Function at 0x421ac0
Capabilities:
Write file on windows

Disassembly:
push rbp
sub rsp, 0x5c0
lea rbp, [rsp + 0x80]
mov rax, qword [0x00442300]
mov rax, qword [rax]
xor rax, rbp
mov qword [rbp + 0x538], rax
mov qword [rbp - 0x10], rcx
mov qword [rbp - 0x18], rdx
mov qword [rbp - 0x20], r8
mov qword [rbp - 0x28], r9
mov dword [rbp - 0x2c], 0
mov dword [rbp - 0x34], 1
mov rcx, rbp
xor edx, edx
mov r8d, 0x30
call fcn.0041ba90
mov qword [rbp - 0x40], 0
mov qword [rbp - 0x48], 0
mov dword [rbp - 0x4c], 0
cmp qword [rbp - 0x28], 0
je 0x421b4c
mov rax, qword [rbp - 0x28]
movsx eax, byte [rax]
cmp eax, 0
jne 0x421b4c
mov qword [rbp - 0x28], 0
cmp qword [rbp - 0x10], 0
je 0x421b6d
cmp qword [rbp - 0x18], 0
je 0x421b6d
cmp qword [rbp - 0x20], 0
jne 0x421b79
mov dword [rbp - 4], 0
jmp 0x422053
mov rcx, qword [rbp - 0x20]
mov edx, 0x3a
call sub.api_ms_win_crt_private_l1_1_0.dll_strchr
cmp rax, 0
je 0x421b9d
mov dword [rbp - 4], 0
jmp 0x422053
mov rcx, qword [rbp - 0x18]
mov edx, 0x3a
call sub.api_ms_win_crt_private_l1_1_0.dll_strchr
cmp rax, 0
je 0x421bc1
mov dword [rbp - 4], 0
jmp 0x422053
mov dword [rbp - 0x30], 0
xor eax, eax
cmp dword [rbp - 0x30], 0xff
mov byte [rbp - 0x51], al
jge 0x421bef
mov rax, qword [rbp - 0x20]
movsxd rcx, dword [rbp - 0x30]
movsx eax, byte [rax + rcx]
cmp eax, 0
setne al
mov byte [rbp - 0x51], al
mov al, byte [rbp - 0x51]
test al, 1
jne 0x421bff
jmp 0x421c39
mov rax, qword [rbp - 0x20]
movsxd rcx, dword [rbp - 0x30]
movzx ecx, byte [rax + rcx]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_iscntrl]
cmp eax, 0
je 0x421c26
mov dword [rbp - 4], 0
jmp 0x422053
jmp 0x421c2b
mov eax, dword [rbp - 0x30]
add eax, 1
mov dword [rbp - 0x30], eax
jmp 0x421bc8
mov rax, qword [rbp - 0x20]
movsxd rcx, dword [rbp - 0x30]
cmp byte [rax + rcx], 0
je 0x421c57
mov dword [rbp - 4], 0
jmp 0x422053
mov dword [rbp - 0x30], 0
xor eax, eax
cmp dword [rbp - 0x30], 0xff
mov byte [rbp - 0x52], al
jge 0x421c85
mov rax, qword [rbp - 0x18]
movsxd rcx, dword [rbp - 0x30]
movsx eax, byte [rax + rcx]
cmp eax, 0
setne al
mov byte [rbp - 0x52], al
mov al, byte [rbp - 0x52]
test al, 1
jne 0x421c95
jmp 0x421ccf
mov rax, qword [rbp - 0x18]
movsxd rcx, dword [rbp - 0x30]
movzx ecx, byte [rax + rcx]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_iscntrl]
cmp eax, 0
je 0x421cbc
mov dword [rbp - 4], 0
jmp 0x422053
jmp 0x421cc1
mov eax, dword [rbp - 0x30]
add eax, 1
mov dword [rbp - 0x30], eax
jmp 0x421c5e
mov rax, qword [rbp - 0x18]
movsxd rcx, dword [rbp - 0x30]
cmp byte [rax + rcx], 0
je 0x421ced
mov dword [rbp - 4], 0
jmp 0x422053
mov rcx, qword [rbp - 0x10]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
cmp rax, 0x30c
jb 0x421d0e
mov dword [rbp - 4], 0
jmp 0x422053
mov rcx, qword [rbp - 0x10]
mov rdx, rbp
call fcn.00422090
mov ecx, eax
xor eax, eax
cmp eax, ecx
jne 0x421f66
cmp dword [rbp + 0x14], 0xa00000
jle 0x421d3f
mov dword [rbp - 4], 0
jmp 0x422053
mov eax, dword [rbp + 0x14]
add eax, 0x400
mov dword [rbp - 0x50], eax
movsxd rcx, dword [rbp - 0x50]
mov edx, 1
call fcn.004220c0
mov qword [rbp - 0x48], rax
cmp qword [rbp - 0x48], 0
jne 0x421d73
mov dword [rbp - 4], 0
jmp 0x422053
mov rcx, qword [rbp - 0x10]
lea rdx, [0x0044724b]
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fopen
mov qword [rbp - 0x40], rax
cmp qword [rbp - 0x40], 0
jne 0x421da7
mov rcx, qword [rbp - 0x48]
call fcn.0041d370
mov dword [rbp - 4], 0
jmp 0x422053
jmp 0x421dac
lea rcx, [rbp + 0x330]
mov r8, qword [rbp - 0x40]
mov edx, 0x200
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fgets
mov rcx, rax
xor eax, eax
cmp rcx, 0
mov byte [rbp - 0x53], al
je 0x421de4
mov eax, dword [rbp - 0x4c]
add eax, 0x258
cmp eax, dword [rbp - 0x50]
setl al
mov byte [rbp - 0x53], al
mov al, byte [rbp - 0x53]
test al, 1
jne 0x421df4
jmp 0x421f5d
lea rcx, [rbp + 0x330]
lea r8, [rbp + 0x230]
lea r9, [rbp + 0x130]
lea rdx, [rbp + 0x30]
mov rax, rsp
mov qword [rax + 0x20], rdx
lea rdx, str._255_:_:_255_:_:_255s
call fcn.00440590
cmp eax, 3
je 0x421e2e
jmp 0x421dac
mov byte [rbp + 0x32f], 0
mov byte [rbp + 0x22f], 0
mov byte [rbp + 0x12f], 0
lea rcx, [rbp + 0x230]
mov rdx, qword [rbp - 0x20]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
cmp eax, 0
jne 0x421ef4
lea rcx, [rbp + 0x130]
mov rdx, qword [rbp - 0x18]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
cmp eax, 0
jne 0x421ef4
cmp qword [rbp - 0x28], 0
je 0x421ee8
cmp dword [rbp - 0x2c], 0
jne 0x421ee8
mov rcx, qword [rbp - 0x48]
movsxd rax, dword [rbp - 0x4c]
add rcx, rax
mov r8, qword [rbp - 0x20]
mov r9, qword [rbp - 0x18]
mov rdx, qword [rbp - 0x28]
mov rax, rsp
mov qword [rax + 0x20], rdx
lea rdx, str._s:_s:_s_n
call fcn.00440540
mov dword [rbp - 0x30], eax
cmp dword [rbp - 0x30], 1
jge 0x421edf
mov rcx, qword [rbp - 0x40]
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fclose
mov rcx, qword [rbp - 0x48]
call fcn.0041d370
mov dword [rbp - 4], 0
jmp 0x422053
mov eax, dword [rbp - 0x30]
add eax, dword [rbp - 0x4c]
mov dword [rbp - 0x4c], eax
mov dword [rbp - 0x2c], 1
jmp 0x421f58
mov rcx, qword [rbp - 0x48]
movsxd rax, dword [rbp - 0x4c]
add rcx, rax
lea r8, [rbp + 0x230]
lea r9, [rbp + 0x130]
lea rdx, [rbp + 0x30]
mov rax, rsp
mov qword [rax + 0x20], rdx
lea rdx, str._s:_s:_s_n
call fcn.00440540
mov dword [rbp - 0x30], eax
cmp dword [rbp - 0x30], 1
jge 0x421f4f
mov rcx, qword [rbp - 0x40]
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fclose
mov rcx, qword [rbp - 0x48]
call fcn.0041d370
mov dword [rbp - 4], 0
jmp 0x422053
mov eax, dword [rbp - 0x30]
add eax, dword [rbp - 0x4c]
mov dword [rbp - 0x4c], eax
jmp 0x421dac
mov rcx, qword [rbp - 0x40]
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fclose
mov rcx, qword [rbp - 0x10]
lea rdx, [0x0044726f]
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fopen
mov qword [rbp - 0x40], rax
cmp qword [rbp - 0x40], 0
jne 0x421f9a
mov rcx, qword [rbp - 0x48]
call fcn.0041d370
mov dword [rbp - 4], 0
jmp 0x422053
cmp qword [rbp - 0x48], 0
je 0x421fde
cmp dword [rbp - 0x4c], 0
jle 0x421fde
mov rcx, qword [rbp - 0x48]
movsxd r8, dword [rbp - 0x4c]
mov r9, qword [rbp - 0x40]
mov edx, 1
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fwrite
movsxd rcx, dword [rbp - 0x4c]
cmp rax, rcx
je 0x421fd9
mov dword [rbp - 0x34], 0
jmp 0x421fde
cmp qword [rbp - 0x28], 0
je 0x42202b
cmp dword [rbp - 0x2c], 0
jne 0x42202b
mov rcx, qword [rbp - 0x40]
mov r8, qword [rbp - 0x20]
mov r9, qword [rbp - 0x18]
mov rdx, qword [rbp - 0x28]
mov rax, rsp
mov qword [rax + 0x20], rdx
lea rdx, str._s:_s:_s_n
call fcn.0043fdd0
cmp eax, 6
jge 0x422026
mov dword [rbp - 0x34], 0
jmp 0x42202b
mov rcx, qword [rbp - 0x40]
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fclose
cmp eax, 0
je 0x422044
mov dword [rbp - 0x34], 0
mov rcx, qword [rbp - 0x48]
call fcn.0041d370
mov eax, dword [rbp - 0x34]
mov dword [rbp - 4], eax
mov eax, dword [rbp - 4]
mov dword [rbp - 0x58], eax
mov rcx, qword [rbp + 0x538]
xor rcx, rbp
mov rax, qword [0x00442300]
mov rax, qword [rax]
sub rax, rcx
jne 0x42207b
jmp 0x422080
call fcn.0041bf30
mov eax, dword [rbp - 0x58]
add rsp, 0x5c0
pop rbp
ret