Function at 0x1800b1690
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r14
push r15
mov rbp, rsp
sub rsp, 0x80
mov rax, qword [0x180153c80]
xor rax, rsp
mov qword [rbp - 0x10], rax
mov rsi, rdx
mov rdi, rcx
mov rax, qword [rcx + 0x10]
dec rax
cmp rax, 0xfffffffffffffffd
ja 0x1800b188e
mov rbx, qword [rcx + 0x18]
mov qword [rbp - 0x50], rbx
mov rcx, rbx
call fcn.1800b244c
test eax, eax
jne 0x1800b18b7
mov eax, dword [rbx + 0x4c]
cmp eax, 0x7fffffff
je 0x1800b18c2
xor r15d, r15d
mov qword [rsi + 0x28], r15
mov qword [rsi + 0x30], r15
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
mov qword [rbp - 0x38], r15
mov qword [rbp - 0x30], 0xf
mov byte [rbp - 0x48], r15b
mov rcx, qword [rdi + 0x28]
mov rax, qword [rcx]
lea r8, [rbp - 0x48]
mov rdx, rsi
call qword [rax + 8]
cmp byte [rdi + 0x20], r15b
je 0x1800b1815
mov r8, qword [rsi + 0x28]
cmp qword [rsi + 0x30], r8
jbe 0x1800b1815
test r8, r8
je 0x1800b1761
lea rdx, [rbp - 0x48]
cmp qword [rbp - 0x30], 0x10
cmovae rdx, qword [rbp - 0x48]
mov qword [rsp + 0x20], r15
xor r9d, r9d
mov rcx, qword [rdi + 0x10]
call qword [sym.imp.KERNEL32.dll_WriteConsoleA]
movsxd rax, dword [rsi + 0x10]
movzx r14d, word [rdi + rax*2 + 0x30]
lea rdx, [rbp - 0x28]
mov rcx, qword [rdi + 0x10]
call qword [sym.imp.KERNEL32.dll_GetConsoleScreenBufferInfo]
test eax, eax
jne 0x1800b1783
lea r14d, [rax + 7]
jmp 0x1800b179e
mov edx, dword [rbp - 0x20]
and edx, 0xfff0
or edx, r14d
mov rcx, qword [rdi + 0x10]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
movzx r14d, word [rbp - 0x20]
mov r8, qword [rsi + 0x30]
mov rcx, qword [rsi + 0x28]
cmp r8, rcx
jbe 0x1800b17d1
sub r8d, ecx
lea rdx, [rbp - 0x48]
cmp qword [rbp - 0x30], 0x10
cmovae rdx, qword [rbp - 0x48]
add rdx, rcx
mov qword [rsp + 0x20], r15
xor r9d, r9d
mov rcx, qword [rdi + 0x10]
call qword [sym.imp.KERNEL32.dll_WriteConsoleA]
movzx edx, r14w
mov rcx, qword [rdi + 0x10]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov rcx, qword [rsi + 0x30]
cmp qword [rbp - 0x38], rcx
jbe 0x1800b183f
mov r8d, dword [rbp - 0x38]
sub r8d, ecx
lea rdx, [rbp - 0x48]
cmp qword [rbp - 0x30], 0x10
cmovae rdx, qword [rbp - 0x48]
add rdx, rcx
mov qword [rsp + 0x20], r15
xor r9d, r9d
mov rcx, qword [rdi + 0x10]
call qword [sym.imp.KERNEL32.dll_WriteConsoleA]
jmp 0x1800b183f
mov dword [rbp - 0x50], r15d
lea rdx, [rbp - 0x48]
cmp qword [rbp - 0x30], 0x10
cmovae rdx, qword [rbp - 0x48]
mov qword [rsp + 0x20], r15
lea r9, [rbp - 0x50]
mov r8d, dword [rbp - 0x38]
mov rcx, qword [rdi + 0x10]
call qword [sym.imp.KERNEL32.dll_WriteFile]
nop
mov rdx, qword [rbp - 0x30]
cmp rdx, 0x10
jb 0x1800b1876
inc rdx
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b1871
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b18b1
call fcn.1800b59e0
mov qword [rbp - 0x38], r15
mov qword [rbp - 0x30], 0xf
mov byte [rbp - 0x48], 0
mov rcx, rbx
call fcn.1800b2454
mov rcx, qword [rbp - 0x10]
xor rcx, rsp
call fcn.1800b5f90
mov rbx, qword [rsp + 0xc0]
add rsp, 0x80
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret
call fcn.1800bbe74
nop
mov ecx, 5
call fcn.1800b26c8
int3
dec eax
mov dword [rbx + 0x4c], eax
mov ecx, 6
call fcn.1800b26c8
int3