Function at 0x1402139bf
Capabilities:
Write file on windows

Disassembly:
push rax
pushf
mov eax, 0x5cf2dd5f
pushf
not eax
add eax, 0x9ff543c0
xor eax, 0xe71f8b93
rol eax, 0x35
popf
pushf
not eax
add eax, 0x9e5a14e1
xor eax, 0xdfe59123
rol eax, 0x32
popf
cmp eax, 4
jne 0x1402139fc
popf
pop rax
jmp 0x140213cae
cmp eax, 0
jne 0x140213a0b
popf
pop rax
jmp 0x140213aa1
cmp eax, 3
jne 0x140213a1a
popf
pop rax
jmp 0x140213c16
cmp eax, 1
jne 0x140213a29
popf
pop rax
jmp 0x140213baf
cmp eax, 0xa
jne 0x140213a38
popf
pop rax
jmp 0x140213ffc
cmp eax, 7
jne 0x140213a47
popf
pop rax
jmp 0x140213e75
cmp eax, 6
jne 0x140213a56
popf
pop rax
jmp 0x140213dce
cmp eax, 0xb
jne 0x140213a65
popf
pop rax
jmp 0x14021404a
cmp eax, 9
jne 0x140213a74
popf
pop rax
jmp 0x140213fb0
cmp eax, 8
jne 0x140213a83
popf
pop rax
jmp 0x140213f1f
cmp eax, 5
jne 0x140213a92
popf
pop rax
jmp 0x140213d2e
cmp eax, 2
jne 0x140213aa1
popf
pop rax
jmp 0x140213c0d
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r14
mov eax, 0x6d617a70
pushf
not eax
add eax, 0xd984a607
xor eax, 0xe446b8d0
rol eax, 0xcd
popf
pushf
not eax
add eax, 0xa06a55a2
xor eax, 0xee00c195
rol eax, 0x3c
popf
call fcn.1402c8c14
sub rsp, rax
mov rax, qword [0x14010a0d0]
xor rax, rsp
mov qword [rsp + 0x1440], rax
movsxd r10, edx
mov rdi, rcx
mov rax, r10
mov ebp, r9d
sar rax, 6
lea rcx, [0x1b9a0485a]
pushf
sub rcx, 0x798d768a
popf
and r10d, 0x3f
push r8
not r8
sub rbp, r8
pop r8
sub rbp, 1
mov rsi, r8
mov rax, qword [rcx + rax*8]
lea rdx, [r10 + r10*8]
mov r14, qword [rax + rdx*8 + 0x28]
xor eax, eax
mov qword [rdi], rax
mov dword [rdi + 8], eax
cmp r8, rbp
jae 0x140213b7c
push rax
pushf
mov eax, 0xfb410522
pushf
not eax
add eax, 0xbbfb23e6
xor eax, 0x915d6dbe
rol eax, 0x1c
popf
pushf
not eax
add eax, 0x8f6db655
xor eax, 0xba4d3f1d
rol eax, 0xef
popf
jmp 0x1402139ed
push rax
pushf
mov eax, 0x61d19d2c
pushf
not eax
add eax, 0xc10a7607
xor eax, 0xacdb3c7d
rol eax, 0x14
popf
pushf
not eax
add eax, 0xcae7a2cb
xor eax, 0x85e8648c
rol eax, 0x49
popf
jmp 0x1402139ed
lea rbx, [rsp + 0x40]
push rax
pushf
mov eax, 0x298d95ad
pushf
not eax
add eax, 0xb4bc91c3
xor eax, 0xe1c8873d
rol eax, 0xba
popf
pushf
not eax
add eax, 0xd70eb857
xor eax, 0x92fb0058
rol eax, 0x55
popf
pushf
not eax
add eax, 0xbdf39440
xor eax, 0xc6f89f66
rol eax, 0xa2
popf
pushf
not eax
add eax, 0xaf6e50db
xor eax, 0xe9d54772
rol eax, 0xb5
popf
jmp 0x1402139ed
cmp rsi, rbp
jae 0x140213dce
movzx eax, word [rsi]
add rsi, 2
cmp ax, 0xa
jne 0x140213c7b
push rax
pushf
mov eax, 0x51a61c
pushf
not eax
add eax, 0xa0eff895
xor eax, 0xb957bdf9
rol eax, 0xca
popf
pushf
not eax
add eax, 0x857a33a8
xor eax, 0x999e448e
rol eax, 0x7a
popf
pushf
not eax
add eax, 0xa0a5e346
xor eax, 0xbd3514da
rol eax, 0x7c
popf
pushf
not eax
add eax, 0xa9832dbc
xor eax, 0xdbf928e5
rol eax, 1
popf
jmp 0x1402139ed
push rax
pushf
mov eax, 0xef5dbdcf
pushf
not eax
add eax, 0x9f9c2621
xor eax, 0x9abedbbc
rol eax, 0x94
popf
pushf
not eax
add eax, 0xe1217257
xor eax, 0xa244ca4b
rol eax, 0xaf
popf
jmp 0x1402139ed
add dword [rdi + 8], 2
mov ecx, 0x9a8f627b
pushf
not ecx
add ecx, 0xef364cdb
xor ecx, 0xd63f07c4
rol ecx, 0xbb
popf
pushf
not ecx
add ecx, 0x8194f1d2
xor ecx, 0xbf802265
rol ecx, 0x47
popf
mov word [rbx], cx
add rbx, 2
push rax
pushf
mov eax, 0x3a70eced
pushf
not eax
add eax, 0xbf547b7a
xor eax, 0xc1917c71
rol eax, 0x25
popf
pushf
not eax
add eax, 0xb5fd3940
xor eax, 0xb115f9f6
rol eax, 0xf6
popf
pushf
not eax
add eax, 0xd2eddb6d
xor eax, 0xba8038a1
rol eax, 0xe0
popf
jmp 0x1402139ed
mov word [rbx], ax
add rbx, 2
lea rax, [rsp + 0x143e]
cmp rbx, rax
jb 0x140213d9b
push rax
pushf
mov eax, 0x9c6fe096
pushf
not eax
add eax, 0xa39d9e7a
xor eax, 0x9fe70f26
rol eax, 0xc5
popf
pushf
not eax
add eax, 0x99dc6d99
xor eax, 0xf69bb668
rol eax, 0x2a
popf
pushf
not eax
add eax, 0xb6fbda1f
xor eax, 0xb25992f4
rol eax, 0x34
popf
pushf
not eax
add eax, 0xebae7cc2
xor eax, 0x80675a3e
rol eax, 0x2e
popf
jmp 0x1402139ed
push rax
pushf
mov eax, 0x956ed65c
pushf
not eax
add eax, 0xa90de812
xor eax, 0xe33da403
rol eax, 0xbb
popf
pushf
not eax
add eax, 0xb3f2f010
xor eax, 0xec6dda62
rol eax, 0xa5
popf
jmp 0x1402139ed
and qword [rsp + 0x20], 0
lea rax, [rsp + 0x40]
sub rbx, rax
lea r9, [rsp + 0x30]
sar rbx, 1
lea rdx, [rsp + 0x40]
add ebx, ebx
mov rcx, r14
mov r8d, ebx
jmp 0x140213df2
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x140213e42
push rax
pushf
mov eax, 0xb990c8e
pushf
not eax
add eax, 0xdfb2bbe9
xor eax, 0x87d937e5
rol eax, 0x5e
popf
pushf
not eax
add eax, 0xf8b9d291
xor eax, 0xe352b6a1
rol eax, 0x90
popf
pushf
not eax
add eax, 0xf8644fed
xor eax, 0xddd38f51
rol eax, 0x6c
popf
jmp 0x1402139ed
push rax
pushf
mov eax, 0x96712f9b
pushf
not eax
add eax, 0x942d50b3
xor eax, 0xf56410e1
rol eax, 0x2b
popf
pushf
not eax
add eax, 0x94e19a4a
xor eax, 0xd301ea03
rol eax, 0xd
popf
jmp 0x1402139ed
mov eax, dword [rsp + 0x30]
add dword [rdi + 4], eax
cmp eax, ebx
jb 0x140213ec6
push rax
pushf
mov eax, 0xa75f123c
pushf
not eax
add eax, 0xbc15233d
xor eax, 0xf8e7797d
rol eax, 0x71
popf
pushf
not eax
add eax, 0xc7ca3f68
xor eax, 0xc8f633fe
rol eax, 0x3c
popf
pushf
not eax
add eax, 0x9fa53916
xor eax, 0xebc1f3c2
rol eax, 0x15
popf
jmp 0x1402139ed
push rax
pushf
mov eax, 0x7f2df837
pushf
not eax
add eax, 0xb4bf14c7
xor eax, 0x9127b0c9
rol eax, 0xb4
popf
pushf
not eax
add eax, 0xb2c33a9f
xor eax, 0xa0f815f2
rol eax, 0xb2
popf
pushf
not eax
add eax, 0xa5a8a6f5
xor eax, 0xd60a0ac3
rol eax, 0xc
popf
pushf
not eax
add eax, 0xd9ea452c
xor eax, 0x837e7e63
rol eax, 0x13
popf
jmp 0x1402139ed
cmp rsi, rbp
jb 0x140213f6a
push rax
pushf
mov eax, 0x50edf9f8
pushf
not eax
add eax, 0xf511bc46
xor eax, 0xd36c9371
rol eax, 0x39
popf
pushf
not eax
add eax, 0xabfe1c1f
xor eax, 0x8cf9a6f5
rol eax, 0x7c
popf
pushf
not eax
add eax, 0x93ace2fd
xor eax, 0xf7ad7c44
rol eax, 0x98
popf
jmp 0x1402139ed
push rax
pushf
mov eax, 0x50047016
pushf
not eax
add eax, 0xb20e2fc5
xor eax, 0x8700a4e1
rol eax, 0xa3
popf
pushf
not eax
add eax, 0xb085ad04
xor eax, 0xd0d8edf7
rol eax, 0xd6
popf
pushf
not eax
add eax, 0xced47121
xor eax, 0xf1fe1811
rol eax, 0xb3
popf
jmp 0x1402139ed
jmp 0x14021404a
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rdi], eax
push rax
pushf
mov eax, 0xde1fbd41
pushf
not eax
add eax, 0xcf6b1c14
xor eax, 0xe4eda444
rol eax, 0x14
popf
pushf
not eax
add eax, 0xbed25c93
xor eax, 0xacc0ebc5
rol eax, 0x99
popf
pushf
not eax
add eax, 0x82c6a20f
xor eax, 0xb553283b
rol eax, 0x77
popf
jmp 0x1402139ed
mov rax, rdi
mov rcx, qword [rsp + 0x1440]
xor rcx, rsp
call fcn.1402ac965
lea r11, [rsp + 0x1450]
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x30]
mov rsp, r11
pop r14
pop rdi
pop rsi
ret