Function at 0x140068a64
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r13
push r14
push r15
lea rbp, [rsp - 0x7d0]
sub rsp, 0x8d0
mov rax, qword [0x14015a038]
xor rax, rsp
mov qword [rbp + 0x7c0], rax
mov r14, rcx
xor ebx, ebx
mov dword [rsp + 0x30], ebx
lea rcx, [rbp + 0x210]
call fcn.14002f590
nop
lea rdx, [rbp + 0x210]
mov rcx, r14
call fcn.1400677e4
test al, al
je 0x1400693bd
mov qword [rbp + 0xb0], rbx
mov qword [rbp + 0xc0], rbx
lea esi, [rbx + 7]
mov qword [rbp + 0xc8], rsi
mov word [rbp + 0xb0], bx
lea rcx, [rbp + 0xb0]
call fcn.1400674bc
mov r13d, 0x1000
test eax, eax
je 0x140069324
lea rcx, [rbp + 0xb0]
call fcn.1400679cc
test eax, eax
je 0x140069324
lea rcx, [rbp + 0x190]
call fcn.14002cf50
nop
mov qword [rbp + 0x110], rbx
mov qword [rbp + 0x120], rbx
mov qword [rbp + 0x128], rsi
mov word [rbp + 0x110], bx
mov qword [rbp + 0xd0], rbx
mov qword [rbp + 0xe0], rbx
mov qword [rbp + 0xe8], rsi
mov word [rbp + 0xd0], bx
lea r9, [rbp + 0xb0]
lea r8, [rbp + 0xd0]
lea rdx, [rbp + 0x110]
mov rcx, r14
call fcn.14006afb4
test al, al
je 0x14006926a
mov qword [rbp + 0x130], rbx
mov qword [rbp + 0x140], rbx
mov qword [rbp + 0x148], rsi
mov word [rbp + 0x130], bx
lea rcx, [rbp + 0x1c0]
call fcn.14002e600
nop
mov rcx, r14
call fcn.1400acf68
mov r8, rax
mov rdx, r14
lea rcx, [rbp + 0x1c0]
call fcn.1400123a0
lea r8, [rbp + 0x1e0]
mov rdx, r14
lea rcx, [rbp + 0x190]
call fcn.14002d260
lea r8, [rbp + 0x1e0]
lea rdx, [rbp + 0x130]
lea rcx, [rbp + 0x1c0]
call fcn.14002e910
test eax, eax
je 0x1400690f2
lea rcx, [rsp + 0x68]
call fcn.14002eb90
nop
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], rbx
mov r15d, ebx
lea r8, [rsp + 0x50]
mov rdx, r14
lea rcx, [rbp + 0x190]
call fcn.14002d1c0
test eax, eax
je 0x140068cf7
lea r8, [rsp + 0x68]
mov rdx, r14
lea rcx, [rbp + 0x190]
call fcn.14002d3d0
test eax, eax
je 0x140068cf7
mov rax, qword [rsp + 0x58]
sub rax, qword [rsp + 0x50]
cmp rax, 1
jbe 0x140068cf7
lea rcx, [rbp + 0xd0]
cmp qword [rbp + 0xe8], 8
cmovae rcx, qword [rbp + 0xd0]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov rdi, rax
test rax, rax
je 0x140068cf7
lea rdx, str.cWeuyRtj
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rsi, rax
lea rdx, str.WeRTlwN
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rsi, rsi
je 0x140068cf2
test rax, rax
je 0x140068cf2
call rax
test rax, rax
je 0x140068cd3
mov r9, rax
xor edx, edx
xor ecx, ecx
lea r8d, [rbx + 1]
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov r15, rax
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov edx, 0x2710
cmp dword [rsp + 0x74], ebx
je 0x140068ce6
imul edx, dword [rsp + 0x74], 0x3e8
lea r8, [rsp + 0x68]
lea rcx, [rsp + 0x50]
call rsi
mov esi, 7
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x38], xmm0
mov qword [rsp + 0x48], rbx
lea r8, [rsp + 0x38]
mov rdx, r14
lea rcx, [rbp + 0x190]
call fcn.14002d240
test eax, eax
je 0x140068fd7
mov rax, qword [rsp + 0x40]
sub rax, qword [rsp + 0x38]
cmp rax, 1
jbe 0x140068fd7
mov qword [rbp + 0x150], rbx
mov qword [rbp + 0x160], rbx
mov qword [rbp + 0x168], rsi
mov word [rbp + 0x150], bx
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x78], xmm0
mov qword [rbp - 0x78], rbx
lea r8, [rsp + 0x78]
lea rdx, [rbp + 0x150]
lea rcx, [rsp + 0x38]
call fcn.14002f0f0
test eax, eax
je 0x140068f2e
cmp qword [rbp + 0x160], rbx
jne 0x140068d9d
lea rcx, str.File_name_for_Help_File_is_missed.
call fcn.1400acf68
lea rdx, str.File_name_for_Help_File_is_missed.
jmp 0x140068f41
lea rdx, [rbp + 0x150]
lea rcx, [rbp + 0xf0]
call fcn.14002f3a0
nop
lea rcx, [rbp + 0xf0]
cmp qword [rbp + 0x108], 8
cmovae rcx, qword [rbp + 0xf0]
lea rdx, [0x1401361b8]
call fcn.1400af750
mov rdi, rax
test rax, rax
je 0x140068e07
mov rcx, qword [rsp + 0x78]
mov r8, qword [rbp - 0x80]
cmp rcx, r8
je 0x140068dfa
sub r8, rcx
mov r9, rax
mov edx, 1
call fcn.1400d8a9c
mov rcx, rdi
call fcn.1400d8734
jmp 0x140068f20
mov edx, 1
lea rcx, [rbp - 0x50]
call fcn.140007500
nop
lea rdx, str.Help_File_
lea rcx, [rbp - 0x40]
call fcn.14000bfc0
mov rcx, rax
lea rdx, [rbp + 0xf0]
call fcn.14000bfa0
mov rcx, rax
lea rdx, str._can_not_be_created.
call fcn.14000bfc0
nop
mov qword [rbp + 0x170], rbx
mov qword [rbp + 0x180], rbx
mov qword [rbp + 0x188], rsi
mov word [rbp + 0x170], bx
mov dword [rsp + 0x30], 2
lea rdx, [rbp - 0x70]
lea rcx, [rbp - 0x38]
call fcn.14000b0f0
mov rdx, qword [rbp - 0x70]
test rdx, rdx
je 0x140068e90
mov r8, qword [rbp - 0x68]
lea rcx, [rbp + 0x170]
call fcn.1400123a0
nop
mov rdx, qword [rbp + 0xc8]
cmp rdx, 8
jb 0x140068ed2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xb0]
mov rax, rcx
cmp rdx, r13
jb 0x140068ecd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400693fc
call fcn.14009b510
mov qword [rbp + 0xc0], rbx
mov qword [rbp + 0xc8], rsi
mov word [rbp + 0xb0], bx
mov r8d, 0x20
lea rdx, [rbp + 0x170]
lea rcx, [rbp + 0xb0]
call fcn.14009de10
nop
lea rcx, [rbp + 0x48]
call fcn.140007410
nop
lea rax, vtable.std::ios_base.0
mov qword [rbp + 0x48], rax
lea rcx, [rbp + 0x48]
call fcn.14006eaa0
nop
lea rcx, [rbp + 0xf0]
call fcn.140012640
jmp 0x140068f51
lea rcx, str.Data_for_Help_file_can_not_be_loaded.
call fcn.1400acf68
lea rdx, str.Data_for_Help_file_can_not_be_loaded.
mov r8, rax
lea rcx, [rbp + 0xb0]
call fcn.1400123a0
nop
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x140068f95
mov rdx, qword [rbp - 0x78]
sub rdx, rcx
mov rax, rcx
cmp rdx, r13
jb 0x140068f83
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140069402
call fcn.14009b510
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x78], xmm0
mov qword [rbp - 0x78], rbx
mov rdx, qword [rbp + 0x168]
cmp rdx, 8
jb 0x140068fd7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x150]
mov rax, rcx
cmp rdx, r13
jb 0x140068fd2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140069408
call fcn.14009b510
lea r9, [rbp + 0xd0]
cmp qword [rbp + 0xe8], 8
cmovae r9, qword [rbp + 0xd0]
lea r8, [rbp + 0x110]
cmp qword [rbp + 0x128], 8
cmovae r8, qword [rbp + 0x110]
lea rdx, [rbp + 0x130]
cmp qword [rbp + 0x148], 8
cmovae rdx, qword [rbp + 0x130]
lea rax, [rbp + 0xb0]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x210]
mov qword [rsp + 0x20], rax
mov rcx, r14
call fcn.140069644
test r15, r15
je 0x140069057
or edx, 0xffffffff
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x14006909d
mov rdx, qword [rsp + 0x48]
sub rdx, rcx
mov rax, rcx
cmp rdx, r13
jb 0x14006908a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006940e
call fcn.14009b510
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x38], xmm0
mov qword [rsp + 0x48], rbx
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x1400690e3
mov rdx, qword [rsp + 0x60]
sub rdx, rcx
mov rax, rcx
cmp rdx, r13
jb 0x1400690d0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140069414
call fcn.14009b510
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], rbx
lea rcx, [rsp + 0x68]
call fcn.14002ebd0
jmp 0x14006921a
mov edx, 1
lea rcx, [rbp - 0x50]
call fcn.140007500
nop
lea rdx, str.File_
lea rcx, [rbp - 0x40]
call fcn.14000bfc0
mov rcx, rax
lea rdx, [rbp + 0x130]
call fcn.14000bfa0
mov rcx, rax
lea rdx, str._can_not_be_created._n
call fcn.14000bfc0
mov rcx, rax
lea rdx, str.Please__check_that_another_instance_of_this_application_is_not_running
call fcn.14000bfc0
nop
mov qword [rbp + 0xf0], rbx
mov qword [rbp + 0x100], rbx
mov qword [rbp + 0x108], rsi
mov word [rbp + 0xf0], bx
mov dword [rsp + 0x30], 8
lea rdx, [rbp - 0x70]
lea rcx, [rbp - 0x38]
call fcn.14000b0f0
mov rdx, qword [rbp - 0x70]
test rdx, rdx
je 0x14006918a
mov r8, qword [rbp - 0x68]
lea rcx, [rbp + 0xf0]
call fcn.1400123a0
nop
mov rdx, qword [rbp + 0xc8]
cmp rdx, 8
jb 0x1400691cc
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xb0]
mov rax, rcx
cmp rdx, r13
jb 0x1400691c7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006941a
call fcn.14009b510
mov qword [rbp + 0xc0], rbx
mov qword [rbp + 0xc8], rsi
mov word [rbp + 0xb0], bx
mov r8d, 0x20
lea rdx, [rbp + 0xf0]
lea rcx, [rbp + 0xb0]
call fcn.14009de10
nop
lea rcx, [rbp + 0x48]
call fcn.140007410
nop
lea rax, vtable.std::ios_base.0
mov qword [rbp + 0x48], rax
lea rcx, [rbp + 0x48]
call fcn.14006eaa0
nop
lea rcx, [rbp + 0x1c0]
call fcn.14002e6d0
nop
mov rdx, qword [rbp + 0x148]
cmp rdx, 8
jb 0x14006926a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x130]
mov rax, rcx
cmp rdx, r13
jb 0x140069264
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140069420
call fcn.14009b510
nop
mov rdx, qword [rbp + 0xe8]
cmp rdx, 8
jb 0x1400692ac
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xd0]
mov rax, rcx
cmp rdx, r13
jb 0x1400692a7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140069426
call fcn.14009b510
mov qword [rbp + 0xe0], rbx
mov qword [rbp + 0xe8], rsi
mov word [rbp + 0xd0], bx
mov rdx, qword [rbp + 0x128]
cmp rdx, 8
jb 0x140069303
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x110]
mov rax, rcx
cmp rdx, r13
jb 0x1400692fe
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006942c
call fcn.14009b510
mov qword [rbp + 0x120], rbx
mov qword [rbp + 0x128], rsi
mov word [rbp + 0x110], bx
lea rcx, [rbp + 0x190]
call fcn.14002cf70
cmp qword [rbp + 0xc0], rbx
je 0x140069379
mov rdx, r14
lea rcx, [rbp + 0xf0]
call fcn.14006b630
cmp qword [rax + 0x18], 8
jb 0x140069346
mov rax, qword [rax]
lea rcx, [rbp + 0xb0]
cmp qword [rbp + 0xc8], 8
cmovae rcx, qword [rbp + 0xb0]
mov r8d, 0x1010
mov rdx, rax
call fcn.14006b5bc
lea rcx, [rbp + 0xf0]
call fcn.140012640
jmp 0x14006937e
mov ebx, 1
mov rdx, qword [rbp + 0xc8]
cmp rdx, 8
jb 0x1400693bd
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xb0]
mov rax, rcx
cmp rdx, r13
jb 0x1400693b7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400693f6
call fcn.14009b510
nop
lea rcx, [rbp + 0x210]
call fcn.140030070
mov eax, ebx
mov rcx, qword [rbp + 0x7c0]
xor rcx, rsp
call fcn.14009b5b0
lea r11, [rsp + 0x8d0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop rdi
pop rbp
ret
call fcn.1400ac408
nop
call fcn.1400ac408
nop
call fcn.1400ac408
nop
call fcn.1400ac408
nop
call fcn.1400ac408
nop
call fcn.1400ac408
nop
call fcn.1400ac408
nop
call fcn.1400ac408
nop
call fcn.1400ac408
nop
call fcn.1400ac408
int3