Function at 0x1400df8a6
Capabilities:
Write file on windows

Disassembly:
push rax
pushf
mov eax, 0x667e91cd
pushf
not eax
add eax, 0x94c46358
xor eax, 0xa66954cd
rol eax, 0xbe
popf
pushf
not eax
add eax, 0xcb8e5220
xor eax, 0xf85a9e56
rol eax, 0x9b
popf
pushf
not eax
add eax, 0xab9872fe
xor eax, 0xeb09a589
rol eax, 0xe3
popf
cmp eax, 4
jne 0x1400df8f6
popf
pop rax
jmp 0x1400dfc19
cmp eax, 0
jne 0x1400df905
popf
pop rax
jmp 0x1400df9aa
cmp eax, 3
jne 0x1400df914
popf
pop rax
jmp 0x1400dfb66
cmp eax, 1
jne 0x1400df923
popf
pop rax
jmp 0x1400dfa11
cmp eax, 0xa
jne 0x1400df932
popf
pop rax
jmp 0x1400dfe5c
cmp eax, 7
jne 0x1400df941
popf
pop rax
jmp 0x1400dfd79
cmp eax, 6
jne 0x1400df950
popf
pop rax
jmp 0x1400dfd15
cmp eax, 0xb
jne 0x1400df95f
popf
pop rax
jmp 0x1400dfe8e
cmp eax, 0xc
jne 0x1400df96e
popf
pop rax
jmp 0x1400dfee1
cmp eax, 8
jne 0x1400df97d
popf
pop rax
jmp 0x1400dfd9d
cmp eax, 5
jne 0x1400df98c
popf
pop rax
jmp 0x1400dfcaa
cmp eax, 2
jne 0x1400df99b
popf
pop rax
jmp 0x1400dfa81
cmp eax, 9
jne 0x1400df9aa
popf
pop rax
jmp 0x1400dfe12
push rbx
sub rsp, 0x50
cmp qword [rcx + 0x68], 0
mov rbx, rcx
je 0x1400df9f1
push rax
pushf
mov eax, 0x3497688b
pushf
not eax
add eax, 0xbe06ca96
xor eax, 0xff813bd5
rol eax, 0x37
popf
pushf
not eax
add eax, 0xaa02cb8e
xor eax, 0xba475561
rol eax, 0x98
popf
jmp 0x1400df8e7
push rax
pushf
mov eax, 0x477695d5
pushf
not eax
add eax, 0xeffdd6b2
xor eax, 0xa88740d0
rol eax, 0x80
popf
jmp 0x1400df8e7
cmp byte [rcx + 0x71], 0
je 0x1400dfa4e
push rax
pushf
mov eax, 0x563f34cd
pushf
not eax
add eax, 0x97d0ba64
xor eax, 0xc3a70883
rol eax, 0xd
popf
pushf
not eax
add eax, 0xbf1b3d65
xor eax, 0xed78851e
rol eax, 0xd6
popf
jmp 0x1400df8e7
push rax
pushf
mov eax, 0x1bfd6553
pushf
not eax
add eax, 0xe632b43c
xor eax, 0x899fcf65
rol eax, 0xb4
popf
pushf
not eax
add eax, 0xce34a09b
xor eax, 0xb56066f2
rol eax, 0x7a
popf
jmp 0x1400df8e7
mov rax, qword [rcx]
mov edx, 0x811b0a0e
pushf
not edx
add edx, 0xf3a0c03a
xor edx, 0x8735f8d9
rol edx, 0xa3
popf
pushf
not edx
add edx, 0xca078cb4
xor edx, 0x943bbe2f
rol edx, 0x17
popf
pushf
not edx
add edx, 0xb4c00d19
xor edx, 0xe504523c
rol edx, 4
popf
mov qword [rsp + 0x68], rdi
jmp 0x1400dface
call qword [rax + 0x18]
cmp eax, 0xffffffff
je 0x1400dfb20
push rax
pushf
mov eax, 0x104a044f
pushf
not eax
add eax, 0x98cd160e
xor eax, 0x88374dfc
rol eax, 0x8f
popf
pushf
not eax
add eax, 0x8b6e944c
xor eax, 0x869dfc10
rol eax, 0xe1
popf
pushf
not eax
add eax, 0xb52f3682
xor eax, 0xfd8e56b2
rol eax, 0x1e
popf
jmp 0x1400df8e7
push rax
pushf
mov eax, 0xd1672723
pushf
not eax
add eax, 0xd5935a63
xor eax, 0x9a9405a4
rol eax, 0xf4
popf
pushf
not eax
add eax, 0xffd06b6a
xor eax, 0xd94c2fa8
rol eax, 0xc6
popf
pushf
not eax
add eax, 0xcf162673
xor eax, 0xf88372df
rol eax, 0xf3
popf
jmp 0x1400df8e7
mov rcx, qword [rbx + 0x68]
lea rax, [rsp + 0x60]
lea rdx, [rbx + 0x74]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x30]
jmp 0x1400dfb83
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::codecvt_char__char__struct__Mbstatet_::unshift_struct__Mbstatet____ptr64__char____ptr64__char____ptr64__char____ptr64____ptr64_const___ptr64]
test eax, eax
je 0x1400dfbd3
push rax
pushf
mov eax, 0x4bbf2d46
pushf
not eax
add eax, 0x99a17ff2
xor eax, 0xbf189334
rol eax, 0x4c
popf
pushf
not eax
add eax, 0xd4c8df8e
xor eax, 0x8dc5cf04
rol eax, 8
popf
pushf
not eax
add eax, 0xf967e3cd
xor eax, 0x8e388127
rol eax, 0x97
popf
jmp 0x1400df8e7
push rax
pushf
mov eax, 0xe54d4c94
pushf
not eax
add eax, 0xa24f031a
xor eax, 0xf1d42850
rol eax, 0x6c
popf
pushf
not eax
add eax, 0xe04886b9
xor eax, 0xcced638f
rol eax, 0x5d
popf
pushf
not eax
add eax, 0x8684eaab
xor eax, 0xfd2e202e
rol eax, 0x1c
popf
jmp 0x1400df8e7
sub eax, 1
je 0x1400dfc64
push rax
pushf
mov eax, 0x1c4963e4
pushf
not eax
add eax, 0x9d94476a
xor eax, 0xf0f2d54a
rol eax, 0xbd
popf
pushf
not eax
add eax, 0xb0f60511
xor eax, 0xf6aa6809
rol eax, 0x77
popf
pushf
not eax
add eax, 0xaf6858b9
xor eax, 0xb84e4e6d
rol eax, 0x45
popf
jmp 0x1400df8e7
push rax
pushf
mov eax, 0x26aed72
pushf
not eax
add eax, 0xcf0c7c2b
xor eax, 0xa6f4ec76
rol eax, 0xbd
popf
pushf
not eax
add eax, 0xb7fa63a7
xor eax, 0xfb80733d
rol eax, 0xac
popf
pushf
not eax
add eax, 0xddb36548
xor eax, 0xe1686435
rol eax, 0x71
popf
jmp 0x1400df8e7
cmp eax, 2
jne 0x1400dfcf5
push rax
pushf
mov eax, 0xdff6ceac
pushf
not eax
add eax, 0xb9cf55d6
xor eax, 0xf882adff
rol eax, 0xaa
popf
pushf
not eax
add eax, 0x9dabe786
xor eax, 0xb3b68e14
rol eax, 0x4a
popf
pushf
not eax
add eax, 0x8c1ab0a5
xor eax, 0xb8165e8a
rol eax, 0xa7
popf
jmp 0x1400df8e7
push rax
pushf
mov eax, 0xe3ba1f5d
pushf
not eax
add eax, 0xb741a966
xor eax, 0xd3878b68
rol eax, 0xbb
popf
jmp 0x1400df8e7
mov rdi, qword [rsp + 0x68]
mov al, 0x5b
pushf
not al
add al, 5
xor al, 0x89
rol al, 0xab
popf
mov byte [rbx + 0x71], 0
add rsp, 0x50
pop rbx
ret
mov byte [rbx + 0x71], 0
push rax
pushf
mov eax, 0xe5c3ee88
pushf
not eax
add eax, 0xa8b5fcb9
xor eax, 0xc2720e30
rol eax, 0x8c
popf
jmp 0x1400df8e7
mov rdi, qword [rsp + 0x60]
lea rax, [rsp + 0x30]
sub rdi, rax
je 0x1400dfddf
push rax
pushf
mov eax, 0x63ccc1fa
pushf
not eax
add eax, 0xb16ecccd
xor eax, 0xec6f06a2
rol eax, 0xd
popf
pushf
not eax
add eax, 0x96f7b814
xor eax, 0xf569a392
rol eax, 0x3d
popf
jmp 0x1400df8e7
push rax
pushf
mov eax, 0xd07920f4
pushf
not eax
add eax, 0xd4c2f872
xor eax, 0xa7fd0b00
rol eax, 0x96
popf
pushf
not eax
add eax, 0xa4439909
xor eax, 0x84daab71
rol eax, 0xbc
popf
jmp 0x1400df8e7
mov r9, qword [rbx + 0x80]
lea rcx, [rsp + 0x30]
mov r8, rdi
mov edx, 0x7155c22b
pushf
not edx
add edx, 0xfe22c2ab
xor edx, 0x8eb764c0
rol edx, 0xef
popf
pushf
not edx
add edx, 0xc8ef9492
xor edx, 0x96801354
rol edx, 0x6c
popf
jmp 0x1400dfe51
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rdi, rax
jne 0x1400dfe8e
cmp byte [rbx + 0x71], 0
mov rdi, qword [rsp + 0x68]
sete al
add rsp, 0x50
pop rbx
ret
mov rdi, qword [rsp + 0x68]
xor al, al
add rsp, 0x50
pop rbx
ret
mov al, 0xed
pushf
not al
add al, 0xab
xor al, 0xad
rol al, 0x24
popf
add rsp, 0x50
pop rbx
ret