Function at 0x140002a20
Capabilities:
Write file on windows

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x90
mov qword [rsp + 0x58], 0xfffffffffffffffe
mov qword [rsp + 0xe0], rbx
mov rax, qword [0x1400b6f80]
xor rax, rsp
mov qword [rsp + 0x88], rax
mov r13d, edx
mov r12, rcx
cmp edx, 0xffffffff
jne 0x140002a68
xor eax, eax
jmp 0x140002f69
mov rdx, qword [rcx + 0x48]
cmp qword [rdx], 0
je 0x140002aa1
mov rdx, qword [rdx]
mov r8, qword [rcx + 0x60]
movsxd rcx, dword [r8]
add rcx, rdx
cmp rdx, rcx
jae 0x140002aa1
dec dword [r8]
mov rdx, qword [r12 + 0x48]
mov r8, qword [rdx]
lea rcx, [r8 + 1]
mov qword [rdx], rcx
mov byte [r8], r13b
mov eax, r13d
jmp 0x140002f69
mov rdx, qword [r12 + 0x88]
test rdx, rdx
jne 0x140002ab6
or eax, 0xffffffff
jmp 0x140002f69
cmp qword [r12 + 0x70], 0
jne 0x140002ad8
movsx ecx, r13b
call fcn.14006d234
or rbp, 0xffffffffffffffff
cmp eax, ebp
cmovne ebp, r13d
mov eax, ebp
jmp 0x140002f69
mov byte [rsp + 0x40], r13b
mov edx, reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x80], rdx
mov byte [rsp + 0x68], 0
xor ecx, ecx
mov qword [rsp + 0x68], rcx
mov qword [rsp + 0x78], 8
lea rax, [rsp + 0x68]
cmp rdx, 0x10
cmovae rax, rcx
mov byte [rax + 8], cl
or rbp, 0xffffffffffffffff
xor r15d, r15d
mov rdx, qword [rsp + 0x80]
mov r8, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x140002b38
mov rdi, rcx
test rcx, rcx
je 0x140002b64
jmp 0x140002b3d
lea rdi, [rsp + 0x68]
lea rax, [rsp + 0x68]
cmp rdx, 0x10
cmovae rax, rcx
cmp rax, rdi
ja 0x140002b64
lea rax, [rsp + 0x68]
cmp rdx, 0x10
cmovae rax, rcx
add rax, r8
cmp rdi, rax
jbe 0x140002b7b
call fcn.14006dce8
mov rdx, qword [rsp + 0x80]
mov r8, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x68]
lea rax, [rsp + 0x60]
cmp rax, 0xfffffffffffffffc
je 0x140002bb2
lea rax, [rsp + 0x68]
cmp rdx, 0x10
cmovae rax, rcx
add rax, r8
cmp rdi, rax
jb 0x140002bb2
call fcn.14006dce8
mov rdx, qword [rsp + 0x80]
mov r8, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x68]
mov rsi, r8
cmp rdx, 0x10
jb 0x140002bc5
mov rbx, rcx
test rcx, rcx
je 0x140002bf1
jmp 0x140002bca
lea rbx, [rsp + 0x68]
lea rax, [rsp + 0x68]
cmp rdx, 0x10
cmovae rax, rcx
cmp rax, rbx
ja 0x140002bf1
lea rax, [rsp + 0x68]
cmp rdx, 0x10
cmovae rax, rcx
add rax, r8
cmp rbx, rax
jbe 0x140002c08
call fcn.14006dce8
mov rdx, qword [rsp + 0x80]
mov r8, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x68]
lea rax, [rsp + 0x60]
cmp rax, 0xfffffffffffffffc
je 0x140002c2d
lea rax, [rsp + 0x68]
cmp rdx, 0x10
cmovae rax, rcx
add rax, r8
cmp rbx, rax
jb 0x140002c2d
call fcn.14006dce8
mov rcx, qword [r12 + 0x70]
mov r10, qword [rcx]
lea rax, [rdi + rsi]
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x38], rdx
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rbx
lea rax, [rsp + 0x48]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x41]
lea r8, [rsp + 0x40]
lea rdx, [r12 + 0x7c]
call qword [r10 + Ordinal_41]
test eax, eax
js 0x140002f52
cmp eax, 1
jg 0x140002f1b
mov rcx, qword [rsp + 0x68]
mov rdx, qword [rsp + 0x80]
cmp rdx, 0x10
jb 0x140002c98
mov rbx, rcx
test rcx, rcx
je 0x140002cc9
jmp 0x140002c9d
lea rbx, [rsp + 0x68]
lea rax, [rsp + 0x68]
cmp rdx, 0x10
cmovae rax, rcx
cmp rax, rbx
ja 0x140002cc9
lea rax, [rsp + 0x68]
cmp rdx, 0x10
cmovae rax, rcx
mov r8, qword [rsp + 0x78]
add rax, r8
cmp rbx, rax
jbe 0x140002ce0
call fcn.14006dce8
mov rdx, qword [rsp + 0x80]
mov r8, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x68]
lea rax, [rsp + 0x60]
cmp rax, 0xfffffffffffffffc
je 0x140002d17
lea rax, [rsp + 0x68]
cmp rdx, 0x10
cmovae rax, rcx
add rax, r8
cmp rbx, rax
jb 0x140002d17
call fcn.14006dce8
mov rdx, qword [rsp + 0x80]
mov r8, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x68]
mov rdi, qword [rsp + 0x50]
sub rdi, rbx
je 0x140002dd0
cmp rdx, 0x10
jb 0x140002d35
mov rbx, rcx
test rcx, rcx
je 0x140002d61
jmp 0x140002d3a
lea rbx, [rsp + 0x68]
lea rax, [rsp + 0x68]
cmp rdx, 0x10
cmovae rax, rcx
cmp rax, rbx
ja 0x140002d61
lea rax, [rsp + 0x68]
cmp rdx, 0x10
cmovae rax, rcx
add rax, r8
cmp rbx, rax
jbe 0x140002d78
call fcn.14006dce8
mov rdx, qword [rsp + 0x80]
mov r8, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x68]
lea rax, [rsp + 0x60]
cmp rax, 0xfffffffffffffffc
je 0x140002d9d
lea rax, [rsp + 0x68]
cmp rdx, 0x10
cmovae rax, rcx
add rax, r8
cmp rbx, rax
jb 0x140002d9d
call fcn.14006dce8
mov r9, qword [r12 + 0x88]
mov r8, rdi
mov edx, 1
mov rcx, rbx
call fcn.14006e18c
cmp rdi, rax
jne 0x140002ee3
mov rdx, qword [rsp + 0x80]
mov r8, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x68]
mov byte [r12 + 0x79], 1
lea rax, [rsp + 0x40]
cmp qword [rsp + 0x48], rax
jne 0x140002f0b
test rdi, rdi
jne 0x140002b28
cmp r8, 0x20
jae 0x140002efc
mov rax, rbp
sub rax, r8
cmp rax, 8
ja 0x140002e1c
call fcn.14006cba4
mov rdx, qword [rsp + 0x80]
mov r8, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x68]
lea rbx, [r8 + 8]
cmp rbx, 0xfffffffffffffffe
jbe 0x140002e3d
call fcn.14006cba4
mov rdx, qword [rsp + 0x80]
mov r8, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x68]
cmp rdx, rbx
jae 0x140002e63
mov rdx, rbx
lea rcx, [rsp + 0x60]
call fcn.140004d90
mov rdx, qword [rsp + 0x80]
mov r8, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x68]
jmp 0x140002e94
test rbx, rbx
jne 0x140002e94
mov qword [rsp + 0x78], r15
lea rax, [rsp + 0x68]
cmp rdx, 0x10
cmovae rax, rcx
mov byte [rax], r15b
mov rdx, qword [rsp + 0x80]
mov r8, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x68]
jmp 0x140002b28
test rbx, rbx
je 0x140002b28
lea rax, [rsp + 0x68]
cmp rdx, 0x10
cmovae rax, rcx
xor ecx, ecx
mov qword [r8 + rax], rcx
mov qword [rsp + 0x78], rbx
lea rax, [rsp + 0x68]
cmp qword [rsp + 0x80], 0x10
cmovae rax, qword [rsp + 0x68]
mov byte [rbx + rax], cl
mov rdx, qword [rsp + 0x80]
mov r8, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x68]
jmp 0x140002b28
cmp qword [rsp + 0x80], 0x10
jb 0x140002ef8
mov rcx, qword [rsp + 0x68]
call fcn.14006df50
mov eax, ebp
jmp 0x140002f69
cmp rdx, 0x10
jb 0x140002f07
call fcn.14006df50
mov eax, ebp
jmp 0x140002f69
cmp rdx, 0x10
jb 0x140002f16
call fcn.14006df50
mov eax, r13d
jmp 0x140002f69
cmp eax, 3
jne 0x140002f52
movsx ecx, byte [rsp + 0x40]
mov rdx, qword [r12 + 0x88]
call fcn.14006d234
cmp eax, 0xffffffff
cmovne ebp, r13d
cmp qword [rsp + 0x80], 0x10
jb 0x140002f4e
mov rcx, qword [rsp + 0x68]
call fcn.14006df50
mov eax, ebp
jmp 0x140002f69
cmp qword [rsp + 0x80], 0x10
jb 0x140002f67
mov rcx, qword [rsp + 0x68]
call fcn.14006df50
mov eax, ebp
mov rcx, qword [rsp + 0x88]
xor rcx, rsp
call fcn.14006d1b0
mov rbx, qword [rsp + 0xe0]
add rsp, 0x90
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret