Function at 0x18012f418
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
push rsi
lahf
push rdi
movzx eax, r14w
not ax
push r12
lahf
push r14
cmovle ax, r11w
jmp 0x18012f449
push r15
movsx ax, r11b
mov rax, 0x528e16c8
movsx eax, cx
mov eax, 0x1470
call fcn.18013285b
sub rsp, rax
sub di, 0x64d1
mov rax, qword [0x180079010]
stc
xor rax, rsp
test r14b, r8b
mov qword [rsp + 0x1460], rax
movsxd r10, edx
bsr r14d, esi
cmovae ax, bp
mov rbx, rcx
mov rax, r10
cqo
mov r14d, r9d
and cx, 0x4ab
dec di
cmc
sar rax, 6
dec r12w
xadd edi, edx
lea rcx, [0x18007bb50]
and r10d, 0x3f
lea r14, [r14 + r8]
clc
mov r15, r8
bts di, sp
rcr r12b, 7
mov rdi, r8
bt r12d, 0xf0
movzx r12, ax
sal r12b, cl
mov rax, qword [rcx + rax*8]
lea rdx, [r10 + r10*8]
btc r12, 0x19
sal r12, 0x35
mov r12, qword [rax + rdx*8 + 0x28]
cmp dh, cl
stc
sub eax, eax
stc
mov qword [rbx], rax
cmp r8, r14
jmp 0x18012f4fd
mov dword [rbx + 8], eax
jmp 0x18012f505
jae 0x18012f6cd
lea rax, [rsp + 0x50]
stc
cmp rdi, r14
jmp 0x18012f519
jae 0x18012f56d
movzx ecx, word [rdi]
add rdi, 2
clc
cmp cx, 0xa
jne 0x18012f545
mov edx, 0xd
cmp dh, 0x8b
jmp 0x18012f53e
mov word [rax], dx
add rax, 2
mov word [rax], cx
add cx, bp
add rax, 2
xadd cl, cl
bsf rcx, rsp
lea rcx, [rsp + 0x6f8]
clc
cmp rax, rcx
jmp 0x18012f567
jb 0x18012f511
and qword [rsp + 0x38], 0
movzx r8d, cx
sal r8b, 0xeb
lea rcx, [rsp + 0x50]
bt r8d, edx
xadd r8w, r9w
xchg r9b, r8b
and qword [rsp + 0x30], 0
cmovb r9d, edx
stc
test r9, 0x704a2447
lea r8, [rsp + 0x50]
bts r9, r14
add r9d, 0x55511bc9
btc r9w, 0x29
sub rax, rcx
mov dword [rsp + 0x28], 0xd55
rol rcx, cl
add ch, 0xd4
movsx cx, r11b
lea rcx, [rsp + 0x700]
movzx r9w, sil
mov r9b, sil
sar rax, 1
mov r9b, r13b
mov qword [rsp + 0x20], rcx
movzx ecx, r9w
sal cl, cl
mov r9d, eax
movzx rcx, ax
btc ecx, r12d
mov ecx, 0xfde9
jmp 0x18012f600
sub edx, edx
jmp 0x18012f607
call fcn.1801288d7
mov ebp, eax
cmp r9w, r14w
test bl, r11b
stc
test eax, eax
jmp 0x18012f61d
je 0x18012f6c2
xor esi, esi
cmp r15w, r14w
test eax, eax
jmp 0x18012f630
je 0x18012f6a2
and qword [rsp + 0x20], 0
lea rdx, [rsp + 0x700]
bt r9w, 0xc6
mov ecx, esi
ror r8d, cl
bsf r9w, si
sal r9w, cl
lea r9, [rsp + 0x40]
stc
or r8b, 0x7f
rcr r8w, 0xa6
mov r8d, ebp
cmp ax, 0x6951
jmp 0x18012f674
lea rdx, [rdx + rcx]
mov rcx, r12
clc
cmc
sub r8d, esi
jmp 0x18012f685
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x18012f6c2
add esi, dword [rsp + 0x40]
cmp r8b, r13b
cmp esi, ebp
jb 0x18012f636
mov eax, edi
sub eax, r15d
test r10w, r14w
mov dword [rbx + 4], eax
test r13b, 0xc0
cmc
test ah, dh
cmp rdi, r14
jmp 0x18012f6bd
jmp 0x18012f505
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbx], eax
movzx ecx, dx
mov rax, rbx
movzx ecx, si
mov rcx, qword [rsp + 0x1460]
cmp dil, r10b
cmp ebp, 0x5f4404
xor rcx, rsp
call fcn.180115f01
lea r11, [rsp + 0x1470]
mov rbx, qword [r11 + 0x30]
movzx di, r11b
setl dil
mov rbp, qword [r11 + 0x40]
setl r15b
movsx di, cl
not r12b
mov rsp, r11
mov sil, r13b
mov r14w, 0x2bc
not r12b
pop r15
mov dil, r10b
cmovne r12w, r11w
pop r14
movsx r12, dx
sete dil
bswap esi
pop r12
movsx esi, bp
movsx di, r11b
not esi
pop rdi
movsxd rsi, r9d
bswap si
pop rsi
jmp 0x18012f74d
ret