Function at 0x1404d60ff
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
cmp r13w, di
shld ax, r8w, 0x38
rol al, cl
push rbp
rcr bp, 0xd5
test r8, 0x268176dc
and bpl, 0x96
push rsi
push rdi
add ah, dh
rcr al, cl
ror eax, 0xb4
push r12
shr ax, 0x6b
push r13
xor r13b, 0xf2
push r14
push r15
lea rbp, [rsp - 0x27]
movsx r12d, r15w
rcr r14b, cl
sub rsp, 0x100
movsxd r14, r12d
movsx r14w, al
bts r15w, r10w
mov rax, qword [0x1400b7288]
xor rax, rsp
setno sil
rcr r14w, cl
test r8b, 0x16
mov qword [rbp + 0x17], rax
clc
movsxd rsi, edx
mov r15, r8
adc eax, 0x145e0e26
mov rax, rsi
or r12w, cx
sar r14b, 0xa2
mov qword [rbp - 9], rcx
ror r14w, cl
bsr r13w, r13w
mov qword [rbp - 0x11], rax
bsf r13d, r9d
btc r13d, 0x4a
lea rcx, [0x140000000]
or r13b, bl
stc
shrd r13, rcx, 0xf9
and eax, 0x3f
mov r13d, r9d
add r13, r8
shld r14d, r14d, 0xa2
mov qword [rbp - 0x21], r8
sub r12b, bpl
mov r12, rsi
cmc
rcl r14d, 0xe2
mov qword [rbp - 0x51], r13
sar r12, 6
lea r14, [rax + rax*8]
movsx eax, di
mov rax, qword [rcx + r12*8 + 0xba940]
jmp 0x1404d61ed
mov rax, qword [rax + r14*8 + 0x28]
jmp 0x1404d61f7
mov qword [rbp - 0x49], rax
jmp 0x1404d6200
call qword [sym.imp.KERNEL32.dll_GetConsoleOutputCP]
xor edx, edx
movzx rcx, r9w
lea rcx, [rsp + 0x50]
mov dword [rbp - 0x59], eax
call fcn.14049ee9f
mov rcx, qword [rsp + 0x58]
btc bx, 0xd0
shr dil, 0x9f
rol dl, cl
sub r11d, r11d
clc
or di, ax
mov dword [rbp - 0x69], r11d
neg dh
shrd dx, sp, 0xa
or bl, r12b
mov ebx, r11d
mov dword [rbp - 0x65], ebx
mov rdi, r15
bts dx, r10w
mov edx, dword [rcx + 0xc]
add rcx, 0x33122c31
movzx rcx, sp
movsx ecx, r15w
mov ecx, r11d
clc
mov dword [rsp + 0x40], ecx
cmp r14b, r13b
mov dword [rbp - 0x55], edx
cmc
jmp 0x1404d6272
cmp r15, r13
jae 0x1404d6a0c
mov rax, rsi
not sil
mov rsi, r15
sal cl, cl
sar rax, 6
jmp 0x1404d6299
mov qword [rbp - 0x19], rax
cmp r8b, bpl
mov cl, byte [rdi]
mov r15d, 1
mov byte [rsp + 0x44], cl
mov dword [rsp + 0x48], r11d
cmp edx, 0xfde9
jne 0x1404d65ad
lea r15, [0x140000000]
movsx esi, si
ror r9, cl
mov edx, r11d
sub sil, spl
mov r9, qword [r15 + rax*8 + 0xba940]
xor si, 0x728
add ax, 0x5273
mov esi, esi
mov rsi, r11
nop
lea rax, [r9 + r14*8]
cmp ebx, 0x59b42f78
clc
cmp r14b, cl
cmp byte [rax + rsi + 0x3e], r11b
jmp 0x1404d6300
je 0x1404d631b
inc edx
jmp 0x1404d630d
inc rsi
cmc
cmp rsi, 5
jl 0x1404d62f6
test rsi, rsi
jmp 0x1404d6323
jle 0x1404d64e6
mov rax, qword [r15 + r12*8 + 0xba940]
shr r8b, 0x2c
not r10d
clc
mov r8, qword [rbp - 0x51]
bsf r13w, sp
sub r8, rdi
cmovo r13w, r10w
movzx ecx, byte [rax + r14*8 + 0x3e]
mov r13w, 0x4c7
not r10b
seta r13b
movsx r15d, byte [rcx + r15 + 0xb7d00]
inc r15d
movsxd r13, r10d
mov r13d, r15d
shr r10d, cl
movsx r10d, r15w
not r10d
sub r13d, edx
shl r10b, cl
and r10d, 0x45654026
rcr r10b, cl
movsxd r10, r13d
clc
cmp r10, r8
jmp 0x1404d6394
jg 0x1404d685c
lea rax, [rbp - 1]
mov rdx, r11
and cl, 0x74
adc ch, bh
cmovl r8, r14
sub r9, rax
lea r8, [r9 + r14*8]
bts rcx, rax
xor al, 0xa4
lea rcx, [rbp - 1]
sar al, 0xf4
add rcx, rdx
mov al, 0xe7
inc rdx
xadd al, al
mov al, byte [rcx + r8 + 0x3e]
mov byte [rcx], al
test cx, 0x79ae
cmp rdx, rsi
jmp 0x1404d63dd
jl 0x1404d63b7
test r13d, r13d
jmp 0x1404d63eb
jle 0x1404d641b
lea rcx, [rbp - 1]
neg r8b
mov r8, r10
add dx, r8w
add rcx, rsi
mov rdx, rdi
call fcn.14049decb
sub r11d, r11d
ror r8w, cl
adc r8w, 0x5349
shl r8b, 0x9e
mov rdx, r11
shr cx, 0xd0
cmovo r8w, r10w
rcr r8w, cl
lea r8, [0x140000000]
rcr cl, cl
mov rcx, qword [r8 + r12*8 + 0xba940]
cmp r15, 0x15ea52b7
add rcx, rdx
jmp 0x1404d644b
inc rdx
mov byte [rcx + r14*8 + 0x3e], r11b
cmp rdx, rsi
jmp 0x1404d645b
jl 0x1404d6434
lea rax, [rbp - 1]
mov qword [rbp - 0x41], r11
mov qword [rbp - 0x39], rax
lea r9, [rbp - 0x41]
cmc
mov eax, r11d
lea rdx, [rbp - 0x39]
cmp r15d, 4
lea rcx, [rsp + 0x48]
cmovb r8d, esp
mov r15b, 0xeb
mov al, cl
sete al
inc eax
mov r15b, bl
movzx r8, r11w
mov r8d, eax
not r15b
movsx r15d, r8w
mov r15d, eax
call fcn.1404dbbd0
cmp rax, 0xffffffffffffffff
jmp 0x1404d64b2
je 0x1404d667a
lea eax, [r13 - 1]
movzx r13w, r8b
ror sil, 0x7a
bts r13d, r15d
mov r13, qword [rbp - 0x51]
xor rsi, rbx
add sil, al
movsxd rsi, eax
cmp r8b, r11b
add rsi, rdi
jmp 0x1404d64e1
jmp 0x1404d66a1
movzx eax, byte [rdi]
and rsi, 0x490d1561
btr si, r8w
add sil, 0xc9
mov rdx, r13
cmovbe ecx, ebx
cmp rsp, rcx
sub rdx, rdi
movsx rsi, byte [rax + r15 + 0xb7d00]
add ax, 0x4cb4
btr cx, si
lea ecx, [rsi + 1]
sar eax, cl
movsx rax, sp
and ah, 0x42
movsxd rax, ecx
cmp rax, rdx
jmp 0x1404d652d
jg 0x1404d68d2
cmp ecx, 4
cdqe
movsx rcx, r10w
mov qword [rbp - 0x31], r11
cwd
cmovo rdx, rbp
bswap dx
mov eax, r11d
jmp 0x1404d6551
mov qword [rbp - 0x29], rdi
movsxd rcx, r11d
mov al, al
jmp 0x1404d655f
sete al
lea r9, [rbp - 0x31]
cmovae ecx, edi
inc dl
inc eax
lea rdx, [rbp - 0x29]
mov r8d, eax
mov bh, 0x38
bswap cx
seta cl
lea rcx, [rsp + 0x48]
mov ebx, eax
jmp 0x1404d6589
call fcn.1404dbbd0
cmp rax, 0xffffffffffffffff
jmp 0x1404d6597
je 0x1404d667a
add rsi, rdi
mov r15d, ebx
jmp 0x1404d65a8
jmp 0x1404d66a1
lea rax, [0x140000000]
movzx dx, al
mov rdx, qword [rax + r12*8 + 0xba940]
mov cl, byte [rdx + r14*8 + 0x3d]
cmp r13w, 0x1387
test cl, 4
jmp 0x1404d65d3
je 0x1404d6611
mov al, byte [rdx + r14*8 + 0x3e]
cmc
and cl, 0xfb
jmp 0x1404d65e7
mov byte [rbp + 7], al
xchg al, al
mov al, byte [rdi]
jmp 0x1404d65f3
mov byte [rdx + r14*8 + 0x3d], cl
movsx edx, di
lea rdx, [rbp + 7]
jmp 0x1404d6604
mov byte [rbp + 8], al
jmp 0x1404d660c
jmp 0x1404d664c
call fcn.1404a55c5
movzx ecx, byte [rdi]
jmp 0x1404d661f
xor edx, edx
cmp word [rax + rcx*2], dx
jmp 0x1404d662a
jge 0x1404d6683
inc rsi
stc
cmp r12, 0xbb4a61
cmp rsi, r13
jmp 0x1404d6643
jae 0x1404d69a3
mov rdx, rdi
mov r8d, 2
movsxd rcx, eax
xchg cx, cx
movzx cx, r14b
lea rcx, [rsp + 0x48]
jmp 0x1404d6667
call fcn.14023bca7
cmp eax, 0xffffffff
jmp 0x1404d6674
jne 0x1404d66a1
cmp byte [rbp - 0x71], 0
jmp 0x1404d6995
mov r8, r15
bswap rcx
lea rcx, [rsp + 0x48]
cwd
mov rdx, rdi
call fcn.14023bca7
cmp eax, 0xffffffff
je 0x1404d69f5
mov ecx, dword [rbp - 0x59]
mov r8b, r10b
bswap edi
bts eax, r8d
lea rax, [rbp + 0xf]
stc
shl r9b, 0x5f
sub di, 0x460a
xor ebx, ebx
lea r8, [rsp + 0x48]
sar di, 0x2a
shrd di, si, 0xa6
rcl r9w, 0x41
mov qword [rsp + 0x38], rbx
lea rdi, [rsi + 1]
test dil, 0xae
add r9b, 0x5f
btc r9w, cx
mov qword [rsp + 0x30], rbx
btr r9w, si
xor r9, rbp
btr r9, 0x49
mov r9d, r15d
clc
jmp 0x1404d6701
mov dword [rsp + 0x28], 5
cmc
test r12d, 0x17bc61d3
stc
sub edx, edx
mov qword [rsp + 0x20], rax
jmp 0x1404d671e
call fcn.1404c3e30
mov esi, eax
test r9b, al
test eax, eax
je 0x1404d6ac9
mov rcx, qword [rbp - 0x49]
xchg r8w, dx
movzx edx, r11w
movsxd rdx, r11d
lea r9, [rsp + 0x4c]
mov r8d, eax
not dx
mov qword [rsp + 0x20], rbx
lea rdx, [rbp + 0xf]
jmp 0x1404d6758
call qword [sym.imp.KERNEL32.dll_WriteFile]
xor r11d, r11d
test eax, eax
jmp 0x1404d6768
je 0x1404d6abb
mov r15d, dword [rsp + 0x40]
cmp ebx, r12d
rcr bx, cl
mov ebx, edi
cmc
sub ebx, dword [rbp - 0x21]
cmp r9b, spl
test dl, r14b
add ebx, r15d
cmp r10b, bl
mov dword [rbp - 0x65], ebx
test r11b, al
cmc
cmp dword [rsp + 0x4c], esi
jmp 0x1404d679b
jb 0x1404d698a
cmp byte [rsp + 0x44], 0xa
jmp 0x1404d67ab
jne 0x1404d6839
mov rcx, qword [rbp - 0x49]
setg dh
movsx rdx, r11w
lea eax, [r11 + 0xd]
movzx rdx, si
movsx r9d, r9w
movsx r8w, r13b
lea r9, [rsp + 0x4c]
movzx edx, dx
mov dl, 0x8e
movzx rdx, sp
mov word [rsp + 0x44], ax
setle dh
movzx r8d, di
lea r8d, [r11 + 1]
mov qword [rsp + 0x20], r11
lea rdx, [rsp + 0x44]
jmp 0x1404d67fa
call qword [sym.imp.KERNEL32.dll_WriteFile]
xor r11d, r11d
cmc
test eax, eax
jmp 0x1404d680b
je 0x1404d69ea
cmp dword [rsp + 0x4c], 1
jmp 0x1404d681b
jb 0x1404d698a
inc r15d
inc ebx
and sil, r10b
bsr si, r8w
mov dword [rsp + 0x40], r15d
movsxd rsi, r11d
mov dword [rbp - 0x65], ebx
mov rsi, rdi
cmc
jmp 0x1404d6842
cmp rdi, r13
jae 0x1404d6a07
mov rax, qword [rbp - 0x19]
mov edx, dword [rbp - 0x55]
jmp 0x1404d6857
jmp 0x1404d62a0
mov edx, r11d
test r8, r8
jmp 0x1404d6867
jle 0x1404d68c5
sub rdi, rsi
lea rbx, [0x140000000]
movsx rcx, r8w
mov al, byte [rdi + rsi]
movsx cx, al
inc edx
mov rcx, r12
mov rcx, qword [rbx + r12*8 + 0xba940]
add rcx, rsi
jmp 0x1404d6897
inc rsi
cmp r12b, spl
stc
cmp r8b, 0x5e
mov byte [rcx + r14*8 + 0x3e], al
movsxd rax, edx
cmc
test r9b, 0xd7
cmp cl, r12b
cmp rax, r8
jmp 0x1404d68ba
jl 0x1404d687b
mov ebx, dword [rbp - 0x65]
clc
stc
add ebx, r8d
jmp 0x1404d68cd
jmp 0x1404d6984
mov r9d, r11d
cmc
clc
test rdx, rdx
jmp 0x1404d68df
jle 0x1404d697b
mov r13, qword [rbp - 0x11]
movzx r10w, spl
cmc
mov r8, r11
bts ecx, ebp
test r15b, 0xbc
btc cx, r12w
mov r10, r13
sbb r11d, ecx
btr r11w, r12w
and r13d, 0x3f
sar r10, 6
lea r11, [r13*8]
sar al, 0x57
cmp r12b, dil
sbb al, r8b
add r11, r13
xchg cl, al
setnp cl
mov al, byte [r8 + rdi]
not cl
movzx rcx, dx
inc r9d
clc
xor cx, r14w
mov rcx, qword [r15 + r10*8 + 0xba940]
stc
cmp r10w, 0x43db
add rcx, r8
jmp 0x1404d6953
inc r8
mov byte [rcx + r11*8 + 0x3e], al
bts eax, esp
movsxd rax, r9d
clc
cmc
cmp rax, rdx
jmp 0x1404d696b
jl 0x1404d692a
sub r11d, r11d
rcr ch, cl
and cx, 0x1f86
add ebx, edx
xchg rcx, rcx
stc
or cl, r10b
mov dword [rbp - 0x65], ebx
rcr ecx, cl
cmc
cmp byte [rbp - 0x71], r11b
movzx ecx, bx
cmovnp rcx, rdi
mov ecx, dword [rsp + 0x40]
jmp 0x1404d699e
jmp 0x1404d6a15
mov al, byte [rdi]
lea r8, [0x140000000]
mov rcx, qword [r8 + r12*8 + 0xba940]
jmp 0x1404d69b9
inc ebx
mov dword [rbp - 0x65], ebx
cmp r8b, 0xff
clc
cmc
mov byte [rcx + r14*8 + 0x3e], al
mov rax, qword [r8 + r12*8 + 0xba940]
cmp sil, r8b
or byte [rax + r14*8 + 0x3d], 4
test r15b, bpl
cmp byte [rbp - 0x71], dl
jmp 0x1404d69e5
jmp 0x1404d6995
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x69], eax
rcr cl, cl
mov ecx, dword [rsp + 0x40]
cmp byte [rbp - 0x71], 0
jmp 0x1404d6a02
jmp 0x1404d6a15
mov ecx, dword [rsp + 0x40]
clc
cmp byte [rbp - 0x71], r11b
jmp 0x1404d6a15
je 0x1404d6a2a
mov rax, qword [rsp + 0x50]
and dword [rax + 0x3a8], 0xfffffffd
xadd ah, al
mov rax, qword [rbp - 9]
clc
movsd xmm0, qword [rbp - 0x69]
test sp, 0xeaa
cmp r8b, al
movsd qword [rax], xmm0
test r8w, r10w
mov dword [rax + 8], ecx
cmp dil, cl
movsx rcx, si
or cx, r15w
mov rcx, qword [rbp + 0x17]
test rdi, 0x34da7f76
test r10, rbp
xor rcx, rsp
call fcn.14049a18d
mov rbx, qword [rsp + 0x140]
add rsp, 0x100
pop r15
movzx bp, bpl
sets r13b
movsx ebp, cx
pop r14
xchg bp, bp
not bp
pop r13
movzx rdi, ax
movzx r12d, r12w
pop r12
movzx di, al
pop rdi
sets sil
movzx ebp, r11w
movsx ebp, r15w
pop rsi
bswap ebp
movsxd rbp, ebx
movsx rbp, r14w
pop rbp
jmp 0x1404d6aba
ret
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x69], eax
movsx cx, spl
mov ecx, dword [rsp + 0x40]
test r13, 0x38c21880
cmp edi, r15d
clc
cmp byte [rbp - 0x71], bl
jmp 0x1404d6ae0
jmp 0x1404d6a15