Function at 0x1800a7e80
Capabilities:
Write file on windows

Disassembly:
push rax
pushf
mov eax, 0x5a956295
pushf
not eax
add eax, 0xa698b2ee
xor eax, 0xa5dab2bb
rol eax, 0x44
popf
pushf
not eax
add eax, 0x9323d737
xor eax, 0xf585a8f8
rol eax, 0x4f
popf
cmp eax, 4
jne 0x1800a7ebd
popf
pop rax
jmp 0x1800a81a9
cmp eax, 0
jne 0x1800a7ecc
popf
pop rax
jmp 0x1800a7f62
cmp eax, 3
jne 0x1800a7edb
popf
pop rax
jmp 0x1800a80fd
cmp eax, 1
jne 0x1800a7eea
popf
pop rax
jmp 0x1800a80bc
cmp eax, 0xa
jne 0x1800a7ef9
popf
pop rax
jmp 0x1800a8534
cmp eax, 7
jne 0x1800a7f08
popf
pop rax
jmp 0x1800a83d3
cmp eax, 6
jne 0x1800a7f17
popf
pop rax
jmp 0x1800a8319
cmp eax, 0xb
jne 0x1800a7f26
popf
pop rax
jmp 0x1800a8582
cmp eax, 9
jne 0x1800a7f35
popf
pop rax
jmp 0x1800a84e8
cmp eax, 8
jne 0x1800a7f44
popf
pop rax
jmp 0x1800a846a
cmp eax, 5
jne 0x1800a7f53
popf
pop rax
jmp 0x1800a8266
cmp eax, 2
jne 0x1800a7f62
popf
pop rax
jmp 0x1800a80f4
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r14
mov eax, 0x5f0a50ef
pushf
not eax
add eax, 0xf08bca9f
xor eax, 0x829d6f51
rol eax, 0x24
popf
pushf
not eax
add eax, 0xd30c0847
xor eax, 0xca21b687
rol eax, 0xbd
popf
pushf
not eax
add eax, 0xfc1a4dde
xor eax, 0xef03898c
rol eax, 0x6a
popf
pushf
not eax
add eax, 0xa96c3746
xor eax, 0xeaa3023f
rol eax, 0x14
popf
call fcn.1800f48b0
sub rsp, rax
mov rax, qword [0x180040280]
xor rax, rsp
mov qword [rsp + 0x1440], rax
movsxd r10, edx
mov rdi, rcx
mov rax, r10
mov ebp, r9d
sar rax, 6
lea rcx, [0x1dde425ec]
pushf
sub rcx, 0x5ddffd7c
popf
and r10d, 0x3f
push r8
not r8
sub rbp, r8
pop r8
sub rbp, 1
mov rsi, r8
mov rax, qword [rcx + rax*8]
lea rdx, [r10 + r10*8]
mov r14, qword [rax + rdx*8 + 0x28]
xor eax, eax
mov qword [rdi], rax
mov dword [rdi + 8], eax
cmp r8, rbp
jae 0x1800a8076
push rax
pushf
mov eax, 0x8d73e345
pushf
not eax
add eax, 0xe6af5928
xor eax, 0x8e305494
rol eax, 0xd3
popf
pushf
not eax
add eax, 0xb6ae498f
xor eax, 0xfd91ee48
rol eax, 0x16
popf
pushf
not eax
add eax, 0xc3ef69db
xor eax, 0xe499983b
rol eax, 0x35
popf
jmp 0x1800a7eae
push rax
pushf
mov eax, 0x1e6c99b5
pushf
not eax
add eax, 0xe5fbc385
xor eax, 0xd662c4d2
rol eax, 0x28
popf
pushf
not eax
add eax, 0xb9bb6cbb
xor eax, 0xb3660d67
rol eax, 0xfd
popf
pushf
not eax
add eax, 0x94166f9e
xor eax, 0xc50167f4
rol eax, 0x1c
popf
jmp 0x1800a7eae
lea rbx, [rsp + 0x40]
push rax
pushf
mov eax, 0xfc1832e1
pushf
not eax
add eax, 0x98c67d20
xor eax, 0xc17f816e
rol eax, 0xdd
popf
pushf
not eax
add eax, 0xad26f41b
xor eax, 0xa36cbab0
rol eax, 0x68
popf
jmp 0x1800a7eae
cmp rsi, rbp
jae 0x1800a8319
movzx eax, word [rsi]
add rsi, 2
cmp ax, 0xa
jne 0x1800a8150
push rax
pushf
mov eax, 0xc312339d
pushf
not eax
add eax, 0xbe064350
xor eax, 0x863fde5c
rol eax, 0x54
popf
pushf
not eax
add eax, 0xaa0fda94
xor eax, 0xd41b7d41
rol eax, 0xb6
popf
pushf
not eax
add eax, 0xd70e8b5a
xor eax, 0xb134be7d
rol eax, 0xb1
popf
jmp 0x1800a7eae
push rax
pushf
mov eax, 0x4d9a38b6
pushf
not eax
add eax, 0xd88b5725
xor eax, 0xda538e6a
rol eax, 0xfd
popf
pushf
not eax
add eax, 0xef7010d1
xor eax, 0xd7f0e834
rol eax, 0x86
popf
pushf
not eax
add eax, 0xb41074f8
xor eax, 0xf9e328b2
rol eax, 0xd6
popf
pushf
not eax
add eax, 0x89978696
xor eax, 0xab1b503b
rol eax, 0x7f
popf
jmp 0x1800a7eae
add dword [rdi + 8], 2
mov ecx, 0x982a803d
pushf
not ecx
add ecx, 0xee97f0ac
xor ecx, 0xb3db3e20
rol ecx, 0xb9
popf
pushf
not ecx
add ecx, 0xde365f4f
xor ecx, 0x963e9b63
rol ecx, 0x6a
popf
pushf
not ecx
add ecx, 0xf286b040
xor ecx, 0xb27c4bd4
rol ecx, 0xfd
popf
pushf
not ecx
add ecx, 0xc69097dd
xor ecx, 0x843ce376
rol ecx, 0x54
popf
mov word [rbx], cx
add rbx, 2
push rax
pushf
mov eax, 0xf6f15ccb
pushf
not eax
add eax, 0xd646c92e
xor eax, 0x93c2b576
rol eax, 0xde
popf
pushf
not eax
add eax, 0x84702330
xor eax, 0xbe650187
rol eax, 0xb1
popf
pushf
not eax
add eax, 0xa4792440
xor eax, 0x899bf612
rol eax, 0xd8
popf
pushf
not eax
add eax, 0xeb06ba94
xor eax, 0xf743b420
rol eax, 0xd0
popf
jmp 0x1800a7eae
mov word [rbx], ax
add rbx, 2
lea rax, [rsp + 0x143e]
cmp rbx, rax
jb 0x1800a82c0
push rax
pushf
mov eax, 0x284b5300
pushf
not eax
add eax, 0x977d23d1
xor eax, 0xbb058628
rol eax, 0x8d
popf
pushf
not eax
add eax, 0xc631a085
xor eax, 0xff6526ed
rol eax, 0x93
popf
pushf
not eax
add eax, 0xc77e634d
xor eax, 0xaed0418f
rol eax, 0x8d
popf
jmp 0x1800a7eae
push rax
pushf
mov eax, 0xb22503a5
pushf
not eax
add eax, 0x9a4d5d25
xor eax, 0xacd1facc
rol eax, 0xb8
popf
pushf
not eax
add eax, 0xd96aa5c1
xor eax, 0xf162b922
rol eax, 0xc5
popf
pushf
not eax
add eax, 0xe8c34218
xor eax, 0xc7068d18
rol eax, 0x1f
popf
pushf
not eax
add eax, 0x8cf963b3
xor eax, 0xf0865831
rol eax, 0xa1
popf
jmp 0x1800a7eae
and qword [rsp + 0x20], 0
lea rax, [rsp + 0x40]
sub rbx, rax
lea r9, [rsp + 0x30]
sar rbx, 1
lea rdx, [rsp + 0x40]
add ebx, ebx
mov rcx, r14
mov r8d, ebx
jmp 0x1800a833d
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x1800a837a
push rax
pushf
mov eax, 0x4ab476dc
pushf
not eax
add eax, 0xc587098e
xor eax, 0xc43f9089
rol eax, 0xe
popf
pushf
not eax
add eax, 0xeb3e7a8a
xor eax, 0xaab3cace
rol eax, 0x51
popf
jmp 0x1800a7eae
push rax
pushf
mov eax, 0x9f8672fb
pushf
not eax
add eax, 0x82f69612
xor eax, 0x97ec78fe
rol eax, 0xd
popf
pushf
not eax
add eax, 0xcf71c961
xor eax, 0xd732d1df
rol eax, 0xd3
popf
pushf
not eax
add eax, 0xe1717af1
xor eax, 0xbb38d78f
rol eax, 0xc7
popf
pushf
not eax
add eax, 0x88facd32
xor eax, 0x96f93430
rol eax, 0x7e
popf
jmp 0x1800a7eae
mov eax, dword [rsp + 0x30]
add dword [rdi + 4], eax
cmp eax, ebx
jb 0x1800a8411
push rax
pushf
mov eax, 0x65b9d11a
pushf
not eax
add eax, 0xf5d27a3d
xor eax, 0x80307c46
rol eax, 0x69
popf
pushf
not eax
add eax, 0xe2faab1d
xor eax, 0x934fe2fc
rol eax, 0x4a
popf
jmp 0x1800a7eae
push rax
pushf
mov eax, 0x660c52db
pushf
not eax
add eax, 0xf0df1ec3
xor eax, 0x8fc9a900
rol eax, 0xb3
popf
pushf
not eax
add eax, 0xe66c2e4b
xor eax, 0xacea812c
rol eax, 0x21
popf
pushf
not eax
add eax, 0x9bee4996
xor eax, 0xd159c479
rol eax, 0x2c
popf
pushf
not eax
add eax, 0x8aaf6261
xor eax, 0xb258020a
rol eax, 0x64
popf
jmp 0x1800a7eae
cmp rsi, rbp
jb 0x1800a84b5
push rax
pushf
mov eax, 0xcfacb6ed
pushf
not eax
add eax, 0xff6c3ce0
xor eax, 0xf38549cc
rol eax, 0x9e
popf
pushf
not eax
add eax, 0x8e452b5c
xor eax, 0x8d65888b
rol eax, 0x7d
popf
pushf
not eax
add eax, 0xcc90d9db
xor eax, 0xc1465bc3
rol eax, 0x83
popf
jmp 0x1800a7eae
push rax
pushf
mov eax, 0xbab1660f
pushf
not eax
add eax, 0xdcc94f7b
xor eax, 0x91023f09
rol eax, 0x9e
popf
pushf
not eax
add eax, 0xb0f0b296
xor eax, 0x842b3cfd
rol eax, 0xc1
popf
jmp 0x1800a7eae
jmp 0x1800a8582
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rdi], eax
push rax
pushf
mov eax, 0xfbc37610
pushf
not eax
add eax, 0xf1c14b4f
xor eax, 0x8390efb2
rol eax, 0xe8
popf
pushf
not eax
add eax, 0xca3ae986
xor eax, 0xc0922650
rol eax, 0xbb
popf
pushf
not eax
add eax, 0x86816a15
xor eax, 0x8994d662
rol eax, 0xbd
popf
jmp 0x1800a7eae
mov rax, rdi
mov rcx, qword [rsp + 0x1440]
xor rcx, rsp
call fcn.1800e9129
lea r11, [rsp + 0x1450]
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x30]
mov rsp, r11
pop r14
pop rdi
pop rsi
ret