Function at 0x18013e010
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0xf0
movdqa xmm0, xmmword [0x1801610b0]
lea rdx, [rsp + 0x30]
movdqa xmm1, xmmword [0x180160b10]
xor eax, eax
mov r14, qword [rbp + 0x7f]
mov rbx, rcx
mov dword [rbp - 0x78], eax
lea rcx, [rbp - 0x19]
mov word [rbp - 0x74], ax
movabs r13, 0xffecc7b5d047cc19
mov byte [rbp - 0x72], al
mov rsi, r9
movabs rax, 0xe69993b7f281eb0e
mov byte [rbp - 0x79], 0xc2
mov qword [rbp - 0x69], rax
mov rdi, r8
movabs rax, 0xa91571323445ca06
mov qword [rbp - 0x71], r13
mov qword [rbp - 0x61], rax
movdqu xmmword [rsp + 0x30], xmm0
movdqu xmmword [rsp + 0x40], xmm1
call fcn.18000cdb0
lea r8, [rbp - 0x51]
mov edx, 0x100000
lea rcx, [0x18017bd90]
movups xmm2, xmmword [rax]
movups xmmword [rbp - 0x51], xmm2
movups xmm0, xmmword [rax + 0x10]
movups xmmword [rbp - 0x41], xmm0
movzx eax, word [rax + 0x20]
mov word [rbp - 0x31], ax
call fcn.1800010e0
mov rcx, qword [0x18017bd78]
lea r9, [0x18017bd80]
xor r12d, r12d
mov dword [0x18017bd84], eax
mov r8d, eax
mov qword [rsp + 0x20], r12
lea rdx, [0x18017bd90]
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov r9, qword [rdi + 8]
mov rcx, rbx
mov r8, qword [rsi + 0x28]
mov rdx, qword [rbp + 0x77]
mov dword [rsp + 0x20], r12d
call fcn.180141e70
mov r15, rax
test rax, rax
jne 0x18013e1e7
movdqa xmm0, xmmword [0x180161040]
lea rdx, [rsp + 0x30]
movdqa xmm1, xmmword [0x180160b20]
lea rcx, [rbp - 0x19]
mov dword [rbp - 0x78], eax
mov word [rbp - 0x74], ax
mov byte [rbp - 0x72], al
movabs rax, 0xe69993b7f281eb0e
mov qword [rbp - 0x69], rax
movabs rax, 0xa91571323445ca06
mov qword [rbp - 0x61], rax
movdqu xmmword [rsp + 0x30], xmm0
mov byte [rbp - 0x79], 0xc2
movdqu xmmword [rsp + 0x40], xmm1
mov qword [rbp - 0x71], r13
call fcn.18000cdb0
lea r8, [rbp - 0x51]
mov edx, 0x100000
lea rcx, [0x18017bd90]
movups xmm2, xmmword [rax]
movups xmmword [rbp - 0x51], xmm2
movups xmm0, xmmword [rax + 0x10]
movups xmmword [rbp - 0x41], xmm0
movzx eax, word [rax + 0x20]
mov word [rbp - 0x31], ax
call fcn.1800010e0
mov rcx, qword [0x18017bd78]
lea r9, [0x18017bd80]
mov r8d, eax
mov dword [0x18017bd84], eax
lea rdx, [0x18017bd90]
mov qword [rsp + 0x20], r12
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov r9, rdi
mov qword [rsp + 0x20], r14
mov r8, rsi
mov rcx, rbx
call fcn.18013e320
jmp 0x18013e2ed
mov rcx, qword [rdi + 8]
call fcn.180146f60
mov r9, rdi
mov qword [rdi + 8], r15
mov r8, rsi
mov qword [rsp + 0x20], r14
mov rcx, rbx
call fcn.18013e320
mov rcx, qword [rdi + 8]
mov esi, eax
mov rax, qword [rbx + 8]
call rax
test eax, eax
jne 0x18013e2eb
call qword [sym.imp.KERNEL32.dll_GetLastError]
movdqa xmm0, xmmword [0x180161cc0]
lea rdx, [rsp + 0x30]
movdqa xmm1, xmmword [0x1801620d0]
lea rcx, [rbp - 0x51]
mov rdi, qword [rdi + 8]
mov ebx, eax
movabs rax, 0x53a4a43623c65917
mov qword [rbp - 0x69], rax
movabs rax, 0xd42e5d227ec548f6
mov qword [rbp - 0x61], rax
movabs rax, 0xbc175a171ae1c518
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rbp - 0x59], rax
movdqa xmm0, xmmword [0x180161190]
movdqu xmmword [rsp + 0x40], xmm1
movdqu xmmword [rbp - 0x79], xmm0
call fcn.18000aa70
mov r9, rdi
mov dword [rsp + 0x20], ebx
lea r8, [rbp - 0x19]
mov edx, 0x100000
lea rcx, [0x18017bd90]
movups xmm2, xmmword [rax]
movups xmmword [rbp - 0x19], xmm2
movups xmm0, xmmword [rax + 0x10]
movups xmmword [rbp - 9], xmm0
movups xmm1, xmmword [rax + 0x20]
movups xmmword [rbp + 7], xmm1
movzx eax, byte [rax + 0x30]
mov byte [rbp + 0x17], al
call fcn.1800010e0
mov rcx, qword [0x18017bd78]
lea r9, [0x18017bd80]
mov r8d, eax
mov dword [0x18017bd84], eax
lea rdx, [0x18017bd90]
mov qword [rsp + 0x20], r12
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov eax, esi
lea r11, [rsp + 0xf0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret