Function at 0x1404da561
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
rcr eax, 0xc3
sar ax, cl
bsr ax, r14w
push rbp
push rsi
cmp bpl, r12b
ror esi, cl
push rdi
shr al, cl
movzx rax, r9w
push r12
push r13
push r14
push r15
mov r14b, spl
lea rbp, [rsp - 0x27]
sub rsp, 0x100
btc r14w, 0x1e
mov rax, qword [0x1400b7288]
rcl r15w, 0xd9
xor rax, rsp
mov qword [rbp + 0x17], rax
or r15b, al
sub r12, rsp
movsxd rsi, edx
mov r15w, r8w
shld r12d, r13d, 0xed
neg eax
mov r15, r8
mov rax, rsi
mov qword [rbp - 9], rcx
btc r14w, r15w
cmovnp r12w, ax
mov qword [rbp - 0x11], rax
lea rcx, [0x140000000]
sar r14w, 6
movzx r14w, r13b
shl r13b, 0x71
and eax, 0x3f
bswap r12d
mov r13d, r9d
shl r12, 0x55
add r13, r8
mov qword [rbp - 0x21], r8
btr r12d, 0xa9
sar r12b, 0x11
mov r12, rsi
and r14b, cl
sub r14, 0x32fc4b06
bsr r14d, r10d
mov qword [rbp - 0x51], r13
sar r12, 6
movzx r14, cx
movsxd r14, r11d
lea r14, [rax + rax*8]
mov rax, qword [rcx + r12*8 + 0xba940]
jmp 0x1404da63e
mov rax, qword [rax + r14*8 + 0x28]
jmp 0x1404da648
mov qword [rbp - 0x49], rax
jmp 0x1404da651
call qword [sym.imp.KERNEL32.dll_GetConsoleOutputCP]
sub edx, edx
lea rcx, [rsp + 0x50]
jmp 0x1404da663
mov dword [rbp - 0x59], eax
jmp 0x1404da66b
call fcn.1404a3660
mov rcx, qword [rsp + 0x58]
xor r11d, r11d
dec edi
btc edi, ecx
movzx edx, r8w
mov dword [rbp - 0x69], r11d
cmc
inc dil
setle bh
mov ebx, r11d
setae dl
rol dl, 0x88
mov dword [rbp - 0x65], ebx
mov rdi, r15
cmp dl, 0x22
mov edx, dword [rcx + 0xc]
movsx cx, r12b
movzx rcx, sp
movsx rcx, bx
mov ecx, r11d
test dil, sil
mov dword [rsp + 0x40], ecx
test dx, 0x759e
mov dword [rbp - 0x55], edx
cmp r15, r13
jmp 0x1404da6c8
jae 0x1404dae97
mov rax, rsi
xadd cl, sil
mov rsi, r15
not cl
mov r15b, 3
sar rax, 6
bt r15w, di
xor cl, al
mov qword [rbp - 0x19], rax
cmp r15w, r14w
btr r15w, di
mov cl, byte [rdi]
btc r15, rax
adc r15w, r14w
mov r15d, 1
cmp si, 0x24bf
mov byte [rsp + 0x44], cl
test esp, ebx
mov dword [rsp + 0x48], r11d
cmc
clc
cmp edx, 0xfde9
jmp 0x1404da722
jne 0x1404daa14
lea r15, [0x140000000]
sbb dx, sp
cdq
ror r9w, 0x7a
mov edx, r11d
cmp esi, 0x6d26fd8
sbb r9b, r13b
mov r9, qword [r15 + rax*8 + 0xba940]
mov rsi, r11
sar ah, cl
cmp r8, rax
test rdi, rdi
lea rax, [r9 + r14*8]
stc
cmc
cmp byte [rax + rsi + 0x3e], r11b
jmp 0x1404da767
je 0x1404da782
inc edx
inc rsi
cmc
cmp rsi, 5
jmp 0x1404da77c
jl 0x1404da75d
test rsi, rsi
jmp 0x1404da78a
jle 0x1404da952
mov rax, qword [r15 + r12*8 + 0xba940]
rcr cx, cl
mov r8, qword [rbp - 0x51]
ror r13b, cl
clc
shr r10w, cl
sub r8, rdi
movzx ecx, byte [rax + r14*8 + 0x3e]
inc r10b
movsx r15d, byte [rcx + r15 + 0xb7d00]
xchg r13, r13
not r13b
inc r15d
adc r10b, 0xa7
cmp rsi, 0x704f5e56
mov r13d, r15d
sub r13d, edx
cmp r14d, 0x35735582
movsxd r10, r13d
jmp 0x1404da7e8
cmp r10, r8
jg 0x1404dacc6
lea rax, [rbp - 1]
mov rdx, r11
movzx cx, spl
setae cl
sub r9, rax
sub al, 0x12
sbb al, r15b
lea r8, [r9 + r14*8]
and al, 0x6d
lea rcx, [rbp - 1]
add rcx, rdx
xchg al, al
setb al
inc rdx
setp al
mov al, byte [rcx + r8 + 0x3e]
clc
cmc
cmp r11b, 3
mov byte [rcx], al
cmp rdx, rsi
jmp 0x1404da835
jl 0x1404da80e
test r13d, r13d
jmp 0x1404da843
jle 0x1404da87e
lea rcx, [rbp - 1]
sbb dh, 0x9c
xor dx, 0xa82
mov r8, r10
mov dx, r15w
add rcx, rsi
movzx dx, r15b
mov rdx, rdi
jmp 0x1404da86c
call fcn.1404a26e1
sub r11d, r11d
rcl edx, cl
cmc
add r8, 0x69944490
mov rdx, r11
adc r8b, dl
lea r8, [0x140000000]
or cl, r15b
movzx rcx, r15w
sbb rcx, 0x343d371c
mov rcx, qword [r8 + r12*8 + 0xba940]
stc
add rcx, rdx
jmp 0x1404da8aa
inc rdx
test r13b, 0x12
mov byte [rcx + r14*8 + 0x3e], r11b
clc
cmp rdx, rsi
jl 0x1404da899
lea rax, [rbp - 1]
mov qword [rbp - 0x41], r11
movzx rcx, dx
sub dx, si
cmc
mov qword [rbp - 0x39], rax
lea r9, [rbp - 0x41]
mov eax, r11d
lea rdx, [rbp - 0x39]
movzx ecx, r13w
mov ch, 0xf9
cmp r15d, 4
not al
movzx cx, r14b
movzx r15d, si
lea rcx, [rsp + 0x48]
not r8b
xchg al, r8b
movzx r8d, r12w
sete al
xchg r8, r15
inc eax
movzx r15d, ax
mov r8d, eax
movzx r15d, bx
mov r15d, eax
jmp 0x1404da91f
call fcn.1404e0153
cmp rax, 0xffffffffffffffff
jmp 0x1404da92d
je 0x1404daae6
lea eax, [r13 - 1]
mov r13, qword [rbp - 0x51]
bsr rsi, r10
rcl sil, cl
movsxd rsi, eax
add rsi, rdi
jmp 0x1404da94d
jmp 0x1404dab21
movzx eax, byte [rdi]
or cl, al
not dl
mov rdx, r13
or sil, 0x41
btr rsi, 0xd0
ror sil, cl
sub rdx, rdi
adc cl, 0xd1
movsx rsi, byte [rax + r15 + 0xb7d00]
sal ah, 0x44
cdqe
or ch, 0x61
lea ecx, [rsi + 1]
not eax
movsxd rax, ecx
cmp rsi, rbx
cmc
cmp rax, rdx
jmp 0x1404da993
jg 0x1404dad45
cmp ecx, 4
cwde
mov qword [rbp - 0x31], r11
mov r8b, r11b
cmove r8d, r10d
mov dh, 0x8c
mov eax, r11d
mov qword [rbp - 0x29], rdi
movsx rdx, di
sete al
movsxd rdx, ebp
mov dl, r10b
cqo
lea r9, [rbp - 0x31]
cwd
cmovs bx, r15w
movsx edx, si
inc eax
xchg r8b, r8b
cqo
movsxd rbx, eax
lea rdx, [rbp - 0x29]
movsx cx, sil
movzx ebx, r9w
mov r8d, eax
lea rcx, [rsp + 0x48]
not ebx
mov rbx, r11
mov ebx, eax
jmp 0x1404da9fa
call fcn.1404e0153
cmp rax, 0xffffffffffffffff
je 0x1404daae6
add rsi, rdi
mov r15d, ebx
jmp 0x1404dab21
lea rax, [0x140000000]
not dh
sar dh, cl
mov rdx, qword [rax + r12*8 + 0xba940]
shr cl, 0xba
rcl cl, 0x52
mov cl, byte [rdx + r14*8 + 0x3d]
clc
cmp bpl, 0x9f
test cl, 4
jmp 0x1404daa3f
je 0x1404daa7c
mov al, byte [rdx + r14*8 + 0x3e]
cmc
and cl, 0xfb
mov byte [rbp + 7], al
mov al, r14b
mov al, byte [rdi]
mov byte [rdx + r14*8 + 0x3d], cl
movzx rdx, di
mov dl, sil
movzx edx, r14w
lea rdx, [rbp + 7]
jmp 0x1404daa6f
mov byte [rbp + 8], al
jmp 0x1404daa77
jmp 0x1404daac3
call fcn.1404a9cc0
movzx ecx, byte [rdi]
cmp r14w, r15w
jmp 0x1404daa8d
xor edx, edx
jmp 0x1404daa94
cmp word [rax + rcx*2], dx
jmp 0x1404daa9d
jge 0x1404daaf4
inc rsi
test r8w, r14w
cmp dil, 0x60
cmp rsi, r13
jmp 0x1404daab6
jae 0x1404dae18
mov rdx, rdi
mov r8w, r10w
mov r8d, 2
lea rcx, [rsp + 0x48]
jmp 0x1404daad3
call fcn.140262c48
cmp eax, 0xffffffff
jmp 0x1404daae0
jne 0x1404dab21
cmp byte [rbp - 0x71], 0
jmp 0x1404daaef
jmp 0x1404dae0a
mov r8, r15
mov cl, bpl
cqo
mov edx, 0x49d4201
lea rcx, [rsp + 0x48]
mov rdx, rdi
jmp 0x1404dab0e
call fcn.140262c48
cmp eax, 0xffffffff
jmp 0x1404dab1b
je 0x1404dae79
mov ecx, dword [rbp - 0x59]
sub dil, 0x23
clc
shld r8w, sp, 0xe
lea rax, [rbp + 0xf]
movsx r8d, r13w
add r9b, cl
btr edi, r14d
sub ebx, ebx
lea r8, [rsp + 0x48]
and di, r15w
mov qword [rsp + 0x38], rbx
lea rdi, [rsi + 1]
bts r9d, ebp
adc r9d, 0xf307dcc
mov qword [rsp + 0x30], rbx
bsf r9, r14
mov r9d, r15d
cmc
mov dword [rsp + 0x28], 5
test r9, r15
sub edx, edx
jmp 0x1404dab7c
mov qword [rsp + 0x20], rax
call fcn.1404c8440
mov esi, eax
cmc
test eax, eax
je 0x1404daf4d
mov rcx, qword [rbp - 0x49]
xchg r9, r8
movsx r8w, cl
bswap r9
lea r9, [rsp + 0x4c]
mov r8d, eax
xchg dl, dl
cqo
mov qword [rsp + 0x20], rbx
movzx edx, bp
movzx dx, ah
lea rdx, [rbp + 0xf]
jmp 0x1404dabc1
call qword [sym.imp.KERNEL32.dll_WriteFile]
sub r11d, r11d
test r14w, r12w
test eax, eax
jmp 0x1404dabd5
je 0x1404daf39
mov r15d, dword [rsp + 0x40]
shr bx, 0xd2
rol rbx, 0xcb
test spl, dl
mov ebx, edi
clc
test r13b, 0x74
sub ebx, dword [rbp - 0x21]
clc
cmc
add ebx, r15d
mov dword [rbp - 0x65], ebx
test bpl, 0x8e
cmp dword [rsp + 0x4c], esi
jmp 0x1404dac0a
jb 0x1404dadfd
cmp byte [rsp + 0x44], 0xa
jmp 0x1404dac1a
jne 0x1404dac9b
mov rcx, qword [rbp - 0x49]
cbw
lea eax, [r11 + 0xd]
mov dl, 0x68
movsx r9w, r11b
lea r9, [rsp + 0x4c]
xchg r8d, edx
movsx edx, r15w
mov word [rsp + 0x44], ax
cwd
movsx rdx, r12w
lea r8d, [r11 + 1]
mov edx, 0x7b400cb
xchg edx, edx
mov qword [rsp + 0x20], r11
lea rdx, [rsp + 0x44]
call qword [sym.imp.KERNEL32.dll_WriteFile]
sub r11d, r11d
cmp rdx, r15
test eax, eax
je 0x1404dae66
cmp dword [rsp + 0x4c], 1
jmp 0x1404dac7b
jb 0x1404dadfd
inc r15d
movzx esi, r9w
bswap si
inc ebx
movsxd rsi, esp
mov dword [rsp + 0x40], r15d
mov dword [rbp - 0x65], ebx
sal sil, cl
mov rsi, rdi
cmp r11w, r15w
cmp rdi, r13
jae 0x1404dae8b
mov rax, qword [rbp - 0x19]
not dx
movzx rdx, r13w
seto dl
mov edx, dword [rbp - 0x55]
jmp 0x1404dacc1
jmp 0x1404da6f5
mov edx, r11d
test di, di
clc
test r8, r8
jle 0x1404dad38
sub rdi, rsi
lea rbx, [0x140000000]
jmp 0x1404dacea
mov al, byte [rdi + rsi]
mov ecx, 0x4ecc258a
movsx ecx, r8w
inc edx
neg ch
mov rcx, qword [rbx + r12*8 + 0xba940]
cmp rsp, 0x4be27616
test r15, r10
add rcx, rsi
jmp 0x1404dad14
inc rsi
mov byte [rcx + r14*8 + 0x3e], al
movsxd rax, edx
cmp r15b, 0x45
cmp rax, r8
jmp 0x1404dad2b
jl 0x1404dacea
mov ebx, dword [rbp - 0x65]
test r15b, 0xa9
add ebx, r8d
jmp 0x1404dad40
jmp 0x1404dadf7
mov r9d, r11d
test r11b, dil
test rdx, rdx
jle 0x1404dadec
mov r13, qword [rbp - 0x11]
bts r8, r8
and r10b, r9b
and r10b, 0x62
mov r8, r11
btr r10, r13
mov r10, r13
bsf r11d, eax
mov rcx, 0x51676d0d
cmc
and r13d, 0x3f
test rcx, r12
inc r11b
rcr al, 0x56
sar r10, 6
movzx r11w, sil
shl r11b, 0x71
lea r11, [r13*8]
adc al, r9b
mov ch, 0xf3
add r11, r13
dec al
movzx ecx, ax
mov al, byte [r8 + rdi]
movsx ecx, dx
inc r9d
mov rcx, qword [r15 + r10*8 + 0xba940]
stc
cmc
add rcx, r8
jmp 0x1404dadc5
inc r8
clc
test sil, 0x5e
mov byte [rcx + r11*8 + 0x3e], al
cmovle rax, r14
movsxd rax, r9d
cmc
cmp rax, rdx
jl 0x1404dada9
sub r11d, r11d
xchg cx, cx
add cl, 2
add ebx, edx
and cl, r13b
cmovl cx, r10w
cmc
mov dword [rbp - 0x65], ebx
mov cl, r9b
cmp byte [rbp - 0x71], r11b
sete cl
xchg ch, cl
movzx ecx, r8w
mov ecx, dword [rsp + 0x40]
jmp 0x1404dae13
jmp 0x1404daea0
mov al, byte [rdi]
lea r8, [0x140000000]
xchg cl, ch
movsx cx, r10b
cmovae rcx, r13
mov rcx, qword [r8 + r12*8 + 0xba940]
jmp 0x1404dae39
inc ebx
mov dword [rbp - 0x65], ebx
mov byte [rcx + r14*8 + 0x3e], al
bsf rax, r12
clc
shr eax, 0xcb
mov rax, qword [r8 + r12*8 + 0xba940]
test r14b, 0x63
stc
or byte [rax + r14*8 + 0x3d], 4
cmp byte [rbp - 0x71], dl
jmp 0x1404dae0a
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x69], eax
stc
cmp r11w, 0x45c3
xchg rcx, rcx
mov ecx, dword [rsp + 0x40]
cmp byte [rbp - 0x71], 0
jmp 0x1404dae86
jmp 0x1404daea0
mov ecx, dword [rsp + 0x40]
test r15b, 0x17
cmp r8b, 7
cmp byte [rbp - 0x71], r11b
jmp 0x1404daea0
je 0x1404daebe
mov rax, qword [rsp + 0x50]
cmp sp, 0x6b36
test ecx, r14d
clc
and dword [rax + 0x3a8], 0xfffffffd
shr ah, 0xa2
mov rax, qword [rbp - 9]
movsd xmm0, qword [rbp - 0x69]
cmp r9b, sil
test r9b, 0xf9
movsd qword [rax], xmm0
mov dword [rax + 8], ecx
movzx rcx, r15w
rol rcx, cl
mov rcx, qword [rbp + 0x17]
clc
cmp cl, ah
xor rcx, rsp
jmp 0x1404daeeb
call fcn.14049eb1e
mov rbx, qword [rsp + 0x140]
add rsp, 0x100
mov rsi, 0x55984eb0
movsx rdi, dx
pop r15
pop r14
movzx ebp, cx
cmovb ebp, r8d
pop r13
movsx bp, r14b
jmp 0x1404daf21
pop r12
movzx rdi, sp
pop rdi
movzx rsi, r11w
jmp 0x1404daf31
pop rsi
pop rbp
jmp 0x1404daf38
ret
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x69], eax
movzx cx, r15b
ror ecx, cl
bt cx, di
mov ecx, dword [rsp + 0x40]
stc
cmp byte [rbp - 0x71], bl
jmp 0x1404daf5a
jmp 0x1404daea0