Function at 0x1400089fc
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r12
push r13
push r15
sub rsp, 0x4a0
mov rax, qword [0x14006bbc0]
xor rax, rsp
mov qword [rsp + 0x490], rax
mov ebx, dword [rcx + 7]
xor r15d, r15d
mov rdi, rcx
lea r12, [rbx + rcx + 0x16]
lea eax, [rbx + 1]
mov ebp, r15d
mov r13b, byte [r12]
lea rdx, [rax + rcx + 0x16]
mov dword [rsp + 0x30], r15d
cmp r13b, r15b
lea rcx, [rsp + 0x30]
jle 0x140008a62
lea r8d, [r15 + 2]
call fcn.140025900
lea esi, [r15 + 3]
jmp 0x140008a72
mov r8d, 4
call fcn.140025900
mov esi, 5
mov eax, dword [rsp + 0x30]
movsx r9d, r13b
mov qword [rsp + 0x40], r12
lea ecx, [rsi + rax]
mov qword [rsp + 0x38], r15
mov r12d, 0x24
mov dword [rsp + 0x48], ecx
mov ecx, r9d
sub ecx, 0xe
je 0x140008eb6
sub ecx, 1
je 0x140008ea9
sub ecx, 1
je 0x140008d9f
sub ecx, 1
je 0x140008b6b
cmp ecx, 2
je 0x140008b5b
mov rax, qword [0x14006e308]
cmp word [rax + 0x1aa415], r15w
je 0x140008b33
lea r8, str._r_n___COMMAND_UNBEKANNT:__x_____r_n
lea rcx, [rsp + 0x90]
mov edx, 0x200
call fcn.1400253f4
mov rcx, qword [0x140097028]
lea r9d, [r12 - 0x22]
xor r8d, r8d
xor edx, edx
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
lea rcx, [rsp + 0x90]
call fcn.140025290
mov rcx, qword [0x140097028]
lea r9, [0x14006e304]
lea rdx, [rsp + 0x90]
mov r8, rax
mov qword [rsp + 0x20], r15
call qword [sym.imp.KERNEL32.dll_WriteFile]
xor r8d, r8d
xor r9d, r9d
mov edx, 0xc000100e
lea ecx, [r8 + 2]
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r15
call fcn.140002ac0
mov ebp, 0xffffffdb
jmp 0x140008ec3
lea edx, [rsi + rbx]
mov rcx, rdi
call fcn.140007e7c
jmp 0x140008ec1
mov rax, qword [0x14006e308]
cmp word [rax + 0x1aa415], r15w
je 0x140008bde
lea r8, str._r_n___COMMAND_OUTPUT_RESET____r_n
lea rcx, [rsp + 0x90]
mov edx, 0x200
call fcn.1400253f4
mov rcx, qword [0x140097028]
mov r9d, 2
xor r8d, r8d
xor edx, edx
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
lea rcx, [rsp + 0x90]
call fcn.140025290
mov rcx, qword [0x140097028]
lea r9, [0x14006e304]
lea rdx, [rsp + 0x90]
mov r8, rax
mov qword [rsp + 0x20], r15
call qword [sym.imp.KERNEL32.dll_WriteFile]
lea eax, [rsi + rbx]
mov ebx, r15d
lea r13, [rax + rdi + 0x16]
lea rax, [0x14006f25c]
movsxd rcx, ebx
mov rdx, r13
imul rcx, rcx, 0x22c
add rcx, rax
call fcn.1400257cc
cmp eax, r15d
je 0x140008c16
inc ebx
cmp ebx, 0x10
jl 0x140008be9
jmp 0x140008cd9
movsxd rsi, ebx
lea rax, [0x14006f45e]
mov edx, r15d
mov r12d, 0x10
lea r8, [0x140071520]
mov dword [0x14006e2c0], edx
imul rsi, rsi, 0x22c
add rsi, rax
movsx rax, word [rsi]
cmp eax, 0xffffffff
je 0x140008ca4
mov rcx, rax
imul rcx, rcx, 0x2098
mov rax, qword [rcx + r8 + 4]
mov r9d, dword [rax + 0x14]
mov rax, qword [rcx + r8 + 0x8c]
cmp rax, r15
je 0x140008ca4
cmp r9d, r15d
je 0x140008ca4
inc edx
mov ecx, r9d
mov dword [0x14006e2c0], edx
mov r8d, dword [r13 + 0x200]
mov edx, 1
call qword [rax + 0x20]
mov edx, dword [0x14006e2c0]
lea r8, [0x140071520]
mov ebp, eax
cmp eax, r15d
je 0x140008ca4
dec edx
mov dword [0x14006e2c0], edx
add rsi, 2
sub r12, 1
jne 0x140008c40
mov r12d, 0x24
lea rcx, [rsp + 0x60]
lea rdx, [rsp + 0x38]
mov r8, r12
call fcn.140025900
lea rdx, [rsp + 0x60]
xor r9d, r9d
xor r8d, r8d
mov rcx, rdi
call fcn.140002278
cmp ebx, 0x10
jne 0x140008ec3
lea rcx, [rsp + 0x290]
mov rdx, r13
lea ebp, [rbx - 0x3d]
call fcn.140001a50
mov r11, qword [0x14006e308]
cmp word [r11 + 0x1aa415], r15w
je 0x140008d6e
lea r9, [rsp + 0x290]
lea r8, str._r_n___OUTPUT_RESET:_Settingfile_wurde_nicht_gefunden:__s____r_n
lea rcx, [rsp + 0x90]
mov edx, 0x200
call fcn.1400253f4
mov rcx, qword [0x140097028]
lea r9d, [rbx - 0xe]
xor r8d, r8d
xor edx, edx
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
lea rcx, [rsp + 0x90]
call fcn.140025290
mov rcx, qword [0x140097028]
lea r9, [0x14006e304]
lea rdx, [rsp + 0x90]
mov r8, rax
mov qword [rsp + 0x20], r15
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov ecx, 1
lea rax, [rsp + 0x290]
lea r9, str.OUTPUT_RESET
lea r8d, [rcx + 1]
mov edx, 0xc0001001
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], rax
call fcn.140002ac0
jmp 0x140008ec3
mov rax, qword [0x14006e308]
cmp word [rax + 0x1aa415], r15w
je 0x140008e12
lea r8, str._r_n___COMMAND_SYNCHRINIZE____r_n
lea rcx, [rsp + 0x90]
mov edx, 0x200
call fcn.1400253f4
mov rcx, qword [0x140097028]
mov r9d, 2
xor r8d, r8d
xor edx, edx
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
lea rcx, [rsp + 0x90]
call fcn.140025290
mov rcx, qword [0x140097028]
lea r9, [0x14006e304]
lea rdx, [rsp + 0x90]
mov r8, rax
mov qword [rsp + 0x20], r15
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov ecx, r15d
lea rbx, [0x1400715ac]
mov dword [0x14006e2c0], ecx
cmp word [rbx - 0x8a], r15w
je 0x140008e6f
mov r10, qword [rbx]
mov rax, qword [rbx - 0x88]
mov r9d, dword [rax + 0x14]
cmp r10, r15
je 0x140008e6f
cmp r9d, r15d
je 0x140008e6f
inc ecx
lea r8, [rsp + 0x38]
xor edx, edx
mov dword [0x14006e2c0], ecx
mov ecx, r9d
call qword [r10 + 0x10]
mov ecx, dword [0x14006e2c0]
mov ebp, eax
cmp eax, r15d
je 0x140008e6f
dec ecx
mov dword [0x14006e2c0], ecx
lea rax, [0x140091f2c]
add rbx, 0x2098
cmp rbx, rax
jl 0x140008e22
lea rcx, [rsp + 0x60]
lea rdx, [rsp + 0x38]
mov r8, r12
call fcn.140025900
lea rdx, [rsp + 0x60]
xor r9d, r9d
xor r8d, r8d
mov rcx, rdi
call fcn.140002278
jmp 0x140008ec3
lea edx, [rsi + rbx]
mov rcx, rdi
call fcn.140004070
jmp 0x140008ec1
lea edx, [rsi + rbx]
mov rcx, rdi
call fcn.140006c24
mov ebp, eax
lea rcx, [rsp + 0x60]
lea rdx, [rsp + 0x38]
mov r8, r12
mov dword [0x14006e2c0], r15d
call fcn.140025900
xor r9d, r9d
lea rdx, [rsp + 0x60]
lea r8d, [r9 + 1]
mov rcx, rdi
call fcn.140002278
mov eax, ebp
mov rcx, qword [rsp + 0x490]
xor rcx, rsp
call fcn.140025570
lea r11, [rsp + 0x4a0]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r13
pop r12
pop rdi
pop rsi
ret