Function at 0x180143400
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r14
push r15
lea rbp, [rsp - 0x47]
sub rsp, 0xc0
xor esi, esi
mov r14d, r8d
mov rdi, rdx
mov r15, rcx
mov ebx, esi
test rdx, rdx
je 0x1801435ff
mov rax, qword [rcx + 0xf0]
mov rcx, rdx
call rax
cmp eax, 0xffffffff
je 0x1801435ff
test r14d, r14d
je 0x1801435ec
movabs rax, 0x587f9cbbfb40fa25
mov dword [rbp - 0x49], 0x2d35d26
mov qword [rbp - 0x39], rax
lea rdx, [rbp - 0x49]
movabs rax, 0x4cd26b1c7cbe127c
mov dword [rbp - 0x45], 0x3bc540fb
mov qword [rbp - 0x31], rax
lea rcx, [rbp - 0x11]
movabs rax, 0x595121b5db376926
mov dword [rbp - 0x41], 0x48beb8f3
mov qword [rbp - 0x29], rax
mov dword [rbp - 0x3d], 0x33c
call fcn.18000bbb0
movups xmm1, xmmword [rax]
mov rax, 0xffffffffffffffff
mov rcx, rax
movups xmmword [rbp + 0x17], xmm1
nop dword [rax + rax]
inc rcx
cmp word [rdi + rcx*2], bx
jne 0x1801434c0
lea rdx, [rbp + 0x17]
nop dword [rax]
cmp word [rdx + rax*2 + 2], bx
lea rax, [rax + 1]
jne 0x1801434d0
lea r14, [rax + 1]
add r14, rcx
lea rbx, [r14 + r14]
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, rbx
mov edx, 8
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov rbx, rax
test rax, rax
je 0x1801436a2
lea rax, [rbp + 0x17]
mov r9, rdi
lea r8, str._ws_ws
mov qword [rsp + 0x20], rax
mov rdx, r14
mov rcx, rbx
call fcn.180001080
mov rax, qword [r15 + 0x198]
xor r8d, r8d
mov rdx, rbx
mov rcx, rdi
call rax
test eax, eax
lea rdx, [rbp - 0x49]
movabs rax, 0xf5d06b73146ce1d
mov qword [rbp - 0x29], rax
movabs rax, 0xc0bc83244ed08cac
mov qword [rbp - 0x21], rax
movabs rax, 0xba45525d99e91831
mov qword [rbp - 0x19], rax
je 0x18014361f
movdqa xmm0, xmmword [0x1801621e0]
lea rcx, [rbp + 0x17]
movdqa xmm1, xmmword [0x180162000]
movdqu xmmword [rbp - 0x49], xmm0
movdqu xmmword [rbp - 0x39], xmm1
call fcn.18000bce0
mov r9, rdi
lea r8, [rbp - 0x11]
mov edx, 0x100000
lea rcx, [0x18017bd90]
movups xmm2, xmmword [rax]
movups xmmword [rbp - 0x11], xmm2
movups xmm0, xmmword [rax + 0x10]
movups xmmword [rbp - 1], xmm0
movzx eax, byte [rax + 0x20]
mov byte [rbp + 0xf], al
call fcn.1800010e0
mov rcx, qword [0x18017bd78]
lea r9, [0x18017bd80]
mov r8d, eax
mov dword [0x18017bd84], eax
lea rdx, [0x18017bd90]
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rdi, rbx
mov rcx, rdi
call fcn.180146d30
mov rcx, rbx
mov rsi, rax
call fcn.180146f60
mov rax, rsi
lea r11, [rsp + 0xc0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
movdqa xmm0, xmmword [0x1801621c0]
lea rcx, [rbp + 0x17]
movdqa xmm1, xmmword [0x180160400]
movdqu xmmword [rbp - 0x49], xmm0
movdqu xmmword [rbp - 0x39], xmm1
call fcn.18000bfb0
mov r9, rdi
lea r8, [rbp - 0x11]
mov edx, 0x100000
lea rcx, [0x18017bd90]
movups xmm1, xmmword [rax]
movups xmmword [rbp - 0x11], xmm1
movsd xmm0, qword [rax + 0x10]
movsd qword [rbp - 1], xmm0
mov eax, dword [rax + 0x18]
mov dword [rbp + 7], eax
call fcn.1800010e0
mov rcx, qword [0x18017bd78]
lea r9, [0x18017bd80]
mov r8d, eax
mov dword [0x18017bd84], eax
lea rdx, [0x18017bd90]
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, rbx
call fcn.180146f60
xor eax, eax
jmp 0x180143602