Function at 0x18006cba0
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x20], rbx
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x40
mov rsi, qword [rsp + 0xa0]
lea r12d, [rcx + 0x436]
mov ebx, dword [rsp + 0x80]
mov r14, r9
mov r10, rdx
mov ebp, ecx
cmp ecx, r12d
jae 0x18006ceb7
mov r13d, dword [rsp + 0x80]
xor edi, edi
mov r15, qword [rsp + 0x38]
lea rdx, [0x180000000]
cmp ebp, 0x1bc
ja case.0x18006cc2d.127
je 0x18006ceb7
lea eax, [rbp - 0x75]
cmp eax, 0xe8
ja case.0x18006cc2d.127
movzx eax, byte [rdx + rax + 0x6cf00]
mov ecx, dword [rdx + rax*4 + 0x6ced4]
add rcx, rdx
jmp rcx
mov rcx, qword [rsi]
cmp dword [rcx], 1
jne 0x18006ccca
mov eax, dword [r14]
mov dword [rcx + 0x244], eax
jmp case.0x18006cc2d.127
movzx eax, byte [r10]
mov rcx, r10
mov dword [rsp + 0x80], edi
test al, al
je case.0x18006cc2d.127
movzx edx, byte [rsi]
cmp al, dl
je 0x18006cd5e
cmp al, byte [rsi + 0x8c]
je 0x18006cd5e
cmp al, byte [rsi + 0x98]
je 0x18006cd5e
cmp al, 0xd
je 0x18006cd5e
cmp al, 0xa
je 0x18006cd5e
movzx eax, byte [rcx + 1]
inc rcx
test al, al
jne 0x18006cc62
jmp case.0x18006cc2d.127
sub dword [r8], r13d
mov edx, 1
mov r8d, dword [r8]
mov r9, qword [rsi]
mov rcx, qword [r10 + 8]
call qword [r14]
mov r8, qword [rsp + 0x90]
mov rcx, rax
mov eax, dword [r8]
cmp rcx, rax
je case.0x18006cc2d.127
mov eax, edi
jmp 0x18006ceb9
mov r9, qword [rsi]
mov r13d, 4
mov r8d, r13d
mov rcx, r10
lea edx, [r13 - 3]
call qword [r14]
cmp rax, r13
jne 0x18006ccca
mov r8, qword [rsp + 0x90]
jmp case.0x18006cc2d.127
mov r15, rsi
jmp case.0x18006cc2d.127
mov ebx, 1
jmp case.0x18006cc2d.127
mov eax, 1
xchg dword [r15 + 0x120], eax
xor eax, eax
lock cmpxchg dword [r15 + 0x120], edi
je 0x18006cd40
nop dword [rax + rax]
mov ecx, 0xa
call qword [sym.imp.KERNEL32.dll_Sleep]
xor eax, eax
lock cmpxchg dword [r15 + 0x120], edi
jne 0x18006cd20
mov r8, qword [rsp + 0x90]
mov ebp, 0x15d
add ebp, 0x62
cmp ebp, r12d
jae 0x18006ceb7
mov r10, qword [rsp + 0x88]
jmp 0x18006cbf4
mov eax, 1
mov dword [rsp + 0x80], eax
jmp 0x18006cd9b
mov ebp, 0x88
cmp ebp, 0x122
jae case.0x18006cc2d.117
mov eax, ebp
sub eax, 0x88
je 0x18006cd94
cmp eax, 0x4d
je 0x18006ccca
add ebp, 0x4d
jmp 0x18006cd71
mov eax, dword [rsp + 0x80]
mov ebp, 0x88
test eax, eax
je 0x18006ce4b
movsx ecx, byte [rsi + 0x8c]
mov rdx, r14
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fputc]
mov rax, qword [rsp + 0x88]
mov rbx, rax
movzx eax, byte [rax]
test al, al
je 0x18006ce23
nop word [rax + rax]
movzx ecx, byte [rsi + 0x8c]
cmp al, byte [rsi]
je 0x18006cdec
cmp al, cl
je 0x18006cdf0
movsx ecx, byte [rsi + 0x98]
cmp al, cl
jne 0x18006ce0c
jmp 0x18006ce03
cmp al, cl
jne 0x18006cdfc
test byte [rsi + 0x80], 0x10
movsx ecx, al
jne 0x18006ce03
movsx ecx, byte [rsi + 0x98]
mov rdx, r14
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fputc]
movsx ecx, byte [rbx]
mov rdx, r14
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fputc]
movzx eax, byte [rbx + 1]
inc rbx
test al, al
jne 0x18006cdd0
movsx ecx, byte [rsi + 0x8c]
mov rdx, r14
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fputc]
mov r8, qword [rsp + 0x90]
add ebp, 0x4d
mov r10, qword [rsp + 0x88]
jmp 0x18006cd71
mov r8, qword [r8]
mov r9, r14
mov edx, 1
mov rcx, r10
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
mov r8, qword [rsp + 0x90]
add ebp, 0x4d
mov r10, qword [rsp + 0x88]
jmp 0x18006cd71
lea rax, [0x18004eef0]
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x30], rax
lea r8, [rsp + 0x28]
mov rax, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
lea rdx, [rsp + 0x30]
mov r9d, 0x46
mov qword [rsp + 0x38], rax
lea rcx, [rsp + 0x38]
call fcn.18006cff0
jmp 0x18006ceb9
mov eax, 1
jmp 0x18006ceb9
mov eax, ebx
mov rbx, qword [rsp + 0x98]
add rsp, 0x40
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret