Function at 0x1400b3472
Capabilities:
Write file on windows

Disassembly:
push rax
pushf
mov eax, 0x2e637c90
pushf
not eax
add eax, 0x7b373e0d
xor eax, 0x1262263d
rol eax, 0x7c
popf
pushf
not eax
add eax, 0x606bad78
xor eax, 0x4a808f03
rol eax, 0x36
popf
cmp eax, 0xb
jne 0x1400b34af
popf
pop rax
jmp 0x1400b3ce6
cmp eax, 8
jne 0x1400b34be
popf
pop rax
jmp 0x1400b3b29
cmp eax, 1
jne 0x1400b34cd
popf
pop rax
jmp 0x1400b36d7
cmp eax, 7
jne 0x1400b34dc
popf
pop rax
jmp 0x1400b3aaa
cmp eax, 6
jne 0x1400b34eb
popf
pop rax
jmp 0x1400b3992
cmp eax, 5
jne 0x1400b34fa
popf
pop rax
jmp 0x1400b38f2
cmp eax, 3
jne 0x1400b3509
popf
pop rax
jmp 0x1400b37b3
cmp eax, 2
jne 0x1400b3518
popf
pop rax
jmp 0x1400b370f
cmp eax, 4
jne 0x1400b3527
popf
pop rax
jmp 0x1400b385f
cmp eax, 0xa
jne 0x1400b3536
popf
pop rax
jmp 0x1400b3c98
cmp eax, 0
jne 0x1400b3545
popf
pop rax
jmp 0x1400b3563
cmp eax, 0xc
jne 0x1400b3554
popf
pop rax
jmp 0x1400b3d21
cmp eax, 9
jne 0x1400b3563
popf
pop rax
jmp 0x1400b3c17
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r12
push r14
push r15
mov eax, 0xf6023017
pushf
not eax
add eax, 0x1f992f21
xor eax, 0x7e771b8c
rol eax, 0xf7
popf
pushf
not eax
add eax, 0x4bdbc50e
xor eax, 0x1bb0e9ba
rol eax, 0x6a
popf
pushf
not eax
add eax, 0x73054691
xor eax, 0x4c278051
rol eax, 0x8d
popf
pushf
not eax
add eax, 0x52d705b9
xor eax, 0x281a0e73
rol eax, 0xd3
popf
call fcn.1400a9a64
sub rsp, rax
mov rax, qword [0x14002d7c0]
xor rax, rsp
mov qword [rsp + 0x1460], rax
movsxd r10, edx
mov rbx, rcx
mov rax, r10
mov r14d, r9d
sar rax, 6
lea rcx, [0x1823f4337]
pushf
sub rcx, 0x423c4d27
popf
and r10d, 0x3f
push r8
not r8
sub r14, r8
pop r8
sub r14, 1
mov r15, r8
mov rdi, r8
mov rax, qword [rcx + rax*8]
lea rdx, [r10 + r10*8]
mov r12, qword [rax + rdx*8 + 0x28]
xor eax, eax
mov qword [rbx], rax
cmp r8, r14
mov dword [rbx + 8], eax
jae 0x1400b367e
push rax
pushf
mov eax, 0xcc97029a
pushf
not eax
add eax, 0x4617a46c
xor eax, 0x23d8c0f7
rol eax, 0x24
popf
pushf
not eax
add eax, 0x63da08e5
xor eax, 0x2e9a4591
rol eax, 0xb7
popf
pushf
not eax
add eax, 0x51fa6439
xor eax, 0x5ab1ff7f
rol eax, 0x7b
popf
jmp 0x1400b34a0
push rax
pushf
mov eax, 0x29b36693
pushf
not eax
add eax, 0x7468060e
xor eax, 0x6acbed55
rol eax, 0xc9
popf
pushf
not eax
add eax, 0x4c3f8746
xor eax, 0x2b30205c
rol eax, 0x7f
popf
pushf
not eax
add eax, 0x3605f44b
xor eax, 0x2ef0c0b7
rol eax, 0x86
popf
pushf
not eax
add eax, 0x10c0333d
xor eax, 0x89458d1
rol eax, 0xd6
popf
jmp 0x1400b34a0
lea rax, [rsp + 0x50]
push rax
pushf
mov eax, 0x560d3109
pushf
not eax
add eax, 0x1a76c3d2
xor eax, 0x71b08592
rol eax, 0x4d
popf
pushf
not eax
add eax, 0x437e27aa
xor eax, 0x92d0ee
rol eax, 0xe4
popf
jmp 0x1400b34a0
cmp rdi, r14
jae 0x1400b375a
push rax
pushf
mov eax, 0xc29347e3
pushf
not eax
add eax, 0x661a7f04
xor eax, 0x7156c172
rol eax, 0x4c
popf
pushf
not eax
add eax, 0x5c373f13
xor eax, 0x5b262889
rol eax, 0x41
popf
pushf
not eax
add eax, 0x237c8b4f
xor eax, 0x53941b76
rol eax, 0xf8
popf
jmp 0x1400b34a0
push rax
pushf
mov eax, 0x9d13efc6
pushf
not eax
add eax, 0x2ebbb0d3
xor eax, 0x1c1f2cfe
rol eax, 0x93
popf
pushf
not eax
add eax, 0x4780ac88
xor eax, 0x6fa924cd
rol eax, 0xb0
popf
pushf
not eax
add eax, 0x3eb9de66
xor eax, 0xbb7ec65
rol eax, 0xf7
popf
pushf
not eax
add eax, 0x61bc8ddd
xor eax, 0x3f14fff7
rol eax, 0xed
popf
jmp 0x1400b34a0
movzx ecx, word [rdi]
add rdi, 2
cmp cx, 0xa
jne 0x1400b3806
push rax
pushf
mov eax, 0x8a4b2aea
pushf
not eax
add eax, 0x227e3b3a
xor eax, 0x4a1ca2de
rol eax, 0x81
popf
pushf
not eax
add eax, 0x68b9896a
xor eax, 0x7790c221
rol eax, 0xf9
popf
pushf
not eax
add eax, 0x28313471
xor eax, 0x78c99ea4
rol eax, 0x85
popf
jmp 0x1400b34a0
push rax
pushf
mov eax, 0x7576d568
pushf
not eax
add eax, 0x765ebe91
xor eax, 0x1ba9ada4
rol eax, 0x4e
popf
pushf
not eax
add eax, 0x272e8ee6
xor eax, 0xc744c8f
rol eax, 0x98
popf
pushf
not eax
add eax, 0x25c3e3f7
xor eax, 0x507d3492
rol eax, 0xb4
popf
pushf
not eax
add eax, 0x5658ad9c
xor eax, 0x4c4b2806
rol eax, 0x3c
popf
jmp 0x1400b34a0
mov edx, 0x1ad91408
pushf
not edx
add edx, 0x7d478bb2
xor edx, 0x754dedbd
rol edx, 0x55
popf
pushf
not edx
add edx, 0x6f9132d4
xor edx, 0x49effcff
rol edx, 0x19
popf
pushf
not edx
add edx, 0x34f0064
xor edx, 0x2853aabb
rol edx, 0x7d
popf
pushf
not edx
add edx, 0x769d03a5
xor edx, 0x390230da
rol edx, 0x41
popf
mov word [rax], dx
add rax, 2
push rax
pushf
mov eax, 0x20bdef8e
pushf
not eax
add eax, 0x1639e6c
xor eax, 0x1ff99d9a
rol eax, 0x2f
popf
pushf
not eax
add eax, 0x7e6282c9
xor eax, 0x64be830e
rol eax, 0x9e
popf
jmp 0x1400b34a0
mov word [rax], cx
add rax, 2
lea rcx, [rsp + 0x6f8]
cmp rax, rcx
jb 0x1400b394c
push rax
pushf
mov eax, 0x2be8b259
pushf
not eax
add eax, 0x9062346
xor eax, 0x4fffa92a
rol eax, 0x25
popf
pushf
not eax
add eax, 0x2390bfc0
xor eax, 0x2eafba4c
rol eax, 0x6f
popf
pushf
not eax
add eax, 0x3270d4a3
xor eax, 0x141fdcd5
rol eax, 0x79
popf
jmp 0x1400b34a0
push rax
pushf
mov eax, 0x741fad66
pushf
not eax
add eax, 0xae2c2c5
xor eax, 0x528cc8de
rol eax, 0x57
popf
pushf
not eax
add eax, 0x62532761
xor eax, 0x5a53ad21
rol eax, 0x57
popf
pushf
not eax
add eax, 0x599b8943
xor eax, 0x2f9df799
rol eax, 0x33
popf
jmp 0x1400b34a0
and qword [rsp + 0x38], 0
lea rcx, [rsp + 0x50]
and qword [rsp + 0x30], 0
lea r8, [rsp + 0x50]
push rcx
not rcx
add rax, rcx
pop rcx
add rax, 1
mov dword [rsp + 0x28], 0xd55
lea rcx, [rsp + 0x700]
sar rax, 1
mov qword [rsp + 0x20], rcx
mov r9d, eax
mov ecx, 0xd96e2394
pushf
not ecx
add ecx, 0x5cb7ace8
xor ecx, 0xd0eb4bc
rol ecx, 0x58
popf
pushf
not ecx
add ecx, 0x615246e
xor ecx, 0x68725d30
rol ecx, 0x31
popf
xor edx, edx
call fcn.14009bb08
mov ebp, eax
test eax, eax
je 0x1400b3a64
push rax
pushf
mov eax, 0xe38e58f6
pushf
not eax
add eax, 0x164a53a8
xor eax, 0x1ed3dada
rol eax, 0x48
popf
pushf
not eax
add eax, 0x79bc67a
xor eax, 0x106fec8a
rol eax, 0x44
popf
pushf
not eax
add eax, 0x5887b827
xor eax, 0x14929058
rol eax, 0x59
popf
pushf
not eax
add eax, 0xfdef46a
xor eax, 0x22f79715
rol eax, 0x80
popf
jmp 0x1400b34a0
push rax
pushf
mov eax, 0xc245cab2
pushf
not eax
add eax, 0x13cd4d1
xor eax, 0x39f27794
rol eax, 0xc5
popf
pushf
not eax
add eax, 0x34b564e1
xor eax, 0x4673e44c
rol eax, 0xeb
popf
pushf
not eax
add eax, 0x2277c84a
xor eax, 0x6fe067b6
rol eax, 0xcd
popf
jmp 0x1400b34a0
xor esi, esi
test eax, eax
je 0x1400b3af6
push rax
pushf
mov eax, 0xb81fe71
pushf
not eax
add eax, 0x7761e8ee
xor eax, 0x49707ac6
rol eax, 0x28
popf
pushf
not eax
add eax, 0x9f2ff44
xor eax, 0x2094f8b4
rol eax, 0xba
popf
pushf
not eax
add eax, 0x6635a70a
xor eax, 0x1049cd13
rol eax, 0xbb
popf
jmp 0x1400b34a0
push rax
pushf
mov eax, 0xcf022fb0
pushf
not eax
add eax, 0x2ba8aef5
xor eax, 0x4c1968fc
rol eax, 0x8b
popf
pushf
not eax
add eax, 0x6e9484be
xor eax, 0x75c2c438
rol eax, 0xef
popf
jmp 0x1400b34a0
and qword [rsp + 0x20], 0
lea rdx, [rsp + 0x700]
mov ecx, esi
lea r9, [rsp + 0x40]
mov r8d, ebp
push rcx
not rcx
sub rdx, rcx
pop rcx
sub rdx, 1
mov rcx, r12
push rsi
not esi
add r8d, esi
pop rsi
add r8d, 1
jmp 0x1400b3b5c
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x1400b3bbe
push rax
pushf
mov eax, 0x95048c12
pushf
not eax
add eax, 0x138b1939
xor eax, 0x22b7fc4e
rol eax, 1
popf
pushf
not eax
add eax, 0x4d36f9d0
xor eax, 0x5ce9e88f
rol eax, 3
popf
pushf
not eax
add eax, 0x2c9ca1cb
xor eax, 0x206a2f6
rol eax, 0xda
popf
pushf
not eax
add eax, 0x3a6f3c49
xor eax, 0x6ec59416
rol eax, 0x30
popf
jmp 0x1400b34a0
push rax
pushf
mov eax, 0x766ecc5f
pushf
not eax
add eax, 0x23ecd8c7
xor eax, 0x36ff1fe5
rol eax, 0x46
popf
pushf
not eax
add eax, 0x65cb01ca
xor eax, 0x2c47e13f
rol eax, 0xcf
popf
pushf
not eax
add eax, 0x3ea7dac5
xor eax, 0x4c85daec
rol eax, 0xc4
popf
pushf
not eax
add eax, 0x222ec21e
xor eax, 0x68d35c
rol eax, 0xba
popf
jmp 0x1400b34a0
add esi, dword [rsp + 0x40]
cmp esi, ebp
jb 0x1400b3c52
push rax
pushf
mov eax, 0xd3f6fb04
pushf
not eax
add eax, 0x5c72a9c6
xor eax, 0x54dee680
rol eax, 0x57
popf
pushf
not eax
add eax, 0x3ea8d4e5
xor eax, 0x1dae8240
rol eax, 0x4f
popf
jmp 0x1400b34a0
push rax
pushf
mov eax, 0x9694a133
pushf
not eax
add eax, 0x1b0a8e9b
xor eax, 0x271dbdb5
rol eax, 0x68
popf
pushf
not eax
add eax, 0x6152fdf2
xor eax, 0x72996311
rol eax, 0x68
popf
pushf
not eax
add eax, 0x1a280582
xor eax, 0x7fdfa5f6
rol eax, 0xeb
popf
jmp 0x1400b34a0
mov eax, edi
push r15
not r15d
add eax, r15d
pop r15
add eax, 1
mov dword [rbx + 4], eax
cmp rdi, r14
jmp 0x1400b3632
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbx], eax
push rax
pushf
mov eax, 0xcf2614bf
pushf
not eax
add eax, 0x44d49df7
xor eax, 0x3782cbea
rol eax, 0xf2
popf
pushf
not eax
add eax, 0x44812119
xor eax, 0x90c1867
rol eax, 0xc6
popf
jmp 0x1400b34a0
mov rax, rbx
mov rcx, qword [rsp + 0x1460]
xor rcx, rsp
call fcn.1400a9158
lea r11, [rsp + 0x1470]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rsi
ret