Function at 0x140039706
Capabilities:
Write file on windows

Disassembly:
push rax
pushf
mov eax, 0xae071e22
pushf
not eax
add eax, 0xae1adb45
xor eax, 0xd3352b86
rol eax, 0x7c
popf
pushf
not eax
add eax, 0xe984ca28
xor eax, 0x9c5260bd
rol eax, 0x5b
popf
cmp eax, 4
jne 0x140039743
popf
pop rax
jmp 0x140039a02
cmp eax, 0
jne 0x140039752
popf
pop rax
jmp 0x1400397e8
cmp eax, 3
jne 0x140039761
popf
pop rax
jmp 0x14003996c
cmp eax, 1
jne 0x140039770
popf
pop rax
jmp 0x14003992b
cmp eax, 0xa
jne 0x14003977f
popf
pop rax
jmp 0x140039cb8
cmp eax, 7
jne 0x14003978e
popf
pop rax
jmp 0x140039b6a
cmp eax, 6
jne 0x14003979d
popf
pop rax
jmp 0x140039adc
cmp eax, 0xb
jne 0x1400397ac
popf
pop rax
jmp 0x140039d06
cmp eax, 9
jne 0x1400397bb
popf
pop rax
jmp 0x140039c7f
cmp eax, 8
jne 0x1400397ca
popf
pop rax
jmp 0x140039c01
cmp eax, 5
jne 0x1400397d9
popf
pop rax
jmp 0x140039a3e
cmp eax, 2
jne 0x1400397e8
popf
pop rax
jmp 0x140039963
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r14
mov eax, 0x913f6ff4
pushf
not eax
add eax, 0xd8666c87
xor eax, 0xf5b8c0c7
rol eax, 0xfc
popf
pushf
not eax
add eax, 0x97ceccc2
xor eax, 0xd5c96b7c
rol eax, 0xf3
popf
pushf
not eax
add eax, 0xa72b536d
xor eax, 0x8b2420a0
rol eax, 0xdf
popf
call fcn.14006c02c
sub rsp, rax
mov rax, qword [0x14001d008]
xor rax, rsp
mov qword [rsp + 0x1440], rax
movsxd r10, edx
mov rdi, rcx
mov rax, r10
mov ebp, r9d
sar rax, 6
lea rcx, [0x19146346e]
pushf
sub rcx, 0x51444e6e
popf
and r10d, 0x3f
push r8
not r8
sub rbp, r8
pop r8
sub rbp, 1
mov rsi, r8
mov rax, qword [rcx + rax*8]
lea rdx, [r10 + r10*8]
mov r14, qword [rax + rdx*8 + 0x28]
xor eax, eax
mov qword [rdi], rax
mov dword [rdi + 8], eax
cmp r8, rbp
jae 0x1400398e5
push rax
pushf
mov eax, 0xbc1f2595
pushf
not eax
add eax, 0x8f87c7d5
xor eax, 0xea4e578c
rol eax, 0x87
popf
pushf
not eax
add eax, 0xbffff6cb
xor eax, 0xd5ed361d
rol eax, 0x3f
popf
pushf
not eax
add eax, 0xedf76c5a
xor eax, 0xf14356e0
rol eax, 0x3b
popf
jmp 0x140039734
push rax
pushf
mov eax, 0x700e6df6
pushf
not eax
add eax, 0xf53f39f8
xor eax, 0xe14ba686
rol eax, 0x5e
popf
pushf
not eax
add eax, 0xbf8225fd
xor eax, 0xbd5ea18d
rol eax, 0x2b
popf
pushf
not eax
add eax, 0xe01918a6
xor eax, 0xf0c273cc
rol eax, 0xb7
popf
jmp 0x140039734
lea rbx, [rsp + 0x40]
push rax
pushf
mov eax, 0x6a0deaea
pushf
not eax
add eax, 0xe0f10a46
xor eax, 0x910f025f
rol eax, 0x49
popf
pushf
not eax
add eax, 0xc408cb69
xor eax, 0xebcec19d
rol eax, 0xff
popf
jmp 0x140039734
cmp rsi, rbp
jae 0x140039adc
mov al, byte [rsi]
inc rsi
cmp al, 0xa
jne 0x1400399a8
push rax
pushf
mov eax, 0xa747e97f
pushf
not eax
add eax, 0xe5e47618
xor eax, 0xabaa8703
rol eax, 0x40
popf
pushf
not eax
add eax, 0xc3a0f573
xor eax, 0xae6ae9d7
rol eax, 0xa3
popf
jmp 0x140039734
push rax
pushf
mov eax, 0xbdc78732
pushf
not eax
add eax, 0xb3031c79
xor eax, 0xb25bbfa8
rol eax, 0xe
popf
pushf
not eax
add eax, 0xee7d5bfb
xor eax, 0xf4ea1fbe
rol eax, 0xcb
popf
pushf
not eax
add eax, 0xd94784bb
xor eax, 0xeddcdd99
rol eax, 6
popf
pushf
not eax
add eax, 0xc113f6bd
xor eax, 0xef709097
rol eax, 0xb0
popf
jmp 0x140039734
inc dword [rdi + 8]
mov byte [rbx], 0xd
inc rbx
push rax
pushf
mov eax, 0x5c334636
pushf
not eax
add eax, 0xb18692b8
xor eax, 0xc51f6497
rol eax, 0x93
popf
pushf
not eax
add eax, 0xf0575c9e
xor eax, 0xaf8ada3c
rol eax, 0xcd
popf
jmp 0x140039734
mov byte [rbx], al
inc rbx
lea rax, [rsp + 0x143f]
cmp rbx, rax
jb 0x140039aa9
push rax
pushf
mov eax, 0x18246027
pushf
not eax
add eax, 0xd1d6bec7
xor eax, 0xd04fb49b
rol eax, 0xb5
popf
pushf
not eax
add eax, 0xe0b81c2c
xor eax, 0xd7927e0a
rol eax, 0xc8
popf
pushf
not eax
add eax, 0xb30f46af
xor eax, 0xbe718706
rol eax, 0xdf
popf
pushf
not eax
add eax, 0x8148d863
xor eax, 0xdf3a244a
rol eax, 0x3a
popf
jmp 0x140039734
push rax
pushf
mov eax, 0xa400c0e1
pushf
not eax
add eax, 0xe9cd13a9
xor eax, 0x8f1ecd97
rol eax, 0x15
popf
pushf
not eax
add eax, 0xdaf3d8ce
xor eax, 0xf1da7e7a
rol eax, 0xa9
popf
jmp 0x140039734
and qword [rsp + 0x20], 0
lea rax, [rsp + 0x40]
sub ebx, eax
lea r9, [rsp + 0x30]
mov r8d, ebx
lea rdx, [rsp + 0x40]
mov rcx, r14
jmp 0x140039afa
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x140039b37
push rax
pushf
mov eax, 0x555f6a5c
pushf
not eax
add eax, 0xfa284cde
xor eax, 0xf1f8d2fa
rol eax, 0xf4
popf
pushf
not eax
add eax, 0xbd2875dd
xor eax, 0xb57352d9
rol eax, 0x54
popf
jmp 0x140039734
push rax
pushf
mov eax, 0x124bd807
pushf
not eax
add eax, 0xa3a1aa54
xor eax, 0xbdfe78e7
rol eax, 0x2e
popf
pushf
not eax
add eax, 0xcb66d8c0
xor eax, 0xe5bc0d95
rol eax, 0xa9
popf
jmp 0x140039734
mov eax, dword [rsp + 0x30]
add dword [rdi + 4], eax
cmp eax, ebx
jb 0x140039ba8
push rax
pushf
mov eax, 0xf7d7cf09
pushf
not eax
add eax, 0x99354df8
xor eax, 0xbbb6a00f
rol eax, 0x4f
popf
pushf
not eax
add eax, 0xa5d6f741
xor eax, 0xb66269cb
rol eax, 0xf1
popf
jmp 0x140039734
push rax
pushf
mov eax, 0x7a041127
pushf
not eax
add eax, 0xe2231897
xor eax, 0x94067b87
rol eax, 0xe2
popf
pushf
not eax
add eax, 0xc77bb14f
xor eax, 0xb7895941
rol eax, 0x37
popf
pushf
not eax
add eax, 0xf296ab8c
xor eax, 0xcbc567da
rol eax, 0xf7
popf
pushf
not eax
add eax, 0xf838a158
xor eax, 0x965d4fb1
rol eax, 0x20
popf
jmp 0x140039734
cmp rsi, rbp
jb 0x140039c4c
push rax
pushf
mov eax, 0x4a8515ae
pushf
not eax
add eax, 0x93d1db1d
xor eax, 0xa5d33f7f
rol eax, 0x1f
popf
pushf
not eax
add eax, 0x931fd867
xor eax, 0x901614b9
rol eax, 0xe5
popf
pushf
not eax
add eax, 0x82127809
xor eax, 0xf4d87b27
rol eax, 0xc7
popf
jmp 0x140039734
push rax
pushf
mov eax, 0x9f8d89ec
pushf
not eax
add eax, 0xb7f60601
xor eax, 0xdaf2b767
rol eax, 8
popf
pushf
not eax
add eax, 0x838af9b9
xor eax, 0xc8bf85f6
rol eax, 0xe3
popf
jmp 0x140039734
jmp 0x140039d06
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rdi], eax
push rax
pushf
mov eax, 0xb75d535e
pushf
not eax
add eax, 0xc9051d4f
xor eax, 0xc01af835
rol eax, 0x18
popf
pushf
not eax
add eax, 0xf36d822f
xor eax, 0x93e3ab0e
rol eax, 0xd8
popf
pushf
not eax
add eax, 0xbee5b4d9
xor eax, 0xcb271069
rol eax, 0xd6
popf
jmp 0x140039734
mov rax, rdi
mov rcx, qword [rsp + 0x1440]
xor rcx, rsp
call fcn.140066214
lea r11, [rsp + 0x1450]
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x30]
mov rsp, r11
pop r14
pop rdi
pop rsi
ret