Function at 0x1404dd496
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
test cl, 0xc0
rcl bpl, cl
movsx ebp, sp
push rsi
movsx ebp, r10w
push rdi
movzx bp, al
push r12
push r13
push r14
bsr r12d, r12d
neg r14b
bts r12w, r10w
push r15
and bp, ax
cmp di, 0x2492
mov rbp, rsp
rcr di, cl
sub rsp, 0x60
bts edi, r12d
sub ebx, ebx
bswap r14w
sar dil, cl
mov r14d, r8d
bsf edi, r15d
movsxd r12, ecx
sar edi, cl
bsr di, r13w
jmp 0x1404dd4f8
mov rdi, rdx
cmp r9d, esi
test sp, 0x1d22
test cl, al
test r8d, r8d
je 0x1404dd9df
test rdx, rdx
jmp 0x1404dd516
jne 0x1404dd545
call fcn.1404b780a
mov dword [rax], ebx
call fcn.1404b77d4
mov dword [rax], 0x16
jmp 0x1404dd533
call fcn.1404b8499
or eax, 0xffffffff
jmp 0x1404dd540
jmp 0x1404dd9e1
mov rax, r12
lea rcx, [0x1400ba940]
sbb r13d, 0x7eb24534
and eax, 0x3f
not r13
or r13w, sp
mov r13, r12
ror rsi, 0xab
sar r13, 6
or r15b, 0xb1
btr esi, edx
movzx si, r10b
lea r15, [rax + rax*8]
bts esi, esi
movsx si, bl
mov rcx, qword [rcx + r13*8]
rol al, cl
movsx esi, byte [rcx + r15*8 + 0x39]
movsx rax, r10w
sar ah, 0xe6
lea eax, [rsi - 1]
cmp al, 1
jmp 0x1404dd59f
ja 0x1404dd5bf
mov eax, r14d
jmp 0x1404dd5b0
not eax
test al, 1
jmp 0x1404dd5b9
je 0x1404dd51c
test byte [rcx + r15*8 + 0x38], 0x20
jmp 0x1404dd5ca
je 0x1404dd5e8
sub edx, edx
xchg r8d, ecx
mov ecx, r12d
mov r8b, 0xc2
movsx r8d, r8w
lea r8d, [rdx + 2]
call fcn.14027c708
mov ecx, r12d
jmp 0x1404dd5f0
mov qword [rbp - 0x20], rbx
call fcn.1404e3539
test eax, eax
je 0x1404dd7bf
lea rax, [0x1400ba940]
mov rax, qword [rax + r13*8]
jmp 0x1404dd611
cmp byte [rax + r15*8 + 0x38], bl
jmp 0x1404dd61b
jge 0x1404dd7bf
call fcn.1404cba92
mov rcx, qword [rax + 0x90]
cmp qword [rcx + 0x138], rbx
jne 0x1404dd661
lea rax, [0x1400ba940]
jmp 0x1404dd646
mov rax, qword [rax + r13*8]
test r12b, 0xb4
test r9b, r9b
cmp byte [rax + r15*8 + 0x39], bl
jmp 0x1404dd65b
je 0x1404dd7bf
lea rax, [0x1400ba940]
mov rcx, qword [rax + r13*8]
lea rdx, [rbp - 0x10]
jmp 0x1404dd675
mov rcx, qword [rcx + r15*8 + 0x28]
jmp 0x1404dd67f
call qword [sym.imp.KERNEL32.dll_GetConsoleMode]
test eax, eax
jmp 0x1404dd68c
je 0x1404dd7bf
test sil, sil
jmp 0x1404dd69a
je 0x1404dd784
dec sil
cmp sil, 1
jmp 0x1404dd6ac
ja 0x1404dd910
lea r12, [rdi + r14]
bts r14w, bp
mov qword [rbp - 0x30], rbx
sar r14d, 0xee
mov r14, rdi
jmp 0x1404dd6cb
cmp rdi, r12
jmp 0x1404dd6d3
jae 0x1404dd8f7
mov esi, dword [rbp - 0x2c]
lahf
movzx eax, word [r14]
movzx ecx, ax
jmp 0x1404dd6e9
mov word [rbp - 0x10], ax
jmp 0x1404dd6f2
call fcn.1404e7d18
movzx ecx, word [rbp - 0x10]
stc
test r11w, dx
cmp ax, cx
jmp 0x1404dd708
jne 0x1404dd771
add esi, 2
mov dword [rbp - 0x2c], esi
cmp cx, 0xa
jne 0x1404dd751
mov ecx, 0xd
jmp 0x1404dd728
call fcn.1404e7d18
mov ecx, 0xd
test dh, 0x11
stc
cmp ax, cx
jmp 0x1404dd73e
jne 0x1404dd771
inc esi
jmp 0x1404dd74b
mov dword [rbp - 0x2c], esi
inc ebx
stc
add r14, 2
jmp 0x1404dd75e
cmp r14, r12
jmp 0x1404dd766
jae 0x1404dd8f7
jmp 0x1404dd6dd
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x30], eax
jmp 0x1404dd77f
jmp 0x1404dd8f7
mov r9d, r14d
movsx r8, r12w
movsx cx, sil
lea rcx, [rbp - 0x30]
bswap edx
xchg rdx, rdx
mov r8, rdi
movsxd rdx, ecx
cwd
mov edx, r12d
jmp 0x1404dd7a9
call fcn.1404dda47
movsd xmm0, qword [rax]
mov ebx, dword [rax + 8]
jmp 0x1404dd7ba
jmp 0x1404dd901
lea rax, [0x1400ba940]
sar ch, 0x7c
add ecx, 0x1817281b
or cx, si
mov rcx, qword [rax + r13*8]
cmp r14, rbp
cmc
cmp byte [rcx + r15*8 + 0x38], bl
jmp 0x1404dd7e4
jge 0x1404dd895
mov ecx, esi
cmp r13b, r13b
test sil, sil
je 0x1404dd86f
sub ecx, 1
jmp 0x1404dd800
je 0x1404dd842
cmp ecx, 1
jmp 0x1404dd80e
jne 0x1404dd910
mov r9d, r14d
cdq
mov dx, 0x47c5
xchg r8d, ecx
lea rcx, [rbp - 0x30]
mov r8, rdi
not dx
cqo
jmp 0x1404dd830
mov edx, r12d
jmp 0x1404dd838
call fcn.1404de618
jmp 0x1404dd7ae
mov r9d, r14d
setns dl
movzx dx, r11b
xchg dx, cx
lea rcx, [rbp - 0x30]
seta r8b
movsxd rdx, esi
mov r8, rdi
movzx edx, r13w
mov edx, r12d
call fcn.1404de884
jmp 0x1404dd7ae
mov r9d, r14d
movsxd rdx, edi
cdq
lea rcx, [rbp - 0x30]
xchg r8d, r8d
cdq
mov r8, rdi
cqo
mov edx, r12d
jmp 0x1404dd88b
call fcn.1404de3c5
jmp 0x1404dd7ae
mov rcx, qword [rcx + r15*8 + 0x28]
rol edx, cl
jmp 0x1404dd8a1
lea r9, [rbp - 0x2c]
btc r8, 0x42
sub eax, eax
dec r8w
mov r8d, r14d
cmc
and qword [rsp + 0x20], rax
setle dh
mov rdx, rdi
jmp 0x1404dd8c4
mov qword [rbp - 0x30], rax
jmp 0x1404dd8cd
mov dword [rbp - 0x28], eax
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jmp 0x1404dd8dd
jne 0x1404dd8f4
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x30], eax
btc bx, 0x93
and ah, 0x37
mov ebx, dword [rbp - 0x28]
movsd xmm0, qword [rbp - 0x30]
mov ah, 0xae
sub al, 0xbd
movsd qword [rbp - 0x20], xmm0
btr eax, r14d
test ecx, r14d
rcr al, 0x6c
mov rax, qword [rbp - 0x20]
test bpl, dil
clc
shr rax, 0x20
cmp r10w, 0xc09
test eax, eax
jmp 0x1404dd929
jne 0x1404dd9d1
mov eax, dword [rbp - 0x20]
test eax, eax
jmp 0x1404dd939
je 0x1404dd984
cmp eax, 5
jmp 0x1404dd947
jne 0x1404dd972
call fcn.1404b77d4
mov dword [rax], 9
jmp 0x1404dd95d
call fcn.1404b780a
mov dword [rax], 5
jmp 0x1404dd96d
jmp 0x1404dd538
mov ecx, dword [rbp - 0x20]
jmp 0x1404dd97a
call fcn.1404b7844
jmp 0x1404dd538
lea rax, [0x1400ba940]
cmc
cmp spl, 0x71
mov rax, qword [rax + r13*8]
cmc
test byte [rax + r15*8 + 0x38], 0x40
jmp 0x1404dd9a0
je 0x1404dd9af
cmp byte [rdi], 0x1a
je 0x1404dd9df
call fcn.1404b77d4
mov dword [rax], 0x1c
jmp 0x1404dd9bf
call fcn.1404b780a
and dword [rax], 0
jmp 0x1404dd9cc
jmp 0x1404dd538
mov eax, dword [rbp - 0x1c]
cmp cl, 0x9d
stc
sub eax, ebx
jmp 0x1404dd9e1
sub eax, eax
mov rbx, qword [rsp + 0xb8]
add rsp, 0x60
cmovae r15d, esp
xchg dil, bpl
pop r15
setno dil
movzx bp, r15b
xchg dil, r12b
pop r14
mov bp, r10w
jmp 0x1404dda0d
pop r13
movsx r12, r15w
movzx bp, bl
pop r12
movzx bp, sil
setbe bpl
pop rdi
not sil
jmp 0x1404dda30
pop rsi
bswap bp
mov rbp, 0x55d022a6
cmovne bp, r11w
pop rbp
jmp 0x1404dda46
ret