Function at 0x1404dcbed
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
movzx ax, r13b
mov qword [rsp + 0x18], rbp
movsxd rax, ebx
sets al
bswap ax
push rsi
movsx eax, cx
push rdi
xchg al, al
setbe ah
movzx rax, r15w
push r12
bswap rax
movzx ax, r15b
movsxd rax, r12d
push r14
mov ah, 0x21
movsx ax, r11b
push r15
mov eax, 0x1470
call fcn.140448c6a
sub rsp, rax
mov rax, qword [0x1400b7288]
shld r12, r8, 0x5f
test spl, 0x93
xor rax, rsp
btr r15w, ax
mov qword [rsp + 0x1460], rax
movsxd r10, edx
test rbp, 0x661014c7
cwd
mov rbx, rcx
cbw
sets dh
mov rax, r10
btc r12w, bx
mov r14d, r9d
bt rdi, r12
shl r12b, cl
sar rax, 6
jmp 0x1404dcc88
lea rcx, [0x1400ba940]
xor dl, r12b
btr r12, 0x1d
test cl, r10b
and r10d, 0x3f
setl r12b
and dx, r14w
lea r14, [r14 + r8]
movsx edi, r12w
btr rdx, 0xf0
xchg r12w, r15w
mov r15, r8
shrd di, bx, 5
btr rdx, 0xf5
sub r12w, r14w
mov rdi, r8
bts r12w, si
mov rax, qword [rcx + rax*8]
sbb r12w, 0x19b0
btc rdx, 0xc1
test r10d, 0x15612a7e
lea rdx, [r10 + r10*8]
mov r12, qword [rax + rdx*8 + 0x28]
test r11b, 0x46
xor eax, eax
test r10w, 0x22d1
mov qword [rbx], rax
cmp dil, 0x84
stc
cmp r8, r14
jmp 0x1404dcd0b
mov dword [rbx + 8], eax
jmp 0x1404dcd13
jae 0x1404dced6
lea rax, [rsp + 0x50]
jmp 0x1404dcd23
cmp rdi, r14
jae 0x1404dcd99
movzx ecx, word [rdi]
jmp 0x1404dcd34
add rdi, 2
jmp 0x1404dcd3e
cmp cx, 0xa
jmp 0x1404dcd47
jne 0x1404dcd70
mov edx, 0xd
jmp 0x1404dcd5b
mov word [rax], dx
test spl, 0xf3
clc
add rax, 2
jmp 0x1404dcd70
mov word [rax], cx
add rax, 2
bswap cx
movsx cx, r14b
rol rcx, cl
lea rcx, [rsp + 0x6f8]
stc
cmp rax, rcx
jmp 0x1404dcd93
jb 0x1404dcd23
and qword [rsp + 0x38], 0
add r9b, 0xb1
movzx rcx, bx
lea rcx, [rsp + 0x50]
and qword [rsp + 0x30], 0
lea r8, [rsp + 0x50]
sub rax, rcx
movzx cx, r11b
jmp 0x1404dcdc7
mov dword [rsp + 0x28], 0xd55
mov r9b, al
bts cx, r13w
neg ecx
lea rcx, [rsp + 0x700]
shr r9b, 0xbc
sar rax, 1
btr r9, 0x93
bswap r9w
mov qword [rsp + 0x20], rcx
adc r9b, 0xc3
mov r9d, eax
bt cx, 0x10
btr cx, 0xbb
mov ecx, 0xfde9
cmc
xor edx, edx
call fcn.1404c9d04
mov ebp, eax
cmp esi, 0x621f37f8
jmp 0x1404dce21
test eax, eax
jmp 0x1404dce28
je 0x1404dcece
sub esi, esi
test bpl, 0xd0
test eax, eax
jmp 0x1404dce3b
je 0x1404dceb2
and qword [rsp + 0x20], 0
lea rdx, [rsp + 0x700]
and r9w, r10w
test dh, bl
mov ecx, esi
lea r9, [rsp + 0x40]
sub r8w, 0x75bc
sar r8b, cl
mov r8d, ebp
stc
jmp 0x1404dce71
lea rdx, [rdx + rcx]
test rsi, 0x23116c71
mov rcx, r12
sub r8d, esi
jmp 0x1404dce87
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jmp 0x1404dce94
je 0x1404dcece
add esi, dword [rsp + 0x40]
cmp di, si
test rcx, r10
cmc
cmp esi, ebp
jmp 0x1404dceac
jb 0x1404dce41
mov eax, edi
jmp 0x1404dceb9
sub eax, r15d
clc
mov dword [rbx + 4], eax
test r9w, 0x65d5
cmp rdi, r14
jmp 0x1404dcd13
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbx], eax
mov rax, rbx
rcl cx, cl
sub cl, dh
mov rcx, qword [rsp + 0x1460]
stc
clc
xor rcx, rsp
call fcn.1404a0330
lea r11, [rsp + 0x1470]
movzx r15d, dx
jmp 0x1404dcf01
mov rbx, qword [r11 + 0x30]
jmp 0x1404dcf11
mov rbp, qword [r11 + 0x40]
movsx si, r11b
bswap rdi
mov rsp, r11
xchg r15b, r14b
pop r15
pop r14
setl sil
pop r12
mov di, di
movzx edi, bp
pop rdi
xchg si, si
movzx rsi, sp
pop rsi
jmp 0x1404dcf41
ret