Function at 0x1404da042
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x20], rbx
test r11, 0x5cde06bb
push rbp
shl bpl, cl
push rsi
bt ebp, 0x2e
push rdi
push r12
sub rdi, 0x7f7b7055
xadd di, r12w
push r13
push r14
push r15
rol dil, 0xf6
bt r14w, r8w
neg r12b
mov rbp, rsp
rcr dil, cl
sub rsp, 0x60
xor ebx, ebx
mov r14d, r8d
add r12b, r9b
movsxd r12, ecx
rcl dil, cl
add dil, r10b
mov rdi, rdx
test r8d, r8d
jmp 0x1404da09e
je 0x1404da5c2
test rdx, rdx
jmp 0x1404da0ac
jne 0x1404da0db
call fcn.1404b42a6
mov dword [rax], ebx
call fcn.1404b4263
mov dword [rax], 0x16
jmp 0x1404da0c9
call fcn.1404b4f59
or eax, 0xffffffff
jmp 0x1404da0d6
jmp 0x1404da5c4
mov rax, r12
test r12b, 0x32
not r15d
lea rcx, [0x1400ba940]
sar si, 0xf0
sbb r13d, 0x7fc71766
movsx r15, ax
and eax, 0x3f
xor sil, 0xa6
mov r13, r12
sar rsi, cl
rcr r15w, cl
sar r13, 6
shl r15d, 0xa5
adc r15b, r12b
lea r15, [rax + rax*8]
mov rcx, qword [rcx + r13*8]
rcl sil, cl
xor si, r12w
movsx eax, dx
movsx esi, byte [rcx + r15*8 + 0x39]
btr eax, 0x62
bts ax, ax
nop
lea eax, [rsi - 1]
clc
stc
cmp al, 1
jmp 0x1404da145
ja 0x1404da15d
mov eax, r14d
not eax
test al, 1
jmp 0x1404da157
je 0x1404da0b2
test byte [rcx + r15*8 + 0x38], 0x20
je 0x1404da18b
sub edx, edx
mov r8w, r10w
movsx r8w, sil
mov ecx, r12d
bswap r8
movsxd r8, edx
lea r8d, [rdx + 2]
jmp 0x1404da186
call fcn.1401f6a80
mov ecx, r12d
jmp 0x1404da193
mov qword [rbp - 0x20], rbx
jmp 0x1404da19c
call fcn.1404e0016
test eax, eax
jmp 0x1404da1a8
je 0x1404da378
lea rax, [0x1400ba940]
test bpl, spl
mov rax, qword [rax + r13*8]
jmp 0x1404da1c4
cmp byte [rax + r15*8 + 0x38], bl
jge 0x1404da378
call fcn.1404c85cc
mov rcx, qword [rax + 0x90]
cmp qword [rcx + 0x138], rbx
jne 0x1404da20c
lea rax, [0x1400ba940]
stc
jmp 0x1404da1f8
mov rax, qword [rax + r13*8]
cmp byte [rax + r15*8 + 0x39], bl
jmp 0x1404da206
je 0x1404da378
lea rax, [0x1400ba940]
mov rcx, qword [rax + r13*8]
bswap dx
setp dl
lea rdx, [rbp - 0x10]
jmp 0x1404da226
mov rcx, qword [rcx + r15*8 + 0x28]
jmp 0x1404da230
call qword [sym.imp.KERNEL32.dll_GetConsoleMode]
test eax, eax
jmp 0x1404da23d
je 0x1404da378
test sil, sil
jmp 0x1404da24b
je 0x1404da33f
dec sil
cmp sil, 1
jmp 0x1404da25d
ja 0x1404da4e0
lea r12, [rdi + r14]
add r14b, 0xc3
mov qword [rbp - 0x30], rbx
mov r14, rdi
cmp rdi, r12
jmp 0x1404da27a
jae 0x1404da4cb
mov esi, dword [rbp - 0x2c]
movsx rax, r14w
movzx rcx, bx
cbw
movzx eax, word [r14]
movsxd rcx, ecx
setge ch
jmp 0x1404da29c
movzx ecx, ax
jmp 0x1404da2a4
mov word [rbp - 0x10], ax
jmp 0x1404da2ad
call fcn.1404e487d
movzx ecx, word [rbp - 0x10]
cmp dil, 0x62
stc
cmp ax, cx
jmp 0x1404da2c3
jne 0x1404da331
add esi, 2
cmp r13b, r8b
stc
mov dword [rbp - 0x2c], esi
cmp cx, 0xa
jmp 0x1404da2dc
jne 0x1404da315
mov ecx, 0xd
jmp 0x1404da2ec
call fcn.1404e487d
mov ecx, 0xd
cmp ax, cx
jmp 0x1404da2fe
jne 0x1404da331
inc esi
jmp 0x1404da30b
mov dword [rbp - 0x2c], esi
jmp 0x1404da313
inc ebx
add r14, 2
test r12b, 0x94
cmc
cmp r14, r12
jmp 0x1404da326
jae 0x1404da4cb
jmp 0x1404da28d
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x30], eax
jmp 0x1404da4cb
mov r9d, r14d
mov dl, sil
xchg cl, r8b
cdq
lea rcx, [rbp - 0x30]
cqo
mov r8, rdi
mov edx, r12d
jmp 0x1404da35a
call fcn.1404da608
movsd xmm0, qword [rax]
jmp 0x1404da36b
mov ebx, dword [rax + 8]
jmp 0x1404da373
jmp 0x1404da4d3
lea rax, [0x1400ba940]
xadd ch, cl
bt cx, 0xf2
sub cl, r13b
mov rcx, qword [rax + r13*8]
cmp byte [rcx + r15*8 + 0x38], bl
jmp 0x1404da398
jge 0x1404da454
mov ecx, esi
test sil, sil
jmp 0x1404da3a8
je 0x1404da422
sub ecx, 1
jmp 0x1404da3b6
je 0x1404da3f6
cmp ecx, 1
jmp 0x1404da3c4
jne 0x1404da4e0
mov r9d, r14d
movzx r8d, sp
movsx r8, ax
movzx dx, al
lea rcx, [rbp - 0x30]
sete r8b
mov r8, rdi
mov edx, r12d
jmp 0x1404da3ec
call fcn.1404db238
jmp 0x1404da35f
mov r9d, r14d
lea rcx, [rbp - 0x30]
setne r8b
movsx edx, si
movsx r8w, cl
mov r8, rdi
movzx edx, r10w
mov edx, r12d
jmp 0x1404da418
call fcn.1404db465
jmp 0x1404da35f
mov r9d, r14d
xchg r8w, dx
movzx r8w, r11b
lea rcx, [rbp - 0x30]
xchg rdx, rdx
movsx edx, si
cmovp dx, r15w
mov r8, rdi
movsx rdx, r11w
mov edx, r15d
mov edx, r12d
call fcn.1404dafec
jmp 0x1404da35f
mov rcx, qword [rcx + r15*8 + 0x28]
btc rdx, r14
or r8b, 0x23
sete r8b
lea r9, [rbp - 0x2c]
sar dx, cl
movzx dx, sil
sub eax, eax
mov r8d, r14d
xadd dx, dx
sal rdx, cl
and qword [rsp + 0x20], rax
mov rdx, rdi
jmp 0x1404da48a
mov qword [rbp - 0x30], rax
jmp 0x1404da493
mov dword [rbp - 0x28], eax
jmp 0x1404da49b
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jmp 0x1404da4a8
jne 0x1404da4c3
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x30], eax
jmp 0x1404da4c3
mov ebx, dword [rbp - 0x28]
bt ax, 0x7a
movsd xmm0, qword [rbp - 0x30]
add ah, 0xb1
movsd qword [rbp - 0x20], xmm0
movsx eax, r12w
shld eax, ebp, 0xf1
mov rax, qword [rbp - 0x20]
cmp dl, 0x51
clc
shr rax, 0x20
stc
test r8, 0x6d7b4c97
test eax, eax
jmp 0x1404da4fb
jne 0x1404da5ad
mov eax, dword [rbp - 0x20]
test eax, eax
jmp 0x1404da50b
je 0x1404da556
cmp eax, 5
jmp 0x1404da519
jne 0x1404da544
call fcn.1404b4263
mov dword [rax], 9
jmp 0x1404da52f
call fcn.1404b42a6
mov dword [rax], 5
jmp 0x1404da53f
jmp 0x1404da0ce
mov ecx, dword [rbp - 0x20]
jmp 0x1404da54c
call fcn.1404b42de
jmp 0x1404da0ce
lea rax, [0x1400ba940]
test r14b, 1
test r14b, al
stc
mov rax, qword [rax + r13*8]
cmp r11b, 0xe1
test r15b, 0xc0
test byte [rax + r15*8 + 0x38], 0x40
jmp 0x1404da57c
je 0x1404da58b
cmp byte [rdi], 0x1a
je 0x1404da5c2
call fcn.1404b4263
mov dword [rax], 0x1c
jmp 0x1404da59b
call fcn.1404b42a6
and dword [rax], 0
jmp 0x1404da5a8
jmp 0x1404da0ce
mov eax, dword [rbp - 0x1c]
cmc
test sp, 0x3c3d
sub eax, ebx
jmp 0x1404da5bd
jmp 0x1404da5c4
xor eax, eax
mov rbx, qword [rsp + 0xb8]
sal r15b, cl
movsx r13d, r13w
shr r15d, cl
add rsp, 0x60
movsx r12d, r15w
movsxd r14, r9d
pop r15
not r14b
pop r14
movsx bp, spl
cmovbe r12d, r14d
mov bpl, 0x9b
pop r13
pop r12
mov bpl, 0x1e
pop rdi
seto sil
pop rsi
pop rbp
jmp 0x1404da607
ret