Function at 0x1400d4160
Capabilities:
Write file on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
mov r14, r8
mov r15, rdx
mov rsi, rcx
mov rdi, qword [rcx]
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 0xa
mov rdx, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
cmp dword [rdi], 0
je 0x1400d41cb
xor ebp, ebp
mov rbx, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
nop word cs:[rax + rax]
nop dword [rax]
mov ecx, 2
call rbx
mov ecx, 0x20
mov rdx, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add ebp, 1
cmp ebp, dword [rdi]
jne 0x1400d41b0
mov byte [rdi + 4], 0
mov rdi, qword [rsi]
test r15, r15
je 0x1400d41e4
mov rcx, r15
mov rdx, rdi
call fcn.1400cf180
jmp 0x1400d4209
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rcx, str._null_
mov edx, 6
mov r8d, 1
mov r9, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fwrite
mov byte [rdi + 4], 1
mov rsi, qword [rsi]
mov rdi, qword [r14]
mov r14, qword [r14 + 8]
mov bl, byte [rsi + 4]
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
test r14, r14
jne 0x1400d424c
test bl, bl
jne 0x1400d424c
lea rcx, [0x14010e7b6]
mov edx, 2
mov r8d, 1
mov r9, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fwrite
mov ebx, dword [rsi]
jmp 0x1400d42a3
mov ecx, 0x2c
mov rdx, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 0xa
mov rdx, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
cmp dword [rsi], 0
je 0x1400d429d
xor ebx, ebx
mov rbp, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
nop
mov ecx, 2
call rbp
mov ecx, 0x20
mov rdx, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add ebx, 1
cmp ebx, dword [rsi]
jne 0x1400d4280
jmp 0x1400d429f
xor ebx, ebx
mov byte [rsi + 4], 0
add ebx, 1
mov dword [rsi], ebx
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 0x7b
mov rdx, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
test r14, r14
je 0x1400d43e0
lea r12, [rdi + r14*8]
mov al, 1
mov rbx, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea r15, str._null_
jmp 0x1400d430f
mov ecx, 2
call rbx
mov edx, 6
mov r8d, 1
mov rcx, r15
mov r9, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fwrite
mov byte [rsi + 4], 1
add rdi, 8
xor eax, eax
cmp rdi, r12
je 0x1400d43ba
mov r13, qword [rdi]
test al, 1
je 0x1400d4330
test r13, r13
je 0x1400d4398
mov rcx, r13
mov rdx, rsi
call fcn.1400cf180
jmp 0x1400d4300
mov ecx, 2
call rbx
mov ecx, 0x2c
mov rdx, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
mov ecx, 2
call rbx
mov ecx, 0xa
mov rdx, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
cmp dword [rsi], 0
je 0x1400d437b
xor ebp, ebp
nop
mov ecx, 2
call rbx
mov ecx, 0x20
mov rdx, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add ebp, 1
cmp ebp, dword [rsi]
jne 0x1400d4360
mov byte [rsi + 4], 0
test r13, r13
je 0x1400d42df
mov rcx, r13
mov rdx, rsi
call fcn.1400cf180
jmp 0x1400d42fc
mov ecx, 2
call rbx
mov edx, 6
mov r8d, 1
mov rcx, r15
mov r9, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fwrite
jmp 0x1400d4300
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 0x7d
mov rdx, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add dword [rsi], 0xffffffff
test r14, r14
je 0x1400d43fb
mov byte [rsi + 4], 1
jmp 0x1400d43fb
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 0x7d
mov rdx, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add dword [rsi], 0xffffffff
add rsp, 0x28
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret