Function at 0x1404dda47
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
test rsp, 0x22273080
push rbp
or rax, 0x543e152f
add ax, 0x73af
sbb ax, r10w
push rsi
push rdi
movzx esi, ax
push r12
push r13
push r14
movsx ax, r9b
shrd r14, r15, 0x72
push r15
cmc
adc r12, rdi
cmp r15b, 0x96
lea rbp, [rsp - 0x27]
cbw
rol r14b, 0x2a
bts r12w, cx
sub rsp, 0x100
movsx rax, r10w
movsx r12d, ax
btr r15, rbp
mov rax, qword [0x1400b7288]
xor rax, rsp
mov r13w, r9w
movsx r13, si
mov qword [rbp + 0x17], rax
cmc
movsxd rsi, edx
bsf ax, r13w
bsr rax, r8
mov r15, r8
mov rax, rsi
mov qword [rbp - 9], rcx
bsr r13d, edi
test rcx, rsi
xor ch, 0x36
mov qword [rbp - 0x11], rax
movzx r13w, al
dec r14b
lea rcx, [0x140000000]
shr r13w, cl
jmp 0x1404ddafb
and eax, 0x3f
movsx r14d, sp
rcr r12, 0x9e
mov r13d, r9d
sal r14b, 0x9b
lea r13, [r13 + r8]
shl r12w, 5
mov qword [rbp - 0x21], r8
sub r14b, r14b
mov r12, rsi
mov qword [rbp - 0x51], r13
test bx, r11w
sar r12, 6
seto r14b
movzx r14w, spl
movzx r14d, r13w
lea r14, [rax + rax*8]
mov rax, qword [rcx + r12*8 + 0xba940]
jmp 0x1404ddb4b
mov rax, qword [rax + r14*8 + 0x28]
jmp 0x1404ddb55
mov qword [rbp - 0x49], rax
jmp 0x1404ddb5e
call qword [sym.imp.KERNEL32.dll_GetConsoleOutputCP]
xor edx, edx
movzx rcx, r10w
lea rcx, [rsp + 0x50]
jmp 0x1404ddb74
mov dword [rbp - 0x59], eax
call fcn.1404a6aa8
mov rcx, qword [rsp + 0x58]
sub r11d, r11d
xor dil, r12b
mov dword [rbp - 0x69], r11d
bt rbx, 0xd5
mov ebx, r11d
mov dword [rbp - 0x65], ebx
clc
movzx edx, r11w
mov rdi, r15
cwd
rol rdx, 0xc6
shld dx, r12w, 0xd5
mov edx, dword [rcx + 0xc]
ror cl, cl
mov ecx, r11d
test r9b, 0x1b
stc
mov dword [rsp + 0x40], ecx
clc
jmp 0x1404ddbc1
mov dword [rbp - 0x55], edx
cmp r15, r13
jmp 0x1404ddbcc
jae 0x1404de31f
mov rax, rsi
btc si, si
cmp spl, 0x81
mov rsi, r15
rol r15d, cl
sar rax, 6
mov qword [rbp - 0x19], rax
bts r15w, r12w
ror r15b, 0xfb
mov cl, byte [rdi]
shl r15b, 0xf
jmp 0x1404ddc04
mov r15d, 1
mov byte [rsp + 0x44], cl
stc
cmc
mov dword [rsp + 0x48], r11d
cmp edx, 0xfde9
jne 0x1404ddef1
lea r15, [0x140000000]
sbb dx, 0x460a
mov edx, r11d
mov r9, qword [r15 + rax*8 + 0xba940]
btr ax, si
xor rsi, r14
mov rsi, r11
shr eax, 0x15
lea rax, [r9 + r14*8]
cmp edi, edx
cmp cx, 0x7b87
clc
cmp byte [rax + rsi + 0x3e], r11b
jmp 0x1404ddc5b
je 0x1404ddc77
inc edx
inc rsi
clc
cmc
cmp rsi, 5
jmp 0x1404ddc71
jl 0x1404ddc51
test rsi, rsi
jle 0x1404dde2c
mov rax, qword [r15 + r12*8 + 0xba940]
bt r8w, 0x32
sub r10w, si
test ebp, 0x1dad6b0d
mov r8, qword [rbp - 0x51]
sub r8, rdi
setl ch
movzx r13w, r14b
xchg cl, r13b
movzx ecx, byte [rax + r14*8 + 0x3e]
movsxd r10, ecx
movsx r15d, byte [rcx + r15 + 0xb7d00]
inc r15d
shr r10b, 0x14
clc
mov r13d, r15d
shl r10, 0x63
movzx r10, di
bsf r10w, ax
sub r13d, edx
sub r10w, 0x5f29
ror r10b, 0xe
sar r10w, cl
movsxd r10, r13d
cmp r11b, cl
cmp r10, r8
jg 0x1404de171
lea rax, [rbp - 1]
mov rdx, r11
movsx r8w, r10b
dec ch
rol r8b, cl
sub r9, rax
clc
cmc
movsx ecx, r8w
lea r8, [r9 + r14*8]
shr rcx, 0x22
lea rcx, [rbp - 1]
add rcx, rdx
inc rdx
not al
mov al, byte [rcx + r8 + 0x3e]
mov byte [rcx], al
cmp r14, 0x23ad6537
cmp rdx, rsi
jl 0x1404ddd16
test r13d, r13d
jmp 0x1404ddd41
jle 0x1404ddd65
lea rcx, [rbp - 1]
sbb r8b, 0x80
mov r8, r10
add rcx, rsi
bswap dx
mov rdx, rdi
call fcn.1404a5b19
xor r11d, r11d
shl dl, cl
mov rdx, r11
clc
shr r8w, cl
sbb r8d, esi
lea r8, [0x140000000]
test r8b, 0x9e
mov rcx, qword [r8 + r12*8 + 0xba940]
jmp 0x1404ddd88
add rcx, rdx
inc rdx
mov byte [rcx + r14*8 + 0x3e], r11b
cmp rdx, rsi
jmp 0x1404ddd9b
jl 0x1404ddd7b
lea rax, [rbp - 1]
mov qword [rbp - 0x41], r11
mov qword [rbp - 0x39], rax
test r9, 0x23354957
cmove dx, di
or dl, r11b
lea r9, [rbp - 0x41]
rol r8w, 0x6d
clc
mov eax, r11d
btc cx, 0x57
lea rdx, [rbp - 0x39]
add cl, bpl
cmp r15d, 4
movsx r8w, r12b
mov r8b, r14b
lea rcx, [rsp + 0x48]
bswap r15w
seta r15b
sete al
inc eax
mov r8d, eax
mov r15d, eax
call fcn.1404e364b
cmp rax, 0xffffffffffffffff
je 0x1404ddfae
lea eax, [r13 - 1]
or r13b, r13b
sub si, r8w
xchg esi, esi
mov r13, qword [rbp - 0x51]
movsxd rsi, eax
jmp 0x1404dde24
add rsi, rdi
jmp 0x1404ddfe1
movzx eax, byte [rdi]
mov rdx, r13
shrd cx, cx, 0x4f
sub rdx, rdi
movsx rsi, byte [rax + r15 + 0xb7d00]
shl al, cl
rcl rax, cl
or ax, r8w
lea ecx, [rsi + 1]
btc eax, 0x89
movsxd rax, ecx
cmp r13b, dil
cmp r10b, 0x18
cmc
cmp rax, rdx
jg 0x1404de1e6
cmp ecx, 4
cwd
cdqe
mov qword [rbp - 0x31], r11
mov cl, dil
movzx r8w, r8b
cwde
mov eax, r11d
mov rbx, 0x7389268e
movsx r9w, sil
mov qword [rbp - 0x29], rdi
cqo
cwd
movsx rdx, bx
sete al
bswap r9w
cqo
lea r9, [rbp - 0x31]
dec bx
inc eax
movsx rbx, dx
mov rcx, r10
movsx edx, r14w
lea rdx, [rbp - 0x29]
mov bl, r10b
mov r8d, eax
lea rcx, [rsp + 0x48]
cmova rbx, r13
jmp 0x1404ddecb
mov ebx, eax
jmp 0x1404dded2
call fcn.1404e364b
cmp rax, 0xffffffffffffffff
jmp 0x1404ddee0
je 0x1404ddfae
add rsi, rdi
mov r15d, ebx
jmp 0x1404ddfe1
lea rax, [0x140000000]
rol dx, cl
xchg dl, cl
sar dh, cl
mov rdx, qword [rax + r12*8 + 0xba940]
sub cl, 0x1f
neg cl
mov cl, byte [rdx + r14*8 + 0x3d]
test cl, 4
jmp 0x1404ddf19
je 0x1404ddf4d
mov al, byte [rdx + r14*8 + 0x3e]
clc
and cl, 0xfb
jmp 0x1404ddf2d
mov byte [rbp + 7], al
jmp 0x1404ddf35
mov al, byte [rdi]
mov byte [rdx + r14*8 + 0x3d], cl
lea rdx, [rbp + 7]
mov byte [rbp + 8], al
jmp 0x1404ddf48
jmp 0x1404ddf83
call fcn.1404ad175
movzx ecx, byte [rdi]
sub edx, edx
cmp r13, r9
cmp word [rax + rcx*2], dx
jmp 0x1404ddf63
jge 0x1404ddfbc
inc rsi
jmp 0x1404ddf71
cmp rsi, r13
jae 0x1404de2af
mov rdx, rdi
movsx r8, dx
not ch
mov r8d, 2
movzx cx, r14b
xchg cx, cx
lea rcx, [rsp + 0x48]
jmp 0x1404ddf9b
call fcn.1401b4c74
cmp eax, 0xffffffff
jmp 0x1404ddfa8
jne 0x1404ddfe1
cmp byte [rbp - 0x71], 0
jmp 0x1404ddfb7
jmp 0x1404de2a6
mov r8, r15
not dl
lea rcx, [rsp + 0x48]
mov rdx, rdi
jmp 0x1404ddfce
call fcn.1401b4c74
cmp eax, 0xffffffff
jmp 0x1404ddfdb
je 0x1404de308
mov ecx, dword [rbp - 0x59]
ror eax, cl
cdqe
shl rax, 0x47
lea rax, [rbp + 0xf]
sub ebx, ebx
setg r8b
not r8b
lea r8, [rsp + 0x48]
xor r9b, 0xaf
rcl di, cl
mov qword [rsp + 0x38], rbx
shl dil, cl
lea rdi, [rsi + 1]
adc r9b, bpl
btr r9, r10
mov qword [rsp + 0x30], rbx
shl r9w, 0x57
mov r9d, r15d
cmc
mov dword [rsp + 0x28], 5
xor edx, edx
mov qword [rsp + 0x20], rax
jmp 0x1404de03a
call fcn.1404cb883
mov esi, eax
jmp 0x1404de04d
test eax, eax
jmp 0x1404de054
je 0x1404de3b3
mov rcx, qword [rbp - 0x49]
setns r9b
lea r9, [rsp + 0x4c]
mov edx, esi
movsxd rdx, esi
mov r8d, eax
mov qword [rsp + 0x20], rbx
movsx rdx, cx
lea rdx, [rbp + 0xf]
jmp 0x1404de081
call qword [sym.imp.KERNEL32.dll_WriteFile]
sub r11d, r11d
stc
test eax, eax
je 0x1404de3a5
mov r15d, dword [rsp + 0x40]
mov ebx, edi
stc
cmc
clc
sub ebx, dword [rbp - 0x21]
cmp r11b, r10b
add ebx, r15d
cmp ch, cl
cmp ch, 0xdd
mov dword [rbp - 0x65], ebx
cmp dword [rsp + 0x4c], esi
jmp 0x1404de0b7
jb 0x1404de29c
cmp byte [rsp + 0x44], 0xa
jmp 0x1404de0c7
jne 0x1404de14d
mov rcx, qword [rbp - 0x49]
mov dx, 0x1d02
lea eax, [r11 + 0xd]
cqo
lea r9, [rsp + 0x4c]
cdq
mov word [rsp + 0x44], ax
cdq
mov rdx, 0x28d95123
lea r8d, [r11 + 1]
cdq
bswap rdx
mov qword [rsp + 0x20], r11
movzx dx, r13b
jmp 0x1404de105
lea rdx, [rsp + 0x44]
jmp 0x1404de10f
call qword [sym.imp.KERNEL32.dll_WriteFile]
sub r11d, r11d
test eax, eax
jmp 0x1404de11f
je 0x1404de2ff
cmp dword [rsp + 0x4c], 1
jmp 0x1404de12f
jb 0x1404de29c
inc r15d
movsx esi, r11w
dec esi
inc ebx
rcl si, cl
mov dword [rsp + 0x40], r15d
add esi, esp
mov dword [rbp - 0x65], ebx
mov rsi, rdi
stc
cmp r12b, 0x72
cmp rdi, r13
jae 0x1404de31b
mov rax, qword [rbp - 0x19]
cwd
mov edx, dword [rbp - 0x55]
jmp 0x1404de16c
jmp 0x1404ddbf4
mov edx, r11d
cmp r13b, 0x40
test r8, r8
jle 0x1404de1d9
sub rdi, rsi
xchg al, cl
dec al
movzx cx, dl
lea rbx, [0x140000000]
mov al, 0x5e
movzx rcx, r9w
mov al, byte [rdi + rsi]
jmp 0x1404de1a6
inc edx
test r14d, ebp
mov rcx, qword [rbx + r12*8 + 0xba940]
stc
add rcx, rsi
jmp 0x1404de1bc
inc rsi
mov byte [rcx + r14*8 + 0x3e], al
sub eax, ebp
cmp ebp, ecx
movsxd rax, edx
cmp rax, r8
jl 0x1404de199
mov ebx, dword [rbp - 0x65]
clc
stc
add ebx, r8d
jmp 0x1404de1e1
jmp 0x1404de28d
mov r9d, r11d
clc
test rdx, rdx
jmp 0x1404de1f2
jle 0x1404de285
mov r13, qword [rbp - 0x11]
test si, si
mov r8, r11
mov r10, r13
clc
shrd cx, r15w, 0xc6
and r13d, 0x3f
sal r11d, 0xfe
sar r10, 6
clc
xor al, 0xfc
sar al, cl
lea r11, [r13*8]
test r11w, dx
cmc
add r11, r13
not cx
movsx rcx, r9w
mov al, byte [r8 + rdi]
movzx cx, sil
movsxd rcx, r9d
cmove ecx, r13d
inc r9d
mov rcx, qword [r15 + r10*8 + 0xba940]
cmp bp, 0xbea
clc
add rcx, r8
jmp 0x1404de25d
inc r8
cmp sil, 0xa5
mov byte [rcx + r11*8 + 0x3e], al
mov al, 0x36
and ah, 0x6f
btc ax, 0x1c
movsxd rax, r9d
cmp rax, rdx
jl 0x1404de234
xor r11d, r11d
shl cx, cl
add ebx, edx
bswap ecx
shl cx, 0x22
mov dword [rbp - 0x65], ebx
shl ch, cl
test esp, 0x6e3e17
bts rcx, r11
cmp byte [rbp - 0x71], r11b
movzx ecx, r9w
not ch
mov ecx, dword [rsp + 0x40]
jmp 0x1404de323
mov al, byte [rdi]
lea r8, [0x140000000]
mov rcx, qword [r8 + r12*8 + 0xba940]
inc ebx
cmp bp, ax
stc
mov dword [rbp - 0x65], ebx
stc
mov byte [rcx + r14*8 + 0x3e], al
sal ax, 0x49
rol ax, cl
mov rax, qword [r8 + r12*8 + 0xba940]
stc
cmp dx, r8w
or byte [rax + r14*8 + 0x3d], 4
clc
cmp r12b, 0xf2
cmp sp, r10w
cmp byte [rbp - 0x71], dl
jmp 0x1404de2fa
jmp 0x1404de2a6
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x69], eax
mov ecx, dword [rsp + 0x40]
clc
cmp byte [rbp - 0x71], 0
jmp 0x1404de316
jmp 0x1404de323
mov ecx, dword [rsp + 0x40]
cmp byte [rbp - 0x71], r11b
je 0x1404de33d
mov rax, qword [rsp + 0x50]
and dword [rax + 0x3a8], 0xfffffffd
mov eax, r10d
bts ax, r14w
mov rax, qword [rbp - 9]
cmp r10w, 0x7af0
movsd xmm0, qword [rbp - 0x69]
movsd qword [rax], xmm0
stc
mov dword [rax + 8], ecx
stc
mov rcx, qword [rbp + 0x17]
jmp 0x1404de361
xor rcx, rsp
jmp 0x1404de369
call fcn.1404a2014
mov rbx, qword [rsp + 0x140]
add rsp, 0x100
not r13b
pop r15
movzx ebp, r15w
movsx rdi, r14w
pop r14
movsx rsi, dx
pop r13
pop r12
xchg di, bp
mov esi, 0x7b4b08f7
pop rdi
pop rsi
pop rbp
jmp 0x1404de3a4
ret
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x69], eax
btr cx, r9w
mov ecx, dword [rsp + 0x40]
cmc
cmp byte [rbp - 0x71], bl
jmp 0x1404de3c0
jmp 0x1404de323