Function at 0x1401375a9
Capabilities:
Write file on windows

Disassembly:
push rax
pushf
mov eax, 0xc97cec97
pushf
not eax
add eax, 0xcadc76af
xor eax, 0xbbb8b75b
rol eax, 0x37
popf
pushf
not eax
add eax, 0xc3389c23
xor eax, 0xfe82fc13
rol eax, 0x66
popf
pushf
not eax
add eax, 0x8861621d
xor eax, 0xf1ec3c24
rol eax, 0x41
popf
cmp eax, 4
jne 0x1401375f9
popf
pop rax
jmp 0x1401378b8
cmp eax, 0
jne 0x140137608
popf
pop rax
jmp 0x14013769e
cmp eax, 3
jne 0x140137617
popf
pop rax
jmp 0x140137822
cmp eax, 1
jne 0x140137626
popf
pop rax
jmp 0x1401377ce
cmp eax, 0xa
jne 0x140137635
popf
pop rax
jmp 0x140137bcd
cmp eax, 7
jne 0x140137644
popf
pop rax
jmp 0x140137a6c
cmp eax, 6
jne 0x140137653
popf
pop rax
jmp 0x1401379b8
cmp eax, 0xb
jne 0x140137662
popf
pop rax
jmp 0x140137c08
cmp eax, 9
jne 0x140137671
popf
pop rax
jmp 0x140137b81
cmp eax, 8
jne 0x140137680
popf
pop rax
jmp 0x140137b03
cmp eax, 5
jne 0x14013768f
popf
pop rax
jmp 0x14013791a
cmp eax, 2
jne 0x14013769e
popf
pop rax
jmp 0x140137819
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r14
mov eax, 0xe2b5d1e
pushf
not eax
add eax, 0xbba3c514
xor eax, 0xf1ab8c1b
rol eax, 0x98
popf
pushf
not eax
add eax, 0xc87dabea
xor eax, 0xb4c41aee
rol eax, 0xb4
popf
pushf
not eax
add eax, 0x9dabe25e
xor eax, 0xcca4f554
rol eax, 0x24
popf
call fcn.14022fed3
sub rsp, rax
mov rax, qword [0x1400a21c0]
xor rax, rsp
mov qword [rsp + 0x1440], rax
movsxd r10, edx
mov rdi, rcx
mov rax, r10
mov ebp, r9d
sar rax, 6
lea rcx, [0x18c4f0dbe]
pushf
sub rcx, 0x4c4490be
popf
and r10d, 0x3f
push r8
not r8
sub rbp, r8
pop r8
sub rbp, 1
mov rsi, r8
mov rax, qword [rcx + rax*8]
lea rdx, [r10 + r10*8]
mov r14, qword [rax + rdx*8 + 0x28]
xor eax, eax
mov qword [rdi], rax
mov dword [rdi + 8], eax
cmp r8, rbp
jae 0x140137788
push rax
pushf
mov eax, 0x2b8f654d
pushf
not eax
add eax, 0xd04fd49b
xor eax, 0xd617045e
rol eax, 0xef
popf
pushf
not eax
add eax, 0xad084369
xor eax, 0xf77e88fd
rol eax, 0x38
popf
jmp 0x1401375ea
push rax
pushf
mov eax, 0x74de7bf9
pushf
not eax
add eax, 0xf557cce8
xor eax, 0xa6a3aee5
rol eax, 0x5e
popf
pushf
not eax
add eax, 0x86448770
xor eax, 0x9972d433
rol eax, 0x40
popf
pushf
not eax
add eax, 0xfe73e7ff
xor eax, 0xd914d420
rol eax, 0x8b
popf
jmp 0x1401375ea
lea rbx, [rsp + 0x40]
push rax
pushf
mov eax, 0x44b41c39
pushf
not eax
add eax, 0x9afe9f97
xor eax, 0xeac185ae
rol eax, 0xd3
popf
pushf
not eax
add eax, 0xd5132717
xor eax, 0xdcbc2c26
rol eax, 0x1b
popf
pushf
not eax
add eax, 0x8e1a31b0
xor eax, 0xcc0be61b
rol eax, 0x7c
popf
jmp 0x1401375ea
cmp rsi, rbp
jae 0x1401379b8
mov al, byte [rsi]
inc rsi
cmp al, 0xa
jne 0x140137871
push rax
pushf
mov eax, 0x78cdd5dd
pushf
not eax
add eax, 0xab78a967
xor eax, 0x82cf6b57
rol eax, 0xba
popf
pushf
not eax
add eax, 0x84ad37a6
xor eax, 0xbae23e67
rol eax, 0xf
popf
pushf
not eax
add eax, 0xa7919457
xor eax, 0xd83ebad3
rol eax, 0x22
popf
jmp 0x1401375ea
push rax
pushf
mov eax, 0xdcad02cd
pushf
not eax
add eax, 0x82b2b3d1
xor eax, 0x9a13965c
rol eax, 0xc3
popf
pushf
not eax
add eax, 0xa337c0b2
xor eax, 0xf57a1c29
rol eax, 0x5b
popf
pushf
not eax
add eax, 0x8263b52c
xor eax, 0xfa23d05f
rol eax, 0x49
popf
jmp 0x1401375ea
inc dword [rdi + 8]
mov byte [rbx], 0xd
inc rbx
push rax
pushf
mov eax, 0xc1998ae4
pushf
not eax
add eax, 0xf9b9b886
xor eax, 0xb149ad95
rol eax, 0xeb
popf
pushf
not eax
add eax, 0xc9bc3cb3
xor eax, 0xbfa838cd
rol eax, 0x56
popf
pushf
not eax
add eax, 0x9ffccae2
xor eax, 0xb6a08530
rol eax, 0x83
popf
pushf
not eax
add eax, 0xcd026735
xor eax, 0xad9c4ee3
rol eax, 0xa0
popf
jmp 0x1401375ea
mov byte [rbx], al
inc rbx
lea rax, [rsp + 0x143f]
cmp rbx, rax
jb 0x140137972
push rax
pushf
mov eax, 0x66f5cbbc
pushf
not eax
add eax, 0xf9eb20f4
xor eax, 0xb4595e10
rol eax, 0x1d
popf
pushf
not eax
add eax, 0xf4ec4998
xor eax, 0xfab79a35
rol eax, 0xec
popf
pushf
not eax
add eax, 0xcba82dd8
xor eax, 0xb687bfed
rol eax, 0x5b
popf
jmp 0x1401375ea
push rax
pushf
mov eax, 0x11c68edd
pushf
not eax
add eax, 0xf50437dc
xor eax, 0xa41d1b6c
rol eax, 0xa1
popf
pushf
not eax
add eax, 0xbe0239bb
xor eax, 0xb601b677
rol eax, 0x14
popf
pushf
not eax
add eax, 0xfd62e93e
xor eax, 0xaf694d27
rol eax, 0xc
popf
jmp 0x1401375ea
and qword [rsp + 0x20], 0
lea rax, [rsp + 0x40]
sub ebx, eax
lea r9, [rsp + 0x30]
mov r8d, ebx
lea rdx, [rsp + 0x40]
mov rcx, r14
jmp 0x1401379d6
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x140137a26
push rax
pushf
mov eax, 0x746745a0
pushf
not eax
add eax, 0xd06d7742
xor eax, 0xc29124d9
rol eax, 0xd
popf
pushf
not eax
add eax, 0x8d7f147a
xor eax, 0xf19d397c
rol eax, 0xf7
popf
pushf
not eax
add eax, 0xe94fb365
xor eax, 0xfb9a0cc8
rol eax, 0xed
popf
jmp 0x1401375ea
push rax
pushf
mov eax, 0x71e53686
pushf
not eax
add eax, 0x9a69605c
xor eax, 0xe7fc25df
rol eax, 0xa9
popf
pushf
not eax
add eax, 0x8cb5d02e
xor eax, 0xa18f8046
rol eax, 0x43
popf
pushf
not eax
add eax, 0x8d201902
xor eax, 0xa48e48b8
rol eax, 0x38
popf
jmp 0x1401375ea
mov eax, dword [rsp + 0x30]
add dword [rdi + 4], eax
cmp eax, ebx
jb 0x140137abd
push rax
pushf
mov eax, 0xbe1dc471
pushf
not eax
add eax, 0x8269a4eb
xor eax, 0x9868b58f
rol eax, 0x7f
popf
pushf
not eax
add eax, 0xb64870a4
xor eax, 0xf3acb902
rol eax, 0x49
popf
pushf
not eax
add eax, 0xbc21d888
xor eax, 0x87388390
rol eax, 0xef
popf
jmp 0x1401375ea
push rax
pushf
mov eax, 0x7beb0201
pushf
not eax
add eax, 0x88b04f03
xor eax, 0xd6cb8425
rol eax, 0x67
popf
pushf
not eax
add eax, 0xfa6c662d
xor eax, 0x8f86cd58
rol eax, 0xaa
popf
pushf
not eax
add eax, 0x92da19ce
xor eax, 0x8e5e791b
rol eax, 0x3a
popf
jmp 0x1401375ea
cmp rsi, rbp
jb 0x140137b4e
push rax
pushf
mov eax, 0x23fd505a
pushf
not eax
add eax, 0xe99caa93
xor eax, 0xb27c9dab
rol eax, 0xa0
popf
pushf
not eax
add eax, 0xb8c86ea0
xor eax, 0x90f03b4a
rol eax, 0x8c
popf
pushf
not eax
add eax, 0xf96e9813
xor eax, 0xadea2b11
rol eax, 0x6a
popf
jmp 0x1401375ea
push rax
pushf
mov eax, 0xdca035e1
pushf
not eax
add eax, 0x8f0a46ca
xor eax, 0xa2929803
rol eax, 0xa1
popf
pushf
not eax
add eax, 0xebd8e3f4
xor eax, 0xcbe7d21d
rol eax, 0x47
popf
jmp 0x1401375ea
jmp 0x140137c08
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rdi], eax
push rax
pushf
mov eax, 0x8be17bef
pushf
not eax
add eax, 0xe3bf03b5
xor eax, 0x9c7e3bab
rol eax, 0x46
popf
pushf
not eax
add eax, 0xe1fc902b
xor eax, 0xf9217478
rol eax, 0xce
popf
jmp 0x1401375ea
mov rax, rdi
mov rcx, qword [rsp + 0x1440]
xor rcx, rsp
call fcn.14021cfd0
lea r11, [rsp + 0x1450]
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x30]
mov rsp, r11
pop r14
pop rdi
pop rsi
ret