Function at 0x140065aa1
Capabilities:
Write file on windows

Disassembly:
push rax
pushf
mov eax, 0x5a7b1a74
pushf
not eax
add eax, 0xa5a96f8f
xor eax, 0xf973787e
rol eax, 0x80
popf
pushf
not eax
add eax, 0xa81fdb4b
xor eax, 0xf5c2ade6
rol eax, 0x5e
popf
cmp eax, 4
jne 0x140065ade
popf
pop rax
jmp 0x140065e1c
cmp eax, 0
jne 0x140065aed
popf
pop rax
jmp 0x140065b92
cmp eax, 3
jne 0x140065afc
popf
pop rax
jmp 0x140065d96
cmp eax, 1
jne 0x140065b0b
popf
pop rax
jmp 0x140065cba
cmp eax, 0xa
jne 0x140065b1a
popf
pop rax
jmp 0x1400661f6
cmp eax, 7
jne 0x140065b29
popf
pop rax
jmp 0x140066071
cmp eax, 6
jne 0x140065b38
popf
pop rax
jmp 0x140065f62
cmp eax, 0xb
jne 0x140065b47
popf
pop rax
jmp 0x14006624d
cmp eax, 0xc
jne 0x140065b56
popf
pop rax
jmp 0x140066288
cmp eax, 8
jne 0x140065b65
popf
pop rax
jmp 0x140066116
cmp eax, 5
jne 0x140065b74
popf
pop rax
jmp 0x140065ec2
cmp eax, 2
jne 0x140065b83
popf
pop rax
jmp 0x140065cf2
cmp eax, 9
jne 0x140065b92
popf
pop rax
jmp 0x1400661ea
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r12
push r14
push r15
mov eax, 0x7067eb88
pushf
not eax
add eax, 0xa77fa9b6
xor eax, 0xf84f06dd
rol eax, 0x39
popf
pushf
not eax
add eax, 0x92ffa1ac
xor eax, 0xb3eef03a
rol eax, 0xb3
popf
call fcn.1400666b9
sub rsp, rax
mov rax, qword [0x14001b008]
xor rax, rsp
mov qword [rsp + 0x1460], rax
movsxd r10, edx
mov rbx, rcx
mov rax, r10
mov r14d, r9d
sar rax, 6
lea rcx, [0x1bcbaf940]
pushf
sub rcx, 0x7cb93360
popf
and r10d, 0x3f
push r8
not r8
sub r14, r8
pop r8
sub r14, 1
mov r15, r8
mov rdi, r8
mov rax, qword [rcx + rax*8]
lea rdx, [r10 + r10*8]
mov r12, qword [rax + rdx*8 + 0x28]
xor eax, eax
mov qword [rbx], rax
cmp r8, r14
mov dword [rbx + 8], eax
jae 0x140065c74
push rax
pushf
mov eax, 0x8b39df9f
pushf
not eax
add eax, 0xefeaaa72
xor eax, 0xd89eb8f7
rol eax, 0x5b
popf
pushf
not eax
add eax, 0xc3ac9e70
xor eax, 0x95cb0ade
rol eax, 0x13
popf
jmp 0x140065acf
push rax
pushf
mov eax, 0xfedceb3f
pushf
not eax
add eax, 0xc43a41cc
xor eax, 0x882b0246
rol eax, 0x73
popf
pushf
not eax
add eax, 0xdf159389
xor eax, 0xfb8b38a2
rol eax, 0xcd
popf
pushf
not eax
add eax, 0xab58a88e
xor eax, 0xbf6a1024
rol eax, 0xe7
popf
jmp 0x140065acf
lea rax, [rsp + 0x50]
push rax
pushf
mov eax, 0x908ef85c
pushf
not eax
add eax, 0xe524d0ef
xor eax, 0xd1f40d1c
rol eax, 0x4c
popf
pushf
not eax
add eax, 0xf5aa5231
xor eax, 0xd85969da
rol eax, 0x2e
popf
jmp 0x140065acf
cmp rdi, r14
jae 0x140065d50
push rax
pushf
mov eax, 0xf4966eca
pushf
not eax
add eax, 0xe6d55a2e
xor eax, 0xfe8df86a
rol eax, 0x5d
popf
pushf
not eax
add eax, 0xf037eeec
xor eax, 0xf313078e
rol eax, 0xdc
popf
pushf
not eax
add eax, 0x9795aa0d
xor eax, 0xb4e77f66
rol eax, 0x39
popf
pushf
not eax
add eax, 0xfba4825d
xor eax, 0xe5d5c660
rol eax, 0x43
popf
jmp 0x140065acf
push rax
pushf
mov eax, 0xa50193f5
pushf
not eax
add eax, 0xa96e3841
xor eax, 0xcf2a335a
rol eax, 0x36
popf
pushf
not eax
add eax, 0xf9b9fc79
xor eax, 0x846c13b0
rol eax, 0x2b
popf
pushf
not eax
add eax, 0xfd5dfe0e
xor eax, 0xa392ec84
rol eax, 0x37
popf
jmp 0x140065acf
movzx ecx, word [rdi]
add rdi, 2
cmp cx, 0xa
jne 0x140065de9
push rax
pushf
mov eax, 0x1f081aa8
pushf
not eax
add eax, 0xc2b58d54
xor eax, 0xc903d9d3
rol eax, 0x46
popf
pushf
not eax
add eax, 0xc45fb506
xor eax, 0xb7e7a1b0
rol eax, 0x54
popf
pushf
not eax
add eax, 0xf709eb32
xor eax, 0x814ef5da
rol eax, 0x7d
popf
jmp 0x140065acf
push rax
pushf
mov eax, 0xb82ab75e
pushf
not eax
add eax, 0x901cb245
xor eax, 0xbba5eac1
rol eax, 0xe1
popf
pushf
not eax
add eax, 0xc4d09062
xor eax, 0xbc287013
rol eax, 0x24
popf
jmp 0x140065acf
mov edx, 0xb0a23aff
pushf
not edx
add edx, 0xc00225e6
xor edx, 0xb8aa5398
rol edx, 0x93
popf
pushf
not edx
add edx, 0xe26bffc9
xor edx, 0x9fe63446
rol edx, 0x38
popf
pushf
not edx
add edx, 0x9a64ecc3
xor edx, 0xb63a7224
rol edx, 0x1c
popf
pushf
not edx
add edx, 0xb71048ab
xor edx, 0xae6235c5
rol edx, 0xa3
popf
mov word [rax], dx
add rax, 2
push rax
pushf
mov eax, 0xfbe1ea8a
pushf
not eax
add eax, 0xcd9974eb
xor eax, 0xff6ad526
rol eax, 0x9b
popf
pushf
not eax
add eax, 0xb8ef62d7
xor eax, 0x9c347a70
rol eax, 0x21
popf
pushf
not eax
add eax, 0xc56587d9
xor eax, 0x8ecfec80
rol eax, 0xd1
popf
jmp 0x140065acf
mov word [rax], cx
add rax, 2
lea rcx, [rsp + 0x6f8]
cmp rax, rcx
jb 0x140065f09
push rax
pushf
mov eax, 0xc6702f2b
pushf
not eax
add eax, 0xa15cbcc1
xor eax, 0xcd1504c0
rol eax, 0x7d
popf
pushf
not eax
add eax, 0x9601c4b9
xor eax, 0xf303138e
rol eax, 0x32
popf
jmp 0x140065acf
push rax
pushf
mov eax, 0x1bee8164
pushf
not eax
add eax, 0xc55e1032
xor eax, 0xa69b655d
rol eax, 0x1f
popf
pushf
not eax
add eax, 0xecb96069
xor eax, 0xb2d90249
rol eax, 0x2a
popf
pushf
not eax
add eax, 0xae5a7e3f
xor eax, 0xa7627240
rol eax, 0x38
popf
pushf
not eax
add eax, 0x88e4fb9d
xor eax, 0xe33b26f6
rol eax, 0xdf
popf
jmp 0x140065acf
and qword [rsp + 0x38], 0
lea rcx, [rsp + 0x50]
and qword [rsp + 0x30], 0
lea r8, [rsp + 0x50]
sub rax, rcx
mov dword [rsp + 0x28], 0xd55
lea rcx, [rsp + 0x700]
sar rax, 1
mov qword [rsp + 0x20], rcx
mov r9d, eax
mov ecx, 0x2f90de6e
pushf
not ecx
add ecx, 0xc78f98ac
xor ecx, 0x99cc5690
rol ecx, 0xd7
popf
pushf
not ecx
add ecx, 0xf80f7c01
xor ecx, 0xa187bc1a
rol ecx, 0x7c
popf
xor edx, edx
call fcn.1400897da
mov ebp, eax
test eax, eax
je 0x14006602b
push rax
pushf
mov eax, 0x530b2b6d
pushf
not eax
add eax, 0xd150044b
xor eax, 0xe2890ca3
rol eax, 0xe2
popf
pushf
not eax
add eax, 0xaa86b66d
xor eax, 0xd07beb99
rol eax, 0xe
popf
pushf
not eax
add eax, 0xf3de2985
xor eax, 0x952ecc12
rol eax, 0x1c
popf
pushf
not eax
add eax, 0xddbb3614
xor eax, 0x880e4bd9
rol eax, 0x96
popf
jmp 0x140065acf
push rax
pushf
mov eax, 0x2c7ce451
pushf
not eax
add eax, 0xdeecb2ca
xor eax, 0xc44912c7
rol eax, 0x98
popf
pushf
not eax
add eax, 0xd102f8e8
xor eax, 0x9aa4da00
rol eax, 0xa4
popf
pushf
not eax
add eax, 0x9d6812c0
xor eax, 0xeae7be07
rol eax, 0x76
popf
jmp 0x140065acf
xor esi, esi
test eax, eax
je 0x1400660d0
push rax
pushf
mov eax, 0x6875826
pushf
not eax
add eax, 0x8855c476
xor eax, 0xf6976d92
rol eax, 0xce
popf
pushf
not eax
add eax, 0xe621a38e
xor eax, 0x8979b13d
rol eax, 0xb7
popf
pushf
not eax
add eax, 0xad47dd8c
xor eax, 0xd21a3e77
rol eax, 0x77
popf
pushf
not eax
add eax, 0xb1ffb8da
xor eax, 0xbee2a333
rol eax, 0x2d
popf
jmp 0x140065acf
push rax
pushf
mov eax, 0xd1d92740
pushf
not eax
add eax, 0xa1211384
xor eax, 0xf65e900a
rol eax, 0x28
popf
pushf
not eax
add eax, 0xd25a324a
xor eax, 0x9c7fbb4e
rol eax, 0x2f
popf
pushf
not eax
add eax, 0xd478d7fb
xor eax, 0xab49c4e9
rol eax, 0x9b
popf
jmp 0x140065acf
and qword [rsp + 0x20], 0
lea rdx, [rsp + 0x700]
mov ecx, esi
lea r9, [rsp + 0x40]
mov r8d, ebp
push rcx
not rcx
sub rdx, rcx
pop rcx
sub rdx, 1
mov rcx, r12
sub r8d, esi
jmp 0x140066141
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x1400661a4
push rax
pushf
mov eax, 0x791ebbf8
pushf
not eax
add eax, 0x840b4ab3
xor eax, 0xf061d825
rol eax, 0x3d
popf
pushf
not eax
add eax, 0xbdb21402
xor eax, 0xeaf7a61f
rol eax, 0xbb
popf
pushf
not eax
add eax, 0xb12c62d4
xor eax, 0x84c47ba0
rol eax, 0x7d
popf
pushf
not eax
add eax, 0xf1a1b20f
xor eax, 0x9d59369f
rol eax, 0x3c
popf
jmp 0x140065acf
push rax
pushf
mov eax, 0x4d33c73f
pushf
not eax
add eax, 0xd68642e3
xor eax, 0xd638c754
rol eax, 0x39
popf
pushf
not eax
add eax, 0x919d6bf7
xor eax, 0xde99197b
rol eax, 0xa2
popf
pushf
not eax
add eax, 0xe0266285
xor eax, 0xef082660
rol eax, 0xe0
popf
jmp 0x140065acf
add esi, dword [rsp + 0x40]
cmp esi, ebp
jb 0x140066116
mov eax, edi
sub eax, r15d
mov dword [rbx + 4], eax
cmp rdi, r14
jmp 0x140065c3b
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbx], eax
push rax
pushf
mov eax, 0x6e33747f
pushf
not eax
add eax, 0xff65bd40
xor eax, 0x890b9b1c
rol eax, 0xd6
popf
pushf
not eax
add eax, 0xcd7746ac
xor eax, 0xd67d3837
rol eax, 0xd0
popf
jmp 0x140065acf
mov rax, rbx
mov rcx, qword [rsp + 0x1460]
xor rcx, rsp
call fcn.14006097a
lea r11, [rsp + 0x1470]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rsi
ret