Function at 0x1400575d9
Capabilities:
Write file on windows

Disassembly:
push rax
pushf
mov eax, 0xea2a3248
pushf
not eax
add eax, 0xde704043
xor eax, 0xb52a445d
rol eax, 0x4a
popf
pushf
not eax
add eax, 0xd81d75ba
xor eax, 0xfc2ec6aa
rol eax, 0xb8
popf
pushf
not eax
add eax, 0xd817952a
xor eax, 0xd7eecfdd
rol eax, 0x6c
popf
pushf
not eax
add eax, 0xdecfde1e
xor eax, 0xb7a27730
rol eax, 0xdb
popf
cmp eax, 4
jne 0x14005763c
popf
pop rax
jmp 0x1400579c6
cmp eax, 0
jne 0x14005764b
popf
pop rax
jmp 0x1400576f0
cmp eax, 3
jne 0x14005765a
popf
pop rax
jmp 0x14005792d
cmp eax, 1
jne 0x140057669
popf
pop rax
jmp 0x14005782b
cmp eax, 0xa
jne 0x140057678
popf
pop rax
jmp 0x140057dc6
cmp eax, 7
jne 0x140057687
popf
pop rax
jmp 0x140057c2e
cmp eax, 6
jne 0x140057696
popf
pop rax
jmp 0x140057b1f
cmp eax, 0xb
jne 0x1400576a5
popf
pop rax
jmp 0x140057e0a
cmp eax, 0xc
jne 0x1400576b4
popf
pop rax
jmp 0x140057e45
cmp eax, 8
jne 0x1400576c3
popf
pop rax
jmp 0x140057ce6
cmp eax, 5
jne 0x1400576d2
popf
pop rax
jmp 0x140057a7f
cmp eax, 2
jne 0x1400576e1
popf
pop rax
jmp 0x140057889
cmp eax, 9
jne 0x1400576f0
popf
pop rax
jmp 0x140057dba
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r12
push r14
push r15
mov eax, 0x9292fc1c
pushf
not eax
add eax, 0xc1ab69cb
xor eax, 0xefc0f249
rol eax, 0xe2
popf
pushf
not eax
add eax, 0xe753021b
xor eax, 0xe3f021fb
rol eax, 0x5d
popf
call fcn.140057e74
sub rsp, rax
mov rax, qword [0x140018008]
xor rax, rsp
mov qword [rsp + 0x1460], rax
movsxd r10, edx
mov rbx, rcx
mov rax, r10
mov r14d, r9d
sar rax, 6
lea rcx, [0x19ba4452b]
pushf
sub rcx, 0x5ba2aeab
popf
and r10d, 0x3f
push r8
not r8
sub r14, r8
pop r8
sub r14, 1
mov r15, r8
mov rdi, r8
mov rax, qword [rcx + rax*8]
lea rdx, [r10 + r10*8]
mov r12, qword [rax + rdx*8 + 0x28]
xor eax, eax
mov qword [rbx], rax
cmp r8, r14
mov dword [rbx + 8], eax
jae 0x1400577e5
push rax
pushf
mov eax, 0x34925787
pushf
not eax
add eax, 0xd5105435
xor eax, 0x9ddcf9c9
rol eax, 0x17
popf
pushf
not eax
add eax, 0xf6354e06
xor eax, 0xdd978ce2
rol eax, 4
popf
pushf
not eax
add eax, 0x961f5c40
xor eax, 0xfe004622
rol eax, 0x9e
popf
jmp 0x14005762d
push rax
pushf
mov eax, 0x9a980884
pushf
not eax
add eax, 0xf708000a
xor eax, 0xf9b92de0
rol eax, 0x76
popf
pushf
not eax
add eax, 0xb4ad7770
xor eax, 0xa159f581
rol eax, 0x42
popf
pushf
not eax
add eax, 0xea773673
xor eax, 0x81ff6591
rol eax, 0x63
popf
jmp 0x14005762d
lea rax, [rsp + 0x50]
push rax
pushf
mov eax, 0xc48c3820
pushf
not eax
add eax, 0xffd9a66f
xor eax, 0xcdf060aa
rol eax, 0x63
popf
pushf
not eax
add eax, 0x90c79eff
xor eax, 0xdcd02472
rol eax, 0xf2
popf
pushf
not eax
add eax, 0xfd207c5f
xor eax, 0xf515084e
rol eax, 0xe0
popf
pushf
not eax
add eax, 0xc2efc4ef
xor eax, 0xb7565882
rol eax, 0x25
popf
jmp 0x14005762d
cmp rdi, r14
jae 0x1400578e7
push rax
pushf
mov eax, 0xc8a9d007
pushf
not eax
add eax, 0xffa5f46d
xor eax, 0xa93f9cb3
rol eax, 0x92
popf
pushf
not eax
add eax, 0xa3ff3b61
xor eax, 0x8d3b5315
rol eax, 0x93
popf
pushf
not eax
add eax, 0xdabb06f6
xor eax, 0xc11314ef
rol eax, 0x31
popf
pushf
not eax
add eax, 0xdaa55312
xor eax, 0xc0720fe9
rol eax, 0
popf
jmp 0x14005762d
push rax
pushf
mov eax, 0x9bfd2c06
pushf
not eax
add eax, 0xc3deed18
xor eax, 0xfe7174f1
rol eax, 0xd7
popf
pushf
not eax
add eax, 0xd4300590
xor eax, 0xc3e12351
rol eax, 0xd0
popf
pushf
not eax
add eax, 0xb4e72125
xor eax, 0x96830202
rol eax, 0x19
popf
jmp 0x14005762d
movzx ecx, word [rdi]
add rdi, 2
cmp cx, 0xa
jne 0x140057993
push rax
pushf
mov eax, 0xeeff341a
pushf
not eax
add eax, 0xc8e5532d
xor eax, 0xb1b640c1
rol eax, 0xff
popf
pushf
not eax
add eax, 0x96d866f7
xor eax, 0xcaee7d03
rol eax, 0xd2
popf
pushf
not eax
add eax, 0x915ffcb5
xor eax, 0xafe83e5d
rol eax, 0xad
popf
pushf
not eax
add eax, 0x90d8d4bc
xor eax, 0xa429fbe2
rol eax, 0xd1
popf
jmp 0x14005762d
push rax
pushf
mov eax, 0x947f612d
pushf
not eax
add eax, 0xdf8b3e61
xor eax, 0x91197b61
rol eax, 0x97
popf
pushf
not eax
add eax, 0xcef720f2
xor eax, 0xa58a151e
rol eax, 0x59
popf
jmp 0x14005762d
mov edx, 0x2f6262ef
pushf
not edx
add edx, 0xcf6728e3
xor edx, 0x8effcab8
rol edx, 0x42
popf
pushf
not edx
add edx, 0xf3154108
xor edx, 0xe642165e
rol edx, 0x11
popf
pushf
not edx
add edx, 0x83e03ad0
xor edx, 0xce1686a5
rol edx, 0x2a
popf
pushf
not edx
add edx, 0xf9a16d1f
xor edx, 0xf0fbfac3
rol edx, 0x2b
popf
mov word [rax], dx
add rax, 2
push rax
pushf
mov eax, 0x7b64fbd1
pushf
not eax
add eax, 0xbb3c48f2
xor eax, 0xc728b15f
rol eax, 0xc9
popf
pushf
not eax
add eax, 0xb855456b
xor eax, 0xc8b487df
rol eax, 0x55
popf
pushf
not eax
add eax, 0x820051e5
xor eax, 0xde4eeeeb
rol eax, 0x4a
popf
pushf
not eax
add eax, 0xf28f8ec4
xor eax, 0xff32eef6
rol eax, 0x6e
popf
jmp 0x14005762d
mov word [rax], cx
add rax, 2
lea rcx, [rsp + 0x6f8]
cmp rax, rcx
jb 0x140057ac6
push rax
pushf
mov eax, 0x585f113a
pushf
not eax
add eax, 0xc78b7444
xor eax, 0xec8483b7
rol eax, 0x9b
popf
pushf
not eax
add eax, 0xf0d3da5a
xor eax, 0xf0b69354
rol eax, 0x87
popf
jmp 0x14005762d
push rax
pushf
mov eax, 0x82d9334f
pushf
not eax
add eax, 0x8791d02d
xor eax, 0x813733f8
rol eax, 0x8c
popf
pushf
not eax
add eax, 0x8ad08a38
xor eax, 0xba8b61f3
rol eax, 0x5d
popf
pushf
not eax
add eax, 0xee6706b2
xor eax, 0x9548dd37
rol eax, 0x3f
popf
pushf
not eax
add eax, 0x82a47be2
xor eax, 0xc92a3b14
rol eax, 0xe3
popf
jmp 0x14005762d
and qword [rsp + 0x38], 0
lea rcx, [rsp + 0x50]
and qword [rsp + 0x30], 0
lea r8, [rsp + 0x50]
sub rax, rcx
mov dword [rsp + 0x28], 0xd55
lea rcx, [rsp + 0x700]
sar rax, 1
mov qword [rsp + 0x20], rcx
mov r9d, eax
mov ecx, 0x4f82a244
pushf
not ecx
add ecx, 0xcc8cef34
xor ecx, 0xfee3f069
rol ecx, 0x3d
popf
pushf
not ecx
add ecx, 0xbf962332
xor ecx, 0xef1b1c05
rol ecx, 0x7e
popf
xor edx, edx
call fcn.140072b49
mov ebp, eax
test eax, eax
je 0x140057be8
push rax
pushf
mov eax, 0x418b708b
pushf
not eax
add eax, 0xcb302ac6
xor eax, 0xa3d518ac
rol eax, 0xec
popf
pushf
not eax
add eax, 0xfb5a22b0
xor eax, 0x96213c31
rol eax, 0x52
popf
pushf
not eax
add eax, 0x80b6c0da
xor eax, 0xca69dfd2
rol eax, 0x68
popf
pushf
not eax
add eax, 0xb3462539
xor eax, 0xfa16e4f3
rol eax, 0xce
popf
jmp 0x14005762d
push rax
pushf
mov eax, 0x50c1aa4e
pushf
not eax
add eax, 0x81a96195
xor eax, 0xe090f2c0
rol eax, 0x19
popf
pushf
not eax
add eax, 0xfed73b51
xor eax, 0xb165d100
rol eax, 0x68
popf
pushf
not eax
add eax, 0xc11eaec5
xor eax, 0xad80e986
rol eax, 0x82
popf
jmp 0x14005762d
xor esi, esi
test eax, eax
je 0x140057c8d
push rax
pushf
mov eax, 0xee813eba
pushf
not eax
add eax, 0xc6d44a6b
xor eax, 0xc0df3059
rol eax, 0x3c
popf
pushf
not eax
add eax, 0x8da11bec
xor eax, 0xd8005151
rol eax, 0x1c
popf
pushf
not eax
add eax, 0xd569647d
xor eax, 0xa7ca8923
rol eax, 0x91
popf
pushf
not eax
add eax, 0x864978fd
xor eax, 0xb0bc0f2a
rol eax, 0xe0
popf
jmp 0x14005762d
push rax
pushf
mov eax, 0x7c327374
pushf
not eax
add eax, 0x9e68965a
xor eax, 0x819dc0a0
rol eax, 0x24
popf
pushf
not eax
add eax, 0xd5757b0f
xor eax, 0xcb291550
rol eax, 0xda
popf
pushf
not eax
add eax, 0xe8e89d50
xor eax, 0xee7659ed
rol eax, 0x88
popf
pushf
not eax
add eax, 0x889da1a3
xor eax, 0xb41eb3e9
rol eax, 0x13
popf
jmp 0x14005762d
and qword [rsp + 0x20], 0
lea rdx, [rsp + 0x700]
mov ecx, esi
lea r9, [rsp + 0x40]
mov r8d, ebp
push rcx
not rcx
sub rdx, rcx
pop rcx
sub rdx, 1
mov rcx, r12
sub r8d, esi
jmp 0x140057d11
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x140057d61
push rax
pushf
mov eax, 0xa11ee2b2
pushf
not eax
add eax, 0xf8773ae1
xor eax, 0xd322a972
rol eax, 0x6c
popf
pushf
not eax
add eax, 0x83fe3704
xor eax, 0xc93e69c2
rol eax, 0x75
popf
pushf
not eax
add eax, 0xd1413229
xor eax, 0xe17d774c
rol eax, 0x1e
popf
jmp 0x14005762d
push rax
pushf
mov eax, 0x33f6a353
pushf
not eax
add eax, 0xc7911f5e
xor eax, 0xbc1f5546
rol eax, 0x35
popf
pushf
not eax
add eax, 0x94de2076
xor eax, 0xd42c44e2
rol eax, 0xdc
popf
pushf
not eax
add eax, 0xe2e4c682
xor eax, 0xc61f4cc1
rol eax, 0xbe
popf
pushf
not eax
add eax, 0xb0d74eec
xor eax, 0xc29ac228
rol eax, 0xc7
popf
jmp 0x14005762d
add esi, dword [rsp + 0x40]
cmp esi, ebp
jb 0x140057ce6
mov eax, edi
sub eax, r15d
mov dword [rbx + 4], eax
cmp rdi, r14
jmp 0x140057799
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbx], eax
push rax
pushf
mov eax, 0x9ddf10e5
pushf
not eax
add eax, 0xa276416c
xor eax, 0xc4e97f7d
rol eax, 0x38
popf
pushf
not eax
add eax, 0xc8a59466
xor eax, 0xcce91616
rol eax, 0x70
popf
jmp 0x14005762d
mov rax, rbx
mov rcx, qword [rsp + 0x1460]
xor rcx, rsp
call fcn.140053af8
lea r11, [rsp + 0x1470]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rsi
ret