Function at 0x140291a03
Capabilities:
Write file on windows

Disassembly:
push rax
pushf
mov eax, 0x3842e157
pushf
not eax
add eax, 0xb8bb1f81
xor eax, 0x91949594
rol eax, 0x5b
popf
pushf
not eax
add eax, 0x8d723554
xor eax, 0xaff7e911
rol eax, 0x99
popf
pushf
not eax
add eax, 0xc9ede13c
xor eax, 0xfbd7b6ee
rol eax, 0xdd
popf
cmp eax, 4
jne 0x140291a53
popf
pop rax
jmp 0x140291dca
cmp eax, 0
jne 0x140291a62
popf
pop rax
jmp 0x140291b07
cmp eax, 3
jne 0x140291a71
popf
pop rax
jmp 0x140291d44
cmp eax, 1
jne 0x140291a80
popf
pop rax
jmp 0x140291c7b
cmp eax, 0xa
jne 0x140291a8f
popf
pop rax
jmp 0x1402921c8
cmp eax, 7
jne 0x140291a9e
popf
pop rax
jmp 0x140292043
cmp eax, 6
jne 0x140291aad
popf
pop rax
jmp 0x140291f0c
cmp eax, 0xb
jne 0x140291abc
popf
pop rax
jmp 0x14029221f
cmp eax, 0xc
jne 0x140291acb
popf
pop rax
jmp 0x140292280
cmp eax, 8
jne 0x140291ada
popf
pop rax
jmp 0x1402920e8
cmp eax, 5
jne 0x140291ae9
popf
pop rax
jmp 0x140291e46
cmp eax, 2
jne 0x140291af8
popf
pop rax
jmp 0x140291cc6
cmp eax, 9
jne 0x140291b07
popf
pop rax
jmp 0x1402921bc
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r12
push r14
push r15
mov eax, 0xb3646b32
pushf
not eax
add eax, 0xde2eb735
xor eax, 0xb2ad6676
rol eax, 0x8d
popf
pushf
not eax
add eax, 0x9deb40cd
xor eax, 0xad8b07b1
rol eax, 0x9d
popf
pushf
not eax
add eax, 0xa28e3a8e
xor eax, 0x9feb4517
rol eax, 0x67
popf
call fcn.14029380f
sub rsp, rax
mov rax, qword [0x140103090]
xor rax, rsp
mov qword [rsp + 0x1460], rax
movsxd r10, edx
mov rbx, rcx
mov rax, r10
mov r14d, r9d
sar rax, 6
lea rcx, [0x1aa58dbdb]
pushf
sub rcx, 0x6a483c4b
popf
and r10d, 0x3f
push r8
not r8
sub r14, r8
pop r8
sub r14, 1
mov r15, r8
mov rdi, r8
mov rax, qword [rcx + rax*8]
lea rdx, [r10 + r10*8]
mov r12, qword [rax + rdx*8 + 0x28]
xor eax, eax
mov qword [rbx], rax
cmp r8, r14
mov dword [rbx + 8], eax
jae 0x140291c22
push rax
pushf
mov eax, 0x6e0eedd7
pushf
not eax
add eax, 0xa1004fcb
xor eax, 0xdd319032
rol eax, 0x12
popf
pushf
not eax
add eax, 0xe035a412
xor eax, 0xdfc279dd
rol eax, 0x98
popf
pushf
not eax
add eax, 0xd8612b65
xor eax, 0xfd19822f
rol eax, 0x3e
popf
pushf
not eax
add eax, 0xa33b1c1b
xor eax, 0xa4da2da3
rol eax, 0xff
popf
jmp 0x140291a44
push rax
pushf
mov eax, 0x9997418b
pushf
not eax
add eax, 0xea71115d
xor eax, 0xde0cdffd
rol eax, 0xf8
popf
pushf
not eax
add eax, 0xa06ff891
xor eax, 0x9225bdc6
rol eax, 0x4b
popf
pushf
not eax
add eax, 0xd21725bb
xor eax, 0xbca72080
rol eax, 0x74
popf
pushf
not eax
add eax, 0x823bd552
xor eax, 0x877abd15
rol eax, 7
popf
jmp 0x140291a44
lea rax, [rsp + 0x50]
push rax
pushf
mov eax, 0x65a27519
pushf
not eax
add eax, 0x91115d47
xor eax, 0x90f9b9bd
rol eax, 0x12
popf
pushf
not eax
add eax, 0xd69a645b
xor eax, 0xfa162cef
rol eax, 0x8f
popf
pushf
not eax
add eax, 0x9af10b01
xor eax, 0xfe67d5e0
rol eax, 0x65
popf
jmp 0x140291a44
cmp rdi, r14
jae 0x140291cfe
push rax
pushf
mov eax, 0xa1bcff7c
pushf
not eax
add eax, 0x923af7eb
xor eax, 0xe2d3bd3b
rol eax, 0xaf
popf
pushf
not eax
add eax, 0xe0bfb08e
xor eax, 0xde152736
rol eax, 0xc3
popf
jmp 0x140291a44
push rax
pushf
mov eax, 0x7ac0e4fa
pushf
not eax
add eax, 0x9be60332
xor eax, 0xb2ac6634
rol eax, 0x28
popf
pushf
not eax
add eax, 0xb4ae771d
xor eax, 0xa8e21e44
rol eax, 0xcd
popf
pushf
not eax
add eax, 0x8dae228a
xor eax, 0xfff4710f
rol eax, 0xd9
popf
jmp 0x140291a44
movzx ecx, word [rdi]
add rdi, 2
cmp cx, 0xa
jne 0x140291d97
push rax
pushf
mov eax, 0x8f7fa238
pushf
not eax
add eax, 0xd8c44a76
xor eax, 0xe407c0c7
rol eax, 0x23
popf
pushf
not eax
add eax, 0xfa5511ab
xor eax, 0xdc3cef59
rol eax, 0x5a
popf
pushf
not eax
add eax, 0xedf38312
xor eax, 0x9cc36e77
rol eax, 0xc5
popf
jmp 0x140291a44
push rax
pushf
mov eax, 0xa00bd1e3
pushf
not eax
add eax, 0x9af659c5
xor eax, 0xde752bd1
rol eax, 0xfe
popf
pushf
not eax
add eax, 0xd59a5267
xor eax, 0xcc72675f
rol eax, 0x40
popf
jmp 0x140291a44
mov edx, 0x42a2b317
pushf
not edx
add edx, 0xfe976827
xor edx, 0xa549fa4e
rol edx, 0xa4
popf
pushf
not edx
add edx, 0xd0d4e898
xor edx, 0xe4fff206
rol edx, 0x99
popf
mov word [rax], dx
add rax, 2
push rax
pushf
mov eax, 0xe9463abb
pushf
not eax
add eax, 0xb65861b2
xor eax, 0xb3ca5fbf
rol eax, 0x60
popf
pushf
not eax
add eax, 0x92fdd0c1
xor eax, 0xf5ccbbd9
rol eax, 0xcf
popf
pushf
not eax
add eax, 0xa37affab
xor eax, 0xad838eb6
rol eax, 0x4b
popf
jmp 0x140291a44
mov word [rax], cx
add rax, 2
lea rcx, [rsp + 0x6f8]
cmp rax, rcx
jb 0x140291eb3
push rax
pushf
mov eax, 0xed9d6b56
pushf
not eax
add eax, 0xcf5d2f5c
xor eax, 0xcf5500fd
rol eax, 0x1a
popf
pushf
not eax
add eax, 0xf79c3cba
xor eax, 0xc9aec9a0
rol eax, 0xdb
popf
pushf
not eax
add eax, 0xfa301805
xor eax, 0x8c09a9f0
rol eax, 0x44
popf
pushf
not eax
add eax, 0xa7663e81
xor eax, 0xb3a9733c
rol eax, 0xef
popf
jmp 0x140291a44
push rax
pushf
mov eax, 0x68a98994
pushf
not eax
add eax, 0xb1df6448
xor eax, 0xcfe049ac
rol eax, 0x72
popf
pushf
not eax
add eax, 0xbc3f2612
xor eax, 0x8175edf4
rol eax, 0x96
popf
pushf
not eax
add eax, 0xdf9a0253
xor eax, 0x8123508b
rol eax, 0x7e
popf
pushf
not eax
add eax, 0x81214168
xor eax, 0xde720083
rol eax, 0x9a
popf
jmp 0x140291a44
and qword [rsp + 0x38], 0
lea rcx, [rsp + 0x50]
and qword [rsp + 0x30], 0
lea r8, [rsp + 0x50]
sub rax, rcx
mov dword [rsp + 0x28], 0xd55
lea rcx, [rsp + 0x700]
sar rax, 1
mov qword [rsp + 0x20], rcx
mov r9d, eax
mov ecx, 0x47c44365
pushf
not ecx
add ecx, 0xdc58a445
xor ecx, 0xb70ed9d1
rol ecx, 0x5f
popf
pushf
not ecx
add ecx, 0xf4006ee4
xor ecx, 0xeef33730
rol ecx, 0x20
popf
pushf
not ecx
add ecx, 0xec758049
xor ecx, 0xffb54561
rol ecx, 0x63
popf
xor edx, edx
call fcn.14035812d
mov ebp, eax
test eax, eax
je 0x140291fea
push rax
pushf
mov eax, 0xdcd816e7
pushf
not eax
add eax, 0xb473dec7
xor eax, 0x83af4d55
rol eax, 0xe7
popf
pushf
not eax
add eax, 0xf4603df1
xor eax, 0xde922ccd
rol eax, 0x13
popf
pushf
not eax
add eax, 0x99cb0eba
xor eax, 0x86cf060f
rol eax, 0x41
popf
pushf
not eax
add eax, 0xdb2df688
xor eax, 0xd5b21d8f
rol eax, 7
popf
jmp 0x140291a44
push rax
pushf
mov eax, 0xd5d6366d
pushf
not eax
add eax, 0xc1d50ec5
xor eax, 0xcad20389
rol eax, 0x6c
popf
pushf
not eax
add eax, 0xa1dc7d4a
xor eax, 0xf0caba7b
rol eax, 0x8e
popf
pushf
not eax
add eax, 0x9cdd47de
xor eax, 0xf88ec483
rol eax, 0xab
popf
pushf
not eax
add eax, 0x80158c30
xor eax, 0xd84430ca
rol eax, 0x81
popf
jmp 0x140291a44
xor esi, esi
test eax, eax
je 0x14029208f
push rax
pushf
mov eax, 0x17c396a
pushf
not eax
add eax, 0xc37f2cc5
xor eax, 0xa3429d53
rol eax, 0x64
popf
pushf
not eax
add eax, 0xdc8da199
xor eax, 0xea48b908
rol eax, 0x60
popf
pushf
not eax
add eax, 0xd680e541
xor eax, 0xf3b26d36
rol eax, 0x45
popf
jmp 0x140291a44
push rax
pushf
mov eax, 0x3f85ec77
pushf
not eax
add eax, 0xf221f069
xor eax, 0xf80f7612
rol eax, 0x4d
popf
pushf
not eax
add eax, 0x87a20eb8
xor eax, 0xf33d8d26
rol eax, 0x87
popf
pushf
not eax
add eax, 0xe0307133
xor eax, 0xb1f72cff
rol eax, 0x1e
popf
pushf
not eax
add eax, 0x86801057
xor eax, 0xff053766
rol eax, 0x48
popf
jmp 0x140291a44
and qword [rsp + 0x20], 0
lea rdx, [rsp + 0x700]
mov ecx, esi
lea r9, [rsp + 0x40]
mov r8d, ebp
push rcx
not rcx
sub rdx, rcx
pop rcx
sub rdx, 1
mov rcx, r12
sub r8d, esi
jmp 0x140292113
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x140292163
push rax
pushf
mov eax, 0x9cb6c5b5
pushf
not eax
add eax, 0xb16b6022
xor eax, 0x87695a38
rol eax, 0x71
popf
pushf
not eax
add eax, 0x8b6585d4
xor eax, 0xd98e585c
rol eax, 0x40
popf
pushf
not eax
add eax, 0x8b29164a
xor eax, 0xb7f73405
rol eax, 0x96
popf
jmp 0x140291a44
push rax
pushf
mov eax, 0x76ab9dea
pushf
not eax
add eax, 0xbb50516a
xor eax, 0x9f89debc
rol eax, 0xea
popf
pushf
not eax
add eax, 0xf023e43a
xor eax, 0xeec22b16
rol eax, 0xf5
popf
pushf
not eax
add eax, 0xd4bec603
xor eax, 0xf36d03e9
rol eax, 0xa0
popf
pushf
not eax
add eax, 0xa35af512
xor eax, 0xf931c142
rol eax, 0xc1
popf
jmp 0x140291a44
add esi, dword [rsp + 0x40]
cmp esi, ebp
jb 0x1402920e8
mov eax, edi
sub eax, r15d
mov dword [rbx + 4], eax
cmp rdi, r14
jmp 0x140291bc3
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbx], eax
push rax
pushf
mov eax, 0x28b5a534
pushf
not eax
add eax, 0x99e0def1
xor eax, 0x98a6eb17
rol eax, 0xe1
popf
pushf
not eax
add eax, 0xc2fc2d48
xor eax, 0xfa8832a4
rol eax, 0x43
popf
pushf
not eax
add eax, 0xab0ce309
xor eax, 0xdbca91cc
rol eax, 0xe0
popf
pushf
not eax
add eax, 0xc950bb46
xor eax, 0xa5431021
rol eax, 0x7b
popf
jmp 0x140291a44
mov rax, rbx
mov rcx, qword [rsp + 0x1460]
xor rcx, rsp
call fcn.14027ae25
lea r11, [rsp + 0x1470]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rsi
ret