Function at 0x1400390f0
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xf0
mov rax, qword [0x14036e3c8]
xor rax, rsp
mov qword [rbp + 0x27], rax
lea rcx, [rbp - 0x71]
call fcn.1400376e0
nop
mov rbx, qword [rbp - 0x71]
lea rsi, str.current_new
xor ecx, ecx
nop dword [rax]
movzx edi, word [rbx + rcx*2]
movzx eax, word [rsi + rcx*2]
sub edi, eax
jne 0x140039164
movzx edi, word [rbx + rcx*2 + 2]
movzx eax, word [rsi + rcx*2 + 2]
sub edi, eax
jne 0x140039164
add rcx, 2
cmp rcx, 0xc
jne 0x140039140
call fcn.140004ca0
mov rcx, rax
lea r15, [0x140284d90]
test edi, edi
jne 0x1400391d0
test rax, rax
je 0x140039715
mov rdx, qword [rax]
call qword [rdx + Ordinal_26]
add rax, 0x18
mov qword [rsp + 0x20], rax
mov r12, 0xffffffffffffffff
cmp r15, 0x10000
jae 0x1400391af
movzx edx, r15w
lea rcx, [rsp + 0x20]
call fcn.140005670
jmp 0x1400391ce
mov rax, r12
inc rax
cmp word [r15 + rax*2], 0
jne 0x1400391b2
mov r8d, eax
mov rdx, r15
lea rcx, [rsp + 0x20]
call fcn.14000ae30
nop
jmp 0x14003922b
test rcx, rcx
je 0x140039715
mov rax, qword [rax]
call qword [rax + Ordinal_26]
add rax, 0x18
mov qword [rsp + 0x20], rax
mov r12, 0xffffffffffffffff
cmp rsi, 0x10000
jae 0x140039207
movzx edx, si
lea rcx, [rsp + 0x20]
call fcn.140005670
jmp 0x14003922b
mov rax, r12
nop word [rax + rax]
inc rax
cmp word [rsi + rax*2], 0
jne 0x140039210
mov r8d, eax
mov rdx, rsi
lea rcx, [rsp + 0x20]
call fcn.14000ae30
nop
lea rdx, [rbx - 0x18]
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140039246
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + ioctlsocket]
nop
mov rax, qword [0x140372980]
cmp dword [rax - 0x10], 0
jne 0x14003927a
lea rcx, [rbp - 0x69]
call fcn.1400376e0
mov rdx, qword [rbp - 0x69]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14003927a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + ioctlsocket]
mov rcx, qword [0x140372980]
add rcx, 0xffffffffffffffe8
call fcn.14000d080
lea rbx, [rax + 0x18]
mov qword [rbp - 0x61], rbx
lea rcx, [rbp - 0x79]
call fcn.140035410
nop
lea rdx, [0x14028bf20]
mov rax, r12
inc rax
cmp word [rdx + rax*2], 0
jne 0x1400392a6
mov r8d, eax
lea rcx, [rbp - 0x79]
call fcn.1400127b0
mov r14d, reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x21], r14
mov qword [rbp - 0x29], InitCommonControls
movsd xmm0, qword [0x140284db0]
movsd qword [rbp - 0x39], xmm0
movzx eax, word [0x140284db8]
mov word [rbp - 0x31], ax
movzx eax, byte [0x140284dba]
mov byte [rbp - 0x2f], al
mov byte [rbp - 0x2e], 0
xor ecx, ecx
mov rdx, qword [rsp + 0x20]
nop dword [rax + rax]
movzx eax, word [rdx + rcx*2]
inc rcx
movabs r13, 0x8000000000000027
cmp ax, word [r15 + rcx*2 - 2]
jne 0x140039346
cmp rcx, 8
jne 0x140039300
lea rdi, [rbp - 0x39]
mov qword [rbp - 0x29], 7
lea r8d, [rcx - 1]
lea rdx, str.current
mov rcx, rdi
call fcn.140245860
mov byte [rdi + 7], 0
mov r14, qword [rbp - 0x21]
mov rsi, qword [rbp - 0x39]
mov qword [rbp - 0x59], 0
mov edi, reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x41], rdi
mov qword [rbp - 0x49], 7
mov eax, dword [str.release]
mov dword [rbp - 0x59], eax
movzx eax, word [0x14028508c]
mov word [rbp - 0x55], ax
movzx eax, byte [0x14028508e]
mov byte [rbp - 0x53], al
mov byte [rbp - 0x52], 0
xor ecx, ecx
lea rdx, [0x140284dc0]
nop
movzx eax, word [rbx + rcx*2]
inc rcx
cmp ax, word [rdx + rcx*2 - 2]
jne 0x1400393bc
cmp rcx, 5
jne 0x140039390
lea rax, [rbp - 0x59]
mov qword [rbp - 0x49], 4
mov dword [rax], 0x61746562
mov byte [rax + 4], 0
jmp 0x1400393e8
cmp word [rbx], 0x72
jne 0x1400393ec
cmp word [rbx + 2], 0x63
jne 0x1400393ec
cmp word [rbx + 4], 0
jne 0x1400393ec
lea rax, [rbp - 0x59]
mov qword [rbp - 0x49], 2
mov ecx, 0x6372
mov word [rax], cx
mov byte [rax + 2], 0
mov rdi, qword [rbp - 0x41]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
mov r8, qword [rbp - 0x29]
sub rax, r8
cmp rax, 1
jb 0x140039720
lea rdx, [rbp - 0x39]
cmp r14, 0x10
cmovae rdx, rsi
mov qword [rsp + 0x38], rdx
mov qword [rbp + 7], 0
mov qword [rbp + 0x17], 0
mov qword [rbp + 0x1f], 0
lea rax, [r8 + 1]
mov qword [rsp + 0x30], rax
mov ebx, reloc.WS2_32.dll_ntohs
lea r15, [rbp + 7]
cmp rax, rbx
jbe 0x1400394d6
mov rbx, rax
or rbx, 0xf
cmp rbx, rcx
jbe 0x14003948a
mov rbx, rcx
mov rcx, r13
call fcn.140242f80
test rax, rax
je 0x140039726
lea r15, [rax + 0x27]
and r15, 0xffffffffffffffe0
mov qword [r15 - 8], rax
mov rax, qword [rsp + 0x30]
mov rdx, qword [rsp + 0x38]
mov r8, qword [rbp - 0x29]
jmp 0x1400394d2
mov ecx, reloc.WS2_32.dll_shutdown
cmp rbx, rcx
cmovb rbx, rcx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x1400394b2
lea r13, [rcx + 0x27]
cmp r13, rcx
jbe 0x14003970f
jmp 0x14003945d
test rcx, rcx
je 0x1400394cf
call fcn.140242f80
mov r15, rax
mov rax, qword [rsp + 0x30]
mov rdx, qword [rsp + 0x38]
mov r8, qword [rbp - 0x29]
jmp 0x1400394d2
xor r15d, r15d
mov qword [rbp + 7], r15
mov qword [rbp + 0x17], rax
mov qword [rbp + 0x1f], rbx
mov rcx, r15
call fcn.140245860
mov rax, qword [rbp - 0x29]
mov word [r15 + rax], 0xa
lea rdx, [rbp - 0x59]
cmp rdi, 0x10
cmovae rdx, qword [rbp - 0x59]
mov r8, qword [rbp - 0x49]
lea rcx, [rbp + 7]
call fcn.140007930
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x19], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 9], xmm1
xor r15d, r15d
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], r15b
mov rdx, qword [rbp + 0x1f]
cmp rdx, 0x10
jb 0x140039567
inc rdx
mov rcx, qword [rbp + 7]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140039562
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140039726
call fcn.1402434a4
mov qword [rsp + 0x28], r15
lea r8, [0x140285090]
mov rbx, qword [rbp - 0x79]
mov rdx, rbx
lea rcx, [rsp + 0x28]
call fcn.1402571d4
mov r9, qword [rsp + 0x28]
test r9, r9
jne 0x140039593
xor dil, dil
jmp 0x1400395c0
lea rcx, [rbp - 0x19]
cmp qword [rbp - 1], 0x10
cmovae rcx, qword [rbp - 0x19]
mov r8, qword [rbp - 9]
mov edx, 1
call fcn.1402588c0
cmp eax, dword [rbp - 9]
setge dil
mov rcx, qword [rsp + 0x28]
call fcn.14025750c
mov rdx, qword [rbp - 1]
cmp rdx, 0x10
jb 0x1400395fb
inc rdx
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400395f6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003972c
call fcn.1402434a4
mov qword [rbp - 9], r15
mov qword [rbp - 1], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x19], 0
mov rdx, qword [rbp - 0x41]
cmp rdx, 0x10
jb 0x140039647
inc rdx
mov rcx, qword [rbp - 0x59]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140039641
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140039732
call fcn.1402434a4
nop
cmp r14, 0x10
jb 0x14003967f
lea rdx, [r14 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x140039676
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140039709
mov rcx, rsi
call fcn.1402434a4
nop
lea rdx, [rbx - 0x18]
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14003969a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + ioctlsocket]
nop
mov rdx, qword [rbp - 0x61]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400396b9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + ioctlsocket]
nop
mov rdx, qword [rsp + 0x20]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], r12d
sub r12d, 1
jg 0x1400396d8
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [rioctlsocket + 8]
movzx eax, dil
mov rcx, qword [rbp + 0x27]
xor rcx, rsp
call fcn.1402435c0
lea r11, [rsp + 0xf0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.14024a84c
nop
call fcn.140007850
nop
mov ecx, 0x80004005
call fcn.140004b20
nop
call fcn.140007890
int3
call fcn.14024a84c
int3
call fcn.14024a84c
nop
call fcn.14024a84c
int3