Function at 0x14000e690
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x6c0
mov rax, qword [0x1400b8080]
xor rax, rsp
mov qword [rsp + 0x6b0], rax
mov r13d, dword [rsp + 0x720]
mov r12d, r9d
mov r14, r8
mov ebp, edx
mov rdi, rcx
cmp r13d, 3
je 0x14000eab3
lea eax, [r13 - 1]
cmp eax, 1
ja 0x14000ec3a
xor esi, esi
cmp dword [rcx + 8], 0xffffffff
je 0x14000e72f
mov r15, qword [rcx]
test r15, r15
je 0x14000e72f
mov rbx, qword [r15 + 0x80]
test rbx, rbx
je 0x14000e72f
mov rcx, qword [rbx]
test rcx, rcx
je 0x14000e70c
call fcn.140069a8c
mov qword [rbx], rsi
cmp dword [rbx + 0x64], esi
je 0x14000e71d
lea rcx, [rbx + 8]
call fcn.14000c000
mov rcx, rbx
mov dword [rbx + 0x64], esi
call fcn.140069a8c
mov qword [r15 + 0x80], rsi
mov rbx, qword [rdi]
mov dword [rdi + 8], 0xffffffff
cmp ebp, dword [rbx + 8]
jge 0x14000ec3a
cmp ebp, dword [rbx + 0x14]
jge 0x14000e776
test rbx, rbx
je 0x14000e776
mov eax, dword [rbx + 0x28]
lea r8, [rbx + 0x7c]
lea rdx, [rbx + 0x2c]
mov dword [rbx + 0x18], eax
xor r9d, r9d
mov dword [rbx + 0x14], esi
mov rcx, rbx
mov dword [rsp + 0x20], esi
call fcn.14000ceb0
mov ecx, esi
test eax, eax
sete cl
mov dword [rbx + 0x1c], ecx
mov rbx, qword [rdi]
cmp dword [rbx + 0x14], ebp
jge 0x14000e7d1
nop
test rbx, rbx
je 0x14000e7c9
cmp dword [rbx + 0x1c], esi
je 0x14000e7c9
mov edx, dword [rbx + 0x14]
inc edx
cmp edx, dword [rbx + 8]
je 0x14000e7c9
mov ecx, dword [rbx + 0x54]
lea r8, [rbx + 0x7c]
add ecx, dword [rbx + 0x50]
xor r9d, r9d
mov eax, dword [rbx + 0x4c]
add eax, 0x2e
mov dword [rbx + 0x14], edx
add ecx, eax
mov dword [rsp + 0x20], esi
add dword [rbx + 0x18], ecx
lea rdx, [rbx + 0x2c]
mov rcx, rbx
call fcn.14000ceb0
mov ecx, esi
test eax, eax
sete cl
mov dword [rbx + 0x1c], ecx
mov rbx, qword [rdi]
cmp dword [rbx + 0x14], ebp
jl 0x14000e780
lea r8, [rsp + 0x60]
mov edx, ebp
mov rcx, rdi
call fcn.14000ddc0
test byte [rsp + 0x26c], 0x10
je 0x14000e84c
cmp r13d, 1
je 0x14000e81f
movzx eax, word [r14]
cmp ax, 0x2f
je 0x14000e814
cmp ax, 0x5c
je 0x14000e814
test ax, ax
je 0x14000e80d
cmp word [r14 + 2], 0x3a
je 0x14000e814
lea rsi, [rdi + 0x250]
mov rdx, r14
mov rcx, rsi
call fcn.14000e520
xor eax, eax
mov rcx, qword [rsp + 0x6b0]
xor rcx, rsp
call fcn.140061510
mov rbx, qword [rsp + 0x708]
add rsp, 0x6c0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
cmp r13d, 1
je 0x14000e995
movzx ecx, word [r14]
mov r9, r14
mov rax, r14
test cx, cx
je 0x14000e886
cmp cx, 0x2f
je 0x14000e877
cmp cx, 0x5c
je 0x14000e877
add rax, 2
jmp 0x14000e87e
lea r9, [rax + 2]
mov rax, r9
movzx ecx, word [rax]
test cx, cx
jne 0x14000e865
lea rdx, [rsp + 0x290]
mov rcx, r14
sub rdx, r14
nop dword [rax]
nop dword [rax + rax]
movzx eax, word [rcx]
mov word [rdx + rcx], ax
lea rcx, [rcx + 2]
test ax, ax
jne 0x14000e8a0
cmp r9, r14
jne 0x14000e8bf
mov word [rsp + 0x290], si
jmp 0x14000e903
mov rax, r9
sub rax, r14
sar rax, 1
add rax, rax
cmp rax, 0x208
jae 0x14000ec5a
mov word [rsp + rax + 0x290], si
movzx eax, word [rsp + 0x290]
cmp ax, 0x2f
je 0x14000e931
cmp ax, 0x5c
je 0x14000e931
test ax, ax
je 0x14000e903
cmp word [rsp + 0x292], 0x3a
je 0x14000e931
mov qword [rsp + 0x20], r9
lea rbx, [rdi + 0x250]
mov r8, rbx
lea r9, [rsp + 0x290]
lea rdx, str._s_s_s
lea rcx, [rsp + 0x4a0]
call qword [sym.imp.USER32.dll_wsprintfW]
jmp 0x14000e951
lea r8, [rsp + 0x290]
lea rdx, str._s_s
lea rcx, [rsp + 0x4a0]
call qword [sym.imp.USER32.dll_wsprintfW]
mov rbx, rsi
lea rdx, [rsp + 0x290]
mov rcx, rbx
call fcn.14000e520
mov eax, dword [rsp + 0x26c]
lea rcx, [rsp + 0x4a0]
mov qword [rsp + 0x30], rsi
xor r9d, r9d
mov dword [rsp + 0x28], eax
xor r8d, r8d
mov edx, 0x40000000
mov dword [rsp + 0x20], 2
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r14, rax
cmp r14, 0xffffffffffffffff
jne 0x14000e9a5
mov eax, 0x200
jmp 0x14000e821
mov rdx, qword [rdi + 0x240]
mov rcx, qword [rdi]
call fcn.14000d810
cmp qword [rdi + 0x248], rsi
jne 0x14000e9ce
mov ecx, 0x4000
call fcn.140061a7c
mov qword [rdi + 0x248], rax
mov ebp, esi
mov rdx, qword [rdi + 0x248]
lea r9, [rsp + 0x50]
mov rcx, qword [rdi]
mov r8d, 0x4000
call fcn.14000da50
mov ebx, eax
cmp eax, 0xffffff96
je 0x14000ea54
test eax, eax
js 0x14000ea23
jle 0x14000ea18
mov rdx, qword [rdi + 0x248]
lea r9, [rsp + 0x54]
mov r8d, eax
mov qword [rsp + 0x20], rsi
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x14000ea2a
cmp byte [rsp + 0x50], sil
jne 0x14000ea31
test ebx, ebx
jne 0x14000e9d0
mov ebp, 0x5000000
jmp 0x14000ea59
mov ebp, 0x400
jmp 0x14000ea59
lea r9, [rsp + 0x280]
mov rcx, r14
lea r8, [rsp + 0x270]
lea rdx, [rsp + 0x278]
call qword [sym.imp.KERNEL32.dll_SetFileTime]
jmp 0x14000ea59
mov ebp, 0x1000
cmp r13d, 1
je 0x14000ea68
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rdi, qword [rdi]
test rdi, rdi
je 0x14000eaac
mov rbx, qword [rdi + 0x80]
test rbx, rbx
je 0x14000eaac
mov rcx, qword [rbx]
test rcx, rcx
je 0x14000ea89
call fcn.140069a8c
mov qword [rbx], rsi
cmp dword [rbx + 0x64], esi
je 0x14000ea9a
lea rcx, [rbx + 8]
call fcn.14000c000
mov rcx, rbx
mov dword [rbx + 0x64], esi
call fcn.140069a8c
mov qword [rdi + 0x80], rsi
mov eax, ebp
jmp 0x14000e821
mov eax, dword [rcx + 8]
xor esi, esi
cmp ebp, eax
je 0x14000ebbb
cmp eax, 0xffffffff
je 0x14000eb09
mov r15, qword [rcx]
test r15, r15
je 0x14000eb09
mov rbx, qword [r15 + 0x80]
test rbx, rbx
je 0x14000eb09
mov rcx, qword [rbx]
test rcx, rcx
je 0x14000eae6
call fcn.140069a8c
mov qword [rbx], rsi
cmp dword [rbx + 0x64], esi
je 0x14000eaf7
lea rcx, [rbx + 8]
call fcn.14000c000
mov rcx, rbx
mov dword [rbx + 0x64], esi
call fcn.140069a8c
mov qword [r15 + 0x80], rsi
mov rbx, qword [rdi]
mov dword [rdi + 8], 0xffffffff
cmp ebp, dword [rbx + 8]
jge 0x14000ec3a
cmp ebp, dword [rbx + 0x14]
jge 0x14000eb50
test rbx, rbx
je 0x14000eb50
mov eax, dword [rbx + 0x28]
lea r8, [rbx + 0x7c]
lea rdx, [rbx + 0x2c]
mov dword [rbx + 0x18], eax
xor r9d, r9d
mov dword [rbx + 0x14], esi
mov rcx, rbx
mov dword [rsp + 0x20], esi
call fcn.14000ceb0
mov ecx, esi
test eax, eax
sete cl
mov dword [rbx + 0x1c], ecx
mov rbx, qword [rdi]
cmp dword [rbx + 0x14], ebp
jge 0x14000eba9
test rbx, rbx
je 0x14000eba1
cmp dword [rbx + 0x1c], esi
je 0x14000eba1
mov edx, dword [rbx + 0x14]
inc edx
cmp edx, dword [rbx + 8]
je 0x14000eba1
mov ecx, dword [rbx + 0x54]
lea r8, [rbx + 0x7c]
add ecx, dword [rbx + 0x50]
xor r9d, r9d
mov eax, dword [rbx + 0x4c]
add eax, 0x2e
mov dword [rbx + 0x14], edx
add ecx, eax
mov dword [rsp + 0x20], esi
add dword [rbx + 0x18], ecx
lea rdx, [rbx + 0x2c]
mov rcx, rbx
call fcn.14000ceb0
mov ecx, esi
test eax, eax
sete cl
mov dword [rbx + 0x1c], ecx
mov rbx, qword [rdi]
cmp dword [rbx + 0x14], ebp
jl 0x14000eb58
mov rdx, qword [rdi + 0x240]
mov rcx, rbx
call fcn.14000d810
mov dword [rdi + 8], ebp
mov rcx, qword [rdi]
lea r9, [rsp + 0x50]
mov r8d, r12d
mov rdx, r14
call fcn.14000da50
mov r14d, eax
test eax, eax
jg 0x14000ec20
mov rbp, qword [rdi]
test rbp, rbp
je 0x14000ec19
mov rbx, qword [rbp + 0x80]
test rbx, rbx
je 0x14000ec19
mov rcx, qword [rbx]
test rcx, rcx
je 0x14000ebf6
call fcn.140069a8c
mov qword [rbx], rsi
cmp dword [rbx + 0x64], esi
je 0x14000ec07
lea rcx, [rbx + 8]
call fcn.14000c000
mov rcx, rbx
mov dword [rbx + 0x64], esi
call fcn.140069a8c
mov qword [rbp + 0x80], rsi
mov dword [rdi + 8], 0xffffffff
cmp byte [rsp + 0x50], sil
jne 0x14000e81f
test r14d, r14d
jle 0x14000ec44
mov eax, 0x600
jmp 0x14000e821
mov eax, 0x10000
jmp 0x14000e821
cmp r14d, 0xffffff96
mov eax, 0x5000000
mov ebp, 0x1000
cmove eax, ebp
jmp 0x14000e821
call fcn.1400618e8
int3