Function at 0x18004f4a0
Capabilities:
Create directory
Write file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
lea rbp, [rsp - 0x30]
sub rsp, 0x130
mov rax, qword [0x180175010]
xor rax, rsp
mov qword [rbp + 0x20], rax
lea r8, str.C:eclipse.tech_
mov rax, rcx
sub r8, rcx
mov edx, 0x43
nop dword [rax]
nop word [rax + rax]
mov word [rax], dx
lea rax, [rax + 2]
movzx edx, word [r8 + rax]
test dx, dx
jne 0x18004f4e0
xor ebx, ebx
xor edx, edx
mov word [rax], bx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
jne 0x18004f871
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x18004f871
mov dl, 3
call fcn.180071aa0
movabs rax, 0x3b1121906424e063
movabs rcx, 0x342703a476950bae
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x40], rax
movabs rax, 0xaae0095139bdbad
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x48], rax
movabs rax, 0xd5a258658114ae7
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x50], rax
movabs rax, 0x23a2ad21c2a91f2c
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x58], rax
movabs rax, 0x79291e64ed4eb1e9
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x60], rax
movabs rax, 0x1ed2b9eea146ab74
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x68], rax
movabs rax, 0x3879afbc34da457e
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x70], rax
movabs rax, 0xa4d533a9c2df7f9f
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x78], rax
movabs rax, 0x759b15bff1d537a4
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x80], rax
movabs rax, 0x8371b3a8dff3f4e3
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x78], rax
movabs rax, 0x8bec64cd310202ea
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x70], rax
movabs rax, 0x1fcff845bfac1cf4
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x68], rax
movabs rax, 0xf36ac939e8fa19a9
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x60], rax
mov qword [rsp + 0x30], rcx
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x58], rax
movabs rax, 0x4f3145f5084d8105
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x50], rax
movabs rax, 0x6fda61f061f8fbc2
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x48], rax
movabs rax, 0x793650e73e742ec7
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x40], rax
movabs rax, 0x44ccc44ab0c6680c
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x38], rax
movabs rax, 0x165d7d019f27d5c9
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x30], rax
movabs rax, 0x7fb1dc8c816ad206
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x28], rax
lea r8, [rsp + 0x40]
movabs rax, 0x181cc1d314bf360b
mov edx, r8d
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x20], rax
movabs rax, 0x84b041c6afff0df0
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x18], rax
movabs rax, 0x11fe78cd94a159cd
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x10], rax
movabs rax, 0xf118d788ba87958a
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 8], rax
movabs rax, 0xf8890dbf5e76618f
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp], rax
movabs rax, 0x7aef8c62d1c378d4
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 8], rax
movabs rax, 0xf36ac9399c8970d1
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x10], rax
mov qword [rsp + 0x30], rcx
lea rcx, [rsp + 0x40]
mov rax, qword [rsp + 0x30]
movdqa xmm0, xmmword [rsp + 0x50]
pxor xmm0, xmmword [rbp - 0x40]
movdqa xmm1, xmmword [rsp + 0x60]
pxor xmm1, xmmword [rbp - 0x30]
movdqa xmm2, xmmword [rsp + 0x40]
pxor xmm2, xmmword [rbp - 0x50]
movdqa xmmword [rsp + 0x50], xmm0
movdqa xmm0, xmmword [rsp + 0x70]
pxor xmm0, xmmword [rbp - 0x20]
movdqa xmmword [rsp + 0x60], xmm1
movdqa xmm1, xmmword [rbp - 0x80]
pxor xmm1, xmmword [rbp - 0x10]
movdqa xmmword [rsp + 0x70], xmm0
movdqa xmm0, xmmword [rbp - 0x70]
pxor xmm0, xmmword [rbp]
movdqa xmmword [rbp - 0x80], xmm1
movdqa xmm1, xmmword [rbp - 0x60]
mov qword [rbp + 0x18], rax
movq rax, xmm2
pxor xmm1, xmmword [rbp + 0x10]
movdqa xmmword [rbp - 0x70], xmm0
movdqa xmmword [rbp - 0x60], xmm1
movdqa xmmword [rsp + 0x40], xmm2
test al, al
je 0x18004f84d
inc rcx
mov rdx, rcx
cmp byte [rcx], bl
jne 0x18004f843
mov rcx, qword [0x180175e68]
sub edx, r8d
mov r8d, edx
mov qword [rsp + 0x20], rbx
lea rdx, [rsp + 0x40]
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_WriteFile]
xor al, al
jmp 0x18004f873
mov al, 1
mov rcx, qword [rbp + 0x20]
xor rcx, rsp
call fcn.1800d6d50
mov rbx, qword [rsp + 0x148]
add rsp, 0x130
pop rbp
ret