Function at 0x18006cca9
Capabilities:
Write file on windows

Disassembly:
mov cl, byte [rdi]
mov r15d, 1
mov byte [rsp + 0x44], cl
mov dword [rsp + 0x48], r11d
cmp edx, 0xfde9
jne 0x18000f642
lea r15, [0x180000000]
mov edx, r11d
mov r9, qword [r15 + rax*8 + 0x1fa50]
mov rsi, r11
lea rax, [r9 + r14*8]
cmp byte [rax + rsi + 0x3e], r11b
je 0x18000f4fd
inc edx
inc rsi
cmp rsi, 5
jl 0x18000f4eb
test rsi, rsi
jle 0x18000f5e6
mov rax, qword [r15 + r12*8 + 0x1fa50]
mov r8, qword [rbp - 0x51]
sub r8, rdi
movzx ecx, byte [rax + r14*8 + 0x3e]
movsx r15d, byte [rcx + r15 + 0x1e8c0]
inc r15d
mov r13d, r15d
sub r13d, edx
movsxd r10, r13d
cmp r10, r8
jg 0x18000f7b1
lea rax, [rbp - 1]
mov rdx, r11
sub r9, rax
lea r8, [r9 + r14*8]
lea rcx, [rbp - 1]
add rcx, rdx
inc rdx
mov al, byte [rcx + r8 + 0x3e]
mov byte [rcx], al
cmp rdx, rsi
jl 0x18000f547
test r13d, r13d
jle 0x18000f577
lea rcx, [rbp - 1]
mov r8, r10
add rcx, rsi
mov rdx, rdi
call fcn.180008ae0
xor r11d, r11d
mov rdx, r11
lea r8, [0x180000000]
mov rcx, qword [r8 + r12*8 + 0x1fa50]
add rcx, rdx
inc rdx
mov byte [rcx + r14*8 + 0x3e], r11b
cmp rdx, rsi
jl 0x18000f581
lea rax, [rbp - 1]
mov qword [rbp - 0x41], r11
mov qword [rbp - 0x39], rax
lea r9, [rbp - 0x41]
mov eax, r11d
lea rdx, [rbp - 0x39]
cmp r15d, 4
lea rcx, [rsp + 0x48]
sete al
inc eax
mov r8d, eax
mov r15d, eax
call fcn.180010220
cmp rax, 0xffffffffffffffff
je 0x18000f6aa
lea eax, [r13 - 1]
mov r13, qword [rbp - 0x51]
movsxd rsi, eax
add rsi, rdi
jmp 0x18000f6cc
movzx eax, byte [rdi]
mov rdx, r13
sub rdx, rdi
movsx rsi, byte [rax + r15 + 0x1e8c0]
lea ecx, [rsi + 1]
movsxd rax, ecx
cmp rax, rdx
jg 0x18000f7eb
cmp ecx, 4
mov qword [rbp - 0x31], r11
mov eax, r11d
mov qword [rbp - 0x29], rdi
sete al
lea r9, [rbp - 0x31]
inc eax
lea rdx, [rbp - 0x29]
mov r8d, eax
lea rcx, [rsp + 0x48]
mov ebx, eax
call fcn.180010220
cmp rax, 0xffffffffffffffff
je 0x18000f6aa
add rsi, rdi
mov r15d, ebx
jmp 0x18000f6cc
lea rax, [0x180000000]
mov rdx, qword [rax + r12*8 + 0x1fa50]
mov cl, byte [rdx + r14*8 + 0x3d]
test cl, 4
je 0x18000f676
mov al, byte [rdx + r14*8 + 0x3e]
and cl, 0xfb
mov byte [rbp + 7], al
mov al, byte [rdi]
mov byte [rdx + r14*8 + 0x3d], cl
lea rdx, [rbp + 7]
mov byte [rbp + 8], al
jmp 0x18000f695
call fcn.18000db2c
movzx ecx, byte [rdi]
xor edx, edx
cmp word [rax + rcx*2], dx
jge 0x18000f6b3
inc rsi
cmp rsi, r13
jae 0x18000f844
mov rdx, rdi
mov r8d, 2
lea rcx, [rsp + 0x48]
call fcn.18000d9e8
cmp eax, 0xffffffff
jne 0x18000f6cc
cmp byte [rbp - 0x71], 0
jmp 0x18000f83e
mov r8, r15
lea rcx, [rsp + 0x48]
mov rdx, rdi
call fcn.18000d9e8
cmp eax, 0xffffffff
je 0x18000f87b
mov ecx, dword [rbp - 0x59]
lea rax, [rbp + 0xf]
xor ebx, ebx
lea r8, [rsp + 0x48]
mov qword [rsp + 0x38], rbx
lea rdi, [rsi + 1]
mov qword [rsp + 0x30], rbx
mov r9d, r15d
mov dword [rsp + 0x28], 5
xor edx, edx
mov qword [rsp + 0x20], rax
call fcn.18000c58c
mov esi, eax
test eax, eax
je 0x18000f8db
mov rcx, qword [rbp - 0x49]
lea r9, [rsp + 0x4c]
mov r8d, eax
mov qword [rsp + 0x20], rbx
lea rdx, [rbp + 0xf]
call qword [sym.imp.KERNEL32.dll_WriteFile]
xor r11d, r11d
test eax, eax
je 0x18000f8d2
mov r15d, dword [rsp + 0x40]
mov ebx, edi
sub ebx, dword [rbp - 0x21]
add ebx, r15d
mov dword [rbp - 0x65], ebx
cmp dword [rsp + 0x4c], esi
jb 0x18000f83a
cmp byte [rsp + 0x44], 0xa
jne 0x18000f799
mov rcx, qword [rbp - 0x49]
lea eax, [r11 + 0xd]
lea r9, [rsp + 0x4c]
mov word [rsp + 0x44], ax
lea r8d, [r11 + 1]
mov qword [rsp + 0x20], r11
lea rdx, [rsp + 0x44]
call qword [sym.imp.KERNEL32.dll_WriteFile]
xor r11d, r11d
test eax, eax
je 0x18000f872
cmp dword [rsp + 0x4c], 1
jb 0x18000f83a
inc r15d
inc ebx
mov dword [rsp + 0x40], r15d
mov dword [rbp - 0x65], ebx
mov rsi, rdi
cmp rdi, r13
jae 0x18000f885
mov rax, qword [rbp - 0x19]
mov edx, dword [rbp - 0x55]
jmp 0x18000f4b5
mov edx, r11d
test r8, r8
jle 0x18000f7e6
sub rdi, rsi
lea rbx, [0x180000000]
mov al, byte [rdi + rsi]
inc edx
mov rcx, qword [rbx + r12*8 + 0x1fa50]
add rcx, rsi
inc rsi
mov byte [rcx + r14*8 + 0x3e], al
movsxd rax, edx
cmp rax, r8
jl 0x18000f7c3
mov ebx, dword [rbp - 0x65]
add ebx, r8d
jmp 0x18000f837
mov r9d, r11d
test rdx, rdx
jle 0x18000f835
mov r13, qword [rbp - 0x11]
mov r8, r11
mov r10, r13
and r13d, 0x3f
sar r10, 6
lea r11, [r13*8]
add r11, r13
mov al, byte [r8 + rdi]
inc r9d
mov rcx, qword [r15 + r10*8 + 0x1fa50]
add rcx, r8
inc r8
mov byte [rcx + r11*8 + 0x3e], al
movsxd rax, r9d
cmp rax, rdx
jl 0x18000f810
xor r11d, r11d
add ebx, edx
mov dword [rbp - 0x65], ebx
cmp byte [rbp - 0x71], r11b
mov ecx, dword [rsp + 0x40]
jmp 0x18000f88d
mov al, byte [rdi]
lea r8, [0x180000000]
mov rcx, qword [r8 + r12*8 + 0x1fa50]
inc ebx
mov dword [rbp - 0x65], ebx
mov byte [rcx + r14*8 + 0x3e], al
mov rax, qword [r8 + r12*8 + 0x1fa50]
or byte [rax + r14*8 + 0x3d], 4
cmp byte [rbp - 0x71], dl
jmp 0x18000f83e
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x69], eax
mov ecx, dword [rsp + 0x40]
cmp byte [rbp - 0x71], 0
jmp 0x18000f88d
mov ecx, dword [rsp + 0x40]
cmp byte [rbp - 0x71], r11b
je 0x18000f89b
mov rax, qword [rsp + 0x50]
and dword [rax + 0x3a8], 0xfffffffd
mov rax, qword [rbp - 9]
movsd xmm0, qword [rbp - 0x69]
movsd qword [rax], xmm0
mov dword [rax + 8], ecx
mov rcx, qword [rbp + 0x17]
xor rcx, rsp
call fcn.180004630
mov rbx, qword [rsp + 0x140]
add rsp, 0x100
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x69], eax
mov ecx, dword [rsp + 0x40]
cmp byte [rbp - 0x71], bl
jmp 0x18000f88d
jb 0x18000f770
movabs rcx, 0x731137671c542cab
mov rcx, qword [rsp + 0x18]
movzx r9d, r9b
sub dword [rsp + 0x40], 0x1d7b3f97
call fcn.180060fc2
push rdi
call fcn.18007001e
mov rdx, qword [rdx + rcx - 0xcfff]
xor cl, 0x84
xor cl, ch
push r15
movabs r15, 0x12371fa374660cb7
setae r15b
push r8
push rcx
lea rdx, [rdx + rcx*4 + 0x199002a3]
call fcn.18006babc