Function at 0x1400d5840
Capabilities:
Write file on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x48
mov r12, r9
mov r13, r8
mov rdi, rdx
mov r15, rcx
mov al, byte [rsp + 0xb8]
mov byte [rsp + 0x2f], al
mov al, byte [rsp + 0xb0]
mov byte [rsp + 0x2e], al
mov rsi, qword [rcx]
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 0xa
mov rdx, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
cmp dword [rsi], 0
je 0x1400d58bb
xor ebx, ebx
mov rbp, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
nop dword [rax + rax]
mov ecx, 2
call rbp
mov ecx, 0x20
mov rdx, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add ebx, 1
cmp ebx, dword [rsi]
jne 0x1400d58a0
mov byte [rsi + 4], 0
mov rbx, qword [r15]
mov rsi, qword [rdi]
mov r14, qword [rdi + 8]
add dword [rbx], 1
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 0x7b
mov rdx, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
test r14, r14
mov qword [rsp + 0x30], r15
je 0x1400d5a33
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x40], r12
lea r12, [rsi + r14*8]
mov al, 1
mov r13, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rbp, str._null_
jmp 0x1400d5943
mov ecx, 2
call r13
mov edx, 6
mov r8d, 1
mov rcx, rbp
mov r9, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fwrite
mov byte [rbx + 4], 1
add rsi, 8
xor eax, eax
cmp rsi, r12
je 0x1400d59fe
mov rdi, qword [rsi]
test al, 1
je 0x1400d5960
test rdi, rdi
je 0x1400d59db
mov rcx, rdi
mov rdx, rbx
call fcn.1400cf180
jmp 0x1400d5934
mov ecx, 2
call r13
mov ecx, 0x2c
mov rdx, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
mov ecx, 2
call r13
mov ecx, 0xa
mov rdx, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
cmp dword [rbx], 0
je 0x1400d59be
xor r15d, r15d
nop word cs:[rax + rax]
nop dword [rax]
mov ecx, 2
call r13
mov ecx, 0x20
mov rdx, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add r15d, 1
cmp r15d, dword [rbx]
jne 0x1400d59a0
mov byte [rbx + 4], 0
test rdi, rdi
je 0x1400d5912
mov rcx, rdi
mov rdx, rbx
call fcn.1400cf180
jmp 0x1400d5930
mov ecx, 2
call r13
mov edx, 6
mov r8d, 1
mov rcx, rbp
mov r9, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fwrite
jmp 0x1400d5934
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 0x7d
mov rdx, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add dword [rbx], 0xffffffff
test r14, r14
mov r15, qword [rsp + 0x30]
mov r12, qword [rsp + 0x40]
mov r13, qword [rsp + 0x38]
je 0x1400d5a4e
mov byte [rbx + 4], 1
jmp 0x1400d5a4e
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 0x7d
mov rdx, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add dword [rbx], 0xffffffff
mov rbx, qword [r15]
mov r14, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 2
call r14
mov ecx, 0x2c
mov rdx, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
mov ecx, 2
call r14
mov ecx, 0xa
mov rdx, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
cmp dword [rbx], 0
je 0x1400d5aac
xor esi, esi
nop dword [rax]
mov ecx, 2
call r14
mov ecx, 0x20
mov rdx, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esi, 1
cmp esi, dword [rbx]
jne 0x1400d5a90
mov byte [rbx + 4], 0
test r13, r13
je 0x1400d5ac2
mov rcx, r13
mov rdx, rbx
call fcn.1400cf180
jmp 0x1400d5ae7
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rcx, str._null_
mov edx, 6
mov r8d, 1
mov r9, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fwrite
mov byte [rbx + 4], 1
mov rbp, qword [r15]
mov rsi, qword [r12]
mov r12, qword [r12 + 8]
mov bl, byte [rbp + 4]
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
test r12, r12
jne 0x1400d5b2d
test bl, bl
jne 0x1400d5b2d
lea rcx, [0x14010e7b6]
mov edx, 2
mov r8d, 1
mov r9, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fwrite
mov edi, dword [rbp]
jmp 0x1400d5b85
mov ecx, 0x2c
mov rdx, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 0xa
mov rdx, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
cmp dword [rbp], 0
je 0x1400d5b7f
xor edi, edi
nop word [rax + rax]
mov ecx, 2
call r14
mov ecx, 0x20
mov rdx, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add edi, 1
cmp edi, dword [rbp]
jne 0x1400d5b60
jmp 0x1400d5b81
xor edi, edi
mov byte [rbp + 4], 0
add edi, 1
mov dword [rbp], edi
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 0x7b
mov rdx, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
test r12, r12
je 0x1400d5ce1
lea r15, [rsi + r12*8]
mov al, 1
lea r13, str._null_
jmp 0x1400d5bec
mov ecx, 2
call r14
mov edx, 6
mov r8d, 1
mov rcx, r13
mov r9, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fwrite
mov byte [rbp + 4], 1
add rsi, 8
xor eax, eax
cmp rsi, r15
je 0x1400d5cad
mov rbx, qword [rsi]
test al, 1
je 0x1400d5c10
test rbx, rbx
je 0x1400d5c8a
mov rcx, rbx
mov rdx, rbp
call fcn.1400cf180
jmp 0x1400d5bdd
mov ecx, 2
call r14
mov ecx, 0x2c
mov rdx, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
mov ecx, 2
call r14
mov ecx, 0xa
mov rdx, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
cmp dword [rbp], 0
je 0x1400d5c6d
xor edi, edi
nop word cs:[rax + rax]
nop dword [rax]
mov ecx, 2
call r14
mov ecx, 0x20
mov rdx, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add edi, 1
cmp edi, dword [rbp]
jne 0x1400d5c50
mov byte [rbp + 4], 0
test rbx, rbx
je 0x1400d5bbb
mov rcx, rbx
mov rdx, rbp
call fcn.1400cf180
jmp 0x1400d5bd9
mov ecx, 2
call r14
mov edx, 6
mov r8d, 1
mov rcx, r13
mov r9, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fwrite
jmp 0x1400d5bdd
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 0x7d
mov rdx, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add dword [rbp], 0xffffffff
test r12, r12
mov bl, byte [rsp + 0x2f]
mov r15, qword [rsp + 0x30]
mov dl, byte [rsp + 0x2e]
je 0x1400d5d05
mov byte [rbp + 4], 1
jmp 0x1400d5d05
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 0x7d
mov rdx, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add dword [rbp], 0xffffffff
mov bl, byte [rsp + 0x2f]
mov dl, byte [rsp + 0x2e]
mov rcx, qword [r15]
call fcn.1400d4770
mov rcx, qword [r15]
mov edx, ebx
add rsp, 0x48
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
jmp fcn.1400d4770