Function at 0x18000e480
Capabilities:
Write file on windows

Disassembly:
mov rax, rsp
push rbp
push rdi
push r12
push r14
push r15
mov rbp, rsp
sub rsp, 0x70
mov qword [rbp - 0x28], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov r14d, edx
mov rdi, rcx
cmp edx, 0xffffffff
jne 0x18000e4be
xor r15d, r15d
cmp edx, edx
cmovne r15d, edx
mov eax, r15d
jmp 0x18000e7af
mov rax, qword [rcx + 0x40]
mov rcx, qword [rax]
test rcx, rcx
je 0x18000e4f9
mov rdx, qword [rdi + 0x58]
movsxd r8, dword [rdx]
lea rax, [rcx + r8]
cmp rcx, rax
jae 0x18000e4f9
lea eax, [r8 - 1]
mov dword [rdx], eax
mov rcx, qword [rdi + 0x40]
mov rdx, qword [rcx]
lea rax, [rdx + 1]
mov qword [rcx], rax
mov byte [rdx], r14b
mov eax, r14d
jmp 0x18000e7af
cmp qword [rdi + 0x80], 0
jne 0x18000e50c
or rax, 0xffffffffffffffff
jmp 0x18000e7af
mov r8, qword [rdi + 0x18]
lea rax, [rdi + 0x70]
cmp qword [r8], rax
jne 0x18000e539
mov rdx, qword [rdi + 0x90]
mov rcx, qword [rdi + 0x88]
mov qword [r8], rcx
mov rax, qword [rdi + 0x38]
mov qword [rax], rcx
sub edx, ecx
mov rax, qword [rdi + 0x50]
mov dword [rax], edx
cmp qword [rdi + 0x68], 0
jne 0x18000e560
movsx ecx, r14b
mov rdx, qword [rdi + 0x80]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fputc]
or rsi, 0xffffffffffffffff
cmp eax, esi
cmovne esi, r14d
jmp 0x18000e7ad
mov byte [rbp - 0x30], r14b
mov edx, 0xf
mov qword [rbp - 8], rdx
mov byte [rbp - 0x20], 0
xor ecx, ecx
mov qword [rbp - 0x20], rcx
mov qword [rbp - 0x10], 8
lea rax, [rbp - 0x20]
cmp rdx, 0x10
cmovae rax, rcx
mov byte [rax + 8], cl
xor r15d, r15d
or rsi, 0xffffffffffffffff
mov r8, qword [rbp - 8]
mov r9, qword [rbp - 0x10]
mov rdx, qword [rbp - 0x20]
nop dword [rax]
nop word [rax + rax]
lea rax, [rbp - 0x20]
cmp r8, 0x10
cmovae rax, rdx
lea rcx, [rbp - 0x20]
cmovae rcx, rdx
add rax, r9
lea rdx, [rbp + 0x40]
mov qword [rsp + 0x38], rdx
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rcx
lea rax, [rbp + 0x48]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x2f]
lea r8, [rbp - 0x30]
lea rdx, [rdi + 0x74]
mov rcx, qword [rdi + 0x68]
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::codecvt_char__char__struct__Mbstatet_::out_struct__Mbstatet____ptr64__char_const____ptr64__char_const____ptr64__char_const____ptr64____ptr64__char____ptr64__char____ptr64__char____ptr64____ptr64_const___ptr64]
test eax, eax
js 0x18000e74e
cmp eax, 1
jg 0x18000e731
lea rax, [rbp - 0x20]
mov rdx, qword [rbp - 0x20]
mov r8, qword [rbp - 8]
cmp r8, 0x10
cmovae rax, rdx
mov rbx, qword [rbp + 0x40]
sub rbx, rax
je 0x18000e659
lea rcx, [rbp - 0x20]
cmp r8, 0x10
cmovae rcx, rdx
mov r9, qword [rdi + 0x80]
mov r8, rbx
mov edx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
mov r8, qword [rbp - 8]
mov rdx, qword [rbp - 0x20]
cmp rbx, rax
jne 0x18000e756
mov byte [rdi + 0x71], 1
lea rax, [rbp - 0x30]
cmp qword [rbp + 0x48], rax
jne 0x18000e72c
mov r9, qword [rbp - 0x10]
test rbx, rbx
jne 0x18000e5b0
cmp r9, 0x20
jae 0x18000e756
mov rax, rsi
sub rax, r9
cmp rax, 8
jbe 0x18000e71e
lea rbx, [r9 + 8]
cmp rbx, 0xfffffffffffffffe
ja 0x18000e710
cmp r8, rbx
jae 0x18000e6be
mov r8, r9
mov rdx, rbx
lea rcx, [rbp - 0x20]
call fcn.18000fa80
mov r8, qword [rbp - 8]
mov r9, qword [rbp - 0x10]
mov rdx, qword [rbp - 0x20]
jmp 0x18000e6db
test rbx, rbx
jne 0x18000e6e4
mov qword [rbp - 0x10], r15
lea rax, [rbp - 0x20]
cmp r8, 0x10
cmovae rax, rdx
mov byte [rax], r15b
jmp 0x18000e595
test rbx, rbx
je 0x18000e5b0
lea rax, [rbp - 0x20]
cmp r8, 0x10
cmovae rax, rdx
xor ecx, ecx
mov qword [r9 + rax], rcx
mov qword [rbp - 0x10], rbx
lea rax, [rbp - 0x20]
cmp qword [rbp - 8], 0x10
cmovae rax, qword [rbp - 0x20]
mov byte [rbx + rax], cl
jmp 0x18000e595
lea rcx, str.string_too_long
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_]
int3
lea rcx, str.string_too_long
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_]
int3
mov esi, r14d
jmp 0x18000e756
cmp eax, 3
jne 0x18000e74e
movsx ecx, byte [rbp - 0x30]
mov rdx, qword [rdi + 0x80]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fputc]
cmp eax, 0xffffffff
cmovne esi, r14d
mov rdx, qword [rbp - 0x20]
mov r8, qword [rbp - 8]
cmp r8, 0x10
jb 0x18000e7ad
lea rax, [r8 + 1]
cmp rax, 0x1000
jb 0x18000e7a5
test byte [rbp - 0x20], 0x1f
je 0x18000e775
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rax, qword [rdx - 8]
cmp rax, rdx
jb 0x18000e785
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
sub rdx, rax
cmp rdx, 8
jae 0x18000e795
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cmp rdx, 0x27
jbe 0x18000e7a2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rdx, rax
mov rcx, rdx
call fcn.180015d28
mov eax, esi
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret