Function at 0x18000bde0
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
push rdi
sub rsp, 0x90
mov rax, qword [0x180042010]
xor rax, rsp
mov qword [rsp + 0x80], rax
mov rcx, qword [0x180043fa8]
lea rdx, str.S_0_0_0_c_c
mov r9d, 0xa
add rcx, 0x18c92e0
lea r8d, [r9 + 3]
call fcn.180002970
mov rdx, qword [0x180043fa8]
xor ebx, ebx
cmp dword [rdx + 0x18ca2f8], 1
jne 0x18000be76
mov rdi, qword [rdx + 0x4774770]
cmp dword [rdi + 8], 1
je 0x18000be76
add rdx, 0x18c92e0
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], bl
jne 0x18000be50
mov rcx, qword [rdi + 0xe00028]
lea r9, [rsp + 0x30]
mov qword [rsp + 0x20], rbx
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov dword [rdi + 0xe00020], ebx
mov r8d, 0x1f4
call fcn.18000ea90
movsxd r8, eax
test eax, eax
jg 0x18000be92
mov eax, 0xffffffff
jmp 0x18000c0b6
mov r10, qword [0x180043fa8]
mov edx, ebx
mov qword [rsp + 0xa0], rsi
mov byte [r8 + r10 + 0x11b12e0], bl
mov rcx, qword [r10 + 0x4774770]
mov r9d, dword [rcx + 0xe00018]
nop dword [rax]
mov eax, dword [rcx + 0xe0001c]
cmp r9d, eax
je 0x18000bee7
inc eax
mov dword [rcx + 0xe0001c], eax
cmp eax, 0x700000
jb 0x18000bee0
mov dword [rcx + 0xe0001c], ebx
inc edx
cmp edx, r8d
jl 0x18000bec0
xorps xmm0, xmm0
mov dword [r10 + 0x4774748], 1
movabs rax, 0x4000000000000000
mov dword [r10 + 0x4774744], 1
movups xmmword [rsp + 0x40], xmm0
mov qword [r10 + 0x88], rax
lea r11, [r10 + 0x11b12e6]
movups xmmword [rsp + 0x50], xmm0
mov dword [r10 + 0x64], 0xc
mov esi, ebx
movups xmmword [rsp + 0x60], xmm0
mov dword [r10 + 0x477479c], ebx
mov rdi, rbx
mov dword [r10 + 0x18ca320], 1
mov dword [r10 + 0x47747a4], ebx
mov dword [r10 + 0x18ca3a4], 1
mov dword [r10 + 0x477468c], ebx
mov dword [r10 + 0x18ca3cc], ebx
mov dword [r10 + 0x4774698], ebx
nop dword [rax]
mov r8d, ebx
mov r9d, ebx
mov rdx, rbx
nop dword [rax]
movzx ecx, byte [rdx + r11]
lea eax, [rcx - 0x30]
cmp al, 9
ja 0x18000bf99
movsx eax, al
lea ecx, [r8 + r8*4]
lea r8d, [rax + rcx*2]
jmp 0x18000bfa4
cmp cl, 0x2d
jne 0x18000bfaf
mov r9d, 1
inc rdx
cmp rdx, 0x10
jl 0x18000bf80
jmp 0x18000bfb7
cmp cl, 0x2c
jne 0x18000bfb7
inc rdx
add r11, rdx
mov eax, r8d
neg eax
cmp r9d, 1
movzx ecx, byte [r11]
cmovne eax, r8d
mov dword [rsp + rdi*4 + 0x40], eax
lea eax, [rcx - 0x30]
cmp al, 9
jbe 0x18000bfde
sub cl, 0x2c
cmp cl, 1
ja 0x18000bfec
inc esi
inc rdi
cmp rdi, 0x1000
jl 0x18000bf70
mov eax, dword [rsp + 0x40]
lea ecx, [rsi + 1]
mov rsi, qword [rsp + 0xa0]
mov dword [r10 + 0x4774748], eax
mov eax, dword [rsp + 0x44]
mov dword [r10 + 0x4774744], eax
mov eax, dword [rsp + 0x48]
mov dword [r10 + 0x64], eax
mov eax, dword [rsp + 0x4c]
mov dword [r10 + 0x477479c], eax
mov eax, dword [rsp + 0x50]
mov dword [r10 + 0x18ca320], eax
mov eax, dword [rsp + 0x54]
mov dword [r10 + 0x47747a4], eax
mov eax, dword [rsp + 0x58]
mov dword [r10 + 0x18ca3a4], eax
cmp ecx, 7
jle 0x18000c078
mov eax, dword [rsp + 0x5c]
cmp eax, 0x3e8
jle 0x18000c078
movd xmm0, eax
mov ebx, 1
cvtdq2pd xmm0, xmm0
mulsd xmm0, qword [0x18003cc50]
movsd qword [r10 + 0x88], xmm0
movsd qword [r10 + 0x98], xmm0
cmp ecx, 8
jle 0x18000c094
cmp ebx, 1
jne 0x18000c094
mov eax, dword [rsp + 0x60]
mov dword [r10 + 0x477468c], eax
mov dword [r10 + 0x4774690], eax
cmp ecx, 9
jle 0x18000c0a4
mov eax, dword [rsp + 0x64]
mov dword [r10 + 0x18ca3cc], eax
cmp ecx, 0xa
jle 0x18000c0b4
mov eax, dword [rsp + 0x68]
mov dword [r10 + 0x4774698], eax
xor eax, eax
mov rcx, qword [rsp + 0x80]
xor rcx, rsp
call fcn.180013130
mov rbx, qword [rsp + 0xa8]
add rsp, 0x90
pop rdi
ret