Function at 0x1404d8c59
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
push rbp
rcr eax, 0xd9
cmp ebp, 0x77d637b5
not ah
push rsi
movsx rsi, bp
sar bpl, cl
cmp al, 0x3c
push rdi
not bp
xchg esi, eax
sar ax, 0x36
push r12
rcl ah, 0xb7
ror rbp, cl
ror bpl, 0x48
push r13
shrd si, r9w, 7
push r14
add sil, al
rol r12b, 0x5b
push r15
btc rsi, 0xfa
movsx r15d, si
lea rbp, [rsp - 0x27]
cbw
dec si
sub rsp, 0x100
xchg r13b, r12b
rcr eax, cl
bt r14, rax
mov rax, qword [0x1400b7288]
xor rax, rsp
mov qword [rbp + 0x17], rax
movsxd rsi, edx
shr r12d, 0x2d
rcr r15b, 0xe6
cdqe
mov r15, r8
btc rax, r9
test rsi, r14
rcl r13, cl
mov rax, rsi
mov qword [rbp - 9], rcx
rcl r14, cl
clc
movsx rcx, r15w
mov qword [rbp - 0x11], rax
rcl r12w, 0xaf
bsf r14, r9
cmovae r14w, r14w
lea rcx, [0x140000000]
not r13d
btr r14d, ebp
and eax, 0x3f
and r13w, dx
btr r12w, sp
jmp 0x1404d8d27
mov r13d, r9d
sub r12, rdi
bsf r14d, esi
not r14w
add r13, r8
rcl r14b, cl
mov qword [rbp - 0x21], r8
mov r12, rsi
cmp r12b, r8b
mov qword [rbp - 0x51], r13
sar r12, 6
xchg r14, r14
movsx r14w, r15b
seta r14b
lea r14, [rax + rax*8]
movsx eax, r15w
mov rax, qword [rcx + r12*8 + 0xba940]
jmp 0x1404d8d6e
mov rax, qword [rax + r14*8 + 0x28]
jmp 0x1404d8d78
mov qword [rbp - 0x49], rax
jmp 0x1404d8d81
call qword [sym.imp.KERNEL32.dll_GetConsoleOutputCP]
sub edx, edx
movzx rcx, di
jmp 0x1404d8d92
lea rcx, [rsp + 0x50]
jmp 0x1404d8d9c
mov dword [rbp - 0x59], eax
jmp 0x1404d8da4
call fcn.1404a19f4
mov rcx, qword [rsp + 0x58]
shl bl, 0x11
neg dh
and bl, r15b
xor r11d, r11d
bt edi, 0xa4
add rbx, r11
ror bl, 0x96
mov dword [rbp - 0x69], r11d
sete bh
rcl bx, cl
mov ebx, r11d
shrd dx, r9w, 0x89
clc
sbb dh, 0x40
mov dword [rbp - 0x65], ebx
neg rdx
adc dl, 0x2d
mov rdi, r15
mov edx, dword [rcx + 0xc]
btc cx, sp
not cx
rol cl, 0xed
mov ecx, r11d
cmp r10b, al
mov dword [rsp + 0x40], ecx
cmc
clc
mov dword [rbp - 0x55], edx
cmp r15, r13
jmp 0x1404d8e0a
jae 0x1404d95d7
mov rax, rsi
adc cl, bpl
mov rsi, r15
ror cl, 0xe3
sar rax, 6
mov qword [rbp - 0x19], rax
mov cl, byte [rdi]
shld r15, rbx, 0x74
test bpl, dil
mov r15d, 1
clc
cmc
mov byte [rsp + 0x44], cl
mov dword [rsp + 0x48], r11d
stc
cmp edx, 0xfde9
jmp 0x1404d8e4b
jne 0x1404d9169
lea r15, [0x140000000]
mov edx, r11d
mov r9, qword [r15 + rax*8 + 0xba940]
ror ax, 0x40
and sil, 0x3c
movzx esi, r10w
mov rsi, r11
rol ax, 0xea
adc ah, 0xe5
lea rax, [r9 + r14*8]
stc
cmp cl, r11b
cmp byte [rax + rsi + 0x3e], r11b
jmp 0x1404d8e8b
je 0x1404d8ea5
inc edx
inc rsi
cmp rsi, 5
jmp 0x1404d8e9f
jl 0x1404d8e81
test rsi, rsi
jmp 0x1404d8ead
jle 0x1404d90af
mov rax, qword [r15 + r12*8 + 0xba940]
mov r8, qword [rbp - 0x51]
sub r8, rdi
movzx ecx, byte [rax + r14*8 + 0x3e]
setae r10b
mov r13b, 0xe
movsx r15d, byte [rcx + r15 + 0xb7d00]
bswap r10
movsx r13w, r8b
inc r15d
mov r13d, r15d
bts r10d, ebp
mov r10d, 0x35084cfb
movzx r10d, r8w
sub r13d, edx
adc r10, r9
movsxd r10, r13d
cmp r10, r8
jmp 0x1404d8f05
jg 0x1404d940f
lea rax, [rbp - 1]
cqo
setl r8b
mov rdx, r11
rol cl, cl
shl ch, 0x6c
sub r9, rax
lea r8, [r9 + r14*8]
shl al, cl
cmp r9b, sil
bts ecx, esp
lea rcx, [rbp - 1]
add rcx, rdx
jmp 0x1404d8f38
inc rdx
mov al, byte [rcx + r8 + 0x3e]
cmp cl, 5
cmc
mov byte [rcx], al
jmp 0x1404d8f4b
cmp rdx, rsi
jmp 0x1404d8f53
jl 0x1404d8f2c
test r13d, r13d
jmp 0x1404d8f61
jle 0x1404d8fa6
lea rcx, [rbp - 1]
setge r8b
bsf r8w, r12w
mov rdx, rbx
mov r8, r10
add dh, 0xd0
add rcx, rsi
movzx dx, al
bswap dx
movsx dx, dil
mov rdx, rdi
jmp 0x1404d8f94
call fcn.1404a0a3f
sub r11d, r11d
setbe dh
jmp 0x1404d8fa6
mov rdx, r11
clc
xchg r8b, cl
or cl, dil
lea r8, [0x140000000]
mov rcx, qword [r8 + r12*8 + 0xba940]
test r13d, 0x4a2007b9
add rcx, rdx
jmp 0x1404d8fce
inc rdx
jmp 0x1404d8fd6
mov byte [rcx + r14*8 + 0x3e], r11b
cmp rdx, rsi
jl 0x1404d8fb7
lea rax, [rbp - 1]
mov qword [rbp - 0x41], r11
cmp r13d, 0x271229df
btc r9d, 0xc1
btr r9d, 0xb6
mov qword [rbp - 0x39], rax
and dx, 0x2cfd
sar dl, cl
xchg r8b, al
lea r9, [rbp - 0x41]
shld cx, r15w, 0x42
xchg r8w, cx
mov eax, r11d
test r9w, ax
xor al, r15b
movsx rcx, r14w
lea rdx, [rbp - 0x39]
and al, 0
cmp r15d, 4
lea rcx, [rsp + 0x48]
not r8w
movzx r8w, r10b
mov r8w, r12w
sete al
movzx r8w, r10b
inc eax
cmovs r15, r13
mov r8d, eax
mov r15d, eax
call fcn.1404de84d
cmp rax, 0xffffffffffffffff
jmp 0x1404d9065
je 0x1404d9242
lea eax, [r13 - 1]
btr r13w, si
ror r13w, 0xb5
bts r13w, ax
mov r13, qword [rbp - 0x51]
bsf si, r11w
movzx si, dil
xor sil, 0x63
movsxd rsi, eax
jmp 0x1404d90a2
add rsi, rdi
jmp 0x1404d90aa
jmp 0x1404d926d
movzx eax, byte [rdi]
mov rdx, r13
sub rdx, rdi
movsx cx, sil
movsx rsi, byte [rax + r15 + 0xb7d00]
xor ch, 0x4e
lea ecx, [rsi + 1]
nop
movsxd rax, ecx
test r8b, r15b
jmp 0x1404d90d8
cmp rax, rdx
jmp 0x1404d90e0
jg 0x1404d9487
cmp ecx, 4
mov qword [rbp - 0x31], r11
mov eax, r11d
mov cx, sp
movsxd rcx, ebx
mov qword [rbp - 0x29], rdi
cqo
movsxd rcx, r13d
mov r8b, 0xe1
sete al
bswap rcx
lea r9, [rbp - 0x31]
inc eax
lea rdx, [rbp - 0x29]
not rcx
movsxd rcx, r11d
mov cl, r12b
mov r8d, eax
movsx cx, r15b
mov rbx, 0xc1574c4
jmp 0x1404d912f
lea rcx, [rsp + 0x48]
jmp 0x1404d9139
mov ebx, eax
jmp 0x1404d9140
call fcn.1404de84d
cmp rax, 0xffffffffffffffff
jmp 0x1404d914e
je 0x1404d9242
add rsi, rdi
bswap r15
xchg r15b, r15b
movsx r15, r13w
mov r15d, ebx
jmp 0x1404d926d
lea rax, [0x140000000]
or dx, 0x4759
mov rdx, qword [rax + r12*8 + 0xba940]
mov cl, byte [rdx + r14*8 + 0x3d]
cmp dh, 1
cmp cx, si
test cl, 4
je 0x1404d91c6
mov al, byte [rdx + r14*8 + 0x3e]
jmp 0x1404d919b
and cl, 0xfb
mov byte [rbp + 7], al
not al
mov al, 0x76
xchg al, al
mov al, byte [rdi]
jmp 0x1404d91ae
mov byte [rdx + r14*8 + 0x3d], cl
xchg dh, dh
lea rdx, [rbp + 7]
jmp 0x1404d91be
mov byte [rbp + 8], al
jmp 0x1404d9212
call fcn.1404a8092
movzx ecx, byte [rdi]
cmp rsi, rsi
test r12b, 0x64
jmp 0x1404d91da
sub edx, edx
clc
cmp word [rax + rcx*2], dx
jmp 0x1404d91e6
jge 0x1404d924b
inc rsi
cmp esp, 0x370d3275
cmp rsi, r13
jmp 0x1404d91fd
jae 0x1404d955f
mov rdx, rdi
movsxd r8, ebp
movsx r8d, r13w
movsx r8w, cl
mov r8d, 2
mov cx, 0x1c3c
jmp 0x1404d9225
lea rcx, [rsp + 0x48]
jmp 0x1404d922f
call fcn.140226d1e
cmp eax, 0xffffffff
jmp 0x1404d923c
jne 0x1404d926d
cmp byte [rbp - 0x71], 0
jmp 0x1404d9556
mov r8, r15
lea rcx, [rsp + 0x48]
movsx rdx, bx
cwd
bswap dx
mov rdx, rdi
call fcn.140226d1e
cmp eax, 0xffffffff
je 0x1404d95b5
mov ecx, dword [rbp - 0x59]
lea rax, [rbp + 0xf]
bsf edi, ecx
sbb r9w, dx
and r9d, r11d
xor ebx, ebx
shr r9b, 0x29
lea r8, [rsp + 0x48]
add rdi, r11
bt r9d, 0x62
mov qword [rsp + 0x38], rbx
movzx r9, r8w
lea rdi, [rsi + 1]
shr r9d, 0xa2
mov qword [rsp + 0x30], rbx
add r9w, cx
rol r9b, cl
mov r9d, r15d
clc
cmp cl, 0xd1
cmp r15b, r13b
mov dword [rsp + 0x28], 5
xor edx, edx
jmp 0x1404d92c7
mov qword [rsp + 0x20], rax
jmp 0x1404d92d1
call fcn.1404c68fd
mov esi, eax
test eax, eax
jmp 0x1404d92df
je 0x1404d9679
mov rcx, qword [rbp - 0x49]
cwd
not dl
lea r9, [rsp + 0x4c]
movsxd r8, r15d
not r8b
setge dh
mov r8d, eax
cqo
movsx rdx, r10w
mov qword [rsp + 0x20], rbx
mov dl, r13b
cmovne dx, r8w
lea rdx, [rbp + 0xf]
call qword [sym.imp.KERNEL32.dll_WriteFile]
sub r11d, r11d
clc
test eax, eax
jmp 0x1404d9326
je 0x1404d966d
mov r15d, dword [rsp + 0x40]
adc bl, 0xe0
ror bx, 0x7f
xor bx, 0x1d2
mov ebx, edi
sub ebx, dword [rbp - 0x21]
test si, r9w
cmp r13b, bpl
add ebx, r15d
test spl, r10b
mov dword [rbp - 0x65], ebx
test bx, si
cmp rcx, 0x4ba16b18
cmp dword [rsp + 0x4c], esi
jb 0x1404d954d
cmp byte [rsp + 0x44], 0xa
jmp 0x1404d9370
jne 0x1404d93e0
mov rcx, qword [rbp - 0x49]
lea eax, [r11 + 0xd]
bswap r9
movzx dx, r12b
xchg r8b, dl
lea r9, [rsp + 0x4c]
mov word [rsp + 0x44], ax
not dh
lea r8d, [r11 + 1]
not dx
mov dl, 0x87
cmovns rdx, rdx
mov qword [rsp + 0x20], r11
lea rdx, [rsp + 0x44]
call qword [sym.imp.KERNEL32.dll_WriteFile]
sub r11d, r11d
stc
test eax, eax
je 0x1404d95a7
cmp dword [rsp + 0x4c], 1
jb 0x1404d954d
inc r15d
dec si
xchg sil, sil
inc ebx
mov dword [rsp + 0x40], r15d
mov dword [rbp - 0x65], ebx
setp sil
mov rsi, rdi
cmc
cmp rdi, r13
jmp 0x1404d93ec
jae 0x1404d95c7
mov rax, qword [rbp - 0x19]
movsx rdx, cx
cmovg dx, bp
movsx edx, r12w
mov edx, dword [rbp - 0x55]
jmp 0x1404d940a
jmp 0x1404d8e24
mov edx, r11d
clc
test r8, r8
jmp 0x1404d941b
jle 0x1404d947f
sub rdi, rsi
lea rbx, [0x140000000]
movzx rcx, bx
xchg cl, al
movzx cx, r12b
mov al, byte [rdi + rsi]
jmp 0x1404d9441
inc edx
mov rcx, qword [rbx + r12*8 + 0xba940]
jmp 0x1404d9451
add rcx, rsi
jmp 0x1404d9459
inc rsi
test cl, r15b
cmc
mov byte [rcx + r14*8 + 0x3e], al
movsxd rax, edx
cmp rax, r8
jmp 0x1404d9470
jl 0x1404d9436
mov ebx, dword [rbp - 0x65]
test dl, r11b
cmp bp, bp
add ebx, r8d
jmp 0x1404d954a
mov r9d, r11d
test rdx, rdx
jle 0x1404d9541
mov r13, qword [rbp - 0x11]
movsx cx, sil
cmp sil, 0x3b
mov r8, r11
cmovl r11d, r15d
shl r11b, 0x6e
bt r11, r11
mov r10, r13
movsxd rcx, esi
and r13d, 0x3f
movzx cx, spl
sar r10, 6
mov r11d, r11d
not r11
lea r11, [r13*8]
bsr cx, si
test cl, 0x1e
bsf rcx, r12
add r11, r13
movzx cx, r12b
cmovs rcx, r9
mov al, byte [r8 + rdi]
movsx ecx, bx
movsxd rcx, r15d
inc r9d
test r9b, r15b
add cl, 0xcb
mov rcx, qword [r15 + r10*8 + 0xba940]
jmp 0x1404d9508
add rcx, r8
jmp 0x1404d9510
inc r8
cmc
stc
mov byte [rcx + r11*8 + 0x3e], al
bsr ax, r13w
clc
btc ax, 0x4a
movsxd rax, r9d
test r14w, r8w
cmp rax, rdx
jmp 0x1404d9534
jl 0x1404d94e7
sub r11d, r11d
movsx rcx, di
add ebx, edx
btc ecx, r10d
movzx ecx, di
mov dword [rbp - 0x65], ebx
cmp byte [rbp - 0x71], r11b
movzx cx, r15b
mov ecx, dword [rsp + 0x40]
jmp 0x1404d95e0
mov al, byte [rdi]
lea r8, [0x140000000]
mov ecx, esi
mov rcx, qword [r8 + r12*8 + 0xba940]
jmp 0x1404d9577
inc ebx
mov dword [rbp - 0x65], ebx
mov byte [rcx + r14*8 + 0x3e], al
bts ax, sp
inc al
bt rax, 0x43
mov rax, qword [r8 + r12*8 + 0xba940]
test sil, 7
or byte [rax + r14*8 + 0x3d], 4
cmc
cmp byte [rbp - 0x71], dl
jmp 0x1404d9556
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x69], eax
sal ch, cl
add cx, ax
mov ecx, dword [rsp + 0x40]
cmp byte [rbp - 0x71], 0
jmp 0x1404d95c2
jmp 0x1404d95e0
mov ecx, dword [rsp + 0x40]
jmp 0x1404d95d7
cmp byte [rbp - 0x71], r11b
jmp 0x1404d95e0
je 0x1404d95f9
mov rax, qword [rsp + 0x50]
test rax, r10
and dword [rax + 0x3a8], 0xfffffffd
test ax, r14w
mov rax, qword [rbp - 9]
stc
movsd xmm0, qword [rbp - 0x69]
cmc
movsd qword [rax], xmm0
jmp 0x1404d9611
mov dword [rax + 8], ecx
clc
movzx cx, ah
mov rcx, qword [rbp + 0x17]
xor rcx, rsp
call fcn.14049cefa
mov rbx, qword [rsp + 0x140]
test edx, esp
bsf r12w, r13w
add rsp, 0x100
movzx esi, di
pop r15
movzx r13d, sp
movsx r13, r14w
pop r14
movzx r13d, r11w
pop r13
movsxd rdi, edx
pop r12
not rdi
pop rdi
movsxd rbp, r11d
cmovns ebp, r10d
pop rsi
not bp
xchg bpl, bpl
setne bpl
pop rbp
ret
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x69], eax
btr ecx, edx
mov ecx, dword [rsp + 0x40]
test si, 0x75d9
clc
cmp byte [rbp - 0x71], bl
jmp 0x1404d968b
jmp 0x1404d95e0