Function at 0x18005d3e0
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rdi
push rbp
mov rbp, rsp
sub rsp, 0x80
mov rax, qword [0x18015f040]
xor rax, rsp
mov qword [rbp - 0x10], rax
movsx rax, dx
mov r11, rcx
cmp eax, 0xe
ja case.default.0x18005d424
lea rdx, [0x180000000]
mov ecx, dword [rdx + rax*4 + 0x5dd8c]
add rcx, rdx
jmp rcx
movabs rdx, 0x9fe74ab83cc32036
lea r9, [rbp - 0x30]
movabs rbx, 0x564a48555e406e6
lea rcx, [rbp - 0x30]
mov qword [rbp - 0x50], rbx
movabs r8, 0x544f9e93a8b64bd
mov rax, qword [rbp - 0x50]
mov r10d, r9d
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x50], rdx
mov rax, qword [rbp - 0x50]
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x50], r8
mov rax, qword [rbp - 0x50]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x50], rdx
mov rax, qword [rbp - 0x50]
movdqa xmm0, xmmword [rbp - 0x30]
mov qword [rbp - 0x18], rax
xorps xmm0, xmmword [rbp - 0x20]
movq rax, xmm0
movdqa xmmword [rbp - 0x30], xmm0
test al, al
je 0x18005d4ab
nop word [rax + rax]
inc rcx
mov r10, rcx
cmp byte [rcx], 0
jne 0x18005d4a0
mov qword [rbp - 0x50], rbx
mov rax, qword [rbp - 0x50]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x50], rdx
jmp 0x18005dd1b
movabs rdx, 0x9fe74ab83cc32036
lea r9, [rbp - 0x30]
movabs rbx, 0x2519cfd84ee50de6
lea rcx, [rbp - 0x30]
mov qword [rbp - 0x50], rbx
movabs r8, 0x544f9e93a8b64bd
mov rax, qword [rbp - 0x50]
mov r10d, r9d
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x50], rdx
mov rax, qword [rbp - 0x50]
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x50], r8
mov rax, qword [rbp - 0x50]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x50], rdx
mov rax, qword [rbp - 0x50]
movdqa xmm0, xmmword [rbp - 0x30]
mov qword [rbp - 0x38], rax
xorps xmm0, xmmword [rbp - 0x40]
movq rax, xmm0
movdqa xmmword [rbp - 0x30], xmm0
test al, al
je 0x18005d4ab
inc rcx
mov r10, rcx
cmp byte [rcx], 0
jne 0x18005d534
jmp 0x18005d4ab
movabs rdi, 0x5872c89d54e211e6
lea rbx, [rbp - 0x30]
mov qword [rbp - 0x50], rdi
lea rcx, [rbp - 0x30]
mov rax, qword [rbp - 0x50]
movabs r9, 0x9fe74ab83cc32016
mov qword [rbp - 0x30], rax
movabs r8, 0x544f9e93a8b64bd
mov qword [rbp - 0x50], r9
movabs rdx, 0x9fe74ab83cc32036
mov rax, qword [rbp - 0x50]
mov r10d, ebx
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x50], r8
mov rax, qword [rbp - 0x50]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x50], rdx
mov rax, qword [rbp - 0x50]
movdqa xmm0, xmmword [rbp - 0x30]
mov qword [rbp - 0x38], rax
xorps xmm0, xmmword [rbp - 0x40]
movq rax, xmm0
movdqa xmmword [rbp - 0x30], xmm0
test al, al
je 0x18005d5cb
nop
inc rcx
mov r10, rcx
cmp byte [rcx], 0
jne 0x18005d5c0
mov qword [rbp - 0x50], rdi
sub r10d, ebx
mov rax, qword [rbp - 0x50]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x50], r9
jmp 0x18005dd1e
movabs rdx, 0x9fe74ab83cc32036
lea r9, [rbp - 0x30]
movabs rbx, 0x2519cbda4ee50de6
lea rcx, [rbp - 0x30]
mov qword [rbp - 0x50], rbx
movabs r8, 0x544f9e93a8b64bd
mov rax, qword [rbp - 0x50]
mov r10d, r9d
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x50], rdx
mov rax, qword [rbp - 0x50]
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x50], r8
mov rax, qword [rbp - 0x50]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x50], rdx
mov rax, qword [rbp - 0x50]
movdqa xmm0, xmmword [rbp - 0x30]
mov qword [rbp - 0x38], rax
xorps xmm0, xmmword [rbp - 0x40]
movq rax, xmm0
movdqa xmmword [rbp - 0x30], xmm0
test al, al
je 0x18005d4ab
nop word [rax + rax]
inc rcx
mov r10, rcx
cmp byte [rcx], 0
jne 0x18005d660
jmp 0x18005d4ab
movabs rdi, 0x5876ca9d54e211e6
lea rbx, [rbp - 0x30]
mov qword [rbp - 0x50], rdi
lea rcx, [rbp - 0x30]
mov rax, qword [rbp - 0x50]
movabs r9, 0x9fe74ab83cc32016
mov qword [rbp - 0x30], rax
movabs r8, 0x544f9e93a8b64bd
mov qword [rbp - 0x50], r9
movabs rdx, 0x9fe74ab83cc32036
mov rax, qword [rbp - 0x50]
mov r10d, ebx
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x50], r8
mov rax, qword [rbp - 0x50]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x50], rdx
mov rax, qword [rbp - 0x50]
movdqa xmm0, xmmword [rbp - 0x30]
mov qword [rbp - 0x38], rax
xorps xmm0, xmmword [rbp - 0x40]
movq rax, xmm0
movdqa xmmword [rbp - 0x30], xmm0
test al, al
je 0x18005d5cb
nop
inc rcx
mov r10, rcx
cmp byte [rcx], 0
jne 0x18005d6f0
jmp 0x18005d5cb
movabs rdx, 0x9fe74ab83cc32036
lea r9, [rbp - 0x30]
movabs rbx, 0x2519cddf4ee50de6
lea rcx, [rbp - 0x30]
mov qword [rbp - 0x50], rbx
movabs r8, 0x544f9e93a8b64bd
mov rax, qword [rbp - 0x50]
mov r10d, r9d
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x50], rdx
mov rax, qword [rbp - 0x50]
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x50], r8
mov rax, qword [rbp - 0x50]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x50], rdx
mov rax, qword [rbp - 0x50]
mov qword [rbp - 0x38], rax
movdqa xmm0, xmmword [rbp - 0x40]
xorps xmm0, xmmword [rbp - 0x30]
movq rax, xmm0
movdqa xmmword [rbp - 0x30], xmm0
test al, al
je 0x18005d4ab
inc rcx
mov r10, rcx
cmp byte [rcx], 0
jne 0x18005d774
jmp 0x18005d4ab
movabs rdi, 0x5870cf9d54e211e6
lea rbx, [rbp - 0x30]
mov qword [rbp - 0x50], rdi
lea rcx, [rbp - 0x30]
mov rax, qword [rbp - 0x50]
movabs r9, 0x9fe74ab83cc32016
mov qword [rbp - 0x30], rax
movabs r8, 0x544f9e93a8b64bd
mov qword [rbp - 0x50], r9
movabs rdx, 0x9fe74ab83cc32036
mov rax, qword [rbp - 0x50]
mov r10d, ebx
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x50], r8
mov rax, qword [rbp - 0x50]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x50], rdx
mov rax, qword [rbp - 0x50]
movdqa xmm0, xmmword [rbp - 0x30]
mov qword [rbp - 0x38], rax
xorps xmm0, xmmword [rbp - 0x40]
movq rax, xmm0
movdqa xmmword [rbp - 0x30], xmm0
test al, al
je 0x18005d5cb
inc rcx
mov r10, rcx
cmp byte [rcx], 0
jne 0x18005d802
jmp 0x18005d5cb
movabs rdi, 0x37778d8855e702e6
lea rbx, [rbp - 0x30]
mov qword [rbp - 0x50], rdi
lea rcx, [rbp - 0x30]
mov rax, qword [rbp - 0x50]
movabs r9, 0x9fe74ab83cc3006b
mov qword [rbp - 0x30], rax
movabs r8, 0x544f9e93a8b64bd
mov qword [rbp - 0x50], r9
movabs rdx, 0x9fe74ab83cc32036
mov rax, qword [rbp - 0x50]
mov r10d, ebx
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x50], r8
mov rax, qword [rbp - 0x50]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x50], rdx
mov rax, qword [rbp - 0x50]
movdqa xmm0, xmmword [rbp - 0x30]
mov qword [rbp - 0x38], rax
xorps xmm0, xmmword [rbp - 0x40]
movq rax, xmm0
movdqa xmmword [rbp - 0x30], xmm0
test al, al
je 0x18005d5cb
inc rcx
mov r10, rcx
cmp byte [rcx], 0
jne 0x18005d890
jmp 0x18005d5cb
movabs rdi, 0x31728d8855e702e6
lea rbx, [rbp - 0x30]
mov qword [rbp - 0x50], rdi
lea rcx, [rbp - 0x30]
mov rax, qword [rbp - 0x50]
movabs r9, 0x9fe74ab83cc3006b
mov qword [rbp - 0x30], rax
movabs r8, 0x544f9e93a8b64bd
mov qword [rbp - 0x50], r9
movabs rdx, 0x9fe74ab83cc32036
mov rax, qword [rbp - 0x50]
mov r10d, ebx
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x50], r8
mov rax, qword [rbp - 0x50]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x50], rdx
mov rax, qword [rbp - 0x50]
movdqa xmm0, xmmword [rbp - 0x30]
mov qword [rbp - 0x38], rax
xorps xmm0, xmmword [rbp - 0x40]
movq rax, xmm0
movdqa xmmword [rbp - 0x30], xmm0
test al, al
je 0x18005d5cb
nop
inc rcx
mov r10, rcx
cmp byte [rcx], 0
jne 0x18005d920
jmp 0x18005d5cb
movabs rdi, 0x5823978048ff17e6
lea rbx, [rbp - 0x30]
mov qword [rbp - 0x50], rdi
lea rcx, [rbp - 0x30]
mov rax, qword [rbp - 0x50]
movabs r9, 0x9fe74ab83cc32016
mov qword [rbp - 0x30], rax
movabs r8, 0x544f9e93a8b64bd
mov qword [rbp - 0x50], r9
movabs rdx, 0x9fe74ab83cc32036
mov rax, qword [rbp - 0x50]
mov r10d, ebx
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x50], r8
mov rax, qword [rbp - 0x50]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x50], rdx
mov rax, qword [rbp - 0x50]
movdqa xmm0, xmmword [rbp - 0x30]
mov qword [rbp - 0x38], rax
xorps xmm0, xmmword [rbp - 0x40]
movq rax, xmm0
movdqa xmmword [rbp - 0x30], xmm0
test al, al
je 0x18005d5cb
nop
inc rcx
mov r10, rcx
cmp byte [rcx], 0
jne 0x18005d9b0
jmp 0x18005d5cb
movabs rdx, 0x9fe74ab83cc32036
lea r9, [rbp - 0x30]
movabs rbx, 0x25198b8656e407e6
lea rcx, [rbp - 0x30]
mov qword [rbp - 0x50], rbx
movabs r8, 0x544f9e93a8b64bd
mov rax, qword [rbp - 0x50]
mov r10d, r9d
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x50], rdx
mov rax, qword [rbp - 0x50]
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x50], r8
mov rax, qword [rbp - 0x50]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x50], rdx
mov rax, qword [rbp - 0x50]
movdqa xmm0, xmmword [rbp - 0x30]
mov qword [rbp - 0x38], rax
xorps xmm0, xmmword [rbp - 0x40]
movq rax, xmm0
movdqa xmmword [rbp - 0x30], xmm0
test al, al
je 0x18005d4ab
inc rcx
mov r10, rcx
cmp byte [rcx], 0
jne 0x18005da34
jmp 0x18005d4ab
movabs rdi, 0x3736969d59ee12e6
lea rbx, [rbp - 0x30]
mov qword [rbp - 0x50], rdi
lea rcx, [rbp - 0x30]
mov rax, qword [rbp - 0x50]
movabs r9, 0x9fe74ab83cc3006b
mov qword [rbp - 0x30], rax
movabs r8, 0x544f9e93a8b64bd
mov qword [rbp - 0x50], r9
movabs rdx, 0x9fe74ab83cc32036
mov rax, qword [rbp - 0x50]
mov r10d, ebx
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x50], r8
mov rax, qword [rbp - 0x50]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x50], rdx
mov rax, qword [rbp - 0x50]
movdqa xmm0, xmmword [rbp - 0x30]
mov qword [rbp - 0x38], rax
xorps xmm0, xmmword [rbp - 0x40]
movq rax, xmm0
movdqa xmmword [rbp - 0x30], xmm0
test al, al
je 0x18005d5cb
inc rcx
mov r10, rcx
cmp byte [rcx], 0
jne 0x18005dac2
jmp 0x18005d5cb
movabs rdi, 0x3636969d59ee12e6
lea rbx, [rbp - 0x30]
mov qword [rbp - 0x50], rdi
lea rcx, [rbp - 0x30]
mov rax, qword [rbp - 0x50]
movabs r9, 0x9fe74ab83cc3006b
mov qword [rbp - 0x30], rax
movabs r8, 0x544f9e93a8b64bd
mov qword [rbp - 0x50], r9
movabs rdx, 0x9fe74ab83cc32036
mov rax, qword [rbp - 0x50]
mov r10d, ebx
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x50], r8
mov rax, qword [rbp - 0x50]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x50], rdx
mov rax, qword [rbp - 0x50]
movdqa xmm0, xmmword [rbp - 0x30]
mov qword [rbp - 0x38], rax
xorps xmm0, xmmword [rbp - 0x40]
movq rax, xmm0
movdqa xmmword [rbp - 0x30], xmm0
test al, al
je 0x18005d5cb
inc rcx
mov r10, rcx
cmp byte [rcx], 0
jne 0x18005db50
jmp 0x18005d5cb
movabs rdi, 0x3136969d59ee12e6
lea rbx, [rbp - 0x30]
mov qword [rbp - 0x50], rdi
lea rcx, [rbp - 0x30]
mov rax, qword [rbp - 0x50]
movabs r9, 0x9fe74ab83cc3006b
mov qword [rbp - 0x30], rax
movabs r8, 0x544f9e93a8b64bd
mov qword [rbp - 0x50], r9
movabs rdx, 0x9fe74ab83cc32036
mov rax, qword [rbp - 0x50]
mov r10d, ebx
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x50], r8
mov rax, qword [rbp - 0x50]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x50], rdx
mov rax, qword [rbp - 0x50]
movdqa xmm0, xmmword [rbp - 0x30]
mov qword [rbp - 0x38], rax
xorps xmm0, xmmword [rbp - 0x40]
movq rax, xmm0
movdqa xmmword [rbp - 0x30], xmm0
test al, al
je 0x18005d5cb
nop
inc rcx
mov r10, rcx
cmp byte [rcx], 0
jne 0x18005dbe0
jmp 0x18005d5cb
movabs rdi, 0x5821958e54ea15e6
lea rbx, [rbp - 0x30]
mov qword [rbp - 0x50], rdi
lea rcx, [rbp - 0x30]
mov rax, qword [rbp - 0x50]
movabs r9, 0x9fe74ab83cc32016
mov qword [rbp - 0x30], rax
movabs r8, 0x544f9e93a8b64bd
mov qword [rbp - 0x50], r9
movabs rdx, 0x9fe74ab83cc32036
mov rax, qword [rbp - 0x50]
mov r10d, ebx
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x50], r8
mov rax, qword [rbp - 0x50]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x50], rdx
mov rax, qword [rbp - 0x50]
movdqa xmm0, xmmword [rbp - 0x30]
mov qword [rbp - 0x38], rax
xorps xmm0, xmmword [rbp - 0x40]
movq rax, xmm0
movdqa xmmword [rbp - 0x30], xmm0
test al, al
je 0x18005d5cb
nop
inc rcx
mov r10, rcx
cmp byte [rcx], 0
jne 0x18005dc70
jmp 0x18005d5cb
movabs rbx, 0x6b33968751e511e6
lea r9, [rbp - 0x30]
mov qword [rbp - 0x50], rbx
lea rcx, [rbp - 0x30]
mov rax, qword [rbp - 0x50]
movabs rdi, 0x9fc717dd4cba541b
mov qword [rbp - 0x30], rax
movabs r8, 0x544f9e93a8b64bd
mov qword [rbp - 0x50], rdi
movabs rdx, 0x9fe74ab83cc32036
mov rax, qword [rbp - 0x50]
mov r10d, r9d
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x50], r8
mov rax, qword [rbp - 0x50]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x50], rdx
mov rax, qword [rbp - 0x50]
movdqa xmm0, xmmword [rbp - 0x30]
mov qword [rbp - 0x38], rax
xorps xmm0, xmmword [rbp - 0x40]
movq rax, xmm0
movdqa xmmword [rbp - 0x30], xmm0
test al, al
je 0x18005dd0b
nop word [rax + rax]
inc rcx
mov r10, rcx
cmp byte [rcx], 0
jne 0x18005dd00
mov qword [rbp - 0x50], rbx
mov rax, qword [rbp - 0x50]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x50], rdi
sub r10d, r9d
mov rax, qword [rbp - 0x50]
xor r9d, r9d
mov qword [rbp - 0x18], rax
mov rcx, r11
mov qword [rbp - 0x50], r8
mov r8d, r10d
mov rax, qword [rbp - 0x50]
mov qword [rbp - 0x50], rdx
lea rdx, [rbp - 0x20]
mov qword [rbp - 0x40], rax
mov rax, qword [rbp - 0x50]
movdqa xmm0, xmmword [rbp - 0x20]
mov qword [rbp - 0x38], rax
xorps xmm0, xmmword [rbp - 0x40]
movdqa xmmword [rbp - 0x20], xmm0
mov qword [rsp + 0x20], 0
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, qword [rbp - 0x10]
xor rcx, rsp
call fcn.1800e1360
lea r11, [rsp + 0x80]
mov rbx, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret