Function at 0x1401a97b0
Capabilities:
Write file on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x108
mov rax, qword [0x14082e958]
xor rax, rsp
mov qword [rsp + 0x100], rax
mov dword [rsp + 0xdc], edx
lea rax, [rsp + 0xd8]
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0x80]
cmp edx, 0xffffffff
sete byte [rsp + 0x47]
mov r15, rcx
mov dword [rsp + 0xd8], 0xffffffff
lea rax, [rcx + 0x74]
mov qword [rsp + 0xb8], rax
lea rax, [rcx + 0x68]
mov qword [rsp + 0xb0], rax
lea rax, [rcx + 0x80]
mov qword [rsp + 0xa8], rax
mov eax, 0xf8fe4ff3
mov rdi, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fputc]
jmp 0x1401a986d
mov eax, dword [0x140838518]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xdad25a53
mov ecx, 0xf4791386
nop dword [rax + rax]
cmove eax, ecx
cmp dword [0x14083851c], 0xa
cmovl eax, ecx
cmp eax, 0xf4791385
jle 0x1401a98d0
cmp eax, 0x421e0399
jg 0x1401a9920
cmp eax, 0x25a0b3cc
jle 0x1401a99c0
cmp eax, 0x31dce398
jle 0x1401a9ac6
cmp eax, 0x3c311e14
jg 0x1401a9ce2
cmp eax, 0x31dce399
je 0x1401a983f
cmp eax, 0x3955b60c
jne 0x1401a986d
cmp byte [rsp + 0x4a], 0
mov eax, 0x785916c1
mov ecx, 0x8b33d17b
cmovne eax, ecx
jmp 0x1401a986d
cmp eax, 0xbfa1c69e
jle 0x1401a9970
cmp eax, 0xd3e3386b
jle 0x1401a9a1a
cmp eax, 0xdad25a52
jle 0x1401a9af1
cmp eax, 0xe49e62ed
jg 0x1401a9d09
cmp eax, 0xdad25a53
je 0x1401a9d71
cmp eax, 0xe0acc2cf
jne 0x1401a986d
mov eax, 0xa18efe51
jmp 0x1401a986d
cmp eax, 0x6148402a
jle 0x1401a9a50
cmp eax, 0x6a98bb7f
jle 0x1401a9b43
cmp eax, 0x77a01c1f
jg 0x1401a9d30
cmp eax, 0x6a98bb80
je 0x1401a9d88
cmp eax, 0x743292e2
jne 0x1401a986d
mov eax, dword [rsp + 0x4c]
cmp eax, 2
mov eax, 0xe0acc2cf
mov ecx, 0x77a01c20
cmovb eax, ecx
jmp 0x1401a986d
cmp eax, 0xa18efe50
jle 0x1401a9a8b
cmp eax, 0xaa6b0c5d
jle 0x1401a9b89
cmp eax, 0xb659073e
jg 0x1401a9d56
cmp eax, 0xaa6b0c5e
je 0x1401a9dd5
cmp eax, 0xb2b4e520
jne 0x1401a986d
mov eax, dword [rsp + 0x4c]
cmp eax, 3
mov eax, 0xe0acc2cf
mov ecx, 0xa01c14f4
cmove eax, ecx
jmp 0x1401a986d
cmp eax, 0xaef0fe3
jg 0x1401a9bdf
cmp eax, 0xf4791386
je 0x1401a9e04
cmp eax, 0xf8fe4ff3
je 0x1401a9e33
cmp eax, 0x30b00d5
jne 0x1401a986d
movzx eax, byte [rsp + 0xdc]
mov rcx, qword [rsp + 0x58]
mov rdx, qword [rcx + 0x58]
add dword [rdx], 0xffffffff
mov rcx, qword [rcx + 0x40]
mov rdx, qword [rcx]
lea rbx, [rdx + 1]
mov qword [rcx], rbx
mov byte [rdx], al
mov eax, 0x6a98bb80
jmp 0x1401a986d
cmp eax, 0xc673b140
jg 0x1401a9c38
cmp eax, 0xbfa1c69f
je 0x1401a9e52
cmp eax, 0xc313a2ad
je 0x1401a9e8a
cmp eax, 0xc53fb894
jne 0x1401a986d
mov eax, 0xc7d1b6ca
jmp 0x1401a986d
cmp eax, 0x4ae10717
jg 0x1401a9c66
cmp eax, 0x421e039a
je 0x1401a9e97
cmp eax, 0x430badd8
je 0x1401a9eb0
cmp eax, 0x4a4ff1aa
jne 0x1401a986d
mov eax, 0x25a0b3cd
mov ebp, 0xffffffff
jmp 0x1401a986d
cmp eax, 0x91d5c2d3
jg 0x1401a9ca3
cmp eax, 0x8b33d17b
je 0x1401a9ecc
cmp eax, 0x8e9537b5
je 0x1401a9ede
cmp eax, 0x90b1b2f2
jne 0x1401a986d
mov eax, 0xb659073f
mov r12d, dword [rsp + 0x78]
jmp 0x1401a986d
cmp eax, 0x25a0b3cd
je 0x1401a9eed
cmp eax, 0x2d175cc5
je 0x1401a9f0f
cmp eax, 0x307b9f2e
jne 0x1401a986d
mov eax, 0xa7fa6958
jmp 0x1401a986d
cmp eax, 0xd3e3386c
je 0x1401a9f26
cmp eax, 0xda17655b
je 0x1401a9d46
cmp eax, 0xda2797f1
jne 0x1401a986d
mov rax, qword [rsp + 0x58]
mov rax, qword [rax + 0x40]
mov rcx, qword [rsp + 0x58]
mov rdx, qword [rcx + 0x40]
mov rcx, qword [rcx + 0x58]
movsxd rcx, dword [rcx]
add rcx, qword [rdx]
cmp qword [rax], rcx
mov eax, 0x3c311e15
mov ecx, 0xa0a3d7ea
cmovb eax, ecx
jmp 0x1401a986d
cmp eax, 0x6148402b
je 0x1401a9f44
cmp eax, 0x61e83add
je 0x1401a9ff9
cmp eax, 0x65b9b501
jne 0x1401a986d
mov rax, qword [rsp + 0xa0]
mov rax, qword [rsp + 0x98]
mov rax, qword [rsp + 0x90]
mov eax, 0xb659073f
mov r12d, r14d
jmp 0x1401a986d
cmp eax, 0xa18efe51
je 0x1401aa008
cmp eax, 0xa7630b0f
je 0x1401aa018
cmp eax, 0xa7fa6958
jne 0x1401a986d
mov qword [rsp + 0x58], r15
mov rax, qword [rsp + 0x58]
mov rax, qword [rax + 0x40]
cmp qword [rax], 0
setne byte [rsp + 0x48]
mov eax, dword [0x140838518]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x307b9f2e
mov ecx, 0x2d175cc5
jmp 0x1401a9860
cmp eax, 0xaef0fe4
je 0x1401aa04e
cmp eax, 0x13f27741
je 0x1401aa086
cmp eax, 0x244230ff
jne 0x1401a986d
mov byte [r15 + 0x71], 1
lea rax, [rsp + 0xd7]
cmp qword [rsp + 0xc8], rax
setne byte [rsp + 0x4a]
mov eax, dword [0x140838518]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x91d5c2d4
mov ecx, 0x3955b60c
jmp 0x1401a9860
cmp eax, 0xc673b141
je 0x1401aa095
cmp eax, 0xc7d1b6ca
je 0x1401aa0ac
cmp eax, 0xcc3f4e8a
jne 0x1401a986d
mov eax, 0x65b9b501
mov r14d, r13d
jmp 0x1401a986d
cmp eax, 0x4ae10718
je 0x1401aa0ca
cmp eax, 0x5551f908
je 0x1401aa0e1
cmp eax, 0x5c11ba90
jne 0x1401a986d
mov rax, qword [rsp + 0x50]
mov rdx, qword [rax]
movsx ecx, byte [rsp + 0xdc]
call rdi
mov eax, 0xaef0fe4
jmp 0x1401a986d
cmp eax, 0x91d5c2d4
je 0x1401aa0ff
cmp eax, 0xa01c14f4
je 0x1401aa10e
cmp eax, 0xa0a3d7ea
jne 0x1401a986d
mov eax, dword [0x140838518]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x30b00d5
mov ecx, 0x6a98bb80
jmp 0x1401a9860
cmp eax, 0x3c311e15
je 0x1401aa12c
cmp eax, 0x401a46a3
jne 0x1401a986d
mov eax, 0xc313a2ad
mov esi, dword [rsp + 0xdc]
jmp 0x1401a986d
cmp eax, 0xe49e62ee
je 0x1401aa154
cmp eax, 0xe9236335
jne 0x1401a986d
mov eax, 0x25a0b3cd
mov ebp, dword [rsp + 0xdc]
jmp 0x1401a986d
cmp eax, 0x77a01c20
je 0x1401aa172
cmp eax, 0x785916c1
jne 0x1401a986d
mov eax, 0xcc3f4e8a
mov r13d, 0xffffffff
jmp 0x1401a986d
cmp eax, 0xbba11d93
jne 0x1401aa19c
mov eax, 0xb659073f
mov r12d, 0xffffffff
jmp 0x1401a986d
lea rcx, [rsp + 0xdc]
call fcn.1401ae4c0
mov eax, 0xf4791386
jmp 0x1401a986d
movzx eax, byte [rsp + 0xdc]
mov rcx, qword [rsp + 0x58]
mov rdx, qword [rcx + 0x58]
add dword [rdx], 0xffffffff
mov rcx, qword [rcx + 0x40]
mov rdx, qword [rcx]
lea rbx, [rdx + 1]
mov qword [rcx], rbx
mov byte [rdx], al
mov eax, dword [rsp + 0xdc]
mov dword [rsp + 0x78], eax
mov eax, dword [0x140838518]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x30b00d5
mov ecx, 0x90b1b2f2
jmp 0x1401a9860
mov rax, qword [rsp + 0x50]
mov r9, qword [rax]
mov rcx, qword [rsp + 0x60]
mov r8, qword [rsp + 0x68]
mov edx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
mov rcx, qword [rsp + 0x68]
cmp rcx, rax
mov eax, 0xda17655b
jmp 0x1401aa18f
lea rcx, [rsp + 0xdc]
call fcn.1401ae4c0
mov dword [rsp + 0x74], eax
mov eax, dword [0x140838518]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xdad25a53
mov ecx, 0x13f27741
jmp 0x1401a9860
mov rax, qword [rsp + 0x80]
cmp byte [rsp + 0x47], 0
mov eax, 0xd3e3386c
mov ecx, 0x31dce399
cmovne eax, ecx
jmp 0x1401a986d
mov rax, qword [rsp + 0x50]
mov rdx, qword [rax]
movsx ecx, byte [rsp + 0xd7]
call rdi
cmp eax, 0xffffffff
setne byte [rsp + 0x4b]
mov eax, dword [0x140838518]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x430badd8
mov ecx, 0x4ae10718
jmp 0x1401a9860
mov eax, 0x65b9b501
mov r14d, esi
jmp 0x1401a986d
mov eax, dword [rsp + 0x4c]
cmp eax, 3
mov eax, 0xb2b4e520
mov ecx, 0x743292e2
cmovl eax, ecx
jmp 0x1401a986d
mov rax, qword [rsp + 0x50]
mov rdx, qword [rax]
movsx ecx, byte [rsp + 0xd7]
call rdi
mov eax, 0xbfa1c69f
jmp 0x1401a986d
mov eax, 0xcc3f4e8a
mov r13d, dword [rsp + 0xdc]
jmp 0x1401a986d
mov eax, 0xb659073f
mov r12d, dword [rsp + 0x7c]
jmp 0x1401a986d
mov dword [rsp + 0x7c], ebp
mov eax, dword [0x140838518]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xc53fb894
mov ecx, 0xc7d1b6ca
jmp 0x1401a9860
cmp byte [rsp + 0x48], 0
mov eax, 0x3c311e15
mov ecx, 0xda2797f1
cmovne eax, ecx
jmp 0x1401a986d
mov eax, dword [0x140838518]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x307b9f2e
mov ecx, 0xa7fa6958
jmp 0x1401a9860
lea rdx, [rsp + 0xe0]
mov qword [rsp + 0x90], rdx
mov rax, qword [rsp + 0x90]
movzx eax, byte [rsp + 0xdc]
mov byte [rsp + 0xd7], al
lea r8, [rsp + 0xc8]
mov qword [rsp + 0x98], r8
mov rax, qword [rsp + 0x98]
lea r9, [rsp + 0xc0]
mov qword [rsp + 0xa0], r9
mov rax, qword [rsp + 0xa0]
mov rax, qword [rsp + 0x88]
mov rcx, qword [rax]
mov qword [rsp + 0x60], rdx
mov rax, qword [rsp + 0x60]
add rax, 0x20
mov rdx, qword [rsp + 0x60]
mov rbx, qword [rcx]
mov qword [rsp + 0x38], r9
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x20], r8
mov rdx, qword [rsp + 0xb8]
lea r8, [rsp + 0xd7]
lea r9, [rsp + 0xd8]
call qword [rbx + gethostname]
mov dword [rsp + 0x4c], eax
mov eax, 0x421e039a
jmp 0x1401a986d
mov eax, 0xc313a2ad
mov esi, 0xffffffff
jmp 0x1401a986d
mov eax, 0x65b9b501
mov r14d, 0xffffffff
jmp 0x1401a986d
mov rcx, r15
call fcn.1401a9080
mov rax, qword [rsp + 0xb0]
mov qword [rsp + 0x88], rax
mov rax, qword [rsp + 0x88]
cmp qword [rax], 0
mov eax, 0x6148402b
mov ecx, 0x5551f908
cmove eax, ecx
jmp 0x1401a986d
mov rax, qword [rsp + 0x50]
mov rdx, qword [rax]
movsx ecx, byte [rsp + 0xdc]
call rdi
cmp eax, 0xffffffff
setne byte [rsp + 0x49]
mov eax, dword [0x140838518]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x5c11ba90
mov ecx, 0xc673b141
jmp 0x1401a9860
mov eax, 0xb659073f
mov r12d, dword [rsp + 0x74]
jmp 0x1401a986d
cmp byte [rsp + 0x49], 0
mov eax, 0x4a4ff1aa
mov ecx, 0xe9236335
cmovne eax, ecx
jmp 0x1401a986d
mov eax, dword [0x140838518]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xc53fb894
mov ecx, 0x8e9537b5
jmp 0x1401a9860
cmp byte [rsp + 0x4b], 0
mov eax, 0x61e83add
mov ecx, 0x401a46a3
cmovne eax, ecx
jmp 0x1401a986d
mov eax, dword [0x140838518]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x5c11ba90
mov ecx, 0xaef0fe4
jmp 0x1401a9860
mov byte [r15 + 0x71], 1
mov eax, 0x244230ff
jmp 0x1401a986d
mov eax, dword [0x140838518]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x430badd8
mov ecx, 0xbfa1c69f
jmp 0x1401a9860
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x50]
cmp qword [rax], 0
mov eax, 0xa7630b0f
mov ecx, 0xbba11d93
cmove eax, ecx
jmp 0x1401a986d
mov eax, dword [0x140838518]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x91d5c2d4
mov ecx, 0x244230ff
jmp 0x1401a9860
mov rax, qword [rsp + 0xc0]
sub rax, qword [rsp + 0x60]
mov qword [rsp + 0x68], rax
cmp qword [rsp + 0x68], 0
mov eax, 0xaa6b0c5e
mov ecx, 0xe49e62ee
cmove eax, ecx
jmp 0x1401a986d
cmp eax, 0xb659073f
jne 0x1401a986d
mov rcx, qword [rsp + 0x100]
xor rcx, rsp
call fcn.140384540
mov eax, r12d
add rsp, 0x108
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret