Function at 0x180009e50
Capabilities:
Write file on windows

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0xe8]
sub rsp, 0x1c0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
mov rax, qword [0x1801857d0]
xor rax, rsp
mov qword [rbp + 0x98], rax
xor r15d, r15d
mov qword [rbp + 0x18], r15
mov qword [rbp + 0x28], r15
mov qword [rbp + 0x30], 0xf
mov byte [rbp + 0x18], r15b
mov qword [rbp - 8], r15
mov qword [rbp + 8], r15
mov qword [rbp + 0x10], 0xf
mov byte [rbp - 8], r15b
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x78], xmm0
mov qword [rbp - 0x78], r15
movdqu xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], r15
call fcn.180008150
mov rbx, rax
mov qword [rbp + 0x58], r15
mov qword [rbp + 0x68], r15
mov qword [rbp + 0x70], 0xf
mov byte [rbp + 0x58], r15b
xor r8d, r8d
lea rdx, [0x18002bba0]
lea rcx, [rbp + 0x58]
call fcn.180001690
nop
lea r8, [0x180136c2f]
lea rdx, [0x180136c1f]
lea rcx, [rbp - 0x48]
call fcn.180005760
lea rcx, [rsp + 0x78]
cmp rcx, rax
je 0x180009f48
mov rdi, qword [rax]
mov qword [rsp + 0x78], rdi
mov rsi, qword [rax + 8]
mov qword [rbp - 0x80], rsi
mov rcx, qword [rax + 0x10]
mov qword [rbp - 0x78], rcx
mov qword [rax], r15
mov qword [rax + 8], r15
mov qword [rax + 0x10], r15
jmp 0x180009f51
mov rsi, qword [rbp - 0x80]
mov rdi, qword [rsp + 0x78]
mov rcx, qword [rbp - 0x48]
test rcx, rcx
je 0x180009f8b
mov rdx, qword [rbp - 0x38]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180009f86
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000a7bf
call fcn.18000e250
sub rsi, rdi
lea r8, [rsi - 1]
mov rdx, rdi
lea rcx, [rbp + 0x18]
call fcn.180001690
mov qword [rbp - 0x80], rdi
lea rcx, [rbp + 0x18]
cmp qword [rbp + 0x30], 0x10
cmovae rcx, qword [rbp + 0x18]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov r13, rax
lea rcx, [rbp + 0x18]
cmp qword [rbp + 0x30], 0x10
cmovae rcx, qword [rbp + 0x18]
mov qword [rbp + 0x28], r15
mov byte [rcx], 0
test rax, rax
je 0x18000a73e
lea r8, [0x18003011f]
lea rdx, [0x1800300ff]
lea rcx, [rbp - 0x48]
call fcn.180005760
lea rcx, [rsp + 0x60]
cmp rcx, rax
je 0x18000a01f
mov rdi, qword [rax]
mov qword [rsp + 0x60], rdi
mov rsi, qword [rax + 8]
mov qword [rsp + 0x68], rsi
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x70], rcx
mov qword [rax], r15
mov qword [rax + 8], r15
mov qword [rax + 0x10], r15
jmp 0x18000a029
mov rsi, qword [rsp + 0x68]
mov rdi, qword [rsp + 0x60]
mov rcx, qword [rbp - 0x48]
test rcx, rcx
je 0x18000a063
mov rdx, qword [rbp - 0x38]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000a05e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000a7c5
call fcn.18000e250
sub rsi, rdi
lea r8, [rsi - 1]
mov rdx, rdi
lea rcx, [rbp - 8]
call fcn.180001690
mov qword [rsp + 0x68], rdi
lea rdx, [rbp - 8]
cmp qword [rbp + 0x10], 0x10
cmovae rdx, qword [rbp - 8]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
test rax, rax
jne 0x18000a0a2
mov rcx, r13
jmp 0x18000a740
lea rax, [rbp - 8]
cmp qword [rbp + 0x10], 0x10
cmovae rax, qword [rbp - 8]
mov qword [rbp + 8], r15
mov byte [rax], 0
lea rdx, [rbx + 0x20]
mov qword [rbp + 0x38], r15
mov qword [rbp + 0x48], r15
mov qword [rbp + 0x50], 0xf
mov byte [rbp + 0x38], 0
mov rax, qword [rdx + 0x10]
cmp rax, 2
jb 0x18000a7cb
add rax, 0xfffffffffffffffe
mov r8d, 4
cmp rax, r8
cmovb r8, rax
cmp qword [rdx + 0x18], 0x10
jb 0x18000a0f8
mov rdx, qword [rdx]
add rdx, 2
lea rcx, [rbp + 0x38]
call fcn.180001690
nop
mov qword [rbp - 0x28], r15
mov qword [rbp - 0x18], r15
mov qword [rbp - 0x10], 0xf
mov byte [rbp - 0x28], 0
mov rax, qword [rbx + 0x10]
cmp rax, 4
jb 0x18000a7d1
add rax, 0xfffffffffffffffc
mov r8d, 4
cmp rax, r8
cmovb r8, rax
cmp qword [rbx + 0x18], 0x10
jb 0x18000a143
mov rbx, qword [rbx]
lea rdx, [rbx + 4]
lea rcx, [rbp - 0x28]
call fcn.180001690
nop
lea r9, [rbp + 0x38]
lea r8, [rbp - 0x28]
lea rcx, [rbp - 0x48]
call fcn.18000d8c0
nop
mov rcx, qword [rbp - 0x38]
mov rdx, qword [rbp - 0x30]
mov rax, rdx
sub rax, rcx
cmp rax, 4
jb 0x18000a19e
lea rax, [rcx + 4]
mov qword [rbp - 0x38], rax
lea rax, [rbp - 0x48]
cmp rdx, 0x10
cmovae rax, qword [rbp - 0x48]
mov dword [rax + rcx], 0x7461642e
mov byte [rax + rcx + 4], 0
lea rax, [rbp - 0x48]
jmp 0x18000a1bc
mov qword [rsp + 0x20], 4
lea r9, str..dat
mov edx, 4
lea rcx, [rbp - 0x48]
call fcn.18000d740
movups xmm6, xmmword [rax]
movups xmmword [rbp + 0x78], xmm6
movups xmm7, xmmword [rax + 0x10]
movups xmmword [rbp + 0x88], xmm7
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp + 0x70]
cmp rdx, 0x10
jb 0x18000a218
inc rdx
mov rcx, qword [rbp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000a213
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000a7d7
call fcn.18000e250
movups xmmword [rbp + 0x58], xmm6
movups xmmword [rbp + 0x68], xmm7
mov rdx, qword [rbp - 0x30]
cmp rdx, 0x10
jb 0x18000a25b
inc rdx
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000a256
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000a7dd
call fcn.18000e250
mov qword [rbp - 0x38], r15
mov qword [rbp - 0x30], 0xf
mov byte [rbp - 0x48], 0
mov rdx, qword [rbp - 0x10]
cmp rdx, 0x10
jb 0x18000a2a7
inc rdx
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000a2a1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000a7e3
call fcn.18000e250
nop
mov rdx, qword [rbp + 0x50]
cmp rdx, 0x10
jb 0x18000a2e2
inc rdx
mov rcx, qword [rbp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000a2dd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000a7e9
call fcn.18000e250
mov qword [rbp + 0x38], r15
movdqa xmm0, xmmword [0x18002bc00]
movdqu xmmword [rbp + 0x48], xmm0
mov byte [rbp + 0x38], 0
lea r8, [0x18018577f]
lea rdx, [0x18018576f]
lea rcx, [rbp - 0x60]
call fcn.180005760
nop
mov r8, qword [rbp - 0x58]
mov rdx, qword [rbp - 0x60]
sub r8, rdx
dec r8
lea rcx, [rbp + 0x38]
call fcn.180001690
mov rax, qword [rbp - 0x60]
mov qword [rbp - 0x58], rax
lea r8, [0x18018567f]
lea rdx, [0x180136c6f]
lea rcx, [rsp + 0x40]
call fcn.180005760
nop
mov rax, qword [rsp + 0x48]
cmp rax, qword [rsp + 0x40]
je 0x18000a71b
lea r12, [0x180186420]
mov rcx, r12
cmp qword [0x180186438], 0x10
cmovae rcx, qword [0x180186420]
xor edx, edx
call rdi
test eax, eax
jne 0x18000a390
mov rcx, r12
cmp qword [0x180186438], 0x10
cmovae rcx, qword [0x180186420]
xor edx, edx
call rdi
lea rdx, [0x1801863e0]
cmp qword [0x1801863f8], 0x10
cmovae rdx, qword [0x1801863e0]
lea r8, [0x18002bbac]
lea rcx, [rbp - 0x70]
call fcn.1800131ec
mov r9, qword [rbp - 0x70]
test r9, r9
je 0x18000a71b
mov r8, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x40]
sub r8, rcx
dec r8
mov r14d, 1
mov edx, r14d
call fcn.1800130ac
mov rcx, qword [rbp - 0x70]
call fcn.180012950
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x48], rax
lea r8, [0x180136c1f]
lea rdx, [0x18003020f]
lea rcx, [rbp - 0x48]
call fcn.180005760
mov rbx, rax
lea rax, [rsp + 0x40]
cmp rax, rbx
je 0x18000a488
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x18000a463
mov rdx, qword [rsp + 0x50]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000a450
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000a7ef
call fcn.18000e250
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r15
mov rax, qword [rbx]
mov qword [rsp + 0x40], rax
mov rax, qword [rbx + 8]
mov qword [rsp + 0x48], rax
mov rax, qword [rbx + 0x10]
mov qword [rsp + 0x50], rax
mov qword [rbx], r15
mov qword [rbx + 8], r15
mov qword [rbx + 0x10], r15
mov rcx, qword [rbp - 0x48]
test rcx, rcx
je 0x18000a4c2
mov rdx, qword [rbp - 0x38]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000a4bd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000a7ef
call fcn.18000e250
mov rax, qword [rsp + 0x48]
cmp rax, qword [rsp + 0x40]
je 0x18000a71b
lea rdx, [0x180186460]
cmp qword [0x180186478], 0x10
cmovae rdx, qword [0x180186460]
lea r8, [0x18002bbac]
lea rcx, [rsp + 0x58]
call fcn.1800131ec
mov r9, qword [rsp + 0x58]
test r9, r9
je 0x18000a71b
mov r8, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x40]
sub r8, rcx
dec r8
mov rdx, r14
call fcn.1800130ac
mov rcx, qword [rsp + 0x58]
call fcn.180012950
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x48], rax
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x48], xmm0
mov qword [rbp - 0x38], r15
lea rbx, [0x18003004f]
lea rax, str.FwJcpRnqNkOYECAlovaDPviClfhZxTDIijfS4qexNCvDTKcsWiYhiFHjdaqDFkiZdYIPzQsdNguTbt_n
sub rbx, rax
movabs r15, 0x7fffffffffffffff
je 0x18000a5c7
cmp rbx, r15
ja 0x18000a7f5
cmp rbx, 0x1000
jb 0x18000a598
lea rcx, [rbx + 0x27]
cmp rcx, rbx
jbe 0x18000a7fb
call fcn.18000de30
test rax, rax
je 0x18000a801
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x18000a5a3
mov rcx, rbx
call fcn.18000de30
mov rdi, rax
mov qword [rbp - 0x48], rdi
lea rsi, [rdi + rbx]
mov qword [rbp - 0x38], rsi
mov r8, rbx
lea rdx, str.FwJcpRnqNkOYECAlovaDPviClfhZxTDIijfS4qexNCvDTKcsWiYhiFHjdaqDFkiZdYIPzQsdNguTbt_n
mov rcx, rdi
call fcn.180012210
mov qword [rbp - 0x40], rsi
jmp 0x18000a5cf
mov rsi, qword [rbp - 0x40]
mov rdi, qword [rbp - 0x48]
sub rsi, rdi
je 0x18000a70d
mov rax, qword [0x180186430]
sub r15, rax
cmp r15, 1
jb 0x18000a7b9
cmp qword [0x180186438], 0x10
cmovae r12, qword [0x180186420]
mov qword [rsp + 0x30], r14
lea rcx, [0x18002bbb0]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rax
mov r9, r12
lea rcx, [rbp - 0x28]
call fcn.18000dac0
nop
lea r9, [rbp + 0x58]
cmp qword [rbp + 0x90], 0x10
cmovae r9, qword [rbp + 0x78]
mov rcx, qword [rbp - 0x18]
mov rdx, qword [rbp - 0x10]
mov rax, rdx
sub rax, rcx
mov r15, qword [rbp + 0x88]
cmp r15, rax
ja 0x18000a67b
lea rax, [r15 + rcx]
mov qword [rbp - 0x18], rax
lea rbx, [rbp - 0x28]
cmp rdx, 0x10
cmovae rbx, qword [rbp - 0x28]
add rbx, rcx
mov r8, r15
mov rdx, r9
mov rcx, rbx
call fcn.180012210
mov byte [r15 + rbx], 0
lea rax, [rbp - 0x28]
jmp 0x18000a68c
mov qword [rsp + 0x20], r15
mov rdx, r15
lea rcx, [rbp - 0x28]
call fcn.18000d740
mov rdx, rax
lea rcx, [rbp + 0x78]
call fcn.18000cac0
lea rdx, [rbp + 0x78]
lea rcx, [0x180186400]
call fcn.18000ca20
lea rcx, [rbp + 0x78]
call fcn.18000c9c0
nop
lea rcx, [rbp - 0x28]
call fcn.18000c9c0
lea rcx, [0x180186400]
call fcn.18000c730
mov rdx, rax
lea r8, [0x18002bbac]
lea rcx, [rsp + 0x58]
call fcn.1800131ec
mov r9, qword [rsp + 0x58]
test r9, r9
je 0x18000a70d
lea r8, [rsi - 1]
mov rdx, r14
mov rcx, rdi
call fcn.1800130ac
mov rcx, qword [rsp + 0x58]
call fcn.180012950
mov qword [rbp - 0x40], rdi
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
jmp 0x18000a710
xor r14d, r14d
lea rcx, [rbp - 0x48]
call fcn.18000c490
jmp 0x18000a71e
mov r14d, r15d
lea rcx, [rsp + 0x40]
call fcn.18000c490
nop
lea rcx, [rbp - 0x60]
call fcn.18000c490
nop
lea rcx, [rbp + 0x38]
call fcn.18000c9c0
jmp 0x18000a749
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov r14d, r15d
lea rcx, [rbp + 0x58]
call fcn.18000c9c0
nop
lea rcx, [rsp + 0x60]
call fcn.18000c490
nop
lea rcx, [rsp + 0x78]
call fcn.18000c490
nop
lea rcx, [rbp - 8]
call fcn.18000c9c0
nop
lea rcx, [rbp + 0x18]
call fcn.18000c9c0
mov eax, r14d
mov rcx, qword [rbp + 0x98]
xor rcx, rsp
call fcn.18000de10
lea r11, [rsp + 0x1c0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1800012b0
nop
call fcn.18001382c
int3
call fcn.18001382c
int3
call fcn.18000cda0
nop
call fcn.18000cda0
nop
call fcn.18001382c
nop
call fcn.18001382c
nop
call fcn.18001382c
nop
call fcn.18001382c
nop
call fcn.18001382c
int3
call fcn.18000caf0
int3
call fcn.180001210
int3
call fcn.18001382c
int3