Function at 0x1405e4ff6
Capabilities:
Write file on windows

Disassembly:
push rax
pushf
mov eax, 0xf20249c
pushf
not eax
add eax, 0x822daed5
xor eax, 0xebe9e192
rol eax, 0xdc
popf
pushf
not eax
add eax, 0x822fba03
xor eax, 0xbe31bc9b
rol eax, 0xc7
popf
pushf
not eax
add eax, 0xcbc2113b
xor eax, 0x835a2787
rol eax, 0x65
popf
cmp eax, 4
jne 0x1405e5046
popf
pop rax
jmp 0x1405e52f2
cmp eax, 0
jne 0x1405e5055
popf
pop rax
jmp 0x1405e50eb
cmp eax, 3
jne 0x1405e5064
popf
pop rax
jmp 0x1405e5249
cmp eax, 1
jne 0x1405e5073
popf
pop rax
jmp 0x1405e5208
cmp eax, 0xa
jne 0x1405e5082
popf
pop rax
jmp 0x1405e5645
cmp eax, 7
jne 0x1405e5091
popf
pop rax
jmp 0x1405e54ab
cmp eax, 6
jne 0x1405e50a0
popf
pop rax
jmp 0x1405e5418
cmp eax, 0xb
jne 0x1405e50af
popf
pop rax
jmp 0x1405e5693
cmp eax, 9
jne 0x1405e50be
popf
pop rax
jmp 0x1405e55f9
cmp eax, 8
jne 0x1405e50cd
popf
pop rax
jmp 0x1405e5555
cmp eax, 5
jne 0x1405e50dc
popf
pop rax
jmp 0x1405e5354
cmp eax, 2
jne 0x1405e50eb
popf
pop rax
jmp 0x1405e5240
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r14
mov eax, 0x7f8c5791
pushf
not eax
add eax, 0xc02e747c
xor eax, 0xc7427a87
rol eax, 0x8c
popf
pushf
not eax
add eax, 0xbfd6c925
xor eax, 0xb97ba0a6
rol eax, 0x78
popf
call fcn.140674ffd
sub rsp, rax
mov rax, qword [0x14004b080]
xor rax, rsp
mov qword [rsp + 0x1440], rax
movsxd r10, edx
mov rdi, rcx
mov rax, r10
mov ebp, r9d
sar rax, 6
lea rcx, [0x19864a987]
pushf
sub rcx, 0x580b0957
popf
and r10d, 0x3f
push r8
not r8
sub rbp, r8
pop r8
sub rbp, 1
mov rsi, r8
mov rax, qword [rcx + rax*8]
lea rdx, [r10 + r10*8]
mov r14, qword [rax + rdx*8 + 0x28]
xor eax, eax
mov qword [rdi], rax
mov dword [rdi + 8], eax
cmp r8, rbp
jae 0x1405e51c2
push rax
pushf
mov eax, 0xba781d4e
pushf
not eax
add eax, 0xeb1590ae
xor eax, 0xa52c45d3
rol eax, 0xdf
popf
pushf
not eax
add eax, 0xd4578589
xor eax, 0x897e6a42
rol eax, 0xb1
popf
jmp 0x1405e5037
push rax
pushf
mov eax, 0x99c60cd5
pushf
not eax
add eax, 0xa4ec33d6
xor eax, 0xebf3e1da
rol eax, 0x75
popf
pushf
not eax
add eax, 0xd99b4317
xor eax, 0x9b67ef60
rol eax, 0x5d
popf
pushf
not eax
add eax, 0x8cd8b3b8
xor eax, 0xc02d9adb
rol eax, 0xa0
popf
jmp 0x1405e5037
lea rbx, [rsp + 0x40]
push rax
pushf
mov eax, 0xe77301f
pushf
not eax
add eax, 0xe7a9c17b
xor eax, 0xc4009cd5
rol eax, 0xdf
popf
pushf
not eax
add eax, 0xe2a349fd
xor eax, 0xd40a4331
rol eax, 0x3f
popf
jmp 0x1405e5037
cmp rsi, rbp
jae 0x1405e5418
mov al, byte [rsi]
inc rsi
cmp al, 0xa
jne 0x1405e5298
push rax
pushf
mov eax, 0xb1c29831
pushf
not eax
add eax, 0xbe93ff44
xor eax, 0x9ea4c35b
rol eax, 0x18
popf
pushf
not eax
add eax, 0xcd4f64c5
xor eax, 0xd4166cf5
rol eax, 7
popf
pushf
not eax
add eax, 0xce9d172b
xor eax, 0xf95b2c77
rol eax, 0x7f
popf
jmp 0x1405e5037
push rax
pushf
mov eax, 0x8c6a01e9
pushf
not eax
add eax, 0x8e2c1313
xor eax, 0x930fd69d
rol eax, 0xdb
popf
pushf
not eax
add eax, 0xb74501bd
xor eax, 0xbf980ba5
rol eax, 0x5f
popf
pushf
not eax
add eax, 0xda659a61
xor eax, 0x9344ba41
rol eax, 0x84
popf
pushf
not eax
add eax, 0xc2a51893
xor eax, 0xb9b4dd71
rol eax, 0x72
popf
jmp 0x1405e5037
inc dword [rdi + 8]
mov byte [rbx], 0xd
inc rbx
push rax
pushf
mov eax, 0x65f2aa9a
pushf
not eax
add eax, 0xaaaf6105
xor eax, 0xa381181e
rol eax, 0xda
popf
pushf
not eax
add eax, 0x81df9673
xor eax, 0x831469e3
rol eax, 2
popf
pushf
not eax
add eax, 0xbe6f266d
xor eax, 0x8b7c741d
rol eax, 0x6d
popf
pushf
not eax
add eax, 0x86458e01
xor eax, 0x9f225d9b
rol eax, 0xdd
popf
jmp 0x1405e5037
mov byte [rbx], al
inc rbx
lea rax, [rsp + 0x143f]
cmp rbx, rax
jb 0x1405e53bf
push rax
pushf
mov eax, 0xecfcf1f5
pushf
not eax
add eax, 0xa4d2972b
xor eax, 0xd9efbf39
rol eax, 0xad
popf
pushf
not eax
add eax, 0xfc3c4552
xor eax, 0x92878c9c
rol eax, 0x2f
popf
pushf
not eax
add eax, 0xdb3f6853
xor eax, 0xa951e57b
rol eax, 0xd
popf
pushf
not eax
add eax, 0xb54437fa
xor eax, 0xce76455d
rol eax, 0xa5
popf
jmp 0x1405e5037
push rax
pushf
mov eax, 0x4023f28d
pushf
not eax
add eax, 0xbc2138b3
xor eax, 0xdc618a14
rol eax, 0x99
popf
pushf
not eax
add eax, 0xc0c2cf39
xor eax, 0xb51654d2
rol eax, 0xd6
popf
pushf
not eax
add eax, 0xc1efb8a9
xor eax, 0xee757fd8
rol eax, 0xe1
popf
pushf
not eax
add eax, 0xdc96b258
xor eax, 0xc614f0d6
rol eax, 0x9b
popf
jmp 0x1405e5037
and dword [rsp + 0x30], 0
lea rax, [rsp + 0x40]
and qword [rsp + 0x20], 0
lea r9, [rsp + 0x30]
sub ebx, eax
lea rdx, [rsp + 0x40]
mov r8d, ebx
mov rcx, r14
jmp 0x1405e543b
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x1405e5478
push rax
pushf
mov eax, 0x9789d0d1
pushf
not eax
add eax, 0xd075a3b2
xor eax, 0xb2b52ed6
rol eax, 0x42
popf
pushf
not eax
add eax, 0xcfbce87c
xor eax, 0xa64137a1
rol eax, 0x72
popf
jmp 0x1405e5037
push rax
pushf
mov eax, 0xbb1269eb
pushf
not eax
add eax, 0xb1228f95
xor eax, 0xd3fedc0b
rol eax, 0x3c
popf
pushf
not eax
add eax, 0xd37ac858
xor eax, 0xb05bd8bd
rol eax, 0x4b
popf
jmp 0x1405e5037
mov eax, dword [rsp + 0x30]
add dword [rdi + 4], eax
cmp eax, ebx
jb 0x1405e54fc
push rax
pushf
mov eax, 0x696a9613
pushf
not eax
add eax, 0xc832a52b
xor eax, 0xb826728a
rol eax, 0x57
popf
pushf
not eax
add eax, 0xf9e5ce83
xor eax, 0xa41ec94e
rol eax, 0xd4
popf
pushf
not eax
add eax, 0xce166771
xor eax, 0xed6978a7
rol eax, 0x71
popf
jmp 0x1405e5037
push rax
pushf
mov eax, 0xfa0fc0ec
pushf
not eax
add eax, 0xef740ca3
xor eax, 0x867c05a0
rol eax, 0x70
popf
pushf
not eax
add eax, 0x8c15cc68
xor eax, 0xb431b3b6
rol eax, 0xe3
popf
pushf
not eax
add eax, 0xdf6c787c
xor eax, 0xf0295e71
rol eax, 0xe3
popf
pushf
not eax
add eax, 0xb657c935
xor eax, 0xaf736241
rol eax, 0x54
popf
jmp 0x1405e5037
cmp rsi, rbp
jb 0x1405e55a0
push rax
pushf
mov eax, 0x42ed1c35
pushf
not eax
add eax, 0x8c3ac053
xor eax, 0xfdd4c6f8
rol eax, 0xc9
popf
pushf
not eax
add eax, 0x854c759b
xor eax, 0xcf759342
rol eax, 0x95
popf
pushf
not eax
add eax, 0xb47ea616
xor eax, 0x860bc7ae
rol eax, 0x73
popf
jmp 0x1405e5037
push rax
pushf
mov eax, 0x46103cdb
pushf
not eax
add eax, 0xf5d93917
xor eax, 0xace00dd7
rol eax, 0xb9
popf
pushf
not eax
add eax, 0x874fe0d4
xor eax, 0xcec14f11
rol eax, 0x27
popf
pushf
not eax
add eax, 0xe0c7f38b
xor eax, 0x887dd7d9
rol eax, 0x1a
popf
pushf
not eax
add eax, 0xe3c02d97
xor eax, 0xd5efc242
rol eax, 9
popf
jmp 0x1405e5037
jmp 0x1405e5693
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rdi], eax
push rax
pushf
mov eax, 0x910526e3
pushf
not eax
add eax, 0xa4b7251c
xor eax, 0xcf01877d
rol eax, 0x1f
popf
pushf
not eax
add eax, 0xdd032fa7
xor eax, 0xff4c7ff4
rol eax, 0x2a
popf
pushf
not eax
add eax, 0x97f57b77
xor eax, 0xfca1bb2f
rol eax, 0xcb
popf
jmp 0x1405e5037
mov rax, rdi
mov rcx, qword [rsp + 0x1440]
xor rcx, rsp
call fcn.14066b1de
lea r11, [rsp + 0x1450]
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x30]
mov rsp, r11
pop r14
pop rdi
pop rsi
ret