Function at 0x14061811b
Capabilities:
Write file on windows

Disassembly:
push rax
pushf
mov eax, 0x6dabe75a
pushf
not eax
add eax, 0x9b025709
xor eax, 0xcd75356b
rol eax, 0xc4
popf
pushf
not eax
add eax, 0x82ef1ee4
xor eax, 0x80b97285
rol eax, 0xa0
popf
cmp eax, 4
jne 0x140618158
popf
pop rax
jmp 0x140618444
cmp eax, 0
jne 0x140618167
popf
pop rax
jmp 0x1406181fd
cmp eax, 3
jne 0x140618176
popf
pop rax
jmp 0x1406183ab
cmp eax, 1
jne 0x140618185
popf
pop rax
jmp 0x14061836a
cmp eax, 0xa
jne 0x140618194
popf
pop rax
jmp 0x1406187b6
cmp eax, 7
jne 0x1406181a3
popf
pop rax
jmp 0x14061861c
cmp eax, 6
jne 0x1406181b2
popf
pop rax
jmp 0x14061854a
cmp eax, 0xb
jne 0x1406181c1
popf
pop rax
jmp 0x140618804
cmp eax, 9
jne 0x1406181d0
popf
pop rax
jmp 0x14061876a
cmp eax, 8
jne 0x1406181df
popf
pop rax
jmp 0x1406186d9
cmp eax, 5
jne 0x1406181ee
popf
pop rax
jmp 0x140618497
cmp eax, 2
jne 0x1406181fd
popf
pop rax
jmp 0x1406183a2
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r14
mov eax, 0x851e230
pushf
not eax
add eax, 0xa05083be
xor eax, 0xe7ce6204
rol eax, 0x59
popf
pushf
not eax
add eax, 0x8843faf4
xor eax, 0xbc56413d
rol eax, 0xf7
popf
pushf
not eax
add eax, 0xc5552c50
xor eax, 0x9c758563
rol eax, 0x5a
popf
call fcn.140674ffd
sub rsp, rax
mov rax, qword [0x14004b080]
xor rax, rsp
mov qword [rsp + 0x1440], rax
movsxd r10, edx
mov rdi, rcx
mov rax, r10
mov ebp, r9d
sar rax, 6
lea rcx, [0x19ae396c0]
pushf
sub rcx, 0x5a89f690
popf
and r10d, 0x3f
push r8
not r8
sub rbp, r8
pop r8
sub rbp, 1
mov rsi, r8
mov rax, qword [rcx + rax*8]
lea rdx, [r10 + r10*8]
mov r14, qword [rax + rdx*8 + 0x28]
xor eax, eax
mov qword [rdi], rax
mov dword [rdi + 8], eax
cmp r8, rbp
jae 0x140618311
push rax
pushf
mov eax, 0xc7b889b0
pushf
not eax
add eax, 0xdc93dca3
xor eax, 0x915d3f9c
rol eax, 0xb
popf
pushf
not eax
add eax, 0x9f7821b3
xor eax, 0xf0dca428
rol eax, 0x81
popf
pushf
not eax
add eax, 0xe4a0f41a
xor eax, 0xa0f8783e
rol eax, 0x15
popf
pushf
not eax
add eax, 0xccfe0793
xor eax, 0xacbc887f
rol eax, 0xc4
popf
jmp 0x140618149
push rax
pushf
mov eax, 0xf1b0795d
pushf
not eax
add eax, 0xd30b0cdd
xor eax, 0x828b6687
rol eax, 0xf1
popf
pushf
not eax
add eax, 0xf56730a9
xor eax, 0xf5f19628
rol eax, 0x6f
popf
pushf
not eax
add eax, 0xf600262e
xor eax, 0xfe2ce608
rol eax, 0x4b
popf
pushf
not eax
add eax, 0xcecb782a
xor eax, 0xf8bc67e7
rol eax, 0xe5
popf
jmp 0x140618149
lea rbx, [rsp + 0x40]
push rax
pushf
mov eax, 0xdfc793d3
pushf
not eax
add eax, 0xd0de1937
xor eax, 0xcc5f78f0
rol eax, 0x51
popf
pushf
not eax
add eax, 0xef665a5a
xor eax, 0xf43fdfc2
rol eax, 0xdf
popf
jmp 0x140618149
cmp rsi, rbp
jae 0x14061854a
movzx eax, word [rsi]
add rsi, 2
cmp ax, 0xa
jne 0x1406183fe
push rax
pushf
mov eax, 0xbbfb99aa
pushf
not eax
add eax, 0xad5eaa44
xor eax, 0xdf2eed01
rol eax, 0xec
popf
pushf
not eax
add eax, 0xf2eeb9ae
xor eax, 0xb4906787
rol eax, 0xc9
popf
pushf
not eax
add eax, 0xb3ab1039
xor eax, 0xa98872e9
rol eax, 0xb
popf
jmp 0x140618149
push rax
pushf
mov eax, 0xe480e94f
pushf
not eax
add eax, 0xfba98302
xor eax, 0xc3116d15
rol eax, 0xe6
popf
pushf
not eax
add eax, 0xad7d7578
xor eax, 0xd6638fdf
rol eax, 0xf9
popf
pushf
not eax
add eax, 0xa3a9fe4d
xor eax, 0xe91766c4
rol eax, 0x34
popf
jmp 0x140618149
add dword [rdi + 8], 2
mov word [rbx], 0xd
add rbx, 2
push rax
pushf
mov eax, 0xc156c4b8
pushf
not eax
add eax, 0xdada7298
xor eax, 0xc533dd10
rol eax, 0xe9
popf
pushf
not eax
add eax, 0xcfa49a12
xor eax, 0x953bbaec
rol eax, 0x77
popf
pushf
not eax
add eax, 0xf4efb8bb
xor eax, 0x9a711c1a
rol eax, 0x73
popf
jmp 0x140618149
mov word [rbx], ax
add rbx, 2
lea rax, [rsp + 0x143e]
cmp rbx, rax
jb 0x1406184f1
push rax
pushf
mov eax, 0xd14a3e4a
pushf
not eax
add eax, 0xab7b4a81
xor eax, 0xe9a985ce
rol eax, 0x55
popf
pushf
not eax
add eax, 0xe592c5a5
xor eax, 0xbd2051ef
rol eax, 0x95
popf
pushf
not eax
add eax, 0xff7fb34e
xor eax, 0x8ffc5dcd
rol eax, 0xd4
popf
jmp 0x140618149
push rax
pushf
mov eax, 0xd9be7cb6
pushf
not eax
add eax, 0xdff3da06
xor eax, 0xfb118159
rol eax, 0xc3
popf
pushf
not eax
add eax, 0x950d5050
xor eax, 0xeb5fdf5f
rol eax, 0x55
popf
pushf
not eax
add eax, 0xf5c67baf
xor eax, 0x90e96895
rol eax, 0x14
popf
pushf
not eax
add eax, 0x986dafdd
xor eax, 0xc998ec6d
rol eax, 0xc1
popf
jmp 0x140618149
and dword [rsp + 0x30], 0
lea rax, [rsp + 0x40]
and qword [rsp + 0x20], 0
lea r9, [rsp + 0x30]
sub rbx, rax
lea rdx, [rsp + 0x40]
sar rbx, 1
mov rcx, r14
add ebx, ebx
mov r8d, ebx
jmp 0x140618573
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x1406185d6
push rax
pushf
mov eax, 0x17086d0d
pushf
not eax
add eax, 0x8eba9795
xor eax, 0xe6b57bfa
rol eax, 0xe8
popf
pushf
not eax
add eax, 0xefc30212
xor eax, 0xdb89299f
rol eax, 0x5f
popf
pushf
not eax
add eax, 0xb18cefd5
xor eax, 0xd4219112
rol eax, 0x56
popf
pushf
not eax
add eax, 0xd75f3be5
xor eax, 0xc16e4c22
rol eax, 0x39
popf
jmp 0x140618149
push rax
pushf
mov eax, 0x41aff867
pushf
not eax
add eax, 0x87616dc0
xor eax, 0xbe3b2dca
rol eax, 0x80
popf
pushf
not eax
add eax, 0xc2a56b26
xor eax, 0xf36c9e82
rol eax, 0x8f
popf
pushf
not eax
add eax, 0x9b26f599
xor eax, 0xd45e5b5d
rol eax, 0x6b
popf
jmp 0x140618149
mov eax, dword [rsp + 0x30]
add dword [rdi + 4], eax
cmp eax, ebx
jb 0x140618680
push rax
pushf
mov eax, 0x15f29485
pushf
not eax
add eax, 0xdfa3f728
xor eax, 0x8a7483fd
rol eax, 0x53
popf
pushf
not eax
add eax, 0xd8936c94
xor eax, 0xbe63edac
rol eax, 0xae
popf
pushf
not eax
add eax, 0x9d437992
xor eax, 0x88a9cb84
rol eax, 0x35
popf
pushf
not eax
add eax, 0xe21d7a56
xor eax, 0xff2ddb41
rol eax, 0x42
popf
jmp 0x140618149
push rax
pushf
mov eax, 0xc5becaf6
pushf
not eax
add eax, 0x88765ad3
xor eax, 0x860cae53
rol eax, 0x34
popf
pushf
not eax
add eax, 0x90f486f7
xor eax, 0xabbbde57
rol eax, 0xf1
popf
pushf
not eax
add eax, 0xe261d859
xor eax, 0xc0033872
rol eax, 0xee
popf
pushf
not eax
add eax, 0xe8454e07
xor eax, 0xa620e7f8
rol eax, 0x74
popf
jmp 0x140618149
cmp rsi, rbp
jb 0x140618711
push rax
pushf
mov eax, 0xecab472a
pushf
not eax
add eax, 0xefc513c1
xor eax, 0xbf567bc7
rol eax, 0xbc
popf
pushf
not eax
add eax, 0xda1252ba
xor eax, 0xbe4f1744
rol eax, 0xb2
popf
jmp 0x140618149
push rax
pushf
mov eax, 0x8ebd5e44
pushf
not eax
add eax, 0xa0840148
xor eax, 0xa12a7f67
rol eax, 0x2e
popf
pushf
not eax
add eax, 0xb59b74ba
xor eax, 0xafe48332
rol eax, 0x1c
popf
pushf
not eax
add eax, 0xe6575d4b
xor eax, 0xfc4998d5
rol eax, 0x29
popf
pushf
not eax
add eax, 0xd4da3c8f
xor eax, 0xc209b0c4
rol eax, 0x16
popf
jmp 0x140618149
jmp 0x140618804
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rdi], eax
push rax
pushf
mov eax, 0x2b967a68
pushf
not eax
add eax, 0xb44e9e77
xor eax, 0xd083bb86
rol eax, 0x24
popf
pushf
not eax
add eax, 0xfb16ba53
xor eax, 0xeacb80dd
rol eax, 0x38
popf
pushf
not eax
add eax, 0xac6213d0
xor eax, 0x9bc4778e
rol eax, 0xf8
popf
jmp 0x140618149
mov rax, rdi
mov rcx, qword [rsp + 0x1440]
xor rcx, rsp
call fcn.14066b1de
lea r11, [rsp + 0x1450]
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x30]
mov rsp, r11
pop r14
pop rdi
pop rsi
ret