Function at 0x1404dc714
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
nop
push rbp
sbb bp, 0xcb5
push rsi
btc rbp, 0xee
movsx si, r13b
cmp rsp, r15
push rdi
push r12
xor ax, r15w
push r13
adc r13b, r12b
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0x100
dec r13b
bt eax, r9d
mov rax, qword [0x1400b7288]
jmp 0x1404dc762
xor rax, rsp
mov qword [rbp + 0x17], rax
sar r14b, cl
movsxd rsi, edx
adc r13b, spl
mov r15, r8
shl r13w, cl
sal r12, cl
ror r12d, cl
mov rax, rsi
cmovno r14, rdx
mov qword [rbp - 9], rcx
mov qword [rbp - 0x11], rax
btc ecx, esp
lea rcx, [0x140000000]
btc r14d, ebp
ror r12w, 0x7e
movsx r14w, r8b
and eax, 0x3f
movzx r14w, r11b
mov r13d, r9d
add r13, r8
rcr r12w, 0x9a
movsx r12, r14w
btc r12w, 0xc1
mov qword [rbp - 0x21], r8
sar r14, 0xf
not r12b
mov r12, rsi
mov qword [rbp - 0x51], r13
shl r14b, 0x78
sbb r14, 0x67095574
sar r12, 6
movzx r14d, r13w
lea r14, [rax + rax*8]
movsxd rax, r10d
mov rax, qword [rcx + r12*8 + 0xba940]
jmp 0x1404dc7fc
mov rax, qword [rax + r14*8 + 0x28]
jmp 0x1404dc806
mov qword [rbp - 0x49], rax
jmp 0x1404dc80f
call qword [sym.imp.KERNEL32.dll_GetConsoleOutputCP]
xor edx, edx
lea rcx, [rsp + 0x50]
jmp 0x1404dc821
mov dword [rbp - 0x59], eax
jmp 0x1404dc829
call fcn.1404a520b
mov rcx, qword [rsp + 0x58]
xor r11d, r11d
rol ebx, 0x9c
adc dx, bp
bsf dx, cx
mov dword [rbp - 0x69], r11d
and dl, bpl
mov ebx, r11d
rcl edi, cl
cmovnp rdx, rdx
shl dx, cl
mov dword [rbp - 0x65], ebx
stc
dec edx
mov rdi, r15
btc rdx, rdx
shl dh, 0xa6
mov edx, dword [rcx + 0xc]
mov cl, 0xb8
xor cl, r12b
rcl ch, cl
mov ecx, r11d
cmp spl, r10b
stc
mov dword [rsp + 0x40], ecx
mov dword [rbp - 0x55], edx
jmp 0x1404dc884
cmp r15, r13
jae 0x1404dd059
mov rax, rsi
mov rsi, r15
or cl, sil
sar rax, 6
cmc
mov qword [rbp - 0x19], rax
rol r15, cl
sbb cl, 0x6f
rcl r15w, 0x3f
mov cl, byte [rdi]
mov r15d, 1
test r12d, 0x473f3418
mov byte [rsp + 0x44], cl
cmp r14d, 0x34d01a88
mov dword [rsp + 0x48], r11d
cmp edx, 0xfde9
jne 0x1404dcbf0
lea r15, [0x140000000]
and dh, 0xe8
mov edx, r11d
adc sil, 0x7d
shl sil, 0xda
movsx r9d, si
mov r9, qword [r15 + rax*8 + 0xba940]
bsf rsi, rbp
mov rsi, r11
cbw
lea rax, [r9 + r14*8]
cmp r10, 0x25ed303a
test r10b, 7
stc
cmp byte [rax + rsi + 0x3e], r11b
jmp 0x1404dc919
je 0x1404dc93b
inc edx
jmp 0x1404dc926
inc rsi
cmp r10, r15
cmp rsi, 5
jmp 0x1404dc935
jl 0x1404dc90f
test rsi, rsi
jmp 0x1404dc943
jle 0x1404dcb25
mov rax, qword [r15 + r12*8 + 0xba940]
cmovo cx, dx
and r10, rdi
shl r10b, 0x9e
mov r8, qword [rbp - 0x51]
or r13b, r12b
shrd r13w, r15w, 0xb4
shr r10b, cl
sub r8, rdi
movzx ecx, byte [rax + r14*8 + 0x3e]
inc r13w
mov r10, rbp
movsx r15d, byte [rcx + r15 + 0xb7d00]
sete r13b
inc r15d
mov r13d, r15d
movzx r10d, bx
sub r13d, edx
shld r10w, r8w, 0xa1
movsxd r10, r13d
clc
cmp r10, r8
jmp 0x1404dc9a8
jg 0x1404dce8f
lea rax, [rbp - 1]
test dl, r9b
mov rdx, r11
sub r9, rax
neg rcx
sub r8b, al
lea r8, [r9 + r14*8]
xadd cl, al
lea rcx, [rbp - 1]
mov al, r13b
add rcx, rdx
jmp 0x1404dc9d7
inc rdx
xadd al, al
mov al, byte [rcx + r8 + 0x3e]
jmp 0x1404dc9ec
mov byte [rcx], al
cmc
cmp rdx, rsi
jmp 0x1404dc9f7
jl 0x1404dc9c8
test r13d, r13d
jmp 0x1404dca05
jle 0x1404dca2d
lea rcx, [rbp - 1]
mov r8, r10
and dl, r8b
add rcx, rsi
movzx dx, r10b
mov rdx, rdi
jmp 0x1404dca25
call fcn.1404a4291
xor r11d, r11d
mov rdx, r11
bsf r8, rbx
jmp 0x1404dca3c
lea r8, [0x140000000]
test r8, r9
xor cx, 0x776c
and ch, 0x5e
mov rcx, qword [r8 + r12*8 + 0xba940]
test rsp, 0x578c0741
jmp 0x1404dca62
add rcx, rdx
jmp 0x1404dca6a
inc rdx
stc
clc
mov byte [rcx + r14*8 + 0x3e], r11b
cmp r14w, r12w
cmp rdx, rsi
jmp 0x1404dca80
jl 0x1404dca4e
lea rax, [rbp - 1]
cwd
mov qword [rbp - 0x41], r11
mov qword [rbp - 0x39], rax
shl r8b, 0xd3
lea r9, [rbp - 0x41]
mov r8b, 0xcf
mov eax, r11d
cqo
sar al, 0x3a
lea rdx, [rbp - 0x39]
sal r8w, 0xe4
jmp 0x1404dcab5
cmp r15d, 4
lea rcx, [rsp + 0x48]
jmp 0x1404dcac3
sete al
jmp 0x1404dcace
inc eax
movzx r8w, r12b
mov r8d, eax
movzx r15w, r8b
cmovbe r15w, r11w
movzx r15d, r11w
mov r15d, eax
jmp 0x1404dcaee
call fcn.1404e215f
cmp rax, 0xffffffffffffffff
jmp 0x1404dcafc
je 0x1404dcccd
lea eax, [r13 - 1]
mov r13, qword [rbp - 0x51]
adc sil, 0x82
movsxd rsi, eax
test rbx, 0x718f0f88
add rsi, rdi
jmp 0x1404dcb20
jmp 0x1404dccfb
movzx eax, byte [rdi]
mov rdx, r13
shld cx, sp, 0xe9
cmp bpl, r10b
sub rdx, rdi
movzx ecx, r15w
movsx rsi, byte [rax + r15 + 0xb7d00]
sub ah, 0xb0
lea ecx, [rsi + 1]
clc
cbw
movsxd rax, ecx
stc
cmp rax, rdx
jg 0x1404dcf09
cmp ecx, 4
mov r9, 0x11a046a0
movzx r9d, si
movzx r8, bp
mov qword [rbp - 0x31], r11
mov eax, r11d
movsx r8d, ax
mov qword [rbp - 0x29], rdi
movsx bx, bh
cqo
sete al
lea r9, [rbp - 0x31]
xchg r8w, bx
mov r8b, bpl
inc eax
cdq
sete bh
lea rdx, [rbp - 0x29]
movsx ebx, r15w
movzx r8, r15w
movsx rcx, bx
mov r8d, eax
movzx bx, ch
lea rcx, [rsp + 0x48]
movsx rbx, r13w
movsx ebx, dx
movzx ebx, dx
mov ebx, eax
jmp 0x1404dcbc1
call fcn.1404e215f
cmp rax, 0xffffffffffffffff
jmp 0x1404dcbcf
je 0x1404dcccd
add rsi, rdi
movsx r15d, ax
movzx r15d, bx
movsxd r15, edx
mov r15d, ebx
jmp 0x1404dcbeb
jmp 0x1404dccfb
lea rax, [0x140000000]
movzx edx, r11w
bt rdx, rcx
rcl dh, 0x41
mov rdx, qword [rax + r12*8 + 0xba940]
mov cl, byte [rdx + r14*8 + 0x3d]
test cl, 4
jmp 0x1404dcc17
je 0x1404dcc60
mov al, byte [rdx + r14*8 + 0x3e]
test r8b, dil
clc
and cl, 0xfb
jmp 0x1404dcc2e
mov byte [rbp + 7], al
mov al, 0x99
mov al, byte [rdi]
jmp 0x1404dcc3a
mov byte [rdx + r14*8 + 0x3d], cl
cmovo rdx, rcx
movzx dx, bh
movzx edx, bp
lea rdx, [rbp + 7]
jmp 0x1404dcc53
mov byte [rbp + 8], al
jmp 0x1404dcc5b
jmp 0x1404dccaf
call fcn.1404aba60
movzx ecx, byte [rdi]
jmp 0x1404dcc6d
xor edx, edx
clc
jmp 0x1404dcc78
cmp word [rax + rcx*2], dx
jmp 0x1404dcc81
jge 0x1404dccdb
inc rsi
test r13, rdi
clc
cmp rsi, r13
jmp 0x1404dcc96
jae 0x1404dcfd3
mov rdx, rdi
mov r8, 0x323816e8
movsx rcx, dx
movsx r8w, dl
mov r8d, 2
lea rcx, [rsp + 0x48]
call fcn.140110746
cmp eax, 0xffffffff
jmp 0x1404dccc7
jne 0x1404dccfb
cmp byte [rbp - 0x71], 0
jmp 0x1404dccd6
jmp 0x1404dcfc5
mov r8, r15
lea rcx, [rsp + 0x48]
xchg dh, dh
mov rdx, rdi
call fcn.140110746
cmp eax, 0xffffffff
jmp 0x1404dccf5
je 0x1404dd03a
mov ecx, dword [rbp - 0x59]
lea rax, [rbp + 0xf]
xor ebx, ebx
lea r8, [rsp + 0x48]
sal r9d, cl
mov qword [rsp + 0x38], rbx
sal dil, 0x62
lea rdi, [rsi + 1]
mov qword [rsp + 0x30], rbx
xadd r9w, r9w
mov r9d, r15d
jmp 0x1404dcd2e
mov dword [rsp + 0x28], 5
xor edx, edx
mov qword [rsp + 0x20], rax
jmp 0x1404dcd42
call fcn.1404ca2a9
mov esi, eax
cmp r12b, 0x5f
test eax, eax
jmp 0x1404dcd54
je 0x1404dd0f2
mov rcx, qword [rbp - 0x49]
cmovne r8w, r15w
jmp 0x1404dcd6c
lea r9, [rsp + 0x4c]
mov r8d, eax
not dx
mov qword [rsp + 0x20], rbx
cwd
mov dx, 0x1443
xchg rdx, rdx
lea rdx, [rbp + 0xf]
jmp 0x1404dcd8e
call qword [sym.imp.KERNEL32.dll_WriteFile]
xor r11d, r11d
cmc
test edi, 0x17b35d8a
test eax, eax
jmp 0x1404dcda5
je 0x1404dd0e6
mov r15d, dword [rsp + 0x40]
mov bl, r12b
or rbx, 0x2cfc0a39
mov ebx, edi
test sp, ax
cmp r13w, 0x21db
sub ebx, dword [rbp - 0x21]
cmp bpl, cl
stc
add ebx, r15d
cmp sil, cl
stc
clc
mov dword [rbp - 0x65], ebx
cmp r13d, 0x4cc81aaa
cmp esi, ebx
cmp dword [rsp + 0x4c], esi
jmp 0x1404dcde9
jb 0x1404dcfb8
cmp byte [rsp + 0x44], 0xa
jne 0x1404dce6c
mov rcx, qword [rbp - 0x49]
bswap r8w
mov r8b, r13b
lea eax, [r11 + 0xd]
lea r9, [rsp + 0x4c]
mov word [rsp + 0x44], ax
lea r8d, [r11 + 1]
not rdx
movsx rdx, r9w
cwd
mov qword [rsp + 0x20], r11
lea rdx, [rsp + 0x44]
call qword [sym.imp.KERNEL32.dll_WriteFile]
xor r11d, r11d
stc
test eax, eax
jmp 0x1404dce3b
je 0x1404dd026
cmp dword [rsp + 0x4c], 1
jmp 0x1404dce4b
jb 0x1404dcfb8
inc r15d
cmovne rsi, rsi
inc ebx
shr sil, cl
mov dword [rsp + 0x40], r15d
and sil, al
mov dword [rbp - 0x65], ebx
btc rsi, rdx
mov rsi, rdi
cmp rdi, r13
jae 0x1404dd054
mov rax, qword [rbp - 0x19]
cwd
movsx edx, r9w
jmp 0x1404dce87
mov edx, dword [rbp - 0x55]
jmp 0x1404dc8aa
mov edx, r11d
jmp 0x1404dce9c
test r8, r8
jmp 0x1404dcea4
jle 0x1404dcf01
sub rdi, rsi
dec bl
sete al
lea rbx, [0x140000000]
mov al, byte [rdi + rsi]
movsxd rcx, edx
movzx ecx, bp
movzx cx, r13b
inc edx
mov rcx, qword [rbx + r12*8 + 0xba940]
test r13b, dl
stc
add rcx, rsi
jmp 0x1404dcedd
inc rsi
test r12d, 0x57232d22
mov byte [rcx + r14*8 + 0x3e], al
movsxd rax, edx
cmp rax, r8
jmp 0x1404dcef7
jl 0x1404dceb9
mov ebx, dword [rbp - 0x65]
clc
add ebx, r8d
jmp 0x1404dcfb1
mov r9d, r11d
test rsp, r15
cmc
cmp dl, dl
test rdx, rdx
jmp 0x1404dcf1a
jle 0x1404dcfa4
mov r13, qword [rbp - 0x11]
dec r8w
rcr r10, cl
mov r8, r11
rcl r11b, 0xa
mov r10, r13
bsr cx, r9w
rcl r11, cl
neg al
and r13d, 0x3f
sar r10, 6
lea r11, [r13*8]
add r11, r13
mov al, byte [r8 + rdi]
not cx
cmovl cx, r10w
inc r9d
bt rcx, 0xda
mov rcx, qword [r15 + r10*8 + 0xba940]
jmp 0x1404dcf74
add rcx, r8
jmp 0x1404dcf7c
inc r8
test r14w, r12w
mov byte [rcx + r11*8 + 0x3e], al
movsxd rax, r9d
test r11b, 0xac
cmp rax, rdx
jmp 0x1404dcf97
jl 0x1404dcf52
sub r11d, r11d
not ch
mov cl, 0xa1
add ebx, edx
movsx ecx, r14w
rcr cx, 5
setp ch
mov dword [rbp - 0x65], ebx
movsx cx, cl
cmp byte [rbp - 0x71], r11b
movzx cx, r12b
cmovg cx, cx
mov ecx, dword [rsp + 0x40]
jmp 0x1404dcfce
jmp 0x1404dd05d
mov al, byte [rdi]
lea r8, [0x140000000]
mov rcx, qword [r8 + r12*8 + 0xba940]
jmp 0x1404dcfe9
inc ebx
cmp r15b, cl
test r9d, 0x69dc450e
clc
mov dword [rbp - 0x65], ebx
mov byte [rcx + r14*8 + 0x3e], al
cdqe
cmp ecx, r15d
btc ax, bx
mov rax, qword [r8 + r12*8 + 0xba940]
cmp bpl, 0xd3
or byte [rax + r14*8 + 0x3d], 4
cmp byte [rbp - 0x71], dl
jmp 0x1404dd021
jmp 0x1404dcfc5
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x69], eax
and ecx, 0x36fa6b4a
sub cl, sil
inc ch
mov ecx, dword [rsp + 0x40]
jmp 0x1404dd046
cmp byte [rbp - 0x71], 0
jmp 0x1404dd04f
jmp 0x1404dd05d
mov ecx, dword [rsp + 0x40]
cmc
cmp byte [rbp - 0x71], r11b
je 0x1404dd071
mov rax, qword [rsp + 0x50]
and dword [rax + 0x3a8], 0xfffffffd
rcl al, cl
mov rax, qword [rbp - 9]
test r10w, si
movsd xmm0, qword [rbp - 0x69]
movsd qword [rax], xmm0
cmc
clc
mov dword [rax + 8], ecx
bswap cx
not cx
clc
mov rcx, qword [rbp + 0x17]
cmp bp, di
xor rcx, rsp
jmp 0x1404dd09d
call fcn.1404a0686
mov rbx, qword [rsp + 0x140]
add rsp, 0x100
movsx r15, si
movzx edi, dx
cmovae r15, rbx
pop r15
movsx rbp, r12w
pop r14
pop r13
not bpl
pop r12
mov bpl, 0x5e
bswap di
movsx rsi, bx
pop rdi
movsxd rsi, r15d
movzx si, r11b
pop rsi
pop rbp
jmp 0x1404dd0e5
ret
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x69], eax
dec cx
mov ecx, dword [rsp + 0x40]
cmp byte [rbp - 0x71], bl
jmp 0x1404dd0fe
jmp 0x1404dd05d