Function at 0x1800062f0
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x1c0
mov rax, qword [0x180042010]
xor rax, rsp
mov qword [rsp + 0x1b0], rax
mov rcx, qword [0x180043fa8]
xor esi, esi
mov rbx, 0xffffffffffffffff
mov eax, dword [rcx + 0x11b0b44]
bt eax, 0xb
jae 0x1800065cb
btr eax, 0xb
mov dword [rcx + 0x11b0b44], eax
call fcn.180010740
mov r8, qword [0x180043fa8]
mov eax, 0x10
mov r9d, dword [r8 + 0x18ca39c]
test r9d, r9d
mov edx, dword [r8 + 0x4774750]
mov dword [r8 + 0x18ca3a0], r9d
cmove r9d, eax
mov eax, dword [r8 + 0x4774754]
cmp edx, eax
je 0x18000637f
mov dword [r8 + 0x4774750], eax
mov edx, eax
cmp r9d, 0x10
jne 0x1800063c2
mov ecx, dword [r8 + 0x47746f8]
mov eax, edx
cmp ecx, 1
jne 0x1800063a1
cmp dword [r8 + 0x18ca3ac], ecx
jne 0x1800063a1
cmp edx, 0xc
jl 0x1800063b6
mov edx, eax
test ecx, ecx
jne 0x1800063c2
cmp dword [r8 + 0x18ca3a8], 1
jne 0x1800063c2
cmp eax, 0xc
jge 0x1800063c2
mov edx, 0xc
mov dword [r8 + 0x4774750], edx
mov eax, dword [r8 + 0x5c]
lea rcx, [r8 + 0x18c92e0]
movsd xmm0, qword [r8 + 8]
movsd xmm3, qword [r8 + 0x18ca330]
mov dword [rsp + 0x118], r9d
movq r9, xmm3
mov dword [rsp + 0x110], 0x2c
mov dword [rsp + 0x108], eax
mov eax, dword [r8 + 0x60]
mov dword [rsp + 0x100], 0x2c
mov dword [rsp + 0xf8], eax
mov eax, dword [r8 + 0x50]
mov dword [rsp + 0xf0], 0x2c
mov dword [rsp + 0xe8], eax
mov eax, dword [r8 + 0x18ca308]
mov dword [rsp + 0xe0], 0x2c
mov dword [rsp + 0xd8], eax
mov eax, dword [r8 + 0x18ca328]
mov dword [rsp + 0xd0], 0x2c
mov dword [rsp + 0xc8], eax
mov eax, dword [r8 + 0x18ca30c]
mov dword [rsp + 0xc0], 0x2c
mov dword [rsp + 0xb8], eax
mov eax, dword [r8 + 0x18ca310]
mov dword [rsp + 0xb0], 0x2c
mov dword [rsp + 0xa8], eax
mov eax, dword [r8 + 0x18ca318]
mov dword [rsp + 0xa0], 0x2c
mov dword [rsp + 0x98], eax
mov eax, dword [r8 + 0x18ca324]
mov dword [rsp + 0x90], 0x2c
mov dword [rsp + 0x88], eax
mov eax, dword [r8]
mov dword [rsp + 0x80], 0x2c
mov dword [rsp + 0x78], edx
lea rdx, str.B290START_c_.3lf_c_d_c_lf_c_d_c_d_c_d_c_d_c_d_c_d_c_d_c_d_c_d_c_d_c_d_c_d_c_d_c_d_r
mov dword [rsp + 0x70], 0x2c
mov dword [rsp + 0x68], eax
mov eax, dword [r8 + 0x10]
mov dword [rsp + 0x60], 0x2c
mov dword [rsp + 0x58], eax
mov eax, dword [r8 + 0x18ca2fc]
mov dword [rsp + 0x50], 0x2c
mov dword [rsp + 0x48], eax
mov eax, dword [r8 + 0x14]
mov r8d, 0x2c
mov dword [rsp + 0x40], 0x2c
movsd qword [rsp + 0x38], xmm0
mov dword [rsp + 0x30], 0x2c
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 0x2c
call fcn.180002970
mov rdx, qword [0x180043fa8]
cmp dword [rdx + 0x18ca2f8], 1
jne 0x180006589
mov rdi, qword [rdx + 0x4774770]
cmp dword [rdi + 8], 1
je 0x180006589
add rdx, 0x18c92e0
mov r8, rbx
nop dword [rax]
inc r8
cmp byte [rdx + r8], sil
jne 0x180006560
mov rcx, qword [rdi + 0xe00028]
lea r9, [rsp + 0x120]
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov dword [rdi + 0xe00020], esi
call fcn.18000bc50
call fcn.180001820
call fcn.18000e710
mov rdx, qword [0x180043fa8]
mov eax, dword [rdx + 0x14]
mov dword [rdx + 0x47746c0], eax
call fcn.18000c770
call fcn.18000e1b0
call qword [sym.imp.WINMM.dll_timeGetTime]
mov rcx, qword [0x180043fa8]
mov dword [rcx + 0x18ca37c], eax
mov dword [rcx + 0x47746f4], esi
mov eax, dword [rcx + 0x11b0b44]
bt eax, 0xf
jae 0x1800066cd
btr eax, 0xf
mov dword [rcx + 0x11b0b44], eax
call fcn.180010740
mov rcx, qword [0x180043fa8]
cmp dword [rcx + 0x47746fc], 1
jne 0x18000663f
lea rdx, [rsp + 0x130]
mov dword [rcx + 0x47746fc], esi
call fcn.18000f420
mov rcx, qword [0x180043fa8]
lea r8, [rsp + 0x130]
add rcx, 0x18c92e0
mov dword [rsp + 0x20], 0xa
mov r9d, 0xd
lea rdx, str.STARTMAP__s_c_c
call fcn.180002970
jmp 0x18000665c
mov r9d, 0xa
lea rdx, str.STARTMAP_c_c
add rcx, 0x18c92e0
lea r8d, [r9 + 3]
call fcn.180002970
mov rdx, qword [0x180043fa8]
cmp dword [rdx + 0x18ca2f8], 1
jne 0x1800066ac
mov rdi, qword [rdx + 0x4774770]
cmp dword [rdi + 8], 1
je 0x1800066ac
add rdx, 0x18c92e0
mov r8, rbx
inc r8
cmp byte [rdx + r8], sil
jne 0x180006683
mov rcx, qword [rdi + 0xe00028]
lea r9, [rsp + 0x120]
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov dword [rdi + 0xe00020], esi
call fcn.1800105d0
call fcn.18000bc50
call fcn.18000dac0
call fcn.18000c770
mov rcx, qword [0x180043fa8]
mov dword [rcx + 0x47746f4], esi
mov eax, dword [rcx + 0x11b0b44]
bt eax, 0x10
jae 0x1800067cf
btr eax, 0x10
mov dword [rcx + 0x11b0b44], eax
call fcn.180010740
mov rcx, qword [0x180043fa8]
cmp dword [rcx + 0x47746fc], 1
jne 0x180006741
lea rdx, [rsp + 0x130]
mov dword [rcx + 0x47746fc], esi
call fcn.18000f420
mov rcx, qword [0x180043fa8]
lea r8, [rsp + 0x130]
add rcx, 0x18c92e0
mov dword [rsp + 0x20], 0xa
mov r9d, 0xd
lea rdx, str.STARTPPI__s_c_c
call fcn.180002970
jmp 0x18000675e
mov r9d, 0xa
lea rdx, str.STARTPPI_c_c
add rcx, 0x18c92e0
lea r8d, [r9 + 3]
call fcn.180002970
mov rdx, qword [0x180043fa8]
cmp dword [rdx + 0x18ca2f8], 1
jne 0x1800067ae
mov rdi, qword [rdx + 0x4774770]
cmp dword [rdi + 8], 1
je 0x1800067ae
add rdx, 0x18c92e0
mov r8, rbx
inc r8
cmp byte [rdx + r8], sil
jne 0x180006785
mov rcx, qword [rdi + 0xe00028]
lea r9, [rsp + 0x120]
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov dword [rdi + 0xe00020], esi
call fcn.1800105d0
call fcn.18000bc50
call fcn.18000c770
call fcn.18000e1b0
mov rcx, qword [0x180043fa8]
mov dword [rcx + 0x47746f4], esi
mov eax, dword [rcx + 0x11b0b44]
bt eax, 0x11
jae 0x1800068fd
btr eax, 0x11
mov dword [rcx + 0x11b0b44], eax
call fcn.180010740
call fcn.18000bc50
mov rax, qword [0x180043fa8]
mov qword [rax + 0x18ca348], rsi
mov qword [rax + 0x18ca340], rsi
mov qword [rax + 0x18ca350], rsi
call fcn.18000c0e0
call fcn.18000e710
mov rcx, qword [0x180043fa8]
cmp dword [rcx + 0x47746fc], 1
jne 0x18000686e
lea rdx, [rsp + 0x130]
mov dword [rcx + 0x47746fc], esi
call fcn.18000f420
mov rcx, qword [0x180043fa8]
lea r8, [rsp + 0x130]
add rcx, 0x18c92e0
mov dword [rsp + 0x20], 0xa
mov r9d, 0xd
lea rdx, str.STARTRAW__s_c_c
call fcn.180002970
jmp 0x18000688b
mov r9d, 0xa
lea rdx, str.STARTRAW_c_c
add rcx, 0x18c92e0
lea r8d, [r9 + 3]
call fcn.180002970
mov rdx, qword [0x180043fa8]
cmp dword [rdx + 0x18ca2f8], 1
jne 0x1800068dc
mov rdi, qword [rdx + 0x4774770]
cmp dword [rdi + 8], 1
je 0x1800068dc
add rdx, 0x18c92e0
nop
inc rbx
cmp byte [rdx + rbx], sil
jne 0x1800068b0
mov rcx, qword [rdi + 0xe00028]
lea r9, [rsp + 0x120]
mov r8, rbx
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov dword [rdi + 0xe00020], esi
call fcn.1800105d0
call fcn.18000dac0
call fcn.18000c770
call fcn.18000e1b0
mov rax, qword [0x180043fa8]
mov dword [rax + 0x47746f4], esi
mov rcx, qword [rsp + 0x1b0]
xor rcx, rsp
call fcn.180013130
lea r11, [rsp + 0x1c0]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rsp, r11
pop rdi
ret