Function at 0x140123caa
Capabilities:
Write file on windows

Disassembly:
push rax
pushf
mov eax, 0xa8f0b565
pushf
not eax
add eax, 0x58332792
xor eax, 0x6f9b9277
rol eax, 0xc2
popf
pushf
not eax
add eax, 0x7288d582
xor eax, 0xc9c2c9d
rol eax, 0x72
popf
pushf
not eax
add eax, 0xa0b5f64
xor eax, 0x27cdd06e
rol eax, 0x84
popf
cmp eax, 0xa
jne 0x140123cfa
popf
pop rax
jmp 0x1401243b4
cmp eax, 9
jne 0x140123d09
popf
pop rax
jmp 0x140124368
cmp eax, 3
jne 0x140123d18
popf
pop rax
jmp 0x140123fd5
cmp eax, 0xb
jne 0x140123d27
popf
pop rax
jmp 0x140124402
cmp eax, 1
jne 0x140123d36
popf
pop rax
jmp 0x140123ef9
cmp eax, 6
jne 0x140123d45
popf
pop rax
jmp 0x1401241a3
cmp eax, 2
jne 0x140123d54
popf
pop rax
jmp 0x140123f31
cmp eax, 8
jne 0x140123d63
popf
pop rax
jmp 0x1401242d7
cmp eax, 4
jne 0x140123d72
popf
pop rax
jmp 0x14012406e
cmp eax, 7
jne 0x140123d81
popf
pop rax
jmp 0x140124253
cmp eax, 0
jne 0x140123d90
popf
pop rax
jmp 0x140123d9f
cmp eax, 5
jne 0x140123d9f
popf
pop rax
jmp 0x1401240f0
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r14
mov eax, 0xcc1ab39b
pushf
not eax
add eax, 0x46a328f4
xor eax, 0xcf9af12
rol eax, 0x14
popf
pushf
not eax
add eax, 0x4c1fbd7f
xor eax, 0x4dd3c54d
rol eax, 0x42
popf
pushf
not eax
add eax, 0x722284f
xor eax, 0x5c73791b
rol eax, 0x9d
popf
call fcn.14009b7ed
sub rsp, rax
mov rax, qword [0x14003e040]
xor rax, rsp
mov qword [rsp + 0x1440], rax
movsxd r10, edx
mov rdi, rcx
mov rax, r10
mov ebp, r9d
sar rax, 6
lea rcx, [0x1b99e07f0]
pushf
sub rcx, 0x7999ddc0
popf
and r10d, 0x3f
push r8
not r8
sub rbp, r8
pop r8
sub rbp, 1
mov rsi, r8
mov rax, qword [rcx + rax*8]
lea rdx, [r10 + r10*8]
mov r14, qword [rax + rdx*8 + 0x28]
xor eax, eax
mov qword [rdi], rax
mov dword [rdi + 8], eax
cmp r8, rbp
jae 0x140123ea0
push rax
pushf
mov eax, 0x9b8bd0aa
pushf
not eax
add eax, 0x49e2c94c
xor eax, 0x49bf445b
rol eax, 0x71
popf
pushf
not eax
add eax, 0x2a41e499
xor eax, 0x7298d48
rol eax, 0x6b
popf
pushf
not eax
add eax, 0x5656b765
xor eax, 0x298a48a9
rol eax, 0xb8
popf
jmp 0x140123ceb
push rax
pushf
mov eax, 0x1efa0916
pushf
not eax
add eax, 0x372b3236
xor eax, 0x1fe07845
rol eax, 0xe4
popf
pushf
not eax
add eax, 0x21f127ca
xor eax, 0xa7a869d
rol eax, 0xb7
popf
pushf
not eax
add eax, 0x4781378
xor eax, 0x3c183f4e
rol eax, 0x4b
popf
pushf
not eax
add eax, 0x1a8c084a
xor eax, 0x5290e098
rol eax, 0x58
popf
jmp 0x140123ceb
lea rbx, [rsp + 0x40]
push rax
pushf
mov eax, 0x92862454
pushf
not eax
add eax, 0x19894c6
xor eax, 0x6ee927e3
rol eax, 0x6a
popf
pushf
not eax
add eax, 0x5458bf11
xor eax, 0x66fa3709
rol eax, 0x93
popf
jmp 0x140123ceb
cmp rsi, rbp
jae 0x140123f7c
push rax
pushf
mov eax, 0x5418889
pushf
not eax
add eax, 0x5e46609
xor eax, 0x18070967
rol eax, 0x9c
popf
pushf
not eax
add eax, 0x727b711e
xor eax, 0x4ccf8d6a
rol eax, 0x9f
popf
pushf
not eax
add eax, 0x6ba52f3b
xor eax, 0xd85df1f
rol eax, 0x1a
popf
jmp 0x140123ceb
push rax
pushf
mov eax, 0x56a3f5e3
pushf
not eax
add eax, 0x6208cc31
xor eax, 0x273cbc71
rol eax, 0x34
popf
pushf
not eax
add eax, 0x4446351b
xor eax, 0x21e686c
rol eax, 0x62
popf
pushf
not eax
add eax, 0x4b58c8d8
xor eax, 0xb657285
rol eax, 0xc2
popf
pushf
not eax
add eax, 0x63c89ab6
xor eax, 0x350130f2
rol eax, 0xeb
popf
jmp 0x140123ceb
movzx eax, word [rsi]
add rsi, 2
cmp ax, 0xa
jne 0x140124015
push rax
pushf
mov eax, 0x8bec1c7a
pushf
not eax
add eax, 0x6247272c
xor eax, 0x40677478
rol eax, 5
popf
pushf
not eax
add eax, 0x325b9a3c
xor eax, 0x6ecbc109
rol eax, 8
popf
jmp 0x140123ceb
push rax
pushf
mov eax, 0xfc53efa3
pushf
not eax
add eax, 0x63c64b5
xor eax, 0x4e2b3d7b
rol eax, 0xa9
popf
pushf
not eax
add eax, 0x6bf6833
xor eax, 0x14281917
rol eax, 0xe3
popf
pushf
not eax
add eax, 0x653e5761
xor eax, 0x330c6172
rol eax, 0x2b
popf
pushf
not eax
add eax, 0x6d1c08cb
xor eax, 0x3a10911a
rol eax, 0x90
popf
jmp 0x140123ceb
add dword [rdi + 8], 2
mov ecx, 0xbaa70492
pushf
not ecx
add ecx, 0x43ae9506
xor ecx, 0x5c9e9df9
rol ecx, 0x71
popf
pushf
not ecx
add ecx, 0x710d49cc
xor ecx, 0x77cb7c
rol ecx, 0xec
popf
pushf
not ecx
add ecx, 0x7eab0798
xor ecx, 0x794a323f
rol ecx, 0xf1
popf
mov word [rbx], cx
add rbx, 2
push rax
pushf
mov eax, 0xa97a4f5f
pushf
not eax
add eax, 0x16e79167
xor eax, 0x16e4bac7
rol eax, 8
popf
pushf
not eax
add eax, 0x41ac2c61
xor eax, 0x17b36be5
rol eax, 0x63
popf
jmp 0x140123ceb
mov word [rbx], ax
add rbx, 2
lea rax, [rsp + 0x143e]
cmp rbx, rax
jb 0x14012415d
push rax
pushf
mov eax, 0x7462bc9d
pushf
not eax
add eax, 0x13eabdf1
xor eax, 0x59f05230
rol eax, 0xf9
popf
pushf
not eax
add eax, 0x4668e674
xor eax, 0xc086ac0
rol eax, 0x53
popf
pushf
not eax
add eax, 0x75aa4d39
xor eax, 0x1c72a14c
rol eax, 0x56
popf
pushf
not eax
add eax, 0x2ba5198a
xor eax, 0x78cc684
rol eax, 5
popf
jmp 0x140123ceb
push rax
pushf
mov eax, 0xc51e55da
pushf
not eax
add eax, 0x161aca16
xor eax, 0x4323cde0
rol eax, 4
popf
pushf
not eax
add eax, 0x6ff45c4a
xor eax, 0x275fcc3b
rol eax, 0x6f
popf
pushf
not eax
add eax, 0x2b31c514
xor eax, 0x71e039c1
rol eax, 0x61
popf
jmp 0x140123ceb
and qword [rsp + 0x20], 0
lea rax, [rsp + 0x40]
push rax
not rax
add rbx, rax
pop rax
add rbx, 1
lea r9, [rsp + 0x30]
sar rbx, 1
lea rdx, [rsp + 0x40]
add ebx, ebx
mov rcx, r14
mov r8d, ebx
jmp 0x1401241d0
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x140124220
push rax
pushf
mov eax, 0x9833c27e
pushf
not eax
add eax, 0x3a071ab8
xor eax, 0x2b061418
rol eax, 0xf0
popf
pushf
not eax
add eax, 0x7cbf95df
xor eax, 0x31f9945b
rol eax, 0x8f
popf
pushf
not eax
add eax, 0x363ee1fb
xor eax, 0x6895e147
rol eax, 0xc7
popf
jmp 0x140123ceb
push rax
pushf
mov eax, 0x2bd164a0
pushf
not eax
add eax, 0xe97e8bb
xor eax, 0x76d01ac3
rol eax, 0xf4
popf
pushf
not eax
add eax, 0x28c9fa48
xor eax, 0x3b30b2de
rol eax, 0x38
popf
jmp 0x140123ceb
mov eax, dword [rsp + 0x30]
add dword [rdi + 4], eax
cmp eax, ebx
jb 0x1401242a4
push rax
pushf
mov eax, 0xc920dba2
pushf
not eax
add eax, 0x3e0d3310
xor eax, 0x5e09ec7c
rol eax, 0x50
popf
pushf
not eax
add eax, 0x7605727a
xor eax, 0x235af2f8
rol eax, 0x9a
popf
pushf
not eax
add eax, 0x444f22e
xor eax, 0x51da3758
rol eax, 0xb1
popf
jmp 0x140123ceb
push rax
pushf
mov eax, 0x1b62efd6
pushf
not eax
add eax, 0x63a7cf54
xor eax, 0x41d3561
rol eax, 0xe1
popf
pushf
not eax
add eax, 0x31e3eba
xor eax, 0x6a6a6be1
rol eax, 0xbb
popf
jmp 0x140123ceb
cmp rsi, rbp
jb 0x140124322
push rax
pushf
mov eax, 0x5f555100
pushf
not eax
add eax, 0x3227c9eb
xor eax, 0x6adb293d
rol eax, 0x93
popf
pushf
not eax
add eax, 0x763f03a9
xor eax, 0x57d0bf4b
rol eax, 0x96
popf
pushf
not eax
add eax, 0x8c9e76b
xor eax, 0x35cf2eb
rol eax, 0x33
popf
jmp 0x140123ceb
push rax
pushf
mov eax, 0x945049ab
pushf
not eax
add eax, 0x522da1f7
xor eax, 0x23c6e8d8
rol eax, 0xb2
popf
pushf
not eax
add eax, 0x3ae68da8
xor eax, 0x5f7f187
rol eax, 0xe6
popf
pushf
not eax
add eax, 0x5f8b521c
xor eax, 0x392327c
rol eax, 0xb4
popf
jmp 0x140123ceb
jmp 0x140124402
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rdi], eax
push rax
pushf
mov eax, 0x2073a016
pushf
not eax
add eax, 0x64ca5dd
xor eax, 0x542491c4
rol eax, 0xeb
popf
pushf
not eax
add eax, 0x63107103
xor eax, 0x3424c87
rol eax, 0xf5
popf
pushf
not eax
add eax, 0x2733e9a9
xor eax, 0x28a546e6
rol eax, 0x19
popf
jmp 0x140123ceb
mov rax, rdi
mov rcx, qword [rsp + 0x1440]
xor rcx, rsp
call fcn.140098ae9
lea r11, [rsp + 0x1450]
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x30]
mov rsp, r11
pop r14
pop rdi
pop rsi
ret