Function at 0x140042c60
Capabilities:
Write file on windows

Disassembly:
push r14
push rsi
push rdi
push rbx
sub rsp, 0x28
mov rbx, r8
mov rsi, rdx
mov rdi, rcx
mov rcx, r8
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov word [rdi + 0x1c], ax
mov eax, dword [rdi]
mov dword [rsp + 0x20], eax
lea rcx, [rsp + 0x20]
mov edx, 1
mov r8d, 4
mov r9, rsi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rax, 4
jne 0x140042f25
movzx eax, word [rdi + 4]
mov word [rsp + 0x20], ax
lea rcx, [rsp + 0x20]
mov edx, 1
mov r8d, 2
mov r9, rsi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rax, 2
jne 0x140042f37
movzx eax, word [rdi + 6]
mov word [rsp + 0x20], ax
lea rcx, [rsp + 0x20]
mov edx, 1
mov r8d, 2
mov r9, rsi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rax, 2
jne 0x140042f49
movzx eax, word [rdi + 8]
mov word [rsp + 0x20], ax
lea rcx, [rsp + 0x20]
mov edx, 1
mov r8d, 2
mov r9, rsi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rax, 2
jne 0x140042f5b
mov eax, dword [rdi + 0xc]
mov dword [rsp + 0x20], eax
lea rcx, [rsp + 0x20]
mov edx, 1
mov r8d, 4
mov r9, rsi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rax, 4
jne 0x140042f6d
mov eax, dword [rdi + 0x10]
mov dword [rsp + 0x20], eax
lea rcx, [rsp + 0x20]
mov edx, 1
mov r8d, 4
mov r9, rsi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rax, 4
jne 0x140042f7f
mov eax, dword [rdi + 0x14]
mov dword [rsp + 0x20], eax
lea rcx, [rsp + 0x20]
mov edx, 1
mov r8d, 4
mov r9, rsi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rax, 4
jne 0x140042f91
mov eax, dword [rdi + 0x18]
mov dword [rsp + 0x20], eax
lea rcx, [rsp + 0x20]
mov edx, 1
mov r8d, 4
mov r9, rsi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rax, 4
jne 0x140042fa3
movzx eax, word [rdi + 0x1c]
mov word [rsp + 0x20], ax
lea rcx, [rsp + 0x20]
mov edx, 1
mov r8d, 2
mov r9, rsi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rax, 2
jne 0x140042fb5
movzx eax, word [rdi + 0x1e]
mov word [rsp + 0x20], ax
lea rcx, [rsp + 0x20]
mov edx, 1
mov r8d, 2
mov r9, rsi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rax, 2
jne 0x140042fc7
movzx r14d, word [rdi + 0x1c]
test r14, r14
je 0x140042e52
mov edx, 1
mov rcx, rbx
mov r8, r14
mov r9, rsi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rax, r14
jne 0x140042fe7
cmp word [rdi + 0x1e], 0
je 0x140042f19
cmp qword [rdi + 0x20], 0
je 0x140042e6d
mov word [rsp + 0x20], 1
jmp 0x140042e74
mov word [rsp + 0x20], 0xdead
lea rcx, [rsp + 0x20]
mov edx, 1
mov r8d, 2
mov r9, rsi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rax, 2
jne 0x140042ff9
mov word [rsp + 0x20], 0x10
lea rcx, [rsp + 0x20]
mov edx, 1
mov r8d, 2
mov r9, rsi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rax, 2
jne 0x14004300b
mov rax, qword [rdi + 0x20]
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0x20]
mov edx, 1
mov r8d, 8
mov r9, rsi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rax, 8
jne 0x14004301d
mov rax, qword [rdi + 0x28]
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0x20]
mov edx, 1
mov r8d, 8
mov r9, rsi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rax, 8
jne 0x14004302f
xor eax, eax
add rsp, 0x28
pop rbx
pop rdi
pop rsi
pop r14
ret
lea rcx, str.write_uint32
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_perror]
jmp 0x140042ca7
lea rcx, str.write_uint16
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_perror]
jmp 0x140042cd3
lea rcx, str.write_uint16
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_perror]
jmp 0x140042cff
lea rcx, str.write_uint16
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_perror]
jmp 0x140042d2b
lea rcx, str.write_uint32
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_perror]
jmp 0x140042d55
lea rcx, str.write_uint32
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_perror]
jmp 0x140042d7f
lea rcx, str.write_uint32
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_perror]
jmp 0x140042da9
lea rcx, str.write_uint32
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_perror]
jmp 0x140042dd3
lea rcx, str.write_uint16
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_perror]
jmp 0x140042dff
lea rcx, str.write_uint16
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_perror]
movzx r14d, word [rdi + 0x1c]
test r14, r14
jne 0x140042e35
jmp 0x140042e52
lea rcx, str.ZipFileWrite
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_perror]
jmp 0x140042e52
lea rcx, str.write_uint16
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_perror]
jmp 0x140042e97
lea rcx, str.write_uint16
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_perror]
jmp 0x140042ec1
lea rcx, str.write_filepos
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_perror]
jmp 0x140042eed
lea rcx, str.write_filepos
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_perror]
jmp 0x140042f19