Function at 0x14019188c
Capabilities:
Write file on windows

Disassembly:
push rax
pushf
mov eax, 0x754461e6
pushf
not eax
add eax, 0x9450755f
xor eax, 0xf7f106ff
rol eax, 0xdd
popf
pushf
not eax
add eax, 0xed45adb6
xor eax, 0xf0260b05
rol eax, 0x92
popf
cmp eax, 4
jne 0x1401918c9
popf
pop rax
jmp 0x140191ba2
cmp eax, 0
jne 0x1401918d8
popf
pop rax
jmp 0x14019196e
cmp eax, 3
jne 0x1401918e7
popf
pop rax
jmp 0x140191b1c
cmp eax, 1
jne 0x1401918f6
popf
pop rax
jmp 0x140191ac8
cmp eax, 0xa
jne 0x140191905
popf
pop rax
jmp 0x140191f2d
cmp eax, 7
jne 0x140191914
popf
pop rax
jmp 0x140191db9
cmp eax, 6
jne 0x140191923
popf
pop rax
jmp 0x140191cec
cmp eax, 0xb
jne 0x140191932
popf
pop rax
jmp 0x140191f8e
cmp eax, 9
jne 0x140191941
popf
pop rax
jmp 0x140191ece
cmp eax, 8
jne 0x140191950
popf
pop rax
jmp 0x140191e50
cmp eax, 5
jne 0x14019195f
popf
pop rax
jmp 0x140191c39
cmp eax, 2
jne 0x14019196e
popf
pop rax
jmp 0x140191b13
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r14
mov eax, 0xc41753e
pushf
not eax
add eax, 0xfee66e7b
xor eax, 0xf221b2f6
rol eax, 0x82
popf
pushf
not eax
add eax, 0xfce3327c
xor eax, 0xddb40bd4
rol eax, 0x4a
popf
pushf
not eax
add eax, 0xeb256315
xor eax, 0x8ea9e49a
rol eax, 0xec
popf
pushf
not eax
add eax, 0x8f4d8211
xor eax, 0xe51e8196
rol eax, 0xdf
popf
call fcn.14022fed3
sub rsp, rax
mov rax, qword [0x1400a21c0]
xor rax, rsp
mov qword [rsp + 0x1440], rax
movsxd r10, edx
mov rdi, rcx
mov rax, r10
mov ebp, r9d
sar rax, 6
lea rcx, [0x199eb45d8]
pushf
sub rcx, 0x59e0c8d8
popf
and r10d, 0x3f
push r8
not r8
sub rbp, r8
pop r8
sub rbp, 1
mov rsi, r8
mov rax, qword [rcx + rax*8]
lea rdx, [r10 + r10*8]
mov r14, qword [rax + rdx*8 + 0x28]
xor eax, eax
mov qword [rdi], rax
mov dword [rdi + 8], eax
cmp r8, rbp
jae 0x140191a6f
push rax
pushf
mov eax, 0x25c25f13
pushf
not eax
add eax, 0xa7a4fae8
xor eax, 0xe4667d5f
rol eax, 0x41
popf
pushf
not eax
add eax, 0x9ac6b910
xor eax, 0xcfb4ebf9
rol eax, 0x8d
popf
jmp 0x1401918ba
push rax
pushf
mov eax, 0xc600c1e1
pushf
not eax
add eax, 0xa360ca0a
xor eax, 0xfee809d5
rol eax, 0x1d
popf
pushf
not eax
add eax, 0xa09e8180
xor eax, 0xc2682dba
rol eax, 2
popf
pushf
not eax
add eax, 0xece7e897
xor eax, 0x88517742
rol eax, 0x15
popf
pushf
not eax
add eax, 0xfb85a4ff
xor eax, 0xbdf634f4
rol eax, 2
popf
jmp 0x1401918ba
lea rbx, [rsp + 0x40]
push rax
pushf
mov eax, 0x31806be0
pushf
not eax
add eax, 0xe368c20a
xor eax, 0xf9bed528
rol eax, 0xff
popf
pushf
not eax
add eax, 0xfdeddbc8
xor eax, 0xa0b0357a
rol eax, 0x76
popf
pushf
not eax
add eax, 0xa3b2bec0
xor eax, 0xd4746214
rol eax, 0xb
popf
jmp 0x1401918ba
cmp rsi, rbp
jae 0x140191cec
movzx eax, word [rsi]
add rsi, 2
cmp ax, 0xa
jne 0x140191b5c
push rax
pushf
mov eax, 0x1005eb12
pushf
not eax
add eax, 0xe4bef845
xor eax, 0x95e4537c
rol eax, 0x3c
popf
pushf
not eax
add eax, 0x9a6769f1
xor eax, 0xb671940c
rol eax, 0xad
popf
jmp 0x1401918ba
push rax
pushf
mov eax, 0xd7c4f180
pushf
not eax
add eax, 0xde446cec
xor eax, 0xdd40ca41
rol eax, 0x3d
popf
pushf
not eax
add eax, 0xa98afece
xor eax, 0x9f998a11
rol eax, 0xeb
popf
pushf
not eax
add eax, 0xa15eeca0
xor eax, 0xcd4b9e12
rol eax, 0x31
popf
jmp 0x1401918ba
add dword [rdi + 8], 2
mov ecx, 0x7f572655
pushf
not ecx
add ecx, 0xc33723d0
xor ecx, 0xe72c9ec0
rol ecx, 0x37
popf
pushf
not ecx
add ecx, 0xdd7f31cb
xor ecx, 0xd8bfb8e3
rol ecx, 0x50
popf
pushf
not ecx
add ecx, 0xb1153e2e
xor ecx, 0xaa3aac0c
rol ecx, 0xe8
popf
pushf
not ecx
add ecx, 0xebda8a0a
xor ecx, 0xcb109bef
rol ecx, 0x15
popf
mov word [rbx], cx
add rbx, 2
push rax
pushf
mov eax, 0x821c36c2
pushf
not eax
add eax, 0x97c030b9
xor eax, 0x923df007
rol eax, 0x32
popf
pushf
not eax
add eax, 0xeef63e49
xor eax, 0xd3301fd0
rol eax, 0x86
popf
jmp 0x1401918ba
mov word [rbx], ax
add rbx, 2
lea rax, [rsp + 0x143e]
cmp rbx, rax
jb 0x140191c93
push rax
pushf
mov eax, 0x55cecfc2
pushf
not eax
add eax, 0xc1e28830
xor eax, 0xe41b0e92
rol eax, 0x50
popf
pushf
not eax
add eax, 0xe89dc3d0
xor eax, 0xda37aaca
rol eax, 0x86
popf
pushf
not eax
add eax, 0xe7511418
xor eax, 0xfc2cd09d
rol eax, 0x6b
popf
jmp 0x1401918ba
push rax
pushf
mov eax, 0x88700a5f
pushf
not eax
add eax, 0x931e9552
xor eax, 0xa9007693
rol eax, 0x4c
popf
pushf
not eax
add eax, 0xbe96a455
xor eax, 0xabc31fda
rol eax, 0xcf
popf
pushf
not eax
add eax, 0xc88aeee2
xor eax, 0xed255aa7
rol eax, 0xcf
popf
pushf
not eax
add eax, 0x8677af68
xor eax, 0x92e82720
rol eax, 0xd
popf
jmp 0x1401918ba
and qword [rsp + 0x20], 0
lea rax, [rsp + 0x40]
sub rbx, rax
lea r9, [rsp + 0x30]
sar rbx, 1
lea rdx, [rsp + 0x40]
add ebx, ebx
mov rcx, r14
mov r8d, ebx
jmp 0x140191d10
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x140191d60
push rax
pushf
mov eax, 0x68c4dc44
pushf
not eax
add eax, 0xe8076f81
xor eax, 0x86780ad3
rol eax, 3
popf
pushf
not eax
add eax, 0xf0774edf
xor eax, 0xcb9cfdcc
rol eax, 2
popf
pushf
not eax
add eax, 0x82968e14
xor eax, 0xcd9c8324
rol eax, 0x5b
popf
jmp 0x1401918ba
push rax
pushf
mov eax, 0x3ede317a
pushf
not eax
add eax, 0xe4cc233f
xor eax, 0xa40259cf
rol eax, 0xea
popf
pushf
not eax
add eax, 0xb835fbef
xor eax, 0x8f9019d4
rol eax, 0
popf
pushf
not eax
add eax, 0xac26794b
xor eax, 0x8873bb20
rol eax, 0x64
popf
pushf
not eax
add eax, 0xe1d2d4c7
xor eax, 0xf6a1514b
rol eax, 0x28
popf
jmp 0x1401918ba
mov eax, dword [rsp + 0x30]
add dword [rdi + 4], eax
cmp eax, ebx
jb 0x140191df7
push rax
pushf
mov eax, 0xc0c96356
pushf
not eax
add eax, 0xd0faba70
xor eax, 0xeab4f6e0
rol eax, 0x6a
popf
pushf
not eax
add eax, 0xbcfc95dd
xor eax, 0xa634adf2
rol eax, 0x2d
popf
jmp 0x1401918ba
push rax
pushf
mov eax, 0xb9fb7b29
pushf
not eax
add eax, 0xeb58133d
xor eax, 0x97ff601f
rol eax, 0xd5
popf
pushf
not eax
add eax, 0xc4225c03
xor eax, 0x904ae45a
rol eax, 0x43
popf
pushf
not eax
add eax, 0xd4524021
xor eax, 0xfbd70530
rol eax, 0x43
popf
pushf
not eax
add eax, 0xfdd9ab09
xor eax, 0xcfd887fe
rol eax, 0x5e
popf
jmp 0x1401918ba
cmp rsi, rbp
jb 0x140191e88
push rax
pushf
mov eax, 0x45749f7d
pushf
not eax
add eax, 0xc518cd05
xor eax, 0xf54d5632
rol eax, 0xb
popf
pushf
not eax
add eax, 0xf494d805
xor eax, 0xa8b60bad
rol eax, 0x13
popf
jmp 0x1401918ba
push rax
pushf
mov eax, 0x2e75b259
pushf
not eax
add eax, 0xe7c395b7
xor eax, 0xb64fdab1
rol eax, 0x28
popf
pushf
not eax
add eax, 0x89035aad
xor eax, 0xa6de8972
rol eax, 0x69
popf
pushf
not eax
add eax, 0xe74770a1
xor eax, 0xb7779220
rol eax, 0x3a
popf
jmp 0x1401918ba
jmp 0x140191f8e
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rdi], eax
push rax
pushf
mov eax, 0xcd0761e7
pushf
not eax
add eax, 0x9eb7185c
xor eax, 0xabb5ca9b
rol eax, 0x33
popf
pushf
not eax
add eax, 0xd679cf2a
xor eax, 0xe5fa6982
rol eax, 0xc0
popf
pushf
not eax
add eax, 0xf08e5d95
xor eax, 0xf530fc7e
rol eax, 0xdd
popf
pushf
not eax
add eax, 0x9fdbb5b6
xor eax, 0xddc45e7e
rol eax, 0x34
popf
jmp 0x1401918ba
mov rax, rdi
mov rcx, qword [rsp + 0x1440]
xor rcx, rsp
call fcn.14021cfd0
lea r11, [rsp + 0x1450]
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x30]
mov rsp, r11
pop r14
pop rdi
pop rsi
ret