Function at 0x1400a3197
Capabilities:
Write file on windows

Disassembly:
push rax
pushf
mov eax, 0xc69974e9
pushf
not eax
add eax, 0x8b8f74e8
xor eax, 0x882f28b6
rol eax, 0x6d
popf
pushf
not eax
add eax, 0xaeac20ea
xor eax, 0x830fe983
rol eax, 0x72
popf
pushf
not eax
add eax, 0xcecc2772
xor eax, 0xd394e43e
rol eax, 0x70
popf
cmp eax, 4
jne 0x1400a31e7
popf
pop rax
jmp 0x1400a354b
cmp eax, 0
jne 0x1400a31f6
popf
pop rax
jmp 0x1400a329b
cmp eax, 3
jne 0x1400a3205
popf
pop rax
jmp 0x1400a34c5
cmp eax, 1
jne 0x1400a3214
popf
pop rax
jmp 0x1400a33fc
cmp eax, 0xa
jne 0x1400a3223
popf
pop rax
jmp 0x1400a3925
cmp eax, 7
jne 0x1400a3232
popf
pop rax
jmp 0x1400a37b3
cmp eax, 6
jne 0x1400a3241
popf
pop rax
jmp 0x1400a368f
cmp eax, 0xb
jne 0x1400a3250
popf
pop rax
jmp 0x1400a3969
cmp eax, 0xc
jne 0x1400a325f
popf
pop rax
jmp 0x1400a39ca
cmp eax, 8
jne 0x1400a326e
popf
pop rax
jmp 0x1400a3858
cmp eax, 5
jne 0x1400a327d
popf
pop rax
jmp 0x1400a35ef
cmp eax, 2
jne 0x1400a328c
popf
pop rax
jmp 0x1400a3434
cmp eax, 9
jne 0x1400a329b
popf
pop rax
jmp 0x1400a3919
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r12
push r14
push r15
mov eax, 0x7ca473fe
pushf
not eax
add eax, 0xe9fd5b44
xor eax, 0xc7872d39
rol eax, 0xa
popf
pushf
not eax
add eax, 0xff70a919
xor eax, 0xa1995b56
rol eax, 0xae
popf
pushf
not eax
add eax, 0xe6c80579
xor eax, 0xf7793d04
rol eax, 0x8a
popf
call fcn.1400a3e9c
sub rsp, rax
mov rax, qword [0x140029028]
xor rax, rsp
mov qword [rsp + 0x1460], rax
movsxd r10, edx
mov rbx, rcx
mov rax, r10
mov r14d, r9d
sar rax, 6
lea rcx, [0x1be2bb8d4]
pushf
sub rcx, 0x7e291984
popf
and r10d, 0x3f
push r8
not r8
sub r14, r8
pop r8
sub r14, 1
mov r15, r8
mov rdi, r8
mov rax, qword [rcx + rax*8]
lea rdx, [r10 + r10*8]
mov r12, qword [rax + rdx*8 + 0x28]
xor eax, eax
mov qword [rbx], rax
cmp r8, r14
mov dword [rbx + 8], eax
jae 0x1400a33b6
push rax
pushf
mov eax, 0x8e5e2196
pushf
not eax
add eax, 0xd8314f3e
xor eax, 0xe0fa365d
rol eax, 0x14
popf
pushf
not eax
add eax, 0x8846b553
xor eax, 0xbaf7f539
rol eax, 0x6c
popf
pushf
not eax
add eax, 0x919b439f
xor eax, 0xda57540a
rol eax, 0xb9
popf
pushf
not eax
add eax, 0xc7d9201f
xor eax, 0xe3bcc64e
rol eax, 0x52
popf
jmp 0x1400a31d8
push rax
pushf
mov eax, 0xd009a7a4
pushf
not eax
add eax, 0xca6405cd
xor eax, 0xea2c6e5c
rol eax, 0x9a
popf
pushf
not eax
add eax, 0xb07c1767
xor eax, 0x857390c2
rol eax, 0x22
popf
pushf
not eax
add eax, 0x85c81031
xor eax, 0xf0a15093
rol eax, 0xb9
popf
jmp 0x1400a31d8
lea rax, [rsp + 0x50]
push rax
pushf
mov eax, 0x98f312bf
pushf
not eax
add eax, 0xba27e686
xor eax, 0xdea915ce
rol eax, 0x43
popf
pushf
not eax
add eax, 0x9e36893a
xor eax, 0xa54858f2
rol eax, 0xa7
popf
jmp 0x1400a31d8
cmp rdi, r14
jae 0x1400a346c
push rax
pushf
mov eax, 0x723a27e7
pushf
not eax
add eax, 0x81901b56
xor eax, 0xd12ba75d
rol eax, 0x69
popf
pushf
not eax
add eax, 0xce054c69
xor eax, 0xd15ce4cc
rol eax, 0x1b
popf
jmp 0x1400a31d8
push rax
pushf
mov eax, 0xbc8296fe
pushf
not eax
add eax, 0x828b8944
xor eax, 0xda97da32
rol eax, 0x38
popf
pushf
not eax
add eax, 0xfaca3635
xor eax, 0xc30832a9
rol eax, 0x2a
popf
pushf
not eax
add eax, 0x9a764bef
xor eax, 0xd13029ff
rol eax, 0xef
popf
pushf
not eax
add eax, 0xcd327b1a
xor eax, 0xfba891a2
rol eax, 0xe8
popf
jmp 0x1400a31d8
movzx ecx, word [rdi]
add rdi, 2
cmp cx, 0xa
jne 0x1400a3505
push rax
pushf
mov eax, 0xa1862d4a
pushf
not eax
add eax, 0xf9f311fc
xor eax, 0xaf00df8f
rol eax, 0xc2
popf
pushf
not eax
add eax, 0xbfb8eb2d
xor eax, 0xe207fe21
rol eax, 0x5e
popf
jmp 0x1400a31d8
push rax
pushf
mov eax, 0xe63e2149
pushf
not eax
add eax, 0xb7668e7e
xor eax, 0xf6b1e1ec
rol eax, 0x46
popf
pushf
not eax
add eax, 0x931d087a
xor eax, 0xbb5c3b5f
rol eax, 0xfd
popf
pushf
not eax
add eax, 0xa097395f
xor eax, 0xbf1a7c39
rol eax, 0xc9
popf
jmp 0x1400a31d8
mov edx, 0xeaa7845e
pushf
not edx
add edx, 0xb9744e1b
xor edx, 0xd2bc79fd
rol edx, 0xfc
popf
pushf
not edx
add edx, 0xf13eaaf3
xor edx, 0xf132fe69
rol edx, 0x37
popf
pushf
not edx
add edx, 0xa4c2cfe6
xor edx, 0xe12babb5
rol edx, 0x99
popf
mov word [rax], dx
add rax, 2
push rax
pushf
mov eax, 0x7483cc42
pushf
not eax
add eax, 0xd4b8555d
xor eax, 0xac27f976
rol eax, 0x5d
popf
pushf
not eax
add eax, 0xb7430bd8
xor eax, 0xedfb3f8e
rol eax, 0x3b
popf
pushf
not eax
add eax, 0xf518ad0e
xor eax, 0xe5e417a6
rol eax, 0x17
popf
pushf
not eax
add eax, 0xb339840f
xor eax, 0x84a54aa8
rol eax, 0x7f
popf
jmp 0x1400a31d8
mov word [rax], cx
add rax, 2
lea rcx, [rsp + 0x6f8]
cmp rax, rcx
jb 0x1400a3636
push rax
pushf
mov eax, 0x2e8a1728
pushf
not eax
add eax, 0xe0c364ce
xor eax, 0xcb86c05c
rol eax, 0xb1
popf
pushf
not eax
add eax, 0x9d5fc1be
xor eax, 0x816cce38
rol eax, 0x20
popf
jmp 0x1400a31d8
push rax
pushf
mov eax, 0xf4963330
pushf
not eax
add eax, 0xe6663e5a
xor eax, 0xb256975a
rol eax, 0xd6
popf
pushf
not eax
add eax, 0x9b0c98ef
xor eax, 0xecf05be6
rol eax, 0x20
popf
pushf
not eax
add eax, 0x97b829bd
xor eax, 0xdb1d1f05
rol eax, 0x9f
popf
pushf
not eax
add eax, 0xf2253ae2
xor eax, 0x822ca8d2
rol eax, 0xf9
popf
jmp 0x1400a31d8
and qword [rsp + 0x38], 0
lea rcx, [rsp + 0x50]
and qword [rsp + 0x30], 0
lea r8, [rsp + 0x50]
sub rax, rcx
mov dword [rsp + 0x28], 0xd55
lea rcx, [rsp + 0x700]
sar rax, 1
mov qword [rsp + 0x20], rcx
mov r9d, eax
mov ecx, 0x1c3799c2
pushf
not ecx
add ecx, 0xcc52a110
xor ecx, 0xfb0e0bca
rol ecx, 0xee
popf
pushf
not ecx
add ecx, 0xf07f6648
xor ecx, 0xcf4cb4c9
rol ecx, 0x8f
popf
pushf
not ecx
add ecx, 0xaac101ea
xor ecx, 0x971b2e15
rol ecx, 0x41
popf
xor edx, edx
call fcn.1400d8349
mov ebp, eax
test eax, eax
je 0x1400a375a
push rax
pushf
mov eax, 0xb13e3f94
pushf
not eax
add eax, 0xe8e5b5c1
xor eax, 0x9430578b
rol eax, 0x69
popf
pushf
not eax
add eax, 0xea7afa84
xor eax, 0xba75e4c1
rol eax, 0xeb
popf
pushf
not eax
add eax, 0xf4e64ad5
xor eax, 0xfe6662a2
rol eax, 0x86
popf
jmp 0x1400a31d8
push rax
pushf
mov eax, 0xc6b2bb4c
pushf
not eax
add eax, 0xb2fe95fc
xor eax, 0xb71fe815
rol eax, 0x55
popf
pushf
not eax
add eax, 0x91609e67
xor eax, 0xbbe40c4a
rol eax, 0x5e
popf
pushf
not eax
add eax, 0x9887b82a
xor eax, 0xb934bab7
rol eax, 0x7c
popf
pushf
not eax
add eax, 0xfab97215
xor eax, 0xb6a574ee
rol eax, 0x62
popf
jmp 0x1400a31d8
xor esi, esi
test eax, eax
je 0x1400a37ff
push rax
pushf
mov eax, 0xb6ee30d0
pushf
not eax
add eax, 0xb3cdc13c
xor eax, 0xeff99c32
rol eax, 0x9a
popf
pushf
not eax
add eax, 0xeb68adcc
xor eax, 0xd6c9c134
rol eax, 0xa5
popf
pushf
not eax
add eax, 0xf9031d8d
xor eax, 0xbe5887c2
rol eax, 0xf
popf
jmp 0x1400a31d8
push rax
pushf
mov eax, 0x13d534ab
pushf
not eax
add eax, 0x8db35f02
xor eax, 0xfb6c35a5
rol eax, 0x14
popf
pushf
not eax
add eax, 0xd375123f
xor eax, 0xfea9f228
rol eax, 0x54
popf
pushf
not eax
add eax, 0xf8384034
xor eax, 0x8df2045a
rol eax, 0x56
popf
pushf
not eax
add eax, 0x8f4e14eb
xor eax, 0xe143ce46
rol eax, 0xbb
popf
jmp 0x1400a31d8
and qword [rsp + 0x20], 0
lea rdx, [rsp + 0x700]
mov ecx, esi
lea r9, [rsp + 0x40]
mov r8d, ebp
push rcx
not rcx
sub rdx, rcx
pop rcx
sub rdx, 1
mov rcx, r12
sub r8d, esi
jmp 0x1400a3883
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x1400a38c0
push rax
pushf
mov eax, 0xf631c5df
pushf
not eax
add eax, 0xfc609e71
xor eax, 0xda3c5a66
rol eax, 0x3a
popf
pushf
not eax
add eax, 0xdd6206f6
xor eax, 0xfd61bcea
rol eax, 0xac
popf
jmp 0x1400a31d8
push rax
pushf
mov eax, 0xa993475f
pushf
not eax
add eax, 0x8341a9c0
xor eax, 0xafeabd55
rol eax, 0xb0
popf
pushf
not eax
add eax, 0xe05db4f8
xor eax, 0xdd2c649f
rol eax, 0x6c
popf
pushf
not eax
add eax, 0xa129aab4
xor eax, 0xc86082f1
rol eax, 0x94
popf
pushf
not eax
add eax, 0xb755fb4b
xor eax, 0xd7293ce5
rol eax, 0x71
popf
jmp 0x1400a31d8
add esi, dword [rsp + 0x40]
cmp esi, ebp
jb 0x1400a3858
mov eax, edi
sub eax, r15d
mov dword [rbx + 4], eax
cmp rdi, r14
jmp 0x1400a3357
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbx], eax
push rax
pushf
mov eax, 0x2955bc61
pushf
not eax
add eax, 0xe3c6f4e2
xor eax, 0xb439d8d5
rol eax, 0x5d
popf
pushf
not eax
add eax, 0xa6b2b548
xor eax, 0x9bb1b6f3
rol eax, 0xf1
popf
pushf
not eax
add eax, 0x935a84d1
xor eax, 0x94bbbe4e
rol eax, 0xf0
popf
pushf
not eax
add eax, 0xe0989099
xor eax, 0xe8286992
rol eax, 0x73
popf
jmp 0x1400a31d8
mov rax, rbx
mov rcx, qword [rsp + 0x1460]
xor rcx, rsp
call fcn.14009c3e7
lea r11, [rsp + 0x1470]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rsi
ret