Function at 0x180029e30
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov dword [rsp + 8], ecx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x228]
sub rsp, 0x328
mov rbx, qword [rsp + 0x68]
mov esi, ecx
imul eax, ecx, 0xb30
mov r15d, ecx
mov dword [rsp + 0x40], ecx
mov dword [rsp + 0x64], eax
cmp ecx, eax
ja 0x18002a0ab
mov r14d, dword [rbp + 0x270]
xor ecx, ecx
mov r12, qword [rsp + 0x70]
mov r13, qword [rsp + 0x78]
lea r10d, [rcx + 0x72]
lea r11d, [rcx + 0x77]
movabs rax, 0x6c006c0064002e
mov edi, 1
cmp r15d, 0x1b73a
ja 0x18002a173
je 0x18002a13c
cmp r15d, 0x92f4
ja 0x18002a08c
je 0x18002a069
mov eax, r15d
sub eax, 5
je 0x18002a054
sub eax, 0xcc
je 0x18002a049
sub eax, 0x4d
je 0x180029ff3
cmp eax, 0x266
jne 0x18002a30c
cmp dword [r8], 0x65
jne 0x18002a30c
mov r12, qword [rbp - 0x60]
mov edi, 0x53
nop dword [rax]
mov eax, edi
sub eax, 0x51
je 0x180029fd0
sub eax, 1
je 0x180029fbf
cmp eax, 1
jne 0x180029fda
mov rax, qword [0x1800bb750]
lea rcx, [rbp + 8]
mov qword [rsp + 0x28], rax
xor r9d, r9d
lea rax, [rbp - 0x68]
xor edx, edx
mov qword [rsp + 0x20], rax
lea r8d, [r9 + 0x79]
call fcn.180014570
mov r12, qword [rax]
movsd xmm0, qword [rax + 0x10]
movsd qword [rbp - 0x38], xmm0
test r12, r12
je 0x180029fa1
mov rax, qword [rbp - 0x58]
mov r8, qword [rbp - 0x68]
cmp r8, qword [rax + 0x570]
jne 0x180029fa1
mov rcx, qword [rax + 0x568]
mov rdx, r12
call fcn.180068f40
test eax, eax
jne 0x180029fa1
mov rdx, qword [rbp + 0x278]
movabs rax, 0x73736563637573
mov qword [r13], rax
jmp 0x180029fda
mov eax, dword [str.fail]
mov rdx, qword [rbp + 0x278]
mov dword [r13], eax
movzx eax, byte [0x18009b34c]
mov byte [r13 + 4], al
jmp 0x180029fda
mov rcx, r12
call fcn.18006e620
mov rdx, qword [rbp + 0x278]
jmp 0x180029fda
or dword [rdx + 0xc0], 0x1000
dec edi
cmp edi, 0x50
ja 0x180029f10
mov qword [rbp - 0x60], r12
mov r12, qword [rsp + 0x70]
jmp 0x18002a2f2
xor edx, edx
mov dword [rsp + 0x48], ecx
lea rcx, [rbp - 0x28]
lea r8d, [rdx + 0x43]
call fcn.18005ff90
lea rax, [0x180036960]
mov dword [rsp + 0x40], edi
mov qword [rsp + 0x58], rax
lea r9, [rsp + 0x48]
lea rax, [rsp + 0x58]
mov ecx, 0xf4
mov qword [rsp + 0x28], rax
lea r8, [rsp + 0x40]
lea rax, [rbp - 0x28]
lea rdx, str.lastViewedByMeDate
mov qword [rsp + 0x20], rax
call fcn.18004a4b0
jmp 0x18002a2f2
mov word [rsp + 0x4c], r10w
jmp 0x18002a30c
mov r13, qword [rdx + 0xa0]
mov qword [rsp + 0x78], r13
mov qword [rbp - 0x58], r9
jmp 0x18002a30c
mov eax, 0x65
mov word [rsp + 0x4d], ax
mov eax, 0x63
mov word [rsp + 0x4e], ax
mov eax, 0x76
mov word [rsp + 0x4f], ax
jmp 0x18002a30c
cmp r15d, 0xc918
je 0x18002a0ce
cmp r15d, 0x12517
je 0x18002a0c2
cmp r15d, 0x19112
jne 0x18002a30c
mov rax, rbx
add rsp, 0x328
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov dword [rbp - 0x80], 0x77
jmp 0x18002a30c
mov qword [rsp + 0x28], rcx
lea rax, [rbp - 0x28]
mov ecx, 0x68
mov qword [rsp + 0x20], rax
lea r9, [0x1800272f0]
mov dword [rsp + 0x40], 0x3e8
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x48]
call fcn.180016990
inc dword [0x1800bb644]
mov eax, dword [rsp + 0x48]
cmp eax, 1
jne 0x18002a331
xor eax, eax
lea r9, [rbp - 0x28]
mov qword [rsp + 0x28], rax
lea rcx, [rbp - 0x48]
xor r8d, r8d
mov qword [rsp + 0x20], rax
mov edx, 0xba
call fcn.18004c360
xor ecx, ecx
mov ebx, ecx
jmp 0x18002a2f4
mov r8d, 2
lea rdx, [0x1800a0930]
lea rcx, [rbp - 0x80]
call fcn.18006db94
mov r8d, 3
lea rdx, [0x1800a09e4]
lea rcx, [rbp - 0x7a]
call fcn.18006dbdc
xor ecx, ecx
mov word [rbp - 0x74], cx
jmp 0x18002a2f4
cmp r15d, 0x3ffc6
ja 0x18002a2be
je 0x18002a1ec
cmp r15d, 0x2495d
je 0x18002a1e3
cmp r15d, 0x2db80
je 0x18002a1b1
cmp r15d, 0x36da3
jne 0x18002a30c
mov r12, rdx
mov qword [rsp + 0x70], rdx
mov r14d, ecx
jmp 0x18002a30c
mov qword [rsp + 0x30], rcx
lea r8, [rsp + 0x4c]
mov qword [rsp + 0x28], rcx
xor r9d, r9d
mov word [rbp - 0x6c], cx
xor edx, edx
lea rcx, [rbp - 0x80]
mov dword [rsp + 0x20], 0xe9
call fcn.18000df30
mov qword [rbp - 0x50], rax
jmp 0x18002a2f2
mov qword [rbp - 0x74], rax
jmp 0x18002a30c
test r14d, r14d
jne 0x18002a2b1
mov r13, qword [rbp - 0x50]
mov r15d, 1
nop
mov rax, qword [r12]
lea rdx, [rsp + 0x58]
mov qword [rsp + 0x28], rcx
mov r9d, 0x55
mov qword [rsp + 0x68], rax
lea rcx, [rbp - 0x48]
lea rax, [rsp + 0x68]
mov dword [rsp + 0x58], r15d
xor r8d, r8d
mov qword [rsp + 0x20], rax
call fcn.18003fcf0
movups xmm1, xmmword [rax]
movups xmm0, xmmword [rax + 0x10]
movd eax, xmm1
movups xmmword [rbp - 0x38], xmm0
test eax, eax
je 0x18002a2a1
mov rcx, qword [r12]
lea rdx, [rbp + 0x20]
xor r9d, r9d
mov r8d, 0x200
call r13
mov esi, eax
test eax, eax
jle 0x18002a2a1
xor ecx, ecx
mov edi, ecx
cmp edi, esi
jge 0x18002a200
mov r8d, esi
movsxd rax, edi
mov qword [rsp + 0x20], rcx
lea rdx, [rbp + 0x20]
mov rcx, qword [r12 + 8]
lea r9, [rsp + 0x60]
sub r8d, edi
add rdx, rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
cmove r14d, r15d
add edi, dword [rsp + 0x60]
test r14d, r14d
jne 0x18002a2a1
xor ecx, ecx
jmp 0x18002a265
mov r15d, dword [rsp + 0x40]
mov r13, qword [rsp + 0x78]
mov esi, dword [rbp + 0x270]
mov rcx, qword [r12 + 8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x18002a2f2
cmp r15d, 0x491e9
je 0x18002a2ea
cmp r15d, 0x5240c
je 0x18002a2df
cmp r15d, 0x5b62f
je 0x18002a0ab
jmp 0x18002a30c
call fcn.18007be78
xor ecx, ecx
mov ebx, ecx
jmp 0x18002a2f4
mov rcx, r12
call fcn.18006e620
xor ecx, ecx
mov r8, qword [rbp + 0x280]
mov r11d, 0x77
mov r9, qword [rbp + 0x288]
lea r10d, [r11 - 5]
imul eax, esi, 0xb3
add r15d, eax
mov dword [rsp + 0x40], r15d
cmp r15d, dword [rsp + 0x64]
ja 0x18002a0ab
mov rdx, qword [rbp + 0x278]
jmp 0x180029e99
movsd xmm2, qword [0x1800a17a0]
lea rcx, str._f____f_n
movd xmm1, eax
movq r8, xmm2
cvtdq2pd xmm1, xmm1
movq rdx, xmm1
call fcn.180064fc0
lea rax, str.false
jmp 0x18002a0ae