Function at 0x1404d8eaa
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
sar ax, 0x87
xor ax, 0x1382
setbe ah
push rbp
push rsi
shl eax, 0xd7
push rdi
push r12
push r13
bt r12w, r10w
push r14
movzx esi, cx
cmp r12, 0x2fca2383
mov rax, r14
push r15
sbb r15, 0x6fb77afe
btr r13w, dx
btr r14, 0x50
lea rbp, [rsp - 0x27]
sub rsp, 0x100
movzx si, r13b
mov rax, qword [0x1400b7288]
sbb sil, 0x1e
movsx r13, cx
btc r14d, edi
xor rax, rsp
mov r14w, dx
mov qword [rbp + 0x17], rax
movsxd rsi, edx
cbw
mov r15, r8
cdqe
mov rax, rsi
mov qword [rbp - 9], rcx
stc
sal r13b, cl
mov qword [rbp - 0x11], rax
movsx r12, cx
ror r14b, cl
lea rcx, [0x140000000]
and eax, 0x3f
stc
mov r13d, r9d
test rsp, r8
btr r14d, esi
movzx r14, r8w
lea r13, [r13 + r8]
xor r12, 0x1bde3d79
mov qword [rbp - 0x21], r8
shr r12b, cl
sbb r12w, 0x942
rcl r14w, cl
mov r12, rsi
mov qword [rbp - 0x51], r13
rcr r14b, cl
sar r12, 6
jmp 0x1404d8f8a
lea r14, [rax + rax*8]
movsxd rax, r9d
mov rax, qword [rcx + r12*8 + 0xba940]
jmp 0x1404d8f9e
mov rax, qword [rax + r14*8 + 0x28]
jmp 0x1404d8fa8
mov qword [rbp - 0x49], rax
jmp 0x1404d8fb1
call qword [sym.imp.KERNEL32.dll_GetConsoleOutputCP]
xor edx, edx
lea rcx, [rsp + 0x50]
jmp 0x1404d8fc3
mov dword [rbp - 0x59], eax
call fcn.1404a1ba3
mov rcx, qword [rsp + 0x58]
movsx dx, r12b
cwd
and bl, r9b
xor r11d, r11d
cmc
mov dword [rbp - 0x69], r11d
sub edx, 0x11b42f33
mov ebx, r11d
add edi, 0x37333c10
mov dword [rbp - 0x65], ebx
bsf rdi, rdx
btr di, 0x51
mov rdi, r15
neg dh
movzx edx, ax
test al, 0x3e
mov edx, dword [rcx + 0xc]
sub cx, 0x5cef
mov ecx, r11d
jmp 0x1404d9017
mov dword [rsp + 0x40], ecx
clc
cmp r13, r15
mov dword [rbp - 0x55], edx
cmp r15, r13
jmp 0x1404d902a
jae 0x1404d97ca
mov rax, rsi
stc
neg sil
mov rsi, r15
sub r15w, r14w
sar rax, 6
mov qword [rbp - 0x19], rax
shl cl, cl
mov cl, byte [rdi]
xor r15b, 0x4d
mov r15d, 1
clc
jmp 0x1404d905a
mov byte [rsp + 0x44], cl
stc
clc
mov dword [rsp + 0x48], r11d
stc
cmp eax, edi
cmp edx, 0xfde9
jmp 0x1404d9073
jne 0x1404d937d
lea r15, [0x140000000]
add si, 0x204f
mov edx, r11d
bsf r9w, r10w
movzx r9w, dl
mov r9, qword [r15 + rax*8 + 0xba940]
mov rsi, r11
lea rax, [r9 + r14*8]
cmp sil, 1
test r15w, r13w
stc
cmp byte [rax + rsi + 0x3e], r11b
jmp 0x1404d90b4
je 0x1404d90d8
inc edx
jmp 0x1404d90c1
inc rsi
test rsi, rdx
cmc
stc
cmp rsi, 5
jmp 0x1404d90d2
jl 0x1404d90aa
test rsi, rsi
jmp 0x1404d90e0
jle 0x1404d92d5
mov rax, qword [r15 + r12*8 + 0xba940]
shr r10b, cl
mov r8, qword [rbp - 0x51]
sbb r10, r13
sub r8, rdi
movsx r10d, dx
movsxd r10, edx
not cx
movzx ecx, byte [rax + r14*8 + 0x3e]
movsx r15d, byte [rcx + r15 + 0xb7d00]
dec r13d
movsx r10w, r15b
inc r15d
bts r13d, r10d
mov r13d, r15d
bswap r10w
movzx r10w, r10b
and r10w, 0x1c46
sub r13d, edx
xor r10d, edi
rol r10b, 0xfa
movsxd r10, r13d
cmp r10, r8
jmp 0x1404d914a
jg 0x1404d9627
lea rax, [rbp - 1]
ror dx, cl
shl edx, cl
mov rdx, r11
add cx, 0x1a82
sub r9, rax
mov al, 0x90
xor ch, 0x9f
and r8w, di
lea r8, [r9 + r14*8]
lea rcx, [rbp - 1]
or al, 0x78
sal al, cl
add rcx, rdx
inc rdx
shl al, cl
mov al, byte [rcx + r8 + 0x3e]
test r10d, 0x523215b7
mov byte [rcx], al
cmp rdx, rsi
jmp 0x1404d9197
jl 0x1404d9171
test r13d, r13d
jmp 0x1404d91a5
jle 0x1404d91db
lea rcx, [rbp - 1]
stc
sal r8b, cl
movsx r8, r12w
mov r8, r10
shl dl, cl
xadd edx, edx
add rcx, rsi
mov dh, 0xed
mov rdx, rdi
jmp 0x1404d91cd
call fcn.1404a0bfe
xor r11d, r11d
cdq
shr cx, cl
cqo
mov rdx, r11
movzx r8w, r12b
btr r8, 0x54
lea r8, [0x140000000]
sub rcx, rax
mov rcx, qword [r8 + r12*8 + 0xba940]
cmp r14b, 0xfa
add rcx, rdx
jmp 0x1404d9206
inc rdx
cmc
stc
mov byte [rcx + r14*8 + 0x3e], r11b
cmp r15d, 0x69fd143a
cmp rdx, rsi
jmp 0x1404d921f
jl 0x1404d91f2
lea rax, [rbp - 1]
and r8b, 0x37
ror r8b, cl
bsf r9w, ax
mov qword [rbp - 0x41], r11
bts r9w, bx
mov qword [rbp - 0x39], rax
sal r8b, cl
lea r9, [rbp - 0x41]
mov eax, r11d
rcr dh, cl
movsx cx, al
lea rdx, [rbp - 0x39]
cmp r15d, 4
movzx cx, spl
lea rcx, [rsp + 0x48]
sete al
cmovl r15w, r11w
jmp 0x1404d9271
inc eax
setle r8b
xchg r15b, r15b
mov r8d, eax
mov r15b, spl
movsxd r15, r10d
movsx r15, bp
mov r15d, eax
call fcn.1404dea80
cmp rax, 0xffffffffffffffff
jmp 0x1404d9298
je 0x1404d9422
lea eax, [r13 - 1]
test ebx, 0x48184799
add r13w, 0x2112
movzx rsi, r10w
mov r13, qword [rbp - 0x51]
not si
btr si, r15w
movsxd rsi, eax
test r8w, r12w
cmp r8b, bpl
add rsi, rdi
jmp 0x1404d92d0
jmp 0x1404d945e
movzx eax, byte [rdi]
mov rdx, r13
sub rdx, rdi
movsx ecx, ax
movsx rsi, byte [rax + r15 + 0xb7d00]
cmp sil, dl
lea ecx, [rsi + 1]
shr rax, cl
setns ah
movsxd rax, ecx
clc
cmp rax, rdx
jg 0x1404d969f
cmp ecx, 4
lahf
sete r9b
cwd
mov qword [rbp - 0x31], r11
mov eax, r11d
movsx ecx, r13w
movsx bx, r9b
movzx rbx, bp
mov qword [rbp - 0x29], rdi
cwd
movzx rcx, dx
sete al
lea r9, [rbp - 0x31]
xchg r8b, dl
inc eax
xchg r8b, bl
lea rdx, [rbp - 0x29]
setl ch
mov r8d, eax
lea rcx, [rsp + 0x48]
movsx ebx, di
mov bx, ax
movzx rbx, bx
mov ebx, eax
jmp 0x1404d935a
call fcn.1404dea80
cmp rax, 0xffffffffffffffff
jmp 0x1404d9368
je 0x1404d9422
add rsi, rdi
movzx r15, si
mov r15d, ebx
jmp 0x1404d945e
lea rax, [0x140000000]
not cl
mov rdx, qword [rax + r12*8 + 0xba940]
sar cl, 0x48
sal cl, 0x99
ror cl, cl
mov cl, byte [rdx + r14*8 + 0x3d]
clc
test cl, 4
jmp 0x1404d93a4
je 0x1404d93da
mov al, byte [rdx + r14*8 + 0x3e]
cmc
test sp, r11w
and cl, 0xfb
mov byte [rbp + 7], al
mov al, byte [rdi]
jmp 0x1404d93c1
mov byte [rdx + r14*8 + 0x3d], cl
movsxd rdx, r13d
lea rdx, [rbp + 7]
mov byte [rbp + 8], al
jmp 0x1404d93d5
jmp 0x1404d9401
call fcn.1404a83b9
movzx ecx, byte [rdi]
sub edx, edx
cmc
cmp ebx, r15d
cmp word [rax + rcx*2], dx
jge 0x1404d9430
inc rsi
cmp rsi, r13
jae 0x1404d9752
mov rdx, rdi
mov r8d, 2
bswap cx
lea rcx, [rsp + 0x48]
call fcn.1401b59dd
cmp eax, 0xffffffff
jmp 0x1404d941c
jne 0x1404d945e
cmp byte [rbp - 0x71], 0
jmp 0x1404d942b
jmp 0x1404d9749
mov r8, r15
lea rcx, [rsp + 0x48]
mov rdx, r10
movzx rdx, r11w
movsx edx, r12w
mov rdx, rdi
jmp 0x1404d944b
call fcn.1401b59dd
cmp eax, 0xffffffff
jmp 0x1404d9458
je 0x1404d97b1
mov ecx, dword [rbp - 0x59]
and di, sp
movsxd rax, r8d
movsx r9d, di
lea rax, [rbp + 0xf]
ror r9b, 0x7d
bsr r8d, r9d
xchg di, r8w
xor ebx, ebx
lea r8, [rsp + 0x48]
btr edi, 0x1d
rcl di, cl
xor edi, 0x1426978
mov qword [rsp + 0x38], rbx
rol r9w, cl
lea rdi, [rsi + 1]
cmp spl, r14b
mov qword [rsp + 0x30], rbx
jmp 0x1404d94ac
mov r9d, r15d
jmp 0x1404d94b4
mov dword [rsp + 0x28], 5
cmc
stc
clc
xor edx, edx
jmp 0x1404d94c6
mov qword [rsp + 0x20], rax
jmp 0x1404d94d0
call fcn.1404c6bef
mov esi, eax
test eax, eax
jmp 0x1404d94de
je 0x1404d9882
mov rcx, qword [rbp - 0x49]
lea r9, [rsp + 0x4c]
mov dx, r10w
movzx dx, sil
cdq
mov r8d, eax
movzx dx, ch
mov qword [rsp + 0x20], rbx
cdq
movzx dx, bpl
movzx rdx, r13w
lea rdx, [rbp + 0xf]
jmp 0x1404d9516
call qword [sym.imp.KERNEL32.dll_WriteFile]
sub r11d, r11d
cmp rsi, r11
test eax, eax
jmp 0x1404d9529
je 0x1404d9871
mov r15d, dword [rsp + 0x40]
neg bl
cmp edx, 0x332d336d
and bh, dh
mov ebx, edi
clc
test r12b, r11b
sub ebx, dword [rbp - 0x21]
test ch, 0x1c
cmp r13, 0x3d2e6ad5
add ebx, r15d
clc
mov dword [rbp - 0x65], ebx
cmp dword [rsp + 0x4c], esi
jb 0x1404d9745
cmp byte [rsp + 0x44], 0xa
jne 0x1404d9602
mov rcx, qword [rbp - 0x49]
rdtsc
mov rdx, 0x27763dca
mov r9b, spl
lea eax, [r11 + 0xd]
lea r9, [rsp + 0x4c]
movsx r8, r9w
mov word [rsp + 0x44], ax
movzx edx, dx
movzx r8w, r8b
lea r8d, [r11 + 1]
movsx dx, r14b
jmp 0x1404d95a7
mov qword [rsp + 0x20], r11
movzx dx, r13b
movsxd rdx, r15d
cqo
lea rdx, [rsp + 0x44]
call qword [sym.imp.KERNEL32.dll_WriteFile]
sub r11d, r11d
cmp dil, 0x16
cmp cx, sp
clc
test eax, eax
jmp 0x1404d95d3
je 0x1404d97a8
cmp dword [rsp + 0x4c], 1
jmp 0x1404d95e3
jb 0x1404d9745
inc r15d
mov si, 0x1476
inc ebx
rol si, cl
mov dword [rsp + 0x40], r15d
adc si, 0x2e1a
mov dword [rbp - 0x65], ebx
mov rsi, rdi
clc
cmp rdi, r13
jmp 0x1404d960e
jae 0x1404d97c5
mov rax, qword [rbp - 0x19]
not dl
mov edx, dword [rbp - 0x55]
jmp 0x1404d9622
jmp 0x1404d9048
mov edx, r11d
test rcx, 0xeca762f
jmp 0x1404d9636
test r8, r8
jmp 0x1404d963e
jle 0x1404d9692
sub rdi, rsi
lea rbx, [0x140000000]
mov al, byte [rdi + rsi]
cmovg cx, bx
movzx ecx, r9w
inc edx
xor ch, al
bsf ecx, eax
mov rcx, qword [rbx + r12*8 + 0xba940]
cmp cx, ax
clc
add rcx, rsi
inc rsi
mov byte [rcx + r14*8 + 0x3e], al
movsxd rax, edx
cmp rax, r8
jmp 0x1404d9682
jl 0x1404d964e
mov ebx, dword [rbp - 0x65]
test r14d, 0x45425269
add ebx, r8d
jmp 0x1404d969a
jmp 0x1404d973a
mov r9d, r11d
clc
test sil, sil
cmc
test rdx, rdx
jmp 0x1404d96af
jle 0x1404d9735
mov r13, qword [rbp - 0x11]
movsx r10d, r10w
sbb rcx, r9
mov r8, r11
shr r11, cl
mov r10, r13
and r13d, 0x3f
movzx r11, r9w
shr ch, 0x8c
shl r11b, cl
sar r10, 6
cmp r10b, r9b
lea r11, [r13*8]
setl al
add r11, r13
movzx cx, ch
mov al, byte [r8 + rdi]
movzx rcx, bx
movzx ecx, r12w
xchg ch, ch
inc r9d
mov rcx, qword [r15 + r10*8 + 0xba940]
add rcx, r8
jmp 0x1404d9711
inc r8
test r12w, 0x48f4
mov byte [rcx + r11*8 + 0x3e], al
movsxd rax, r9d
cmp rax, rdx
jl 0x1404d96f0
xor r11d, r11d
xor rcx, 0x36da1cf1
add ebx, edx
inc rcx
mov dword [rbp - 0x65], ebx
sar cx, cl
shrd cx, sp, 0xee
cmp byte [rbp - 0x71], r11b
mov ecx, dword [rsp + 0x40]
jmp 0x1404d97d3
mov al, byte [rdi]
movzx rcx, r9w
lea r8, [0x140000000]
movzx rcx, r12w
dec ecx
mov rcx, qword [r8 + r12*8 + 0xba940]
jmp 0x1404d9772
inc ebx
mov dword [rbp - 0x65], ebx
clc
cmp r12b, 0x11
mov byte [rcx + r14*8 + 0x3e], al
movzx rax, r10w
xor ah, 0x7a
mov rax, qword [r8 + r12*8 + 0xba940]
or byte [rax + r14*8 + 0x3d], 4
test si, 0x73ff
cmp byte [rbp - 0x71], dl
jmp 0x1404d97a3
jmp 0x1404d9749
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x69], eax
mov ecx, dword [rsp + 0x40]
test r8d, 0x6c317b1d
cmp byte [rbp - 0x71], 0
jmp 0x1404d97d3
mov ecx, dword [rsp + 0x40]
cmc
cmp byte [rbp - 0x71], r11b
jmp 0x1404d97d3
je 0x1404d97ea
mov rax, qword [rsp + 0x50]
stc
test r10b, 0x6c
and dword [rax + 0x3a8], 0xfffffffd
mov rax, qword [rbp - 9]
cmp rdi, rsi
cmp bx, 0xa4b
movsd xmm0, qword [rbp - 0x69]
clc
cmp dl, 0x65
movsd qword [rax], xmm0
cmp rbp, r15
jmp 0x1404d980b
mov dword [rax + 8], ecx
clc
mov rcx, qword [rbp + 0x17]
cmp bl, 0xc3
xor rcx, rsp
jmp 0x1404d981e
call fcn.14049cfde
mov rbx, qword [rsp + 0x140]
rcr r13b, 0xf9
add rsp, 0x100
mov sil, 0x55
movzx r12d, cx
pop r15
cmovle r12w, sp
pop r14
cmovp esi, r15d
xchg ebp, esi
pop r13
pop r12
jmp 0x1404d985d
pop rdi
mov sil, r8b
movsx rsi, r12w
pop rsi
setle bpl
pop rbp
jmp 0x1404d9870
ret
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x69], eax
sar ch, cl
and cx, bp
and ch, 0x4a
mov ecx, dword [rsp + 0x40]
clc
jmp 0x1404d988c
cmp byte [rbp - 0x71], bl
jmp 0x1404d9894
jmp 0x1404d97d3