Function at 0x18000d3f0
Capabilities:
Write file on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xa8
mov r13, rcx
mov dword [rsp + 0x30], 0x18e95ccb
lea rax, [rcx + 0x68]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x50]
mov rax, qword [rax]
mov qword [rsp + 0x78], rax
lea rax, [rcx + 0x74]
mov qword [rsp + 0x68], rax
lea rsi, [rcx + 0x71]
mov ecx, 0x318ecbe7
mov ebp, 0xa7f79268
mov ebx, 0x78056743
jmp 0x18000d450
cmp ecx, 0x90eec40e
je 0x18000d910
nop
cmp ecx, 0x58f7bcd
jge 0x18000d500
cmp ecx, 0xc012bba7
jge 0x18000d540
cmp ecx, 0x90eec40e
jl 0x18000d5b2
cmp ecx, 0xafdd5db3
jl 0x18000d442
cmp ecx, 0xbfa58aea
jge 0x18000d832
cmp ecx, 0xafdd5db3
jne 0x18000d450
lea rdx, [rsp + 0x80]
mov qword [rsp + 0x58], rdx
mov rax, qword [rsp + 0x58]
lea rdi, [rsp + 0x70]
mov qword [rsp + 0x60], rdi
mov rax, qword [rsp + 0x60]
mov rax, qword [rsp + 0x50]
mov rcx, qword [rax]
mov qword [rsp + 0x38], rdx
mov r9, qword [rsp + 0x38]
add r9, 0x20
mov r8, qword [rsp + 0x38]
mov rax, qword [rcx]
mov qword [rsp + 0x20], rdi
mov rdx, qword [rsp + 0x68]
call qword [rax + 0x40]
mov ebx, 0x78056743
mov dword [rsp + 0x34], eax
mov ecx, dword [rsp + 0x30]
mov eax, 0x3757f749
add ecx, eax
jmp 0x18000d450
cmp ecx, 0x31ccfb86
jge 0x18000d580
cmp ecx, 0x10743d61
jge 0x18000d5fa
cmp ecx, 0x5c21e8d
jge 0x18000d69a
cmp ecx, 0x58f7bcd
jne 0x18000d450
mov ecx, dword [rsp + 0x30]
add ecx, ebx
mov r12b, 1
jmp 0x18000d450
cmp ecx, 0xe2dcd328
jge 0x18000d62e
cmp ecx, 0xc0e0ef33
jge 0x18000d6b3
cmp ecx, 0xc012bba7
jne 0x18000d450
mov ecx, dword [rsp + 0x30]
mov eax, 0x12d309be
add ecx, eax
jmp 0x18000d450
cmp ecx, 0x50415414
jge 0x18000d65e
cmp ecx, 0x37327117
jge 0x18000d71c
cmp ecx, 0x31ccfb86
jne 0x18000d450
mov ecx, dword [rsp + 0x30]
add ecx, ebx
xor r12d, r12d
jmp 0x18000d450
cmp ecx, 0x81eb893f
jge 0x18000d759
cmp ecx, 0x80941585
jne 0x18000d450
mov rax, qword [rsp + 0x70]
sub rax, qword [rsp + 0x38]
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x48]
mov edx, dword [rsp + 0x30]
add edx, ebp
mov ecx, dword [rsp + 0x30]
mov edi, 0xf78ae096
add ecx, edi
test rax, rax
cmovne ecx, edx
jmp 0x18000d450
cmp ecx, 0x2bbc6689
jge 0x18000d78a
cmp ecx, 0x10743d61
jne 0x18000d450
mov rax, qword [rsp + 0x40]
cmp byte [rax], 0
sete r14b
mov ecx, dword [rsp + 0x30]
mov eax, 0xd5afba90
add ecx, eax
jmp 0x18000d450
cmp ecx, 0xe83a0b6f
jge 0x18000d7b5
cmp ecx, 0xe2dcd328
jne 0x18000d450
mov rax, qword [rsp + 0x60]
mov rax, qword [rsp + 0x58]
mov ecx, dword [rsp + 0x30]
add ecx, ebx
mov r12d, r15d
jmp 0x18000d450
cmp ecx, 0x6a787b69
jge 0x18000d802
cmp ecx, 0x50415414
jne 0x18000d450
mov eax, dword [rsp + 0x34]
mov edx, dword [rsp + 0x30]
mov ecx, 0xb14ed4c4
add edx, ecx
mov ecx, dword [rsp + 0x30]
mov edi, 0x1e49144c
add ecx, edi
test eax, eax
cmovle ecx, edx
jmp 0x18000d450
jne 0x18000d450
mov ecx, dword [rsp + 0x30]
mov eax, 0xc9f3765d
add ecx, eax
mov r15b, 1
jmp 0x18000d450
cmp ecx, 0xca38318f
jge 0x18000d85d
cmp ecx, 0xc0e0ef33
jne 0x18000d450
mov r9, qword [r13 + 0x80]
mov rcx, qword [rsp + 0x38]
mov r8, qword [rsp + 0x48]
mov edx, 1
call fcn.1800d237c
mov ebx, 0x78056743
mov rdx, qword [rsp + 0x48]
mov edi, dword [rsp + 0x30]
mov ecx, 0x5a5b123d
add edi, ecx
mov ecx, dword [rsp + 0x30]
mov rbp, rsi
mov esi, 0xf78ae096
add ecx, esi
mov rsi, rbp
cmp rdx, rax
cmovne ecx, edi
mov ebp, 0xa7f79268
jmp 0x18000d450
cmp ecx, 0x4faeb1f6
jge 0x18000d887
cmp ecx, 0x37327117
jne 0x18000d450
mov eax, dword [rsp + 0x34]
mov edx, dword [rsp + 0x30]
mov ecx, 0xa6bc2e1f
add edx, ecx
mov ecx, dword [rsp + 0x30]
mov edi, 0x36c5552b
add ecx, edi
cmp eax, 3
cmovl ecx, edx
jmp 0x18000d450
jne 0x18000d450
mov qword [rsp + 0x40], rsi
mov rax, qword [rsp + 0x40]
mov edx, dword [rsp + 0x30]
mov ecx, 0xcf50aea4
add edx, ecx
mov ecx, dword [rsp + 0x30]
mov edi, 0xeca61f02
add ecx, edi
cmp byte [rax], 0
cmovne ecx, edx
jmp 0x18000d450
cmp ecx, 0x318ecbe7
jge 0x18000d8b2
cmp ecx, 0x2bbc6689
jne 0x18000d450
mov ecx, dword [rsp + 0x30]
mov eax, 0xc9f3765d
add ecx, eax
xor r15d, r15d
jmp 0x18000d450
cmp ecx, 0xee99175b
jge 0x18000d8de
cmp ecx, 0xe83a0b6f
jne 0x18000d450
mov rax, qword [r13]
mov rcx, r13
mov edx, 0xffffffff
call qword [rax + 0x18]
mov ebx, 0x78056743
mov edx, dword [rsp + 0x30]
mov ecx, 0x18e39ebb
add edx, ecx
mov ecx, dword [rsp + 0x30]
mov edi, 0x96f400e8
add ecx, edi
cmp eax, 0xffffffff
cmove ecx, edx
jmp 0x18000d450
cmp ecx, 0x73446f08
jge 0x18000d8f7
cmp ecx, 0x6a787b69
jne 0x18000d450
mov rax, qword [rsp + 0x40]
mov byte [rax], 0
mov ecx, dword [rsp + 0x30]
mov eax, 0x67aab8ba
add ecx, eax
jmp 0x18000d450
jne 0x18000d450
mov eax, dword [rsp + 0x34]
mov edx, dword [rsp + 0x30]
mov ecx, 0x67aab8ba
add edx, ecx
mov ecx, dword [rsp + 0x30]
mov edi, 0xa7295edc
add ecx, edi
cmp eax, 1
cmove ecx, edx
jmp 0x18000d450
jne 0x18000d450
mov eax, dword [rsp + 0x34]
mov edx, dword [rsp + 0x30]
mov ecx, 0x518f1e9e
add edx, ecx
mov ecx, dword [rsp + 0x30]
mov edi, 0xa7295edc
add ecx, edi
test eax, eax
cmove ecx, edx
jmp 0x18000d450
jne 0x18000d450
mov eax, dword [rsp + 0x34]
mov edx, dword [rsp + 0x30]
mov ecx, 0xecd8c1c2
add edx, ecx
mov ecx, dword [rsp + 0x30]
mov edi, 0xa7295edc
add ecx, edi
cmp eax, 3
cmove ecx, edx
jmp 0x18000d450
jne 0x18000d450
mov rax, qword [rsp + 0x78]
mov edx, dword [rsp + 0x30]
mov ecx, 0xeca61f02
add edx, ecx
mov ecx, dword [rsp + 0x30]
mov edi, 0x69022c74
add ecx, edi
test rax, rax
cmove ecx, edx
jmp 0x18000d450
jne 0x18000d450
mov ecx, dword [rsp + 0x30]
mov eax, 0xc9f3765d
add ecx, eax
mov r15d, r14d
jmp 0x18000d450
jne 0x18000d450
mov ecx, dword [rsp + 0x30]
mov eax, 0xd5afba90
add ecx, eax
xor r14d, r14d
jmp 0x18000d450
and r12b, 1
mov eax, r12d
add rsp, 0xa8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret