Function at 0x14003d042
Capabilities:
Write file on windows

Disassembly:
push rax
pushf
mov eax, 0x813f8c21
pushf
not eax
add eax, 0xcb093001
xor eax, 0xa9a72ff0
rol eax, 0xd4
popf
pushf
not eax
add eax, 0xe9fbf5a5
xor eax, 0xc18006a6
rol eax, 0xc7
popf
pushf
not eax
add eax, 0xc7c8ef53
xor eax, 0xd19b8a0b
rol eax, 0xda
popf
pushf
not eax
add eax, 0xe90e9481
xor eax, 0x95a956d1
rol eax, 0xd4
popf
cmp eax, 4
jne 0x14003d0a5
popf
pop rax
jmp 0x14003d358
cmp eax, 0
jne 0x14003d0b4
popf
pop rax
jmp 0x14003d14a
cmp eax, 3
jne 0x14003d0c3
popf
pop rax
jmp 0x14003d2d2
cmp eax, 1
jne 0x14003d0d2
popf
pop rax
jmp 0x14003d26b
cmp eax, 0xa
jne 0x14003d0e1
popf
pop rax
jmp 0x14003d697
cmp eax, 7
jne 0x14003d0f0
popf
pop rax
jmp 0x14003d549
cmp eax, 6
jne 0x14003d0ff
popf
pop rax
jmp 0x14003d48f
cmp eax, 0xb
jne 0x14003d10e
popf
pop rax
jmp 0x14003d6e5
cmp eax, 9
jne 0x14003d11d
popf
pop rax
jmp 0x14003d65e
cmp eax, 8
jne 0x14003d12c
popf
pop rax
jmp 0x14003d5cd
cmp eax, 5
jne 0x14003d13b
popf
pop rax
jmp 0x14003d3ef
cmp eax, 2
jne 0x14003d14a
popf
pop rax
jmp 0x14003d2c9
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r14
mov eax, 0x3886fdf
pushf
not eax
add eax, 0x8f238c32
xor eax, 0xba10436b
rol eax, 0x91
popf
pushf
not eax
add eax, 0xa1d41699
xor eax, 0xa361b3d3
rol eax, 6
popf
call fcn.140057e74
sub rsp, rax
mov rax, qword [0x140018008]
xor rax, rsp
mov qword [rsp + 0x1440], rax
movsxd r10, edx
mov rdi, rcx
mov rax, r10
mov ebp, r9d
sar rax, 6
lea rcx, [0x1ba6ef36b]
pushf
sub rcx, 0x7a6d5ceb
popf
and r10d, 0x3f
push r8
not r8
sub rbp, r8
pop r8
sub rbp, 1
mov rsi, r8
mov rax, qword [rcx + rax*8]
lea rdx, [r10 + r10*8]
mov r14, qword [rax + rdx*8 + 0x28]
xor eax, eax
mov qword [rdi], rax
mov dword [rdi + 8], eax
cmp r8, rbp
jae 0x14003d225
push rax
pushf
mov eax, 0xa6419288
pushf
not eax
add eax, 0xf083c190
xor eax, 0xbc1160e1
rol eax, 0x18
popf
pushf
not eax
add eax, 0xa90ad067
xor eax, 0xc2947d17
rol eax, 0x89
popf
jmp 0x14003d096
push rax
pushf
mov eax, 0x78d512c5
pushf
not eax
add eax, 0xb9082ee9
xor eax, 0xb7fc8c2f
rol eax, 0x6e
popf
pushf
not eax
add eax, 0xa91d0b6d
xor eax, 0xa7f04cc5
rol eax, 0x26
popf
pushf
not eax
add eax, 0xe8fbf4d4
xor eax, 0xae9b85be
rol eax, 0xe1
popf
jmp 0x14003d096
lea rbx, [rsp + 0x40]
push rax
pushf
mov eax, 0x615b5e60
pushf
not eax
add eax, 0xc16ea5d5
xor eax, 0x92fdd6db
rol eax, 0xc7
popf
pushf
not eax
add eax, 0x85a46f60
xor eax, 0xbcbf2a4d
rol eax, 0x1e
popf
pushf
not eax
add eax, 0xae4ce227
xor eax, 0xe03439bc
rol eax, 0x18
popf
pushf
not eax
add eax, 0xef5c2fd2
xor eax, 0x8fba8846
rol eax, 0xea
popf
jmp 0x14003d096
cmp rsi, rbp
jae 0x14003d48f
movzx eax, word [rsi]
add rsi, 2
cmp ax, 0xa
jne 0x14003d312
push rax
pushf
mov eax, 0x7c012f16
pushf
not eax
add eax, 0x9d2d6cb2
xor eax, 0x90471106
rol eax, 0xe
popf
pushf
not eax
add eax, 0xb88d9112
xor eax, 0xe56624b7
rol eax, 0x47
popf
jmp 0x14003d096
push rax
pushf
mov eax, 0x623b2183
pushf
not eax
add eax, 0xf84d5806
xor eax, 0x825e8cc8
rol eax, 4
popf
pushf
not eax
add eax, 0x9c3d2333
xor eax, 0xacce15af
rol eax, 0x66
popf
pushf
not eax
add eax, 0x8ddacd1b
xor eax, 0x9daffd5c
rol eax, 0xec
popf
jmp 0x14003d096
add dword [rdi + 8], 2
mov ecx, 0x3e0dfd53
pushf
not ecx
add ecx, 0xc312d400
xor ecx, 0x8ef30ff7
rol ecx, 0xdb
popf
pushf
not ecx
add ecx, 0xa5b57768
xor ecx, 0xaa2df72d
rol ecx, 0xb0
popf
pushf
not ecx
add ecx, 0xb994560b
xor ecx, 0xc5cb235c
rol ecx, 0x3d
popf
pushf
not ecx
add ecx, 0xbbdf8f2b
xor ecx, 0xe65cf571
rol ecx, 0x71
popf
mov word [rbx], cx
add rbx, 2
push rax
pushf
mov eax, 0x5b59d068
pushf
not eax
add eax, 0x86d55da1
xor eax, 0xf7dba8da
rol eax, 0xcc
popf
pushf
not eax
add eax, 0x874d3548
xor eax, 0x844f077d
rol eax, 0xb
popf
jmp 0x14003d096
mov word [rbx], ax
add rbx, 2
lea rax, [rsp + 0x143e]
cmp rbx, rax
jb 0x14003d436
push rax
pushf
mov eax, 0xc09ce75d
pushf
not eax
add eax, 0xc5a30f49
xor eax, 0x93adb93d
rol eax, 0xc5
popf
pushf
not eax
add eax, 0xbbceb414
xor eax, 0xe65ad947
rol eax, 0
popf
jmp 0x14003d096
push rax
pushf
mov eax, 0xf9b4e654
pushf
not eax
add eax, 0xe25d2be1
xor eax, 0xfb9cc4ae
rol eax, 0xbe
popf
pushf
not eax
add eax, 0xcac0f22d
xor eax, 0xb1412fed
rol eax, 0x7e
popf
pushf
not eax
add eax, 0xa1516fb8
xor eax, 0xecc4c5ab
rol eax, 0x4c
popf
pushf
not eax
add eax, 0xce815697
xor eax, 0xc7272a08
rol eax, 0x93
popf
jmp 0x14003d096
and qword [rsp + 0x20], 0
lea rax, [rsp + 0x40]
sub rbx, rax
lea r9, [rsp + 0x30]
sar rbx, 1
lea rdx, [rsp + 0x40]
add ebx, ebx
mov rcx, r14
mov r8d, ebx
jmp 0x14003d4b3
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x14003d503
push rax
pushf
mov eax, 0x2a5dc3d6
pushf
not eax
add eax, 0xacecacc6
xor eax, 0x85d820bc
rol eax, 0xfe
popf
pushf
not eax
add eax, 0x89de1458
xor eax, 0x91d95ea2
rol eax, 0x50
popf
pushf
not eax
add eax, 0xfd578049
xor eax, 0xc07625f7
rol eax, 0x39
popf
jmp 0x14003d096
push rax
pushf
mov eax, 0xf1d1e517
pushf
not eax
add eax, 0x9f69065b
xor eax, 0xf94a6a38
rol eax, 0x43
popf
pushf
not eax
add eax, 0xa1cb04e4
xor eax, 0xbbbf400f
rol eax, 0x55
popf
pushf
not eax
add eax, 0xbff37956
xor eax, 0x9f2b4858
rol eax, 0xd9
popf
jmp 0x14003d096
mov eax, dword [rsp + 0x30]
add dword [rdi + 4], eax
cmp eax, ebx
jb 0x14003d59a
push rax
pushf
mov eax, 0x4408ab3
pushf
not eax
add eax, 0xe053163f
xor eax, 0x9c90d027
rol eax, 0xf7
popf
pushf
not eax
add eax, 0xe0dd7e15
xor eax, 0xb3afce33
rol eax, 0xe2
popf
pushf
not eax
add eax, 0xdb14a9d6
xor eax, 0xf6c8de82
rol eax, 0x23
popf
jmp 0x14003d096
push rax
pushf
mov eax, 0x57edbec7
pushf
not eax
add eax, 0xb5db5ef4
xor eax, 0xa212dc48
rol eax, 0x1a
popf
pushf
not eax
add eax, 0x92257068
xor eax, 0xfe25725a
rol eax, 0xbe
popf
jmp 0x14003d096
cmp rsi, rbp
jb 0x14003d605
push rax
pushf
mov eax, 0x5bfd5c53
pushf
not eax
add eax, 0xd0fe1804
xor eax, 0xb590ad76
rol eax, 0xaf
popf
pushf
not eax
add eax, 0xe24c1bb8
xor eax, 0xd6e8bbff
rol eax, 0xdc
popf
jmp 0x14003d096
push rax
pushf
mov eax, 0x981b7748
pushf
not eax
add eax, 0xc8ef791e
xor eax, 0xed0dacd7
rol eax, 0x5f
popf
pushf
not eax
add eax, 0xcbaf1a5c
xor eax, 0x807cfa59
rol eax, 0x49
popf
pushf
not eax
add eax, 0xebeee814
xor eax, 0xe949201d
rol eax, 0x1b
popf
pushf
not eax
add eax, 0xef69672f
xor eax, 0xb32ed12c
rol eax, 0x90
popf
jmp 0x14003d096
jmp 0x14003d6e5
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rdi], eax
push rax
pushf
mov eax, 0x9b4b8da5
pushf
not eax
add eax, 0xb9fe02cf
xor eax, 0xb69c5341
rol eax, 0x1d
popf
pushf
not eax
add eax, 0xff049f05
xor eax, 0xac808ce4
rol eax, 0xa9
popf
pushf
not eax
add eax, 0x99e577cb
xor eax, 0x9d3cd140
rol eax, 0x50
popf
jmp 0x14003d096
mov rax, rdi
mov rcx, qword [rsp + 0x1440]
xor rcx, rsp
call fcn.140053af8
lea r11, [rsp + 0x1450]
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x30]
mov rsp, r11
pop r14
pop rdi
pop rsi
ret