Function at 0x14000b730
Capabilities:
Clear file content
Write file on windows

Disassembly:
push rsi
sub rsp, 0x280
mov rax, qword [0x140031008]
xor rax, rsp
mov qword [rsp + 0x260], rax
mov rsi, rcx
test rcx, rcx
jne 0x14000b7bf
mov qword [rsp + 0x30], rcx
lea r8d, [rcx + 1]
mov dword [rsp + 0x28], 0x80
lea rcx, [rsp + 0x50]
xor r9d, r9d
mov dword [rsp + 0x20], 4
mov edx, 0xc0000000
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rsi, rax
cmp rax, 0xffffffffffffffff
jne 0x14000b796
xor ecx, ecx
call fcn.140001440
xor eax, eax
jmp 0x14000b9de
lea r9, [rsp + 0x44]
mov word [rsp + 0x40], 0xfeff
mov r8d, 2
mov qword [rsp + 0x20], 0
lea rdx, [rsp + 0x40]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov qword [rsp + 0x298], rbx
lea rdx, str.Skin
mov qword [rsp + 0x2a0], rbp
mov rcx, rsi
mov qword [rsp + 0x278], rdi
mov qword [rsp + 0x270], r15
mov r15, 0xffffffffffffffff
mov r8d, r15d
call fcn.140007aa0
lea rbx, [0x1400339a0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [rax*2 + 2]
movsxd rcx, eax
mov eax, 2
mul rcx
cmovo rax, r15
mov rcx, rax
call fcn.140013bc8
mov rcx, rbx
mov rbp, rax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor edx, edx
mov rcx, rbp
movsxd r8, eax
test eax, eax
js 0x14000b867
nop
movzx eax, word [rbx + rdx*2]
mov word [rcx], ax
test ax, ax
je 0x14000b867
cmp ax, 0x5b
jne 0x14000b85b
add rcx, 2
mov word [rcx], 0x5c
add rcx, 2
inc rdx
cmp rdx, r8
jle 0x14000b840
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea rcx, str.Name
mov edi, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea rcx, str._s_s_r_n
add edi, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea ecx, [rax + 1]
mov eax, 2
add ecx, edi
movsxd r9, ecx
mul r9
cmovo rax, r15
mov rcx, rax
call fcn.140013bc8
mov r9, rbp
lea r8, str.Name
lea rdx, str._s_s_r_n
mov rcx, rax
mov rbx, rax
call qword [sym.imp.USER32.dll_wsprintfW]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r9, [rsp + 0x40]
mov qword [rsp + 0x20], 0
add eax, eax
mov rdx, rbx
mov r8d, eax
mov dword [rsp + 0x40], eax
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, rbx
call fcn.140013bc0
mov rcx, rbp
call fcn.140013bc0
mov rcx, rsi
call fcn.14000ba00
mov r8d, r15d
lea rdx, str.Window
mov rcx, rsi
call fcn.140007aa0
lea rdx, [0x140036920]
mov rcx, rsi
call fcn.14000c2a0
xor ebx, ebx
cmp dword [0x140036948], ebx
jl 0x14000b9a7
lea rbp, [0x140036be0]
nop dword [rax]
mov rcx, rsi
test ebx, ebx
jne 0x14000b95b
mov r8d, r15d
lea rdx, str.PageDefault
call fcn.140007aa0
mov rdx, rbp
jmp 0x14000b995
lea edi, [rbx - 1]
mov r8d, edi
lea rdx, str.Page_03u
call fcn.140007aa0
test edi, edi
js 0x14000b993
cmp edi, dword [0x140036948]
jge 0x14000b993
mov rdx, qword [0x140039a88]
movsxd rax, edi
add rdx, 0x6c
imul rcx, rax, 0x168
add rdx, rcx
jmp 0x14000b995
xor edx, edx
mov rcx, rsi
call fcn.14000c630
inc ebx
cmp ebx, dword [0x140036948]
jle 0x14000b940
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r15, qword [rsp + 0x270]
mov eax, 1
mov rdi, qword [rsp + 0x278]
mov rbp, qword [rsp + 0x2a0]
mov rbx, qword [rsp + 0x298]
mov rcx, qword [rsp + 0x260]
xor rcx, rsp
call fcn.140013ba0
add rsp, 0x280
pop rsi
ret