Function at 0x1801374d0
Capabilities:
Write file on windows

Disassembly:
push rbp
push rdi
push r14
push r15
lea rbp, [rsp - 0x58]
sub rsp, 0x158
xorps xmm0, xmm0
mov r14, r8
mov rdi, rdx
mov r15, rcx
movups xmmword [rcx], xmm0
movups xmmword [rcx + 0x10], xmm0
movups xmmword [rcx + 0x20], xmm0
test r8, r8
je 0x180137a69
test rdx, rdx
je 0x180137a69
mov qword [rcx + 0x28], rdx
mov rcx, rdx
mov qword [rsp + 0x180], rbx
call fcn.18014ad10
mov qword [r15 + 0x20], rax
mov rbx, rax
test rax, rax
jne 0x18013760e
movdqa xmm0, xmmword [0x180161d30]
lea rdx, [rsp + 0x30]
movdqa xmm1, xmmword [0x180162080]
lea rcx, [rbp + 0x18]
mov dword [rsp + 0x61], eax
mov word [rsp + 0x65], ax
mov byte [rsp + 0x67], al
movabs rax, 0x4863e3ae9c06d2f
mov qword [rsp + 0x68], rax
movabs rax, 0x8fbed78038f49ef6
mov qword [rsp + 0x70], rax
movabs rax, 0x567bf83f4def8806
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x78], rax
movdqa xmm0, xmmword [0x180161df0]
movdqu xmmword [rsp + 0x40], xmm1
mov byte [rsp + 0x60], 0xda
movdqu xmmword [rsp + 0x50], xmm0
call fcn.18000c9f0
mov r9, rdi
lea r8, [rbp - 0x80]
mov edx, 0x100000
lea rcx, [0x18017bd90]
movups xmm2, xmmword [rax]
movups xmmword [rbp - 0x80], xmm2
movups xmm0, xmmword [rax + 0x10]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [rax + 0x20]
movups xmmword [rbp - 0x60], xmm1
movzx eax, word [rax + 0x30]
mov word [rbp - 0x50], ax
call fcn.1800010e0
mov rcx, qword [0x18017bd78]
lea r9, [0x18017bd80]
mov r8d, eax
mov dword [0x18017bd84], eax
lea rdx, [0x18017bd90]
mov qword [rsp + 0x20], rbx
call qword [sym.imp.KERNEL32.dll_WriteFile]
xor eax, eax
jmp 0x180137a2c
mov qword [rsp + 0x188], rsi
lea rdx, [rsp + 0x30]
xor eax, eax
mov qword [rsp + 0x190], r12
mov qword [rsp + 0x150], r13
lea rcx, [rbp + 0x18]
mov r13d, 0xb7df
mov dword [rsp + 0x30], 0x211e4a07
movabs r12, 0xf0cec3b5d447d029
mov word [rsp + 0x48], r13w
movabs rsi, 0xe46eee7f2c3c8ffe
mov dword [rsp + 0x34], 0xeb02f45b
movabs rdi, 0x413411e2d78eb251
mov dword [rsp + 0x38], 0x5f2049e6
mov dword [rsp + 0x3c], 0x1e2a94d2
mov dword [rsp + 0x40], 0xe3eb37e2
mov dword [rsp + 0x44], 0x9503a83d
mov dword [rsp + 0x4a], eax
mov word [rsp + 0x4e], ax
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x60], rdi
call fcn.180004f90
lea rdx, [rsp + 0x30]
mov dword [rsp + 0x30], 0x21154a07
lea rcx, [rbp - 0x28]
mov dword [rsp + 0x34], 0xeb1ef45d
mov dword [rsp + 0x38], 0x5f2649f9
movups xmm1, xmmword [rax]
mov dword [rsp + 0x3c], 0x1e2094c5
mov dword [rsp + 0x40], 0xe3eb37e2
movups xmmword [rbp - 8], xmm1
mov dword [rsp + 0x44], 0x9503a83d
movsd xmm0, qword [rax + 0x10]
movsd qword [rbp + 8], xmm0
mov eax, dword [rax + 0x18]
mov dword [rbp + 0x10], eax
xor eax, eax
mov dword [rsp + 0x4a], eax
mov word [rsp + 0x4e], ax
mov word [rsp + 0x48], r13w
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x60], rdi
call fcn.180004f90
movabs r13, 0xa3156534c2c75b13
mov dword [rbp - 0x80], 0x51541ec6
movabs r12, 0xc260ef1cb7cb8d5e
mov dword [rbp - 0x7c], 0x1ed04226
movabs rsi, 0x87d7ccb740b1ae94
mov dword [rbp - 0x78], 0xf1dd3544
movups xmm1, xmmword [rax]
lea rdx, [rbp - 0x80]
mov dword [rbp - 0x74], 0x3c7afc3
lea rcx, [rbp - 0x28]
mov dword [rbp - 0x70], 0xc97cd18a
movups xmmword [rbp + 0x18], xmm1
mov dword [rbp - 0x6c], 0x85f5e364
movsd xmm0, qword [rax + 0x10]
movsd qword [rbp + 0x28], xmm0
mov eax, dword [rax + 0x18]
mov dword [rbp + 0x30], eax
mov qword [rbp - 0x68], r13
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], rsi
call fcn.18000dd90
mov dword [rsp + 0x30], 0x515b1ec6
mov dword [rsp + 0x34], 0x1ed2423b
mov dword [rsp + 0x38], 0xf1da3549
movups xmm1, xmmword [rax]
mov dword [rsp + 0x3c], 0x388aff3
mov dword [rsp + 0x40], 0xc96ed19d
movups xmmword [rbp - 0x48], xmm1
mov dword [rsp + 0x44], 0x8596e33c
movsd xmm0, qword [rax + 0x10]
movsd qword [rbp - 0x38], xmm0
movzx eax, word [rax + 0x18]
mov word [rbp - 0x30], ax
mov dword [rsp + 0x48], 0xc2d579fe
mov dword [rsp + 0x4c], 0x6f9c
mov qword [rsp + 0x50], r13
lea rdx, [rsp + 0x30]
mov qword [rsp + 0x58], r12
lea rcx, [rbp - 0x80]
mov qword [rsp + 0x60], rsi
call fcn.180012270
mov r13, qword [rsp + 0x150]
mov rsi, 0xffffffffffffffff
movups xmm1, xmmword [rax]
movups xmmword [rbp - 0x28], xmm1
movups xmm0, xmmword [rax + 0x10]
mov rax, rsi
movups xmmword [rbp - 0x18], xmm0
nop dword [rax]
inc rax
cmp word [rbx + rax*2], 0
jne 0x180137830
lea rdx, [rbp - 8]
mov rcx, rsi
inc rcx
cmp word [rdx + rcx*2], 0
jne 0x180137841
add rax, rcx
mov rcx, rsi
cmp word [r14 + rcx*2 + 2], 0
lea rcx, [rcx + 1]
jne 0x180137851
lea r12, [rcx + 1]
add r12, rax
lea rdi, [r12 + r12]
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, rdi
mov edx, 8
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov qword [r15], rax
test rax, rax
je 0x180137a42
lea rcx, [rbp - 8]
mov r9, r14
mov qword [rsp + 0x28], rcx
lea r8, str._ws_ws_ws
mov rcx, rax
mov qword [rsp + 0x20], rbx
mov rdx, r12
call fcn.180001080
mov rax, rsi
inc rax
cmp word [rbx + rax*2], 0
jne 0x1801378b2
lea rdx, [rbp + 0x18]
mov rcx, rsi
inc rcx
cmp word [rdx + rcx*2], 0
jne 0x1801378c3
add rax, rcx
mov rcx, rsi
cmp word [r14 + rcx*2 + 2], 0
lea rcx, [rcx + 1]
jne 0x1801378d3
lea r12, [rcx + 1]
add r12, rax
lea rdi, [r12 + r12]
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, rdi
mov edx, 8
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov qword [r15 + 0x18], rax
test rax, rax
je 0x180137a42
lea rcx, [rbp + 0x18]
mov r9, r14
mov qword [rsp + 0x28], rcx
lea r8, str._ws_ws_ws
mov rcx, rax
mov qword [rsp + 0x20], rbx
mov rdx, r12
call fcn.180001080
mov rax, rsi
inc rax
cmp word [rbx + rax*2], 0
jne 0x180137935
lea rdx, [rbp - 0x48]
mov rcx, rsi
inc rcx
cmp word [rdx + rcx*2], 0
jne 0x180137946
add rax, rcx
mov rcx, rsi
nop word [rax + rax]
cmp word [r14 + rcx*2 + 2], 0
lea rcx, [rcx + 1]
jne 0x180137960
lea rdi, [rcx + 1]
add rdi, rax
lea rcx, [rdi + rdi]
call fcn.180147080
mov qword [r15 + 0x10], rax
test rax, rax
je 0x180137a42
lea rcx, [rbp - 0x48]
mov r9, r14
mov qword [rsp + 0x28], rcx
lea r8, str._ws_ws_ws
mov rcx, rax
mov qword [rsp + 0x20], rbx
mov rdx, rdi
call fcn.180001080
mov rax, rsi
inc rax
cmp word [rbx + rax*2], 0
jne 0x1801379b0
lea rdx, [rbp - 0x28]
mov rcx, rsi
cmp word [rdx + rcx*2 + 2], 0
lea rcx, [rcx + 1]
jne 0x1801379c1
inc rax
inc rsi
cmp word [r14 + rsi*2], 0
jne 0x1801379d0
lea rdi, [rax + rcx]
add rdi, rsi
lea rcx, [rdi + rdi]
call fcn.180147080
mov qword [r15 + 8], rax
test rax, rax
je 0x180137a42
lea rcx, [rbp - 0x28]
mov r9, r14
mov qword [rsp + 0x28], rcx
lea r8, str._ws_ws_ws
mov rcx, rax
mov qword [rsp + 0x20], rbx
mov rdx, rdi
call fcn.180001080
mov eax, 1
mov rsi, qword [rsp + 0x188]
mov r12, qword [rsp + 0x190]
mov rbx, qword [rsp + 0x180]
add rsp, 0x158
pop r15
pop r14
pop rdi
pop rbp
ret
mov rcx, qword [r15]
call fcn.180146f60
mov rcx, qword [r15 + 0x10]
call fcn.180146f60
mov rcx, qword [r15 + 0x18]
call fcn.180146f60
mov rcx, qword [r15 + 8]
call fcn.180146f60
xor eax, eax
jmp 0x180137a1c
xor eax, eax
add rsp, 0x158
pop r15
pop r14
pop rdi
pop rbp
ret