Function at 0x1400067b0
Capabilities:
Write file on windows

Disassembly:
push rbx
push rdi
push r15
sub rsp, 0x20
mov rax, qword [rcx + 0xa8]
mov rbx, rcx
test rax, rax
je 0x140006800
cmp byte [rcx + 1], 0
je 0x140006800
mov byte [rax], 0
mov rdi, qword [rcx + 0xa8]
test rdi, rdi
je 0x140006800
mov rcx, rdi
call fcn.14001e7b0
mov rax, qword [0x140037a70]
test rax, rax
je 0x1400067f7
dec dword [rax + 0x3bc]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
xor r15d, r15d
mov qword [rbx + 0xa8], r15
cmp byte [rbx], r15b
je 0x140006ec4
mov qword [rsp + 0x48], rbp
mov qword [rsp + 0x50], rsi
cmp byte [rbx + 0x3031], r15b
je 0x140006894
mov rsi, qword [rbx + 0x20]
test rsi, rsi
je 0x140006894
mov rdi, qword [0x140037a70]
lea rcx, [rsp + 0x40]
mov qword [0x140037a70], rbx
mov dword [rbx + 0x3034], r15d
mov qword [rsp + 0x40], r15
call fcn.140012290
lea rdx, [0x14002c86c]
mov rcx, rsi
mov rbp, rax
call fcn.140002a20
mov rsi, rax
test rax, rax
je 0x14000688b
mov r8, qword [rsp + 0x40]
lea edx, [r15 + 1]
mov r9, rax
mov rcx, rbp
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov qword [0x140037a70], rdi
jmp 0x14000689b
mov rdi, qword [0x140037a70]
mov ebp, r15d
cmp dword [rbx + 0x1a38], r15d
jle 0x1400069dd
mov qword [rsp + 0x58], r14
mov r14, r15
nop dword [rax]
nop word [rax + rax]
mov rax, qword [rbx + 0x1a40]
mov rsi, qword [r14 + rax]
test rsi, rsi
je 0x1400069c6
mov rcx, qword [rsi]
test rcx, rcx
je 0x1400068ed
test rdi, rdi
je 0x1400068e7
dec dword [rdi + 0x3bc]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov edi, r15d
cmp dword [rsi + 0x2b8], r15d
je 0x140006920
nop dword [rax]
movsxd rax, edi
imul rcx, rax, 0x88
add rcx, qword [rsi + 0x2c0]
call fcn.1400040c0
inc edi
cmp edi, dword [rsi + 0x2b8]
jne 0x140006900
lea rcx, [rsi + 0x2d8]
call fcn.140001010
mov rcx, qword [rsi + 0x2c0]
test rcx, rcx
je 0x140006950
mov rax, qword [0x140037a70]
test rax, rax
je 0x14000694a
dec dword [rax + 0x3bc]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [rsi + 0x2b0]
test rcx, rcx
je 0x140006974
mov rax, qword [0x140037a70]
test rax, rax
je 0x14000696e
dec dword [rax + 0x3bc]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
lea rcx, [rsi + 0xd8]
call fcn.140003ff0
mov rcx, qword [rsi + 0xd0]
test rcx, rcx
je 0x1400069a4
mov rax, qword [0x140037a70]
test rax, rax
je 0x14000699e
dec dword [rax + 0x3bc]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rax, qword [0x140037a70]
test rax, rax
je 0x1400069b6
dec dword [rax + 0x3bc]
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rdi, qword [0x140037a70]
inc ebp
add r14, 8
cmp ebp, dword [rbx + 0x1a38]
jl 0x1400068c0
mov r14, qword [rsp + 0x58]
mov rcx, qword [rbx + 0x1a40]
mov rsi, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x48]
test rcx, rcx
je 0x140006a19
mov qword [rbx + 0x1a38], r15
test rdi, rdi
je 0x140006a05
dec dword [rdi + 0x3bc]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rdi, qword [0x140037a70]
mov qword [rbx + 0x1a40], r15
mov rcx, qword [rbx + 0x1a50]
test rcx, rcx
je 0x140006a4b
mov qword [rbx + 0x1a48], r15
test rdi, rdi
je 0x140006a37
dec dword [rdi + 0x3bc]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rdi, qword [0x140037a70]
mov qword [rbx + 0x1a50], r15
mov rcx, qword [rbx + 0x1a60]
test rcx, rcx
je 0x140006a7d
mov qword [rbx + 0x1a58], r15
test rdi, rdi
je 0x140006a69
dec dword [rdi + 0x3bc]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rdi, qword [0x140037a70]
mov qword [rbx + 0x1a60], r15
mov qword [rbx + 0x1a90], r15
mov rcx, qword [rbx + 0x1a70]
test rcx, rcx
je 0x140006ab6
mov qword [rbx + 0x1a68], r15
test rdi, rdi
je 0x140006aa2
dec dword [rdi + 0x3bc]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rdi, qword [0x140037a70]
mov qword [rbx + 0x1a70], r15
mov rcx, qword [rbx + 0x1a80]
test rcx, rcx
je 0x140006ae8
mov qword [rbx + 0x1a78], r15
test rdi, rdi
je 0x140006ad4
dec dword [rdi + 0x3bc]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rdi, qword [0x140037a70]
mov qword [rbx + 0x1a80], r15
mov qword [rbx + 0x1c10], r15
mov qword [rbx + 0x1aa8], r15
mov qword [rbx + 0x1aa0], r15
mov qword [rbx + 0x1a98], r15
mov qword [rbx + 0x1b28], r15
mov qword [rbx + 0x1b10], r15
mov qword [rbx + 0x1ab0], r15
mov rcx, qword [rbx + 0x1bc8]
test rcx, rcx
je 0x140006b4b
mov qword [rbx + 0x1bc0], r15
test rdi, rdi
je 0x140006b37
dec dword [rdi + 0x3bc]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rdi, qword [0x140037a70]
mov qword [rbx + 0x1bc8], r15
mov rcx, qword [rbx + 0x1bd8]
test rcx, rcx
je 0x140006b7d
mov qword [rbx + 0x1bd0], r15
test rdi, rdi
je 0x140006b69
dec dword [rdi + 0x3bc]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rdi, qword [0x140037a70]
mov qword [rbx + 0x1bd8], r15
mov rcx, qword [rbx + 0x1be8]
test rcx, rcx
je 0x140006baf
mov qword [rbx + 0x1be0], r15
test rdi, rdi
je 0x140006b9b
dec dword [rdi + 0x3bc]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rdi, qword [0x140037a70]
mov qword [rbx + 0x1be8], r15
mov rcx, qword [rbx + 0x1bf8]
test rcx, rcx
je 0x140006be1
mov qword [rbx + 0x1bf0], r15
test rdi, rdi
je 0x140006bcd
dec dword [rdi + 0x3bc]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rdi, qword [0x140037a70]
mov qword [rbx + 0x1bf8], r15
mov rcx, qword [rbx + 0x1c08]
test rcx, rcx
je 0x140006c13
mov qword [rbx + 0x1c00], r15
test rdi, rdi
je 0x140006bff
dec dword [rdi + 0x3bc]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rdi, qword [0x140037a70]
mov qword [rbx + 0x1c08], r15
mov rcx, qword [rbx + 0x1dd0]
test rcx, rcx
je 0x140006c45
mov qword [rbx + 0x1dc8], r15
test rdi, rdi
je 0x140006c31
dec dword [rdi + 0x3bc]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rdi, qword [0x140037a70]
mov qword [rbx + 0x1dd0], r15
cmp qword [rbx + 0x1de0], r15
je 0x140006c79
mov qword [rbx + 0x1dd8], r15
mov rcx, qword [rbx + 0x1de0]
test rcx, rcx
je 0x140006c6c
test rdi, rdi
je 0x140006c6c
dec dword [rdi + 0x3bc]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rbx + 0x1de0], r15
lea rcx, [rbx + 0x1df0]
call fcn.14001b3b0
lea rcx, [rbx + 0x1ed0]
call fcn.14001b3b0
lea rcx, [rbx + 0x2060]
call fcn.140012d70
mov rcx, qword [rbx + 0x2090]
test rcx, rcx
je 0x140006ccf
mov rax, qword [0x140037a70]
mov qword [rbx + 0x2088], r15
test rax, rax
je 0x140006cc2
dec dword [rax + 0x3bc]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rbx + 0x2090], r15
mov rcx, qword [rbx + 0x20a0]
test rcx, rcx
je 0x140006d01
mov rax, qword [0x140037a70]
mov qword [rbx + 0x2098], r15
test rax, rax
je 0x140006cf4
dec dword [rax + 0x3bc]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rbx + 0x20a0], r15
mov rcx, qword [rbx + 0x3008]
test rcx, rcx
je 0x140006d33
mov rax, qword [0x140037a70]
mov qword [rbx + 0x3000], r15
test rax, rax
je 0x140006d26
dec dword [rax + 0x3bc]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rbx + 0x3008], r15
mov rcx, qword [rbx + 0x3018]
test rcx, rcx
je 0x140006d65
mov rax, qword [0x140037a70]
mov qword [rbx + 0x3010], r15
test rax, rax
je 0x140006d58
dec dword [rax + 0x3bc]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rbx + 0x3018], r15
mov rcx, qword [rbx + 0x20c8]
test rcx, rcx
je 0x140006d97
mov rax, qword [0x140037a70]
mov qword [rbx + 0x20c0], r15
test rax, rax
je 0x140006d8a
dec dword [rax + 0x3bc]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rbx + 0x20c8], r15
mov rcx, qword [rbx + 0x20d8]
test rcx, rcx
je 0x140006dc9
mov rax, qword [0x140037a70]
mov qword [rbx + 0x20d0], r15
test rax, rax
je 0x140006dbc
dec dword [rax + 0x3bc]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rbx + 0x20d8], r15
mov rcx, qword [rbx + 0x20e8]
test rcx, rcx
je 0x140006dfb
mov rax, qword [0x140037a70]
mov qword [rbx + 0x20e0], r15
test rax, rax
je 0x140006dee
dec dword [rax + 0x3bc]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rbx + 0x20e8], r15
mov rcx, qword [rbx + 0x3060]
test rcx, rcx
je 0x140006e2d
mov rax, qword [0x140037a70]
mov qword [rbx + 0x3058], r15
test rax, rax
je 0x140006e20
dec dword [rax + 0x3bc]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rbx + 0x3060], r15
mov rcx, qword [rbx + 0x3050]
test rcx, rcx
je 0x140006e5f
mov rax, qword [0x140037a70]
mov qword [rbx + 0x3048], r15
test rax, rax
je 0x140006e52
dec dword [rax + 0x3bc]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rbx + 0x3050], r15
cmp qword [rbx + 0x3070], r15
je 0x140006e8f
mov rdi, qword [rbx + 0x3070]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
cmp rdi, rax
je 0x140006e88
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov qword [rbx + 0x3070], r15
mov rcx, qword [rbx + 0x3080]
test rcx, rcx
je 0x140006ec1
mov rax, qword [0x140037a70]
mov qword [rbx + 0x3078], r15
test rax, rax
je 0x140006eb4
dec dword [rax + 0x3bc]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rbx + 0x3080], r15
mov byte [rbx], r15b
add rsp, 0x20
pop r15
pop rdi
pop rbx
ret