Function at 0x14026fbb0
Capabilities:
Write file on windows

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x68
xor r13d, r13d
movsxd r12, dword [r8 + 4]
mov byte [rsp + 0x45], 0
mov rdi, rcx
mov esi, edx
mov rbp, r8
test dl, 0x40
jne 0x14026fd90
test sil, 0x80
jne 0x14026fcdc
test sil, 0x20
je 0x14026fc90
mov eax, esi
and eax, 0x10
cmp eax, 1
sbb ebx, ebx
and ebx, 0xfffffff8
add ebx, 9
lea rax, [rsp + 0x45]
mov rcx, qword [rbp + 8]
and esi, 0x40f
mov r8d, ebx
mov qword [rsp + 0x28], 0
mov r9d, esi
mov qword [rsp + 0x20], rax
mov edx, dword [rbp]
call fcn.14026f540
test eax, eax
js 0x14026fc70
cmp byte [rsp + 0x45], 0
lea r12d, [r13 + rax]
je 0x14026fe20
add r12d, 2
test rdi, rdi
je 0x14026fc76
lea r13, [0x1403ac895]
mov r9, rdi
mov r8d, 1
mov edx, 1
mov rcx, r13
call sub.msvcrt.dll_fwrite
cmp rax, 1
je 0x14026fe60
mov r12d, 0xffffffff
mov eax, r12d
add rsp, 0x68
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
lea eax, [r12 - 1]
cmp eax, 0x1d
ja 0x14026fcd0
lea rax, [0x1403ac8e0]
movsx ebx, byte [rax + r12]
mov eax, ebx
cmp bl, 0xff
je 0x14026fcd0
test sil, 0x10
je 0x14026fc01
or eax, 8
test ebx, ebx
mov ebx, 1
movsx eax, al
cmovne ebx, eax
jmp 0x14026fc01
test esi, 0x100
je 0x14026fbf1
test rdi, rdi
je 0x14026ffb8
mov r9, rdi
mov r8d, 1
mov edx, 1
lea rcx, [0x1403ac893]
call sub.msvcrt.dll_fwrite
cmp rax, 1
jne 0x14026fc70
and esi, 0x200
jne 0x14026feb0
movsxd rbx, dword [rbp]
mov r14, qword [rbp + 8]
lea rsi, [0x1403ac8c0]
lea rbp, [rsp + 0x50]
mov r12, rbx
add rbx, r14
cmp rbx, r14
jne 0x14026fd4d
jmp 0x14026ffc8
add r14, 1
cmp rbx, r14
je 0x14026ffc8
movzx eax, byte [r14]
xor edx, edx
mov r9, rdi
mov r8d, 2
mov ecx, eax
and eax, 0xf
shr cl, 4
and ecx, 0xf
mov dl, byte [rsi + rcx]
mov dh, byte [rsi + rax]
mov rcx, rbp
mov word [rsp + 0x50], dx
mov edx, 1
call sub.msvcrt.dll_fwrite
cmp rax, 2
jne 0x14026fc70
jmp 0x14026fd40
mov ecx, r12d
call fcn.140275a60
cmp byte [rax], 0
mov rcx, rax
je 0x14026ffe0
mov r10, rax
xor edx, edx
jmp 0x14026fdbc
cmp edx, 0x80000000
je 0x14026ffe0
add r10, 1
add edx, 1
cmp byte [r10], 0
jne 0x14026fdb0
and edx, 0x7fffffff
mov r13d, edx
test rdi, rdi
je 0x14026fe16
mov ebx, edx
mov r9, rdi
mov edx, 1
mov r8, rbx
call sub.msvcrt.dll_fwrite
cmp rbx, rax
jne 0x14026fc70
mov r9, rdi
mov r8d, 1
mov edx, 1
lea rcx, [0x1403ac891]
call sub.msvcrt.dll_fwrite
cmp rax, 1
jne 0x14026fc70
add r13d, 1
jmp 0x14026fbdd
test rdi, rdi
je 0x14026fc76
mov rcx, qword [rbp + 8]
mov qword [rsp + 0x28], rdi
mov r9d, esi
mov r8d, ebx
mov qword [rsp + 0x20], 0
mov edx, dword [rbp]
call fcn.14026f540
test eax, eax
jns 0x14026fc76
jmp 0x14026fc70
mov rcx, qword [rbp + 8]
mov qword [rsp + 0x28], rdi
mov r9d, esi
mov r8d, ebx
mov qword [rsp + 0x20], 0
mov edx, dword [rbp]
call fcn.14026f540
test eax, eax
js 0x14026fc70
mov r9, rdi
mov r8d, 1
mov edx, 1
mov rcx, r13
call sub.msvcrt.dll_fwrite
cmp rax, 1
jne 0x14026fc70
jmp 0x14026fc76
mov eax, dword [rbp + 4]
lea r14, [rsp + 0x50]
xor edx, edx
mov qword [rsp + 0x58], rbp
mov rcx, r14
mov dword [rsp + 0x50], eax
call fcn.1400ad4c0
mov dword [rsp + 0x3c], eax
test eax, eax
jle 0x14026fc70
movsxd rbp, eax
lea r15, str.crypto_asn1_a_strex.c
mov r8d, 0x11d
mov rdx, r15
mov rcx, rbp
call fcn.14000e980
mov r12, rax
test rax, rax
je 0x14026ffea
lea rdx, [rsp + 0x48]
mov rcx, r14
mov qword [rsp + 0x48], rax
call fcn.1400ad4c0
test rdi, rdi
je 0x14026ff89
add rbp, r12
mov rbx, r12
lea r14, [rsp + 0x46]
lea rsi, [0x1403ac8c0]
nop word [rax + rax]
movzx eax, byte [rbx]
xor edx, edx
mov r9, rdi
mov r8d, 2
mov ecx, eax
and eax, 0xf
shr cl, 4
and ecx, 0xf
mov dl, byte [rsi + rcx]
mov dh, byte [rsi + rax]
mov rcx, r14
mov word [rsp + 0x46], dx
mov edx, 1
call sub.msvcrt.dll_fwrite
cmp rax, 2
je 0x14026ff80
mov r8d, 0x124
mov rdx, r15
mov rcx, r12
call fcn.14000ea40
jmp 0x14026fc70
add rbx, 1
cmp rbp, rbx
jne 0x14026ff30
mov ebx, dword [rsp + 0x3c]
mov r8d, 0x124
mov rdx, r15
mov rcx, r12
add ebx, ebx
call fcn.14000ea40
test ebx, ebx
js 0x14026fc70
lea r12d, [rbx + 1]
add r12d, r13d
jmp 0x14026fc76
and esi, 0x200
jne 0x14026feb0
mov r12d, dword [rbp]
add r12d, r12d
js 0x14026fc70
add r12d, 1
jmp 0x14026ffac
xor r13d, r13d
xor edx, edx
jmp 0x14026fdd2
call fcn.1401106f0
lea r8, str.do_dump
mov rcx, r15
or r12d, 0xffffffff
mov edx, 0x11e
call fcn.140110820
xor r8d, r8d
mov edx, 0xc0100
mov ecx, 0xd
call fcn.140110910
jmp 0x14026fc76