Function at 0x14023c0a6
Capabilities:
Write file on windows

Disassembly:
push rax
pushf
mov eax, 0x7b397734
pushf
not eax
add eax, 0xa4ead567
xor eax, 0x9df2c05e
rol eax, 0xa5
popf
pushf
not eax
add eax, 0xf104aa7a
xor eax, 0x93b4fcab
rol eax, 0x2c
popf
pushf
not eax
add eax, 0xe748d8ed
xor eax, 0xc3294526
rol eax, 0xf8
popf
pushf
not eax
add eax, 0xd17692dd
xor eax, 0xb51025d0
rol eax, 0x29
popf
cmp eax, 4
jne 0x14023c109
popf
pop rax
jmp 0x14023c400
cmp eax, 0
jne 0x14023c118
popf
pop rax
jmp 0x14023c1ae
cmp eax, 3
jne 0x14023c127
popf
pop rax
jmp 0x14023c357
cmp eax, 1
jne 0x14023c136
popf
pop rax
jmp 0x14023c303
cmp eax, 0xa
jne 0x14023c145
popf
pop rax
jmp 0x14023c73b
cmp eax, 7
jne 0x14023c154
popf
pop rax
jmp 0x14023c5c7
cmp eax, 6
jne 0x14023c163
popf
pop rax
jmp 0x14023c500
cmp eax, 0xb
jne 0x14023c172
popf
pop rax
jmp 0x14023c776
cmp eax, 9
jne 0x14023c181
popf
pop rax
jmp 0x14023c6dc
cmp eax, 8
jne 0x14023c190
popf
pop rax
jmp 0x14023c64b
cmp eax, 5
jne 0x14023c19f
popf
pop rax
jmp 0x14023c462
cmp eax, 2
jne 0x14023c1ae
popf
pop rax
jmp 0x14023c34e
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r14
mov eax, 0xd96672bd
pushf
not eax
add eax, 0x88d22715
xor eax, 0xee5eea13
rol eax, 0x63
popf
pushf
not eax
add eax, 0xdb423c06
xor eax, 0xd19743cb
rol eax, 1
popf
call fcn.1402a9954
sub rsp, rax
mov rax, qword [0x140120098]
xor rax, rsp
mov qword [rsp + 0x1440], rax
movsxd r10, edx
mov rdi, rcx
mov rax, r10
mov ebp, r9d
sar rax, 6
lea rcx, [0x19c16f558]
pushf
sub rcx, 0x5c04d118
popf
and r10d, 0x3f
push r8
not r8
sub rbp, r8
pop r8
sub rbp, 1
mov rsi, r8
mov rax, qword [rcx + rax*8]
lea rdx, [r10 + r10*8]
mov r14, qword [rax + rdx*8 + 0x28]
xor eax, eax
mov qword [rdi], rax
mov dword [rdi + 8], eax
cmp r8, rbp
jae 0x14023c2aa
push rax
pushf
mov eax, 0x225ac0ba
pushf
not eax
add eax, 0xc9e73883
xor eax, 0xda620211
rol eax, 0x3e
popf
pushf
not eax
add eax, 0xb3c75964
xor eax, 0x97cd4b8b
rol eax, 0xca
popf
pushf
not eax
add eax, 0xfe0b42d2
xor eax, 0xbf07ac5a
rol eax, 0xb0
popf
pushf
not eax
add eax, 0xdb741096
xor eax, 0xcfd2b347
rol eax, 0xad
popf
jmp 0x14023c0fa
push rax
pushf
mov eax, 0x4c7ba7a0
pushf
not eax
add eax, 0x8249edc5
xor eax, 0xbf5b881f
rol eax, 0xc7
popf
pushf
not eax
add eax, 0xf192d0e2
xor eax, 0xee702e3a
rol eax, 0xa5
popf
pushf
not eax
add eax, 0xc5272532
xor eax, 0xfc828c8c
rol eax, 0xe
popf
pushf
not eax
add eax, 0xc4a1109d
xor eax, 0x81627b50
rol eax, 0x71
popf
jmp 0x14023c0fa
lea rbx, [rsp + 0x40]
push rax
pushf
mov eax, 0x75e786c3
pushf
not eax
add eax, 0x87fd1f7c
xor eax, 0x84336fa7
rol eax, 0xed
popf
pushf
not eax
add eax, 0xd9aac977
xor eax, 0xb2f065ab
rol eax, 0xb2
popf
pushf
not eax
add eax, 0xad5bc4dc
xor eax, 0xe0f62401
rol eax, 0x72
popf
jmp 0x14023c0fa
cmp rsi, rbp
jae 0x14023c500
mov al, byte [rsi]
inc rsi
cmp al, 0xa
jne 0x14023c3b9
push rax
pushf
mov eax, 0x5d0d74a4
pushf
not eax
add eax, 0xec3b529d
xor eax, 0xec1384ae
rol eax, 0x18
popf
pushf
not eax
add eax, 0xf62fee7f
xor eax, 0x8e1c13d1
rol eax, 0x6a
popf
pushf
not eax
add eax, 0x9d2e25ca
xor eax, 0xf23aa241
rol eax, 0x52
popf
pushf
not eax
add eax, 0xaafbc845
xor eax, 0xcb6d25b1
rol eax, 0xb
popf
jmp 0x14023c0fa
push rax
pushf
mov eax, 0x6d219d95
pushf
not eax
add eax, 0xbf5d206b
xor eax, 0x91cf5f4d
rol eax, 0xda
popf
pushf
not eax
add eax, 0xac616219
xor eax, 0x86bc6a38
rol eax, 0x2d
popf
pushf
not eax
add eax, 0x8ec68102
xor eax, 0xd2333304
rol eax, 0xb6
popf
jmp 0x14023c0fa
inc dword [rdi + 8]
mov byte [rbx], 0xd
inc rbx
push rax
pushf
mov eax, 0xc0d24589
pushf
not eax
add eax, 0x918eb2d1
xor eax, 0xad0ab58b
rol eax, 0xa4
popf
pushf
not eax
add eax, 0x8e75e46c
xor eax, 0xbcdf5e1b
rol eax, 0x77
popf
pushf
not eax
add eax, 0xb15ac5da
xor eax, 0xb801e976
rol eax, 0x30
popf
pushf
not eax
add eax, 0xf45b9645
xor eax, 0xc1382cd1
rol eax, 0x7b
popf
jmp 0x14023c0fa
mov byte [rbx], al
inc rbx
lea rax, [rsp + 0x143f]
cmp rbx, rax
jb 0x14023c4a7
push rax
pushf
mov eax, 0xdc1b4702
pushf
not eax
add eax, 0xc89a5829
xor eax, 0x8c430fc0
rol eax, 0xd8
popf
pushf
not eax
add eax, 0x89eecec4
xor eax, 0xa3ee92a5
rol eax, 0x6c
popf
jmp 0x14023c0fa
push rax
pushf
mov eax, 0x8f21acb1
pushf
not eax
add eax, 0xb0d296bb
xor eax, 0xe4420770
rol eax, 0x23
popf
pushf
not eax
add eax, 0xc5fe4fab
xor eax, 0xc807037c
rol eax, 0xf7
popf
pushf
not eax
add eax, 0x9fafee04
xor eax, 0x82de44fd
rol eax, 0xf0
popf
pushf
not eax
add eax, 0xbe36908d
xor eax, 0xc445c32e
rol eax, 0xd0
popf
jmp 0x14023c0fa
and qword [rsp + 0x20], 0
lea rax, [rsp + 0x40]
sub ebx, eax
lea r9, [rsp + 0x30]
mov r8d, ebx
lea rdx, [rsp + 0x40]
mov rcx, r14
jmp 0x14023c51e
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x14023c581
push rax
pushf
mov eax, 0xb5ee8940
pushf
not eax
add eax, 0x910d9a0e
xor eax, 0x9638cc3b
rol eax, 0x7c
popf
pushf
not eax
add eax, 0xb0e6eb80
xor eax, 0xe07fe86d
rol eax, 0xcc
popf
pushf
not eax
add eax, 0xbe85b92d
xor eax, 0xafb5db42
rol eax, 0x96
popf
pushf
not eax
add eax, 0xda7f6ea5
xor eax, 0x91557a23
rol eax, 0xd4
popf
jmp 0x14023c0fa
push rax
pushf
mov eax, 0x79a89375
pushf
not eax
add eax, 0xcad8c46b
xor eax, 0xbb1c14b4
rol eax, 0x23
popf
pushf
not eax
add eax, 0xf336a173
xor eax, 0xef40ff89
rol eax, 0xd4
popf
pushf
not eax
add eax, 0xb89cbb87
xor eax, 0xa8b7d22e
rol eax, 0xcb
popf
jmp 0x14023c0fa
mov eax, dword [rsp + 0x30]
add dword [rdi + 4], eax
cmp eax, ebx
jb 0x14023c618
push rax
pushf
mov eax, 0xf73f8c2c
pushf
not eax
add eax, 0x9988edbe
xor eax, 0xc2a070da
rol eax, 0xf0
popf
pushf
not eax
add eax, 0xb13bcbc7
xor eax, 0x934a9e77
rol eax, 0x7d
popf
pushf
not eax
add eax, 0xcc8553e6
xor eax, 0x8ae5f550
rol eax, 0x50
popf
jmp 0x14023c0fa
push rax
pushf
mov eax, 0xe52a93b1
pushf
not eax
add eax, 0xa8e6d0c8
xor eax, 0x8802d8b8
rol eax, 0x9f
popf
pushf
not eax
add eax, 0xa7b2182f
xor eax, 0x80b2a557
rol eax, 0xeb
popf
jmp 0x14023c0fa
cmp rsi, rbp
jb 0x14023c683
push rax
pushf
mov eax, 0x93135b6c
pushf
not eax
add eax, 0xa378bcc9
xor eax, 0x914c91ab
rol eax, 0xc7
popf
pushf
not eax
add eax, 0x8ccc8abe
xor eax, 0xf7d446fd
rol eax, 0x55
popf
jmp 0x14023c0fa
push rax
pushf
mov eax, 0x3d543ba6
pushf
not eax
add eax, 0xa09522a4
xor eax, 0x9424964f
rol eax, 0xe0
popf
pushf
not eax
add eax, 0xebc5f60d
xor eax, 0x804a09af
rol eax, 0x23
popf
pushf
not eax
add eax, 0xb324df7a
xor eax, 0x96300c25
rol eax, 0x7e
popf
pushf
not eax
add eax, 0xbd536c10
xor eax, 0xdb754d15
rol eax, 0x4b
popf
jmp 0x14023c0fa
jmp 0x14023c776
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rdi], eax
push rax
pushf
mov eax, 0xf0cf760f
pushf
not eax
add eax, 0xf08690b0
xor eax, 0x9de05c19
rol eax, 0x89
popf
pushf
not eax
add eax, 0x83c58251
xor eax, 0xd5396f8c
rol eax, 0x73
popf
jmp 0x14023c0fa
mov rax, rdi
mov rcx, qword [rsp + 0x1440]
xor rcx, rsp
call fcn.1402a1891
lea r11, [rsp + 0x1450]
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x30]
mov rsp, r11
pop r14
pop rdi
pop rsi
ret