Function at 0x1404907b1
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
stc
cbw
push rbp
push rsi
mov ah, 0x46
push rdi
push r12
ror bp, 0xbe
shr r12w, cl
push r13
shr si, 0x61
clc
push r14
push r15
mov r13b, 0x73
lea rbp, [rsp - 0x27]
sub rsp, 0x100
add ax, r9w
rcl r15w, 0x6d
bt r14w, 0x4e
mov rax, qword [0x1400b6278]
sub sil, 6
xor rax, rsp
adc r12b, 0x83
mov qword [rbp + 0x17], rax
and r12b, cl
movsxd rsi, edx
mov r15, r8
clc
mov rax, rsi
mov qword [rbp - 9], rcx
shr r14b, cl
mov qword [rbp - 0x11], rax
stc
xadd r13b, cl
sbb r12, rax
lea rcx, [0x140004000]
test ch, 0x19
bt r14w, r10w
and eax, 0x3f
mov r13d, r9d
sbb r12b, r10b
add r13, r8
not r12w
ror r14w, cl
mov r12d, 0x6691600
mov qword [rbp - 0x21], r8
mov r12, rsi
mov r14b, r12b
rcr r14, 0xed
mov qword [rbp - 0x51], r13
shr r14b, 0x8c
sar r12, 6
movsx r14d, r10w
lea r14, [rax + rax*8]
mov rax, qword [rcx + r12*8 + 0xb5aa0]
jmp 0x140490880
mov rax, qword [rax + r14*8 + 0x28]
jmp 0x14049088a
mov qword [rbp - 0x49], rax
jmp 0x140490893
call qword [sym.imp.KERNEL32.dll_GetConsoleOutputCP]
xor edx, edx
bswap cx
mov ch, 0x3e
not ecx
lea rcx, [rsp + 0x50]
jmp 0x1404908ad
mov dword [rbp - 0x59], eax
jmp 0x1404908b5
call fcn.14045aa1f
mov rcx, qword [rsp + 0x58]
mov bl, 0x66
xor r11d, r11d
mov dword [rbp - 0x69], r11d
rcr rbx, cl
inc bl
mov ebx, r11d
movsxd rdx, eax
movzx dx, dh
mov dword [rbp - 0x65], ebx
btr edi, 0x9a
mov rdi, r15
mov edx, dword [rcx + 0xc]
bts rcx, rdx
cmc
not cx
mov ecx, r11d
stc
cmp cx, 0x6c26
mov dword [rsp + 0x40], ecx
mov dword [rbp - 0x55], edx
cmp r15, r13
jmp 0x140490904
jae 0x14049108d
mov rax, rsi
dec cl
mov rsi, r15
sar rax, 6
mov qword [rbp - 0x19], rax
or cl, 0xff
movsx r15w, r9b
mov cl, byte [rdi]
rol r15b, cl
shl r15w, cl
mov r15d, 1
test r15b, 0xb9
mov byte [rsp + 0x44], cl
jmp 0x14049093e
mov dword [rsp + 0x48], r11d
cmc
cmp ebp, 0x66745c26
clc
cmp edx, 0xfde9
jmp 0x140490956
jne 0x140490c29
lea r15, [0x140004000]
mov edx, r11d
or sil, 0x87
btr r9, 0x83
mov r9, qword [r15 + rax*8 + 0xb5aa0]
cbw
mov rsi, r11
xadd ax, ax
lea rax, [r9 + r14*8]
stc
cmp byte [rax + rsi + 0x3e], r11b
je 0x1404909a5
inc edx
inc rsi
cmp bpl, r14b
test ecx, r8d
cmp rsi, 5
jl 0x140490985
test rsi, rsi
jmp 0x1404909ad
jle 0x140490b71
mov rax, qword [r15 + r12*8 + 0xb5aa0]
shld r13d, r14d, 0x9b
bts ecx, r8d
mov r8, qword [rbp - 0x51]
sar r13, cl
ror r10b, 0x15
sub r8, rdi
movsxd r10, r14d
bswap r13w
movzx ecx, byte [rax + r14*8 + 0x3e]
movsx r10w, r11b
movsx r15d, byte [rcx + r15 + 0xb2d00]
movsx r13, cx
cmovns r13, rbx
bswap r13w
inc r15d
shr r13b, cl
shl r13b, 0x24
mov r13d, r15d
sub r13d, edx
movsxd r10, r13d
stc
cmc
cmp r10, r8
jmp 0x140490a16
jg 0x140490edc
lea rax, [rbp - 1]
mov rdx, r11
movsxd rcx, r10d
shl r8b, cl
bt cx, 0xab
sub r9, rax
lea r8, [r9 + r14*8]
rol cl, 0xc5
dec ecx
lea rcx, [rbp - 1]
add rcx, rdx
not al
inc rdx
mov al, r11b
mov al, byte [rcx + r8 + 0x3e]
test esi, 0x12646841
mov byte [rcx], al
jmp 0x140490a5b
cmp rdx, rsi
jl 0x140490a3a
test r13d, r13d
jmp 0x140490a6c
jle 0x140490a98
lea rcx, [rbp - 1]
cmp cl, 0x8e
mov r8, r10
add rcx, rsi
cdq
mov dl, cl
cmovns rdx, rcx
mov rdx, rdi
call fcn.140459a26
sub r11d, r11d
sbb dh, 0xc5
xor r8b, 0xec
mov rdx, r11
cmovns r8d, ebp
movsx r8d, bx
lea r8, [0x140004000]
mov rcx, qword [r8 + r12*8 + 0xb5aa0]
cmp dl, bh
add rcx, rdx
jmp 0x140490abc
inc rdx
mov byte [rcx + r14*8 + 0x3e], r11b
cmp r13b, dl
cmp rdx, rsi
jmp 0x140490acf
jl 0x140490aaa
lea rax, [rbp - 1]
or dh, 0x2c
mov qword [rbp - 0x41], r11
movsx r8d, r9w
mov qword [rbp - 0x39], rax
bts r9w, dx
neg r9b
lea r9, [rbp - 0x41]
mov eax, r11d
cmc
lea rdx, [rbp - 0x39]
cmovae cx, dx
cmp r15d, 4
mov r8w, 0x71bc
lea rcx, [rsp + 0x48]
bswap r8w
sete al
cmovnp r8d, edi
inc eax
mov r8d, eax
jmp 0x140490b23
mov r15d, eax
jmp 0x140490b2b
call fcn.140496217
cmp rax, 0xffffffffffffffff
jmp 0x140490b39
je 0x140490cea
lea eax, [r13 - 1]
clc
or sil, 0x7c
mov r13, qword [rbp - 0x51]
bts rsi, rdi
movzx esi, r10w
test r12, 0x63f8620f
movsxd rsi, eax
cmc
jmp 0x140490b64
add rsi, rdi
jmp 0x140490b6c
jmp 0x140490d24
movzx eax, byte [rdi]
sar cl, 0xf7
test dh, 0x69
or sil, r11b
mov rdx, r13
sal sil, cl
sub rdx, rdi
bts cx, r11w
adc sil, r12b
movsx rsi, byte [rax + r15 + 0xb2d00]
lea ecx, [rsi + 1]
movsxd rax, ecx
clc
cmp rax, rdx
jmp 0x140490ba6
jg 0x140490f4f
cmp ecx, 4
mov qword [rbp - 0x31], r11
mov edx, 0x114717b6
mov eax, r11d
xchg dh, ch
cqo
mov qword [rbp - 0x29], rdi
cdq
sete al
dec r9
movsx ebx, r14w
lea r9, [rbp - 0x31]
xchg ch, bl
inc eax
movzx bx, sil
mov r8b, r11b
movzx ecx, dx
lea rdx, [rbp - 0x29]
movsx r8d, r12w
mov r8d, eax
movsx cx, r11b
movzx ebx, di
lea rcx, [rsp + 0x48]
movzx bx, ch
setp bh
mov ebx, eax
jmp 0x140490c07
call fcn.140496217
cmp rax, 0xffffffffffffffff
jmp 0x140490c15
je 0x140490cea
add rsi, rdi
xchg r15b, r15b
mov r15d, ebx
jmp 0x140490d24
lea rax, [0x140004000]
movzx edx, r14w
and cl, 0xf4
xchg dl, cl
mov rdx, qword [rax + r12*8 + 0xb5aa0]
xor cl, bpl
rol cl, 0x10
xchg cl, cl
mov cl, byte [rdx + r14*8 + 0x3d]
test r15w, r13w
clc
test cl, 4
jmp 0x140490c5b
je 0x140490c8f
mov al, byte [rdx + r14*8 + 0x3e]
jmp 0x140490c6c
and cl, 0xfb
mov byte [rbp + 7], al
mov al, byte [rdi]
mov byte [rdx + r14*8 + 0x3d], cl
jmp 0x140490c7e
lea rdx, [rbp + 7]
jmp 0x140490c87
mov byte [rbp + 8], al
jmp 0x140490cc4
call fcn.14046100a
movzx ecx, byte [rdi]
sub edx, edx
cmp word [rax + rcx*2], dx
jge 0x140490cf8
inc rsi
cmp r13, 0x687d312f
jmp 0x140490cb5
cmp rsi, r13
jae 0x14049101e
mov rdx, rdi
xchg r8, rcx
mov r8d, 2
movzx ecx, dx
lea rcx, [rsp + 0x48]
jmp 0x140490cd7
call fcn.1401dbbc8
cmp eax, 0xffffffff
jmp 0x140490ce4
jne 0x140490d24
cmp byte [rbp - 0x71], 0
jmp 0x140490cf3
jmp 0x140491010
mov r8, r15
movzx edx, ax
not ch
lea rcx, [rsp + 0x48]
movzx rdx, cx
mov rdx, rdi
jmp 0x140490d11
call fcn.1401dbbc8
cmp eax, 0xffffffff
jmp 0x140490d1e
je 0x140491070
mov ecx, dword [rbp - 0x59]
lea rax, [rbp + 0xf]
mov edi, r14d
sub ebx, ebx
cmc
btc rdi, r15
lea r8, [rsp + 0x48]
bts di, r11w
movzx r9d, r13w
rcl dil, 0xeb
mov qword [rsp + 0x38], rbx
or edi, 0x4ada035d
sal rdi, cl
rol r9b, cl
lea rdi, [rsi + 1]
cmp sil, r8b
shld r9d, r8d, 0xe4
adc r9b, 0xad
mov qword [rsp + 0x30], rbx
mov r9d, r15d
cmc
mov dword [rsp + 0x28], 5
xor edx, edx
jmp 0x140490d80
mov qword [rsp + 0x20], rax
jmp 0x140490d8a
call fcn.14047e71f
mov esi, eax
cmp bh, 0xe7
cmp sp, sp
test r8b, 0xf7
test eax, eax
jmp 0x140490da2
je 0x140491154
mov rcx, qword [rbp - 0x49]
lea r9, [rsp + 0x4c]
xchg r8, rdx
movsx dx, r14b
mov r8d, eax
movzx dx, r9b
mov qword [rsp + 0x20], rbx
lea rdx, [rbp + 0xf]
jmp 0x140490dcf
call qword [sym.imp.KERNEL32.dll_WriteFile]
sub r11d, r11d
test dl, 0x81
clc
test eax, eax
jmp 0x140490de3
je 0x14049114a
mov r15d, dword [rsp + 0x40]
mov ebx, edi
test r14, 0x2f513a1b
sub ebx, dword [rbp - 0x21]
stc
test r14d, 0x4d0104e6
add ebx, r15d
cmp r11w, 0x6ae2
clc
mov dword [rbp - 0x65], ebx
jmp 0x140490e17
cmp dword [rsp + 0x4c], esi
jb 0x140491006
cmp byte [rsp + 0x44], 0xa
jmp 0x140490e2b
jne 0x140490eba
mov rcx, qword [rbp - 0x49]
cqo
movsx r9, sp
cwde
lea eax, [r11 + 0xd]
movzx rdx, di
not r8b
cmovns r9, r9
lea r9, [rsp + 0x4c]
movzx edx, bp
setl dl
movsxd rdx, esp
mov word [rsp + 0x44], ax
mov r8w, 0x3952
movsxd rdx, ebp
lea r8d, [r11 + 1]
mov qword [rsp + 0x20], r11
movsxd rdx, esp
movsx edx, r11w
not edx
lea rdx, [rsp + 0x44]
jmp 0x140490e82
call qword [sym.imp.KERNEL32.dll_WriteFile]
sub r11d, r11d
test r14d, ebp
cmc
test eax, eax
je 0x140491061
cmp dword [rsp + 0x4c], 1
jmp 0x140490ea1
jb 0x140491006
inc r15d
inc ebx
shrd rsi, r15, 0xe3
mov dword [rsp + 0x40], r15d
mov dword [rbp - 0x65], ebx
cmc
mov rsi, rdi
cmp rdi, r13
jmp 0x140490ec5
jae 0x140491084
mov rax, qword [rbp - 0x19]
mov edx, dword [rbp - 0x55]
jmp 0x140490ed7
jmp 0x140490922
mov edx, r11d
cmc
test r8, r8
jle 0x140490f42
sub rdi, rsi
inc al
lea rbx, [0x140004000]
mov al, byte [rdi + rsi]
movzx rcx, si
movzx cx, r13b
cmovno ecx, esp
inc edx
mov rcx, qword [rbx + r12*8 + 0xb5aa0]
cmc
add rcx, rsi
jmp 0x140490f17
inc rsi
mov byte [rcx + r14*8 + 0x3e], al
movsxd rax, edx
test r10b, r11b
test r15b, 0x73
cmp rax, r8
jmp 0x140490f31
jl 0x140490ef5
mov ebx, dword [rbp - 0x65]
test rsp, r10
jmp 0x140490f42
add ebx, r8d
jmp 0x140490f4a
jmp 0x140491001
mov r9d, r11d
stc
clc
test r12b, 0xf8
test rdx, rdx
jmp 0x140490f60
jle 0x140490ffa
mov r13, qword [rbp - 0x11]
test r11w, r9w
bsr r10d, ecx
mov r8, r11
mov r10, r13
and r11b, r15b
and r13d, 0x3f
mov r11, rcx
shl cx, cl
sar r10, 6
inc al
lea r11, [r13*8]
cmp r14w, cx
bt ecx, 0xf6
adc al, 0xe6
add r11, r13
bswap rcx
mov al, byte [r8 + rdi]
movsx cx, bh
movsx ecx, r12w
inc r9d
sbb rcx, 0x6690257a
add cl, bl
movzx ecx, r11w
mov rcx, qword [r15 + r10*8 + 0xb5aa0]
add rcx, r8
jmp 0x140490fcf
inc r8
mov byte [rcx + r11*8 + 0x3e], al
and al, 0x6f
movsxd rax, r9d
stc
cmp rax, rdx
jmp 0x140490fe5
jl 0x140490fa3
xor r11d, r11d
sar ch, cl
btc cx, r15w
jmp 0x140490ffa
add ebx, edx
clc
btc rcx, r9
mov dword [rbp - 0x65], ebx
sar ch, cl
cmp byte [rbp - 0x71], r11b
movsxd rcx, ecx
setg ch
mov ecx, dword [rsp + 0x40]
jmp 0x140491019
jmp 0x140491096
mov al, byte [rdi]
lea r8, [0x140004000]
movsxd rcx, r15d
mov rcx, qword [r8 + r12*8 + 0xb5aa0]
inc ebx
mov dword [rbp - 0x65], ebx
jmp 0x14049103d
mov byte [rcx + r14*8 + 0x3e], al
mov rax, qword [r8 + r12*8 + 0xb5aa0]
cmc
or byte [rax + r14*8 + 0x3d], 4
test sp, di
cmp byte [rbp - 0x71], dl
jmp 0x14049105c
jmp 0x140491010
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x69], eax
test bpl, dil
ror cl, 0xde
mov ecx, dword [rsp + 0x40]
clc
stc
cmp byte [rbp - 0x71], 0
jmp 0x14049107f
jmp 0x140491096
mov ecx, dword [rsp + 0x40]
test bp, r11w
stc
cmp byte [rbp - 0x71], r11b
jmp 0x140491096
je 0x1404910b1
mov rax, qword [rsp + 0x50]
cmp sil, bpl
and dword [rax + 0x3a8], 0xfffffffd
movzx eax, bx
or al, r13b
mov rax, qword [rbp - 9]
cmc
jmp 0x1404910bb
movsd xmm0, qword [rbp - 0x69]
test sil, 0x39
cmc
movsd qword [rax], xmm0
mov dword [rax + 8], ecx
btc ecx, ebx
cmp r10w, dx
mov rcx, qword [rbp + 0x17]
cmp r9b, 0xa
xor rcx, rsp
jmp 0x1404910e3
call fcn.140454a7f
mov rbx, qword [rsp + 0x140]
sbb r13b, 0x6d
movsx rdi, r14w
add rsp, 0x100
movzx r12, r11w
movsx r12w, spl
pop r15
cmovge r14w, r14w
pop r14
not sil
pop r13
setle r12b
pop r12
movsxd rdi, ebp
xchg bpl, bpl
movzx bp, r11b
pop rdi
movsx ebp, dx
mov si, 0x135
movsx bp, bpl
pop rsi
setg bpl
movzx bp, r11b
mov ebp, 0x6432566f
pop rbp
jmp 0x140491149
ret
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x69], eax
cmc
mov ecx, dword [rsp + 0x40]
cmp byte [rbp - 0x71], bl
jmp 0x140491160
jmp 0x140491096