Function at 0x18005a060
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rdi
push rbp
mov rbp, rsp
sub rsp, 0x80
mov rax, qword [0x18017b040]
xor rax, rsp
mov qword [rbp - 0x10], rax
movsx rax, dx
mov r11, rcx
cmp eax, 0xe
ja case.default.0x18005a0a4
lea rdx, [0x180000000]
mov ecx, dword [rdx + rax*4 + 0x5aa0c]
add rcx, rdx
jmp rcx
movabs rdx, 0xf94f3fb2099d9a46
lea r9, [rbp - 0x30]
movabs rbx, 0x26bb18cf87ac450e
lea rcx, [rbp - 0x30]
mov qword [rbp - 0x50], rbx
movabs r8, 0x269b45a3e8c32755
mov rax, qword [rbp - 0x50]
mov r10d, r9d
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x50], rdx
mov rax, qword [rbp - 0x50]
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x50], r8
mov rax, qword [rbp - 0x50]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x50], rdx
mov rax, qword [rbp - 0x50]
movdqa xmm0, xmmword [rbp - 0x30]
mov qword [rbp - 0x18], rax
xorps xmm0, xmmword [rbp - 0x20]
movq rax, xmm0
movdqa xmmword [rbp - 0x30], xmm0
test al, al
je 0x18005a12b
nop word [rax + rax]
inc rcx
mov r10, rcx
cmp byte [rcx], 0
jne 0x18005a120
mov qword [rbp - 0x50], rbx
mov rax, qword [rbp - 0x50]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x50], rdx
jmp 0x18005a99b
movabs rdx, 0xf94f3fb2099d9a46
lea r9, [rbp - 0x30]
movabs rbx, 0x6c673929cad4e0e
lea rcx, [rbp - 0x30]
mov qword [rbp - 0x50], rbx
movabs r8, 0x269b45a3e8c32755
mov rax, qword [rbp - 0x50]
mov r10d, r9d
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x50], rdx
mov rax, qword [rbp - 0x50]
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x50], r8
mov rax, qword [rbp - 0x50]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x50], rdx
mov rax, qword [rbp - 0x50]
movdqa xmm0, xmmword [rbp - 0x30]
mov qword [rbp - 0x38], rax
xorps xmm0, xmmword [rbp - 0x40]
movq rax, xmm0
movdqa xmmword [rbp - 0x30], xmm0
test al, al
je 0x18005a12b
inc rcx
mov r10, rcx
cmp byte [rcx], 0
jne 0x18005a1b4
jmp 0x18005a12b
movabs rdi, 0x7bad74d786aa520e
lea rbx, [rbp - 0x30]
mov qword [rbp - 0x50], rdi
lea rcx, [rbp - 0x30]
mov rax, qword [rbp - 0x50]
movabs r9, 0xf94f3fb2099d9a66
mov qword [rbp - 0x30], rax
movabs r8, 0x269b45a3e8c32755
mov qword [rbp - 0x50], r9
movabs rdx, 0xf94f3fb2099d9a46
mov rax, qword [rbp - 0x50]
mov r10d, ebx
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x50], r8
mov rax, qword [rbp - 0x50]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x50], rdx
mov rax, qword [rbp - 0x50]
movdqa xmm0, xmmword [rbp - 0x30]
mov qword [rbp - 0x38], rax
xorps xmm0, xmmword [rbp - 0x40]
movq rax, xmm0
movdqa xmmword [rbp - 0x30], xmm0
test al, al
je 0x18005a24b
nop
inc rcx
mov r10, rcx
cmp byte [rcx], 0
jne 0x18005a240
mov qword [rbp - 0x50], rdi
sub r10d, ebx
mov rax, qword [rbp - 0x50]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x50], r9
jmp 0x18005a99e
movabs rdx, 0xf94f3fb2099d9a46
lea r9, [rbp - 0x30]
movabs rbx, 0x6c677909cad4e0e
lea rcx, [rbp - 0x30]
mov qword [rbp - 0x50], rbx
movabs r8, 0x269b45a3e8c32755
mov rax, qword [rbp - 0x50]
mov r10d, r9d
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x50], rdx
mov rax, qword [rbp - 0x50]
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x50], r8
mov rax, qword [rbp - 0x50]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x50], rdx
mov rax, qword [rbp - 0x50]
movdqa xmm0, xmmword [rbp - 0x30]
mov qword [rbp - 0x38], rax
xorps xmm0, xmmword [rbp - 0x40]
movq rax, xmm0
movdqa xmmword [rbp - 0x30], xmm0
test al, al
je 0x18005a12b
nop word [rax + rax]
inc rcx
mov r10, rcx
cmp byte [rcx], 0
jne 0x18005a2e0
jmp 0x18005a12b
movabs rdi, 0x7ba976d786aa520e
lea rbx, [rbp - 0x30]
mov qword [rbp - 0x50], rdi
lea rcx, [rbp - 0x30]
mov rax, qword [rbp - 0x50]
movabs r9, 0xf94f3fb2099d9a66
mov qword [rbp - 0x30], rax
movabs r8, 0x269b45a3e8c32755
mov qword [rbp - 0x50], r9
movabs rdx, 0xf94f3fb2099d9a46
mov rax, qword [rbp - 0x50]
mov r10d, ebx
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x50], r8
mov rax, qword [rbp - 0x50]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x50], rdx
mov rax, qword [rbp - 0x50]
movdqa xmm0, xmmword [rbp - 0x30]
mov qword [rbp - 0x38], rax
xorps xmm0, xmmword [rbp - 0x40]
movq rax, xmm0
movdqa xmmword [rbp - 0x30], xmm0
test al, al
je 0x18005a24b
nop
inc rcx
mov r10, rcx
cmp byte [rcx], 0
jne 0x18005a370
jmp 0x18005a24b
movabs rdx, 0xf94f3fb2099d9a46
lea r9, [rbp - 0x30]
movabs rbx, 0x6c671959cad4e0e
lea rcx, [rbp - 0x30]
mov qword [rbp - 0x50], rbx
movabs r8, 0x269b45a3e8c32755
mov rax, qword [rbp - 0x50]
mov r10d, r9d
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x50], rdx
mov rax, qword [rbp - 0x50]
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x50], r8
mov rax, qword [rbp - 0x50]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x50], rdx
mov rax, qword [rbp - 0x50]
mov qword [rbp - 0x38], rax
movdqa xmm0, xmmword [rbp - 0x40]
xorps xmm0, xmmword [rbp - 0x30]
movq rax, xmm0
movdqa xmmword [rbp - 0x30], xmm0
test al, al
je 0x18005a12b
inc rcx
mov r10, rcx
cmp byte [rcx], 0
jne 0x18005a3f4
jmp 0x18005a12b
movabs rdi, 0x7baf73d786aa520e
lea rbx, [rbp - 0x30]
mov qword [rbp - 0x50], rdi
lea rcx, [rbp - 0x30]
mov rax, qword [rbp - 0x50]
movabs r9, 0xf94f3fb2099d9a66
mov qword [rbp - 0x30], rax
movabs r8, 0x269b45a3e8c32755
mov qword [rbp - 0x50], r9
movabs rdx, 0xf94f3fb2099d9a46
mov rax, qword [rbp - 0x50]
mov r10d, ebx
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x50], r8
mov rax, qword [rbp - 0x50]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x50], rdx
mov rax, qword [rbp - 0x50]
movdqa xmm0, xmmword [rbp - 0x30]
mov qword [rbp - 0x38], rax
xorps xmm0, xmmword [rbp - 0x40]
movq rax, xmm0
movdqa xmmword [rbp - 0x30], xmm0
test al, al
je 0x18005a24b
inc rcx
mov r10, rcx
cmp byte [rcx], 0
jne 0x18005a482
jmp 0x18005a24b
movabs rdi, 0x14a831c287af410e
lea rbx, [rbp - 0x30]
mov qword [rbp - 0x50], rdi
lea rcx, [rbp - 0x30]
mov rax, qword [rbp - 0x50]
movabs r9, 0xf94f3fb2099dba1b
mov qword [rbp - 0x30], rax
movabs r8, 0x269b45a3e8c32755
mov qword [rbp - 0x50], r9
movabs rdx, 0xf94f3fb2099d9a46
mov rax, qword [rbp - 0x50]
mov r10d, ebx
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x50], r8
mov rax, qword [rbp - 0x50]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x50], rdx
mov rax, qword [rbp - 0x50]
movdqa xmm0, xmmword [rbp - 0x30]
mov qword [rbp - 0x38], rax
xorps xmm0, xmmword [rbp - 0x40]
movq rax, xmm0
movdqa xmmword [rbp - 0x30], xmm0
test al, al
je 0x18005a24b
inc rcx
mov r10, rcx
cmp byte [rcx], 0
jne 0x18005a510
jmp 0x18005a24b
movabs rdi, 0x12ad31c287af410e
lea rbx, [rbp - 0x30]
mov qword [rbp - 0x50], rdi
lea rcx, [rbp - 0x30]
mov rax, qword [rbp - 0x50]
movabs r9, 0xf94f3fb2099dba1b
mov qword [rbp - 0x30], rax
movabs r8, 0x269b45a3e8c32755
mov qword [rbp - 0x50], r9
movabs rdx, 0xf94f3fb2099d9a46
mov rax, qword [rbp - 0x50]
mov r10d, ebx
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x50], r8
mov rax, qword [rbp - 0x50]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x50], rdx
mov rax, qword [rbp - 0x50]
movdqa xmm0, xmmword [rbp - 0x30]
mov qword [rbp - 0x38], rax
xorps xmm0, xmmword [rbp - 0x40]
movq rax, xmm0
movdqa xmmword [rbp - 0x30], xmm0
test al, al
je 0x18005a24b
nop
inc rcx
mov r10, rcx
cmp byte [rcx], 0
jne 0x18005a5a0
jmp 0x18005a24b
movabs rdi, 0x7bfc2bca9ab7540e
lea rbx, [rbp - 0x30]
mov qword [rbp - 0x50], rdi
lea rcx, [rbp - 0x30]
mov rax, qword [rbp - 0x50]
movabs r9, 0xf94f3fb2099d9a66
mov qword [rbp - 0x30], rax
movabs r8, 0x269b45a3e8c32755
mov qword [rbp - 0x50], r9
movabs rdx, 0xf94f3fb2099d9a46
mov rax, qword [rbp - 0x50]
mov r10d, ebx
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x50], r8
mov rax, qword [rbp - 0x50]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x50], rdx
mov rax, qword [rbp - 0x50]
movdqa xmm0, xmmword [rbp - 0x30]
mov qword [rbp - 0x38], rax
xorps xmm0, xmmword [rbp - 0x40]
movq rax, xmm0
movdqa xmmword [rbp - 0x30], xmm0
test al, al
je 0x18005a24b
nop
inc rcx
mov r10, rcx
cmp byte [rcx], 0
jne 0x18005a630
jmp 0x18005a24b
movabs rdx, 0xf94f3fb2099d9a46
lea r9, [rbp - 0x30]
movabs rbx, 0x6c637cc84ac440e
lea rcx, [rbp - 0x30]
mov qword [rbp - 0x50], rbx
movabs r8, 0x269b45a3e8c32755
mov rax, qword [rbp - 0x50]
mov r10d, r9d
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x50], rdx
mov rax, qword [rbp - 0x50]
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x50], r8
mov rax, qword [rbp - 0x50]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x50], rdx
mov rax, qword [rbp - 0x50]
movdqa xmm0, xmmword [rbp - 0x30]
mov qword [rbp - 0x38], rax
xorps xmm0, xmmword [rbp - 0x40]
movq rax, xmm0
movdqa xmmword [rbp - 0x30], xmm0
test al, al
je 0x18005a12b
inc rcx
mov r10, rcx
cmp byte [rcx], 0
jne 0x18005a6b4
jmp 0x18005a12b
movabs rdi, 0x14e92ad78ba6510e
lea rbx, [rbp - 0x30]
mov qword [rbp - 0x50], rdi
lea rcx, [rbp - 0x30]
mov rax, qword [rbp - 0x50]
movabs r9, 0xf94f3fb2099dba1b
mov qword [rbp - 0x30], rax
movabs r8, 0x269b45a3e8c32755
mov qword [rbp - 0x50], r9
movabs rdx, 0xf94f3fb2099d9a46
mov rax, qword [rbp - 0x50]
mov r10d, ebx
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x50], r8
mov rax, qword [rbp - 0x50]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x50], rdx
mov rax, qword [rbp - 0x50]
movdqa xmm0, xmmword [rbp - 0x30]
mov qword [rbp - 0x38], rax
xorps xmm0, xmmword [rbp - 0x40]
movq rax, xmm0
movdqa xmmword [rbp - 0x30], xmm0
test al, al
je 0x18005a24b
inc rcx
mov r10, rcx
cmp byte [rcx], 0
jne 0x18005a742
jmp 0x18005a24b
movabs rdi, 0x15e92ad78ba6510e
lea rbx, [rbp - 0x30]
mov qword [rbp - 0x50], rdi
lea rcx, [rbp - 0x30]
mov rax, qword [rbp - 0x50]
movabs r9, 0xf94f3fb2099dba1b
mov qword [rbp - 0x30], rax
movabs r8, 0x269b45a3e8c32755
mov qword [rbp - 0x50], r9
movabs rdx, 0xf94f3fb2099d9a46
mov rax, qword [rbp - 0x50]
mov r10d, ebx
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x50], r8
mov rax, qword [rbp - 0x50]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x50], rdx
mov rax, qword [rbp - 0x50]
movdqa xmm0, xmmword [rbp - 0x30]
mov qword [rbp - 0x38], rax
xorps xmm0, xmmword [rbp - 0x40]
movq rax, xmm0
movdqa xmmword [rbp - 0x30], xmm0
test al, al
je 0x18005a24b
inc rcx
mov r10, rcx
cmp byte [rcx], 0
jne 0x18005a7d0
jmp 0x18005a24b
movabs rdi, 0x12e92ad78ba6510e
lea rbx, [rbp - 0x30]
mov qword [rbp - 0x50], rdi
lea rcx, [rbp - 0x30]
mov rax, qword [rbp - 0x50]
movabs r9, 0xf94f3fb2099dba1b
mov qword [rbp - 0x30], rax
movabs r8, 0x269b45a3e8c32755
mov qword [rbp - 0x50], r9
movabs rdx, 0xf94f3fb2099d9a46
mov rax, qword [rbp - 0x50]
mov r10d, ebx
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x50], r8
mov rax, qword [rbp - 0x50]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x50], rdx
mov rax, qword [rbp - 0x50]
movdqa xmm0, xmmword [rbp - 0x30]
mov qword [rbp - 0x38], rax
xorps xmm0, xmmword [rbp - 0x40]
movq rax, xmm0
movdqa xmmword [rbp - 0x30], xmm0
test al, al
je 0x18005a24b
nop
inc rcx
mov r10, rcx
cmp byte [rcx], 0
jne 0x18005a860
jmp 0x18005a24b
movabs rdi, 0x7bfe29c486a2560e
lea rbx, [rbp - 0x30]
mov qword [rbp - 0x50], rdi
lea rcx, [rbp - 0x30]
mov rax, qword [rbp - 0x50]
movabs r9, 0xf94f3fb2099d9a66
mov qword [rbp - 0x30], rax
movabs r8, 0x269b45a3e8c32755
mov qword [rbp - 0x50], r9
movabs rdx, 0xf94f3fb2099d9a46
mov rax, qword [rbp - 0x50]
mov r10d, ebx
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x50], r8
mov rax, qword [rbp - 0x50]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x50], rdx
mov rax, qword [rbp - 0x50]
movdqa xmm0, xmmword [rbp - 0x30]
mov qword [rbp - 0x38], rax
xorps xmm0, xmmword [rbp - 0x40]
movq rax, xmm0
movdqa xmmword [rbp - 0x30], xmm0
test al, al
je 0x18005a24b
nop
inc rcx
mov r10, rcx
cmp byte [rcx], 0
jne 0x18005a8f0
jmp 0x18005a24b
movabs rbx, 0x48ec2acd83ad520e
lea r9, [rbp - 0x30]
mov qword [rbp - 0x50], rbx
lea rcx, [rbp - 0x30]
mov rax, qword [rbp - 0x50]
movabs rdi, 0xf96f62d779e4ee6b
mov qword [rbp - 0x30], rax
movabs r8, 0x269b45a3e8c32755
mov qword [rbp - 0x50], rdi
movabs rdx, 0xf94f3fb2099d9a46
mov rax, qword [rbp - 0x50]
mov r10d, r9d
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x50], r8
mov rax, qword [rbp - 0x50]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x50], rdx
mov rax, qword [rbp - 0x50]
movdqa xmm0, xmmword [rbp - 0x30]
mov qword [rbp - 0x38], rax
xorps xmm0, xmmword [rbp - 0x40]
movq rax, xmm0
movdqa xmmword [rbp - 0x30], xmm0
test al, al
je 0x18005a98b
nop word [rax + rax]
inc rcx
mov r10, rcx
cmp byte [rcx], 0
jne 0x18005a980
mov qword [rbp - 0x50], rbx
mov rax, qword [rbp - 0x50]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x50], rdi
sub r10d, r9d
mov rax, qword [rbp - 0x50]
xor r9d, r9d
mov qword [rbp - 0x18], rax
mov rcx, r11
mov qword [rbp - 0x50], r8
mov r8d, r10d
mov rax, qword [rbp - 0x50]
mov qword [rbp - 0x50], rdx
lea rdx, [rbp - 0x20]
mov qword [rbp - 0x40], rax
mov rax, qword [rbp - 0x50]
movdqa xmm0, xmmword [rbp - 0x20]
mov qword [rbp - 0x38], rax
xorps xmm0, xmmword [rbp - 0x40]
movdqa xmmword [rbp - 0x20], xmm0
mov qword [rsp + 0x20], 0
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, qword [rbp - 0x10]
xor rcx, rsp
call fcn.1800dbb40
lea r11, [rsp + 0x80]
mov rbx, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret