Function at 0x1401238ac
Capabilities:
Write file on windows

Disassembly:
push rax
pushf
mov eax, 0x7592172a
pushf
not eax
add eax, 0x4eb4dd23
xor eax, 0xa973f57
rol eax, 0x4a
popf
pushf
not eax
add eax, 0xda8711b
xor eax, 0x5466bd65
rol eax, 0xb6
popf
pushf
not eax
add eax, 0x30b8fbdf
xor eax, 0x349dab2f
rol eax, 0x34
popf
pushf
not eax
add eax, 0x1ad06e4e
xor eax, 0x378d3e7b
rol eax, 3
popf
cmp eax, 2
jne 0x14012390f
popf
pop rax
jmp 0x140123b42
cmp eax, 0xa
jne 0x14012391e
popf
pop rax
jmp 0x140123f98
cmp eax, 0
jne 0x14012392d
popf
pop rax
jmp 0x1401239b4
cmp eax, 0xb
jne 0x14012393c
popf
pop rax
jmp 0x140123ff9
cmp eax, 6
jne 0x14012394b
popf
pop rax
jmp 0x140123d69
cmp eax, 7
jne 0x14012395a
popf
pop rax
jmp 0x140123e37
cmp eax, 5
jne 0x140123969
popf
pop rax
jmp 0x140123ca5
cmp eax, 1
jne 0x140123978
popf
pop rax
jmp 0x140123b0a
cmp eax, 4
jne 0x140123987
popf
pop rax
jmp 0x140123c69
cmp eax, 3
jne 0x140123996
popf
pop rax
jmp 0x140123bd3
cmp eax, 9
jne 0x1401239a5
popf
pop rax
jmp 0x140123f39
cmp eax, 8
jne 0x1401239b4
popf
pop rax
jmp 0x140123ebb
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r14
mov eax, 0x2530810a
pushf
not eax
add eax, 0x25068219
xor eax, 0x5287e1ef
rol eax, 0xeb
popf
pushf
not eax
add eax, 0x637b2134
xor eax, 0x2bd428b5
rol eax, 0x24
popf
pushf
not eax
add eax, 0x14338349
xor eax, 0x7e361aaf
rol eax, 0x60
popf
pushf
not eax
add eax, 0x68ac73a2
xor eax, 0x492896b
rol eax, 0x9f
popf
call fcn.14009bcb8
sub rsp, rax
mov rax, qword [0x14003e040]
xor rax, rsp
mov qword [rsp + 0x1440], rax
movsxd r10, edx
mov rdi, rcx
mov rax, r10
mov ebp, r9d
sar rax, 6
lea rcx, [0x1953a2a51]
pushf
sub rcx, 0x55360021
popf
and r10d, 0x3f
push r8
not r8
sub rbp, r8
pop r8
sub rbp, 1
mov rsi, r8
mov rax, qword [rcx + rax*8]
lea rdx, [r10 + r10*8]
mov r14, qword [rax + rdx*8 + 0x28]
xor eax, eax
mov qword [rdi], rax
mov dword [rdi + 8], eax
cmp r8, rbp
jae 0x140123ab1
push rax
pushf
mov eax, 0x99fec897
pushf
not eax
add eax, 0x3b306fb8
xor eax, 0x7e21ab16
rol eax, 0x1a
popf
pushf
not eax
add eax, 0x366b8a3d
xor eax, 0x5aeb4a0c
rol eax, 0xae
popf
jmp 0x140123900
push rax
pushf
mov eax, 0xf00547ae
pushf
not eax
add eax, 0x3c866022
xor eax, 0x180877e
rol eax, 0xdc
popf
pushf
not eax
add eax, 0x60959da8
xor eax, 0x26bbb7d1
rol eax, 0xb3
popf
pushf
not eax
add eax, 0x3c70e346
xor eax, 0x6f1150cf
rol eax, 0xa7
popf
pushf
not eax
add eax, 0x3d003349
xor eax, 0x2cec654d
rol eax, 0xa8
popf
jmp 0x140123900
lea rbx, [rsp + 0x40]
push rax
pushf
mov eax, 0x4ee5068a
pushf
not eax
add eax, 0x7fba7c3f
xor eax, 0x6d028e5f
rol eax, 0xc3
popf
pushf
not eax
add eax, 0x1de7bc0e
xor eax, 0x2f27dc33
rol eax, 0x3a
popf
jmp 0x140123900
cmp rsi, rbp
jae 0x140123b7a
push rax
pushf
mov eax, 0x6fdda78d
pushf
not eax
add eax, 0x3a56e524
xor eax, 0x529a9d
rol eax, 0x1e
popf
pushf
not eax
add eax, 0x29869fa5
xor eax, 0x2efbb5e2
rol eax, 0x85
popf
jmp 0x140123900
push rax
pushf
mov eax, 0x6a78891e
pushf
not eax
add eax, 0x4cadaaaa
xor eax, 0x6d3073f7
rol eax, 0xb9
popf
pushf
not eax
add eax, 0x14082bb
xor eax, 0x54abd3c0
rol eax, 0x61
popf
pushf
not eax
add eax, 0x62c82f1c
xor eax, 0x25dc8490
rol eax, 0xff
popf
pushf
not eax
add eax, 0xd17a26c
xor eax, 0x46e37874
rol eax, 0x5e
popf
jmp 0x140123900
mov al, byte [rsi]
inc rsi
cmp al, 0xa
jne 0x140123c35
push rax
pushf
mov eax, 0x1aef16d3
pushf
not eax
add eax, 0xf6f56d9
xor eax, 0x3202430b
rol eax, 0x6d
popf
pushf
not eax
add eax, 0x3408d8aa
xor eax, 0x5334e8cf
rol eax, 0x94
popf
pushf
not eax
add eax, 0x1251b728
xor eax, 0x711b978a
rol eax, 0xc2
popf
pushf
not eax
add eax, 0x622552a1
xor eax, 0x1a306c6d
rol eax, 0x10
popf
jmp 0x140123900
push rax
pushf
mov eax, 0x737ae05a
pushf
not eax
add eax, 0x401a844d
xor eax, 0x5c92d3d0
rol eax, 0x94
popf
pushf
not eax
add eax, 0x23044045
xor eax, 0x70db3f6d
rol eax, 0x64
popf
jmp 0x140123900
inc dword [rdi + 8]
mov byte [rbx], 0xd
inc rbx
push rax
pushf
mov eax, 0x1c4cd97
pushf
not eax
add eax, 0x4ab22ebb
xor eax, 0x609adf13
rol eax, 0xdf
popf
pushf
not eax
add eax, 0x2f1fedf2
xor eax, 0x1ae404d9
rol eax, 0x57
popf
jmp 0x140123900
mov byte [rbx], al
inc rbx
lea rax, [rsp + 0x143f]
cmp rbx, rax
jb 0x140123d10
push rax
pushf
mov eax, 0x61eea529
pushf
not eax
add eax, 0x6ee8de8a
xor eax, 0x25c86b79
rol eax, 0x13
popf
pushf
not eax
add eax, 0x75995767
xor eax, 0x1390d659
rol eax, 0xb6
popf
pushf
not eax
add eax, 0x23111d11
xor eax, 0x555b4655
rol eax, 0x8f
popf
pushf
not eax
add eax, 0x7a686072
xor eax, 0x752cab0d
rol eax, 0xaf
popf
jmp 0x140123900
push rax
pushf
mov eax, 0x83f44d39
pushf
not eax
add eax, 0x3021ed0e
xor eax, 0x20845da2
rol eax, 0xaf
popf
pushf
not eax
add eax, 0x77a334c1
xor eax, 0x1f8ae541
rol eax, 0xf6
popf
pushf
not eax
add eax, 0x1c628064
xor eax, 0x31fb92e1
rol eax, 0x36
popf
pushf
not eax
add eax, 0x3e163f7
xor eax, 0x13c9a511
rol eax, 0x12
popf
jmp 0x140123900
and qword [rsp + 0x20], 0
lea rax, [rsp + 0x40]
push rax
not eax
add ebx, eax
pop rax
add ebx, 1
lea r9, [rsp + 0x30]
mov r8d, ebx
lea rdx, [rsp + 0x40]
mov rcx, r14
jmp 0x140123d8e
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x140123df1
push rax
pushf
mov eax, 0x2760f4a5
pushf
not eax
add eax, 0xd187e00
xor eax, 0x22a35722
rol eax, 0x57
popf
pushf
not eax
add eax, 0x7548993c
xor eax, 0x5051d30a
rol eax, 0x63
popf
pushf
not eax
add eax, 0x581c0fc
xor eax, 0x39176fc3
rol eax, 0x58
popf
pushf
not eax
add eax, 0x2733d28b
xor eax, 0x6bad04cd
rol eax, 0xa4
popf
jmp 0x140123900
push rax
pushf
mov eax, 0xba3a089c
pushf
not eax
add eax, 0x290aee82
xor eax, 0x343c464f
rol eax, 0xfd
popf
pushf
not eax
add eax, 0x3049fefa
xor eax, 0x1fb46df0
rol eax, 0xcf
popf
pushf
not eax
add eax, 0x1f319651
xor eax, 0x5b7718a5
rol eax, 0x23
popf
jmp 0x140123900
mov eax, dword [rsp + 0x30]
add dword [rdi + 4], eax
cmp eax, ebx
jb 0x140123e75
push rax
pushf
mov eax, 0xd829f4f6
pushf
not eax
add eax, 0x425fdfd3
xor eax, 0x18ead168
rol eax, 0xb6
popf
pushf
not eax
add eax, 0x30fd8341
xor eax, 0x43e0cb70
rol eax, 0xc2
popf
jmp 0x140123900
push rax
pushf
mov eax, 0xbf9922e7
pushf
not eax
add eax, 0x2a146170
xor eax, 0x45424f01
rol eax, 0xac
popf
pushf
not eax
add eax, 0x15657f91
xor eax, 0x6a50abee
rol eax, 0xb9
popf
pushf
not eax
add eax, 0x3f7f3129
xor eax, 0x5956f891
rol eax, 0xc0
popf
jmp 0x140123900
cmp rsi, rbp
jb 0x140123ef3
push rax
pushf
mov eax, 0xfe0cff24
pushf
not eax
add eax, 0x340d4651
xor eax, 0xd530508
rol eax, 0x54
popf
pushf
not eax
add eax, 0x5211e344
xor eax, 0x26ce2e0f
rol eax, 8
popf
jmp 0x140123900
push rax
pushf
mov eax, 0xf5d70a18
pushf
not eax
add eax, 0x3918d356
xor eax, 0x27d551d
rol eax, 0xc2
popf
pushf
not eax
add eax, 0x33a4eee0
xor eax, 0x4344e933
rol eax, 0x70
popf
pushf
not eax
add eax, 0x1641b316
xor eax, 0x7e94451f
rol eax, 0x8a
popf
jmp 0x140123900
jmp 0x140123ff9
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rdi], eax
push rax
pushf
mov eax, 0x222d58c6
pushf
not eax
add eax, 0x5b1b60ed
xor eax, 0x4251f55b
rol eax, 0x45
popf
pushf
not eax
add eax, 0x6ab54850
xor eax, 0x18caaf82
rol eax, 0x54
popf
pushf
not eax
add eax, 0x3cbe9ad5
xor eax, 0x3565bd73
rol eax, 0xc0
popf
pushf
not eax
add eax, 0x66d0cad
xor eax, 0x1074bd1a
rol eax, 0x87
popf
jmp 0x140123900
mov rax, rdi
mov rcx, qword [rsp + 0x1440]
xor rcx, rsp
call fcn.140098f5b
lea r11, [rsp + 0x1450]
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x30]
mov rsp, r11
pop r14
pop rdi
pop rsi
ret