Function at 0x180066850
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x68
mov r9, rdx
mov r13d, ecx
lea edx, [rcx + 0x23c]
mov dword [rsp + 0xb0], edx
mov ebx, dword [rsp + 0xb0]
cmp ecx, edx
jae case.0x1800668fa.162
mov r12, qword [rsp + 0xc8]
mov rbp, qword [rsp + 0xc8]
mov rdi, qword [rsp + 0xc8]
mov esi, dword [rsp + 0xb0]
mov r14, qword [rsp + 0x30]
mov r15, qword [rsp + 0x38]
lea r10, [0x180000000]
cmp r13d, 0x198
ja case.0x1800668fa.163
je 0x180066a7e
lea eax, [r13 - 0x99]
cmp eax, 0xd0
ja case.0x1800668fa.163
movzx eax, byte [r10 + rax + 0x66c1c]
mov ecx, dword [r10 + rax*4 + 0x66bf0]
add rcx, r10
jmp rcx
mov rax, qword [r8]
mov rdx, qword [rsp + 0x40]
mov rcx, qword [rax + 0xa0]
mov rax, qword [rdx + 0x20]
mov rdi, qword [rdx + 0x30]
mov r12, qword [rcx + 0x10]
mov rbp, qword [rax]
mov qword [rsp + 0xc8], r12
jmp 0x180066a99
mov rax, qword [r8]
mov r8d, dword [rax + 0x88]
test r8d, r8d
je case.0x1800668fa.163
nop word [rax + rax]
mov edx, 0x74
mov eax, edx
sub eax, 0x72
je 0x18006696f
sub eax, 1
je 0x180066965
cmp eax, 1
jne 0x18006697c
movsx rsi, byte [rbp]
inc rbp
movzx ecx, byte [rsi + r14]
jmp 0x180066977
movsxd rax, esi
movzx ecx, byte [rax + r15]
jmp 0x180066977
movsxd rax, esi
movzx ecx, byte [rax + r12]
mov byte [rdi], cl
inc rdi
dec edx
cmp edx, 0x71
ja 0x180066945
add r8d, 0xffffffff
jne 0x180066940
jmp 0x180066a99
mov rax, qword [rsp + 0x20]
mov rax, qword [rax + 0x48]
mov qword [rsp + 0x48], rax
jmp case.0x1800668fa.163
mov rax, qword [r9]
mov qword [rsp + 0x20], rax
mov rax, qword [rax + 0x18]
mov qword [rsp + 0x50], rax
jmp case.0x1800668fa.163
mov rax, qword [r8]
mov ebx, dword [rax + 0x30]
test ebx, ebx
je 0x180066a23
mov r12, qword [rsp + 0x28]
mov r14, qword [rsp + 0x48]
mov r15, qword [rsp + 0x50]
mov rax, qword [r8]
lea rdx, [rsp + 0x28]
mov r8, r15
mov qword [rsp + 0x28], rax
mov ecx, 0xd6
call fcn.18001a650
mov r8, qword [rsp + 0xc0]
mov ecx, eax
movzx eax, byte [rcx + r14]
mov byte [r12], al
inc r12
add ebx, 0xffffffff
jne 0x1800669d0
mov r14, qword [rsp + 0x30]
mov r15, qword [rsp + 0x38]
mov edx, dword [rsp + 0xb0]
mov qword [rsp + 0x28], r12
mov r12, qword [rsp + 0xc8]
mov ebx, 1
jmp case.0x1800668fa.163
xor r8d, r8d
mov edx, 0xb5
xor ecx, ecx
call fcn.180014fc0
cmp eax, 0xd8
jne 0x180066b97
jmp 0x180066a99
mov rax, qword [rsp + 0x20]
mov rax, qword [rax + 0x20]
mov rcx, qword [rax]
mov qword [rsp + 0x28], rcx
jmp case.0x1800668fa.163
mov rax, qword [r9]
mov qword [rsp + 0x40], rax
mov rax, qword [r8]
mov rcx, qword [rax + 0xa0]
mov r14, qword [rcx]
mov r15, qword [rcx + 8]
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x38], r15
jmp case.0x1800668fa.163
mov rax, qword [rsp + 0x40]
mov edx, 1
mov r9, qword [rax + 0x18]
mov r8, qword [rax + 0x40]
mov rcx, qword [rax + 0x30]
call fcn.18007be3c
mov edx, dword [rsp + 0xb0]
add r13d, 0x34
cmp r13d, edx
jae case.0x1800668fa.162
mov r8, qword [rsp + 0xc0]
mov r9, qword [rsp + 0xb8]
jmp 0x1800668ba
mov edx, 0x1c
mov dword [rsp + 0xb0], 0xd8
lea rcx, [rsp + 0xb0]
call fcn.180055b70
mov rbx, qword [rsp + 0xc0]
nop word [rax + rax]
mov ecx, 0x47
mov eax, ecx
sub eax, 0x45
je 0x180066b74
sub eax, 1
je 0x180066b6f
cmp eax, 1
jne 0x180066b74
lea edx, [rax + 0x15]
xor ecx, ecx
call fcn.180055b70
lea ecx, [rax - 0xc0]
cmp ecx, 0x3e
ja case.0x180066b39.196
lea r8, [0x180000000]
movsxd rcx, ecx
movzx ecx, byte [r8 + rcx + 0x66d00]
mov edx, dword [r8 + rcx*4 + 0x66cf0]
add rdx, r8
jmp rdx
cmp dword [rbx], 0
jne case.0x180066b39.196
call fcn.180032980
jmp 0x180066b6f
mov edx, 0x1c
mov dword [rsp + 0xb0], eax
lea rcx, [rsp + 0xb0]
call fcn.180055b70
xor r8d, r8d
xor edx, edx
mov ecx, 0xc2
call fcn.1800462a0
mov ecx, 0x46
dec ecx
cmp ecx, 0x44
ja 0x180066af5
jmp 0x180066af0
mov eax, ebx
add rsp, 0x68
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
mov ecx, 2
call fcn.18007711c
mov rcx, rax
lea r8, str.CanHoistAboveControlPoint
lea rdx, [0x1800a9f88]
call fcn.1800010e0
mov ecx, 1
call fcn.180076a04
int3
mov ecx, 2
call fcn.18007711c
mov rcx, rax
lea r8, str.HTTP2WinHttpDirectSend
lea rdx, [0x1800a9f88]
call fcn.1800010e0
mov ecx, 1
call fcn.180076a04
int3