Function at 0x1000139b8
Capabilities:
Write file on windows

Disassembly:
mov r11, rsp
mov dword [r11 + 0x20], r9d
mov dword [r11 + 0x18], r8d
mov qword [r11 + 0x10], rdx
mov qword [r11 + 8], rcx
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x80
mov qword [rsp + 0x70], 0xfffffffffffffffe
mov eax, r9d
mov r12, rcx
xor esi, esi
mov dword [r11 + 0x18], esi
lea r13, [0x100002768]
mov qword [r11 + 0x10], r13
mov edi, 0x8000ffff
cmp word [0x100002768], si
je 0x100014c25
cmp eax, esi
jne 0x100013a1c
cmp dword [rcx + 0x60], esi
je 0x100014c25
mov qword [rsp + 0x68], rsi
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea ebx, [rax + 0xa]
mov eax, 2
mul rbx
mov r15, 0xffffffffffffffff
cmovo rax, r15
mov rcx, rax
call fcn.10001df34
mov r14, rax
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x68], rax
cmp rax, rsi
jne 0x100013a68
mov edi, 0x8007000e
lea r13d, [r15 + 2]
jmp 0x100013d0f
mov r8, r13
mov rdx, rbx
mov rcx, rax
call fcn.1000088c8
mov edi, eax
cmp eax, esi
jl 0x100013d09
lea r8, [0x100002a50]
mov rdx, rbx
mov rcx, r14
call fcn.100008820
mov edi, eax
cmp eax, esi
jl 0x100013d09
mov rdx, r14
mov rcx, r12
call fcn.100011a94
mov edi, eax
cmp eax, esi
jl 0x100013d09
mov edi, 0x80004005
mov dword [rsp + 0x4c], esi
lea rcx, [0x100002a64]
call qword [sym.imp.KERNEL32.dll_lstrlenA]
mov ebx, eax
mov qword [rsp + 0x20], rsi
lea r9, [rsp + 0x4c]
mov r8d, eax
lea rdx, [0x100002a64]
mov rcx, qword [r12 + 0x78]
call qword [sym.imp.KERNEL32.dll_WriteFile]
cmp eax, esi
je 0x100013d01
cmp ebx, dword [rsp + 0x4c]
jne 0x100013d01
mov edi, esi
lea r15, [0x100002a18]
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x40], rsi
lea rcx, [rsp + 0x38]
call fcn.100016d40
xor edx, edx
lea rcx, [rsp + 0x38]
call fcn.100016e18
lea rdx, [0x100002910]
lea rcx, [rsp + 0x38]
call fcn.100016e18
xor edx, edx
lea rcx, [rsp + 0x38]
call fcn.100016e18
lea rdx, [0x100002968]
lea rcx, [rsp + 0x38]
call fcn.100016e18
mov rdx, r13
lea rcx, [rsp + 0x38]
call fcn.100016e18
xor edx, edx
lea rcx, [rsp + 0x38]
call fcn.100016e18
lea rdx, [0x100002988]
lea rcx, [rsp + 0x38]
call fcn.100016e18
xor edx, edx
lea rcx, [rsp + 0x38]
call fcn.100016e18
lea rdx, [0x100002a70]
lea rcx, [rsp + 0x38]
call fcn.100016e18
xor edx, edx
lea rcx, [rsp + 0x38]
call fcn.100016e18
lea rcx, [rsp + 0x38]
call fcn.100016da4
nop
xor edx, edx
lea rcx, [rsp + 0x38]
call fcn.100016f98
lea rdx, [0x100002288]
lea rcx, [rsp + 0x38]
call fcn.100016f98
lea rdx, [0x1000022b8]
lea rcx, [rsp + 0x38]
call fcn.100016f98
mov rdx, r13
lea rcx, [rsp + 0x38]
call fcn.100016f98
xor edx, edx
lea rcx, [rsp + 0x38]
call fcn.100016f98
lea rdx, [0x1000022a0]
lea rcx, [rsp + 0x38]
call fcn.100016f98
mov rdx, r13
lea rcx, [rsp + 0x38]
call fcn.100016f98
lea rdx, [0x100002a04]
lea rcx, [rsp + 0x38]
call fcn.100016f98
xor edx, edx
lea rcx, [rsp + 0x38]
call fcn.100016f98
xor edx, edx
lea rcx, [rsp + 0x38]
call fcn.100016f98
lea rdx, [0x100002250]
lea rcx, [rsp + 0x38]
call fcn.100016f98
mov ebx, esi
mov r13d, 1
cmp ebx, dword [r12 + 0x6c]
jae 0x100013c95
mov eax, ebx
mov edx, dword [r12 + rax*4 + 0x64]
mov rcx, r12
call fcn.1000133b4
mov r14, rax
cmp rax, rsi
je 0x100013c8b
mov rdx, rax
lea rcx, [rsp + 0x38]
call fcn.100016f98
mov rcx, r14
call sub.msvcrt.dll_free
jmp 0x100013c90
mov edi, 0x8007000e
add ebx, r13d
jmp 0x100013c56
xor edx, edx
lea rcx, [rsp + 0x38]
call fcn.100016f98
nop
jmp 0x100013cc7
cmp edi, esi
jl 0x100013cef
mov rdx, qword [rsp + 0x40]
mov rcx, r12
call fcn.1000119e8
mov edi, eax
cmp eax, esi
jl 0x100013cef
invalid
xchg esp, eax
and al, 0xd0