Function at 0x140146189
Capabilities:
Write file on windows

Disassembly:
push rax
pushf
mov eax, 0xe80ef61e
pushf
not eax
add eax, 0xe4009743
xor eax, 0x82e6150f
rol eax, 0x66
popf
pushf
not eax
add eax, 0xc4ab6289
xor eax, 0xc59fc9c8
rol eax, 0x48
popf
pushf
not eax
add eax, 0xd8e6111a
xor eax, 0xb747ae5e
rol eax, 0x18
popf
cmp eax, 4
jne 0x1401461d9
popf
pop rax
jmp 0x140146553
cmp eax, 0
jne 0x1401461e8
popf
pop rax
jmp 0x14014629c
cmp eax, 3
jne 0x1401461f7
popf
pop rax
jmp 0x1401464a0
cmp eax, 1
jne 0x140146206
popf
pop rax
jmp 0x14014634b
cmp eax, 0xd
jne 0x140146215
popf
pop rax
jmp 0x14014693a
cmp eax, 7
jne 0x140146224
popf
pop rax
jmp 0x1401466fb
cmp eax, 6
jne 0x140146233
popf
pop rax
jmp 0x140146675
cmp eax, 0xb
jne 0x140146242
popf
pop rax
jmp 0x1401468ae
cmp eax, 0xc
jne 0x140146251
popf
pop rax
jmp 0x1401468ed
cmp eax, 8
jne 0x140146260
popf
pop rax
jmp 0x14014676c
cmp eax, 5
jne 0x14014626f
popf
pop rax
jmp 0x1401465e4
cmp eax, 2
jne 0x14014627e
popf
pop rax
jmp 0x1401463e1
cmp eax, 9
jne 0x14014628d
popf
pop rax
jmp 0x1401467b6
cmp eax, 0xa
jne 0x14014629c
popf
pop rax
jmp 0x140146864
push rbx
sub rsp, 0x60
mov rax, qword [0x140015040]
xor rax, rsp
mov qword [rsp + 0x58], rax
cmp qword [rcx + 0x68], 0
mov rbx, rcx
je 0x1401462f2
push rax
pushf
mov eax, 0x88b41b50
pushf
not eax
add eax, 0xcd95c14e
xor eax, 0x83ded463
rol eax, 0xb2
popf
pushf
not eax
add eax, 0xab345653
xor eax, 0xe4f93955
rol eax, 0x2a
popf
jmp 0x1401461ca
push rax
pushf
mov eax, 0x80460f74
pushf
not eax
add eax, 0xe732dff0
xor eax, 0xcbd53ebf
rol eax, 0x78
popf
pushf
not eax
add eax, 0x875ca0f8
xor eax, 0xb6d55771
rol eax, 0xa7
popf
pushf
not eax
add eax, 0xb01c6a9f
xor eax, 0xc43c4bd8
rol eax, 0x8b
popf
pushf
not eax
add eax, 0xc094d0d4
xor eax, 0xfcc6eb1a
rol eax, 0xab
popf
jmp 0x1401461ca
cmp byte [rcx + 0x71], 0
je 0x14014639b
push rax
pushf
mov eax, 0xf59946da
pushf
not eax
add eax, 0xd6cccf54
xor eax, 0x8f7aa9cc
rol eax, 0x8b
popf
pushf
not eax
add eax, 0xa675f738
xor eax, 0x93182748
rol eax, 0xa9
popf
pushf
not eax
add eax, 0xde79a8be
xor eax, 0xfdb08d21
rol eax, 0xd
popf
jmp 0x1401461ca
push rax
pushf
mov eax, 0xae253742
pushf
not eax
add eax, 0x9c871487
xor eax, 0xd347ce1c
rol eax, 0x92
popf
pushf
not eax
add eax, 0xf576b4d3
xor eax, 0xab24fbc8
rol eax, 0xde
popf
pushf
not eax
add eax, 0x956ae73c
xor eax, 0x949e9839
rol eax, 0x21
popf
jmp 0x1401461ca
mov rax, qword [rcx]
mov edx, 0x230627ac
pushf
not edx
add edx, 0x9534ed35
xor edx, 0xbb59eae4
rol edx, 0xcc
popf
pushf
not edx
add edx, 0xf4be29e2
xor edx, 0x9e1618a7
rol edx, 0x99
popf
pushf
not edx
add edx, 0xe5c162be
xor edx, 0xf47e3fcd
rol edx, 0x65
popf
mov qword [rsp + 0x78], rdi
jmp 0x14014642e
call qword [rax + 0x18]
cmp eax, 0xffffffff
je 0x14014646d
push rax
pushf
mov eax, 0x76d456f7
pushf
not eax
add eax, 0xef68398d
xor eax, 0x92443848
rol eax, 0x26
popf
pushf
not eax
add eax, 0xa2b81ec5
xor eax, 0xe0c1674a
rol eax, 0xe6
popf
jmp 0x1401461ca
push rax
pushf
mov eax, 0xc408e065
pushf
not eax
add eax, 0xd3cae627
xor eax, 0xc2aa5292
rol eax, 0xc4
popf
pushf
not eax
add eax, 0xc28038da
xor eax, 0xebfaf39d
rol eax, 0x76
popf
jmp 0x1401461ca
mov rcx, qword [rbx + 0x68]
lea rax, [rsp + 0x30]
lea rdx, [rbx + 0x74]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x58]
lea r8, [rsp + 0x38]
jmp 0x1401464bd
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::codecvt_char__char__struct__Mbstatet_::unshift_struct__Mbstatet____ptr64__char____ptr64__char____ptr64__char____ptr64____ptr64_const___ptr64]
test eax, eax
je 0x14014650d
push rax
pushf
mov eax, 0x524a4868
pushf
not eax
add eax, 0xd5afe224
xor eax, 0xc93dbef6
rol eax, 0xc4
popf
pushf
not eax
add eax, 0xa41f37a5
xor eax, 0xfa619a80
rol eax, 0x4c
popf
pushf
not eax
add eax, 0x915e48f0
xor eax, 0xbbd948a8
rol eax, 0x1f
popf
jmp 0x1401461ca
push rax
pushf
mov eax, 0x8647d641
pushf
not eax
add eax, 0x9200ef89
xor eax, 0xc2a654b4
rol eax, 0x51
popf
pushf
not eax
add eax, 0xaeb971e8
xor eax, 0xed84e7bc
rol eax, 0xf2
popf
pushf
not eax
add eax, 0x923e9586
xor eax, 0xb1e69871
rol eax, 0xdd
popf
jmp 0x1401461ca
sub eax, 1
je 0x14014658b
push rax
pushf
mov eax, 0xb149c9c9
pushf
not eax
add eax, 0xe035e2b5
xor eax, 0x93363d9c
rol eax, 0xa7
popf
pushf
not eax
add eax, 0x8c30cd2b
xor eax, 0x9f0a114c
rol eax, 0xae
popf
jmp 0x1401461ca
push rax
pushf
mov eax, 0xa786b6b4
pushf
not eax
add eax, 0xcfc50a59
xor eax, 0xf4d766c7
rol eax, 0x2f
popf
pushf
not eax
add eax, 0xfe55b1b7
xor eax, 0xaefe3f3f
rol eax, 0xd1
popf
pushf
not eax
add eax, 0xf4512625
xor eax, 0xdd2c935d
rol eax, 0x9c
popf
pushf
not eax
add eax, 0xd198f9f7
xor eax, 0x8f796873
rol eax, 0x4d
popf
jmp 0x1401461ca
cmp eax, 2
jne 0x14014661c
push rax
pushf
mov eax, 0x8d4470fd
pushf
not eax
add eax, 0xf04d3917
xor eax, 0xe2c1b6f8
rol eax, 0x68
popf
pushf
not eax
add eax, 0xaece41d2
xor eax, 0xe34f6050
rol eax, 0x88
popf
jmp 0x1401461ca
push rax
pushf
mov eax, 0x1fe90ef0
pushf
not eax
add eax, 0xc9cc8b32
xor eax, 0xf6d9b667
rol eax, 0x3c
popf
pushf
not eax
add eax, 0xb0531991
xor eax, 0xf37c5dd8
rol eax, 0x4b
popf
pushf
not eax
add eax, 0xf84ee674
xor eax, 0xf42ef41a
rol eax, 0xbe
popf
pushf
not eax
add eax, 0xda3afe4b
xor eax, 0xcf800d2e
rol eax, 0xbe
popf
jmp 0x1401461ca
mov byte [rbx + 0x71], 0
mov al, 0xed
pushf
not al
add al, 0xe7
xor al, 0xb7
rol al, 0xec
popf
pushf
not al
add al, 0x9a
xor al, 0x36
rol al, 0xb3
popf
pushf
not al
add al, 0x93
xor al, 0xf6
rol al, 0x51
popf
push rax
pushf
mov eax, 0xa7d29298
pushf
not eax
add eax, 0xcae6fbac
xor eax, 0xbafd4715
rol eax, 0xdc
popf
pushf
not eax
add eax, 0xfc7563eb
xor eax, 0xdf95fc38
rol eax, 0x3b
popf
pushf
not eax
add eax, 0xf8df5902
xor eax, 0x8aefe57f
rol eax, 0x36
popf
pushf
not eax
add eax, 0x99a610ab
xor eax, 0xdfaa09f4
rol eax, 0x33
popf
jmp 0x1401461ca
mov rdi, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x58]
xor rcx, rsp
call fcn.14012ed31
add rsp, 0x60
pop rbx
ret
mov byte [rbx + 0x71], 0
push rax
pushf
mov eax, 0xf9ea3606
pushf
not eax
add eax, 0xf1a84c02
xor eax, 0x93c83354
rol eax, 0x3f
popf
pushf
not eax
add eax, 0xdc009ee4
xor eax, 0xf129a834
rol eax, 0xec
popf
pushf
not eax
add eax, 0xabab2f16
xor eax, 0xfb6fa187
rol eax, 0xa7
popf
jmp 0x1401461ca
mov rdi, qword [rsp + 0x30]
lea rax, [rsp + 0x38]
sub rdi, rax
je 0x14014681e
push rax
pushf
mov eax, 0x993c3fca
pushf
not eax
add eax, 0xcc6a2116
xor eax, 0xcf1c0343
rol eax, 0xfb
popf
pushf
not eax
add eax, 0xfda4e086
xor eax, 0x8ae067c8
rol eax, 0x26
popf
pushf
not eax
add eax, 0xe1cb97bd
xor eax, 0xc21fe77c
rol eax, 3
popf
pushf
not eax
add eax, 0xfb33d953
xor eax, 0xa42360c6
rol eax, 0x82
popf
jmp 0x1401461ca
push rax
pushf
mov eax, 0x2de71bba
pushf
not eax
add eax, 0xff0eb560
xor eax, 0xfa62213b
rol eax, 3
popf
pushf
not eax
add eax, 0xd95e1e27
xor eax, 0xfa01afee
rol eax, 0xa9
popf
pushf
not eax
add eax, 0xf42cfe0c
xor eax, 0x903f6b01
rol eax, 0x36
popf
jmp 0x1401461ca
mov r9, qword [rbx + 0x80]
lea rcx, [rsp + 0x38]
mov r8, rdi
mov edx, 0x8d0c843e
pushf
not edx
add edx, 0xd7c30ae4
xor edx, 0xf88a317e
rol edx, 0x76
popf
pushf
not edx
add edx, 0xcf9d4d49
xor edx, 0xd8b0ba1b
rol edx, 0x76
popf
jmp 0x1401468a3
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rdi, rax
jne 0x1401468ed
cmp byte [rbx + 0x71], 0
sete al
jmp 0x1401466fb
xor al, al
jmp 0x1401466fb
mov al, 0x9f
pushf
not al
add al, 0x60
xor al, 0x67
rol al, 0x91
popf
pushf
not al
add al, 0xeb
xor al, 0xbb
rol al, 0x83
popf
mov rcx, qword [rsp + 0x58]
xor rcx, rsp
call fcn.14012ed31
add rsp, 0x60
pop rbx
ret