Function at 0x457c60
Capabilities:
Write file on windows

Disassembly:
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x2d0
cmp qword [r8 + 0x118], 0xffffffffffffffff
mov rdi, qword [rsp + 0x338]
mov rbp, rcx
mov rbx, rdx
mov rsi, r8
mov r14, r9
je 0x4581f5
mov rax, qword [rsp + 0x340]
lea r13, [rbx + 0x40]
mov qword [rbx + 0x40], 0
mov qword [rbx + 0x48], 0
mov dword [rbx + 8], 3
mov qword [rbx + 0x80], rsi
mov dword [rbx + 0x88], 0
mov qword [rbx + 0x70], rax
mov qword [rbx + 0xa0], 0
mov qword [rbx + 0xa8], 0xffffffffffffffff
mov qword [r13 + 0x10], 0
mov qword [r13 + 0x18], 0
mov edx, dword [rsi + 0x110]
test edx, edx
je 0x457e84
test byte [rsi + 0x5b], 1
jne 0x458050
test rdi, rdi
mov dword [rsp + 0x40], 0
je 0x45807a
mov edx, dword [rsi + 0x1e0]
test edx, edx
je 0x4582e0
lea r8, [rsp + 0x50]
mov rcx, rdi
call fcn.00462160
test eax, eax
mov r12d, eax
jne 0x458038
mov eax, dword [rdi + 0x118]
mov edx, dword [rsp + 0x40]
mov dword [rsp + 0x2c4], eax
mov eax, edx
or eax, 2
test byte [rdi + 0x59], 0x10
mov dword [rsp + 0x40], eax
je 0x457d69
mov eax, edx
or eax, 6
mov dword [rsp + 0x40], eax
cmp dword [rsp + 0x330], 1
je 0x4581a1
test al, 1
mov r12, r13
mov rdi, rbx
jne 0x4581b0
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov qword [r12], 0
mov qword [r12 + 8], 0
mov edx, 1
mov qword [r12 + 0x10], 0
mov qword [r12 + 0x18], 0
call qword [sym.imp.KERNEL32.dll_CreateEventA]
test rax, rax
mov qword [rdi + 0x58], rax
je 0x458529
mov eax, dword [rsp + 0x40]
mov rcx, qword [rsi + 0x118]
lea rdx, [rsp + 0x40]
mov qword [rsp + 0x20], r12
and eax, 2
cmp eax, 1
sbb eax, eax
xor r9d, r9d
and eax, 0xfffffd88
lea r8d, [rax + 0x288]
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x4582f2
mov rcx, qword [rdi + 0x58]
mov qword [rdi + 0x60], 0
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [rsi + 0x7c]
mov qword [rdi + 0x58], 0
mov ecx, eax
lea edx, [rax + 1]
test ecx, ecx
mov eax, edx
mov dword [rsi + 0x7c], edx
jne 0x45817b
mov edx, dword [rsi + 0x58]
test dl, 1
jne 0x458140
test dl, 0x40
je 0x458168
nop word cs:[rax + rax]
lea rax, [rbp + 0x20]
mov r12d, dword [rsp + 0x40]
add rdi, 0x10
mov qword [rdi], rax
mov rax, qword [rbp + 0x28]
mov qword [rdi + 8], rax
mov qword [rax], rdi
mov qword [rbp + 0x28], rdi
add dword [rsi + 0x78], 1
add dword [rsi + 0x100], 1
and r12d, 1
je 0x458038
mov eax, dword [rsi + 0x58]
mov edx, eax
and edx, 0x1200000
cmp edx, 0x1200000
je 0x458213
test eax, 0x1000000
je 0x457f65
mov rax, qword [r14]
mov rdx, qword [r14 + 8]
mov qword [rbx + 0x68], 0
mov qword [rbx + 0x90], rax
mov qword [rbx + 0x98], rdx
mov rax, qword [rsi + 0x208]
test rax, rax
je 0x458130
mov rax, qword [rax + 0x68]
mov qword [rbx + 0x68], rax
mov rax, qword [rsi + 0x208]
mov qword [rax + 0x68], rbx
mov qword [rsi + 0x208], rbx
mov eax, dword [rsi + 0x100]
test eax, eax
je 0x458330
mov eax, dword [r14]
mov qword [rbx + 0x60], rax
add qword [rsi + 0x60], rax
mov eax, dword [rsi + 0x7c]
mov ecx, eax
lea edx, [rax + 1]
test ecx, ecx
mov eax, edx
mov dword [rsi + 0x7c], edx
jne 0x457f3f
mov edx, dword [rsi + 0x58]
test dl, 1
jne 0x458340
test dl, 0x40
jne 0x458010
mov ecx, edx
or ecx, 0x40
and edx, 0x20
mov dword [rsi + 0x58], ecx
jne 0x458380
mov edx, eax
test edx, edx
jg 0x458010
lea rdx, str.src_win_pipe.c
lea rcx, [0x004c9ec0]
mov r8d, 0x5b9
call fcn.0048c6c0
jmp 0x458010
test eax, 0x200000
je 0x458093
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov edx, 1
call qword [sym.imp.KERNEL32.dll_CreateEventA]
test rax, rax
mov qword [rbx + 0x58], rax
je 0x458529
mov rcx, qword [rsi + 0x118]
xor r9d, r9d
mov rdx, qword [r14 + 8]
mov qword [rsp + 0x20], r13
mov r8d, dword [r14]
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x458404
mov qword [rbx + 0x60], 0
mov rcx, qword [rbx + 0x58]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [rsi + 0x7c]
mov ecx, eax
lea edx, [rax + 1]
test ecx, ecx
mov eax, edx
mov dword [rsi + 0x7c], edx
jne 0x457fff
mov edx, dword [rsi + 0x58]
test dl, 1
jne 0x4584c2
test dl, 0x40
jne 0x458010
mov ecx, edx
or ecx, 0x40
and edx, 0x20
mov dword [rsi + 0x58], ecx
je 0x457ffd
mov rdx, qword [rsi + 8]
add dword [rdx + 8], 1
mov edx, eax
test edx, edx
jle 0x458453
nop word [rax + rax]
lea rax, [rbp + 0x20]
add rbx, 0x10
mov qword [rbx], rax
mov rax, qword [rbp + 0x28]
mov qword [rbx + 8], rax
mov qword [rax], rbx
mov qword [rbp + 0x28], rbx
add dword [rsi + 0x78], 1
add dword [rsi + 0x100], 1
xor r12d, r12d
mov eax, r12d
add rsp, 0x2d0
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
ret
lea rdx, str.src_win_pipe.c
lea rcx, str.__handle__flags__UV_HANDLE_NON_OVERLAPPED_PIPE_
mov r8d, 0x4e8
call fcn.0048c6c0
test rdi, rdi
mov dword [rsp + 0x40], 0
jne 0x457d1a
cmp dword [rsp + 0x330], 1
je 0x458370
mov r12, r13
mov rdi, rbx
jmp 0x457d85
mov rcx, qword [rsi + 0x118]
xor r9d, r9d
mov rdx, qword [r14 + 8]
mov qword [rsp + 0x20], r13
mov r8d, dword [r14]
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x4583e0
mov qword [rbx + 0x60], 0
test byte [rsi + 0x5a], 0x10
je 0x457f06
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventA]
test rax, rax
mov qword [rbx + 0xa0], rax
je 0x458529
mov rdx, qword [rbx + 0x58]
lea rcx, [rbx + 0xa8]
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 0xffffffff
mov r9, rbx
lea r8, [0x00457750]
call qword [sym.imp.KERNEL32.dll_RegisterWaitForSingleObject]
test eax, eax
jne 0x457f06
nop dword [rax]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r12d, eax
jmp 0x458038
mov qword [rbx + 0x68], rbx
mov qword [rsi + 0x208], rbx
jmp 0x457eed
lea rdx, str.src_win_pipe.c
lea rcx, [0x004c9e90]
mov r8d, 0x546
call fcn.0048c6c0
mov edx, dword [rsi + 0x58]
test dl, 0x40
jne 0x458471
mov eax, dword [rsi + 0x7c]
mov ecx, edx
or ecx, 0x40
and edx, 0x20
mov dword [rsi + 0x58], ecx
jne 0x458390
mov edx, eax
test edx, edx
jg 0x457e50
lea rdx, str.src_win_pipe.c
lea rcx, [0x004c9ec0]
mov r8d, 0x546
call fcn.0048c6c0
jmp 0x457e50
or eax, 1
mov dword [rsp + 0x40], eax
mov eax, dword [r14]
mov qword [rsp + 0x48], rax
cmp dword [rsi + 0x138], 3
je 0x4583b0
lea rdi, [rsi + 0x130]
mov dword [rdi + 8], 3
mov qword [rdi + 0x40], 0
lea r12, [rdi + 0x40]
mov qword [rdi + 0x80], rsi
mov qword [rdi + 0x70], 0
mov dword [rdi + 0x88], 1
jmp 0x457d85
lea rdx, str.src_win_pipe.c
lea rcx, str.handle__handle___INVALID_HANDLE_VALUE
mov r8d, 0x4dd
call fcn.0048c6c0
jmp 0x457c93
mov rcx, qword [rsi + 0x118]
mov rdx, qword [r14 + 8]
lea r9, [rsp + 0x3c]
mov qword [rsp + 0x20], 0
mov r8d, dword [r14]
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x458120
mov eax, dword [rsi + 0x7c]
mov qword [rbx + 0x60], 0
mov ecx, eax
lea edx, [rax + 1]
test ecx, ecx
mov eax, edx
mov dword [rsi + 0x7c], edx
jne 0x45827e
mov edx, dword [rsi + 0x58]
test dl, 1
jne 0x4584f0
test dl, 0x40
jne 0x458286
mov ecx, edx
or ecx, 0x40
and edx, 0x20
mov dword [rsi + 0x58], ecx
je 0x45827c
mov rdx, qword [rsi + 8]
add dword [rdx + 8], 1
mov edx, eax
test edx, edx
jle 0x4584a4
lea rax, [rbp + 0x20]
add rbx, 0x10
xor r8d, r8d
xor edx, edx
mov r9, r13
mov qword [rbx], rax
mov rax, qword [rbp + 0x28]
mov qword [rbx + 8], rax
mov qword [rax], rbx
mov qword [rbp + 0x28], rbx
add dword [rsi + 0x78], 1
add dword [rsi + 0x100], 1
mov rcx, qword [rbp + 0x38]
call qword [sym.imp.KERNEL32.dll_PostQueuedCompletionStatus]
test eax, eax
jne 0x458035
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rdx, [0x004c9cc5]
mov ecx, eax
call fcn.0044c530
nop dword [rax]
call fcn.0046b350
mov edx, eax
mov dword [rsi + 0x1e0], eax
jmp 0x457d28
mov r12, qword [sym.imp.KERNEL32.dll_GetLastError]
call r12
cmp eax, 0x3e5
jne 0x45831a
mov rcx, qword [rdi + 0x58]
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x457e02
call r12
mov rcx, qword [rdi + 0x58]
mov r12d, eax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x458038
mov rcx, rsi
call fcn.00457810
jmp 0x457efb
lea rdx, str.src_win_pipe.c
lea rcx, [0x004c9e90]
mov r8d, 0x5b9
call fcn.0048c6c0
mov edx, dword [rsi + 0x58]
test dl, 0x40
je 0x4583a0
mov edx, dword [rsi + 0x7c]
jmp 0x457f3f
mov eax, 1
jmp 0x4581a4
mov rdx, qword [rsi + 8]
add dword [rdx + 8], 1
jmp 0x457f3d
mov rdx, qword [rsi + 8]
add dword [rdx + 8], 1
jmp 0x458179
mov eax, dword [rsi + 0x7c]
jmp 0x457f2c
mov ecx, 0xb0
call fcn.00449730
test rax, rax
mov rdi, rax
jne 0x4581c4
lea rdx, [0x004c9e81]
mov ecx, 0xe
call fcn.0044c530
nop word [rax + rax]
mov rdi, qword [sym.imp.KERNEL32.dll_GetLastError]
call rdi
cmp eax, 0x3e5
jne 0x458480
mov eax, dword [r14]
mov qword [rbx + 0x60], rax
add qword [rsi + 0x60], rax
jmp 0x4580bf
mov rdi, qword [sym.imp.KERNEL32.dll_GetLastError]
call rdi
cmp eax, 0x3e5
jne 0x458490
mov eax, dword [r14]
mov rcx, qword [rbx + 0x58]
mov edx, 0xffffffff
mov qword [rbx + 0x60], rax
add qword [rsi + 0x60], rax
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x457fbc
call rdi
mov esi, eax
mov rcx, qword [rbx + 0x58]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, esi
call fcn.0044c5f0
mov r12d, eax
jmp 0x458038
lea rdx, str.src_win_pipe.c
lea rcx, [0x004c9ec0]
mov r8d, 0x594
call fcn.0048c6c0
jmp 0x458010
mov edx, dword [rsi + 0x7c]
jmp 0x45817b
call rdi
mov r12d, eax
jmp 0x458038
call rdi
mov rcx, qword [rbx + 0x58]
mov r12d, eax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x458038
lea rdx, str.src_win_pipe.c
lea rcx, [0x004c9ec0]
mov r8d, 0x562
call fcn.0048c6c0
jmp 0x458286
lea rdx, str.src_win_pipe.c
lea rcx, [0x004c9e90]
mov r8d, 0x594
call fcn.0048c6c0
mov edx, dword [rsi + 0x58]
test dl, 0x40
jne 0x458519
mov eax, dword [rsi + 0x7c]
jmp 0x457fe8
lea rdx, str.src_win_pipe.c
lea rcx, [0x004c9e90]
mov r8d, 0x562
call fcn.0048c6c0
mov edx, dword [rsi + 0x58]
test dl, 0x40
jne 0x458521
mov eax, dword [rsi + 0x7c]
jmp 0x458267
mov edx, dword [rsi + 0x7c]
jmp 0x457fff
mov edx, dword [rsi + 0x7c]
jmp 0x45827e
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rdx, [0x004c9d5f]
mov ecx, eax
call fcn.0044c530
nop
nop