Function at 0x180005cb0
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x1c0
mov rax, qword [0x180042010]
xor rax, rsp
mov qword [rsp + 0x1b0], rax
mov rcx, qword [0x180043fa8]
xor esi, esi
mov rbx, 0xffffffffffffffff
mov eax, dword [rcx + 0x11b0b44]
bt eax, 0xb
jae 0x180005f8b
btr eax, 0xb
mov dword [rcx + 0x11b0b44], eax
call fcn.180010740
mov r8, qword [0x180043fa8]
mov eax, 0x10
mov r9d, dword [r8 + 0x18ca39c]
test r9d, r9d
mov edx, dword [r8 + 0x4774750]
mov dword [r8 + 0x18ca3a0], r9d
cmove r9d, eax
mov eax, dword [r8 + 0x4774754]
cmp edx, eax
je 0x180005d3f
mov dword [r8 + 0x4774750], eax
mov edx, eax
cmp r9d, 0x10
jne 0x180005d82
mov ecx, dword [r8 + 0x47746f8]
mov eax, edx
cmp ecx, 1
jne 0x180005d61
cmp dword [r8 + 0x18ca3ac], ecx
jne 0x180005d61
cmp edx, 0xc
jl 0x180005d76
mov edx, eax
test ecx, ecx
jne 0x180005d82
cmp dword [r8 + 0x18ca3a8], 1
jne 0x180005d82
cmp eax, 0xc
jge 0x180005d82
mov edx, 0xc
mov dword [r8 + 0x4774750], edx
mov eax, dword [r8 + 0x5c]
lea rcx, [r8 + 0x18c92e0]
movsd xmm0, qword [r8 + 8]
movsd xmm3, qword [r8 + 0x18ca330]
mov dword [rsp + 0x118], r9d
movq r9, xmm3
mov dword [rsp + 0x110], 0x2c
mov dword [rsp + 0x108], eax
mov eax, dword [r8 + 0x58]
mov dword [rsp + 0x100], 0x2c
mov dword [rsp + 0xf8], eax
mov eax, dword [r8 + 0x50]
mov dword [rsp + 0xf0], 0x2c
mov dword [rsp + 0xe8], eax
mov eax, dword [r8 + 0x18ca308]
mov dword [rsp + 0xe0], 0x2c
mov dword [rsp + 0xd8], eax
mov eax, dword [r8 + 0x18ca328]
mov dword [rsp + 0xd0], 0x2c
mov dword [rsp + 0xc8], eax
mov eax, dword [r8 + 0x18ca30c]
mov dword [rsp + 0xc0], 0x2c
mov dword [rsp + 0xb8], eax
mov eax, dword [r8 + 0x18ca310]
mov dword [rsp + 0xb0], 0x2c
mov dword [rsp + 0xa8], eax
mov eax, dword [r8 + 0x18ca318]
mov dword [rsp + 0xa0], 0x2c
mov dword [rsp + 0x98], eax
mov eax, dword [r8 + 0x18ca324]
mov dword [rsp + 0x90], 0x2c
mov dword [rsp + 0x88], eax
mov eax, dword [r8]
mov dword [rsp + 0x80], 0x2c
mov dword [rsp + 0x78], edx
lea rdx, str.B290_START_c_.3lf_c_d_c_lf_c_d_c_d_c_d_c_d_c_d_c_d_c_d_c_d_c_d_c_d_c_d_c_d_c_d_c_d_r
mov dword [rsp + 0x70], 0x2c
mov dword [rsp + 0x68], eax
mov eax, dword [r8 + 0x10]
mov dword [rsp + 0x60], 0x2c
mov dword [rsp + 0x58], eax
mov eax, dword [r8 + 0x18ca2fc]
mov dword [rsp + 0x50], 0x2c
mov dword [rsp + 0x48], eax
mov eax, dword [r8 + 0x14]
mov r8d, 0x2c
mov dword [rsp + 0x40], 0x2c
movsd qword [rsp + 0x38], xmm0
mov dword [rsp + 0x30], 0x2c
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 0x2c
call fcn.180002970
mov rdx, qword [0x180043fa8]
cmp dword [rdx + 0x18ca2f8], 1
jne 0x180005f49
mov rdi, qword [rdx + 0x4774770]
cmp dword [rdi + 8], 1
je 0x180005f49
add rdx, 0x18c92e0
mov r8, rbx
nop dword [rax]
inc r8
cmp byte [rdx + r8], sil
jne 0x180005f20
mov rcx, qword [rdi + 0xe00028]
lea r9, [rsp + 0x120]
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov dword [rdi + 0xe00020], esi
call fcn.18000bc50
call fcn.180001820
call fcn.18000e710
mov rdx, qword [0x180043fa8]
mov eax, dword [rdx + 0x14]
mov dword [rdx + 0x47746c0], eax
call fcn.18000c770
call fcn.18000e1b0
call qword [sym.imp.WINMM.dll_timeGetTime]
mov rcx, qword [0x180043fa8]
mov dword [rcx + 0x18ca37c], eax
mov dword [rcx + 0x47746f4], esi
mov eax, dword [rcx + 0x11b0b44]
bt eax, 0xf
jae 0x18000608d
btr eax, 0xf
mov dword [rcx + 0x11b0b44], eax
call fcn.180010740
mov rcx, qword [0x180043fa8]
cmp dword [rcx + 0x47746fc], 1
jne 0x180005fff
lea rdx, [rsp + 0x130]
mov dword [rcx + 0x47746fc], esi
call fcn.18000f310
mov rcx, qword [0x180043fa8]
lea r8, [rsp + 0x130]
add rcx, 0x18c92e0
mov dword [rsp + 0x20], 0xa
mov r9d, 0xd
lea rdx, str.START_MAP__s_c_c
call fcn.180002970
jmp 0x18000601c
mov r9d, 0xa
lea rdx, str.START_MAP_c_c
add rcx, 0x18c92e0
lea r8d, [r9 + 3]
call fcn.180002970
mov rdx, qword [0x180043fa8]
cmp dword [rdx + 0x18ca2f8], 1
jne 0x18000606c
mov rdi, qword [rdx + 0x4774770]
cmp dword [rdi + 8], 1
je 0x18000606c
add rdx, 0x18c92e0
mov r8, rbx
inc r8
cmp byte [rdx + r8], sil
jne 0x180006043
mov rcx, qword [rdi + 0xe00028]
lea r9, [rsp + 0x120]
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov dword [rdi + 0xe00020], esi
call fcn.1800105d0
call fcn.18000bc50
call fcn.18000dac0
call fcn.18000c770
mov rcx, qword [0x180043fa8]
mov dword [rcx + 0x47746f4], esi
mov eax, dword [rcx + 0x11b0b44]
bt eax, 0x10
jae 0x18000618f
btr eax, 0x10
mov dword [rcx + 0x11b0b44], eax
call fcn.180010740
mov rcx, qword [0x180043fa8]
cmp dword [rcx + 0x47746fc], 1
jne 0x180006101
lea rdx, [rsp + 0x130]
mov dword [rcx + 0x47746fc], esi
call fcn.18000f310
mov rcx, qword [0x180043fa8]
lea r8, [rsp + 0x130]
add rcx, 0x18c92e0
mov dword [rsp + 0x20], 0xa
mov r9d, 0xd
lea rdx, str.START_PPI__s_c_c
call fcn.180002970
jmp 0x18000611e
mov r9d, 0xa
lea rdx, str.START_PPI_c_c
add rcx, 0x18c92e0
lea r8d, [r9 + 3]
call fcn.180002970
mov rdx, qword [0x180043fa8]
cmp dword [rdx + 0x18ca2f8], 1
jne 0x18000616e
mov rdi, qword [rdx + 0x4774770]
cmp dword [rdi + 8], 1
je 0x18000616e
add rdx, 0x18c92e0
mov r8, rbx
inc r8
cmp byte [rdx + r8], sil
jne 0x180006145
mov rcx, qword [rdi + 0xe00028]
lea r9, [rsp + 0x120]
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov dword [rdi + 0xe00020], esi
call fcn.1800105d0
call fcn.18000bc50
call fcn.18000c770
call fcn.18000e1b0
mov rcx, qword [0x180043fa8]
mov dword [rcx + 0x47746f4], esi
mov eax, dword [rcx + 0x11b0b44]
bt eax, 0x11
jae 0x1800062bd
btr eax, 0x11
mov dword [rcx + 0x11b0b44], eax
call fcn.180010740
call fcn.18000bc50
mov rax, qword [0x180043fa8]
mov qword [rax + 0x18ca348], rsi
mov qword [rax + 0x18ca340], rsi
mov qword [rax + 0x18ca350], rsi
call fcn.18000c0e0
call fcn.18000e710
mov rcx, qword [0x180043fa8]
cmp dword [rcx + 0x47746fc], 1
jne 0x18000622e
lea rdx, [rsp + 0x130]
mov dword [rcx + 0x47746fc], esi
call fcn.18000f310
mov rcx, qword [0x180043fa8]
lea r8, [rsp + 0x130]
add rcx, 0x18c92e0
mov dword [rsp + 0x20], 0xa
mov r9d, 0xd
lea rdx, str.START_RAW__s_c_c
call fcn.180002970
jmp 0x18000624b
mov r9d, 0xa
lea rdx, str.START_RAW_c_c
add rcx, 0x18c92e0
lea r8d, [r9 + 3]
call fcn.180002970
mov rdx, qword [0x180043fa8]
cmp dword [rdx + 0x18ca2f8], 1
jne 0x18000629c
mov rdi, qword [rdx + 0x4774770]
cmp dword [rdi + 8], 1
je 0x18000629c
add rdx, 0x18c92e0
nop
inc rbx
cmp byte [rdx + rbx], sil
jne 0x180006270
mov rcx, qword [rdi + 0xe00028]
lea r9, [rsp + 0x120]
mov r8, rbx
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov dword [rdi + 0xe00020], esi
call fcn.1800105d0
call fcn.18000dac0
call fcn.18000c770
call fcn.18000e1b0
mov rax, qword [0x180043fa8]
mov dword [rax + 0x47746f4], esi
mov rcx, qword [rsp + 0x1b0]
xor rcx, rsp
call fcn.180013130
lea r11, [rsp + 0x1c0]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rsp, r11
pop rdi
ret