Function at 0x140122506
Capabilities:
Write file on windows

Disassembly:
push rax
pushf
mov eax, 0x4fe83ce6
pushf
not eax
add eax, 0xb987ac52
xor eax, 0xc9322612
rol eax, 0xaa
popf
pushf
not eax
add eax, 0x91679f38
xor eax, 0xdc41b8b5
rol eax, 0x2e
popf
cmp eax, 4
jne 0x140122543
popf
pop rax
jmp 0x1401228e5
cmp eax, 0
jne 0x140122552
popf
pop rax
jmp 0x140122606
cmp eax, 3
jne 0x140122561
popf
pop rax
jmp 0x140122832
cmp eax, 1
jne 0x140122570
popf
pop rax
jmp 0x1401226a2
cmp eax, 0xd
jne 0x14012257f
popf
pop rax
jmp 0x140122cb3
cmp eax, 7
jne 0x14012258e
popf
pop rax
jmp 0x140122a74
cmp eax, 6
jne 0x14012259d
popf
pop rax
jmp 0x1401229e1
cmp eax, 0xb
jne 0x1401225ac
popf
pop rax
jmp 0x140122c27
cmp eax, 0xc
jne 0x1401225bb
popf
pop rax
jmp 0x140122c79
cmp eax, 8
jne 0x1401225ca
popf
pop rax
jmp 0x140122ae5
cmp eax, 5
jne 0x1401225d9
popf
pop rax
jmp 0x140122950
cmp eax, 2
jne 0x1401225e8
popf
pop rax
jmp 0x140122738
cmp eax, 9
jne 0x1401225f7
popf
pop rax
jmp 0x140122b42
cmp eax, 0xa
jne 0x140122606
popf
pop rax
jmp 0x140122bdd
push rbx
sub rsp, 0x60
mov rax, qword [0x140084080]
xor rax, rsp
mov qword [rsp + 0x58], rax
cmp qword [rcx + 0x68], 0
mov rbx, rcx
je 0x14012266f
push rax
pushf
mov eax, 0x58b2a47a
pushf
not eax
add eax, 0xd73c611c
xor eax, 0x94721866
rol eax, 0xba
popf
pushf
not eax
add eax, 0xcb488dec
xor eax, 0xfe1a3549
rol eax, 0x71
popf
pushf
not eax
add eax, 0xe8e5930f
xor eax, 0x94c2e809
rol eax, 0x3d
popf
jmp 0x140122534
push rax
pushf
mov eax, 0xc131bde4
pushf
not eax
add eax, 0xb3e071f1
xor eax, 0xd03977e7
rol eax, 0x1b
popf
pushf
not eax
add eax, 0xf3b2cd97
xor eax, 0x9a9faf77
rol eax, 0x33
popf
jmp 0x140122534
cmp byte [rcx + 0x71], 0
je 0x1401226df
push rax
pushf
mov eax, 0x601805ca
pushf
not eax
add eax, 0xa955756b
xor eax, 0x94679496
rol eax, 0x1d
popf
pushf
not eax
add eax, 0xa8b2e89b
xor eax, 0xcd078936
rol eax, 0x40
popf
jmp 0x140122534
push rax
pushf
mov eax, 0x671ad2f
pushf
not eax
add eax, 0x85b0f309
xor eax, 0xf10a8e88
rol eax, 0xe8
popf
pushf
not eax
add eax, 0xa71545ab
xor eax, 0xd4f943a2
rol eax, 0x15
popf
pushf
not eax
add eax, 0xf0f4ea1c
xor eax, 0xc001b82e
rol eax, 0x8c
popf
pushf
not eax
add eax, 0xa4946b5f
xor eax, 0x8bd1b7a4
rol eax, 0x3d
popf
jmp 0x140122534
mov rax, qword [rcx]
mov edx, 0x9ebc802a
pushf
not edx
add edx, 0xc5acaabc
xor edx, 0xcc816cc3
rol edx, 0x58
popf
pushf
not edx
add edx, 0xdcad2dcd
xor edx, 0x93767364
rol edx, 0x53
popf
pushf
not edx
add edx, 0xf04fd98f
xor edx, 0xeaee925e
rol edx, 0xd0
popf
pushf
not edx
add edx, 0x9789997c
xor edx, 0xfa2d0255
rol edx, 0xdb
popf
mov qword [rsp + 0x78], rdi
jmp 0x14012279a
call qword [rax + Ordinal_26]
cmp eax, 0xffffffff
je 0x1401227d9
push rax
pushf
mov eax, 0x7e956a6f
pushf
not eax
add eax, 0xede0add7
xor eax, 0xf0ce4f8f
rol eax, 0xfe
popf
pushf
not eax
add eax, 0xd960c840
xor eax, 0xb17f8605
rol eax, 0xb8
popf
jmp 0x140122534
push rax
pushf
mov eax, 0x933c57ff
pushf
not eax
add eax, 0x89aea801
xor eax, 0xcb045a91
rol eax, 0xeb
popf
pushf
not eax
add eax, 0xf58621c6
xor eax, 0xd7329dcc
rol eax, 0xed
popf
pushf
not eax
add eax, 0xd5316743
xor eax, 0x956fe6a5
rol eax, 0x76
popf
pushf
not eax
add eax, 0x9f5898f0
xor eax, 0xb5603895
rol eax, 0x81
popf
jmp 0x140122534
mov rcx, qword [rbx + 0x68]
lea rax, [rsp + 0x30]
lea rdx, [rbx + 0x74]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x58]
lea r8, [rsp + 0x38]
jmp 0x14012284f
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::codecvt_char__char__struct__Mbstatet_::unshift_struct__Mbstatet____ptr64__char____ptr64__char____ptr64__char____ptr64____ptr64_const___ptr64]
test eax, eax
je 0x14012289f
push rax
pushf
mov eax, 0x376e1e24
pushf
not eax
add eax, 0xc6a7a37f
xor eax, 0xfc41bcbe
rol eax, 0xb1
popf
pushf
not eax
add eax, 0xa2063fc6
xor eax, 0xf17c269e
rol eax, 0xb2
popf
pushf
not eax
add eax, 0xe2eb6667
xor eax, 0xe9bbe969
rol eax, 0x1f
popf
jmp 0x140122534
push rax
pushf
mov eax, 0x2e10c1a3
pushf
not eax
add eax, 0xcba5376d
xor eax, 0xa28095b3
rol eax, 0x63
popf
pushf
not eax
add eax, 0xb781b559
xor eax, 0xb9ccd948
rol eax, 0x21
popf
pushf
not eax
add eax, 0xb825cfc8
xor eax, 0xa9fcfe29
rol eax, 0xd1
popf
jmp 0x140122534
sub eax, 1
je 0x14012291d
push rax
pushf
mov eax, 0xb22a98d
pushf
not eax
add eax, 0xf58d2ea4
xor eax, 0xc17d527d
rol eax, 0xde
popf
pushf
not eax
add eax, 0x98cecddd
xor eax, 0xce08f002
rol eax, 0xb5
popf
jmp 0x140122534
push rax
pushf
mov eax, 0xbe14c8e7
pushf
not eax
add eax, 0xfa54b7a3
xor eax, 0xac4bd470
rol eax, 0x1b
popf
pushf
not eax
add eax, 0xec3ba582
xor eax, 0x86b803ab
rol eax, 0x68
popf
jmp 0x140122534
cmp eax, 2
jne 0x140122988
push rax
pushf
mov eax, 0x6140f369
pushf
not eax
add eax, 0x919a4a7e
xor eax, 0xf3b974a6
rol eax, 0xb9
popf
pushf
not eax
add eax, 0xeb90f4bd
xor eax, 0xe6093475
rol eax, 0xa4
popf
jmp 0x140122534
push rax
pushf
mov eax, 0x9b947880
pushf
not eax
add eax, 0xbfbb5133
xor eax, 0xabf823dc
rol eax, 0xb
popf
pushf
not eax
add eax, 0xc1127b7a
xor eax, 0xdbfb2236
rol eax, 0xa4
popf
pushf
not eax
add eax, 0xaa0061f3
xor eax, 0xfb0abacf
rol eax, 0xcd
popf
pushf
not eax
add eax, 0x8d12d245
xor eax, 0xf715197e
rol eax, 0x37
popf
jmp 0x140122534
mov byte [rbx + 0x71], 0
mov al, 0x6b
pushf
not al
add al, 0x1c
xor al, 0xe0
rol al, 0x78
popf
pushf
not al
add al, 0x28
xor al, 0x57
rol al, 0x19
popf
pushf
not al
add al, 2
xor al, 0x25
rol al, 0x9a
popf
pushf
not al
add al, 0xc8
xor al, 0x73
rol al, 0x12
popf
push rax
pushf
mov eax, 0x14065421
pushf
not eax
add eax, 0xa5963d53
xor eax, 0xbeb11e4b
rol eax, 0xbf
popf
pushf
not eax
add eax, 0xdc45ccc2
xor eax, 0xdc9eb70b
rol eax, 0xd6
popf
pushf
not eax
add eax, 0xe4e1076c
xor eax, 0x9bd1fe2d
rol eax, 0x52
popf
pushf
not eax
add eax, 0xd1468e28
xor eax, 0xb746a2fb
rol eax, 0x69
popf
jmp 0x140122534
mov rdi, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x58]
xor rcx, rsp
call fcn.1400e25f6
add rsp, 0x60
pop rbx
ret
mov byte [rbx + 0x71], 0
push rax
pushf
mov eax, 0x3e5a843
pushf
not eax
add eax, 0xdd6295d2
xor eax, 0xadc37239
rol eax, 0x2d
popf
pushf
not eax
add eax, 0xf30c32d4
xor eax, 0xc362d407
rol eax, 0xcc
popf
pushf
not eax
add eax, 0xa1052355
xor eax, 0xdb156241
rol eax, 0x70
popf
pushf
not eax
add eax, 0xd8f8aef8
xor eax, 0xcb39bbe3
rol eax, 0x6f
popf
jmp 0x140122534
mov rdi, qword [rsp + 0x30]
lea rax, [rsp + 0x38]
sub rdi, rax
je 0x140122baa
push rax
pushf
mov eax, 0x300eac2b
pushf
not eax
add eax, 0xc1ded4fe
xor eax, 0xfec87aa1
rol eax, 0x35
popf
pushf
not eax
add eax, 0xae01b1a8
xor eax, 0xd1e67f45
rol eax, 0xd
popf
pushf
not eax
add eax, 0xede72322
xor eax, 0xd247e7ac
rol eax, 0x1a
popf
pushf
not eax
add eax, 0x949f36fc
xor eax, 0x950785a0
rol eax, 0xda
popf
jmp 0x140122534
push rax
pushf
mov eax, 0x8237cb51
pushf
not eax
add eax, 0x914ac94e
xor eax, 0xdbaaf5a1
rol eax, 0x7c
popf
pushf
not eax
add eax, 0xb000f6c1
xor eax, 0xd2b4163b
rol eax, 0x13
popf
jmp 0x140122534
mov r9, qword [rbx + 0x80]
lea rcx, [rsp + 0x38]
mov r8, rdi
mov edx, 0x683f1b32
pushf
not edx
add edx, 0xa3e75a51
xor edx, 0x992c0090
rol edx, 0x63
popf
pushf
not edx
add edx, 0xac9e7b39
xor edx, 0x983c7ec3
rol edx, 0xea
popf
jmp 0x140122c1c
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rdi, rax
jne 0x140122c79
cmp byte [rbx + 0x71], 0
sete al
jmp 0x140122a74
xor al, al
jmp 0x140122a74
mov al, 0x4b
pushf
not al
add al, 0x61
xor al, 0xeb
rol al, 0xcb
popf
pushf
not al
add al, 0x37
xor al, 0xba
rol al, 0x6c
popf
pushf
not al
add al, 0x54
xor al, 0xfa
rol al, 0xc8
popf
mov rcx, qword [rsp + 0x58]
xor rcx, rsp
call fcn.1400e25f6
add rsp, 0x60
pop rbx
ret