Function at 0x1404de75d
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x20], rbx
cmp r14d, 0x72b31075
push rbp
shr bpl, 0xf5
rcr bp, cl
rol bpl, 0xfe
push rsi
cmova ebp, esi
push rdi
rol dil, cl
and bpl, 0xa9
bsf edi, ebx
push r12
push r13
push r14
sbb r14, rdx
movsx r14, r15w
push r15
neg r14w
bt bp, 0x84
mov rbp, rsp
shr dil, 0xec
sub rsp, 0x60
rcl dil, cl
test r11b, 5
sub ebx, ebx
mov r14d, r8d
cmp r9d, 0x4641268a
movsxd r12, ecx
mov rdi, rdx
test r8d, r8d
jmp 0x1404de7c8
je 0x1404decf4
test rdx, rdx
jmp 0x1404de7d6
jne 0x1404de805
call fcn.1404b8a71
mov dword [rax], ebx
call fcn.1404b8a35
mov dword [rax], 0x16
jmp 0x1404de7f3
call fcn.1404b970a
or eax, 0xffffffff
jmp 0x1404de800
jmp 0x1404decfc
mov rax, r12
bsf r15, r8
sbb r13, 0x25450a50
xadd r15, r13
lea rcx, [0x1400ba940]
and eax, 0x3f
mov r13, r12
cmove si, r14w
xchg r15b, sil
jmp 0x1404de831
sar r13, 6
btc r15, 0xe2
shl r15b, cl
adc si, r14w
lea r15, [rax + rax*8]
and esi, 0x130c5dcc
movsx si, dil
mov rcx, qword [rcx + r13*8]
inc sil
movsxd rax, eax
movsx esi, byte [rcx + r15*8 + 0x39]
lea eax, [rsi - 1]
test r9w, 0x3168
clc
cmp al, 1
jmp 0x1404de871
ja 0x1404de897
mov eax, r14d
cmp esi, esi
jmp 0x1404de881
not eax
cmp r11, 0x6b8428c1
test al, 1
jmp 0x1404de891
je 0x1404de7dc
test byte [rcx + r15*8 + 0x38], 0x20
jmp 0x1404de8a2
je 0x1404de8be
sub edx, edx
mov ecx, r12d
movsxd r8, eax
lea r8d, [rdx + 2]
jmp 0x1404de8b9
call fcn.140244d4a
mov ecx, r12d
jmp 0x1404de8c6
mov qword [rbp - 0x20], rbx
jmp 0x1404de8cf
call fcn.1404e476d
test eax, eax
jmp 0x1404de8db
je 0x1404deadb
lea rax, [0x1400ba940]
cmp r9b, 0x54
mov rax, qword [rax + r13*8]
stc
cmp r10b, 0x41
cmp byte [rax + r15*8 + 0x38], bl
jge 0x1404deadb
call fcn.1404ccdab
mov rcx, qword [rax + 0x90]
test rbp, 0x6478424e
cmp qword [rcx + 0x138], rbx
jmp 0x1404de91f
jne 0x1404de944
lea rax, [0x1400ba940]
stc
test ax, si
mov rax, qword [rax + r13*8]
cmp byte [rax + r15*8 + 0x39], bl
jmp 0x1404de93e
je 0x1404deadb
lea rax, [0x1400ba940]
movzx edx, r15w
mov rcx, qword [rax + r13*8]
movsx edx, sp
xchg dh, dl
lea rdx, [rbp - 0x10]
mov rcx, qword [rcx + r15*8 + 0x28]
jmp 0x1404de966
call qword [sym.imp.KERNEL32.dll_GetConsoleMode]
test eax, eax
jmp 0x1404de973
je 0x1404deadb
test sil, sil
je 0x1404dea96
dec sil
cmp sil, 1
jmp 0x1404de98e
ja 0x1404dec19
lea r12, [rdi + r14]
sal r14w, 0x9e
btr r14w, 0x1c
btc r14d, eax
mov qword [rbp - 0x30], rbx
not r14b
mov r14, rdi
cmp rdi, r12
jae 0x1404dec0f
mov esi, dword [rbp - 0x2c]
bswap ecx
movzx cx, bpl
movsx eax, bp
movzx eax, word [r14]
bswap cx
movsx ecx, sp
movzx ecx, ax
jmp 0x1404de9d9
mov word [rbp - 0x10], ax
jmp 0x1404de9e2
call fcn.1404e9001
movzx ecx, word [rbp - 0x10]
jmp 0x1404de9f1
cmp ax, cx
jmp 0x1404de9f9
jne 0x1404dea83
add esi, 2
cmp rbx, 0x7f25a1b
test r15w, r12w
cmp rbx, rdx
mov dword [rbp - 0x2c], esi
test r10b, 0x8d
cmp bpl, 0x42
cmp cx, 0xa
jmp 0x1404dea24
jne 0x1404dea60
mov ecx, 0xd
jmp 0x1404dea34
call fcn.1404e9001
mov ecx, 0xd
clc
test r14, 0x5f6c438a
cmp ax, cx
jmp 0x1404dea4e
jne 0x1404dea83
inc esi
jmp 0x1404dea5b
mov dword [rbp - 0x2c], esi
inc ebx
add r14, 2
cmp r11w, sp
test r13b, 0x59
cmp ax, 0x54d6
cmp r14, r12
jmp 0x1404dea78
jae 0x1404dec0f
jmp 0x1404de9c7
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x30], eax
jmp 0x1404dea91
jmp 0x1404dec0f
mov r9d, r14d
xchg r8w, r8w
cmovnp r8w, r12w
mov ecx, ebx
lea rcx, [rbp - 0x30]
bswap dx
xchg r8b, dl
mov r8, rdi
movzx rdx, dx
cwd
mov edx, r12d
jmp 0x1404deabf
call fcn.1404ded4a
movsd xmm0, qword [rax]
bswap rbx
cmovle rbx, rbp
movzx bx, cl
mov ebx, dword [rax + 8]
jmp 0x1404dec14
lea rax, [0x1400ba940]
mov rcx, qword [rax + r13*8]
test rsp, rbx
clc
cmp byte [rcx + r15*8 + 0x38], bl
jmp 0x1404deaf4
jge 0x1404debb2
mov ecx, esi
test cl, bpl
test r8d, 0x60e2f35
test sil, sil
jmp 0x1404deb0e
je 0x1404deb86
sub ecx, 1
je 0x1404deb52
cmp ecx, 1
jmp 0x1404deb25
jne 0x1404dec19
mov r9d, r14d
lea rcx, [rbp - 0x30]
cdq
sets dl
movsxd rdx, ecx
mov r8, rdi
movsx dx, ch
mov edx, r12d
jmp 0x1404deb48
call fcn.1404df9bd
jmp 0x1404deac4
mov r9d, r14d
movzx ecx, ax
cmovl cx, r13w
cwd
lea rcx, [rbp - 0x30]
movsxd r8, ebx
xchg dl, dl
cwd
mov r8, rdi
setg dh
movzx rdx, si
mov edx, r12d
jmp 0x1404deb7c
call fcn.1404dfc43
jmp 0x1404deac4
mov r9d, r14d
movzx r8d, r10w
movsx edx, bx
lea rcx, [rbp - 0x30]
mov edx, ecx
movzx edx, cx
not r8w
mov r8, rdi
mov edx, r12d
jmp 0x1404deba8
call fcn.1404df793
jmp 0x1404deac4
mov rcx, qword [rcx + r15*8 + 0x28]
lea r9, [rbp - 0x2c]
ror rdx, cl
sub eax, eax
shr dl, 0xa5
mov r8d, r14d
and dx, 0x68cb
and qword [rsp + 0x20], rax
movzx dx, bpl
movzx edx, ax
movsx edx, r11w
mov rdx, rdi
mov qword [rbp - 0x30], rax
mov dword [rbp - 0x28], eax
jmp 0x1404debeb
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jmp 0x1404debf8
jne 0x1404dec07
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x30], eax
mov ebx, dword [rbp - 0x28]
clc
sar ax, 0x4e
movsd xmm0, qword [rbp - 0x30]
movsd qword [rbp - 0x20], xmm0
mov rax, qword [rbp - 0x20]
cmc
clc
shr rax, 0x20
test ax, r11w
test eax, eax
jmp 0x1404dec2e
jne 0x1404dece6
mov eax, dword [rbp - 0x20]
test r15d, 0x23c47d6f
test r12b, r11b
cmp cl, r9b
test eax, eax
jmp 0x1404dec4b
je 0x1404dec96
cmp eax, 5
jmp 0x1404dec59
jne 0x1404dec84
call fcn.1404b8a35
mov dword [rax], 9
jmp 0x1404dec6f
call fcn.1404b8a71
mov dword [rax], 5
jmp 0x1404dec7f
jmp 0x1404de7f8
mov ecx, dword [rbp - 0x20]
jmp 0x1404dec8c
call fcn.1404b8aaf
jmp 0x1404de7f8
lea rax, [0x1400ba940]
cmp r8b, 0xb6
mov rax, qword [rax + r13*8]
test byte [rax + r15*8 + 0x38], 0x40
jmp 0x1404decb0
je 0x1404decc4
cmp byte [rdi], 0x1a
jmp 0x1404decbe
je 0x1404decf4
call fcn.1404b8a35
mov dword [rax], 0x1c
jmp 0x1404decd4
call fcn.1404b8a71
and dword [rax], 0
jmp 0x1404dece1
jmp 0x1404de7f8
mov eax, dword [rbp - 0x1c]
stc
cmp r14b, spl
sub eax, ebx
jmp 0x1404decfc
sub eax, eax
and si, sp
xor rbx, r12
mov rbx, qword [rsp + 0xb8]
add rsp, 0x60
movsx r12w, bpl
movsx edi, r15w
pop r15
setns sil
xchg ebp, r13d
pop r14
movsx r13, cx
not r12
pop r13
movsx rbp, bx
movsx edi, bx
xchg dil, r12b
pop r12
not dil
pop rdi
bswap rsi
jmp 0x1404ded42
pop rsi
pop rbp
jmp 0x1404ded49
ret