Function at 0x140007650
Capabilities:
Write file on windows

Disassembly:
push rbx
push rdi
push r14
sub rsp, 0x20
mov rax, qword [rcx + 0xa8]
mov rbx, rcx
test rax, rax
je 0x1400076a0
cmp byte [rcx + 1], 0
je 0x1400076a0
mov byte [rax], 0
mov rdi, qword [rcx + 0xa8]
test rdi, rdi
je 0x1400076a0
mov rcx, rdi
call fcn.140022740
mov rax, qword [0x1402c9b30]
test rax, rax
je 0x140007697
dec dword [rax + 0x3b4]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
xor r14d, r14d
mov qword [rbx + 0xa8], r14
cmp byte [rbx], r14b
je 0x140007d18
mov qword [rsp + 0x48], rbp
mov qword [rsp + 0x50], rsi
cmp byte [rbx + 0x3101], r14b
je 0x140007732
mov rdi, qword [rbx + 0x20]
test rdi, rdi
je 0x140007732
mov rsi, qword [0x1402c9b30]
lea rcx, [rsp + 0x40]
mov qword [0x1402c9b30], rbx
mov dword [rbx + 0x3104], r14d
mov qword [rsp + 0x40], r14
call fcn.140015260
lea rdx, [0x1400a6eb4]
mov rcx, rdi
mov rbp, rax
call fcn.140002dd0
mov rdi, rax
test rax, rax
je 0x14000772b
mov r8, qword [rsp + 0x40]
lea edx, [r14 + 1]
mov r9, rax
mov rcx, rbp
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov qword [0x1402c9b30], rsi
mov edx, 6
mov rcx, rbx
call fcn.1400051a0
mov eax, dword [rbx + 0x1ab8]
mov ebp, r14d
test eax, eax
jle 0x1400077b5
mov rsi, r14
nop
test rsi, rsi
js 0x140007759
cmp ebp, eax
jl 0x140007773
mov r8d, 0x658
lea rdx, str.D:External_Farmimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x1ac0]
mov rdi, qword [rax + rsi*8]
test rdi, rdi
je 0x1400077a6
mov rcx, rdi
call fcn.140004890
mov rax, qword [0x1402c9b30]
test rax, rax
je 0x14000779d
dec dword [rax + 0x3b4]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov eax, dword [rbx + 0x1ab8]
inc ebp
inc rsi
cmp ebp, eax
jl 0x140007750
mov rcx, qword [rbx + 0x1ac0]
mov rsi, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x48]
test rcx, rcx
je 0x1400077f1
mov rax, qword [0x1402c9b30]
mov qword [rbx + 0x1ab8], r14
test rax, rax
je 0x1400077e4
dec dword [rax + 0x3b4]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rbx + 0x1ac0], r14
mov rcx, qword [rbx + 0x1ad0]
test rcx, rcx
je 0x140007823
mov rax, qword [0x1402c9b30]
mov qword [rbx + 0x1ac8], r14
test rax, rax
je 0x140007816
dec dword [rax + 0x3b4]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rbx + 0x1ad0], r14
mov rcx, qword [rbx + 0x1ae0]
test rcx, rcx
je 0x140007855
mov rax, qword [0x1402c9b30]
mov qword [rbx + 0x1ad8], r14
test rax, rax
je 0x140007848
dec dword [rax + 0x3b4]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rbx + 0x1ae0], r14
mov qword [rbx + 0x1b10], r14
mov rcx, qword [rbx + 0x1af0]
test rcx, rcx
je 0x14000788e
mov rax, qword [0x1402c9b30]
mov qword [rbx + 0x1ae8], r14
test rax, rax
je 0x140007881
dec dword [rax + 0x3b4]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rbx + 0x1af0], r14
mov rcx, qword [rbx + 0x1b00]
test rcx, rcx
je 0x1400078c0
mov rax, qword [0x1402c9b30]
mov qword [rbx + 0x1af8], r14
test rax, rax
je 0x1400078b3
dec dword [rax + 0x3b4]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rbx + 0x1b00], r14
mov qword [rbx + 0x1cc0], r14
mov qword [rbx + 0x1b28], r14
mov qword [rbx + 0x1b20], r14
mov qword [rbx + 0x1b18], r14
mov qword [rbx + 0x1ba8], r14
mov qword [rbx + 0x1b90], r14
mov qword [rbx + 0x1b30], r14
mov rcx, qword [rbx + 0x1c48]
test rcx, rcx
je 0x140007923
mov rax, qword [0x1402c9b30]
mov qword [rbx + 0x1c40], r14
test rax, rax
je 0x140007916
dec dword [rax + 0x3b4]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rbx + 0x1c48], r14
mov rcx, qword [rbx + 0x1c58]
test rcx, rcx
je 0x140007955
mov rax, qword [0x1402c9b30]
mov qword [rbx + 0x1c50], r14
test rax, rax
je 0x140007948
dec dword [rax + 0x3b4]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rbx + 0x1c58], r14
mov rcx, qword [rbx + 0x1c68]
test rcx, rcx
je 0x140007987
mov rax, qword [0x1402c9b30]
mov qword [rbx + 0x1c60], r14
test rax, rax
je 0x14000797a
dec dword [rax + 0x3b4]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rbx + 0x1c68], r14
mov rcx, qword [rbx + 0x1ca8]
test rcx, rcx
je 0x1400079b9
mov rax, qword [0x1402c9b30]
mov qword [rbx + 0x1ca0], r14
test rax, rax
je 0x1400079ac
dec dword [rax + 0x3b4]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rbx + 0x1ca8], r14
mov rcx, qword [rbx + 0x1cb8]
test rcx, rcx
je 0x1400079f0
mov rax, qword [0x1402c9b30]
mov qword [rbx + 0x1cb0], r14
test rax, rax
je 0x1400079de
dec dword [rax + 0x3b4]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rbx + 0x1cb8], r14
nop dword [rax + rax]
mov rcx, qword [rbx + 0x1e80]
test rcx, rcx
je 0x140007a22
mov rax, qword [0x1402c9b30]
mov qword [rbx + 0x1e78], r14
test rax, rax
je 0x140007a15
dec dword [rax + 0x3b4]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rbx + 0x1e80], r14
cmp qword [rbx + 0x1e90], r14
je 0x140007a5d
mov qword [rbx + 0x1e88], r14
mov rcx, qword [rbx + 0x1e90]
test rcx, rcx
je 0x140007a50
mov rax, qword [0x1402c9b30]
test rax, rax
je 0x140007a50
dec dword [rax + 0x3b4]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rbx + 0x1e90], r14
lea rcx, [rbx + 0x1ea0]
call fcn.14001f430
lea rcx, [rbx + 0x1f60]
call fcn.14001f430
lea rcx, [rbx + 0x2130]
call fcn.140015e70
mov rcx, qword [rbx + 0x2160]
test rcx, rcx
je 0x140007ab3
mov rax, qword [0x1402c9b30]
mov qword [rbx + 0x2158], r14
test rax, rax
je 0x140007aa6
dec dword [rax + 0x3b4]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rbx + 0x2160], r14
mov rcx, qword [rbx + 0x2170]
test rcx, rcx
je 0x140007ae5
mov rax, qword [0x1402c9b30]
mov qword [rbx + 0x2168], r14
test rax, rax
je 0x140007ad8
dec dword [rax + 0x3b4]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rbx + 0x2170], r14
lea rcx, [rbx + 0x20d0]
call fcn.140016050
mov rcx, qword [rbx + 0x2100]
test rcx, rcx
je 0x140007b23
mov rax, qword [0x1402c9b30]
mov qword [rbx + 0x20f8], r14
test rax, rax
je 0x140007b16
dec dword [rax + 0x3b4]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rbx + 0x2100], r14
mov rcx, qword [rbx + 0x2120]
test rcx, rcx
je 0x140007b55
mov rax, qword [0x1402c9b30]
mov qword [rbx + 0x2118], r14
test rax, rax
je 0x140007b48
dec dword [rax + 0x3b4]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rbx + 0x2120], r14
mov rcx, qword [rbx + 0x30d8]
test rcx, rcx
je 0x140007b87
mov rax, qword [0x1402c9b30]
mov qword [rbx + 0x30d0], r14
test rax, rax
je 0x140007b7a
dec dword [rax + 0x3b4]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rbx + 0x30d8], r14
mov rcx, qword [rbx + 0x30e8]
test rcx, rcx
je 0x140007bb9
mov rax, qword [0x1402c9b30]
mov qword [rbx + 0x30e0], r14
test rax, rax
je 0x140007bac
dec dword [rax + 0x3b4]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rbx + 0x30e8], r14
mov rcx, qword [rbx + 0x2198]
test rcx, rcx
je 0x140007beb
mov rax, qword [0x1402c9b30]
mov qword [rbx + 0x2190], r14
test rax, rax
je 0x140007bde
dec dword [rax + 0x3b4]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rbx + 0x2198], r14
mov rcx, qword [rbx + 0x21a8]
test rcx, rcx
je 0x140007c1d
mov rax, qword [0x1402c9b30]
mov qword [rbx + 0x21a0], r14
test rax, rax
je 0x140007c10
dec dword [rax + 0x3b4]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rbx + 0x21a8], r14
mov rcx, qword [rbx + 0x21b8]
test rcx, rcx
je 0x140007c4f
mov rax, qword [0x1402c9b30]
mov qword [rbx + 0x21b0], r14
test rax, rax
je 0x140007c42
dec dword [rax + 0x3b4]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rbx + 0x21b8], r14
mov rcx, qword [rbx + 0x3130]
test rcx, rcx
je 0x140007c81
mov rax, qword [0x1402c9b30]
mov qword [rbx + 0x3128], r14
test rax, rax
je 0x140007c74
dec dword [rax + 0x3b4]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rbx + 0x3130], r14
mov rcx, qword [rbx + 0x3120]
test rcx, rcx
je 0x140007cb3
mov rax, qword [0x1402c9b30]
mov qword [rbx + 0x3118], r14
test rax, rax
je 0x140007ca6
dec dword [rax + 0x3b4]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rbx + 0x3120], r14
cmp qword [rbx + 0x3160], r14
je 0x140007ce3
mov rdi, qword [rbx + 0x3160]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
cmp rdi, rax
je 0x140007cdc
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov qword [rbx + 0x3160], r14
mov rcx, qword [rbx + 0x3170]
test rcx, rcx
je 0x140007d15
mov rax, qword [0x1402c9b30]
mov qword [rbx + 0x3168], r14
test rax, rax
je 0x140007d08
dec dword [rax + 0x3b4]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rbx + 0x3170], r14
mov byte [rbx], r14b
add rsp, 0x20
pop r14
pop rdi
pop rbx
ret