Function at 0x1402c4cf0
Capabilities:
Write file on windows

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x128
movaps xmmword [rsp + 0x110], xmm6
mov rbx, qword [rcx]
test rbx, rbx
je 0x1402c5450
mov qword [rcx], 0
mov rcx, rbx
call fcn.140123330
mov rcx, rbx
call fcn.1401202b0
mov rcx, qword [rbx + 0xd0]
test rcx, rcx
je 0x1402c4d58
cmp dword [rcx], 0xbab1e
jne 0x1402c4d58
cmp dword [rbx], 0xc0dedbad
jne 0x1402c4d58
mov rdx, rbx
call fcn.1402c3db0
nop word [rax + rax]
mov rcx, qword [rbx + 0xd8]
test rcx, rcx
je 0x1402c4d7b
cmp dword [rcx], 0xbab1e
je 0x1402c54e6
mov qword [rbx + 0xd8], 0
cmp qword [rbx + 0xed8], 0
lea rsi, [rbx + 0xec0]
je 0x1402c4dac
nop dword [rax]
mov rdx, qword [rbx + 0xec8]
xor r8d, r8d
mov rcx, rsi
call fcn.14011de00
cmp qword [rbx + 0xed8], 0
jne 0x1402c4d90
mov dword [rbx], 0
mov rdi, qword [0x14048b5b0]
test byte [rbx + 0x1339], 4
je 0x1402c4dd2
mov rdi, qword [0x14048b5b0]
mov rcx, qword [rbx + 0x1190]
call qword [rdi]
mov rcx, rbx
call fcn.1401334b0
mov rcx, qword [rbx + 0xcf8]
test rcx, rcx
je 0x1402c4e00
mov rax, qword [rbx + 0xe0]
test rax, rax
je 0x1402c50d8
test byte [rax + 4], 0x10
je 0x1402c50d8
mov rax, qword [0x14048b6f0]
mov rcx, rbx
mov rax, qword [rax]
call qword [rax + 0x88]
mov rcx, qword [rbx + 0xce0]
call qword [rdi]
mov rcx, qword [rbx + 0xd88]
mov qword [rbx + 0xce0], 0
call qword [rdi]
mov edx, dword [rbx + 0x1460]
mov qword [rbx + 0xd88], 0
test edx, edx
je 0x1402c4e4d
mov rcx, rbx
call fcn.14013bca0
mov rcx, qword [rbx + 0x198]
call qword [rdi]
mov qword [rbx + 0x198], 0
test byte [rbx + 0x133a], 4
je 0x1402c4e7a
mov rcx, qword [rbx + 0x1228]
call qword [rdi]
and byte [rbx + 0x133a], 0xfb
mov qword [rbx + 0x1228], 0
mov rcx, rbx
call fcn.140134510
mov rcx, qword [rbx + 0xcc8]
call qword [rdi]
mov rcx, qword [rbx + 0xca8]
mov qword [rbx + 0xcc8], 0
call qword [rdi]
pxor xmm0, xmm0
mov rcx, qword [rbx + 0xcd0]
mov qword [rbx + 0xca8], 0
movups xmmword [rbx + 0xcb0], xmm0
call qword [rdi]
mov edx, 1
mov rcx, rbx
mov qword [rbx + 0xcd0], 0
call fcn.140144700
mov rsi, qword [rbx + 0xaf8]
mov rbp, qword [rbx + 0x988]
mov qword [rsp + 0xd0], 0
test rsi, rsi
je 0x1402c4f1d
mov eax, dword [rsi + 0x28]
and eax, 4
test rbp, rbp
je 0x1402c5500
test eax, eax
jne 0x1402c4f1d
cmp byte [rbp], 0
jne 0x1402c54b8
lea rcx, [rbx + 0xaf8]
call fcn.14013b340
mov rsi, qword [rbx + 0xaf0]
mov qword [rsp + 0xc0], 0
mov rbp, qword [rbx + 0x990]
test rsi, rsi
je 0x1402c5120
mov eax, dword [rsi + 0x28]
and eax, 2
test rbp, rbp
je 0x1402c5520
test eax, eax
jne 0x1402c4f69
cmp byte [rbp], 0
jne 0x1402c5480
cmp qword [rbx + 0x2c8], 0
je 0x1402c5120
mov rax, qword [rsi + 0x18]
mov r13, qword [rsi]
mov qword [rsp + 0xd0], 0
movabs rsi, 0x7fffffffffffffff
mov rbp, qword [sym.imp.msvcrt.dll__gmtime64]
movabs r12, 0x6574696d696c6e75
mov qword [rsp + 0xd8], rax
test r13, r13
jne 0x1402c506f
jmp 0x1402c5120
mov qword [rsp + 0xc8], rax
lea rcx, [rsp + 0xc8]
call rbp
test rax, rax
je 0x1402c5120
mov edx, dword [rax + 0x10]
mov r9d, dword [rax + 0xc]
lea rcx, [rsp + 0xf4]
mov r14d, dword [rax]
mov r11d, dword [rax + 4]
mov r10d, dword [rax + 8]
mov r8d, dword [rax + 0x14]
lea eax, [rdx + 1]
mov dword [rsp + 0x28], r9d
mov dword [rsp + 0x40], r14d
mov edx, 0x12
mov dword [rsp + 0x38], r11d
lea r9d, [r8 + 0x76c]
lea r8, str._d_02d_02d__02d:_02d:_02d
mov dword [rsp + 0x30], r10d
mov dword [rsp + 0x20], eax
call fcn.14011e860
mov r9, qword [rbx + 0x2d0]
lea rdx, [rsp + 0xe0]
lea r8, [rsp + 0xd0]
mov rcx, rbx
call qword [rbx + 0x2c8]
cmp eax, 2
je 0x1402c5120
test eax, eax
jne 0x1402c5120
add qword [rsp + 0xd0], 1
test r13, r13
je 0x1402c5120
mov r14, qword [r13]
mov r13, qword [r13 + 0x10]
mov rcx, qword [r14 + 0x18]
mov qword [rsp + 0xe0], rcx
call sub.msvcrt.dll_strlen
movzx edx, byte [r14 + 0x20]
mov qword [rsp + 0xe8], rax
movzx eax, byte [rsp + 0xf0]
and edx, 1
and eax, 0xfffffffe
or eax, edx
mov byte [rsp + 0xf0], al
mov rax, qword [r14 + 0x28]
cmp rax, rsi
jne 0x1402c4fc0
mov eax, 0x64
mov qword [rsp + 0xf4], r12
mov word [rsp + 0xfc], ax
jmp 0x1402c502c
xor esi, esi
cmp qword [rbx + 0x6f0], 0
je 0x1402c510c
nop dword [rax]
lea rax, [rsi + rsi*2]
add rsi, 1
shl rax, 6
add rcx, rax
call fcn.14013ad20
cmp rsi, qword [rbx + 0x6f0]
mov rcx, qword [rbx + 0xcf8]
jb 0x1402c50e8
call qword [rdi]
mov qword [rbx + 0xcf8], 0
jmp 0x1402c4e00
lea rcx, [rbx + 0xaf0]
call fcn.140115420
lea rcx, [rbx + 0xda0]
call fcn.140139600
lea rcx, [rbx + 0xde0]
call fcn.140139600
mov rcx, qword [rbx + 0x13c8]
call qword [rdi]
mov rcx, qword [rbx + 0x13d0]
mov qword [rbx + 0x13c8], 0
call qword [rdi]
lea rcx, [rbx + 0xe40]
mov qword [rbx + 0x13d0], 0
call fcn.1401402d0
mov rcx, qword [rbx + 0xe58]
call qword [rdi]
jmp 0x1402c51a7
mov rsi, qword [rax + 8]
mov rcx, rbx
mov rdx, rsi
call fcn.14011dd10
mov rcx, qword [rbx + 0xa70]
test rcx, rcx
jne 0x1402c5438
mov rax, qword [rbx + 0xa80]
test rax, rax
jne 0x1402c5188
mov rcx, qword [rbx + 0xa70]
test rcx, rcx
je 0x1402c51c7
mov rdx, rbx
call fcn.14011dd10
mov rax, qword [rbx + 0xe0]
test rax, rax
je 0x1402c5230
test byte [rax + 4], 2
je 0x1402c5470
mov r10, qword [rax + 0x10]
test r10, r10
je 0x1402c5852
mov r9, qword [rax + 0x20]
mov edx, 1
mov r8d, 2
mov rcx, rbx
call r10
mov rax, qword [rbx + 0xe0]
mov edx, dword [rax + 8]
sub edx, 1
mov dword [rax + 8], edx
test byte [rax + 4], 2
je 0x1402c5230
mov r9, qword [rax + 0x18]
test r9, r9
je 0x1402c5230
mov r8, qword [rax + 0x20]
mov edx, 1
mov rcx, rbx
call r9
nop dword [rax]
mov rcx, qword [rbx + 0x12c8]
call qword [rdi]
mov rcx, qword [rbx + 0x12d0]
mov qword [rbx + 0x12c8], 0
call qword [rdi]
mov rcx, qword [rbx + 0x12e0]
mov qword [rbx + 0x12d0], 0
call qword [rdi]
mov rcx, qword [rbx + 0x12d8]
mov qword [rbx + 0x12e0], 0
call qword [rdi]
mov rcx, qword [rbx + 0x1310]
mov qword [rbx + 0x12d8], 0
call qword [rdi]
mov rcx, qword [rbx + 0x12e8]
mov qword [rbx + 0x1310], 0
call qword [rdi]
mov rcx, qword [rbx + 0x12f0]
mov qword [rbx + 0x12e8], 0
call qword [rdi]
mov rcx, qword [rbx + 0x12f8]
mov qword [rbx + 0x12f0], 0
call qword [rdi]
mov rcx, qword [rbx + 0x1300]
mov qword [rbx + 0x12f8], 0
call qword [rdi]
mov rcx, qword [rbx + 0x1308]
mov qword [rbx + 0x1300], 0
call qword [rdi]
mov rcx, qword [rbx + 0x1318]
mov qword [rbx + 0x1308], 0
call qword [rdi]
mov rcx, qword [rbx + 0x1320]
mov qword [rbx + 0x1318], 0
call qword [rdi]
mov rcx, qword [rbx + 0x1328]
mov qword [rbx + 0x1320], 0
call qword [rdi]
mov rcx, qword [rbx + 0x1330]
mov qword [rbx + 0x1328], 0
call qword [rdi]
mov rsi, qword [rbx + 0x1b8]
mov qword [rbx + 0x1330], 0
test rsi, rsi
je 0x1402c53b8
pxor xmm6, xmm6
mov rcx, qword [rsi + 0x220]
call qword [rdi]
movups xmmword [rsi + 0x228], xmm6
mov qword [rsi + 0x220], 0
mov rsi, qword [rbx + 0x1b8]
mov rcx, qword [rsi + 0x458]
call qword [rdi]
mov rax, qword [rbx + 0x1b8]
movups xmmword [rsi + 0x460], xmm6
mov qword [rsi + 0x458], 0
mov rcx, qword [rax]
call fcn.140124050
mov rcx, qword [rbx + 0x1b8]
call qword [rdi]
mov qword [rbx + 0x1b8], 0
lea rcx, [rbx + 0x1340]
call fcn.140138f20
mov rcx, rbx
call fcn.140132d40
mov rsi, qword [rbx + 0x1268]
test rsi, rsi
je 0x1402c53ee
nop dword [rax + rax]
mov rcx, qword [rsi]
mov rsi, qword [rsi + 0x10]
call qword [rdi]
test rsi, rsi
jne 0x1402c53e0
pxor xmm0, xmm0
mov rax, qword [rdi]
mov rcx, rbx
mov qword [rbx + 0x1280], 0
mov qword [rbx + 0x1278], 0
movups xmmword [rbx + 0x1268], xmm0
movaps xmm6, xmmword [rsp + 0x110]
add rsp, 0x128
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
jmp rax
xor r8d, r8d
mov rdx, rsi
call fcn.1402c4210
jmp 0x1402c51a7
movaps xmm6, xmmword [rsp + 0x110]
add rsp, 0x128
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
mov edx, dword [rax + 8]
sub edx, 1
mov dword [rax + 8], edx
jmp 0x1402c5230
lea r9, [rsp + 0xc0]
lea r8, [rsp + 0xb8]
mov rdx, rbp
mov rcx, rbx
call fcn.140143850
test eax, eax
je 0x1402c5701
mov rcx, qword [rsp + 0xc0]
call qword [rdi]
jmp 0x1402c4f69
lea r9, [rsp + 0xd0]
lea r8, [rsp + 0xc8]
mov rdx, rbp
mov rcx, rbx
call fcn.140143850
test eax, eax
je 0x1402c5532
mov rcx, qword [rsp + 0xd0]
call qword [rdi]
jmp 0x1402c4f1d
cmp byte [rcx + 0x18b], 0
jne 0x1402c4d70
call fcn.1402c4060
jmp 0x1402c4d70
mov rbp, qword [rsi]
test eax, eax
jne 0x1402c4f1d
test rbp, rbp
jne 0x1402c4f13
jmp 0x1402c4f1d
mov rbp, qword [rsi + 0x20]
test rbp, rbp
jne 0x1402c4f5b
jmp 0x1402c4f69
mov r9, qword [rsp + 0xc8]
mov r8d, 0x75
mov edx, 1
lea rcx, str._Your_alt_svc_cache._https:__curl.se_docs_alt_svc.html_n_This_file_was_generated_by_libcurl__Edit_at_your_own_risk._n
call sub.msvcrt.dll_fwrite
mov r12, qword [rsi + 8]
test r12, r12
je 0x1402c58ab
lea rax, [rsp + 0xe0]
mov qword [rsp + 0x98], rbx
mov qword [rsp + 0x90], rax
mov qword [rsp + 0xa8], rbp
mov qword [rsp + 0xa0], rdi
jmp 0x1402c568d
mov edx, dword [rax + 0x10]
mov ebp, dword [rax]
mov edi, dword [rax + 4]
mov esi, dword [rax + 8]
mov r11d, dword [rax + 0xc]
mov r8d, dword [rbx + 0x1c]
add edx, 1
mov eax, dword [rax + 0x14]
mov r14d, dword [rbx + 0x2c]
movzx r13d, byte [rbx + 0x28]
movzx r10d, word [rbx + 0x18]
lea r15d, [rax + 0x76c]
mov rcx, qword [rbx + 0x10]
lea rax, [0x140485b93]
cmp r8d, 0x10
je 0x1402c55f2
lea rax, [0x140485b96]
cmp r8d, 0x20
je 0x1402c55f2
cmp r8d, 8
lea rax, [0x140485306]
lea r9, [0x140485b90]
cmove rax, r9
movzx r9d, word [rbx + 8]
lea r8, [0x140485b93]
mov dword [rsp + 0x8c], r9d
mov r9, qword [rbx]
mov ebx, dword [rbx + 0xc]
cmp ebx, 0x10
je 0x1402c5632
lea r8, [0x140485b96]
cmp ebx, 0x20
je 0x1402c5632
cmp ebx, 8
lea r8, [0x140485306]
lea rbx, [0x140485b90]
cmove r8, rbx
mov qword [rsp + 0x28], rax
mov eax, dword [rsp + 0x8c]
mov dword [rsp + 0x48], edx
lea rdx, str._s__s__u__s__s__u___d_02d_02d__02d:_02d:_02d___u__d_n
mov qword [rsp + 0x30], rcx
mov rcx, qword [rsp + 0x80]
mov dword [rsp + 0x78], r14d
mov dword [rsp + 0x70], r13d
mov dword [rsp + 0x68], ebp
mov dword [rsp + 0x60], edi
mov dword [rsp + 0x58], esi
mov dword [rsp + 0x50], r11d
mov dword [rsp + 0x40], r15d
mov dword [rsp + 0x38], r10d
mov dword [rsp + 0x20], eax
call fcn.14011ff50
test r12, r12
je 0x1402c5893
mov rbx, qword [r12]
mov rax, qword [rsp + 0xc8]
mov r12, qword [r12 + 0x10]
mov rcx, qword [rsp + 0x90]
mov qword [rsp + 0x80], rax
mov rax, qword [rbx + 0x20]
mov qword [rsp + 0xe0], rax
call qword [sym.imp.msvcrt.dll__gmtime64]
test rax, rax
jne 0x1402c5590
mov rcx, qword [rsp + 0xc8]
mov rbx, qword [rsp + 0x98]
mov rdi, qword [rsp + 0xa0]
call sub.msvcrt.dll_fclose
mov rcx, qword [rsp + 0xd0]
test rcx, rcx
je 0x1402c58da
call sub.msvcrt.dll__unlink
jmp 0x1402c54d7
mov r9, qword [rsp + 0xb8]
mov r8d, 0x6f
mov edx, 1
lea rcx, str._Your_HSTS_cache._https:__curl.se_docs_hsts.html_n_This_file_was_generated_by_libcurl__Edit_at_your_own_risk._n
call sub.msvcrt.dll_fwrite
mov r12, qword [rsi]
test r12, r12
je 0x1402c5868
mov qword [rsp + 0x80], rbp
movabs r15, 0x7fffffffffffffff
jmp 0x1402c57d4
mov qword [rsp + 0xe0], rax
lea rcx, [rsp + 0xe0]
call qword [sym.imp.msvcrt.dll__gmtime64]
test rax, rax
je 0x1402c582a
mov r9d, dword [rax]
mov ecx, dword [rax + 0xc]
lea r8, [0x140485b99]
lea rbp, [0x140485306]
mov edx, dword [rax + 0x10]
mov r11d, dword [rax + 4]
mov r10d, dword [rax + 8]
mov eax, dword [rax + 0x14]
cmp byte [r13 + 0x20], 0
mov r13, qword [r13 + 0x18]
mov dword [rsp + 0x48], r9d
cmove r8, rbp
add edx, 1
add eax, 0x76c
mov dword [rsp + 0x30], ecx
mov dword [rsp + 0x28], edx
mov r9, r13
mov rcx, r14
mov dword [rsp + 0x40], r11d
lea rdx, str._s_s___d_02d_02d__02d:_02d:_02d__n
mov dword [rsp + 0x38], r10d
mov dword [rsp + 0x20], eax
call fcn.14011ff50
test r12, r12
je 0x1402c5860
mov r13, qword [r12]
mov r14, qword [rsp + 0xb8]
mov r12, qword [r12 + 0x10]
mov rax, qword [r13 + 0x28]
cmp rax, r15
jne 0x1402c5748
lea rax, str.unlimited
cmp byte [r13 + 0x20], 0
mov r9, qword [r13 + 0x18]
lea r8, [0x140485b99]
mov qword [rsp + 0x20], rax
lea rax, [0x140485306]
lea rdx, str._s_s___s__n
mov rcx, r14
cmove r8, rax
call fcn.14011ff50
jmp 0x1402c57cb
mov rcx, qword [rsp + 0xb8]
call sub.msvcrt.dll_fclose
mov rcx, qword [rsp + 0xc0]
test rcx, rcx
je 0x1402c58e3
call sub.msvcrt.dll__unlink
jmp 0x1402c54a3
mov edx, dword [rax + 8]
sub edx, 1
mov dword [rax + 8], edx
jmp 0x1402c5215
mov rbp, qword [rsp + 0x80]
mov rcx, qword [rsp + 0xb8]
call sub.msvcrt.dll_fclose
mov rcx, qword [rsp + 0xc0]
test rcx, rcx
je 0x1402c58e3
mov rdx, rbp
call fcn.140129790
test eax, eax
jne 0x1402c5837
jmp 0x1402c54a3
mov rbx, qword [rsp + 0x98]
mov rbp, qword [rsp + 0xa8]
mov rdi, qword [rsp + 0xa0]
mov rcx, qword [rsp + 0xc8]
call sub.msvcrt.dll_fclose
mov rcx, qword [rsp + 0xd0]
test rcx, rcx
je 0x1402c58da
mov rdx, rbp
call fcn.140129790
test eax, eax
jne 0x1402c56e6
jmp 0x1402c54d7
xor ecx, ecx
call qword [rdi]
jmp 0x1402c4f1d
xor ecx, ecx
call qword [rdi]
jmp 0x1402c4f69