Function at 0x1401396df
Capabilities:
Write file on windows

Disassembly:
push rax
pushf
mov eax, 0x29a8366e
pushf
not eax
add eax, 0xea9731fd
xor eax, 0xaac4de01
rol eax, 0xa8
popf
pushf
not eax
add eax, 0xd63af1fc
xor eax, 0xe14030e8
rol eax, 0x52
popf
pushf
not eax
add eax, 0xcb88f7eb
xor eax, 0xd96b90ee
rol eax, 0x5d
popf
pushf
not eax
add eax, 0xef6d9af7
xor eax, 0x845490a7
rol eax, 0xb7
popf
cmp eax, 4
jne 0x140139742
popf
pop rax
jmp 0x140139aba
cmp eax, 0
jne 0x140139751
popf
pop rax
jmp 0x140139805
cmp eax, 3
jne 0x140139760
popf
pop rax
jmp 0x140139a2d
cmp eax, 1
jne 0x14013976f
popf
pop rax
jmp 0x1401398b4
cmp eax, 0xd
jne 0x14013977e
popf
pop rax
jmp 0x140139e79
cmp eax, 7
jne 0x14013978d
popf
pop rax
jmp 0x140139c36
cmp eax, 6
jne 0x14013979c
popf
pop rax
jmp 0x140139bc9
cmp eax, 0xb
jne 0x1401397ab
popf
pop rax
jmp 0x140139ded
cmp eax, 0xc
jne 0x1401397ba
popf
pop rax
jmp 0x140139e3f
cmp eax, 8
jne 0x1401397c9
popf
pop rax
jmp 0x140139c81
cmp eax, 5
jne 0x1401397d8
popf
pop rax
jmp 0x140139b38
cmp eax, 2
jne 0x1401397e7
popf
pop rax
jmp 0x14013994a
cmp eax, 9
jne 0x1401397f6
popf
pop rax
jmp 0x140139ccb
cmp eax, 0xa
jne 0x140139805
popf
pop rax
jmp 0x140139d79
push rbx
sub rsp, 0x60
mov rax, qword [0x140092080]
xor rax, rsp
mov qword [rsp + 0x58], rax
cmp qword [rcx + 0x68], 0
mov rbx, rcx
je 0x140139881
push rax
pushf
mov eax, 0x3ae82d83
pushf
not eax
add eax, 0x9fbef41f
xor eax, 0xa1906f07
rol eax, 0xb9
popf
pushf
not eax
add eax, 0xb901c05e
xor eax, 0xd9e75cd8
rol eax, 0xf8
popf
pushf
not eax
add eax, 0xace0f9cc
xor eax, 0xf22d1b20
rol eax, 0x41
popf
pushf
not eax
add eax, 0xf66c68b1
xor eax, 0xa63d8398
rol eax, 0x5b
popf
jmp 0x140139733
push rax
pushf
mov eax, 0xaf16dfee
pushf
not eax
add eax, 0x9ca05435
xor eax, 0xd4694377
rol eax, 0xe
popf
pushf
not eax
add eax, 0xdfd1e27b
xor eax, 0xd205940f
rol eax, 0
popf
jmp 0x140139733
cmp byte [rcx + 0x71], 0
je 0x1401398f1
push rax
pushf
mov eax, 0xb149d489
pushf
not eax
add eax, 0xb16d75ae
xor eax, 0x8c1906d5
rol eax, 0x35
popf
pushf
not eax
add eax, 0xe72896e4
xor eax, 0xf8f70f8f
rol eax, 0x85
popf
jmp 0x140139733
push rax
pushf
mov eax, 0xb056ee58
pushf
not eax
add eax, 0xcdae36d2
xor eax, 0x8cb5aa86
rol eax, 0x67
popf
pushf
not eax
add eax, 0xb0755fe5
xor eax, 0xe08a61aa
rol eax, 0xa7
popf
pushf
not eax
add eax, 0x93afe081
xor eax, 0xf99f1e9e
rol eax, 0xd4
popf
pushf
not eax
add eax, 0xf667991b
xor eax, 0xe9742219
rol eax, 0x84
popf
jmp 0x140139733
mov rax, qword [rcx]
mov edx, 0x100e3634
pushf
not edx
add edx, 0xd9e2306e
xor edx, 0xe4197342
rol edx, 0x2c
popf
pushf
not edx
add edx, 0xb9ea3a29
xor edx, 0xeead78b3
rol edx, 0x21
popf
mov qword [rsp + 0x78], rdi
jmp 0x140139982
call qword [rax + Ordinal_26]
cmp eax, 0xffffffff
je 0x1401399e7
push rax
pushf
mov eax, 0x824cbd06
pushf
not eax
add eax, 0xb235ebee
xor eax, 0xfcf13226
rol eax, 0x9a
popf
pushf
not eax
add eax, 0xf5fa30a6
xor eax, 0xc334f3e0
rol eax, 0x87
popf
pushf
not eax
add eax, 0xc304b15c
xor eax, 0xc3cc9d43
rol eax, 0xdb
popf
pushf
not eax
add eax, 0xba11a7fe
xor eax, 0x88623555
rol eax, 0xb1
popf
jmp 0x140139733
push rax
pushf
mov eax, 0x5a94df31
pushf
not eax
add eax, 0x9f90c1ae
xor eax, 0xef76dc91
rol eax, 0x61
popf
pushf
not eax
add eax, 0xbf75ca0f
xor eax, 0xffac2d03
rol eax, 0xe9
popf
pushf
not eax
add eax, 0xeaa07870
xor eax, 0xf7de1740
rol eax, 0x28
popf
jmp 0x140139733
mov rcx, qword [rbx + 0x68]
lea rax, [rsp + 0x30]
lea rdx, [rbx + 0x74]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x58]
lea r8, [rsp + 0x38]
jmp 0x140139a4a
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::codecvt_char__char__struct__Mbstatet_::unshift_struct__Mbstatet____ptr64__char____ptr64__char____ptr64__char____ptr64____ptr64_const___ptr64]
test eax, eax
je 0x140139a87
push rax
pushf
mov eax, 0xc19855ec
pushf
not eax
add eax, 0x9c351e7c
xor eax, 0xf04a48be
rol eax, 0x16
popf
pushf
not eax
add eax, 0xfd2b1e70
xor eax, 0xb0e068cf
rol eax, 0xa4
popf
jmp 0x140139733
push rax
pushf
mov eax, 0x3e74d66
pushf
not eax
add eax, 0xfcb64010
xor eax, 0xdf443e3a
rol eax, 0xc9
popf
pushf
not eax
add eax, 0xf29d0de7
xor eax, 0xdd43e797
rol eax, 0xed
popf
jmp 0x140139733
sub eax, 1
je 0x140139b05
push rax
pushf
mov eax, 0x59938ca2
pushf
not eax
add eax, 0xbf2d3400
xor eax, 0xe292f4c3
rol eax, 0x5d
popf
pushf
not eax
add eax, 0x9ff413c9
xor eax, 0x8a924cb9
rol eax, 0x24
popf
pushf
not eax
add eax, 0xf88a1b4f
xor eax, 0xa07bb68a
rol eax, 0xd7
popf
jmp 0x140139733
push rax
pushf
mov eax, 0xbcca45c9
pushf
not eax
add eax, 0xf335990b
xor eax, 0x88c680ff
rol eax, 0xd7
popf
pushf
not eax
add eax, 0xb51ab704
xor eax, 0xd52b601a
rol eax, 0xec
popf
jmp 0x140139733
cmp eax, 2
jne 0x140139b96
push rax
pushf
mov eax, 0x55f9782a
pushf
not eax
add eax, 0xaa837c7d
xor eax, 0xbdc0f0b5
rol eax, 0x83
popf
pushf
not eax
add eax, 0xec621ec5
xor eax, 0xc43bfcf2
rol eax, 0xfc
popf
pushf
not eax
add eax, 0xd26e1be6
xor eax, 0xfe2bbd31
rol eax, 0x93
popf
pushf
not eax
add eax, 0xdfb837d8
xor eax, 0xeebb25d2
rol eax, 0xf9
popf
jmp 0x140139733
push rax
pushf
mov eax, 0x86f3c017
pushf
not eax
add eax, 0xaa833d45
xor eax, 0xc070efe2
rol eax, 0x98
popf
pushf
not eax
add eax, 0xada4f1ac
xor eax, 0xedc0f219
rol eax, 0xa6
popf
jmp 0x140139733
mov byte [rbx + 0x71], 0
mov al, 0x8a
pushf
not al
add al, 0x82
xor al, 0x36
rol al, 0xac
popf
pushf
not al
add al, 0xb
xor al, 0x5d
rol al, 9
popf
pushf
not al
add al, 0xaa
xor al, 0x6c
rol al, 0x8e
popf
pushf
not al
add al, 0x21
xor al, 0x94
rol al, 0x38
popf
push rax
pushf
mov eax, 0x4bbccdad
pushf
not eax
add eax, 0x92471c65
xor eax, 0xedc4166c
rol eax, 0xbe
popf
pushf
not eax
add eax, 0xc6273875
xor eax, 0xd8d3a23e
rol eax, 0xa9
popf
jmp 0x140139733
mov rdi, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x58]
xor rcx, rsp
call fcn.140108cb2
add rsp, 0x60
pop rbx
ret
mov byte [rbx + 0x71], 0
push rax
pushf
mov eax, 0xc3dca1d0
pushf
not eax
add eax, 0x9f6a2712
xor eax, 0xd5679951
rol eax, 0x60
popf
pushf
not eax
add eax, 0xc4c3a221
xor eax, 0xc1e33600
rol eax, 0x56
popf
pushf
not eax
add eax, 0xef3c521b
xor eax, 0xeb1f47ee
rol eax, 0x39
popf
jmp 0x140139733
mov rdi, qword [rsp + 0x30]
lea rax, [rsp + 0x38]
sub rdi, rax
je 0x140139d20
push rax
pushf
mov eax, 0x5c7077c2
pushf
not eax
add eax, 0xabf4ece7
xor eax, 0xb7830a52
rol eax, 0xa5
popf
pushf
not eax
add eax, 0xb689830c
xor eax, 0xa70e8460
rol eax, 0xcb
popf
pushf
not eax
add eax, 0x8fcc5eb1
xor eax, 0xd749fe4c
rol eax, 0xbd
popf
jmp 0x140139733
push rax
pushf
mov eax, 0x9406e47e
pushf
not eax
add eax, 0x8e488f7c
xor eax, 0xea83e181
rol eax, 0x94
popf
pushf
not eax
add eax, 0xca331cdd
xor eax, 0xfd8ee1d1
rol eax, 0x6b
popf
pushf
not eax
add eax, 0xeeaa6dbb
xor eax, 0xf1d3cbcc
rol eax, 0xce
popf
pushf
not eax
add eax, 0xcae26da4
xor eax, 0xb9646ff0
rol eax, 0xa6
popf
jmp 0x140139733
mov r9, qword [rbx + 0x80]
lea rcx, [rsp + 0x38]
mov r8, rdi
mov edx, 0x6bc5efa4
pushf
not edx
add edx, 0xd74ce6e8
xor edx, 0xd239a15b
rol edx, 0xd2
popf
pushf
not edx
add edx, 0xddb15151
xor edx, 0xe46bee46
rol edx, 0xa3
popf
pushf
not edx
add edx, 0xc6eae545
xor edx, 0xb97d2abc
rol edx, 0x8a
popf
pushf
not edx
add edx, 0x9fa33e5e
xor edx, 0x8ffaaa4a
rol edx, 0xcc
popf
jmp 0x140139de2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rdi, rax
jne 0x140139e3f
cmp byte [rbx + 0x71], 0
sete al
jmp 0x140139c36
xor al, al
jmp 0x140139c36
mov al, 0x59
pushf
not al
add al, 0xf8
xor al, 0x7c
rol al, 0x7b
popf
pushf
not al
add al, 0x15
xor al, 2
rol al, 0x34
popf
pushf
not al
add al, 0x25
xor al, 0xe8
rol al, 0x39
popf
pushf
not al
add al, 0xa2
xor al, 0x16
rol al, 0x84
popf
mov rcx, qword [rsp + 0x58]
xor rcx, rsp
call fcn.140108cb2
add rsp, 0x60
pop rbx
ret