Function at 0x140034760
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rbp
push rdi
push r12
push r14
push r15
mov rbp, rsp
sub rsp, 0x80
mov rax, qword [0x1403aa6c8]
xor rax, rsp
mov qword [rbp - 8], rax
mov r14d, edx
mov rdi, rcx
cmp edx, 0xffffffff
jne 0x14003479c
xor eax, eax
jmp 0x140034a4c
mov rax, qword [rcx + 0x40]
mov rdx, qword [rax]
test rdx, rdx
je 0x1400347d8
mov r8, qword [rcx + 0x58]
movsxd r9, dword [r8]
lea rcx, [rdx + r9]
cmp rdx, rcx
jae 0x1400347d8
lea ecx, [r9 - 1]
mov dword [r8], ecx
mov rdx, qword [rdi + 0x40]
mov r8, qword [rdx]
lea rcx, [r8 + 1]
mov qword [rdx], rcx
mov byte [r8], r14b
mov eax, r14d
jmp 0x140034a4c
cmp qword [rdi + 0x80], 0
jne 0x1400347ee
mov rax, 0xffffffffffffffff
jmp 0x140034a4c
mov r8, qword [rdi + 0x18]
lea rax, [rdi + 0x70]
cmp qword [r8], rax
jne 0x14003481b
mov rdx, qword [rdi + 0x90]
mov rcx, qword [rdi + 0x88]
mov qword [r8], rcx
mov rax, qword [rdi + 0x38]
mov qword [rax], rcx
sub edx, ecx
mov rax, qword [rdi + 0x50]
mov dword [rax], edx
cmp qword [rdi + 0x68], 0
jne 0x140034845
movsx ecx, r14b
mov rdx, qword [rdi + 0x80]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fputc]
mov rsi, 0xffffffffffffffff
cmp eax, esi
cmovne esi, r14d
jmp 0x140034a4a
mov byte [rbp - 0x40], r14b
mov edx, send
mov qword [rbp - 0x10], rdx
xor ecx, ecx
mov qword [rbp - 0x28], rcx
mov qword [rbp - 0x18], 8
lea rax, [rbp - 0x28]
mov byte [rax + 8], cl
lea rsi, [rdx - 0x10]
xor r12d, r12d
mov r8, qword [rbp - 0x10]
mov r9, qword [rbp - 0x18]
mov rdx, qword [rbp - 0x28]
nop word [rax + rax]
lea rax, [rbp - 0x28]
cmp r8, 0x10
cmovae rax, rdx
lea rcx, [rbp - 0x28]
cmovae rcx, rdx
add rax, r9
lea rdx, [rbp - 0x38]
mov qword [rsp + 0x38], rdx
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rcx
lea rax, [rbp - 0x30]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x3f]
lea r8, [rbp - 0x40]
lea rdx, [rdi + 0x74]
mov rcx, qword [rdi + 0x68]
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::codecvt_char__char__struct__Mbstatet_::out_struct__Mbstatet____ptr64__char_const____ptr64__char_const____ptr64__char_const____ptr64____ptr64__char____ptr64__char____ptr64__char____ptr64____ptr64_const___ptr64]
test eax, eax
js 0x140034a03
cmp eax, 1
jg 0x1400349e7
lea rax, [rbp - 0x28]
mov rdx, qword [rbp - 0x28]
mov r8, qword [rbp - 0x10]
cmp r8, 0x10
cmovae rax, rdx
mov rbx, qword [rbp - 0x38]
sub rbx, rax
je 0x140034929
lea rcx, [rbp - 0x28]
cmp r8, 0x10
cmovae rcx, rdx
mov r9, qword [rdi + 0x80]
mov r8, rbx
mov edx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
mov r8, qword [rbp - 0x10]
mov rdx, qword [rbp - 0x28]
cmp rbx, rax
jne 0x140034a0b
mov byte [rdi + 0x71], 1
lea rax, [rbp - 0x40]
cmp qword [rbp - 0x30], rax
jne 0x1400349e2
mov r9, qword [rbp - 0x18]
test rbx, rbx
jne 0x140034880
cmp r9, 0x20
jae 0x140034a0b
mov rax, rsi
sub rax, r9
cmp rax, 8
jbe 0x140034a74
lea rbx, [r9 + 8]
cmp rbx, 0xfffffffffffffffe
ja 0x140034a74
cmp r8, rbx
jae 0x1400349c5
mov r8, r9
mov rdx, rbx
lea rcx, [rbp - 0x28]
call fcn.140037cd0
mov r8, qword [rbp - 0x10]
mov r9, qword [rbp - 0x18]
mov rdx, qword [rbp - 0x28]
test rbx, rbx
je 0x140034880
lea rax, [rbp - 0x28]
cmp r8, 0x10
cmovae rax, rdx
xor ecx, ecx
mov qword [r9 + rax], rcx
mov qword [rbp - 0x18], rbx
lea rax, [rbp - 0x28]
cmp qword [rbp - 0x10], 0x10
cmovae rax, qword [rbp - 0x28]
mov byte [rax + rbx], cl
jmp 0x14003486e
test rbx, rbx
jne 0x140034999
mov qword [rbp - 0x18], r12
lea rax, [rbp - 0x28]
cmp r8, 0x10
cmovae rax, rdx
mov byte [rax], r12b
jmp 0x14003486e
mov esi, r14d
jmp 0x140034a0b
cmp eax, 3
jne 0x140034a03
movsx ecx, byte [rbp - 0x40]
mov rdx, qword [rdi + 0x80]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fputc]
cmp eax, esi
cmovne esi, r14d
mov rdx, qword [rbp - 0x28]
mov r8, qword [rbp - 0x10]
cmp r8, 0x10
jb 0x140034a4a
lea rax, [r8 + 1]
mov rcx, rdx
cmp rax, 0x1000
jb 0x140034a42
test cl, 0x1f
jne 0x140034a3b
mov rdx, qword [rdx - 8]
cmp rdx, rcx
jae 0x140034a3b
sub rcx, rdx
sub rcx, 8
cmp rcx, 0x1f
jbe 0x140034a42
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rdx
call fcn.14022a0d0
mov eax, esi
mov rcx, qword [rbp - 8]
xor rcx, rsp
call fcn.140229810
lea r11, [rsp + 0x80]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
lea rcx, [rbp - 0x28]
call fcn.1400371e0
int3