Function at 0x140007f80
Capabilities:
Clear file content
Write file on windows

Disassembly:
push rbp
push rsi
push r12
push r15
lea rbp, [rsp - 0x608]
sub rsp, 0x708
mov rax, qword [0x140031008]
xor rax, rsp
mov qword [rbp + 0x5f0], rax
mov r15, rcx
mov edx, 0xc0000000
test r15, r15
lea rcx, [rbp + 0x3e0]
cmovne rcx, r15
xor r12d, r12d
mov qword [rsp + 0x30], r12
xor r9d, r9d
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 4
lea r8d, [r12 + 1]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rsi, rax
cmp rax, 0xffffffffffffffff
jne 0x140007ffa
test r15, r15
jne 0x140008467
jmp 0x140008460
mov qword [rsp + 0x738], rbx
lea r9, [rsp + 0x44]
mov qword [rsp + 0x740], rdi
lea rdx, [rsp + 0x40]
mov qword [rsp + 0x748], r13
mov r8d, 2
mov rcx, rsi
mov qword [rsp + 0x700], r14
mov word [rsp + 0x40], 0xfeff
mov qword [rsp + 0x20], r12
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov r8d, 0xffffffff
lea rdx, str.General
mov rcx, rsi
call fcn.140007aa0
lea rdx, str.Version
mov rcx, rsi
call fcn.140007d90
mov rcx, rsi
call fcn.140008490
mov rcx, rsi
call fcn.1400087e0
mov ebx, dword [0x140031a7c]
lea rdx, str.Unhook
mov edi, dword [0x140031a34]
mov r8d, 0xffffffff
mov rcx, rsi
call fcn.140007aa0
mov r9d, ebx
lea r8, str.Flag
lea rdx, str._s_08x_r_n
lea rcx, [rsp + 0x60]
call qword [sym.imp.USER32.dll_wsprintfW]
lea rcx, [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r9, [rsp + 0x40]
mov qword [rsp + 0x20], r12
add eax, eax
lea rdx, [rsp + 0x60]
mov r8d, eax
mov dword [rsp + 0x40], eax
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov r9d, edi
lea r8, str.DelayTime
lea rdx, str._s_d_r_n
lea rcx, [rsp + 0x60]
call qword [sym.imp.USER32.dll_wsprintfW]
lea rcx, [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r9, [rsp + 0x40]
mov qword [rsp + 0x20], r12
add eax, eax
lea rdx, [rsp + 0x60]
mov r8d, eax
mov dword [rsp + 0x40], eax
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, rsi
call fcn.140008ac0
mov r8d, 0xffffffff
lea rdx, str.SubMenu
mov rcx, rsi
call fcn.140007aa0
lea rdx, str.CountLimit
mov rcx, rsi
call fcn.140007d90
mov rcx, rsi
call fcn.140008fb0
mov r13, qword [0x140039ac0]
lea rdx, str.HotKey
movsxd rdi, dword [0x14003359c]
mov r8d, 0xffffffff
mov rcx, rsi
mov dword [rsp + 0x44], eax
call fcn.140007aa0
mov ebx, eax
lea r8, str.Count
mov r9d, edi
lea rdx, str._s_d_r_n
lea rcx, [rsp + 0x60]
call qword [sym.imp.USER32.dll_wsprintfW]
lea rcx, [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r9, [rsp + 0x40]
mov qword [rsp + 0x20], r12
add eax, eax
lea rdx, [rsp + 0x60]
mov r8d, eax
mov dword [rsp + 0x40], eax
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov r14d, eax
and r14d, ebx
and r14d, 1
test rdi, rdi
js 0x140008305
inc rdi
lea rbx, [r13 + 8]
xor r13d, r13d
nop word [rax + rax]
mov r8d, r12d
lea rdx, str.HotKey_03u
mov rcx, rsi
call fcn.140007aa0
movzx r9d, word [rbx - 8]
lea r8, str.Code
lea rdx, str._s_04x_r_n
and r14d, eax
lea rcx, [rbp + 0x100]
call qword [sym.imp.USER32.dll_wsprintfW]
lea rcx, [rbp + 0x100]
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r9, [rsp + 0x48]
mov qword [rsp + 0x20], r13
add eax, eax
lea rdx, [rbp + 0x100]
mov r8d, eax
mov dword [rsp + 0x48], eax
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov r9d, dword [rbx - 4]
lea r8, str.Page
lea rdx, str._s_d_r_n
and r14d, eax
lea rcx, [rbp + 0x1d0]
call qword [sym.imp.USER32.dll_wsprintfW]
lea rcx, [rbp + 0x1d0]
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r9, [rsp + 0x4c]
mov qword [rsp + 0x20], r13
add eax, eax
lea rdx, [rbp + 0x1d0]
mov r8d, eax
mov dword [rsp + 0x4c], eax
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov r9d, dword [rbx]
lea r8, str.Button
lea rdx, str._s_d_r_n
and r14d, eax
lea rcx, [rbp + 0x30]
call qword [sym.imp.USER32.dll_wsprintfW]
lea rcx, [rbp + 0x30]
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r9, [rsp + 0x50]
mov qword [rsp + 0x20], r13
add eax, eax
lea rdx, [rbp + 0x30]
mov r8d, eax
mov dword [rsp + 0x50], eax
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_WriteFile]
inc r12d
lea rbx, [rbx + 0xc]
and r14d, eax
sub rdi, 1
jne 0x1400081f0
jmp 0x140008308
xor r13d, r13d
mov rcx, rsi
call fcn.140009230
mov edi, eax
mov rcx, rsi
and edi, r14d
and edi, dword [rsp + 0x44]
call fcn.140009550
mov ebx, eax
mov rcx, rsi
and ebx, edi
call fcn.140009c30
mov r12d, eax
lea rdx, str.Plugins
mov r8d, 0xffffffff
mov rcx, rsi
and r12d, ebx
call fcn.140007aa0
mov r9d, dword [0x140039898]
lea r8, str.Count
lea rdx, str._s_d_r_n
mov ebx, eax
lea rcx, [rbp + 0x30]
call qword [sym.imp.USER32.dll_wsprintfW]
lea rcx, [rbp + 0x30]
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r9, [rsp + 0x44]
mov qword [rsp + 0x20], r13
add eax, eax
lea rdx, [rbp + 0x30]
mov r8d, eax
mov dword [rsp + 0x44], eax
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov r14d, eax
mov edi, r13d
mov eax, dword [0x140039898]
and r14d, ebx
and r14d, 1
test eax, eax
jle 0x140008407
lea rbx, [0x140039fd0]
cmp qword [rbx], 0
je 0x1400083fd
mov r8d, edi
lea rdx, str.Plugin_03u
lea rcx, [rbp + 0x1d0]
call qword [sym.imp.USER32.dll_wsprintfW]
mov r8, qword [rbx]
lea rdx, [rbp + 0x1d0]
mov rcx, rsi
call fcn.140007b80
and r14d, eax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, qword [rbx]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, dword [0x140039898]
inc edi
add rbx, 8
cmp edi, eax
jl 0x1400083b1
mov rcx, rsi
call fcn.140009e40
mov rdi, qword [rsp + 0x740]
mov ebx, eax
and ebx, r12d
and ebx, r14d
mov r14, qword [rsp + 0x700]
test r15, r15
jne 0x140008441
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rsi, r13
mov rcx, rsi
call fcn.14000b730
mov r13, qword [rsp + 0x748]
and eax, ebx
mov rbx, qword [rsp + 0x738]
and eax, 1
jne 0x140008469
xor ecx, ecx
call fcn.140001440
xor eax, eax
mov rcx, qword [rbp + 0x5f0]
xor rcx, rsp
call fcn.140013ba0
add rsp, 0x708
pop r15
pop r12
pop rsi
pop rbp
ret