Function at 0x1400355a0
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xe0
mov rax, qword [0x14036a3c8]
xor rax, rsp
mov qword [rbp + 0x2f], rax
mov rcx, qword [rcx]
sub rcx, 0x18
call fcn.14000ce00
add rax, 0x18
mov qword [rbp - 0x69], rax
mov rax, qword [0x14036e940]
mov r13, 0xffffffffffffffff
cmp dword [rax - 0x10], 0
jne 0x140035621
lea rcx, [rbp - 0x61]
call fcn.1400341d0
mov rdx, qword [rbp - 0x61]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140035621
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + ioctlsocket]
mov rcx, qword [0x14036e940]
add rcx, 0xffffffffffffffe8
call fcn.14000ce00
lea rbx, [rax + 0x18]
mov qword [rbp - 0x59], rbx
lea rcx, [rbp - 0x71]
call fcn.140031f00
nop
lea rdx, str.updatepath.bin
mov rax, r13
nop dword [rax]
inc rax
cmp word [rdx + rax*2], 0
jne 0x140035650
mov r8d, eax
lea rcx, [rbp - 0x71]
call fcn.14000cce0
mov r14d, reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x19], r14
mov qword [rbp - 0x21], InitCommonControls
movsd xmm0, qword [0x140288b38]
movsd qword [rbp - 0x31], xmm0
movzx eax, word [0x140288b40]
mov word [rbp - 0x29], ax
movzx eax, byte [0x140288b42]
mov byte [rbp - 0x27], al
mov byte [rbp - 0x26], 0
xor ecx, ecx
mov rdx, qword [rbp - 0x69]
lea r9, [0x140288af8]
nop dword [rax + rax]
movzx eax, word [rdx + rcx*2]
inc rcx
movabs r12, 0x8000000000000027
cmp ax, word [r9 + rcx*2 - 2]
jne 0x1400356f6
cmp rcx, 8
jne 0x1400356b0
lea rdi, [rbp - 0x31]
mov qword [rbp - 0x21], 7
lea r8d, [rcx - 1]
lea rdx, str.current
mov rcx, rdi
call fcn.1402430d0
mov byte [rdi + 7], 0
mov r14, qword [rbp - 0x19]
mov rsi, qword [rbp - 0x31]
mov qword [rbp - 0x51], 0
mov edi, reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x39], rdi
mov qword [rbp - 0x41], 7
mov eax, dword [str.release]
mov dword [rbp - 0x51], eax
movzx eax, word [0x140288b74]
mov word [rbp - 0x4d], ax
movzx eax, byte [0x140288b76]
mov byte [rbp - 0x4b], al
mov byte [rbp - 0x4a], 0
xor ecx, ecx
lea rdx, [0x140288ae8]
nop
movzx eax, word [rbx + rcx*2]
inc rcx
cmp ax, word [rdx + rcx*2 - 2]
jne 0x14003576c
cmp rcx, 5
jne 0x140035740
lea rax, [rbp - 0x51]
mov qword [rbp - 0x41], 4
mov dword [rax], 0x61746562
mov byte [rax + 4], 0
jmp 0x140035798
cmp word [rbx], 0x72
jne 0x14003579c
cmp word [rbx + 2], 0x63
jne 0x14003579c
cmp word [rbx + 4], 0
jne 0x14003579c
lea rax, [rbp - 0x51]
mov qword [rbp - 0x41], 2
mov ecx, 0x6372
mov word [rax], cx
mov byte [rax + 2], 0
mov rdi, qword [rbp - 0x39]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
mov r8, qword [rbp - 0x21]
sub rax, r8
cmp rax, 1
jb 0x140035ac1
lea rdx, [rbp - 0x31]
cmp r14, 0x10
cmovae rdx, rsi
mov qword [rbp - 0x79], rdx
mov qword [rbp + 0xf], 0
mov qword [rbp + 0x1f], 0
mov qword [rbp + 0x27], 0
lea rax, [r8 + 1]
mov qword [rsp + 0x28], rax
mov ebx, reloc.WS2_32.dll_ntohs
lea r15, [rbp + 0xf]
cmp rax, rbx
jbe 0x140035883
mov rbx, rax
or rbx, 0xf
cmp rbx, rcx
jbe 0x140035838
mov rbx, rcx
mov rcx, r12
call fcn.1402407f4
test rax, rax
je 0x140035ac7
lea r15, [rax + 0x27]
and r15, 0xffffffffffffffe0
mov qword [r15 - 8], rax
mov rax, qword [rsp + 0x28]
mov rdx, qword [rbp - 0x79]
mov r8, qword [rbp - 0x21]
jmp 0x14003587f
mov ecx, reloc.WS2_32.dll_shutdown
cmp rbx, rcx
cmovb rbx, rcx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140035860
lea r12, [rcx + 0x27]
cmp r12, rcx
jbe 0x140035abb
jmp 0x14003580c
test rcx, rcx
je 0x14003587c
call fcn.1402407f4
mov r15, rax
mov rax, qword [rsp + 0x28]
mov rdx, qword [rbp - 0x79]
mov r8, qword [rbp - 0x21]
jmp 0x14003587f
xor r15d, r15d
mov qword [rbp + 0xf], r15
mov qword [rbp + 0x1f], rax
mov qword [rbp + 0x27], rbx
mov rcx, r15
call fcn.1402430d0
mov rax, qword [rbp - 0x21]
mov word [r15 + rax], 0xa
lea rdx, [rbp - 0x51]
cmp rdi, 0x10
cmovae rdx, qword [rbp - 0x51]
mov r8, qword [rbp - 0x41]
lea rcx, [rbp + 0xf]
call fcn.140007910
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x11], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 1], xmm1
xor r15d, r15d
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], r15b
mov rdx, qword [rbp + 0x27]
cmp rdx, 0x10
jb 0x140035914
inc rdx
mov rcx, qword [rbp + 0xf]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003590f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140035ac7
call fcn.140240d18
mov qword [rsp + 0x20], r15
lea r8, [0x140288b78]
mov rbx, qword [rbp - 0x71]
mov rdx, rbx
lea rcx, [rsp + 0x20]
call fcn.140254e90
mov r9, qword [rsp + 0x20]
test r9, r9
jne 0x140035940
xor dil, dil
jmp 0x14003596d
lea rcx, [rbp - 0x11]
cmp qword [rbp + 7], 0x10
cmovae rcx, qword [rbp - 0x11]
mov r8, qword [rbp - 1]
mov edx, 1
call fcn.140256278
cmp eax, dword [rbp - 1]
setge dil
mov rcx, qword [rsp + 0x20]
call fcn.140255000
mov rdx, qword [rbp + 7]
cmp rdx, 0x10
jb 0x1400359a8
inc rdx
mov rcx, qword [rbp - 0x11]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400359a3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140035acd
call fcn.140240d18
mov qword [rbp - 1], r15
mov qword [rbp + 7], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x11], 0
mov rdx, qword [rbp - 0x39]
cmp rdx, 0x10
jb 0x1400359f4
inc rdx
mov rcx, qword [rbp - 0x51]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400359ee
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140035ad3
call fcn.140240d18
nop
cmp r14, 0x10
jb 0x140035a2c
lea rdx, [r14 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x140035a23
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140035ab5
mov rcx, rsi
call fcn.140240d18
nop
lea rdx, [rbx - 0x18]
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140035a47
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + ioctlsocket]
nop
mov rdx, qword [rbp - 0x59]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140035a66
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + ioctlsocket]
nop
mov rdx, qword [rbp - 0x69]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], r13d
sub r13d, 1
jg 0x140035a84
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [rioctlsocket + 8]
movzx eax, dil
mov rcx, qword [rbp + 0x2f]
xor rcx, rsp
call fcn.140240e30
lea r11, [rsp + 0xe0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1402480bc
nop
call fcn.140007830
int3
call fcn.140007870
int3
call fcn.1402480bc
int3
call fcn.1402480bc
nop
call fcn.1402480bc
int3