Function at 0x140137c47
Capabilities:
Write file on windows

Disassembly:
push rax
pushf
mov eax, 0xa9f55146
pushf
not eax
add eax, 0x866ec676
xor eax, 0xc082a32a
rol eax, 0xd2
popf
pushf
not eax
add eax, 0xe80bcc1d
xor eax, 0x887317ff
rol eax, 2
popf
pushf
not eax
add eax, 0x86ceefa6
xor eax, 0xfb0018d1
rol eax, 0x16
popf
pushf
not eax
add eax, 0xeb19a40f
xor eax, 0xc7f4b4a4
rol eax, 0xba
popf
cmp eax, 4
jne 0x140137caa
popf
pop rax
jmp 0x140137f8f
cmp eax, 0
jne 0x140137cb9
popf
pop rax
jmp 0x140137d4f
cmp eax, 3
jne 0x140137cc8
popf
pop rax
jmp 0x140137ef9
cmp eax, 1
jne 0x140137cd7
popf
pop rax
jmp 0x140137ea5
cmp eax, 0xa
jne 0x140137ce6
popf
pop rax
jmp 0x1401382dd
cmp eax, 7
jne 0x140137cf5
popf
pop rax
jmp 0x140138156
cmp eax, 6
jne 0x140137d04
popf
pop rax
jmp 0x14013808f
cmp eax, 0xb
jne 0x140137d13
popf
pop rax
jmp 0x14013832b
cmp eax, 9
jne 0x140137d22
popf
pop rax
jmp 0x1401382a4
cmp eax, 8
jne 0x140137d31
popf
pop rax
jmp 0x1401381ed
cmp eax, 5
jne 0x140137d40
popf
pop rax
jmp 0x140137fde
cmp eax, 2
jne 0x140137d4f
popf
pop rax
jmp 0x140137ef0
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r14
mov eax, 0x423cc782
pushf
not eax
add eax, 0x8291ebaf
xor eax, 0x896a1a84
rol eax, 0x54
popf
pushf
not eax
add eax, 0xfd5bafcf
xor eax, 0xf2d4a5b0
rol eax, 0x5b
popf
pushf
not eax
add eax, 0xcaba1ac9
xor eax, 0xc0740da4
rol eax, 0x1b
popf
pushf
not eax
add eax, 0xdae83519
xor eax, 0xef09cb8d
rol eax, 0x6d
popf
call fcn.140181e18
sub rsp, rax
mov rax, qword [0x140030040]
xor rax, rsp
mov qword [rsp + 0x1440], rax
movsxd r10, edx
mov rdi, rcx
mov rax, r10
mov ebp, r9d
sar rax, 6
lea rcx, [0x19e51a316]
pushf
sub rcx, 0x5e4e87b6
popf
and r10d, 0x3f
push r8
not r8
sub rbp, r8
pop r8
sub rbp, 1
mov rsi, r8
mov rax, qword [rcx + rax*8]
lea rdx, [r10 + r10*8]
mov r14, qword [rax + rdx*8 + 0x28]
xor eax, eax
mov qword [rdi], rax
mov dword [rdi + 8], eax
cmp r8, rbp
jae 0x140137e4c
push rax
pushf
mov eax, 0x1f631d2
pushf
not eax
add eax, 0xa611ce2e
xor eax, 0xa5182f70
rol eax, 0xe2
popf
pushf
not eax
add eax, 0xe9c56e23
xor eax, 0xedb6a176
rol eax, 0x85
popf
jmp 0x140137c9b
push rax
pushf
mov eax, 0xd411a037
pushf
not eax
add eax, 0xeb0be74b
xor eax, 0xef0b81da
rol eax, 0xe3
popf
pushf
not eax
add eax, 0xcfc1d9dd
xor eax, 0xf559b754
rol eax, 0x60
popf
pushf
not eax
add eax, 0x86bfec06
xor eax, 0xde965048
rol eax, 0xf3
popf
pushf
not eax
add eax, 0xf398f92c
xor eax, 0xae767b0f
rol eax, 0xa7
popf
jmp 0x140137c9b
lea rbx, [rsp + 0x40]
push rax
pushf
mov eax, 0x5c4c10a1
pushf
not eax
add eax, 0xbc44c5c7
xor eax, 0xa8d06e64
rol eax, 0x95
popf
pushf
not eax
add eax, 0xb238e6c5
xor eax, 0xe6a8c1cb
rol eax, 0xfd
popf
pushf
not eax
add eax, 0xe73bc5ad
xor eax, 0x91516ca0
rol eax, 0x39
popf
jmp 0x140137c9b
cmp rsi, rbp
jae 0x14013808f
mov al, byte [rsi]
inc rsi
cmp al, 0xa
jne 0x140137f48
push rax
pushf
mov eax, 0x467b959
pushf
not eax
add eax, 0xc5593b3e
xor eax, 0xd5019366
rol eax, 0xc9
popf
pushf
not eax
add eax, 0xfcaa131a
xor eax, 0x9735c6fc
rol eax, 0x75
popf
pushf
not eax
add eax, 0x8bfef8d1
xor eax, 0x89ad82a7
rol eax, 0xbe
popf
jmp 0x140137c9b
push rax
pushf
mov eax, 0xc2151359
pushf
not eax
add eax, 0x9aa32d9b
xor eax, 0xb99fe5d1
rol eax, 0xb5
popf
pushf
not eax
add eax, 0xc55b270c
xor eax, 0x8f14e9dc
rol eax, 0xe6
popf
pushf
not eax
add eax, 0xcda30712
xor eax, 0xbca7c2fa
rol eax, 0xc7
popf
jmp 0x140137c9b
inc dword [rdi + 8]
mov byte [rbx], 0xd
inc rbx
push rax
pushf
mov eax, 0x30eacd41
pushf
not eax
add eax, 0xb1360949
xor eax, 0xc403dcf4
rol eax, 0xcf
popf
pushf
not eax
add eax, 0xc9bcd92f
xor eax, 0xf7178ac1
rol eax, 0xa2
popf
pushf
not eax
add eax, 0xb5ddf742
xor eax, 0xfc8b00b3
rol eax, 0x9b
popf
jmp 0x140137c9b
mov byte [rbx], al
inc rbx
lea rax, [rsp + 0x143f]
cmp rbx, rax
jb 0x140138049
push rax
pushf
mov eax, 0xce99955f
pushf
not eax
add eax, 0x8c46fe88
xor eax, 0xf1939ba7
rol eax, 0x3c
popf
pushf
not eax
add eax, 0xc2d88bc0
xor eax, 0xad507593
rol eax, 0x8d
popf
pushf
not eax
add eax, 0xa1b058c8
xor eax, 0xcb27ddb9
rol eax, 0x30
popf
pushf
not eax
add eax, 0xf14cc9b2
xor eax, 0xdf659a09
rol eax, 0x94
popf
jmp 0x140137c9b
push rax
pushf
mov eax, 0x4870d0d6
pushf
not eax
add eax, 0x9c8582c8
xor eax, 0x8ec8bc79
rol eax, 7
popf
pushf
not eax
add eax, 0xd22199fd
xor eax, 0xe8a1648a
rol eax, 0xe2
popf
pushf
not eax
add eax, 0xec4ba99c
xor eax, 0xb95ced85
rol eax, 0x76
popf
jmp 0x140137c9b
and qword [rsp + 0x20], 0
lea rax, [rsp + 0x40]
sub ebx, eax
lea r9, [rsp + 0x30]
mov r8d, ebx
lea rdx, [rsp + 0x40]
mov rcx, r14
jmp 0x1401380ad
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x1401380fd
push rax
pushf
mov eax, 0x75afd338
pushf
not eax
add eax, 0x92c3ce1d
xor eax, 0x81bc0ac8
rol eax, 0x69
popf
pushf
not eax
add eax, 0xa7f4cca6
xor eax, 0xc6b81a60
rol eax, 0xf8
popf
pushf
not eax
add eax, 0x92613fad
xor eax, 0x85d29283
rol eax, 0xda
popf
jmp 0x140137c9b
push rax
pushf
mov eax, 0x2810fb91
pushf
not eax
add eax, 0xe47227ee
xor eax, 0x86343fdb
rol eax, 0xf6
popf
pushf
not eax
add eax, 0xb270a65f
xor eax, 0xaa321d46
rol eax, 0x83
popf
pushf
not eax
add eax, 0xd7110473
xor eax, 0xe3396ae7
rol eax, 0x20
popf
pushf
not eax
add eax, 0xb596bcf3
xor eax, 0xd3ece58a
rol eax, 0x37
popf
jmp 0x140137c9b
mov eax, dword [rsp + 0x30]
add dword [rdi + 4], eax
cmp eax, ebx
jb 0x1401381a7
push rax
pushf
mov eax, 0xfec491d2
pushf
not eax
add eax, 0xaaa15682
xor eax, 0xcf710f13
rol eax, 0x61
popf
pushf
not eax
add eax, 0xdb3b0fb1
xor eax, 0xf3d2d888
rol eax, 0x19
popf
pushf
not eax
add eax, 0xe3f073c7
xor eax, 0x822c58c5
rol eax, 0xbd
popf
jmp 0x140137c9b
push rax
pushf
mov eax, 0x57bca524
pushf
not eax
add eax, 0x8a9a885e
xor eax, 0xdf304ea8
rol eax, 0x6e
popf
pushf
not eax
add eax, 0xe460068c
xor eax, 0x85a3037f
rol eax, 0xd2
popf
pushf
not eax
add eax, 0x875c2bae
xor eax, 0xd59c364b
rol eax, 0x44
popf
jmp 0x140137c9b
cmp rsi, rbp
jb 0x14013824b
push rax
pushf
mov eax, 0x4622ac91
pushf
not eax
add eax, 0xe4f7592f
xor eax, 0xbe2e438b
rol eax, 0x22
popf
pushf
not eax
add eax, 0xa63063de
xor eax, 0xdbf1aa09
rol eax, 0xb4
popf
pushf
not eax
add eax, 0xbc99053a
xor eax, 0xc1cf71c4
rol eax, 0x35
popf
pushf
not eax
add eax, 0xd7f008e0
xor eax, 0x924bc81e
rol eax, 0xe2
popf
jmp 0x140137c9b
push rax
pushf
mov eax, 0xde3697cd
pushf
not eax
add eax, 0xf3daa049
xor eax, 0xca496e82
rol eax, 0xd6
popf
pushf
not eax
add eax, 0xfcfeb151
xor eax, 0x9c1fd6ef
rol eax, 0x4f
popf
pushf
not eax
add eax, 0xb98bd78e
xor eax, 0xf813eec1
rol eax, 0x42
popf
pushf
not eax
add eax, 0xbc448f90
xor eax, 0xbc82ed8c
rol eax, 0xcc
popf
jmp 0x140137c9b
jmp 0x14013832b
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rdi], eax
push rax
pushf
mov eax, 0xd63abf05
pushf
not eax
add eax, 0xe72275b4
xor eax, 0xe08291cd
rol eax, 0xba
popf
pushf
not eax
add eax, 0xd509ea36
xor eax, 0xa20336bd
rol eax, 0x4a
popf
pushf
not eax
add eax, 0x91c1d059
xor eax, 0xe43538be
rol eax, 0x81
popf
jmp 0x140137c9b
mov rax, rdi
mov rcx, qword [rsp + 0x1440]
xor rcx, rsp
call fcn.140178dd1
lea r11, [rsp + 0x1450]
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x30]
mov rsp, r11
pop r14
pop rdi
pop rsi
ret