Function at 0x1404d6885
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
movzx eax, dx
mov qword [rsp + 0x18], rbp
movzx ax, r14b
movsx rax, sp
push rsi
nop
push rdi
mov ax, 0x4475
push r12
cwde
push r14
movsx ax, r13b
not ax
movzx eax, dx
push r15
mov eax, 0x1470
jmp 0x1404d68bf
call fcn.140442855
sub rsp, rax
cdqe
sbb bx, ax
mov rax, qword [0x1400b7288]
xor r15b, bpl
ror dil, cl
neg r10b
xor rax, rsp
mov qword [rsp + 0x1460], rax
sub ah, 0x8e
rcr al, cl
not di
movsxd r10, edx
rcr edx, 0xf1
cwd
mov rbx, rcx
xor r12d, esi
xor r12b, 0x4f
mov rax, r10
cqo
rol r12b, cl
bsf r12, r13
mov r14d, r9d
or r15b, sil
sbb edi, r12d
sar rax, 6
shl r15b, 0x5e
seta r12b
cqo
lea rcx, [0x1400ba940]
bsr dx, r11w
xor dx, 0x1a37
and r10d, 0x3f
inc dh
sal di, cl
bts di, r13w
add r14, r8
mov r15, r8
cqo
mov rdi, r8
shl r12w, 0x59
cdq
cmovs r12w, r10w
mov rax, qword [rcx + rax*8]
movzx r12d, bp
lea rdx, [r10 + r10*8]
btc r12w, 0xf7
mov r12, qword [rax + rdx*8 + 0x28]
test r15b, dl
cmp r15w, r11w
cmp r11d, 0x1374122e
xor eax, eax
cmc
test spl, 0xf3
cmp r9b, cl
mov qword [rbx], rax
stc
clc
cmp r8, r14
mov dword [rbx + 8], eax
jmp 0x1404d6998
jae 0x1404d6b61
lea rax, [rsp + 0x50]
cmp rdi, r14
jae 0x1404d6a07
movzx ecx, word [rdi]
add rdi, 2
clc
cmp cx, 0xa
jmp 0x1404d69bd
jne 0x1404d69d5
mov edx, 0xd
mov word [rax], dx
test bl, bh
cmp r9b, 0x43
add rax, 2
mov word [rax], cx
ror cx, cl
shr ch, 0x31
rcl ch, 0x88
add rax, 2
lea rcx, [rsp + 0x6f8]
jmp 0x1404d69f9
cmp rax, rcx
jmp 0x1404d6a01
jb 0x1404d69a3
and qword [rsp + 0x38], 0
movzx r9d, r10w
dec ch
adc ecx, 0x1bdd676d
lea rcx, [rsp + 0x50]
movsx r8w, bl
sar r9w, cl
and qword [rsp + 0x30], 0
add r9d, esp
sub r8w, r15w
btc r8w, cx
lea r8, [rsp + 0x50]
adc r9b, 0x41
btr r9, r9
sub rax, rcx
add cl, 0x4f
rcl r9, 0xd7
mov dword [rsp + 0x28], 0xd55
inc r9
add ecx, 0x8d7258f
lea rcx, [rsp + 0x700]
xadd r9b, r9b
sar rax, 1
mov qword [rsp + 0x20], rcx
stc
add cl, 0x65
sal ch, 0x8f
mov r9d, eax
mov ecx, 0xfde9
cmp bl, r9b
test ebp, r15d
sub edx, edx
jmp 0x1404d6a91
call fcn.1404c368a
mov ebp, eax
cmc
test r13d, 0x2aa70c0e
test eax, eax
je 0x1404d6b56
sub esi, esi
stc
clc
test eax, eax
je 0x1404d6b31
and qword [rsp + 0x20], 0
movzx r8d, bx
movsx dx, r10b
rcr dx, 0xae
lea rdx, [rsp + 0x700]
and cx, r13w
xor cx, 0x2628
mov ecx, esi
bsr r9w, ax
cmovae r9, r9
lea r9, [rsp + 0x40]
bsf r8, r14
mov r8d, ebp
lea rdx, [rdx + rcx]
btr rcx, 0x71
mov cx, r14w
mov rcx, r12
clc
sub r8d, esi
jmp 0x1404d6b08
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jmp 0x1404d6b15
je 0x1404d6b56
add esi, dword [rsp + 0x40]
jmp 0x1404d6b24
cmp esi, ebp
jmp 0x1404d6b2b
jb 0x1404d6ab4
mov eax, edi
test edi, 0x69e82bb3
cmp r8d, 0x33f4167e
sub eax, r15d
mov dword [rbx + 4], eax
cmp bl, 0x90
cmp rdi, r14
jmp 0x1404d6b51
jmp 0x1404d6998
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbx], eax
sar ah, 0xe5
mov rax, rbx
rcr ecx, cl
mov rcx, qword [rsp + 0x1460]
test dl, 0x75
cmc
test dx, r12w
xor rcx, rsp
jmp 0x1404d6b7e
call fcn.140499d06
lea r11, [rsp + 0x1470]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x40]
not r15w
jmp 0x1404d6b9c
mov rsp, r11
movsx rdi, r12w
movsx r14w, r8b
not r15
pop r15
movsx r14d, r8w
movzx r14, dx
pop r14
movsx esi, cx
pop r12
bswap si
pop rdi
pop rsi
jmp 0x1404d6bc6
ret