Function at 0x1400b2c7c
Capabilities:
Write file on windows

Disassembly:
push rax
pushf
mov eax, 0x130d13e6
pushf
not eax
add eax, 0x2d358994
xor eax, 0x912a2ca
rol eax, 0x90
popf
pushf
not eax
add eax, 0x7ae12be0
xor eax, 0x6f7094e0
rol eax, 0xdf
popf
pushf
not eax
add eax, 0x4946de28
xor eax, 0x56a32090
rol eax, 0x48
popf
pushf
not eax
add eax, 0x2fbc238c
xor eax, 0x4d038e56
rol eax, 0xea
popf
cmp eax, 2
jne 0x1400b2cdf
popf
pop rax
jmp 0x1400b2f4f
cmp eax, 0
jne 0x1400b2cee
popf
pop rax
jmp 0x1400b2d84
cmp eax, 0xa
jne 0x1400b2cfd
popf
pop rax
jmp 0x1400b33f9
cmp eax, 1
jne 0x1400b2d0c
popf
pop rax
jmp 0x1400b2ef1
cmp eax, 6
jne 0x1400b2d1b
popf
pop rax
jmp 0x1400b31af
cmp eax, 7
jne 0x1400b2d2a
popf
pop rax
jmp 0x1400b325f
cmp eax, 3
jne 0x1400b2d39
popf
pop rax
jmp 0x1400b2fba
cmp eax, 8
jne 0x1400b2d48
popf
pop rax
jmp 0x1400b3309
cmp eax, 5
jne 0x1400b2d57
popf
pop rax
jmp 0x1400b3122
cmp eax, 4
jne 0x1400b2d66
popf
pop rax
jmp 0x1400b3078
cmp eax, 0xb
jne 0x1400b2d75
popf
pop rax
jmp 0x1400b3447
cmp eax, 9
jne 0x1400b2d84
popf
pop rax
jmp 0x1400b339a
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r14
mov eax, 0x28e74429
pushf
not eax
add eax, 0x164e0fe4
xor eax, 0x7ab14345
rol eax, 0x5d
popf
pushf
not eax
add eax, 0x6fbe8da6
xor eax, 0x3fe08b61
rol eax, 0x2c
popf
pushf
not eax
add eax, 0x3c24610f
xor eax, 0x4fa5ecdd
rol eax, 0x4c
popf
call fcn.1400a9a64
sub rsp, rax
mov rax, qword [0x14002d7c0]
xor rax, rsp
mov qword [rsp + 0x1440], rax
movsxd r10, edx
mov rdi, rcx
mov rax, r10
mov ebp, r9d
sar rax, 6
lea rcx, [0x1a47f6e82]
pushf
sub rcx, 0x647c7872
popf
and r10d, 0x3f
push r8
not r8
sub rbp, r8
pop r8
sub rbp, 1
mov rsi, r8
mov rax, qword [rcx + rax*8]
lea rdx, [r10 + r10*8]
mov r14, qword [rax + rdx*8 + 0x28]
xor eax, eax
mov qword [rdi], rax
mov dword [rdi + 8], eax
cmp r8, rbp
jae 0x1400b2e98
push rax
pushf
mov eax, 0x88dd5e57
pushf
not eax
add eax, 0x20e85e14
xor eax, 0x207941c8
rol eax, 0x28
popf
pushf
not eax
add eax, 0x6d23f0e7
xor eax, 0x2d470e6a
rol eax, 0x79
popf
pushf
not eax
add eax, 0x61b408ff
xor eax, 0x1c53ff1
rol eax, 0xf8
popf
pushf
not eax
add eax, 0x3edf070a
xor eax, 0x53053a0e
rol eax, 0x17
popf
jmp 0x1400b2cd0
push rax
pushf
mov eax, 0x4a93fe4f
pushf
not eax
add eax, 0x31256116
xor eax, 0x5be089e8
rol eax, 0x13
popf
pushf
not eax
add eax, 0xc799925
xor eax, 0x3293dcf4
rol eax, 0x2d
popf
pushf
not eax
add eax, 0x7077ea18
xor eax, 0x4c3e6e97
rol eax, 0x5d
popf
pushf
not eax
add eax, 0x7e3459ec
xor eax, 0x38601efd
rol eax, 0xf1
popf
jmp 0x1400b2cd0
lea rbx, [rsp + 0x40]
push rax
pushf
mov eax, 0xb48acb25
pushf
not eax
add eax, 0x191cd673
xor eax, 0x3501cdc8
rol eax, 0x33
popf
pushf
not eax
add eax, 0x2f41a32
xor eax, 0x5edb740f
rol eax, 0x31
popf
pushf
not eax
add eax, 0x7a62dbcc
xor eax, 0x489892a6
rol eax, 0x60
popf
pushf
not eax
add eax, 0x25279042
xor eax, 0x75766741
rol eax, 0xe4
popf
jmp 0x1400b2cd0
cmp rsi, rbp
jae 0x1400b2f87
push rax
pushf
mov eax, 0x2eca5f5d
pushf
not eax
add eax, 0x594ee02d
xor eax, 0x4d285951
rol eax, 0x19
popf
pushf
not eax
add eax, 0x4585b553
xor eax, 0x8b69b9f
rol eax, 0x12
popf
jmp 0x1400b2cd0
push rax
pushf
mov eax, 0x831a72ac
pushf
not eax
add eax, 0x1b4ae1c4
xor eax, 0x6bfc143e
rol eax, 0xea
popf
pushf
not eax
add eax, 0x5721c95f
xor eax, 0x2335218f
rol eax, 0x28
popf
jmp 0x1400b2cd0
movzx eax, word [rsi]
add rsi, 2
cmp ax, 0xa
jne 0x1400b3020
push rax
pushf
mov eax, 0x62ac7b07
pushf
not eax
add eax, 0xf65202b
xor eax, 0xe4ba999
rol eax, 0x15
popf
pushf
not eax
add eax, 0x60b92728
xor eax, 0x5a2c2e94
rol eax, 0x85
popf
pushf
not eax
add eax, 0x340c4674
xor eax, 0x42b7b70
rol eax, 0x22
popf
pushf
not eax
add eax, 0x50e880cc
xor eax, 0x35d86384
rol eax, 0xe5
popf
jmp 0x1400b2cd0
push rax
pushf
mov eax, 0x717b295a
pushf
not eax
add eax, 0x664e0364
xor eax, 0x30190e0a
rol eax, 0x77
popf
pushf
not eax
add eax, 0x35062d6f
xor eax, 0x53b5aadb
rol eax, 1
popf
pushf
not eax
add eax, 0x4e58fda5
xor eax, 0x5e50a5d5
rol eax, 0xdc
popf
pushf
not eax
add eax, 0x7bf97e36
xor eax, 0x3ec0f5c2
rol eax, 0x12
popf
jmp 0x1400b2cd0
add dword [rdi + 8], 2
mov ecx, 0xec2cd937
pushf
not ecx
add ecx, 0x3491b20
xor ecx, 0x65fca730
rol ecx, 0xa3
popf
pushf
not ecx
add ecx, 0x7bf58521
xor ecx, 0x4d063134
rol ecx, 5
popf
pushf
not ecx
add ecx, 0x3ed0ece0
xor ecx, 0x14b339a5
rol ecx, 0x27
popf
pushf
not ecx
add ecx, 0xb7dfc97
xor ecx, 0x519af38c
rol ecx, 0x79
popf
mov word [rbx], cx
add rbx, 2
push rax
pushf
mov eax, 0x508ceb37
pushf
not eax
add eax, 0x721b0f70
xor eax, 0x36647ca4
rol eax, 0xef
popf
pushf
not eax
add eax, 0x5c9fd9eb
xor eax, 0x6152a04f
rol eax, 0x62
popf
pushf
not eax
add eax, 0x64957adc
xor eax, 0x2087c3a2
rol eax, 0x5c
popf
jmp 0x1400b2cd0
mov word [rbx], ax
add rbx, 2
lea rax, [rsp + 0x143e]
cmp rbx, rax
jb 0x1400b3169
push rax
pushf
mov eax, 0xfde1512a
pushf
not eax
add eax, 0x2db73015
xor eax, 0x26d496c7
rol eax, 0x28
popf
pushf
not eax
add eax, 0x41f8ee75
xor eax, 0x40b0c173
rol eax, 0xfe
popf
jmp 0x1400b2cd0
push rax
pushf
mov eax, 0x280daba6
pushf
not eax
add eax, 0x61ee777b
xor eax, 0x6665993
rol eax, 0x87
popf
pushf
not eax
add eax, 0x1c1451a2
xor eax, 0x4248f521
rol eax, 0xc9
popf
pushf
not eax
add eax, 0x1b8ac992
xor eax, 0x13d4834c
rol eax, 0x9d
popf
jmp 0x1400b2cd0
and qword [rsp + 0x20], 0
lea rax, [rsp + 0x40]
push rax
not rax
add rbx, rax
pop rax
add rbx, 1
lea r9, [rsp + 0x30]
sar rbx, 1
lea rdx, [rsp + 0x40]
add ebx, ebx
mov rcx, r14
mov r8d, ebx
jmp 0x1400b31dc
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x1400b322c
push rax
pushf
mov eax, 0xd42fc22f
pushf
not eax
add eax, 0x684f071f
xor eax, 0x1c7b6a2b
rol eax, 0x7e
popf
pushf
not eax
add eax, 0x4fa554cd
xor eax, 0x17472394
rol eax, 0x57
popf
pushf
not eax
add eax, 0x62bf2518
xor eax, 0x1b215f62
rol eax, 0x53
popf
jmp 0x1400b2cd0
push rax
pushf
mov eax, 0x473dea71
pushf
not eax
add eax, 0x1196db05
xor eax, 0x34537337
rol eax, 0xdb
popf
pushf
not eax
add eax, 0x4129fed2
xor eax, 0x193902b4
rol eax, 0xd4
popf
jmp 0x1400b2cd0
mov eax, dword [rsp + 0x30]
add dword [rdi + 4], eax
cmp eax, ebx
jb 0x1400b32b0
push rax
pushf
mov eax, 0x6d6147fd
pushf
not eax
add eax, 0x7b8817b2
xor eax, 0x305ea0e2
rol eax, 0x91
popf
pushf
not eax
add eax, 0x5e76fc5a
xor eax, 0x12abbb55
rol eax, 0xa0
popf
pushf
not eax
add eax, 0x70b7f6d8
xor eax, 0x4356329b
rol eax, 0xa5
popf
jmp 0x1400b2cd0
push rax
pushf
mov eax, 0xb59e5302
pushf
not eax
add eax, 0x263d2ea4
xor eax, 0x2d937caa
rol eax, 0x68
popf
pushf
not eax
add eax, 0x37819751
xor eax, 0x43212153
rol eax, 0x45
popf
pushf
not eax
add eax, 0x4a9be4b7
xor eax, 0x149c515b
rol eax, 5
popf
pushf
not eax
add eax, 0x5b2045af
xor eax, 0x6648074f
rol eax, 0x29
popf
jmp 0x1400b2cd0
cmp rsi, rbp
jb 0x1400b3367
push rax
pushf
mov eax, 0x34bdc151
pushf
not eax
add eax, 0x3efc60eb
xor eax, 0x471dad3b
rol eax, 8
popf
pushf
not eax
add eax, 0x74b2c5c9
xor eax, 0x6351a081
rol eax, 0x9f
popf
pushf
not eax
add eax, 0x2d91b696
xor eax, 0x1c39592
rol eax, 0x87
popf
pushf
not eax
add eax, 0x1a7494da
xor eax, 0x24c40eef
rol eax, 0x5b
popf
jmp 0x1400b2cd0
push rax
pushf
mov eax, 0x6178fb58
pushf
not eax
add eax, 0x2c2a7c8e
xor eax, 0x4990e38e
rol eax, 0x66
popf
pushf
not eax
add eax, 0x44a5ed43
xor eax, 0x7c4d3e22
rol eax, 0xda
popf
jmp 0x1400b2cd0
jmp 0x1400b3447
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rdi], eax
push rax
pushf
mov eax, 0xddf7eb27
pushf
not eax
add eax, 0x78c96704
xor eax, 0x71ce3dc5
rol eax, 0x87
popf
pushf
not eax
add eax, 0x570e7096
xor eax, 0xe757f18
rol eax, 0x73
popf
pushf
not eax
add eax, 0x2d117a73
xor eax, 0x274b3183
rol eax, 0x23
popf
jmp 0x1400b2cd0
mov rax, rdi
mov rcx, qword [rsp + 0x1440]
xor rcx, rsp
call fcn.1400a9158
lea r11, [rsp + 0x1450]
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x30]
mov rsp, r11
pop r14
pop rdi
pop rsi
ret