Function at 0x180005740
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov dword [rsp + 8], ecx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0xb0
mov rsi, rdx
mov rbx, r9
imul edx, ecx, 0x68
mov rax, r8
mov edi, ecx
mov dword [rbp - 0x39], edx
cmp ecx, edx
ja 0x18000594d
mov r13, qword [rbp - 0x19]
mov r14, qword [rbp - 0x19]
mov r15d, dword [rbp + 0x67]
mov r12, qword [rbp - 0x19]
lea r8, [0x18006dc10]
cmp edi, 0x29a
ja 0x180005899
je 0x18000594d
cmp edi, 0xb8
ja 0x180005832
je 0x18000580d
cmp edi, 0x30
je 0x1800059a0
cmp edi, 0x4a
je 0x1800057f2
cmp edi, 0x64
jne 0x180005b00
lea r9d, [rdi + 0x7b]
mov qword [rbp - 0x29], rsi
xor r8d, r8d
mov qword [rsp + 0x20], 0
lea rdx, [rbp - 0x29]
mov rcx, rbx
call fcn.18001b990
jmp 0x180005af6
xor r9d, r9d
xor r8d, r8d
mov rdx, rbx
mov ecx, 0x10e
call fcn.180029140
mov byte [rbp - 0x21], al
jmp 0x180005af6
mov r9d, 0xa2
mov dword [rbp - 9], 0
xor r8d, r8d
lea rcx, [rbp - 9]
mov rdx, rbx
call fcn.180051440
mov qword [rbp - 0x19], rax
jmp 0x180005af6
cmp edi, 0x11e
je 0x18000588d
cmp edi, 0x1b0
jne 0x180005b00
cmp dword [rbx], 0
je 0x180005b50
xor r8d, r8d
mov qword [rsp + 0x20], 0
mov r9, rbx
lea rdx, [rbp + 0xf]
lea ecx, [r8 + 0x4b]
call fcn.180024bf0
test eax, eax
jne 0x180005950
cmp dword [rbp + 0x17], 1
jne 0x180005885
inc r14
mov byte [rsi], 0x2d
inc rsi
mov dword [rbp + 0x17], eax
xor r15d, r15d
jmp 0x180005af6
movzx eax, word [rsi]
mov word [rbx + 8], ax
jmp 0x180005afc
cmp edi, 0xc38
ja 0x180005b35
je 0x180005a4a
cmp edi, 0x330
je 0x1800059b8
cmp edi, 0x4b0
je 0x18000593b
cmp edi, 0x678
jne 0x180005b00
mov rax, qword [rbp - 0x19]
test rax, rax
je 0x180005b55
cmp dword [rax], 7
jne 0x180005b55
mov r9d, 0xa2
mov dword [rbp - 1], 1
xor r8d, r8d
lea rcx, [rbp - 1]
mov rdx, rbx
call fcn.180051440
xor r9d, r9d
mov dword [rbp - 0x31], 2
mov r8, rbx
mov qword [rsp + 0x20], 0
lea rcx, [rbp - 0x31]
mov r13, rax
lea edx, [r9 + 0x4d]
call fcn.18004e4f0
mov dword [rbp - 0x31], eax
mov rax, qword [rbp - 0x19]
mov rax, qword [rax + 0x10]
mov rax, qword [rax + 0x30]
mov qword [rbp - 0x11], rax
jmp 0x180005af6
mov ebx, 0x57
cmp ebx, 0x57
je 0x18000596b
cmp ebx, 0x3b79
jne 0x180005984
mov eax, dword [rbp - 0x21]
mov rbx, qword [rsp + 0xf8]
add rsp, 0xb0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
xor edx, edx
mov byte [rsi], 0
lea rcx, [rbp + 0xf]
lea r8d, [rdx + 0x71]
call fcn.1800521b0
mov dword [rbp - 0x21], 0
add ebx, 0x3b22
cmp ebx, 0x7644
jbe 0x180005940
mov rbx, qword [rbp + 0x7f]
mov rax, qword [rbp + 0x77]
mov ecx, dword [rbp + 0x67]
mov edx, dword [rbp - 0x39]
mov eax, dword [rax]
mov r14, rsi
sub eax, 2
cmp eax, 0x3e
jbe 0x180005afc
mov eax, 0xfffffffd
jmp 0x180005950
cmp dword [rbp + 0xf], 0
je 0x180005a30
nop
mov eax, dword [rax]
lea r8, [rbp + 7]
mov dword [rbp - 0x29], eax
lea rdx, [rbp + 0xf]
lea rax, [rbp + 0xf]
xor r9d, r9d
mov qword [rsp + 0x40], rax
xor ecx, ecx
mov qword [rsp + 0x38], 0
lea rax, [rbp - 0x29]
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xf0
call fcn.180023b30
mov ebx, eax
test eax, eax
jne 0x180005b5c
mov rax, qword [str.failed_to_find_C_AMTPCDServiceValueForKeyWithPropertyInSubDomain]
inc r15d
mov ecx, dword [rbp + 7]
movzx ecx, byte [rcx + rax]
mov rax, qword [rbp + 0x77]
mov byte [rsi], cl
inc rsi
cmp dword [rbp + 0xf], ebx
jne 0x1800059c0
mov rbx, qword [rbp + 0x7f]
mov r8, r14
mov dword [rbp - 0x29], r15d
mov edx, 0x157
lea rcx, [rbp - 0x29]
call fcn.1800584e0
jmp 0x180005af6
xor r12d, r12d
test r13, r13
je 0x180005a58
mov ecx, dword [r13]
jmp 0x180005a5d
mov ecx, 0xa
test ecx, ecx
je 0x180005b10
sub ecx, 1
je 0x180005b20
sub ecx, 2
je 0x180005a9d
cmp ecx, 1
je 0x180005a9d
test r13, r13
je 0x180005a83
mov eax, dword [r13]
jmp 0x180005a88
mov eax, 0xa
movsxd rdx, eax
lea rcx, str.metrics.MemoryLeakReportProto.AllocationBreakdown
mov rdx, qword [r8 + rdx*8]
call fcn.18005b050
jmp 0x180005adc
mov r8, rbx
mov edx, 9
mov rcx, r13
call fcn.1800545f0
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rax + rdx], r12b
jne 0x180005ab4
cmp dword [rbp - 0x31], r12d
je 0x180005ac6
inc rdx
mov r9, qword [rbp - 0x11]
mov r8d, 1
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
mov r12, rax
mov r8, rbx
mov dword [rbp - 0x29], r12d
lea rdx, [rbp - 0x29]
mov ecx, 0xc1
mov edi, 0x11f8
call fcn.18004e250
mov ecx, dword [rbp + 0x67]
mov edx, dword [rbp - 0x39]
mov rax, qword [rbp + 0x77]
lea edi, [rdi + rcx*8]
cmp edi, edx
ja 0x18000594d
jmp 0x180005793
movsxd rax, dword [rbp - 0x31]
test eax, eax
je 0x180005b20
mov rdx, rax
cmp eax, 4
jle 0x180005b25
mov edx, 4
mov r9, qword [rbp - 0x11]
lea rcx, [r13 + 0x10]
mov r8d, 1
jmp 0x180005ad3
cmp edi, 0x11f8
je 0x180005adc
cmp edi, 0x17b8
jne 0x180005b00
mov eax, 1
jmp 0x180005950
mov word [rsi], 0x30
xor eax, eax
jmp 0x180005950
xor edx, edx
lea rcx, [rbp + 0xf]
lea r8d, [rdx + 0x71]
call fcn.1800521b0
mov eax, ebx
jmp 0x180005950