Function at 0x14017cae0
Capabilities:
Write file on windows

Disassembly:
push rax
pushf
mov eax, 0x27fbd50a
pushf
not eax
add eax, 0xe523e160
xor eax, 0x93409777
rol eax, 0xef
popf
pushf
not eax
add eax, 0x9399ddea
xor eax, 0xd2aa4a43
rol eax, 0xa2
popf
pushf
not eax
add eax, 0x83dc9490
xor eax, 0xb2af6934
rol eax, 2
popf
pushf
not eax
add eax, 0xf7a7e895
xor eax, 0xe7b3c28e
rol eax, 0x51
popf
cmp eax, 4
jne 0x14017cb43
popf
pop rax
jmp 0x14017ced6
cmp eax, 0
jne 0x14017cb52
popf
pop rax
jmp 0x14017cbf7
cmp eax, 3
jne 0x14017cb61
popf
pop rax
jmp 0x14017ce10
cmp eax, 1
jne 0x14017cb70
popf
pop rax
jmp 0x14017ccbd
cmp eax, 0xa
jne 0x14017cb7f
popf
pop rax
jmp 0x14017d1f5
cmp eax, 7
jne 0x14017cb8e
popf
pop rax
jmp 0x14017d09c
cmp eax, 6
jne 0x14017cb9d
popf
pop rax
jmp 0x14017d00b
cmp eax, 0xb
jne 0x14017cbac
popf
pop rax
jmp 0x14017d24d
cmp eax, 0xc
jne 0x14017cbbb
popf
pop rax
jmp 0x14017d2b3
cmp eax, 8
jne 0x14017cbca
popf
pop rax
jmp 0x14017d0f9
cmp eax, 5
jne 0x14017cbd9
popf
pop rax
jmp 0x14017cf7a
cmp eax, 2
jne 0x14017cbe8
popf
pop rax
jmp 0x14017cd66
cmp eax, 9
jne 0x14017cbf7
popf
pop rax
jmp 0x14017d181
push rdi
sub rsp, 0x50
cmp qword [rcx + 0x68], 0
mov rdi, rcx
je 0x14017cc64
push rax
pushf
mov eax, 0xad4594b
pushf
not eax
add eax, 0xce558ed8
xor eax, 0xe23d2047
rol eax, 0x69
popf
pushf
not eax
add eax, 0x8cf353a4
xor eax, 0x8df39640
rol eax, 0x14
popf
pushf
not eax
add eax, 0xf93c3b05
xor eax, 0xc4637706
rol eax, 0x28
popf
pushf
not eax
add eax, 0xf26bf727
xor eax, 0xa09b22a3
rol eax, 0xd4
popf
jmp 0x14017cb34
push rax
pushf
mov eax, 0xb89958d4
pushf
not eax
add eax, 0xc55bd5f2
xor eax, 0x9a1b91a5
rol eax, 0xa1
popf
pushf
not eax
add eax, 0xee5ec8e9
xor eax, 0xbb5b0ced
rol eax, 0xfe
popf
pushf
not eax
add eax, 0x8846e245
xor eax, 0xe17fa386
rol eax, 2
popf
pushf
not eax
add eax, 0xc1f61beb
xor eax, 0x911ef08a
rol eax, 0x46
popf
jmp 0x14017cb34
cmp byte [rcx + 0x71], 0
je 0x14017cd20
push rax
pushf
mov eax, 0x1a35772f
pushf
not eax
add eax, 0xb0edb58c
xor eax, 0xcfd58482
rol eax, 0x31
popf
pushf
not eax
add eax, 0xe4a6a9ef
xor eax, 0xe490680a
rol eax, 0x91
popf
pushf
not eax
add eax, 0xe95c7ce5
xor eax, 0xd873ecea
rol eax, 0xa9
popf
pushf
not eax
add eax, 0x9f32206e
xor eax, 0xe81be987
rol eax, 0x28
popf
jmp 0x14017cb34
push rax
pushf
mov eax, 0x943f372
pushf
not eax
add eax, 0xfb37082a
xor eax, 0xc34575c5
rol eax, 0x1c
popf
pushf
not eax
add eax, 0xa56c8641
xor eax, 0xc0bd9ca9
rol eax, 0xf9
popf
pushf
not eax
add eax, 0xf1fc4531
xor eax, 0x91764bb7
rol eax, 0xa5
popf
jmp 0x14017cb34
mov rax, qword [rcx]
mov qword [rsp + 0x68], rbx
mov rbx, qword [rax + 0x18]
call fcn.14015e55c
mov edx, eax
mov rcx, rdi
jmp 0x14017cd7d
call rbx
mov ebx, eax
call fcn.14015e55c
mov edx, ebx
mov ecx, eax
call fcn.14011867f
test al, al
jne 0x14017cdca
push rax
pushf
mov eax, 0x6e9254de
pushf
not eax
add eax, 0xe90545a3
xor eax, 0xc85fae6b
rol eax, 0xfc
popf
pushf
not eax
add eax, 0x8ea8806d
xor eax, 0x9385ac82
rol eax, 0xb7
popf
jmp 0x14017cb34
push rax
pushf
mov eax, 0xa630b0a
pushf
not eax
add eax, 0x9887a213
xor eax, 0xc425463f
rol eax, 0xeb
popf
pushf
not eax
add eax, 0xb79587c8
xor eax, 0xad9793b8
rol eax, 0xee
popf
pushf
not eax
add eax, 0xf916e009
xor eax, 0xe1751ee1
rol eax, 0xef
popf
jmp 0x14017cb34
mov rcx, qword [rdi + 0x68]
lea rax, [rsp + 0x60]
lea rdx, [rdi + 0x74]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x30]
jmp 0x14017ce2d
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::codecvt_char__char__struct__Mbstatet_::unshift_struct__Mbstatet____ptr64__char____ptr64__char____ptr64__char____ptr64____ptr64_const___ptr64]
test eax, eax
je 0x14017ce90
push rax
pushf
mov eax, 0x2b710d6d
pushf
not eax
add eax, 0xcbcf9af1
xor eax, 0x85153e14
rol eax, 0x6e
popf
pushf
not eax
add eax, 0x94fa622b
xor eax, 0xe7907ec5
rol eax, 0x40
popf
pushf
not eax
add eax, 0xd9c99394
xor eax, 0xb92cd560
rol eax, 0xa2
popf
pushf
not eax
add eax, 0xa6ea1c0f
xor eax, 0xd94a3bb6
rol eax, 0x31
popf
jmp 0x14017cb34
push rax
pushf
mov eax, 0xe99892fd
pushf
not eax
add eax, 0xf4a13c75
xor eax, 0xf45b6564
rol eax, 0xa7
popf
pushf
not eax
add eax, 0xb027bebe
xor eax, 0x9830bad6
rol eax, 0x40
popf
pushf
not eax
add eax, 0xbe7e2d26
xor eax, 0xc00d1ebd
rol eax, 0x23
popf
jmp 0x14017cb34
sub eax, 1
je 0x14017cf21
push rax
pushf
mov eax, 0xfe5f6e21
pushf
not eax
add eax, 0x84cbcc13
xor eax, 0xd284c6b0
rol eax, 0x89
popf
pushf
not eax
add eax, 0xbd0ed84c
xor eax, 0xfd2f8831
rol eax, 0xc4
popf
pushf
not eax
add eax, 0xf7a2667a
xor eax, 0x88308d48
rol eax, 0x8e
popf
jmp 0x14017cb34
push rax
pushf
mov eax, 0x2921edf3
pushf
not eax
add eax, 0x9321ce45
xor eax, 0x94b4957c
rol eax, 0x6a
popf
pushf
not eax
add eax, 0xcb0c6a21
xor eax, 0xcadad559
rol eax, 0x98
popf
pushf
not eax
add eax, 0x8efbeb53
xor eax, 0xad72de86
rol eax, 0x34
popf
pushf
not eax
add eax, 0xed7a5408
xor eax, 0xb69f16f5
rol eax, 0xb6
popf
jmp 0x14017cb34
cmp eax, 2
jne 0x14017cfd8
push rax
pushf
mov eax, 0xa43a3932
pushf
not eax
add eax, 0xeec34353
xor eax, 0xf74a855f
rol eax, 0xfe
popf
pushf
not eax
add eax, 0xdf5026d1
xor eax, 0xb6b93321
rol eax, 0xe1
popf
pushf
not eax
add eax, 0xa5f72dc4
xor eax, 0xc71dda03
rol eax, 0xd
popf
pushf
not eax
add eax, 0xa9e9a121
xor eax, 0xb7e41a9a
rol eax, 0x92
popf
jmp 0x14017cb34
push rax
pushf
mov eax, 0x66558203
pushf
not eax
add eax, 0xf0efdc52
xor eax, 0xc31c4826
rol eax, 0xa9
popf
pushf
not eax
add eax, 0xcf871bee
xor eax, 0xc3625d5a
rol eax, 0xb7
popf
jmp 0x14017cb34
mov rbx, qword [rsp + 0x68]
mov al, 0xbe
pushf
not al
add al, 0xbb
xor al, 0xd7
rol al, 0xe3
popf
pushf
not al
add al, 0x5e
xor al, 0x8a
rol al, 0xf8
popf
pushf
not al
add al, 0x82
xor al, 0x73
rol al, 0xf1
popf
mov byte [rdi + 0x71], 0
add rsp, 0x50
pop rdi
ret
mov byte [rdi + 0x71], 0
push rax
pushf
mov eax, 0xeb97f226
pushf
not eax
add eax, 0xc09ad22f
xor eax, 0xd8ef5eeb
rol eax, 0xaa
popf
pushf
not eax
add eax, 0x8845fc0d
xor eax, 0xb5043fdc
rol eax, 0x69
popf
pushf
not eax
add eax, 0xc1323850
xor eax, 0x89f44ed2
rol eax, 0x51
popf
pushf
not eax
add eax, 0xcd43325d
xor eax, 0xf6d7d790
rol eax, 0x8d
popf
jmp 0x14017cb34
mov rbx, qword [rsp + 0x60]
lea rax, [rsp + 0x30]
sub rbx, rax
je 0x14017d14e
push rax
pushf
mov eax, 0xb8ddbfd9
pushf
not eax
add eax, 0x891dd5db
xor eax, 0xd53a4029
rol eax, 0x78
popf
pushf
not eax
add eax, 0x9bca4c04
xor eax, 0xf3f9d816
rol eax, 0x25
popf
pushf
not eax
add eax, 0x94330d93
xor eax, 0x8cb5d622
rol eax, 0x6e
popf
jmp 0x14017cb34
push rax
pushf
mov eax, 0x5c440bc2
pushf
not eax
add eax, 0xb7e09869
xor eax, 0x92cb3ceb
rol eax, 0xc9
popf
pushf
not eax
add eax, 0x80f49cfd
xor eax, 0xd194156a
rol eax, 0xf7
popf
jmp 0x14017cb34
mov r9, qword [rdi + 0x80]
lea rcx, [rsp + 0x30]
mov r8, rbx
mov edx, 0x3711d367
pushf
not edx
add edx, 0x8ba64f48
xor edx, 0xf1c1b623
rol edx, 0xcd
popf
pushf
not edx
add edx, 0xbaee0364
xor edx, 0xf8a2e929
rol edx, 0x82
popf
pushf
not edx
add edx, 0xfbcf9d55
xor edx, 0xa6973053
rol edx, 0x7c
popf
pushf
not edx
add edx, 0xd9252212
xor edx, 0xad66b51d
rol edx, 0x89
popf
jmp 0x14017d1ea
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rbx, rax
jne 0x14017d24d
cmp byte [rdi + 0x71], 0
mov rbx, qword [rsp + 0x68]
sete al
add rsp, 0x50
pop rdi
ret
mov rbx, qword [rsp + 0x68]
xor al, al
add rsp, 0x50
pop rdi
ret
mov al, 0x65
pushf
not al
add al, 0x42
xor al, 0x27
rol al, 0x31
popf
pushf
not al
add al, 0x92
xor al, 0xd7
rol al, 0xaa
popf
pushf
not al
add al, 0xe8
xor al, 0x92
rol al, 0x93
popf
add rsp, 0x50
pop rdi
ret