Function at 0x7ff7b50abc50
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xc0
mov rax, qword [0x7ff7b50d0588]
xor rax, rsp
mov qword [rbp + 0x27], rax
mov qword [rbp - 0x19], rcx
mov esi, r9d
cmp qword [rcx + 0x18], 0x10
mov r15d, r8d
mov rbx, rdx
mov rdi, rcx
jb 0x7ff7b50abc90
mov rcx, qword [rcx]
mov qword [rsp + 0x30], 0
xor r9d, r9d
mov dword [rsp + 0x28], 0
xor r8d, r8d
mov edx, 0x1f01ff
mov dword [rsp + 0x20], 2
call qword [sym.imp.kernel32.dll_CreateFileA]
mov r14, rax
cmp rax, 0xffffffffffffffff
jne 0x7ff7b50abdbc
call qword [sym.imp.kernel32.dll_GetLastError]
movabs rdx, 0xfc9e2665ad6cc84a
movabs rcx, 0x90f747038d31e511
mov qword [rbp - 9], rcx
movabs rcx, 0xf632543e64af3d06
mov qword [rbp - 1], rcx
movabs rcx, 0x5720947deb937b4b
mov qword [rbp + 7], rcx
movabs rcx, 0x57ba92e040cd6ec8
mov qword [rbp + 0xf], rcx
movabs rcx, 0xc4cf699f788c1c05
mov qword [rbp + 0x17], rcx
movabs rcx, 0x6bb44ecaa67151ca
mov qword [rbp + 0x1f], rcx
movabs rcx, 0x84517451108f5963
mov qword [rbp - 0x41], rcx
movabs rcx, 0x3b49f25d8ee71a2e
mov qword [rbp - 0x39], rcx
movabs rcx, 0x38c8f6c02fb94ead
mov qword [rbp - 0x31], rcx
movabs rcx, 0xb7a60dbf16e53c75
movdqa xmm1, xmmword [rbp - 0x39]
pxor xmm1, xmmword [rbp + 7]
mov qword [rbp - 0x29], rcx
movabs rcx, 0x6bbe1392832a71a1
mov qword [rbp - 0x49], rdx
mov edx, eax
movdqa xmm0, xmmword [rbp - 0x49]
pxor xmm0, xmmword [rbp - 9]
mov qword [rbp - 0x21], rcx
lea rcx, [rbp - 0x49]
movdqa xmmword [rbp - 0x49], xmm0
movdqa xmm0, xmmword [rbp - 0x29]
pxor xmm0, xmmword [rbp + 0x17]
movdqa xmmword [rbp - 0x29], xmm0
movdqa xmmword [rbp - 0x39], xmm1
call fcn.7ff7b50c05b0
mov rcx, rdi
call fcn.7ff7b509bbf0
xor eax, eax
jmp 0x7ff7b50ac026
test esi, esi
je 0x7ff7b50abefb
mov ecx, r15d
mov rax, 0xffffffffffffffff
add ecx, 0x64
cmovb rcx, rax
call qword [sym.imp.ucrtbase.dll_malloc]
mov rdx, rax
lea r8d, [r15 + 1]
sub rbx, rax
nop word [rax + rax]
movzx ecx, sil
add cl, byte [rbx + rdx]
mov byte [rdx], cl
lea rdx, [rdx + 1]
sub r8, 1
jne 0x7ff7b50abdf0
mov rbx, rax
test rax, rax
jne 0x7ff7b50abefb
mov rcx, r14
call qword [sym.imp.kernel32.dll_CloseHandle]
movabs rcx, 0x90f747038d31e511
movabs rax, 0xfc9e2645ad6cc84a
mov qword [rbp - 9], rcx
movabs rcx, 0xf632543e64af3d06
mov qword [rbp - 1], rcx
movabs rcx, 0x5720947deb937b4b
mov qword [rbp - 0x49], rax
movabs rax, 0x9f40375b008f5963
mov qword [rbp + 7], rcx
movabs rcx, 0x57ba92e040cd6ec8
mov qword [rbp - 0x41], rax
movabs rax, 0x7745f8148db30f3b
movdqa xmm0, xmmword [rbp - 0x49]
pxor xmm0, xmmword [rbp - 9]
mov qword [rbp + 0xf], rcx
movabs rcx, 0xc4cf699f788c1c05
mov qword [rbp - 0x39], rax
movabs rax, 0x25d5ff852ded00a1
mov qword [rbp + 0x17], rcx
movabs rcx, 0x6bb44ecaa67151ca
mov qword [rbp - 0x31], rax
movabs rax, 0xc4cf699f788c167c
movdqa xmm1, xmmword [rbp - 0x39]
pxor xmm1, xmmword [rbp + 7]
mov qword [rbp - 0x21], rcx
mov qword [rbp - 0x29], rax
movdqa xmmword [rbp - 0x49], xmm0
movdqa xmm0, xmmword [rbp - 0x29]
mov qword [rbp + 0x1f], rcx
lea rcx, [rbp - 0x49]
pxor xmm0, xmmword [rbp + 0x17]
movdqa xmmword [rbp - 0x29], xmm0
movdqa xmmword [rbp - 0x39], xmm1
call fcn.7ff7b50c05b0
mov rcx, rdi
call fcn.7ff7b509bbf0
xor eax, eax
jmp 0x7ff7b50ac026
lea r9, [rbp - 0x19]
mov qword [rsp + 0x20], 0
mov r8d, r15d
mov rdx, rbx
mov rcx, r14
call qword [sym.imp.kernel32.dll_WriteFile]
test eax, eax
jne 0x7ff7b50ac010
call qword [sym.imp.kernel32.dll_GetLastError]
movabs rcx, 0x90f747038d31e511
movabs rdx, 0xfc9e2665ad6cc84a
mov qword [rbp - 9], rcx
movabs rcx, 0xf632543e64af3d06
mov qword [rbp - 0x49], rdx
movabs rdx, 0x84457451108f5963
mov qword [rbp - 1], rcx
movabs rcx, 0x5720947deb937b4b
mov qword [rbp - 0x41], rdx
movabs rdx, 0x7745f8148df60f22
movdqa xmm0, xmmword [rbp - 0x49]
pxor xmm0, xmmword [rbp - 9]
mov qword [rbp + 7], rcx
movabs rcx, 0x57ba92e040cd6ec8
mov qword [rbp - 0x39], rdx
movabs rdx, 0x77d1e18924ed00a1
mov qword [rbp + 0xf], rcx
movabs rcx, 0xc4cf699f788c1c05
mov qword [rbp - 0x31], rdx
movabs rdx, 0xc4cf699f78864420
movdqa xmm1, xmmword [rbp - 0x39]
pxor xmm1, xmmword [rbp + 7]
mov qword [rbp + 0x17], rcx
movabs rcx, 0x6bb44ecaa67151ca
mov qword [rbp - 0x21], rcx
mov qword [rbp - 0x29], rdx
mov edx, eax
movdqa xmmword [rbp - 0x49], xmm0
movdqa xmm0, xmmword [rbp - 0x29]
mov qword [rbp + 0x1f], rcx
lea rcx, [rbp - 0x49]
pxor xmm0, xmmword [rbp + 0x17]
movdqa xmmword [rbp - 0x29], xmm0
movdqa xmmword [rbp - 0x39], xmm1
call fcn.7ff7b50c05b0
mov rcx, r14
call qword [sym.imp.kernel32.dll_CloseHandle]
mov rcx, rdi
call fcn.7ff7b509bbf0
xor eax, eax
jmp 0x7ff7b50ac026
mov rcx, r14
call qword [sym.imp.kernel32.dll_CloseHandle]
mov rcx, rdi
call fcn.7ff7b509bbf0
mov eax, 1
mov rcx, qword [rbp + 0x27]
xor rcx, rsp
call fcn.7ff7b50c16f0
mov rbx, qword [rsp + 0x108]
add rsp, 0xc0
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret