Function at 0x1404d76d3
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
rcr ax, 0x68
stc
push rbp
sar bpl, cl
push rsi
push rdi
btr si, 0x90
or ebp, eax
push r12
btc ax, 0x88
push r13
test dil, 0xf4
btr r13w, 0xe8
push r14
not rax
bsr r13d, r10d
push r15
adc r12b, r10b
lea rbp, [rsp - 0x27]
movzx r14d, cx
shrd r14, rcx, 0x38
movzx si, r15b
sub rsp, 0x100
cmc
lahf
mov rax, qword [0x1400b7288]
xor rax, rsp
jmp 0x1404d773d
mov qword [rbp + 0x17], rax
sbb sil, 0x38
btc si, 0xf6
rcl r13b, cl
movsxd rsi, edx
btc r14w, bp
mov r15, r8
movsx r13, di
mov rax, rsi
mov qword [rbp - 9], rcx
rcr r12b, 0xb3
mov qword [rbp - 0x11], rax
lea rcx, [0x140000000]
btc r14w, 0xbb
rol r12, 0xaf
rcr r14b, 0x94
and eax, 0x3f
and r12b, 0x6f
bts r12d, r10d
btc r13d, r12d
mov r13d, r9d
xchg r12w, r14w
rcr r14b, 0xc1
and r14w, 0x1db1
lea r13, [r13 + r8]
xchg r14w, r12w
movsx r12w, spl
movzx r12d, r9w
mov qword [rbp - 0x21], r8
mov r12, rsi
and r14b, 0x8f
mov qword [rbp - 0x51], r13
shl r14w, cl
btr r14w, bx
clc
sar r12, 6
bswap r14w
movsx r14w, r12b
lea r14, [rax + rax*8]
nop
setne al
mov rax, qword [rcx + r12*8 + 0xba940]
jmp 0x1404d77ed
mov rax, qword [rax + r14*8 + 0x28]
jmp 0x1404d77f7
mov qword [rbp - 0x49], rax
jmp 0x1404d7800
call qword [sym.imp.KERNEL32.dll_GetConsoleOutputCP]
xor edx, edx
movsx ecx, r13w
movzx cx, r11b
xchg cl, cl
lea rcx, [rsp + 0x50]
jmp 0x1404d781d
mov dword [rbp - 0x59], eax
jmp 0x1404d7825
call fcn.1404a058c
mov rcx, qword [rsp + 0x58]
rcr rbx, 0x66
clc
xadd bh, bl
xor r11d, r11d
shld edx, esp, 0x4c
xadd bl, dil
mov dword [rbp - 0x69], r11d
mov ebx, r11d
sar dh, 0x75
ror dx, cl
test cx, di
mov dword [rbp - 0x65], ebx
clc
bts dx, r13w
mov rdi, r15
btr rdx, rbp
and dh, 0x9e
mov edx, dword [rcx + 0xc]
sar cl, cl
xadd ch, cl
mov ecx, r11d
test spl, r8b
mov dword [rsp + 0x40], ecx
mov dword [rbp - 0x55], edx
jmp 0x1404d7880
cmp r15, r13
jmp 0x1404d7888
jae 0x1404d8059
mov rax, rsi
rol cl, 0x7b
mov rsi, r15
sar rax, 6
setne r15b
mov qword [rbp - 0x19], rax
mov cl, byte [rdi]
add r15, 0x3bc97265
cmp bp, r14w
btr r15w, r13w
mov r15d, 1
jmp 0x1404d78c1
mov byte [rsp + 0x44], cl
mov dword [rsp + 0x48], r11d
cmc
cmp edx, 0xfde9
jmp 0x1404d78d6
jne 0x1404d7bd0
lea r15, [0x140000000]
mov edx, r11d
ror r9b, 0x4c
mov r9, qword [r15 + rax*8 + 0xba940]
sal eax, cl
rcr esi, 0x30
mov rsi, r11
xor rax, 0x455c73d8
lea rax, [r9 + r14*8]
cmc
cmp byte [rax + rsi + 0x3e], r11b
jmp 0x1404d7910
je 0x1404d7934
inc edx
jmp 0x1404d791d
inc rsi
jmp 0x1404d7925
cmp rsi, 5
jmp 0x1404d792e
jl 0x1404d7906
test rsi, rsi
jmp 0x1404d793c
jle 0x1404d7b01
mov rax, qword [r15 + r12*8 + 0xba940]
mov r8, qword [rbp - 0x51]
sbb r10b, dl
and cl, ah
adc r13b, r8b
sub r8, rdi
movzx ecx, byte [rax + r14*8 + 0x3e]
mov r13b, 0x7c
xchg r13w, r13w
seta r13b
movsx r15d, byte [rcx + r15 + 0xb7d00]
movzx r13w, r15b
movsx r10w, bpl
not r10w
inc r15d
clc
btr r10w, r14w
mov r13d, r15d
and r10b, r8b
bsr r10d, edx
sub r13d, edx
movsxd r10, r13d
cmp bl, 0x92
cmp r10, r8
jmp 0x1404d79a5
jg 0x1404d7e8c
lea rax, [rbp - 1]
not dl
xchg r8w, r8w
mov rdx, r11
sub r9, rax
lea r8, [r9 + r14*8]
ror ch, cl
lea rcx, [rbp - 1]
sbb al, dl
add rcx, rdx
inc rdx
mov al, byte [rcx + r8 + 0x3e]
test dl, 0x4b
mov byte [rcx], al
test dx, r14w
cmp rdx, rsi
jl 0x1404d79c1
test r13d, r13d
jmp 0x1404d79ec
jle 0x1404d7a1b
lea rcx, [rbp - 1]
xor edx, 0x45ec6491
btc r8w, 0x8c
mov r8, r10
bts edx, ebp
add rcx, rsi
mov rdx, rdi
jmp 0x1404d7a13
call fcn.14049f5b0
sub r11d, r11d
mov rdx, r11
rcr cx, cl
bswap r8
cmovg rcx, rax
lea r8, [0x140000000]
mov rcx, qword [r8 + r12*8 + 0xba940]
cmp r8b, al
cmc
add rcx, rdx
jmp 0x1404d7a43
inc rdx
cmc
mov byte [rcx + r14*8 + 0x3e], r11b
test r12b, r15b
test r9b, 0x17
cmp rdx, rsi
jl 0x1404d7a2f
lea rax, [rbp - 1]
sar r9b, 0x95
mov qword [rbp - 0x41], r11
sar r8b, cl
cdq
mov qword [rbp - 0x39], rax
movsx rax, sp
test r14b, bpl
lea r9, [rbp - 0x41]
mov eax, r11d
lea rdx, [rbp - 0x39]
rcl cx, cl
cmp r15d, 4
movzx rcx, r14w
movsx ecx, r13w
lea rcx, [rsp + 0x48]
movsxd r15, r11d
movzx r15, r10w
sete al
inc eax
movzx r8d, r8w
mov r15b, 0xd7
bswap r15w
mov r8d, eax
movsx r15w, spl
movzx r15, r10w
mov r15d, eax
jmp 0x1404d7ac1
call fcn.1404dd24c
cmp rax, 0xffffffffffffffff
jmp 0x1404d7acf
je 0x1404d7c9b
lea eax, [r13 - 1]
add esi, edi
sar esi, cl
mov r13, qword [rbp - 0x51]
bts si, r8w
xadd sil, sil
movsxd rsi, eax
clc
test r11w, 0x416
add rsi, rdi
jmp 0x1404d7afc
jmp 0x1404d7cd0
movzx eax, byte [rdi]
adc si, di
bt esi, r8d
cmp rax, r8
mov rdx, r13
sar ecx, 0x2d
sbb sil, 0x38
neg sil
sub rdx, rdi
movsx rsi, byte [rax + r15 + 0xb7d00]
neg al
lea ecx, [rsi + 1]
shr ax, 0x80
movsxd rax, ecx
cmp rax, rdx
jmp 0x1404d7b3b
jg 0x1404d7f13
cmp ecx, 4
xchg cl, r8b
mov qword [rbp - 0x31], r11
mov bx, 0x5739
movsx rcx, r11w
mov bl, r8b
mov eax, r11d
mov qword [rbp - 0x29], rdi
movsx r9d, sp
setae r8b
xchg al, al
sete al
movsx ecx, r10w
dec dx
lea r9, [rbp - 0x31]
inc eax
movzx rcx, r10w
movzx edx, cx
movsx rbx, r8w
lea rdx, [rbp - 0x29]
mov r8d, eax
movsx bx, dl
not rbx
lea rcx, [rsp + 0x48]
bswap bx
movzx bx, dh
mov ebx, eax
jmp 0x1404d7ba3
call fcn.1404dd24c
cmp rax, 0xffffffffffffffff
jmp 0x1404d7bb1
je 0x1404d7c9b
add rsi, rdi
jmp 0x1404d7bc3
mov r15d, ebx
jmp 0x1404d7bcb
jmp 0x1404d7cd0
lea rax, [0x140000000]
cdq
mov rdx, qword [rax + r12*8 + 0xba940]
sub cl, 0x9e
and cl, sil
mov cl, byte [rdx + r14*8 + 0x3d]
cmp r8w, 0x49c2
test r11b, bpl
test cl, 4
je 0x1404d7c31
mov al, byte [rdx + r14*8 + 0x3e]
jmp 0x1404d7c07
and cl, 0xfb
jmp 0x1404d7c0f
mov byte [rbp + 7], al
not al
mov al, byte [rdi]
jmp 0x1404d7c1b
mov byte [rdx + r14*8 + 0x3d], cl
lea rdx, [rbp + 7]
mov byte [rbp + 8], al
jmp 0x1404d7c2c
jmp 0x1404d7c71
call fcn.1404a6d6e
movzx ecx, byte [rdi]
sub edx, edx
jmp 0x1404d7c40
cmp word [rax + rcx*2], dx
jmp 0x1404d7c49
jge 0x1404d7ca9
inc rsi
cmp rdi, 0x1eef60bf
cmp rsi, r13
jmp 0x1404d7c61
jae 0x1404d7fcd
mov rdx, rdi
movsxd rcx, esp
movzx r8, cx
mov r8d, 2
movzx ecx, r15w
jmp 0x1404d7c83
lea rcx, [rsp + 0x48]
jmp 0x1404d7c8d
call fcn.14025f3a8
cmp eax, 0xffffffff
jne 0x1404d7cd0
cmp byte [rbp - 0x71], 0
jmp 0x1404d7ca4
jmp 0x1404d7fbf
mov r8, r15
bswap rcx
lea rcx, [rsp + 0x48]
cdq
mov rdx, rdi
jmp 0x1404d7cbd
call fcn.14025f3a8
cmp eax, 0xffffffff
jmp 0x1404d7cca
je 0x1404d8034
mov ecx, dword [rbp - 0x59]
lea rax, [rbp + 0xf]
shl r8b, 4
xor ebx, ebx
xor dil, 0xd3
bt r8d, r14d
test bpl, 0x4a
lea r8, [rsp + 0x48]
neg r9b
mov qword [rsp + 0x38], rbx
bt rdi, r8
lea rdi, [rsi + 1]
mov qword [rsp + 0x30], rbx
sal r9w, cl
or r9w, bx
mov r9d, r15d
test r8b, 0x7e
cmp r8b, 0xe8
stc
mov dword [rsp + 0x28], 5
sub edx, edx
mov qword [rsp + 0x20], rax
call fcn.1404c56bb
mov esi, eax
cmp r10w, r10w
test eax, eax
jmp 0x1404d7d38
je 0x1404d80ee
mov rcx, qword [rbp - 0x49]
lea r9, [rsp + 0x4c]
xchg dl, r8b
mov r8d, eax
xchg dx, dx
cdq
mov qword [rsp + 0x20], rbx
lea rdx, [rbp + 0xf]
call qword [sym.imp.KERNEL32.dll_WriteFile]
sub r11d, r11d
test rax, 0x564b09af
cmc
cmp r11w, sp
test eax, eax
je 0x1404d80e4
mov r15d, dword [rsp + 0x40]
bts ebx, r8d
adc bh, 0x4d
adc rbx, r9
mov ebx, edi
clc
sub ebx, dword [rbp - 0x21]
cmp sil, al
test r13w, 0x634a
jmp 0x1404d7d99
add ebx, r15d
cmc
cmp r11b, dl
jmp 0x1404d7da5
mov dword [rbp - 0x65], ebx
test rbp, 0x62743b1c
cmp dword [rsp + 0x4c], esi
jmp 0x1404d7db8
jb 0x1404d7fbb
cmp byte [rsp + 0x44], 0xa
jmp 0x1404d7dc8
jne 0x1404d7e6a
mov rcx, qword [rbp - 0x49]
mov ax, bx
jmp 0x1404d7dde
lea eax, [r11 + 0xd]
movzx r8d, r11w
lea r9, [rsp + 0x4c]
movzx rdx, bp
mov word [rsp + 0x44], ax
lea r8d, [r11 + 1]
movsx dx, dl
cdq
mov qword [rsp + 0x20], r11
movzx edx, sp
movsx rdx, r10w
movzx dx, ch
lea rdx, [rsp + 0x44]
jmp 0x1404d7e17
call qword [sym.imp.KERNEL32.dll_WriteFile]
sub r11d, r11d
test eax, eax
jmp 0x1404d7e27
je 0x1404d802b
cmp dword [rsp + 0x4c], 1
jmp 0x1404d7e37
jb 0x1404d7fbb
inc r15d
movzx esi, bx
jmp 0x1404d7e4b
inc ebx
bt rsi, 0xc
not sil
sar sil, 0x31
mov dword [rsp + 0x40], r15d
bswap si
xor sil, bl
mov dword [rbp - 0x65], ebx
shl si, cl
mov rsi, rdi
cmp rdi, r13
jmp 0x1404d7e75
jae 0x1404d804a
mov rax, qword [rbp - 0x19]
mov edx, dword [rbp - 0x55]
jmp 0x1404d7e87
jmp 0x1404d78a3
mov edx, r11d
clc
test r8, r8
jmp 0x1404d7e98
jle 0x1404d7f06
sub rdi, rsi
mov al, 0xf1
movsx rbx, r13w
lea rbx, [0x140000000]
mov al, byte [rdi + rsi]
movsx cx, r14b
setno cl
inc edx
btc cx, 0xa8
rcl cl, 0x96
btc cx, r12w
mov rcx, qword [rbx + r12*8 + 0xba940]
stc
add rcx, rsi
jmp 0x1404d7ed9
inc rsi
test eax, 0x53a54dc4
cmc
mov byte [rcx + r14*8 + 0x3e], al
shld rax, r15, 0x39
rol al, cl
movsxd rax, edx
test r9, r9
cmc
cmp rax, r8
jmp 0x1404d7efd
jl 0x1404d7eae
mov ebx, dword [rbp - 0x65]
add ebx, r8d
jmp 0x1404d7f0e
jmp 0x1404d7fac
mov r9d, r11d
cmp esp, ebp
test di, 0x3ff4
test rdx, rdx
jmp 0x1404d7f25
jle 0x1404d7fa7
mov r13, qword [rbp - 0x11]
cmp dl, r8b
ror r8b, cl
stc
mov r8, r11
mov r10, r13
xor r11d, esi
dec al
cmove ecx, ecx
and r13d, 0x3f
sar r10, 6
lea r11, [r13*8]
add r11, r13
not cl
mov al, byte [r8 + rdi]
cmovno cx, r15w
dec ch
movsx rcx, bx
inc r9d
bswap ecx
cmovg ecx, esi
and cl, dl
mov rcx, qword [r15 + r10*8 + 0xba940]
add rcx, r8
jmp 0x1404d7f82
inc r8
mov byte [rcx + r11*8 + 0x3e], al
seto ah
movsxd rax, r9d
cmp rax, rdx
jmp 0x1404d7f98
jl 0x1404d7f59
sub r11d, r11d
add cl, 3
rcr cl, 0xd0
add ebx, edx
ror cx, cl
mov dword [rbp - 0x65], ebx
movsx rcx, dx
mov cx, r10w
btc cx, di
cmp byte [rbp - 0x71], r11b
mov ecx, dword [rsp + 0x40]
jmp 0x1404d7fc8
jmp 0x1404d805d
mov al, byte [rdi]
lea r8, [0x140000000]
bswap cx
mov rcx, qword [r8 + r12*8 + 0xba940]
inc ebx
cmp rbp, 0x732663ab
jmp 0x1404d7fef
mov dword [rbp - 0x65], ebx
cmp r12w, r10w
mov byte [rcx + r14*8 + 0x3e], al
bsf eax, r12d
mov rax, qword [r8 + r12*8 + 0xba940]
jmp 0x1404d8012
or byte [rax + r14*8 + 0x3d], 4
jmp 0x1404d801e
cmp byte [rbp - 0x71], dl
jmp 0x1404d8026
jmp 0x1404d7fbf
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x69], eax
mov ecx, dword [rsp + 0x40]
cmc
cmp al, spl
cmp byte [rbp - 0x71], 0
jmp 0x1404d8045
jmp 0x1404d805d
mov ecx, dword [rsp + 0x40]
cmp dx, 0x4602
jmp 0x1404d8059
cmp byte [rbp - 0x71], r11b
je 0x1404d8073
mov rax, qword [rsp + 0x50]
and dword [rax + 0x3a8], 0xfffffffd
cdqe
rcr eax, cl
mov rax, qword [rbp - 9]
test cl, r13b
cmp r9b, 0x6b
movsd xmm0, qword [rbp - 0x69]
movsd qword [rax], xmm0
mov dword [rax + 8], ecx
xchg cx, cx
cmp r11b, r12b
cmc
mov rcx, qword [rbp + 0x17]
stc
xor rcx, rsp
jmp 0x1404d809e
call fcn.14049bac2
mov rbx, qword [rsp + 0x140]
movsx esi, r11w
add rsp, 0x100
pop r15
mov r14w, 0x31b7
setle sil
bswap r14d
pop r14
movsx r13d, r8w
jmp 0x1404d80d2
pop r13
pop r12
mov sil, 0xa5
pop rdi
pop rsi
not bp
movsx ebp, r11w
pop rbp
ret
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x69], eax
stc
mov ecx, dword [rsp + 0x40]
cmp byte [rbp - 0x71], bl
jmp 0x1404d805d