Function at 0x1401100aa
Capabilities:
Write file on windows

Disassembly:
push rax
pushf
mov eax, 0x8f91029a
pushf
not eax
add eax, 0xb79fb7ce
xor eax, 0xc8b69220
rol eax, 0x87
popf
pushf
not eax
add eax, 0xc4f3b791
xor eax, 0xe61fe4a9
rol eax, 0xbb
popf
pushf
not eax
add eax, 0xe1cdf586
xor eax, 0x9555f73d
rol eax, 0xb7
popf
cmp eax, 4
jne 0x1401100fa
popf
pop rax
jmp 0x14011045e
cmp eax, 0
jne 0x140110109
popf
pop rax
jmp 0x1401101ae
cmp eax, 3
jne 0x140110118
popf
pop rax
jmp 0x1401103b2
cmp eax, 1
jne 0x140110127
popf
pop rax
jmp 0x1401102d6
cmp eax, 0xa
jne 0x140110136
popf
pop rax
jmp 0x140110827
cmp eax, 7
jne 0x140110145
popf
pop rax
jmp 0x1401106a2
cmp eax, 6
jne 0x140110154
popf
pop rax
jmp 0x1401105a4
cmp eax, 0xb
jne 0x140110163
popf
pop rax
jmp 0x14011086b
cmp eax, 0xc
jne 0x140110172
popf
pop rax
jmp 0x1401108cc
cmp eax, 8
jne 0x140110181
popf
pop rax
jmp 0x140110747
cmp eax, 5
jne 0x140110190
popf
pop rax
jmp 0x140110504
cmp eax, 2
jne 0x14011019f
popf
pop rax
jmp 0x140110321
cmp eax, 9
jne 0x1401101ae
popf
pop rax
jmp 0x14011081b
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r12
push r14
push r15
mov eax, 0x9ed26b33
pushf
not eax
add eax, 0x96c6bfc8
xor eax, 0x824d5f13
rol eax, 0x16
popf
pushf
not eax
add eax, 0x96c8e0c8
xor eax, 0xb4eb66f5
rol eax, 0xa0
popf
call fcn.140110d10
sub rsp, rax
mov rax, qword [section..data]
xor rax, rsp
mov qword [rsp + 0x1460], rax
movsxd r10, edx
mov rbx, rcx
mov rax, r10
mov r14d, r9d
sar rax, 6
lea rcx, [0x19f8030d4]
pushf
sub rcx, 0x5f7376b4
popf
and r10d, 0x3f
push r8
not r8
sub r14, r8
pop r8
sub r14, 1
mov r15, r8
mov rdi, r8
mov rax, qword [rcx + rax*8]
lea rdx, [r10 + r10*8]
mov r12, qword [rax + rdx*8 + 0x28]
xor eax, eax
mov qword [rbx], rax
cmp r8, r14
mov dword [rbx + 8], eax
jae 0x140110290
push rax
pushf
mov eax, 0x50b3e337
pushf
not eax
add eax, 0xf21b93e0
xor eax, 0xf0a8f07a
rol eax, 0x1a
popf
pushf
not eax
add eax, 0xe9dd4dd1
xor eax, 0xa09610c9
rol eax, 0x5e
popf
jmp 0x1401100eb
push rax
pushf
mov eax, 0xa991f229
pushf
not eax
add eax, 0xd6d34a51
xor eax, 0xb24a85c7
rol eax, 0xf7
popf
pushf
not eax
add eax, 0x97413b5f
xor eax, 0xa5c20a9d
rol eax, 0xd
popf
pushf
not eax
add eax, 0xc0ae3a3c
xor eax, 0x88b099d5
rol eax, 0x64
popf
jmp 0x1401100eb
lea rax, [rsp + 0x50]
push rax
pushf
mov eax, 0x390ba17d
pushf
not eax
add eax, 0xe9a01012
xor eax, 0x9de25150
rol eax, 0x52
popf
pushf
not eax
add eax, 0x9f978ed3
xor eax, 0xcd4c4807
rol eax, 0
popf
pushf
not eax
add eax, 0xf9070799
xor eax, 0x8b3c749b
rol eax, 0x78
popf
jmp 0x1401100eb
cmp rdi, r14
jae 0x14011036c
push rax
pushf
mov eax, 0xe9005f74
pushf
not eax
add eax, 0xdc5748f5
xor eax, 0xbc1ff8b7
rol eax, 0x4a
popf
pushf
not eax
add eax, 0xce68b5fc
xor eax, 0xece95669
rol eax, 0xb5
popf
pushf
not eax
add eax, 0x8089e337
xor eax, 0xa5a169e5
rol eax, 0x93
popf
jmp 0x1401100eb
push rax
pushf
mov eax, 0xdcf1a5ba
pushf
not eax
add eax, 0xbb9477b7
xor eax, 0xf55991f5
rol eax, 0x32
popf
pushf
not eax
add eax, 0xc409c129
xor eax, 0xb0dfca21
rol eax, 0x7f
popf
pushf
not eax
add eax, 0xfa40fd5e
xor eax, 0xc0c38fd0
rol eax, 0x6c
popf
jmp 0x1401100eb
movzx ecx, word [rdi]
add rdi, 2
cmp cx, 0xa
jne 0x140110405
push rax
pushf
mov eax, 0xf0ccb9dd
pushf
not eax
add eax, 0xf9e2f9ea
xor eax, 0x94a2c8bb
rol eax, 0x46
popf
pushf
not eax
add eax, 0xd65b542e
xor eax, 0xaab79c33
rol eax, 0x63
popf
pushf
not eax
add eax, 0xbecdd5c9
xor eax, 0xa250021a
rol eax, 0x8f
popf
jmp 0x1401100eb
push rax
pushf
mov eax, 0x2f6e779
pushf
not eax
add eax, 0x80876a35
xor eax, 0xc09fd079
rol eax, 0x70
popf
pushf
not eax
add eax, 0x9b36b3a3
xor eax, 0xc87b509c
rol eax, 0x7b
popf
pushf
not eax
add eax, 0xa2617c29
xor eax, 0xdd57a0e3
rol eax, 0xc1
popf
pushf
not eax
add eax, 0xc59b7919
xor eax, 0xcf2ccce1
rol eax, 0xb1
popf
jmp 0x1401100eb
mov edx, 0xe9f95a84
pushf
not edx
add edx, 0xd83a6214
xor edx, 0xe162b6dc
rol edx, 0x45
popf
pushf
not edx
add edx, 0xfa12a940
xor edx, 0x9a066b98
rol edx, 0x7f
popf
pushf
not edx
add edx, 0xc95b1e58
xor edx, 0xec6e723c
rol edx, 0x4b
popf
pushf
not edx
add edx, 0xf419b288
xor edx, 0xf10d7518
rol edx, 0xb7
popf
mov word [rax], dx
add rax, 2
push rax
pushf
mov eax, 0x10dcce32
pushf
not eax
add eax, 0xcf43d32a
xor eax, 0xef315558
rol eax, 0x47
popf
pushf
not eax
add eax, 0xc5df1dc6
xor eax, 0xc01033fb
rol eax, 0x91
popf
pushf
not eax
add eax, 0xeb237604
xor eax, 0xff5560b7
rol eax, 0x13
popf
jmp 0x1401100eb
mov word [rax], cx
add rax, 2
lea rcx, [rsp + 0x6f8]
cmp rax, rcx
jb 0x14011055e
push rax
pushf
mov eax, 0x7eb37929
pushf
not eax
add eax, 0xf709dfeb
xor eax, 0xe43bc93c
rol eax, 0x28
popf
pushf
not eax
add eax, 0xf305ab65
xor eax, 0x8b2d46b6
rol eax, 0xea
popf
pushf
not eax
add eax, 0xc38ff883
xor eax, 0xdffa0049
rol eax, 0x2e
popf
jmp 0x1401100eb
push rax
pushf
mov eax, 0x78efd222
pushf
not eax
add eax, 0xece88a34
xor eax, 0xb72acd4b
rol eax, 0xa0
popf
pushf
not eax
add eax, 0xa28a9b1b
xor eax, 0x8d24e3c7
rol eax, 0x3d
popf
pushf
not eax
add eax, 0xb88eda55
xor eax, 0xce7b419c
rol eax, 0x3e
popf
jmp 0x1401100eb
and qword [rsp + 0x38], 0
lea rcx, [rsp + 0x50]
and qword [rsp + 0x30], 0
lea r8, [rsp + 0x50]
sub rax, rcx
mov dword [rsp + 0x28], 0xd55
lea rcx, [rsp + 0x700]
sar rax, 1
mov qword [rsp + 0x20], rcx
mov r9d, eax
mov ecx, 0x2e21f734
pushf
not ecx
add ecx, 0xee6dfa3d
xor ecx, 0xae55120e
rol ecx, 0x65
popf
pushf
not ecx
add ecx, 0xfdd2c7cc
xor ecx, 0xd07bf4b1
rol ecx, 0x4f
popf
pushf
not ecx
add ecx, 0xa2d86f67
xor ecx, 0x83f07a3e
rol ecx, 0xea
popf
xor edx, edx
call fcn.14012c7bd
mov ebp, eax
test eax, eax
je 0x14011065c
push rax
pushf
mov eax, 0x84a79e40
pushf
not eax
add eax, 0xa792d1ab
xor eax, 0xf7d73c1b
rol eax, 0xd0
popf
pushf
not eax
add eax, 0xecf58ac6
xor eax, 0xdd83b449
rol eax, 0x1a
popf
jmp 0x1401100eb
push rax
pushf
mov eax, 0xdffd11e9
pushf
not eax
add eax, 0xf3813fa5
xor eax, 0x8c9efc97
rol eax, 0x48
popf
pushf
not eax
add eax, 0xf06d13ed
xor eax, 0x99cc2208
rol eax, 0x58
popf
pushf
not eax
add eax, 0xe6287d13
xor eax, 0xa084254d
rol eax, 0x8d
popf
jmp 0x1401100eb
xor esi, esi
test eax, eax
je 0x140110701
push rax
pushf
mov eax, 0x52d27242
pushf
not eax
add eax, 0x8d08e107
xor eax, 0x9cda7f14
rol eax, 0x19
popf
pushf
not eax
add eax, 0xdd11fbf9
xor eax, 0xefc32f83
rol eax, 0x41
popf
pushf
not eax
add eax, 0x9fe1af7c
xor eax, 0x99dae99f
rol eax, 0xc7
popf
pushf
not eax
add eax, 0xddbefdcd
xor eax, 0xd9ff5515
rol eax, 0x4b
popf
jmp 0x1401100eb
push rax
pushf
mov eax, 0xacda25c7
pushf
not eax
add eax, 0x997b10bf
xor eax, 0xc341994e
rol eax, 0x65
popf
pushf
not eax
add eax, 0x99049e8c
xor eax, 0xa7197020
rol eax, 0x40
popf
pushf
not eax
add eax, 0xcda6dd5e
xor eax, 0x91d7ae17
rol eax, 0x36
popf
jmp 0x1401100eb
and qword [rsp + 0x20], 0
lea rdx, [rsp + 0x700]
mov ecx, esi
lea r9, [rsp + 0x40]
mov r8d, ebp
push rcx
not rcx
sub rdx, rcx
pop rcx
sub rdx, 1
mov rcx, r12
sub r8d, esi
jmp 0x140110772
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x1401107d5
push rax
pushf
mov eax, 0xc72619f2
pushf
not eax
add eax, 0xdd03345c
xor eax, 0xe15dde23
rol eax, 0x5f
popf
pushf
not eax
add eax, 0x81267931
xor eax, 0x8bf68538
rol eax, 0x4c
popf
pushf
not eax
add eax, 0xfdac8103
xor eax, 0x82e8bd8b
rol eax, 0xc3
popf
pushf
not eax
add eax, 0x85e3f842
xor eax, 0x92d44a6c
rol eax, 0x62
popf
jmp 0x1401100eb
push rax
pushf
mov eax, 0x7a82ee41
pushf
not eax
add eax, 0xdcf2c4cd
xor eax, 0xb1d11ac3
rol eax, 0x13
popf
pushf
not eax
add eax, 0xc4ae6e33
xor eax, 0xdf9283f5
rol eax, 0xb5
popf
pushf
not eax
add eax, 0xfd0fa2d4
xor eax, 0xe3d7e428
rol eax, 0x63
popf
jmp 0x1401100eb
add esi, dword [rsp + 0x40]
cmp esi, ebp
jb 0x140110747
mov eax, edi
sub eax, r15d
mov dword [rbx + 4], eax
cmp rdi, r14
jmp 0x140110257
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbx], eax
push rax
pushf
mov eax, 0x296d32f3
pushf
not eax
add eax, 0xcad7564f
xor eax, 0xbd171dab
rol eax, 0x29
popf
pushf
not eax
add eax, 0xa04d6dc4
xor eax, 0xe9c2a75e
rol eax, 0xc4
popf
pushf
not eax
add eax, 0xecf99824
xor eax, 0x9b896d49
rol eax, 0xa6
popf
pushf
not eax
add eax, 0xd64c068e
xor eax, 0xea7224e0
rol eax, 0xcf
popf
jmp 0x1401100eb
mov rax, rbx
mov rcx, qword [rsp + 0x1460]
xor rcx, rsp
call fcn.14010a793
lea r11, [rsp + 0x1470]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rsi
ret