Function at 0x18017300b
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
movsx ax, cl
cdqe
push rsi
push rdi
cdqe
push r12
movzx rax, bx
push r14
push r15
movsxd rax, ebp
mov eax, 0x1470
jmp 0x18017303c
call fcn.1801765fc
sub rsp, rax
btr bx, 0x4a
mov rax, qword [0x18009a010]
mov r10w, si
and r10w, bx
and r15b, 0x21
xor rax, rsp
xadd r14w, r14w
clc
mov qword [rsp + 0x1460], rax
dec r15w
btc r10d, 0x49
movzx r15w, r9b
movsxd r10, edx
mov rbx, rcx
sub dil, 0xc7
shr edx, 0
bts r12, r10
mov rax, r10
btr r12w, 0xa5
mov r14d, r9d
neg r15w
rcr r15w, 0x22
sar rax, 6
lea rcx, [0x18009c930]
and r10d, 0x3f
adc dil, r9b
btc r15w, r8w
shr dx, 0x21
lea r14, [r14 + r8]
bts dx, r13w
adc edx, 0x76977ecf
cmp r13w, 0x7c35
mov r15, r8
mov rdi, r8
mov rax, qword [rcx + rax*8]
rcr r12d, cl
add r12w, 0x4f2
lea rdx, [r10 + r10*8]
or r12b, r15b
sub r12b, cl
mov r12, qword [rax + rdx*8 + 0x28]
stc
sub eax, eax
mov qword [rbx], rax
clc
cmp r8, r14
jmp 0x180173102
mov dword [rbx + 8], eax
jmp 0x18017310a
jae 0x1801732de
lea rax, [rsp + 0x50]
stc
cmp cl, spl
cmc
cmp rdi, r14
jmp 0x180173122
jae 0x180173183
movzx ecx, word [rdi]
jmp 0x180173130
add rdi, 2
jmp 0x180173139
cmp cx, 0xa
jmp 0x180173142
jne 0x180173159
mov edx, 0xd
mov word [rax], dx
cmc
test r14b, 0x79
add rax, 2
mov word [rax], cx
sbb ch, 0x3e
test ax, r9w
add rax, 2
cmc
not cx
shl ch, cl
lea rcx, [rsp + 0x6f8]
cmp rax, rcx
jmp 0x18017317d
jb 0x18017311a
and qword [rsp + 0x38], 0
inc r9b
and r9b, 0xea
ror r9, 0x5f
lea rcx, [rsp + 0x50]
xchg r8w, r9w
neg r8b
and qword [rsp + 0x30], 0
xadd r9, r9
btc r8, 0x44
lea r8, [rsp + 0x50]
bsr r9w, r15w
cmp rbx, 0x3aac0c99
bt r9w, 0x93
sub rax, rcx
mov ecx, ebx
mov dword [rsp + 0x28], 0xd55
setns r9b
lea rcx, [rsp + 0x700]
ror r9w, cl
and r9b, bl
sar rax, 1
mov qword [rsp + 0x20], rcx
or r9b, 0x35
sal r9b, 0xf8
bt cx, 0xec
mov r9d, eax
mov ecx, 0xfde9
stc
test r9b, 0x72
cmp r13b, 0xcf
xor edx, edx
jmp 0x180173213
call fcn.18016c48b
mov ebp, eax
test eax, eax
je 0x1801732cc
sub esi, esi
cmp r15b, dl
test eax, eax
jmp 0x18017322e
je 0x1801732a3
and qword [rsp + 0x20], 0
mov dl, r8b
shr ch, cl
lea rdx, [rsp + 0x700]
stc
mov ecx, esi
rcr r9d, cl
lea r9, [rsp + 0x40]
shld r8, rdi, 0x82
bsr r8d, ebx
mov r8d, ebp
test ch, 0x7a
clc
lea rdx, [rdx + rcx]
inc ch
mov cx, 0x158a
mov rcx, r12
sub r8d, esi
jmp 0x180173277
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x1801732cc
add esi, dword [rsp + 0x40]
cmp r12, 0x561b6d2d
test r10d, r9d
cmp dl, r15b
cmp esi, ebp
jmp 0x18017329d
jb 0x180173234
mov eax, edi
cmp bx, 0x1ef4
test al, r11b
sub eax, r15d
test r9b, 0xe9
mov dword [rbx + 4], eax
test r9d, 0x670d1d0c
clc
cmp rdi, r14
jmp 0x1801732c7
jmp 0x18017310a
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbx], eax
bt ax, 0x51
adc al, r8b
cbw
mov rax, rbx
mov rcx, qword [rsp + 0x1460]
xor rcx, rsp
jmp 0x1801732f1
call fcn.180159e82
lea r11, [rsp + 0x1470]
movsxd rbp, r8d
not r12
mov r14b, al
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x40]
movzx esi, sp
mov r12w, r14w
movsx rsi, dx
mov rsp, r11
pop r15
movsx r12w, cl
jmp 0x18017332c
pop r14
jmp 0x180173338
pop r12
movzx si, r11b
not di
pop rdi
pop rsi
jmp 0x180173349
ret