Function at 0x180006100
Capabilities:
Write file on windows

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x830]
sub rsp, 0x930
mov qword [rsp + 0x60], 0xfffffffffffffffe
mov qword [rsp + 0x970], rbx
mov rax, qword [0x1800750b0]
xor rax, rsp
mov qword [rbp + 0x820], rax
mov rdi, r8
mov r12d, edx
mov qword [rbp - 0x38], 7
xor r13d, r13d
mov qword [rbp - 0x40], r13
mov word [rbp - 0x50], r13w
xor r8d, r8d
lea rdx, [0x180061134]
lea rcx, [rbp - 0x50]
call fcn.180008eb0
nop
mov r8d, r12d
lea rdx, [rbp - 0x50]
lea rcx, [0x18007f8a0]
call fcn.180004b10
test eax, eax
jne 0x180006198
lea rdx, str.tGVX405OFrAJFP2fVXKDsdcGnu4r2mwdsDHbUQWi5_d4XYqXAIbEMcRb3EIox3rL18jc_tY
xor ecx, ecx
call fcn.1800124b0
mov r15d, r13d
jmp 0x1800065e6
mov qword [rbp - 0x58], 7
mov qword [rbp - 0x60], r13
mov word [rbp - 0x70], r13w
xor r8d, r8d
lea rdx, [0x180061134]
lea rcx, [rbp - 0x70]
call fcn.180008eb0
nop
mov r8d, r12d
lea rdx, [rbp - 0x70]
lea rcx, [0x18007f8a0]
call fcn.180004e10
test eax, eax
jne 0x1800061e0
lea rdx, str.G9mDfW6lU1Fsp48noA0cz7LynNzdqsWa83eKI6LaKpQ0ExtzG7jJkIPFSky4MbUq1VnPtpkQ
jmp 0x1800065bb
mov rax, qword [rdi + 8]
cmp qword [rdi], rax
jne 0x1800061f5
lea rdx, str.JGd37C7D7ACXDthKLMGmvkEL26Uhg7c9TiaehHkhMv8hXdD8L7SLAOdtxV4IucM
jmp 0x1800065bb
mov r8, rdi
mov edx, r12d
call fcn.180005d10
test eax, eax
je 0x1800065c2
mov qword [rbp - 0x80], 7
mov qword [rsp + 0x78], r13
mov word [rsp + 0x68], r13w
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rbp - 0x70]
lea rcx, [rsp + 0x68]
call fcn.180008820
lea rdx, [rsp + 0x68]
lea rcx, [0x18007f948]
call fcn.180002a50
test eax, eax
jne 0x180006261
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
lea rdx, str.CqtnVGivNkDV4jC83wbmc8UdMtZp_jdfEhrmtbblVxuMRYyeN_CsTnHYGVh4EYY40QUf5778kiVtyqYPL0mIvUpKSqj
xor ecx, ecx
call fcn.1800124b0
jmp 0x1800065c2
lea rcx, [0x18007f948]
call fcn.180002bb0
cmp qword [0x18007f8a0], 0
jne 0x1800062d5
mov qword [rbp - 0x80], 7
mov qword [rsp + 0x78], r13
mov word [rsp + 0x68], r13w
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rbp - 0x50]
lea rcx, [rsp + 0x68]
call fcn.180008820
lea rdx, [rsp + 0x68]
call fcn.1800052a0
test eax, eax
jne 0x1800062d5
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
lea rdx, str.P7CGL0yxhYCPHLt8SlzaV2pp8io1IBEYoOw12EUlHnw2x2CKdFjMe6v8HNQiJ42ju94WziC0Gdzer4HXefYMLaDEvh0xUJH8WY30kAsWgmLE_SbNfiqBqtL4E0s
xor ecx, ecx
call fcn.1800124b0
lea rcx, [0x18007f948]
call fcn.180002c00
jmp 0x1800065c2
mov r15d, r13d
mov rbx, qword [rdi]
mov rdi, qword [rdi + 8]
cmp rbx, rdi
je 0x1800065ad
mov qword [rbp - 0x80], 7
mov qword [rsp + 0x78], r13
mov word [rsp + 0x68], r13w
or r9, 0xffffffffffffffff
xor r8d, r8d
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.180008820
nop
cmp qword [rsp + 0x78], 0
jbe 0x180006553
mov word [rbp + 0x20], r13w
xor edx, edx
mov r8d, 0x7fe
lea rcx, [rbp + 0x22]
call fcn.18001cc50
lea rdx, [rsp + 0x40]
call fcn.180004640
mov rsi, rax
lea r14, [rsp + 0x68]
cmp qword [rbp - 0x80], 8
cmovae r14, qword [rsp + 0x68]
cmp qword [rax + 0x18], 8
jb 0x180006359
mov rsi, qword [rax]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], rsi
mov dword [rsp + 0x20], eax
mov r9d, r12d
lea r8, str._d_d_s_s
mov edx, 0x400
lea rcx, [rbp + 0x20]
call fcn.18001a020
cmp qword [rsp + 0x58], 8
jb 0x180006397
mov rcx, qword [rsp + 0x40]
call fcn.18001af28
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rsi, qword [0x18007f8a0]
test rsi, rsi
je 0x1800063d2
lea rcx, [rbp + 0x20]
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r8d, [rax + rax]
mov qword [rsp + 0x20], r13
lea r9, [rbp - 0x78]
lea rdx, [rbp + 0x20]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov r15d, eax
test r15d, r15d
jne 0x1800064b0
lea rsi, [rsp + 0x68]
cmp qword [rbp - 0x80], 8
cmovae rsi, qword [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r9d, eax
mov r8, rsi
lea rdx, str.9Rh5FAH5hJOxKVeuRLuXIaTZBEPEUGp8K4YywXh4rug4VKVlx6DP6pdQfAdRVmL_4t1tw4eKSqFUvoELyaO7a4G2frGXk2vDEm4oRkQ52w0WeB3QSzKj0
xor ecx, ecx
call fcn.1800124b0
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov qword [rsp + 0x58], 7
mov qword [rsp + 0x50], r13
mov word [rsp + 0x40], r13w
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rbp - 0x50]
lea rcx, [rsp + 0x40]
call fcn.180008820
lea rdx, [rsp + 0x40]
call fcn.1800052a0
test eax, eax
je 0x18000656d
mov rsi, qword [0x18007f8a0]
lea rcx, [rbp + 0x20]
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r8d, [rax + rax]
mov qword [rsp + 0x20], r13
lea r9, [rbp - 0x78]
lea rdx, [rbp + 0x20]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov r15d, eax
lea rsi, [rsp + 0x68]
cmp qword [rbp - 0x80], 8
cmovae rsi, qword [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
mov r9, rsi
mov r8d, r15d
lea rdx, str.3iOpCMJVHfq_pP9UlbE0hCf1R1DjHV1ZvLPMSPmZdDO6oDlJpFGMngmj1s0kBlpIaEJIteZTVTP9FOwdgy_3cXk3SUQwrnuaJZSLrXN7eLAetO0Hwt8ka3BF8zPiyIIhfRd5mylnL4rN2Qw
mov ecx, 4
call fcn.1800124b0
test r15d, r15d
je 0x18000659c
lea rcx, [rbp - 0x30]
call fcn.180005c90
nop
mov qword [rsp + 0x58], 7
mov qword [rsp + 0x50], r13
mov word [rsp + 0x40], r13w
cmp word [rbp + 0x20], 0
jne 0x1800064da
mov r8, r13
jmp 0x1800064ed
lea rax, [rbp + 0x20]
or r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], 0
jne 0x1800064e2
lea rdx, [rbp + 0x20]
lea rcx, [rsp + 0x40]
call fcn.180008eb0
lea r8, [rsp + 0x40]
lea rdx, [rbp - 0x30]
call fcn.180004f90
test eax, eax
je 0x180006521
xor r8d, r8d
lea rdx, [rbp - 0x30]
lea rcx, [0x18007f8a8]
call fcn.1800034e0
nop
cmp qword [rbp + 0x10], 8
jb 0x180006531
mov rcx, qword [rbp - 8]
call fcn.18001af28
mov qword [rbp + 0x10], 7
mov qword [rbp + 8], r13
mov word [rbp - 8], r13w
cmp qword [rbp - 0x10], 8
jb 0x180006553
mov rcx, qword [rbp - 0x28]
call fcn.18001af28
nop
cmp qword [rbp - 0x80], 8
jb 0x180006564
mov rcx, qword [rsp + 0x68]
call fcn.18001af28
add rbx, 0x20
jmp 0x1800062df
lea rbx, [rsp + 0x68]
cmp qword [rbp - 0x80], 8
cmovae rbx, qword [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
mov r9, rbx
xor r8d, r8d
lea rdx, str.M0T1bGkjjQUzwphORayzzUgOgw7BwAyGDthKLN_q_RVjhLEhj6IseAyYnEEhWb4aVMTVfPvpN982mtn7muY34gAuiazrYnG4ZVjLcuo5d7ZsRWbEJdjgC1YtU
xor ecx, ecx
call fcn.1800124b0
nop
cmp qword [rbp - 0x80], 8
jb 0x1800065ad
mov rcx, qword [rsp + 0x68]
call fcn.18001af28
lea rcx, [0x18007f948]
call fcn.180002c00
jmp 0x1800065c5
xor ecx, ecx
call fcn.1800124b0
mov r15d, r13d
cmp qword [rbp - 0x58], 8
jb 0x1800065d5
mov rcx, qword [rbp - 0x70]
call fcn.18001af28
mov qword [rbp - 0x58], 7
mov qword [rbp - 0x60], r13
mov word [rbp - 0x70], r13w
cmp qword [rbp - 0x38], 8
jb 0x1800065f6
mov rcx, qword [rbp - 0x50]
call fcn.18001af28
mov eax, r15d
mov rcx, qword [rbp + 0x820]
xor rcx, rsp
call fcn.18001a000
mov rbx, qword [rsp + 0x970]
add rsp, 0x930
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret