Function at 0x140054628
Capabilities:
Write file on windows

Disassembly:
push rax
pushf
mov eax, 0x33130c75
pushf
not eax
add eax, 0xef533697
xor eax, 0xcc8b94b6
rol eax, 0xe9
popf
pushf
not eax
add eax, 0x862977c7
xor eax, 0xeeac48e5
rol eax, 0xa0
popf
cmp eax, 4
jne 0x140054665
popf
pop rax
jmp 0x14005494a
cmp eax, 0
jne 0x140054674
popf
pop rax
jmp 0x14005470a
cmp eax, 3
jne 0x140054683
popf
pop rax
jmp 0x1400548b4
cmp eax, 1
jne 0x140054692
popf
pop rax
jmp 0x140054873
cmp eax, 0xa
jne 0x1400546a1
popf
pop rax
jmp 0x140054c4c
cmp eax, 7
jne 0x1400546b0
popf
pop rax
jmp 0x140054ad8
cmp eax, 6
jne 0x1400546bf
popf
pop rax
jmp 0x1400549fe
cmp eax, 0xb
jne 0x1400546ce
popf
pop rax
jmp 0x140054c87
cmp eax, 9
jne 0x1400546dd
popf
pop rax
jmp 0x140054c00
cmp eax, 8
jne 0x1400546ec
popf
pop rax
jmp 0x140054b6f
cmp eax, 5
jne 0x1400546fb
popf
pop rax
jmp 0x140054986
cmp eax, 2
jne 0x14005470a
popf
pop rax
jmp 0x1400548ab
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r14
mov eax, 0x631207d5
pushf
not eax
add eax, 0x964a6e88
xor eax, 0x8419de61
rol eax, 0x2b
popf
pushf
not eax
add eax, 0xa341f29d
xor eax, 0xcb726407
rol eax, 0x29
popf
pushf
not eax
add eax, 0xe5d88f58
xor eax, 0xc776c69e
rol eax, 0x4a
popf
call fcn.1400a3e9c
sub rsp, rax
mov rax, qword [0x140029028]
xor rax, rsp
mov qword [rsp + 0x1440], rax
movsxd r10, edx
mov rdi, rcx
mov rax, r10
mov ebp, r9d
sar rax, 6
lea rcx, [0x1b53fa81a]
pushf
sub rcx, 0x753d08ca
popf
and r10d, 0x3f
push r8
not r8
sub rbp, r8
pop r8
sub rbp, 1
mov rsi, r8
mov rax, qword [rcx + rax*8]
lea rdx, [r10 + r10*8]
mov r14, qword [rax + rdx*8 + 0x28]
xor eax, eax
mov qword [rdi], rax
mov dword [rdi + 8], eax
cmp r8, rbp
jae 0x14005481a
push rax
pushf
mov eax, 0x50e93017
pushf
not eax
add eax, 0xa5876faf
xor eax, 0xc0230032
rol eax, 0xcf
popf
pushf
not eax
add eax, 0xd76f3aa8
xor eax, 0x91e98427
rol eax, 0x5c
popf
pushf
not eax
add eax, 0xcdd7734a
xor eax, 0xf1c1683d
rol eax, 0x54
popf
pushf
not eax
add eax, 0x9d4b934f
xor eax, 0xdd6a6837
rol eax, 0x46
popf
jmp 0x140054656
push rax
pushf
mov eax, 0x80eda809
pushf
not eax
add eax, 0xa286779d
xor eax, 0xc17f682b
rol eax, 0x6d
popf
pushf
not eax
add eax, 0xdf5dfb80
xor eax, 0xdab0719c
rol eax, 0x38
popf
pushf
not eax
add eax, 0xa83eebfc
xor eax, 0xee005cb4
rol eax, 0x9d
popf
pushf
not eax
add eax, 0xe0e5a294
xor eax, 0xe003d954
rol eax, 0x65
popf
jmp 0x140054656
lea rbx, [rsp + 0x40]
push rax
pushf
mov eax, 0xd7f5bd3f
pushf
not eax
add eax, 0xe3eceb73
xor eax, 0xde570533
rol eax, 0x23
popf
pushf
not eax
add eax, 0x8bec04ab
xor eax, 0xdeeaaea4
rol eax, 0xf8
popf
jmp 0x140054656
cmp rsi, rbp
jae 0x1400549fe
mov al, byte [rsi]
inc rsi
cmp al, 0xa
jne 0x140054916
push rax
pushf
mov eax, 0x1a5e4d11
pushf
not eax
add eax, 0xac3082c3
xor eax, 0x903be5df
rol eax, 0xab
popf
pushf
not eax
add eax, 0xfebcd4c5
xor eax, 0xe7400644
rol eax, 0x6a
popf
pushf
not eax
add eax, 0xfd59629f
xor eax, 0xe24bc4b9
rol eax, 0xba
popf
pushf
not eax
add eax, 0x84c8ba86
xor eax, 0xa0f3a11e
rol eax, 0x32
popf
jmp 0x140054656
push rax
pushf
mov eax, 0xdf85097c
pushf
not eax
add eax, 0xe9f07a67
xor eax, 0xc8df00de
rol eax, 0xe2
popf
pushf
not eax
add eax, 0xa14da30b
xor eax, 0x967be21f
rol eax, 0x7d
popf
jmp 0x140054656
inc dword [rdi + 8]
mov byte [rbx], 0xd
inc rbx
push rax
pushf
mov eax, 0x72e403ff
pushf
not eax
add eax, 0xc566fe6b
xor eax, 0xa96cb388
rol eax, 0x64
popf
pushf
not eax
add eax, 0xaa5b79c3
xor eax, 0xeb76db86
rol eax, 0xc0
popf
jmp 0x140054656
mov byte [rbx], al
inc rbx
lea rax, [rsp + 0x143f]
cmp rbx, rax
jb 0x1400549cb
push rax
pushf
mov eax, 0x6d2ce518
pushf
not eax
add eax, 0xd3074e5e
xor eax, 0xc9b1e0df
rol eax, 0x58
popf
pushf
not eax
add eax, 0x82c605cf
xor eax, 0xf0199a45
rol eax, 6
popf
jmp 0x140054656
push rax
pushf
mov eax, 0x2203f372
pushf
not eax
add eax, 0x9709816f
xor eax, 0xc9206443
rol eax, 0xfc
popf
pushf
not eax
add eax, 0xbcc48bec
xor eax, 0xc1022f50
rol eax, 0xf8
popf
jmp 0x140054656
and qword [rsp + 0x20], 0
lea rax, [rsp + 0x40]
sub ebx, eax
lea r9, [rsp + 0x30]
mov r8d, ebx
lea rdx, [rsp + 0x40]
mov rcx, r14
jmp 0x140054a1c
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x140054a7f
push rax
pushf
mov eax, 0xa19d41f8
pushf
not eax
add eax, 0x9ef72a1e
xor eax, 0xbe9b16ff
rol eax, 0xb9
popf
pushf
not eax
add eax, 0xf6595721
xor eax, 0xcdbbc9cd
rol eax, 0xc4
popf
pushf
not eax
add eax, 0xcb1e15d5
xor eax, 0xe0797dd6
rol eax, 0x7d
popf
pushf
not eax
add eax, 0xf0dee21b
xor eax, 0x945e22bd
rol eax, 0x1f
popf
jmp 0x140054656
push rax
pushf
mov eax, 0x8c50aa73
pushf
not eax
add eax, 0xe85fcad8
xor eax, 0xb4aeb50e
rol eax, 0xae
popf
pushf
not eax
add eax, 0x859bd3f5
xor eax, 0x93b0fa44
rol eax, 0xff
popf
pushf
not eax
add eax, 0xddfadcd2
xor eax, 0x865d91f2
rol eax, 0xb2
popf
pushf
not eax
add eax, 0xc5795607
xor eax, 0xd83d4c95
rol eax, 0xeb
popf
jmp 0x140054656
mov eax, dword [rsp + 0x30]
add dword [rdi + 4], eax
cmp eax, ebx
jb 0x140054b3c
push rax
pushf
mov eax, 0x68bb6cdd
pushf
not eax
add eax, 0xa7c1f39c
xor eax, 0xf05c1ed1
rol eax, 2
popf
pushf
not eax
add eax, 0x984fb27e
xor eax, 0xf35b6690
rol eax, 0xb4
popf
pushf
not eax
add eax, 0xfcc57b8c
xor eax, 0xa774aeaf
rol eax, 0x51
popf
pushf
not eax
add eax, 0xd4e79ca9
xor eax, 0xf2d91f48
rol eax, 0xe1
popf
jmp 0x140054656
push rax
pushf
mov eax, 0x584c430
pushf
not eax
add eax, 0xd057ded9
xor eax, 0xda9bf0c6
rol eax, 0x24
popf
pushf
not eax
add eax, 0x9d332472
xor eax, 0x98fc7d90
rol eax, 0xcd
popf
jmp 0x140054656
cmp rsi, rbp
jb 0x140054bba
push rax
pushf
mov eax, 0xb43e35a
pushf
not eax
add eax, 0x990d5c1f
xor eax, 0x996bec81
rol eax, 0xf2
popf
pushf
not eax
add eax, 0xc6feca55
xor eax, 0xe4350d33
rol eax, 0x26
popf
pushf
not eax
add eax, 0xb3c757be
xor eax, 0xabe89959
rol eax, 0x84
popf
jmp 0x140054656
push rax
pushf
mov eax, 0xf4035ce0
pushf
not eax
add eax, 0x983dce9f
xor eax, 0xff89549c
rol eax, 0x52
popf
pushf
not eax
add eax, 0x9815bd60
xor eax, 0xf11d00eb
rol eax, 0x57
popf
pushf
not eax
add eax, 0xe6ba27a8
xor eax, 0xaa50df00
rol eax, 0xc
popf
jmp 0x140054656
jmp 0x140054c87
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rdi], eax
push rax
pushf
mov eax, 0x33b20f1
pushf
not eax
add eax, 0xa5ee47c4
xor eax, 0x9cae3675
rol eax, 0x34
popf
pushf
not eax
add eax, 0xe31acf59
xor eax, 0xd8a6ef47
rol eax, 0xfa
popf
jmp 0x140054656
mov rax, rdi
mov rcx, qword [rsp + 0x1440]
xor rcx, rsp
call fcn.14009c3e7
lea r11, [rsp + 0x1450]
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x30]
mov rsp, r11
pop r14
pop rdi
pop rsi
ret