Function at 0x1403cd97c
Capabilities:
Write file on windows

Disassembly:
push rax
pushf
mov eax, 0xea49be72
pushf
not eax
add eax, 0xefe511c3
xor eax, 0xe579420b
rol eax, 0x53
popf
pushf
not eax
add eax, 0xa0635131
xor eax, 0xac557255
rol eax, 0x7a
popf
pushf
not eax
add eax, 0xae85920b
xor eax, 0x9d1564f4
rol eax, 0xa7
popf
pushf
not eax
add eax, 0xf98dfb89
xor eax, 0xb3f90ce3
rol eax, 0x73
popf
cmp eax, 4
jne 0x1403cd9df
popf
pop rax
jmp 0x1403cdda9
cmp eax, 0
jne 0x1403cd9ee
popf
pop rax
jmp 0x1403cdb29
cmp eax, 3
jne 0x1403cd9fd
popf
pop rax
jmp 0x1403cdcda
cmp eax, 1
jne 0x1403cda0c
popf
pop rax
jmp 0x1403cdbd0
cmp eax, 0xd
jne 0x1403cda1b
popf
pop rax
jmp 0x1403ce18d
cmp eax, 7
jne 0x1403cda2a
popf
pop rax
jmp 0x1403cdea6
cmp eax, 0xe
jne 0x1403cda39
popf
pop rax
jmp 0x1403ce236
cmp eax, 0xb
jne 0x1403cda48
popf
pop rax
jmp 0x1403ce116
cmp eax, 0xc
jne 0x1403cda57
popf
pop rax
jmp 0x1403ce14e
cmp eax, 8
jne 0x1403cda66
popf
pop rax
jmp 0x1403cdef3
cmp eax, 0x10
jne 0x1403cda75
popf
pop rax
jmp 0x1403ce365
cmp eax, 2
jne 0x1403cda84
popf
pop rax
jmp 0x1403cdc46
cmp eax, 9
jne 0x1403cda93
popf
pop rax
jmp 0x1403cdfd9
cmp eax, 0x12
jne 0x1403cdaa2
popf
pop rax
jmp 0x1403ce42e
cmp eax, 6
jne 0x1403cdab1
popf
pop rax
jmp 0x1403cde37
cmp eax, 0x11
jne 0x1403cdac0
popf
pop rax
jmp 0x1403ce3db
cmp eax, 5
jne 0x1403cdacf
popf
pop rax
jmp 0x1403cddfc
cmp eax, 0x16
jne 0x1403cdade
popf
pop rax
jmp 0x1403ce512
cmp eax, 0xa
jne 0x1403cdaed
popf
pop rax
jmp 0x1403ce059
cmp eax, 0x14
jne 0x1403cdafc
popf
pop rax
jmp 0x1403ce4a6
cmp eax, 0xf
jne 0x1403cdb0b
popf
pop rax
jmp 0x1403ce32b
cmp eax, 0x13
jne 0x1403cdb1a
popf
pop rax
jmp 0x1403ce469
cmp eax, 0x15
jne 0x1403cdb29
popf
pop rax
jmp 0x1403ce510
mov qword [rsp + 8], rcx
sub rsp, 0xa8
mov rax, qword [rsp + 0xb0]
cmp qword [rax + 0x68], 0
je 0x1403cdb9d
push rax
pushf
mov eax, 0x882cd30f
pushf
not eax
add eax, 0xc86fff20
xor eax, 0xc1d7ddee
rol eax, 0xba
popf
pushf
not eax
add eax, 0xaa6ba631
xor eax, 0xeac4285f
rol eax, 0xfa
popf
pushf
not eax
add eax, 0xb85a0a7b
xor eax, 0xf53a3819
rol eax, 0xd2
popf
pushf
not eax
add eax, 0x84bf118c
xor eax, 0x96926235
rol eax, 0x46
popf
jmp 0x1403cd9d0
push rax
pushf
mov eax, 0xf707733
pushf
not eax
add eax, 0xc606a76d
xor eax, 0xb2a2b324
rol eax, 0x2e
popf
pushf
not eax
add eax, 0xf18d8628
xor eax, 0xd0c6453a
rol eax, 0x5c
popf
jmp 0x1403cd9d0
mov rax, qword [rsp + 0xb0]
movzx eax, byte [rax + 0x71]
test eax, eax
jne 0x1403cdc13
push rax
pushf
mov eax, 0xfd9b7c15
pushf
not eax
add eax, 0x9913ab3e
xor eax, 0x8b73b76a
rol eax, 0x68
popf
pushf
not eax
add eax, 0xca7c07d1
xor eax, 0xb6e3c5c0
rol eax, 0x66
popf
jmp 0x1403cd9d0
push rax
pushf
mov eax, 0x2d7f9651
pushf
not eax
add eax, 0xfc18519c
xor eax, 0xa5547350
rol eax, 0x4a
popf
pushf
not eax
add eax, 0xe0621fd4
xor eax, 0xb541b624
rol eax, 0xc5
popf
jmp 0x1403cd9d0
mov al, 0x25
pushf
not al
add al, 0x31
xor al, 0x44
rol al, 0xe6
popf
pushf
not al
add al, 0x83
xor al, 0xa8
rol al, 0x21
popf
pushf
not al
add al, 0x77
xor al, 0x38
rol al, 0x95
popf
pushf
not al
add al, 0x87
xor al, 0x6c
rol al, 0x6c
popf
jmp 0x1403ce512
mov rax, qword [rsp + 0xb0]
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
mov qword [rsp + 0x50], rax
mov dword [rsp + 0x3c], 0xffffffff
mov edx, dword [rsp + 0x3c]
mov rcx, qword [rsp + 0xb0]
jmp 0x1403cdd03
call qword [rsp + 0x50]
mov dword [rsp + 0x40], eax
mov dword [rsp + 0x44], 0xffffffff
mov eax, dword [rsp + 0x40]
cmp dword [rsp + 0x44], eax
jne 0x1403cdd76
push rax
pushf
mov eax, 0x325b2eaf
pushf
not eax
add eax, 0xe38d92b1
xor eax, 0x9da1bbfe
rol eax, 0xd7
popf
pushf
not eax
add eax, 0xe21b6bec
xor eax, 0xee3df75d
rol eax, 0x1f
popf
pushf
not eax
add eax, 0xd409f26e
xor eax, 0xf5ee4dd0
rol eax, 0x15
popf
pushf
not eax
add eax, 0xe81af0f5
xor eax, 0x8e63e8fb
rol eax, 0x7b
popf
jmp 0x1403cd9d0
push rax
pushf
mov eax, 0x182963aa
pushf
not eax
add eax, 0xd3f74cd9
xor eax, 0xeff6fc35
rol eax, 0x7e
popf
pushf
not eax
add eax, 0xd113ef12
xor eax, 0xfc2d29cb
rol eax, 0x6d
popf
jmp 0x1403cd9d0
mov dword [rsp + 0x34], 1
jmp 0x1403cde37
mov dword [rsp + 0x34], 0
push rax
pushf
mov eax, 0x6353d7c8
pushf
not eax
add eax, 0xad7b574e
xor eax, 0xcbd38955
rol eax, 0x64
popf
pushf
not eax
add eax, 0xa09e7365
xor eax, 0x814e865c
rol eax, 0x72
popf
jmp 0x1403cd9d0
movzx eax, byte [rsp + 0x34]
test eax, eax
je 0x1403cde73
push rax
pushf
mov eax, 0x28ee2dbd
pushf
not eax
add eax, 0xd2e1221e
xor eax, 0xef8c342d
rol eax, 0x6b
popf
pushf
not eax
add eax, 0x82e37bed
xor eax, 0x8be111b9
rol eax, 0x68
popf
jmp 0x1403cd9d0
push rax
pushf
mov eax, 0x2b35b60a
pushf
not eax
add eax, 0xe4af2825
xor eax, 0xa615ca00
rol eax, 0xa1
popf
pushf
not eax
add eax, 0xc9b56d8b
xor eax, 0x8adbfd16
rol eax, 0xbd
popf
jmp 0x1403cd9d0
xor al, al
jmp 0x1403ce512
mov qword [rsp + 0x68], reloc.WLDAP32.dll_Ordinal_32
mov rax, qword [rsp + 0xb0]
mov rax, qword [rax + 0x68]
mov qword [rsp + 0x58], rax
lea rax, [rsp + 0x90]
mov rcx, qword [rsp + 0xb0]
add rcx, 0x74
lea rdx, [rsp + 0x60]
mov qword [rsp + 0x20], rdx
mov r9, rax
lea r8, [rsp + 0x70]
mov rdx, rcx
mov rcx, qword [rsp + 0x58]
jmp 0x1403cdf3c
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::codecvt_char__char__struct__Mbstatet_::unshift_struct__Mbstatet____ptr64__char____ptr64__char____ptr64__char____ptr64____ptr64_const___ptr64]
mov dword [rsp + 0x30], eax
cmp dword [rsp + 0x30], 0
je 0x1403cdf93
push rax
pushf
mov eax, 0x99615cd1
pushf
not eax
add eax, 0xe0fbc0f0
xor eax, 0xd6e904d6
rol eax, 0x8c
popf
pushf
not eax
add eax, 0xd5736cf5
xor eax, 0xd7e674b8
rol eax, 0xee
popf
pushf
not eax
add eax, 0xdf5c1e83
xor eax, 0xb9808c62
rol eax, 0xf2
popf
jmp 0x1403cd9d0
push rax
pushf
mov eax, 0xea79e36e
pushf
not eax
add eax, 0x99afc3a4
xor eax, 0x8db4f54c
rol eax, 0x8c
popf
pushf
not eax
add eax, 0xb106bd67
xor eax, 0xaac89eea
rol eax, 0xa2
popf
pushf
not eax
add eax, 0xbd2faa51
xor eax, 0xe790b300
rol eax, 0x35
popf
jmp 0x1403cd9d0
cmp dword [rsp + 0x30], 1
je 0x1403ce013
push rax
pushf
mov eax, 0x7cea964d
pushf
not eax
add eax, 0xd5bd61b7
xor eax, 0xd6980115
rol eax, 0x64
popf
pushf
not eax
add eax, 0x91110893
xor eax, 0xec6460cb
rol eax, 0x43
popf
jmp 0x1403cd9d0
push rax
pushf
mov eax, 0x3cc9cc63
pushf
not eax
add eax, 0xd62bf160
xor eax, 0x80597f43
rol eax, 0x7c
popf
pushf
not eax
add eax, 0x91e3d3d6
xor eax, 0x809db030
rol eax, 0xdb
popf
pushf
not eax
add eax, 0xa7942483
xor eax, 0x868db711
rol eax, 0xe4
popf
jmp 0x1403cd9d0
cmp dword [rsp + 0x30], 3
je 0x1403ce0bd
push rax
pushf
mov eax, 0x5f71470e
pushf
not eax
add eax, 0xc1fde9cd
xor eax, 0x972cb658
rol eax, 0x11
popf
pushf
not eax
add eax, 0xacc07497
xor eax, 0xc1d43875
rol eax, 0x5e
popf
pushf
not eax
add eax, 0xceb7e89b
xor eax, 0xad3a01cf
rol eax, 0x2f
popf
pushf
not eax
add eax, 0xe083263e
xor eax, 0x99b47dd3
rol eax, 0xc5
popf
jmp 0x1403cd9d0
push rax
pushf
mov eax, 0xe971412c
pushf
not eax
add eax, 0xa7b5e6eb
xor eax, 0xbdc6ad10
rol eax, 0xb2
popf
pushf
not eax
add eax, 0xc7954d87
xor eax, 0xccc11fdb
rol eax, 0x95
popf
pushf
not eax
add eax, 0x9fe24164
xor eax, 0x97de1305
rol eax, 0x46
popf
pushf
not eax
add eax, 0xf260c6e2
xor eax, 0xb515105a
rol eax, 0x4b
popf
jmp 0x1403cd9d0
jmp 0x1403ce510
mov rax, qword [rsp + 0xb0]
mov byte [rax + 0x71], 0
push rax
pushf
mov eax, 0x5f152d0c
pushf
not eax
add eax, 0xfcbf2cbe
xor eax, 0x85c2014d
rol eax, 0xde
popf
pushf
not eax
add eax, 0xb2865793
xor eax, 0xac6dd7d3
rol eax, 0x11
popf
jmp 0x1403cd9d0
lea rax, [rsp + 0x70]
mov rcx, qword [rsp + 0x60]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x48], rax
cmp qword [rsp + 0x48], 0
jbe 0x1403ce1dd
push rax
pushf
mov eax, 0x21bd4014
pushf
not eax
add eax, 0xd29dd4d5
xor eax, 0xa04c554e
rol eax, 0x1f
popf
pushf
not eax
add eax, 0xf956fa32
xor eax, 0xf100991a
rol eax, 0xdd
popf
jmp 0x1403cd9d0
push rax
pushf
mov eax, 0xc22a266f
pushf
not eax
add eax, 0xe465c211
xor eax, 0xffbe5388
rol eax, 0x43
popf
pushf
not eax
add eax, 0xff25d4d8
xor eax, 0x847c028f
rol eax, 0xc7
popf
pushf
not eax
add eax, 0xa2b598a5
xor eax, 0xa6621e32
rol eax, 0xc6
popf
pushf
not eax
add eax, 0x92efbfe4
xor eax, 0xef2ce5e5
rol eax, 0x9c
popf
jmp 0x1403cd9d0
mov rax, qword [rsp + 0xb0]
mov r9, qword [rax + 0x80]
mov r8, qword [rsp + 0x48]
mov edx, 0xc9e28bb4
pushf
not edx
add edx, 0x89f05dc7
xor edx, 0x857b94e2
rol edx, 0x25
popf
pushf
not edx
add edx, 0xa027689b
xor edx, 0xf15e8a90
rol edx, 0x1f
popf
lea rcx, [rsp + 0x70]
jmp 0x1403ce27f
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp qword [rsp + 0x48], rax
je 0x1403ce2e5
push rax
pushf
mov eax, 0x8ba04c64
pushf
not eax
add eax, 0xba1a1d34
xor eax, 0x8e23a1a9
rol eax, 0x7b
popf
pushf
not eax
add eax, 0x93231da6
xor eax, 0xa1930c5f
rol eax, 0xbc
popf
pushf
not eax
add eax, 0xb536a52a
xor eax, 0xea7d0f52
rol eax, 0x14
popf
pushf
not eax
add eax, 0xe7a93832
xor eax, 0xee2db3ca
rol eax, 0x14
popf
jmp 0x1403cd9d0
push rax
pushf
mov eax, 0xfbb7cb3d
pushf
not eax
add eax, 0xc88cbc06
xor eax, 0x97d16eac
rol eax, 0x2e
popf
pushf
not eax
add eax, 0xa82fb2c9
xor eax, 0x86f487d8
rol eax, 0xbf
popf
pushf
not eax
add eax, 0xd09d231d
xor eax, 0xfd6c152d
rol eax, 0xa8
popf
jmp 0x1403cd9d0
xor al, al
jmp 0x1403ce512
mov rax, qword [rsp + 0xb0]
movzx eax, byte [rax + 0x71]
test eax, eax
jne 0x1403ce3a8
push rax
pushf
mov eax, 0x541d48f9
pushf
not eax
add eax, 0xed18bb10
xor eax, 0xecf7398e
rol eax, 0xa3
popf
pushf
not eax
add eax, 0x9d389387
xor eax, 0xfdc636c3
rol eax, 0x2c
popf
jmp 0x1403cd9d0
push rax
pushf
mov eax, 0x504423ba
pushf
not eax
add eax, 0xdb14fe52
xor eax, 0xb39d35dd
rol eax, 0xd6
popf
pushf
not eax
add eax, 0xc95cbbc6
xor eax, 0xffce684a
rol eax, 0x69
popf
jmp 0x1403cd9d0
mov dword [rsp + 0x38], 1
jmp 0x1403ce469
mov dword [rsp + 0x38], 0
push rax
pushf
mov eax, 0x39b3b7f5
pushf
not eax
add eax, 0xce313fe2
xor eax, 0x8b65a203
rol eax, 0xe5
popf
pushf
not eax
add eax, 0xc9c17ebc
xor eax, 0xe4dcc0d8
rol eax, 0xb
popf
jmp 0x1403cd9d0
movzx eax, byte [rsp + 0x38]
jmp 0x1403ce512
mov rax, qword [rsp + 0xb0]
mov byte [rax + 0x71], 0
mov al, 0xbc
pushf
not al
add al, 0xed
xor al, 0x79
rol al, 0x1b
popf
pushf
not al
add al, 0xe1
xor al, 0x59
rol al, 0xf4
popf
pushf
not al
add al, 0x63
xor al, 0xe6
rol al, 0xa1
popf
jmp 0x1403ce512
xor al, al
add rsp, 0xa8
ret