Function at 0x14004d0c7
Capabilities:
Write file on windows

Disassembly:
push rax
pushf
mov eax, 0x21e4f89a
pushf
not eax
add eax, 0xb8ad2287
xor eax, 0xf7d325d6
rol eax, 0x3f
popf
pushf
not eax
add eax, 0xdda7c111
xor eax, 0x92a717d8
rol eax, 0x7e
popf
pushf
not eax
add eax, 0xa7101d9f
xor eax, 0xd720d254
rol eax, 0x5f
popf
cmp eax, 4
jne 0x14004d117
popf
pop rax
jmp 0x14004d403
cmp eax, 0
jne 0x14004d126
popf
pop rax
jmp 0x14004d1bc
cmp eax, 3
jne 0x14004d135
popf
pop rax
jmp 0x14004d36a
cmp eax, 1
jne 0x14004d144
popf
pop rax
jmp 0x14004d303
cmp eax, 0xa
jne 0x14004d153
popf
pop rax
jmp 0x14004d6db
cmp eax, 7
jne 0x14004d162
popf
pop rax
jmp 0x14004d5c9
cmp eax, 6
jne 0x14004d171
popf
pop rax
jmp 0x14004d4fd
cmp eax, 0xb
jne 0x14004d180
popf
pop rax
jmp 0x14004d716
cmp eax, 9
jne 0x14004d18f
popf
pop rax
jmp 0x14004d6a5
cmp eax, 8
jne 0x14004d19e
popf
pop rax
jmp 0x14004d63a
cmp eax, 5
jne 0x14004d1ad
popf
pop rax
jmp 0x14004d470
cmp eax, 2
jne 0x14004d1bc
popf
pop rax
jmp 0x14004d361
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r14
mov eax, 0xdbf83e89
pushf
not eax
add eax, 0xe61a6c48
xor eax, 0xcc44d86f
rol eax, 0x70
popf
pushf
not eax
add eax, 0xc5741291
xor eax, 0x8eeea5f2
rol eax, 0x95
popf
pushf
not eax
add eax, 0x9c2e1dad
xor eax, 0xc3a5f40f
rol eax, 0xcd
popf
call fcn.14006c02c
sub rsp, rax
mov rax, qword [0x14001d008]
xor rax, rsp
mov qword [rsp + 0x1440], rax
movsxd r10, edx
mov rdi, rcx
mov rax, r10
mov ebp, r9d
sar rax, 6
lea rcx, [0x18878504c]
pushf
sub rcx, 0x48766a4c
popf
and r10d, 0x3f
push r8
not r8
sub rbp, r8
pop r8
sub rbp, 1
mov rsi, r8
mov rax, qword [rcx + rax*8]
lea rdx, [r10 + r10*8]
mov r14, qword [rax + rdx*8 + 0x28]
xor eax, eax
mov qword [rdi], rax
mov dword [rdi + 8], eax
cmp r8, rbp
jae 0x14004d2aa
push rax
pushf
mov eax, 0x644fb01f
pushf
not eax
add eax, 0x83019b65
xor eax, 0xb623e09e
rol eax, 0xd4
popf
pushf
not eax
add eax, 0xa9425db1
xor eax, 0xeb83d490
rol eax, 0xe
popf
jmp 0x14004d108
push rax
pushf
mov eax, 0x14e85a17
pushf
not eax
add eax, 0xc90a5d71
xor eax, 0x8ae5d572
rol eax, 0xb5
popf
pushf
not eax
add eax, 0xb0e325e1
xor eax, 0xd8049dc1
rol eax, 0x18
popf
pushf
not eax
add eax, 0xdda50ef5
xor eax, 0x9a0bfcf7
rol eax, 0x20
popf
pushf
not eax
add eax, 0x9dafff68
xor eax, 0xf1358b96
rol eax, 0xe1
popf
jmp 0x14004d108
lea rbx, [rsp + 0x40]
push rax
pushf
mov eax, 0x7a39dfcf
pushf
not eax
add eax, 0xcdc7d811
xor eax, 0xc4079c49
rol eax, 0xc1
popf
pushf
not eax
add eax, 0xd17d1c9b
xor eax, 0xb3fd29ca
rol eax, 0x54
popf
pushf
not eax
add eax, 0xe118cbef
xor eax, 0xbcbfcea0
rol eax, 0xed
popf
pushf
not eax
add eax, 0xda671ad1
xor eax, 0xcbe024c5
rol eax, 0xa9
popf
jmp 0x14004d108
cmp rsi, rbp
jae 0x14004d4fd
movzx eax, word [rsi]
add rsi, 2
cmp ax, 0xa
jne 0x14004d3d0
push rax
pushf
mov eax, 0x5e05e079
pushf
not eax
add eax, 0x80ad5488
xor eax, 0xf2e374c2
rol eax, 0xbf
popf
pushf
not eax
add eax, 0xa68fe4b9
xor eax, 0xf587ac56
rol eax, 0x7b
popf
pushf
not eax
add eax, 0xa4107d99
xor eax, 0xcceee6ef
rol eax, 0xe
popf
pushf
not eax
add eax, 0xacdee446
xor eax, 0xb970b7ee
rol eax, 0x14
popf
jmp 0x14004d108
push rax
pushf
mov eax, 0xc6e0426
pushf
not eax
add eax, 0xf84cdc37
xor eax, 0xf873828d
rol eax, 0xa3
popf
pushf
not eax
add eax, 0x8312a093
xor eax, 0xe727cbaa
rol eax, 0x69
popf
jmp 0x14004d108
add dword [rdi + 8], 2
mov ecx, 0x8d612a71
pushf
not ecx
add ecx, 0xb83915cb
xor ecx, 0x9d335e39
rol ecx, 0xa1
popf
pushf
not ecx
add ecx, 0xdedd8ca1
xor ecx, 0xef1421d9
rol ecx, 0x41
popf
mov word [rbx], cx
add rbx, 2
push rax
pushf
mov eax, 0x594138b
pushf
not eax
add eax, 0x8120226a
xor eax, 0xb5e5401b
rol eax, 0xba
popf
pushf
not eax
add eax, 0xdde667be
xor eax, 0xc6a6c282
rol eax, 0x8f
popf
jmp 0x14004d108
mov word [rbx], ax
add rbx, 2
lea rax, [rsp + 0x143e]
cmp rbx, rax
jb 0x14004d4b7
push rax
pushf
mov eax, 0x6194b46
pushf
not eax
add eax, 0xafb3ddcd
xor eax, 0xb1b68bd3
rol eax, 0xa5
popf
pushf
not eax
add eax, 0xaeda2f94
xor eax, 0xa95708f0
rol eax, 0x37
popf
jmp 0x14004d108
push rax
pushf
mov eax, 0x91da0874
pushf
not eax
add eax, 0xa6ee03d2
xor eax, 0x9bb88e56
rol eax, 0x3c
popf
pushf
not eax
add eax, 0xaab9d2fe
xor eax, 0xfcd7f5f7
rol eax, 0xd4
popf
pushf
not eax
add eax, 0x8774626e
xor eax, 0xa1d290df
rol eax, 0xd1
popf
jmp 0x14004d108
and qword [rsp + 0x20], 0
lea rax, [rsp + 0x40]
sub rbx, rax
lea r9, [rsp + 0x30]
sar rbx, 1
lea rdx, [rsp + 0x40]
add ebx, ebx
mov rcx, r14
mov r8d, ebx
jmp 0x14004d521
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x14004d571
push rax
pushf
mov eax, 0xd48b3bc4
pushf
not eax
add eax, 0x8123b2ec
xor eax, 0x9899ebb1
rol eax, 0x9c
popf
pushf
not eax
add eax, 0xaa27919e
xor eax, 0xac1a59ba
rol eax, 0xd
popf
pushf
not eax
add eax, 0x8a5ebccd
xor eax, 0xe490dead
rol eax, 0x1a
popf
jmp 0x14004d108
push rax
pushf
mov eax, 0x638b8641
pushf
not eax
add eax, 0xdedfa745
xor eax, 0xb5619e45
rol eax, 0xbd
popf
pushf
not eax
add eax, 0xebed2771
xor eax, 0x83e554fd
rol eax, 1
popf
pushf
not eax
add eax, 0xef011d4d
xor eax, 0xe37c5d9e
rol eax, 0x26
popf
pushf
not eax
add eax, 0xc23144bb
xor eax, 0xc0724670
rol eax, 0x9a
popf
jmp 0x14004d108
mov eax, dword [rsp + 0x30]
add dword [rdi + 4], eax
cmp eax, ebx
jb 0x14004d607
push rax
pushf
mov eax, 0x4739a031
pushf
not eax
add eax, 0xa0d096aa
xor eax, 0xa9a024e9
rol eax, 2
popf
pushf
not eax
add eax, 0xb6961015
xor eax, 0xf53ac5cd
rol eax, 0xac
popf
jmp 0x14004d108
push rax
pushf
mov eax, 0x73b26cf3
pushf
not eax
add eax, 0xc034df84
xor eax, 0xbc6c5b5d
rol eax, 0xa5
popf
pushf
not eax
add eax, 0xe1781321
xor eax, 0xc632d962
rol eax, 0x49
popf
jmp 0x14004d108
cmp rsi, rbp
jb 0x14004d672
push rax
pushf
mov eax, 0x2e00f3a2
pushf
not eax
add eax, 0xbfba27b5
xor eax, 0xeccc667b
rol eax, 0x6e
popf
pushf
not eax
add eax, 0xfb84cf00
xor eax, 0xa6ea6fab
rol eax, 0x80
popf
jmp 0x14004d108
push rax
pushf
mov eax, 0xa056ae13
pushf
not eax
add eax, 0xae876ba3
xor eax, 0x99c98807
rol eax, 0xe3
popf
pushf
not eax
add eax, 0x96d1612d
xor eax, 0xd70fb4e8
rol eax, 0x8d
popf
jmp 0x14004d108
jmp 0x14004d716
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rdi], eax
push rax
pushf
mov eax, 0x95290327
pushf
not eax
add eax, 0x83d81f6f
xor eax, 0xbbedeb09
rol eax, 0x84
popf
pushf
not eax
add eax, 0xefa7f22f
xor eax, 0x9b782549
rol eax, 0xd5
popf
jmp 0x14004d108
mov rax, rdi
mov rcx, qword [rsp + 0x1440]
xor rcx, rsp
call fcn.140066214
lea r11, [rsp + 0x1450]
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x30]
mov rsp, r11
pop r14
pop rdi
pop rsi
ret