Function at 0x18009cb80
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x100
mov rax, qword [0x180357660]
xor rax, rsp
mov qword [rsp + 0xf0], rax
mov r13d, dword [rsp + 0x170]
mov r14, r9
mov r10, r8
mov qword [rsp + 0x68], r8
mov rbx, rdx
mov qword [rsp + 0x88], rdx
mov rdi, rcx
mov qword [rsp + 0x78], rcx
lea esi, [r13 + 0x608]
mov dword [rsp + 0x60], esi
cmp r13d, esi
jae 0x18009d026
movsxd rbp, dword [rsp + 0x64]
mov r12d, dword [rsp + 0x64]
mov rsi, rbp
mov eax, dword [rsp + 0x60]
nop dword [rax]
nop dword [rax + rax]
cmp r13d, 0x1c8
ja 0x18009ccea
je 0x18009cc9a
mov eax, r13d
sub eax, 0x4d
je 0x18009cc62
sub eax, 0xab
je 0x18009cc49
sub eax, 0xf
je 0x18009cc40
cmp eax, 7
mov eax, dword [rsp + 0x60]
jne 0x18009d006
mov dword [r10], ILClone
jmp 0x18009d006
xor ebp, ebp
xor esi, esi
jmp 0x18009d002
movsxd r8, dword [rdi]
mov r9, r14
mov edx, 1
mov rcx, r10
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
jmp 0x18009cffd
xor r9d, r9d
mov qword [rsp + 0x70], ILClone
lea rax, [rsp + 0x70]
xor r8d, r8d
xor ecx, ecx
mov qword [rsp + 0x20], rax
lea edx, [r9 + 0x4c]
call fcn.18003ad60
mov rcx, rax
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetLocalTime]
mov qword [r14], rbx
jmp 0x18009cffd
mov eax, dword [rdi]
xor r12d, r12d
test eax, eax
js 0x18009cce3
mov rcx, qword [rsp + 0x160]
mov ecx, dword [rcx]
test ecx, ecx
js 0x18009cce3
mov r8d, dword [r14 + 8]
cmp eax, r8d
jge 0x18009cce3
mov edx, dword [r14 + 0xc]
cmp ecx, edx
jge 0x18009cce3
mov rax, qword [rsp + 0x168]
mov eax, dword [rax]
test eax, eax
js 0x18009cce3
mov ecx, dword [rbx]
test ecx, ecx
js 0x18009cce3
cmp eax, r8d
jge 0x18009cce3
cmp ecx, edx
jl 0x18009d002
xor eax, eax
jmp 0x18009d02a
movsxd r15, r12d
cmp r13d, 0x289
je 0x18009ceae
cmp r13d, 0x34a
je 0x18009cd11
cmp r13d, 0x40b
je 0x18009cce3
jmp 0x18009d006
mov rax, qword [rsp + 0x160]
mov r11d, dword [rbx]
mov edx, dword [rax]
cmp edx, r11d
jg 0x18009cdbe
mov ebx, dword [rdi]
lea r8, [rsp + 0xb0]
mov rax, qword [rsp + 0x168]
lea r8, [r8 + r15*8]
lea r9d, [rbx - 2]
mov edi, dword [rax]
lea r10d, [rdi + 2]
test r9d, r9d
js 0x18009cd7c
test edx, edx
js 0x18009cd7c
mov eax, dword [r14 + 8]
cmp r9d, eax
jge 0x18009cd7c
cmp edx, dword [r14 + 0xc]
jge 0x18009cd7c
imul eax, edx
inc r12d
add eax, 0xfffffffe
add eax, ebx
movsxd rcx, eax
imul rax, rcx, 0x1c
add rax, qword [r14 + 0x10]
mov qword [r8], rax
add r8, 8
test r10d, r10d
js 0x18009cdb1
test edx, edx
js 0x18009cdb1
mov eax, dword [r14 + 8]
cmp r10d, eax
jge 0x18009cdb1
cmp edx, dword [r14 + 0xc]
jge 0x18009cdb1
imul eax, edx
inc r12d
add eax, 2
add eax, edi
movsxd rcx, eax
imul rax, rcx, 0x1c
add rax, qword [r14 + 0x10]
mov qword [r8], rax
add r8, 8
add edx, 2
cmp edx, r11d
jle 0x18009cd47
mov r10, qword [rsp + 0x68]
mov qword [rsp + 0x50], 0
lea rax, [rsp + 0xb0]
mov qword [rsp + 0x48], 0
xor r9d, r9d
mov qword [rsp + 0x40], 0
xor r8d, r8d
mov qword [rsp + 0x38], rax
mov rcx, r10
lea rax, [rsp + 0x80]
mov dword [rsp + 0x70], 8
mov qword [rsp + 0x30], rax
lea edx, [r9 + 0x14]
lea rax, [rsp + 0x70]
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x80], r12d
call fcn.1800a8130
xor ebx, ebx
movsxd rdi, r12d
test r12d, r12d
jle 0x18009cff8
nop word [rax + rax]
mov rcx, qword [rsp + rbx*8 + 0xb0]
test byte [rcx + 0xc], 4
je 0x18009cea1
mov eax, dword [rcx + 0x14]
imul eax, dword [r14 + 8]
add eax, dword [rcx + 0x10]
cdqe
imul r9, rax, 0x1c
mov eax, dword [rsp + 0x64]
add r9, qword [r14 + 0x10]
cmp dword [r9 + 0x18], eax
jge 0x18009cea1
lea rax, [rsp + 0x90]
mov dword [rsp + 0x70], ebp
mov qword [rsp + 0x28], rax
lea rdx, [rsp + 0x70]
mov r8, r14
mov qword [rsp + 0x20], 0
mov ecx, 6
call fcn.18004b1d0
test eax, eax
jne 0x18009d01f
inc rbx
cmp rbx, rdi
jl 0x18009ce40
jmp 0x18009cff8
mov eax, dword [r14 + 4]
imul eax, dword [r14]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrt
mov r10d, dword [rdi]
mov r9d, r10d
cvttsd2si eax, xmm0
add eax, eax
mov dword [rsp + 0x64], eax
mov rax, qword [rsp + 0x168]
mov edi, dword [rax]
cmp r10d, edi
jg 0x18009cff8
mov rax, qword [rsp + 0x160]
mov ebx, dword [rax]
mov rax, qword [rsp + 0x88]
mov r11d, dword [rax]
nop dword [rax + rax]
mov r8d, ebx
cmp ebx, r11d
jg 0x18009cf5c
nop dword [rax + rax]
mov ecx, 0xa0
cmp ecx, 0xa1
jne 0x18009cf49
mov eax, dword [r14 + 8]
imul eax, r8d
add eax, r9d
cdqe
imul rdx, rax, 0x1c
add rdx, qword [r14 + 0x10]
test byte [rdx + 0xc], 4
jne 0x18009cce3
inc ebp
mov qword [rsp + rsi*8 + 0x90], rdx
inc rsi
inc ecx
cmp ecx, 0xa2
jb 0x18009cf15
add r8d, 2
cmp r8d, r11d
jle 0x18009cf10
add r9d, 2
cmp r9d, edi
jle 0x18009cf00
mov rbx, qword [rsp + 0x88]
cmp r10d, edi
jg 0x18009cff8
lea rdx, [rsp + 0xb0]
lea rdx, [rdx + r15*8]
test r10d, r10d
js 0x18009cfef
mov rax, qword [rsp + 0x160]
mov eax, dword [rax]
add eax, 0xfffffffe
js 0x18009cfbf
mov ecx, dword [r14 + 8]
cmp r10d, ecx
jge 0x18009cfbf
cmp eax, dword [r14 + 0xc]
jge 0x18009cfbf
imul eax, ecx
inc r12d
add eax, r10d
cdqe
imul rcx, rax, 0x1c
add rcx, qword [r14 + 0x10]
mov qword [rdx], rcx
add rdx, 8
mov eax, dword [rbx]
add eax, 2
js 0x18009cfef
mov ecx, dword [r14 + 8]
cmp r10d, ecx
jge 0x18009cfef
cmp eax, dword [r14 + 0xc]
jge 0x18009cfef
imul eax, ecx
inc r12d
add eax, r10d
cdqe
imul rcx, rax, 0x1c
add rcx, qword [r14 + 0x10]
mov qword [rdx], rcx
add rdx, 8
add r10d, 2
cmp r10d, edi
jle 0x18009cf82
mov rdi, qword [rsp + 0x78]
mov r10, qword [rsp + 0x68]
mov eax, dword [rsp + 0x60]
add r13d, 0xc1
cmp r13d, eax
jae 0x18009d026
mov rbx, qword [rsp + 0x88]
jmp 0x18009cc00
mov eax, 1
jmp 0x18009d02a
mov eax, dword [rsp + 0x64]
mov rcx, qword [rsp + 0xf0]
xor rcx, rsp
call fcn.1800bfa40
mov rbx, qword [rsp + 0x148]
add rsp, 0x100
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret