Function at 0x1402a8539
Capabilities:
Write file on windows

Disassembly:
push rax
pushf
mov eax, 0x7115cd07
pushf
not eax
add eax, 0xc864cbb9
xor eax, 0x8cb4c770
rol eax, 0xca
popf
pushf
not eax
add eax, 0xd50d7a92
xor eax, 0xec267322
rol eax, 0x59
popf
cmp eax, 4
jne 0x1402a8576
popf
pop rax
jmp 0x1402a88ec
cmp eax, 0
jne 0x1402a8585
popf
pop rax
jmp 0x1402a862a
cmp eax, 3
jne 0x1402a8594
popf
pop rax
jmp 0x1402a8879
cmp eax, 1
jne 0x1402a85a3
popf
pop rax
jmp 0x1402a878a
cmp eax, 0xa
jne 0x1402a85b2
popf
pop rax
jmp 0x1402a8c9c
cmp eax, 7
jne 0x1402a85c1
popf
pop rax
jmp 0x1402a8af1
cmp eax, 6
jne 0x1402a85d0
popf
pop rax
jmp 0x1402a89e2
cmp eax, 0xb
jne 0x1402a85df
popf
pop rax
jmp 0x1402a8ce0
cmp eax, 0xc
jne 0x1402a85ee
popf
pop rax
jmp 0x1402a8d41
cmp eax, 8
jne 0x1402a85fd
popf
pop rax
jmp 0x1402a8ba9
cmp eax, 5
jne 0x1402a860c
popf
pop rax
jmp 0x1402a8955
cmp eax, 2
jne 0x1402a861b
popf
pop rax
jmp 0x1402a87d5
cmp eax, 9
jne 0x1402a862a
popf
pop rax
jmp 0x1402a8c90
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r12
push r14
push r15
mov eax, 0xed8bb336
pushf
not eax
add eax, 0xae061400
xor eax, 0x81ebd106
rol eax, 0x45
popf
pushf
not eax
add eax, 0xc584ab88
xor eax, 0xd7be6c06
rol eax, 0xfc
popf
pushf
not eax
add eax, 0xe832abf4
xor eax, 0x88056305
rol eax, 0xbd
popf
pushf
not eax
add eax, 0xe80034d4
xor eax, 0xec81d5b0
rol eax, 0x9b
popf
call fcn.1402a9954
sub rsp, rax
mov rax, qword [0x140120098]
xor rax, rsp
mov qword [rsp + 0x1460], rax
movsxd r10, edx
mov rbx, rcx
mov rax, r10
mov r14d, r9d
sar rax, 6
lea rcx, [0x1801e75a7]
pushf
sub rcx, 0x400c5167
popf
and r10d, 0x3f
push r8
not r8
sub r14, r8
pop r8
sub r14, 1
mov r15, r8
mov rdi, r8
mov rax, qword [rcx + rax*8]
lea rdx, [r10 + r10*8]
mov r12, qword [rax + rdx*8 + 0x28]
xor eax, eax
mov qword [rbx], rax
cmp r8, r14
mov dword [rbx + 8], eax
jae 0x1402a8757
push rax
pushf
mov eax, 0x10979ecb
pushf
not eax
add eax, 0x9f6e8b04
xor eax, 0xfac7019c
rol eax, 0x2c
popf
pushf
not eax
add eax, 0xd7179bf8
xor eax, 0xe6d3a78b
rol eax, 7
popf
pushf
not eax
add eax, 0xc4d18c18
xor eax, 0xfe94ebb1
rol eax, 1
popf
pushf
not eax
add eax, 0xe89861bd
xor eax, 0x81165409
rol eax, 0x2e
popf
jmp 0x1402a8567
push rax
pushf
mov eax, 0x89de149
pushf
not eax
add eax, 0xdfdd34e8
xor eax, 0xb3ce74ce
rol eax, 0x61
popf
pushf
not eax
add eax, 0x9f44a64e
xor eax, 0xd56457ad
rol eax, 0xd1
popf
jmp 0x1402a8567
lea rax, [rsp + 0x50]
push rax
pushf
mov eax, 0xb0056d03
pushf
not eax
add eax, 0xb1fd288e
xor eax, 0xdf55bcb6
rol eax, 0x71
popf
pushf
not eax
add eax, 0xce29d358
xor eax, 0xac7057a9
rol eax, 0xdf
popf
pushf
not eax
add eax, 0xf537993d
xor eax, 0xeb57585f
rol eax, 0xf4
popf
jmp 0x1402a8567
cmp rdi, r14
jae 0x1402a8833
push rax
pushf
mov eax, 0x6b4728c7
pushf
not eax
add eax, 0xaf5520ec
xor eax, 0x80812e63
rol eax, 0x43
popf
pushf
not eax
add eax, 0x89d82c3a
xor eax, 0x8bfad154
rol eax, 0xd3
popf
pushf
not eax
add eax, 0xa93ddd0c
xor eax, 0x9f29c39a
rol eax, 0x6e
popf
pushf
not eax
add eax, 0xd9a93f9f
xor eax, 0xeedc00b9
rol eax, 0x9a
popf
jmp 0x1402a8567
push rax
pushf
mov eax, 0x13632936
pushf
not eax
add eax, 0xb2db4af4
xor eax, 0x86ee8b3d
rol eax, 0xff
popf
pushf
not eax
add eax, 0xebb6af20
xor eax, 0xca72b72f
rol eax, 0x1c
popf
pushf
not eax
add eax, 0x821be49b
xor eax, 0x80d2456b
rol eax, 0x5b
popf
jmp 0x1402a8567
movzx ecx, word [rdi]
add rdi, 2
cmp cx, 0xa
jne 0x1402a88b9
push rax
pushf
mov eax, 0x6c55692a
pushf
not eax
add eax, 0xcef2c742
xor eax, 0xd1506c0d
rol eax, 0xc2
popf
pushf
not eax
add eax, 0x978bee9f
xor eax, 0xc8572630
rol eax, 0xa0
popf
jmp 0x1402a8567
push rax
pushf
mov eax, 0xc8102180
pushf
not eax
add eax, 0x82742f05
xor eax, 0xf57980fb
rol eax, 0xc8
popf
pushf
not eax
add eax, 0xeb0471b2
xor eax, 0xcff6f262
rol eax, 0xa9
popf
jmp 0x1402a8567
mov edx, 0xf24036e7
pushf
not edx
add edx, 0xb817cc4f
xor edx, 0xb3ca6a69
rol edx, 0xc9
popf
pushf
not edx
add edx, 0xc8757661
xor edx, 0x96775974
rol edx, 0x27
popf
mov word [rax], dx
add rax, 2
push rax
pushf
mov eax, 0xdc57fc94
pushf
not eax
add eax, 0x87459843
xor eax, 0x88f1b4a3
rol eax, 0xd0
popf
pushf
not eax
add eax, 0xe369894c
xor eax, 0xb45c622f
rol eax, 0x18
popf
jmp 0x1402a8567
mov word [rax], cx
add rax, 2
lea rcx, [rsp + 0x6f8]
cmp rax, rcx
jb 0x1402a89af
push rax
pushf
mov eax, 0x90381421
pushf
not eax
add eax, 0xfe51e4d4
xor eax, 0xbd3c9228
rol eax, 0xd8
popf
pushf
not eax
add eax, 0xe9c89432
xor eax, 0xdbcda133
rol eax, 0x81
popf
pushf
not eax
add eax, 0xb4d81433
xor eax, 0x89667479
rol eax, 0xc9
popf
jmp 0x1402a8567
push rax
pushf
mov eax, 0xc982df6
pushf
not eax
add eax, 0xffa6658f
xor eax, 0xba3f9a00
rol eax, 8
popf
pushf
not eax
add eax, 0xb7cf7f07
xor eax, 0x8621e6bc
rol eax, 0x21
popf
jmp 0x1402a8567
and qword [rsp + 0x38], 0
lea rcx, [rsp + 0x50]
and qword [rsp + 0x30], 0
lea r8, [rsp + 0x50]
sub rax, rcx
mov dword [rsp + 0x28], 0xd55
lea rcx, [rsp + 0x700]
sar rax, 1
mov qword [rsp + 0x20], rcx
mov r9d, eax
mov ecx, 0xdf669f8c
pushf
not ecx
add ecx, 0xf3118a01
xor ecx, 0xb55f0924
rol ecx, 0xbe
popf
pushf
not ecx
add ecx, 0xc1e04106
xor ecx, 0x879fe831
rol ecx, 0xd3
popf
xor edx, edx
call fcn.1402f3aa8
mov ebp, eax
test eax, eax
je 0x1402a8a98
push rax
pushf
mov eax, 0x6b74d732
pushf
not eax
add eax, 0x8d528d9d
xor eax, 0xb979ca05
rol eax, 0x2a
popf
pushf
not eax
add eax, 0xdd2459b5
xor eax, 0x9d52b731
rol eax, 0x34
popf
pushf
not eax
add eax, 0x98b0aad4
xor eax, 0xd27d44d1
rol eax, 0xcf
popf
jmp 0x1402a8567
push rax
pushf
mov eax, 0x8141b2b5
pushf
not eax
add eax, 0xaf4864f5
xor eax, 0xfbe727a9
rol eax, 0xd1
popf
pushf
not eax
add eax, 0xee863eac
xor eax, 0xee7b7311
rol eax, 0x61
popf
pushf
not eax
add eax, 0xda5bfb60
xor eax, 0xf4a9b6be
rol eax, 0x57
popf
pushf
not eax
add eax, 0xe46e20c3
xor eax, 0xfab2a202
rol eax, 0x93
popf
jmp 0x1402a8567
xor esi, esi
test eax, eax
je 0x1402a8b50
push rax
pushf
mov eax, 0x921413f4
pushf
not eax
add eax, 0xd362945d
xor eax, 0xd329d45d
rol eax, 0x50
popf
pushf
not eax
add eax, 0xc662f4fd
xor eax, 0xcdefa0aa
rol eax, 0x1f
popf
pushf
not eax
add eax, 0xcecfa1e6
xor eax, 0xb2d6c83b
rol eax, 0xfe
popf
pushf
not eax
add eax, 0xd7c7a96b
xor eax, 0x80b9c72b
rol eax, 0x35
popf
jmp 0x1402a8567
push rax
pushf
mov eax, 0x861f751e
pushf
not eax
add eax, 0x8bf0332e
xor eax, 0xc18b11ce
rol eax, 0xbb
popf
pushf
not eax
add eax, 0xe11c3689
xor eax, 0x8f2c4034
rol eax, 0x34
popf
pushf
not eax
add eax, 0xfd228f7c
xor eax, 0xb1d81569
rol eax, 0xf5
popf
pushf
not eax
add eax, 0x97e69480
xor eax, 0xaa6b77eb
rol eax, 0x89
popf
jmp 0x1402a8567
and qword [rsp + 0x20], 0
lea rdx, [rsp + 0x700]
mov ecx, esi
lea r9, [rsp + 0x40]
mov r8d, ebp
push rcx
not rcx
sub rdx, rcx
pop rcx
sub rdx, 1
mov rcx, r12
sub r8d, esi
jmp 0x1402a8bd4
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x1402a8c37
push rax
pushf
mov eax, 0x57f8dd32
pushf
not eax
add eax, 0xdcb66baf
xor eax, 0x841146fd
rol eax, 0x70
popf
pushf
not eax
add eax, 0x90a47597
xor eax, 0xf828608d
rol eax, 0xce
popf
pushf
not eax
add eax, 0xe398b623
xor eax, 0xf202c1c8
rol eax, 0xc1
popf
pushf
not eax
add eax, 0xc99b3a62
xor eax, 0xf032e290
rol eax, 0xac
popf
jmp 0x1402a8567
push rax
pushf
mov eax, 0x8838c73
pushf
not eax
add eax, 0xe7a80420
xor eax, 0xcc647344
rol eax, 0x16
popf
pushf
not eax
add eax, 0xf690e5db
xor eax, 0xe6882dad
rol eax, 0xab
popf
pushf
not eax
add eax, 0xd4387816
xor eax, 0xe27167b6
rol eax, 0x92
popf
pushf
not eax
add eax, 0xa5e98867
xor eax, 0xda1c4a90
rol eax, 0xfa
popf
jmp 0x1402a8567
add esi, dword [rsp + 0x40]
cmp esi, ebp
jb 0x1402a8ba9
mov eax, edi
sub eax, r15d
mov dword [rbx + 4], eax
cmp rdi, r14
jmp 0x1402a86f9
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbx], eax
push rax
pushf
mov eax, 0x711b1f8
pushf
not eax
add eax, 0xa5eaf5d7
xor eax, 0xf227cc81
rol eax, 0xe3
popf
pushf
not eax
add eax, 0x84b4591e
xor eax, 0xab9e184f
rol eax, 0xb
popf
pushf
not eax
add eax, 0xcd166c4e
xor eax, 0xfe7309e0
rol eax, 0xcf
popf
pushf
not eax
add eax, 0xbb11c7ec
xor eax, 0xa757a7a3
rol eax, 0xc7
popf
jmp 0x1402a8567
mov rax, rbx
mov rcx, qword [rsp + 0x1460]
xor rcx, rsp
call fcn.1402a1891
lea r11, [rsp + 0x1470]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rsi
ret