Function at 0x1404da9a5
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
push rbp
bswap eax
cmc
dec ah
push rsi
cmp esi, 0x2299742d
push rdi
clc
push r12
shl ax, cl
btc ax, 0x79
push r13
movzx esi, r12w
push r14
push r15
add bp, sp
lea rbp, [rsp - 0x27]
movsx r15d, r10w
sub rsp, 0x100
bt rsi, rdi
rcr r13b, cl
mov rax, qword [0x1400b7288]
movsxd r13, r11d
xor rax, rsp
cmp r8w, r10w
shr r15w, 0xc7
btr r15d, r14d
mov qword [rbp + 0x17], rax
lahf
rcr r13w, cl
movsxd rsi, edx
mov r15, r8
mov rax, rsi
test r15b, 0xdc
movzx r13d, r15w
bsf r13, rsi
mov qword [rbp - 9], rcx
sbb ecx, ecx
mov qword [rbp - 0x11], rax
lea rcx, [0x140000000]
cmc
rol r13w, cl
and eax, 0x3f
and r13w, 0x2f32
mov r13d, r9d
rol r12b, cl
or r12, 0x201c47f8
movsx r14d, r11w
lea r13, [r13 + r8]
mov qword [rbp - 0x21], r8
cmovp r14d, eax
mov r12, rsi
mov qword [rbp - 0x51], r13
sar r12, 6
mov r14b, r9b
movzx r14d, r12w
lea r14, [rax + rax*8]
movsxd rax, r10d
mov rax, qword [rcx + r12*8 + 0xba940]
jmp 0x1404daa82
mov rax, qword [rax + r14*8 + 0x28]
jmp 0x1404daa8c
mov qword [rbp - 0x49], rax
jmp 0x1404daa95
call qword [sym.imp.KERNEL32.dll_GetConsoleOutputCP]
sub edx, edx
lea rcx, [rsp + 0x50]
jmp 0x1404daaa7
mov dword [rbp - 0x59], eax
jmp 0x1404daaaf
call fcn.1404a396d
mov rcx, qword [rsp + 0x58]
xor r11d, r11d
shl bx, cl
mov dword [rbp - 0x69], r11d
and di, 0x29e6
cwd
mov ebx, r11d
jmp 0x1404daade
mov dword [rbp - 0x65], ebx
movzx di, cl
rol dl, 0x85
btc di, 0x75
mov rdi, r15
bsf dx, bx
setle dh
mov edx, dword [rcx + 0xc]
movzx cx, r11b
mov ecx, r11d
jmp 0x1404dab0f
mov dword [rsp + 0x40], ecx
test r12b, al
cmp r9b, 0xd1
mov dword [rbp - 0x55], edx
cmp r15, r13
jmp 0x1404dab25
jae 0x1404db32d
mov rax, rsi
mov rsi, r15
sbb r15b, 0x83
or cl, 6
test r13w, 0x67be
sar rax, 6
shl cl, cl
mov qword [rbp - 0x19], rax
add cl, 0x16
mov cl, byte [rdi]
xchg r15, r15
ror r15w, 0xc6
cmp r14d, r11d
mov r15d, 1
mov byte [rsp + 0x44], cl
mov dword [rsp + 0x48], r11d
cmp edx, 0xfde9
jmp 0x1404dab72
jne 0x1404daec2
lea r15, [0x140000000]
dec si
sal r9w, cl
mov edx, r11d
xor sil, al
and r9b, r11b
mov r9, qword [r15 + rax*8 + 0xba940]
btc si, 0x6f
mov rsi, r11
cbw
shrd eax, edi, 0x4d
jmp 0x1404dabaa
lea rax, [r9 + r14*8]
test esi, eax
stc
test r8b, 0xa
cmp byte [rax + rsi + 0x3e], r11b
jmp 0x1404dabbf
je 0x1404dabde
inc edx
jmp 0x1404dabcc
inc rsi
cmp rsi, 5
jmp 0x1404dabd8
jl 0x1404dabb5
test rsi, rsi
jmp 0x1404dabe6
jle 0x1404dadfc
mov rax, qword [r15 + r12*8 + 0xba940]
xor r8b, sil
cmp edx, 0x455740ae
mov r8, qword [rbp - 0x51]
movsx r13, sp
sub r8, rdi
movsx r10d, r14w
inc cl
movzx ecx, byte [rax + r14*8 + 0x3e]
dec r10b
movsx r15d, byte [rcx + r15 + 0xb7d00]
bswap r13
movzx r13, r12w
inc r15d
cmovs r13w, r11w
ror r13b, cl
mov r13w, r13w
mov r13d, r15d
btr r10w, r10w
sub r13d, edx
add r10b, r15b
movsxd r10, r13d
test r13w, dx
cmp r10, r8
jmp 0x1404dac53
jg 0x1404db173
lea rax, [rbp - 1]
bsr r8w, r12w
cmovno r8, r15
movzx r8d, r9w
mov rdx, r11
cmovae rcx, r12
and r8w, 0x7c5c
inc r8w
sub r9, rax
movzx r8w, r8b
lea r8, [r9 + r14*8]
lea rcx, [rbp - 1]
xadd al, al
add rcx, rdx
xchg al, al
inc rdx
neg al
rcr al, cl
xadd al, al
mov al, byte [rcx + r8 + 0x3e]
cmp r13, rax
mov byte [rcx], al
cmp r9w, 0x727b
cmp r12b, r13b
cmp rdx, rsi
jmp 0x1404dacb8
jl 0x1404dac87
test r13d, r13d
jmp 0x1404dacc6
jle 0x1404dad0c
lea rcx, [rbp - 1]
bts edx, r15d
bt dx, di
cwd
mov r8, r10
cmp r13w, cx
movsxd rdx, edi
add rcx, rsi
movzx dx, r11b
xchg dx, dx
bswap edx
mov rdx, rdi
jmp 0x1404dacf9
call fcn.1404a29dd
xor r11d, r11d
movzx dx, dl
cmovg r8w, r10w
sal dl, cl
mov rdx, r11
rol r8b, 0xd5
btr r8d, 3
lea r8, [0x140000000]
not ch
mov rcx, qword [r8 + r12*8 + 0xba940]
jmp 0x1404dad2e
add rcx, rdx
jmp 0x1404dad36
inc rdx
mov byte [rcx + r14*8 + 0x3e], r11b
cmc
test r9b, 0x43
cmp rdx, rsi
jmp 0x1404dad4b
jl 0x1404dad21
lea rax, [rbp - 1]
movzx r8w, r12b
shr r8b, 0x74
mov qword [rbp - 0x41], r11
adc cl, spl
ror cl, cl
mov qword [rbp - 0x39], rax
lahf
lea r9, [rbp - 0x41]
sbb rax, 0x62e645ed
ror cx, cl
mov eax, r11d
rol r8b, cl
lea rdx, [rbp - 0x39]
bsf cx, bx
bsr cx, si
setg r8b
cmp r15d, 4
xchg al, al
not r8
lea rcx, [rsp + 0x48]
cmovb r8d, r15d
mov r8b, 0x25
bswap r15d
sete al
movsxd r8, r13d
inc eax
bswap r8w
mov r8d, eax
movsx r15d, dx
mov r15d, eax
jmp 0x1404dadc3
call fcn.1404e0598
cmp rax, 0xffffffffffffffff
jmp 0x1404dadd1
je 0x1404daf7f
lea eax, [r13 - 1]
shl r13b, cl
mov r13, qword [rbp - 0x51]
rol sil, cl
movsxd rsi, eax
cmp r12b, dl
cmp bpl, 0x75
add rsi, rdi
jmp 0x1404dadf7
jmp 0x1404dafb8
movzx eax, byte [rdi]
sbb ecx, 0x264b4c48
mov rdx, r13
movsx ecx, ax
sub rdx, rdi
movsxd rsi, r15d
movsx rsi, byte [rax + r15 + 0xb7d00]
movsx ax, sil
bts rcx, rdx
and cx, r15w
lea ecx, [rsi + 1]
dec ax
cmc
movsxd rax, ecx
cmp rcx, 0x3473324c
cmp rax, rdx
jmp 0x1404dae40
jg 0x1404db1e2
cmp ecx, 4
movsx r9w, sil
cdq
mov qword [rbp - 0x31], r11
mov eax, r11d
mov qword [rbp - 0x29], rdi
mov r9b, 0x5b
sete al
inc r8b
cmovs dx, r10w
jmp 0x1404dae6d
lea r9, [rbp - 0x31]
inc eax
xchg bx, bx
movzx cx, r15b
lea rdx, [rbp - 0x29]
movzx r8w, r9b
mov r8b, 0
mov r8d, eax
movsx ebx, dx
jmp 0x1404dae92
lea rcx, [rsp + 0x48]
mov ebx, eax
jmp 0x1404dae9e
call fcn.1404e0598
cmp rax, 0xffffffffffffffff
jmp 0x1404daeac
je 0x1404daf7f
add rsi, rdi
mov r15d, ebx
jmp 0x1404daebd
jmp 0x1404dafb8
lea rax, [0x140000000]
mov cl, 0x27
bt rdx, r15
mov rdx, qword [rax + r12*8 + 0xba940]
and cl, r13b
mov cl, byte [rdx + r14*8 + 0x3d]
test cl, 4
jmp 0x1404daee7
je 0x1404daf1d
mov al, byte [rdx + r14*8 + 0x3e]
and cl, 0xfb
jmp 0x1404daefa
mov byte [rbp + 7], al
mov al, byte [rdi]
jmp 0x1404daf04
mov byte [rdx + r14*8 + 0x3d], cl
movzx edx, dx
lea rdx, [rbp + 7]
jmp 0x1404daf15
mov byte [rbp + 8], al
jmp 0x1404daf56
call fcn.1404aa05d
movzx ecx, byte [rdi]
clc
cmp r11w, r14w
sub edx, edx
cmp word [rax + rcx*2], dx
jmp 0x1404daf35
jge 0x1404daf88
inc rsi
cmp rsi, r13
jmp 0x1404daf46
jae 0x1404db2a3
mov rdx, rdi
xchg r8w, cx
not r8b
mov r8d, 2
mov ch, 0x39
movzx rcx, r10w
movsx rcx, r11w
lea rcx, [rsp + 0x48]
call fcn.1402452ae
cmp eax, 0xffffffff
jmp 0x1404daf79
jne 0x1404dafb8
cmp byte [rbp - 0x71], 0
jmp 0x1404db295
mov r8, r15
movzx cx, sil
setns dh
movsx edx, di
lea rcx, [rsp + 0x48]
movsx dx, r12b
not edx
mov rdx, rdi
jmp 0x1404dafaa
call fcn.1402452ae
cmp eax, 0xffffffff
je 0x1404db30f
mov ecx, dword [rbp - 0x59]
sbb edi, 0x79e0001c
shld r9w, di, 5
bsr r9w, dx
lea rax, [rbp + 0xf]
cmove di, r10w
xor ebx, ebx
shl r8w, 0x8d
xadd r9, r9
lea r8, [rsp + 0x48]
mov qword [rsp + 0x38], rbx
lea rdi, [rsi + 1]
mov qword [rsp + 0x30], rbx
movsx r9, si
movzx r9d, r15w
stc
mov r9d, r15d
test r12b, spl
mov dword [rsp + 0x28], 5
xor edx, edx
mov qword [rsp + 0x20], rax
jmp 0x1404db016
call fcn.1404c888d
mov esi, eax
jmp 0x1404db022
test eax, eax
jmp 0x1404db029
je 0x1404db3dd
mov rcx, qword [rbp - 0x49]
lea r9, [rsp + 0x4c]
movsx dx, r13b
cdq
jmp 0x1404db043
mov r8d, eax
movsxd rdx, r15d
cmovns rdx, r11
not edx
mov qword [rsp + 0x20], rbx
cqo
lea rdx, [rbp + 0xf]
jmp 0x1404db05f
call qword [sym.imp.KERNEL32.dll_WriteFile]
sub r11d, r11d
jmp 0x1404db070
test eax, eax
jmp 0x1404db077
je 0x1404db3cd
mov r15d, dword [rsp + 0x40]
setae bh
sbb bl, r13b
sar bh, cl
mov ebx, edi
sub ebx, dword [rbp - 0x21]
add ebx, r15d
clc
mov dword [rbp - 0x65], ebx
cmp dword [rsp + 0x4c], esi
jmp 0x1404db09f
jb 0x1404db28b
cmp byte [rsp + 0x44], 0xa
jne 0x1404db14f
mov rcx, qword [rbp - 0x49]
cdq
lea eax, [r11 + 0xd]
lea r9, [rsp + 0x4c]
movsx dx, bpl
mov dl, sil
movzx rdx, ax
mov word [rsp + 0x44], ax
xchg r8w, dx
cdq
movsx edx, r10w
lea r8d, [r11 + 1]
cmovb dx, r11w
movzx rdx, r14w
cdq
mov qword [rsp + 0x20], r11
lea rdx, [rsp + 0x44]
jmp 0x1404db0f5
call qword [sym.imp.KERNEL32.dll_WriteFile]
sub r11d, r11d
test dx, r11w
jmp 0x1404db107
test eax, eax
jmp 0x1404db10e
je 0x1404db2f9
cmp dword [rsp + 0x4c], 1
jmp 0x1404db11e
jb 0x1404db28b
inc r15d
movsx esi, si
movzx si, r8b
mov si, r9w
inc ebx
bsf rsi, rdx
xchg sil, sil
shl si, 0x66
mov dword [rsp + 0x40], r15d
rcr sil, 0x7b
rcr rsi, cl
mov dword [rbp - 0x65], ebx
mov rsi, rdi
cmp rdi, r13
jmp 0x1404db15a
jae 0x1404db329
mov rax, qword [rbp - 0x19]
cwd
mov edx, dword [rbp - 0x55]
jmp 0x1404db16e
jmp 0x1404dab4b
mov edx, r11d
test r8, r8
jle 0x1404db1da
sub rdi, rsi
xchg bx, cx
jmp 0x1404db18a
lea rbx, [0x140000000]
mov al, byte [rdi + rsi]
inc edx
bsr ecx, r11d
rcl cx, 0x55
movsxd rcx, r12d
mov rcx, qword [rbx + r12*8 + 0xba940]
jmp 0x1404db1b3
add rcx, rsi
jmp 0x1404db1bb
inc rsi
mov byte [rcx + r14*8 + 0x3e], al
movzx rax, ax
bts eax, r14d
movsxd rax, edx
cmp rax, r8
jl 0x1404db191
mov ebx, dword [rbp - 0x65]
add ebx, r8d
jmp 0x1404db284
mov r9d, r11d
cmc
test rdx, rdx
jmp 0x1404db1ee
jle 0x1404db27f
mov r13, qword [rbp - 0x11]
mov r8, r11
sub r10w, bp
add r11b, r11b
mov r10, r13
xadd cl, al
movsxd r11, r8d
and r13d, 0x3f
movzx r11w, r13b
clc
xadd ch, ch
sar r10, 6
bts r11d, r15d
lea r11, [r13*8]
sal al, cl
setns al
or al, 0xbd
add r11, r13
movzx rcx, bx
mov al, byte [r8 + rdi]
movzx rcx, r8w
mov ecx, 0x7faa6cb5
bswap ecx
inc r9d
mov rcx, qword [r15 + r10*8 + 0xba940]
stc
add rcx, r8
jmp 0x1404db259
inc r8
jmp 0x1404db265
mov byte [rcx + r11*8 + 0x3e], al
cwde
mov rax, r13
cmc
movsxd rax, r9d
cmc
cmp rax, rdx
jl 0x1404db236
xor r11d, r11d
add ebx, edx
sar rcx, cl
mov dword [rbp - 0x65], ebx
bts ecx, r10d
cmp byte [rbp - 0x71], r11b
not cl
mov cx, 0x72fe
mov ecx, dword [rsp + 0x40]
jmp 0x1404db29e
jmp 0x1404db336
mov al, byte [rdi]
not r8b
lea r8, [0x140000000]
movsx rcx, bx
inc cl
mov rcx, qword [r8 + r12*8 + 0xba940]
jmp 0x1404db2c2
inc ebx
mov dword [rbp - 0x65], ebx
test r14w, 0x783
mov byte [rcx + r14*8 + 0x3e], al
movzx rax, cx
add al, bl
rcl ah, 0x8a
mov rax, qword [r8 + r12*8 + 0xba940]
or byte [rax + r14*8 + 0x3d], 4
stc
test bl, r8b
test r8b, 0xc
cmp byte [rbp - 0x71], dl
jmp 0x1404db295
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x69], eax
test r10b, r14b
bsf cx, r11w
shrd cx, dx, 0x45
mov ecx, dword [rsp + 0x40]
jmp 0x1404db31b
cmp byte [rbp - 0x71], 0
jmp 0x1404db324
jmp 0x1404db336
mov ecx, dword [rsp + 0x40]
cmp byte [rbp - 0x71], r11b
jmp 0x1404db336
je 0x1404db34b
mov rax, qword [rsp + 0x50]
and dword [rax + 0x3a8], 0xfffffffd
neg ax
mov rax, qword [rbp - 9]
test rbp, r13
movsd xmm0, qword [rbp - 0x69]
test dl, bpl
stc
cmc
movsd qword [rax], xmm0
mov dword [rax + 8], ecx
movzx rcx, r10w
adc ecx, r14d
bsf cx, ax
mov rcx, qword [rbp + 0x17]
cmp r15b, 0x89
xor rcx, rsp
jmp 0x1404db37e
call fcn.14049edb0
mov rbx, qword [rsp + 0x140]
adc esi, r12d
or r15w, r8w
movsx r15d, dx
add rsp, 0x100
movzx r13, r9w
mov dil, al
movsxd rsi, r11d
pop r15
pop r14
movsx r13w, r11b
pop r13
not bpl
bswap di
pop r12
pop rdi
mov rbp, rcx
xchg bp, bp
pop rsi
cmovp bp, bp
pop rbp
jmp 0x1404db3cc
ret
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x69], eax
test dx, r14w
sbb cl, dil
mov ecx, dword [rsp + 0x40]
test rcx, rsi
cmp byte [rbp - 0x71], bl
jmp 0x1404db336