Function at 0x1401614bd
Capabilities:
Write file on windows

Disassembly:
push rax
pushf
mov eax, 0x9f4d4479
pushf
not eax
add eax, 0x9e97a653
xor eax, 0x86ba4978
rol eax, 0xd9
popf
pushf
not eax
add eax, 0xbcd4cc86
xor eax, 0xc6ecc513
rol eax, 0x84
popf
pushf
not eax
add eax, 0xcaaa62b9
xor eax, 0xd9e7d03d
rol eax, 0xb7
popf
cmp eax, 4
jne 0x14016150d
popf
pop rax
jmp 0x140161884
cmp eax, 0
jne 0x14016151c
popf
pop rax
jmp 0x1401615c1
cmp eax, 3
jne 0x14016152b
popf
pop rax
jmp 0x1401617fe
cmp eax, 1
jne 0x14016153a
popf
pop rax
jmp 0x14016170f
cmp eax, 0xa
jne 0x140161549
popf
pop rax
jmp 0x140161c73
cmp eax, 7
jne 0x140161558
popf
pop rax
jmp 0x140161aee
cmp eax, 6
jne 0x140161567
popf
pop rax
jmp 0x1401619ca
cmp eax, 0xb
jne 0x140161576
popf
pop rax
jmp 0x140161cca
cmp eax, 0xc
jne 0x140161585
popf
pop rax
jmp 0x140161d05
cmp eax, 8
jne 0x140161594
popf
pop rax
jmp 0x140161ba6
cmp eax, 5
jne 0x1401615a3
popf
pop rax
jmp 0x140161917
cmp eax, 2
jne 0x1401615b2
popf
pop rax
jmp 0x14016176d
cmp eax, 9
jne 0x1401615c1
popf
pop rax
jmp 0x140161c67
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r12
push r14
push r15
mov eax, 0xe9a9fa3a
pushf
not eax
add eax, 0xa9d26c14
xor eax, 0xee1d6ca1
rol eax, 0x5c
popf
pushf
not eax
add eax, 0x85f7c72c
xor eax, 0xc3147505
rol eax, 0xc6
popf
call fcn.1401627b7
sub rsp, rax
mov rax, qword [0x140058058]
xor rax, rsp
mov qword [rsp + 0x1460], rax
movsxd r10, edx
mov rbx, rcx
mov rax, r10
mov r14d, r9d
sar rax, 6
lea rcx, [0x1a32271a2]
pushf
sub rcx, 0x631cca22
popf
and r10d, 0x3f
push r8
not r8
sub r14, r8
pop r8
sub r14, 1
mov r15, r8
mov rdi, r8
mov rax, qword [rcx + rax*8]
lea rdx, [r10 + r10*8]
mov r12, qword [rax + rdx*8 + 0x28]
xor eax, eax
mov qword [rbx], rax
cmp r8, r14
mov dword [rbx + 8], eax
jae 0x1401616b6
push rax
pushf
mov eax, 0x6317a0e3
pushf
not eax
add eax, 0xb243d6b3
xor eax, 0x895240d6
rol eax, 0x61
popf
pushf
not eax
add eax, 0xc632d866
xor eax, 0x8d3a1479
rol eax, 0xcd
popf
pushf
not eax
add eax, 0x8c7a57a6
xor eax, 0x8d30e1a4
rol eax, 0x39
popf
jmp 0x1401614fe
push rax
pushf
mov eax, 0x68bd905
pushf
not eax
add eax, 0xa02d41f7
xor eax, 0xdf768ee6
rol eax, 0xd8
popf
pushf
not eax
add eax, 0x86bfbb90
xor eax, 0xa2c1e27b
rol eax, 0x4c
popf
pushf
not eax
add eax, 0x8c408cb2
xor eax, 0xb32ce40b
rol eax, 0x6e
popf
pushf
not eax
add eax, 0xb34a3636
xor eax, 0xc252e272
rol eax, 0x29
popf
jmp 0x1401614fe
lea rax, [rsp + 0x50]
push rax
pushf
mov eax, 0x4579d823
pushf
not eax
add eax, 0xf8d63b0d
xor eax, 0xd4ad5e3d
rol eax, 0x86
popf
pushf
not eax
add eax, 0x885fd051
xor eax, 0xdbf9622a
rol eax, 0x28
popf
pushf
not eax
add eax, 0xce3b4d39
xor eax, 0xa0f4fa73
rol eax, 0x8d
popf
pushf
not eax
add eax, 0x9491ab6c
xor eax, 0xb9dd62d5
rol eax, 0xf0
popf
jmp 0x1401614fe
cmp rdi, r14
jae 0x1401617a5
push rax
pushf
mov eax, 0xfc0d830
pushf
not eax
add eax, 0xf7d50ab1
xor eax, 0xa39994be
rol eax, 0x5c
popf
pushf
not eax
add eax, 0xe5a9d910
xor eax, 0x80f0fead
rol eax, 0x81
popf
jmp 0x1401614fe
push rax
pushf
mov eax, 0x68018ded
pushf
not eax
add eax, 0x858652a0
xor eax, 0xc4c7abd9
rol eax, 0x22
popf
pushf
not eax
add eax, 0x9602b06d
xor eax, 0x87d11f51
rol eax, 0x90
popf
pushf
not eax
add eax, 0xf8a2336d
xor eax, 0x95d5b0ee
rol eax, 0xb6
popf
pushf
not eax
add eax, 0xc688db30
xor eax, 0xac2102fc
rol eax, 0x65
popf
jmp 0x1401614fe
movzx ecx, word [rdi]
add rdi, 2
cmp cx, 0xa
jne 0x140161851
push rax
pushf
mov eax, 0x3e27ea70
pushf
not eax
add eax, 0xd7a18db6
xor eax, 0xaf2601d0
rol eax, 0x8c
popf
pushf
not eax
add eax, 0xc88c1bba
xor eax, 0xe1801c70
rol eax, 0xf6
popf
pushf
not eax
add eax, 0x9a672d08
xor eax, 0x915b3442
rol eax, 0x9e
popf
jmp 0x1401614fe
push rax
pushf
mov eax, 0x99176325
pushf
not eax
add eax, 0xa18bfb03
xor eax, 0xdce013b8
rol eax, 0xda
popf
pushf
not eax
add eax, 0xf4f3311b
xor eax, 0xdda0df0b
rol eax, 0xc1
popf
jmp 0x1401614fe
mov edx, 0x58727375
pushf
not edx
add edx, 0xedfb44ea
xor edx, 0xb898b005
rol edx, 0x4f
popf
pushf
not edx
add edx, 0xeca49b83
xor edx, 0xc8b002b7
rol edx, 0x4a
popf
pushf
not edx
add edx, 0x933b8af7
xor edx, 0x9a14c33b
rol edx, 0x61
popf
pushf
not edx
add edx, 0xdeb4ddd5
xor edx, 0xbc47b1af
rol edx, 0x44
popf
mov word [rax], dx
add rax, 2
push rax
pushf
mov eax, 0x6e34166
pushf
not eax
add eax, 0xabb6c14c
xor eax, 0xe46002bd
rol eax, 0x92
popf
pushf
not eax
add eax, 0xa14861c7
xor eax, 0xabcf5ef9
rol eax, 0xd
popf
jmp 0x1401614fe
mov word [rax], cx
add rax, 2
lea rcx, [rsp + 0x6f8]
cmp rax, rcx
jb 0x140161984
push rax
pushf
mov eax, 0x5750a7b7
pushf
not eax
add eax, 0xab0eabf3
xor eax, 0xe436864e
rol eax, 0xd5
popf
pushf
not eax
add eax, 0xc7696f35
xor eax, 0xa99550e5
rol eax, 0xec
popf
pushf
not eax
add eax, 0xda9e99e8
xor eax, 0xa34c623e
rol eax, 0x4d
popf
pushf
not eax
add eax, 0x9f5404cf
xor eax, 0xdb770c2f
rol eax, 0xf2
popf
jmp 0x1401614fe
push rax
pushf
mov eax, 0x25625e75
pushf
not eax
add eax, 0xb5c6f430
xor eax, 0xfdcf9119
rol eax, 0x22
popf
pushf
not eax
add eax, 0xa43d624c
xor eax, 0xd1183e8b
rol eax, 7
popf
pushf
not eax
add eax, 0xc962bdc4
xor eax, 0x84aa2305
rol eax, 0xfc
popf
jmp 0x1401614fe
and qword [rsp + 0x38], 0
lea rcx, [rsp + 0x50]
and qword [rsp + 0x30], 0
lea r8, [rsp + 0x50]
sub rax, rcx
mov dword [rsp + 0x28], 0xd55
lea rcx, [rsp + 0x700]
sar rax, 1
mov qword [rsp + 0x20], rcx
mov r9d, eax
mov ecx, 0xbdf59239
pushf
not ecx
add ecx, 0xd9d6cbf0
xor ecx, 0xabca37e0
rol ecx, 0xc6
popf
pushf
not ecx
add ecx, 0xb879a77a
xor ecx, 0xe5dbae14
rol ecx, 0x74
popf
pushf
not ecx
add ecx, 0x93b268dc
xor ecx, 0x961e15a4
rol ecx, 0xde
popf
xor edx, edx
call fcn.1401e95ae
mov ebp, eax
test eax, eax
je 0x140161aa8
push rax
pushf
mov eax, 0xca8ccb38
pushf
not eax
add eax, 0x9abe2d2d
xor eax, 0xdb399d2e
rol eax, 0x71
popf
pushf
not eax
add eax, 0x89470873
xor eax, 0xcb8a3664
rol eax, 0xc9
popf
pushf
not eax
add eax, 0xd3bf1ad6
xor eax, 0xd118fa03
rol eax, 0x97
popf
pushf
not eax
add eax, 0xac47b3b6
xor eax, 0xf50e1bc0
rol eax, 0x84
popf
jmp 0x1401614fe
push rax
pushf
mov eax, 0x122ec716
pushf
not eax
add eax, 0xe3a1ed7d
xor eax, 0xb64d348d
rol eax, 0x9d
popf
pushf
not eax
add eax, 0xdf17739f
xor eax, 0xb9e87600
rol eax, 0xfe
popf
pushf
not eax
add eax, 0xfb7297db
xor eax, 0x8880a601
rol eax, 0x20
popf
jmp 0x1401614fe
xor esi, esi
test eax, eax
je 0x140161b4d
push rax
pushf
mov eax, 0x8f2946e6
pushf
not eax
add eax, 0x99f564d1
xor eax, 0xcdb35382
rol eax, 0xce
popf
pushf
not eax
add eax, 0xaa6fce1e
xor eax, 0xf7008c39
rol eax, 0x90
popf
pushf
not eax
add eax, 0x8a7510cd
xor eax, 0xbfd425a7
rol eax, 0xa1
popf
pushf
not eax
add eax, 0x8095aa7d
xor eax, 0xf52213df
rol eax, 0x81
popf
jmp 0x1401614fe
push rax
pushf
mov eax, 0xd07226c3
pushf
not eax
add eax, 0xa9d61b45
xor eax, 0xd133e928
rol eax, 0x6c
popf
pushf
not eax
add eax, 0x8e358a5a
xor eax, 0xb12e311e
rol eax, 0x6b
popf
pushf
not eax
add eax, 0xa7167331
xor eax, 0xb70273e8
rol eax, 0xf0
popf
pushf
not eax
add eax, 0xa2ae3ab3
xor eax, 0xd00082e2
rol eax, 0x42
popf
jmp 0x1401614fe
and qword [rsp + 0x20], 0
lea rdx, [rsp + 0x700]
mov ecx, esi
lea r9, [rsp + 0x40]
mov r8d, ebp
push rcx
not rcx
sub rdx, rcx
pop rcx
sub rdx, 1
mov rcx, r12
sub r8d, esi
jmp 0x140161bd1
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x140161c0e
push rax
pushf
mov eax, 0x570c9b5c
pushf
not eax
add eax, 0x80f56c51
xor eax, 0x92c5a15f
rol eax, 0x6f
popf
pushf
not eax
add eax, 0xb8c82c59
xor eax, 0xb7f24ec2
rol eax, 0x65
popf
jmp 0x1401614fe
push rax
pushf
mov eax, 0x4db03591
pushf
not eax
add eax, 0xd7be0859
xor eax, 0x926c3e0d
rol eax, 0x40
popf
pushf
not eax
add eax, 0xc77310f3
xor eax, 0xed8bcf2d
rol eax, 0x53
popf
pushf
not eax
add eax, 0xa88d8657
xor eax, 0xe88e73c7
rol eax, 3
popf
pushf
not eax
add eax, 0x8b630f82
xor eax, 0xc3f839bc
rol eax, 0x12
popf
jmp 0x1401614fe
add esi, dword [rsp + 0x40]
cmp esi, ebp
jb 0x140161ba6
mov eax, edi
sub eax, r15d
mov dword [rbx + 4], eax
cmp rdi, r14
jmp 0x14016166a
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbx], eax
push rax
pushf
mov eax, 0x1fe37c65
pushf
not eax
add eax, 0x88a69d46
xor eax, 0x842b6fd0
rol eax, 0x25
popf
pushf
not eax
add eax, 0x8faf80a6
xor eax, 0xc2a59a88
rol eax, 0x26
popf
jmp 0x1401614fe
mov rax, rbx
mov rcx, qword [rsp + 0x1460]
xor rcx, rsp
call fcn.1401533b0
lea r11, [rsp + 0x1470]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rsi
ret