Function at 0x140022a52
Capabilities:
Write file on windows

Disassembly:
push rax
pushf
mov eax, 0xa16eecb5
pushf
not eax
add eax, 0x83474be8
xor eax, 0xe160992b
rol eax, 0
popf
pushf
not eax
add eax, 0x82651dc2
xor eax, 0x8b823611
rol eax, 0xaf
popf
pushf
not eax
add eax, 0xb4973693
xor eax, 0x83bab17b
rol eax, 0xc4
popf
cmp eax, 4
jne 0x140022aa2
popf
pop rax
jmp 0x140022e6a
cmp eax, 0
jne 0x140022ab1
popf
pop rax
jmp 0x140022b65
cmp eax, 3
jne 0x140022ac0
popf
pop rax
jmp 0x140022da4
cmp eax, 1
jne 0x140022acf
popf
pop rax
jmp 0x140022c14
cmp eax, 0xd
jne 0x140022ade
popf
pop rax
jmp 0x14002324d
cmp eax, 7
jne 0x140022aed
popf
pop rax
jmp 0x140023045
cmp eax, 6
jne 0x140022afc
popf
pop rax
jmp 0x140022fb2
cmp eax, 0xb
jne 0x140022b0b
popf
pop rax
jmp 0x1400231d4
cmp eax, 0xc
jne 0x140022b1a
popf
pop rax
jmp 0x140023213
cmp eax, 8
jne 0x140022b29
popf
pop rax
jmp 0x1400230a3
cmp eax, 5
jne 0x140022b38
popf
pop rax
jmp 0x140022f21
cmp eax, 2
jne 0x140022b47
popf
pop rax
jmp 0x140022c97
cmp eax, 9
jne 0x140022b56
popf
pop rax
jmp 0x1400230da
cmp eax, 0xa
jne 0x140022b65
popf
pop rax
jmp 0x140023175
push rbx
sub rsp, 0x60
mov rax, qword [0x140008040]
xor rax, rsp
mov qword [rsp + 0x58], rax
cmp qword [rcx + 0x68], 0
mov rbx, rcx
je 0x140022bbb
push rax
pushf
mov eax, 0xae5c09ee
pushf
not eax
add eax, 0xd81775b6
xor eax, 0xf10c68d2
rol eax, 0x65
popf
pushf
not eax
add eax, 0xf91167a8
xor eax, 0xe2b104ec
rol eax, 0x29
popf
jmp 0x140022a93
push rax
pushf
mov eax, 0xc2abae0b
pushf
not eax
add eax, 0xfd299792
xor eax, 0x93bc5849
rol eax, 0x8d
popf
pushf
not eax
add eax, 0x9eee7a54
xor eax, 0xf40d8876
rol eax, 0x12
popf
pushf
not eax
add eax, 0xd861d897
xor eax, 0xcf2e99d9
rol eax, 0x29
popf
pushf
not eax
add eax, 0xe337f258
xor eax, 0xd7251b7c
rol eax, 0x8f
popf
jmp 0x140022a93
cmp byte [rcx + 0x71], 0
je 0x140022c64
push rax
pushf
mov eax, 0xbba5b68b
pushf
not eax
add eax, 0x89ea6080
xor eax, 0x870a2794
rol eax, 0x95
popf
pushf
not eax
add eax, 0xdddac66a
xor eax, 0xca039525
rol eax, 0x35
popf
pushf
not eax
add eax, 0xe1af5634
xor eax, 0xe9f3dbf2
rol eax, 0x83
popf
jmp 0x140022a93
push rax
pushf
mov eax, 0xa184bf24
pushf
not eax
add eax, 0xe8d491ea
xor eax, 0xa2c6ecca
rol eax, 4
popf
pushf
not eax
add eax, 0xe242bb6f
xor eax, 0x89ae0a70
rol eax, 0xb4
popf
jmp 0x140022a93
mov rax, qword [rcx]
mov edx, 0xcafaece0
pushf
not edx
add edx, 0xb7525625
xor edx, 0x9e389737
rol edx, 0x62
popf
pushf
not edx
add edx, 0xfa5beaf4
xor edx, 0xc71f6482
rol edx, 0xf6
popf
pushf
not edx
add edx, 0xf8707dcf
xor edx, 0xcc062259
rol edx, 0x14
popf
pushf
not edx
add edx, 0xffd2045f
xor edx, 0xef322eec
rol edx, 0x2a
popf
mov qword [rsp + 0x78], rdi
jmp 0x140022cf9
call qword [rax + 0x18]
cmp eax, 0xffffffff
je 0x140022d5e
push rax
pushf
mov eax, 0x7d741fe4
pushf
not eax
add eax, 0xd46828c0
xor eax, 0xbc37ad18
rol eax, 0x72
popf
pushf
not eax
add eax, 0xce0c6e84
xor eax, 0xafc1a5b7
rol eax, 0x94
popf
pushf
not eax
add eax, 0xd51e1fbd
xor eax, 0xe63a16b9
rol eax, 0xd2
popf
pushf
not eax
add eax, 0xfd3841f8
xor eax, 0x87ba05bd
rol eax, 0x58
popf
jmp 0x140022a93
push rax
pushf
mov eax, 0x2940144d
pushf
not eax
add eax, 0x80041097
xor eax, 0xd4c25578
rol eax, 8
popf
pushf
not eax
add eax, 0xba183131
xor eax, 0xa8a8ab58
rol eax, 0xbc
popf
pushf
not eax
add eax, 0xcfa67f44
xor eax, 0xee9a19f5
rol eax, 0x63
popf
jmp 0x140022a93
mov rcx, qword [rbx + 0x68]
lea rax, [rsp + 0x30]
lea rdx, [rbx + 0x74]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x58]
lea r8, [rsp + 0x38]
jmp 0x140022dc1
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::codecvt_char__char__struct__Mbstatet_::unshift_struct__Mbstatet____ptr64__char____ptr64__char____ptr64__char____ptr64____ptr64_const___ptr64]
test eax, eax
je 0x140022e24
push rax
pushf
mov eax, 0x7c00b018
pushf
not eax
add eax, 0x942f513b
xor eax, 0xdbdc2a01
rol eax, 7
popf
pushf
not eax
add eax, 0xa9cfe45f
xor eax, 0xadc1a2ee
rol eax, 0xca
popf
pushf
not eax
add eax, 0xc7f961dd
xor eax, 0x9a925ff8
rol eax, 0x61
popf
pushf
not eax
add eax, 0xd9bc0a5b
xor eax, 0xd473751c
rol eax, 0x91
popf
jmp 0x140022a93
push rax
pushf
mov eax, 0xd7369a4b
pushf
not eax
add eax, 0x94a887d5
xor eax, 0xfc0b509c
rol eax, 0x13
popf
pushf
not eax
add eax, 0xd03a81a0
xor eax, 0xb727c02a
rol eax, 0x6f
popf
pushf
not eax
add eax, 0xce0db89c
xor eax, 0xf21d9040
rol eax, 0xab
popf
jmp 0x140022a93
sub eax, 1
je 0x140022ec8
push rax
pushf
mov eax, 0x5e2a1cef
pushf
not eax
add eax, 0x930897a0
xor eax, 0x881b85e2
rol eax, 0xb3
popf
pushf
not eax
add eax, 0xae6f6400
xor eax, 0xad25120b
rol eax, 0xfa
popf
pushf
not eax
add eax, 0xaedb13ba
xor eax, 0xa83c45b2
rol eax, 0x60
popf
pushf
not eax
add eax, 0x83aae973
xor eax, 0x9947852f
rol eax, 0
popf
jmp 0x140022a93
push rax
pushf
mov eax, 0x9c765e08
pushf
not eax
add eax, 0xe8674418
xor eax, 0xddcaa2af
rol eax, 0x66
popf
pushf
not eax
add eax, 0xfb3c6941
xor eax, 0xe13cc0ac
rol eax, 0xa2
popf
pushf
not eax
add eax, 0x902e48df
xor eax, 0xae2ef3a5
rol eax, 0xc8
popf
pushf
not eax
add eax, 0xa8c44fa3
xor eax, 0xaa10e9ab
rol eax, 0x72
popf
jmp 0x140022a93
cmp eax, 2
jne 0x140022f59
push rax
pushf
mov eax, 0xa424bfac
pushf
not eax
add eax, 0xe9f312aa
xor eax, 0xd429c691
rol eax, 0xb8
popf
pushf
not eax
add eax, 0xa15a69af
xor eax, 0xf4c8821a
rol eax, 0x43
popf
jmp 0x140022a93
push rax
pushf
mov eax, 0x342f688d
pushf
not eax
add eax, 0xbe139e84
xor eax, 0x80828891
rol eax, 0x53
popf
pushf
not eax
add eax, 0xae4cabda
xor eax, 0xd3d5062a
rol eax, 0x67
popf
pushf
not eax
add eax, 0x9b86af01
xor eax, 0x932fd43b
rol eax, 0xb9
popf
pushf
not eax
add eax, 0x8ebc0161
xor eax, 0x876807f8
rol eax, 0x83
popf
jmp 0x140022a93
mov byte [rbx + 0x71], 0
mov al, 0xb3
pushf
not al
add al, 0x63
xor al, 0xe7
rol al, 0x75
popf
pushf
not al
add al, 0x42
xor al, 0xf0
rol al, 0x2e
popf
pushf
not al
add al, 0x65
xor al, 0x19
rol al, 0xe8
popf
pushf
not al
add al, 0x98
xor al, 0x6d
rol al, 0x80
popf
push rax
pushf
mov eax, 0x7bbcc6b3
pushf
not eax
add eax, 0xe3b23fb9
xor eax, 0x8349944a
rol eax, 0xdd
popf
pushf
not eax
add eax, 0x865fded7
xor eax, 0xfa81c08a
rol eax, 0xf6
popf
pushf
not eax
add eax, 0xd9db93d4
xor eax, 0xa5b6f962
rol eax, 0x7f
popf
pushf
not eax
add eax, 0xc2d42004
xor eax, 0xddb004fb
rol eax, 0x98
popf
jmp 0x140022a93
mov rdi, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x58]
xor rcx, rsp
call fcn.140019677
add rsp, 0x60
pop rbx
ret
mov byte [rbx + 0x71], 0
push rax
pushf
mov eax, 0x132aabef
pushf
not eax
add eax, 0xb5435bdc
xor eax, 0xfa376ae1
rol eax, 0x58
popf
pushf
not eax
add eax, 0xb3fc35a1
xor eax, 0xa6b605db
rol eax, 0xf
popf
jmp 0x140022a93
mov rdi, qword [rsp + 0x30]
lea rax, [rsp + 0x38]
sub rdi, rax
je 0x140023142
push rax
pushf
mov eax, 0x41af2aa0
pushf
not eax
add eax, 0x8563fd1a
xor eax, 0xeb25fa32
rol eax, 0xe0
popf
pushf
not eax
add eax, 0xe3067b44
xor eax, 0x8e2df0fa
rol eax, 0xdf
popf
pushf
not eax
add eax, 0xc1fc2b80
xor eax, 0xa57e3705
rol eax, 0x82
popf
pushf
not eax
add eax, 0xe6c10f6c
xor eax, 0xdbf95954
rol eax, 0xde
popf
jmp 0x140022a93
push rax
pushf
mov eax, 0x8f7f90a5
pushf
not eax
add eax, 0xce5a2c05
xor eax, 0xdaca43b7
rol eax, 0xa3
popf
pushf
not eax
add eax, 0xef321778
xor eax, 0xceab5080
rol eax, 0x5c
popf
jmp 0x140022a93
mov r9, qword [rbx + 0x80]
lea rcx, [rsp + 0x38]
mov r8, rdi
mov edx, 0x99ffbd13
pushf
not edx
add edx, 0xd13a526c
xor edx, 0xf34b4829
rol edx, 0xdf
popf
pushf
not edx
add edx, 0xaacb2d8b
xor edx, 0xc3d7e0ba
rol edx, 0x7d
popf
pushf
not edx
add edx, 0xdd14609c
xor edx, 0xdbaba4cf
rol edx, 0xa0
popf
jmp 0x1400231c9
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rdi, rax
jne 0x140023213
cmp byte [rbx + 0x71], 0
sete al
jmp 0x140023045
xor al, al
jmp 0x140023045
mov al, 0x61
pushf
not al
add al, 0xd5
xor al, 0x45
rol al, 0x41
popf
pushf
not al
add al, 0x78
xor al, 0x3f
rol al, 0x40
popf
pushf
not al
add al, 0xf7
xor al, 9
rol al, 0xbd
popf
pushf
not al
add al, 0xb6
xor al, 0x2c
rol al, 0x74
popf
mov rcx, qword [rsp + 0x58]
xor rcx, rsp
call fcn.140019677
add rsp, 0x60
pop rbx
ret