Function at 0x1800348f1
Capabilities:
Write file on windows

Disassembly:
push rax
pushf
mov eax, 0x25c08d34
pushf
not eax
add eax, 0xff4afb7e
xor eax, 0x8b40e575
rol eax, 4
popf
pushf
not eax
add eax, 0xc483c75a
xor eax, 0x97db1394
rol eax, 0xbd
popf
cmp eax, 4
jne 0x18003492e
popf
pop rax
jmp 0x180034cbb
cmp eax, 0
jne 0x18003493d
popf
pop rax
jmp 0x1800349f1
cmp eax, 3
jne 0x18003494c
popf
pop rax
jmp 0x180034c08
cmp eax, 1
jne 0x18003495b
popf
pop rax
jmp 0x180034a8d
cmp eax, 0xd
jne 0x18003496a
popf
pop rax
jmp 0x18003503f
cmp eax, 7
jne 0x180034979
popf
pop rax
jmp 0x180034e37
cmp eax, 6
jne 0x180034988
popf
pop rax
jmp 0x180034dca
cmp eax, 0xb
jne 0x180034997
popf
pop rax
jmp 0x180034fb3
cmp eax, 0xc
jne 0x1800349a6
popf
pop rax
jmp 0x180035005
cmp eax, 8
jne 0x1800349b5
popf
pop rax
jmp 0x180034ea8
cmp eax, 5
jne 0x1800349c4
popf
pop rax
jmp 0x180034d4c
cmp eax, 2
jne 0x1800349d3
popf
pop rax
jmp 0x180034b23
cmp eax, 9
jne 0x1800349e2
popf
pop rax
jmp 0x180034edf
cmp eax, 0xa
jne 0x1800349f1
popf
pop rax
jmp 0x180034f54
push rbx
sub rsp, 0x60
mov rax, qword [0x18000b008]
xor rax, rsp
mov qword [rsp + 0x58], rax
cmp qword [rcx + 0x68], 0
mov rbx, rcx
je 0x180034a47
push rax
pushf
mov eax, 0x321345b8
pushf
not eax
add eax, 0x93ef3d95
xor eax, 0xd3cd007d
rol eax, 0xd6
popf
pushf
not eax
add eax, 0xe6b86dd3
xor eax, 0xfe4fe815
rol eax, 0x8e
popf
jmp 0x18003491f
push rax
pushf
mov eax, 0xe72f11e7
pushf
not eax
add eax, 0x9be37a0e
xor eax, 0xab47a320
rol eax, 0x8b
popf
pushf
not eax
add eax, 0xa7953d2e
xor eax, 0xe8689c49
rol eax, 4
popf
pushf
not eax
add eax, 0x84e0e106
xor eax, 0xbf87da87
rol eax, 0xa4
popf
jmp 0x18003491f
cmp byte [rcx + 0x71], 0
je 0x180034aca
push rax
pushf
mov eax, 0xcfdae408
pushf
not eax
add eax, 0xe51d2ac2
xor eax, 0xa18c596f
rol eax, 0xb7
popf
pushf
not eax
add eax, 0xa9053855
xor eax, 0xbdaad141
rol eax, 0x3f
popf
jmp 0x18003491f
push rax
pushf
mov eax, 0x891211ae
pushf
not eax
add eax, 0xa2ae5aa8
xor eax, 0xb132b095
rol eax, 0x29
popf
pushf
not eax
add eax, 0xe811a333
xor eax, 0x821ff045
rol eax, 0x83
popf
pushf
not eax
add eax, 0x80d3b768
xor eax, 0xb56c62a5
rol eax, 9
popf
pushf
not eax
add eax, 0xe2a112f6
xor eax, 0xd78f4ddf
rol eax, 3
popf
jmp 0x18003491f
mov rax, qword [rcx]
mov edx, 0x5212d8d4
pushf
not edx
add edx, 0xea30794c
xor edx, 0x92818075
rol edx, 0x73
popf
pushf
not edx
add edx, 0xba9b14c5
xor edx, 0xbab8355f
rol edx, 0xab
popf
pushf
not edx
add edx, 0xf727afc2
xor edx, 0x9d2e303f
rol edx, 0xe
popf
mov qword [rsp + 0x78], rdi
jmp 0x180034b70
call qword [rax + 0x18]
cmp eax, 0xffffffff
je 0x180034bc2
push rax
pushf
mov eax, 0x632ee9d
pushf
not eax
add eax, 0xc950a7d9
xor eax, 0xd08ca152
rol eax, 0x56
popf
pushf
not eax
add eax, 0x97a5036d
xor eax, 0xe7a229dc
rol eax, 0xc
popf
pushf
not eax
add eax, 0xced2eccf
xor eax, 0xab634022
rol eax, 0xd8
popf
jmp 0x18003491f
push rax
pushf
mov eax, 0x959bce75
pushf
not eax
add eax, 0xb37e68e6
xor eax, 0xaf00bb46
rol eax, 0x31
popf
pushf
not eax
add eax, 0xecb68d3d
xor eax, 0xa398bfd3
rol eax, 0xba
popf
pushf
not eax
add eax, 0x836d9264
xor eax, 0xd7464f01
rol eax, 0xfa
popf
jmp 0x18003491f
mov rcx, qword [rbx + 0x68]
lea rax, [rsp + 0x30]
lea rdx, [rbx + 0x74]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x58]
lea r8, [rsp + 0x38]
jmp 0x180034c25
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::codecvt_char__char__struct__Mbstatet_::unshift_struct__Mbstatet____ptr64__char____ptr64__char____ptr64__char____ptr64____ptr64_const___ptr64]
test eax, eax
je 0x180034c88
push rax
pushf
mov eax, 0x7ce0bbc8
pushf
not eax
add eax, 0xab803f6b
xor eax, 0xc35d3c14
rol eax, 0x8f
popf
pushf
not eax
add eax, 0xfccea688
xor eax, 0xc85e2c57
rol eax, 0x5c
popf
pushf
not eax
add eax, 0xb99bb9c2
xor eax, 0x894663c9
rol eax, 0x64
popf
pushf
not eax
add eax, 0xa30ffa9c
xor eax, 0xd1a755e1
rol eax, 0x5f
popf
jmp 0x18003491f
push rax
pushf
mov eax, 0x8a19971a
pushf
not eax
add eax, 0xb2206709
xor eax, 0xfa59a68f
rol eax, 0xbb
popf
pushf
not eax
add eax, 0xb1fb06db
xor eax, 0xa3e80b8f
rol eax, 0xec
popf
jmp 0x18003491f
sub eax, 1
je 0x180034d19
push rax
pushf
mov eax, 0xca3b7c6b
pushf
not eax
add eax, 0xd1534cc9
xor eax, 0x808d5ea2
rol eax, 0x28
popf
pushf
not eax
add eax, 0xa7287bd3
xor eax, 0x9071908a
rol eax, 0x69
popf
pushf
not eax
add eax, 0xb4b52ee7
xor eax, 0x92ad8e14
rol eax, 0x7c
popf
pushf
not eax
add eax, 0x8984f145
xor eax, 0xf27d8be9
rol eax, 0x58
popf
jmp 0x18003491f
push rax
pushf
mov eax, 0xf4589d69
pushf
not eax
add eax, 0x8db7f2bc
xor eax, 0xb98ee5da
rol eax, 0x4f
popf
pushf
not eax
add eax, 0xab015ce4
xor eax, 0xd2b44c7b
rol eax, 0x90
popf
jmp 0x18003491f
cmp eax, 2
jne 0x180034d84
push rax
pushf
mov eax, 0xeddad82
pushf
not eax
add eax, 0xd88c1901
xor eax, 0x89534d59
rol eax, 0xf7
popf
pushf
not eax
add eax, 0xda975d05
xor eax, 0xc776de71
rol eax, 0x8a
popf
jmp 0x18003491f
push rax
pushf
mov eax, 0x2ba57741
pushf
not eax
add eax, 0xf709edb0
xor eax, 0xc189413f
rol eax, 0x6a
popf
pushf
not eax
add eax, 0xc5a8b564
xor eax, 0xa3243d7e
rol eax, 0xcd
popf
pushf
not eax
add eax, 0xbb195c39
xor eax, 0xd1f085bb
rol eax, 0x2d
popf
jmp 0x18003491f
mov byte [rbx + 0x71], 0
mov al, 1
pushf
not al
add al, 0x65
xor al, 0x5c
rol al, 0x88
popf
pushf
not al
add al, 0x6d
xor al, 0xbb
rol al, 0x26
popf
pushf
not al
add al, 0x72
xor al, 0x12
rol al, 0xfb
popf
pushf
not al
add al, 0xbb
xor al, 0xc5
rol al, 0x70
popf
push rax
pushf
mov eax, 0xa7a06006
pushf
not eax
add eax, 0xfc5943a8
xor eax, 0xead19eaf
rol eax, 0x98
popf
pushf
not eax
add eax, 0xfe67fc02
xor eax, 0xef499284
rol eax, 0xcb
popf
jmp 0x18003491f
mov rdi, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x58]
xor rcx, rsp
call fcn.18002495c
add rsp, 0x60
pop rbx
ret
mov byte [rbx + 0x71], 0
push rax
pushf
mov eax, 0xe8b15e5a
pushf
not eax
add eax, 0xaced53af
xor eax, 0x8f9f8af9
rol eax, 0x96
popf
pushf
not eax
add eax, 0xa95cb43c
xor eax, 0xbe09cf9c
rol eax, 0x39
popf
jmp 0x18003491f
mov rdi, qword [rsp + 0x30]
lea rax, [rsp + 0x38]
sub rdi, rax
je 0x180034f21
push rax
pushf
mov eax, 0xfc9c6ccf
pushf
not eax
add eax, 0xdfe15bd7
xor eax, 0xa63c3a46
rol eax, 0xc3
popf
pushf
not eax
add eax, 0xc6a07ca4
xor eax, 0x9ad89299
rol eax, 0xd3
popf
jmp 0x18003491f
push rax
pushf
mov eax, 0x13983520
pushf
not eax
add eax, 0xdc150753
xor eax, 0x89600df5
rol eax, 0x44
popf
pushf
not eax
add eax, 0xbbece772
xor eax, 0xaa1e5afd
rol eax, 0x14
popf
jmp 0x18003491f
mov r9, qword [rbx + 0x80]
lea rcx, [rsp + 0x38]
mov r8, rdi
mov edx, 0x12db7b3e
pushf
not edx
add edx, 0xb9f7844c
xor edx, 0xc5d3002d
rol edx, 0x3e
popf
pushf
not edx
add edx, 0xc3f36d5c
xor edx, 0xee5ea4f3
rol edx, 0xa2
popf
pushf
not edx
add edx, 0xca88f366
xor edx, 0xbd04b3e4
rol edx, 0xc5
popf
jmp 0x180034fa8
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rdi, rax
jne 0x180035005
cmp byte [rbx + 0x71], 0
sete al
jmp 0x180034e37
xor al, al
jmp 0x180034e37
mov al, 0x49
pushf
not al
add al, 0x99
xor al, 0x6f
rol al, 0xf4
popf
pushf
not al
add al, 0xd4
xor al, 0xd9
rol al, 0x55
popf
mov rcx, qword [rsp + 0x58]
xor rcx, rsp
call fcn.18002495c
add rsp, 0x60
pop rbx
ret