Function at 0x14026f6b0
Capabilities:
Write file on windows

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x68
xor r13d, r13d
movsxd r12, dword [r8 + 4]
mov byte [rsp + 0x45], 0
mov rdi, rcx
mov esi, edx
mov rbp, r8
test dl, 0x40
jne 0x14026f890
test sil, 0x80
jne 0x14026f7dc
test sil, 0x20
je 0x14026f790
mov eax, esi
and eax, 0x10
cmp eax, 1
sbb ebx, ebx
and ebx, 0xfffffff8
add ebx, 9
lea rax, [rsp + 0x45]
mov rcx, qword [rbp + 8]
and esi, 0x40f
mov r8d, ebx
mov qword [rsp + 0x28], 0
mov r9d, esi
mov qword [rsp + 0x20], rax
mov edx, dword [rbp]
call fcn.14026f040
test eax, eax
js 0x14026f770
cmp byte [rsp + 0x45], 0
lea r12d, [r13 + rax]
je 0x14026f920
add r12d, 2
test rdi, rdi
je 0x14026f776
lea r13, [0x1403ac875]
mov r9, rdi
mov r8d, 1
mov edx, 1
mov rcx, r13
call sub.msvcrt.dll_fwrite
cmp rax, 1
je 0x14026f960
mov r12d, 0xffffffff
mov eax, r12d
add rsp, 0x68
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
lea eax, [r12 - 1]
cmp eax, 0x1d
ja 0x14026f7d0
lea rax, [0x1403ac8c0]
movsx ebx, byte [rax + r12]
mov eax, ebx
cmp bl, 0xff
je 0x14026f7d0
test sil, 0x10
je 0x14026f701
or eax, 8
test ebx, ebx
mov ebx, 1
movsx eax, al
cmovne ebx, eax
jmp 0x14026f701
test esi, 0x100
je 0x14026f6f1
test rdi, rdi
je 0x14026fab8
mov r9, rdi
mov r8d, 1
mov edx, 1
lea rcx, [0x1403ac873]
call sub.msvcrt.dll_fwrite
cmp rax, 1
jne 0x14026f770
and esi, 0x200
jne 0x14026f9b0
movsxd rbx, dword [rbp]
mov r14, qword [rbp + 8]
lea rsi, [0x1403ac8a0]
lea rbp, [rsp + 0x50]
mov r12, rbx
add rbx, r14
cmp rbx, r14
jne 0x14026f84d
jmp 0x14026fac8
add r14, 1
cmp rbx, r14
je 0x14026fac8
movzx eax, byte [r14]
xor edx, edx
mov r9, rdi
mov r8d, 2
mov ecx, eax
and eax, 0xf
shr cl, 4
and ecx, 0xf
mov dl, byte [rsi + rcx]
mov dh, byte [rsi + rax]
mov rcx, rbp
mov word [rsp + 0x50], dx
mov edx, 1
call sub.msvcrt.dll_fwrite
cmp rax, 2
jne 0x14026f770
jmp 0x14026f840
mov ecx, r12d
call fcn.140275560
cmp byte [rax], 0
mov rcx, rax
je 0x14026fae0
mov r10, rax
xor edx, edx
jmp 0x14026f8bc
cmp edx, 0x80000000
je 0x14026fae0
add r10, 1
add edx, 1
cmp byte [r10], 0
jne 0x14026f8b0
and edx, 0x7fffffff
mov r13d, edx
test rdi, rdi
je 0x14026f916
mov ebx, edx
mov r9, rdi
mov edx, 1
mov r8, rbx
call sub.msvcrt.dll_fwrite
cmp rbx, rax
jne 0x14026f770
mov r9, rdi
mov r8d, 1
mov edx, 1
lea rcx, [0x1403ac871]
call sub.msvcrt.dll_fwrite
cmp rax, 1
jne 0x14026f770
add r13d, 1
jmp 0x14026f6dd
test rdi, rdi
je 0x14026f776
mov rcx, qword [rbp + 8]
mov qword [rsp + 0x28], rdi
mov r9d, esi
mov r8d, ebx
mov qword [rsp + 0x20], 0
mov edx, dword [rbp]
call fcn.14026f040
test eax, eax
jns 0x14026f776
jmp 0x14026f770
mov rcx, qword [rbp + 8]
mov qword [rsp + 0x28], rdi
mov r9d, esi
mov r8d, ebx
mov qword [rsp + 0x20], 0
mov edx, dword [rbp]
call fcn.14026f040
test eax, eax
js 0x14026f770
mov r9, rdi
mov r8d, 1
mov edx, 1
mov rcx, r13
call sub.msvcrt.dll_fwrite
cmp rax, 1
jne 0x14026f770
jmp 0x14026f776
mov eax, dword [rbp + 4]
lea r14, [rsp + 0x50]
xor edx, edx
mov qword [rsp + 0x58], rbp
mov rcx, r14
mov dword [rsp + 0x50], eax
call fcn.1400ad000
mov dword [rsp + 0x3c], eax
test eax, eax
jle 0x14026f770
movsxd rbp, eax
lea r15, str.crypto_asn1_a_strex.c
mov r8d, 0x11d
mov rdx, r15
mov rcx, rbp
call fcn.14000e4c0
mov r12, rax
test rax, rax
je 0x14026faea
lea rdx, [rsp + 0x48]
mov rcx, r14
mov qword [rsp + 0x48], rax
call fcn.1400ad000
test rdi, rdi
je 0x14026fa89
add rbp, r12
mov rbx, r12
lea r14, [rsp + 0x46]
lea rsi, [0x1403ac8a0]
nop word [rax + rax]
movzx eax, byte [rbx]
xor edx, edx
mov r9, rdi
mov r8d, 2
mov ecx, eax
and eax, 0xf
shr cl, 4
and ecx, 0xf
mov dl, byte [rsi + rcx]
mov dh, byte [rsi + rax]
mov rcx, r14
mov word [rsp + 0x46], dx
mov edx, 1
call sub.msvcrt.dll_fwrite
cmp rax, 2
je 0x14026fa80
mov r8d, 0x124
mov rdx, r15
mov rcx, r12
call fcn.14000e580
jmp 0x14026f770
add rbx, 1
cmp rbp, rbx
jne 0x14026fa30
mov ebx, dword [rsp + 0x3c]
mov r8d, 0x124
mov rdx, r15
mov rcx, r12
add ebx, ebx
call fcn.14000e580
test ebx, ebx
js 0x14026f770
lea r12d, [rbx + 1]
add r12d, r13d
jmp 0x14026f776
and esi, 0x200
jne 0x14026f9b0
mov r12d, dword [rbp]
add r12d, r12d
js 0x14026f770
add r12d, 1
jmp 0x14026faac
xor r13d, r13d
xor edx, edx
jmp 0x14026f8d2
call fcn.140110230
lea r8, str.do_dump
mov rcx, r15
or r12d, 0xffffffff
mov edx, 0x11e
call fcn.140110360
xor r8d, r8d
mov edx, 0xc0100
mov ecx, 0xd
call fcn.140110450
jmp 0x14026f776