Function at 0x1404db366
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
push rbp
mov bpl, r12b
push rsi
push rdi
bts rbp, r13
movsxd rbp, ecx
xor bpl, 0xd2
push r12
jmp 0x1404db394
push r13
dec ah
or r12b, 9
push r14
push r15
lea rbp, [rsp - 0x27]
ror r12b, cl
sub r15b, 0x4e
movzx r13w, cl
sub rsp, 0x100
cmc
rcl r14b, cl
mov rax, qword [0x1400b7288]
adc r15b, r13b
xadd r13, rsi
add r14b, r15b
xor rax, rsp
adc r15d, r8d
mov qword [rbp + 0x17], rax
movsxd rsi, edx
cmc
sal r12, cl
movsx eax, ax
mov r15, r8
test r14w, 0x5478
add r13, 0x77aa788c
mov rax, rsi
xchg r13b, r12b
cmovl r13, rbp
xor r12b, 0x5f
mov qword [rbp - 9], rcx
mov qword [rbp - 0x11], rax
add r14w, bx
sbb r14w, 0x658f
lea rcx, [0x140000000]
and eax, 0x3f
bsr r13d, ecx
mov r13d, r9d
adc r12, r10
btr r12w, si
lea r13, [r13 + r8]
sal r12b, cl
sbb r12b, 0x65
mov qword [rbp - 0x21], r8
add r12b, r11b
xchg r14w, r14w
mov r12, rsi
movsx r14d, ax
mov qword [rbp - 0x51], r13
sar r12, 6
seta r14b
movzx r14w, r14b
not r14b
lea r14, [rax + rax*8]
not ah
cmovns ax, bp
mov rax, qword [rcx + r12*8 + 0xba940]
jmp 0x1404db473
mov rax, qword [rax + r14*8 + 0x28]
jmp 0x1404db47d
mov qword [rbp - 0x49], rax
jmp 0x1404db486
call qword [sym.imp.KERNEL32.dll_GetConsoleOutputCP]
sub edx, edx
mov cl, r9b
movsx ecx, bp
lea rcx, [rsp + 0x50]
jmp 0x1404db49e
mov dword [rbp - 0x59], eax
call fcn.1404a43f4
mov rcx, qword [rsp + 0x58]
xor r11d, r11d
dec rbx
mov dword [rbp - 0x69], r11d
adc dh, 0x23
shrd di, si, 0xbb
and rdx, rbp
mov ebx, r11d
rol di, 0x3f
mov dword [rbp - 0x65], ebx
neg dil
mov rdi, r15
mov edx, dword [rcx + 0xc]
mov ecx, r11d
clc
test al, spl
cmp r10b, r13b
mov dword [rsp + 0x40], ecx
mov dword [rbp - 0x55], edx
cmp r15, r13
jmp 0x1404db4ec
jae 0x1404dbcbf
mov rax, rsi
rol sil, 0xdb
mov rsi, r15
and cl, r10b
bts r15d, ecx
sar rax, 6
mov qword [rbp - 0x19], rax
rcl r15b, 0x2c
mov cl, byte [rdi]
mov r15d, 1
test r11w, 0x6f6f
test si, cx
mov byte [rsp + 0x44], cl
cmp bpl, 0xbf
cmc
mov dword [rsp + 0x48], r11d
cmp edx, 0xfde9
jmp 0x1404db539
jne 0x1404db823
lea r15, [0x140000000]
shr sil, 0x39
clc
mov edx, r11d
and sil, sil
mov r9, qword [r15 + rax*8 + 0xba940]
rcr al, cl
mov rsi, r11
jmp 0x1404db566
lea rax, [r9 + r14*8]
cmp byte [rax + rsi + 0x3e], r11b
jmp 0x1404db574
je 0x1404db593
inc edx
jmp 0x1404db581
inc rsi
cmp rsi, 5
jmp 0x1404db58d
jl 0x1404db56a
test rsi, rsi
jle 0x1404db772
mov rax, qword [r15 + r12*8 + 0xba940]
not r10b
mov r8, qword [rbp - 0x51]
bsr cx, r10w
movzx r10, r15w
sub r8, rdi
xchg r10b, r10b
movsx r13w, r11b
mov r10b, bl
movzx ecx, byte [rax + r14*8 + 0x3e]
setno r10b
mov r10, r12
movsx r15d, byte [rcx + r15 + 0xb7d00]
not r13b
movzx r13, dx
inc r15d
add r10b, 0x4b
mov r13d, r15d
dec r10w
stc
movsx r10w, r9b
sub r13d, edx
neg r10b
xadd r10b, r10b
movsxd r10, r13d
cmc
test r11b, r15b
jmp 0x1404db609
cmp r10, r8
jmp 0x1404db611
jg 0x1404dbaf4
lea rax, [rbp - 1]
sar r8b, 0xb9
mov rdx, r11
movsx rcx, di
bswap cx
sub r9, rax
shr al, 0x9a
sub ch, 0x77
shrd cx, bp, 0xa4
lea r8, [r9 + r14*8]
or al, 0x64
lea rcx, [rbp - 1]
adc al, 0xc4
add rcx, rdx
inc rdx
cmc
cmp dh, 0x7f
mov al, byte [rcx + r8 + 0x3e]
mov byte [rcx], al
jmp 0x1404db65d
cmp rdx, rsi
jl 0x1404db63d
test r13d, r13d
jle 0x1404db69c
lea rcx, [rbp - 1]
movsx r8, di
mov r8, r10
shl dh, cl
cwd
or dh, 0xbf
add rcx, rsi
cqo
mov dl, r13b
mov rdx, rdi
jmp 0x1404db691
call fcn.1404a3400
xor r11d, r11d
mov r8b, 0x61
mov rdx, r11
bts rcx, r13
lea r8, [0x140000000]
xadd rcx, rcx
dec ecx
cmp bh, 1
mov rcx, qword [r8 + r12*8 + 0xba940]
add rcx, rdx
jmp 0x1404db6c3
inc rdx
test cl, r10b
mov byte [rcx + r14*8 + 0x3e], r11b
cmp spl, r8b
cmc
cmp rdx, rsi
jmp 0x1404db6da
jl 0x1404db6b3
lea rax, [rbp - 1]
sbb ch, 0xac
clc
mov qword [rbp - 0x41], r11
sar r8b, cl
mov qword [rbp - 0x39], rax
or r9w, bx
lea r9, [rbp - 0x41]
cmc
xor eax, 0x1bec7372
mov eax, r11d
stc
lea rdx, [rbp - 0x39]
shl rcx, cl
cmp r15d, 4
mov al, r14b
lea rcx, [rsp + 0x48]
setno al
mov r8d, r8d
sete al
inc eax
movsx r8d, di
bswap r15w
movsxd r15, r10d
mov r8d, eax
mov r15b, 0x17
movsx r15, r9w
mov r15d, eax
jmp 0x1404db740
call fcn.1404e0ec2
cmp rax, 0xffffffffffffffff
jmp 0x1404db74e
je 0x1404db8d0
lea eax, [r13 - 1]
or esi, 0x761f5baf
mov r13, qword [rbp - 0x51]
movsxd rsi, eax
add rsi, rdi
jmp 0x1404db76d
jmp 0x1404db903
movzx eax, byte [rdi]
sar si, 0xb8
mov rdx, r13
sar cx, cl
sub rdx, rdi
movsx rsi, byte [rax + r15 + 0xb7d00]
cmp dh, 0x9d
inc rcx
lea ecx, [rsi + 1]
movsx eax, di
adc al, 7
movsxd rax, ecx
cmp rax, rdx
jg 0x1404dbb65
cmp ecx, 4
xchg rbx, rax
mov qword [rbp - 0x31], r11
lahf
mov eax, r11d
movzx rbx, r9w
cwd
mov r9d, 0x50f67deb
mov qword [rbp - 0x29], rdi
movsx r8d, di
jmp 0x1404db7cb
sete al
movsxd r9, eax
movzx rbx, r15w
lea r9, [rbp - 0x31]
setne dh
movsxd rcx, r10d
inc eax
lea rdx, [rbp - 0x29]
mov r8d, eax
movsx rcx, dx
lea rcx, [rsp + 0x48]
mov bl, bpl
mov ebx, eax
jmp 0x1404db7fb
call fcn.1404e0ec2
cmp rax, 0xffffffffffffffff
jmp 0x1404db809
je 0x1404db8d0
add rsi, rdi
movsx r15, r10w
mov r15d, ebx
jmp 0x1404db81e
jmp 0x1404db903
lea rax, [0x140000000]
mov rdx, qword [rax + r12*8 + 0xba940]
mov cl, byte [rdx + r14*8 + 0x3d]
cmp di, 0x69de
test cl, 4
jmp 0x1404db844
je 0x1404db87f
mov al, byte [rdx + r14*8 + 0x3e]
stc
and cl, 0xfb
jmp 0x1404db858
mov byte [rbp + 7], al
mov al, dl
mov al, byte [rdi]
jmp 0x1404db864
mov byte [rdx + r14*8 + 0x3d], cl
cmovg dx, r14w
lea rdx, [rbp + 7]
jmp 0x1404db877
mov byte [rbp + 8], al
jmp 0x1404db8b2
call fcn.1404aac06
movzx ecx, byte [rdi]
cmp bh, 0xff
sub edx, edx
test dh, bl
jmp 0x1404db893
cmp word [rax + rcx*2], dx
jmp 0x1404db89c
jge 0x1404db8de
inc rsi
cmc
cmp rsi, r13
jae 0x1404dbc39
mov rdx, rdi
mov r8d, 2
lea rcx, [rsp + 0x48]
call fcn.14012d745
cmp eax, 0xffffffff
jmp 0x1404db8ca
jne 0x1404db903
cmp byte [rbp - 0x71], 0
jmp 0x1404db8d9
jmp 0x1404dbc30
mov r8, r15
lea rcx, [rsp + 0x48]
jmp 0x1404db8ed
mov rdx, rdi
jmp 0x1404db8f5
call fcn.14012d745
cmp eax, 0xffffffff
je 0x1404dbc98
mov ecx, dword [rbp - 0x59]
sbb r9w, r11w
lea rax, [rbp + 0xf]
neg dil
bsf r8d, esp
bts di, ax
xor ebx, ebx
lea r8, [rsp + 0x48]
shld r9d, esp, 0x2a
sub dil, r11b
cmp r13w, r8w
mov qword [rsp + 0x38], rbx
setb dil
movzx r9, r12w
bsf rdi, rdx
lea rdi, [rsi + 1]
sal r9b, cl
mov qword [rsp + 0x30], rbx
mov r9b, al
rcl r9w, 0xb3
and r9w, 0x3a39
mov r9d, r15d
cmp r14w, cx
mov dword [rsp + 0x28], 5
xor edx, edx
jmp 0x1404db96d
mov qword [rsp + 0x20], rax
jmp 0x1404db977
call fcn.1404c90bc
mov esi, eax
test bx, r11w
jmp 0x1404db98c
test eax, eax
jmp 0x1404db993
je 0x1404dbd6e
mov rcx, qword [rbp - 0x49]
cmovbe r8d, edi
movsx r9d, r11w
mov r8b, cl
lea r9, [rsp + 0x4c]
bswap dx
not dx
mov r8d, eax
bswap rdx
movzx edx, r9w
movsx rdx, r12w
mov qword [rsp + 0x20], rbx
lea rdx, [rbp + 0xf]
jmp 0x1404db9cf
call qword [sym.imp.KERNEL32.dll_WriteFile]
xor r11d, r11d
test eax, eax
jmp 0x1404db9df
je 0x1404dbd60
mov r15d, dword [rsp + 0x40]
sbb bl, 0x53
mov ebx, edi
jmp 0x1404db9f4
sub ebx, dword [rbp - 0x21]
add ebx, r15d
clc
cmp rax, 0x7f801c42
mov dword [rbp - 0x65], ebx
test r8d, 0x4d4e60a0
cmp dl, r14b
cmp dword [rsp + 0x4c], esi
jb 0x1404dbc24
cmp byte [rsp + 0x44], 0xa
jmp 0x1404dba23
jne 0x1404dbac6
mov rcx, qword [rbp - 0x49]
not dl
lea eax, [r11 + 0xd]
mov dx, 0x960
lea r9, [rsp + 0x4c]
movsx dx, dh
mov word [rsp + 0x44], ax
movsx rdx, dx
cdq
cmovo r8w, si
lea r8d, [r11 + 1]
movsx rdx, bx
movsx edx, sp
mov qword [rsp + 0x20], r11
xchg dx, dx
bswap rdx
lea rdx, [rsp + 0x44]
call qword [sym.imp.KERNEL32.dll_WriteFile]
xor r11d, r11d
test eax, eax
jmp 0x1404dba7a
je 0x1404dbc8e
cmp dword [rsp + 0x4c], 1
jmp 0x1404dba8a
jb 0x1404dbc24
inc r15d
movzx esi, r11w
movzx rsi, cx
not sil
inc ebx
rcr si, 0xef
bts si, di
bt rsi, rbp
mov dword [rsp + 0x40], r15d
movsx si, spl
rol sil, 0xec
cmp esp, 0x66036594
mov dword [rbp - 0x65], ebx
xor sil, dl
mov rsi, rdi
test r11w, 0xa65
cmp al, r11b
cmp rdi, r13
jmp 0x1404dbada
jae 0x1404dbcae
mov rax, qword [rbp - 0x19]
cdq
cqo
mov edx, dword [rbp - 0x55]
jmp 0x1404dbaef
jmp 0x1404db50f
mov edx, r11d
test r8, r8
jmp 0x1404dbaff
jle 0x1404dbb58
sub rdi, rsi
mov al, 0xae
lea rbx, [0x140000000]
bswap cx
mov cx, 0x7a44
mov al, byte [rdi + rsi]
movsx cx, bpl
movsxd rcx, eax
mov cl, 0x38
inc edx
bt ecx, 0xcb
xor ch, 0xdb
mov rcx, qword [rbx + r12*8 + 0xba940]
stc
clc
add rcx, rsi
inc rsi
clc
mov byte [rcx + r14*8 + 0x3e], al
movsxd rax, edx
cmp rax, r8
jmp 0x1404dbb4f
jl 0x1404dbb18
mov ebx, dword [rbp - 0x65]
add ebx, r8d
jmp 0x1404dbb60
jmp 0x1404dbc1c
mov r9d, r11d
test bp, r11w
test rdx, rdx
jmp 0x1404dbb74
jle 0x1404dbc0e
mov r13, qword [rbp - 0x11]
or r8d, 0x38265003
mov r8, r11
movsx r11w, r8b
mov r10, r13
setae r11b
cmp r10w, r13w
sar cl, cl
and r13d, 0x3f
bsr r11w, r15w
sar r10, 6
lea r11, [r13*8]
sbb al, r13b
add r11, r13
movsx rcx, r12w
mov cl, r8b
mov al, byte [r8 + rdi]
setp cl
movsxd rcx, r11d
inc r9d
mov rcx, qword [r15 + r10*8 + 0xba940]
clc
cmp bp, 0x2ea1
cmp r14, rsi
add rcx, r8
jmp 0x1404dbbe2
inc r8
mov byte [rcx + r11*8 + 0x3e], al
rcr eax, cl
movsxd rax, r9d
cmc
test dil, r15b
clc
cmp rax, rdx
jmp 0x1404dbbfc
jl 0x1404dbbbc
sub r11d, r11d
movsx rcx, ax
bsr cx, r8w
add ebx, edx
btc rcx, r8
bsr cx, r10w
test r9, rbx
mov dword [rbp - 0x65], ebx
bts cx, r9w
cmp byte [rbp - 0x71], r11b
jmp 0x1404dbc30
mov ecx, dword [rsp + 0x40]
jmp 0x1404dbcc8
mov al, byte [rdi]
mov r8w, 0x75d
movzx rcx, di
lea r8, [0x140000000]
mov ecx, ebx
mov cl, 0x73
mov rcx, qword [r8 + r12*8 + 0xba940]
jmp 0x1404dbc5c
inc ebx
mov dword [rbp - 0x65], ebx
test di, 0x5466
clc
mov byte [rcx + r14*8 + 0x3e], al
setne al
mov rax, qword [r8 + r12*8 + 0xba940]
test r15b, 0xe6
or byte [rax + r14*8 + 0x3d], 4
cmp byte [rbp - 0x71], dl
jmp 0x1404dbc89
jmp 0x1404dbc30
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x69], eax
clc
mov ecx, dword [rsp + 0x40]
test r8b, 0xa0
cmp byte [rbp - 0x71], 0
jmp 0x1404dbca9
jmp 0x1404dbcc8
mov ecx, dword [rsp + 0x40]
clc
test r14d, 0x18f979cd
jmp 0x1404dbcbf
cmp byte [rbp - 0x71], r11b
jmp 0x1404dbcc8
je 0x1404dbcde
mov rax, qword [rsp + 0x50]
clc
and dword [rax + 0x3a8], 0xfffffffd
shl rax, cl
mov rax, qword [rbp - 9]
movsd xmm0, qword [rbp - 0x69]
test bx, 0xb62
stc
cmp r10b, dl
movsd qword [rax], xmm0
jmp 0x1404dbcfd
mov dword [rax + 8], ecx
sal rcx, 0xf0
mov rcx, qword [rbp + 0x17]
cmc
cmp bx, 0x608f
jmp 0x1404dbd13
xor rcx, rsp
jmp 0x1404dbd1b
call fcn.14049f715
mov rbx, qword [rsp + 0x140]
add rsp, 0x100
movsx r15d, r11w
pop r15
not r12b
movzx r13, r11w
movsx r13d, r9w
pop r14
pop r13
movsx r12d, r13w
movsx si, r11b
movsxd rsi, edi
pop r12
movzx si, r15b
pop rdi
pop rsi
pop rbp
jmp 0x1404dbd5f
ret
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x69], eax
shld rcx, rsi, 0x35
mov ecx, dword [rsp + 0x40]
cmp ebx, 0x44562b26
stc
cmp byte [rbp - 0x71], bl
jmp 0x1404dbcc8