Function at 0x18013db10
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], r9
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x50]
sub rsp, 0x150
mov r14, rdx
mov r12, rcx
xor edx, edx
mov rcx, r8
mov rdi, r8
call fcn.180026950
xor edx, edx
mov rcx, rdi
mov esi, eax
call fcn.180026700
mov r15, rax
test rax, rax
je 0x18013df43
test esi, esi
je 0x18013df43
xor ebx, ebx
mov qword [rsp + 0x180], r13
mov qword [rsp + 0x50], rbx
test r14, r14
je 0x18013dbbd
mov r9, r14
mov r8d, esi
mov rdx, rax
mov rcx, r12
call fcn.180143c00
mov rsi, rax
test rax, rax
jne 0x18013dd56
xor eax, eax
mov r13, qword [rsp + 0x180]
lea r11, [rsp + 0x150]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
movdqa xmm0, xmmword [0x180161d40]
lea rdx, [rsp + 0x60]
movdqa xmm1, xmmword [0x1801614a0]
lea rcx, [rbp - 0x60]
xor eax, eax
mov dword [rsp + 0x58], ebx
movabs r14, 0xf5d06b73146ce1d
mov dword [rbp - 0x7e], eax
movabs r12, 0xf61df23882b5854e
mov word [rbp - 0x7a], ax
movabs r13, 0x16caef8e541171c4
mov qword [rbp - 0x78], r14
movdqu xmmword [rsp + 0x60], xmm0
mov qword [rbp - 0x70], r12
movdqu xmmword [rsp + 0x70], xmm1
mov qword [rbp - 0x68], r13
mov word [rbp - 0x80], 0xc105
call fcn.180004ca0
lea r8, [rbp + 0x18]
mov edx, 0x100000
movups xmm2, xmmword [rax]
movups xmmword [rbp + 0x18], xmm2
movups xmm0, xmmword [rax + 0x10]
movups xmmword [rbp + 0x28], xmm0
movzx ecx, word [rax + 0x20]
mov word [rbp + 0x38], cx
lea rcx, [0x18017bd90]
movzx eax, byte [rax + 0x22]
mov byte [rbp + 0x3a], al
call fcn.1800010e0
mov rcx, qword [0x18017bd78]
lea r9, [0x18017bd80]
mov r8d, eax
mov dword [0x18017bd84], eax
lea rdx, [0x18017bd90]
mov qword [rsp + 0x20], rbx
call qword [sym.imp.KERNEL32.dll_WriteFile]
lea r9, [rsp + 0x58]
mov edx, esi
lea r8, [rsp + 0x50]
mov rcx, r15
call fcn.180140ac0
test eax, eax
jne 0x18013dd51
movdqa xmm0, xmmword [0x180161d20]
lea rdx, [rbp - 0x38]
movdqa xmm1, xmmword [0x180160ba0]
lea rcx, [rbp + 0x18]
xor eax, eax
mov word [rbp - 8], 0xd1ab
movdqu xmmword [rbp - 0x38], xmm0
mov byte [rbp - 6], 0x7e
movdqa xmm0, xmmword [0x180162330]
movdqu xmmword [rbp - 0x18], xmm0
mov dword [rbp - 5], eax
movdqu xmmword [rbp - 0x28], xmm1
mov byte [rbp - 1], al
mov qword [rbp], r14
mov qword [rbp + 8], r12
mov qword [rbp + 0x10], r13
call fcn.18000b5b0
lea r8, [rsp + 0x60]
mov edx, 0x100000
lea rcx, [0x18017bd90]
movups xmm2, xmmword [rax]
movups xmmword [rsp + 0x60], xmm2
movups xmm0, xmmword [rax + 0x10]
movups xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [rax + 0x20]
movups xmmword [rbp - 0x80], xmm1
mov eax, dword [rax + 0x30]
mov dword [rbp - 0x70], eax
call fcn.1800010e0
mov rcx, qword [0x18017bd78]
lea r9, [0x18017bd80]
mov r8d, eax
mov dword [0x18017bd84], eax
lea rdx, [0x18017bd90]
mov qword [rsp + 0x20], rbx
call qword [sym.imp.KERNEL32.dll_WriteFile]
jmp 0x18013db97
mov rsi, qword [rsp + 0x50]
mov edx, 5
mov rcx, rdi
call fcn.180026830
test rax, rax
lea rbx, [0x18015f0aa]
mov rcx, rbx
cmovne rcx, rax
test rcx, rcx
je 0x18013dd92
mov edx, 5
mov rcx, rdi
call fcn.180026830
test rax, rax
mov r13, rbx
cmovne r13, rax
jmp 0x18013dd95
mov r13, rbx
mov edx, 4
mov rcx, rdi
call fcn.180026830
test rax, rax
mov rcx, rbx
cmovne rcx, rax
test rcx, rcx
je 0x18013ddca
mov edx, 4
mov rcx, rdi
call fcn.180026830
test rax, rax
mov r12, rbx
cmovne r12, rax
jmp 0x18013ddcd
mov r12, rbx
mov edx, 1
mov rcx, rdi
call fcn.180026830
test rax, rax
mov rcx, rbx
cmovne rcx, rax
test rcx, rcx
je 0x18013de02
mov edx, 1
mov rcx, rdi
call fcn.180026830
test rax, rax
mov r15, rbx
cmovne r15, rax
jmp 0x18013de05
mov r15, rbx
mov edx, 2
mov rcx, rdi
call fcn.180026830
test rax, rax
mov rcx, rbx
cmovne rcx, rax
test rcx, rcx
je 0x18013de3a
mov edx, 2
mov rcx, rdi
call fcn.180026830
test rax, rax
mov r14, rbx
cmovne r14, rax
jmp 0x18013de3d
mov r14, rbx
mov edx, 3
mov rcx, rdi
call fcn.180026830
test rax, rax
mov rcx, rbx
cmovne rcx, rax
test rcx, rcx
je 0x18013de6d
mov edx, 3
mov rcx, rdi
call fcn.180026830
test rax, rax
cmovne rbx, rax
mov rcx, 0xffffffffffffffff
mov rax, rcx
inc rax
cmp byte [rbx + rax], 0
jne 0x18013de77
mov rdx, rcx
inc rdx
cmp byte [r14 + rdx], 0
jne 0x18013de83
add rax, rdx
mov rdx, rcx
inc rdx
cmp byte [r15 + rdx], 0
jne 0x18013de93
add rax, rdx
mov rdx, rcx
inc rdx
cmp byte [r12 + rdx], 0
jne 0x18013dea3
add rax, rdx
mov rdx, rcx
inc rdx
cmp byte [rdx + r13], 0
jne 0x18013deb3
add rax, rdx
cmp byte [rsi + rcx + 1], 0
lea rcx, [rcx + 1]
jne 0x18013dec0
lea rdi, [rcx + 0x1e]
add rdi, rax
mov qword [rsp + 0x50], rdi
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, rdi
mov edx, 8
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov rdi, rax
test rax, rax
je 0x18013df33
mov rdx, qword [rsp + 0x50]
lea r8, str._s_t_s_t_s_t_s_t_s_t_s_n
mov qword [rsp + 0x40], rsi
mov r9, r13
mov qword [rsp + 0x38], rbx
mov rcx, rax
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r12
call fcn.1800010e0
movsxd rdx, eax
mov rax, qword [rbp + 0x98]
mov qword [rax], rdx
mov rcx, rsi
call fcn.180146f60
mov rax, rdi
jmp 0x18013db99
movdqa xmm0, xmmword [0x180161c80]
lea rdx, [rsp + 0x60]
movabs rax, 0x53a4a43623c65917
mov dword [rsp + 0x70], 0xdf3d229a
mov qword [rsp + 0x78], rax
lea rcx, [rbp + 0x18]
movabs rax, 0xd42e5d227ec548f6
mov dword [rsp + 0x74], 0x824
mov qword [rbp - 0x80], rax
movabs rax, 0xbc175a171ae1c518
mov qword [rbp - 0x78], rax
movdqu xmmword [rsp + 0x60], xmm0
call fcn.1800101e0
lea r8, [rbp - 0x60]
mov edx, 0x100000
movups xmm1, xmmword [rax]
movups xmmword [rbp - 0x60], xmm1
mov ecx, dword [rax + 0x10]
mov dword [rbp - 0x50], ecx
movzx ecx, word [rax + 0x14]
mov word [rbp - 0x4c], cx
lea rcx, [0x18017bd90]
movzx eax, byte [rax + 0x16]
mov byte [rbp - 0x4a], al
call fcn.1800010e0
mov rcx, qword [0x18017bd78]
lea r9, [0x18017bd80]
xor ebx, ebx
mov dword [0x18017bd84], eax
mov r8d, eax
mov qword [rsp + 0x20], rbx
lea rdx, [0x18017bd90]
call qword [sym.imp.KERNEL32.dll_WriteFile]
xor eax, eax
jmp 0x18013dba1