0c036
mov dword [rsp + 0x50], r14d
jmp 0x140004550
cmp eax, 0x8c25c51
je 0x1400049ef
cmp eax, 0xba07f3f
je 0x140004a08
cmp eax, 0x10e94541
jne 0x140004550
mov rax, qword [rsp + 0x60]
mov rax, qword [rax + 0x40]
mov rcx, qword [rsp + 0x60]
mov rdx, qword [rcx + 0x40]
mov rcx, qword [rcx + 0x58]
movsxd rcx, dword [rcx]
add rcx, qword [rdx]
cmp qword [rax], rcx
mov eax, 0x9148cc06
mov ecx, 0x2d858140
cmovb eax, ecx
jmp 0x140004550
cmp eax, 0x85fab954
je 0x140004a2c
cmp eax, 0x9148cc06
jne 0x140004550
mov rax, qword [rsp + 0xc8]
mov qword [rsp + 0x68], rax
mov rax, qword [rsp + 0x68]
cmp qword [rax], 0
mov eax, 0x48ac77eb
mov ecx, 0x857ff190
cmove eax, ecx
jmp 0x140004550
cmp eax, 0x48ac77eb
je 0x140004ada
cmp eax, 0x4feb5622
jne 0x140004550
mov eax, dword [rsp + 0x54]
cmp eax, 3
mov eax, 0xb5845f9b
mov ecx, 0xe207fce2
cmove eax, ecx
jmp 0x140004550
cmp eax, 0xdc318317
je 0x140004b7d
cmp eax, 0xe207fce2
jne 0x140004550
mov rax, qword [rsp + 0x68]
mov rdx, qword [rax]
movsx ecx, byte [rsp + 0xfb]
call rsi
cmp eax, 0xffffffff
mov eax, 0x38049c9a
mov ecx, 0xc2ca50f1
cmove eax, ecx
jmp 0x140004550
cmp eax, 0x2a7c8634
je 0x14000453f
cmp eax, 0x2d858140
jne 0x140004550
mov rax, qword [rsp + 0x60]
mov rcx, qword [rax + 0x58]
add dword [rcx], 0xffffffff
mov rax, qword [rax + 0x40]
mov rcx, qword [rax]
lea rdx, [rcx + 1]
mov qword [rax], rdx
mov byte [rcx], r15b
mov eax, 0xe74658c7
mov r12d, r15d
jmp 0x140004550
cmp eax, 0xa9d87f11
je 0x14000453f
cmp eax, 0xb5845f9b
jne 0x140004550
mov eax, 0x325066f1
jmp 0x140004550
cmp eax, 0x70d92d73
je 0x140004b8a
cmp eax, 0x745cb935
jne 0x140004550
mov eax, 0xbc48a757
mov dword [rsp + 0x58], r15d
jmp 0x140004550
cmp eax, 0xe3d688e7
jne 0x140004bd4
mov rax, qword [rsp + 0x68]
mov rdx, qword [rax]
mov ecx, dword [rsp + 0x94]
call rsi
cmp eax, 0xffffffff
mov eax, 0x745cb935
mov ecx, 0x70d92d73
cmove eax, ecx
jmp 0x140004550
mov eax, dword [rsp + 0x54]
cmp eax, 2
mov eax, 0xb5845f9b
mov ecx, 0xfda46d11
cmovb eax, ecx
jmp 0x140004550
mov eax, 0x1dc0c036
mov dword [rsp + 0x50], 0xffffffff
jmp 0x140004550
mov eax, 0xe74658c7
mov r12d, dword [rsp + 0x58]
jmp 0x140004550
mov dword [rsp + 0x80], r15d
mov dword [rsp + 0x88], 0xffffffff
mov eax, 0xb12064b4
nop word [rax + rax]
cmp eax, 0x25c1e284
jg 0x140004940
cmp eax, 0xb12064b4
je 0x14000495c
cmp eax, 0xc599748a
jne 0x140004920
mov eax, 0x25c1e285
mov r12d, r15d
jmp 0x140004920
cmp eax, 0x25c1e285
je 0x140004b9c
cmp eax, 0x58e9974e
jne 0x140004920
mov eax, 0x25c1e285
xor r12d, r12d
jmp 0x140004920
mov eax, dword [rsp + 0x80]
cmp eax, dword [rsp + 0x88]
mov eax, 0xc599748a
mov ecx, 0x58e9974e
cmove eax, ecx
jmp 0x140004920
mov byte [r13 + 0x71], 1
cmp qword [rsp + 0xf0], rdi
mov eax, 0xdc318317
mov ecx, 0xa9d87f11
cmove eax, ecx
jmp 0x140004550
mov rax, qword [rsp + 0x68]
mov r9, qword [rax]
mov rcx, qword [rsp + 0x70]
mov r8, qword [rsp + 0x78]
mov edx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
mov rcx, qword [rsp + 0x78]
cmp rcx, rax
mov eax, 0x2a7c8634
cmove eax, ebx
jmp 0x140004550
mov rax, qword [rsp + 0xe8]
sub rax, qword [rsp + 0x70]
mov qword [rsp + 0x78], rax
cmp qword [rsp + 0x78], 0
mov eax, 0x50908a47
cmove eax, ebx
jmp 0x140004550
mov eax, dword [rsp + 0x54]
cmp eax, 3
mov eax, 0x4feb5622
mov ecx, 0x81656459
cmovl eax, ecx
jmp 0x140004550
mov qword [rsp + 0x60], r13
mov rax, qword [rsp + 0x60]
mov rax, qword [rax + 0x40]
cmp qword [rax], 0
mov eax, 0x10e94541
mov ecx, 0x9148cc06
cmove eax, ecx
jmp 0x140004550
lea rdx, [rsp + 0x100]
mov qword [rsp + 0xa8], rdx
mov rax, qword [rsp + 0xa8]
mov byte [rsp + 0xfb], r15b
lea r8, [rsp + 0xf0]
mov qword [rsp + 0xb0], r8
mov rax, qword [rsp + 0xb0]
lea rbx, [rsp + 0xe8]
mov qword [rsp + 0xb8], rbx
mov rax, qword [rsp + 0xb8]
mov rax, qword [rsp + 0xa0]
mov rcx, qword [rax]
mov qword [rsp + 0x70], rdx
mov rax, qword [rsp + 0x70]
add rax, 0x20
mov rdx, qword [rsp + 0x70]
mov rbp, qword [rcx]
mov qword [rsp + 0x38], rbx
mov ebx, 0x98543037
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x20], r8
mov rdx, qword [rsp + 0xe0]
mov r8, rdi
lea r9, [rsp + 0xfc]
call qword [rbp + 0x38]
mov dword [rsp + 0x54], eax
mov eax, 0x8c25c51
jmp 0x140004550
mov qword [rsp + 0xc0], r13
mov rax, qword [rsp + 0xc0]
mov rax, qword [rax + 0x18]
mov rax, qword [rax]
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0xd8]
mov qword [rsp + 0x88], rax
mov eax, 0x91abf19d
nop
cmp eax, 0x512ef409
je 0x140004ba6
cmp eax, 0x1f8f1a44
je 0x140004b48
cmp eax, 0x91abf19d
jne 0x140004b10
mov rax, qword [rsp + 0x80]
cmp rax, qword [rsp + 0x88]
mov eax, 0x512ef409
mov ecx, 0x1f8f1a44
cmove eax, ecx
jmp 0x140004b10
mov eax, dword [r13 + 0x90]
mov rcx, qword [r13 + 0x88]
mov rdx, qword [rsp + 0xc0]
mov rbp, qword [rdx + 0x18]
mov qword [rbp], rcx
mov rbp, qword [rdx + 0x38]
mov qword [rbp], rcx
sub eax, ecx
mov rcx, qword [rdx + 0x50]
mov dword [rcx], eax
mov eax, 0x512ef409
jmp 0x140004b10
mov eax, 0xffa0a346
mov r14d, r15d
jmp 0x140004550
mov eax, 0xbc48a757
mov dword [rsp + 0x58], 0xffffffff
jmp 0x140004550
mov eax, 0xe74658c7
jmp 0x140004550
mov rax, qword [rsp + 0xd0]
mov qword [rsp + 0xa0], rax
mov rax, qword [rsp + 0xa0]
cmp qword [rax], 0
mov eax, 0x85fab954
mov ecx, 0xe3d688e7
cmove eax, ecx
jmp 0x140004550
cmp eax, 0xe74658c7
jne 0x140004550
mov rcx, qword [rsp + 0x120]
xor rcx, rsp
call fcn.140009900
mov eax, r12d
add rsp, 0x128
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret