Function at 0x1800760e5
Capabilities:
Write file on windows

Disassembly:
push rax
pushf
mov eax, 0xab6776d6
pushf
not eax
add eax, 0xd08b6b78
xor eax, 0x91eaaa95
rol eax, 0xd8
popf
pushf
not eax
add eax, 0xf0543114
xor eax, 0xbb9f67b5
rol eax, 2
popf
cmp eax, 4
jne 0x180076122
popf
pop rax
jmp 0x180076440
cmp eax, 0
jne 0x180076131
popf
pop rax
jmp 0x1800761c7
cmp eax, 3
jne 0x180076140
popf
pop rax
jmp 0x180076397
cmp eax, 1
jne 0x18007614f
popf
pop rax
jmp 0x180076330
cmp eax, 0xa
jne 0x18007615e
popf
pop rax
jmp 0x180076768
cmp eax, 7
jne 0x18007616d
popf
pop rax
jmp 0x1800765ce
cmp eax, 6
jne 0x18007617c
popf
pop rax
jmp 0x180076507
cmp eax, 0xb
jne 0x18007618b
popf
pop rax
jmp 0x1800767a3
cmp eax, 9
jne 0x18007619a
popf
pop rax
jmp 0x180076709
cmp eax, 8
jne 0x1800761a9
popf
pop rax
jmp 0x180076652
cmp eax, 5
jne 0x1800761b8
popf
pop rax
jmp 0x18007647c
cmp eax, 2
jne 0x1800761c7
popf
pop rax
jmp 0x18007638e
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r14
mov eax, 0xd8720f6c
pushf
not eax
add eax, 0xb2daca6c
xor eax, 0xaf01e1a9
rol eax, 0xeb
popf
pushf
not eax
add eax, 0x9a9a905e
xor eax, 0x97ba8a49
rol eax, 0x5b
popf
pushf
not eax
add eax, 0x851615e5
xor eax, 0xbae73816
rol eax, 0xa3
popf
pushf
not eax
add eax, 0xc9d36241
xor eax, 0xe128c868
rol eax, 0x72
popf
call fcn.1800f433c
sub rsp, rax
mov rax, qword [0x180040280]
xor rax, rsp
mov qword [rsp + 0x1440], rax
movsxd r10, edx
mov rdi, rcx
mov rax, r10
mov ebp, r9d
sar rax, 6
lea rcx, [0x1f1ebc738]
pushf
sub rcx, 0x71e79ea8
popf
and r10d, 0x3f
push r8
not r8
sub rbp, r8
pop r8
sub rbp, 1
mov rsi, r8
mov rax, qword [rcx + rax*8]
lea rdx, [r10 + r10*8]
mov r14, qword [rax + rdx*8 + 0x28]
xor eax, eax
mov qword [rdi], rax
mov dword [rdi + 8], eax
cmp r8, rbp
jae 0x1800762ea
push rax
pushf
mov eax, 0x6a1e73ce
pushf
not eax
add eax, 0x89b7d1cf
xor eax, 0x8cc3610c
rol eax, 3
popf
pushf
not eax
add eax, 0xc8f3b2f3
xor eax, 0xae2f65c6
rol eax, 0x10
popf
pushf
not eax
add eax, 0xd54502bb
xor eax, 0xbd5512f8
rol eax, 0x47
popf
pushf
not eax
add eax, 0x8b2d95d4
xor eax, 0xb6656baf
rol eax, 0x41
popf
jmp 0x180076113
push rax
pushf
mov eax, 0x7573e124
pushf
not eax
add eax, 0xc276f7d0
xor eax, 0xb7448fd8
rol eax, 0xbd
popf
pushf
not eax
add eax, 0xc46f2fd8
xor eax, 0xb47dbca4
rol eax, 0x13
popf
pushf
not eax
add eax, 0xef59623d
xor eax, 0xb6e9d760
rol eax, 0xc5
popf
jmp 0x180076113
lea rbx, [rsp + 0x40]
push rax
pushf
mov eax, 0x86f25df3
pushf
not eax
add eax, 0xb433232f
xor eax, 0xd8fc3706
rol eax, 0x1e
popf
pushf
not eax
add eax, 0xf736aac0
xor eax, 0xdf9921e7
rol eax, 0xbc
popf
pushf
not eax
add eax, 0x8a4e67ee
xor eax, 0xe332b453
rol eax, 0xba
popf
pushf
not eax
add eax, 0x8a6af901
xor eax, 0xfab79066
rol eax, 0x3b
popf
jmp 0x180076113
cmp rsi, rbp
jae 0x180076507
mov al, byte [rsi]
inc rsi
cmp al, 0xa
jne 0x1800763f9
push rax
pushf
mov eax, 0x356b0dc6
pushf
not eax
add eax, 0xfc6a9cc1
xor eax, 0xdc43c3d3
rol eax, 0x7c
popf
pushf
not eax
add eax, 0xdb4993db
xor eax, 0xd3dc87c3
rol eax, 0xd6
popf
pushf
not eax
add eax, 0xc4b0475a
xor eax, 0x8997b6ce
rol eax, 0x6c
popf
pushf
not eax
add eax, 0x804e933a
xor eax, 0xa03221b4
rol eax, 0x35
popf
jmp 0x180076113
push rax
pushf
mov eax, 0xe5072353
pushf
not eax
add eax, 0x965608cc
xor eax, 0xfcc6e1e2
rol eax, 0xf7
popf
pushf
not eax
add eax, 0x9ff8e5bf
xor eax, 0xfc772bbf
rol eax, 0xbf
popf
pushf
not eax
add eax, 0xae4f2ab6
xor eax, 0xdcfca5b4
rol eax, 0xc7
popf
jmp 0x180076113
inc dword [rdi + 8]
mov byte [rbx], 0xd
inc rbx
push rax
pushf
mov eax, 0x5a19e732
pushf
not eax
add eax, 0xc3babc1e
xor eax, 0xb0f8479e
rol eax, 0x41
popf
pushf
not eax
add eax, 0xa7524665
xor eax, 0xf4a11f7c
rol eax, 0xc0
popf
jmp 0x180076113
mov byte [rbx], al
inc rbx
lea rax, [rsp + 0x143f]
cmp rbx, rax
jb 0x1800764c1
push rax
pushf
mov eax, 0x9ba746d
pushf
not eax
add eax, 0x8b5983ac
xor eax, 0xe8b437dd
rol eax, 0xb2
popf
pushf
not eax
add eax, 0xa29ee6a9
xor eax, 0xbf7141fc
rol eax, 0x6c
popf
jmp 0x180076113
push rax
pushf
mov eax, 0x62689ac2
pushf
not eax
add eax, 0x95281f10
xor eax, 0xae049f12
rol eax, 0x2b
popf
pushf
not eax
add eax, 0x85ec5ec4
xor eax, 0xdb6dfadd
rol eax, 0x4e
popf
pushf
not eax
add eax, 0xf3e8df9e
xor eax, 0xcd2801ee
rol eax, 0x9d
popf
jmp 0x180076113
and qword [rsp + 0x20], 0
lea rax, [rsp + 0x40]
sub ebx, eax
lea r9, [rsp + 0x30]
mov r8d, ebx
lea rdx, [rsp + 0x40]
mov rcx, r14
jmp 0x180076525
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x180076588
push rax
pushf
mov eax, 0xf5e91a59
pushf
not eax
add eax, 0x9f260416
xor eax, 0xc54645fc
rol eax, 0x49
popf
pushf
not eax
add eax, 0xd94dd680
xor eax, 0xa0ab051b
rol eax, 0x52
popf
pushf
not eax
add eax, 0xaef3bc41
xor eax, 0xe09f5788
rol eax, 0x24
popf
pushf
not eax
add eax, 0xc1a50c91
xor eax, 0xf7c6f798
rol eax, 0x11
popf
jmp 0x180076113
push rax
pushf
mov eax, 0xf38bc9ac
pushf
not eax
add eax, 0xbdd4365f
xor eax, 0xbd918482
rol eax, 0x81
popf
pushf
not eax
add eax, 0xe7c4c3c6
xor eax, 0xc7ef4979
rol eax, 0x24
popf
pushf
not eax
add eax, 0xa8a022ab
xor eax, 0xa8a48267
rol eax, 0xba
popf
jmp 0x180076113
mov eax, dword [rsp + 0x30]
add dword [rdi + 4], eax
cmp eax, ebx
jb 0x18007660c
push rax
pushf
mov eax, 0x5d0567e7
pushf
not eax
add eax, 0xd8e3b157
xor eax, 0x8e43877a
rol eax, 0x61
popf
pushf
not eax
add eax, 0xc63b6160
xor eax, 0x9affc534
rol eax, 0xe5
popf
jmp 0x180076113
push rax
pushf
mov eax, 0xde51d6bf
pushf
not eax
add eax, 0xab25178b
xor eax, 0xd991d845
rol eax, 0x1d
popf
pushf
not eax
add eax, 0xa859cd1b
xor eax, 0xdd53cc8b
rol eax, 0x36
popf
pushf
not eax
add eax, 0x9f75146a
xor eax, 0xa6e6dbbc
rol eax, 0x45
popf
jmp 0x180076113
cmp rsi, rbp
jb 0x1800766b0
push rax
pushf
mov eax, 0x1b621a83
pushf
not eax
add eax, 0xc12cbc82
xor eax, 0xba0b46d2
rol eax, 0x66
popf
pushf
not eax
add eax, 0xb1a8037e
xor eax, 0xb5e53692
rol eax, 0x1c
popf
pushf
not eax
add eax, 0xa8381069
xor eax, 0xdaaf13f5
rol eax, 0x4f
popf
pushf
not eax
add eax, 0xb964aedb
xor eax, 0x931cc3b8
rol eax, 0xb7
popf
jmp 0x180076113
push rax
pushf
mov eax, 0x25bad1b2
pushf
not eax
add eax, 0x881564e7
xor eax, 0x96b919ce
rol eax, 0x6e
popf
pushf
not eax
add eax, 0x8b499e25
xor eax, 0xf276720f
rol eax, 0x37
popf
pushf
not eax
add eax, 0xb30ea12c
xor eax, 0x8572a56a
rol eax, 0x71
popf
pushf
not eax
add eax, 0xd2232e37
xor eax, 0xc310a60f
rol eax, 0x30
popf
jmp 0x180076113
jmp 0x1800767a3
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rdi], eax
push rax
pushf
mov eax, 0x1142021b
pushf
not eax
add eax, 0x96d9aa26
xor eax, 0xf297c6b9
rol eax, 0xe
popf
pushf
not eax
add eax, 0xa939d6e0
xor eax, 0x8d8cfc9f
rol eax, 0x59
popf
jmp 0x180076113
mov rax, rdi
mov rcx, qword [rsp + 0x1440]
xor rcx, rsp
call fcn.1800e8c52
lea r11, [rsp + 0x1450]
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x30]
mov rsp, r11
pop r14
pop rdi
pop rsi
ret