Function at 0x1800109c0
Capabilities:
Terminate process
Write file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], r8
mov dword [rsp + 8], ecx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x17]
sub rsp, 0xa0
lea r8d, [rcx - 0xa]
mov dword [rbp - 0x45], ecx
mov dword [rbp - 0x49], r8d
mov r13, rdx
mov r12, r9
mov edx, ecx
cmp ecx, r8d
jbe case.0x180010ae6.0
mov r15, qword [rbp + 0x77]
lea esi, [rcx - 0x7b]
mov ebx, dword [rbp + 0x57]
xor edi, edi
mov r14, qword [rbp - 1]
mov eax, r8d
mov dword [rbp - 0x31], esi
lea r8, [0x180000000]
cmp esi, 0x1f
ja case.default.0x180010a3b
movzx eax, byte [r8 + rsi + 0x1110c]
mov ecx, dword [r8 + rax*4 + 0x110e0]
add rcx, r8
jmp rcx
mov dword [rbp - 0x21], 0xffffffff
jmp case.0x180010a3b.10
mov rax, qword [r15 + 8]
mov ebx, edi
mov qword [rbp + 0xf], rax
mov rax, qword [r15 + 0x10]
mov qword [rbp - 1], rax
jmp case.0x180010a3b.10
mov eax, dword [r12]
lea rdx, [rbp - 0x31]
mov r9, qword [rbp + 0x7f]
lea rcx, [rbp - 0x19]
mov dword [rbp - 0x19], eax
mov r8d, 0x11c
mov eax, dword [r15]
mov dword [rbp - 0x31], eax
call fcn.18005e4d0
cmp eax, 0xffffffff
je 0x180010cb9
mov edx, dword [rbp - 0x45]
mov r9, qword [rbp + 0x7f]
mov r8, qword [rbp - 0x41]
mov eax, dword [rbp - 0x49]
dec edx
dec esi
mov dword [rbp - 0x45], edx
mov dword [rbp - 0x31], esi
cmp edx, eax
ja 0x180010a17
mov r14d, dword [rbp + 0x57]
mov r12, qword [rbp - 1]
add r14d, 0xffffff9a
mov r15, qword [rbp + 7]
mov rsi, qword [rbp - 9]
mov ecx, dword [rbp - 0x49]
mov dword [rbp - 0x45], r14d
cmp r14d, 0x2a
ja case.default.0x180010ae6
lea rdx, [0x180000000]
movzx eax, byte [rdx + r14 + 0x11158]
mov ecx, dword [rdx + rax*4 + 0x1112c]
add rcx, rdx
jmp rcx
mov rax, qword [rbp + 0x7f]
cmp dword [rax], 3
je 0x180010b01
xor r9d, r9d
xor edx, edx
xor ecx, ecx
lea r8d, [r9 + 0x3f]
call fcn.180033bb0
mov edx, 2
mov ecx, 0x2400
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov qword [rbp - 9], rax
cmp rax, 0
je 0x180010ceb
mov edx, 1
mov ecx, 0x4000
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov qword [rbp + 7], rax
cmp rax, 0
je 0x180010cc5
mov edx, 0xfe
xor ecx, ecx
call fcn.180058b20
mov qword [rbp - 0x39], rax
jmp 0x180010a87
mov esi, 0xb8
mov eax, esi
sub eax, 0xb8
je 0x180010b71
cmp eax, 1
jne 0x180010c02
mov rax, r14
jmp 0x1800110c4
mov rax, qword [rbp + 0x7f]
mov r9d, dword [r12]
mov rcx, qword [0x18008a548]
mov r10d, dword [rax]
lea eax, [r10 + r9]
cmp eax, dword [rcx + 0x20]
jg 0x180010d11
mov edx, dword [r13]
mov r8d, dword [r15]
lea eax, [rdx + r8]
cmp eax, dword [rcx + 0x24]
jg 0x180010d11
mov dword [rbp - 0x41], edx
lea rcx, [rbp - 0x11]
mov dword [rbp - 0x29], r9d
lea rdx, [rbp - 0x41]
mov dword [rbp - 0x11], r8d
lea r9, [rbp - 0x19]
lea r8, [rbp - 0x29]
mov dword [rbp - 0x19], r10d
mov dword [rsp + 0x20], 0x8e
call fcn.18001b2a0
test rax, rax
je 0x180010d11
mov edx, 0x4d
mov rcx, rax
call fcn.180010640
mov r14, rax
test rax, rax
je 0x180010d11
xor r8d, r8d
mov rdx, rax
mov ecx, 0xef
call fcn.180043bf0
inc esi
cmp esi, 0xba
jb 0x180010b57
mov esi, dword [rbp - 0x31]
mov edx, dword [rbp - 0x45]
mov r9, qword [rbp + 0x7f]
mov r8, rdi
mov dword [rbp - 0x29], edi
mov qword [rbp - 0x41], rdi
jmp 0x180010a92
xor edx, edx
xor ecx, ecx
mov r8d, 0x92
call fcn.18004c500
mov rdx, rax
lea rcx, str.images_speeddial_despegar.png
call fcn.18006a740
mov r8, qword [rbp + 0xf]
xor r9d, r9d
xor edx, edx
mov dword [rsp + 0x20], 0x14
xor ecx, ecx
call fcn.180057dc0
mov qword [rbp - 0x41], rax
mov r8, rax
test rax, rax
je 0x180010d19
mov edx, dword [rbp - 0x45]
mov r9, qword [rbp + 0x7f]
jmp 0x180010a92
mov r9, qword [rbp + 0x7f]
cmp dword [r9], edi
jne 0x180010c91
mov eax, dword [0x18008a9e0]
sub eax, dword [r12]
mov dword [r9], eax
cmp dword [r15], edi
jne 0x180010a8e
mov eax, dword [0x18008a9e4]
sub eax, dword [r13]
mov dword [r15], eax
jmp 0x180010a8e
mov r8, qword [rbp - 0x41]
mov r9, qword [rbp + 0x7f]
jmp 0x180010a95
mov dword [rbp - 0x21], 0xffffffff
jmp case.0x180010ae6.0
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.variables_in_assignment
call fcn.18006a5b0
mov ecx, 0x63
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.FinishDlg_param_:___s_
call fcn.18006a5b0
mov ecx, 0x63
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rax, rdi
jmp 0x1800110c4
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.SVN_ERR_CORRUPT_PACKED_DATA
call fcn.18006a5b0
mov ecx, 0x63
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rax, qword [rbp + 0x67]
xor r9d, r9d
mov rcx, qword [rbp + 0x7f]
mov r8, r13
mov edx, ILFree
mov eax, dword [rax]
mov dword [rbp + 0x57], eax
lea rax, [rbp + 0x57]
mov qword [rsp + 0x20], rax
call fcn.180035fe0
mov dword [rbp - 0x21], eax
jmp case.0x180010ae6.0
mov rax, qword [0x18008a548]
mov byte [rax + 2], 0
jmp case.0x180010ae6.3
mov ecx, dword [r9]
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp case.0x180010ae6.3
mov rax, qword [0x18008a548]
mov dword [rbp - 0x21], edi
mov dword [rax + 0x48], edi
jmp case.0x180010ae6.3
mov r9, qword [rbp - 0x39]
lea r8, [rbp + 0x57]
mov qword [rsp + 0x28], rdi
mov rdx, r15
mov ecx, 0xb8
mov qword [rsp + 0x20], rdi
mov dword [rbp + 0x57], 0x4000
call fcn.180062510
movsxd r8, eax
mov r9, r12
mov edx, 1
mov rcx, r15
mov rbx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
jmp case.0x180010ae6.3
mov eax, dword [r8 + 0x14]
xor r9d, r9d
mov rcx, qword [rbp - 0x39]
xor r8d, r8d
mov qword [rsp + 0x38], rdi
xor edx, edx
mov dword [rbp + 0x57], eax
lea rax, [rbp + 0x57]
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], 0x10e
mov qword [rsp + 0x20], rax
call fcn.180066300
mov rdx, qword [rbp - 0x41]
xor r9d, r9d
mov r8, qword [rbp - 0x39]
mov eax, dword [rdx + 0x14]
lea ecx, [r9 + 0x52]
lea rdx, [rbp + 0x57]
mov dword [rbp + 0x57], eax
call fcn.18005c750
mov r8, qword [rbp - 0x39]
lea rcx, [rbp + 0x57]
xor r9d, r9d
mov dword [rbp + 0x57], 0xc0
mov edx, 0xa8
mov qword [rsp + 0x20], rdi
call fcn.18005aa90
jmp case.0x180010ae6.3
movsx eax, word [r8 + 8]
lea rdx, [rbp + 0x57]
mov rcx, qword [rbp - 0x39]
mov r8d, 0xbf
mov dword [rbp + 0x57], eax
call fcn.18002a7c0
mov rdx, qword [rbp - 0x41]
mov ecx, 0x82
mov r8, qword [rbp - 0x39]
cmp word [rdx + 8], 1
lea rdx, [rbp + 0x57]
jne 0x180010e9a
mov dword [rbp + 0x57], 3
call fcn.180007f00
jmp case.0x180010ae6.3
mov dword [rbp + 0x57], edi
call fcn.180007f00
jmp case.0x180010ae6.3
lea rax, [rbp - 0x39]
mov r9d, 0xb
xor r8d, r8d
mov qword [rsp + 0x20], rax
xor edx, edx
xor ecx, ecx
call fcn.180043790
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
lea rcx, str.n_Tx5c0xGU0gx10xio
call fcn.18006a740
jmp case.0x180010ae6.3
mov rdx, qword [rbp - 0x39]
xor r8d, r8d
lea ecx, [r8 + 0x2d]
call fcn.18000f510
test eax, eax
jne 0x180011097
mov rsi, qword [rbp - 1]
lea rdx, [0x18007f5b0]
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
mov r12, rax
test rax, rax
je 0x18001106e
mov r13, qword [rbp - 9]
lea r9, [rbp + 0x57]
mov rdx, qword [rbp - 0x41]
xor r8d, r8d
mov ecx, 0x104
mov qword [rsp + 0x20], r13
mov dword [rbp + 0x57], 0x2400
call fcn.180065a80
mov r14d, eax
test eax, eax
je 0x180011048
mov edi, dword [rbp - 0x29]
nop word [rax + rax]
mov esi, 0xc4
nop word [rax + rax]
mov ecx, esi
sub ecx, 0xc0
je 0x180010ff5
sub ecx, 1
je 0x180010fe5
sub ecx, 1
je 0x180010fcf
sub ecx, 1
je 0x180010fb9
cmp ecx, 1
jne 0x180011009
mov rax, qword [rbp - 0x39]
lea r8, [rbp + 0x57]
mov dword [rsp + 0x28], 0xb0
lea rdx, [rbp - 0x11]
mov r9, r15
mov qword [rsp + 0x20], rax
mov rcx, r13
mov dword [rbp + 0x57], 0x4000
mov dword [rbp - 0x11], r14d
call fcn.180008100
mov ebx, eax
jmp 0x180011009
movsxd r8, ebx
mov r9, r12
mov edx, 1
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
jmp 0x180011009
mov eax, 0x38e38e39
imul r14d
sar edx, 8
mov eax, edx
shr eax, 0x1f
add edx, eax
add edi, edx
jmp 0x180011009
mov edx, edi
lea rcx, str.__04i__r
call fcn.18006a740
jmp 0x180011009
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fflush]
dec esi
cmp esi, 0xbf
ja 0x180010f60
mov rdx, qword [rbp - 0x41]
lea r9, [rbp + 0x57]
xor r8d, r8d
mov dword [rbp - 0x29], edi
mov ecx, 0x104
mov dword [rbp + 0x57], 0x2400
mov qword [rsp + 0x20], r13
call fcn.180065a80
mov r14d, eax
test eax, eax
jne 0x180010f50
xor edi, edi
mov r14d, dword [rbp - 0x45]
mov rsi, r13
mov ecx, dword [rbp - 0x49]
dec r14d
mov dword [rbp - 0x45], r14d
lea eax, [r14 + 0x66]
cmp eax, ecx
jbe case.0x180010ae6.0
mov r8, qword [rbp - 0x41]
mov r9, qword [rbp + 0x7f]
jmp 0x180010ac2
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8, rsi
lea rdx, str._bbarletta_sandria_strani_b
mov rcx, rax
call fcn.18006a5b0
mov ecx, 0x63
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.file:___usr_share_doc_ImageMagick_6_index.html
call fcn.18006a5b0
mov ecx, 0x63
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov dword [rbp - 0x21], edi
mov rax, qword [rbp - 0x21]
mov rbx, qword [rsp + 0xe8]
add rsp, 0xa0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret