Function at 0x1401452c0
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x20
mov r10, qword [0x1403b7328]
xor r13d, r13d
mov rbp, rdx
mov r12, r8
imul rbp, r8
mov esi, r9d
mov r15, rdx
mov r8, rbp
mov r14, rcx
mov ebx, r13d
cmp r9d, 1
jne 0x14014532d
mov rax, qword [0x1403b7298]
mov qword [0x1403b7318], rax
mov eax, dword [0x1403b72e4]
mov dword [0x1403b72e0], eax
mov qword [0x1403b7348], r13
mov qword [0x1403b7320], r10
mov rcx, qword [0x1403b7338]
test rcx, rcx
je 0x14014534f
sub rcx, r10
cmp rbp, rcx
jbe 0x14014534f
lea eax, [r9 - 1]
mov r8, r13
cmp eax, 2
cmova r8, rcx
cmp r9d, 2
jne 0x14014537f
cmp dword [0x14038081c], 0xffffffff
jne 0x140145371
mov eax, dword [0x1403b72e4]
mov dword [0x14038081c], eax
mov qword [0x1403b72e8], r10
inc qword [0x1403b72f0]
inc qword [0x1403b72f8]
test r8, r8
je 0x1401453ba
mov r9, qword [0x1403b7298]
mov rcx, r14
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fwrite
mov r10, qword [0x1403b7328]
mov rdi, rbp
add r10, rax
sub rdi, rax
mov qword [0x1403b7328], r10
mov rbx, rax
test esi, esi
jne 0x1401453bd
add qword [0x1403b7348], rax
jmp 0x1401453bd
mov rdi, rbp
test rdi, rdi
je 0x140145658
mov eax, dword [0x1403b7330]
test eax, eax
je 0x140145637
add qword [0x1403b7340], r10
cmp eax, 1
jne 0x140145401
mov rcx, qword [0x1403b7298]
call sub.api_ms_win_crt_stdio_l1_1_0.dll_ferror
test eax, eax
je 0x140145401
lea rdx, str.Could_not_write_split
mov ecx, recv
call fcn.140106720
cmp dword [0x1403b7330], 2
jne 0x140145438
mov rcx, qword [0x1403b7298]
call sub.api_ms_win_crt_stdio_l1_1_0.dll_ferror
test eax, eax
je 0x140145438
cmp qword [0x1403b7328], 0x10000
jae 0x140145438
lea rdx, str.Not_enough_space_to_write_split
mov ecx, recv
call fcn.140106720
cmp dword [0x1403b7330], 1
jne 0x14014545f
mov eax, dword [0x1403b72e4]
cmp dword [0x1403b72e0], eax
jne 0x14014545f
mov rax, qword [0x1403b7290]
mov qword [0x1403b7310], rax
jmp 0x140145492
mov r8, qword [0x1403b7290]
mov rdx, qword [0x1403b7298]
mov ecx, dword [0x1403b72e4]
call fcn.140145730
mov rcx, qword [0x1403b7290]
mov qword [0x1403b7298], r13
call case.0x1400ef54e.0
mov qword [0x1403b7290], r13
inc dword [0x1403b72e4]
cmp dword [0x1403b7330], 2
mov qword [0x1403b72f0], r13
mov qword [0x1403b7328], r13
jne 0x1401454fc
cmp dword [0x1403b7334], r13d
je 0x1401454d5
mov rdx, qword [0x1404cc3e0]
mov ecx, 7
call sub.api_ms_win_crt_stdio_l1_1_0.dll_putc
mov rcx, qword [0x1404cc3e0]
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fflush
cmp dword [0x1403b7330], 2
jne 0x1401454fc
mov ecx, dword [0x1403b72e4]
call fcn.140144ce0
test eax, eax
jne 0x1401454fc
lea rdx, str.could_not_write_split
lea ecx, [rax + 9]
call fcn.140106720
mov rcx, qword [0x1404cc3d8]
call fcn.140145c60
mov qword [0x1403b7290], rax
test rax, rax
jne 0x14014552a
lea rdx, str.allocating_temp_filename
lea ecx, [rax + 4]
call fcn.140106720
mov rax, qword [0x1403b7290]
lea rdx, [0x140266b34]
mov rcx, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fopen
mov qword [0x1403b7298], rax
test rax, rax
jne 0x14014555b
mov rdx, qword [0x1403b7290]
lea ecx, [rax + 0xa]
call fcn.140106720
mov rax, qword [0x1403b7298]
lea rcx, [rbx + r14]
mov r9, rax
mov r8, rdi
mov edx, 1
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fwrite
add qword [0x1403b7328], rax
lea ecx, [rsi - 1]
add rbx, rax
cmp ecx, 2
jbe 0x140145588
add qword [0x1403b7348], rax
cmp rdi, rax
jbe 0x1401455bf
cmp dword [0x1403b7330], 2
jne 0x1401455ae
lea rdx, [0x140329b42]
lea rcx, str.Not_enough_room_on_disk
call fcn.140106b20
jmp 0x1401454d5
lea rdx, str.Not_enough_room_on_disk
mov ecx, recv
call fcn.140106720
lea eax, [rsi - 1]
cmp eax, 2
ja 0x140145658
cmp dword [0x1403b7330], 1
jne 0x140145606
mov rdx, qword [0x1403b7318]
test rdx, rdx
je 0x140145606
mov ecx, dword [0x1403b72e0]
cmp ecx, dword [0x1403b72e4]
je 0x140145606
mov r8, qword [0x1403b7310]
call fcn.140145730
mov rcx, qword [0x1403b7310]
call case.0x1400ef54e.0
mov rax, qword [0x1403b7290]
mov qword [0x1403b7310], rax
mov rax, qword [0x1403b7298]
mov qword [0x1403b7318], rax
mov eax, dword [0x1403b72e4]
mov dword [0x1403b72e0], eax
mov qword [0x1403b7320], r13
jmp 0x140145658
mov rcx, qword [0x1403b7298]
call sub.api_ms_win_crt_stdio_l1_1_0.dll_ferror
test eax, eax
je 0x140145658
lea rdx, str.write_error_on_zip_file
mov ecx, recv
call fcn.140106720
cmp dword [0x1403b71f8], r13d
je 0x14014570f
mov rdx, qword [0x1403b71e0]
mov rcx, qword [0x1403b71e8]
test rdx, rdx
jle 0x1401456d6
cmp rcx, 0xffffffffffffffff
jne 0x1401456ae
mov rdx, qword [0x1404cc3e0]
mov ecx, 0x20
call sub.api_ms_win_crt_stdio_l1_1_0.dll_putc
mov rcx, qword [0x1404cc3e0]
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fflush
mov rdx, qword [0x1403b71e0]
mov ecx, 1
mov qword [0x1403b71e8], rcx
cmp rbp, 0x3e8
jbe 0x1401456d3
inc rcx
mov rax, rcx
imul rax, r15
imul rax, r12
cmp rdx, rax
cmovle rcx, r13
mov qword [0x1403b71e8], rcx
test rdx, rdx
je 0x14014570f
test rcx, rcx
jne 0x14014570f
mov rdx, qword [0x1404cc3e0]
mov ecx, 0x2e
mov qword [0x1403b71e8], 1
call sub.api_ms_win_crt_stdio_l1_1_0.dll_putc
mov rcx, qword [0x1404cc3e0]
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fflush
mov dword [0x1403b7354], 1
mov rbp, qword [rsp + 0x58]
mov rax, rbx
mov rbx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x60]
add rsp, 0x20
pop r15
pop r14
pop r13
pop r12
pop rdi
ret