Function at 0x1400e404b
Capabilities:
Write file on windows

Disassembly:
push rax
pushf
mov eax, 0xbee745e9
pushf
not eax
add eax, 0xb494ab43
xor eax, 0xa4c668d3
rol eax, 0x78
popf
pushf
not eax
add eax, 0x94d64ca3
xor eax, 0x8f4e0db5
rol eax, 0xc2
popf
pushf
not eax
add eax, 0xe746c6d5
xor eax, 0xd01b1652
rol eax, 0x83
popf
cmp eax, 4
jne 0x1400e409b
popf
pop rax
jmp 0x1400e43b8
cmp eax, 0
jne 0x1400e40aa
popf
pop rax
jmp 0x1400e4140
cmp eax, 3
jne 0x1400e40b9
popf
pop rax
jmp 0x1400e4323
cmp eax, 1
jne 0x1400e40c8
popf
pop rax
jmp 0x1400e42bc
cmp eax, 0xa
jne 0x1400e40d7
popf
pop rax
jmp 0x1400e46f3
cmp eax, 7
jne 0x1400e40e6
popf
pop rax
jmp 0x1400e4559
cmp eax, 6
jne 0x1400e40f5
popf
pop rax
jmp 0x1400e44cb
cmp eax, 0xb
jne 0x1400e4104
popf
pop rax
jmp 0x1400e472e
cmp eax, 9
jne 0x1400e4113
popf
pop rax
jmp 0x1400e4694
cmp eax, 8
jne 0x1400e4122
popf
pop rax
jmp 0x1400e45f0
cmp eax, 5
jne 0x1400e4131
popf
pop rax
jmp 0x1400e4407
cmp eax, 2
jne 0x1400e4140
popf
pop rax
jmp 0x1400e431a
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r14
mov eax, 0xe2fbea3b
pushf
not eax
add eax, 0x82a3188e
xor eax, 0xd992dbd2
rol eax, 0x5a
popf
pushf
not eax
add eax, 0xd3e8d26f
xor eax, 0xb0033b47
rol eax, 0x79
popf
pushf
not eax
add eax, 0xb2da5d16
xor eax, 0xaafe7b4f
rol eax, 0xef
popf
pushf
not eax
add eax, 0xd6a0a3d4
xor eax, 0xd8b1f45e
rol eax, 0x8d
popf
call fcn.140110d10
sub rsp, rax
mov rax, qword [section..data]
xor rax, rsp
mov qword [rsp + 0x1440], rax
movsxd r10, edx
mov rdi, rcx
mov rax, r10
mov ebp, r9d
sar rax, 6
lea rcx, [0x180bb7e14]
pushf
sub rcx, 0x40aec3f4
popf
and r10d, 0x3f
push r8
not r8
sub rbp, r8
pop r8
sub rbp, 1
mov rsi, r8
mov rax, qword [rcx + rax*8]
lea rdx, [r10 + r10*8]
mov r14, qword [rax + rdx*8 + 0x28]
xor eax, eax
mov qword [rdi], rax
mov dword [rdi + 8], eax
cmp r8, rbp
jae 0x1400e4263
push rax
pushf
mov eax, 0x4ab316f5
pushf
not eax
add eax, 0x8925a4cf
xor eax, 0xcbaa6645
rol eax, 0xed
popf
pushf
not eax
add eax, 0x942b87cc
xor eax, 0x9f2f060a
rol eax, 2
popf
pushf
not eax
add eax, 0xadf24bba
xor eax, 0xfe5e8e72
rol eax, 0xd6
popf
pushf
not eax
add eax, 0xfe9834ff
xor eax, 0xaf59c2fe
rol eax, 0x37
popf
jmp 0x1400e408c
push rax
pushf
mov eax, 0x4469f4db
pushf
not eax
add eax, 0xff4f1215
xor eax, 0xda03098c
rol eax, 0x68
popf
pushf
not eax
add eax, 0xca8acdbc
xor eax, 0xaaa4a70e
rol eax, 0x8e
popf
pushf
not eax
add eax, 0xcc0ab0be
xor eax, 0xa04d2de9
rol eax, 0xae
popf
pushf
not eax
add eax, 0xb15f3253
xor eax, 0x95266334
rol eax, 0xf3
popf
jmp 0x1400e408c
lea rbx, [rsp + 0x40]
push rax
pushf
mov eax, 0xb986f240
pushf
not eax
add eax, 0xa9ae3ffb
xor eax, 0x989eb751
rol eax, 0xb4
popf
pushf
not eax
add eax, 0xac711994
xor eax, 0xd38fd325
rol eax, 0x33
popf
pushf
not eax
add eax, 0xbb370fd6
xor eax, 0xddb8536e
rol eax, 0x1a
popf
pushf
not eax
add eax, 0xf29b7909
xor eax, 0xce3721d3
rol eax, 0x85
popf
jmp 0x1400e408c
cmp rsi, rbp
jae 0x1400e44cb
mov al, byte [rsi]
inc rsi
cmp al, 0xa
jne 0x1400e4384
push rax
pushf
mov eax, 0x7db94231
pushf
not eax
add eax, 0xcf26162a
xor eax, 0x8d626f36
rol eax, 0xbc
popf
pushf
not eax
add eax, 0xce94791f
xor eax, 0xbe03572c
rol eax, 1
popf
pushf
not eax
add eax, 0xa553d6d9
xor eax, 0x902ce592
rol eax, 0x57
popf
pushf
not eax
add eax, 0xa9c4110d
xor eax, 0x828841ae
rol eax, 0
popf
jmp 0x1400e408c
push rax
pushf
mov eax, 0x7ff5eb90
pushf
not eax
add eax, 0xf781cf9f
xor eax, 0xbf9794bc
rol eax, 0x85
popf
pushf
not eax
add eax, 0x92691283
xor eax, 0x8ef2fc29
rol eax, 0xad
popf
jmp 0x1400e408c
inc dword [rdi + 8]
mov byte [rbx], 0xd
inc rbx
push rax
pushf
mov eax, 0x6031dcb4
pushf
not eax
add eax, 0xbed27295
xor eax, 0xefbe6832
rol eax, 0xae
popf
pushf
not eax
add eax, 0x91503708
xor eax, 0xeb40e6d8
rol eax, 0x17
popf
pushf
not eax
add eax, 0xffb17505
xor eax, 0xf394260e
rol eax, 0xfa
popf
jmp 0x1400e408c
mov byte [rbx], al
inc rbx
lea rax, [rsp + 0x143f]
cmp rbx, rax
jb 0x1400e4472
push rax
pushf
mov eax, 0xa5509152
pushf
not eax
add eax, 0xab345c93
xor eax, 0x84de8028
rol eax, 0x60
popf
pushf
not eax
add eax, 0xf7ab42f9
xor eax, 0xda37b1fa
rol eax, 0x55
popf
pushf
not eax
add eax, 0xb5f66a72
xor eax, 0xf2a9133c
rol eax, 0x5b
popf
pushf
not eax
add eax, 0x98c0fc3d
xor eax, 0xeff0abdc
rol eax, 0x98
popf
jmp 0x1400e408c
push rax
pushf
mov eax, 0x8ada1230
pushf
not eax
add eax, 0xb8179a29
xor eax, 0xc883f8e8
rol eax, 0xf
popf
pushf
not eax
add eax, 0x99bab78e
xor eax, 0x80a624b5
rol eax, 2
popf
pushf
not eax
add eax, 0xe5817e8e
xor eax, 0x9df4429c
rol eax, 0x45
popf
pushf
not eax
add eax, 0x8896a87e
xor eax, 0xad1f5821
rol eax, 0x13
popf
jmp 0x1400e408c
and qword [rsp + 0x20], 0
lea rax, [rsp + 0x40]
sub ebx, eax
lea r9, [rsp + 0x30]
mov r8d, ebx
lea rdx, [rsp + 0x40]
mov rcx, r14
jmp 0x1400e44e9
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x1400e4526
push rax
pushf
mov eax, 0x3432c1eb
pushf
not eax
add eax, 0xaf26f820
xor eax, 0xbc72c8e3
rol eax, 0x59
popf
pushf
not eax
add eax, 0x8c9016f1
xor eax, 0xdd0308ef
rol eax, 0x3e
popf
jmp 0x1400e408c
push rax
pushf
mov eax, 0xa0be47bc
pushf
not eax
add eax, 0xa985c8ad
xor eax, 0x9862b215
rol eax, 0x59
popf
pushf
not eax
add eax, 0x86f15438
xor eax, 0xbbd149d2
rol eax, 0x73
popf
jmp 0x1400e408c
mov eax, dword [rsp + 0x30]
add dword [rdi + 4], eax
cmp eax, ebx
jb 0x1400e4597
push rax
pushf
mov eax, 0x60ad67c9
pushf
not eax
add eax, 0x971b4b5c
xor eax, 0xe122b499
rol eax, 0xc5
popf
pushf
not eax
add eax, 0xb96f0f9d
xor eax, 0xcf842e20
rol eax, 0x82
popf
jmp 0x1400e408c
push rax
pushf
mov eax, 0x7a980440
pushf
not eax
add eax, 0x82259e6b
xor eax, 0xffca1b26
rol eax, 0x39
popf
pushf
not eax
add eax, 0xa450e748
xor eax, 0x80808ac4
rol eax, 0x20
popf
pushf
not eax
add eax, 0xa6cafa2d
xor eax, 0xc860c5f2
rol eax, 0xff
popf
pushf
not eax
add eax, 0x8eb5d7b9
xor eax, 0xeff0668c
rol eax, 0x68
popf
jmp 0x1400e408c
cmp rsi, rbp
jb 0x1400e464e
push rax
pushf
mov eax, 0x382d2145
pushf
not eax
add eax, 0xa435f2cd
xor eax, 0xdc42a4ce
rol eax, 0xba
popf
pushf
not eax
add eax, 0x8e932498
xor eax, 0xda87a597
rol eax, 0xe1
popf
pushf
not eax
add eax, 0xbce757f2
xor eax, 0xafc4e925
rol eax, 0x6a
popf
pushf
not eax
add eax, 0xc07541fe
xor eax, 0xc6b1f246
rol eax, 0xf2
popf
jmp 0x1400e408c
push rax
pushf
mov eax, 0x675f2290
pushf
not eax
add eax, 0xf509605f
xor eax, 0x85dff538
rol eax, 0xa2
popf
pushf
not eax
add eax, 0xa68d82ef
xor eax, 0xc2409c21
rol eax, 0x7b
popf
pushf
not eax
add eax, 0xa9ba21ea
xor eax, 0xef826bf0
rol eax, 0x7b
popf
jmp 0x1400e408c
jmp 0x1400e472e
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rdi], eax
push rax
pushf
mov eax, 0xfd5f91a8
pushf
not eax
add eax, 0xc1ea8aad
xor eax, 0xa291778b
rol eax, 0xfe
popf
pushf
not eax
add eax, 0xcbd1ec51
xor eax, 0xf24a68ad
rol eax, 0x93
popf
jmp 0x1400e408c
mov rax, rdi
mov rcx, qword [rsp + 0x1440]
xor rcx, rsp
call fcn.14010a793
lea r11, [rsp + 0x1450]
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x30]
mov rsp, r11
pop r14
pop rdi
pop rsi
ret