Function at 0x14022d166
Capabilities:
Write file on windows

Disassembly:
push rax
pushf
mov eax, 0x7c18f2c1
pushf
not eax
add eax, 0x9aa795a4
xor eax, 0xda43c719
rol eax, 0x74
popf
pushf
not eax
add eax, 0xfa4bc0f1
xor eax, 0x9a8f741a
rol eax, 2
popf
cmp eax, 4
jne 0x14022d1a3
popf
pop rax
jmp 0x14022d4ce
cmp eax, 0
jne 0x14022d1b2
popf
pop rax
jmp 0x14022d257
cmp eax, 3
jne 0x14022d1c1
popf
pop rax
jmp 0x14022d45b
cmp eax, 1
jne 0x14022d1d0
popf
pop rax
jmp 0x14022d37f
cmp eax, 0xa
jne 0x14022d1df
popf
pop rax
jmp 0x14022d897
cmp eax, 7
jne 0x14022d1ee
popf
pop rax
jmp 0x14022d738
cmp eax, 6
jne 0x14022d1fd
popf
pop rax
jmp 0x14022d612
cmp eax, 0xb
jne 0x14022d20c
popf
pop rax
jmp 0x14022d901
cmp eax, 0xc
jne 0x14022d21b
popf
pop rax
jmp 0x14022d94f
cmp eax, 8
jne 0x14022d22a
popf
pop rax
jmp 0x14022d7ca
cmp eax, 5
jne 0x14022d239
popf
pop rax
jmp 0x14022d55f
cmp eax, 2
jne 0x14022d248
popf
pop rax
jmp 0x14022d3b7
cmp eax, 9
jne 0x14022d257
popf
pop rax
jmp 0x14022d88b
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r12
push r14
push r15
mov eax, 0xa393ee8c
pushf
not eax
add eax, 0x8de1aa8e
xor eax, 0xf517a7e3
rol eax, 0xcb
popf
pushf
not eax
add eax, 0xc932eaf6
xor eax, 0xb5762587
rol eax, 0x62
popf
pushf
not eax
add eax, 0xf3051d48
xor eax, 0xbe6d29d8
rol eax, 0xc3
popf
call fcn.14022fed3
sub rsp, rax
mov rax, qword [0x1400a21c0]
xor rax, rsp
mov qword [rsp + 0x1460], rax
movsxd r10, edx
mov rbx, rcx
mov rax, r10
mov r14d, r9d
sar rax, 6
lea rcx, [0x1bea7c9d1]
pushf
sub rcx, 0x7e9d4cd1
popf
and r10d, 0x3f
push r8
not r8
sub r14, r8
pop r8
sub r14, 1
mov r15, r8
mov rdi, r8
mov rax, qword [rcx + rax*8]
lea rdx, [r10 + r10*8]
mov r12, qword [rax + rdx*8 + 0x28]
xor eax, eax
mov qword [rbx], rax
cmp r8, r14
mov dword [rbx + 8], eax
jae 0x14022d34c
push rax
pushf
mov eax, 0xf3cd9f98
pushf
not eax
add eax, 0xaf22c9b5
xor eax, 0xcd092197
rol eax, 0xd1
popf
pushf
not eax
add eax, 0xff4883d1
xor eax, 0xe8319798
rol eax, 0x59
popf
jmp 0x14022d194
push rax
pushf
mov eax, 0x4a66e53a
pushf
not eax
add eax, 0x9e8b0902
xor eax, 0x88233900
rol eax, 0xe3
popf
pushf
not eax
add eax, 0xb5aa9589
xor eax, 0xd541bf4a
rol eax, 0xae
popf
jmp 0x14022d194
lea rax, [rsp + 0x50]
push rax
pushf
mov eax, 0x770e0539
pushf
not eax
add eax, 0x802a4bdc
xor eax, 0xe6bf93d0
rol eax, 0x50
popf
pushf
not eax
add eax, 0x9e9c9c61
xor eax, 0xc129acbd
rol eax, 0x26
popf
jmp 0x14022d194
cmp rdi, r14
jae 0x14022d402
push rax
pushf
mov eax, 0x46580c35
pushf
not eax
add eax, 0xafcdc274
xor eax, 0xb2061c77
rol eax, 0x44
popf
pushf
not eax
add eax, 0x8b99049b
xor eax, 0xd01c841c
rol eax, 0xd6
popf
pushf
not eax
add eax, 0xd491c180
xor eax, 0xdc50d0c9
rol eax, 0x93
popf
jmp 0x14022d194
push rax
pushf
mov eax, 0x6b008860
pushf
not eax
add eax, 0xe123512c
xor eax, 0xc149ba49
rol eax, 0xad
popf
pushf
not eax
add eax, 0xcf21b455
xor eax, 0xd03c1e48
rol eax, 0xa2
popf
pushf
not eax
add eax, 0xb2cd3080
xor eax, 0xa1955ced
rol eax, 0x3c
popf
pushf
not eax
add eax, 0xa65606bd
xor eax, 0xe16d22ca
rol eax, 0xf7
popf
jmp 0x14022d194
movzx ecx, word [rdi]
add rdi, 2
cmp cx, 0xa
jne 0x14022d49b
push rax
pushf
mov eax, 0xde72ddd2
pushf
not eax
add eax, 0x9d3110dd
xor eax, 0xbce49722
rol eax, 0x76
popf
pushf
not eax
add eax, 0xb7cbe8b5
xor eax, 0xaccb520b
rol eax, 0xea
popf
jmp 0x14022d194
push rax
pushf
mov eax, 0x75e9bef4
pushf
not eax
add eax, 0xfaf3b992
xor eax, 0xfe4ef2b5
rol eax, 0x97
popf
pushf
not eax
add eax, 0xf805bbf4
xor eax, 0xe3e0186f
rol eax, 0xd
popf
jmp 0x14022d194
mov edx, 0x27d0424e
pushf
not edx
add edx, 0xccd86d8d
xor edx, 0x8d0db9c5
rol edx, 0xcf
popf
pushf
not edx
add edx, 0x9ea4dcd5
xor edx, 0xb5901e5d
rol edx, 0xf7
popf
pushf
not edx
add edx, 0xca8a70d7
xor edx, 0x82da148b
rol edx, 0x3b
popf
mov word [rax], dx
add rax, 2
push rax
pushf
mov eax, 0x60d7f486
pushf
not eax
add eax, 0x9333ec5b
xor eax, 0xc37dae02
rol eax, 0x1c
popf
pushf
not eax
add eax, 0xa4a6449c
xor eax, 0xb1027caa
rol eax, 4
popf
pushf
not eax
add eax, 0xdf90447f
xor eax, 0x82761f36
rol eax, 0x26
popf
jmp 0x14022d194
mov word [rax], cx
add rax, 2
lea rcx, [rsp + 0x6f8]
cmp rax, rcx
jb 0x14022d5cc
push rax
pushf
mov eax, 0xc9a9dbeb
pushf
not eax
add eax, 0xc0694eea
xor eax, 0xa6a408c0
rol eax, 0x34
popf
pushf
not eax
add eax, 0x9c7237f4
xor eax, 0xef7202fc
rol eax, 0x79
popf
pushf
not eax
add eax, 0x931d363d
xor eax, 0xa20258a8
rol eax, 0xd
popf
pushf
not eax
add eax, 0xca7bf9e8
xor eax, 0xd08c83ca
rol eax, 0x87
popf
jmp 0x14022d194
push rax
pushf
mov eax, 0x63e6bf42
pushf
not eax
add eax, 0x92a9c801
xor eax, 0xf88133c1
rol eax, 0xd0
popf
pushf
not eax
add eax, 0xb789c4ac
xor eax, 0x802bad46
rol eax, 0xec
popf
pushf
not eax
add eax, 0xdd672cc7
xor eax, 0xb9342f04
rol eax, 0x38
popf
jmp 0x14022d194
and qword [rsp + 0x38], 0
lea rcx, [rsp + 0x50]
and qword [rsp + 0x30], 0
lea r8, [rsp + 0x50]
sub rax, rcx
mov dword [rsp + 0x28], 0xd55
lea rcx, [rsp + 0x700]
sar rax, 1
mov qword [rsp + 0x20], rcx
mov r9d, eax
mov ecx, 0x98d7ac6c
pushf
not ecx
add ecx, 0x9984843d
xor ecx, 0x888eafa3
rol ecx, 0x40
popf
pushf
not ecx
add ecx, 0xd45c25e1
xor ecx, 0xe08e1bde
rol ecx, 0x52
popf
pushf
not ecx
add ecx, 0x99fdbc8f
xor ecx, 0xdf8ee972
rol ecx, 0xeb
popf
pushf
not ecx
add ecx, 0xb77127a2
xor ecx, 0xa868e338
rol ecx, 0xde
popf
xor edx, edx
call fcn.1402f3f74
mov ebp, eax
test eax, eax
je 0x14022d705
push rax
pushf
mov eax, 0xa1faed42
pushf
not eax
add eax, 0xa019183d
xor eax, 0xf32bce3a
rol eax, 0x23
popf
pushf
not eax
add eax, 0x91625b3d
xor eax, 0x8485799a
rol eax, 0x6d
popf
pushf
not eax
add eax, 0xbd4d0a4f
xor eax, 0x8d48f2c8
rol eax, 0x28
popf
pushf
not eax
add eax, 0x919bb6a3
xor eax, 0xa0d71624
rol eax, 0xb1
popf
jmp 0x14022d194
push rax
pushf
mov eax, 0x5154b30c
pushf
not eax
add eax, 0xeeb398c6
xor eax, 0xc7359f2b
rol eax, 0xe6
popf
pushf
not eax
add eax, 0x803872e3
xor eax, 0xe55b0e4c
rol eax, 0xd2
popf
jmp 0x14022d194
xor esi, esi
test eax, eax
je 0x14022d784
push rax
pushf
mov eax, 0xd0dce65d
pushf
not eax
add eax, 0xdf99a12c
xor eax, 0xe97c7682
rol eax, 3
popf
pushf
not eax
add eax, 0x9d67fa72
xor eax, 0xb454f775
rol eax, 0x9b
popf
pushf
not eax
add eax, 0xa13c9b3f
xor eax, 0xa1e2e7c3
rol eax, 0x58
popf
jmp 0x14022d194
push rax
pushf
mov eax, 0x3e3269b4
pushf
not eax
add eax, 0xa9d2475f
xor eax, 0xdfcefd91
rol eax, 0x2a
popf
pushf
not eax
add eax, 0x883f9592
xor eax, 0xb4f3b039
rol eax, 0x4a
popf
pushf
not eax
add eax, 0xfa4059fa
xor eax, 0xc5ee721c
rol eax, 0x50
popf
jmp 0x14022d194
and qword [rsp + 0x20], 0
lea rdx, [rsp + 0x700]
mov ecx, esi
lea r9, [rsp + 0x40]
mov r8d, ebp
push rcx
not rcx
sub rdx, rcx
pop rcx
sub rdx, 1
mov rcx, r12
sub r8d, esi
jmp 0x14022d7f5
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x14022d845
push rax
pushf
mov eax, 0x4b8c46f3
pushf
not eax
add eax, 0xf31276b8
xor eax, 0xdcfe89c5
rol eax, 0x2e
popf
pushf
not eax
add eax, 0x96c2dcd2
xor eax, 0xe105b1fc
rol eax, 0xfe
popf
pushf
not eax
add eax, 0xcf76a0f6
xor eax, 0xec66edf2
rol eax, 0x92
popf
jmp 0x14022d194
push rax
pushf
mov eax, 0x7f8bf702
pushf
not eax
add eax, 0xd7523082
xor eax, 0x93303b74
rol eax, 0x3c
popf
pushf
not eax
add eax, 0xedf76016
xor eax, 0xbe5b1b2f
rol eax, 0x98
popf
pushf
not eax
add eax, 0xcb7e0ec3
xor eax, 0xf0e511de
rol eax, 0x90
popf
jmp 0x14022d194
add esi, dword [rsp + 0x40]
cmp esi, ebp
jb 0x14022d7ca
mov eax, edi
sub eax, r15d
mov dword [rbx + 4], eax
cmp rdi, r14
jmp 0x14022d313
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbx], eax
push rax
pushf
mov eax, 0xf79e0105
pushf
not eax
add eax, 0xb0266716
xor eax, 0xaf3b53d5
rol eax, 4
popf
pushf
not eax
add eax, 0xb8e3842d
xor eax, 0x8533f2e4
rol eax, 0xe5
popf
pushf
not eax
add eax, 0xd05fa691
xor eax, 0xbfe4e699
rol eax, 0xd7
popf
jmp 0x14022d194
mov rax, rbx
mov rcx, qword [rsp + 0x1460]
xor rcx, rsp
call fcn.14021cfd0
lea r11, [rsp + 0x1470]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rsi
ret