Function at 0x14001c200
Capabilities:
Write file on windows

Disassembly:
push r15
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
mov rsi, r8
mov ebp, edx
mov rdi, rcx
lea rcx, str._platform_linux_rtldglobalextension
call fcn.14001ed20
test rax, rax
je 0x14001c249
lea rdx, [0x140123865]
mov rcx, rax
call sub.VCRUNTIME140.dll_strstr
test rax, rax
sete al
mov ebx, 0xfffffff6
test rdi, rdi
jne 0x14001c259
jmp 0x14001c47b
mov al, 1
mov ebx, 0xfffffff6
test rdi, rdi
je 0x14001c47b
cmp byte [rdi], 0
je 0x14001c47b
mov r14, qword [rsp + 0x80]
mov qword [rsi], 0
test al, al
jne 0x14001c320
mov rcx, rdi
mov edx, 1
call fcn.140032160
mov rbx, rax
test rax, rax
je 0x14001c314
mov rcx, rbx
mov edx, 0x2e
call sub.VCRUNTIME140.dll_strrchr
lea rcx, str..sog
mov rdx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x14001c314
mov rcx, rbx
mov edx, ebp
call fcn.1400321b0
mov qword [rsi], rax
test rax, rax
jne 0x14001c2d9
mov rcx, rbx
mov edx, 4
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__access]
test eax, eax
je 0x14001c2f0
mov rax, qword [rsi]
test rax, rax
je 0x14001c317
test r14, r14
je 0x14001c317
mov rcx, r14
mov rdx, rbx
call fcn.14001c490
jmp 0x14001c314
call fcn.140032290
mov qword [rsp + 0x20], rax
lea rcx, str.D02001
mov edx, 2
mov r8d, 0x81
mov r9, rbx
call fcn.14003e350
mov rax, qword [rsi]
test rax, rax
jne 0x14001c414
mov rcx, rdi
xor edx, edx
call fcn.140032160
test rax, rax
je 0x14001c3bd
mov rbx, rax
mov rcx, rax
mov edx, ebp
call fcn.1400321b0
mov qword [rsi], rax
test rax, rax
jne 0x14001c41a
mov rcx, rbx
mov edx, 4
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__access]
test eax, eax
je 0x14001c3c1
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__strdup]
mov r15, rax
mov rcx, rax
mov edx, 0x2e
call sub.VCRUNTIME140.dll_strrchr
test rax, rax
je 0x14001c37f
mov byte [rax], 0
mov rcx, r15
mov edx, ebp
call fcn.1400321b0
mov qword [rsi], rax
test rax, rax
jne 0x14001c3a6
mov rcx, r15
mov edx, 4
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__access]
test eax, eax
je 0x14001c3e7
mov rax, qword [rsi]
test rax, rax
je 0x14001c40b
test r14, r14
je 0x14001c40b
mov rcx, r14
mov rdx, r15
call fcn.14001c490
jmp 0x14001c40b
xor ebx, ebx
jmp 0x14001c414
call fcn.140032290
mov qword [rsp + 0x20], rax
lea rcx, str.D02001
mov edx, 2
mov r8d, 0x81
mov r9, rbx
call fcn.14003e350
jmp 0x14001c414
call fcn.140032290
mov qword [rsp + 0x20], rax
lea rcx, str.D02001
mov edx, 2
mov r8d, 0x81
mov r9, r15
call fcn.14003e350
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
cmp qword [rsi], 0
je 0x14001c429
lea rdx, [0x1401228e5]
mov rcx, rdi
call fcn.14001ae50
test rbx, rbx
je 0x14001c448
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
xor eax, eax
cmp qword [rsi], 0
setne al
lea ebx, [rax + rax*2]
add ebx, 0xfffffffd
jmp 0x14001c47b
mov ebx, 0xfffffffe
cmp dword [0x1401b08d8], 0
je 0x14001c47b
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rcx, str.___Memory_failure_in_TgDLOpen___n
mov edx, 0x21
mov r8d, 1
mov r9, rax
call fcn.140119584
mov eax, ebx
add rsp, 0x28
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
pop r15
ret