Function at 0x1404ded4a
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
add ax, 0x375b
btc rax, rbp
push rbp
neg bpl
and ah, 0x73
push rsi
movzx ax, dh
btr rax, rdi
push rdi
ror sil, 0x26
or rbp, 0x6d1115ee
bsr rbp, r10
push r12
push r13
push r14
jmp 0x1404ded85
push r15
mov rsi, rsp
sub r15b, r14b
rcl r14w, cl
lea rbp, [rsp - 0x27]
sub rsp, 0x100
mov rax, qword [0x1400b7288]
and r14b, 0xee
xor rax, rsp
shl r13d, cl
cmc
mov qword [rbp + 0x17], rax
bts r15w, r15w
movsxd rsi, edx
rcl ax, 0xc2
sbb rax, r8
cmc
mov r15, r8
mov rax, rsi
mov qword [rbp - 9], rcx
movzx ecx, r14w
clc
mov qword [rbp - 0x11], rax
rol r14d, 0x60
lea rcx, [0x140000000]
btc r12, 0x63
bsr r12d, r9d
bts r13, r10
and eax, 0x3f
movsx r12d, ax
rcl r14d, cl
mov r13d, r9d
xadd r14w, r14w
movsx r12w, cl
xor r14b, bl
lea r13, [r13 + r8]
btr r14d, 0x7d
btc r12, 0x1f
movzx r14, di
mov qword [rbp - 0x21], r8
cmovl r14d, r9d
mov r12w, 0xc94
mov r12, rsi
movsx r14, r15w
mov qword [rbp - 0x51], r13
inc r14
shl r14, cl
xor r14w, r11w
sar r12, 6
lea r14, [rax + rax*8]
cwde
cmovb ax, dx
cbw
mov rax, qword [rcx + r12*8 + 0xba940]
jmp 0x1404dee59
mov rax, qword [rax + r14*8 + 0x28]
jmp 0x1404dee63
mov qword [rbp - 0x49], rax
jmp 0x1404dee6c
call qword [sym.imp.KERNEL32.dll_GetConsoleOutputCP]
sub edx, edx
not cl
movsx rcx, r9w
lea rcx, [rsp + 0x50]
jmp 0x1404dee84
mov dword [rbp - 0x59], eax
call fcn.1404a7a6a
mov rcx, qword [rsp + 0x58]
shld rdx, r9, 0x89
xor r11d, r11d
cmc
test ch, 0x16
shld di, cx, 0x58
mov dword [rbp - 0x69], r11d
cmc
bts di, r11w
mov ebx, r11d
mov dword [rbp - 0x65], ebx
sal dl, cl
movsxd rdx, esi
mov rdi, r15
movsxd rdx, ecx
sar dl, 0xa7
mov edx, dword [rcx + 0xc]
sar cx, 0xe9
bsf cx, r11w
mov ecx, r11d
clc
jmp 0x1404deed5
mov dword [rsp + 0x40], ecx
jmp 0x1404deede
mov dword [rbp - 0x55], edx
stc
cmp r15, r13
jmp 0x1404deeea
jae 0x1404df6c2
mov rax, rsi
mov rsi, r15
sub r15b, 0x3f
sar rax, 6
clc
mov qword [rbp - 0x19], rax
sub cl, 0x21
rol r15d, 0x21
mov cl, byte [rdi]
adc r15, rax
btc r15w, bp
mov r15d, 1
test rsi, r12
test r13b, 0x46
mov byte [rsp + 0x44], cl
cmp cl, sil
mov dword [rsp + 0x48], r11d
cmp ah, 0x31
cmp edx, 0xfde9
jmp 0x1404def3b
jne 0x1404df24a
lea r15, [0x140000000]
add r9w, r11w
mov edx, r11d
sal r9w, cl
or r9w, 0x146d
cmp r9w, r15w
mov r9, qword [r15 + rax*8 + 0xba940]
test r12, r9
xadd al, al
mov rsi, r11
lea rax, [r9 + r14*8]
cmp al, 0x71
jmp 0x1404def79
cmp byte [rax + rsi + 0x3e], r11b
jmp 0x1404def83
je 0x1404defa2
inc edx
jmp 0x1404def90
inc rsi
cmp rsi, 5
jmp 0x1404def9c
jl 0x1404def79
test rsi, rsi
jmp 0x1404defaa
jle 0x1404df178
mov rax, qword [r15 + r12*8 + 0xba940]
mov r8, qword [rbp - 0x51]
sub r8, rdi
movzx ecx, byte [rax + r14*8 + 0x3e]
movsx r15d, byte [rcx + r15 + 0xb7d00]
xchg r13b, r10b
movzx r10, r15w
movsx r10, r15w
inc r15d
btr r13w, sp
mov r13d, r15d
sal r10b, 0x76
shl r10w, cl
sub r13d, edx
movsxd r10, r13d
cmp rbp, 0x485f1bbe
test bp, 0x39bb
clc
cmp r10, r8
jmp 0x1404df007
jg 0x1404df4f4
lea rax, [rbp - 1]
shr dh, cl
sal dh, 0xc6
mov rdx, r11
adc r8d, 0x71b55bbf
xor ecx, edx
cmc
sub r9, rax
or cl, r15b
not cl
lea r8, [r9 + r14*8]
lea rcx, [rbp - 1]
add rcx, rdx
mov al, 0xa1
inc rdx
sub al, 0x11
mov al, byte [rcx + r8 + 0x3e]
mov byte [rcx], al
cmp rdx, rsi
jmp 0x1404df04c
jl 0x1404df02f
test r13d, r13d
jmp 0x1404df05a
jle 0x1404df08a
lea rcx, [rbp - 1]
shrd r8, r14, 0xac
sbb dx, r10w
xchg r8w, dx
mov r8, r10
test r14, r11
add rcx, rsi
mov rdx, rdi
jmp 0x1404df082
call fcn.1404a6b00
sub r11d, r11d
mov rdx, r11
test ecx, eax
movzx rcx, r10w
lea r8, [0x140000000]
mov rcx, qword [r8 + r12*8 + 0xba940]
cmp r15, rsp
cmp r9b, 0
add rcx, rdx
jmp 0x1404df0b1
inc rdx
clc
cmp r14w, 0x1a20
mov byte [rcx + r14*8 + 0x3e], r11b
test dx, r13w
jmp 0x1404df0c9
cmp rdx, rsi
jmp 0x1404df0d1
jl 0x1404df09a
lea rax, [rbp - 1]
mov qword [rbp - 0x41], r11
bts r8w, r10w
stc
movsx r8d, r9w
mov qword [rbp - 0x39], rax
shl r9w, cl
lea r9, [rbp - 0x41]
ror ah, 0xc2
rcr r8b, 0x12
mov eax, r11d
sal r8b, 0x96
lea rdx, [rbp - 0x39]
cmp r15d, 4
lea rcx, [rsp + 0x48]
movsxd r8, eax
sete al
cmovno r8d, edi
movzx r8d, r11w
xchg r15d, r15d
inc eax
not r8w
setp r15b
mov r8d, eax
setl r15b
cmovg r15w, bx
movzx r15w, sil
mov r15d, eax
jmp 0x1404df144
call fcn.1404e488d
cmp rax, 0xffffffffffffffff
jmp 0x1404df152
je 0x1404df307
lea eax, [r13 - 1]
stc
btc si, 0x84
sub si, 0x3846
mov r13, qword [rbp - 0x51]
movsxd rsi, eax
clc
stc
add rsi, rdi
jmp 0x1404df336
movzx eax, byte [rdi]
mov rdx, r13
bts ecx, esp
sub rdx, rdi
or cx, 0x8e3
test bpl, dl
movsx rsi, byte [rax + r15 + 0xb7d00]
inc ch
dec cx
lea ecx, [rsi + 1]
btr ax, 0x1c
movsxd rax, ecx
cmp r12b, r14b
test r12w, di
test rdi, 0x38662261
cmp rax, rdx
jmp 0x1404df1bb
jg 0x1404df57a
cmp ecx, 4
rdtsc
xchg dx, r8w
mov qword [rbp - 0x31], r11
mov eax, r11d
not al
cqo
mov qword [rbp - 0x29], rdi
sete al
lea r9, [rbp - 0x31]
cwd
not r8b
movsx cx, sil
inc eax
movsxd rcx, r15d
setnp dh
lea rdx, [rbp - 0x29]
setg r8b
movzx r8d, r13w
mov r8d, eax
movsx rcx, r15w
lea rcx, [rsp + 0x48]
movsx bx, r13b
jmp 0x1404df214
mov ebx, eax
jmp 0x1404df21b
call fcn.1404e488d
cmp rax, 0xffffffffffffffff
jmp 0x1404df229
je 0x1404df307
add rsi, rdi
xchg r15d, r15d
movzx r15d, r12w
not r15w
mov r15d, ebx
jmp 0x1404df245
jmp 0x1404df336
lea rax, [0x140000000]
cmp r15b, 0xce
mov rdx, qword [rax + r12*8 + 0xba940]
mov cl, byte [rdx + r14*8 + 0x3d]
jmp 0x1404df267
test cl, 4
jmp 0x1404df26f
je 0x1404df29e
mov al, byte [rdx + r14*8 + 0x3e]
stc
and cl, 0xfb
jmp 0x1404df283
mov byte [rbp + 7], al
mov al, byte [rdi]
mov byte [rdx + r14*8 + 0x3d], cl
lea rdx, [rbp + 7]
jmp 0x1404df296
mov byte [rbp + 8], al
jmp 0x1404df2dc
call fcn.1404ae1b3
movzx ecx, byte [rdi]
test dl, 0xce
cmp edx, 0x777e2242
stc
sub edx, edx
clc
cmp word [rax + rcx*2], dx
jmp 0x1404df2bc
jge 0x1404df310
inc rsi
cmp r15d, r9d
cmp rsi, r13
jmp 0x1404df2d0
jae 0x1404df63c
mov rdx, rdi
not r8b
mov r8d, 2
movzx ecx, sp
mov cl, r14b
xchg cl, cl
lea rcx, [rsp + 0x48]
jmp 0x1404df2f4
call fcn.1401eeca4
cmp eax, 0xffffffff
jmp 0x1404df301
jne 0x1404df336
cmp byte [rbp - 0x71], 0
jmp 0x1404df62e
mov r8, r15
cdq
lea rcx, [rsp + 0x48]
xchg dh, dh
mov rdx, rdi
jmp 0x1404df323
call fcn.1401eeca4
cmp eax, 0xffffffff
jmp 0x1404df330
je 0x1404df6aa
mov ecx, dword [rbp - 0x59]
lea rax, [rbp + 0xf]
mov r9, 0x77d34d9a
xor ebx, ebx
lea r8, [rsp + 0x48]
cmp r11b, sil
mov qword [rsp + 0x38], rbx
lea rdi, [rsi + 1]
sub r9b, 0xbd
ror r9w, cl
mov qword [rsp + 0x30], rbx
test esi, r13d
not r9w
mov r9d, r15d
stc
mov dword [rsp + 0x28], 5
xor edx, edx
mov qword [rsp + 0x20], rax
jmp 0x1404df383
call fcn.1404ccb79
mov esi, eax
clc
test eax, eax
jmp 0x1404df392
je 0x1404df781
mov rcx, qword [rbp - 0x49]
lea r9, [rsp + 0x4c]
movsxd rdx, r10d
cdq
mov r8d, eax
cqo
mov dl, r15b
mov qword [rsp + 0x20], rbx
movzx rdx, ax
not dh
lea rdx, [rbp + 0xf]
call qword [sym.imp.KERNEL32.dll_WriteFile]
xor r11d, r11d
test eax, eax
jmp 0x1404df3cc
je 0x1404df773
mov r15d, dword [rsp + 0x40]
sub bh, 0x80
mov ebx, edi
sub ebx, dword [rbp - 0x21]
jmp 0x1404df3e9
add ebx, r15d
cmp rdx, 0x6f3a3503
jmp 0x1404df3f8
mov dword [rbp - 0x65], ebx
cmc
cmp dword [rsp + 0x4c], esi
jmp 0x1404df405
jb 0x1404df623
cmp byte [rsp + 0x44], 0xa
jmp 0x1404df415
jne 0x1404df4ca
mov rcx, qword [rbp - 0x49]
jmp 0x1404df428
lea eax, [r11 + 0xd]
movzx r8, r10w
cmovb r8w, r8w
movsx r8w, dl
lea r9, [rsp + 0x4c]
cmovge dx, r15w
movsx dx, sil
mov word [rsp + 0x44], ax
bswap r8w
movsxd r8, r12d
lea r8d, [r11 + 1]
movsxd rdx, r8d
mov qword [rsp + 0x20], r11
lea rdx, [rsp + 0x44]
jmp 0x1404df46b
call qword [sym.imp.KERNEL32.dll_WriteFile]
xor r11d, r11d
test eax, eax
jmp 0x1404df47b
je 0x1404df69f
cmp dword [rsp + 0x4c], 1
jb 0x1404df623
inc r15d
movsx esi, ax
movsx rsi, bp
dec sil
inc ebx
jmp 0x1404df4a8
mov dword [rsp + 0x40], r15d
shrd si, r10w, 0x47
bts si, bp
add si, 0xe2a
mov dword [rbp - 0x65], ebx
jmp 0x1404df4ca
mov rsi, rdi
cmp rdi, r13
jmp 0x1404df4d5
jae 0x1404df6bd
mov rax, qword [rbp - 0x19]
cdq
movsxd rdx, edx
cmovno rdx, r8
mov edx, dword [rbp - 0x55]
jmp 0x1404df4ef
jmp 0x1404def0a
mov edx, r11d
cmc
cmp r9w, 0x3ff6
test r8, r8
jmp 0x1404df506
jle 0x1404df56d
sub rdi, rsi
lea rbx, [0x140000000]
jmp 0x1404df520
mov al, byte [rdi + rsi]
movsxd rcx, r14d
inc edx
cmovae ecx, ebx
mov rcx, qword [rbx + r12*8 + 0xba940]
clc
stc
add rcx, rsi
inc rsi
mov byte [rcx + r14*8 + 0x3e], al
btc rax, rbp
shr al, 0x82
movsxd rax, edx
stc
test r15b, r13b
jmp 0x1404df553
cmp rax, r8
jmp 0x1404df55b
jl 0x1404df520
mov ebx, dword [rbp - 0x65]
cmp ecx, 0x1dba1c00
test r9b, cl
add ebx, r8d
jmp 0x1404df575
jmp 0x1404df61e
mov r9d, r11d
jmp 0x1404df582
test rdx, rdx
jle 0x1404df61c
mov r13, qword [rbp - 0x11]
movzx r8, r15w
sar r10w, 0x2b
btr r10, 0x8b
mov r8, r11
rcl cl, 0xd3
sar ch, 0xbd
shrd rcx, r15, 0xd2
mov r10, r13
sub r11b, sil
and r11b, 0x29
and r13d, 0x3f
cmp r10d, 0x19c117b2
sar r10, 6
mov r11b, 0xeb
btc rcx, r12
test r8b, r10b
lea r11, [r13*8]
add r11, r13
mov al, byte [r8 + rdi]
movzx rcx, r9w
jmp 0x1404df5e6
inc r9d
mov rcx, qword [r15 + r10*8 + 0xba940]
test r15b, 7
stc
add rcx, r8
inc r8
mov byte [rcx + r11*8 + 0x3e], al
movsxd rax, r9d
cmp r15b, 0xf5
cmp rax, rdx
jmp 0x1404df610
jl 0x1404df5d9
xor r11d, r11d
mov cl, r14b
add ebx, edx
mov dword [rbp - 0x65], ebx
inc ecx
cmp byte [rbp - 0x71], r11b
movzx ecx, r14w
not cx
mov ecx, dword [rsp + 0x40]
jmp 0x1404df637
jmp 0x1404df6cb
mov al, byte [rdi]
mov cx, 0x97f
movzx r8, bp
cmovp r8, r10
lea r8, [0x140000000]
not cx
mov rcx, qword [r8 + r12*8 + 0xba940]
jmp 0x1404df661
inc ebx
jmp 0x1404df668
mov dword [rbp - 0x65], ebx
mov byte [rcx + r14*8 + 0x3e], al
neg eax
ror rax, 0xc8
btc ax, di
mov rax, qword [r8 + r12*8 + 0xba940]
test r8w, sp
stc
or byte [rax + r14*8 + 0x3d], 4
test r8b, cl
stc
clc
cmp byte [rbp - 0x71], dl
jmp 0x1404df69a
jmp 0x1404df62e
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x69], eax
rcr cl, cl
mov ecx, dword [rsp + 0x40]
cmc
cmp byte [rbp - 0x71], 0
jmp 0x1404df6b8
jmp 0x1404df6cb
mov ecx, dword [rsp + 0x40]
cmc
cmp byte [rbp - 0x71], r11b
jmp 0x1404df6cb
je 0x1404df6e2
mov rax, qword [rsp + 0x50]
and dword [rax + 0x3a8], 0xfffffffd
rol al, 0xf2
cdqe
mov rax, qword [rbp - 9]
clc
jmp 0x1404df6ec
movsd xmm0, qword [rbp - 0x69]
test sil, 0x74
test rax, r9
cmp cx, 0x2f9d
movsd qword [rax], xmm0
cmp r13, 0x756450a5
mov dword [rax + 8], ecx
shrd cx, di, 0x3a
bts ecx, esi
shl cx, cl
mov rcx, qword [rbp + 0x17]
cmc
xor rcx, rsp
jmp 0x1404df723
call fcn.1404a2f20
mov rbx, qword [rsp + 0x140]
sbb di, 0x5725
add rsp, 0x100
movsx r14d, bx
mov sil, 0x67
not r14b
pop r15
setno dil
pop r14
pop r13
movsx edi, r12w
mov r12d, r14d
not r12w
pop r12
pop rdi
pop rsi
jmp 0x1404df76c
pop rbp
jmp 0x1404df772
ret
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x69], eax
dec cl
sub cl, 0xd
mov ecx, dword [rsp + 0x40]
cmc
cmp byte [rbp - 0x71], bl
jmp 0x1404df78e
jmp 0x1404df6cb