Function at 0x1401ad950
Capabilities:
Write file on windows

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x88
lea rbp, [rsp + 0x80]
mov rax, qword [0x14082e958]
xor rax, rbp
mov qword [rbp], rax
mov eax, dword [0x140837d98]
mov edx, dword [0x140837d9c]
lea ebx, [rax - 1]
imul ebx, eax
test bl, 1
sete byte [rbp - 1]
cmp edx, 0xa
setl byte [rbp - 2]
mov rsi, rcx
lea rax, [rcx + 0x74]
mov qword [rbp - 0x78], rax
lea rax, [rcx + 0x71]
mov qword [rbp - 0x70], rax
lea rax, [rcx + 0x68]
mov qword [rbp - 0x68], rax
mov eax, 0x8845e321
mov ebx, 0xa42aad03
mov r13d, 0x30f7b6d1
mov r15d, 0xfc3cda14
jmp 0x1401ad9fd
mov eax, dword [0x140837d98]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x4757461c
mov ecx, 0x5a7368f4
nop word cs:[rax + rax]
nop
cmove eax, ecx
cmp dword [0x140837d9c], 0xa
cmovl eax, ecx
cmp eax, 0xfc3cda13
jg 0x1401adad0
cmp eax, 0xbed89285
jle 0x1401adb20
cmp eax, 0xe9b2756f
jg 0x1401adbb6
cmp eax, 0xd5690c16
jg 0x1401adcde
cmp eax, 0xbed89286
je 0x1401ad9cc
cmp eax, 0xc88087bc
je 0x1401ade7b
cmp eax, 0xc965fde8
jne 0x1401ad9fd
mov eax, reloc.WS2_32.dll_recv
call fcn.1403844e0
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x28], rax
mov eax, reloc.WS2_32.dll_recv
call fcn.1403844e0
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x30], rax
mov eax, reloc.WLDAP32.dll_Ordinal_32
call fcn.1403844e0
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x48], rax
mov eax, reloc.WS2_32.dll_recv
call fcn.1403844e0
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x68]
mov qword [rbp - 0x50], rax
mov rax, qword [rbp - 0x50]
cmp qword [rax], 0
setne byte [rbp - 3]
mov eax, dword [0x140837d98]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xfd49a3be
mov ecx, 0xe9b27570
jmp 0x1401ad9f0
cmp eax, 0x443f7269
jle 0x1401adb70
cmp eax, 0x5f330f75
jg 0x1401adbef
cmp eax, 0x5581c8c6
jg 0x1401add15
cmp eax, 0x443f726a
je 0x1401ade8f
cmp eax, 0x474984cb
je 0x1401adeef
cmp eax, 0x4757461c
jne 0x1401ad9fd
mov eax, 0x5a7368f4
jmp 0x1401ad9fd
cmp eax, 0xa42aad02
jle 0x1401adc67
cmp eax, 0xb4dadb3a
jg 0x1401add67
cmp eax, 0xa42aad03
je 0x1401adf0d
cmp eax, 0xaf09274d
je 0x1401adf2b
cmp eax, 0xb485af0a
jne 0x1401ad9fd
mov eax, dword [rbp - 0xc]
cmp eax, 3
mov eax, 0x594efe2b
mov ecx, 0xc88087bc
cmove eax, ecx
jmp 0x1401ad9fd
cmp eax, 0x2b0fc0aa
jle 0x1401adc9d
cmp eax, 0x30f7b6d0
jg 0x1401addad
cmp eax, 0x2b0fc0ab
je 0x1401adf4c
cmp eax, 0x2b147ba1
je 0x1401adf6a
cmp eax, 0x2e290120
jne 0x1401ad9fd
mov eax, 0x22bf0d8a
movzx r14d, byte [rbp - 6]
jmp 0x1401ad9fd
cmp eax, 0xf50f7d21
jg 0x1401addd8
cmp eax, 0xe9b27570
je 0x1401adf90
cmp eax, 0xf1b9680a
je 0x1401adfa6
cmp eax, 0xf481b2ca
jne 0x1401ad9fd
mov eax, 0x22bf0d8a
xor r14d, r14d
jmp 0x1401ad9fd
cmp eax, 0x75832bee
jle 0x1401ade03
cmp eax, 0x75832bef
je 0x1401adfbe
cmp eax, 0x7b202533
je 0x1401adfed
cmp eax, 0x7de85ca9
jne 0x1401ad9fd
mov rax, qword [rbp - 0x28]
mov rax, qword [rsi]
sub rsp, 0x20
mov rcx, rsi
mov edx, 0xffffffff
call qword [rax + Ordinal_26]
add rsp, 0x20
mov rcx, qword [rbp - 0x28]
mov dword [rcx], eax
mov rax, qword [rbp - 0x30]
mov rax, qword [rbp - 0x30]
mov dword [rax], 0xffffffff
mov rax, qword [rbp - 0x28]
mov rcx, qword [rbp - 0x30]
mov ecx, dword [rcx]
cmp ecx, dword [rax]
mov eax, 0x443f726a
mov ecx, 0x474984cb
cmove eax, ecx
jmp 0x1401ad9fd
cmp eax, 0x8c7cb022
jle 0x1401ade26
cmp eax, 0x8c7cb023
je 0x1401adff7
cmp eax, 0x9173d858
je 0x1401ae008
cmp eax, 0x9ac26a64
jne 0x1401ad9fd
mov eax, 0xf51710bb
jmp 0x1401ad9fd
cmp eax, 0x11996be9
jle 0x1401ade5b
cmp eax, 0x11996bea
je 0x1401ae015
cmp eax, 0x1b24710e
je 0x1401ae033
cmp eax, 0x22bf0d8a
jne 0x1401ad9fd
mov rax, qword [rbp - 0x60]
mov rax, qword [rbp - 0x58]
mov eax, 0x2b147ba1
mov r12d, r14d
jmp 0x1401ad9fd
cmp eax, 0xd5690c17
je 0x1401ae041
cmp eax, 0xdf6a0798
je 0x1401ae077
cmp eax, 0xe47c6a3c
jne 0x1401ad9fd
cmp dword [rbp - 0xc], 0
mov eax, 0x594efe2b
mov ecx, 0x2b0fc0ab
cmove eax, ecx
jmp 0x1401ad9fd
cmp eax, 0x5581c8c7
je 0x1401ae095
cmp eax, 0x594efe2b
je 0x1401ae0a3
cmp eax, 0x5a7368f4
jne 0x1401ad9fd
mov rax, qword [rbp - 0x70]
mov qword [rbp - 0x18], rax
mov rax, qword [rbp - 0x18]
cmp byte [rax], 0
setne byte [rbp - 4]
mov eax, dword [0x140837d98]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x4757461c
mov ecx, 0x80ded5b4
jmp 0x1401ad9f0
cmp eax, 0xb4dadb3b
je 0x1401ae0ad
cmp eax, 0xb71f431f
je 0x1401ae0c5
cmp eax, 0xb9ceb854
jne 0x1401ad9fd
mov eax, edi
and al, 1
mov byte [rbp - 6], al
mov eax, dword [0x140837d98]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xf9fdcd52
mov ecx, 0xdf6a0798
jmp 0x1401ad9f0
cmp eax, 0x30f7b6d1
je 0x1401ae0db
cmp eax, 0x375625f0
je 0x1401ae0f9
cmp eax, 0x42bf78db
jne 0x1401ad9fd
mov eax, 0x30f7b6d1
jmp 0x1401ad9fd
cmp eax, 0xf50f7d22
je 0x1401ae122
cmp eax, 0xf51710bb
je 0x1401ae12e
cmp eax, 0xf9fdcd52
jne 0x1401ad9fd
mov eax, 0xdf6a0798
jmp 0x1401ad9fd
cmp eax, 0x72c67c39
je 0x1401ae14c
cmp eax, 0x73da6808
jne 0x1401ae194
mov eax, 0x2b147ba1
xor r12d, r12d
jmp 0x1401ad9fd
cmp eax, 0x80ded5b4
je 0x1401ae174
cmp eax, 0x8845e321
jne 0x1401ad9fd
movzx ecx, byte [rbp - 1]
cmp byte [rbp - 2], 0
mov eax, 0xfd49a3be
mov edx, 0xc965fde8
cmovne eax, edx
test cl, cl
cmovne eax, edx
jmp 0x1401ad9fd
cmp eax, 0xfc3cda14
je 0x1401ae18a
cmp eax, 0xfd49a3be
jne 0x1401ad9fd
mov eax, 0xc965fde8
jmp 0x1401ad9fd
mov rax, qword [rbp - 0x18]
mov byte [rax], 0
mov eax, 0x22bf0d8a
mov r14b, 1
jmp 0x1401ad9fd
mov rax, qword [rbp - 0x48]
mov qword [rbp - 0x58], rax
mov rax, qword [rbp - 0x58]
mov rax, qword [rbp - 0x38]
mov qword [rbp - 0x60], rax
mov rax, qword [rbp - 0x60]
mov rax, qword [rbp - 0x50]
mov rcx, qword [rax]
mov rax, qword [rbp - 0x48]
mov qword [rbp - 0x20], rax
mov r9, qword [rbp - 0x20]
add r9, 0x20
mov rax, qword [rbp - 0x38]
mov r8, qword [rbp - 0x20]
mov rbx, qword [rcx]
sub rsp, 0x30
mov qword [rsp + 0x20], rax
mov rdx, qword [rbp - 0x78]
call qword [rbx + 0x40]
mov ebx, 0xa42aad03
add rsp, 0x30
mov dword [rbp - 0xc], eax
mov eax, 0xb71f431f
jmp 0x1401ad9fd
mov eax, dword [0x140837d98]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x9ac26a64
mov ecx, 0xf51710bb
jmp 0x1401ad9f0
mov eax, dword [0x140837d98]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x5581c8c7
mov ecx, 0x375625f0
jmp 0x1401ad9f0
mov rax, qword [rbp - 0x38]
mov rax, qword [rax]
sub rax, qword [rbp - 0x20]
mov qword [rbp - 0x40], rax
cmp qword [rbp - 0x40], 0
mov eax, 0xd5690c17
cmove eax, ebx
jmp 0x1401ad9fd
mov eax, dword [0x140837d98]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x8c7cb023
mov ecx, 0x75832bef
jmp 0x1401ad9f0
mov eax, r12d
and al, 1
mov byte [rbp - 7], al
mov eax, dword [0x140837d98]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x7b202533
mov ecx, 0x11996bea
jmp 0x1401ad9f0
cmp byte [rbp - 3], 0
mov eax, 0x72c67c39
mov ecx, 0xbed89286
cmovne eax, ecx
jmp 0x1401ad9fd
mov eax, dword [rbp - 0xc]
cmp eax, 1
mov eax, 0x594efe2b
mov ecx, 0xaf09274d
cmove eax, ecx
jmp 0x1401ad9fd
mov rax, qword [rbp - 0x18]
mov byte [rax], 0
mov eax, dword [0x140837d98]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x8c7cb023
cmove eax, r15d
cmp dword [0x140837d9c], 0xa
cmovl eax, r15d
jmp 0x1401ad9fd
mov eax, 0x11996bea
jmp 0x1401ad9fd
mov rax, qword [rbp - 0x18]
mov byte [rax], 0
mov eax, 0x75832bef
jmp 0x1401ad9fd
mov eax, 0x2b147ba1
mov r12b, 1
jmp 0x1401ad9fd
mov eax, dword [0x140837d98]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x7b202533
mov ecx, 0x5f330f76
jmp 0x1401ad9f0
mov eax, 0xb9ceb854
movzx edi, byte [rbp - 5]
jmp 0x1401ad9fd
mov r9, qword [rsi + 0x80]
mov rcx, qword [rbp - 0x20]
mov r8, qword [rbp - 0x40]
sub rsp, 0x20
mov edx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
add rsp, 0x20
mov rcx, qword [rbp - 0x40]
cmp rcx, rax
mov eax, 0xf50f7d22
cmove eax, ebx
jmp 0x1401ad9fd
mov eax, dword [0x140837d98]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xf9fdcd52
mov ecx, 0x2e290120
jmp 0x1401ad9f0
mov rax, qword [rbp - 0x18]
mov eax, 0x375625f0
jmp 0x1401ad9fd
mov eax, 0xf481b2ca
jmp 0x1401ad9fd
mov eax, dword [rbp - 0xc]
cmp eax, 3
mov eax, 0xb485af0a
mov ecx, 0xf1b9680a
cmovl eax, ecx
jmp 0x1401ad9fd
cmp dword [rbp - 0xc], 0
mov eax, 0xb4dadb3b
mov ecx, 0xe47c6a3c
cmovle eax, ecx
jmp 0x1401ad9fd
mov eax, dword [0x140837d98]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x42bf78db
mov ecx, 0x9173d858
jmp 0x1401ad9f0
mov rax, qword [rbp - 0x18]
cmp byte [rax], 0
sete byte [rbp - 5]
mov eax, dword [0x140837d98]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x5581c8c7
mov ecx, 0x1b24710e
jmp 0x1401ad9f0
mov eax, 0xb9ceb854
xor edi, edi
jmp 0x1401ad9fd
mov eax, dword [0x140837d98]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x9ac26a64
mov ecx, 0x73da6808
jmp 0x1401ad9f0
mov eax, dword [0x140837d98]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x42bf78db
cmove eax, r13d
cmp dword [0x140837d9c], 0xa
cmovl eax, r13d
jmp 0x1401ad9fd
cmp byte [rbp - 4], 0
mov eax, 0x72c67c39
mov ecx, 0x7de85ca9
cmovne eax, ecx
jmp 0x1401ad9fd
mov eax, 0xaf09274d
jmp 0x1401ad9fd
cmp eax, 0x5f330f76
jne 0x1401ad9fd
mov bl, byte [rbp - 7]
mov rcx, qword [rbp]
xor rcx, rbp
sub rsp, 0x20
call fcn.140384540
add rsp, 0x20
mov eax, ebx
lea rsp, [rbp + 8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret