Function at 0x1401200d9
Capabilities:
Write file on windows

Disassembly:
push rax
pushf
mov eax, 0xd178ab85
pushf
not eax
add eax, 0xaa2b3be1
xor eax, 0xb2990d2d
rol eax, 0x53
popf
pushf
not eax
add eax, 0xe63cf819
xor eax, 0xcb352836
rol eax, 0x33
popf
pushf
not eax
add eax, 0xf9a60e90
xor eax, 0xd313ab3a
rol eax, 0x15
popf
pushf
not eax
add eax, 0xf4aa656d
xor eax, 0x827f9c87
rol eax, 0xd
popf
cmp eax, 4
jne 0x14012013c
popf
pop rax
jmp 0x1401204c7
cmp eax, 0
jne 0x14012014b
popf
pop rax
jmp 0x1401201ff
cmp eax, 3
jne 0x14012015a
popf
pop rax
jmp 0x140120401
cmp eax, 1
jne 0x140120169
popf
pop rax
jmp 0x1401202c1
cmp eax, 0xd
jne 0x140120178
popf
pop rax
jmp 0x1401208c3
cmp eax, 7
jne 0x140120187
popf
pop rax
jmp 0x14012066f
cmp eax, 6
jne 0x140120196
popf
pop rax
jmp 0x1401205e9
cmp eax, 0xb
jne 0x1401201a5
popf
pop rax
jmp 0x140120824
cmp eax, 0xc
jne 0x1401201b4
popf
pop rax
jmp 0x140120889
cmp eax, 8
jne 0x1401201c3
popf
pop rax
jmp 0x1401206ba
cmp eax, 5
jne 0x1401201d2
popf
pop rax
jmp 0x140120558
cmp eax, 2
jne 0x1401201e1
popf
pop rax
jmp 0x140120357
cmp eax, 9
jne 0x1401201f0
popf
pop rax
jmp 0x140120717
cmp eax, 0xa
jne 0x1401201ff
popf
pop rax
jmp 0x1401207c5
push rbx
sub rsp, 0x60
mov rax, qword [0x140084080]
xor rax, rsp
mov qword [rsp + 0x58], rax
cmp qword [rcx + 0x68], 0
mov rbx, rcx
je 0x14012027b
push rax
pushf
mov eax, 0x30c937c7
pushf
not eax
add eax, 0x8dfa176c
xor eax, 0xb5d22f5c
rol eax, 0xdd
popf
pushf
not eax
add eax, 0xce15f9c0
xor eax, 0x994c525c
rol eax, 0xbc
popf
pushf
not eax
add eax, 0xba253458
xor eax, 0x97775e85
rol eax, 0xc3
popf
pushf
not eax
add eax, 0x8bdfcd1a
xor eax, 0x93eb832e
rol eax, 4
popf
jmp 0x14012012d
push rax
pushf
mov eax, 0x39081cb0
pushf
not eax
add eax, 0x874535f6
xor eax, 0xcd4df34c
rol eax, 7
popf
pushf
not eax
add eax, 0xf64bff66
xor eax, 0xfc6a5b80
rol eax, 0x2e
popf
pushf
not eax
add eax, 0xd21f0561
xor eax, 0xa905d4f1
rol eax, 0x2c
popf
jmp 0x14012012d
cmp byte [rcx + 0x71], 0
je 0x140120311
push rax
pushf
mov eax, 0x6a69c167
pushf
not eax
add eax, 0xf9c2cb8c
xor eax, 0xbb6d7c3c
rol eax, 0xf9
popf
pushf
not eax
add eax, 0xbde06707
xor eax, 0xf7074acc
rol eax, 0x32
popf
pushf
not eax
add eax, 0x82a950e4
xor eax, 0xaf4b6721
rol eax, 0x4f
popf
jmp 0x14012012d
push rax
pushf
mov eax, 0x48a947c9
pushf
not eax
add eax, 0xa20a39dc
xor eax, 0xc8b402ce
rol eax, 0x62
popf
pushf
not eax
add eax, 0x8da300dd
xor eax, 0xa444d476
rol eax, 5
popf
pushf
not eax
add eax, 0xd0e06a92
xor eax, 0x8f634bf5
rol eax, 0xf8
popf
jmp 0x14012012d
mov rax, qword [rcx]
mov edx, 0x4e7b933c
pushf
not edx
add edx, 0x942dc1bc
xor edx, 0xb462d864
rol edx, 0xf4
popf
pushf
not edx
add edx, 0x8941b9e1
xor edx, 0xd87d632e
rol edx, 0x9e
popf
mov qword [rsp + 0x78], rdi
jmp 0x14012038f
call qword [rax + Ordinal_26]
cmp eax, 0xffffffff
je 0x1401203ce
push rax
pushf
mov eax, 0x498d14cd
pushf
not eax
add eax, 0xab104172
xor eax, 0xd13b0276
rol eax, 0xb
popf
pushf
not eax
add eax, 0x97fa68b6
xor eax, 0xd683d336
rol eax, 0x1f
popf
jmp 0x14012012d
push rax
pushf
mov eax, 0x39afd2c9
pushf
not eax
add eax, 0xb760504b
xor eax, 0xa99e4d50
rol eax, 0xcb
popf
pushf
not eax
add eax, 0xc00449d6
xor eax, 0x8e7dbb34
rol eax, 0xc4
popf
jmp 0x14012012d
mov rcx, qword [rbx + 0x68]
lea rax, [rsp + 0x30]
lea rdx, [rbx + 0x74]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x58]
lea r8, [rsp + 0x38]
jmp 0x14012041e
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::codecvt_char__char__struct__Mbstatet_::unshift_struct__Mbstatet____ptr64__char____ptr64__char____ptr64__char____ptr64____ptr64_const___ptr64]
test eax, eax
je 0x14012046e
push rax
pushf
mov eax, 0x2349f354
pushf
not eax
add eax, 0xc48ce5f1
xor eax, 0x93f8024b
rol eax, 0xbb
popf
pushf
not eax
add eax, 0xf052d0c8
xor eax, 0x92b8b9d4
rol eax, 0xe4
popf
pushf
not eax
add eax, 0xe19e4993
xor eax, 0xa55a4038
rol eax, 0xc8
popf
jmp 0x14012012d
push rax
pushf
mov eax, 0x52ceac83
pushf
not eax
add eax, 0x8eddd92b
xor eax, 0xf459a062
rol eax, 0xcd
popf
pushf
not eax
add eax, 0xd63aec5f
xor eax, 0xd6cec1a0
rol eax, 0xf9
popf
pushf
not eax
add eax, 0xfc52a609
xor eax, 0xb5d14d0d
rol eax, 0x94
popf
pushf
not eax
add eax, 0xc467041f
xor eax, 0x917c8c56
rol eax, 0xc6
popf
jmp 0x14012012d
sub eax, 1
je 0x1401204ff
push rax
pushf
mov eax, 0xac233ec9
pushf
not eax
add eax, 0x9a2f94cf
xor eax, 0xd3903620
rol eax, 0x7d
popf
pushf
not eax
add eax, 0xa2081117
xor eax, 0xfa5485b2
rol eax, 0x9b
popf
jmp 0x14012012d
push rax
pushf
mov eax, 0x83db86ca
pushf
not eax
add eax, 0xcd1d40ec
xor eax, 0xce8e66f0
rol eax, 0xfa
popf
pushf
not eax
add eax, 0x9124dc67
xor eax, 0xf9bc390d
rol eax, 0xb9
popf
pushf
not eax
add eax, 0xb156fc0e
xor eax, 0xd5f0d71c
rol eax, 0xb5
popf
pushf
not eax
add eax, 0xbe72085d
xor eax, 0xcba54831
rol eax, 0xe8
popf
jmp 0x14012012d
cmp eax, 2
jne 0x1401205a3
push rax
pushf
mov eax, 0x8a993fc4
pushf
not eax
add eax, 0xcff112a9
xor eax, 0xac2e6e16
rol eax, 0xe8
popf
pushf
not eax
add eax, 0xce9a938f
xor eax, 0xfd036882
rol eax, 0xac
popf
pushf
not eax
add eax, 0xae402f30
xor eax, 0xc18db492
rol eax, 0xcd
popf
jmp 0x14012012d
push rax
pushf
mov eax, 0x6960b225
pushf
not eax
add eax, 0x86a0d80a
xor eax, 0xf57585e0
rol eax, 0x26
popf
pushf
not eax
add eax, 0xbaa9bb4c
xor eax, 0xc32e7d14
rol eax, 0x13
popf
pushf
not eax
add eax, 0xddb7946c
xor eax, 0x958c20ed
rol eax, 6
popf
jmp 0x14012012d
mov byte [rbx + 0x71], 0
mov al, reloc.WLDAP32.dll_Ordinal_217
pushf
not al
add al, 0x11
xor al, 0xf0
rol al, 0x4f
popf
pushf
not al
add al, 0xaa
xor al, 0x58
rol al, 0x2f
popf
pushf
not al
add al, 0x73
xor al, 0xa3
rol al, 0x59
popf
push rax
pushf
mov eax, 0x5eecf69c
pushf
not eax
add eax, 0xb2b12224
xor eax, 0xe3b50300
rol eax, 0x77
popf
pushf
not eax
add eax, 0xdb3b2ca1
xor eax, 0xd247cbf6
rol eax, 0x4f
popf
pushf
not eax
add eax, 0xb5641289
xor eax, 0xece7444d
rol eax, 0x1e
popf
pushf
not eax
add eax, 0x9397dcf3
xor eax, 0x952b7204
rol eax, 0xee
popf
jmp 0x14012012d
mov rdi, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x58]
xor rcx, rsp
call fcn.1400e02a0
add rsp, 0x60
pop rbx
ret
mov byte [rbx + 0x71], 0
push rax
pushf
mov eax, 0x1fa130e
pushf
not eax
add eax, 0xf4322424
xor eax, 0xa9991b93
rol eax, 0x7d
popf
pushf
not eax
add eax, 0xcefad9e8
xor eax, 0xfd093217
rol eax, 0xe5
popf
pushf
not eax
add eax, 0xc3238d72
xor eax, 0x81387c6d
rol eax, 0xca
popf
pushf
not eax
add eax, 0xaf507ff9
xor eax, 0x864b9038
rol eax, 0x77
popf
jmp 0x14012012d
mov rdi, qword [rsp + 0x30]
lea rax, [rsp + 0x38]
sub rdi, rax
je 0x14012076c
push rax
pushf
mov eax, 0xcdcc1e01
pushf
not eax
add eax, 0x953116c6
xor eax, 0xd30edc80
rol eax, 0x53
popf
pushf
not eax
add eax, 0xfe22c4fa
xor eax, 0x93dca364
rol eax, 0x31
popf
pushf
not eax
add eax, 0xf7aefec9
xor eax, 0xf216770b
rol eax, 0xb6
popf
jmp 0x14012012d
push rax
pushf
mov eax, 0x667fbf64
pushf
not eax
add eax, 0xc5cc1b73
xor eax, 0xfacadb5d
rol eax, 0x12
popf
pushf
not eax
add eax, 0xeb6572fb
xor eax, 0xb227efa1
rol eax, 0x90
popf
pushf
not eax
add eax, 0xdb8eb913
xor eax, 0xacade086
rol eax, 0x58
popf
pushf
not eax
add eax, 0xfcd21cad
xor eax, 0x95cc5bd0
rol eax, 0x33
popf
jmp 0x14012012d
mov r9, qword [rbx + 0x80]
lea rcx, [rsp + 0x38]
mov r8, rdi
mov edx, 0xccdb4fde
pushf
not edx
add edx, 0xf8484a5f
xor edx, 0x8170b128
rol edx, 0x39
popf
pushf
not edx
add edx, 0xdf8f61de
xor edx, 0x9a990159
rol edx, 0xbd
popf
pushf
not edx
add edx, 0xb5ef6477
xor edx, 0xd35b1b73
rol edx, 0x56
popf
jmp 0x140120819
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rdi, rax
jne 0x140120889
cmp byte [rbx + 0x71], 0
sete al
jmp 0x14012066f
xor al, al
jmp 0x14012066f
mov al, 0xa0
pushf
not al
add al, 0xbc
xor al, 0x72
rol al, 0xb0
popf
pushf
not al
add al, 0x60
xor al, 0xb6
rol al, 0x7a
popf
mov rcx, qword [rsp + 0x58]
xor rcx, rsp
call fcn.1400e02a0
add rsp, 0x60
pop rbx
ret