Function at 0x18007a1c0
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x50]
sub rsp, 0x150
mov rax, qword [0x18026b028]
xor rax, rsp
mov qword [rbp + 0x40], rax
mov ecx, dword [0x180399320]
mov rbx, rdx
mov rax, qword gs:[0x58]
mov rsi, r9
mov edx, 4
mov rdi, r8
movabs r12, 0xb87bc3aa13c2c047
movabs r13, 0x4092d29bcc707c7c
movabs r15, 0xca0b21d14b73a0ee
movabs r14, 0xabdbdea77899cd00
mov rax, qword [rax + rcx*8]
mov eax, dword [rdx + rax]
cmp dword [0x18039f660], eax
jle 0x18007a4c0
lea rcx, [0x18039f660]
call fcn.18015d060
cmp dword [0x18039f660], 0xffffffff
jne 0x18007a4c0
movabs rax, 0xfb4ee3932be2f873
movabs rcx, 0x284597e0d4a24279
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x70], rax
movabs rax, 0x74b2eaabec444e5c
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x68], rax
movabs rax, 0x871a0c0ed9a6241
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x60], rax
movabs rax, 0xfd3e01e17a5394dc
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x58], rax
movabs rax, 0x358f88aedaf2ddab
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x50], rax
movabs rax, 0x8b9dee8748abed43
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x48], rax
movabs rax, 0xb66e4a3d91bd465f
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x40], rax
movabs rax, 0x1ceb8f5d7e535712
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x38], rax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], r13
mov qword [rbp], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rcx
mov qword [rbp + 8], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x10], rax
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x18], rax
movabs rax, 0x70afbb96facae98b
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x20], rax
mov qword [rsp + 0x30], r14
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x28], rax
movabs rax, 0x815d6a0ca59d701d
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x30], rax
movabs rax, 0x1ceb8f5d7e606432
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
movdqa xmm0, xmmword [rbp - 0x70]
movdqa xmm1, xmmword [rbp - 0x60]
xorps xmm0, xmmword [rbp]
xorps xmm1, xmmword [rbp + 0x10]
mov qword [rbp + 0x38], rax
movabs rax, 0xb81ec3c313aec024
movdqa xmmword [rbp - 0x70], xmm0
movdqa xmm0, xmmword [rbp - 0x50]
xorps xmm0, xmmword [rbp + 0x20]
movdqa xmmword [rbp - 0x60], xmm1
movdqa xmm1, xmmword [rbp - 0x40]
xorps xmm1, xmmword [rbp + 0x30]
movdqa xmmword [rbp - 0x50], xmm0
movdqa xmmword [rbp - 0x40], xmm1
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x70], rax
movabs rax, 0x40f6d2b5cc047c12
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x78], rax
movabs rax, 0x284597e0d4ce4215
mov qword [rsp + 0x30], rax
lea rdx, [rbp - 0x70]
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x80], rax
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x78], rax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x30], r13
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x30], rcx
lea rcx, [rsp + 0x70]
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
movdqa xmm0, xmmword [rsp + 0x70]
movdqa xmm1, xmmword [rbp - 0x80]
xorps xmm0, xmmword [rsp + 0x40]
mov qword [rsp + 0x58], rax
xorps xmm1, xmmword [rsp + 0x50]
movdqa xmmword [rsp + 0x70], xmm0
movdqa xmmword [rbp - 0x80], xmm1
call fcn.1800fa0c0
lea rcx, [0x18039f660]
mov qword [0x18039f708], rax
call fcn.18015cff4
mov r10, qword [0x18039f708]
test r10, r10
jne 0x18007a644
mov dl, 2
call fcn.1800f8110
movabs rax, 0xd11d9ccf70a3b233
lea rdx, [rsp + 0x40]
mov qword [rsp + 0x30], rax
mov r8d, edx
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x40], rax
movabs rax, 0x9b2a6c4be150810
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x48], rax
movabs rax, 0x5b65f389b8c33417
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x50], rax
movabs rax, 0xaf7954a52a1dc787
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x58], rax
movabs rax, 0x70afbb96facae9aa
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x30], r14
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x30], r12
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], r13
mov qword [rbp - 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x28], rax
movabs rax, 0x284597e0d4a24279
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x20], rax
mov qword [rsp + 0x30], r15
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x18], rax
movabs rax, 0x70afbb96facae98b
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x10], rax
mov qword [rsp + 0x30], r14
mov rax, qword [rsp + 0x30]
movdqa xmm2, xmmword [rsp + 0x40]
xorps xmm2, xmmword [rbp - 0x30]
movdqa xmm0, xmmword [rsp + 0x50]
movq rcx, xmm2
movdqa xmm1, xmmword [rsp + 0x60]
xorps xmm0, xmmword [rbp - 0x20]
mov qword [rbp - 8], rax
lea rax, [rsp + 0x40]
xorps xmm1, xmmword [rbp - 0x10]
movdqa xmmword [rsp + 0x40], xmm2
movdqa xmmword [rsp + 0x50], xmm0
movdqa xmmword [rsp + 0x60], xmm1
test cl, cl
je 0x18007a61c
inc rax
mov r8, rax
cmp byte [rax], 0
jne 0x18007a611
mov rcx, qword [0x18034cf40]
sub r8d, edx
lea rdx, [rsp + 0x40]
mov qword [rsp + 0x20], 0
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov r10, qword [0x18039f708]
movzx eax, word [rbp + 0xb8]
mov r8, rsi
movzx r9d, byte [rbp + 0xb0]
mov rdx, rdi
mov rcx, rbx
mov word [rsp + 0x20], ax
call r10
mov rcx, qword [rbp + 0x40]
xor rcx, rsp
call fcn.18015cd30
mov rbx, qword [rsp + 0x190]
add rsp, 0x150
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret