Function at 0x1401b70c5
Capabilities:
Write file on windows

Disassembly:
push rax
pushf
mov eax, 0x3b283f22
pushf
not eax
add eax, 0xfa82f644
xor eax, 0xaefee488
rol eax, 0x63
popf
pushf
not eax
add eax, 0xe86c8630
xor eax, 0xaf31c1ef
rol eax, 0xa1
popf
pushf
not eax
add eax, 0xe9031843
xor eax, 0xfba173b3
rol eax, 0xa
popf
pushf
not eax
add eax, 0xa2764618
xor eax, 0xd3a03a29
rol eax, 0xd
popf
cmp eax, 4
jne 0x1401b7128
popf
pop rax
jmp 0x1401b7433
cmp eax, 0
jne 0x1401b7137
popf
pop rax
jmp 0x1401b71cd
cmp eax, 3
jne 0x1401b7146
popf
pop rax
jmp 0x1401b73b0
cmp eax, 1
jne 0x1401b7155
popf
pop rax
jmp 0x1401b7349
cmp eax, 0xa
jne 0x1401b7164
popf
pop rax
jmp 0x1401b7748
cmp eax, 7
jne 0x1401b7173
popf
pop rax
jmp 0x1401b75d4
cmp eax, 6
jne 0x1401b7182
popf
pop rax
jmp 0x1401b7520
cmp eax, 0xb
jne 0x1401b7191
popf
pop rax
jmp 0x1401b7796
cmp eax, 9
jne 0x1401b71a0
popf
pop rax
jmp 0x1401b76e9
cmp eax, 8
jne 0x1401b71af
popf
pop rax
jmp 0x1401b766b
cmp eax, 5
jne 0x1401b71be
popf
pop rax
jmp 0x1401b746f
cmp eax, 2
jne 0x1401b71cd
popf
pop rax
jmp 0x1401b73a7
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r14
mov eax, 0x9e081d77
pushf
not eax
add eax, 0xf80c4216
xor eax, 0xf946b940
rol eax, 0xa9
popf
pushf
not eax
add eax, 0xa9a5830d
xor eax, 0xf32c09f1
rol eax, 0x4d
popf
pushf
not eax
add eax, 0xab51eac6
xor eax, 0xf9cae354
rol eax, 0xc7
popf
pushf
not eax
add eax, 0x8471c47a
xor eax, 0x8443dff5
rol eax, 0x17
popf
call fcn.1402c8c14
sub rsp, rax
mov rax, qword [0x14010a0d0]
xor rax, rsp
mov qword [rsp + 0x1440], rax
movsxd r10, edx
mov rdi, rcx
mov rax, r10
mov ebp, r9d
sar rax, 6
lea rcx, [0x18659320f]
pushf
sub rcx, 0x4646603f
popf
and r10d, 0x3f
push r8
not r8
sub rbp, r8
pop r8
sub rbp, 1
mov rsi, r8
mov rax, qword [rcx + rax*8]
lea rdx, [r10 + r10*8]
mov r14, qword [rax + rdx*8 + 0x28]
xor eax, eax
mov qword [rdi], rax
mov dword [rdi + 8], eax
cmp r8, rbp
jae 0x1401b72f0
push rax
pushf
mov eax, 0xaf20b20c
pushf
not eax
add eax, 0xf0a2267a
xor eax, 0x92ce9a9f
rol eax, 0xbe
popf
pushf
not eax
add eax, 0xb6a3acdb
xor eax, 0xc3db7831
rol eax, 0xc5
popf
pushf
not eax
add eax, 0xb568c6d4
xor eax, 0xb03ff930
rol eax, 0x77
popf
pushf
not eax
add eax, 0x8a96d79d
xor eax, 0x94b55f60
rol eax, 0xfc
popf
jmp 0x1401b7119
push rax
pushf
mov eax, 0xcaa0ca11
pushf
not eax
add eax, 0x90ef53ca
xor eax, 0x9b9563df
rol eax, 0xf6
popf
pushf
not eax
add eax, 0x84a6993a
xor eax, 0xbd2ede98
rol eax, 0x48
popf
pushf
not eax
add eax, 0xb40a2654
xor eax, 0xf3fb8aed
rol eax, 0x1e
popf
pushf
not eax
add eax, 0xdde4f38c
xor eax, 0x95d73687
rol eax, 0x6c
popf
jmp 0x1401b7119
lea rbx, [rsp + 0x40]
push rax
pushf
mov eax, 0xa4893b85
pushf
not eax
add eax, 0x965a24f1
xor eax, 0xa8a07527
rol eax, 0x8b
popf
pushf
not eax
add eax, 0xe2bdf50c
xor eax, 0xcb8b97b9
rol eax, 0x76
popf
pushf
not eax
add eax, 0xfdde2586
xor eax, 0xd759bb4c
rol eax, 0xcd
popf
pushf
not eax
add eax, 0xabf2c393
xor eax, 0x86d9ae8e
rol eax, 0xab
popf
jmp 0x1401b7119
cmp rsi, rbp
jae 0x1401b7520
mov al, byte [rsi]
inc rsi
cmp al, 0xa
jne 0x1401b73ec
push rax
pushf
mov eax, 0xe3abf7f4
pushf
not eax
add eax, 0x84b6217a
xor eax, 0xee693688
rol eax, 0x82
popf
pushf
not eax
add eax, 0xe8c03513
xor eax, 0xa333b8dd
rol eax, 7
popf
jmp 0x1401b7119
push rax
pushf
mov eax, 0x7b542b33
pushf
not eax
add eax, 0x883ba33d
xor eax, 0xd71aa292
rol eax, 0x8d
popf
pushf
not eax
add eax, 0xd6bbcf2b
xor eax, 0xfec03c16
rol eax, 0xa
popf
pushf
not eax
add eax, 0x9985532a
xor eax, 0xe3c65b93
rol eax, 0x86
popf
jmp 0x1401b7119
inc dword [rdi + 8]
mov byte [rbx], 0xd
inc rbx
push rax
pushf
mov eax, 0xde2f4833
pushf
not eax
add eax, 0xb2314aaa
xor eax, 0xee4fb9af
rol eax, 0x73
popf
pushf
not eax
add eax, 0xdb4ea186
xor eax, 0xfdc4cf18
rol eax, 0x6a
popf
jmp 0x1401b7119
mov byte [rbx], al
inc rbx
lea rax, [rsp + 0x143f]
cmp rbx, rax
jb 0x1401b74c7
push rax
pushf
mov eax, 0xdc315482
pushf
not eax
add eax, 0x97e9b705
xor eax, 0xc25b23cf
rol eax, 0xab
popf
pushf
not eax
add eax, 0xc4766546
xor eax, 0xd3c7045b
rol eax, 0x78
popf
pushf
not eax
add eax, 0xd8c5f794
xor eax, 0xab4c4a9a
rol eax, 0x7f
popf
jmp 0x1401b7119
push rax
pushf
mov eax, 0xceac8c6a
pushf
not eax
add eax, 0x97ea8377
xor eax, 0xa27b03e6
rol eax, 0x81
popf
pushf
not eax
add eax, 0xe1d7709c
xor eax, 0xbae53523
rol eax, 0x7a
popf
pushf
not eax
add eax, 0x894bccf6
xor eax, 0xee9a0744
rol eax, 0x9c
popf
pushf
not eax
add eax, 0xa224efb2
xor eax, 0x80a2fd9b
rol eax, 0xdb
popf
jmp 0x1401b7119
and qword [rsp + 0x20], 0
lea rax, [rsp + 0x40]
sub ebx, eax
lea r9, [rsp + 0x30]
mov r8d, ebx
lea rdx, [rsp + 0x40]
mov rcx, r14
jmp 0x1401b753e
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x1401b75a1
push rax
pushf
mov eax, 0xfbbf6857
pushf
not eax
add eax, 0xea023e30
xor eax, 0xc8a3a2e0
rol eax, 0x1d
popf
pushf
not eax
add eax, 0x88e35dda
xor eax, 0xccc2c33c
rol eax, 0xcd
popf
pushf
not eax
add eax, 0xe3aab9c5
xor eax, 0x8c93cfc5
rol eax, 9
popf
pushf
not eax
add eax, 0x81f3cb2f
xor eax, 0xcb74f7dc
rol eax, 0x44
popf
jmp 0x1401b7119
push rax
pushf
mov eax, 0x52c9fbf6
pushf
not eax
add eax, 0xa93fd0a0
xor eax, 0x950b8730
rol eax, 0x8b
popf
pushf
not eax
add eax, 0xde26bc33
xor eax, 0xeb8cee17
rol eax, 0x31
popf
jmp 0x1401b7119
mov eax, dword [rsp + 0x30]
add dword [rdi + 4], eax
cmp eax, ebx
jb 0x1401b7612
push rax
pushf
mov eax, 0x3d4c6b5d
pushf
not eax
add eax, 0xdd58dc6c
xor eax, 0x9d033e23
rol eax, 0xf7
popf
pushf
not eax
add eax, 0x8e0df561
xor eax, 0xf76f6fb9
rol eax, 0x3a
popf
jmp 0x1401b7119
push rax
pushf
mov eax, 0x7a464d0b
pushf
not eax
add eax, 0xf490b2ab
xor eax, 0x9251c88e
rol eax, 0x93
popf
pushf
not eax
add eax, 0x9ee7aa81
xor eax, 0x917d5154
rol eax, 0x70
popf
pushf
not eax
add eax, 0xd0779190
xor eax, 0x98f05e70
rol eax, 0xc4
popf
pushf
not eax
add eax, 0xcfbbe330
xor eax, 0xd6d6a18f
rol eax, 0xaf
popf
jmp 0x1401b7119
cmp rsi, rbp
jb 0x1401b76a3
push rax
pushf
mov eax, 0xf6f7da4a
pushf
not eax
add eax, 0xd4753b40
xor eax, 0xc63a9f5c
rol eax, 0x3a
popf
pushf
not eax
add eax, 0x9b1bace2
xor eax, 0xf6ae8ea3
rol eax, 0xda
popf
jmp 0x1401b7119
push rax
pushf
mov eax, 0xca2c6134
pushf
not eax
add eax, 0xe97013cd
xor eax, 0xfad1008b
rol eax, 0xb5
popf
pushf
not eax
add eax, 0xe0049970
xor eax, 0xe05869d0
rol eax, 0x47
popf
pushf
not eax
add eax, 0xa2eb7bf0
xor eax, 0xb3341731
rol eax, 0x4c
popf
jmp 0x1401b7119
jmp 0x1401b7796
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rdi], eax
push rax
pushf
mov eax, 0xaf8bedca
pushf
not eax
add eax, 0x8f1afd48
xor eax, 0x95c942bd
rol eax, 0x4e
popf
pushf
not eax
add eax, 0xf95523b4
xor eax, 0xde939e30
rol eax, 0x25
popf
pushf
not eax
add eax, 0xf810215c
xor eax, 0x8cbe3f04
rol eax, 0x69
popf
jmp 0x1401b7119
mov rax, rdi
mov rcx, qword [rsp + 0x1440]
xor rcx, rsp
call fcn.1402ac965
lea r11, [rsp + 0x1450]
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x30]
mov rsp, r11
pop r14
pop rdi
pop rsi
ret