Function at 0x140009b10
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r14
push r15
sub rsp, 0x20
mov rbx, rcx
mov rax, qword [rcx + 0xa8]
test rax, rax
je 0x140009b75
cmp byte [rcx + 1], 0
je 0x140009b75
mov byte [rax], 0
mov rdi, qword [rcx + 0xa8]
test rdi, rdi
je 0x140009b75
mov rcx, rdi
call fcn.140034d90
mov rax, qword [0x14008a070]
test rax, rax
je 0x140009b66
dec dword [rax + 0x3b0]
mov rdx, qword [0x14008a060]
mov rcx, rdi
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
xor r15d, r15d
mov qword [rbx + 0xa8], r15
cmp byte [rbx], r15b
je 0x14000a2da
cmp byte [rbx + 0x3048], r15b
je 0x140009bf8
mov rdi, qword [rbx + 0x20]
test rdi, rdi
je 0x140009bf8
mov rsi, qword [0x14008a070]
mov qword [0x14008a070], rbx
mov dword [rbx + 0x304c], r15d
mov qword [rsp + 0x40], r15
lea rcx, [rsp + 0x40]
call fcn.14001b420
mov rbp, rax
lea rdx, [0x14006fef4]
mov rcx, rdi
call fcn.140004170
mov rdi, rax
test rax, rax
je 0x140009bff
mov r9, rax
mov r8, qword [rsp + 0x40]
lea edx, [r15 + 1]
mov rcx, rbp
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
jmp 0x140009bff
mov rsi, qword [0x14008a070]
mov qword [0x14008a070], rbx
call fcn.14001e1f0
mov qword [0x14008a070], rsi
mov esi, r15d
mov eax, dword [rbx + 0x3010]
test eax, eax
jle 0x140009cd9
mov rbp, r15
mov r14, r15
nop dword [rax]
test rbp, rbp
js 0x140009c39
cmp esi, eax
jl 0x140009c53
mov r8d, 0x5c8
lea rdx, str.C:UserszayDownloadsmagzmagz_scriptimguiimgui.h
lea rcx, [0x140071d48]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x3018]
mov rdi, qword [rax + r14 + 8]
test rdi, rdi
je 0x140009cc2
mov rcx, qword [rdi + 0x38]
call fcn.1400293f0
mov qword [rdi + 0x38], r15
mov qword [rdi + 0x20], r15
mov qword [rdi + 0x18], r15
mov rcx, qword [rdi + 0x30]
test rcx, rcx
je 0x140009ca1
mov rax, qword [0x14008a070]
test rax, rax
je 0x140009c94
dec dword [rax + 0x3b0]
mov rdx, qword [0x14008a060]
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
nop
mov rax, qword [0x14008a070]
test rax, rax
je 0x140009cb3
dec dword [rax + 0x3b0]
mov rdx, qword [0x14008a060]
mov rcx, rdi
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
inc esi
inc rbp
add r14, 0x10
mov eax, dword [rbx + 0x3010]
cmp esi, eax
jl 0x140009c30
mov edx, 6
mov rcx, rbx
call fcn.140007060
mov ebp, r15d
mov eax, dword [rbx + 0x1bc8]
test eax, eax
jle 0x140009d61
mov rsi, r15
test rsi, rsi
js 0x140009cff
cmp ebp, eax
jl 0x140009d19
mov r8d, 0x5c8
lea rdx, str.C:UserszayDownloadsmagzmagz_scriptimguiimgui.h
lea rcx, [0x140071d48]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x1bd0]
mov rdi, qword [rax + rsi*8]
test rdi, rdi
je 0x140009d52
mov rcx, rdi
call fcn.140006760
mov rax, qword [0x14008a070]
test rax, rax
je 0x140009d43
dec dword [rax + 0x3b0]
mov rdx, qword [0x14008a060]
mov rcx, rdi
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
inc ebp
inc rsi
mov eax, dword [rbx + 0x1bc8]
cmp ebp, eax
jl 0x140009cf6
mov rcx, qword [rbx + 0x1bd0]
test rcx, rcx
je 0x140009d99
mov qword [rbx + 0x1bc8], r15
mov rax, qword [0x14008a070]
test rax, rax
je 0x140009d86
dec dword [rax + 0x3b0]
mov rdx, qword [0x14008a060]
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
mov qword [rbx + 0x1bd0], r15
mov rcx, qword [rbx + 0x1be0]
test rcx, rcx
je 0x140009dd1
mov qword [rbx + 0x1bd8], r15
mov rax, qword [0x14008a070]
test rax, rax
je 0x140009dbe
dec dword [rax + 0x3b0]
mov rdx, qword [0x14008a060]
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
mov qword [rbx + 0x1be0], r15
mov rcx, qword [rbx + 0x1bf0]
test rcx, rcx
je 0x140009e09
mov qword [rbx + 0x1be8], r15
mov rax, qword [0x14008a070]
test rax, rax
je 0x140009df6
dec dword [rax + 0x3b0]
mov rdx, qword [0x14008a060]
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
mov qword [rbx + 0x1bf0], r15
mov qword [rbx + 0x1c20], r15
mov rcx, qword [rbx + 0x1c00]
test rcx, rcx
je 0x140009e48
mov qword [rbx + 0x1bf8], r15
mov rax, qword [0x14008a070]
test rax, rax
je 0x140009e35
dec dword [rax + 0x3b0]
mov rdx, qword [0x14008a060]
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
mov qword [rbx + 0x1c00], r15
mov rcx, qword [rbx + 0x1c10]
test rcx, rcx
je 0x140009e80
mov qword [rbx + 0x1c08], r15
mov rax, qword [0x14008a070]
test rax, rax
je 0x140009e6d
dec dword [rax + 0x3b0]
mov rdx, qword [0x14008a060]
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
mov qword [rbx + 0x1c10], r15
mov qword [rbx + 0x1e00], r15
mov qword [rbx + 0x1c38], r15
mov qword [rbx + 0x1c30], r15
mov qword [rbx + 0x1c28], r15
mov qword [rbx + 0x1cc0], r15
mov qword [rbx + 0x1ca8], r15
mov qword [rbx + 0x1c48], r15
mov rcx, qword [rbx + 0x1d80]
test rcx, rcx
je 0x140009ee9
mov qword [rbx + 0x1d78], r15
mov rax, qword [0x14008a070]
test rax, rax
je 0x140009ed6
dec dword [rax + 0x3b0]
mov rdx, qword [0x14008a060]
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
mov qword [rbx + 0x1d80], r15
mov rcx, qword [rbx + 0x1d90]
test rcx, rcx
je 0x140009f21
mov qword [rbx + 0x1d88], r15
mov rax, qword [0x14008a070]
test rax, rax
je 0x140009f0e
dec dword [rax + 0x3b0]
mov rdx, qword [0x14008a060]
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
mov qword [rbx + 0x1d90], r15
mov rcx, qword [rbx + 0x1da0]
test rcx, rcx
je 0x140009f59
mov qword [rbx + 0x1d98], r15
mov rax, qword [0x14008a070]
test rax, rax
je 0x140009f46
dec dword [rax + 0x3b0]
mov rdx, qword [0x14008a060]
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
mov qword [rbx + 0x1da0], r15
mov rcx, qword [rbx + 0x1db0]
test rcx, rcx
je 0x140009f91
mov qword [rbx + 0x1da8], r15
mov rax, qword [0x14008a070]
test rax, rax
je 0x140009f7e
dec dword [rax + 0x3b0]
mov rdx, qword [0x14008a060]
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
mov qword [rbx + 0x1db0], r15
mov rcx, qword [rbx + 0x1dc0]
test rcx, rcx
je 0x140009fc9
mov qword [rbx + 0x1db8], r15
mov rax, qword [0x14008a070]
test rax, rax
je 0x140009fb6
dec dword [rax + 0x3b0]
mov rdx, qword [0x14008a060]
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
mov qword [rbx + 0x1dc0], r15
mov qword [rbx + 0x1df0], r15
mov qword [rbx + 0x1de8], r15
mov qword [rbx + 0x1de0], r15
mov edi, r15d
mov eax, dword [rbx + 0x1dc8]
test eax, eax
jle 0x14000a032
mov rsi, r15
nop
test rsi, rsi
js 0x140009ff9
cmp edi, eax
jl 0x14000a013
mov r8d, 0x5c8
lea rdx, str.C:UserszayDownloadsmagzmagz_scriptimguiimgui.h
lea rcx, [0x140071d48]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rcx, qword [rbx + 0x1dd0]
mov rcx, qword [rcx + rsi*8]
call fcn.1400292c0
inc edi
inc rsi
mov eax, dword [rbx + 0x1dc8]
cmp edi, eax
jl 0x140009ff0
mov rcx, qword [rbx + 0x1dd0]
test rcx, rcx
je 0x14000a06a
mov qword [rbx + 0x1dc8], r15
mov rax, qword [0x14008a070]
test rax, rax
je 0x14000a057
dec dword [rax + 0x3b0]
mov rdx, qword [0x14008a060]
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
mov qword [rbx + 0x1dd0], r15
lea rcx, [rbx + 0x2030]
call fcn.140028570
mov rcx, qword [rbx + 0x2060]
test rcx, rcx
je 0x14000a0ae
mov qword [rbx + 0x2058], r15
mov rax, qword [0x14008a070]
test rax, rax
je 0x14000a09b
dec dword [rax + 0x3b0]
mov rdx, qword [0x14008a060]
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
mov qword [rbx + 0x2060], r15
mov rcx, qword [rbx + 0x2070]
test rcx, rcx
je 0x14000a0e6
mov qword [rbx + 0x2068], r15
mov rax, qword [0x14008a070]
test rax, rax
je 0x14000a0d3
dec dword [rax + 0x3b0]
mov rdx, qword [0x14008a060]
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
mov qword [rbx + 0x2070], r15
mov rcx, qword [rbx + 0x2fd8]
test rcx, rcx
je 0x14000a11e
mov qword [rbx + 0x2fd0], r15
mov rax, qword [0x14008a070]
test rax, rax
je 0x14000a10b
dec dword [rax + 0x3b0]
mov rdx, qword [0x14008a060]
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
mov qword [rbx + 0x2fd8], r15
mov rcx, qword [rbx + 0x2fe8]
test rcx, rcx
je 0x14000a156
mov qword [rbx + 0x2fe0], r15
mov rax, qword [0x14008a070]
test rax, rax
je 0x14000a143
dec dword [rax + 0x3b0]
mov rdx, qword [0x14008a060]
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
mov qword [rbx + 0x2fe8], r15
mov rcx, qword [rbx + 0x2098]
test rcx, rcx
je 0x14000a18e
mov qword [rbx + 0x2090], r15
mov rax, qword [0x14008a070]
test rax, rax
je 0x14000a17b
dec dword [rax + 0x3b0]
mov rdx, qword [0x14008a060]
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
mov qword [rbx + 0x2098], r15
mov rcx, qword [rbx + 0x20a8]
test rcx, rcx
je 0x14000a1c6
mov qword [rbx + 0x20a0], r15
mov rax, qword [0x14008a070]
test rax, rax
je 0x14000a1b3
dec dword [rax + 0x3b0]
mov rdx, qword [0x14008a060]
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
mov qword [rbx + 0x20a8], r15
mov rcx, qword [rbx + 0x20b8]
test rcx, rcx
je 0x14000a1fe
mov qword [rbx + 0x20b0], r15
mov rax, qword [0x14008a070]
test rax, rax
je 0x14000a1eb
dec dword [rax + 0x3b0]
mov rdx, qword [0x14008a060]
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
mov qword [rbx + 0x20b8], r15
mov rcx, qword [rbx + 0x3078]
test rcx, rcx
je 0x14000a236
mov qword [rbx + 0x3070], r15
mov rax, qword [0x14008a070]
test rax, rax
je 0x14000a223
dec dword [rax + 0x3b0]
mov rdx, qword [0x14008a060]
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
mov qword [rbx + 0x3078], r15
mov rcx, qword [rbx + 0x3068]
test rcx, rcx
je 0x14000a26e
mov qword [rbx + 0x3060], r15
mov rax, qword [0x14008a070]
test rax, rax
je 0x14000a25b
dec dword [rax + 0x3b0]
mov rdx, qword [0x14008a060]
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
mov qword [rbx + 0x3068], r15
cmp qword [rbx + 0x3098], 0
je 0x14000a29f
mov rdi, qword [rbx + 0x3098]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
cmp rdi, rax
je 0x14000a298
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov qword [rbx + 0x3098], r15
mov rcx, qword [rbx + 0x30a8]
test rcx, rcx
je 0x14000a2d7
mov qword [rbx + 0x30a0], r15
mov rax, qword [0x14008a070]
test rax, rax
je 0x14000a2c4
dec dword [rax + 0x3b0]
mov rdx, qword [0x14008a060]
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
mov qword [rbx + 0x30a8], r15
mov byte [rbx], 0
mov rbx, qword [rsp + 0x48]
mov rbp, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x58]
add rsp, 0x20
pop r15
pop r14
pop rdi
ret