Function at 0x140114934
Capabilities:
Write file on windows

Disassembly:
push rax
pushf
mov eax, 0x67724533
pushf
not eax
add eax, 0x269abb99
xor eax, 0x2fc4b6bd
rol eax, 0xaa
popf
pushf
not eax
add eax, 0x458b30d5
xor eax, 0x3d23404b
rol eax, 0x33
popf
pushf
not eax
add eax, 0x408dfa8
xor eax, 0x2475800
rol eax, 0x85
popf
pushf
not eax
add eax, 0x6a32f808
xor eax, 0x7baba796
rol eax, 0x47
popf
cmp eax, 9
jne 0x140114997
popf
pop rax
jmp 0x14011508b
cmp eax, 4
jne 0x1401149a6
popf
pop rax
jmp 0x140114d47
cmp eax, 0
jne 0x1401149b5
popf
pop rax
jmp 0x140114a4b
cmp eax, 0xa
jne 0x1401149c4
popf
pop rax
jmp 0x14011511f
cmp eax, 2
jne 0x1401149d3
popf
pop rax
jmp 0x140114be4
cmp eax, 6
jne 0x1401149e2
popf
pop rax
jmp 0x140114e62
cmp eax, 5
jne 0x1401149f1
popf
pop rax
jmp 0x140114db0
cmp eax, 0xb
jne 0x140114a00
popf
pop rax
jmp 0x140115180
cmp eax, 3
jne 0x140114a0f
popf
pop rax
jmp 0x140114c9b
cmp eax, 7
jne 0x140114a1e
popf
pop rax
jmp 0x140114f69
cmp eax, 1
jne 0x140114a2d
popf
pop rax
jmp 0x140114b99
cmp eax, 8
jne 0x140114a3c
popf
pop rax
jmp 0x140114fe8
cmp eax, 0xc
jne 0x140114a4b
popf
pop rax
jmp 0x1401151ce
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r12
push r14
push r15
mov eax, 0x11d07b03
pushf
not eax
add eax, 0x3469e8f5
xor eax, 0x7b0501e7
rol eax, 0xd3
popf
pushf
not eax
add eax, 0x5cca37a
xor eax, 0x2c450e06
rol eax, 2
popf
pushf
not eax
add eax, 0x2e70a3da
xor eax, 0x8d5a197
rol eax, 0x37
popf
call fcn.14008c714
sub rsp, rax
mov rax, qword [0x14003e040]
xor rax, rsp
mov qword [rsp + 0x1460], rax
movsxd r10, edx
mov rbx, rcx
mov rax, r10
mov r14d, r9d
sar rax, 6
lea rcx, [0x1b5980769]
pushf
sub rcx, 0x7593dd39
popf
and r10d, 0x3f
push r8
not r8
sub r14, r8
pop r8
sub r14, 1
mov r15, r8
mov rdi, r8
mov rax, qword [rcx + rax*8]
lea rdx, [r10 + r10*8]
mov r12, qword [rax + rdx*8 + 0x28]
xor eax, eax
mov qword [rbx], rax
cmp r8, r14
mov dword [rbx + 8], eax
jae 0x140114b66
push rax
pushf
mov eax, 0xc0f97c71
pushf
not eax
add eax, 0x2218d845
xor eax, 0x6963a22a
rol eax, 0xa4
popf
pushf
not eax
add eax, 0x4860f3ea
xor eax, 0x3fb0570d
rol eax, 0x8a
popf
pushf
not eax
add eax, 0x34148a07
xor eax, 0x18257d1a
rol eax, 0xcb
popf
pushf
not eax
add eax, 0x5e52c65d
xor eax, 0x4bda411b
rol eax, 0xb
popf
jmp 0x140114988
push rax
pushf
mov eax, 0xac1a26b1
pushf
not eax
add eax, 0x48e1ee5
xor eax, 0x31a89616
rol eax, 0x8c
popf
pushf
not eax
add eax, 0x22c84ed5
xor eax, 0x6be5f437
rol eax, 0x18
popf
jmp 0x140114988
lea rax, [rsp + 0x50]
push rax
pushf
mov eax, 0x8a05ba70
pushf
not eax
add eax, 0x79e60448
xor eax, 0x1175c4c2
rol eax, 0x6c
popf
pushf
not eax
add eax, 0x5a318b65
xor eax, 0x278d6ea9
rol eax, 0x7d
popf
pushf
not eax
add eax, 0x753c1348
xor eax, 0x385e6a8d
rol eax, 0x66
popf
jmp 0x140114988
cmp rdi, r14
jae 0x140114c42
push rax
pushf
mov eax, 0xe2b06c58
pushf
not eax
add eax, 0x5324408a
xor eax, 0x1cbf2c84
rol eax, 0x25
popf
pushf
not eax
add eax, 0x6f82443
xor eax, 0x59943a9d
rol eax, 0x1d
popf
pushf
not eax
add eax, 0x3bdb484
xor eax, 0x38290ca7
rol eax, 0xb3
popf
pushf
not eax
add eax, 0xc15a8aa
xor eax, 0x3e79841
rol eax, 0x95
popf
jmp 0x140114988
push rax
pushf
mov eax, 0x60a88cf2
pushf
not eax
add eax, 0x3345ba26
xor eax, 0x24299c2a
rol eax, 0x53
popf
pushf
not eax
add eax, 0x2cf1e306
xor eax, 0x5ae9c510
rol eax, 0xaa
popf
pushf
not eax
add eax, 0x24726043
xor eax, 0x60125bf8
rol eax, 0x8c
popf
pushf
not eax
add eax, 0x6765a922
xor eax, 0x3ae9b7d5
rol eax, 0x96
popf
jmp 0x140114988
movzx ecx, word [rdi]
add rdi, 2
cmp cx, 0xa
jne 0x140114d01
push rax
pushf
mov eax, 0xe19af6a5
pushf
not eax
add eax, 0x7a45a4fc
xor eax, 0x41e6e5e
rol eax, 0x1e
popf
pushf
not eax
add eax, 0x4fbf29ab
xor eax, 0x2ac9073
rol eax, 0xcd
popf
pushf
not eax
add eax, 0x14ca1fda
xor eax, 0x35744dbe
rol eax, 0x28
popf
pushf
not eax
add eax, 0x7a425de4
xor eax, 0x7f433191
rol eax, 0x4f
popf
jmp 0x140114988
push rax
pushf
mov eax, 0x83403168
pushf
not eax
add eax, 0x1c52e77
xor eax, 0x2fb38b40
rol eax, 0x72
popf
pushf
not eax
add eax, 0x762099de
xor eax, 0x6f688da1
rol eax, 0x9f
popf
pushf
not eax
add eax, 0x36bab96d
xor eax, 0x3cf26d1c
rol eax, 0xd3
popf
jmp 0x140114988
mov edx, 0x234de389
pushf
not edx
add edx, 0x2b906ffd
xor edx, 0x4067f1a7
rol edx, 0x25
popf
pushf
not edx
add edx, 0x2042d1a4
xor edx, 0x1693171a
rol edx, 0x68
popf
mov word [rax], dx
add rax, 2
push rax
pushf
mov eax, 0x29057230
pushf
not eax
add eax, 0x5c981433
xor eax, 0x4f64c85e
rol eax, 0x7b
popf
pushf
not eax
add eax, 0x5e3b1839
xor eax, 0x7a5664e6
rol eax, 0xd0
popf
jmp 0x140114988
mov word [rax], cx
add rax, 2
lea rcx, [rsp + 0x6f8]
cmp rax, rcx
jb 0x140114e09
push rax
pushf
mov eax, 0xa846428a
pushf
not eax
add eax, 0x63b0729c
xor eax, 0x690c1eab
rol eax, 0
popf
pushf
not eax
add eax, 0x2deaec62
xor eax, 0x44832ea6
rol eax, 1
popf
pushf
not eax
add eax, 0x1af4301a
xor eax, 0x1ce50a17
rol eax, 0xc3
popf
jmp 0x140114988
push rax
pushf
mov eax, 0x408793c1
pushf
not eax
add eax, 0xaf9b394
xor eax, 0x57c1663c
rol eax, 0xae
popf
pushf
not eax
add eax, 0x514baea3
xor eax, 0x759a162e
rol eax, 0x99
popf
pushf
not eax
add eax, 0x26469725
xor eax, 0x3f21ef7a
rol eax, 5
popf
pushf
not eax
add eax, 0x6c3563fa
xor eax, 0x48f7c4e0
rol eax, 0x35
popf
jmp 0x140114988
and qword [rsp + 0x38], 0
lea rcx, [rsp + 0x50]
and qword [rsp + 0x30], 0
lea r8, [rsp + 0x50]
push rcx
not rcx
add rax, rcx
pop rcx
add rax, 1
mov dword [rsp + 0x28], 0xd55
lea rcx, [rsp + 0x700]
sar rax, 1
mov qword [rsp + 0x20], rcx
mov r9d, eax
mov ecx, 0x6348f85c
pushf
not ecx
add ecx, 0x5d33b86a
xor ecx, 0x765d7fa8
rol ecx, 0xa1
popf
pushf
not ecx
add ecx, 0x644e23af
xor ecx, 0x13863869
rol ecx, 0x2d
popf
pushf
not ecx
add ecx, 0x44b95a22
xor ecx, 0x3ee69f36
rol ecx, 0xb4
popf
xor edx, edx
call fcn.140134307
mov ebp, eax
test eax, eax
je 0x140114f36
push rax
pushf
mov eax, 0x673bd93b
pushf
not eax
add eax, 0x10754167
xor eax, 0x3e4e56b1
rol eax, 0xff
popf
pushf
not eax
add eax, 0x7e23dc66
xor eax, 0x44e4a776
rol eax, 5
popf
pushf
not eax
add eax, 0x4254820
xor eax, 0x3591fa51
rol eax, 0xe8
popf
jmp 0x140114988
push rax
pushf
mov eax, 0xcb2db4c1
pushf
not eax
add eax, 0xee95f0f
xor eax, 0x59431e6e
rol eax, 0xe1
popf
pushf
not eax
add eax, 0x5af93e09
xor eax, 0x250515c2
rol eax, 0x12
popf
jmp 0x140114988
xor esi, esi
test eax, eax
je 0x140114fb5
push rax
pushf
mov eax, 0x27328502
pushf
not eax
add eax, 0x32129fb
xor eax, 0x489d5722
rol eax, 0x44
popf
pushf
not eax
add eax, 0x5134aaac
xor eax, 0x485287c1
rol eax, 0xa4
popf
pushf
not eax
add eax, 0x6722cd68
xor eax, 0x4da42132
rol eax, 0x8b
popf
jmp 0x140114988
push rax
pushf
mov eax, 0x817b4c82
pushf
not eax
add eax, 0x27fb1491
xor eax, 0x5b88a1d
rol eax, 0xf3
popf
pushf
not eax
add eax, 0x64cd9505
xor eax, 0x143076cb
rol eax, 0xa3
popf
jmp 0x140114988
and qword [rsp + 0x20], 0
lea rdx, [rsp + 0x700]
mov ecx, esi
lea r9, [rsp + 0x40]
mov r8d, ebp
push rcx
not rcx
sub rdx, rcx
pop rcx
sub rdx, 1
mov rcx, r12
push rsi
not esi
add r8d, esi
pop rsi
add r8d, 1
jmp 0x14011501b
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x140115058
push rax
pushf
mov eax, 0x1da2051a
pushf
not eax
add eax, 0x4eac5128
xor eax, 0xd3ae80f
rol eax, 0x47
popf
pushf
not eax
add eax, 0x55fdd892
xor eax, 0x3d3bd773
rol eax, 0x2c
popf
jmp 0x140114988
push rax
pushf
mov eax, 0x35fd5d4f
pushf
not eax
add eax, 0x5d4318ad
xor eax, 0x5ffa0d32
rol eax, 0x63
popf
pushf
not eax
add eax, 0x5e9b6ec
xor eax, 0x3f5c0370
rol eax, 0x2c
popf
jmp 0x140114988
add esi, dword [rsp + 0x40]
cmp esi, ebp
jb 0x1401150d9
push rax
pushf
mov eax, 0x11928bf6
pushf
not eax
add eax, 0x2f73d841
xor eax, 0x27922f23
rol eax, 0x78
popf
pushf
not eax
add eax, 0x6cf47bdd
xor eax, 0x7021d263
rol eax, 0x93
popf
pushf
not eax
add eax, 0x424f473a
xor eax, 0x71792a5b
rol eax, 0x32
popf
jmp 0x140114988
push rax
pushf
mov eax, 0x939ab1d9
pushf
not eax
add eax, 0xa327717
xor eax, 0x3281f43a
rol eax, 0xf5
popf
pushf
not eax
add eax, 0x2275c4de
xor eax, 0x3e6d4fb3
rol eax, 0xe3
popf
pushf
not eax
add eax, 0x1338914d
xor eax, 0x143824ab
rol eax, 0xdc
popf
jmp 0x140114988
mov eax, edi
push r15
not r15d
add eax, r15d
pop r15
add eax, 1
mov dword [rbx + 4], eax
cmp rdi, r14
jmp 0x140114b07
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbx], eax
push rax
pushf
mov eax, 0x8ef06e34
pushf
not eax
add eax, 0x4c83364f
xor eax, 0x32c4b6b3
rol eax, 0x1e
popf
pushf
not eax
add eax, 0x7d25a6e7
xor eax, 0x6ea8d9d7
rol eax, 0x48
popf
pushf
not eax
add eax, 0x6b9168aa
xor eax, 0x72b27cb2
rol eax, 0x1b
popf
jmp 0x140114988
mov rax, rbx
mov rcx, qword [rsp + 0x1460]
xor rcx, rsp
call fcn.140089a05
lea r11, [rsp + 0x1470]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rsi
ret