Function at 0x1400d4800
Capabilities:
Write file on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x38
mov qword [rsp + 0x20], r9
mov r15, r8
mov rsi, rdx
mov r14, rcx
mov r13, qword [rdx + 8]
mov rax, qword [r8 + 8]
or rax, r13
je 0x1400d4883
mov rdi, qword [r14]
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 0xa
mov rdx, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
cmp dword [rdi], 0
je 0x1400d487b
xor ebx, ebx
mov rbp, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
nop word cs:[rax + rax]
nop
mov ecx, 2
call rbp
mov ecx, 0x20
mov rdx, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add ebx, 1
cmp ebx, dword [rdi]
jne 0x1400d4860
mov byte [rdi + 4], 0
mov r13, qword [rsi + 8]
mov rbx, qword [r14]
mov rbp, qword [rsi]
add dword [rbx], 1
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 0x7b
mov rdx, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
test r13, r13
mov qword [rsp + 0x28], r14
je 0x1400d49fe
mov qword [rsp + 0x30], r15
lea r14, [r13*8]
add r14, rbp
mov al, 1
mov r15, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rdi, str._null_
jmp 0x1400d4905
mov ecx, 2
call r15
mov edx, 6
mov r8d, 1
mov rcx, rdi
mov r9, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fwrite
mov byte [rbx + 4], 1
add rbp, 8
xor eax, eax
cmp rbp, r14
je 0x1400d49ce
mov rsi, qword [rbp]
test al, 1
je 0x1400d4930
test rsi, rsi
je 0x1400d49ab
mov rcx, rsi
mov rdx, rbx
call fcn.1400cf180
jmp 0x1400d48f6
mov ecx, 2
call r15
mov ecx, 0x2c
mov rdx, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
mov ecx, 2
call r15
mov ecx, 0xa
mov rdx, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
cmp dword [rbx], 0
je 0x1400d498e
xor r12d, r12d
nop word cs:[rax + rax]
nop dword [rax]
mov ecx, 2
call r15
mov ecx, 0x20
mov rdx, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add r12d, 1
cmp r12d, dword [rbx]
jne 0x1400d4970
mov byte [rbx + 4], 0
test rsi, rsi
je 0x1400d48d4
mov rcx, rsi
mov rdx, rbx
call fcn.1400cf180
jmp 0x1400d48f2
mov ecx, 2
call r15
mov edx, 6
mov r8d, 1
mov rcx, rdi
mov r9, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fwrite
jmp 0x1400d48f6
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 0x7d
mov rdx, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add dword [rbx], 0xffffffff
test r13, r13
mov r14, qword [rsp + 0x28]
mov r15, qword [rsp + 0x30]
je 0x1400d4a19
mov byte [rbx + 4], 1
jmp 0x1400d4a19
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 0x7d
mov rdx, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add dword [rbx], 0xffffffff
mov rbx, qword [r14]
mov rsi, qword [r15]
mov r12, qword [r15 + 8]
mov dil, byte [rbx + 4]
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
test r12, r12
jne 0x1400d4a5a
test dil, dil
jne 0x1400d4a5a
lea rcx, [0x14010e7b6]
mov edx, 2
mov r8d, 1
mov r9, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fwrite
mov edi, dword [rbx]
jmp 0x1400d4ab3
mov ecx, 0x2c
mov rdx, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 0xa
mov rdx, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
cmp dword [rbx], 0
je 0x1400d4aad
xor edi, edi
mov rbp, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
nop dword [rax]
mov ecx, 2
call rbp
mov ecx, 0x20
mov rdx, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add edi, 1
cmp edi, dword [rbx]
jne 0x1400d4a90
jmp 0x1400d4aaf
xor edi, edi
mov byte [rbx + 4], 0
add edi, 1
mov dword [rbx], edi
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 0x7b
mov rdx, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
test r12, r12
je 0x1400d4bfa
lea r14, [rsi + r12*8]
mov al, 1
mov rbp, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea r13, str._null_
jmp 0x1400d4b1f
mov ecx, 2
call rbp
mov edx, 6
mov r8d, 1
mov rcx, r13
mov r9, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fwrite
mov byte [rbx + 4], 1
add rsi, 8
xor eax, eax
cmp rsi, r14
je 0x1400d4bca
mov r15, qword [rsi]
test al, 1
je 0x1400d4b40
test r15, r15
je 0x1400d4ba8
mov rcx, r15
mov rdx, rbx
call fcn.1400cf180
jmp 0x1400d4b10
mov ecx, 2
call rbp
mov ecx, 0x2c
mov rdx, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
mov ecx, 2
call rbp
mov ecx, 0xa
mov rdx, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
cmp dword [rbx], 0
je 0x1400d4b8b
xor edi, edi
nop
mov ecx, 2
call rbp
mov ecx, 0x20
mov rdx, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add edi, 1
cmp edi, dword [rbx]
jne 0x1400d4b70
mov byte [rbx + 4], 0
test r15, r15
je 0x1400d4aef
mov rcx, r15
mov rdx, rbx
call fcn.1400cf180
jmp 0x1400d4b0c
mov ecx, 2
call rbp
mov edx, 6
mov r8d, 1
mov rcx, r13
mov r9, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fwrite
jmp 0x1400d4b10
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 0x7d
mov rdx, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add dword [rbx], 0xffffffff
test r12, r12
mov rax, qword [rsp + 0x20]
mov r14, qword [rsp + 0x28]
je 0x1400d4c1a
mov byte [rbx + 4], 1
jmp 0x1400d4c1a
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 0x7d
mov rdx, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add dword [rbx], 0xffffffff
mov rax, qword [rsp + 0x20]
mov rbx, qword [r14]
mov r14, qword [rax]
mov rdi, qword [rax + 8]
mov sil, byte [rbx + 4]
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
test sil, sil
je 0x1400d4c91
mov ecx, 0x2c
mov rdx, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 0xa
mov rdx, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
cmp dword [rbx], 0
je 0x1400d4c8b
xor ebp, ebp
mov rsi, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
nop dword [rax + rax]
mov ecx, 2
call rsi
mov ecx, 0x20
mov rdx, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add ebp, 1
cmp ebp, dword [rbx]
jne 0x1400d4c70
mov byte [rbx + 4], 0
jmp 0x1400d4cab
lea rcx, [0x14010e7b6]
mov edx, 2
mov r8d, 1
mov r9, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fwrite
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
sub edi, r14d
lea rdx, str.__.s_
mov rcx, rax
mov r8d, edi
mov r9, r14
call fcn.1400cafc0
nop
add rsp, 0x38
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret