Function at 0x180069ad0
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x50
mov edi, edx
mov rsi, r8
add edx, 0x76a
mov r13, r9
mov dword [rsp + 0x98], edx
mov r8, rcx
cmp edi, edx
jae 0x180069c53
mov rbp, qword [rsp + 0x48]
lea r10, str._UnnamedClass_0xd553a7a5_122_
mov r14, qword [rsp + 0x48]
lea r11, str.tre_plusieurs_fois_dans_un_sp
mov r15d, dword [rsp + 0x98]
xor r9d, r9d
mov edx, dword [rsp + 0x30]
mov r12, qword [rsp + 0x48]
mov eax, dword [rsp + 0x98]
lea rbx, [0x180000000]
cmp edi, 0x18d
ja 0x180069d4c
je 0x180069d44
lea eax, [rdi - 0x69]
cmp eax, 0xe2
ja case.0x180069b75.111
movzx eax, byte [rbx + rax + 0x69e8c]
mov ecx, dword [rbx + rax*4 + 0x69e70]
add rcx, rbx
jmp rcx
mov rbx, qword [rsp + 0x48]
test rbx, rbx
je 0x180069b8d
cmp dword [rbx + 0xa0], 0xdead635a
je 0x180069bfb
mov ebx, 0x74
mov eax, ebx
sub eax, 0x72
je 0x180069c53
sub eax, 1
je 0x180069bc9
cmp eax, 1
jne 0x180069bef
lea r9d, [rax + 0x23]
mov dword [rsp + 0x38], eax
xor r8d, r8d
mov qword [rsp + 0x20], r10
mov rdx, r13
lea rcx, [rsp + 0x38]
call fcn.180023820
xor r9d, r9d
jmp 0x180069be8
mov r8, r13
mov dword [rsp + 0x38], r9d
mov edx, 0x11d
lea rcx, [rsp + 0x38]
call fcn.1800d0f60
xor r9d, r9d
mov dword [rsp + 0x40], r9d
lea r10, str._UnnamedClass_0xd553a7a5_122_
dec ebx
cmp ebx, 0x71
ja 0x180069b92
mov rbx, qword [rsp + 0x48]
mov eax, dword [rbx + 4]
lea r8, [rsp + 0x38]
mov qword [rsp + 0x28], r9
mov edx, 0xce
mov qword [rsp + 0x20], r9
xor ecx, ecx
mov r9, r13
mov qword [rsp + 0x38], rax
call fcn.180071d80
mov edx, dword [rsp + 0x30]
xor r9d, r9d
mov r8, qword [rsp + 0x90]
lea r10, str._UnnamedClass_0xd553a7a5_122_
lea r11, str.tre_plusieurs_fois_dans_un_sp
mov eax, dword [rsp + 0x98]
add edi, 0x92
cmp edi, eax
jb 0x180069b3c
mov rax, qword [rsp + 0x40]
mov rbx, qword [rsp + 0xa0]
add rsp, 0x50
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov edx, r9d
mov r12, r13
mov dword [rsp + 0x30], edx
jmp case.0x180069b75.111
mov rbp, r8
jmp case.0x180069b75.111
mov rcx, r13
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_puts]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x9b
xor ecx, ecx
call fcn.1800d0940
jmp 0x180069c21
cmp dword [r8], 1
jl 0x180069cbf
mov rdx, qword [rsi]
xor r8d, r8d
mov ecx, 0xd7
call fcn.1800d2880
test eax, eax
jne 0x180069d28
lea r11, str.tre_plusieurs_fois_dans_un_sp
mov ebx, 2
mov eax, ebx
sub eax, 2
je 0x180069cdd
cmp eax, 1
jne 0x180069d1a
mov dword [rsp + 0x40], 0
jmp 0x180069c53
mov r9d, 0x24
mov dword [rsp + 0x38], 1
xor r8d, r8d
mov qword [rsp + 0x20], r11
mov rdx, r13
lea rcx, [rsp + 0x38]
call fcn.180023820
mov r8, r13
mov dword [rsp + 0x38], 0
mov edx, 0x11d
lea rcx, [rsp + 0x38]
call fcn.1800d0f60
inc ebx
lea r11, str.tre_plusieurs_fois_dans_un_sp
cmp ebx, 4
jb 0x180069cc4
mov r9, qword [rsi]
xor edx, edx
xor ecx, ecx
mov r8d, 0xa7
call fcn.1800fe140
mov qword [rsp + 0x48], rax
jmp 0x180069c21
mov r14, r9
jmp 0x180069c45
cmp edi, 0x2b1
ja 0x180069e38
je 0x180069e0f
mov eax, edi
sub eax, 0x1dd
je 0x180069e05
sub eax, 0x42
je 0x180069d80
cmp eax, 0x50
je 0x180069c53
jmp case.0x180069b75.111
mov ebx, 0xa4
cmp ebx, 0xa4
je 0x180069dbf
cmp ebx, 0x30b0
je 0x180069db3
cmp ebx, 0x60bc
je 0x180069dac
cmp ebx, 0x90c8
jne 0x180069deb
mov eax, edx
add rbp, rax
jmp 0x180069deb
mov eax, edx
add r14, rax
jmp 0x180069deb
test r15d, r15d
je 0x180069dfb
mov eax, edx
sub qword [rsi], rax
jmp 0x180069deb
mov rax, qword [rsi]
cmp rax, 1
jl 0x180069dfb
mov qword [rsp + 0x20], r9
mov r8d, eax
lea r9, [rsp + 0x30]
mov rdx, rbp
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov edx, dword [rsp + 0x30]
xor r9d, r9d
mov r15d, eax
add ebx, 0x300c
cmp ebx, 0xc030
jbe 0x180069d85
jmp 0x180069d80
mov edi, 0x21f
jmp 0x180069c28
mov dword [rsp + 0x40], r9d
jmp case.0x180069b75.111
cmp qword [rsi], 0
jle 0x180069c45
mov eax, 0x11c
nop
cmp eax, 0x11c
je 0x180069e64
add eax, 0x9d
cmp eax, 0x1b9
jb 0x180069e20
jmp case.0x180069b75.111
cmp edi, 0x343
je 0x180069e51
cmp edi, 0x3d5
je 0x180069c53
jmp 0x180069c45
mov qword [rsp + 0x40], r14
jmp 0x180069c45
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rax, 0xffffffffffffffff
jmp 0x180069c58