Function at 0x140113a4d
Capabilities:
Write file on windows

Disassembly:
push rax
pushf
mov eax, 0xfd0a13c8
pushf
not eax
add eax, 0x3a31ff92
xor eax, 0x79828db7
rol eax, 0x91
popf
pushf
not eax
add eax, 0x3e4d7a23
xor eax, 0x1065cf6
rol eax, 0x8d
popf
pushf
not eax
add eax, 0x8300b68
xor eax, 0x32aa3d5d
rol eax, 4
popf
cmp eax, 7
jne 0x140113a9d
popf
pop rax
jmp 0x140113f53
cmp eax, 4
jne 0x140113aac
popf
pop rax
jmp 0x140113de4
cmp eax, 6
jne 0x140113abb
popf
pop rax
jmp 0x140113eab
cmp eax, 5
jne 0x140113aca
popf
pop rax
jmp 0x140113e20
cmp eax, 0
jne 0x140113ad9
popf
pop rax
jmp 0x140113b42
cmp eax, 9
jne 0x140113ae8
popf
pop rax
jmp 0x1401140a1
cmp eax, 0xa
jne 0x140113af7
popf
pop rax
jmp 0x1401140ed
cmp eax, 8
jne 0x140113b06
popf
pop rax
jmp 0x140114010
cmp eax, 1
jne 0x140113b15
popf
pop rax
jmp 0x140113c72
cmp eax, 3
jne 0x140113b24
popf
pop rax
jmp 0x140113d3b
cmp eax, 0xb
jne 0x140113b33
popf
pop rax
jmp 0x14011413b
cmp eax, 2
jne 0x140113b42
popf
pop rax
jmp 0x140113cbd
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r14
mov eax, 0x7234a12f
pushf
not eax
add eax, 0x45cd6ee9
xor eax, 0x2250efc0
rol eax, 0x1d
popf
pushf
not eax
add eax, 0x488f0ce7
xor eax, 0xb130897
rol eax, 0xd4
popf
call fcn.14008c714
sub rsp, rax
mov rax, qword [0x14003e040]
xor rax, rsp
mov qword [rsp + 0x1440], rax
movsxd r10, edx
mov rdi, rcx
mov rax, r10
mov ebp, r9d
sar rax, 6
lea rcx, [0x1a16b69e9]
pushf
sub rcx, 0x61673fb9
popf
and r10d, 0x3f
push r8
not r8
sub rbp, r8
pop r8
sub rbp, 1
mov rsi, r8
mov rax, qword [rcx + rax*8]
lea rdx, [r10 + r10*8]
mov r14, qword [rax + rdx*8 + 0x28]
xor eax, eax
mov qword [rdi], rax
mov dword [rdi + 8], eax
cmp r8, rbp
jae 0x140113c2c
push rax
pushf
mov eax, 0xc1e9bce1
pushf
not eax
add eax, 0x68102027
xor eax, 0x5e379cae
rol eax, 0x29
popf
pushf
not eax
add eax, 0x49ac730d
xor eax, 0x525fe148
rol eax, 0xfa
popf
pushf
not eax
add eax, 0x5495d876
xor eax, 0x2b60a8e
rol eax, 0xdf
popf
jmp 0x140113a8e
push rax
pushf
mov eax, 0x204f033d
pushf
not eax
add eax, 0x31b5e796
xor eax, 0x117b2b1c
rol eax, 0x49
popf
pushf
not eax
add eax, 0x4e4292d
xor eax, 0x1937e528
rol eax, 0x8c
popf
pushf
not eax
add eax, 0x44efcd77
xor eax, 0x226f806f
rol eax, 0x2a
popf
jmp 0x140113a8e
lea rbx, [rsp + 0x40]
push rax
pushf
mov eax, 0xa21c751a
pushf
not eax
add eax, 0x3c587240
xor eax, 0x4d21310f
rol eax, 0x7b
popf
pushf
not eax
add eax, 0x787d475
xor eax, 0x75e7af6a
rol eax, 0x7a
popf
pushf
not eax
add eax, 0x514f7d9c
xor eax, 0x6a3ad8d6
rol eax, 0x5a
popf
jmp 0x140113a8e
cmp rsi, rbp
jae 0x140113cf5
push rax
pushf
mov eax, 0xfc1edcf5
pushf
not eax
add eax, 0x71b0a227
xor eax, 0x286a1395
rol eax, 0xf9
popf
pushf
not eax
add eax, 0x7ad0e8f6
xor eax, 0x3214f178
rol eax, 0x7c
popf
jmp 0x140113a8e
push rax
pushf
mov eax, 0x8d32c89b
pushf
not eax
add eax, 0x11c68973
xor eax, 0x605a3f7e
rol eax, 0x56
popf
pushf
not eax
add eax, 0x626fa31
xor eax, 0x124bc145
rol eax, 0xa
popf
pushf
not eax
add eax, 0x71c391f
xor eax, 0x6f006ef7
rol eax, 0x98
popf
jmp 0x140113a8e
mov al, byte [rsi]
inc rsi
cmp al, 0xa
jne 0x140113d8a
push rax
pushf
mov eax, 0x630f116e
pushf
not eax
add eax, 0x22c44a56
xor eax, 0x4cee6b5f
rol eax, 0xdc
popf
pushf
not eax
add eax, 0x5668e6bf
xor eax, 0xce676c3
rol eax, 0xfb
popf
pushf
not eax
add eax, 0x1bc01969
xor eax, 0x17616f2e
rol eax, 0x89
popf
jmp 0x140113a8e
push rax
pushf
mov eax, 0xa7d1935c
pushf
not eax
add eax, 0x79fd254b
xor eax, 0x2ff6eeec
rol eax, 0xfe
popf
pushf
not eax
add eax, 0x13b57313
xor eax, 0x5089aefc
rol eax, 0xc3
popf
pushf
not eax
add eax, 0x376ec1f1
xor eax, 0x53d18ae4
rol eax, 0x6d
popf
pushf
not eax
add eax, 0x61feb9a7
xor eax, 0x3630b15a
rol eax, 0x71
popf
jmp 0x140113a8e
inc dword [rdi + 8]
mov byte [rbx], 0xd
inc rbx
push rax
pushf
mov eax, 0x302022cd
pushf
not eax
add eax, 0x3df82032
xor eax, 0x3ab2c1b5
rol eax, 0xa0
popf
pushf
not eax
add eax, 0x6080c9e4
xor eax, 0x291b8f92
rol eax, 0xf9
popf
jmp 0x140113a8e
mov byte [rbx], al
inc rbx
lea rax, [rsp + 0x143f]
cmp rbx, rax
jb 0x140113e78
push rax
pushf
mov eax, 0xecea14ca
pushf
not eax
add eax, 0x35862029
xor eax, 0x581d476a
rol eax, 0x14
popf
pushf
not eax
add eax, 0x41661e25
xor eax, 0x50553661
rol eax, 0x33
popf
pushf
not eax
add eax, 0x4120c762
xor eax, 0x3d975320
rol eax, 0x5b
popf
jmp 0x140113a8e
push rax
pushf
mov eax, 0x50326681
pushf
not eax
add eax, 0x517f668
xor eax, 0x3e36b987
rol eax, 0x72
popf
pushf
not eax
add eax, 0x4cded41b
xor eax, 0x735888ce
rol eax, 0xd4
popf
jmp 0x140113a8e
and qword [rsp + 0x20], 0
lea rax, [rsp + 0x40]
push rax
not eax
add ebx, eax
pop rax
add ebx, 1
lea r9, [rsp + 0x30]
mov r8d, ebx
lea rdx, [rsp + 0x40]
mov rcx, r14
jmp 0x140113ed0
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x140113f0d
push rax
pushf
mov eax, 0xe5a1d12e
pushf
not eax
add eax, 0x29187564
xor eax, 0x32753c91
rol eax, 0x49
popf
pushf
not eax
add eax, 0x5044f5ad
xor eax, 0x491394ca
rol eax, 0xf5
popf
jmp 0x140113a8e
push rax
pushf
mov eax, 0xd397ba2f
pushf
not eax
add eax, 0x23591eab
xor eax, 0x60472506
rol eax, 0x8d
popf
pushf
not eax
add eax, 0x2b6dbf
xor eax, 0x3e458826
rol eax, 0xb9
popf
pushf
not eax
add eax, 0x37bdc6e9
xor eax, 0x67aa4a19
rol eax, 0x5d
popf
jmp 0x140113a8e
mov eax, dword [rsp + 0x30]
add dword [rdi + 4], eax
cmp eax, ebx
jb 0x140113fb7
push rax
pushf
mov eax, 0x15282b6f
pushf
not eax
add eax, 0x68c1f977
xor eax, 0x29389db0
rol eax, 0x56
popf
pushf
not eax
add eax, 0x510eaa21
xor eax, 0x46f5d1d
rol eax, 0x25
popf
pushf
not eax
add eax, 0x41830f9e
xor eax, 0x6573c1ea
rol eax, 8
popf
pushf
not eax
add eax, 0x49ef9a6d
xor eax, 0x653aff7c
rol eax, 0xbd
popf
jmp 0x140113a8e
push rax
pushf
mov eax, 0xc0c423c2
pushf
not eax
add eax, 0x43e941f9
xor eax, 0x177491d8
rol eax, 0xdd
popf
pushf
not eax
add eax, 0x71605332
xor eax, 0x3a1f9257
rol eax, 0x9a
popf
pushf
not eax
add eax, 0xde70b5a
xor eax, 0x1efa74c3
rol eax, 3
popf
pushf
not eax
add eax, 0x339d33e8
xor eax, 0x3050b16c
rol eax, 0x87
popf
jmp 0x140113a8e
cmp rsi, rbp
jb 0x14011405b
push rax
pushf
mov eax, 0xbcf94d65
pushf
not eax
add eax, 0x74ae5646
xor eax, 0x1c5c845a
rol eax, 0xc
popf
pushf
not eax
add eax, 0x2edbb158
xor eax, 0x1fc61812
rol eax, 0xb4
popf
pushf
not eax
add eax, 0x587c38ec
xor eax, 0x6f539b8a
rol eax, 0xcc
popf
jmp 0x140113a8e
push rax
pushf
mov eax, 0xb6bf0d4c
pushf
not eax
add eax, 0x62490b66
xor eax, 0x1860b2c4
rol eax, 0xbd
popf
pushf
not eax
add eax, 0x2bb395e8
xor eax, 0x3a8c8173
rol eax, 0xa
popf
pushf
not eax
add eax, 0x5d46af8
xor eax, 0x1a1f6d99
rol eax, 0xfb
popf
jmp 0x140113a8e
jmp 0x14011413b
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rdi], eax
push rax
pushf
mov eax, 0xf0db42cf
pushf
not eax
add eax, 0x6945b96c
xor eax, 0x2aab06b0
rol eax, 0xf
popf
pushf
not eax
add eax, 0xcaa483e
xor eax, 0x7ece04a5
rol eax, 0x2c
popf
pushf
not eax
add eax, 0x1a1f9fa3
xor eax, 0x78781e3d
rol eax, 0x3a
popf
jmp 0x140113a8e
mov rax, rdi
mov rcx, qword [rsp + 0x1440]
xor rcx, rsp
call fcn.140089a05
lea r11, [rsp + 0x1450]
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x30]
mov rsp, r11
pop r14
pop rdi
pop rsi
ret