Function at 0x1801735d2
Capabilities:
Write file on windows

Disassembly:
push rbp
btr ebp, esi
rcl bpl, 0xd8
push rbx
shl bpl, cl
push rsi
shld si, r13w, 0xfd
push rdi
shr ebx, 0x32
push r12
sub ebp, 0x7cbb2dad
or bx, r8w
shr bp, cl
push r13
push r14
sal r14, cl
movsxd r14, ebx
push r15
movsx r15w, spl
mov rbp, rsp
sub rsp, 0x78
shl bx, 0xe4
movsxd r15, r12d
xor edi, edi
shr r14d, cl
cmc
cmova bx, sp
mov r14d, r8d
ror r15b, cl
rcl bh, cl
movsxd r15, ecx
mov rbx, r9
sbb sil, r15b
mov rsi, rdx
cmc
jmp 0x18017363c
test r8d, r8d
jmp 0x180173644
je 0x180173bb2
test rdx, rdx
jmp 0x180173652
jne 0x1801736ba
mov byte [r9 + 0x38], 1
xor r8d, r8d
test r11w, 0x182e
mov dword [r9 + 0x34], edi
test rsp, 0x33e750c5
xor edx, edx
mov byte [r9 + 0x30], 1
jmp 0x18017367d
xor ecx, ecx
mov dword [r9 + 0x2c], 0x16
clc
cmc
test r9b, al
xor r9d, r9d
jmp 0x180173694
mov qword [rsp + 0x28], rbx
jmp 0x18017369e
mov qword [rsp + 0x20], rdi
jmp 0x1801736a8
call fcn.18016595a
or eax, 0xffffffff
jmp 0x1801736b5
jmp 0x180173bb4
mov rax, r15
test bx, sp
movzx r13w, r13b
rcl cl, 0x9f
lea rcx, [0x18009c930]
mov r12b, bpl
sal r12b, 0x76
and eax, 0x3f
btc r12d, 0x60
mov r12, r15
sar r12, 6
movzx r13w, r14b
bswap r13w
xchg r13d, r13d
mov qword [rbp - 0x18], r12
movsx r13w, r8b
jmp 0x1801736ff
lea r13, [rax + rax*8]
mov rcx, qword [rcx + r12*8]
inc al
mov al, byte [rcx + r13*8 + 0x39]
jmp 0x180173713
mov byte [rbp - 0x48], al
jmp 0x18017371b
dec al
cmc
test dl, 0x28
cmp al, 1
jmp 0x180173728
ja 0x180173741
mov eax, r14d
not eax
cmc
test al, 1
jmp 0x18017373b
je 0x180173658
test byte [rcx + r13*8 + 0x38], 0x20
jmp 0x18017374c
je 0x18017376a
xor edx, edx
jmp 0x180173759
mov ecx, r15d
lea r8d, [rdx + 2]
jmp 0x180173765
call fcn.1800a3bf8
mov ecx, r15d
jmp 0x180173772
mov qword [rbp - 0x30], rdi
call fcn.180173ddf
lea rdx, [0x18009c930]
cmp di, 0x2bf5
test eax, eax
je 0x18017399b
mov rax, qword [rdx + r12*8]
jmp 0x18017379b
cmp byte [rax + r13*8 + 0x38], dil
jmp 0x1801737a5
jge 0x18017399b
cmp byte [rbx + 0x28], dil
jmp 0x1801737b4
jne 0x1801737db
mov rcx, rbx
jmp 0x1801737c2
call fcn.180167e90
lea rdx, [0x18009c930]
xor eax, 0x6be8041e
shrd ax, si, 0xc
and rax, rdi
mov rax, qword [rbx + 0x18]
cmp qword [rax + 0x138], rdi
jmp 0x1801737eb
jne 0x180173805
mov rax, qword [rdx + r12*8]
cmp byte [rax + r13*8 + 0x39], dil
jmp 0x1801737ff
je 0x18017399b
mov rcx, qword [rdx + r12*8]
not rdx
lea rdx, [rbp - 0x20]
jmp 0x180173815
mov rcx, qword [rcx + r13*8 + 0x28]
call qword [sym.imp.KERNEL32.dll_GetConsoleMode]
test eax, eax
je 0x180173990
movsx ecx, byte [rbp - 0x48]
test ecx, ecx
jmp 0x180173833
je 0x180173950
sub ecx, 1
jmp 0x180173841
je 0x180173855
cmp ecx, 1
jmp 0x18017384f
jne 0x180173abe
lea r12, [rsi + r14]
sbb r15b, r10b
mov qword [rbp - 0x40], rdi
sal r15b, cl
add r15b, r10b
sbb r15, rcx
mov r15, rsi
cmp rsi, r12
jmp 0x180173874
jae 0x180173942
mov r14d, dword [rbp - 0x3c]
movzx eax, word [r15]
movzx ecx, ax
jmp 0x18017388a
mov word [rbp - 0x48], ax
jmp 0x180173893
call fcn.180174447
movzx ecx, word [rbp - 0x48]
test rbx, 0x69f220ec
jmp 0x1801738ab
cmp ax, cx
jmp 0x1801738b3
jne 0x180173932
add r14d, 2
stc
test r8b, r11b
clc
mov dword [rbp - 0x3c], r14d
cmp cx, 0xa
jmp 0x1801738cf
jne 0x180173910
mov ecx, 0xd
jmp 0x1801738df
call fcn.180174447
mov ecx, 0xd
cmc
jmp 0x1801738f0
cmp ax, cx
jmp 0x1801738f8
jne 0x180173932
inc r14d
mov dword [rbp - 0x3c], r14d
jmp 0x18017390a
inc edi
clc
cmp r8b, r8b
add r15, 2
test r10, 0x7df4658e
cmp r9b, 0x65
cmp r15, r12
jmp 0x180173927
jae 0x180173942
jmp 0x18017387e
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x40], eax
mov r12b, 0x28
movsx r12, r11w
mov r12, qword [rbp - 0x18]
jmp 0x18017394b
jmp 0x180173aa5
mov r9d, r14d
movzx dx, r9b
mov qword [rsp + 0x20], rbx
movzx r8, r9w
mov r8, rsi
movsx cx, dil
lea rcx, [rbp - 0x40]
jmp 0x180173972
mov edx, r15d
jmp 0x18017397a
call fcn.180172201
movsd xmm0, qword [rax]
mov edi, dword [rax + 8]
jmp 0x18017398b
jmp 0x180173aaf
lea rdx, [0x18009c930]
bts cx, bp
mov rcx, qword [rdx + r12*8]
cmp byte [rcx + r13*8 + 0x38], dil
jmp 0x1801739a9
jge 0x180173a64
movsx ecx, byte [rbp - 0x48]
cmc
test r14, r14
test ecx, ecx
jmp 0x1801739be
je 0x180173a35
sub ecx, 1
jmp 0x1801739cc
je 0x180173a13
cmp ecx, 1
jmp 0x1801739da
jne 0x180173ac6
mov r9d, r14d
lea rcx, [rbp - 0x40]
not r8b
mov dl, r8b
movsxd r8, esi
mov r8, rsi
movzx dx, r15b
movsx dx, r15b
movzx rdx, r10w
mov edx, r15d
jmp 0x180173a09
call fcn.180172d6e
jmp 0x18017397f
mov r9d, r14d
movsxd rdx, r13d
not dh
lea rcx, [rbp - 0x40]
seta r8b
not dh
mov r8, rsi
mov edx, r15d
call fcn.18017300b
jmp 0x18017397f
mov r9d, r14d
movzx dx, r8b
xchg r8b, cl
cmovbe rcx, r10
lea rcx, [rbp - 0x40]
cwd
not edx
xchg dl, r8b
mov r8, rsi
mov edx, r15d
jmp 0x180173a5a
call fcn.180172b3b
jmp 0x18017397f
mov rcx, qword [rcx + r13*8 + 0x28]
sar dh, cl
lea r9, [rbp - 0x3c]
xor eax, eax
mov r8d, r14d
and qword [rsp + 0x20], rax
mov rdx, rsi
jmp 0x180173a81
mov qword [rbp - 0x40], rax
mov dword [rbp - 0x38], eax
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x180173aa2
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x40], eax
shl dil, cl
mov edi, dword [rbp - 0x38]
movsd xmm0, qword [rbp - 0x40]
cqo
neg ax
movsd qword [rbp - 0x30], xmm0
rol ax, cl
movsx dx, r9b
sar dl, cl
lea rdx, [0x18009c930]
stc
mov rax, qword [rbp - 0x30]
cmp dil, r11b
jmp 0x180173ad2
shr rax, 0x20
cmp ax, 0x218
test eax, eax
jmp 0x180173ae1
jne 0x180173b9d
mov eax, dword [rbp - 0x30]
test r15w, 0x2d4a
jmp 0x180173af9
test eax, eax
je 0x180173b4e
cmp eax, 5
jmp 0x180173b09
jne 0x180173b35
mov byte [rbx + 0x30], 1
jmp 0x180173b18
mov dword [rbx + 0x2c], 9
jmp 0x180173b24
mov byte [rbx + 0x38], 1
jmp 0x180173b2d
mov dword [rbx + 0x34], eax
jmp 0x1801736ad
mov ecx, dword [rbp - 0x30]
xchg dx, dx
cdq
cmovae dx, r13w
mov rdx, rbx
call fcn.180169203
jmp 0x1801736ad
mov rax, qword [rdx + r12*8]
test byte [rax + r13*8 + 0x38], 0x40
jmp 0x180173b5d
je 0x180173b71
cmp byte [rsi], 0x1a
jmp 0x180173b6b
je 0x180173bb2
and dword [rbx + 0x34], 0
jmp 0x180173b7a
mov byte [rbx + 0x30], 1
jmp 0x180173b83
mov dword [rbx + 0x2c], 0x1c
jmp 0x180173b8f
mov byte [rbx + 0x38], 1
jmp 0x180173b98
jmp 0x1801736ad
mov eax, dword [rbp - 0x2c]
clc
test dx, 0x65e1
sub eax, edi
jmp 0x180173bad
jmp 0x180173bb4
xor eax, eax
add rsp, 0x78
jmp 0x180173bc4
pop r15
movzx edi, bp
pop r14
pop r13
cmovp bx, r15w
not rdi
pop r12
movzx rbp, r15w
mov rbx, rsi
pop rdi
pop rsi
not bpl
setle bl
movsx bp, r9b
pop rbx
pop rbp
jmp 0x180173bf2
ret