Function at 0x140114166
Capabilities:
Write file on windows

Disassembly:
push rax
pushf
mov eax, 0xa22535d4
pushf
not eax
add eax, 0x34da3e4e
xor eax, 0x746cdd2
rol eax, 0xb7
popf
pushf
not eax
add eax, 0x11daf510
xor eax, 0x5935cfec
rol eax, 0xd0
popf
pushf
not eax
add eax, 0x5c3c172e
xor eax, 0x277ab1f3
rol eax, 0x84
popf
cmp eax, 0
jne 0x1401141b6
popf
pop rax
jmp 0x14011425b
cmp eax, 2
jne 0x1401141c5
popf
pop rax
jmp 0x1401143da
cmp eax, 6
jne 0x1401141d4
popf
pop rax
jmp 0x14011469a
cmp eax, 3
jne 0x1401141e3
popf
pop rax
jmp 0x140114491
cmp eax, 0xa
jne 0x1401141f2
popf
pop rax
jmp 0x1401148ce
cmp eax, 8
jne 0x140114201
popf
pop rax
jmp 0x14011481a
cmp eax, 5
jne 0x140114210
popf
pop rax
jmp 0x1401145e7
cmp eax, 4
jne 0x14011421f
popf
pop rax
jmp 0x14011452a
cmp eax, 9
jne 0x14011422e
popf
pop rax
jmp 0x140114898
cmp eax, 1
jne 0x14011423d
popf
pop rax
jmp 0x14011438f
cmp eax, 0xb
jne 0x14011424c
popf
pop rax
jmp 0x140114909
cmp eax, 7
jne 0x14011425b
popf
pop rax
jmp 0x140114770
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r14
mov eax, 0x4b6c1350
pushf
not eax
add eax, 0x1fd99bf1
xor eax, 0x49ad24ca
rol eax, 0x84
popf
pushf
not eax
add eax, 0x4a2c746
xor eax, 0x2d8c009c
rol eax, 0x72
popf
call fcn.14008c714
sub rsp, rax
mov rax, qword [0x14003e040]
xor rax, rsp
mov qword [rsp + 0x1440], rax
movsxd r10, edx
mov rdi, rcx
mov rax, r10
mov ebp, r9d
sar rax, 6
lea rcx, [0x1818d494d]
pushf
sub rcx, 0x41891f1d
popf
and r10d, 0x3f
push r8
not r8
sub rbp, r8
pop r8
sub rbp, 1
mov rsi, r8
mov rax, qword [rcx + rax*8]
lea rdx, [r10 + r10*8]
mov r14, qword [rax + rdx*8 + 0x28]
xor eax, eax
mov qword [rdi], rax
mov dword [rdi + 8], eax
cmp r8, rbp
jae 0x140114349
push rax
pushf
mov eax, 0x1f5e6bab
pushf
not eax
add eax, 0x542521e5
xor eax, 0x45e42f98
rol eax, 0x25
popf
pushf
not eax
add eax, 0x59b594d4
xor eax, 0x5d843602
rol eax, 0xfb
popf
pushf
not eax
add eax, 0x6d4528b2
xor eax, 0x31edf5fc
rol eax, 0xc
popf
jmp 0x1401141a7
push rax
pushf
mov eax, 0x77d94e31
pushf
not eax
add eax, 0x728ff7ac
xor eax, 0xf170513
rol eax, 0x77
popf
pushf
not eax
add eax, 0x63207a25
xor eax, 0x6f62beec
rol eax, 0xe9
popf
pushf
not eax
add eax, 0x16be988
xor eax, 0x732aa505
rol eax, 0xf
popf
jmp 0x1401141a7
lea rbx, [rsp + 0x40]
push rax
pushf
mov eax, 0xd4e59cfa
pushf
not eax
add eax, 0x3cd8694c
xor eax, 0x2df5767a
rol eax, 0x96
popf
pushf
not eax
add eax, 0x78a02527
xor eax, 0x761a950e
rol eax, 0x2a
popf
pushf
not eax
add eax, 0x6f2ff74b
xor eax, 0x12571cd9
rol eax, 0x60
popf
jmp 0x1401141a7
cmp rsi, rbp
jae 0x140114438
push rax
pushf
mov eax, 0xb47ae0ea
pushf
not eax
add eax, 0xad98151
xor eax, 0x1b2f6a5
rol eax, 0x40
popf
pushf
not eax
add eax, 0x6b5ac4ff
xor eax, 0x5d347acf
rol eax, 0x55
popf
pushf
not eax
add eax, 0x78889357
xor eax, 0x1d0abc8
rol eax, 0x4f
popf
pushf
not eax
add eax, 0x55531e1d
xor eax, 0x2364b235
rol eax, 0x9c
popf
jmp 0x1401141a7
push rax
pushf
mov eax, 0x35024fc4
pushf
not eax
add eax, 0x7f8fa7f1
xor eax, 0x375d62b9
rol eax, 0x3b
popf
pushf
not eax
add eax, 0x6de52f0d
xor eax, 0x3f82b3ce
rol eax, 0xb5
popf
pushf
not eax
add eax, 0x7c9d5695
xor eax, 0x4784ba76
rol eax, 0x54
popf
pushf
not eax
add eax, 0x405d43d9
xor eax, 0x19dfa645
rol eax, 0x18
popf
jmp 0x1401141a7
movzx eax, word [rsi]
add rsi, 2
cmp ax, 0xa
jne 0x1401144f7
push rax
pushf
mov eax, 0xfef74d6a
pushf
not eax
add eax, 0x7ded85d
xor eax, 0x256c03ba
rol eax, 0xe7
popf
pushf
not eax
add eax, 0x3fcd21b9
xor eax, 0x63a150a5
rol eax, 0x78
popf
pushf
not eax
add eax, 0x12c9e458
xor eax, 0x62aad083
rol eax, 0xb
popf
pushf
not eax
add eax, 0x4a183605
xor eax, 0x7abaeabc
rol eax, 0xa7
popf
jmp 0x1401141a7
push rax
pushf
mov eax, 0x2aac6b33
pushf
not eax
add eax, 0x55c11549
xor eax, 0x1753bef7
rol eax, 0xca
popf
pushf
not eax
add eax, 0x32048344
xor eax, 0x15e0fa52
rol eax, 0xac
popf
jmp 0x1401141a7
add dword [rdi + 8], 2
mov ecx, 0xc9b3fbfc
pushf
not ecx
add ecx, 0x3247b76b
xor ecx, 0x2ff742a6
rol ecx, 0xc
popf
pushf
not ecx
add ecx, 0x5d3b29c8
xor ecx, 0x42edbe4b
rol ecx, 0xfa
popf
pushf
not ecx
add ecx, 0x4a7c3403
xor ecx, 0x7da1037
rol ecx, 0x51
popf
pushf
not ecx
add ecx, 0x1f33c8ac
xor ecx, 0x2fefcee3
rol ecx, 0xf6
popf
mov word [rbx], cx
add rbx, 2
push rax
pushf
mov eax, 0xe40c6121
pushf
not eax
add eax, 0xe689b0
xor eax, 0x3e4e0cae
rol eax, 0xe5
popf
pushf
not eax
add eax, 0x579763d0
xor eax, 0x4e5dd7aa
rol eax, 0x67
popf
pushf
not eax
add eax, 0x508651f4
xor eax, 0x1a6a3988
rol eax, 0x96
popf
pushf
not eax
add eax, 0x53ba36a1
xor eax, 0x720d5c9a
rol eax, 0x24
popf
jmp 0x1401141a7
mov word [rbx], ax
add rbx, 2
lea rax, [rsp + 0x143e]
cmp rbx, rax
jb 0x140114654
push rax
pushf
mov eax, 0x160dabfd
pushf
not eax
add eax, 0x5bc9c682
xor eax, 0x4d8267be
rol eax, 0xc3
popf
pushf
not eax
add eax, 0x3d3ef865
xor eax, 0x582eb226
rol eax, 0xa9
popf
pushf
not eax
add eax, 0x2904f285
xor eax, 0x5e03f19e
rol eax, 0xb9
popf
pushf
not eax
add eax, 0x796433cd
xor eax, 0x393d22d3
rol eax, 0xec
popf
jmp 0x1401141a7
push rax
pushf
mov eax, 0x1e30c8ae
pushf
not eax
add eax, 0x4fa6853f
xor eax, 0x23ee10fb
rol eax, 0x14
popf
pushf
not eax
add eax, 0x2981f590
xor eax, 0x61a6be95
rol eax, 0xfb
popf
pushf
not eax
add eax, 0x55584bd0
xor eax, 0x553c9a25
rol eax, 0x58
popf
jmp 0x1401141a7
and qword [rsp + 0x20], 0
lea rax, [rsp + 0x40]
push rax
not rax
add rbx, rax
pop rax
add rbx, 1
lea r9, [rsp + 0x30]
sar rbx, 1
lea rdx, [rsp + 0x40]
add ebx, ebx
mov rcx, r14
mov r8d, ebx
jmp 0x1401146c7
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x140114717
push rax
pushf
mov eax, 0x2f61c11c
pushf
not eax
add eax, 0x64a8e96f
xor eax, 0x38c4b85d
rol eax, 0xe6
popf
pushf
not eax
add eax, 0x769df428
xor eax, 0x7c409195
rol eax, 0x94
popf
pushf
not eax
add eax, 0x277fd139
xor eax, 0x306931a2
rol eax, 0xc5
popf
jmp 0x1401141a7
push rax
pushf
mov eax, 0x917c77ed
pushf
not eax
add eax, 0x4ec0e57b
xor eax, 0x73324293
rol eax, 0xe
popf
pushf
not eax
add eax, 0x4ffb2455
xor eax, 0x2cacd79c
rol eax, 0xb0
popf
pushf
not eax
add eax, 0x29548da1
xor eax, 0x5d835025
rol eax, 0xc8
popf
pushf
not eax
add eax, 0xb66fdc
xor eax, 0x54c162fc
rol eax, 0xf6
popf
jmp 0x1401141a7
mov eax, dword [rsp + 0x30]
add dword [rdi + 4], eax
cmp eax, ebx
jb 0x1401147c1
push rax
pushf
mov eax, 0x2f665057
pushf
not eax
add eax, 0x23089647
xor eax, 0x11ed7f0d
rol eax, 0xa3
popf
pushf
not eax
add eax, 0x4da4acad
xor eax, 0x8c74223
rol eax, 0x49
popf
pushf
not eax
add eax, 0x38d10cea
xor eax, 0x5da5a082
rol eax, 0xd1
popf
jmp 0x1401141a7
push rax
pushf
mov eax, 0xaa50cc29
pushf
not eax
add eax, 0x499e5164
xor eax, 0x109882d7
rol eax, 0x10
popf
pushf
not eax
add eax, 0x2fb4c998
xor eax, 0x7b0ae473
rol eax, 0xa8
popf
pushf
not eax
add eax, 0x51e1cf82
xor eax, 0x70df4d7d
rol eax, 0x24
popf
pushf
not eax
add eax, 0x73a8a938
xor eax, 0x25f37384
rol eax, 0xfe
popf
jmp 0x1401141a7
cmp rsi, rbp
jb 0x140114852
push rax
pushf
mov eax, 0xd193f9b0
pushf
not eax
add eax, 0x29cdc892
xor eax, 0x5a8cd0bf
rol eax, 0xf4
popf
pushf
not eax
add eax, 0x1e223bad
xor eax, 0x384214db
rol eax, 0x19
popf
jmp 0x1401141a7
push rax
pushf
mov eax, 0xf145259a
pushf
not eax
add eax, 0x272a7d91
xor eax, 0x3a1fd276
rol eax, 0x19
popf
pushf
not eax
add eax, 0x444681bf
xor eax, 0x5db6ce7a
rol eax, 0x40
popf
pushf
not eax
add eax, 0x5b497ee8
xor eax, 0x49b93c1e
rol eax, 0xa5
popf
jmp 0x1401141a7
jmp 0x140114909
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rdi], eax
push rax
pushf
mov eax, 0xa179e0d1
pushf
not eax
add eax, 0x4aee7124
xor eax, 0x7bf353a0
rol eax, 0x58
popf
pushf
not eax
add eax, 0x32fd23ce
xor eax, 0x402a970a
rol eax, 0x78
popf
jmp 0x1401141a7
mov rax, rdi
mov rcx, qword [rsp + 0x1440]
xor rcx, rsp
call fcn.140089a05
lea r11, [rsp + 0x1450]
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x30]
mov rsp, r11
pop r14
pop rdi
pop rsi
ret