Function at 0x1404da608
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
push rbp
test spl, 0x9e
push rsi
movsx eax, dx
dec bpl
push rdi
movzx si, r9b
push r12
bts r12w, di
push r13
sub ebp, ecx
cmovne ax, dx
push r14
rcr bpl, cl
inc sil
push r15
cwde
cmovge r15w, r10w
movsx ebp, dx
lea rbp, [rsp - 0x27]
sub rsp, 0x100
xchg r13b, r14b
bts r12w, r13w
btr si, bp
mov rax, qword [0x1400b7288]
xadd si, r12w
xor esi, edx
xor rax, rsp
bts r12w, sp
shl r13b, 0xec
add r12d, 0x5b047347
mov qword [rbp + 0x17], rax
movsxd rsi, edx
mov r15, r8
or ax, 0x35a0
movzx r13, di
mov rax, rsi
mov qword [rbp - 9], rcx
movsx r13d, r12w
mov qword [rbp - 0x11], rax
bsf r14d, esi
sub cl, dil
lea rcx, [0x140000000]
btr r14w, 0x27
and eax, 0x3f
bt r12d, ebx
mov r13d, r9d
sub r14b, r9b
ror r14, 0x80
add r12b, r14b
add r13, r8
rcl r14b, 0x5b
mov qword [rbp - 0x21], r8
mov r12, rsi
movsxd r14, ebp
or r14b, r10b
rol r14b, cl
mov qword [rbp - 0x51], r13
sar r12, 6
lea r14, [rax + rax*8]
movzx ax, spl
xchg ah, al
movzx rax, r10w
mov rax, qword [rcx + r12*8 + 0xba940]
mov rax, qword [rax + r14*8 + 0x28]
mov qword [rbp - 0x49], rax
jmp 0x1404da707
call qword [sym.imp.KERNEL32.dll_GetConsoleOutputCP]
xor edx, edx
lea rcx, [rsp + 0x50]
jmp 0x1404da719
mov dword [rbp - 0x59], eax
jmp 0x1404da721
call fcn.1404a31d1
mov rcx, qword [rsp + 0x58]
rol dil, cl
btc bx, 0x4a
rol di, 0x4e
xor r11d, r11d
shl rdi, 0xe8
clc
mov dword [rbp - 0x69], r11d
cmp ah, 0x92
mov ebx, r11d
shl rdi, 0x5d
test rax, 0x393a1828
mov dword [rbp - 0x65], ebx
mov rdi, r15
bsr edx, r13d
mov edx, dword [rcx + 0xc]
mov ecx, r11d
mov dword [rsp + 0x40], ecx
test r14w, r13w
mov dword [rbp - 0x55], edx
cmp sil, bpl
clc
test sil, dil
cmp r15, r13
jmp 0x1404da77d
jae 0x1404daf30
mov rax, rsi
sal rsi, cl
mov rsi, r15
xadd r15w, r15w
xor cl, 0xc9
sar rax, 6
bt r15d, 0xa4
or cl, bpl
setno cl
mov qword [rbp - 0x19], rax
mov cl, byte [rdi]
xadd r15b, r15b
rol r15, cl
stc
mov r15d, 1
mov byte [rsp + 0x44], cl
stc
mov dword [rsp + 0x48], r11d
cmp ebp, r8d
cmp edx, 0xfde9
jmp 0x1404da7cf
jne 0x1404daae9
lea r15, [0x140000000]
movsx rdx, di
shl sil, cl
btr r9d, r13d
mov edx, r11d
rol rsi, cl
btr si, 0x3f
movzx r9, r15w
mov r9, qword [r15 + rax*8 + 0xba940]
bts ax, r11w
mov rsi, r11
rcl ax, cl
rcr ax, cl
sub ax, r12w
lea rax, [r9 + r14*8]
clc
cmp byte [rax + rsi + 0x3e], r11b
je 0x1404da839
inc edx
jmp 0x1404da827
inc rsi
cmp rsi, 5
jmp 0x1404da833
jl 0x1404da815
test rsi, rsi
jmp 0x1404da841
jle 0x1404daa32
mov rax, qword [r15 + r12*8 + 0xba940]
adc r10w, 0x2a4b
movsx ecx, dx
mov r8, qword [rbp - 0x51]
mov r13b, r8b
sub r8, rdi
movzx ecx, byte [rax + r14*8 + 0x3e]
movsx r15d, byte [rcx + r15 + 0xb7d00]
inc r15d
btc r13w, 0x9a
mov r13d, r15d
sub r10b, 0xad
sub r13d, edx
sub r10b, 0x4f
rcl r10b, cl
movsxd r10, r13d
cmp r10, r8
jg 0x1404dad7b
lea rax, [rbp - 1]
shl r8b, cl
bt cx, r9w
mov rdx, r11
movsx ecx, r15w
sub r9, rax
adc ecx, edx
lea r8, [r9 + r14*8]
sete al
lea rcx, [rbp - 1]
xor al, 0x76
sub al, 0x21
add rcx, rdx
dec al
inc rdx
mov al, byte [rcx + r8 + 0x3e]
cmp sp, r13w
jmp 0x1404da8d4
mov byte [rcx], al
test dl, 0x32
jmp 0x1404da8de
cmp rdx, rsi
jl 0x1404da8b6
test r13d, r13d
jmp 0x1404da8ef
jle 0x1404da924
lea rcx, [rbp - 1]
xor edx, r15d
cmp r10, rbx
mov r8, r10
add rcx, rsi
not dx
mov dx, 0x129e
bswap edx
mov rdx, rdi
jmp 0x1404da916
call fcn.1404a222e
sub r11d, r11d
sar r8d, cl
xchg r8b, r8b
mov rdx, r11
lea r8, [0x140000000]
btr cx, r14w
shl ch, cl
mov rcx, qword [r8 + r12*8 + 0xba940]
stc
test r9w, r15w
cmp r11b, 0xf3
add rcx, rdx
jmp 0x1404da94e
inc rdx
mov byte [rcx + r14*8 + 0x3e], r11b
cmp r11, 0xbe47dcc
cmp rdx, rsi
jmp 0x1404da965
jl 0x1404da935
lea rax, [rbp - 1]
jmp 0x1404da97c
mov qword [rbp - 0x41], r11
movzx r8w, bpl
btc r9w, 0x6a
movsx r8, r10w
mov qword [rbp - 0x39], rax
lea r9, [rbp - 0x41]
sub r8d, r8d
movsx r8, di
mov eax, r11d
movzx edx, r8w
lea rdx, [rbp - 0x39]
rol r8w, 0xeb
xor al, sil
setge r8b
cmp r15d, 4
xchg r8b, r8b
movsx r8w, r11b
lea rcx, [rsp + 0x48]
movzx r15d, dx
movsx r15d, r10w
sete al
movsxd r8, r8d
movsx r15, si
movzx r8, r11w
inc eax
mov r8d, eax
cmovne r15w, r15w
mov r15b, bpl
mov r15d, eax
jmp 0x1404da9f1
call fcn.1404e0131
cmp rax, 0xffffffffffffffff
jmp 0x1404da9ff
je 0x1404dab97
lea eax, [r13 - 1]
shld si, r8w, 0x79
cmc
mov r13, qword [rbp - 0x51]
ror sil, cl
shld si, si, 0x1d
rcr sil, cl
movsxd rsi, eax
cmp sil, r11b
add rsi, rdi
jmp 0x1404daa2d
jmp 0x1404dabc9
movzx eax, byte [rdi]
mov rdx, r13
sub rdx, rdi
movzx esi, cx
sub cx, di
movsx rsi, byte [rax + r15 + 0xb7d00]
ror eax, cl
sar ah, 0xe3
lea ecx, [rsi + 1]
ror al, cl
sal ah, cl
sub ah, 0x7f
movsxd rax, ecx
test spl, spl
cmp r12w, dx
jmp 0x1404daa68
cmp rax, rdx
jmp 0x1404daa70
jg 0x1404dade9
cmp ecx, 4
cwde
cdqe
mov qword [rbp - 0x31], r11
setns r9b
mov eax, r11d
not al
setae ch
movzx r9w, r9b
mov qword [rbp - 0x29], rdi
cqo
sete al
lea r9, [rbp - 0x31]
inc rcx
inc eax
lea rdx, [rbp - 0x29]
mov r8d, eax
setno cl
lea rcx, [rsp + 0x48]
movzx rbx, r15w
mov ebx, eax
jmp 0x1404daabd
call fcn.1404e0131
cmp rax, 0xffffffffffffffff
je 0x1404dab97
add rsi, rdi
setge r15b
movsx r15d, r8w
cmovg r15w, dx
mov r15d, ebx
jmp 0x1404daae4
jmp 0x1404dabc9
lea rax, [0x140000000]
rcl dh, 0x66
and dx, r8w
mov rdx, qword [rax + r12*8 + 0xba940]
clc
mov cl, byte [rdx + r14*8 + 0x3d]
test al, r8b
test cl, 4
jmp 0x1404dab10
je 0x1404dab49
mov al, byte [rdx + r14*8 + 0x3e]
clc
and cl, 0xfb
jmp 0x1404dab24
mov byte [rbp + 7], al
mov al, bpl
mov al, byte [rdi]
mov byte [rdx + r14*8 + 0x3d], cl
xchg dl, dh
lea rdx, [rbp + 7]
jmp 0x1404dab3c
mov byte [rbp + 8], al
jmp 0x1404dab44
jmp 0x1404dab71
call fcn.1404a9a25
movzx ecx, byte [rdi]
sub edx, edx
cmp word [rax + rcx*2], dx
jge 0x1404daba0
inc rsi
cmp rsi, r13
jmp 0x1404dab68
jae 0x1404daea1
mov rdx, rdi
mov r8d, 2
movsx rcx, di
movzx ecx, r13w
lea rcx, [rsp + 0x48]
jmp 0x1404dab89
call fcn.140260dee
cmp eax, 0xffffffff
jne 0x1404dabc9
cmp byte [rbp - 0x71], 0
jmp 0x1404dae93
mov r8, r15
movsx rcx, r15w
cwd
movsx dx, r9b
lea rcx, [rsp + 0x48]
mov rdx, rdi
call fcn.140260dee
cmp eax, 0xffffffff
jmp 0x1404dabc3
je 0x1404daf14
mov ecx, dword [rbp - 0x59]
ror dil, cl
rcr r9b, cl
lea rax, [rbp + 0xf]
xchg r8b, dil
btc r9, rsp
shld r8w, r14w, 0xa1
sub ebx, ebx
rcr r8b, 0xe8
bts di, dx
bt di, 0x21
lea r8, [rsp + 0x48]
ror r9b, 0xed
mov qword [rsp + 0x38], rbx
lea rdi, [rsi + 1]
mov r9w, 0x3c34
sar r9d, cl
mov qword [rsp + 0x30], rbx
bts r9w, r10w
movzx r9w, r9b
mov r9d, r15d
mov dword [rsp + 0x28], 5
sub edx, edx
jmp 0x1404dac2d
mov qword [rsp + 0x20], rax
call fcn.1404c83b7
mov esi, eax
cmp dx, 0x15a2
test eax, eax
jmp 0x1404dac45
je 0x1404dafd5
mov rcx, qword [rbp - 0x49]
lea r9, [rsp + 0x4c]
xchg rdx, r8
not dx
movzx r8d, di
mov r8d, eax
mov qword [rsp + 0x20], rbx
lea rdx, [rbp + 0xf]
jmp 0x1404dac6f
call qword [sym.imp.KERNEL32.dll_WriteFile]
sub r11d, r11d
clc
cmc
test eax, eax
jmp 0x1404dac81
je 0x1404dafcc
mov r15d, dword [rsp + 0x40]
adc bh, 0x27
mov ebx, edi
test si, 0x7335
cmp r14b, r10b
test esi, r12d
sub ebx, dword [rbp - 0x21]
add ebx, r15d
mov dword [rbp - 0x65], ebx
cmp r10b, 0xc
test rdx, 0x79de3184
cmp dword [rsp + 0x4c], esi
jmp 0x1404dacb9
jb 0x1404dae8f
cmp byte [rsp + 0x44], 0xa
jmp 0x1404dacc9
jne 0x1404dad5a
mov rcx, qword [rbp - 0x49]
movsx ax, bh
lea eax, [r11 + 0xd]
lea r9, [rsp + 0x4c]
xchg r8b, dl
mov word [rsp + 0x44], ax
movsx dx, r9b
lea r8d, [r11 + 1]
jmp 0x1404dacfa
mov qword [rsp + 0x20], r11
cdq
lea rdx, [rsp + 0x44]
call qword [sym.imp.KERNEL32.dll_WriteFile]
sub r11d, r11d
clc
test eax, eax
jmp 0x1404dad16
je 0x1404daf05
cmp dword [rsp + 0x4c], 1
jmp 0x1404dad26
jb 0x1404dae8f
inc r15d
movzx si, al
not esi
movzx esi, di
inc ebx
bt rsi, 0x8d
seto sil
mov dword [rsp + 0x40], r15d
xor sil, cl
mov dword [rbp - 0x65], ebx
xadd si, si
sar sil, cl
movsx si, spl
mov rsi, rdi
cmp rdi, r13
jae 0x1404daf2b
mov rax, qword [rbp - 0x19]
bswap rdx
cdq
mov edx, dword [rbp - 0x55]
jmp 0x1404dad76
jmp 0x1404da7a7
mov edx, r11d
test r8, r8
jle 0x1404daddc
sub rdi, rsi
lea rbx, [0x140000000]
jmp 0x1404dad9a
mov al, byte [rdi + rsi]
inc edx
mov rcx, qword [rbx + r12*8 + 0xba940]
add rcx, rsi
jmp 0x1404dadaf
inc rsi
stc
clc
cmp al, ah
mov byte [rcx + r14*8 + 0x3e], al
sar ax, 0xf8
shld ax, si, 0xce
movsxd rax, edx
cmp rax, r8
jmp 0x1404dadcf
jl 0x1404dad9a
mov ebx, dword [rbp - 0x65]
cmp r14b, r8b
stc
add ebx, r8d
jmp 0x1404dade4
jmp 0x1404dae85
mov r9d, r11d
clc
test rdx, rdx
jmp 0x1404dadf5
jle 0x1404dae83
mov r13, qword [rbp - 0x11]
mov r8, r11
test r13b, r10b
mov r10, r13
and r13d, 0x3f
mov cx, r8w
shrd r11, r9, 0x77
not al
sar r10, 6
adc al, 0x7f
lea r11, [r13*8]
add r11, r13
mov cx, 0x41f6
mov al, byte [r8 + rdi]
inc ecx
movzx rcx, r11w
inc r9d
movsx cx, r9b
mov rcx, qword [r15 + r10*8 + 0xba940]
jmp 0x1404dae4b
add rcx, r8
jmp 0x1404dae53
inc r8
cmc
cmp r9d, 0x1b2e34e8
mov byte [rcx + r11*8 + 0x3e], al
sub rax, 0x2d885517
movsxd rax, r9d
stc
test dl, 0xcf
cmc
cmp rax, rdx
jmp 0x1404dae7a
jl 0x1404dae2c
sub r11d, r11d
add ebx, edx
mov dword [rbp - 0x65], ebx
xchg ch, cl
btc cx, 0xa3
cmp byte [rbp - 0x71], r11b
mov ecx, dword [rsp + 0x40]
jmp 0x1404dae9c
jmp 0x1404daf34
mov al, byte [rdi]
mov r8b, dil
movsx cx, spl
lea r8, [0x140000000]
setl cl
mov ecx, r13d
movsx cx, r13b
mov rcx, qword [r8 + r12*8 + 0xba940]
inc ebx
test dl, sil
mov dword [rbp - 0x65], ebx
jmp 0x1404daed9
mov byte [rcx + r14*8 + 0x3e], al
mov rax, qword [r8 + r12*8 + 0xba940]
stc
cmp rsp, r12
or byte [rax + r14*8 + 0x3d], 4
cmc
cmp r9d, r15d
test r11w, r8w
cmp byte [rbp - 0x71], dl
jmp 0x1404daf00
jmp 0x1404dae93
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x69], eax
btr ecx, 0x1c
rcr ch, cl
mov ecx, dword [rsp + 0x40]
jmp 0x1404daf1d
cmp byte [rbp - 0x71], 0
jmp 0x1404daf26
jmp 0x1404daf34
mov ecx, dword [rsp + 0x40]
clc
cmp byte [rbp - 0x71], r11b
je 0x1404daf5c
mov rax, qword [rsp + 0x50]
test r14b, al
test dil, 0xa0
jmp 0x1404daf4b
and dword [rax + 0x3a8], 0xfffffffd
bt eax, 0xf4
xor eax, 0x7696d52
stc
mov rax, qword [rbp - 9]
cmc
clc
movsd xmm0, qword [rbp - 0x69]
jmp 0x1404daf6d
movsd qword [rax], xmm0
mov dword [rax + 8], ecx
mov rcx, qword [rbp + 0x17]
clc
xor rcx, rsp
jmp 0x1404daf81
call fcn.14049e6a7
mov rbx, qword [rsp + 0x140]
cmc
sbb di, 0x2b7
neg sil
add rsp, 0x100
pop r15
setb r13b
pop r14
movsx r12, di
movzx di, r12b
movsx bp, r11b
pop r13
pop r12
cmovge di, dx
pop rdi
pop rsi
movsxd rbp, r8d
mov ebp, ecx
xchg ebp, ebp
pop rbp
jmp 0x1404dafcb
ret
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x69], eax
mov ecx, dword [rsp + 0x40]
jmp 0x1404dafdf
cmp byte [rbp - 0x71], bl
jmp 0x1404dafe7
jmp 0x1404daf34