Function at 0x140264aec
Capabilities:
Write file on windows

Disassembly:
push rax
pushf
mov eax, 0xccab7689
pushf
not eax
add eax, 0x800995dd
xor eax, 0xf8c2abe0
rol eax, 0x69
popf
pushf
not eax
add eax, 0xc7e86ae7
xor eax, 0x8e7f044f
rol eax, 0xa1
popf
cmp eax, 4
jne 0x140264b29
popf
pop rax
jmp 0x140264def
cmp eax, 0
jne 0x140264b38
popf
pop rax
jmp 0x140264bce
cmp eax, 3
jne 0x140264b47
popf
pop rax
jmp 0x140264d56
cmp eax, 1
jne 0x140264b56
popf
pop rax
jmp 0x140264cef
cmp eax, 0xa
jne 0x140264b65
popf
pop rax
jmp 0x140265165
cmp eax, 7
jne 0x140264b74
popf
pop rax
jmp 0x140264ff1
cmp eax, 6
jne 0x140264b83
popf
pop rax
jmp 0x140264f24
cmp eax, 0xb
jne 0x140264b92
popf
pop rax
jmp 0x1402651b3
cmp eax, 9
jne 0x140264ba1
popf
pop rax
jmp 0x140265119
cmp eax, 8
jne 0x140264bb0
popf
pop rax
jmp 0x140265088
cmp eax, 5
jne 0x140264bbf
popf
pop rax
jmp 0x140264e84
cmp eax, 2
jne 0x140264bce
popf
pop rax
jmp 0x140264d4d
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r14
mov eax, 0x60e8cf31
pushf
not eax
add eax, 0xb54e9839
xor eax, 0xed298cfd
rol eax, 0x78
popf
pushf
not eax
add eax, 0xc1bf7cc2
xor eax, 0x97063068
rol eax, 0xa8
popf
call fcn.1402a9954
sub rsp, rax
mov rax, qword [0x140120098]
xor rax, rsp
mov qword [rsp + 0x1440], rax
movsxd r10, edx
mov rdi, rcx
mov rax, r10
mov ebp, r9d
sar rax, 6
lea rcx, [0x1831e22ff]
pushf
sub rcx, 0x430bfebf
popf
and r10d, 0x3f
push r8
not r8
sub rbp, r8
pop r8
sub rbp, 1
mov rsi, r8
mov rax, qword [rcx + rax*8]
lea rdx, [r10 + r10*8]
mov r14, qword [rax + rdx*8 + 0x28]
xor eax, eax
mov qword [rdi], rax
mov dword [rdi + 8], eax
cmp r8, rbp
jae 0x140264cbc
push rax
pushf
mov eax, 0xac0df319
pushf
not eax
add eax, 0xbb0db0a0
xor eax, 0xafacd5e6
rol eax, 0xea
popf
pushf
not eax
add eax, 0xf63329ed
xor eax, 0xd9d46e36
rol eax, 0xed
popf
pushf
not eax
add eax, 0x937df62a
xor eax, 0xda73c801
rol eax, 0xab
popf
jmp 0x140264b1a
push rax
pushf
mov eax, 0x80cc6d2a
pushf
not eax
add eax, 0xea5ccfbb
xor eax, 0xf1601531
rol eax, 0xec
popf
pushf
not eax
add eax, 0xd8727cf8
xor eax, 0xd0f36368
rol eax, 0x50
popf
jmp 0x140264b1a
lea rbx, [rsp + 0x40]
push rax
pushf
mov eax, 0xe49d4de2
pushf
not eax
add eax, 0xeb942669
xor eax, 0xb9a9b399
rol eax, 0xcb
popf
pushf
not eax
add eax, 0x88a7ae9f
xor eax, 0x92794d6a
rol eax, 0x7c
popf
pushf
not eax
add eax, 0xc2628d1f
xor eax, 0xf36d2518
rol eax, 0xc2
popf
pushf
not eax
add eax, 0xceb0f5fd
xor eax, 0x82a81494
rol eax, 0xd3
popf
jmp 0x140264b1a
cmp rsi, rbp
jae 0x140264f24
movzx eax, word [rsi]
add rsi, 2
cmp ax, 0xa
jne 0x140264dbc
push rax
pushf
mov eax, 0x6433d60b
pushf
not eax
add eax, 0x86be7143
xor eax, 0x851a25ba
rol eax, 0x2c
popf
pushf
not eax
add eax, 0xf358b441
xor eax, 0xfecd7cf3
rol eax, 0x8b
popf
pushf
not eax
add eax, 0xb3276eb2
xor eax, 0xbeb98361
rol eax, 0x7b
popf
pushf
not eax
add eax, 0xcdaccd3a
xor eax, 0xa492aac4
rol eax, 0x82
popf
jmp 0x140264b1a
push rax
pushf
mov eax, 0x21525009
pushf
not eax
add eax, 0xdd482967
xor eax, 0xd29e4128
rol eax, 0x33
popf
pushf
not eax
add eax, 0xc102a988
xor eax, 0xfd575b2b
rol eax, 0xd8
popf
jmp 0x140264b1a
add dword [rdi + 8], 2
mov ecx, 0x3c77706c
pushf
not ecx
add ecx, 0xfdc8257d
xor ecx, 0xf0bccc56
rol ecx, 0xe1
popf
pushf
not ecx
add ecx, 0xe7ec0e88
xor ecx, 0xaab68ef3
rol ecx, 0x40
popf
pushf
not ecx
add ecx, 0xf51d0437
xor ecx, 0x86776f2d
rol ecx, 0x82
popf
mov word [rbx], cx
add rbx, 2
push rax
pushf
mov eax, 0x8f2df870
pushf
not eax
add eax, 0x862f0420
xor eax, 0xf7a946ae
rol eax, 0xb
popf
pushf
not eax
add eax, 0xaaac4731
xor eax, 0xa21d4f3b
rol eax, 0xf9
popf
pushf
not eax
add eax, 0xe22c624e
xor eax, 0xc097a56d
rol eax, 0xd7
popf
jmp 0x140264b1a
mov word [rbx], ax
add rbx, 2
lea rax, [rsp + 0x143e]
cmp rbx, rax
jb 0x140264ecb
push rax
pushf
mov eax, 0xb0aeaf71
pushf
not eax
add eax, 0x9b042ec7
xor eax, 0x8dc9aa84
rol eax, 0x7a
popf
pushf
not eax
add eax, 0xf7e4ef68
xor eax, 0xb2467c16
rol eax, 0xc0
popf
jmp 0x140264b1a
push rax
pushf
mov eax, 0x2e5fbee0
pushf
not eax
add eax, 0xaa3acd3f
xor eax, 0xb5a16a59
rol eax, 0x9c
popf
pushf
not eax
add eax, 0xbacf5532
xor eax, 0xafda7aad
rol eax, 0x72
popf
pushf
not eax
add eax, 0xb68bf900
xor eax, 0xfdb2ddae
rol eax, 0x1d
popf
pushf
not eax
add eax, 0xa77db105
xor eax, 0xd4684354
rol eax, 0x3f
popf
jmp 0x140264b1a
and qword [rsp + 0x20], 0
lea rax, [rsp + 0x40]
sub rbx, rax
lea r9, [rsp + 0x30]
sar rbx, 1
lea rdx, [rsp + 0x40]
add ebx, ebx
mov rcx, r14
mov r8d, ebx
jmp 0x140264f48
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x140264fab
push rax
pushf
mov eax, 0xa09d3adb
pushf
not eax
add eax, 0xd2c025be
xor eax, 0xce0661fc
rol eax, 0xa3
popf
pushf
not eax
add eax, 0xbbfe24c6
xor eax, 0x961e42e8
rol eax, 0xe6
popf
pushf
not eax
add eax, 0xf6885eb9
xor eax, 0x87d14bb6
rol eax, 0xb9
popf
pushf
not eax
add eax, 0x9c7a9b34
xor eax, 0xb5f3ac77
rol eax, 0x42
popf
jmp 0x140264b1a
push rax
pushf
mov eax, 0x787a54cf
pushf
not eax
add eax, 0x92767185
xor eax, 0xfacf3fef
rol eax, 0xb9
popf
pushf
not eax
add eax, 0xfd34330b
xor eax, 0x96e5416c
rol eax, 0xe0
popf
pushf
not eax
add eax, 0xc6bdab7a
xor eax, 0xf51d1dd1
rol eax, 0xce
popf
jmp 0x140264b1a
mov eax, dword [rsp + 0x30]
add dword [rdi + 4], eax
cmp eax, ebx
jb 0x14026502f
push rax
pushf
mov eax, 0x5bbc5f44
pushf
not eax
add eax, 0xd27cda89
xor eax, 0x86dbbad2
rol eax, 0x86
popf
pushf
not eax
add eax, 0x90b17f83
xor eax, 0x89c11dc6
rol eax, 0x79
popf
jmp 0x140264b1a
push rax
pushf
mov eax, 0x8ced41bb
pushf
not eax
add eax, 0xd20e7af7
xor eax, 0x9de6f145
rol eax, 0x1e
popf
pushf
not eax
add eax, 0xd76c10a1
xor eax, 0xa21b3809
rol eax, 0xe1
popf
pushf
not eax
add eax, 0xacb41ca0
xor eax, 0xd2d73d13
rol eax, 0xb
popf
pushf
not eax
add eax, 0xed0a742f
xor eax, 0xb5758839
rol eax, 0xfc
popf
jmp 0x140264b1a
cmp rsi, rbp
jb 0x1402650c0
push rax
pushf
mov eax, 0x2a4dd044
pushf
not eax
add eax, 0x9d3cd52e
xor eax, 0x942e0637
rol eax, 8
popf
pushf
not eax
add eax, 0x95931c45
xor eax, 0xd490195e
rol eax, 0xd6
popf
jmp 0x140264b1a
push rax
pushf
mov eax, 0x1d11b370
pushf
not eax
add eax, 0xb66294c0
xor eax, 0xdd2c7d2e
rol eax, 0x7c
popf
pushf
not eax
add eax, 0x9b187773
xor eax, 0xd43cbfc3
rol eax, 0x50
popf
pushf
not eax
add eax, 0xb4c6ed20
xor eax, 0xa8620c4d
rol eax, 0x5d
popf
pushf
not eax
add eax, 0xb76c599b
xor eax, 0xd625a6cb
rol eax, 0xe3
popf
jmp 0x140264b1a
jmp 0x1402651b3
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rdi], eax
push rax
pushf
mov eax, 0x892bbb08
pushf
not eax
add eax, 0xa155333b
xor eax, 0xeda85358
rol eax, 0x22
popf
pushf
not eax
add eax, 0xf58132fc
xor eax, 0xa7d56d4e
rol eax, 0x57
popf
pushf
not eax
add eax, 0xb373a5f8
xor eax, 0xa4a75103
rol eax, 0x2c
popf
jmp 0x140264b1a
mov rax, rdi
mov rcx, qword [rsp + 0x1440]
xor rcx, rsp
call fcn.1402a1891
lea r11, [rsp + 0x1450]
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x30]
mov rsp, r11
pop r14
pop rdi
pop rsi
ret