Function at 0x14012442d
Capabilities:
Write file on windows

Disassembly:
push rax
pushf
mov eax, 0xb714720
pushf
not eax
add eax, 0x37390be1
xor eax, 0x7f94f20a
rol eax, 0xdf
popf
pushf
not eax
add eax, 0x136f18a8
xor eax, 0x27c8cbd7
rol eax, 0x4a
popf
pushf
not eax
add eax, 0x38571738
xor eax, 0x17cbffd
rol eax, 0x59
popf
cmp eax, 2
jne 0x14012447d
popf
pop rax
jmp 0x1401246b7
cmp eax, 1
jne 0x14012448c
popf
pop rax
jmp 0x14012466c
cmp eax, 5
jne 0x14012449b
popf
pop rax
jmp 0x14012485d
cmp eax, 0xc
jne 0x1401244aa
popf
pop rax
jmp 0x140124cdb
cmp eax, 7
jne 0x1401244b9
popf
pop rax
jmp 0x140124a2a
cmp eax, 8
jne 0x1401244c8
popf
pop rax
jmp 0x140124abc
cmp eax, 4
jne 0x1401244d7
popf
pop rax
jmp 0x1401247ce
cmp eax, 3
jne 0x1401244e6
popf
pop rax
jmp 0x140124722
cmp eax, 0xa
jne 0x1401244f5
popf
pop rax
jmp 0x140124c2c
cmp eax, 9
jne 0x140124504
popf
pop rax
jmp 0x140124b72
cmp eax, 0xb
jne 0x140124513
popf
pop rax
jmp 0x140124c8d
cmp eax, 6
jne 0x140124522
popf
pop rax
jmp 0x140124923
cmp eax, 0
jne 0x140124531
popf
pop rax
jmp 0x140124531
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r12
push r14
push r15
mov eax, 0x9439bf0d
pushf
not eax
add eax, 0x6c229121
xor eax, 0x5f1c047e
rol eax, 0xf1
popf
pushf
not eax
add eax, 0x247c4129
xor eax, 0x7789cf3f
rol eax, 0x17
popf
call fcn.14009b7ed
sub rsp, rax
mov rax, qword [0x14003e040]
xor rax, rsp
mov qword [rsp + 0x1460], rax
movsxd r10, edx
mov rbx, rcx
mov rax, r10
mov r14d, r9d
sar rax, 6
lea rcx, [0x1a4b23347]
pushf
sub rcx, 0x64ae0917
popf
and r10d, 0x3f
push r8
not r8
sub r14, r8
pop r8
sub r14, 1
mov r15, r8
mov rdi, r8
mov rax, qword [rcx + rax*8]
lea rdx, [r10 + r10*8]
mov r12, qword [rax + rdx*8 + 0x28]
xor eax, eax
mov qword [rbx], rax
cmp r8, r14
mov dword [rbx + 8], eax
jae 0x140124613
push rax
pushf
mov eax, 0x3b5b4f7f
pushf
not eax
add eax, 0x4ec14178
xor eax, 0x53726046
rol eax, 0x7b
popf
pushf
not eax
add eax, 0x106ba183
xor eax, 0x1e6be4f5
rol eax, 0x50
popf
jmp 0x14012446e
push rax
pushf
mov eax, 0xb3132a0b
pushf
not eax
add eax, 0x73de499f
xor eax, 0xbef45d1
rol eax, 0x1e
popf
pushf
not eax
add eax, 0x5432ed15
xor eax, 0x76a4190c
rol eax, 0xf
popf
pushf
not eax
add eax, 0x11769c4d
xor eax, 0x5b92df4e
rol eax, 0xbe
popf
pushf
not eax
add eax, 0x69389a01
xor eax, 0x4cb09e36
rol eax, 0xf4
popf
jmp 0x14012446e
lea rax, [rsp + 0x50]
push rax
pushf
mov eax, 0x75feb548
pushf
not eax
add eax, 0x5935cde2
xor eax, 0x3e36b361
rol eax, 0xc2
popf
pushf
not eax
add eax, 0x76f7e9f4
xor eax, 0x1cd8dc26
rol eax, 0x93
popf
pushf
not eax
add eax, 0x45f8526f
xor eax, 0x1447211f
rol eax, 0x13
popf
jmp 0x14012446e
cmp rdi, r14
jae 0x1401246ef
push rax
pushf
mov eax, 0x5e3745b2
pushf
not eax
add eax, 0x44300f6b
xor eax, 0x41fd1e58
rol eax, 0x66
popf
pushf
not eax
add eax, 0x26f432d2
xor eax, 0x257efaa8
rol eax, 0xf2
popf
jmp 0x14012446e
push rax
pushf
mov eax, 0x863a3322
pushf
not eax
add eax, 0x38a7f82
xor eax, 0x6a1a8c7
rol eax, 0xb6
popf
pushf
not eax
add eax, 0x453eb40a
xor eax, 0x1f1fb793
rol eax, 0xa1
popf
jmp 0x14012446e
movzx ecx, word [rdi]
add rdi, 2
cmp cx, 0xa
jne 0x140124775
push rax
pushf
mov eax, 0x2fbc5360
pushf
not eax
add eax, 0x55dd9589
xor eax, 0x1f50dbe4
rol eax, 0x89
popf
pushf
not eax
add eax, 0x7ab4c99f
xor eax, 0x9e3b53c
rol eax, 0xd7
popf
pushf
not eax
add eax, 0x403d365f
xor eax, 0x37ee050c
rol eax, 0xbe
popf
jmp 0x14012446e
push rax
pushf
mov eax, 0xc4c416a8
pushf
not eax
add eax, 0x42ac7cb
xor eax, 0x629ea175
rol eax, 0xb2
popf
pushf
not eax
add eax, 0x20e8ea79
xor eax, 0x66b492b7
rol eax, 0xc5
popf
pushf
not eax
add eax, 0x2b30300d
xor eax, 0x11dd7650
rol eax, 0x3b
popf
pushf
not eax
add eax, 0x7124b5a0
xor eax, 0x482d6abd
rol eax, 0xeb
popf
jmp 0x14012446e
mov edx, 0x6033cc8
pushf
not edx
add edx, 0x4292650e
xor edx, 0x4a024128
rol edx, 0xcf
popf
pushf
not edx
add edx, 0x22d0a215
xor edx, 0x6e19ebce
rol edx, 0x38
popf
mov word [rax], dx
add rax, 2
push rax
pushf
mov eax, 0xd339ba3d
pushf
not eax
add eax, 0x2e040e8f
xor eax, 0x6f8bdb59
rol eax, 0xe4
popf
pushf
not eax
add eax, 0x224908
xor eax, 0x4e79210f
rol eax, 0xf
popf
pushf
not eax
add eax, 0x7a13fbfe
xor eax, 0x1b20d22e
rol eax, 0x43
popf
pushf
not eax
add eax, 0x36005766
xor eax, 0x289c00c
rol eax, 0xb4
popf
jmp 0x14012446e
mov word [rax], cx
add rax, 2
lea rcx, [rsp + 0x6f8]
cmp rax, rcx
jb 0x1401248ca
push rax
pushf
mov eax, 0xc7af49e7
pushf
not eax
add eax, 0x7119b03a
xor eax, 0x6e104a9a
rol eax, 0xd8
popf
pushf
not eax
add eax, 0x2afd8c7b
xor eax, 0x19d0663
rol eax, 7
popf
pushf
not eax
add eax, 0x56b55d97
xor eax, 0x6956f0
rol eax, 0xa5
popf
pushf
not eax
add eax, 0x668c5c61
xor eax, 0x3e7a59b0
rol eax, 0x8d
popf
jmp 0x14012446e
push rax
pushf
mov eax, 0xb7a703e7
pushf
not eax
add eax, 0x4f35f9b1
xor eax, 0x3c50b399
rol eax, 0xea
popf
pushf
not eax
add eax, 0x2c440108
xor eax, 0x79999ad
rol eax, 0xd0
popf
pushf
not eax
add eax, 0x3f40ba5
xor eax, 0x20abb28f
rol eax, 0x5e
popf
pushf
not eax
add eax, 0x35577bd
xor eax, 0x447ffe99
rol eax, 0xdf
popf
jmp 0x14012446e
and qword [rsp + 0x38], 0
lea rcx, [rsp + 0x50]
and qword [rsp + 0x30], 0
lea r8, [rsp + 0x50]
push rcx
not rcx
add rax, rcx
pop rcx
add rax, 1
mov dword [rsp + 0x28], 0xd55
lea rcx, [rsp + 0x700]
sar rax, 1
mov qword [rsp + 0x20], rcx
mov r9d, eax
mov ecx, 0x79668453
pushf
not ecx
add ecx, 0x16613a01
xor ecx, 0x3c595238
rol ecx, 0x43
popf
pushf
not ecx
add ecx, 0x42cfe158
xor ecx, 0x4125efd5
rol ecx, 0x88
popf
pushf
not ecx
add ecx, 0x39fa96fa
xor ecx, 0x7a3f1772
rol ecx, 0xac
popf
xor edx, edx
call fcn.1401440a9
mov ebp, eax
test eax, eax
je 0x1401249f7
push rax
pushf
mov eax, 0xb211003
pushf
not eax
add eax, 0x4f6b19d4
xor eax, 0x7a2de25f
rol eax, 0x28
popf
pushf
not eax
add eax, 0x500c8ef5
xor eax, 0xed834de
rol eax, 0x8c
popf
pushf
not eax
add eax, 0x326456
xor eax, 0x737bd2e6
rol eax, 0x18
popf
jmp 0x14012446e
push rax
pushf
mov eax, 0x12f3b224
pushf
not eax
add eax, 0x694d6ef8
xor eax, 0x1af730d0
rol eax, 0xdf
popf
pushf
not eax
add eax, 0x13ef1fbe
xor eax, 0x6d9769bc
rol eax, 0xb4
popf
jmp 0x14012446e
xor esi, esi
test eax, eax
je 0x140124a89
push rax
pushf
mov eax, 0xe806a0ff
pushf
not eax
add eax, 0x1c7b82b8
xor eax, 0x5a415ef0
rol eax, 0x5c
popf
pushf
not eax
add eax, 0x5fd1da32
xor eax, 0xea9cf16
rol eax, 0x7f
popf
pushf
not eax
add eax, 0x1bc0733d
xor eax, 0x268a4529
rol eax, 0xdd
popf
pushf
not eax
add eax, 0x38fee060
xor eax, 0x763c446e
rol eax, 0xb5
popf
jmp 0x14012446e
push rax
pushf
mov eax, 0x3ae699cf
pushf
not eax
add eax, 0x365ca41
xor eax, 0x7644c527
rol eax, 0xf2
popf
pushf
not eax
add eax, 0x6f9a0fe
xor eax, 0x319fe80e
rol eax, 0xf3
popf
jmp 0x14012446e
and qword [rsp + 0x20], 0
lea rdx, [rsp + 0x700]
mov ecx, esi
lea r9, [rsp + 0x40]
mov r8d, ebp
push rcx
not rcx
sub rdx, rcx
pop rcx
sub rdx, 1
mov rcx, r12
push rsi
not esi
add r8d, esi
pop rsi
add r8d, 1
jmp 0x140124aef
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x140124b3f
push rax
pushf
mov eax, 0x9f3bc4be
pushf
not eax
add eax, 0x3190c90f
xor eax, 0x10bff614
rol eax, 0x99
popf
pushf
not eax
add eax, 0x64e95329
xor eax, 0xee0dd7d
rol eax, 0x56
popf
pushf
not eax
add eax, 0x3ebae5a8
xor eax, 0x3045a03f
rol eax, 0x39
popf
jmp 0x14012446e
push rax
pushf
mov eax, 0x21591f19
pushf
not eax
add eax, 0x3248ddb6
xor eax, 0xc9db937
rol eax, 0x30
popf
pushf
not eax
add eax, 0x715575e3
xor eax, 0x69aa0170
rol eax, 0x55
popf
jmp 0x14012446e
add esi, dword [rsp + 0x40]
cmp esi, ebp
jb 0x140124bd3
push rax
pushf
mov eax, 0x81517021
pushf
not eax
add eax, 0x78d82708
xor eax, 0x7dc00f5f
rol eax, 0xa7
popf
pushf
not eax
add eax, 0x4e016e87
xor eax, 0x32569a28
rol eax, 0x3b
popf
pushf
not eax
add eax, 0x14c013f9
xor eax, 0x35b961a5
rol eax, 0x2f
popf
pushf
not eax
add eax, 0x1efc74c
xor eax, 0x1081482b
rol eax, 0x8d
popf
jmp 0x14012446e
push rax
pushf
mov eax, 0xb3e589e1
pushf
not eax
add eax, 0x376e5686
xor eax, 0x7a9e9be5
rol eax, 0xf0
popf
pushf
not eax
add eax, 0xa6fa317
xor eax, 0x757b656c
rol eax, 0x6a
popf
pushf
not eax
add eax, 0x18d0fe5d
xor eax, 0xe0df091
rol eax, 3
popf
pushf
not eax
add eax, 0x47ba4ff
xor eax, 0x6785ce69
rol eax, 0x98
popf
jmp 0x14012446e
mov eax, edi
push r15
not r15d
add eax, r15d
pop r15
add eax, 1
mov dword [rbx + 4], eax
cmp rdi, r14
jmp 0x1401245da
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbx], eax
push rax
pushf
mov eax, 0x7ead76e6
pushf
not eax
add eax, 0x75cb966
xor eax, 0x7d1aacb8
rol eax, 0xe
popf
pushf
not eax
add eax, 0x22e24c8
xor eax, 0x521595f7
rol eax, 0x2f
popf
pushf
not eax
add eax, 0xc58064a
xor eax, 0x33071c15
rol eax, 0x31
popf
jmp 0x14012446e
mov rax, rbx
mov rcx, qword [rsp + 0x1460]
xor rcx, rsp
call fcn.140098ae9
lea r11, [rsp + 0x1470]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rsi
ret