Function at 0x1800c7600
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rdi
sub rsp, 0x550
mov qword [rsp + 0x4d8], 0xfffffffffffffffe
mov rax, qword [0x180161180]
xor rax, rsp
mov qword [rsp + 0x548], rax
mov qword [rsp + 0x398], 0
mov dword [rsp + 0x230], 0
mov dword [rsp + 0x1c4], 0x1f
mov dword [rsp + 0x1b4], 0
mov dword [rsp + 0x360], 0
mov dword [rsp + 0x248], 0
mov dword [rsp + 0x1b0], 0
mov dword [rsp + 0x1c0], 0
mov dword [rsp + 0x390], 0
mov dword [rsp + 0x394], 0
mov byte [rsp + 0x370], 0
mov byte [rsp + 0x1d0], 0
lea rdi, [rsp + 0x1d1]
xor eax, eax
mov ecx, 0xf
rep stosb byte [rdi], al
lea rdi, [rsp + 0x1e0]
xor eax, eax
mov ecx, 0x50
rep stosb byte [rdi], al
mov dword [rsp + 0x378], 0
lea rdi, [rsp + 0x37c]
xor eax, eax
mov ecx, 0x14
rep stosb byte [rdi], al
mov byte [rsp + 0x50], 0
lea rdi, [rsp + 0x51]
xor eax, eax
mov ecx, 0x4f
rep stosb byte [rdi], al
mov dword [rsp + 0x238], 0
lea rdi, [rsp + 0x23c]
xor eax, eax
mov ecx, 0xc
rep stosb byte [rdi], al
mov byte [rsp + 0x250], 0
lea rdi, [rsp + 0x251]
xor eax, eax
mov ecx, 0x103
rep stosb byte [rdi], al
mov byte [rsp + 0xa0], 0
lea rdi, [rsp + 0xa1]
xor eax, eax
mov ecx, 0x103
rep stosb byte [rdi], al
mov qword [rsp + 0x368], 0
mov qword [rsp + 0x1b8], 0
lea rdi, [rsp + 0xa0]
xor eax, eax
mov ecx, 0x104
rep stosb byte [rdi], al
lea r9, [rsp + 0x368]
lea r8, [rsp + 0xa0]
mov edx, 0x104
mov rcx, qword [rsp + 0x578]
call qword [sym.imp.KERNEL32.dll_GetFullPathNameA]
test eax, eax
jne 0x1800c786f
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x1c4], eax
mov edx, dword [rsp + 0x1c4]
lea rcx, [0x180028e40]
call fcn.1800892c0
mov ecx, 0x1020
call fcn.1800eb9ac
mov qword [rsp + 0x3a8], rax
cmp qword [rsp + 0x3a8], 0
je 0x1800c781f
mov r8d, dword [rsp + 0x1c4]
mov eax, dword [rsp + 0x1c4]
mov dword [rsp + 0x20], eax
lea r9, [0x180028de0]
mov edx, 5
mov rcx, qword [rsp + 0x3a8]
call fcn.18008d120
mov qword [rsp + 0x4e0], rax
jmp 0x1800c782b
mov qword [rsp + 0x4e0], 0
mov rax, qword [rsp + 0x4e0]
mov qword [rsp + 0x3a0], rax
mov rax, qword [rsp + 0x3a0]
mov qword [rsp + 0x398], rax
mov rax, qword [rsp + 0x398]
mov qword [rsp + 0x3b0], rax
lea rdx, [0x18015a158]
lea rcx, [rsp + 0x3b0]
call fcn.1800ec370
lea rdi, [rsp + 0x1d0]
xor eax, eax
mov ecx, 0x60
rep stosb byte [rdi], al
mov r8d, 0x11
lea rdx, [0x1800047e0]
lea rcx, [rsp + 0x1d0]
call fcn.1800eb460
mov byte [rsp + 0x1e0], 1
mov byte [rsp + 0x1e1], 0
mov byte [rsp + 0x1e2], 0
mov rax, qword [rsp + 0x570]
movzx eax, byte [rax + 9]
mov word [rsp + 0x1e4], ax
mov byte [rsp + 0x1e6], 2
movzx eax, byte [rsp + 0x1e8]
and al, 0xfe
mov byte [rsp + 0x1e8], al
movzx eax, byte [rsp + 0x1e8]
and al, 0xbf
mov byte [rsp + 0x1e8], al
movzx eax, byte [rsp + 0x1e8]
and al, 0x7f
mov byte [rsp + 0x1e8], al
xor eax, eax
mov word [rsp + 0x1ea], ax
xor eax, eax
mov word [rsp + 0x1ec], ax
xor eax, eax
mov word [rsp + 0x1ee], ax
mov dword [rsp + 0x1f0], 0
mov dword [rsp + 0x1f4], 0
mov dword [rsp + 0x1f8], 0
mov dword [rsp + 0x220], 0x60
mov dword [rsp + 0x224], 0
mov qword [rsp + 0x20], 0
lea r9, [rsp + 0x230]
mov r8d, 0x60
lea rdx, [rsp + 0x1d0]
mov rcx, qword [rsp + 0x568]
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x1800c7a4e
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x1c4], eax
mov edx, dword [rsp + 0x1c4]
lea rcx, [0x180028d70]
call fcn.1800892c0
mov ecx, 0x1020
call fcn.1800eb9ac
mov qword [rsp + 0x3c0], rax
cmp qword [rsp + 0x3c0], 0
je 0x1800c79fe
mov r8d, dword [rsp + 0x1c4]
mov eax, dword [rsp + 0x1c4]
mov dword [rsp + 0x20], eax
lea r9, [0x180028d00]
mov edx, 5
mov rcx, qword [rsp + 0x3c0]
call fcn.18008d120
mov qword [rsp + 0x4e8], rax
jmp 0x1800c7a0a
mov qword [rsp + 0x4e8], 0
mov rax, qword [rsp + 0x4e8]
mov qword [rsp + 0x3b8], rax
mov rax, qword [rsp + 0x3b8]
mov qword [rsp + 0x398], rax
mov rax, qword [rsp + 0x398]
mov qword [rsp + 0x3c8], rax
lea rdx, [0x18015a158]
lea rcx, [rsp + 0x3c8]
call fcn.1800ec370
mov eax, dword [rsp + 0x230]
cmp rax, 0x60
je 0x1800c7b1f
mov r8d, 0x60
mov edx, dword [rsp + 0x230]
lea rcx, [0x180028c80]
call fcn.1800892c0
mov ecx, 0x1020
call fcn.1800eb9ac
mov qword [rsp + 0x3d8], rax
cmp qword [rsp + 0x3d8], 0
je 0x1800c7acf
mov qword [rsp + 0x28], 0x60
mov eax, dword [rsp + 0x230]
mov dword [rsp + 0x20], eax
lea r9, [0x180028c00]
xor r8d, r8d
mov edx, 0xa
mov rcx, qword [rsp + 0x3d8]
call fcn.18008d120
mov qword [rsp + 0x4f0], rax
jmp 0x1800c7adb
mov qword [rsp + 0x4f0], 0
mov rax, qword [rsp + 0x4f0]
mov qword [rsp + 0x3d0], rax
mov rax, qword [rsp + 0x3d0]
mov qword [rsp + 0x398], rax
mov rax, qword [rsp + 0x398]
mov qword [rsp + 0x3e0], rax
lea rdx, [0x18015a158]
lea rcx, [rsp + 0x3e0]
call fcn.1800ec370
mov dword [rsp + 0x248], 0
mov dword [rsp + 0x1b4], 0
jmp 0x1800c7b48
mov eax, dword [rsp + 0x1b4]
add eax, 1
mov dword [rsp + 0x1b4], eax
mov rax, qword [rsp + 0x570]
movzx eax, byte [rax + 9]
cmp dword [rsp + 0x1b4], eax
jge 0x1800c7f4b
lea rdi, [rsp + 0x378]
xor eax, eax
mov ecx, 0x18
rep stosb byte [rdi], al
mov eax, dword [rsp + 0x1b4]
add eax, 1
mov word [rsp + 0x380], ax
mov byte [rsp + 0x383], 3
mov rax, qword [rsp + 0x570]
movzx ecx, byte [rax + 9]
imul rcx, rcx, 0x18
movsxd rax, dword [rsp + 0x248]
imul rax, rax, 0x50
lea rax, [rcx + rax + 0x60]
mov dword [rsp + 0x38c], eax
mov dword [rsp + 0x360], 0
jmp 0x1800c7bd2
mov eax, dword [rsp + 0x360]
add eax, 1
mov dword [rsp + 0x360], eax
mov rax, qword [rsp + 0x570]
movzx eax, byte [rax + 0xb]
cmp dword [rsp + 0x360], eax
jge 0x1800c7c24
movsxd rcx, dword [rsp + 0x360]
imul rcx, rcx, 0xb
mov rax, qword [rsp + 0x570]
movzx ecx, byte [rax + rcx + 0x11a0]
mov eax, dword [rsp + 0x1b4]
add eax, 1
cmp ecx, eax
jne 0x1800c7c22
movzx eax, byte [rsp + 0x382]
add al, 1
mov byte [rsp + 0x382], al
jmp 0x1800c7bc1
movzx ecx, byte [rsp + 0x382]
mov eax, dword [rsp + 0x248]
add eax, ecx
mov dword [rsp + 0x248], eax
mov byte [rsp + 0x370], 0
mov dword [rsp + 0x360], 0
jmp 0x1800c7c62
mov eax, dword [rsp + 0x360]
add eax, 1
mov dword [rsp + 0x360], eax
mov rax, qword [rsp + 0x570]
movzx eax, byte [rax + 0xa]
cmp dword [rsp + 0x360], eax
jge 0x1800c7d57
movsxd rcx, dword [rsp + 0x360]
imul rcx, rcx, 0x22
mov rax, qword [rsp + 0x570]
movzx ecx, byte [rax + rcx + 0xe]
mov eax, dword [rsp + 0x1b4]
add eax, 1
cmp ecx, eax
jne 0x1800c7d52
movsxd rcx, dword [rsp + 0x360]
imul rcx, rcx, 0x22
mov rax, qword [rsp + 0x570]
mov eax, dword [rax + rcx + 0x16]
add eax, 1
mov dword [rsp + 0x37c], eax
movsxd rcx, dword [rsp + 0x360]
imul rcx, rcx, 0x22
mov rax, qword [rsp + 0x570]
movzx eax, byte [rax + rcx + 0xd]
mov word [rsp + 0x386], ax
movzx eax, byte [rsp + 0x370]
test eax, eax
jne 0x1800c7d52
movsxd rcx, dword [rsp + 0x360]
imul rcx, rcx, 0x22
mov rax, qword [rsp + 0x570]
mov eax, dword [rax + rcx + 0xf]
mov dword [rsp + 0x378], eax
cmp dword [rsp + 0x360], 0
jne 0x1800c7d29
mov dword [rsp + 0x378], 0xffffff6a
movsxd rcx, dword [rsp + 0x360]
imul rcx, rcx, 0x22
mov rax, qword [rsp + 0x570]
movzx eax, byte [rax + rcx + 0xd]
mov word [rsp + 0x384], ax
mov byte [rsp + 0x370], 1
jmp 0x1800c7c51
mov qword [rsp + 0x20], 0
lea r9, [rsp + 0x230]
mov r8d, 0x18
lea rdx, [rsp + 0x378]
mov rcx, qword [rsp + 0x568]
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x1800c7e62
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x1c4], eax
mov r8d, dword [rsp + 0x1c4]
mov edx, dword [rsp + 0x1b4]
lea rcx, [0x180028b90]
call fcn.1800892c0
mov ecx, 0x1020
call fcn.1800eb9ac
mov qword [rsp + 0x3f0], rax
cmp qword [rsp + 0x3f0], 0
je 0x1800c7e12
mov r8d, dword [rsp + 0x1c4]
mov eax, dword [rsp + 0x1c4]
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x1b4]
mov dword [rsp + 0x20], eax
lea r9, [0x180028b20]
mov edx, 5
mov rcx, qword [rsp + 0x3f0]
call fcn.18008d120
mov qword [rsp + 0x4f8], rax
jmp 0x1800c7e1e
mov qword [rsp + 0x4f8], 0
mov rax, qword [rsp + 0x4f8]
mov qword [rsp + 0x3e8], rax
mov rax, qword [rsp + 0x3e8]
mov qword [rsp + 0x398], rax
mov rax, qword [rsp + 0x398]
mov qword [rsp + 0x3f8], rax
lea rdx, [0x18015a158]
lea rcx, [rsp + 0x3f8]
call fcn.1800ec370
mov eax, dword [rsp + 0x230]
cmp rax, 0x18
je 0x1800c7f46
mov r9d, 0x18
mov r8d, dword [rsp + 0x230]
mov edx, dword [rsp + 0x1b4]
lea rcx, [0x180028a90]
call fcn.1800892c0
mov ecx, 0x1020
call fcn.1800eb9ac
mov qword [rsp + 0x408], rax
cmp qword [rsp + 0x408], 0
je 0x1800c7ef6
mov qword [rsp + 0x30], 0x18
mov eax, dword [rsp + 0x230]
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x1b4]
mov dword [rsp + 0x20], eax
lea r9, [0x180028a00]
xor r8d, r8d
mov edx, 0xa
mov rcx, qword [rsp + 0x408]
call fcn.18008d120
mov qword [rsp + 0x500], rax
jmp 0x1800c7f02
mov qword [rsp + 0x500], 0
mov rax, qword [rsp + 0x500]
mov qword [rsp + 0x400], rax
mov rax, qword [rsp + 0x400]
mov qword [rsp + 0x398], rax
mov rax, qword [rsp + 0x398]
mov qword [rsp + 0x410], rax
lea rdx, [0x18015a158]
lea rcx, [rsp + 0x410]
call fcn.1800ec370
jmp 0x1800c7b37
mov dword [rsp + 0x1b0], 0
mov dword [rsp + 0x360], 0
jmp 0x1800c7f74
mov eax, dword [rsp + 0x360]
add eax, 1
mov dword [rsp + 0x360], eax
mov rax, qword [rsp + 0x570]
movzx eax, byte [rax + 0xb]
cmp dword [rsp + 0x360], eax
jge 0x1800c871e
lea rdi, [rsp + 0x50]
xor eax, eax
mov ecx, 0x50
rep stosb byte [rdi], al
movsxd rcx, dword [rsp + 0x360]
imul rcx, rcx, 0xb
mov rax, qword [rsp + 0x570]
movzx eax, byte [rax + rcx + 0x11a3]
test eax, eax
jle 0x1800c80ae
movsxd rcx, dword [rsp + 0x360]
imul rcx, rcx, 0xb
mov rax, qword [rsp + 0x570]
movzx eax, byte [rax + rcx + 0x11a3]
cmp eax, 0x64
jge 0x1800c80ae
movsxd rcx, dword [rsp + 0x360]
imul rcx, rcx, 0xb
mov rax, qword [rsp + 0x570]
movzx eax, byte [rax + rcx + 0x11a3]
mov dword [rsp + 0x1c0], eax
mov eax, dword [rsp + 0x1c0]
sub eax, 1
mov dword [rsp + 0x1c0], eax
movsxd rcx, dword [rsp + 0x1c0]
imul rcx, rcx, 0x22
mov rax, qword [rsp + 0x570]
movzx eax, byte [rax + rcx + 0x22]
cmp eax, 1
jne 0x1800c8045
movzx eax, byte [rsp + 0x50]
and al, 0xf8
or al, 1
mov byte [rsp + 0x50], al
jmp 0x1800c80ac
movsxd rcx, dword [rsp + 0x1c0]
imul rcx, rcx, 0x22
mov rax, qword [rsp + 0x570]
movzx eax, byte [rax + rcx + 0x24]
cmp eax, 1
jne 0x1800c8072
movzx eax, byte [rsp + 0x50]
and al, 0xf8
or al, 2
mov byte [rsp + 0x50], al
jmp 0x1800c80ac
movsxd rcx, dword [rsp + 0x1c0]
imul rcx, rcx, 0x22
mov rax, qword [rsp + 0x570]
movzx eax, byte [rax + rcx + 0x25]
cmp eax, 1
jne 0x1800c809f
movzx eax, byte [rsp + 0x50]
and al, 0xf8
or al, 4
mov byte [rsp + 0x50], al
jmp 0x1800c80ac
movzx eax, byte [rsp + 0x50]
and al, 0xf8
or al, 5
mov byte [rsp + 0x50], al
jmp 0x1800c80b9
movzx eax, byte [rsp + 0x50]
and al, 0xf8
mov byte [rsp + 0x50], al
movzx eax, byte [rsp + 0x50]
and al, 7
movzx eax, al
test eax, eax
jne 0x1800c8116
movzx eax, byte [rsp + 0x50]
and al, 0xf7
mov byte [rsp + 0x50], al
movzx eax, byte [rsp + 0x50]
and al, 0xef
mov byte [rsp + 0x50], al
movzx eax, byte [rsp + 0x50]
and al, 0xdf
mov byte [rsp + 0x50], al
movzx eax, byte [rsp + 0x50]
and al, 0xbf
mov byte [rsp + 0x50], al
movzx eax, byte [rsp + 0x50]
and al, 0x7f
mov byte [rsp + 0x50], al
movzx eax, byte [rsp + 0x51]
and al, 0xc7
mov byte [rsp + 0x51], al
movzx eax, byte [rsp + 0x51]
and al, 0xbf
mov byte [rsp + 0x51], al
jmp 0x1800c8165
movzx eax, byte [rsp + 0x50]
or al, 8
mov byte [rsp + 0x50], al
movzx eax, byte [rsp + 0x50]
and al, 0xef
mov byte [rsp + 0x50], al
movzx eax, byte [rsp + 0x50]
or al, 0x20
mov byte [rsp + 0x50], al
movzx eax, byte [rsp + 0x50]
or al, 0x40
mov byte [rsp + 0x50], al
movzx eax, byte [rsp + 0x50]
or al, 0x80
mov byte [rsp + 0x50], al
movzx eax, byte [rsp + 0x51]
and al, 0xc7
or al, 8
mov byte [rsp + 0x51], al
movzx eax, byte [rsp + 0x51]
and al, 0xbf
mov byte [rsp + 0x51], al
movsxd rcx, dword [rsp + 0x360]
imul rcx, rcx, 0xb
mov rax, qword [rsp + 0x570]
movzx eax, byte [rax + rcx + 0x11a1]
and al, 0xf
movzx eax, al
and eax, 1
test eax, eax
je 0x1800c819a
movzx eax, byte [rsp + 0x52]
or al, 1
mov byte [rsp + 0x52], al
jmp 0x1800c81a5
movzx eax, byte [rsp + 0x52]
and al, 0xfe
mov byte [rsp + 0x52], al
movsxd rcx, dword [rsp + 0x360]
imul rcx, rcx, 0xb
mov rax, qword [rsp + 0x570]
movzx eax, byte [rax + rcx + 0x11a1]
and al, 0xf
movzx eax, al
and eax, 2
test eax, eax
je 0x1800c81da
movzx eax, byte [rsp + 0x52]
or al, 2
mov byte [rsp + 0x52], al
jmp 0x1800c81e5
movzx eax, byte [rsp + 0x52]
and al, 0xfd
mov byte [rsp + 0x52], al
movsxd rcx, dword [rsp + 0x360]
imul rcx, rcx, 0xb
mov rax, qword [rsp + 0x570]
movzx eax, byte [rax + rcx + 0x11a1]
and al, 0xf
movzx eax, al
and eax, 4
test eax, eax
je 0x1800c821a
movzx eax, byte [rsp + 0x52]
or al, 4
mov byte [rsp + 0x52], al
jmp 0x1800c8225
movzx eax, byte [rsp + 0x52]
and al, 0xfb
mov byte [rsp + 0x52], al
movsxd rcx, dword [rsp + 0x360]
imul rcx, rcx, 0xb
mov rax, qword [rsp + 0x570]
movzx eax, byte [rax + rcx + 0x11a1]
and al, 0xf
movzx eax, al
and eax, 8
test eax, eax
je 0x1800c825a
movzx eax, byte [rsp + 0x52]
or al, 8
mov byte [rsp + 0x52], al
jmp 0x1800c8265
movzx eax, byte [rsp + 0x52]
and al, 0xf7
mov byte [rsp + 0x52], al
movsxd rcx, dword [rsp + 0x360]
imul rcx, rcx, 0xb
mov rax, qword [rsp + 0x570]
movzx ecx, byte [rax + rcx + 0x11a1]
shr cl, 4
and cl, 0xf
and cl, 0xf
shl cl, 4
movzx eax, byte [rsp + 0x52]
and al, 0xf
or al, cl
mov byte [rsp + 0x52], al
movsxd rcx, dword [rsp + 0x360]
imul rcx, rcx, 0xb
mov rax, qword [rsp + 0x570]
movzx eax, byte [rax + rcx + 0x11a2]
mov byte [rsp + 0x53], al
movsxd rcx, dword [rsp + 0x360]
imul rcx, rcx, 0xb
mov rax, qword [rsp + 0x570]
movzx eax, byte [rax + rcx + 0x11a3]
mov byte [rsp + 0x54], al
movsxd rcx, dword [rsp + 0x360]
imul rcx, rcx, 0xb
mov rax, qword [rsp + 0x570]
movzx eax, byte [rax + rcx + 0x11a4]
mov byte [rsp + 0x55], al
movsxd rcx, dword [rsp + 0x360]
imul rcx, rcx, 0xb
mov rax, qword [rsp + 0x570]
movzx eax, byte [rax + rcx + 0x11a5]
mov byte [rsp + 0x56], al
movsxd rcx, dword [rsp + 0x360]
imul rcx, rcx, 0xb
mov rax, qword [rsp + 0x570]
movzx eax, byte [rax + rcx + 0x11a6]
mov byte [rsp + 0x57], al
movsxd rcx, dword [rsp + 0x360]
imul rcx, rcx, 0xb
mov rax, qword [rsp + 0x570]
movzx eax, byte [rax + rcx + 0x11a7]
mov byte [rsp + 0x58], al
movsxd rcx, dword [rsp + 0x360]
imul rcx, rcx, 0xb
mov rax, qword [rsp + 0x570]
movzx eax, byte [rax + rcx + 0x11a8]
mov byte [rsp + 0x59], al
movsxd rcx, dword [rsp + 0x360]
imul rcx, rcx, 0xb
mov rax, qword [rsp + 0x570]
movzx eax, byte [rax + rcx + 0x11a9]
mov byte [rsp + 0x5a], al
movsxd rcx, dword [rsp + 0x360]
imul rcx, rcx, 0xb
mov rax, qword [rsp + 0x570]
movzx eax, byte [rax + rcx + 0x11aa]
mov byte [rsp + 0x5b], al
movzx eax, byte [rsp + 0x50]
and al, 7
movzx eax, al
test eax, eax
jne 0x1800c83fd
mov dword [rsp + 0x5c], 0
mov byte [rsp + 0x62], 0
xor eax, eax
mov word [rsp + 0x60], ax
mov dword [rsp + 0x74], 0
mov qword [rsp + 0x78], 0
mov dword [rsp + 0x80], 0
jmp 0x1800c8522
mov rax, qword [rsp + 0x570]
movzx ecx, byte [rax + 9]
imul rcx, rcx, 0x18
mov rax, qword [rsp + 0x570]
movzx eax, byte [rax + 0xb]
imul rax, rax, 0x50
lea rcx, [rcx + rax + 0x60]
movsxd rax, dword [rsp + 0x1b0]
lea rax, [rcx + rax*8]
mov dword [rsp + 0x5c], eax
mov byte [rsp + 0x62], 2
mov eax, 0x990
mov word [rsp + 0x60], ax
movsxd rcx, dword [rsp + 0x1c0]
imul rcx, rcx, 0x22
mov rax, qword [rsp + 0x570]
mov eax, dword [rax + rcx + 0xf]
mov dword [rsp + 0x74], eax
mov rax, qword [rsp + 0x1b8]
mov qword [rsp + 0x78], rax
movsxd rdi, dword [rsp + 0x1c0]
imul rdi, rdi, 0x22
movsxd rcx, dword [rsp + 0x1c0]
imul rcx, rcx, 0x22
mov rdx, qword [rsp + 0x570]
mov rax, qword [rsp + 0x570]
mov ecx, dword [rax + rcx + 0xf]
mov eax, dword [rdx + rdi + 0x16]
sub eax, ecx
add eax, 1
imul eax, eax, 0x990
movsxd rcx, eax
mov rax, qword [rsp + 0x1b8]
add rax, rcx
mov qword [rsp + 0x1b8], rax
mov dword [rsp + 0x80], 1
mov rax, qword [rsp + 0x570]
movzx ecx, byte [rax + 9]
imul rcx, rcx, 0x18
mov rax, qword [rsp + 0x570]
movzx eax, byte [rax + 0xb]
imul rax, rax, 0x50
lea rcx, [rcx + rax + 0x60]
mov rax, qword [rsp + 0x570]
movzx eax, byte [rax + 0xa]
lea rax, [rcx + rax*8]
movsxd rcx, dword [rsp + 0x1b0]
imul rcx, rcx, 0x10
add rax, rcx
mov dword [rsp + 0x84], eax
mov eax, dword [rsp + 0x1b0]
add eax, 1
mov dword [rsp + 0x1b0], eax
mov dword [rsp + 0x88], 0
mov qword [rsp + 0x20], 0
lea r9, [rsp + 0x230]
mov r8d, 0x50
lea rdx, [rsp + 0x50]
mov rcx, qword [rsp + 0x568]
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x1800c8635
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x1c4], eax
mov r8d, dword [rsp + 0x1c4]
mov edx, dword [rsp + 0x360]
lea rcx, [0x180028990]
call fcn.1800892c0
mov ecx, 0x1020
call fcn.1800eb9ac
mov qword [rsp + 0x420], rax
cmp qword [rsp + 0x420], 0
je 0x1800c85e5
mov r8d, dword [rsp + 0x1c4]
mov eax, dword [rsp + 0x1c4]
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x360]
mov dword [rsp + 0x20], eax
lea r9, [0x180028920]
mov edx, 5
mov rcx, qword [rsp + 0x420]
call fcn.18008d120
mov qword [rsp + 0x508], rax
jmp 0x1800c85f1
mov qword [rsp + 0x508], 0
mov rax, qword [rsp + 0x508]
mov qword [rsp + 0x418], rax
mov rax, qword [rsp + 0x418]
mov qword [rsp + 0x398], rax
mov rax, qword [rsp + 0x398]
mov qword [rsp + 0x428], rax
lea rdx, [0x18015a158]
lea rcx, [rsp + 0x428]
call fcn.1800ec370
mov eax, dword [rsp + 0x230]
cmp rax, 0x50
je 0x1800c8719
mov r9d, 0x50
mov r8d, dword [rsp + 0x230]
mov edx, dword [rsp + 0x360]
lea rcx, [0x180028890]
call fcn.1800892c0
mov ecx, 0x1020
call fcn.1800eb9ac
mov qword [rsp + 0x438], rax
cmp qword [rsp + 0x438], 0
je 0x1800c86c9
mov qword [rsp + 0x30], 0x50
mov eax, dword [rsp + 0x230]
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x360]
mov dword [rsp + 0x20], eax
lea r9, [0x180028810]
xor r8d, r8d
mov edx, 0xa
mov rcx, qword [rsp + 0x438]
call fcn.18008d120
mov qword [rsp + 0x510], rax
jmp 0x1800c86d5
mov qword [rsp + 0x510], 0
mov rax, qword [rsp + 0x510]
mov qword [rsp + 0x430], rax
mov rax, qword [rsp + 0x430]
mov qword [rsp + 0x398], rax
mov rax, qword [rsp + 0x398]
mov qword [rsp + 0x440], rax
lea rdx, [0x18015a158]
lea rcx, [rsp + 0x440]
call fcn.1800ec370
jmp 0x1800c7f63
mov dword [rsp + 0x360], 0
jmp 0x1800c873c
mov eax, dword [rsp + 0x360]
add eax, 1
mov dword [rsp + 0x360], eax
mov rax, qword [rsp + 0x570]
movzx eax, byte [rax + 0xa]
cmp dword [rsp + 0x360], eax
jge 0x1800c89cf
lea rdi, [rsp + 0x390]
xor eax, eax
mov ecx, 8
rep stosb byte [rdi], al
mov dword [rsp + 0x390], 0
cmp dword [rsp + 0x360], 0
jne 0x1800c879f
movsxd rcx, dword [rsp + 0x360]
imul rcx, rcx, 0x22
mov rax, qword [rsp + 0x570]
mov eax, dword [rax + rcx + 0xf]
add eax, 0x96
mov dword [rsp + 0x390], eax
movsxd rdi, dword [rsp + 0x360]
imul rdi, rdi, 0x22
movsxd rcx, dword [rsp + 0x360]
imul rcx, rcx, 0x22
mov rdx, qword [rsp + 0x570]
mov rax, qword [rsp + 0x570]
mov ecx, dword [rax + rcx + 0xf]
mov eax, dword [rdx + rdi + 0x16]
sub eax, ecx
add eax, 1
mov dword [rsp + 0x394], eax
mov qword [rsp + 0x20], 0
lea r9, [rsp + 0x230]
mov r8d, 8
lea rdx, [rsp + 0x390]
mov rcx, qword [rsp + 0x568]
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x1800c88e6
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x1c4], eax
mov r8d, dword [rsp + 0x1c4]
mov edx, dword [rsp + 0x360]
lea rcx, [0x1800287a0]
call fcn.1800892c0
mov ecx, 0x1020
call fcn.1800eb9ac
mov qword [rsp + 0x450], rax
cmp qword [rsp + 0x450], 0
je 0x1800c8896
mov r8d, dword [rsp + 0x1c4]
mov eax, dword [rsp + 0x1c4]
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x360]
mov dword [rsp + 0x20], eax
lea r9, [0x180028730]
mov edx, 5
mov rcx, qword [rsp + 0x450]
call fcn.18008d120
mov qword [rsp + 0x518], rax
jmp 0x1800c88a2
mov qword [rsp + 0x518], 0
mov rax, qword [rsp + 0x518]
mov qword [rsp + 0x448], rax
mov rax, qword [rsp + 0x448]
mov qword [rsp + 0x398], rax
mov rax, qword [rsp + 0x398]
mov qword [rsp + 0x458], rax
lea rdx, [0x18015a158]
lea rcx, [rsp + 0x458]
call fcn.1800ec370
mov eax, dword [rsp + 0x230]
cmp rax, 8
je 0x1800c89ca
mov r9d, 8
mov r8d, dword [rsp + 0x230]
mov edx, dword [rsp + 0x360]
lea rcx, [0x1800286b0]
call fcn.1800892c0
mov ecx, 0x1020
call fcn.1800eb9ac
mov qword [rsp + 0x468], rax
cmp qword [rsp + 0x468], 0
je 0x1800c897a
mov qword [rsp + 0x30], 8
mov eax, dword [rsp + 0x230]
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x360]
mov dword [rsp + 0x20], eax
lea r9, [0x180028630]
xor r8d, r8d
mov edx, 0xa
mov rcx, qword [rsp + 0x468]
call fcn.18008d120
mov qword [rsp + 0x520], rax
jmp 0x1800c8986
mov qword [rsp + 0x520], 0
mov rax, qword [rsp + 0x520]
mov qword [rsp + 0x460], rax
mov rax, qword [rsp + 0x460]
mov qword [rsp + 0x398], rax
mov rax, qword [rsp + 0x398]
mov qword [rsp + 0x470], rax
lea rdx, [0x18015a158]
lea rcx, [rsp + 0x470]
call fcn.1800ec370
jmp 0x1800c872b
mov dword [rsp + 0x360], 0
jmp 0x1800c89ed
mov eax, dword [rsp + 0x360]
add eax, 1
mov dword [rsp + 0x360], eax
mov rax, qword [rsp + 0x570]
movzx eax, byte [rax + 0xa]
cmp dword [rsp + 0x360], eax
jge 0x1800c8c99
lea rdi, [rsp + 0x238]
xor eax, eax
mov ecx, 0x10
rep stosb byte [rdi], al
mov rax, qword [rsp + 0x570]
movzx ecx, byte [rax + 9]
imul rcx, rcx, 0x18
mov rax, qword [rsp + 0x570]
movzx eax, byte [rax + 0xb]
imul rax, rax, 0x50
lea rcx, [rcx + rax + 0x60]
mov rax, qword [rsp + 0x570]
movzx eax, byte [rax + 0xa]
lea rdx, [rcx + rax*8]
mov rax, qword [rsp + 0x570]
movzx ecx, byte [rax + 0xa]
imul rcx, rcx, 0x10
mov rax, rdx
add rax, rcx
mov dword [rsp + 0x238], eax
movsxd rdi, dword [rsp + 0x360]
imul rdi, rdi, 0x22
movsxd rcx, dword [rsp + 0x360]
imul rcx, rcx, 0x22
mov rdx, qword [rsp + 0x570]
mov rax, qword [rsp + 0x570]
mov ecx, dword [rax + rcx + 0xf]
mov eax, dword [rdx + rdi + 0x16]
sub eax, ecx
add eax, 1
mov dword [rsp + 0x240], eax
mov qword [rsp + 0x20], 0
lea r9, [rsp + 0x230]
mov r8d, 0x10
lea rdx, [rsp + 0x238]
mov rcx, qword [rsp + 0x568]
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x1800c8bb0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x1c4], eax
mov r8d, dword [rsp + 0x1c4]
mov edx, dword [rsp + 0x360]
lea rcx, [0x1800285c0]
call fcn.1800892c0
mov ecx, 0x1020
call fcn.1800eb9ac
mov qword [rsp + 0x480], rax
cmp qword [rsp + 0x480], 0
je 0x1800c8b60
mov r8d, dword [rsp + 0x1c4]
mov eax, dword [rsp + 0x1c4]
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x360]
mov dword [rsp + 0x20], eax
lea r9, [0x180028550]
mov edx, 5
mov rcx, qword [rsp + 0x480]
call fcn.18008d120
mov qword [rsp + 0x528], rax
jmp 0x1800c8b6c
mov qword [rsp + 0x528], 0
mov rax, qword [rsp + 0x528]
mov qword [rsp + 0x478], rax
mov rax, qword [rsp + 0x478]
mov qword [rsp + 0x398], rax
mov rax, qword [rsp + 0x398]
mov qword [rsp + 0x488], rax
lea rdx, [0x18015a158]
lea rcx, [rsp + 0x488]
call fcn.1800ec370
mov eax, dword [rsp + 0x230]
cmp rax, 0x10
je 0x1800c8c94
mov r9d, 0x10
mov r8d, dword [rsp + 0x230]
mov edx, dword [rsp + 0x360]
lea rcx, [0x1800284d0]
call fcn.1800892c0
mov ecx, 0x1020
call fcn.1800eb9ac
mov qword [rsp + 0x498], rax
cmp qword [rsp + 0x498], 0
je 0x1800c8c44
mov qword [rsp + 0x30], 0x10
mov eax, dword [rsp + 0x230]
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x360]
mov dword [rsp + 0x20], eax
lea r9, [0x180028450]
xor r8d, r8d
mov edx, 0xa
mov rcx, qword [rsp + 0x498]
call fcn.18008d120
mov qword [rsp + 0x530], rax
jmp 0x1800c8c50
mov qword [rsp + 0x530], 0
mov rax, qword [rsp + 0x530]
mov qword [rsp + 0x490], rax
mov rax, qword [rsp + 0x490]
mov qword [rsp + 0x398], rax
mov rax, qword [rsp + 0x398]
mov qword [rsp + 0x4a0], rax
lea rdx, [0x18015a158]
lea rcx, [rsp + 0x4a0]
call fcn.1800ec370
jmp 0x1800c89dc
lea rdi, [rsp + 0x250]
xor eax, eax
mov ecx, 0x104
rep stosb byte [rdi], al
mov r8, qword [rsp + 0x368]
lea rdx, [0x180028440]
lea rcx, [rsp + 0x250]
call fcn.1800eb79c
xor eax, eax
mov rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x250]
repne scasb al, byte [rdi]
not rcx
sub rcx, 1
mov rax, rcx
add rax, 1
mov qword [rsp + 0x20], 0
lea r9, [rsp + 0x230]
mov r8d, eax
lea rdx, [rsp + 0x250]
mov rcx, qword [rsp + 0x568]
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x1800c8ddc
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x1c4], eax
mov edx, dword [rsp + 0x1c4]
lea rcx, [0x1800283e0]
call fcn.1800892c0
mov ecx, 0x1020
call fcn.1800eb9ac
mov qword [rsp + 0x4b0], rax
cmp qword [rsp + 0x4b0], 0
je 0x1800c8d8c
mov r8d, dword [rsp + 0x1c4]
mov eax, dword [rsp + 0x1c4]
mov dword [rsp + 0x20], eax
lea r9, [0x180028380]
mov edx, 5
mov rcx, qword [rsp + 0x4b0]
call fcn.18008d120
mov qword [rsp + 0x538], rax
jmp 0x1800c8d98
mov qword [rsp + 0x538], 0
mov rax, qword [rsp + 0x538]
mov qword [rsp + 0x4a8], rax
mov rax, qword [rsp + 0x4a8]
mov qword [rsp + 0x398], rax
mov rax, qword [rsp + 0x398]
mov qword [rsp + 0x4b8], rax
lea rdx, [0x18015a158]
lea rcx, [rsp + 0x4b8]
call fcn.1800ec370
mov edx, dword [rsp + 0x230]
xor eax, eax
mov rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x250]
repne scasb al, byte [rdi]
not rcx
sub rcx, 1
mov rax, rcx
add rax, 1
cmp rdx, rax
je 0x1800c8f05
xor eax, eax
mov rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x250]
repne scasb al, byte [rdi]
not rcx
sub rcx, 1
mov r8, rcx
add r8, 1
mov edx, dword [rsp + 0x230]
lea rcx, [0x180028300]
call fcn.1800892c0
mov ecx, 0x1020
call fcn.1800eb9ac
mov qword [rsp + 0x4c8], rax
cmp qword [rsp + 0x4c8], 0
je 0x1800c8eb5
xor eax, eax
mov rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x250]
repne scasb al, byte [rdi]
not rcx
sub rcx, 1
mov rax, rcx
add rax, 1
mov qword [rsp + 0x28], rax
mov eax, dword [rsp + 0x230]
mov dword [rsp + 0x20], eax
lea r9, [0x180028280]
xor r8d, r8d
mov edx, 0xa
mov rcx, qword [rsp + 0x4c8]
call fcn.18008d120
mov qword [rsp + 0x540], rax
jmp 0x1800c8ec1
mov qword [rsp + 0x540], 0
mov rax, qword [rsp + 0x540]
mov qword [rsp + 0x4c0], rax
mov rax, qword [rsp + 0x4c0]
mov qword [rsp + 0x398], rax
mov rax, qword [rsp + 0x398]
mov qword [rsp + 0x4d0], rax
lea rdx, [0x18015a158]
lea rcx, [rsp + 0x4d0]
call fcn.1800ec370
mov rcx, qword [rsp + 0x568]
call qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
mov rcx, qword [rsp + 0x548]
xor rcx, rsp
call fcn.1800eb430
add rsp, 0x550
pop rdi
ret