Function at 0x180038cd0
Capabilities:
Write file on windows

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x9a0
mov qword [rsp + 0x58], r8
mov qword [rsp + 0x50], rdx
mov qword [rsp + 0xc0], rcx
cmp qword [rsp + 0x50], 0
jne 0x180038cf9
jmp 0x1800390ce
cmp qword [rsp + 0x58], 0
jne 0x180038d06
jmp 0x1800390ce
xor ecx, ecx
mov edx, 0xfb97b811
call fcn.180040490
xor ecx, ecx
mov edx, 1
xor r8d, r8d
xor r9d, r9d
call rax
lea rcx, [rsp + 0x48]
mov rdx, rax
call fcn.180003210
lea rcx, [rsp + 0xc8]
call fcn.18002f990
lea rcx, [rsp + 0xc8]
mov edx, 0xa
call fcn.18002bc90
lea rcx, [rsp + 0xc8]
call fcn.180049700
lea rcx, [rsp + 0x48]
call fcn.1800146c0
lea rcx, [rsp + 0xc8]
mov rdx, rax
call fcn.18004af10
lea rcx, [rsp + 0xc8]
call fcn.18000c6e0
mov dword [rsp + 0x64], eax
cmp dword [rsp + 0x64], 0
jbe 0x1800390af
lea rcx, [rsp + 0xc8]
call fcn.180046870
test al, 1
jne 0x180038da6
jmp 0x180039091
lea rcx, [rsp + 0xc8]
call fcn.18001ed30
test al, 1
jne 0x180038dc4
mov dword [rsp + 0x34], 1
jmp 0x1800390b7
lea rcx, [rsp + 0xc8]
call fcn.18002f010
lea rcx, [rsp + 0xc8]
call fcn.1800377d0
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0xc8]
call fcn.1800146d0
mov qword [rsp + 0x68], rax
lea rcx, [rsp + 0xa0]
call fcn.18004e950
mov rdx, qword [rsp + 0x58]
lea rcx, [rsp + 0xa0]
call fcn.18004ecb0
mov rcx, qword [rsp + 0x40]
call fcn.18004b320
cmp rax, 0
jbe 0x180038f69
mov rsi, qword [rsp + 0x40]
mov ecx, 0x1d51f3b2
call fcn.18002c000
xor ecx, ecx
mov edx, eax
call fcn.180040490
lea rbx, [rsp + 0x3c]
mov rcx, rsi
xor edx, edx
xor r8d, r8d
xor r9d, r9d
mov qword [rsp + 0x20], rbx
mov qword [rsp + 0x28], 0
call rax
cmp eax, 0
je 0x180038f67
cmp dword [rsp + 0x3c], 0
jbe 0x180038f67
lea rcx, [rsp + 0x88]
call fcn.180056660
mov edx, dword [rsp + 0x3c]
lea rcx, [rsp + 0x88]
call fcn.18005ce50
lea rcx, [rsp + 0x88]
call fcn.18004eab0
mov rsi, rax
lea rcx, [rsp + 0x88]
call fcn.18004e230
mov rdi, rax
mov rbx, qword [rsp + 0x40]
xor ecx, ecx
mov edx, 0xffd21775
call fcn.180040490
lea r9, [rsp + 0x60]
mov rcx, rbx
mov rdx, rdi
mov r8d, esi
mov qword [rsp + 0x20], 0
call rax
cmp eax, 0
je 0x180038f38
mov ecx, 0xefebfed7
call fcn.18002c000
lea rcx, [rsp + 0xa0]
mov edx, eax
call fcn.180056750
mov rsi, qword [rsp + 0x50]
mov edi, dword [rsp + 0x60]
lea rcx, [rsp + 0x88]
call fcn.18004e230
mov rbx, qword [rsi]
lea r9, [rsp + 0xa0]
mov rcx, rsi
mov rdx, rax
mov r8, rdi
call qword [rbx + 0x18]
cmp eax, 0
je 0x180038f36
mov dword [rsp + 0x34], 2
jmp 0x180038f40
jmp 0x180038f38
mov dword [rsp + 0x34], 0
lea rcx, [rsp + 0x88]
call fcn.180051710
mov eax, dword [rsp + 0x34]
test eax, eax
je 0x180038f65
jmp 0x180038f57
sub eax, 2
je 0x18003908f
jmp 0x1800390da
jmp 0x180038f67
jmp 0x180038f69
lea rcx, [rsp + 0x70]
call fcn.180056660
lea rcx, [rsp + 0x70]
mov edx, 0x1000
call fcn.18005ce50
lea rcx, [rsp + 0xa0]
xor edx, edx
call fcn.180056750
mov rsi, qword [rsp + 0x50]
lea rcx, [rsp + 0x70]
call fcn.18004eab0
mov rdi, rax
lea rcx, [rsp + 0x70]
call fcn.18004e230
mov rbx, qword [rsi]
lea r9, [rsp + 0xa0]
mov rcx, rsi
mov rdx, rax
mov r8, rdi
call qword [rbx + 0x20]
mov dword [rsp + 0x38], eax
cmp eax, 0
jle 0x180039031
mov esi, dword [rsp + 0x38]
lea rcx, [rsp + 0x70]
call fcn.18004e230
mov rcx, qword [rsp + 0x68]
lea r9, [rsp + 0xbc]
mov rdx, rax
mov r8d, esi
mov qword [rsp + 0x20], 0
call qword [sym.imp.KERNEL32.dll_WriteFile]
cmp eax, 0
jne 0x180039012
mov ecx, 0xefeb14b5
call fcn.18002c000
mov dword [rsp + 0x34], eax
jmp 0x180039052
mov rsi, qword [rsp + 0x68]
mov ecx, 0x1a243730
call fcn.18002c000
xor ecx, ecx
mov edx, eax
call fcn.180040490
mov rcx, rsi
call rax
jmp 0x18003904a
cmp dword [rsp + 0x38], 0xfffffff9
je 0x180039048
mov ecx, 0xefeb14b5
call fcn.18002c000
mov dword [rsp + 0x34], eax
jmp 0x180039052
jmp 0x18003904a
mov dword [rsp + 0x34], 0
lea rcx, [rsp + 0x70]
call fcn.180051710
mov eax, dword [rsp + 0x34]
test eax, eax
je 0x18003906d
jmp 0x180039066
sub eax, 2
je 0x18003908f
jmp 0x1800390da
jmp 0x18003906f
call fcn.18004e700
mov r8, qword [rsp + 0x58]
mov rcx, rax
mov edx, 0x64
call fcn.18004ac10
cmp eax, 0xfffffff9
je 0x180038e14
jmp 0x180039091
lea rcx, [rsp + 0x48]
call fcn.1800146c0
mov rsi, rax
xor ecx, ecx
mov edx, 0xfe206bd6
call fcn.180040490
mov rcx, rsi
call rax
mov dword [rsp + 0x34], 0
lea rcx, [rsp + 0xc8]
call fcn.180003230
lea rcx, [rsp + 0x48]
call fcn.180047210
nop
add rsp, 0x9a0
pop rbx
pop rdi
pop rsi
ret
jmp 0x1800390dc
int3