Function at 0x180007cf0
Capabilities:
Write file on windows

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x178
lea rbp, [rsp + 0x80]
mov qword [rbp + 0xf0], 0xfffffffffffffffe
mov rsi, rcx
lea rdi, [rbp - 0x48]
mov rcx, rdi
mov edx, 1
call fcn.180010d40
mov qword [rbp + 0xe8], rsi
mov r13, qword [rsi + 0x20]
mov rax, qword [r13]
lea rbx, [0x18004c97b]
lea rsi, [0x18004c96b]
nop word [rax + rax]
cmp rax, r13
je 0x180007ee1
mov r14, rax
mov rcx, rdi
lea rdx, [0x18004c831]
call fcn.1800019f0
cmp qword [r14 + 0x38], 0x10
jb 0x180007d80
mov rdx, qword [r14 + 0x20]
jmp 0x180007d84
lea rdx, [r14 + 0x20]
mov r8, qword [r14 + 0x30]
mov rcx, rax
call fcn.1800111e0
mov rcx, rax
lea rdx, [0x18004c97a]
call fcn.1800019f0
mov r15, qword [r14 + 0x40]
mov rax, qword [r15]
nop word cs:[rax + rax]
cmp rax, r15
je 0x180007e80
mov r12, rax
cmp qword [rax + 0x38], 0x10
jb 0x180007dd0
mov rdx, qword [r12 + 0x20]
jmp 0x180007dd5
lea rdx, [r12 + 0x20]
mov r8, qword [r12 + 0x30]
mov rcx, rdi
call fcn.1800111e0
mov rcx, rax
mov rdx, rsi
call fcn.1800019f0
cmp qword [r12 + 0x58], 0x10
jb 0x180007e00
mov rdx, qword [r12 + 0x40]
jmp 0x180007e05
lea rdx, [r12 + 0x40]
mov r8, qword [r12 + 0x50]
mov rcx, rax
call fcn.1800111e0
mov rcx, rax
mov rdx, rbx
call fcn.1800019f0
mov rcx, qword [r12 + 0x10]
cmp byte [rcx + 0x19], 0
je 0x180007e60
nop dword [rax + rax]
mov rax, qword [r12 + 8]
cmp byte [rax + 0x19], 0
jne 0x180007db0
mov rcx, r12
mov r12, rax
cmp rcx, qword [rax + 0x10]
je 0x180007e30
mov rax, r12
jmp 0x180007db0
mov rax, rcx
mov rcx, qword [rcx]
cmp byte [rcx + 0x19], 0
je 0x180007e60
jmp 0x180007db0
mov rcx, rdi
mov rdx, rbx
call fcn.1800019f0
mov rcx, qword [r14 + 0x10]
cmp byte [rcx + 0x19], 0
je 0x180007ed0
nop word cs:[rax + rax]
mov rax, qword [r14 + 8]
cmp byte [rax + 0x19], 0
jne 0x180007d50
mov rcx, r14
mov r14, rax
cmp rcx, qword [rax + 0x10]
je 0x180007ea0
mov rax, r14
jmp 0x180007d50
mov rax, rcx
mov rcx, qword [rcx]
cmp byte [rcx + 0x19], 0
je 0x180007ed0
jmp 0x180007d50
xorps xmm0, xmm0
movaps xmmword [rbp + 0xd0], xmm0
movaps xmmword [rbp + 0xc0], xmm0
mov rax, qword [rbp + 0xe8]
mov rsi, qword [rax + 0x10]
cmp qword [rax + 0x18], 0x10
jb 0x180007f0e
mov rax, qword [rax]
mov qword [rbp + 0xe8], rax
test rsi, rsi
js 0x1800080fe
cmp rsi, 0xf
ja 0x180007f42
mov qword [rbp + 0xd0], rsi
mov qword [rbp + 0xd8], 0xf
mov rax, qword [rbp + 0xe8]
movups xmm0, xmmword [rax]
movaps xmmword [rbp + 0xc0], xmm0
jmp 0x180007fb7
mov qword [rbp + 0xd8], 0xf
mov rax, rsi
or rax, 0xf
cmp rax, 0x17
mov edi, 0x16
cmovae rdi, rax
cmp rdi, 0xfff
jb 0x180007f84
lea rcx, [rdi + 0x28]
call fcn.180018c0c
mov rcx, rax
add rcx, 0x27
and rcx, 0xffffffffffffffe0
mov qword [rcx - 8], rax
jmp 0x180007f90
lea rcx, [rdi + 1]
call fcn.180018c0c
mov rcx, rax
mov qword [rbp + 0xc0], rcx
mov qword [rbp + 0xd0], rsi
mov qword [rbp + 0xd8], rdi
inc rsi
mov rdx, qword [rbp + 0xe8]
mov r8, rsi
call fcn.18001c5c0
lea rcx, [rbp - 0x48]
lea rsi, [rbp + 0xa0]
mov rdx, rsi
call fcn.180010f10
cmp qword [rbp + 0xd8], 0x10
jb 0x180007fdd
mov rcx, qword [rbp + 0xc0]
jmp 0x180007fe4
lea rcx, [rbp + 0xc0]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 2
mov edx, 0xc0000000
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileA]
cmp rax, 0xffffffffffffffff
je 0x18000805e
mov rdi, rax
mov dword [rbp + 0xe4], 0
mov r8d, dword [rbp + 0xb0]
cmp qword [rbp + 0xb8], 0x10
jb 0x180008039
mov rsi, qword [rbp + 0xa0]
mov qword [rsp + 0x20], 0
lea r9, [rbp + 0xe4]
mov rcx, rdi
mov rdx, rsi
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rax, qword [rbp + 0xb8]
cmp rax, 0x10
jb 0x18000809f
mov rcx, qword [rbp + 0xa0]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x18000809a
mov rbx, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rbx
cmp rcx, 0x20
jae 0x180008103
add rax, 0x28
mov rdx, rax
mov rcx, rbx
call fcn.180018c50
mov rax, qword [rbp + 0xd8]
cmp rax, 0x10
jb 0x1800080e0
mov rcx, qword [rbp + 0xc0]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x1800080db
mov rbx, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rbx
cmp rcx, 0x20
jae 0x180008103
add rax, 0x28
mov rdx, rax
mov rcx, rbx
call fcn.180018c50
lea rcx, [rbp - 0x48]
call fcn.180011050
nop
add rsp, 0x178
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
call fcn.18000c700
call fcn.18002149c
int3