Function at 0x140001070
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xb0
mov rax, qword [section..data]
xor rax, rsp
mov qword [rsp + 0xa8], rax
mov r13d, r8d
mov dword [rsp + 0x50], edx
mov r14d, edx
lea r8, [rsp + 0x78]
mov edx, 0x20
mov r12d, r9d
mov rbx, rcx
call qword [sym.imp.GDI32.dll_GetObjectW]
mov eax, dword [rsp + 0x7c]
xor ecx, ecx
cdq
sub eax, edx
sar eax, 1
mov esi, eax
mov dword [rsp + 0x4c], eax
mov eax, dword [rsp + 0x80]
cdq
sub eax, edx
sar eax, 1
mov ebp, eax
mov dword [rsp + 0x48], eax
call qword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov rcx, rax
mov qword [rsp + 0x58], rax
mov rdx, rbx
mov rdi, rax
call qword [sym.imp.GDI32.dll_SelectObject]
mov qword [rsp + 0x68], rax
mov eax, r12d
neg eax
mov dword [rsp + 0x60], eax
mov r15d, eax
cmp eax, r12d
jg 0x1400012ae
mov ecx, r15d
mov edx, r12d
imul ecx, r15d
mov ebx, eax
imul edx, r12d
mov dword [rsp + 0x40], ecx
mov dword [rsp + 0x44], edx
nop dword [rax + rax]
mov eax, ebx
imul eax, ebx
add eax, ecx
cmp eax, edx
jg 0x140001293
lea r8d, [rbx + rbp]
mov rcx, rdi
lea edx, [r15 + rsi]
call qword [sym.imp.GDI32.dll_GetPixel]
movzx ecx, r14b
mov r8d, eax
movzx ebp, al
mov edx, ebp
sub edx, ecx
mov ecx, edx
neg ecx
cmovs ecx, edx
cmp ecx, r13d
jg 0x140001287
movzx edi, r8w
mov ecx, edi
movzx eax, r14w
shr eax, 8
shr ecx, 8
sub ecx, eax
mov eax, ecx
neg eax
cmovs eax, ecx
cmp eax, r13d
jg 0x140001282
shr r8d, 0x10
mov eax, r14d
shr eax, 0x10
movzx ecx, al
movzx esi, r8b
mov edx, esi
sub edx, ecx
mov eax, edx
neg eax
cmovs eax, edx
cmp eax, r13d
jg 0x14000127e
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.Shoot
call fcn.140001850
mov rcx, rax
lea rdx, [0x140001a30]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xor eax, eax
lea rcx, str..pipeToxicTrigger
mov qword [rsp + 0x30], rax
xor r9d, r9d
mov dword [rsp + 0x28], eax
xor r8d, r8d
mov edx, 0x40000000
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov r14, rax
cmp rax, 0xffffffffffffffff
je 0x140001279
mov ecx, edi
mov dword [rsp + 0x28], esi
shr ecx, 8
lea r8, str.shoot
mov dword [rsp + 0x20], ecx
mov r9d, ebp
lea rcx, [rsp + 0x98]
mov edx, 0x10
call fcn.140001010
lea rax, [rsp + 0x98]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x140001244
inc r8d
mov qword [rsp + 0x20], 0
lea r9, [rsp + 0x70]
mov rcx, r14
lea rdx, [rsp + 0x98]
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r14d, dword [rsp + 0x50]
mov esi, dword [rsp + 0x4c]
mov rdi, qword [rsp + 0x58]
mov ecx, dword [rsp + 0x40]
mov edx, dword [rsp + 0x44]
mov ebp, dword [rsp + 0x48]
inc ebx
cmp ebx, r12d
jle 0x140001130
mov eax, dword [rsp + 0x60]
inc r15d
cmp r15d, r12d
jle 0x140001110
mov rdx, qword [rsp + 0x68]
mov rcx, rdi
call qword [sym.imp.GDI32.dll_SelectObject]
mov rcx, rdi
call qword [sym.imp.GDI32.dll_DeleteDC]
mov rcx, qword [rsp + 0xa8]
xor rcx, rsp
call fcn.140001a80
mov rbx, qword [rsp + 0xf8]
add rsp, 0xb0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret