Function at 0x1402c6f12
Capabilities:
Write file on windows

Disassembly:
push rax
pushf
mov eax, 0xe2a492d8
pushf
not eax
add eax, 0xece854fa
xor eax, 0xf51cba2b
rol eax, 2
popf
pushf
not eax
add eax, 0xcc715e6d
xor eax, 0xcef37e41
rol eax, 0xe1
popf
cmp eax, 4
jne 0x1402c6f4f
popf
pop rax
jmp 0x1402c728d
cmp eax, 0
jne 0x1402c6f5e
popf
pop rax
jmp 0x1402c7003
cmp eax, 3
jne 0x1402c6f6d
popf
pop rax
jmp 0x1402c7207
cmp eax, 1
jne 0x1402c6f7c
popf
pop rax
jmp 0x1402c712b
cmp eax, 0xa
jne 0x1402c6f8b
popf
pop rax
jmp 0x1402c763f
cmp eax, 7
jne 0x1402c6f9a
popf
pop rax
jmp 0x1402c74cd
cmp eax, 6
jne 0x1402c6fa9
popf
pop rax
jmp 0x1402c73bc
cmp eax, 0xb
jne 0x1402c6fb8
popf
pop rax
jmp 0x1402c7696
cmp eax, 0xc
jne 0x1402c6fc7
popf
pop rax
jmp 0x1402c76e4
cmp eax, 8
jne 0x1402c6fd6
popf
pop rax
jmp 0x1402c755f
cmp eax, 5
jne 0x1402c6fe5
popf
pop rax
jmp 0x1402c731c
cmp eax, 2
jne 0x1402c6ff4
popf
pop rax
jmp 0x1402c7163
cmp eax, 9
jne 0x1402c7003
popf
pop rax
jmp 0x1402c7633
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r12
push r14
push r15
mov eax, 0x745dc0db
pushf
not eax
add eax, 0xcfac3c8b
xor eax, 0x96a3a8d4
rol eax, 0x47
popf
pushf
not eax
add eax, 0xd356a264
xor eax, 0xe46ce477
rol eax, 0x89
popf
call fcn.1402c8c14
sub rsp, rax
mov rax, qword [0x14010a0d0]
xor rax, rsp
mov qword [rsp + 0x1460], rax
movsxd r10, edx
mov rbx, rcx
mov rax, r10
mov r14d, r9d
sar rax, 6
lea rcx, [0x1acf6f96a]
pushf
sub rcx, 0x6ce4279a
popf
and r10d, 0x3f
push r8
not r8
sub r14, r8
pop r8
sub r14, 1
mov r15, r8
mov rdi, r8
mov rax, qword [rcx + rax*8]
lea rdx, [r10 + r10*8]
mov r12, qword [rax + rdx*8 + 0x28]
xor eax, eax
mov qword [rbx], rax
cmp r8, r14
mov dword [rbx + 8], eax
jae 0x1402c70f8
push rax
pushf
mov eax, 0xcea401a2
pushf
not eax
add eax, 0x9f8d594a
xor eax, 0xafe3f15f
rol eax, 0xd9
popf
pushf
not eax
add eax, 0xbb5cea09
xor eax, 0xe926cf03
rol eax, 0
popf
pushf
not eax
add eax, 0xf13569af
xor eax, 0xcdfd4df6
rol eax, 0x4a
popf
jmp 0x1402c6f40
push rax
pushf
mov eax, 0x9c096c25
pushf
not eax
add eax, 0xf5c5766b
xor eax, 0x9f7f80be
rol eax, 0xda
popf
pushf
not eax
add eax, 0x8e670957
xor eax, 0x9f4bfbeb
rol eax, 0x1c
popf
jmp 0x1402c6f40
lea rax, [rsp + 0x50]
push rax
pushf
mov eax, 0x5cb62cb8
pushf
not eax
add eax, 0xa3114673
xor eax, 0x9e674b40
rol eax, 0x3f
popf
pushf
not eax
add eax, 0xd15297e2
xor eax, 0xe5346e64
rol eax, 2
popf
jmp 0x1402c6f40
cmp rdi, r14
jae 0x1402c71ae
push rax
pushf
mov eax, 0xd071e5e5
pushf
not eax
add eax, 0xfdd71657
xor eax, 0xca60285c
rol eax, 0x4a
popf
pushf
not eax
add eax, 0xe9504eba
xor eax, 0xdd6cef2d
rol eax, 0xfd
popf
pushf
not eax
add eax, 0xf4c7a901
xor eax, 0xf35739fa
rol eax, 0x4a
popf
jmp 0x1402c6f40
push rax
pushf
mov eax, 0xa8812131
pushf
not eax
add eax, 0xed8037be
xor eax, 0xb549d2dd
rol eax, 0x39
popf
pushf
not eax
add eax, 0xe3278762
xor eax, 0xa3f64147
rol eax, 0x9a
popf
pushf
not eax
add eax, 0xa33c2d59
xor eax, 0xc6e82619
rol eax, 0xfc
popf
pushf
not eax
add eax, 0xe507b918
xor eax, 0xe625a8b9
rol eax, 0x77
popf
jmp 0x1402c6f40
movzx ecx, word [rdi]
add rdi, 2
cmp cx, 0xa
jne 0x1402c725a
push rax
pushf
mov eax, 0x7b880460
pushf
not eax
add eax, 0xb84f38df
xor eax, 0xf9b036c4
rol eax, 8
popf
pushf
not eax
add eax, 0x8ba173c2
xor eax, 0xb7310c3d
rol eax, 0xe3
popf
pushf
not eax
add eax, 0xbe6027c8
xor eax, 0xa0e283ba
rol eax, 0x59
popf
jmp 0x1402c6f40
push rax
pushf
mov eax, 0xcf727845
pushf
not eax
add eax, 0xb85309c8
xor eax, 0x895abbdf
rol eax, 0x6d
popf
pushf
not eax
add eax, 0xdd05563b
xor eax, 0x97b90a03
rol eax, 0x13
popf
jmp 0x1402c6f40
mov edx, 0xecd0d398
pushf
not edx
add edx, 0xf708454d
xor edx, 0xabc1080a
rol edx, 0xee
popf
pushf
not edx
add edx, 0x965f4595
xor edx, 0xf7eff517
rol edx, 0xf5
popf
mov word [rax], dx
add rax, 2
push rax
pushf
mov eax, 0xccba1898
pushf
not eax
add eax, 0xd7f77de5
xor eax, 0x86fd6340
rol eax, 0x7b
popf
pushf
not eax
add eax, 0xee2ee4d9
xor eax, 0xecebc63e
rol eax, 0x68
popf
pushf
not eax
add eax, 0xcdc413ed
xor eax, 0xc214f277
rol eax, 0x2b
popf
pushf
not eax
add eax, 0xa43be9b4
xor eax, 0xf7b966ae
rol eax, 0x30
popf
jmp 0x1402c6f40
mov word [rax], cx
add rax, 2
lea rcx, [rsp + 0x6f8]
cmp rax, rcx
jb 0x1402c7389
push rax
pushf
mov eax, 0x2d60682b
pushf
not eax
add eax, 0xf9e70d42
xor eax, 0xa8b18d10
rol eax, 0x7d
popf
pushf
not eax
add eax, 0xc553364e
xor eax, 0xa82362fe
rol eax, 0x22
popf
pushf
not eax
add eax, 0xfa2324b6
xor eax, 0xb1e32555
rol eax, 0x66
popf
pushf
not eax
add eax, 0xd03d3ba9
xor eax, 0xeee10a67
rol eax, 0x38
popf
jmp 0x1402c6f40
push rax
pushf
mov eax, 0xd12a711e
pushf
not eax
add eax, 0xefc21498
xor eax, 0xfe93ee7c
rol eax, 0x98
popf
pushf
not eax
add eax, 0xb4e8efdb
xor eax, 0xaf28eb8d
rol eax, 0x4c
popf
jmp 0x1402c6f40
and qword [rsp + 0x38], 0
lea rcx, [rsp + 0x50]
and qword [rsp + 0x30], 0
lea r8, [rsp + 0x50]
sub rax, rcx
mov dword [rsp + 0x28], 0xd55
lea rcx, [rsp + 0x700]
sar rax, 1
mov qword [rsp + 0x20], rcx
mov r9d, eax
mov ecx, 0x50482c57
pushf
not ecx
add ecx, 0x9263451a
xor ecx, 0x9ede31b7
rol ecx, 0xd8
popf
pushf
not ecx
add ecx, 0xd26b9ce5
xor ecx, 0x838063e1
rol ecx, 0x24
popf
pushf
not ecx
add ecx, 0xb9414f6a
xor ecx, 0xc828fd3c
rol ecx, 0x39
popf
xor edx, edx
call fcn.14039a6dc
mov ebp, eax
test eax, eax
je 0x1402c749a
push rax
pushf
mov eax, 0x79795aaa
pushf
not eax
add eax, 0xbe556712
xor eax, 0x95ffc841
rol eax, 0x81
popf
pushf
not eax
add eax, 0xd3a9229f
xor eax, 0xd96dc721
rol eax, 0x1d
popf
pushf
not eax
add eax, 0xcf8156ce
xor eax, 0xcbba6f5e
rol eax, 0xd6
popf
pushf
not eax
add eax, 0xaccbba36
xor eax, 0x9c6d38cc
rol eax, 0x54
popf
jmp 0x1402c6f40
push rax
pushf
mov eax, 0x6e35ea9e
pushf
not eax
add eax, 0xfeb3a518
xor eax, 0xf5c90170
rol eax, 0x32
popf
pushf
not eax
add eax, 0x90445c17
xor eax, 0xaf1ec544
rol eax, 0x88
popf
jmp 0x1402c6f40
xor esi, esi
test eax, eax
je 0x1402c7519
push rax
pushf
mov eax, 0xf4345dab
pushf
not eax
add eax, 0xcb7ae6eb
xor eax, 0xe2535280
rol eax, 0xe1
popf
pushf
not eax
add eax, 0xa7849fac
xor eax, 0x8dd6d428
rol eax, 0x2a
popf
pushf
not eax
add eax, 0xe6fc8f6b
xor eax, 0xae0c78a0
rol eax, 0xe0
popf
jmp 0x1402c6f40
push rax
pushf
mov eax, 0x2de0a0ef
pushf
not eax
add eax, 0xeaafa951
xor eax, 0x97f9ea2e
rol eax, 0x2c
popf
pushf
not eax
add eax, 0xae8bc9f5
xor eax, 0xf9a14b0a
rol eax, 0x72
popf
pushf
not eax
add eax, 0xda8340b0
xor eax, 0xe9545993
rol eax, 2
popf
jmp 0x1402c6f40
and qword [rsp + 0x20], 0
lea rdx, [rsp + 0x700]
mov ecx, esi
lea r9, [rsp + 0x40]
mov r8d, ebp
push rcx
not rcx
sub rdx, rcx
pop rcx
sub rdx, 1
mov rcx, r12
sub r8d, esi
jmp 0x1402c758a
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x1402c75ed
push rax
pushf
mov eax, 0xf17be3d2
pushf
not eax
add eax, 0xf036da41
xor eax, 0xde83874d
rol eax, 0x52
popf
pushf
not eax
add eax, 0x964d00aa
xor eax, 0xdf7ff367
rol eax, 0xf1
popf
pushf
not eax
add eax, 0xea75bcb7
xor eax, 0xb3750fd9
rol eax, 0x1c
popf
pushf
not eax
add eax, 0x9c54861a
xor eax, 0xb62edd02
rol eax, 0x40
popf
jmp 0x1402c6f40
push rax
pushf
mov eax, 0x265a8e66
pushf
not eax
add eax, 0x9e6477e1
xor eax, 0xc4e5a619
rol eax, 0xa0
popf
pushf
not eax
add eax, 0xbea89206
xor eax, 0x904bcc50
rol eax, 0x27
popf
pushf
not eax
add eax, 0x8bc61ef5
xor eax, 0xa3fea5ac
rol eax, 6
popf
jmp 0x1402c6f40
add esi, dword [rsp + 0x40]
cmp esi, ebp
jb 0x1402c755f
mov eax, edi
sub eax, r15d
mov dword [rbx + 4], eax
cmp rdi, r14
jmp 0x1402c70ac
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbx], eax
push rax
pushf
mov eax, 0xbea8ed7c
pushf
not eax
add eax, 0x826040e1
xor eax, 0xf5a729f2
rol eax, 0xb1
popf
pushf
not eax
add eax, 0xfd9f954f
xor eax, 0xe511e6ff
rol eax, 0x9b
popf
pushf
not eax
add eax, 0x82f9582d
xor eax, 0xf38fc1ae
rol eax, 0xd3
popf
jmp 0x1402c6f40
mov rax, rbx
mov rcx, qword [rsp + 0x1460]
xor rcx, rsp
call fcn.1402ac965
lea r11, [rsp + 0x1470]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rsi
ret