Function at 0x1404e0378
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
bts rax, r9
inc al
push rbp
shl bpl, 0xd0
mov al, r9b
push rsi
stc
btc si, 0x71
push rdi
push r12
stc
sub bp, bp
push r13
push r14
movsxd r13, edi
push r15
inc r13b
not esi
lea rbp, [rsp - 0x27]
bswap r14
sub rsp, 0x100
mov r12w, 0x7783
inc r15b
mov rax, qword [0x1400b7288]
movsxd rsi, esp
xor rax, rsp
rcr r13, 0x1d
mov qword [rbp + 0x17], rax
movsxd rsi, edx
rol r13b, cl
shr r14b, cl
mov r14, rsp
mov r15, r8
movzx r13, bx
stc
mov rax, rsi
mov qword [rbp - 9], rcx
mov qword [rbp - 0x11], rax
mov r14d, esi
sbb r13b, r8b
movsx r14, r14w
lea rcx, [0x140000000]
bswap r12w
ror r13b, 0xeb
mov r12b, al
and eax, 0x3f
sbb r14b, 7
rol r14w, cl
mov r13d, r9d
test cl, r10b
lea r13, [r13 + r8]
bswap r14w
ror r12w, 0x30
mov qword [rbp - 0x21], r8
shl r12w, 0x2f
mov r12, rsi
shrd r14w, r10w, 0xe5
btr r14, rdx
sar r14d, cl
mov qword [rbp - 0x51], r13
movsx r14w, spl
sbb r14b, r9b
sar r12, 6
xchg r14w, r14w
setg r14b
lea r14, [rax + rax*8]
mov al, pe_nt_image_headers64
mov rax, qword [rcx + r12*8 + 0xba940]
jmp 0x1404e0471
mov rax, qword [rax + r14*8 + 0x28]
jmp 0x1404e047b
mov qword [rbp - 0x49], rax
call qword [sym.imp.KERNEL32.dll_GetConsoleOutputCP]
xor edx, edx
lea rcx, [rsp + 0x50]
jmp 0x1404e0491
mov dword [rbp - 0x59], eax
jmp 0x1404e0499
call fcn.1404a9410
mov rcx, qword [rsp + 0x58]
cmp r11d, r8d
bsr edx, r11d
stc
sub r11d, r11d
mov dword [rbp - 0x69], r11d
and rdx, r8
dec rdi
ror bx, cl
mov ebx, r11d
mov dword [rbp - 0x65], ebx
cwd
btc edi, r11d
movsx rdi, r12w
mov rdi, r15
mov edx, dword [rcx + 0xc]
rol cx, cl
xor ecx, 0x37826f6d
rol cl, 0x50
mov ecx, r11d
mov dword [rsp + 0x40], ecx
jmp 0x1404e04e9
mov dword [rbp - 0x55], edx
test r9d, ebp
stc
cmp r15, r13
jae 0x1404e0c8c
mov rax, rsi
xor sil, al
rcr sil, 0x56
add cl, 0xfd
mov rsi, r15
neg cl
sal cl, 0xb4
sar rax, 6
mov qword [rbp - 0x19], rax
mov cl, byte [rdi]
sbb r15b, r10b
not r15w
rol r15b, cl
mov r15d, 1
clc
test r8b, bpl
mov byte [rsp + 0x44], cl
test esp, edi
clc
mov dword [rsp + 0x48], r11d
cmp edx, 0xfde9
jmp 0x1404e0543
jne 0x1404e0821
lea r15, [0x140000000]
cqo
xor sil, 0x56
rcr rsi, cl
mov edx, r11d
sar r9b, cl
mov r9, qword [r15 + rax*8 + 0xba940]
mov rsi, r11
cmc
sar rax, 0x89
lea rax, [r9 + r14*8]
cmp byte [rax + rsi + 0x3e], r11b
jmp 0x1404e057d
je 0x1404e059b
inc edx
jmp 0x1404e058a
inc rsi
test r10b, spl
clc
cmp rsi, 5
jl 0x1404e0573
test rsi, rsi
jmp 0x1404e05a3
jle 0x1404e0769
mov rax, qword [r15 + r12*8 + 0xba940]
movzx r13d, r14w
mov r8, qword [rbp - 0x51]
not r13w
ror cx, 0x69
cmp r9b, r14b
sub r8, rdi
movzx ecx, byte [rax + r14*8 + 0x3e]
setnp r10b
movzx r13w, bpl
movsx r15d, byte [rcx + r15 + 0xb7d00]
setle r10b
inc r15d
btr r10d, r9d
shr r10w, cl
or r10b, bpl
mov r13d, r15d
adc r10d, 0x486e02c2
bt r10w, r8w
sub r13d, edx
movsxd r10, r13d
cmp r10, r8
jg 0x1404e0ada
lea rax, [rbp - 1]
rol cx, cl
cmc
shr cx, 0x17
mov rdx, r11
sub r9, rax
clc
lea r8, [r9 + r14*8]
shr al, cl
lea rcx, [rbp - 1]
shr al, 0x92
sal al, cl
add rcx, rdx
inc rdx
dec al
sbb al, 0xcb
mov al, byte [rcx + r8 + 0x3e]
mov byte [rcx], al
cmp r14w, 0x1739
stc
cmp rdx, rsi
jmp 0x1404e0651
jl 0x1404e0628
test r13d, r13d
jmp 0x1404e065f
jle 0x1404e068c
lea rcx, [rbp - 1]
or dx, cx
shr r8w, 0xd1
cdq
mov r8, r10
shr edx, 0x29
add rcx, rsi
cqo
movsx rdx, r15w
mov rdx, rdi
call fcn.1404a8457
sub r11d, r11d
mov rdx, r11
rcr ecx, 0xcb
mov r8b, 0xde
add ecx, 0xa6131aa
lea r8, [0x140000000]
sal ch, 0x22
mov rcx, qword [r8 + r12*8 + 0xba940]
cmc
test r9d, 0x63c331ac
add rcx, rdx
jmp 0x1404e06bd
inc rdx
mov byte [rcx + r14*8 + 0x3e], r11b
cmc
test r9w, dx
cmp rdx, rsi
jmp 0x1404e06d2
jl 0x1404e06a5
lea rax, [rbp - 1]
shr r9w, cl
mov qword [rbp - 0x41], r11
mov qword [rbp - 0x39], rax
lea r9, [rbp - 0x41]
ror edx, cl
rcr r8b, 0xfe
test r9w, r14w
mov eax, r11d
rcr al, cl
lea rdx, [rbp - 0x39]
cmp r15d, 4
lea rcx, [rsp + 0x48]
jmp 0x1404e070d
sete al
dec r15b
movzx r15w, cl
inc eax
movzx r8w, al
setb r15b
mov r15d, edx
mov r8d, eax
mov r15d, eax
jmp 0x1404e0731
call fcn.1404e5df7
cmp rax, 0xffffffffffffffff
jmp 0x1404e073f
je 0x1404e08ec
lea eax, [r13 - 1]
bt esi, r8d
or r13b, 0x72
mov r13, qword [rbp - 0x51]
movsxd rsi, eax
test dil, 0xab
add rsi, rdi
jmp 0x1404e0764
jmp 0x1404e092b
movzx eax, byte [rdi]
test dil, r10b
mov rdx, r13
sub rdx, rdi
bsr cx, ax
bts cx, sp
movsx rsi, byte [rax + r15 + 0xb7d00]
cwde
xchg ecx, ecx
lea ecx, [rsi + 1]
movsxd rax, ecx
cmc
cmp rax, rdx
jg 0x1404e0b55
cmp ecx, 4
movsx r9, bx
mov qword [rbp - 0x31], r11
lahf
not bx
xchg r9b, cl
mov eax, r11d
cwd
mov qword [rbp - 0x29], rdi
bswap r9d
not ch
mov al, 0x92
sete al
movzx cx, r12b
dec rcx
jmp 0x1404e07cb
lea r9, [rbp - 0x31]
not rcx
inc eax
movsx rdx, bx
xchg cx, dx
lea rdx, [rbp - 0x29]
jmp 0x1404e07e4
mov r8d, eax
seta ch
movsx rbx, dx
bswap rcx
lea rcx, [rsp + 0x48]
mov ebx, eax
jmp 0x1404e07fd
call fcn.1404e5df7
cmp rax, 0xffffffffffffffff
jmp 0x1404e080b
je 0x1404e08ec
add rsi, rdi
mov r15d, ebx
jmp 0x1404e081c
jmp 0x1404e092b
lea rax, [0x140000000]
ror cl, 8
mov rdx, qword [rax + r12*8 + 0xba940]
mov cl, byte [rdx + r14*8 + 0x3d]
cmc
test cl, 4
jmp 0x1404e0841
je 0x1404e087f
mov al, byte [rdx + r14*8 + 0x3e]
jmp 0x1404e0852
and cl, 0xfb
jmp 0x1404e085a
mov byte [rbp + 7], al
mov al, cl
mov al, byte [rdi]
jmp 0x1404e0866
mov byte [rdx + r14*8 + 0x3d], cl
movsxd rdx, r9d
lea rdx, [rbp + 7]
mov byte [rbp + 8], al
jmp 0x1404e087a
jmp 0x1404e08c4
call fcn.1404afad8
movzx ecx, byte [rdi]
xor edx, edx
jmp 0x1404e0895
cmp word [rax + rcx*2], dx
jmp 0x1404e089e
jge 0x1404e08fa
inc rsi
stc
jmp 0x1404e08ad
cmp rsi, r13
jmp 0x1404e08b5
jae 0x1404e0c10
mov rdx, rdi
not ch
movsx r8, r11w
mov r8d, 2
jmp 0x1404e08cf
lea rcx, [rsp + 0x48]
jmp 0x1404e08d9
call fcn.1402639db
cmp eax, 0xffffffff
jmp 0x1404e08e6
jne 0x1404e092b
cmp byte [rbp - 0x71], 0
jmp 0x1404e08f5
jmp 0x1404e0c07
mov r8, r15
movsxd rcx, r12d
cqo
cwd
lea rcx, [rsp + 0x48]
xchg dx, dx
mov dx, r13w
mov rdx, rdi
jmp 0x1404e0918
call fcn.1402639db
cmp eax, 0xffffffff
jmp 0x1404e0925
je 0x1404e0c74
mov ecx, dword [rbp - 0x59]
bsf r8w, r14w
lea rax, [rbp + 0xf]
sub ebx, ebx
setns r8b
mov r9, 0x70ab5118
lea r8, [rsp + 0x48]
mov qword [rsp + 0x38], rbx
mov dil, 0xdc
shr r9w, cl
lea rdi, [rsi + 1]
sal r9b, 0xfe
movzx r9d, r10w
ror r9b, cl
mov qword [rsp + 0x30], rbx
add r9b, 0xfb
mov r9d, r15d
mov dword [rsp + 0x28], 5
xor edx, edx
jmp 0x1404e097f
mov qword [rsp + 0x20], rax
call fcn.1404ce2ab
mov esi, eax
test cx, 0x25ca
cmp ecx, r8d
test eax, eax
jmp 0x1404e099a
je 0x1404e0d2c
mov rcx, qword [rbp - 0x49]
lea r9, [rsp + 0x4c]
cwd
movsxd rdx, esi
mov r8d, eax
mov qword [rsp + 0x20], rbx
setp dh
bswap rdx
movzx edx, r13w
lea rdx, [rbp + 0xf]
jmp 0x1404e09c9
call qword [sym.imp.KERNEL32.dll_WriteFile]
xor r11d, r11d
stc
test bp, r8w
test eax, eax
jmp 0x1404e09de
je 0x1404e0d20
mov r15d, dword [rsp + 0x40]
stc
sal bx, 0x2f
rol bl, cl
mov ebx, edi
sub ebx, dword [rbp - 0x21]
cmp rsp, 0x47760704
add ebx, r15d
stc
cmp rdx, 0x4b2a1e1c
mov dword [rbp - 0x65], ebx
test bx, r8w
cmp dword [rsp + 0x4c], esi
jmp 0x1404e0a17
jb 0x1404e0bfb
cmp byte [rsp + 0x44], 0xa
jmp 0x1404e0a27
jne 0x1404e0ab8
mov rcx, qword [rbp - 0x49]
movsx eax, r14w
lea eax, [r11 + 0xd]
bswap dx
movzx r8d, dx
mov dh, 0x69
lea r9, [rsp + 0x4c]
mov word [rsp + 0x44], ax
lea r8d, [r11 + 1]
cmove dx, r13w
mov qword [rsp + 0x20], r11
movsx dx, sil
movsx edx, r15w
lea rdx, [rsp + 0x44]
jmp 0x1404e0a6e
call qword [sym.imp.KERNEL32.dll_WriteFile]
xor r11d, r11d
test eax, eax
jmp 0x1404e0a7e
je 0x1404e0c61
cmp dword [rsp + 0x4c], 1
jmp 0x1404e0a8e
jb 0x1404e0bfb
inc r15d
inc ebx
shld esi, esp, 0x2b
mov dword [rsp + 0x40], r15d
sets sil
bswap rsi
mov dword [rbp - 0x65], ebx
sbb sil, r10b
movzx si, r11b
btr esi, 0x18
mov rsi, rdi
cmp rdi, r13
jmp 0x1404e0ac3
jae 0x1404e0c88
mov rax, qword [rbp - 0x19]
mov edx, dword [rbp - 0x55]
jmp 0x1404e0ad5
jmp 0x1404e0516
mov edx, r11d
test r8, r8
jmp 0x1404e0ae5
jle 0x1404e0b48
sub rdi, rsi
movsx ecx, bx
lea rbx, [0x140000000]
movzx rcx, r9w
mov al, byte [rdi + rsi]
movzx ecx, dx
movsx ecx, r12w
inc edx
btc ecx, 0xcc
mov rcx, qword [rbx + r12*8 + 0xba940]
add rcx, rsi
jmp 0x1404e0b1c
inc rsi
test sp, dx
cmp r15b, 0x33
mov byte [rcx + r14*8 + 0x3e], al
setl ah
movsxd rax, edx
cmp rax, r8
jmp 0x1404e0b39
jl 0x1404e0afc
mov ebx, dword [rbp - 0x65]
test bx, 0x2b1e
cmc
add ebx, r8d
jmp 0x1404e0b50
jmp 0x1404e0bee
mov r9d, r11d
test ah, 0xf0
test rdx, rdx
jmp 0x1404e0b63
jle 0x1404e0be9
mov r13, qword [rbp - 0x11]
mov r8, r11
mov r10, r13
movsx rcx, r11w
and r13d, 0x3f
adc ch, 0x5d
setl r11b
sar ch, 0xaa
sar r10, 6
adc r11b, 0xe6
rcr cx, cl
lea r11, [r13*8]
add r11, r13
movzx cx, bl
mov al, byte [r8 + rdi]
jmp 0x1404e0baa
inc r9d
mov rcx, qword [r15 + r10*8 + 0xba940]
cmp r14b, r15b
cmc
add rcx, r8
inc r8
clc
cmc
mov byte [rcx + r11*8 + 0x3e], al
xadd eax, eax
setl ah
ror ax, cl
movsxd rax, r9d
clc
cmp rax, rdx
jl 0x1404e0b9f
sub r11d, r11d
or ch, 0x2a
cmp rax, 0x25061dd
add ebx, edx
or rcx, r15
mov dword [rbp - 0x65], ebx
bt cx, r9w
btc cx, r14w
cmp byte [rbp - 0x71], r11b
cmovb ecx, r10d
movsx rcx, bx
mov ecx, dword [rsp + 0x40]
jmp 0x1404e0c95
mov al, byte [rdi]
inc ecx
lea r8, [0x140000000]
jmp 0x1404e0c29
mov rcx, qword [r8 + r12*8 + 0xba940]
jmp 0x1404e0c36
inc ebx
cmc
test ax, 0x3f2c
mov dword [rbp - 0x65], ebx
mov byte [rcx + r14*8 + 0x3e], al
mov rax, qword [r8 + r12*8 + 0xba940]
or byte [rax + r14*8 + 0x3d], 4
stc
cmp byte [rbp - 0x71], dl
jmp 0x1404e0c5c
jmp 0x1404e0c07
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x69], eax
or cx, 0x2f24
shld ecx, r12d, 0x7d
mov ecx, dword [rsp + 0x40]
clc
stc
cmp byte [rbp - 0x71], 0
jmp 0x1404e0c83
jmp 0x1404e0c95
mov ecx, dword [rsp + 0x40]
cmp byte [rbp - 0x71], r11b
jmp 0x1404e0c95
je 0x1404e0ca7
mov rax, qword [rsp + 0x50]
and dword [rax + 0x3a8], 0xfffffffd
mov rax, qword [rbp - 9]
cmp r8d, 0x1729426c
test r15b, 0x90
movsd xmm0, qword [rbp - 0x69]
cmp r15b, 0x85
test r13b, 6
movsd qword [rax], xmm0
clc
cmp bp, r13w
cmc
mov dword [rax + 8], ecx
mov rcx, qword [rbp + 0x17]
stc
xor rcx, rsp
jmp 0x1404e0cdd
call fcn.1404a4949
mov rbx, qword [rsp + 0x140]
add rsp, 0x100
movsx r14d, ax
movzx r12d, si
pop r15
pop r14
pop r13
bswap r12w
not dil
movzx si, r15b
pop r12
movsx bp, bpl
cmovl di, di
pop rdi
mov rbp, r10
not rsi
pop rsi
pop rbp
ret
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x69], eax
rol cl, 0x36
mov ecx, dword [rsp + 0x40]
cmp r11, rbp
test edx, 0x658c38f3
cmp byte [rbp - 0x71], bl
jmp 0x1404e0d41
jmp 0x1404e0c95