Function at 0x180077b20
Capabilities:
Write file on windows

Disassembly:
mov rax, rsp
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xb0
mov qword [rax - 0x60], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov r15, rdx
mov r14, rcx
xor r13d, r13d
mov dword [rax + 8], r13d
mov r8d, dword [rcx + 0x360]
sub r8d, 1
je 0x180077c58
cmp r8d, 1
je 0x180077b7c
add rdx, 0x28
add rcx, 0x810
call sym.WebKeyAPICPPDLLx64.dll_public:_class_WKBinary_const____ptr64___cdecl_WKBinary::operator_class_WKBinary_const____ptr64____ptr64
jmp 0x180077c3b
call sym.WebKeyAPICPPDLLx64.dll_public:_class_IAppSession____ptr64___cdecl_WebKeyAPI::GetSession_void____ptr64
mov rbx, rax
lea r12, vtable.WKString.0
mov qword [rsp + 0x48], r12
mov byte [rsp + 0x50], 0
mov qword [rsp + 0x58], r13
mov qword [rsp + 0x60], r13
mov qword [rsp + 0x68], r13
mov rdx, qword [r15 + 0x10]
lea rcx, [rsp + 0x48]
call sym.WebKeyAPICPPDLLx64.dll_protected:_void___cdecl_WKString::Set_char_const____ptr64____ptr64
nop
lea rsi, [0x1801ca568]
mov rdx, rsi
mov rdi, qword [rsp + 0x58]
cmp qword [rsp + 0x68], 0
cmovne rdx, rdi
mov rax, qword [rbx]
lea r8, [r15 + 0x28]
mov rcx, rbx
call qword [rax]
nop
test rdi, rdi
je 0x180077be7
mov rcx, rdi
call fcn.1801525f4
nop
mov qword [rsp + 0x48], r12
mov byte [rsp + 0x50], 0
mov qword [rsp + 0x58], r13
mov qword [rsp + 0x60], r13
mov qword [rsp + 0x68], r13
mov rdx, qword [r15 + 0x10]
lea rcx, [rsp + 0x48]
call sym.WebKeyAPICPPDLLx64.dll_protected:_void___cdecl_WKString::Set_char_const____ptr64____ptr64
nop
mov rbx, qword [rsp + 0x58]
cmp qword [rsp + 0x68], 0
cmovne rsi, rbx
lea rcx, [r14 + 0x700]
mov rdx, rsi
call sym.WebKeyAPICPPDLLx64.dll_protected:_void___cdecl_WKString::Set_char_const____ptr64____ptr64
nop
test rbx, rbx
je 0x180077c3b
mov rcx, rbx
call fcn.1801525f4
lea r11, [rsp + 0xb0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
mov rcx, qword [rcx + 0x7f0]
mov rax, qword [rcx]
lea rdx, [rsp + 0x48]
call qword [rax + Ordinal_41]
nop
mov dl, 0x5c
lea rcx, [rsp + 0x88]
call sym.WebKeyAPICPPDLLx64.dll_public:_void___cdecl_WKString::constructor_char____ptr64
mov rbx, rax
mov esi, 1
cmp qword [rsp + 0x68], rsi
cmovb rsi, qword [rsp + 0x68]
lea r12, vtable.WKString.0
mov qword [rsp + 0x20], r12
mov byte [rsp + 0x28], 0
mov qword [rsp + 0x30], r13
mov dword [rsp + 0xe0], 4
mov qword [rsp + 0x40], rsi
lea rcx, [rsi + 1]
mov qword [rsp + 0x38], rcx
call fcn.180152710
mov rdi, rax
mov rdx, qword [rsp + 0x58]
sub rdx, rsi
add rdx, qword [rsp + 0x68]
mov r8, rsi
mov rcx, rax
call fcn.1801547b0
mov byte [rdi + rsi], 0
mov r8, qword [rbx + 0x10]
mov rcx, r13
test r8, r8
je 0x180077cfd
mov rcx, 0xffffffffffffffff
inc rcx
cmp byte [r8 + rcx], 0
jne 0x180077cf3
test rsi, rsi
jne 0x180077d0b
test rcx, rcx
jne 0x180077d3a
xor bl, bl
jmp 0x180077d3c
test rcx, rcx
je 0x180077d3a
mov rax, rdi
sub r8, rdi
nop word [rax + rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x180077d33
inc rax
test ecx, ecx
jne 0x180077d20
test edx, edx
setne bl
jmp 0x180077d3c
mov bl, 1
test rdi, rdi
je 0x180077d4a
mov rcx, rdi
call fcn.1801525f4
nop
mov qword [rsp + 0x88], r12
mov rcx, qword [rsp + 0x98]
test rcx, rcx
je 0x180077d64
call fcn.1801525f4
test bl, bl
je 0x180077d74
mov dl, 0x5c
lea rcx, [rsp + 0x48]
call sym.WebKeyAPICPPDLLx64.dll_public:_class_WKString____ptr64___cdecl_WKString::operator_char____ptr64
lea rax, [rsp + 0x20]
mov qword [rsp + 0xe0], rax
mov qword [rsp + 0x20], r12
mov byte [rsp + 0x28], 0
mov qword [rsp + 0x30], r13
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x40], r13
mov rdx, qword [rsp + 0x58]
lea rcx, [rsp + 0x20]
call sym.WebKeyAPICPPDLLx64.dll_protected:_void___cdecl_WKString::Set_char_const____ptr64____ptr64
nop
lea rcx, [rsp + 0x20]
call sym.WebKeyAPICPPDLLx64.dll_protected:_static_void___cdecl_WebKeyAPI::CleanMimes_class_WKString_
nop
mov qword [rsp + 0x20], r12
mov byte [rsp + 0x28], 0
mov qword [rsp + 0x30], r13
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x40], r13
mov rdx, qword [r15 + 0x10]
lea rcx, [rsp + 0x20]
call sym.WebKeyAPICPPDLLx64.dll_protected:_void___cdecl_WKString::Set_char_const____ptr64____ptr64
nop
lea rsi, [0x1801ca568]
mov rdx, rsi
mov rbx, qword [rsp + 0x30]
cmp qword [rsp + 0x40], 0
cmovne rdx, rbx
lea rcx, [rsp + 0x48]
call sym.WebKeyAPICPPDLLx64.dll_protected:_void___cdecl_WKString::Concate_char_const____ptr64____ptr64
nop
test rbx, rbx
je 0x180077e0f
mov rcx, rbx
call fcn.1801525f4
nop
mov rdx, rsi
cmp qword [rsp + 0x68], 0
cmovne rdx, qword [rsp + 0x58]
mov qword [rsp + 0xe0], r13
mov r8d, 4
lea rcx, [rsp + 0xe0]
call fcn.1800cb3b0
nop
mov rax, qword [r15 + 0x28]
test rax, rax
je 0x180077e48
mov ecx, dword [rax + 8]
jmp 0x180077e4b
mov ecx, r13d
test rax, rax
je 0x180077e55
mov r10, qword [rax]
jmp 0x180077e58
mov r10, r13
movsxd rdi, ecx
mov r8d, ecx
mov rbx, qword [rsp + 0xe0]
mov r9, rbx
mov edx, 1
mov rcx, r10
call fcn.18016a114
cmp rax, rdi
jne 0x180077f01
test rbx, rbx
je 0x180077e8c
mov rcx, rbx
call fcn.180169e60
mov qword [rsp + 0xe0], r13
mov qword [rsp + 0x20], r12
mov byte [rsp + 0x28], 0
mov qword [rsp + 0x30], r13
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x40], r13
mov rdx, qword [r15 + 0x10]
lea rcx, [rsp + 0x20]
call sym.WebKeyAPICPPDLLx64.dll_protected:_void___cdecl_WKString::Set_char_const____ptr64____ptr64
nop
mov rbx, qword [rsp + 0x30]
cmp qword [rsp + 0x40], 0
cmovne rsi, rbx
lea rcx, [r14 + 0x700]
mov rdx, rsi
call sym.WebKeyAPICPPDLLx64.dll_protected:_void___cdecl_WKString::Set_char_const____ptr64____ptr64
nop
test rbx, rbx
je 0x180077ee9
mov rcx, rbx
call fcn.1801525f4
nop
mov qword [rsp + 0x48], r12
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x180077c3b
jmp 0x180077c36
call fcn.18016ad64
xor edx, edx
mov ecx, dword [rax]
call fcn.1800cb250
int3