Function at 0x1400ada60
Capabilities:
Write file on windows

Disassembly:
push rax
pushf
mov eax, 0x2bd15386
pushf
not eax
add eax, 0xd3753831
xor eax, 0xeae3415b
rol eax, 0x98
popf
pushf
not eax
add eax, 0x8c46a4aa
xor eax, 0xdaaaceea
rol eax, 0xbb
popf
pushf
not eax
add eax, 0xb23bd6e8
xor eax, 0xca065bcc
rol eax, 0x91
popf
pushf
not eax
add eax, 0xac4191af
xor eax, 0xe7887d30
rol eax, 0x62
popf
cmp eax, 4
jne 0x1400adac3
popf
pop rax
jmp 0x1400add49
cmp eax, 0
jne 0x1400adad2
popf
pop rax
jmp 0x1400adb68
cmp eax, 3
jne 0x1400adae1
popf
pop rax
jmp 0x1400adcc6
cmp eax, 1
jne 0x1400adaf0
popf
pop rax
jmp 0x1400adc85
cmp eax, 0xa
jne 0x1400adaff
popf
pop rax
jmp 0x1400ae097
cmp eax, 7
jne 0x1400adb0e
popf
pop rax
jmp 0x1400aded7
cmp eax, 6
jne 0x1400adb1d
popf
pop rax
jmp 0x1400ade10
cmp eax, 0xb
jne 0x1400adb2c
popf
pop rax
jmp 0x1400ae0d2
cmp eax, 9
jne 0x1400adb3b
popf
pop rax
jmp 0x1400ae038
cmp eax, 8
jne 0x1400adb4a
popf
pop rax
jmp 0x1400adf81
cmp eax, 5
jne 0x1400adb59
popf
pop rax
jmp 0x1400add85
cmp eax, 2
jne 0x1400adb68
popf
pop rax
jmp 0x1400adcbd
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r14
mov eax, 0xa0084703
pushf
not eax
add eax, 0xa6c46663
xor eax, 0xa5dec4dd
rol eax, 6
popf
pushf
not eax
add eax, 0x9b9e0473
xor eax, 0xde92f5ad
rol eax, 0x1e
popf
pushf
not eax
add eax, 0x8771b4b8
xor eax, 0xe8f43f1e
rol eax, 0x6f
popf
call fcn.1401627b7
sub rsp, rax
mov rax, qword [0x140058058]
xor rax, rsp
mov qword [rsp + 0x1440], rax
movsxd r10, edx
mov rdi, rcx
mov rax, r10
mov ebp, r9d
sar rax, 6
lea rcx, [0x19b6dab6d]
pushf
sub rcx, 0x5b6803ed
popf
and r10d, 0x3f
push r8
not r8
sub rbp, r8
pop r8
sub rbp, 1
mov rsi, r8
mov rax, qword [rcx + rax*8]
lea rdx, [r10 + r10*8]
mov r14, qword [rax + rdx*8 + 0x28]
xor eax, eax
mov qword [rdi], rax
mov dword [rdi + 8], eax
cmp r8, rbp
jae 0x1400adc52
push rax
pushf
mov eax, 0x2464483c
pushf
not eax
add eax, 0xb24de61d
xor eax, 0xca3a3020
rol eax, 0x30
popf
pushf
not eax
add eax, 0x9baeaa63
xor eax, 0xedef628f
rol eax, 0x70
popf
jmp 0x1400adab4
push rax
pushf
mov eax, 0x193aae49
pushf
not eax
add eax, 0xf14514d5
xor eax, 0xf449e4e7
rol eax, 0x6a
popf
pushf
not eax
add eax, 0xb97e6796
xor eax, 0xabc4b6e4
rol eax, 0xec
popf
jmp 0x1400adab4
lea rbx, [rsp + 0x40]
push rax
pushf
mov eax, 0xfa99937a
pushf
not eax
add eax, 0xb3a44293
xor eax, 0x9396e0ac
rol eax, 0x97
popf
pushf
not eax
add eax, 0xb0358c6d
xor eax, 0xd6203f45
rol eax, 0x99
popf
jmp 0x1400adab4
cmp rsi, rbp
jae 0x1400ade10
mov al, byte [rsi]
inc rsi
cmp al, 0xa
jne 0x1400add15
push rax
pushf
mov eax, 0xcc2d0c22
pushf
not eax
add eax, 0x9ed48901
xor eax, 0xb6cd8022
rol eax, 0x21
popf
pushf
not eax
add eax, 0xac1741d8
xor eax, 0x81475469
rol eax, 0xcd
popf
pushf
not eax
add eax, 0xbb5c6479
xor eax, 0xf8e5b838
rol eax, 0x75
popf
jmp 0x1400adab4
push rax
pushf
mov eax, 0xef21f714
pushf
not eax
add eax, 0xd9fa0b89
xor eax, 0xdc0f240b
rol eax, 0xc6
popf
pushf
not eax
add eax, 0xa6ff47d2
xor eax, 0xf1272804
rol eax, 0xee
popf
jmp 0x1400adab4
inc dword [rdi + 8]
mov byte [rbx], 0xd
inc rbx
push rax
pushf
mov eax, 0xac06e48b
pushf
not eax
add eax, 0xb6a15eda
xor eax, 0xf930e07d
rol eax, 0xe
popf
pushf
not eax
add eax, 0x931f8eee
xor eax, 0xec923203
rol eax, 0xf3
popf
jmp 0x1400adab4
mov byte [rbx], al
inc rbx
lea rax, [rsp + 0x143f]
cmp rbx, rax
jb 0x1400addca
push rax
pushf
mov eax, 0x263425cd
pushf
not eax
add eax, 0xd0eab9a6
xor eax, 0xaa46222f
rol eax, 0x69
popf
pushf
not eax
add eax, 0x84ae568e
xor eax, 0xa34a68bc
rol eax, 0x9d
popf
jmp 0x1400adab4
push rax
pushf
mov eax, 0xadec746f
pushf
not eax
add eax, 0xdeea115b
xor eax, 0xd209c410
rol eax, 0xbb
popf
pushf
not eax
add eax, 0xcb45de1d
xor eax, 0xc41fe62f
rol eax, 0x9c
popf
pushf
not eax
add eax, 0x8836feaa
xor eax, 0xe4b3e0d2
rol eax, 0xa9
popf
jmp 0x1400adab4
and qword [rsp + 0x20], 0
lea rax, [rsp + 0x40]
sub ebx, eax
lea r9, [rsp + 0x30]
mov r8d, ebx
lea rdx, [rsp + 0x40]
mov rcx, r14
jmp 0x1400ade2e
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x1400ade91
push rax
pushf
mov eax, 0x728741e3
pushf
not eax
add eax, 0xb48e6517
xor eax, 0xdf5a9dae
rol eax, 0xfa
popf
pushf
not eax
add eax, 0xbf68c140
xor eax, 0x9610119e
rol eax, 0xcc
popf
pushf
not eax
add eax, 0xf0e693e2
xor eax, 0xca374d32
rol eax, 0xea
popf
pushf
not eax
add eax, 0xdf7625c7
xor eax, 0x81132002
rol eax, 0xe3
popf
jmp 0x1400adab4
push rax
pushf
mov eax, 0xc95d618e
pushf
not eax
add eax, 0xb7006ce2
xor eax, 0xbd8e7b40
rol eax, 0xa8
popf
pushf
not eax
add eax, 0xde7bc659
xor eax, 0x8b860ba3
rol eax, 0xad
popf
pushf
not eax
add eax, 0x8863f5f5
xor eax, 0xd14e8c23
rol eax, 0x5a
popf
jmp 0x1400adab4
mov eax, dword [rsp + 0x30]
add dword [rdi + 4], eax
cmp eax, ebx
jb 0x1400adf3b
push rax
pushf
mov eax, 0x990d6b42
pushf
not eax
add eax, 0xe6317410
xor eax, 0xd1a80b61
rol eax, 0x33
popf
pushf
not eax
add eax, 0xd1e1103d
xor eax, 0x9c0b254b
rol eax, 0x11
popf
pushf
not eax
add eax, 0xa031899e
xor eax, 0x8a10d9d8
rol eax, 0xd9
popf
pushf
not eax
add eax, 0x96b4aa6b
xor eax, 0xa8a202a8
rol eax, 0x74
popf
jmp 0x1400adab4
push rax
pushf
mov eax, 0x430da51e
pushf
not eax
add eax, 0xec7669c2
xor eax, 0xd4b8dbce
rol eax, 0x42
popf
pushf
not eax
add eax, 0xb0621daa
xor eax, 0xf171814f
rol eax, 0xed
popf
pushf
not eax
add eax, 0x83f3e11e
xor eax, 0x800a7813
rol eax, 0xcf
popf
jmp 0x1400adab4
cmp rsi, rbp
jb 0x1400adfdf
push rax
pushf
mov eax, 0xefe09fa4
pushf
not eax
add eax, 0xb2f08c8f
xor eax, 0xbb850bb6
rol eax, 0x32
popf
pushf
not eax
add eax, 0xe7e9fa7e
xor eax, 0xfbdd5bd0
rol eax, 0x48
popf
pushf
not eax
add eax, 0x8434b4cd
xor eax, 0x836dcfe8
rol eax, 0x65
popf
pushf
not eax
add eax, 0x9c355901
xor eax, 0xec159a95
rol eax, 0xe9
popf
jmp 0x1400adab4
push rax
pushf
mov eax, 0xe72bea49
pushf
not eax
add eax, 0x8ddc957c
xor eax, 0xa24619c0
rol eax, 0x18
popf
pushf
not eax
add eax, 0x8680d64a
xor eax, 0xad834304
rol eax, 0xd6
popf
pushf
not eax
add eax, 0x8bc7847c
xor eax, 0x858c26a3
rol eax, 0x15
popf
pushf
not eax
add eax, 0xb249aae1
xor eax, 0x934d3c3d
rol eax, 0xe0
popf
jmp 0x1400adab4
jmp 0x1400ae0d2
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rdi], eax
push rax
pushf
mov eax, 0x965feef2
pushf
not eax
add eax, 0xbd76bbc0
xor eax, 0xe10581c8
rol eax, 0xf8
popf
pushf
not eax
add eax, 0xf4c56453
xor eax, 0xef9f5105
rol eax, 0x6b
popf
jmp 0x1400adab4
mov rax, rdi
mov rcx, qword [rsp + 0x1440]
xor rcx, rsp
call fcn.1401533b0
lea r11, [rsp + 0x1450]
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x30]
mov rsp, r11
pop r14
pop rdi
pop rsi
ret