Function at 0x1404dd8e9
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
push rbp
movzx ax, r8b
xchg rbp, rax
push rsi
bts bp, bx
push rdi
setns bpl
push r12
sub r12b, r13b
shl r12w, 0x5f
adc bp, 0x3f21
push r13
or si, 0x43c4
adc ax, r12w
movzx r12w, al
push r14
bt bp, 0x58
push r15
xor bp, 0x79ef
cmc
or al, r9b
lea rbp, [rsp - 0x27]
shl r15b, cl
sub rsp, 0x100
or r13b, r14b
mov rax, qword [0x1400b7288]
xchg r15b, sil
xor rax, rsp
mov qword [rbp + 0x17], rax
movsxd rsi, edx
bsf eax, r11d
shl r12, 0xde
sub r12w, 0x609e
mov r15, r8
bsf r12w, r14w
bts r13w, si
mov rax, rsi
movzx r14, bx
mov qword [rbp - 9], rcx
xadd r13b, r12b
setge r14b
shld r12d, r13d, 0x23
mov qword [rbp - 0x11], rax
xadd rcx, rcx
mov r12, rdx
lea rcx, [0x140000000]
sete r14b
rcl r12w, 4
and eax, 0x3f
not r13b
or r12b, r8b
mov r13d, r9d
rcl r12b, 0x2a
adc r12b, 0xdc
add r13, r8
rol r12d, 0x98
mov qword [rbp - 0x21], r8
movsx r12w, r9b
xchg r14b, r14b
mov r12, rsi
mov qword [rbp - 0x51], r13
sar r12, 6
bswap r14w
movzx r14w, r10b
movsx r14, bx
lea r14, [rax + rax*8]
cdqe
mov al, r15b
movsx ax, dl
mov rax, qword [rcx + r12*8 + 0xba940]
jmp 0x1404dd9fe
mov rax, qword [rax + r14*8 + 0x28]
jmp 0x1404dda08
mov qword [rbp - 0x49], rax
jmp 0x1404dda11
call qword [sym.imp.KERNEL32.dll_GetConsoleOutputCP]
sub edx, edx
not cx
movsx ecx, r8w
lea rcx, [rsp + 0x50]
jmp 0x1404dda2a
mov dword [rbp - 0x59], eax
jmp 0x1404dda32
call fcn.1404a68c4
mov rcx, qword [rsp + 0x58]
cmp al, 2
cwd
shld dx, r11w, 0x78
xor r11d, r11d
bts di, cx
sub di, 0x46f1
mov dword [rbp - 0x69], r11d
mov ebx, r11d
btc rdi, rdi
mov dword [rbp - 0x65], ebx
cwd
stc
test ch, 0xd7
mov rdi, r15
sal edx, cl
mov edx, dword [rcx + 0xc]
btr cx, bp
inc cx
adc cl, 0xd7
mov ecx, r11d
stc
mov dword [rsp + 0x40], ecx
mov dword [rbp - 0x55], edx
test ebp, esi
stc
cmp r15, r13
jmp 0x1404dda8e
jae 0x1404de264
mov rax, rsi
shl sil, cl
rcr cl, 0x97
and esi, 0x194c7c01
mov rsi, r15
stc
sar rax, 6
mov qword [rbp - 0x19], rax
adc r15d, 0x11b14b3
sal r15b, 0x77
sar cl, 0x91
mov cl, byte [rdi]
sar r15b, cl
mov r15b, 0xae
mov r15d, 1
test r9b, r10b
cmp spl, 0x13
clc
mov byte [rsp + 0x44], cl
clc
test r10b, 0x7a
mov dword [rsp + 0x48], r11d
cmc
jmp 0x1404ddae7
cmp edx, 0xfde9
jmp 0x1404ddaf2
jne 0x1404dde0b
lea r15, [0x140000000]
mov edx, r11d
xchg r9b, r9b
sal r9w, cl
mov r9, qword [r15 + rax*8 + 0xba940]
cmc
sar sil, 0x6d
mov rsi, r11
lea rax, [r9 + r14*8]
cmp r11d, ebp
test di, r10w
cmp byte [rax + rsi + 0x3e], r11b
jmp 0x1404ddb2e
je 0x1404ddb54
inc edx
jmp 0x1404ddb3b
inc rsi
jmp 0x1404ddb45
cmp rsi, 5
jmp 0x1404ddb4e
jl 0x1404ddb24
test rsi, rsi
jle 0x1404ddd39
mov rax, qword [r15 + r12*8 + 0xba940]
mov r8, qword [rbp - 0x51]
sub r8, rdi
movzx rcx, di
movzx ecx, byte [rax + r14*8 + 0x3e]
movzx r13, r12w
movsx r15d, byte [rcx + r15 + 0xb7d00]
movsx r13d, ax
bswap r10
movzx r10w, bl
inc r15d
and r13b, r8b
movsx r10d, r8w
mov r13d, r15d
add r10b, 0xb7
test bl, ch
sub r13d, edx
cmovno r10w, dx
movzx r10w, al
movsxd r10, r13d
cmp r10, r8
jg 0x1404de0b1
lea rax, [rbp - 1]
or r8b, 0x16
mov rdx, r11
cmovbe rcx, r9
ror r8b, cl
bswap r8w
sub r9, rax
mov rcx, 0x26a1a4d
shld r8w, bx, 9
lea r8, [r9 + r14*8]
lea rcx, [rbp - 1]
add rcx, rdx
inc rdx
mov al, byte [rcx + r8 + 0x3e]
test ebx, 0x59266928
jmp 0x1404ddc02
mov byte [rcx], al
test r11w, 0x6a3f
cmp rdx, rsi
jmp 0x1404ddc12
jl 0x1404ddbe5
test r13d, r13d
jmp 0x1404ddc20
jle 0x1404ddc4e
lea rcx, [rbp - 1]
cmp r8b, r11b
movsxd r8, eax
mov r8, r10
add rcx, rsi
mov rdx, rdi
jmp 0x1404ddc3e
call fcn.1404a58cd
xor r11d, r11d
shl dl, 0xdf
cdq
movzx r8d, r14w
mov rdx, r11
movzx rcx, r8w
and r8b, 0x17
cmc
lea r8, [0x140000000]
mov cl, sil
shl cx, 0xe3
mov rcx, qword [r8 + r12*8 + 0xba940]
test ax, r15w
cmp cx, 0x54cb
test al, 0xd7
add rcx, rdx
jmp 0x1404ddc83
inc rdx
test di, dx
mov byte [rcx + r14*8 + 0x3e], r11b
test dh, 0xe7
cmp rdx, rsi
jmp 0x1404ddc99
jl 0x1404ddc68
lea rax, [rbp - 1]
jmp 0x1404ddcab
mov qword [rbp - 0x41], r11
movsx edx, bp
dec r8
mov cx, 0x5741
mov qword [rbp - 0x39], rax
shld rdx, rax, 0x4c
cmp r10b, 0xca
lea r9, [rbp - 0x41]
cdq
rol ax, 0x95
mov eax, r11d
lea rdx, [rbp - 0x39]
movsx r8w, r14b
cmp r15d, 4
xchg cl, r15b
mov r15d, r15d
lea rcx, [rsp + 0x48]
sete al
setle r15b
movzx r15, bx
movsx r8d, r9w
inc eax
mov r15w, 0x638a
movzx r8, r9w
mov r8d, eax
movzx r15, r12w
mov r15d, eax
call fcn.1404e34a9
cmp rax, 0xffffffffffffffff
je 0x1404ddeca
lea eax, [r13 - 1]
mov r13, qword [rbp - 0x51]
shld rsi, r10, 0x59
rcl si, 0xc5
movsxd rsi, eax
add rsi, rdi
jmp 0x1404ddeff
movzx eax, byte [rdi]
mov rcx, r11
sar sil, 0x37
movzx rsi, di
mov rdx, r13
bt si, 0xe9
sub rdx, rdi
movsx rsi, byte [rax + r15 + 0xb7d00]
test al, 0x38
lea ecx, [rsi + 1]
movsxd rax, ecx
stc
cmp rax, rdx
jmp 0x1404ddd6c
jg 0x1404de133
cmp ecx, 4
jmp 0x1404ddd7d
mov qword [rbp - 0x31], r11
cmovl bx, bp
not dh
movsx rbx, di
mov eax, r11d
movsxd rbx, ecx
mov qword [rbp - 0x29], rdi
mov r8b, 0x94
setle cl
not bx
sete al
cqo
lea r9, [rbp - 0x31]
dec cx
jmp 0x1404dddaf
inc eax
bswap r8w
cqo
lea rdx, [rbp - 0x29]
mov rbx, r12
movsx r8w, dil
mov r8d, eax
movzx bx, r11b
movsx rbx, ax
movzx ecx, ax
lea rcx, [rsp + 0x48]
movsx bx, r12b
mov ebx, eax
jmp 0x1404ddde3
call fcn.1404e34a9
cmp rax, 0xffffffffffffffff
jmp 0x1404dddf1
je 0x1404ddeca
add rsi, rdi
cmovge r15d, edx
mov r15d, ebx
jmp 0x1404dde06
jmp 0x1404ddeff
lea rax, [0x140000000]
jmp 0x1404dde1c
mov rdx, qword [rax + r12*8 + 0xba940]
mov cl, byte [rdx + r14*8 + 0x3d]
test cl, 4
jmp 0x1404dde31
je 0x1404dde69
mov al, byte [rdx + r14*8 + 0x3e]
cmc
and cl, 0xfb
mov byte [rbp + 7], al
mov al, byte [rdi]
jmp 0x1404dde4a
mov byte [rdx + r14*8 + 0x3d], cl
cdq
bswap rdx
lea rdx, [rbp + 7]
jmp 0x1404dde5c
mov byte [rbp + 8], al
jmp 0x1404dde64
jmp 0x1404ddea5
call fcn.1404ace62
movzx ecx, byte [rdi]
test bl, r12b
clc
xor edx, edx
cmp r10b, bl
test bl, r10b
cmp word [rax + rcx*2], dx
jge 0x1404dded3
inc rsi
cmp rsi, r13
jmp 0x1404dde92
jae 0x1404de1e2
mov rdx, rdi
movsxd r8, r11d
not r8b
movzx cx, ch
mov r8d, 2
not ch
movsx cx, r10b
lea rcx, [rsp + 0x48]
jmp 0x1404ddebc
call fcn.14012a9e8
cmp eax, 0xffffffff
jne 0x1404ddeff
cmp byte [rbp - 0x71], 0
jmp 0x1404de1d9
mov r8, r15
movsx dx, dil
cdq
not dx
lea rcx, [rsp + 0x48]
cwd
cmovb edx, eax
mov rdx, rdi
jmp 0x1404ddef1
call fcn.14012a9e8
cmp eax, 0xffffffff
je 0x1404de245
mov ecx, dword [rbp - 0x59]
cmp r13w, r12w
ror r9b, 0xe9
lea rax, [rbp + 0xf]
sar r9b, 0xb6
xor ebx, ebx
mov dil, r12b
movzx r8, si
and dil, 4
lea r8, [rsp + 0x48]
mov qword [rsp + 0x38], rbx
cmovns edi, edi
lea rdi, [rsi + 1]
mov qword [rsp + 0x30], rbx
cmovnp r9d, r15d
mov r9d, r15d
test bl, bpl
jmp 0x1404ddf44
mov dword [rsp + 0x28], 5
cmc
sub edx, edx
mov qword [rsp + 0x20], rax
call fcn.1404cb81e
mov esi, eax
test r8w, dx
cmp r11b, cl
test eax, eax
jmp 0x1404ddf69
je 0x1404de30f
mov rcx, qword [rbp - 0x49]
jmp 0x1404ddf7c
lea r9, [rsp + 0x4c]
movzx edx, r14w
movsxd r8, edx
movsx r8w, r10b
mov r8d, eax
mov qword [rsp + 0x20], rbx
xchg dh, dh
lea rdx, [rbp + 0xf]
jmp 0x1404ddfa0
call qword [sym.imp.KERNEL32.dll_WriteFile]
sub r11d, r11d
cmc
test eax, eax
je 0x1404de302
mov r15d, dword [rsp + 0x40]
rol bl, 0xe5
mov ebx, edi
cmc
jmp 0x1404ddfc2
sub ebx, dword [rbp - 0x21]
test bl, 0x38
add ebx, r15d
cmc
mov dword [rbp - 0x65], ebx
cmp r11b, r9b
cmp r8w, 0x3948
cmp dword [rsp + 0x4c], esi
jb 0x1404de1ce
cmp byte [rsp + 0x44], 0xa
jmp 0x1404ddfec
jne 0x1404de090
mov rcx, qword [rbp - 0x49]
movzx r9d, r9w
cdq
lea eax, [r11 + 0xd]
movsx r9w, r8b
movzx r9w, spl
lea r9, [rsp + 0x4c]
movsxd r8, r15d
mov word [rsp + 0x44], ax
bswap dx
movzx rdx, sp
mov r8d, r12d
lea r8d, [r11 + 1]
xchg dh, dh
mov qword [rsp + 0x20], r11
movsxd rdx, esp
mov dl, dil
movzx dx, sil
lea rdx, [rsp + 0x44]
jmp 0x1404de040
call qword [sym.imp.KERNEL32.dll_WriteFile]
xor r11d, r11d
cmp r8w, dx
test eax, eax
jmp 0x1404de054
je 0x1404de232
cmp dword [rsp + 0x4c], 1
jmp 0x1404de064
jb 0x1404de1ce
inc r15d
bswap esi
dec esi
inc ebx
inc sil
bts rsi, rsp
mov dword [rsp + 0x40], r15d
dec si
neg si
mov dword [rbp - 0x65], ebx
seta sil
bt si, bp
mov rsi, rdi
cmp eax, r11d
stc
cmp rdi, r13
jmp 0x1404de09f
jae 0x1404de25c
mov rax, qword [rbp - 0x19]
mov edx, dword [rbp - 0x55]
jmp 0x1404ddabd
mov edx, r11d
cmc
test r8, r8
jmp 0x1404de0bd
jle 0x1404de126
sub rdi, rsi
jmp 0x1404de0cb
lea rbx, [0x140000000]
mov al, byte [rdi + rsi]
xchg rcx, rcx
not cl
inc edx
mov rcx, qword [rbx + r12*8 + 0xba940]
add rcx, rsi
jmp 0x1404de0ec
inc rsi
jmp 0x1404de0fd
mov byte [rcx + r14*8 + 0x3e], al
sar ah, cl
sete ah
sal al, cl
movsxd rax, edx
test ax, 0x24cd
jmp 0x1404de115
cmp rax, r8
jmp 0x1404de11d
jl 0x1404de0d2
mov ebx, dword [rbp - 0x65]
add ebx, r8d
jmp 0x1404de12e
jmp 0x1404de1c7
mov r9d, r11d
cmp r13b, 0xe8
stc
test rdx, rdx
jle 0x1404de1c2
mov r13, qword [rbp - 0x11]
sal cx, 0x1c
mov r8, r11
add al, r12b
mov r10, r13
and r13d, 0x3f
sar r10, 6
movsx r11, bp
lea r11, [r13*8]
mov al, r14b
cmc
add r11, r13
mov al, byte [r8 + rdi]
inc r9d
movsx ecx, cx
ror rcx, cl
and ch, 0x40
mov rcx, qword [r15 + r10*8 + 0xba940]
test rsi, 0x105726b0
add rcx, r8
jmp 0x1404de197
inc r8
cmp r12w, si
cmc
mov byte [rcx + r11*8 + 0x3e], al
not al
stc
sbb ax, r10w
movsxd rax, r9d
cmp rax, rdx
jmp 0x1404de1b6
jl 0x1404de170
xor r11d, r11d
sal cl, 0xb9
add ebx, edx
shr ch, 0xb4
mov dword [rbp - 0x65], ebx
shr cx, 0xc5
cmp byte [rbp - 0x71], r11b
mov cl, 1
seta cl
xchg cl, ch
mov ecx, dword [rsp + 0x40]
jmp 0x1404de26d
mov al, byte [rdi]
mov r8b, sil
movsx ecx, r15w
xchg r8b, r8b
lea r8, [0x140000000]
movsx cx, dh
movzx rcx, sp
xchg cl, ch
mov rcx, qword [r8 + r12*8 + 0xba940]
inc ebx
cmc
test r8w, 0x1626
stc
mov dword [rbp - 0x65], ebx
mov byte [rcx + r14*8 + 0x3e], al
test r10b, r14b
mov rax, qword [r8 + r12*8 + 0xba940]
or byte [rax + r14*8 + 0x3d], 4
cmp byte [rbp - 0x71], dl
jmp 0x1404de1d9
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x69], eax
btc cx, r12w
add cx, 0x1667
mov ecx, dword [rsp + 0x40]
cmp r15b, 0x24
stc
cmp byte [rbp - 0x71], 0
jmp 0x1404de257
jmp 0x1404de26d
mov ecx, dword [rsp + 0x40]
clc
cmp r13b, r10b
cmp byte [rbp - 0x71], r11b
jmp 0x1404de26d
je 0x1404de283
mov rax, qword [rsp + 0x50]
test dil, 0x86
and dword [rax + 0x3a8], 0xfffffffd
mov rax, qword [rbp - 9]
movsd xmm0, qword [rbp - 0x69]
test cl, bh
test bh, 0xc3
movsd qword [rax], xmm0
mov dword [rax + 8], ecx
sub rcx, 0x6ed76543
xor ch, 0x2e
mov rcx, qword [rbp + 0x17]
jmp 0x1404de2ac
xor rcx, rsp
jmp 0x1404de2b4
call fcn.1404a1da3
mov rbx, qword [rsp + 0x140]
shl r14b, 0x9b
and r13b, 0x62
add rsp, 0x100
pop r15
bswap rsi
pop r14
mov bp, 0x45b2
pop r13
pop r12
cmovnp rbp, rsp
pop rdi
mov rsi, 0x23fb1b07
movzx si, cl
movzx rbp, bx
pop rsi
sets bpl
xchg bpl, bpl
pop rbp
jmp 0x1404de301
ret
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x69], eax
bsr cx, cx
mov ecx, dword [rsp + 0x40]
jmp 0x1404de319
cmp byte [rbp - 0x71], bl
jmp 0x1404de321
jmp 0x1404de26d