Function at 0x180165469
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
cdqe
mov qword [rsp + 0x18], rbp
mov ah, 0x81
push rsi
movzx ax, bh
push rdi
push r12
xchg al, al
mov rax, 0x72a95cb2
push r14
bswap eax
movzx eax, r13w
movsx rax, bp
push r15
cbw
not ax
nop
mov eax, 0x1470
jmp 0x1801654a8
call fcn.180168895
sub rsp, rax
mov rax, qword [0x180094010]
xor r14d, 0x2734303c
cmp r10, 0x27b959f6
xchg dil, r15b
xor rax, rsp
cmp ebx, 0x249a0067
btr r15w, si
clc
mov qword [rsp + 0x1460], rax
movsxd r10, edx
test edx, r9d
mov rbx, rcx
add r14b, 0x4d
sub r12w, r13w
mov rax, r10
sbb dx, si
movsx ecx, r10w
rol r12b, cl
mov r14d, r9d
cmp sp, 0x69c2
sar rax, 6
lea rcx, [0x180096a40]
or r12w, 0x2c6e
and r10d, 0x3f
movzx r12, r11w
rol dh, 0x94
add r14, r8
mov r15, r8
mov rdi, r8
xor r12w, 0x1c1e
mov rax, qword [rcx + rax*8]
shl rdx, 0xe
bt r12w, 0x42
bts r12d, r12d
lea rdx, [r10 + r10*8]
movsx r12d, bp
bsr r12d, r8d
mov r12, qword [rax + rdx*8 + 0x28]
stc
test cl, r9b
jmp 0x18016555c
sub eax, eax
jmp 0x180165563
mov qword [rbx], rax
cmp r8, r14
jmp 0x18016556e
mov dword [rbx + 8], eax
jmp 0x180165576
jae 0x180165738
lea rax, [rsp + 0x50]
cmp ch, 0x1a
cmc
cmp rdi, r14
jae 0x1801655f8
movzx ecx, word [rdi]
add rdi, 2
test dil, 0x8f
cmp cx, 0xa
jne 0x1801655b8
mov edx, 0xd
cmc
test bp, 0x330e
cmp r10b, spl
mov word [rax], dx
add rax, 2
mov word [rax], cx
movsx ecx, r9w
movsx cx, sil
add rax, 2
bt cx, 0xe4
adc cx, 0x549a
bsf rcx, r14
lea rcx, [rsp + 0x6f8]
clc
test edi, 0x251f03f7
jmp 0x1801655ea
cmp rax, rcx
jmp 0x1801655f2
jb 0x180165585
and qword [rsp + 0x38], 0
movsx r8w, r15b
lea rcx, [rsp + 0x50]
adc r9w, bx
and qword [rsp + 0x30], 0
sar r9w, cl
sar r9b, 0x41
shr r8w, 0x18
lea r8, [rsp + 0x50]
shld r9d, r14d, 0xe4
sub rax, rcx
mov dword [rsp + 0x28], 0xd55
add cx, r8w
lea rcx, [rsp + 0x700]
cmp r10, 0x4ff11639
test bpl, 0x40
movzx r9d, bx
sar rax, 1
bsr r9d, r8d
dec r9w
mov qword [rsp + 0x20], rcx
sal cx, 0x35
mov r9d, eax
test r15, 0x799032a
btc cx, r15w
bts cx, di
mov ecx, 0xfde9
xor edx, edx
call fcn.18015e9d2
mov ebp, eax
clc
test eax, eax
je 0x180165730
xor esi, esi
clc
test eax, eax
jmp 0x180165697
je 0x180165713
and qword [rsp + 0x20], 0
jmp 0x1801656a8
lea rdx, [rsp + 0x700]
mov ecx, esi
add r8b, 0x62
movzx r8d, r11w
rcr r8b, 0xac
lea r9, [rsp + 0x40]
xor r8, rsi
cmp rcx, rbp
shrd r8w, r11w, 0xad
mov r8d, ebp
test bx, 0xbb5
cmc
add rdx, rcx
mov rcx, r12
cmp r12b, 0x57
sub r8d, esi
jmp 0x1801656ea
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jmp 0x1801656f7
je 0x180165730
add esi, dword [rsp + 0x40]
jmp 0x180165706
cmp esi, ebp
jmp 0x18016570d
jb 0x18016569d
mov eax, edi
jmp 0x18016571a
sub eax, r15d
mov dword [rbx + 4], eax
cmp al, r12b
jmp 0x180165728
cmp rdi, r14
jmp 0x180165576
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbx], eax
mov rax, rbx
movsx cx, ah
mov rcx, qword [rsp + 0x1460]
xor rcx, rsp
jmp 0x18016574f
call fcn.18014c161
lea r11, [rsp + 0x1470]
movzx r12w, al
movzx edi, r15w
mov rbx, qword [r11 + 0x30]
jmp 0x180165772
mov rbp, qword [r11 + 0x40]
mov rsp, r11
movzx r14w, dl
pop r15
movzx edi, r15w
not esi
pop r14
movsx r12d, r8w
pop r12
not di
movzx rdi, bp
xchg edi, esi
pop rdi
pop rsi
jmp 0x18016579e
ret