Function at 0x1800f3377
Capabilities:
Write file on windows

Disassembly:
push rax
pushf
mov eax, 0x90ee031
pushf
not eax
add eax, 0x909b5e1a
xor eax, 0x9b0c3fc5
rol eax, 0xc7
popf
pushf
not eax
add eax, 0xa4ddc4c6
xor eax, 0xd397dc58
rol eax, 0x54
popf
pushf
not eax
add eax, 0xf5f04504
xor eax, 0xafaf9650
rol eax, 0x1f
popf
pushf
not eax
add eax, 0xbaf6b814
xor eax, 0x8a491605
rol eax, 0xd3
popf
cmp eax, 4
jne 0x1800f33da
popf
pop rax
jmp 0x1800f372b
cmp eax, 0
jne 0x1800f33e9
popf
pop rax
jmp 0x1800f348e
cmp eax, 3
jne 0x1800f33f8
popf
pop rax
jmp 0x1800f3692
cmp eax, 1
jne 0x1800f3407
popf
pop rax
jmp 0x1800f35dc
cmp eax, 0xa
jne 0x1800f3416
popf
pop rax
jmp 0x1800f3ab7
cmp eax, 7
jne 0x1800f3425
popf
pop rax
jmp 0x1800f3958
cmp eax, 6
jne 0x1800f3434
popf
pop rax
jmp 0x1800f3834
cmp eax, 0xb
jne 0x1800f3443
popf
pop rax
jmp 0x1800f3b0e
cmp eax, 0xc
jne 0x1800f3452
popf
pop rax
jmp 0x1800f3b5c
cmp eax, 8
jne 0x1800f3461
popf
pop rax
jmp 0x1800f39ea
cmp eax, 5
jne 0x1800f3470
popf
pop rax
jmp 0x1800f37ba
cmp eax, 2
jne 0x1800f347f
popf
pop rax
jmp 0x1800f3614
cmp eax, 9
jne 0x1800f348e
popf
pop rax
jmp 0x1800f3aab
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r12
push r14
push r15
mov eax, 0xc202c177
pushf
not eax
add eax, 0xbf3dc6e0
xor eax, 0xdac29459
rol eax, 0x6c
popf
pushf
not eax
add eax, 0xcb7130f4
xor eax, 0xb84855fb
rol eax, 0x4c
popf
pushf
not eax
add eax, 0x97452a86
xor eax, 0xbc8c31e6
rol eax, 0xeb
popf
call fcn.1800f48b0
sub rsp, rax
mov rax, qword [0x180040280]
xor rax, rsp
mov qword [rsp + 0x1460], rax
movsxd r10, edx
mov rbx, rcx
mov rax, r10
mov r14d, r9d
sar rax, 6
lea rcx, [0x1f1fbc09d]
pushf
sub rcx, 0x71f7982d
popf
and r10d, 0x3f
push r8
not r8
sub r14, r8
pop r8
sub r14, 1
mov r15, r8
mov rdi, r8
mov rax, qword [rcx + rax*8]
lea rdx, [r10 + r10*8]
mov r12, qword [rax + rdx*8 + 0x28]
xor eax, eax
mov qword [rbx], rax
cmp r8, r14
mov dword [rbx + 8], eax
jae 0x1800f3596
push rax
pushf
mov eax, 0x980bb465
pushf
not eax
add eax, 0x8e147640
xor eax, 0xcbd7b1ee
rol eax, 0x5d
popf
pushf
not eax
add eax, 0x98cd9024
xor eax, 0xb5ff8646
rol eax, 0xc3
popf
pushf
not eax
add eax, 0xe45b8c84
xor eax, 0xbcea69a4
rol eax, 0x9f
popf
jmp 0x1800f33cb
push rax
pushf
mov eax, 0xe45af894
pushf
not eax
add eax, 0xfd95eb26
xor eax, 0xdf1d7765
rol eax, 0x11
popf
pushf
not eax
add eax, 0xe7a72704
xor eax, 0xb59789a3
rol eax, 0xb8
popf
pushf
not eax
add eax, 0x9fd018ec
xor eax, 0x8861ee18
rol eax, 0x3c
popf
jmp 0x1800f33cb
lea rax, [rsp + 0x50]
push rax
pushf
mov eax, 0x13475341
pushf
not eax
add eax, 0xf48cf8eb
xor eax, 0xf96fb676
rol eax, 0x86
popf
pushf
not eax
add eax, 0xe33bf134
xor eax, 0xd8b6796d
rol eax, 0x52
popf
jmp 0x1800f33cb
cmp rdi, r14
jae 0x1800f364c
push rax
pushf
mov eax, 0x6b4813c1
pushf
not eax
add eax, 0xca6e3abc
xor eax, 0xefe22ba5
rol eax, 0x68
popf
pushf
not eax
add eax, 0x8d6c7210
xor eax, 0xc8df125f
rol eax, 0x89
popf
jmp 0x1800f33cb
push rax
pushf
mov eax, 0xd5d6add0
pushf
not eax
add eax, 0x8f059ef6
xor eax, 0xd5783d97
rol eax, 0x8c
popf
pushf
not eax
add eax, 0xb96e5790
xor eax, 0xda9efd0a
rol eax, 0x2a
popf
pushf
not eax
add eax, 0xf494a8b0
xor eax, 0xfd5da697
rol eax, 0x7b
popf
jmp 0x1800f33cb
movzx ecx, word [rdi]
add rdi, 2
cmp cx, 0xa
jne 0x1800f36f8
push rax
pushf
mov eax, 0xd64a38be
pushf
not eax
add eax, 0xb48edd23
xor eax, 0xb4588835
rol eax, 0xab
popf
pushf
not eax
add eax, 0xd18a537e
xor eax, 0x9bf3eeb0
rol eax, 0xcc
popf
pushf
not eax
add eax, 0xf1833113
xor eax, 0x806455de
rol eax, 0x86
popf
pushf
not eax
add eax, 0x82efea09
xor eax, 0xa3ac173d
rol eax, 0xb6
popf
jmp 0x1800f33cb
push rax
pushf
mov eax, 0x37bfe04
pushf
not eax
add eax, 0xa74d0849
xor eax, 0xa15a6fd0
rol eax, 0x89
popf
pushf
not eax
add eax, 0xab177b47
xor eax, 0x944c5311
rol eax, 0x9c
popf
jmp 0x1800f33cb
mov edx, 0x75c10dd5
pushf
not edx
add edx, 0xbbc84903
xor edx, 0xbed1c0ff
rol edx, 0xa0
popf
pushf
not edx
add edx, 0x9335076e
xor edx, 0x805e0b9b
rol edx, 7
popf
mov word [rax], dx
add rax, 2
push rax
pushf
mov eax, 0x54ecbf83
pushf
not eax
add eax, 0x97ea110c
xor eax, 0xf64c9451
rol eax, 0x29
popf
pushf
not eax
add eax, 0xc25e53ab
xor eax, 0xc6403a0b
rol eax, 0x80
popf
pushf
not eax
add eax, 0xde1cce83
xor eax, 0xe46f17e3
rol eax, 0xaf
popf
pushf
not eax
add eax, 0x95e31938
xor eax, 0x83f54847
rol eax, 0x81
popf
jmp 0x1800f33cb
mov word [rax], cx
add rax, 2
lea rcx, [rsp + 0x6f8]
cmp rax, rcx
jb 0x1800f3801
push rax
pushf
mov eax, 0x14a173df
pushf
not eax
add eax, 0xa6ced569
xor eax, 0x89d141d4
rol eax, 0xb3
popf
pushf
not eax
add eax, 0xcf64fb17
xor eax, 0xcc7c1735
rol eax, 0x57
popf
jmp 0x1800f33cb
push rax
pushf
mov eax, 0x2e30f2e6
pushf
not eax
add eax, 0xa1792ee8
xor eax, 0x8cc4c9a2
rol eax, 0xb0
popf
pushf
not eax
add eax, 0xc21ed83f
xor eax, 0xcc7af8b2
rol eax, 0x94
popf
jmp 0x1800f33cb
and qword [rsp + 0x38], 0
lea rcx, [rsp + 0x50]
and qword [rsp + 0x30], 0
lea r8, [rsp + 0x50]
sub rax, rcx
mov dword [rsp + 0x28], 0xd55
lea rcx, [rsp + 0x700]
sar rax, 1
mov qword [rsp + 0x20], rcx
mov r9d, eax
mov ecx, 0x591af29b
pushf
not ecx
add ecx, 0xe649ba05
xor ecx, 0x86491e0a
rol ecx, 0x4e
popf
pushf
not ecx
add ecx, 0xf7e9d301
xor ecx, 0x8ab0a37f
rol ecx, 0xd
popf
pushf
not ecx
add ecx, 0xff9858b8
xor ecx, 0xcec20f53
rol ecx, 0x75
popf
xor edx, edx
call fcn.1801675e1
mov ebp, eax
test eax, eax
je 0x1800f38ff
push rax
pushf
mov eax, 0x961d6d2b
pushf
not eax
add eax, 0xc69b1676
xor eax, 0xfdbef5ac
rol eax, 0x94
popf
pushf
not eax
add eax, 0xdb5843ef
xor eax, 0xbe4705cd
rol eax, 0x86
popf
pushf
not eax
add eax, 0x89ee39f9
xor eax, 0xded57ccc
rol eax, 0x73
popf
jmp 0x1800f33cb
push rax
pushf
mov eax, 0x754cfec7
pushf
not eax
add eax, 0xc1558c62
xor eax, 0x94c22658
rol eax, 0x23
popf
pushf
not eax
add eax, 0x865191fd
xor eax, 0xc927c30c
rol eax, 2
popf
pushf
not eax
add eax, 0xa58fda57
xor eax, 0xb669a046
rol eax, 0x97
popf
pushf
not eax
add eax, 0xf625f0d7
xor eax, 0x85e7cbfb
rol eax, 0x29
popf
jmp 0x1800f33cb
xor esi, esi
test eax, eax
je 0x1800f3991
push rax
pushf
mov eax, 0x97c2096f
pushf
not eax
add eax, 0xc2a4359b
xor eax, 0xcbd22883
rol eax, 0xdd
popf
pushf
not eax
add eax, 0xd1aa8558
xor eax, 0x958484c2
rol eax, 0xe6
popf
jmp 0x1800f33cb
push rax
pushf
mov eax, 0x9089f370
pushf
not eax
add eax, 0xd613e78a
xor eax, 0xbd0a545c
rol eax, 0x97
popf
pushf
not eax
add eax, 0xc7b713fa
xor eax, 0xa50c7faf
rol eax, 0xf3
popf
pushf
not eax
add eax, 0x990a4a08
xor eax, 0xbb1d937c
rol eax, 0x60
popf
pushf
not eax
add eax, 0x8155bdad
xor eax, 0xe98e5e7e
rol eax, 0xf5
popf
jmp 0x1800f33cb
and qword [rsp + 0x20], 0
lea rdx, [rsp + 0x700]
mov ecx, esi
lea r9, [rsp + 0x40]
mov r8d, ebp
push rcx
not rcx
sub rdx, rcx
pop rcx
sub rdx, 1
mov rcx, r12
sub r8d, esi
jmp 0x1800f3a15
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x1800f3a78
push rax
pushf
mov eax, 0xf0b3f392
pushf
not eax
add eax, 0xac4b4eeb
xor eax, 0xd8f7dffb
rol eax, 0xb
popf
pushf
not eax
add eax, 0xa27caa7b
xor eax, 0x9060897f
rol eax, 0x4f
popf
pushf
not eax
add eax, 0xacec88e5
xor eax, 0xc7f31efd
rol eax, 0xb8
popf
pushf
not eax
add eax, 0xc9314b5d
xor eax, 0xb4431bbc
rol eax, 3
popf
jmp 0x1800f33cb
push rax
pushf
mov eax, 0x537698de
pushf
not eax
add eax, 0xbbcb2a19
xor eax, 0x943198b1
rol eax, 0xa3
popf
pushf
not eax
add eax, 0xda16c918
xor eax, 0xf6ee7ce0
rol eax, 0x7d
popf
jmp 0x1800f33cb
add esi, dword [rsp + 0x40]
cmp esi, ebp
jb 0x1800f39ea
mov eax, edi
sub eax, r15d
mov dword [rbx + 4], eax
cmp rdi, r14
jmp 0x1800f354a
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbx], eax
push rax
pushf
mov eax, 0x16914f2c
pushf
not eax
add eax, 0x9968b41b
xor eax, 0xa15b0353
rol eax, 0x53
popf
pushf
not eax
add eax, 0xf8501fd7
xor eax, 0xc751a4c0
rol eax, 0x24
popf
pushf
not eax
add eax, 0xc804dc03
xor eax, 0xf49a60ab
rol eax, 0x1d
popf
jmp 0x1800f33cb
mov rax, rbx
mov rcx, qword [rsp + 0x1460]
xor rcx, rsp
call fcn.1800e9129
lea r11, [rsp + 0x1470]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rsi
ret