Function at 0x1800f2ca4
Capabilities:
Write file on windows

Disassembly:
push rax
pushf
mov eax, 0xe171a893
pushf
not eax
add eax, 0xe99bd360
xor eax, 0xdf11b0c6
rol eax, 0x8e
popf
pushf
not eax
add eax, 0xe3a4a544
xor eax, 0xfd21ef75
rol eax, 0x87
popf
cmp eax, 4
jne 0x1800f2ce1
popf
pop rax
jmp 0x1800f307d
cmp eax, 0
jne 0x1800f2cf0
popf
pop rax
jmp 0x1800f2d95
cmp eax, 3
jne 0x1800f2cff
popf
pop rax
jmp 0x1800f2fd1
cmp eax, 1
jne 0x1800f2d0e
popf
pop rax
jmp 0x1800f2ee3
cmp eax, 0xa
jne 0x1800f2d1d
popf
pop rax
jmp 0x1800f346a
cmp eax, 7
jne 0x1800f2d2c
popf
pop rax
jmp 0x1800f32f8
cmp eax, 6
jne 0x1800f2d3b
popf
pop rax
jmp 0x1800f31ac
cmp eax, 0xb
jne 0x1800f2d4a
popf
pop rax
jmp 0x1800f34ae
cmp eax, 0xc
jne 0x1800f2d59
popf
pop rax
jmp 0x1800f34fc
cmp eax, 8
jne 0x1800f2d68
popf
pop rax
jmp 0x1800f339d
cmp eax, 5
jne 0x1800f2d77
popf
pop rax
jmp 0x1800f310c
cmp eax, 2
jne 0x1800f2d86
popf
pop rax
jmp 0x1800f2f2e
cmp eax, 9
jne 0x1800f2d95
popf
pop rax
jmp 0x1800f345e
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r12
push r14
push r15
mov eax, 0x61e5bb6b
pushf
not eax
add eax, 0xb9e2835f
xor eax, 0xe30425b4
rol eax, 0xb4
popf
pushf
not eax
add eax, 0xe17f0518
xor eax, 0xba2f48e5
rol eax, 0x9e
popf
pushf
not eax
add eax, 0xb60857be
xor eax, 0x9cdd1862
rol eax, 0xcf
popf
call fcn.1800f433c
sub rsp, rax
mov rax, qword [0x180040280]
xor rax, rsp
mov qword [rsp + 0x1460], rax
movsxd r10, edx
mov rbx, rcx
mov rax, r10
mov r14d, r9d
sar rax, 6
lea rcx, [0x1c098ade6]
pushf
sub rcx, 0x40948556
popf
and r10d, 0x3f
push r8
not r8
sub r14, r8
pop r8
sub r14, 1
mov r15, r8
mov rdi, r8
mov rax, qword [rcx + rax*8]
lea rdx, [r10 + r10*8]
mov r12, qword [rax + rdx*8 + 0x28]
xor eax, eax
mov qword [rbx], rax
cmp r8, r14
mov dword [rbx + 8], eax
jae 0x1800f2eb0
push rax
pushf
mov eax, 0xf7b9971a
pushf
not eax
add eax, 0xd84a8560
xor eax, 0xa892cd08
rol eax, 0x50
popf
pushf
not eax
add eax, 0x8a41c63b
xor eax, 0xe274a104
rol eax, 0xb4
popf
pushf
not eax
add eax, 0xa0666fa9
xor eax, 0x8d855133
rol eax, 0xc
popf
pushf
not eax
add eax, 0x96b28dcf
xor eax, 0xdf480bbf
rol eax, 0xff
popf
jmp 0x1800f2cd2
push rax
pushf
mov eax, 0x7f0ad187
pushf
not eax
add eax, 0xad058164
xor eax, 0xd4d7b54c
rol eax, 0x3e
popf
pushf
not eax
add eax, 0xd224a584
xor eax, 0x93d95ec7
rol eax, 0x3f
popf
jmp 0x1800f2cd2
lea rax, [rsp + 0x50]
push rax
pushf
mov eax, 0x99640b33
pushf
not eax
add eax, 0xb84a40ea
xor eax, 0xe78b578d
rol eax, 0x56
popf
pushf
not eax
add eax, 0xf40414a5
xor eax, 0x925e79f2
rol eax, 0xc1
popf
pushf
not eax
add eax, 0x8d61b6a0
xor eax, 0x9eab3522
rol eax, 0x51
popf
jmp 0x1800f2cd2
cmp rdi, r14
jae 0x1800f2f8c
push rax
pushf
mov eax, 0x86c2e99e
pushf
not eax
add eax, 0xc37708c8
xor eax, 0x90a460d6
rol eax, 0xc7
popf
pushf
not eax
add eax, 0xa313968c
xor eax, 0x9ca55d41
rol eax, 0x3a
popf
pushf
not eax
add eax, 0xdaa2c93d
xor eax, 0xf339022c
rol eax, 0x12
popf
pushf
not eax
add eax, 0x9e471c3d
xor eax, 0xedbf0575
rol eax, 0x94
popf
jmp 0x1800f2cd2
push rax
pushf
mov eax, 0x371398aa
pushf
not eax
add eax, 0x995e9647
xor eax, 0x895a565e
rol eax, 1
popf
pushf
not eax
add eax, 0xe55ebaa5
xor eax, 0xd220eb3b
rol eax, 0x99
popf
pushf
not eax
add eax, 0xe75ccbb4
xor eax, 0x9da288a3
rol eax, 0x16
popf
jmp 0x1800f2cd2
movzx ecx, word [rdi]
add rdi, 2
cmp cx, 0xa
jne 0x1800f3037
push rax
pushf
mov eax, 0xd5e466b1
pushf
not eax
add eax, 0xa6143e73
xor eax, 0xf932ead7
rol eax, 0x67
popf
pushf
not eax
add eax, 0x9c8f25b4
xor eax, 0xd99c2e25
rol eax, 0x49
popf
pushf
not eax
add eax, 0xf406e468
xor eax, 0xf69e16a5
rol eax, 0x60
popf
pushf
not eax
add eax, 0x8d6afb62
xor eax, 0xa1668347
rol eax, 0xb2
popf
jmp 0x1800f2cd2
push rax
pushf
mov eax, 0x30480314
pushf
not eax
add eax, 0x90383ffd
xor eax, 0xe79c2b40
rol eax, 0x52
popf
pushf
not eax
add eax, 0xf47a5b6d
xor eax, 0xfee2bec4
rol eax, 0xa3
popf
pushf
not eax
add eax, 0xf614a22b
xor eax, 0x9c4e6667
rol eax, 0x8d
popf
jmp 0x1800f2cd2
mov edx, 0xb1841ca5
pushf
not edx
add edx, 0xc2b53ff5
xor edx, 0xe4cdef90
rol edx, 0
popf
pushf
not edx
add edx, 0xb57e24d9
xor edx, 0xbf87d7f9
rol edx, 0xb1
popf
mov word [rax], dx
add rax, 2
push rax
pushf
mov eax, 0x4aa19c90
pushf
not eax
add eax, 0x9d63c1ef
xor eax, 0x935d9a3d
rol eax, 0xc1
popf
pushf
not eax
add eax, 0xe5eb4074
xor eax, 0xf18737f6
rol eax, 0x29
popf
pushf
not eax
add eax, 0xbbfe209b
xor eax, 0x9c2489d9
rol eax, 0x94
popf
pushf
not eax
add eax, 0xf8b3d69c
xor eax, 0xcdd3f338
rol eax, 0x40
popf
jmp 0x1800f2cd2
mov word [rax], cx
add rax, 2
lea rcx, [rsp + 0x6f8]
cmp rax, rcx
jb 0x1800f3179
push rax
pushf
mov eax, 0x6ce2766d
pushf
not eax
add eax, 0xfa69f981
xor eax, 0xaae9bdc7
rol eax, 0x35
popf
pushf
not eax
add eax, 0xbde3fe7e
xor eax, 0xadaad067
rol eax, 0x12
popf
pushf
not eax
add eax, 0x963f89e4
xor eax, 0xb9da5eaa
rol eax, 0xf2
popf
pushf
not eax
add eax, 0xc77419b0
xor eax, 0x84db6d23
rol eax, 0xdf
popf
jmp 0x1800f2cd2
push rax
pushf
mov eax, 0x289a6a8c
pushf
not eax
add eax, 0x88305ba3
xor eax, 0x9bab4c83
rol eax, 0x6a
popf
pushf
not eax
add eax, 0xd9c6eb1b
xor eax, 0xdef0940a
rol eax, 0x4c
popf
jmp 0x1800f2cd2
and qword [rsp + 0x38], 0
lea rcx, [rsp + 0x50]
and qword [rsp + 0x30], 0
lea r8, [rsp + 0x50]
sub rax, rcx
mov dword [rsp + 0x28], 0xd55
lea rcx, [rsp + 0x700]
sar rax, 1
mov qword [rsp + 0x20], rcx
mov r9d, eax
mov ecx, 0x59688b29
pushf
not ecx
add ecx, 0xfa210433
xor ecx, 0xb6325269
rol ecx, 0x8f
popf
pushf
not ecx
add ecx, 0xdc1b03ac
xor ecx, 0x9770b7ff
rol ecx, 5
popf
pushf
not ecx
add ecx, 0xf575b84d
xor ecx, 0xd171171a
rol ecx, 0x25
popf
pushf
not ecx
add ecx, 0xf3030b0b
xor ecx, 0xc7a8fb70
rol ecx, 0x82
popf
xor edx, edx
call fcn.18016760a
mov ebp, eax
test eax, eax
je 0x1800f329f
push rax
pushf
mov eax, 0xe31b3cba
pushf
not eax
add eax, 0xd923e77e
xor eax, 0xad6e8766
rol eax, 0x65
popf
pushf
not eax
add eax, 0xbd3caa4e
xor eax, 0xaa30cbeb
rol eax, 0xa8
popf
pushf
not eax
add eax, 0xbab90a5e
xor eax, 0xf2c3b34a
rol eax, 0x1f
popf
pushf
not eax
add eax, 0xbdc74c79
xor eax, 0xfa8a92e4
rol eax, 0x2b
popf
jmp 0x1800f2cd2
push rax
pushf
mov eax, 0x9cb32ce5
pushf
not eax
add eax, 0xdf5c6542
xor eax, 0xa68513d4
rol eax, 0xba
popf
pushf
not eax
add eax, 0xcd45f061
xor eax, 0x87052820
rol eax, 0x9b
popf
pushf
not eax
add eax, 0x968a5929
xor eax, 0xf35f9cb3
rol eax, 0x9c
popf
pushf
not eax
add eax, 0x9aef326e
xor eax, 0x9b8a6820
rol eax, 0x17
popf
jmp 0x1800f2cd2
xor esi, esi
test eax, eax
je 0x1800f3344
push rax
pushf
mov eax, 0xd6397e8c
pushf
not eax
add eax, 0xd17ee050
xor eax, 0xc8fc1f0d
rol eax, 0x45
popf
pushf
not eax
add eax, 0x88feb607
xor eax, 0x9a5ab4f9
rol eax, 0xb1
popf
pushf
not eax
add eax, 0x83b894f0
xor eax, 0x92457dc7
rol eax, 0xa6
popf
jmp 0x1800f2cd2
push rax
pushf
mov eax, 0x548a56b0
pushf
not eax
add eax, 0xa0a04d6a
xor eax, 0xfa1ac96d
rol eax, 0xf1
popf
pushf
not eax
add eax, 0xc5ddb6d3
xor eax, 0x8919d510
rol eax, 0x7c
popf
pushf
not eax
add eax, 0xe33f8bcf
xor eax, 0xef8a35cb
rol eax, 0x82
popf
pushf
not eax
add eax, 0xbab6e45d
xor eax, 0xfb9cd3df
rol eax, 0xc6
popf
jmp 0x1800f2cd2
and qword [rsp + 0x20], 0
lea rdx, [rsp + 0x700]
mov ecx, esi
lea r9, [rsp + 0x40]
mov r8d, ebp
push rcx
not rcx
sub rdx, rcx
pop rcx
sub rdx, 1
mov rcx, r12
sub r8d, esi
jmp 0x1800f33c8
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x1800f3405
push rax
pushf
mov eax, 0x636532cc
pushf
not eax
add eax, 0xc29fcbcf
xor eax, 0xf33e5efb
rol eax, 0x51
popf
pushf
not eax
add eax, 0xce943ad0
xor eax, 0xaea0e2c6
rol eax, 0x24
popf
jmp 0x1800f2cd2
push rax
pushf
mov eax, 0xbeed2013
pushf
not eax
add eax, 0x82fc055e
xor eax, 0x8ba22adf
rol eax, 0x1a
popf
pushf
not eax
add eax, 0xde509b3a
xor eax, 0xb2844a4b
rol eax, 0x72
popf
pushf
not eax
add eax, 0xef4b0380
xor eax, 0xa4d46df9
rol eax, 0x2c
popf
pushf
not eax
add eax, 0xc349212b
xor eax, 0xd97c1765
rol eax, 0xaa
popf
jmp 0x1800f2cd2
add esi, dword [rsp + 0x40]
cmp esi, ebp
jb 0x1800f339d
mov eax, edi
sub eax, r15d
mov dword [rbx + 4], eax
cmp rdi, r14
jmp 0x1800f2e51
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbx], eax
push rax
pushf
mov eax, 0x41333302
pushf
not eax
add eax, 0x8851a73c
xor eax, 0xb2445eea
rol eax, 0x75
popf
pushf
not eax
add eax, 0x8cf96556
xor eax, 0x8b39333e
rol eax, 0x16
popf
pushf
not eax
add eax, 0xc07fa6c0
xor eax, 0xf4d155dc
rol eax, 0xc3
popf
jmp 0x1800f2cd2
mov rax, rbx
mov rcx, qword [rsp + 0x1460]
xor rcx, rsp
call fcn.1800e8c52
lea r11, [rsp + 0x1470]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rsi
ret