Function at 0x14067401e
Capabilities:
Write file on windows

Disassembly:
push rax
pushf
mov eax, 0x3a8b70a9
pushf
not eax
add eax, 0xeb079cb1
xor eax, 0xc01808f2
rol eax, 0x91
popf
pushf
not eax
add eax, 0xe0472582
xor eax, 0xb74f964a
rol eax, 0xe8
popf
pushf
not eax
add eax, 0xa7160aaf
xor eax, 0x9343178d
rol eax, 0x2a
popf
cmp eax, 4
jne 0x14067406e
popf
pop rax
jmp 0x1406743e1
cmp eax, 0
jne 0x14067407d
popf
pop rax
jmp 0x140674131
cmp eax, 3
jne 0x14067408c
popf
pop rax
jmp 0x140674348
cmp eax, 1
jne 0x14067409b
popf
pop rax
jmp 0x14067427f
cmp eax, 0xd
jne 0x1406740aa
popf
pop rax
jmp 0x140674876
cmp eax, 7
jne 0x1406740b9
popf
pop rax
jmp 0x1406745df
cmp eax, 6
jne 0x1406740c8
popf
pop rax
jmp 0x1406744d1
cmp eax, 0xb
jne 0x1406740d7
popf
pop rax
jmp 0x1406747ef
cmp eax, 0xc
jne 0x1406740e6
popf
pop rax
jmp 0x140674828
cmp eax, 8
jne 0x1406740f5
popf
pop rax
jmp 0x140674684
cmp eax, 5
jne 0x140674104
popf
pop rax
jmp 0x140674443
cmp eax, 2
jne 0x140674113
popf
pop rax
jmp 0x1406742b7
cmp eax, 9
jne 0x140674122
popf
pop rax
jmp 0x14067475d
cmp eax, 0xa
jne 0x140674131
popf
pop rax
jmp 0x1406747de
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r12
push r14
push r15
mov eax, 0xcd2fb072
pushf
not eax
add eax, 0x8d4d3cbc
xor eax, 0xc242b0af
rol eax, 0xe7
popf
pushf
not eax
add eax, 0x8949ecbb
xor eax, 0xb8a41bf3
rol eax, 0xe8
popf
pushf
not eax
add eax, 0x90394d86
xor eax, 0x819002a4
rol eax, 0x14
popf
call fcn.140674ffd
sub rsp, rax
mov rax, qword [0x14004b080]
xor rax, rsp
mov qword [rsp + 0x1460], rax
movsxd r10, edx
mov rbx, rcx
mov rax, r10
mov r14d, r9d
sar rax, 6
lea rcx, [0x183231dce]
pushf
sub rcx, 0x42c97d9e
popf
and r10d, 0x3f
push r8
not r8
sub r14, r8
pop r8
sub r14, 1
mov r15, r8
mov rdi, r8
mov rax, qword [rcx + rax*8]
lea rdx, [r10 + r10*8]
mov r12, qword [rax + rdx*8 + 0x28]
xor eax, eax
mov qword [rbx], rax
mov dword [rbx + 8], eax
cmp r8, r14
jae 0x140674226
push rax
pushf
mov eax, 0xa3b587cc
pushf
not eax
add eax, 0xb8778b32
xor eax, 0x8b2b14d5
rol eax, 0xd3
popf
pushf
not eax
add eax, 0xb5ac21fb
xor eax, 0xd82722b2
rol eax, 0x83
popf
jmp 0x14067405f
push rax
pushf
mov eax, 0xc36bd04b
pushf
not eax
add eax, 0xff3dcf67
xor eax, 0x8315af83
rol eax, 0xe3
popf
pushf
not eax
add eax, 0xaf7ac12b
xor eax, 0xc9503ae7
rol eax, 0xad
popf
pushf
not eax
add eax, 0xfe031a6f
xor eax, 0xcd489275
rol eax, 0x25
popf
pushf
not eax
add eax, 0xd738abc4
xor eax, 0xc7f01cbd
rol eax, 0x36
popf
jmp 0x14067405f
lea r9, [rsp + 0x50]
push rax
pushf
mov eax, 0xbee2ba77
pushf
not eax
add eax, 0xd6f1dbe3
xor eax, 0xb55d9cb0
rol eax, 0xe
popf
pushf
not eax
add eax, 0x977a83af
xor eax, 0xe8039852
rol eax, 0x5e
popf
jmp 0x14067405f
cmp rdi, r14
jae 0x140674302
push rax
pushf
mov eax, 0xea9d8341
pushf
not eax
add eax, 0xd20b3cc1
xor eax, 0xd155303a
rol eax, 0xbc
popf
pushf
not eax
add eax, 0xb6038365
xor eax, 0x8601c4e1
rol eax, 0x2b
popf
pushf
not eax
add eax, 0xa70c49b8
xor eax, 0x851aba93
rol eax, 0xa4
popf
jmp 0x14067405f
push rax
pushf
mov eax, 0x659c81e1
pushf
not eax
add eax, 0xb1b0a6dc
xor eax, 0xbb7c5750
rol eax, 0x99
popf
pushf
not eax
add eax, 0xaf7e78c0
xor eax, 0x85f1ccca
rol eax, 0xd9
popf
pushf
not eax
add eax, 0xd1c0db41
xor eax, 0xac07dd6a
rol eax, 0x99
popf
jmp 0x14067405f
movzx eax, word [rdi]
add rdi, 2
cmp ax, 0xa
jne 0x140674388
push rax
pushf
mov eax, 0x828cb2e7
pushf
not eax
add eax, 0xfb13caaa
xor eax, 0xee8bbaec
rol eax, 0xe7
popf
pushf
not eax
add eax, 0xf90dfd93
xor eax, 0xf2b76643
rol eax, 0xc0
popf
jmp 0x14067405f
push rax
pushf
mov eax, 0xec737661
pushf
not eax
add eax, 0xd3c40dd5
xor eax, 0x99ef4bf6
rol eax, 0x67
popf
pushf
not eax
add eax, 0xabb4b3a2
xor eax, 0xdc4314f1
rol eax, 0xed
popf
pushf
not eax
add eax, 0xa328ff32
xor eax, 0xd17a15a4
rol eax, 0x60
popf
pushf
not eax
add eax, 0xfd2c166e
xor eax, 0xd5457c88
rol eax, 0xef
popf
jmp 0x14067405f
mov word [r9], 0xd
add r9, 2
push rax
pushf
mov eax, 0x80ee4dd
pushf
not eax
add eax, 0x813c47ab
xor eax, 0xa3422776
rol eax, 0x82
popf
pushf
not eax
add eax, 0x9cf700f6
xor eax, 0xdcd20cd8
rol eax, 0x24
popf
pushf
not eax
add eax, 0x8bfdcf76
xor eax, 0x8f1c75b9
rol eax, 1
popf
pushf
not eax
add eax, 0xa15364f4
xor eax, 0x9d083c77
rol eax, 0x90
popf
jmp 0x14067405f
mov word [r9], ax
add r9, 2
lea rax, [rsp + 0x6f8]
cmp r9, rax
jb 0x14067448b
push rax
pushf
mov eax, 0xdda74b0
pushf
not eax
add eax, 0xccb14610
xor eax, 0xfee5e21b
rol eax, 0x5a
popf
pushf
not eax
add eax, 0xe7d5ff63
xor eax, 0xd7553295
rol eax, 0x4a
popf
jmp 0x14067405f
push rax
pushf
mov eax, 0x86631cb4
pushf
not eax
add eax, 0xfafa3be3
xor eax, 0xf4887201
rol eax, 0x17
popf
pushf
not eax
add eax, 0xceee56bd
xor eax, 0xa2bd3981
rol eax, 0xdb
popf
pushf
not eax
add eax, 0xc467497c
xor eax, 0x8fbaad87
rol eax, 6
popf
jmp 0x14067405f
and qword [rsp + 0x38], 0
lea rax, [rsp + 0x50]
and qword [rsp + 0x30], 0
lea r8, [rsp + 0x50]
sub r9, rax
mov dword [rsp + 0x28], 0xd55
lea rax, [rsp + 0x700]
sar r9, 1
xor edx, edx
mov qword [rsp + 0x20], rax
mov ecx, 0xfdf856e0
pushf
not ecx
add ecx, 0xdbc1a71d
xor ecx, 0xd72b43bd
rol ecx, 0x42
popf
pushf
not ecx
add ecx, 0xb3270653
xor ecx, 0x81160452
rol ecx, 0x13
popf
pushf
not ecx
add ecx, 0xa4c04694
xor ecx, 0xfc9a524e
rol ecx, 0xf2
popf
call fcn.1406d5b59
mov ebp, eax
test eax, eax
je 0x140674599
push rax
pushf
mov eax, 0x2215687
pushf
not eax
add eax, 0xb055446e
xor eax, 0xfee18ad0
rol eax, 0xf0
popf
pushf
not eax
add eax, 0x8ad4b68e
xor eax, 0x8715e50d
rol eax, 0xaa
popf
pushf
not eax
add eax, 0x9ef803f7
xor eax, 0x90f52964
rol eax, 0x23
popf
jmp 0x14067405f
push rax
pushf
mov eax, 0x58de337f
pushf
not eax
add eax, 0xdfe514d3
xor eax, 0xcab1944f
rol eax, 0xb6
popf
pushf
not eax
add eax, 0x99449255
xor eax, 0xb6c14b64
rol eax, 0x63
popf
pushf
not eax
add eax, 0xb09d04ac
xor eax, 0x89198c14
rol eax, 0x9f
popf
jmp 0x14067405f
xor esi, esi
test eax, eax
je 0x14067462b
push rax
pushf
mov eax, 0x186d7071
pushf
not eax
add eax, 0x92102eaf
xor eax, 0xa89a58eb
rol eax, 0xf6
popf
pushf
not eax
add eax, 0xcb114100
xor eax, 0xed01405c
rol eax, 0xf4
popf
pushf
not eax
add eax, 0xc5d63df0
xor eax, 0x9c269814
rol eax, 0xb6
popf
jmp 0x14067405f
push rax
pushf
mov eax, 0x1fe8d570
pushf
not eax
add eax, 0xdc6d9702
xor eax, 0xbaa94814
rol eax, 0xd9
popf
pushf
not eax
add eax, 0xc5554206
xor eax, 0xce7ddcb7
rol eax, 0xdf
popf
pushf
not eax
add eax, 0xde88904e
xor eax, 0xc3ead54e
rol eax, 0x68
popf
pushf
not eax
add eax, 0xaa050a69
xor eax, 0xa2d4a488
rol eax, 0xf0
popf
jmp 0x14067405f
and dword [rsp + 0x40], 0
lea rdx, [rsp + 0x700]
and qword [rsp + 0x20], 0
lea r9, [rsp + 0x40]
mov ecx, esi
mov r8d, ebp
push rcx
not rcx
sub rdx, rcx
pop rcx
sub rdx, 1
sub r8d, esi
mov rcx, r12
jmp 0x1406746b4
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x140674704
push rax
pushf
mov eax, 0xae6724ee
pushf
not eax
add eax, 0xfc6e7c98
xor eax, 0xf3c72fbc
rol eax, 0xc3
popf
pushf
not eax
add eax, 0xfd324e8b
xor eax, 0xd0d7d2fb
rol eax, 0xef
popf
pushf
not eax
add eax, 0xbc12ae10
xor eax, 0x8c7f3e17
rol eax, 0xe1
popf
jmp 0x14067405f
push rax
pushf
mov eax, 0xc9682d44
pushf
not eax
add eax, 0xf4427ee2
xor eax, 0x843101f3
rol eax, 0x73
popf
pushf
not eax
add eax, 0xf193bf02
xor eax, 0xe09d93b3
rol eax, 0xe4
popf
pushf
not eax
add eax, 0xe7b2b04c
xor eax, 0x90c5dbbd
rol eax, 0xe5
popf
pushf
not eax
add eax, 0x8afb9b7b
xor eax, 0x94e903ad
rol eax, 0xd0
popf
jmp 0x14067405f
add esi, dword [rsp + 0x40]
cmp esi, ebp
jb 0x1406747ab
push rax
pushf
mov eax, 0xeec298bb
pushf
not eax
add eax, 0x90ac136c
xor eax, 0x843a0665
rol eax, 0x5e
popf
pushf
not eax
add eax, 0x936ff5ee
xor eax, 0xb884701a
rol eax, 0x7c
popf
pushf
not eax
add eax, 0xe2e35180
xor eax, 0xb3cb5b1f
rol eax, 0x40
popf
jmp 0x14067405f
push rax
pushf
mov eax, 0x2817d4e9
pushf
not eax
add eax, 0x928f6a36
xor eax, 0xc199efac
rol eax, 0x91
popf
pushf
not eax
add eax, 0xa9a10a0e
xor eax, 0xb7dfb231
rol eax, 0x89
popf
jmp 0x14067405f
mov eax, edi
sub eax, r15d
mov dword [rbx + 4], eax
cmp rdi, r14
jb 0x14067427f
jmp 0x140674876
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbx], eax
push rax
pushf
mov eax, 0x37345ac3
pushf
not eax
add eax, 0xa3c71280
xor eax, 0xc1c7d6a0
rol eax, 6
popf
pushf
not eax
add eax, 0xb99d46f4
xor eax, 0xddb49237
rol eax, 0xed
popf
pushf
not eax
add eax, 0xe1f1f67e
xor eax, 0xd4305f3f
rol eax, 0x73
popf
jmp 0x14067405f
mov rax, rbx
mov rcx, qword [rsp + 0x1460]
xor rcx, rsp
call fcn.14066b1de
lea r11, [rsp + 0x1470]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rsi
ret