Function at 0x1404a1524
Capabilities:
Write file on windows

Disassembly:
push rax
pushf
mov eax, 0xd0904b3d
pushf
not eax
add eax, 0xc324d22e
xor eax, 0xd999aaf3
rol eax, 0x46
popf
pushf
not eax
add eax, 0xb620b690
xor eax, 0xf2d5b5c5
rol eax, 0x34
popf
cmp eax, 4
jne 0x1404a1561
popf
pop rax
jmp 0x1404a18eb
cmp eax, 0
jne 0x1404a1570
popf
pop rax
jmp 0x1404a1615
cmp eax, 3
jne 0x1404a157f
popf
pop rax
jmp 0x1404a183f
cmp eax, 1
jne 0x1404a158e
popf
pop rax
jmp 0x1404a1789
cmp eax, 0xa
jne 0x1404a159d
popf
pop rax
jmp 0x1404a1c3c
cmp eax, 7
jne 0x1404a15ac
popf
pop rax
jmp 0x1404a1af0
cmp eax, 6
jne 0x1404a15bb
popf
pop rax
jmp 0x1404a19f4
cmp eax, 0xb
jne 0x1404a15ca
popf
pop rax
jmp 0x1404a1c80
cmp eax, 0xc
jne 0x1404a15d9
popf
pop rax
jmp 0x1404a1cce
cmp eax, 8
jne 0x1404a15e8
popf
pop rax
jmp 0x1404a1b82
cmp eax, 5
jne 0x1404a15f7
popf
pop rax
jmp 0x1404a197a
cmp eax, 2
jne 0x1404a1606
popf
pop rax
jmp 0x1404a17d4
cmp eax, 9
jne 0x1404a1615
popf
pop rax
jmp 0x1404a1c30
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r12
push r14
push r15
mov eax, 0x13d4f70e
pushf
not eax
add eax, 0xf48fad06
xor eax, 0xa91b8caf
rol eax, 0x4f
popf
pushf
not eax
add eax, 0xcf9d1bf4
xor eax, 0xe181aa5d
rol eax, 0xa6
popf
pushf
not eax
add eax, 0xac349df5
xor eax, 0xe8357629
rol eax, 0x17
popf
pushf
not eax
add eax, 0xb85f0fb7
xor eax, 0xc4cb1b93
rol eax, 0xcc
popf
call fcn.14006dea1
sub rsp, rax
mov rax, qword [0x140183040]
xor rax, rsp
mov qword [rsp + 0x1460], rax
movsxd r10, edx
mov rbx, rcx
mov rax, r10
mov r14d, r9d
sar rax, 6
lea rcx, [0x188e4fde4]
pushf
sub rcx, 0x48cc81f4
popf
and r10d, 0x3f
push r8
not r8
sub r14, r8
pop r8
sub r14, 1
mov r15, r8
mov rdi, r8
mov rax, qword [rcx + rax*8]
lea rdx, [r10 + r10*8]
mov r12, qword [rax + rdx*8 + 0x28]
xor eax, eax
mov qword [rbx], rax
cmp r8, r14
mov dword [rbx + 8], eax
jae 0x1404a1730
push rax
pushf
mov eax, 0xb013d1d8
pushf
not eax
add eax, 0x82854996
xor eax, 0x80f1326f
rol eax, 0x46
popf
pushf
not eax
add eax, 0xf8a66532
xor eax, 0xe479d3ed
rol eax, 0x5f
popf
pushf
not eax
add eax, 0xe9082ca2
xor eax, 0x8a919ae1
rol eax, 0x1d
popf
jmp 0x1404a1552
push rax
pushf
mov eax, 0x59a8faa3
pushf
not eax
add eax, 0x9d0401c3
xor eax, 0x85722d14
rol eax, 0xc0
popf
pushf
not eax
add eax, 0x8b708ded
xor eax, 0xb6c5e9f7
rol eax, 0x21
popf
pushf
not eax
add eax, 0xd4e98ad8
xor eax, 0xe9fa93e5
rol eax, 0x31
popf
pushf
not eax
add eax, 0xa035abe1
xor eax, 0xcd99a3a3
rol eax, 0x27
popf
jmp 0x1404a1552
lea rax, [rsp + 0x50]
push rax
pushf
mov eax, 0x5a0c8d92
pushf
not eax
add eax, 0xefc5b01d
xor eax, 0xe0366953
rol eax, 0x9b
popf
pushf
not eax
add eax, 0xaae4aba2
xor eax, 0xc6d95c60
rol eax, 0x39
popf
pushf
not eax
add eax, 0xdad93e20
xor eax, 0x94a53b45
rol eax, 0xf3
popf
jmp 0x1404a1552
cmp rdi, r14
jae 0x1404a180c
push rax
pushf
mov eax, 0xe4bf4b9a
pushf
not eax
add eax, 0xdcc1b190
xor eax, 0xa55297ef
rol eax, 0xf8
popf
pushf
not eax
add eax, 0xe0e4c4a1
xor eax, 0xc08773ae
rol eax, 0xa7
popf
jmp 0x1404a1552
push rax
pushf
mov eax, 0xbb72c81d
pushf
not eax
add eax, 0xa8f1c7c4
xor eax, 0xe862c477
rol eax, 0x89
popf
pushf
not eax
add eax, 0xc0811efc
xor eax, 0x88117cf1
rol eax, 0x8e
popf
jmp 0x1404a1552
movzx ecx, word [rdi]
add rdi, 2
cmp cx, 0xa
jne 0x1404a18a5
push rax
pushf
mov eax, 0x4c2e48bc
pushf
not eax
add eax, 0x8c6a1b0e
xor eax, 0xd4cbe38b
rol eax, 0xc4
popf
pushf
not eax
add eax, 0xcc16114a
xor eax, 0xd6eb6690
rol eax, 0xa4
popf
pushf
not eax
add eax, 0xbd199ce7
xor eax, 0x87df178c
rol eax, 0xfc
popf
pushf
not eax
add eax, 0x8efd505b
xor eax, 0x87475a75
rol eax, 0x4e
popf
jmp 0x1404a1552
push rax
pushf
mov eax, 0x497f207b
pushf
not eax
add eax, 0xc64377d3
xor eax, 0xc4649a0a
rol eax, 0x37
popf
pushf
not eax
add eax, 0xa632d840
xor eax, 0xdc8a5892
rol eax, 0xd6
popf
pushf
not eax
add eax, 0x9b85846a
xor eax, 0xc8ba9932
rol eax, 0xb6
popf
jmp 0x1404a1552
mov edx, 0x4c4d4813
pushf
not edx
add edx, 0x8808f7b1
xor edx, 0xde8eb39d
rol edx, 0xdd
popf
pushf
not edx
add edx, 0xb56fff2e
xor edx, 0x95c95bad
rol edx, 0xc8
popf
mov word [rax], dx
add rax, 2
push rax
pushf
mov eax, 0xdfd87024
pushf
not eax
add eax, 0xf7b09122
xor eax, 0x8640b187
rol eax, 0x91
popf
pushf
not eax
add eax, 0xc264a83c
xor eax, 0xf8f1bfa0
rol eax, 0xf8
popf
pushf
not eax
add eax, 0xdaad3652
xor eax, 0xac748c38
rol eax, 0xe3
popf
pushf
not eax
add eax, 0xd22ba2cc
xor eax, 0xf5a3014f
rol eax, 0xc8
popf
jmp 0x1404a1552
mov word [rax], cx
add rax, 2
lea rcx, [rsp + 0x6f8]
cmp rax, rcx
jb 0x1404a19c1
push rax
pushf
mov eax, 0x2f2840ce
pushf
not eax
add eax, 0x94afdebc
xor eax, 0xe92b0087
rol eax, 0xa4
popf
pushf
not eax
add eax, 0xbbe48f4d
xor eax, 0xf11cb8a4
rol eax, 0xd0
popf
jmp 0x1404a1552
push rax
pushf
mov eax, 0x17331771
pushf
not eax
add eax, 0x8602e461
xor eax, 0xd9bc69bd
rol eax, 0xca
popf
pushf
not eax
add eax, 0xcdf12bea
xor eax, 0xff7be10c
rol eax, 0x4c
popf
jmp 0x1404a1552
and qword [rsp + 0x38], 0
lea rcx, [rsp + 0x50]
and qword [rsp + 0x30], 0
lea r8, [rsp + 0x50]
sub rax, rcx
mov dword [rsp + 0x28], 0xd55
lea rcx, [rsp + 0x700]
sar rax, 1
mov qword [rsp + 0x20], rcx
mov r9d, eax
mov ecx, 0x90322f74
pushf
not ecx
add ecx, 0xf90d7483
xor ecx, 0xf5704fca
rol ecx, 0x3d
popf
pushf
not ecx
add ecx, 0xd695a2e9
xor ecx, 0xabe0416d
rol ecx, 0x88
popf
xor edx, edx
call fcn.140070c6e
mov ebp, eax
test eax, eax
je 0x1404a1abd
push rax
pushf
mov eax, 0x63fe8d28
pushf
not eax
add eax, 0xb00b1200
xor eax, 0xedc0846b
rol eax, 0x92
popf
pushf
not eax
add eax, 0xbbd2d9c5
xor eax, 0x9100e6e7
rol eax, 0xa5
popf
pushf
not eax
add eax, 0xe2f088e5
xor eax, 0xff4fce47
rol eax, 0x12
popf
pushf
not eax
add eax, 0x95815c3a
xor eax, 0xc49f85e1
rol eax, 0x34
popf
jmp 0x1404a1552
push rax
pushf
mov eax, 0xded3624
pushf
not eax
add eax, 0xb48bc3d6
xor eax, 0xfbf5450a
rol eax, 0x2c
popf
pushf
not eax
add eax, 0x9275dae7
xor eax, 0xd5ea27d0
rol eax, 0xda
popf
jmp 0x1404a1552
xor esi, esi
test eax, eax
je 0x1404a1b29
push rax
pushf
mov eax, 0x5c837cf2
pushf
not eax
add eax, 0xbd1b0c71
xor eax, 0x9964e005
rol eax, 0xe7
popf
pushf
not eax
add eax, 0xa4919e8a
xor eax, 0xaad8e08d
rol eax, 0xb3
popf
jmp 0x1404a1552
push rax
pushf
mov eax, 0x5195bb79
pushf
not eax
add eax, 0xc713e638
xor eax, 0x929d2ead
rol eax, 0x20
popf
pushf
not eax
add eax, 0xc4ed4ec8
xor eax, 0xcdad1d80
rol eax, 0xb7
popf
pushf
not eax
add eax, 0xcc14aed6
xor eax, 0xb1ec677d
rol eax, 0xd0
popf
pushf
not eax
add eax, 0xed1fbb80
xor eax, 0xa4c8379f
rol eax, 0x87
popf
jmp 0x1404a1552
and qword [rsp + 0x20], 0
lea rdx, [rsp + 0x700]
mov ecx, esi
lea r9, [rsp + 0x40]
mov r8d, ebp
push rcx
not rcx
sub rdx, rcx
pop rcx
sub rdx, 1
mov rcx, r12
sub r8d, esi
jmp 0x1404a1bad
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x1404a1bea
push rax
pushf
mov eax, 0xe99f1fd7
pushf
not eax
add eax, 0xc0f4d153
xor eax, 0xbb7566a3
rol eax, 0x6e
popf
pushf
not eax
add eax, 0xce4a9e79
xor eax, 0x981c8370
rol eax, 0x4d
popf
jmp 0x1404a1552
push rax
pushf
mov eax, 0x3378cb70
pushf
not eax
add eax, 0xbb1e47aa
xor eax, 0x92ca98f1
rol eax, 0x2c
popf
pushf
not eax
add eax, 0x9db27476
xor eax, 0x979f8f1e
rol eax, 0xda
popf
pushf
not eax
add eax, 0xac11167d
xor eax, 0xa7ed2e4c
rol eax, 0xfa
popf
jmp 0x1404a1552
add esi, dword [rsp + 0x40]
cmp esi, ebp
jb 0x1404a1b82
mov eax, edi
sub eax, r15d
mov dword [rbx + 4], eax
cmp rdi, r14
jmp 0x1404a16e4
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbx], eax
push rax
pushf
mov eax, 0x73e0263b
pushf
not eax
add eax, 0xecd710c1
xor eax, 0xc148b74a
rol eax, 0xdf
popf
pushf
not eax
add eax, 0x8c15cd8c
xor eax, 0xf980abb8
rol eax, 0x81
popf
pushf
not eax
add eax, 0x93602773
xor eax, 0xe5f5bd3a
rol eax, 0x11
popf
jmp 0x1404a1552
mov rax, rbx
mov rcx, qword [rsp + 0x1460]
xor rcx, rsp
call fcn.14006f69d
lea r11, [rsp + 0x1470]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rsi
ret