Function at 0x1404da572
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
stc
xor al, r13b
push r13
rcl sil, cl
btc r12w, 0x1d
push r14
push r15
adc bp, 0x71dc
adc r12w, r10w
lea rbp, [rsp - 0x27]
rcl r13w, cl
rol r13b, 0xda
sub rsp, 0x100
xadd r15w, r15w
cmc
mov rax, qword [0x1400b7288]
sbb r15w, r13w
mov r14b, 0x90
inc r12d
xor rax, rsp
mov qword [rbp + 0x17], rax
movsxd rsi, edx
btc r14, r10
cwde
mov r15, r8
mov rax, rsi
shld r13w, si, 0x93
btc r13w, 0xc1
rcl r12, 0xbf
mov qword [rbp - 9], rcx
movsx r14, r8w
mov qword [rbp - 0x11], rax
movsxd r12, r15d
cmp r8b, 0x8f
test r12b, 0xe1
lea rcx, [0x140000000]
bt r13w, 0xc7
shr r12, 0xdd
and eax, 0x3f
sar r12b, 0x47
ror r13b, cl
mov r13d, r9d
rol r12w, cl
neg r14w
add r13, r8
mov qword [rbp - 0x21], r8
shrd r12w, r12w, 0xfb
cmc
mov r12, rsi
mov qword [rbp - 0x51], r13
not r14w
sar r12, 6
movzx r14, r11w
movsx r14, bx
lea r14, [rax + rax*8]
movsx rax, r9w
movsxd rax, eax
mov rax, qword [rcx + r12*8 + 0xba940]
jmp 0x1404da662
mov rax, qword [rax + r14*8 + 0x28]
mov qword [rbp - 0x49], rax
jmp 0x1404da670
call qword [sym.imp.KERNEL32.dll_GetConsoleOutputCP]
sub edx, edx
xchg rcx, rcx
not cl
lea rcx, [rsp + 0x50]
jmp 0x1404da687
mov dword [rbp - 0x59], eax
jmp 0x1404da68f
call fcn.1404a3569
mov rcx, qword [rsp + 0x58]
sar dh, cl
xor r11d, r11d
cmp bl, r12b
mov dword [rbp - 0x69], r11d
add bx, r9w
mov ebx, r11d
adc dl, spl
mov dword [rbp - 0x65], ebx
rcl rdx, 0xa4
setb dil
mov rdi, r15
xchg dh, dh
mov edx, dword [rcx + 0xc]
rcr ch, 0x4f
mov ecx, r11d
mov dword [rsp + 0x40], ecx
cmc
jmp 0x1404da6d2
mov dword [rbp - 0x55], edx
cmp r15, r13
jmp 0x1404da6dd
jae 0x1404daed9
mov rax, rsi
mov rsi, r15
sar rax, 6
sub r15b, r12b
mov qword [rbp - 0x19], rax
neg cl
mov cl, byte [rdi]
cmc
rcr r15b, 0x7c
mov r15d, 1
mov byte [rsp + 0x44], cl
cmp si, r13w
mov dword [rsp + 0x48], r11d
cmc
stc
cmp edx, 0xfde9
jmp 0x1404da71d
jne 0x1404daa8a
lea r15, [0x140000000]
movsx si, spl
mov edx, r11d
movsx esi, sp
dec sil
jmp 0x1404da73d
mov r9, qword [r15 + rax*8 + 0xba940]
test ecx, 0x7d94047f
mov rsi, r11
add al, 0x14
xadd ah, ah
bts eax, r8d
lea rax, [r9 + r14*8]
cmp byte [rax + rsi + 0x3e], r11b
jmp 0x1404da765
je 0x1404da786
inc edx
jmp 0x1404da772
inc rsi
clc
cmc
cmp rsi, 5
jmp 0x1404da780
jl 0x1404da75b
test rsi, rsi
jmp 0x1404da78e
jle 0x1404da9ac
mov rax, qword [r15 + r12*8 + 0xba940]
and ch, al
inc cx
mov r8, qword [rbp - 0x51]
bt r13d, eax
movsxd r13, edx
bsr ecx, r11d
sub r8, rdi
inc r13b
movzx r13, si
dec rcx
movzx ecx, byte [rax + r14*8 + 0x3e]
cmovo r13w, r13w
jmp 0x1404da7cd
movsx r15d, byte [rcx + r15 + 0xb7d00]
mov r10b, cl
setbe r13b
movzx r10d, r9w
inc r15d
dec r10d
shr r13b, 0x71
mov r13d, r15d
movsx r10w, sil
sub r13d, edx
bsf r10w, r12w
clc
movsxd r10, r13d
jmp 0x1404da807
cmp r10, r8
jmp 0x1404da80f
jg 0x1404dad33
lea rax, [rbp - 1]
sar dh, 0x9e
adc dx, 0x7c9c
mov rdx, r11
sub r9, rax
shl al, cl
adc r8b, 0x1f
bsr r8d, esi
lea r8, [r9 + r14*8]
test rsi, 0x302c3382
lea rcx, [rbp - 1]
sar al, cl
add rcx, rdx
not al
mov al, 0xad
inc rdx
setp al
mov al, byte [rcx + r8 + 0x3e]
cmc
cmp dl, 0x54
mov byte [rcx], al
cmc
cmp rdx, rsi
jmp 0x1404da863
jl 0x1404da83c
test r13d, r13d
jmp 0x1404da871
jle 0x1404da8ae
lea rcx, [rbp - 1]
shl dx, cl
movsxd r8, ecx
mov r8, r10
shr dx, 0xd0
or dl, 0xd0
movzx rdx, cx
add rcx, rsi
cmovge rdx, r14
xchg edx, edx
mov dl, bpl
mov rdx, rdi
jmp 0x1404da8a3
call fcn.1404a2569
xor r11d, r11d
sbb cl, spl
mov rdx, r11
inc ch
lea r8, [0x140000000]
add cl, 0xb3
mov rcx, qword [r8 + r12*8 + 0xba940]
clc
test ebp, r13d
add rcx, rdx
jmp 0x1404da8d1
inc rdx
jmp 0x1404da8de
mov byte [rcx + r14*8 + 0x3e], r11b
cmp rdx, rsi
jl 0x1404da8bd
lea rax, [rbp - 1]
cmc
bt r9w, 0x96
movzx dx, r10b
mov qword [rbp - 0x41], r11
shl ecx, 0xe5
movsx cx, dh
cwd
mov qword [rbp - 0x39], rax
sbb cx, 0xb92
movzx eax, di
movzx r9, r14w
lea r9, [rbp - 0x41]
seto dl
mov eax, r11d
cmp ax, 0x4bed
lea rdx, [rbp - 0x39]
bsr r8w, r11w
bswap r8d
cmp r15d, 4
movsxd rcx, eax
xchg r8b, al
mov r8b, 0xd1
lea rcx, [rsp + 0x48]
seto r15b
not r15d
sete al
mov r15b, r8b
movsx r15, r14w
xchg r15b, r15b
inc eax
mov r8w, bp
movsxd r8, r8d
mov r8d, eax
mov r15d, eax
jmp 0x1404da96d
call fcn.1404e00a2
cmp rax, 0xffffffffffffffff
je 0x1404dab4e
lea eax, [r13 - 1]
or si, si
test rcx, 0x352a5c13
shr r13b, 0x2b
mov r13, qword [rbp - 0x51]
and esi, esp
adc sil, r12b
btc si, r10w
movsxd rsi, eax
add rsi, rdi
jmp 0x1404da9a7
jmp 0x1404dab86
movzx eax, byte [rdi]
mov rdx, r13
inc sil
bts si, r10w
sub rdx, rdi
movsx rsi, byte [rax + r15 + 0xb7d00]
movsx rcx, si
lea ecx, [rsi + 1]
mov al, bl
movsxd rax, ecx
stc
test sp, ax
clc
cmp rax, rdx
jmp 0x1404da9df
jg 0x1404dadab
cmp ecx, 4
movsx rcx, ax
cbw
movsxd rdx, r10d
mov qword [rbp - 0x31], r11
not r9b
cbw
rdtsc
mov eax, r11d
cqo
mov qword [rbp - 0x29], rdi
sete al
xchg r8b, dl
movzx bx, r12b
bswap dx
lea r9, [rbp - 0x31]
cmovne edx, ebp
mov dl, dil
inc eax
jmp 0x1404daa2e
lea rdx, [rbp - 0x29]
mov r8d, edx
setge bh
mov r8d, eax
jmp 0x1404daa40
lea rcx, [rsp + 0x48]
movsx bx, dil
jmp 0x1404daa54
mov ebx, eax
jmp 0x1404daa5b
call fcn.1404e00a2
cmp rax, 0xffffffffffffffff
jmp 0x1404daa69
je 0x1404dab4e
add rsi, rdi
bswap r15
movsxd r15, edi
movzx r15w, r11b
mov r15d, ebx
jmp 0x1404daa85
jmp 0x1404dab86
lea rax, [0x140000000]
or dl, 0xf5
mov rdx, qword [rax + r12*8 + 0xba940]
mov cl, byte [rdx + r14*8 + 0x3d]
test rsp, 0x2bc718d9
test cl, 4
jmp 0x1404daab0
je 0x1404daae3
mov al, byte [rdx + r14*8 + 0x3e]
and cl, 0xfb
mov byte [rbp + 7], al
mov al, byte [rdi]
jmp 0x1404daac8
mov byte [rdx + r14*8 + 0x3d], cl
lea rdx, [rbp + 7]
jmp 0x1404daad6
mov byte [rbp + 8], al
jmp 0x1404daade
jmp 0x1404dab23
call fcn.1404a9ca7
movzx ecx, byte [rdi]
test sil, spl
jmp 0x1404daaf4
sub edx, edx
jmp 0x1404daafb
cmp word [rax + rcx*2], dx
jmp 0x1404dab04
jge 0x1404dab5c
inc rsi
stc
clc
cmp rsi, r13
jmp 0x1404dab17
jae 0x1404dae5c
mov rdx, rdi
movsx ecx, si
mov r8d, 2
movsx cx, r15b
setno cl
lea rcx, [rsp + 0x48]
jmp 0x1404dab3b
call fcn.14012e915
cmp eax, 0xffffffff
jmp 0x1404dab48
jne 0x1404dab86
cmp byte [rbp - 0x71], 0
jmp 0x1404dab57
jmp 0x1404dae53
mov r8, r15
cqo
lea rcx, [rsp + 0x48]
movsxd rdx, r13d
bswap edx
mov rdx, rdi
jmp 0x1404dab73
call fcn.14012e915
cmp eax, 0xffffffff
jmp 0x1404dab80
je 0x1404daebf
mov ecx, dword [rbp - 0x59]
mov ah, 0x35
setno r8b
and r9w, bp
lea rax, [rbp + 0xf]
xor ebx, ebx
neg di
lea r8, [rsp + 0x48]
mov qword [rsp + 0x38], rbx
neg r9w
adc dil, 0x7e
lea rdi, [rsi + 1]
add r9, 0x6d837619
stc
mov qword [rsp + 0x30], rbx
mov r9d, r15d
cmp r13d, ebx
mov dword [rsp + 0x28], 5
xor edx, edx
mov qword [rsp + 0x20], rax
jmp 0x1404dabda
call fcn.1404c8312
mov esi, eax
test eax, eax
jmp 0x1404dabe8
je 0x1404daf6a
mov rcx, qword [rbp - 0x49]
lea r9, [rsp + 0x4c]
setae dl
cwd
mov r8d, eax
mov dl, r14b
mov qword [rsp + 0x20], rbx
lea rdx, [rbp + 0xf]
jmp 0x1404dac10
call qword [sym.imp.KERNEL32.dll_WriteFile]
xor r11d, r11d
test dx, 0x65eb
clc
cmc
test eax, eax
jmp 0x1404dac27
je 0x1404daf61
mov r15d, dword [rsp + 0x40]
xor bh, 0x62
mov ebx, edi
cmp bl, r10b
jmp 0x1404dac42
sub ebx, dword [rbp - 0x21]
jmp 0x1404dac51
add ebx, r15d
stc
mov dword [rbp - 0x65], ebx
test cx, 0x195b
clc
cmc
cmp dword [rsp + 0x4c], esi
jmp 0x1404dac68
jb 0x1404dae46
cmp byte [rsp + 0x44], 0xa
jmp 0x1404dac78
jne 0x1404dad05
mov rcx, qword [rbp - 0x49]
cwd
lea eax, [r11 + 0xd]
movzx rdx, r14w
not r8b
lea r9, [rsp + 0x4c]
movsxd rdx, r13d
mov word [rsp + 0x44], ax
jmp 0x1404daca8
lea r8d, [r11 + 1]
not dx
movzx dx, r15b
cwd
mov qword [rsp + 0x20], r11
lea rdx, [rsp + 0x44]
jmp 0x1404dacc5
call qword [sym.imp.KERNEL32.dll_WriteFile]
sub r11d, r11d
test eax, eax
je 0x1404daeb3
cmp dword [rsp + 0x4c], 1
jb 0x1404dae46
inc r15d
inc ebx
bswap rsi
shl sil, 0x17
rcr sil, cl
mov dword [rsp + 0x40], r15d
bsf si, r12w
mov dword [rbp - 0x65], ebx
bsr rsi, rbp
movsx rsi, di
mov rsi, rdi
test r10w, 0x3f5f
cmp rdi, r13
jmp 0x1404dad16
jae 0x1404daed5
mov rax, qword [rbp - 0x19]
cdq
jmp 0x1404dad26
mov edx, dword [rbp - 0x55]
jmp 0x1404dad2e
jmp 0x1404da6f6
mov edx, r11d
test r8, r8
jmp 0x1404dad3e
jle 0x1404dad9e
sub rdi, rsi
not bh
movzx rbx, bp
lea rbx, [0x140000000]
not al
mov al, byte [rdi + rsi]
cmovae ecx, r10d
inc edx
stc
btr ecx, esi
inc rcx
mov rcx, qword [rbx + r12*8 + 0xba940]
add rcx, rsi
inc rsi
mov byte [rcx + r14*8 + 0x3e], al
movsx eax, sp
add rax, 0x6d221778
movsxd rax, edx
cmp rax, r8
jmp 0x1404dad8e
jl 0x1404dad56
mov ebx, dword [rbp - 0x65]
clc
test r15b, r13b
cmp r8d, r14d
add ebx, r8d
jmp 0x1404dada6
jmp 0x1404dae38
mov r9d, r11d
test rdx, rdx
jmp 0x1404dadb6
jle 0x1404dae2b
mov r13, qword [rbp - 0x11]
bts r10d, edi
dec al
mov r8, r11
bt r11w, r14w
clc
mov r10, r13
and r13d, 0x3f
sbb cx, cx
sar r10, 6
neg al
lea r11, [r13*8]
add r11, r13
movzx ecx, r10w
mov al, byte [r8 + rdi]
movsx rcx, bx
inc r9d
movsxd rcx, r12d
not rcx
mov rcx, qword [r15 + r10*8 + 0xba940]
clc
add rcx, r8
inc r8
clc
mov byte [rcx + r11*8 + 0x3e], al
or ax, ax
movsxd rax, r9d
cmp rax, rdx
jmp 0x1404dae22
jl 0x1404dadee
xor r11d, r11d
add ebx, edx
shr cx, cl
movzx rcx, dx
bsr rcx, r12
mov dword [rbp - 0x65], ebx
bts cx, r10w
sbb cl, r12b
not cx
cmp byte [rbp - 0x71], r11b
movsx cx, r12b
movsx rcx, ax
mov ecx, dword [rsp + 0x40]
jmp 0x1404daedd
mov al, byte [rdi]
movzx rcx, r15w
movsx cx, bpl
cmovo ecx, r10d
lea r8, [0x140000000]
not ecx
movzx ecx, r15w
mov rcx, qword [r8 + r12*8 + 0xba940]
jmp 0x1404dae85
inc ebx
mov dword [rbp - 0x65], ebx
mov byte [rcx + r14*8 + 0x3e], al
mov rax, qword [r8 + r12*8 + 0xba940]
jmp 0x1404dae9c
or byte [rax + r14*8 + 0x3d], 4
clc
test ch, 0x7b
cmp byte [rbp - 0x71], dl
jmp 0x1404daeae
jmp 0x1404dae53
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x69], eax
test dil, sil
mov ecx, dword [rsp + 0x40]
stc
jmp 0x1404daecc
cmp byte [rbp - 0x71], 0
jmp 0x1404daedd
mov ecx, dword [rsp + 0x40]
cmp byte [rbp - 0x71], r11b
je 0x1404daef0
mov rax, qword [rsp + 0x50]
and dword [rax + 0x3a8], 0xfffffffd
lahf
mov rax, qword [rbp - 9]
movsd xmm0, qword [rbp - 0x69]
cmp spl, 0x7f
jmp 0x1404daf02
movsd qword [rax], xmm0
jmp 0x1404daf0b
mov dword [rax + 8], ecx
mov rcx, qword [rbp + 0x17]
cmc
xor rcx, rsp
call fcn.14049e949
mov rbx, qword [rsp + 0x140]
ror rdi, cl
add rsp, 0x100
movsx di, dil
movsxd r13, r15d
mov r14b, bpl
pop r15
bswap si
movzx edi, r11w
not bpl
pop r14
pop r13
movsx di, r11b
setbe bpl
xchg r12b, r12b
pop r12
cmovnp esi, r15d
pop rdi
pop rsi
movsxd rbp, r11d
pop rbp
ret
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x69], eax
mov ecx, dword [rsp + 0x40]
jmp 0x1404daf73
cmp byte [rbp - 0x71], bl
jmp 0x1404daf7b
jmp 0x1404daedd