Function at 0x1800c8a80
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x40
lea ebx, [r8 + 0xb]
mov rsi, r9
mov dword [rsp + 0x80], ebx
mov r14d, r8d
mov r15, rdx
mov rdi, rcx
cmp r8d, ebx
jae 0x1800c8d8e
mov ebp, dword [rsp + 0x80]
lea r12d, [r8 - 0x44]
mov r13, qword [rsp + 0x30]
lea rdx, [0x180000000]
cmp r12d, 0x2c
ja case.0x1800c8af0.10
movzx eax, byte [rdx + r12 + 0xc8de0]
mov ecx, dword [rdx + rax*4 + 0xc8db4]
add rcx, rdx
jmp rcx
mov eax, 0x3f
sub eax, ebp
mov ebp, eax
cmp eax, 8
jae 0x1800c8bac
mov ebx, 0xe1
nop dword [rax]
mov eax, ebx
sub eax, 0xdf
je 0x1800c8b76
sub eax, 1
je 0x1800c8b62
cmp eax, 1
jne 0x1800c8b95
mov r9d, 0xa7
mov dword [rsp + 0x30], ebp
xor r8d, r8d
lea rcx, [rsp + 0x30]
mov rdx, r13
call fcn.180056ec0
lea r8, [rdi + 0x18]
mov dword [rsp + 0x30], 0x10
xor r9d, r9d
mov dword [rsp + 0x20], 0xd4
xor edx, edx
lea rcx, [rsp + 0x30]
call fcn.1800f3570
jmp 0x1800c8b95
xor edx, edx
lea r8, [rdi + 0x18]
mov rcx, rdi
lea r9d, [rdx + 0x1a]
call fcn.1800c5830
jmp 0x1800c8b95
lea rdx, [rdi + 0x18]
mov dword [rsp + 0x30], 0x38
mov r9d, 0xa7
lea rcx, [rsp + 0x30]
xor r8d, r8d
call fcn.180056ec0
dec ebx
cmp ebx, 0xde
ja 0x1800c8b10
mov ebx, dword [rsp + 0x80]
jmp 0x1800c8bc9
add eax, 0xfffffff8
lea rcx, [rsp + 0x30]
mov r9d, 0xa7
mov dword [rsp + 0x30], eax
xor r8d, r8d
mov rdx, r13
call fcn.180056ec0
lea r8, [rdi + 0x18]
mov dword [rsp + 0x30], 0xe
xor r9d, r9d
mov dword [rsp + 0x20], 0xd4
xor edx, edx
lea rcx, [rsp + 0x30]
call fcn.1800f3570
mov eax, dword [rdi + 0x10]
mov dword [rdi + 0x50], eax
jmp case.0x1800c8af0.10
mov ebp, dword [rdi + 0x10]
shr ebp, 3
and ebp, 0x3f
mov r13d, ebp
add r13, rdi
mov byte [r13 + 0x18], 0x80
add r13, 0x19
jmp case.0x1800c8af0.10
or byte [0x1801217c1], 8
jmp case.0x1800c8af0.10
mov rcx, qword [rsi]
mov rax, qword [rdi]
sar rcx, 0x20
mov dword [rax + 4], ecx
jmp case.0x1800c8af0.10
test rsi, rsi
je 0x1800c8d7d
mov eax, dword [rsi + 8]
cmp eax, 1
je 0x1800c8d7d
cmp eax, 4
jne 0x1800c8c85
mov ebx, 0x48
mov eax, ebx
sub eax, 0x47
je 0x1800c8d4a
cmp eax, 1
jne 0x1800c8c77
mov r8, qword [rsi + 0x18]
mov rcx, rdi
mov edx, dword [r15]
call qword [rsi + 0x10]
cmp eax, 0xfffffff6
je 0x1800c8d7d
dec ebx
cmp ebx, 0x46
ja 0x1800c8c51
mov ebx, dword [rsp + 0x80]
mov eax, 0x118
nop word [rax + rax]
cmp eax, 0x118
je 0x1800c8d4f
add eax, 0x1928
cmp eax, 0x1928
jbe 0x1800c8c90
jmp case.0x1800c8af0.10
xor r9d, r9d
mov dword [rsp + 0x30], 4
mov r8, rdi
mov dword [rsp + 0x20], 0xd4
xor edx, edx
lea rcx, [rsp + 0x30]
call fcn.1800f3570
lea r9, [rsp + 0x30]
mov dword [rsp + 0x30], 0x10
mov r8d, 0x112
mov qword [rsp + 0x20], rsi
mov rdx, rdi
xor ecx, ecx
call fcn.180061110
mov r9d, 0xa7
mov dword [rsp + 0x30], 8
xor r8d, r8d
lea rcx, [rsp + 0x30]
mov rdx, rdi
call fcn.180056ec0
jmp case.0x1800c8af0.10
or byte [0x1801217c1], 1
jmp case.0x1800c8af0.10
mov eax, dword [rdi + 0x14]
lea r8, [rdi + 0x18]
xor edx, edx
mov dword [rdi + 0x54], eax
mov rcx, rdi
lea r9d, [rdx + 0x1a]
call fcn.1800c5830
jmp case.0x1800c8af0.10
mov rcx, qword [rdi]
mov eax, dword [rsi]
mov dword [rcx], eax
inc r14d
inc r12d
cmp r14d, ebx
jae 0x1800c8d8e
jmp 0x1800c8acc
mov rax, qword [r15]
jmp 0x1800c8d93
mov r8d, dword [r15]
lea r9, [rsp + 0x80]
mov rcx, qword [rsi + 0x10]
mov rdx, rdi
mov qword [rsp + 0x20], 0
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x1800c8d7d
mov eax, dword [rsp + 0x80]
jmp 0x1800c8d93
mov rax, 0xffffffffffffffff
jmp 0x1800c8d93
mov dword [rsp + 0x30], 0
mov rax, qword [rsp + 0x30]
mov rbx, qword [rsp + 0x70]
mov rbp, qword [rsp + 0x78]
mov rsi, qword [rsp + 0x88]
add rsp, 0x40
pop r15
pop r14
pop r13
pop r12
pop rdi
ret