Function at 0x140004900
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x80
mov rax, qword [0x1400bf018]
xor rax, rsp
mov qword [rbp - 0x20], rax
mov rdi, rdx
mov rsi, rcx
movzx edx, word [rcx + 0xe]
mov eax, edx
and eax, 7
cmp eax, 5
ja case.default.0x140004954
lea r8, [0x140000000]
cdqe
mov ecx, dword [r8 + rax*4 + 0x51c0]
add rcx, r8
jmp rcx
mov rcx, rdi
call fcn.1400057c0
mov rbx, qword [rdi]
mov r8, qword [rbx + 0x18]
mov rax, r8
cmp r8, qword [rbx + 0x10]
jb 0x14000498f
mov rcx, qword [rbx + 8]
cmp r8, rcx
je 0x14000498f
mov r9, qword [rbx]
sub r8, rcx
mov edx, 1
call fcn.140062110
mov rax, qword [rbx + 8]
mov qword [rbx + 0x18], rax
mov byte [rax], WSASetLastError
inc qword [rbx + 0x18]
mov rbx, qword [rdi]
mov r8, qword [rbx + 0x18]
mov rax, r8
cmp r8, qword [rbx + 0x10]
jb 0x1400049c7
mov rcx, qword [rbx + 8]
cmp r8, rcx
je 0x1400049c7
mov r9, qword [rbx]
sub r8, rcx
mov edx, 1
call fcn.140062110
mov rax, qword [rbx + 8]
mov qword [rbx + 0x18], rax
mov byte [rax], 0x75
inc qword [rbx + 0x18]
mov rbx, qword [rdi]
mov r8, qword [rbx + 0x18]
mov rax, r8
cmp r8, qword [rbx + 0x10]
jb 0x1400049ff
mov rcx, qword [rbx + 8]
cmp r8, rcx
je 0x1400049ff
mov r9, qword [rbx]
sub r8, rcx
mov edx, 1
call fcn.140062110
mov rax, qword [rbx + 8]
mov qword [rbx + 0x18], rax
mov byte [rax], 0x6c
inc qword [rbx + 0x18]
mov rbx, qword [rdi]
mov r8, qword [rbx + 0x18]
mov rax, r8
cmp r8, qword [rbx + 0x10]
jb 0x140004a37
mov rcx, qword [rbx + 8]
cmp r8, rcx
je 0x140004a37
mov r9, qword [rbx]
sub r8, rcx
mov edx, 1
call fcn.140062110
mov rax, qword [rbx + 8]
mov qword [rbx + 0x18], rax
mov byte [rax], 0x6c
inc qword [rbx + 0x18]
jmp 0x140005196
mov rcx, rdi
call fcn.1400057c0
xor edx, edx
mov rcx, rdi
call fcn.140005520
jmp 0x140005198
mov rcx, rdi
call fcn.1400057c0
mov dl, 1
mov rcx, rdi
call fcn.140005520
jmp 0x140005198
mov rcx, rdi
call fcn.1400057c0
mov rcx, qword [rdi + 0x20]
lea rax, [rcx + 0x10]
cmp rax, qword [rdi + 0x28]
jbe 0x140004a94
lea rcx, [rdi + 8]
call fcn.140005b00
mov rcx, qword [rdi + 0x20]
xor ebx, ebx
lea rax, [rcx + 0x10]
mov qword [rdi + 0x20], rax
mov qword [rcx], rbx
mov byte [rcx + 8], bl
mov rbx, qword [rdi]
mov r8, qword [rbx + 0x18]
mov rax, r8
cmp r8, qword [rbx + 0x10]
jb 0x140004ad5
mov rcx, qword [rbx + 8]
cmp r8, rcx
je 0x140004ad5
mov r9, qword [rbx]
sub r8, rcx
mov edx, 1
call fcn.140062110
mov rax, qword [rbx + 8]
mov qword [rbx + 0x18], rax
mov byte [rax], 0x7b
movabs r12, 0xffffffffffff
inc qword [rbx + 0x18]
mov rax, qword [rsi + 8]
mov ecx, dword [rsi]
and rax, r12
shl rcx, 5
add rcx, rax
cmp rax, rcx
je 0x140004b8e
lea rbx, [rax + 0xd]
mov r13d, reloc.WS2_32.dll_listen
mov eax, 0x1000
nop
movzx ecx, word [rbx + 1]
and cx, ax
je 0x140004b24
movsx eax, byte [rbx]
mov r15d, r13d
sub r15d, eax
jmp 0x140004b28
mov r15d, dword [rbx - 0xd]
test cx, cx
je 0x140004b33
lea r14, [rbx - 0xd]
jmp 0x140004b3a
mov r14, qword [rbx - 5]
and r14, r12
mov rcx, rdi
call fcn.1400057c0
mov r8d, r15d
mov rdx, r14
mov rcx, rdi
call fcn.140005240
test al, al
je 0x140004c54
lea rcx, [rbx + 3]
mov rdx, rdi
call fcn.140004900
test al, al
je 0x140004c54
mov ecx, dword [rsi]
add rbx, 0x20
mov rax, qword [rsi + 8]
and rax, r12
shl rcx, 5
add rcx, rax
lea rax, [rbx - 0xd]
cmp rax, rcx
mov eax, 0x1000
jne 0x140004b10
add qword [rdi + 0x20], 0xfffffffffffffff0
mov rax, qword [rdi + 0x20]
cmp qword [rax], 0
je 0x140004bdd
mov rbx, qword [rdi]
mov r8, qword [rbx + 0x18]
mov rax, r8
cmp r8, qword [rbx + 0x10]
jb 0x140004bce
mov rcx, qword [rbx + 8]
cmp r8, rcx
je 0x140004bce
mov r9, qword [rbx]
sub r8, rcx
mov edx, 1
call fcn.140062110
mov rax, qword [rbx + 8]
mov qword [rbx + 0x18], rax
mov byte [rax], 0xa
mov rcx, rdi
inc qword [rbx + 0x18]
call fcn.140005700
mov rbx, qword [rdi]
mov r8, qword [rbx + 0x18]
mov rax, r8
cmp r8, qword [rbx + 0x10]
jb 0x140004c0e
mov rcx, qword [rbx + 8]
cmp r8, rcx
je 0x140004c0e
mov r9, qword [rbx]
sub r8, rcx
mov edx, 1
call fcn.140062110
mov rax, qword [rbx + 8]
mov qword [rbx + 0x18], rax
mov byte [rax], 0x7d
inc qword [rbx + 0x18]
mov rax, qword [rdi + 0x18]
cmp qword [rdi + 0x20], rax
jne 0x140005196
mov rbx, qword [rdi]
mov r8, qword [rbx + 0x18]
mov rcx, qword [rbx + 8]
cmp r8, rcx
je 0x140005196
mov r9, qword [rbx]
sub r8, rcx
mov edx, 1
call fcn.140062110
mov rax, qword [rbx + 8]
mov qword [rbx + 0x18], rax
jmp 0x140005196
xor al, al
jmp 0x140005198
mov rcx, rdi
call fcn.1400057c0
mov rcx, qword [rdi + 0x20]
lea rax, [rcx + 0x10]
cmp rax, qword [rdi + 0x28]
jbe 0x140004c7e
lea rcx, [rdi + 8]
call fcn.140005b00
mov rcx, qword [rdi + 0x20]
xor ebx, ebx
lea rax, [rcx + 0x10]
mov qword [rdi + 0x20], rax
mov qword [rcx], rbx
mov byte [rcx + 8], 1
mov rbx, qword [rdi]
mov r8, qword [rbx + 0x18]
mov rax, r8
cmp r8, qword [rbx + 0x10]
jb 0x140004cc0
mov rcx, qword [rbx + 8]
cmp r8, rcx
je 0x140004cc0
mov r9, qword [rbx]
sub r8, rcx
mov edx, 1
call fcn.140062110
mov rax, qword [rbx + 8]
mov qword [rbx + 0x18], rax
mov byte [rax], 0x5b
movabs r12, 0xffffffffffff
inc qword [rbx + 0x18]
mov rbx, qword [rsi + 8]
mov eax, dword [rsi]
and rbx, r12
shl rax, 4
add rax, rbx
cmp rbx, rax
je 0x140004d1c
nop word [rax + rax]
mov rdx, rdi
mov rcx, rbx
call fcn.140004900
test al, al
je 0x140004c54
mov ecx, dword [rsi]
add rbx, 0x10
mov rax, qword [rsi + 8]
shl rcx, 4
and rax, r12
add rcx, rax
cmp rbx, rcx
jne 0x140004cf0
add qword [rdi + 0x20], 0xfffffffffffffff0
mov rax, qword [rdi + 0x20]
cmp qword [rax], 0
je 0x140004d43
test byte [rdi + 0x48], 1
jne 0x140004d43
mov rcx, qword [rdi]
mov dl, 0xa
call fcn.140003180
mov rcx, rdi
call fcn.140005700
mov rbx, qword [rdi]
mov r8, qword [rbx + 0x18]
mov rax, r8
cmp r8, qword [rbx + 0x10]
jb 0x140004d74
mov rcx, qword [rbx + 8]
cmp r8, rcx
je 0x140004d74
mov r9, qword [rbx]
sub r8, rcx
mov edx, 1
call fcn.140062110
mov rax, qword [rbx + 8]
mov qword [rbx + 0x18], rax
mov byte [rax], 0x5d
jmp 0x140004c11
mov eax, 0x1000
test ax, dx
je 0x140004d95
movsx eax, byte [rsi + 0xd]
mov r13d, reloc.WS2_32.dll_listen
sub r13d, eax
jmp 0x140004da9
mov r13d, dword [rsi]
movabs r12, 0xffffffffffff
mov rsi, qword [rsi + 8]
and rsi, r12
mov rcx, rdi
call fcn.1400057c0
mov r8d, r13d
mov rdx, rsi
mov rcx, rdi
call fcn.140005240
jmp 0x140005198
movzx eax, dx
mov rcx, rdi
shr ax, 9
test al, 1
je 0x140004f22
movaps xmmword [rsp + 0x70], xmm6
movsd xmm6, qword [rsi]
call fcn.1400057c0
movabs rcx, 0x7ff0000000000000
movsd qword [rbp - 0x58], xmm6
mov rax, qword [rbp - 0x58]
and rax, rcx
cmp rax, rcx
jne 0x140004e0b
movaps xmm6, xmmword [rsp + 0x70]
xor al, al
jmp 0x140005198
mov esi, dword [rdi + 0x38]
movabs rcx, 0x7fffffffffffffff
movsd qword [rbp - 0x58], xmm6
movaps xmm0, xmm6
mov rax, qword [rbp - 0x58]
test rcx, rax
jne 0x140004e63
movabs rcx, 0x8000000000000000
mov edx, 0x2d
and rax, rcx
movzx ecx, byte [rbp - 0x40]
cmovne ecx, edx
test rax, rax
mov byte [rbp - 0x40], cl
lea rdx, [rbp - 0x3f]
lea rcx, [rbp - 0x40]
cmovne rcx, rdx
mov word [rcx], 0x2e30
lea rax, [rcx + 3]
mov byte [rcx + 2], 0x30
jmp 0x140004eac
xorps xmm1, xmm1
comisd xmm1, xmm6
jbe 0x140004e7a
movaps xmm0, xmm6
mov byte [rbp - 0x40], 0x2d
xorps xmm0, xmmword [0x1400b2f80]
comisd xmm1, xmm6
lea rax, [rbp - 0x3f]
lea rbx, [rbp - 0x40]
lea r9, [rbp - 0x60]
lea r8, [rbp - 0x58]
cmova rbx, rax
mov rdx, rbx
call fcn.140003d20
mov r8d, dword [rbp - 0x60]
mov r9d, esi
mov edx, dword [rbp - 0x58]
mov rcx, rbx
call fcn.140003fb0
xor ebx, ebx
lea rcx, [rbp - 0x40]
mov r14, rax
sub r14, rcx
lea rcx, [rbp - 0x40]
cmp rcx, rax
cmova r14, rbx
test r14, r14
je 0x140004f16
nop dword [rax + rax]
mov rsi, qword [rdi]
movzx r15d, byte [rbp + rbx - 0x40]
mov r8, qword [rsi + 0x18]
mov rax, r8
cmp r8, qword [rsi + 0x10]
jb 0x140004f07
mov rcx, qword [rsi + 8]
cmp r8, rcx
je 0x140004f07
mov r9, qword [rsi]
sub r8, rcx
mov edx, 1
call fcn.140062110
mov rax, qword [rsi + 8]
mov qword [rsi + 0x18], rax
mov byte [rax], r15b
inc rbx
inc qword [rsi + 0x18]
cmp rbx, r14
jne 0x140004ed0
movaps xmm6, xmmword [rsp + 0x70]
mov al, 1
jmp 0x140005198
movzx eax, dl
shr al, 5
test al, 1
je 0x140004fd3
mov ebx, dword [rsi]
call fcn.1400057c0
lea rdx, [rbp - 0x58]
test ebx, ebx
jns 0x140004f4b
not ebx
mov byte [rbp - 0x58], 0x2d
inc ebx
lea rdx, [rbp - 0x57]
mov ecx, ebx
call fcn.1400031f0
xor ebx, ebx
lea rcx, [rbp - 0x58]
mov r15, rax
lea rsi, [rbp - 0x58]
sub r15, rcx
lea rcx, [rbp - 0x58]
cmp rcx, rax
cmova r15, rbx
test r15, r15
je 0x140005196
nop word [rax + rax]
mov rbx, qword [rdi]
movzx r14d, byte [rsi]
mov r8, qword [rbx + 0x18]
mov rax, r8
cmp r8, qword [rbx + 0x10]
jb 0x140004fb5
mov rcx, qword [rbx + 8]
cmp r8, rcx
je 0x140004fb5
mov r9, qword [rbx]
sub r8, rcx
mov edx, 1
call fcn.140062110
mov rax, qword [rbx + 8]
mov qword [rbx + 0x18], rax
mov byte [rax], r14b
lea rcx, [rbp - 0x58]
inc qword [rbx + 0x18]
inc rsi
mov rax, rsi
sub rax, rcx
cmp rax, r15
jne 0x140004f80
jmp 0x140005196
movzx eax, dl
shr al, 6
test al, 1
je 0x140005073
mov ebx, dword [rsi]
call fcn.1400057c0
lea rdx, [rbp - 0x58]
mov ecx, ebx
call fcn.1400031f0
xor ebx, ebx
lea rcx, [rbp - 0x58]
mov r15, rax
lea rsi, [rbp - 0x58]
sub r15, rcx
lea rcx, [rbp - 0x58]
cmp rcx, rax
cmova r15, rbx
test r15, r15
je 0x140005196
nop word [rax + rax]
mov rbx, qword [rdi]
movzx r14d, byte [rsi]
mov r8, qword [rbx + 0x18]
mov rax, r8
cmp r8, qword [rbx + 0x10]
jb 0x140005055
mov rcx, qword [rbx + 8]
cmp r8, rcx
je 0x140005055
mov r9, qword [rbx]
sub r8, rcx
mov edx, 1
call fcn.140062110
mov rax, qword [rbx + 8]
mov qword [rbx + 0x18], rax
mov byte [rax], r14b
lea rcx, [rbp - 0x58]
inc qword [rbx + 0x18]
inc rsi
mov rax, rsi
sub rax, rcx
cmp rax, r15
jne 0x140005020
jmp 0x140005196
mov rbx, qword [rsi]
shr dl, 7
test dl, 1
je 0x140005120
call fcn.1400057c0
lea rdx, [rbp - 0x58]
test rbx, rbx
jns 0x14000509e
not rbx
mov byte [rbp - 0x58], 0x2d
inc rbx
lea rdx, [rbp - 0x57]
mov rcx, rbx
call fcn.140003440
xor ebx, ebx
lea rcx, [rbp - 0x58]
mov r15, rax
lea rsi, [rbp - 0x58]
sub r15, rcx
lea rcx, [rbp - 0x58]
cmp rcx, rax
cmova r15, rbx
test r15, r15
je 0x140005196
nop word [rax + rax]
mov rbx, qword [rdi]
movzx r14d, byte [rsi]
mov r8, qword [rbx + 0x18]
mov rax, r8
cmp r8, qword [rbx + 0x10]
jb 0x140005105
mov rcx, qword [rbx + 8]
cmp r8, rcx
je 0x140005105
mov r9, qword [rbx]
sub r8, rcx
mov edx, 1
call fcn.140062110
mov rax, qword [rbx + 8]
mov qword [rbx + 0x18], rax
mov byte [rax], r14b
lea rcx, [rbp - 0x58]
inc qword [rbx + 0x18]
inc rsi
mov rax, rsi
sub rax, rcx
cmp rax, r15
jne 0x1400050d0
jmp 0x140005196
call fcn.1400057c0
lea rdx, [rbp - 0x58]
mov rcx, rbx
call fcn.140003440
xor ebx, ebx
lea rcx, [rbp - 0x58]
mov r15, rax
sub r15, rcx
lea rcx, [rbp - 0x58]
cmp rcx, rax
cmova r15, rbx
test r15, r15
je 0x140005196
nop dword [rax]
mov rsi, qword [rdi]
movzx r14d, byte [rbp + rbx - 0x58]
mov r8, qword [rsi + 0x18]
mov rax, r8
cmp r8, qword [rsi + 0x10]
jb 0x140005187
mov rcx, qword [rsi + 8]
cmp r8, rcx
je 0x140005187
mov r9, qword [rsi]
sub r8, rcx
mov edx, 1
call fcn.140062110
mov rax, qword [rsi + 8]
mov qword [rsi + 0x18], rax
mov byte [rax], r14b
inc rbx
inc qword [rsi + 0x18]
cmp rbx, r15
jne 0x140005150
mov al, 1
mov rcx, qword [rbp - 0x20]
xor rcx, rsp
call fcn.140059450
mov rbx, qword [rsp + 0xd0]
add rsp, 0x80
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret