Function at 0x1404d59b4
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
cmp esi, 0x64a212b6
btr ax, r9w
push rbp
xor eax, edi
push rsi
push rdi
cbw
or esi, 0x334c0969
push r12
movsxd rax, r12d
cdqe
xchg r12w, ax
push r13
push r14
dec r12d
xadd r14w, r13w
sbb r13b, r12b
push r15
bts bp, cx
bsr bp, r10w
movzx bp, r10b
lea rbp, [rsp - 0x27]
lahf
xchg r12b, r15b
sub rsp, 0x100
shl r12b, 0xb0
movsxd rax, ebx
mov rax, qword [0x1400b7288]
xadd si, r14w
cmovg si, cx
shld r14w, r15w, 0x54
xor rax, rsp
or r14w, bx
rcl r12w, cl
mov qword [rbp + 0x17], rax
sal r12, 0xff
inc r13
btc ax, r13w
movsxd rsi, edx
btc ax, si
xadd r13b, al
btc r12d, 0x89
mov r15, r8
and rax, 0x15466c42
bts r13d, r14d
mov rax, rsi
shl r12b, 0x6f
test r10b, 0x48
neg r12
mov qword [rbp - 9], rcx
mov qword [rbp - 0x11], rax
lea rcx, [0x140000000]
clc
or r13b, spl
and eax, 0x3f
mov r13d, r9d
test r10b, r12b
adc r14b, r10b
add r13, r8
or r12b, bl
mov qword [rbp - 0x21], r8
not r14b
bswap r14w
mov r12, rsi
mov qword [rbp - 0x51], r13
sar r12, 6
cmova r14w, r8w
movsx r14d, bp
lea r14, [rax + rax*8]
movsxd rax, r9d
movsx eax, bx
mov ax, 0x1277
mov rax, qword [rcx + r12*8 + 0xba940]
mov rax, qword [rax + r14*8 + 0x28]
jmp 0x1404d5ad2
mov qword [rbp - 0x49], rax
jmp 0x1404d5adb
call qword [sym.imp.KERNEL32.dll_GetConsoleOutputCP]
sub edx, edx
movsxd rcx, r13d
jmp 0x1404d5aee
lea rcx, [rsp + 0x50]
mov dword [rbp - 0x59], eax
jmp 0x1404d5afb
call fcn.14049e89f
mov rcx, qword [rsp + 0x58]
movsx ebx, dx
sub r11d, r11d
test ebx, 0x50b52168
dec dil
mov dword [rbp - 0x69], r11d
movsxd rdx, r13d
shld rdx, rsi, 0x96
mov di, 0x6c21
mov ebx, r11d
cmc
cqo
cwd
mov dword [rbp - 0x65], ebx
btc rdi, rax
sub dx, 0x1ecd
mov rdi, r15
shr dx, 0x1f
mov edx, dword [rcx + 0xc]
sar cl, cl
ror rcx, cl
mov ecx, r11d
cmp rdx, rcx
mov dword [rsp + 0x40], ecx
stc
cmc
cmp r10b, spl
mov dword [rbp - 0x55], edx
test r12b, 5
stc
cmp r15, r13
jmp 0x1404d5b66
jae 0x1404d631d
mov rax, rsi
bswap rsi
bsr si, si
btc rsi, r9
mov rsi, r15
movsx r15d, bx
sar rax, 6
mov r15b, bl
bsr r15w, ax
or cl, r15b
mov qword [rbp - 0x19], rax
mov cl, byte [rdi]
mov r15d, 1
mov byte [rsp + 0x44], cl
test r13b, r9b
mov dword [rsp + 0x48], r11d
cmp edx, 0xfde9
jne 0x1404d5e8f
lea r15, [0x140000000]
or r9b, 0x8f
shl r9b, 0x46
mov edx, r11d
movsxd r9, esi
xadd si, si
mov r9, qword [r15 + rax*8 + 0xba940]
btc rsi, 0x83
xor al, sil
movsx esi, r13w
mov rsi, r11
movzx rax, cx
bts eax, r8d
movsx eax, si
lea rax, [r9 + r14*8]
cmp byte [rax + rsi + 0x3e], r11b
jmp 0x1404d5bfd
je 0x1404d5c1d
inc edx
jmp 0x1404d5c0a
inc rsi
cmc
jmp 0x1404d5c13
cmp rsi, 5
jl 0x1404d5bf3
test rsi, rsi
jle 0x1404d5dd2
mov rax, qword [r15 + r12*8 + 0xba940]
bsf r10, r10
mov r8, qword [rbp - 0x51]
sub r8, rdi
bswap ecx
movsx r10d, r9w
jmp 0x1404d5c44
movzx ecx, byte [rax + r14*8 + 0x3e]
movsx r15d, byte [rcx + r15 + 0xb7d00]
inc r13w
mov r10b, bl
movzx r13w, bpl
inc r15d
bts r10, r9
mov r13d, r15d
sub r13d, edx
movsxd r10, r13d
test r13b, r13b
cmp r10, r8
jg 0x1404d6127
lea rax, [rbp - 1]
mov rdx, r11
movsx cx, r11b
xor rcx, 0x2e8a4600
sub r9, rax
rcr r8, cl
lea r8, [r9 + r14*8]
lea rcx, [rbp - 1]
mov al, 0xa0
shl al, 0x2a
add rcx, rdx
inc rdx
shr al, 0xdd
mov al, byte [rcx + r8 + 0x3e]
cmp r14, 0x7def26ac
mov byte [rcx], al
cmp r9b, 0xa
test bpl, dil
cmp rdx, rsi
jmp 0x1404d5cc7
jl 0x1404d5c98
test r13d, r13d
jmp 0x1404d5cd5
jle 0x1404d5d01
lea rcx, [rbp - 1]
mov dx, 0x52f0
mov r8, r10
add rcx, rsi
movsx edx, si
mov dl, ch
mov rdx, rdi
jmp 0x1404d5cf6
call fcn.14049d8a6
sub r11d, r11d
movsxd rdx, r8d
mov rdx, r11
lea r8, [0x140000000]
stc
sal cl, cl
mov rcx, qword [r8 + r12*8 + 0xba940]
clc
test r12b, 0x13
cmp r11b, dil
add rcx, rdx
jmp 0x1404d5d26
inc rdx
test spl, 0x8c
mov byte [rcx + r14*8 + 0x3e], r11b
stc
cmp rdx, rsi
jmp 0x1404d5d3b
jl 0x1404d5d0e
lea rax, [rbp - 1]
and dx, 0x574
btr r8d, ebp
neg dh
mov qword [rbp - 0x41], r11
mov qword [rbp - 0x39], rax
lea r9, [rbp - 0x41]
and rax, 0x2bee5109
mov eax, r11d
lea rdx, [rbp - 0x39]
inc r8b
cmp r13b, cl
xadd r8b, cl
cmp r15d, 4
movsx r8w, r9b
mov r15w, 0x4d5e
lea rcx, [rsp + 0x48]
movsx r15d, ax
mov r15d, r11d
sete al
inc eax
movsx r8, r12w
not r8w
xchg r15b, r15b
mov r8d, eax
movzx r15d, r15w
mov r15d, eax
call fcn.1404db6fa
cmp rax, 0xffffffffffffffff
jmp 0x1404d5db6
je 0x1404d5f42
lea eax, [r13 - 1]
sar r13, cl
mov r13, qword [rbp - 0x51]
movsxd rsi, eax
add rsi, rdi
jmp 0x1404d5f75
movzx eax, byte [rdi]
ror cx, 0xd9
mov rdx, r13
sub rdx, rdi
movsx rsi, byte [rax + r15 + 0xb7d00]
lea ecx, [rsi + 1]
movsxd rax, ecx
cmp r13, r15
clc
cmp r8w, 0x73e9
cmp rax, rdx
jg 0x1404d61aa
cmp ecx, 4
movzx ecx, bx
movzx r9, sp
mov qword [rbp - 0x31], r11
cdq
mov eax, r11d
xchg al, dl
mov qword [rbp - 0x29], rdi
sete al
inc rcx
movzx r9w, r9b
cmovp rdx, rsi
lea r9, [rbp - 0x31]
cqo
xchg bl, r8b
inc eax
not r8w
cdq
lea rdx, [rbp - 0x29]
mov r8d, eax
movzx rbx, r8w
mov ebx, 0x167082b
movsx cx, bh
lea rcx, [rsp + 0x48]
movzx bx, r15b
movzx ebx, bp
cmovnp ebx, ebp
mov ebx, eax
jmp 0x1404d5e63
call fcn.1404db6fa
cmp rax, 0xffffffffffffffff
jmp 0x1404d5e71
je 0x1404d5f42
add rsi, rdi
xchg r15w, r15w
movzx r15d, r11w
mov r15d, ebx
jmp 0x1404d5e8a
jmp 0x1404d5f75
lea rax, [0x140000000]
mov rdx, qword [rax + r12*8 + 0xba940]
mov cl, byte [rdx + r14*8 + 0x3d]
test cl, 4
jmp 0x1404d5eab
je 0x1404d5ee8
mov al, byte [rdx + r14*8 + 0x3e]
and cl, 0xfb
mov byte [rbp + 7], al
mov al, byte [rdi]
jmp 0x1404d5ec3
mov byte [rdx + r14*8 + 0x3d], cl
movsxd rdx, esi
movzx dx, r8b
cqo
lea rdx, [rbp + 7]
jmp 0x1404d5edb
mov byte [rbp + 8], al
jmp 0x1404d5ee3
jmp 0x1404d5f24
call fcn.1404a4ff3
movzx ecx, byte [rdi]
cmc
clc
xor edx, edx
clc
jmp 0x1404d5efa
cmp word [rax + rcx*2], dx
jmp 0x1404d5f03
jge 0x1404d5f50
inc rsi
test r11w, 0x110d
cmp al, r14b
test r10b, bl
cmp rsi, r13
jae 0x1404d6290
mov rdx, rdi
mov r8d, 2
lea rcx, [rsp + 0x48]
call fcn.14028dc3c
cmp eax, 0xffffffff
jmp 0x1404d5f3c
jne 0x1404d5f75
cmp byte [rbp - 0x71], 0
jmp 0x1404d5f4b
jmp 0x1404d6282
mov r8, r15
not ch
lea rcx, [rsp + 0x48]
movzx dx, r13b
mov rdx, rdi
jmp 0x1404d5f67
call fcn.14028dc3c
cmp eax, 0xffffffff
je 0x1404d62fe
mov ecx, dword [rbp - 0x59]
cmovp rdi, r14
sub rdi, r10
lea rax, [rbp + 0xf]
xor ebx, ebx
or rdi, rbp
movzx di, r13b
bswap di
lea r8, [rsp + 0x48]
rol r9b, cl
test r15b, 0x28
mov qword [rsp + 0x38], rbx
lea rdi, [rsi + 1]
setl r9b
shl r9w, 0x32
shr r9b, 0x58
mov qword [rsp + 0x30], rbx
adc r9b, al
mov r9d, r15d
cmp r10d, r8d
cmc
mov dword [rsp + 0x28], 5
xor edx, edx
jmp 0x1404d5fd0
mov qword [rsp + 0x20], rax
jmp 0x1404d5fda
call fcn.1404c368a
mov esi, eax
test r8b, bl
test eax, eax
jmp 0x1404d5feb
je 0x1404d63dc
mov rcx, qword [rbp - 0x49]
lea r9, [rsp + 0x4c]
movsx r8d, r11w
mov r8d, eax
cqo
mov qword [rsp + 0x20], rbx
movsx dx, r15b
lea rdx, [rbp + 0xf]
jmp 0x1404d6016
call qword [sym.imp.KERNEL32.dll_WriteFile]
sub r11d, r11d
stc
test eax, eax
jmp 0x1404d6027
je 0x1404d63c8
mov r15d, dword [rsp + 0x40]
mov ebx, edi
cmp sil, cl
test r10, 0x254b46ce
sub ebx, dword [rbp - 0x21]
jmp 0x1404d6046
add ebx, r15d
cmp spl, al
stc
clc
mov dword [rbp - 0x65], ebx
jmp 0x1404d6057
cmp dword [rsp + 0x4c], esi
jmp 0x1404d6060
jb 0x1404d6272
cmp byte [rsp + 0x44], 0xa
jmp 0x1404d6070
jne 0x1404d60fc
mov rcx, qword [rbp - 0x49]
movsx r9d, r14w
lea eax, [r11 + 0xd]
jmp 0x1404d6088
lea r9, [rsp + 0x4c]
movsx r8d, r11w
cwd
mov word [rsp + 0x44], ax
lea r8d, [r11 + 1]
movzx rdx, dx
xchg dh, dl
mov dx, r14w
mov qword [rsp + 0x20], r11
movsx rdx, bx
lea rdx, [rsp + 0x44]
jmp 0x1404d60b9
call qword [sym.imp.KERNEL32.dll_WriteFile]
xor r11d, r11d
test eax, eax
je 0x1404d62ef
cmp dword [rsp + 0x4c], 1
jb 0x1404d6272
inc r15d
xchg esi, esi
inc ebx
sal sil, 0x65
mov dword [rsp + 0x40], r15d
sub rsi, r11
sub si, 0x14c9
ror sil, 0xa1
mov dword [rbp - 0x65], ebx
stc
and sil, r12b
cmp sil, 0x7c
mov rsi, rdi
clc
test cl, dil
cmp rdi, r13
jae 0x1404d6315
mov rax, qword [rbp - 0x19]
movzx dx, r14b
cqo
not dx
mov edx, dword [rbp - 0x55]
jmp 0x1404d6122
jmp 0x1404d5b94
mov edx, r11d
test r8, r8
jmp 0x1404d6132
jle 0x1404d619d
sub rdi, rsi
not rcx
mov al, al
jmp 0x1404d6145
lea rbx, [0x140000000]
movsxd rcx, eax
movzx rcx, r9w
mov al, byte [rdi + rsi]
movsx rcx, cx
xchg ch, cl
inc edx
stc
mov rcx, qword [rbx + r12*8 + 0xba940]
jmp 0x1404d616c
add rcx, rsi
jmp 0x1404d6174
inc rsi
mov byte [rcx + r14*8 + 0x3e], al
bswap ax
cdqe
cmovo rax, r13
movsxd rax, edx
cmp rax, r8
jmp 0x1404d6190
jl 0x1404d6153
mov ebx, dword [rbp - 0x65]
test rbx, r8
stc
add ebx, r8d
jmp 0x1404d61a5
jmp 0x1404d626f
mov r9d, r11d
clc
test spl, r12b
test rdx, rdx
jmp 0x1404d61b9
jle 0x1404d626d
mov r13, qword [rbp - 0x11]
jmp 0x1404d61ca
mov r8, r11
rcl al, 0xd7
mov r10, r13
ror r11b, 0x4b
rcr cl, 0x55
or r11d, 0x5f95b25
and r13d, 0x3f
clc
xor r11w, dx
sar r10, 6
bsf cx, si
movsx r11, r8w
lea r11, [r13*8]
sub al, bl
add al, 0xa4
rcl al, 0x61
add r11, r13
dec al
mov al, byte [r8 + rdi]
setbe cl
inc ch
movzx rcx, di
inc r9d
movsxd rcx, r15d
movzx cx, r15b
mov rcx, qword [r15 + r10*8 + 0xba940]
add rcx, r8
jmp 0x1404d6232
inc r8
jmp 0x1404d623a
mov byte [rcx + r11*8 + 0x3e], al
bt ax, di
and al, 0xeb
movsxd rax, r9d
jmp 0x1404d6254
cmp rax, rdx
jmp 0x1404d625c
jl 0x1404d620a
xor r11d, r11d
btr cx, 0x5b
adc cl, dil
add ebx, edx
mov dword [rbp - 0x65], ebx
cmp byte [rbp - 0x71], r11b
movzx ecx, r10w
bswap rcx
jmp 0x1404d6282
mov ecx, dword [rsp + 0x40]
jmp 0x1404d628b
jmp 0x1404d6321
mov al, byte [rdi]
mov cx, si
cmovns r8w, ax
inc r8
lea r8, [0x140000000]
mov rcx, qword [r8 + r12*8 + 0xba940]
jmp 0x1404d62b1
inc ebx
jmp 0x1404d62bb
mov dword [rbp - 0x65], ebx
stc
mov byte [rcx + r14*8 + 0x3e], al
rcl ax, cl
cmp r9w, 0x64d6
mov rax, qword [r8 + r12*8 + 0xba940]
or byte [rax + r14*8 + 0x3d], 4
cmp r8d, 0x4c847269
cmp byte [rbp - 0x71], dl
jmp 0x1404d62ea
jmp 0x1404d6282
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x69], eax
sar cx, cl
stc
inc cl
mov ecx, dword [rsp + 0x40]
test r13b, 0xa9
cmc
cmp byte [rbp - 0x71], 0
jmp 0x1404d6310
jmp 0x1404d6321
mov ecx, dword [rsp + 0x40]
cmp r10b, r11b
stc
cmp byte [rbp - 0x71], r11b
je 0x1404d633f
mov rax, qword [rsp + 0x50]
and dword [rax + 0x3a8], 0xfffffffd
ror al, 0xa
add rax, 0x666f18d4
neg ah
mov rax, qword [rbp - 9]
movsd xmm0, qword [rbp - 0x69]
movsd qword [rax], xmm0
cmp r10, r12
clc
test r9d, 0x6f961034
mov dword [rax + 8], ecx
jmp 0x1404d6362
mov rcx, qword [rbp + 0x17]
xor rcx, rsp
jmp 0x1404d636e
call fcn.140499d06
mov rbx, qword [rsp + 0x140]
add rsp, 0x100
jmp 0x1404d638c
pop r15
movsx r13w, r10b
pop r14
movzx esi, ax
movsx rbp, cx
movzx r12w, dl
pop r13
movsxd rdi, r10d
sets dil
pop r12
movsx di, al
mov bpl, 0x40
pop rdi
mov bp, 0x31d0
movsx si, spl
movzx ebp, dx
pop rsi
pop rbp
jmp 0x1404d63c7
ret
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x69], eax
bsr cx, r15w
shld cx, r15w, 0xc8
mov ecx, dword [rsp + 0x40]
test r11d, eax
cmp r10b, r12b
cmp byte [rbp - 0x71], bl
jmp 0x1404d63ee
jmp 0x1404d6321