Function at 0x18000aa40
Capabilities:
Write file on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x128
mov r14d, edx
mov dword [rsp + 0x4c], 0x18e95ccb
lea rax, [rsp + 0xa4]
mov qword [rsp + 0xa8], rax
mov rax, qword [rsp + 0xa8]
cmp edx, 0xffffffff
sete byte [rsp + 0x53]
mov r13, rcx
mov dword [rsp + 0xa4], 0xffffffff
lea rax, [rcx + 0x80]
mov qword [rsp + 0xd8], rax
movsx eax, r14b
mov dword [rsp + 0xa0], eax
lea rax, [rcx + 0x74]
mov qword [rsp + 0xd0], rax
lea rax, [rcx + 0x70]
mov qword [rsp + 0xe8], rax
lea rax, [rcx + 0x68]
mov qword [rsp + 0xe0], rax
mov ecx, 0x336923c4
lea rsi, [rsp + 0x52]
mov edi, 0x48d8dc87
jmp 0x18000aaf0
je 0x18000b38e
nop word cs:[rax + rax]
nop dword [rax + rax]
cmp ecx, 0xa64d345
jge 0x18000ab40
cmp ecx, 0xc286b924
jge 0x18000abb0
cmp ecx, 0xab552d80
jl 0x18000ac35
cmp ecx, 0xbc05b687
jge 0x18000ae04
cmp ecx, 0xbb868e2e
jge 0x18000aadb
cmp ecx, 0xab552d80
jne 0x18000aaf0
mov ecx, dword [rsp + 0x4c]
mov eax, 0xa29d3163
add ecx, eax
mov r15d, dword [rsp + 0x68]
jmp 0x18000aaf0
cmp ecx, 0x56918529
jge 0x18000ac00
cmp ecx, 0x436e294c
jge 0x18000ad20
cmp ecx, 0x336923c4
jge 0x18000ae5d
cmp ecx, 0x208cdd25
jge 0x18000b102
cmp ecx, 0xa64d345
jne 0x18000aaf0
mov rax, qword [rsp + 0xd8]
mov qword [rsp + 0x78], rax
mov rax, qword [rsp + 0x78]
mov edx, dword [rsp + 0x4c]
mov ecx, 0x26e48aff
add edx, ecx
mov ecx, dword [rsp + 0x4c]
mov ebp, 0x69bf5bad
jmp 0x18000b1b9
cmp ecx, 0xe2db63ec
jge 0x18000ad54
cmp ecx, 0xd1087586
jge 0x18000aea0
cmp ecx, 0xc4c8ca02
jge 0x18000b153
cmp ecx, 0xc286b924
jne 0x18000aaf0
mov ecx, dword [rsp + 0x4c]
mov eax, 0x61824274
add ecx, eax
mov dword [rsp + 0x54], r14d
jmp 0x18000aaf0
cmp ecx, 0x63065d45
jge 0x18000adb5
cmp ecx, 0x61c23952
jge 0x18000af6f
cmp ecx, 0x5a48c9a0
jge 0x18000b171
cmp ecx, 0x56918529
jne 0x18000aaf0
jmp 0x18000afb4
cmp ecx, 0x99961da9
jge 0x18000af9c
cmp ecx, 0x82a8b878
jne 0x18000aaf0
mov dword [rsp + 0x5c], 0x18e95ccb
mov qword [rsp + 0x60], r13
mov rax, qword [rsp + 0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax]
mov qword [rsp + 0x90], rax
mov rax, qword [rsp + 0xe8]
mov qword [rsp + 0x98], rax
mov eax, 0xed6a169e
jmp 0x18000ac96
je 0x18000b18d
cmp eax, 0xed6a169e
jl 0x18000ace0
cmp eax, 0x227cc08b
jge 0x18000ac90
cmp eax, 0xed6a169e
jne 0x18000ac96
mov rcx, qword [rsp + 0x90]
mov rdx, qword [rsp + 0x98]
mov ebx, dword [rsp + 0x5c]
mov eax, 0x882b2653
add ebx, eax
mov eax, dword [rsp + 0x5c]
mov ebp, 0x99363c0
add eax, ebp
cmp rdx, rcx
cmove eax, ebx
jmp 0x18000ac96
cmp eax, 0xa114831e
jne 0x18000ac96
mov eax, dword [r13 + 0x90]
mov rcx, qword [r13 + 0x88]
mov rdx, qword [rsp + 0x60]
mov rbx, qword [rdx + 0x18]
mov qword [rbx], rcx
mov rbx, qword [rdx + 0x38]
mov qword [rbx], rcx
sub eax, ecx
mov rcx, qword [rdx + 0x50]
mov dword [rcx], eax
mov eax, dword [rsp + 0x5c]
mov ecx, 0x99363c0
add eax, ecx
jmp 0x18000ac96
cmp ecx, 0x49cd2400
jge 0x18000afcc
cmp ecx, 0x464b95da
jge 0x18000b1c7
cmp ecx, 0x436e294c
jne 0x18000aaf0
mov ecx, dword [rsp + 0x4c]
mov eax, 0x415f6cd5
add ecx, eax
jmp 0x18000aaf0
cmp ecx, 0xf3cd30c6
jge 0x18000b08d
cmp ecx, 0xf0ff032b
jge 0x18000b1e2
cmp ecx, 0xe2db63ec
jne 0x18000aaf0
mov rax, qword [rsp + 0x70]
mov rax, qword [rax + 0x40]
mov rcx, qword [rsp + 0x70]
mov rdx, qword [rcx + 0x40]
mov rcx, qword [rcx + 0x58]
movsxd rbx, dword [rcx]
add rbx, qword [rdx]
mov edx, dword [rsp + 0x4c]
mov ecx, 0xdae3d3fb
add edx, ecx
mov ecx, dword [rsp + 0x4c]
mov ebp, 0xf17b767a
add ecx, ebp
cmp qword [rax], rbx
cmovb ecx, edx
jmp 0x18000aaf0
cmp ecx, 0x7a6b9f3f
jge 0x18000b0d5
cmp ecx, 0x75e0bf4b
jge 0x18000b1fb
cmp ecx, 0x63065d45
jne 0x18000aaf0
mov byte [r13 + 0x71], 1
mov eax, dword [rsp + 0x4c]
mov ecx, 0xa99d5c59
add eax, ecx
mov ecx, dword [rsp + 0x4c]
mov edx, 0x80acc0de
add ecx, edx
cmp qword [rsp + 0xf8], rsi
cmovne ecx, eax
jmp 0x18000aaf0
cmp ecx, 0xbd989e2a
jge 0x18000b226
cmp ecx, 0xbc05b687
jne 0x18000aaf0
mov rax, qword [rsp + 0xf0]
sub rax, qword [rsp + 0x80]
mov qword [rsp + 0x88], rax
mov rax, qword [rsp + 0x88]
mov edx, dword [rsp + 0x4c]
mov ecx, 0x7a3805a
add edx, ecx
mov ecx, dword [rsp + 0x4c]
mov ebp, 0x4a1d007a
add ecx, ebp
test rax, rax
cmovne ecx, edx
jmp 0x18000aaf0
cmp ecx, 0x3fcde7ca
jge 0x18000b25c
cmp ecx, 0x336923c4
jne 0x18000aaf0
mov rax, qword [rsp + 0xa8]
mov eax, dword [rsp + 0x4c]
mov ecx, 0x30e3c735
add eax, ecx
mov ecx, dword [rsp + 0x4c]
mov edx, 0xa4af415f
add ecx, edx
cmp byte [rsp + 0x53], 0
cmovne ecx, eax
jmp 0x18000aaf0
cmp ecx, 0xd45454ac
jge 0x18000b278
cmp ecx, 0xd1087586
jne 0x18000aaf0
lea rdx, [rsp + 0x100]
mov qword [rsp + 0xb8], rdx
mov rax, qword [rsp + 0xb8]
mov byte [rsp + 0x52], r14b
lea rbp, [rsp + 0xf8]
mov qword [rsp + 0xc0], rbp
mov rax, qword [rsp + 0xc0]
lea rdi, [rsp + 0xf0]
mov qword [rsp + 0xc8], rdi
mov rax, qword [rsp + 0xc8]
mov rax, qword [rsp + 0xb0]
mov rcx, qword [rax]
mov qword [rsp + 0x80], rdx
mov rax, qword [rsp + 0x80]
add rax, 0x20
mov rdx, qword [rsp + 0x80]
mov rbx, qword [rcx]
mov qword [rsp + 0x38], rdi
mov edi, 0x48d8dc87
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x20], rbp
mov rdx, qword [rsp + 0xd0]
mov r8, rsi
lea r9, [rsp + 0x53]
call qword [rbx + 0x38]
mov dword [rsp + 0x58], eax
mov ecx, dword [rsp + 0x4c]
mov eax, 0x64231748
add ecx, eax
jmp 0x18000aaf0
cmp ecx, 0x62f7b126
jge 0x18000b28e
cmp ecx, 0x61c23952
jne 0x18000aaf0
mov ecx, dword [rsp + 0x4c]
mov eax, 0x4a0e545b
add ecx, eax
mov r12d, dword [rsp + 0x6c]
jmp 0x18000aaf0
cmp ecx, 0xa2ac5d2b
jge 0x18000b2bf
cmp ecx, 0x99961da9
jne 0x18000aaf0
mov ecx, dword [rsp + 0x4c]
mov eax, 0x61824274
add ecx, eax
mov dword [rsp + 0x54], 0xffffffff
jmp 0x18000aaf0
cmp ecx, 0x54e7b582
jge 0x18000b2ed
cmp ecx, 0x49cd2400
jne 0x18000aaf0
mov dword [rsp + 0x60], 0x18e95ccb
mov dword [rsp + 0x90], r14d
mov dword [rsp + 0x98], 0xffffffff
mov eax, 0x5a1005ac
jmp 0x18000b012
je 0x18000b062
cmp eax, 0x41bc6f20
jl 0x18000b030
cmp eax, 0x5a1005ac
jge 0x18000b010
cmp eax, 0x41bc6f20
jne 0x18000b012
jmp 0x18000b37e
cmp eax, 0x3f7e0650
jge 0x18000b050
cmp eax, 0xd9d7f09d
jne 0x18000b012
xor r15d, r15d
jmp 0x18000b055
jne 0x18000b012
mov r15d, r14d
mov eax, dword [rsp + 0x60]
mov ecx, 0x28d31255
add eax, ecx
jmp 0x18000b012
mov ecx, dword [rsp + 0x90]
mov edx, dword [rsp + 0x98]
mov ebx, dword [rsp + 0x60]
mov eax, 0x2694a985
add ebx, eax
mov eax, dword [rsp + 0x60]
mov ebp, 0xc0ee93d2
add eax, ebp
cmp ecx, edx
cmovne eax, ebx
jmp 0x18000b012
cmp ecx, 0x86ca0f2
jge 0x18000b318
cmp ecx, 0xf3cd30c6
jne 0x18000aaf0
mov rax, qword [rsp + 0x70]
mov rcx, qword [rax + 0x58]
add dword [rcx], 0xffffffff
mov rax, qword [rax + 0x40]
mov rcx, qword [rax]
lea rdx, [rcx + 1]
mov qword [rax], rdx
mov byte [rcx], r14b
mov ecx, dword [rsp + 0x4c]
mov eax, 0xa29d3163
add ecx, eax
mov r15d, r14d
jmp 0x18000aaf0
cmp ecx, 0x7d0c7413
jge 0x18000b353
cmp ecx, 0x7a6b9f3f
jne 0x18000aaf0
mov ecx, dword [rsp + 0x4c]
mov eax, 0x4a0e545b
add ecx, eax
mov r12d, dword [rsp + 0x54]
jmp 0x18000aaf0
jne 0x18000aaf0
mov rax, qword [rsp + 0x78]
mov r9, qword [rax]
mov rcx, qword [rsp + 0x80]
mov r8, qword [rsp + 0x88]
mov edx, 1
call fcn.1800d237c
mov rdx, qword [rsp + 0x88]
mov ebx, dword [rsp + 0x4c]
mov ecx, 0x3da8285e
add ebx, ecx
mov ecx, dword [rsp + 0x4c]
mov ebp, 0x4a1d007a
add ecx, ebp
cmp rdx, rax
cmovne ecx, ebx
jmp 0x18000aaf0
jne 0x18000aaf0
mov ecx, dword [rsp + 0x4c]
mov eax, 0x926bd0b5
add ecx, eax
mov dword [rsp + 0x68], 0xffffffff
jmp 0x18000aaf0
jne 0x18000aaf0
mov ecx, dword [rsp + 0x4c]
mov eax, 0x4a0e545b
add ecx, eax
mov r12d, 0xffffffff
jmp 0x18000aaf0
mov rax, qword [rsp + 0xe0]
mov qword [rsp + 0xb0], rax
mov rax, qword [rsp + 0xb0]
mov edx, dword [rsp + 0x4c]
mov ecx, 0xef834427
add edx, ecx
mov ecx, dword [rsp + 0x4c]
mov ebp, 0xb81f18bb
add ecx, ebp
cmp qword [rax], 0
cmove ecx, edx
jmp 0x18000aaf0
jne 0x18000aaf0
mov ecx, dword [rsp + 0x4c]
mov eax, 0x926bd0b5
add ecx, eax
mov dword [rsp + 0x68], r14d
jmp 0x18000aaf0
jne 0x18000aaf0
mov ecx, dword [rsp + 0x4c]
add ecx, edi
mov dword [rsp + 0x6c], 0xffffffff
jmp 0x18000aaf0
jne 0x18000aaf0
mov eax, dword [rsp + 0x58]
mov edx, dword [rsp + 0x4c]
mov ecx, 0xa31c59bc
add edx, ecx
mov ecx, dword [rsp + 0x4c]
mov ebp, 0x2a84cc81
add ecx, ebp
cmp eax, 2
cmovb ecx, edx
jmp 0x18000aaf0
jne 0x18000aaf0
mov qword [rsp + 0x70], r13
mov rax, qword [rsp + 0x70]
mov rax, qword [rax + 0x40]
mov edx, dword [rsp + 0x4c]
mov ecx, 0xc9f20721
add edx, ecx
mov ecx, dword [rsp + 0x4c]
mov ebp, 0xf17b767a
add ecx, ebp
cmp qword [rax], 0
cmovne ecx, edx
jmp 0x18000aaf0
jne 0x18000aaf0
mov ecx, dword [rsp + 0x4c]
mov eax, 0xa29d3163
add ecx, eax
mov r15d, 0xffffffff
jmp 0x18000aaf0
jne 0x18000aaf0
mov ecx, dword [rsp + 0x4c]
add ecx, edi
mov dword [rsp + 0x6c], r14d
jmp 0x18000aaf0
jne 0x18000aaf0
mov rax, qword [rsp + 0xc8]
mov rax, qword [rsp + 0xc0]
mov rax, qword [rsp + 0xb8]
mov ecx, dword [rsp + 0x4c]
mov eax, 0xa29d3163
add ecx, eax
mov r15d, r12d
jmp 0x18000aaf0
jne 0x18000aaf0
mov rax, qword [rsp + 0x78]
mov rdx, qword [rax]
movsx ecx, byte [rsp + 0x52]
call fcn.1800d2418
mov edx, dword [rsp + 0x4c]
mov ecx, 0xbb6af7e1
add edx, ecx
mov ecx, dword [rsp + 0x4c]
mov ebp, 0xd815a660
jmp 0x18000b346
jne 0x18000aaf0
mov eax, dword [rsp + 0x58]
mov edx, dword [rsp + 0x4c]
mov ecx, 0x89c30060
add edx, ecx
mov ecx, dword [rsp + 0x4c]
mov ebp, 0x2a84cc81
add ecx, ebp
cmp eax, 3
cmove ecx, edx
jmp 0x18000aaf0
jne 0x18000aaf0
mov rax, qword [rsp + 0x78]
mov rdx, qword [rax]
mov ecx, dword [rsp + 0xa0]
call fcn.1800d2418
mov edx, dword [rsp + 0x4c]
mov ecx, 0x2d62390f
add edx, ecx
mov ecx, dword [rsp + 0x4c]
mov ebp, 0xabdf6d37
add ecx, ebp
cmp eax, 0xffffffff
cmovne ecx, edx
jmp 0x18000aaf0
jne 0x18000aaf0
mov eax, dword [rsp + 0x58]
mov edx, dword [rsp + 0x4c]
mov ecx, 0x5cf76280
add edx, ecx
mov ecx, dword [rsp + 0x4c]
mov ebp, 0x3bfe58b7
add ecx, ebp
cmp eax, 3
cmovl ecx, edx
jmp 0x18000aaf0
mov ecx, dword [rsp + 0x4c]
mov eax, 0xa29d3163
add ecx, eax
jmp 0x18000aaf0
mov eax, r15d
add rsp, 0x128
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret