Function at 0x1800620c0
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x70]
sub rsp, 0x170
mov rax, qword [0x180089b10]
xor rax, rsp
mov qword [rbp + 0x60], rax
mov qword [rsp + 0x48], r9
mov esi, r8d
mov qword [rsp + 0x38], rdx
mov qword [rsp + 0x30], rcx
mov r8, qword [rbp + 0xd0]
mov qword [rsp + 0x40], r8
mov r15, qword [rbp + 0xd8]
mov qword [rsp + 0x58], r15
movdqa xmm0, xmmword [0x18007f320]
movdqa xmmword [rbp - 0x60], xmm0
mov byte [rbp - 0x70], 0
movdqa xmm1, xmm0
movdqa xmmword [rbp - 0x40], xmm0
mov byte [rbp - 0x50], 0
movdqa xmmword [rbp - 0x20], xmm0
mov byte [rbp - 0x30], 0
lea ebx, [rsi + 0x72c]
mov dword [rsp + 0x24], ebx
cmp esi, ebx
jae 0x18006220f
mov edi, 4
lea r11d, [rdi - 2]
lea r10, [0x180000000]
mov r14d, dword [rsp + 0x28]
mov r13, qword [rsp + 0x58]
mov r12, qword [rsp + 0x58]
movzx ebx, byte [rsp + 0x20]
mov eax, dword [rsp + 0x24]
nop word [rax + rax]
cmp esi, 0x17d
ja 0x1800623bf
je 0x1800623b2
cmp esi, 0x10a
ja 0x180062333
je 0x180062324
mov eax, esi
sub eax, 0x39
je 0x180062304
sub eax, 0x65
je 0x1800622f5
sub eax, 7
je 0x1800622e8
cmp eax, 0x25
jne 0x1800621f9
mov rcx, qword [r15 + 0x260]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [r15 + 0x268]
call fcn.18006f72c
mov r11d, 2
mov r9, qword [rsp + 0x48]
mov r8, qword [rsp + 0x40]
mov rdx, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x30]
mov eax, dword [rsp + 0x24]
add esi, 0x6c
cmp esi, eax
lea r10, [0x180000000]
jb 0x180062180
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x18006224a
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180062245
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800622e1
call fcn.18006f72c
movdqa xmm0, xmmword [0x18007f320]
movdqa xmmword [rbp - 0x20], xmm0
mov byte [rbp - 0x30], 0
mov rdx, qword [rbp - 0x38]
cmp rdx, 0x10
jb 0x180062292
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18006228d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800622e1
call fcn.18006f72c
movdqa xmm0, xmmword [0x18007f320]
movdqa xmmword [rbp - 0x40], xmm0
mov byte [rbp - 0x50], 0
mov rdx, qword [rbp - 0x58]
cmp rdx, 0x10
jb 0x1800625a6
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800625a1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800625a1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov dword [rsp + 0x74], 0x40002
jmp 0x1800621f9
mov byte [rsp + 0x20], 1
movzx ebx, byte [rsp + 0x20]
jmp 0x1800621f9
mov eax, 0xa1b2c3d4
cmp dword [r15 + 0xb4], 1
mov r10d, 0xa1b23c4d
cmove eax, r10d
mov dword [rsp + 0x70], eax
jmp 0x1800621f9
mov r13, r15
mov r12, 0xffffffffffffffff
jmp 0x1800621fd
mov eax, esi
sub eax, 0x111
je 0x1800623a1
sub eax, 0x25
je 0x18006238a
cmp eax, 0x40
jne 0x1800621f9
cmp qword [r13 + 0x1a], 0
jne 0x180062374
mov ecx, 3
mov eax, ecx
sub eax, 3
je 0x180062368
cmp eax, 1
je 0x18006220f
jmp 0x18006236d
mov byte [rsp + 0x28], 0
inc ecx
cmp ecx, 5
jb 0x180062356
xor r8d, r8d
xor edx, edx
mov rcx, r12
call qword [sym.imp.dbghelp.dll_SymInitialize]
mov r14d, eax
jmp 0x1800621df
mov dword [r15 + 0x270], 0
mov rcx, qword [r15 + 0x278]
jmp 0x1800621da
mov eax, dword [r8]
mov dword [rsp + 0x78], eax
mov eax, dword [rdx]
mov dword [rbp - 0x80], eax
jmp 0x1800621f9
mov dword [rsp + 0x7c], 0
jmp 0x1800621fd
cmp esi, 0x255
ja 0x180062557
je 0x18006254a
mov eax, esi
sub eax, 0x1a2
je 0x18006253a
sub eax, 0x40
je 0x180062511
sub eax, 7
je 0x1800624ba
cmp eax, 0x65
jne 0x1800621f9
cmp byte [rsp + 0x20], 0
je 0x1800622fa
mov ebx, 5
lea edi, [rax - 0x5f]
mov r15, qword [rsp + 0x68]
cmp ebx, 5
ja case.default.0x180062423
mov eax, ebx
mov ecx, dword [r10 + rax*4 + 0x625d4]
add rcx, r10
jmp rcx
mov dword [rbp], 0x58
jmp case.default.0x180062423
mov qword [rsp + 0x60], 0
jmp case.default.0x180062423
mov rcx, r12
call qword [sym.imp.dbghelp.dll_SymCleanup]
lea r10, [0x180000000]
jmp case.default.0x180062423
xor r15d, r15d
jmp case.default.0x180062423
mov dword [rbp + 0x50], 0x7d0
lea r9, [rbp]
lea r8, [rsp + 0x60]
mov rdx, r15
mov rcx, r12
call qword [sym.imp.dbghelp.dll_SymFromAddr]
mov r14d, eax
lea r10, [0x180000000]
jmp case.default.0x180062423
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp], xmm0
movups xmmword [rbp + 0x10], xmm0
movups xmmword [rbp + 0x20], xmm0
movups xmmword [rbp + 0x30], xmm0
movups xmmword [rbp + 0x40], xmm0
mov qword [rbp + 0x50], rax
dec ebx
sub rdi, 1
jne 0x180062411
mov qword [rsp + 0x68], r15
mov r15, qword [rsp + 0x58]
movzx ebx, byte [rsp + 0x20]
mov edi, 4
jmp 0x1800621df
mov eax, dword [r9]
mov dword [rbp - 0x7c], eax
mov r9, rcx
mov edx, 0x18
lea r8d, [rdx - 0x17]
lea rcx, [rsp + 0x70]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rax, 1
je 0x1800621df
mov eax, 0x4c
cmp eax, 0x4c
je 0x1800624f8
cmp eax, 0xf6
je 0x18006220f
jmp 0x180062500
mov dword [rsp + 0x28], 0xffffffff
add eax, 0xaa
cmp eax, 0x1a0
jb 0x1800624e6
jmp 0x1800621df
lea r8, [r13 + 0xa]
mov edx, 0x4e
lea rcx, [rbp - 0x70]
call fcn.180047720
xor ecx, ecx
movzx eax, bl
test r14d, r14d
cmovne ecx, eax
movzx ebx, cl
mov byte [rsp + 0x20], cl
jmp 0x1800621df
mov dword [r15 + 0x280], 0
jmp 0x1800621f9
mov dword [rsp + 0x28], 0
jmp 0x1800621fd
mov eax, esi
sub eax, 0x2ba
je 0x180062577
sub eax, 7
je 0x18006220f
cmp eax, 0x65
je 0x18006220f
jmp 0x1800621f9
movzx eax, word [r13 + 8]
mov word [rsp + 0x50], ax
lea r9, [rsp + 0x50]
mov r8d, 0x10b
mov rdx, rcx
lea rcx, [rbp - 0x70]
call fcn.1800105d0
mov byte [rsp + 0x28], al
jmp 0x1800621df
call fcn.18006f72c
mov eax, dword [rsp + 0x28]
mov rcx, qword [rbp + 0x60]
xor rcx, rsp
call fcn.18006fee0
mov rbx, qword [rsp + 0x1c0]
add rsp, 0x170
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret