Function at 0x1401337d0
Capabilities:
Write file on windows

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x438
mov rsi, qword [0x140207460]
mov rax, qword [rsi]
mov qword [rsp + 0x428], rax
xor eax, eax
mov rax, qword [0x140207c90]
mov r12, rcx
mov qword [rsp + 0x50], 0
mov qword [rsp + 0x58], 0
mov qword [rsp + 0x60], rax
mov rax, qword [rcx + 0x148]
mov rbx, qword [rax]
mov r15, qword [rax + 8]
test byte [rcx + 0x11c], 0x40
je 0x140134030
mov ebp, dword [rcx + 0x140]
mov r13, qword [r12 + 0x1d0]
lea rsi, [rsp + 0x110]
mov ecx, 0x17
xor eax, eax
mov qword [r12 + 0x148], 0
mov rdi, rsi
rep stosq qword [rdi], rax
mov qword [rsp + 0x48], r13
test byte [r12 + 0x116], 2
je 0x140134140
movzx eax, word [r12 + 0x11c]
and ax, 0x201
cmp ax, 1
je 0x140134050
or byte [r12 + 0x11c], 1
mov rcx, qword [r12 + 0x570]
call fcn.140123ac0
mov eax, dword [r12 + 0x144]
lea edx, [rax - 6]
cmp edx, 1
jbe 0x140134100
cmp eax, 8
jne 0x140133d30
test byte [r12 + 0x11c], 0x10
jne 0x140133ea8
mov r9d, dword [r12 + 0x118]
test r9d, r9d
jne 0x140133fc3
mov r8d, dword [rsp + 0x14c]
test r8d, r8d
js 0x1401338fd
mov ecx, dword [r12 + 0x1c8]
test ecx, ecx
jne 0x1401341f0
mov rax, qword [r12 + 0x130]
movzx edx, byte [rsp + 0x140]
mov qword [rsp + 0x118], r13
movdqu xmm1, xmmword [r12 + 0x120]
mov qword [rsp + 0x138], rax
and edx, 0xfffffffe
movzx eax, byte [r12 + 0x11d]
movups xmmword [rsp + 0x128], xmm1
mov ecx, eax
shr cl, 3
and ecx, 1
or edx, ecx
mov byte [rsp + 0x140], dl
mov edx, dword [r12 + 0x6f4]
mov dword [rsp + 0x114], edx
mov edx, eax
shr al, 6
shr dl, 4
and eax, 1
and edx, 1
mov dword [rsp + 0x120], edx
movzx edx, byte [rsp + 0x188]
and edx, 0xfffffffe
or eax, edx
mov byte [rsp + 0x188], al
mov rax, qword [r12 + 0xa68]
mov qword [rsp + 0x158], rax
mov eax, dword [r12 + 0x144]
mov dword [rsp + 0x110], eax
mov rax, qword [r12 + 0x1f8]
mov qword [rsp + 0x170], rax
mov eax, dword [r12 + 0x6b4]
mov dword [rsp + 0x178], eax
mov eax, dword [r12 + 0x138]
mov dword [rsp + 0x148], eax
call fcn.14001aae0
mov qword [rsp + 0x160], r12
cmp qword [r12 + 0x190], 0
mov qword [rsp + 0x168], rax
je 0x140133a0c
cmp qword [r12 + 0x180], 0
je 0x140133a0c
lea rax, [r12 + 0x180]
mov qword [rsp + 0x180], rax
mov rcx, qword [r12 + 0x570]
test rcx, rcx
je 0x140133a25
call fcn.1401227f0
mov dword [rsp + 0x1c0], eax
lea rdi, [rsp + 0x50]
mov rdx, rbx
mov rcx, rsi
mov r8, rdi
call fcn.140041720
mov edx, dword [r12 + 0x1c8]
test edx, edx
jne 0x1401340a8
mov eax, dword [rsp + 0x110]
cmp eax, 8
je 0x140133a88
mov rbx, qword [rsp + 0x150]
test rbx, rbx
je 0x140133a88
cmp byte [rbx], 0
je 0x140133a88
sub eax, 6
cmp eax, 1
jbe 0x140134390
mov rcx, rbx
call sub.msvcrt.dll_strlen
mov rdx, rbx
mov rcx, rdi
mov r8, rax
call fcn.14007e800
mov eax, dword [r12 + 0x1f0]
test eax, eax
jne 0x140134078
mov rdx, qword [rsp + 0x58]
mov eax, 1
test rdx, rdx
jne 0x140133b40
lea edx, [rax*4]
mov rcx, qword [r12 + 0x570]
mov r8, rdi
movzx eax, byte [r12 + 0x11d]
and eax, 0xfffffffb
or eax, edx
mov rdx, qword [r12 + 0x778]
mov byte [r12 + 0x11d], al
call fcn.140123dc0
test byte [r12 + 0x11d], 2
jne 0x1401340c0
mov rcx, rdi
call fcn.14007d7e0
mov rcx, qword [rsp + 0x150]
call fcn.1400d2670
mov eax, dword [rsp + 0x110]
sub eax, 6
cmp eax, 1
jbe 0x140133b58
mov rbx, qword [0x140207460]
mov rax, qword [rsp + 0x428]
sub rax, qword [rbx]
jne 0x14013440c
add rsp, 0x438
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
mov rax, qword [rsp + 0x60]
cmp byte [rax + rdx - 1], 0xa
setne al
jmp 0x140133aab
cmp qword [r12 + 0xae8], 0
je 0x140133c0e
test byte [r12 + 0x11c], 2
lea rax, [0x1401ef300]
lea rcx, str.____n
mov rbx, qword [0x1402077b0]
cmovne rcx, rax
mov rdx, qword [r12 + 0x778]
mov rsi, qword [rbx]
mov rdi, qword [rbx + 8]
mov qword [rbx], 0
mov qword [rbx + 8], 0
call fcn.1401bf070
mov rcx, qword [r12 + 0x778]
or byte [r12 + 0x11c], 2
lea rdx, [0x1401ef634]
mov r8, qword [r12 + 0xaf8]
call fcn.140080920
mov rdx, qword [r12 + 0xaf0]
mov rcx, qword [r12 + 0xae8]
lea r9, [r12 + 0x5b8]
mov r8d, 2
call fcn.1401030d0
mov eax, dword [rsp + 0x110]
mov qword [rbx], rsi
mov qword [rbx + 8], rdi
sub eax, 6
cmp eax, 1
ja 0x140133b13
cmp qword [r12 + 0xb00], 0
je 0x140133b13
mov eax, dword [r12 + 0xb10]
lea rcx, str.____n
pxor xmm0, xmm0
test byte [r12 + 0x11c], 2
mov rbx, qword [0x1402077b0]
mov rdx, qword [r12 + 0x778]
lea rsi, [rsp + 0x1d0]
movups xmmword [rsp + 0xb4], xmm0
mov dword [rsp + 0xb0], eax
lea rax, [0x1401ef300]
cmovne rcx, rax
mov r14, qword [rbx]
mov r15, qword [rbx + 8]
mov dword [rsp + 0xc4], 0
mov byte [rsp + 0xb4], 1
mov qword [rsp + 0xb8], rsi
mov qword [rbx], 0
mov qword [rbx + 8], 0
call fcn.1401bf070
mov r8, qword [r12 + 0xb18]
or byte [r12 + 0x11c], 2
lea rdx, [0x1401ef634]
mov rcx, qword [r12 + 0x778]
call fcn.140080920
mov rax, qword [0x140207cf0]
mov rdx, rsi
mov rcx, qword [rax]
call fcn.14010bc80
mov rax, qword [r12 + 0x778]
mov rcx, rsi
mov qword [rsp + 0x390], rax
mov eax, dword [r12 + 0x6b4]
mov dword [rsp + 0x2cc], eax
call fcn.14010bf80
mov rdx, qword [r12 + 0xb08]
mov rcx, qword [r12 + 0xb00]
lea r8, [rsp + 0xb0]
call fcn.140164a20
mov qword [rbx], r14
mov qword [rbx + 8], r15
jmp 0x140133b13
mov ecx, dword [r12 + 0x6b4]
mov rdi, qword [r12 + 0x778]
mov edx, 6
call fcn.14010a630
mov rdx, rdi
mov rcx, rax
call fcn.1401bf070
cmp dword [r12 + 0x144], 5
jne 0x140134210
cmp qword [r12 + 0x570], 0
je 0x140134340
mov r14, qword [0x140207cf0]
mov rdi, qword [r12 + 0x778]
lea rdx, [rbx + 4]
mov r8d, ebp
mov rcx, qword [r14]
call fcn.14002ce30
mov rdx, rdi
mov rcx, rax
call fcn.1401bf070
test byte [r12 + 0x113], 0x20
jne 0x140134250
cmp qword [r12 + 0xa70], 0
je 0x140133dc4
mov r8d, ebp
mov rdx, rbx
mov rcx, r12
call fcn.140132210
test r15, r15
je 0x140133def
mov rcx, qword [r14]
lea rdx, [r15 + 4]
mov r8d, ebp
call fcn.14002ce30
mov rcx, qword [r12 + 0x778]
lea rdx, str.__from__s_
mov r8, rax
call sub.libintl_8.dll_libintl_fprintf
mov ecx, dword [r12 + 0x6b4]
xor edx, edx
mov rdi, qword [r12 + 0x778]
call fcn.14010a630
mov rdx, rdi
mov rcx, rax
call fcn.1401bf070
mov rdx, rbx
mov rcx, r12
call fcn.1401330d0
mov rdx, qword [r12 + 0x778]
cmp dword [r12 + 0x144], 5
je 0x140134238
mov ecx, 0xa
call fcn.1401bf150
mov rcx, qword [r12 + 0x570]
call fcn.140123940
mov rcx, qword [r12 + 0xa68]
test rcx, rcx
je 0x1401338c0
movzx r9d, byte [r12 + 0x11d]
xor edx, edx
lea r8, [r12 + 0x120]
shr r9b, 3
cmp dword [r12 + 0x144], 5
sete dl
and r9d, 1
call fcn.14004d710
cmp dword [r12 + 0x144], 5
je 0x140133b13
test byte [r12 + 0x11c], 0x10
je 0x1401338cf
nop dword [rax]
mov rax, qword [0x140207c90]
lea rbp, [rsp + 0xb0]
mov ecx, 0xc
lea r15, [rsp + 0x90]
mov qword [rsp + 0x70], 0
mov rdi, rbp
mov r8, r15
mov qword [rsp + 0x80], rax
mov qword [rsp + 0xa0], rax
xor eax, eax
rep stosq qword [rdi], rax
mov rcx, rbx
mov rax, qword [0x140207cf0]
lea rdi, [rsp + 0x70]
mov qword [rsp + 0x78], 0
mov rdx, rdi
mov qword [rsp + 0x90], 0
mov rax, qword [rax]
mov qword [rsp + 0x98], 0
mov r9, qword [rax + 0x100]
call fcn.1400f7750
test eax, eax
jle 0x140133f90
lea rdx, [rsp + 0xb8]
mov rcx, rdi
mov dword [rsp + 0xc0], 1
call fcn.14007d860
mov r8, qword [rsp + 0x98]
mov rdx, qword [rsp + 0xa0]
mov rcx, rbp
mov qword [rsp + 0xb0], rax
call fcn.140121730
mov r8, qword [rsp + 0xd0]
mov edx, eax
test eax, eax
je 0x140133f80
test r8, r8
je 0x1401343f8
mov rcx, r12
call fcn.140132120
mov rcx, rbp
call fcn.1401216a0
mov rcx, rdi
call fcn.14007d7e0
mov rcx, r15
call fcn.14007d7e0
mov r8, r12
mov rdx, rbx
lea rcx, [0x140132320]
call fcn.1400f7e40
mov r9d, dword [r12 + 0x118]
test r9d, r9d
je 0x1401338e0
mov rax, qword [0x140207c90]
xor ebp, ebp
cmp dword [r12 + 0x144], 8
lea rdi, [rsp + 0xb0]
mov qword [rsp + 0xb0], 0
sete bpl
mov qword [rsp + 0xb8], 0
mov qword [rsp + 0xc0], rax
call fcn.14001aae0
lea rcx, [rbx + 4]
mov r9d, ebp
mov rdx, rdi
mov r8, rax
call fcn.1401523d0
xor edx, edx
mov rcx, rdi
call fcn.14007d860
mov qword [rsp + 0x150], rax
jmp 0x1401338e0
mov rax, qword [0x140207cf0]
mov rax, qword [rax]
mov rax, qword [rax + 0x100]
mov ebp, dword [rax + 0x18]
jmp 0x140133839
mov ecx, dword [r12 + 0x6d0]
cmp ecx, 0xa
je 0x1401342b8
mov rdx, qword [r12 + 0x778]
call fcn.1401bf150
jmp 0x14013388d
mov rcx, qword [r12 + 0x778]
mov r8d, dword [rsp + 0x58]
lea rdx, str.log_size__i_n
call sub.libintl_8.dll_libintl_fprintf
mov rcx, qword [r12 + 0x570]
call fcn.140123940
jmp 0x140133a98
mov r8d, 1
xor edx, edx
mov rcx, rdi
call fcn.14016e790
jmp 0x140133a48
mov ecx, dword [r12 + 0x144]
call fcn.14003dcb0
test eax, eax
jne 0x140133aef
test byte [r12 + 0x11d], 4
je 0x1401343e0
mov rdx, qword [r12 + 0x778]
mov ecx, dword [r12 + 0x6d0]
call fcn.1401bf150
jmp 0x140133aef
mov dword [rsp + 0x20], 1
lea r8, [rsp + 0x48]
mov rdx, rbx
mov rcx, r12
lea r9, [rsp + 0x14c]
call fcn.1401334b0
mov qword [rsp + 0x160], r12
mov r13, qword [rsp + 0x48]
mov dword [rsp + 0x144], 1
jmp 0x1401338c0
mov rcx, qword [r12 + 0x570]
call fcn.140123ac0
cmp qword [r12 + 0x570], 0
je 0x140134378
mov r14, qword [0x140207cf0]
mov rsi, qword [r12 + 0x778]
lea rdx, [rbx + 4]
mov r8d, ebp
mov rcx, qword [r14]
call fcn.14002ce30
mov rdx, rsi
mov rcx, rax
call fcn.1401bf070
test byte [r12 + 0x113], 0x20
jne 0x1401342e8
cmp qword [r12 + 0xa70], 0
je 0x1401341ad
mov r8d, ebp
mov rdx, rbx
mov rcx, r12
call fcn.140132210
mov rcx, r12
mov rdx, rbx
call fcn.1401330d0
mov rcx, qword [r12 + 0x570]
test rcx, rcx
je 0x1401341d2
call fcn.140123930
test eax, eax
je 0x140134350
mov rdx, qword [r12 + 0x778]
mov ecx, dword [r12 + 0x6d0]
call fcn.1401bf150
jmp 0x140133b13
mov ecx, 2
call fcn.140021530
mov rcx, rax
call fcn.14003df60
mov dword [rsp + 0x14c], eax
jmp 0x1401338fd
mov r9, qword [r12 + 0x778]
mov r8d, 7
mov edx, 1
lea rcx, [0x1401ef614]
call sub.msvcrt.dll_fwrite
jmp 0x140133d64
mov ecx, 0x20
call fcn.1401bf150
jmp 0x140133e4a
mov rax, qword [r12 + 0x778]
mov rdi, qword [rbx + 0x30]
mov qword [rsp + 0x38], rax
test rdi, rdi
je 0x140133dab
lea rax, [0x1401ef30e]
mov qword [rsp + 0x30], rax
nop word cs:[rax + rax]
mov rax, qword [rdi]
mov rcx, qword [r14]
mov r8d, ebp
lea rdx, [rax + 4]
call fcn.14002ce30
mov rdx, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x38]
mov r8, rax
call sub.libintl_8.dll_libintl_fprintf
mov rdi, qword [rdi + 8]
test rdi, rdi
jne 0x140134280
jmp 0x140133dab
test byte [r12 + 0x11d], 4
jne 0x140134061
mov rcx, qword [r12 + 0x570]
call fcn.140123a00
mov ecx, dword [r12 + 0x6d0]
jmp 0x140134061
mov rsi, qword [rbx + 0x30]
mov r13, qword [r12 + 0x778]
test rsi, rsi
je 0x140134194
lea rax, [0x1401ef30e]
mov qword [rsp + 0x30], rax
nop dword [rax]
mov rax, qword [rsi]
mov rcx, qword [r14]
mov r8d, ebp
lea rdx, [rax + 4]
call fcn.14002ce30
mov rdx, qword [rsp + 0x30]
mov rcx, r13
mov r8, rax
call sub.libintl_8.dll_libintl_fprintf
mov rsi, qword [rsi + 8]
test rsi, rsi
jne 0x140134310
jmp 0x140134194
mov rdx, rbx
mov rcx, r12
call fcn.140070860
jmp 0x140133d73
mov rdx, qword [r12 + 0x778]
mov ecx, 0xa
call fcn.1401bf150
mov rcx, qword [r12 + 0x570]
call fcn.140123c60
jmp 0x1401341d2
mov rdx, rbx
mov rcx, r12
call fcn.140070860
jmp 0x14013415c
movzx eax, byte [r12 + 0x11c]
lea rdx, str.____n
and eax, 2
cmp al, 1
sbb rcx, rcx
and ecx, 3
test al, al
lea rax, [0x1401ef300]
cmovne rdx, rax
lea r8, [rcx + 1]
mov rcx, rdi
call fcn.14007e800
mov rbx, qword [rsp + 0x150]
or byte [r12 + 0x11c], 2
jmp 0x140133a72
mov rcx, qword [r12 + 0x570]
call fcn.140123a00
jmp 0x1401340e4
lea r8, str.No_signature_n
mov rcx, r12
call fcn.140132120
jmp 0x140133f88
call fcn.1401be670
nop
nop word cs:[rax + rax]
nop dword [rax]