Function at 0x18012e6dd
Capabilities:
Write file on windows

Disassembly:
mov rax, rsp
cmc
test dl, r14b
cmp eax, 0x24592714
push rbp
cmp si, 0x1593
sar bp, 0x2c
dec bpl
push rsi
push rdi
push r12
push r13
push r14
rcl sil, 0xf0
push r15
movzx rbp, r15w
movsx r15d, di
lea rbp, [rax - 0x57]
test r11b, 0x42
movsx r14d, sp
sar r14b, cl
sub rsp, 0xd0
btc si, r12w
mov qword [rbp - 9], 0xfffffffffffffffe
shld r14d, esp, 0x96
cmp eax, r12d
bt si, r9w
mov qword [rax + 8], rbx
bsf r13d, ebx
mov rax, qword [0x180079010]
mov bl, r12b
sal r12w, cl
xor rax, rsp
cmp r10w, dx
xadd r12b, r14b
mov qword [rbp + 0x17], rax
sal r13b, cl
add r12b, 0xa5
dec r12d
mov rsi, r8
mov qword [rbp - 0x41], r8
rcl bx, 0xb3
rol r15w, cl
adc r14w, si
movsxd r14, edx
mov r15w, r14w
mov rbx, rcx
seta r13b
cmp sil, 0x6b
shr rcx, 0xe5
mov rax, qword [rbp + 0x7f]
and r15d, 0x30a84346
btc cx, r8w
mov qword [rbp - 0x59], rax
mov rax, r14
sal r15b, cl
mov r13, r14
and r15b, r12b
movzx rcx, dx
dec cx
sar r13, 6
btc rcx, r12
btr ecx, 0x27
mov qword [rbp - 0x39], r13
bsf r15w, si
movzx ecx, r13w
lea rcx, [0x180000000]
setp r15b
and eax, 0x3f
or r15w, sp
xadd r15b, r12b
lea r15, [rax + rax*8]
and r12w, 0x53f0
mov ax, cx
btc rax, rcx
mov rax, qword [rcx + r13*8 + 0x7bb50]
dec r12b
mov rax, qword [rax + r15*8 + 0x28]
movzx r12, sp
mov qword [rbp - 0x19], rax
mov r12d, r9d
add r12, r8
jmp 0x18012e81e
mov qword [rbp - 0x61], r12
jmp 0x18012e827
call qword [sym.imp.KERNEL32.dll_GetConsoleOutputCP]
mov dword [rbp - 0x49], eax
sbb r10b, al
rcr r10d, cl
stc
sub edi, edi
xor r10b, 0x7a
rol r10b, cl
neg r10
mov r10, qword [rbp - 0x59]
cmp r13, r11
stc
cmp byte [r10 + 0x28], dil
jmp 0x18012e854
jne 0x18012e866
mov rcx, r10
call fcn.180124201
mov r10, qword [rbp - 0x59]
mov rcx, qword [r10 + 0x18]
stc
test dx, r12w
test bh, 0x71
mov ecx, dword [rcx + 0xc]
cmp r9b, 0x45
clc
mov dword [rbp - 0x45], ecx
xor eax, eax
stc
cmp r11b, dil
mov qword [rbx], rax
mov dword [rbx + 8], eax
stc
test di, 0x2a71
cmp qword [rbp - 0x41], r12
jae 0x18012ef3d
mov r9, r14
sar r9, 6
mov qword [rbp - 0x11], r9
rcr al, 0xb6
mov edx, edi
stc
clc
sbb r12b, cl
mov al, byte [rsi]
sub r11b, al
mov byte [rbp - 0x71], al
mov dword [rbp - 0x6d], edi
mov r12d, 1
sal r11, 0x12
rol r11b, cl
movzx r11d, r12w
lea r11, [0x180000000]
clc
cmp ecx, 0xfde9
jne 0x18012ebd5
mov edx, edi
mov r14, rdi
lea rcx, [r15*8 + 0x3e]
test r13b, r13b
add rcx, qword [r11 + r9*8 + 0x7bb50]
cmp byte [rcx], dil
je 0x18012e920
inc edx
jmp 0x18012e906
inc r14
jmp 0x18012e90e
inc rcx
cmp r14, 5
jmp 0x18012e91a
jl 0x18012e8f6
test r14, r14
jmp 0x18012e928
jle 0x18012eaeb
mov rax, qword [r11 + r13*8 + 0x7bb50]
mov r8w, 0x7d8a
xchg r12w, r8w
movzx rcx, di
movzx ecx, byte [rax + r15*8 + 0x3e]
movzx r12w, r12b
movzx rax, cx
movsx r12d, byte [rcx + r11 + 0x798e0]
movsxd rax, r11d
lahf
cwde
inc r12d
cmp di, 0x5ce8
ror r8b, cl
mov eax, r12d
sub eax, edx
and r8b, bl
mov dword [rbp - 0x51], eax
cmp r12d, r11d
mov rdx, qword [rbp - 0x61]
sub rdx, rsi
cmova r8w, r14w
movsxd r8, eax
cmp r8, rdx
jmp 0x18012e990
jg 0x18012ee4b
mov rcx, rdi
or al, 0xf1
xor dh, 0xd8
lea rdx, [r15*8 + 0x3e]
add rdx, qword [r11 + r9*8 + 0x7bb50]
inc al
mov al, byte [rdx]
jmp 0x18012e9b7
mov byte [rbp + rcx - 1], al
jmp 0x18012e9c0
inc rcx
jmp 0x18012e9c8
inc rdx
stc
cmp rcx, r14
jl 0x18012e9b0
test r8, r8
jmp 0x18012e9dd
jle 0x18012ea1e
lea rcx, [rbp - 1]
movsx dx, dh
adc dx, 0x64d7
sbb dx, 0x183
add rcx, r14
bswap edx
cmovp edx, edx
mov rdx, rsi
jmp 0x18012ea05
call fcn.180120ac9
mov r10, qword [rbp - 0x59]
jmp 0x18012ea17
lea r11, [0x180000000]
mov rdx, rdi
bt cx, sp
shl cx, 0x7d
mov rcx, qword [r11 + r13*8 + 0x7bb50]
stc
cmp edi, r15d
add rcx, rdx
mov byte [rcx + r15*8 + 0x3e], dil
jmp 0x18012ea42
inc rdx
cmp rdx, r14
jmp 0x18012ea4d
jl 0x18012ea29
mov qword [rbp - 0x31], rdi
lea rax, [rbp - 1]
add r9w, dx
sal r9b, cl
mov qword [rbp - 0x29], rax
movsx ecx, bx
mov eax, edi
xchg ecx, edx
cmp r12d, 4
cqo
sete al
movzx cx, r8b
inc eax
mov r12d, eax
mov cx, 0x18c4
xchg dx, r9w
mov r8d, eax
movzx r9, r14w
bswap dx
mov qword [rsp + 0x20], r10
movsx rcx, r13w
lea r9, [rbp - 0x31]
jmp 0x18012eaa8
lea rdx, [rbp - 0x29]
lea rcx, [rbp - 0x6d]
jmp 0x18012eab5
call fcn.1801302af
cmp rax, 0xffffffffffffffff
jmp 0x18012eac3
je 0x18012ef3d
mov eax, dword [rbp - 0x51]
movsx cx, ch
dec eax
movsx rcx, r14w
shrd ecx, esp, 0x84
movsxd rcx, eax
stc
add rsi, rcx
jmp 0x18012eae6
jmp 0x18012ece0
movzx eax, byte [rsi]
add r8w, di
movsx r13, byte [rax + r11 + 0x798e0]
jmp 0x18012eb00
lea ecx, [r13 + 1]
xor ax, cx
mov r8, qword [rbp - 0x61]
setb al
sub r8, rsi
movsxd rax, ecx
jmp 0x18012eb1c
cmp rax, r8
jmp 0x18012eb24
jg 0x18012eea7
mov qword [rbp - 0x51], rdi
btr r8d, r12d
movsx r9, bx
btc r8w, 5
mov qword [rbp - 0x21], rsi
shld rdx, r11, 0xc9
cmp sp, 0x2d1c
xchg dx, ax
mov eax, edi
inc r9b
test dil, 0xed
cmp ecx, 4
mov r14b, 0x20
sete al
mov ch, 0xe5
xchg r9, r14
movsx dx, bpl
inc eax
xchg ecx, r8d
movsx r14, r8w
mov r14d, eax
cdq
movzx r9, di
cmovnp r9, r9
mov r8d, eax
mov qword [rsp + 0x20], r10
lea r9, [rbp - 0x51]
not dh
movsx rcx, r15w
cqo
lea rdx, [rbp - 0x21]
mov ecx, r11d
movzx ecx, r10w
movzx cx, bl
lea rcx, [rbp - 0x6d]
call fcn.1801302af
cmp rax, 0xffffffffffffffff
jmp 0x18012ebb3
je 0x18012ef3d
add rsi, r13
mov r12d, r14d
cmovs r13w, r9w
movsxd r13, esi
mov r13, qword [rbp - 0x39]
jmp 0x18012ebd0
jmp 0x18012ece0
mov r8, qword [r11 + r13*8 + 0x7bb50]
rcl cl, cl
and cl, bpl
test spl, dil
mov cl, byte [r8 + r15*8 + 0x3d]
test sil, r13b
test cl, 4
jmp 0x18012ebf5
je 0x18012ec38
mov al, byte [r8 + r15*8 + 0x3e]
cmp ch, 0xaa
mov byte [rbp + 7], al
xor al, 0xb9
mov al, byte [rsi]
or dx, 0x69e3
neg edx
mov byte [rbp + 8], al
and cl, 0xfb
movzx dx, r11b
movsxd rdx, r10d
mov byte [r8 + r15*8 + 0x3d], cl
mov r8d, 2
lea rdx, [rbp + 7]
jmp 0x18012ec33
jmp 0x18012ecc3
movzx r9d, byte [rsi]
movsx cx, bl
movzx rax, r15w
mov rax, qword [r10 + 0x18]
clc
rol ecx, 0x49
sub cx, 0x3af1
mov rcx, qword [rax]
cmp word [rcx + r9*2], di
jmp 0x18012ec5e
jge 0x18012ecb7
lea r14, [rsi + 1]
stc
cmp r14, qword [rbp - 0x61]
jae 0x18012ef07
mov r9, r10
mov r8d, 2
cmovns dx, r10w
movsxd rdx, eax
movsx ecx, di
mov rdx, rsi
movsx cx, spl
movsx ecx, r15w
lea rcx, [rbp - 0x6d]
jmp 0x18012ec9c
call fcn.18012b0a1
cmp eax, 0xffffffff
jmp 0x18012eca9
je 0x18012ef3d
mov rsi, r14
jmp 0x18012ece0
mov r8, r12
mov rdx, rsi
not r9b
movsxd rcx, eax
mov r9, r10
seta cl
lea rcx, [rbp - 0x6d]
call fcn.18012b0a1
cmp eax, 0xffffffff
jmp 0x18012ecda
je 0x18012ef3d
inc rsi
bsf r9d, r14d
shr cx, 0xd3
mov qword [rsp + 0x38], rdi
sal al, 0xc
dec ah
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], 5
cmp edx, 0x6e6d1789
clc
lea rax, [rbp + 0xf]
mov qword [rsp + 0x20], rax
btc rcx, rbp
or cl, r10b
xor rcx, 0x60463a33
mov r9d, r12d
lea r8, [rbp - 0x6d]
sub edx, edx
movsx cx, dl
mov ecx, dword [rbp - 0x49]
jmp 0x18012ed35
call fcn.1801288d7
mov r14d, eax
test eax, eax
jmp 0x18012ed44
je 0x18012ef3d
mov qword [rsp + 0x20], rdi
mov dl, 0x5b
cdq
lea r9, [rbp - 0x69]
setno ch
mov r8d, eax
movsxd rcx, ecx
lea rdx, [rbp + 0xf]
mov r12, qword [rbp - 0x19]
movsx ecx, di
mov rcx, r12
jmp 0x18012ed72
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jmp 0x18012ed7f
je 0x18012ef35
mov edx, esi
stc
clc
jmp 0x18012ed8e
sub edx, dword [rbp - 0x41]
add edx, dword [rbx + 8]
cmp r15b, 0xf8
cmp r11b, spl
mov dword [rbx + 4], edx
cmp dword [rbp - 0x69], r14d
jb 0x18012ef3d
cmp byte [rbp - 0x71], 0xa
jmp 0x18012edb1
jne 0x18012ee1f
mov eax, 0xd
movzx r9w, dl
mov word [rbp - 0x71], ax
mov cx, sp
jmp 0x18012edcd
mov qword [rsp + 0x20], rdi
lea r9, [rbp - 0x69]
lea r8d, [rax - 0xc]
movsx rdx, si
jmp 0x18012ede3
lea rdx, [rbp - 0x71]
mov rcx, r12
jmp 0x18012edef
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jmp 0x18012edfc
je 0x18012ef35
cmp dword [rbp - 0x69], 1
jb 0x18012ef3d
inc dword [rbx + 8]
dec dl
not edx
movzx dx, cl
inc dword [rbx + 4]
mov edx, dword [rbx + 4]
cmc
clc
cmp rsi, qword [rbp - 0x61]
jmp 0x18012ee28
jae 0x18012ef3d
mov r10, qword [rbp - 0x59]
mov cx, r10w
mov r9, qword [rbp - 0x11]
movzx ecx, r15w
mov ecx, dword [rbp - 0x45]
jmp 0x18012ee46
jmp 0x18012e8ae
test rdx, rdx
jmp 0x18012ee53
jle 0x18012ee9a
sub rsi, r14
mov rcx, qword [r11 + r13*8 + 0x7bb50]
add rcx, r14
mov al, byte [rsi + r14]
jmp 0x18012ee70
mov byte [rcx + r15*8 + 0x3e], al
movzx eax, dx
inc edi
inc r14
sbb al, r13b
cmc
movsxd rax, edi
clc
cmp edi, 0x2ee61e9c
stc
cmp rax, rdx
jmp 0x18012ee94
jl 0x18012ee5c
add dword [rbx + 4], edx
jmp 0x18012eea2
jmp 0x18012ef3d
test r8, r8
jle 0x18012eef9
mov rdx, rdi
btr cx, r12w
mov r9, qword [rbp - 0x39]
ror al, 0xcc
mov rcx, qword [r11 + r9*8 + 0x7bb50]
sar al, cl
add al, 0xb3
add rcx, rdx
setae al
mov al, 0xf3
mov al, byte [rdx + rsi]
jmp 0x18012eedb
mov byte [rcx + r15*8 + 0x3e], al
inc edi
movsx ax, r9b
inc rdx
sar al, cl
movsxd rax, edi
stc
cmp rax, r8
jl 0x18012eebf
add dword [rbx + 4], r8d
jmp 0x18012ef02
jmp 0x18012ef3d
mov byte [r8 + r15*8 + 0x3e], r9b
or ax, bx
mov rax, qword [r11 + r13*8 + 0x7bb50]
test dl, 0xff
or byte [rax + r15*8 + 0x3d], 4
lea eax, [rdx + 1]
jmp 0x18012ef28
mov dword [rbx + 4], eax
jmp 0x18012ef30
jmp 0x18012ef3d
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbx], eax
mov rax, rbx
mov rcx, qword [rbp + 0x17]
test ch, al
jmp 0x18012ef4b
xor rcx, rsp
call fcn.180115f01
mov rbx, qword [rsp + 0x110]
movsx ebp, r14w
add rsp, 0xd0
movzx rsi, di
pop r15
cmovae r13w, r12w
mov r14b, 0xa3
pop r14
movzx rsi, bp
pop r13
pop r12
xchg sil, sil
movsxd rdi, ebx
pop rdi
bswap si
movsx rbp, r12w
movzx rsi, r9w
pop rsi
movzx bp, r11b
pop rbp
jmp 0x18012ef9c
ret