Function at 0x1400a2460
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0x20
mov rax, qword [rcx + 0xa8]
xor r12d, r12d
mov rbx, rcx
test rax, rax
je 0x1400a25d6
cmp byte [rcx + 1], r12b
je 0x1400a25d6
mov byte [rax + 0x18], r12b
mov rdi, qword [rcx + 0xa8]
test rdi, rdi
je 0x1400a25d6
mov rcx, rdi
call fcn.1400bd690
mov rcx, rdi
call fcn.1400bd7e0
mov ebp, r12d
cmp dword [rdi + 0x48], r12d
jle 0x1400a2511
mov r14d, r12d
nop word [rax + rax]
mov rax, qword [rdi + 0x50]
mov rsi, qword [r14 + rax]
test rsi, rsi
je 0x1400a2506
mov rcx, rsi
call fcn.1400c03f0
mov rax, qword [0x140658ab8]
test rax, rax
je 0x1400a24f7
dec dword [rax + 0x3b4]
mov rdx, qword [0x140658ab0]
mov rcx, rsi
call fcn.14009c740
inc ebp
add r14, 8
cmp ebp, dword [rdi + 0x48]
jl 0x1400a24d0
mov rcx, qword [rdi + 0x50]
test rcx, rcx
je 0x1400a2540
mov rax, qword [0x140658ab8]
mov qword [rdi + 0x48], r12
test rax, rax
je 0x1400a2530
dec dword [rax + 0x3b4]
mov rdx, qword [0x140658ab0]
call fcn.14009c740
mov qword [rdi + 0x50], r12
mov rcx, qword [rdi + 0x70]
test rcx, rcx
je 0x1400a2567
mov rax, qword [0x140658ab8]
test rax, rax
je 0x1400a255b
dec dword [rax + 0x3b4]
mov rdx, qword [0x140658ab0]
call fcn.14009c740
mov rcx, qword [rdi + 0x60]
test rcx, rcx
je 0x1400a258e
mov rax, qword [0x140658ab8]
test rax, rax
je 0x1400a2582
dec dword [rax + 0x3b4]
mov rdx, qword [0x140658ab0]
call fcn.14009c740
mov rcx, qword [rdi + 0x50]
test rcx, rcx
je 0x1400a25b5
mov rax, qword [0x140658ab8]
test rax, rax
je 0x1400a25a9
dec dword [rax + 0x3b4]
mov rdx, qword [0x140658ab0]
call fcn.14009c740
mov rax, qword [0x140658ab8]
test rax, rax
je 0x1400a25c7
dec dword [rax + 0x3b4]
mov rdx, qword [0x140658ab0]
mov rcx, rdi
call fcn.14009c740
mov qword [rbx + 0xa8], r12
cmp byte [rbx], r12b
je 0x1400a2d5c
cmp byte [rbx + 0x3021], r12b
je 0x1400a265a
mov rdi, qword [rbx + 0x20]
test rdi, rdi
je 0x1400a265a
mov rsi, qword [0x140658ab8]
lea rcx, [rsp + 0x50]
mov qword [0x140658ab8], rbx
mov dword [rbx + 0x3024], r12d
mov qword [rsp + 0x50], r12
call fcn.1400afd30
lea rdx, [0x14036de90]
mov rcx, rdi
mov rbp, rax
call fcn.14009d380
mov rdi, rax
test rax, rax
je 0x1400a2653
mov r8, qword [rsp + 0x50]
mov r9, rax
mov edx, 1
mov rcx, rbp
call fcn.140292920
mov rcx, rdi
call fcn.14028cfa8
mov qword [0x140658ab8], rsi
mov edi, r12d
cmp dword [rbx + 0x3068], r12d
jle 0x1400a269d
mov rsi, r12
nop dword [rax]
mov rax, qword [rbx + 0x3070]
cmp dword [rsi + rax + 4], 6
jne 0x1400a268f
movsxd rdx, edi
mov rcx, rbx
shl rdx, 5
add rdx, rax
call qword [rsi + rax + reloc.WS2_32.dll_recv]
inc edi
add rsi, 0x20
cmp edi, dword [rbx + 0x3068]
jl 0x1400a2670
mov esi, r12d
cmp dword [rbx + 0x1bb0], r12d
jle 0x1400a26f7
mov r14, r12
nop dword [rax]
mov rax, qword [rbx + 0x1bb8]
mov rdi, qword [r14 + rax]
test rdi, rdi
je 0x1400a26e9
mov rcx, rdi
call fcn.14009f460
mov rax, qword [0x140658ab8]
test rax, rax
je 0x1400a26da
dec dword [rax + 0x3b4]
mov rdx, qword [0x140658ab0]
mov rcx, rdi
call fcn.14009c740
inc esi
add r14, 8
cmp esi, dword [rbx + 0x1bb0]
jl 0x1400a26b0
mov rcx, qword [rbx + 0x1bb8]
test rcx, rcx
je 0x1400a272f
mov rax, qword [0x140658ab8]
mov qword [rbx + 0x1bb0], r12
test rax, rax
je 0x1400a271c
dec dword [rax + 0x3b4]
mov rdx, qword [0x140658ab0]
call fcn.14009c740
mov qword [rbx + 0x1bb8], r12
mov rcx, qword [rbx + 0x1bc8]
test rcx, rcx
je 0x1400a2767
mov rax, qword [0x140658ab8]
mov qword [rbx + 0x1bc0], r12
test rax, rax
je 0x1400a2754
dec dword [rax + 0x3b4]
mov rdx, qword [0x140658ab0]
call fcn.14009c740
mov qword [rbx + 0x1bc8], r12
mov rcx, qword [rbx + 0x1bd8]
test rcx, rcx
je 0x1400a279f
mov rax, qword [0x140658ab8]
mov qword [rbx + 0x1bd0], r12
test rax, rax
je 0x1400a278c
dec dword [rax + 0x3b4]
mov rdx, qword [0x140658ab0]
call fcn.14009c740
mov qword [rbx + 0x1bd8], r12
mov qword [rbx + 0x1c08], r12
mov rcx, qword [rbx + 0x1be8]
test rcx, rcx
je 0x1400a27de
mov rax, qword [0x140658ab8]
mov qword [rbx + 0x1be0], r12
test rax, rax
je 0x1400a27cb
dec dword [rax + 0x3b4]
mov rdx, qword [0x140658ab0]
call fcn.14009c740
mov qword [rbx + 0x1be8], r12
mov rcx, qword [rbx + 0x1bf8]
test rcx, rcx
je 0x1400a2816
mov rax, qword [0x140658ab8]
mov qword [rbx + 0x1bf0], r12
test rax, rax
je 0x1400a2803
dec dword [rax + 0x3b4]
mov rdx, qword [0x140658ab0]
call fcn.14009c740
mov qword [rbx + 0x1bf8], r12
mov qword [rbx + 0x1dc0], r12
mov qword [rbx + 0x1c18], r12
mov qword [rbx + 0x1c10], r12
mov qword [rbx + 0x1c98], r12
mov qword [rbx + 0x1c80], r12
mov qword [rbx + 0x1c20], r12
mov rcx, qword [rbx + 0x1d38]
test rcx, rcx
je 0x1400a2878
mov rax, qword [0x140658ab8]
mov qword [rbx + 0x1d30], r12
test rax, rax
je 0x1400a2865
dec dword [rax + 0x3b4]
mov rdx, qword [0x140658ab0]
call fcn.14009c740
mov qword [rbx + 0x1d38], r12
mov rcx, qword [rbx + 0x1d48]
test rcx, rcx
je 0x1400a28b0
mov rax, qword [0x140658ab8]
mov qword [rbx + 0x1d40], r12
test rax, rax
je 0x1400a289d
dec dword [rax + 0x3b4]
mov rdx, qword [0x140658ab0]
call fcn.14009c740
mov qword [rbx + 0x1d48], r12
mov rcx, qword [rbx + 0x1d58]
test rcx, rcx
je 0x1400a28e8
mov rax, qword [0x140658ab8]
mov qword [rbx + 0x1d50], r12
test rax, rax
je 0x1400a28d5
dec dword [rax + 0x3b4]
mov rdx, qword [0x140658ab0]
call fcn.14009c740
mov qword [rbx + 0x1d58], r12
mov rcx, qword [rbx + 0x1d98]
test rcx, rcx
je 0x1400a2920
mov rax, qword [0x140658ab8]
mov qword [rbx + 0x1d90], r12
test rax, rax
je 0x1400a290d
dec dword [rax + 0x3b4]
mov rdx, qword [0x140658ab0]
call fcn.14009c740
mov qword [rbx + 0x1d98], r12
mov rcx, qword [rbx + 0x1da8]
test rcx, rcx
je 0x1400a2958
mov rax, qword [0x140658ab8]
mov qword [rbx + 0x1da0], r12
test rax, rax
je 0x1400a2945
dec dword [rax + 0x3b4]
mov rdx, qword [0x140658ab0]
call fcn.14009c740
mov qword [rbx + 0x1da8], r12
mov r14d, r12d
cmp dword [rbx + 0x1db0], r12d
jle 0x1400a2a3b
mov r15, r12
nop dword [rax + rax]
mov rax, qword [rbx + 0x1db8]
mov rbp, qword [r15 + rax]
test rbp, rbp
je 0x1400a2a27
mov rdi, qword [rbp + 0x30]
test rdi, rdi
je 0x1400a29b6
mov rcx, rdi
call fcn.14009ba00
mov rax, qword [0x140658ab8]
test rax, rax
je 0x1400a29a7
dec dword [rax + 0x3b4]
mov rdx, qword [0x140658ab0]
mov rcx, rdi
call fcn.14009c740
mov rdi, qword [rbp + 0x38]
test rdi, rdi
je 0x1400a29e8
mov rcx, rdi
call fcn.14009ba00
mov rax, qword [0x140658ab8]
test rax, rax
je 0x1400a29d9
dec dword [rax + 0x3b4]
mov rdx, qword [0x140658ab0]
mov rcx, rdi
call fcn.14009c740
mov edi, 2
lea rsi, [rbp + 0x90]
sub rsi, 0x10
mov rcx, rsi
call fcn.1400b1010
sub rdi, 1
jne 0x1400a29f4
mov rax, qword [0x140658ab8]
test rax, rax
je 0x1400a2a18
dec dword [rax + 0x3b4]
mov rdx, qword [0x140658ab0]
mov rcx, rbp
call fcn.14009c740
inc r14d
add r15, 8
cmp r14d, dword [rbx + 0x1db0]
jl 0x1400a2970
mov rcx, qword [rbx + 0x1db8]
test rcx, rcx
je 0x1400a2a73
mov rax, qword [0x140658ab8]
mov qword [rbx + 0x1db0], r12
test rax, rax
je 0x1400a2a60
dec dword [rax + 0x3b4]
mov rdx, qword [0x140658ab0]
call fcn.14009c740
mov qword [rbx + 0x1db8], r12
lea rcx, [rbx + 0x2050]
call fcn.1400b0830
mov rcx, qword [rbx + 0x2080]
test rcx, rcx
je 0x1400a2ab7
mov rax, qword [0x140658ab8]
mov qword [rbx + 0x2078], r12
test rax, rax
je 0x1400a2aa4
dec dword [rax + 0x3b4]
mov rdx, qword [0x140658ab0]
call fcn.14009c740
mov qword [rbx + 0x2080], r12
mov rcx, qword [rbx + 0x2090]
test rcx, rcx
je 0x1400a2aef
mov rax, qword [0x140658ab8]
mov qword [rbx + 0x2088], r12
test rax, rax
je 0x1400a2adc
dec dword [rax + 0x3b4]
mov rdx, qword [0x140658ab0]
call fcn.14009c740
mov qword [rbx + 0x2090], r12
lea rcx, [rbx + 0x1ff0]
call fcn.1400b09d0
mov rcx, qword [rbx + 0x2020]
test rcx, rcx
je 0x1400a2b33
mov rax, qword [0x140658ab8]
mov qword [rbx + 0x2018], r12
test rax, rax
je 0x1400a2b20
dec dword [rax + 0x3b4]
mov rdx, qword [0x140658ab0]
call fcn.14009c740
mov qword [rbx + 0x2020], r12
mov rcx, qword [rbx + 0x2040]
test rcx, rcx
je 0x1400a2b6b
mov rax, qword [0x140658ab8]
mov qword [rbx + 0x2038], r12
test rax, rax
je 0x1400a2b58
dec dword [rax + 0x3b4]
mov rdx, qword [0x140658ab0]
call fcn.14009c740
mov qword [rbx + 0x2040], r12
mov rcx, qword [rbx + 0x2ff8]
test rcx, rcx
je 0x1400a2ba3
mov rax, qword [0x140658ab8]
mov qword [rbx + 0x2ff0], r12
test rax, rax
je 0x1400a2b90
dec dword [rax + 0x3b4]
mov rdx, qword [0x140658ab0]
call fcn.14009c740
mov qword [rbx + 0x2ff8], r12
mov rcx, qword [rbx + 0x3008]
test rcx, rcx
je 0x1400a2bdb
mov rax, qword [0x140658ab8]
mov qword [rbx + 0x3000], r12
test rax, rax
je 0x1400a2bc8
dec dword [rax + 0x3b4]
mov rdx, qword [0x140658ab0]
call fcn.14009c740
mov qword [rbx + 0x3008], r12
mov rcx, qword [rbx + 0x20b8]
test rcx, rcx
je 0x1400a2c13
mov rax, qword [0x140658ab8]
mov qword [rbx + 0x20b0], r12
test rax, rax
je 0x1400a2c00
dec dword [rax + 0x3b4]
mov rdx, qword [0x140658ab0]
call fcn.14009c740
mov qword [rbx + 0x20b8], r12
mov rcx, qword [rbx + 0x20c8]
test rcx, rcx
je 0x1400a2c4b
mov rax, qword [0x140658ab8]
mov qword [rbx + 0x20c0], r12
test rax, rax
je 0x1400a2c38
dec dword [rax + 0x3b4]
mov rdx, qword [0x140658ab0]
call fcn.14009c740
mov qword [rbx + 0x20c8], r12
mov rcx, qword [rbx + 0x20d8]
test rcx, rcx
je 0x1400a2c83
mov rax, qword [0x140658ab8]
mov qword [rbx + 0x20d0], r12
test rax, rax
je 0x1400a2c70
dec dword [rax + 0x3b4]
mov rdx, qword [0x140658ab0]
call fcn.14009c740
mov qword [rbx + 0x20d8], r12
mov rcx, qword [rbx + 0x3050]
test rcx, rcx
je 0x1400a2cbb
mov rax, qword [0x140658ab8]
mov qword [rbx + 0x3048], r12
test rax, rax
je 0x1400a2ca8
dec dword [rax + 0x3b4]
mov rdx, qword [0x140658ab0]
call fcn.14009c740
mov qword [rbx + 0x3050], r12
mov rcx, qword [rbx + 0x3040]
test rcx, rcx
je 0x1400a2cf3
mov rax, qword [0x140658ab8]
mov qword [rbx + 0x3038], r12
test rax, rax
je 0x1400a2ce0
dec dword [rax + 0x3b4]
mov rdx, qword [0x140658ab0]
call fcn.14009c740
mov qword [rbx + 0x3040], r12
cmp qword [rbx + 0x3088], r12
je 0x1400a2d21
mov rdi, qword [rbx + 0x3088]
mov ecx, 1
call fcn.14028938c
cmp rdi, rax
je 0x1400a2d1a
mov rcx, rdi
call fcn.14028cfa8
mov qword [rbx + 0x3088], r12
mov rcx, qword [rbx + 0x3098]
test rcx, rcx
je 0x1400a2d59
mov rax, qword [0x140658ab8]
mov qword [rbx + 0x3090], r12
test rax, rax
je 0x1400a2d46
dec dword [rax + 0x3b4]
mov rdx, qword [0x140658ab0]
call fcn.14009c740
mov qword [rbx + 0x3098], r12
mov byte [rbx], r12b
mov rbx, qword [rsp + 0x58]
mov rbp, qword [rsp + 0x60]
add rsp, 0x20
pop r15
pop r14
pop r12
pop rdi
pop rsi
ret