Function at 0x1400426a0
Capabilities:
Write file on windows

Disassembly:
push r15
push r14
push rsi
push rdi
push rbx
sub rsp, 0x30
mov rdi, r9
mov r14, r8
mov rsi, rdx
mov rbx, rcx
mov rcx, r8
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov word [rbx + 0x1c], ax
mov eax, dword [rbx]
mov dword [rsp + 0x28], eax
lea rcx, [rsp + 0x28]
mov edx, 1
mov r8d, 4
mov r9, rsi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rax, 4
jne 0x140042ab6
movzx eax, word [rbx + 4]
mov word [rsp + 0x28], ax
lea rcx, [rsp + 0x28]
mov edx, 1
mov r8d, 2
mov r9, rsi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rax, 2
jne 0x140042ac8
movzx eax, word [rbx + 6]
mov word [rsp + 0x28], ax
lea rcx, [rsp + 0x28]
mov edx, 1
mov r8d, 2
mov r9, rsi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rax, 2
jne 0x140042ada
movzx eax, word [rbx + 8]
mov word [rsp + 0x28], ax
lea rcx, [rsp + 0x28]
mov edx, 1
mov r8d, 2
mov r9, rsi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rax, 2
jne 0x140042aec
movzx eax, word [rbx + 0xa]
mov word [rsp + 0x28], ax
lea rcx, [rsp + 0x28]
mov edx, 1
mov r8d, 2
mov r9, rsi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rax, 2
jne 0x140042afe
mov eax, dword [rbx + 0xc]
mov dword [rsp + 0x28], eax
lea rcx, [rsp + 0x28]
mov edx, 1
mov r8d, 4
mov r9, rsi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rax, 4
jne 0x140042b10
mov eax, dword [rbx + 0x10]
mov dword [rsp + 0x28], eax
lea rcx, [rsp + 0x28]
mov edx, 1
mov r8d, 4
mov r9, rsi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rax, 4
jne 0x140042b22
mov eax, dword [rbx + 0x14]
mov dword [rsp + 0x28], eax
lea rcx, [rsp + 0x28]
mov edx, 1
mov r8d, 4
mov r9, rsi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rax, 4
jne 0x140042b34
mov eax, dword [rbx + 0x18]
mov dword [rsp + 0x28], eax
lea rcx, [rsp + 0x28]
mov edx, 1
mov r8d, 4
mov r9, rsi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rax, 4
jne 0x140042b46
movzx eax, word [rbx + 0x1c]
mov word [rsp + 0x28], ax
lea rcx, [rsp + 0x28]
mov edx, 1
mov r8d, 2
mov r9, rsi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rax, 2
jne 0x140042b58
movzx eax, word [rbx + 0x1e]
mov word [rsp + 0x28], ax
lea rcx, [rsp + 0x28]
mov edx, 1
mov r8d, 2
mov r9, rsi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rax, 2
jne 0x140042b6a
movzx eax, word [rbx + 0x20]
mov word [rsp + 0x28], ax
lea rcx, [rsp + 0x28]
mov edx, 1
mov r8d, 2
mov r9, rsi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rax, 2
jne 0x140042b7c
movzx eax, word [rbx + 0x22]
mov word [rsp + 0x28], ax
lea rcx, [rsp + 0x28]
mov edx, 1
mov r8d, 2
mov r9, rsi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rax, 2
jne 0x140042b8e
movzx eax, word [rbx + 0x24]
mov word [rsp + 0x28], ax
lea rcx, [rsp + 0x28]
mov edx, 1
mov r8d, 2
mov r9, rsi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rax, 2
jne 0x140042ba0
mov eax, dword [rbx + 0x28]
mov dword [rsp + 0x28], eax
lea rcx, [rsp + 0x28]
mov edx, 1
mov r8d, 4
mov r9, rsi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rax, 4
jne 0x140042bb2
mov eax, dword [rbx + 0x2c]
mov dword [rsp + 0x28], eax
lea rcx, [rsp + 0x28]
mov edx, 1
mov r8d, 4
mov r9, rsi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rax, 4
jne 0x140042bc4
movzx r15d, word [rbx + 0x1c]
mov edx, 1
mov rcx, r14
mov r8, r15
mov r9, rsi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rax, r15
jne 0x140042bd6
cmp word [rbx + 0x1e], 0
je 0x140042aa8
mov word [rsp + 0x28], 1
lea rcx, [rsp + 0x28]
mov edx, 1
mov r8d, 2
mov r9, rsi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rax, 2
jne 0x140042bf3
mov rbx, qword [rsp + 0x80]
mov word [rsp + 0x28], 0x1c
lea rcx, [rsp + 0x28]
mov edx, 1
mov r8d, 2
mov r9, rsi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rax, 2
jne 0x140042c05
mov r14, qword [rsp + 0x88]
mov qword [rsp + 0x28], rbx
lea rcx, [rsp + 0x28]
mov edx, 1
mov r8d, 8
mov r9, rsi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rax, 8
jne 0x140042c17
mov qword [rsp + 0x28], r14
lea rcx, [rsp + 0x28]
mov edx, 1
mov r8d, 8
mov r9, rsi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rax, 8
jne 0x140042c29
mov qword [rsp + 0x28], rdi
lea rcx, [rsp + 0x28]
mov edx, 1
mov r8d, 8
mov r9, rsi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rax, 8
jne 0x140042c3b
mov dword [rsp + 0x28], 0
lea rcx, [rsp + 0x28]
mov edx, 1
mov r8d, 4
mov r9, rsi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rax, 4
jne 0x140042c4d
xor eax, eax
add rsp, 0x30
pop rbx
pop rdi
pop rsi
pop r14
pop r15
ret
lea rcx, str.write_uint32
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_perror]
jmp 0x1400426ec
lea rcx, str.write_uint16
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_perror]
jmp 0x140042718
lea rcx, str.write_uint16
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_perror]
jmp 0x140042744
lea rcx, str.write_uint16
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_perror]
jmp 0x140042770
lea rcx, str.write_uint16
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_perror]
jmp 0x14004279c
lea rcx, str.write_uint32
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_perror]
jmp 0x1400427c6
lea rcx, str.write_uint32
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_perror]
jmp 0x1400427f0
lea rcx, str.write_uint32
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_perror]
jmp 0x14004281a
lea rcx, str.write_uint32
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_perror]
jmp 0x140042844
lea rcx, str.write_uint16
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_perror]
jmp 0x140042870
lea rcx, str.write_uint16
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_perror]
jmp 0x14004289c
lea rcx, str.write_uint16
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_perror]
jmp 0x1400428c8
lea rcx, str.write_uint16
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_perror]
jmp 0x1400428f4
lea rcx, str.write_uint16
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_perror]
jmp 0x140042920
lea rcx, str.write_uint32
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_perror]
jmp 0x14004294a
lea rcx, str.write_uint32
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_perror]
jmp 0x140042974
lea rcx, str.ZipFileWrite
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_perror]
cmp word [rbx + 0x1e], 0
jne 0x1400429a1
jmp 0x140042aa8
lea rcx, str.write_uint16
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_perror]
jmp 0x1400429cb
lea rcx, str.write_uint16
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_perror]
jmp 0x1400429fd
lea rcx, str.write_filepos
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_perror]
jmp 0x140042a2d
lea rcx, str.write_filepos
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_perror]
jmp 0x140042a55
lea rcx, str.write_filepos
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_perror]
jmp 0x140042a7d
lea rcx, str.write_uint32
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_perror]
jmp 0x140042aa8