Function at 0x14006b3ff
Capabilities:
Write file on windows

Disassembly:
push rax
pushf
mov eax, 0x8729b86d
pushf
not eax
add eax, 0xa246f236
xor eax, 0xacc06138
rol eax, 0xc2
popf
pushf
not eax
add eax, 0xc4b32410
xor eax, 0xf0e767a0
rol eax, 0xf7
popf
pushf
not eax
add eax, 0xbc4dd9a4
xor eax, 0xc5c2ec50
rol eax, 0x2c
popf
cmp eax, 4
jne 0x14006b44f
popf
pop rax
jmp 0x14006b7d9
cmp eax, 0
jne 0x14006b45e
popf
pop rax
jmp 0x14006b503
cmp eax, 3
jne 0x14006b46d
popf
pop rax
jmp 0x14006b766
cmp eax, 1
jne 0x14006b47c
popf
pop rax
jmp 0x14006b651
cmp eax, 0xa
jne 0x14006b48b
popf
pop rax
jmp 0x14006bba2
cmp eax, 7
jne 0x14006b49a
popf
pop rax
jmp 0x14006ba30
cmp eax, 6
jne 0x14006b4a9
popf
pop rax
jmp 0x14006b91f
cmp eax, 0xb
jne 0x14006b4b8
popf
pop rax
jmp 0x14006bc0c
cmp eax, 0xc
jne 0x14006b4c7
popf
pop rax
jmp 0x14006bc5a
cmp eax, 8
jne 0x14006b4d6
popf
pop rax
jmp 0x14006baaf
cmp eax, 5
jne 0x14006b4e5
popf
pop rax
jmp 0x14006b87f
cmp eax, 2
jne 0x14006b4f4
popf
pop rax
jmp 0x14006b6af
cmp eax, 9
jne 0x14006b503
popf
pop rax
jmp 0x14006bb96
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r12
push r14
push r15
mov eax, 0xbba7b867
pushf
not eax
add eax, 0xa94fc4bf
xor eax, 0xaa369e9d
rol eax, 0xe9
popf
pushf
not eax
add eax, 0xd831024f
xor eax, 0xb1e6282b
rol eax, 0x73
popf
pushf
not eax
add eax, 0xb9f8507e
xor eax, 0xdb7a34aa
rol eax, 0xa7
popf
pushf
not eax
add eax, 0xe4a176fe
xor eax, 0xce6b5a52
rol eax, 0x36
popf
call fcn.14006c02c
sub rsp, rax
mov rax, qword [0x14001d008]
xor rax, rsp
mov qword [rsp + 0x1460], rax
movsxd r10, edx
mov rbx, rcx
mov rax, r10
mov r14d, r9d
sar rax, 6
lea rcx, [0x1963d4bf4]
pushf
sub rcx, 0x563b65f4
popf
and r10d, 0x3f
push r8
not r8
sub r14, r8
pop r8
sub r14, 1
mov r15, r8
mov rdi, r8
mov rax, qword [rcx + rax*8]
lea rdx, [r10 + r10*8]
mov r12, qword [rax + rdx*8 + 0x28]
xor eax, eax
mov qword [rbx], rax
cmp r8, r14
mov dword [rbx + 8], eax
jae 0x14006b61e
push rax
pushf
mov eax, 0xaeeaa72
pushf
not eax
add eax, 0x993863ed
xor eax, 0xde329a0a
rol eax, 0x6f
popf
pushf
not eax
add eax, 0xb064d83d
xor eax, 0xe4592d9e
rol eax, 0xff
popf
pushf
not eax
add eax, 0xda292fe8
xor eax, 0xdcbe6eb7
rol eax, 0x4c
popf
jmp 0x14006b440
push rax
pushf
mov eax, 0x92c5fde9
pushf
not eax
add eax, 0x8a33f19a
xor eax, 0xfb4eef37
rol eax, 0x73
popf
pushf
not eax
add eax, 0xdad5325b
xor eax, 0xc69cd142
rol eax, 0xe6
popf
jmp 0x14006b440
lea rax, [rsp + 0x50]
push rax
pushf
mov eax, 0xc657f329
pushf
not eax
add eax, 0x9e5fcb0d
xor eax, 0xee85c38b
rol eax, 0
popf
pushf
not eax
add eax, 0xceaa1d84
xor eax, 0x851de364
rol eax, 0x85
popf
pushf
not eax
add eax, 0xa7402827
xor eax, 0xef5b490c
rol eax, 0xf5
popf
pushf
not eax
add eax, 0xb3effc4a
xor eax, 0x89e20117
rol eax, 0xd
popf
jmp 0x14006b440
cmp rdi, r14
jae 0x14006b70d
push rax
pushf
mov eax, 0x82fbd1
pushf
not eax
add eax, 0xd26e0aa0
xor eax, 0xa4d0c298
rol eax, 0x77
popf
pushf
not eax
add eax, 0xbbf2afe7
xor eax, 0xbb720b23
rol eax, 0xaa
popf
pushf
not eax
add eax, 0x94d16abf
xor eax, 0xe525f70d
rol eax, 0x18
popf
pushf
not eax
add eax, 0xc879d552
xor eax, 0xc4708c28
rol eax, 9
popf
jmp 0x14006b440
push rax
pushf
mov eax, 0x3e3b8f69
pushf
not eax
add eax, 0xa5e76a2a
xor eax, 0xb5b7f93a
rol eax, 0xc3
popf
pushf
not eax
add eax, 0xb8167b7a
xor eax, 0x92f0f8b6
rol eax, 0x65
popf
pushf
not eax
add eax, 0x8066a7ab
xor eax, 0xd14b27b6
rol eax, 0x95
popf
pushf
not eax
add eax, 0xf7e2df4b
xor eax, 0x8ca0001e
rol eax, 0x69
popf
jmp 0x14006b440
movzx ecx, word [rdi]
add rdi, 2
cmp cx, 0xa
jne 0x14006b7a6
push rax
pushf
mov eax, 0xaea712d9
pushf
not eax
add eax, 0xb3726d4e
xor eax, 0xa67e720c
rol eax, 0x35
popf
pushf
not eax
add eax, 0xc94eaf2e
xor eax, 0xba3a4888
rol eax, 0xf6
popf
jmp 0x14006b440
push rax
pushf
mov eax, 0xc1dd0cf9
pushf
not eax
add eax, 0x9da8fdac
xor eax, 0x802dbafb
rol eax, 0xd3
popf
pushf
not eax
add eax, 0xd6b346d7
xor eax, 0x844067a4
rol eax, 0xcd
popf
jmp 0x14006b440
mov edx, 0x4a46697f
pushf
not edx
add edx, 0x8c706b3a
xor edx, 0x8913988a
rol edx, 0x19
popf
pushf
not edx
add edx, 0xc4b306fd
xor edx, 0x86732505
rol edx, 0xb
popf
pushf
not edx
add edx, 0x9329b9c5
xor edx, 0xb7f1bbd1
rol edx, 0x80
popf
pushf
not edx
add edx, 0x9f138bea
xor edx, 0xfc910b01
rol edx, 0x3b
popf
mov word [rax], dx
add rax, 2
push rax
pushf
mov eax, 0x9e955ec1
pushf
not eax
add eax, 0xcdfbfb02
xor eax, 0xf60c814f
rol eax, 0xf8
popf
pushf
not eax
add eax, 0xcd5f108c
xor eax, 0xd32a4471
rol eax, 0x63
popf
pushf
not eax
add eax, 0xfa3449d9
xor eax, 0x81b538dd
rol eax, 0x68
popf
jmp 0x14006b440
mov word [rax], cx
add rax, 2
lea rcx, [rsp + 0x6f8]
cmp rax, rcx
jb 0x14006b8ec
push rax
pushf
mov eax, 0xc40899a5
pushf
not eax
add eax, 0xdc46d6fb
xor eax, 0x89bb9e19
rol eax, 0xa1
popf
pushf
not eax
add eax, 0xf37ec730
xor eax, 0xaba1affd
rol eax, 0x38
popf
pushf
not eax
add eax, 0xf00425ef
xor eax, 0xbb59194d
rol eax, 0x1d
popf
pushf
not eax
add eax, 0xc542bb3e
xor eax, 0xfd4891de
rol eax, 2
popf
jmp 0x14006b440
push rax
pushf
mov eax, 0x317c5221
pushf
not eax
add eax, 0x9e2e8245
xor eax, 0xce11e7c6
rol eax, 0xfe
popf
pushf
not eax
add eax, 0xfd8355d7
xor eax, 0x9cda5fdd
rol eax, 0x86
popf
jmp 0x14006b440
and qword [rsp + 0x38], 0
lea rcx, [rsp + 0x50]
and qword [rsp + 0x30], 0
lea r8, [rsp + 0x50]
sub rax, rcx
mov dword [rsp + 0x28], 0xd55
lea rcx, [rsp + 0x700]
sar rax, 1
mov qword [rsp + 0x20], rcx
mov r9d, eax
mov ecx, 0xb448f0dd
pushf
not ecx
add ecx, 0xc15e8218
xor ecx, 0xacc79730
rol ecx, 0xfc
popf
pushf
not ecx
add ecx, 0xdeecbe42
xor ecx, 0x896b3f27
rol ecx, 0x5f
popf
pushf
not ecx
add ecx, 0xeb8e68eb
xor ecx, 0x8b535f87
rol ecx, 0xd5
popf
xor edx, edx
call fcn.14009018b
mov ebp, eax
test eax, eax
je 0x14006b9ea
push rax
pushf
mov eax, 0x1e5041b1
pushf
not eax
add eax, 0xe688b5ae
xor eax, 0x8b0f7612
rol eax, 7
popf
pushf
not eax
add eax, 0xd92b3127
xor eax, 0x9d07bb6c
rol eax, 0xbe
popf
pushf
not eax
add eax, 0xf623570f
xor eax, 0x8df776a8
rol eax, 0x9e
popf
jmp 0x14006b440
push rax
pushf
mov eax, 0x89dab1d8
pushf
not eax
add eax, 0x83850bdd
xor eax, 0xe82a6bda
rol eax, 0x82
popf
pushf
not eax
add eax, 0xba5d9c57
xor eax, 0xa544e099
rol eax, 4
popf
pushf
not eax
add eax, 0xe7bce9a0
xor eax, 0xd638c522
rol eax, 0x13
popf
jmp 0x14006b440
xor esi, esi
test eax, eax
je 0x14006ba69
push rax
pushf
mov eax, 0xc82dbc1a
pushf
not eax
add eax, 0xdfcd96d2
xor eax, 0xf005a74b
rol eax, 0x4e
popf
pushf
not eax
add eax, 0x86d95fae
xor eax, 0xe75a24c7
rol eax, 0x5b
popf
jmp 0x14006b440
push rax
pushf
mov eax, 0xf70ea310
pushf
not eax
add eax, 0xe575388c
xor eax, 0x9a567f31
rol eax, 0x87
popf
pushf
not eax
add eax, 0xc7d23a91
xor eax, 0x894c1abe
rol eax, 0x4c
popf
pushf
not eax
add eax, 0xed5ceb85
xor eax, 0xd65e6923
rol eax, 0xc8
popf
jmp 0x14006b440
and qword [rsp + 0x20], 0
lea rdx, [rsp + 0x700]
mov ecx, esi
lea r9, [rsp + 0x40]
mov r8d, ebp
push rcx
not rcx
sub rdx, rcx
pop rcx
sub rdx, 1
mov rcx, r12
sub r8d, esi
jmp 0x14006bada
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x14006bb3d
push rax
pushf
mov eax, 0xa7731bfb
pushf
not eax
add eax, 0xb6dc2e36
xor eax, 0xe9809f3c
rol eax, 0x78
popf
pushf
not eax
add eax, 0x8414c9aa
xor eax, 0xc750c879
rol eax, 0x2a
popf
pushf
not eax
add eax, 0xf96a0a6b
xor eax, 0xaef18209
rol eax, 0x5d
popf
pushf
not eax
add eax, 0x9e8873c4
xor eax, 0x89093592
rol eax, 0x6d
popf
jmp 0x14006b440
push rax
pushf
mov eax, 0x3d799f51
pushf
not eax
add eax, 0xa33606d8
xor eax, 0x95057810
rol eax, 0xfb
popf
pushf
not eax
add eax, 0xf4a4ca50
xor eax, 0xb0a280a2
rol eax, 0x5e
popf
pushf
not eax
add eax, 0xbfd33876
xor eax, 0xa32e3199
rol eax, 0xeb
popf
pushf
not eax
add eax, 0xfe051690
xor eax, 0x8ed20c55
rol eax, 0x7a
popf
jmp 0x14006b440
add esi, dword [rsp + 0x40]
cmp esi, ebp
jb 0x14006baaf
mov eax, edi
sub eax, r15d
mov dword [rbx + 4], eax
cmp rdi, r14
jmp 0x14006b5d2
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbx], eax
push rax
pushf
mov eax, 0x69d1d3cf
pushf
not eax
add eax, 0xbd4c0c57
xor eax, 0x829dad97
rol eax, 0x80
popf
pushf
not eax
add eax, 0xe9fbbe4c
xor eax, 0xada472c9
rol eax, 0x95
popf
pushf
not eax
add eax, 0xd3938454
xor eax, 0x953cce48
rol eax, 0x44
popf
jmp 0x14006b440
mov rax, rbx
mov rcx, qword [rsp + 0x1460]
xor rcx, rsp
call fcn.140066214
lea r11, [rsp + 0x1470]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rsi
ret