Function at 0x180007b90
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x1c0
mov rax, qword [0x180045010]
xor rax, rsp
mov qword [rsp + 0x1b0], rax
mov rcx, qword [0x180047050]
xor esi, esi
mov rdi, 0xffffffffffffffff
mov eax, dword [rcx + 0xbb0b44]
bt eax, 0xb
jae 0x180007f43
btr eax, 0xb
mov dword [rcx + 0xbb0b44], eax
call fcn.1800125e0
mov r8, qword [0x180047050]
mov eax, 0x10
mov r9d, dword [r8 + 0x12ca39c]
test r9d, r9d
mov edx, dword [r8 + 0x4174750]
mov dword [r8 + 0x12ca3a0], r9d
cmove r9d, eax
mov eax, dword [r8 + 0x4174754]
cmp edx, eax
je 0x180007c1f
mov dword [r8 + 0x4174750], eax
mov edx, eax
cmp r9d, 0x10
jne 0x180007c62
mov ecx, dword [r8 + 0x41746f8]
mov eax, edx
cmp ecx, 1
jne 0x180007c41
cmp dword [r8 + 0x12ca3ac], ecx
jne 0x180007c41
cmp edx, 0xc
jl 0x180007c56
mov edx, eax
test ecx, ecx
jne 0x180007c62
cmp dword [r8 + 0x12ca3a8], 1
jne 0x180007c62
cmp eax, 0xc
jge 0x180007c62
mov edx, 0xc
mov dword [r8 + 0x4174750], edx
mov eax, dword [r8 + 0x5c]
lea rcx, [r8 + 0x12c92e0]
movsd xmm0, qword [r8 + 8]
movsd xmm3, qword [r8 + 0x12ca330]
mov dword [rsp + 0x118], r9d
movq r9, xmm3
mov dword [rsp + 0x110], 0x2c
mov dword [rsp + 0x108], eax
mov eax, dword [r8 + 0x60]
mov dword [rsp + 0x100], 0x2c
mov dword [rsp + 0xf8], eax
mov eax, dword [r8 + 0x50]
mov dword [rsp + 0xf0], 0x2c
mov dword [rsp + 0xe8], eax
mov eax, dword [r8 + 0x12ca308]
mov dword [rsp + 0xe0], 0x2c
mov dword [rsp + 0xd8], eax
mov eax, dword [r8 + 0x12ca328]
mov dword [rsp + 0xd0], 0x2c
mov dword [rsp + 0xc8], eax
mov eax, dword [r8 + 0x12ca30c]
mov dword [rsp + 0xc0], 0x2c
mov dword [rsp + 0xb8], eax
mov eax, dword [r8 + 0x12ca310]
mov dword [rsp + 0xb0], 0x2c
mov dword [rsp + 0xa8], eax
mov eax, dword [r8 + 0x12ca318]
mov dword [rsp + 0xa0], 0x2c
mov dword [rsp + 0x98], eax
mov eax, dword [r8 + 0x12ca324]
mov dword [rsp + 0x90], 0x2c
mov dword [rsp + 0x88], eax
mov eax, dword [r8]
mov dword [rsp + 0x80], 0x2c
mov dword [rsp + 0x78], edx
lea rdx, str.B290START_c_.3lf_c_d_c_lf_c_d_c_d_c_d_c_d_c_d_c_d_c_d_c_d_c_d_c_d_c_d_c_d_c_d_c_d_r
mov dword [rsp + 0x70], 0x2c
mov dword [rsp + 0x68], eax
mov eax, dword [r8 + 0x10]
mov dword [rsp + 0x60], 0x2c
mov dword [rsp + 0x58], eax
mov eax, dword [r8 + 0x12ca2fc]
mov dword [rsp + 0x50], 0x2c
mov dword [rsp + 0x48], eax
mov eax, dword [r8 + 0x14]
mov r8d, 0x2c
mov dword [rsp + 0x40], 0x2c
movsd qword [rsp + 0x38], xmm0
mov dword [rsp + 0x30], 0x2c
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 0x2c
call fcn.180001120
mov rcx, qword [0x180047050]
cmp dword [rcx + 0x12ca2f8], 1
jne 0x180007e30
mov rbx, qword [rcx + 0x4174770]
cmp dword [rbx + 8], 1
je 0x180007e30
lea rdx, [rcx + 0x12c92e0]
mov r8, rdi
nop dword [rax]
inc r8
cmp byte [rdx + r8], sil
jne 0x180007e00
mov rcx, qword [rbx + 0xe00028]
lea r9, [rsp + 0x120]
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, qword [0x180047050]
mov dword [rbx + 0xe00020], esi
movups xmm0, xmmword [rcx + 0x600900]
mov eax, dword [rcx + 0x4174690]
xor edx, edx
movups xmm1, xmmword [rcx + 0x600910]
mov dword [rcx + 0x417468c], eax
mov r8d, 0x2d40000
mov rax, qword [rcx + 0x98]
movups xmmword [rcx + 0x6008a0], xmm0
mov qword [rcx + 0x88], rax
movups xmm0, xmmword [rcx + 0x600920]
movups xmmword [rcx + 0x6008b0], xmm1
movups xmm1, xmmword [rcx + 0x600930]
movups xmmword [rcx + 0x6008c0], xmm0
movups xmm0, xmmword [rcx + 0x600940]
movups xmmword [rcx + 0x6008d0], xmm1
movups xmm1, xmmword [rcx + 0x600950]
movups xmmword [rcx + 0x6008e0], xmm0
movups xmm0, xmmword [rcx + 0x6009c0]
movups xmmword [rcx + 0x6008f0], xmm1
movups xmm1, xmmword [rcx + 0x6009d0]
movups xmmword [rcx + 0x600960], xmm0
movups xmm0, xmmword [rcx + 0x6009e0]
movups xmmword [rcx + 0x600970], xmm1
movups xmm1, xmmword [rcx + 0x6009f0]
movups xmmword [rcx + 0x600980], xmm0
movups xmm0, xmmword [rcx + 0x600a00]
movups xmmword [rcx + 0x600990], xmm1
movups xmm1, xmmword [rcx + 0x600a10]
movups xmmword [rcx + 0x6009a0], xmm0
movups xmmword [rcx + 0x6009b0], xmm1
add rcx, 0x1434678
call fcn.1800169c0
call fcn.1800029c0
call fcn.180010560
mov rdx, qword [0x180047050]
mov eax, dword [rdx + 0x14]
mov dword [rdx + 0x41746c0], eax
call fcn.18000e5c0
call fcn.180010000
call qword [sym.imp.WINMM.dll_timeGetTime]
mov rcx, qword [0x180047050]
mov dword [rcx + 0x12ca37c], eax
mov dword [rcx + 0x41746f4], esi
mov eax, dword [rcx + 0xbb0b44]
bt eax, 0xf
jae 0x180008122
btr eax, 0xf
mov dword [rcx + 0xbb0b44], eax
call fcn.1800125e0
mov rcx, qword [0x180047050]
cmp dword [rcx + 0x41746fc], 1
jne 0x180007fb7
lea rdx, [rsp + 0x130]
mov dword [rcx + 0x41746fc], esi
call fcn.180011200
mov rcx, qword [0x180047050]
lea r8, [rsp + 0x130]
add rcx, 0x12c92e0
mov dword [rsp + 0x20], 0xa
mov r9d, 0xd
lea rdx, str.STARTMAP__s_c_c
call fcn.180001120
jmp 0x180007fd4
mov r9d, 0xa
lea rdx, str.STARTMAP_c_c
add rcx, 0x12c92e0
lea r8d, [r9 + 3]
call fcn.180001120
mov rdx, qword [0x180047050]
cmp dword [rdx + 0x12ca2f8], 1
jne 0x180008029
mov rbx, qword [rdx + 0x4174770]
cmp dword [rbx + 8], 1
je 0x180008029
add rdx, 0x12c92e0
mov r8, rdi
nop dword [rax + rax]
inc r8
cmp byte [rdx + r8], sil
jne 0x180008000
mov rcx, qword [rbx + 0xe00028]
lea r9, [rsp + 0x120]
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov dword [rbx + 0xe00020], esi
call fcn.1800123b0
mov rcx, qword [0x180047050]
xor edx, edx
mov r8d, 0x2d40000
movups xmm0, xmmword [rcx + 0x600900]
mov eax, dword [rcx + 0x4174690]
movups xmm1, xmmword [rcx + 0x600910]
mov dword [rcx + 0x417468c], eax
mov rax, qword [rcx + 0x98]
movups xmmword [rcx + 0x6008a0], xmm0
mov qword [rcx + 0x88], rax
movups xmm0, xmmword [rcx + 0x600920]
movups xmmword [rcx + 0x6008b0], xmm1
movups xmm1, xmmword [rcx + 0x600930]
movups xmmword [rcx + 0x6008c0], xmm0
movups xmm0, xmmword [rcx + 0x600940]
movups xmmword [rcx + 0x6008d0], xmm1
movups xmm1, xmmword [rcx + 0x600950]
movups xmmword [rcx + 0x6008e0], xmm0
movups xmm0, xmmword [rcx + 0x6009c0]
movups xmmword [rcx + 0x6008f0], xmm1
movups xmm1, xmmword [rcx + 0x6009d0]
movups xmmword [rcx + 0x600960], xmm0
movups xmm0, xmmword [rcx + 0x6009e0]
movups xmmword [rcx + 0x600970], xmm1
movups xmm1, xmmword [rcx + 0x6009f0]
movups xmmword [rcx + 0x600980], xmm0
movups xmm0, xmmword [rcx + 0x600a00]
movups xmmword [rcx + 0x600990], xmm1
movups xmm1, xmmword [rcx + 0x600a10]
movups xmmword [rcx + 0x6009a0], xmm0
movups xmmword [rcx + 0x6009b0], xmm1
add rcx, 0x1434678
call fcn.1800169c0
call fcn.18000f910
call fcn.18000e5c0
mov rcx, qword [0x180047050]
mov dword [rcx + 0x41746f4], esi
mov eax, dword [rcx + 0xbb0b44]
bt eax, 0x10
jae 0x180008302
btr eax, 0x10
mov dword [rcx + 0xbb0b44], eax
call fcn.1800125e0
mov rcx, qword [0x180047050]
cmp dword [rcx + 0x41746fc], 1
jne 0x180008196
lea rdx, [rsp + 0x130]
mov dword [rcx + 0x41746fc], esi
call fcn.180011200
mov rcx, qword [0x180047050]
lea r8, [rsp + 0x130]
add rcx, 0x12c92e0
mov dword [rsp + 0x20], 0xa
mov r9d, 0xd
lea rdx, str.STARTPPI__s_c_c
call fcn.180001120
jmp 0x1800081b3
mov r9d, 0xa
lea rdx, str.STARTPPI_c_c
add rcx, 0x12c92e0
lea r8d, [r9 + 3]
call fcn.180001120
mov rdx, qword [0x180047050]
cmp dword [rdx + 0x12ca2f8], 1
jne 0x180008209
mov rbx, qword [rdx + 0x4174770]
cmp dword [rbx + 8], 1
je 0x180008209
add rdx, 0x12c92e0
mov r8, rdi
nop word [rax + rax]
inc r8
cmp byte [rdx + r8], sil
jne 0x1800081e0
mov rcx, qword [rbx + 0xe00028]
lea r9, [rsp + 0x120]
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov dword [rbx + 0xe00020], esi
call fcn.1800123b0
mov rcx, qword [0x180047050]
xor edx, edx
mov r8d, 0x2d40000
movups xmm0, xmmword [rcx + 0x600900]
mov eax, dword [rcx + 0x4174690]
movups xmm1, xmmword [rcx + 0x600910]
mov dword [rcx + 0x417468c], eax
mov rax, qword [rcx + 0x98]
movups xmmword [rcx + 0x6008a0], xmm0
mov qword [rcx + 0x88], rax
movups xmm0, xmmword [rcx + 0x600920]
movups xmmword [rcx + 0x6008b0], xmm1
movups xmm1, xmmword [rcx + 0x600930]
movups xmmword [rcx + 0x6008c0], xmm0
movups xmm0, xmmword [rcx + 0x600940]
movups xmmword [rcx + 0x6008d0], xmm1
movups xmm1, xmmword [rcx + 0x600950]
movups xmmword [rcx + 0x6008e0], xmm0
movups xmm0, xmmword [rcx + 0x6009c0]
movups xmmword [rcx + 0x6008f0], xmm1
movups xmm1, xmmword [rcx + 0x6009d0]
movups xmmword [rcx + 0x600960], xmm0
movups xmm0, xmmword [rcx + 0x6009e0]
movups xmmword [rcx + 0x600970], xmm1
movups xmm1, xmmword [rcx + 0x6009f0]
movups xmmword [rcx + 0x600980], xmm0
movups xmm0, xmmword [rcx + 0x600a00]
movups xmmword [rcx + 0x600990], xmm1
movups xmm1, xmmword [rcx + 0x600a10]
movups xmmword [rcx + 0x6009a0], xmm0
movups xmmword [rcx + 0x6009b0], xmm1
add rcx, 0x1434678
call fcn.1800169c0
call fcn.18000e5c0
call fcn.180010000
mov rcx, qword [0x180047050]
mov dword [rcx + 0x41746f4], esi
mov eax, dword [rcx + 0xbb0b44]
bt eax, 0x11
jae 0x180008500
btr eax, 0x11
mov dword [rcx + 0xbb0b44], eax
call fcn.1800125e0
mov rbx, qword [0x180047050]
xor edx, edx
mov r8d, 0x2d40000
movups xmm0, xmmword [rbx + 0x600900]
mov eax, dword [rbx + 0x4174690]
lea rcx, [rbx + 0x1434678]
movups xmm1, xmmword [rbx + 0x600910]
mov dword [rbx + 0x417468c], eax
mov rax, qword [rbx + 0x98]
movups xmmword [rbx + 0x6008a0], xmm0
mov qword [rbx + 0x88], rax
movups xmm0, xmmword [rbx + 0x600920]
movups xmmword [rbx + 0x6008b0], xmm1
movups xmm1, xmmword [rbx + 0x600930]
movups xmmword [rbx + 0x6008c0], xmm0
movups xmm0, xmmword [rbx + 0x600940]
movups xmmword [rbx + 0x6008d0], xmm1
movups xmm1, xmmword [rbx + 0x600950]
movups xmmword [rbx + 0x6008e0], xmm0
movups xmm0, xmmword [rbx + 0x6009c0]
movups xmmword [rbx + 0x6008f0], xmm1
movups xmm1, xmmword [rbx + 0x6009d0]
movups xmmword [rbx + 0x600960], xmm0
movups xmm0, xmmword [rbx + 0x6009e0]
movups xmmword [rbx + 0x600970], xmm1
movups xmm1, xmmword [rbx + 0x6009f0]
movups xmmword [rbx + 0x600980], xmm0
movups xmm0, xmmword [rbx + 0x600a00]
movups xmmword [rbx + 0x600990], xmm1
movups xmm1, xmmword [rbx + 0x600a10]
movups xmmword [rbx + 0x6009a0], xmm0
movups xmmword [rbx + 0x6009b0], xmm1
call fcn.1800169c0
mov qword [rbx + 0x12ca348], rsi
mov qword [rbx + 0x12ca340], rsi
mov qword [rbx + 0x12ca350], rsi
call fcn.18000de70
call fcn.180010560
mov rcx, qword [0x180047050]
cmp dword [rcx + 0x41746fc], 1
jne 0x180008472
lea rdx, [rsp + 0x130]
mov dword [rcx + 0x41746fc], esi
call fcn.180011200
mov rcx, qword [0x180047050]
lea r8, [rsp + 0x130]
add rcx, 0x12c92e0
mov dword [rsp + 0x20], 0xa
mov r9d, 0xd
lea rdx, str.STARTRAW__s_c_c
call fcn.180001120
jmp 0x18000848f
mov r9d, 0xa
lea rdx, str.STARTRAW_c_c
add rcx, 0x12c92e0
lea r8d, [r9 + 3]
call fcn.180001120
mov rdx, qword [0x180047050]
cmp dword [rdx + 0x12ca2f8], 1
jne 0x1800084df
mov rbx, qword [rdx + 0x4174770]
cmp dword [rbx + 8], 1
je 0x1800084df
add rdx, 0x12c92e0
inc rdi
cmp byte [rdx + rdi], sil
jne 0x1800084b3
mov rcx, qword [rbx + 0xe00028]
lea r9, [rsp + 0x120]
mov r8, rdi
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov dword [rbx + 0xe00020], esi
call fcn.1800123b0
call fcn.18000f910
call fcn.18000e5c0
call fcn.180010000
mov rax, qword [0x180047050]
mov dword [rax + 0x41746f4], esi
mov rcx, qword [rsp + 0x1b0]
xor rcx, rsp
call fcn.180014fd0
lea r11, [rsp + 0x1c0]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rsp, r11
pop rdi
ret