Function at 0x1404dcf12
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
cmc
push rbp
stc
btr eax, 0x5f
push rsi
jmp 0x1404dcf3c
push rdi
push r12
push r13
test r15b, 0xdf
neg ah
bt rbp, r13
push r14
push r15
lea rbp, [rsp - 0x27]
sbb sil, dil
sal r13w, cl
cbw
sub rsp, 0x100
xor r15b, 0x45
sbb r12w, 0x12e
shrd rsi, rdi, 0x91
mov rax, qword [0x1400b7288]
bsf esi, r14d
xor rax, rsp
xor r13w, r8w
mov qword [rbp + 0x17], rax
shl si, 0x71
sal ax, 0xd
sub r15d, 0x4b1c5234
movsxd rsi, edx
bts r14w, r13w
xor eax, r14d
btc r12w, 0xdb
mov r15, r8
mov rax, rsi
adc r13w, 0x4472
mov qword [rbp - 9], rcx
cmp spl, 0xb
or r13b, 0xa8
shl r14b, cl
mov qword [rbp - 0x11], rax
bt cx, 0xc8
lea rcx, [0x140000000]
rol r13, cl
btr r13w, 0xde
sar r13b, 0xa5
and eax, 0x3f
add r13w, 0x850
movzx r13, sp
or r13b, 0x55
mov r13d, r9d
and r12w, 0x475d
rcr r12b, cl
cmc
lea r13, [r13 + r8]
shr r12d, cl
btr r12, r15
mov qword [rbp - 0x21], r8
ror r14b, cl
movzx r12w, sil
btc r12, 0xb3
mov r12, rsi
adc r14b, 0x3e
add r14b, dl
mov qword [rbp - 0x51], r13
neg r14w
sar r12, 6
movzx r14, di
lea r14, [rax + rax*8]
cmovle ax, ax
movsx rax, r8w
movsx ax, bpl
mov rax, qword [rcx + r12*8 + 0xba940]
mov rax, qword [rax + r14*8 + 0x28]
jmp 0x1404dd059
mov qword [rbp - 0x49], rax
jmp 0x1404dd062
call qword [sym.imp.KERNEL32.dll_GetConsoleOutputCP]
sub edx, edx
bswap cx
mov cx, cx
movzx rcx, bp
lea rcx, [rsp + 0x50]
jmp 0x1404dd07e
mov dword [rbp - 0x59], eax
call fcn.1404a5fcd
mov rcx, qword [rsp + 0x58]
cqo
cmp rcx, 0x4e953b53
neg dil
sub r11d, r11d
jmp 0x1404dd09f
mov dword [rbp - 0x69], r11d
adc rdx, 0x74ec3c33
shl dx, cl
btr di, 0xe1
mov ebx, r11d
mov dword [rbp - 0x65], ebx
test bl, dil
add di, r10w
bswap di
mov rdi, r15
mov edx, dword [rcx + 0xc]
sal cl, cl
movsx ecx, r15w
mov ecx, r11d
stc
mov dword [rsp + 0x40], ecx
mov dword [rbp - 0x55], edx
cmp r15, r13
jmp 0x1404dd0e1
jae 0x1404dd811
mov rax, rsi
stc
mov rsi, r15
jmp 0x1404dd0f3
sar rax, 6
xchg r15b, cl
mov qword [rbp - 0x19], rax
or cl, r9b
mov cl, byte [rdi]
mov r15d, 1
cmc
jmp 0x1404dd10f
mov byte [rsp + 0x44], cl
mov dword [rsp + 0x48], r11d
cmc
clc
cmp edx, 0xfde9
jne 0x1404dd3f2
lea r15, [0x140000000]
shl r9b, 0x8c
add sil, r9b
movzx edx, r8w
mov edx, r11d
sar r9d, 0x3f
mov r9, qword [r15 + rax*8 + 0xba940]
mov rsi, r11
add ax, 0x28ef
bt ax, dx
lea rax, [r9 + r14*8]
test di, 0x2144
cmp byte [rax + rsi + 0x3e], r11b
je 0x1404dd181
inc edx
jmp 0x1404dd16d
inc rsi
cmc
clc
cmp rsi, 5
jmp 0x1404dd17b
jl 0x1404dd15b
test rsi, rsi
jle 0x1404dd32c
mov rax, qword [r15 + r12*8 + 0xba940]
cmp ax, 0x65b0
shl r8, 0x50
mov r8, qword [rbp - 0x51]
sub r8, rdi
movzx ecx, byte [rax + r14*8 + 0x3e]
movsxd r10, esi
movzx r13d, cx
movzx r13, r8w
movsx r15d, byte [rcx + r15 + 0xb7d00]
inc r15d
mov r13d, r15d
shl r10b, cl
sub r13d, edx
btc r10w, r15w
clc
cmp r8d, 0x10836e61
movsxd r10, r13d
test spl, 0x54
cmp r10, r8
jmp 0x1404dd1e3
jg 0x1404dd657
lea rax, [rbp - 1]
setae cl
add cl, 0xe1
mov rdx, r11
sub r9, rax
lea r8, [r9 + r14*8]
lea rcx, [rbp - 1]
add rcx, rdx
not al
inc rdx
mov al, byte [rcx + r8 + 0x3e]
stc
cmc
mov byte [rcx], al
cmp r15b, 0x6f
test bx, dx
cmp rdx, rsi
jl 0x1404dd1fd
test r13d, r13d
jmp 0x1404dd22a
jle 0x1404dd25e
lea rcx, [rbp - 1]
rol rdx, 0xb3
mov r8, r10
add rcx, rsi
cwd
movzx rdx, ax
cdq
mov rdx, rdi
jmp 0x1404dd24d
call fcn.1404a4fce
sub r11d, r11d
xor dl, dil
inc cx
ror dh, 0x70
mov rdx, r11
clc
cmc
adc r8b, 0xa8
lea r8, [0x140000000]
ror ecx, 0xfb
sal ch, 0xd7
movsx ecx, r15w
mov rcx, qword [r8 + r12*8 + 0xba940]
test r14b, 5
stc
add rcx, rdx
jmp 0x1404dd28d
inc rdx
cmp r10b, 0x2b
cmp dx, si
mov byte [rcx + r14*8 + 0x3e], r11b
cmc
cmp rdx, rsi
jmp 0x1404dd2a5
jl 0x1404dd278
lea rax, [rbp - 1]
bsf ecx, r11d
mov qword [rbp - 0x41], r11
cwd
xchg rdx, r9
mov qword [rbp - 0x39], rax
sub r9, 0x1a0f369c
shr ecx, cl
shld r9, rdx, 0x5c
lea r9, [rbp - 0x41]
mov eax, r11d
lea rdx, [rbp - 0x39]
cmp r15d, 4
lea rcx, [rsp + 0x48]
sete al
movsxd r8, r9d
xchg r15b, r15b
mov r15, rsi
inc eax
movzx r15w, r8b
mov r8d, eax
mov r15d, eax
jmp 0x1404dd300
call fcn.1404e2a5d
cmp rax, 0xffffffffffffffff
jmp 0x1404dd30e
je 0x1404dd4ac
lea eax, [r13 - 1]
mov r13, qword [rbp - 0x51]
movsxd rsi, eax
add rsi, rdi
jmp 0x1404dd327
jmp 0x1404dd4dc
movzx eax, byte [rdi]
shr dh, 0x78
setl dh
mov rdx, r13
sub rdx, rdi
movsx rsi, byte [rax + r15 + 0xb7d00]
movzx rcx, bx
rol ah, 0x93
shr al, cl
lea ecx, [rsi + 1]
movsx ax, r11b
movsxd rax, ecx
clc
test rdi, 0x3fb70f37
stc
cmp rax, rdx
jmp 0x1404dd369
jg 0x1404dd6d1
cmp ecx, 4
mov qword [rbp - 0x31], r11
xchg r9, r9
movsx cx, r12b
movzx r8, cx
mov eax, r11d
cqo
mov qword [rbp - 0x29], rdi
sete al
cdq
lea r9, [rbp - 0x31]
inc ch
jmp 0x1404dd39d
inc eax
movsxd rbx, r11d
setle r8b
lea rdx, [rbp - 0x29]
not r8
movsxd r8, r14d
movzx rcx, r13w
mov r8d, eax
movzx rbx, dx
movsxd rcx, eax
lea rcx, [rsp + 0x48]
movsx bx, dl
mov ebx, eax
jmp 0x1404dd3ce
call fcn.1404e2a5d
cmp rax, 0xffffffffffffffff
jmp 0x1404dd3dc
je 0x1404dd4ac
add rsi, rdi
mov r15d, ebx
jmp 0x1404dd3ed
jmp 0x1404dd4dc
lea rax, [0x140000000]
clc
rol cl, cl
mov rdx, qword [rax + r12*8 + 0xba940]
mov cl, byte [rdx + r14*8 + 0x3d]
cmp bl, r10b
jmp 0x1404dd411
test cl, 4
jmp 0x1404dd419
je 0x1404dd452
mov al, byte [rdx + r14*8 + 0x3e]
clc
jmp 0x1404dd42a
and cl, 0xfb
mov byte [rbp + 7], al
mov al, byte [rdi]
jmp 0x1404dd437
mov byte [rdx + r14*8 + 0x3d], cl
lea rdx, [rbp + 7]
jmp 0x1404dd445
mov byte [rbp + 8], al
jmp 0x1404dd44d
jmp 0x1404dd483
call fcn.1404ac653
movzx ecx, byte [rdi]
test si, ax
sub edx, edx
stc
cmp word [rax + rcx*2], dx
jge 0x1404dd4ba
inc rsi
cmc
cmp rsi, r13
jmp 0x1404dd476
jae 0x1404dd79b
mov rdx, rdi
movzx r8, sp
mov r8d, 2
movsxd rcx, r12d
mov cx, 0x5aed
movzx rcx, r15w
lea rcx, [rsp + 0x48]
call fcn.1401d6acd
cmp eax, 0xffffffff
jmp 0x1404dd4a6
jne 0x1404dd4dc
cmp byte [rbp - 0x71], 0
jmp 0x1404dd4b5
jmp 0x1404dd78d
mov r8, r15
movzx rdx, bp
lea rcx, [rsp + 0x48]
mov rdx, rdi
jmp 0x1404dd4ce
call fcn.1401d6acd
cmp eax, 0xffffffff
je 0x1404dd7fb
mov ecx, dword [rbp - 0x59]
lea rax, [rbp + 0xf]
sub ebx, ebx
shl dil, 0xc6
lea r8, [rsp + 0x48]
not r9b
mov qword [rsp + 0x38], rbx
lea rdi, [rsi + 1]
not r9
rcl r9d, cl
or r9b, 0xf3
mov qword [rsp + 0x30], rbx
sal r9b, cl
cmc
xadd r9b, r9b
mov r9d, r15d
clc
mov dword [rsp + 0x28], 5
stc
xor edx, edx
jmp 0x1404dd525
mov qword [rsp + 0x20], rax
call fcn.1404cabd1
mov esi, eax
test bx, 0x4cd4
test eax, eax
jmp 0x1404dd53d
je 0x1404dd8c0
mov rcx, qword [rbp - 0x49]
not r9b
lea r9, [rsp + 0x4c]
movzx r8w, cl
mov r8d, eax
bswap rdx
cmovno dx, r11w
mov qword [rsp + 0x20], rbx
lea rdx, [rbp + 0xf]
jmp 0x1404dd56d
call qword [sym.imp.KERNEL32.dll_WriteFile]
xor r11d, r11d
cmp rcx, r9
test eax, eax
je 0x1404dd8b7
mov r15d, dword [rsp + 0x40]
sbb bx, r9w
or bl, 0x3e
mov ebx, edi
test ch, bl
sub ebx, dword [rbp - 0x21]
cmp esp, r11d
add ebx, r15d
mov dword [rbp - 0x65], ebx
cmp dword [rsp + 0x4c], esi
jmp 0x1404dd5a6
jb 0x1404dd784
cmp byte [rsp + 0x44], 0xa
jmp 0x1404dd5b6
jne 0x1404dd636
mov rcx, qword [rbp - 0x49]
movsxd rax, esp
lea eax, [r11 + 0xd]
xchg r9d, r8d
movzx r9w, r8b
lea r9, [rsp + 0x4c]
cwd
movzx r8, r15w
bswap dx
mov word [rsp + 0x44], ax
cmovge dx, r15w
mov r8b, bl
lea r8d, [r11 + 1]
mov qword [rsp + 0x20], r11
cqo
jmp 0x1404dd5fa
lea rdx, [rsp + 0x44]
jmp 0x1404dd604
call qword [sym.imp.KERNEL32.dll_WriteFile]
sub r11d, r11d
test eax, eax
je 0x1404dd7ec
cmp dword [rsp + 0x4c], 1
jmp 0x1404dd61f
jb 0x1404dd784
inc r15d
inc ebx
mov dword [rsp + 0x40], r15d
btr esi, r9d
mov dword [rbp - 0x65], ebx
mov rsi, rdi
cmc
test bl, spl
cmp rdi, r13
jae 0x1404dd80d
mov rax, qword [rbp - 0x19]
mov edx, dword [rbp - 0x55]
jmp 0x1404dd652
jmp 0x1404dd101
mov edx, r11d
test r8b, 0xc6
test r8, r8
jmp 0x1404dd666
jle 0x1404dd6c4
sub rdi, rsi
mov cx, r8w
movzx rbx, sp
lea rbx, [0x140000000]
dec ch
setns ch
movsx rcx, r9w
mov al, byte [rdi + rsi]
inc edx
dec ch
mov rcx, qword [rbx + r12*8 + 0xba940]
add rcx, rsi
jmp 0x1404dd69e
inc rsi
clc
mov byte [rcx + r14*8 + 0x3e], al
neg al
jmp 0x1404dd6b0
movsxd rax, edx
cmp rax, r8
jmp 0x1404dd6bb
jl 0x1404dd687
mov ebx, dword [rbp - 0x65]
add ebx, r8d
jmp 0x1404dd6cc
jmp 0x1404dd77a
mov r9d, r11d
cmc
cmp r12b, bl
jmp 0x1404dd6dd
test rdx, rdx
jmp 0x1404dd6e5
jle 0x1404dd772
mov r13, qword [rbp - 0x11]
mov r8, r11
add al, 0x79
rol ecx, 0x64
not r11b
mov r10, r13
and r13d, 0x3f
movsx rcx, si
neg r11
add r11b, dil
sar r10, 6
sub r11w, 0x138c
lea r11, [r13*8]
add r11, r13
mov al, byte [r8 + rdi]
movzx rcx, r15w
cmovo cx, r11w
movzx cx, spl
inc r9d
sar ch, 0xad
mov rcx, qword [r15 + r10*8 + 0xba940]
add rcx, r8
inc r8
cmp ebp, r14d
cmc
mov byte [rcx + r11*8 + 0x3e], al
rcr ax, 0x7d
movsxd rax, r9d
cmp dl, r13b
clc
cmp r15b, 0x59
cmp rax, rdx
jmp 0x1404dd766
jl 0x1404dd720
xor r11d, r11d
or cl, 0x6d
add ebx, edx
bt cx, r8w
clc
mov dword [rbp - 0x65], ebx
inc cx
movzx rcx, r12w
cmp byte [rbp - 0x71], r11b
movsx cx, dil
mov ecx, dword [rsp + 0x40]
jmp 0x1404dd796
jmp 0x1404dd81a
mov al, byte [rdi]
cmovle r8d, r15d
lea r8, [0x140000000]
movsxd rcx, ebp
mov rcx, qword [r8 + r12*8 + 0xba940]
jmp 0x1404dd7b8
inc ebx
jmp 0x1404dd7bf
mov dword [rbp - 0x65], ebx
cmp al, bpl
mov byte [rcx + r14*8 + 0x3e], al
xor al, 0xf
lahf
mov rax, qword [r8 + r12*8 + 0xba940]
or byte [rax + r14*8 + 0x3d], 4
cmp bp, r8w
cmp byte [rbp - 0x71], dl
jmp 0x1404dd7e7
jmp 0x1404dd78d
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x69], eax
btr rcx, 0xfa
cmc
mov ecx, dword [rsp + 0x40]
cmp byte [rbp - 0x71], 0
jmp 0x1404dd808
jmp 0x1404dd81a
mov ecx, dword [rsp + 0x40]
cmp byte [rbp - 0x71], r11b
jmp 0x1404dd81a
je 0x1404dd835
mov rax, qword [rsp + 0x50]
cmp al, 0x49
and dword [rax + 0x3a8], 0xfffffffd
movzx rax, di
xadd eax, eax
mov rax, qword [rbp - 9]
jmp 0x1404dd83e
movsd xmm0, qword [rbp - 0x69]
cmc
clc
movsd qword [rax], xmm0
clc
test ax, 0x4d39
mov dword [rax + 8], ecx
inc ch
test dl, ah
mov rcx, qword [rbp + 0x17]
test edi, 0x74260ff6
xor rcx, rsp
jmp 0x1404dd867
call fcn.1404a1418
mov rbx, qword [rsp + 0x140]
sub r14w, 0x1a92
add rsp, 0x100
movzx r14d, bp
pop r15
not r13b
pop r14
pop r13
jmp 0x1404dd89c
pop r12
not esi
mov sil, 0xb0
movsx di, bl
pop rdi
pop rsi
movsxd rbp, eax
movzx rbp, bp
pop rbp
jmp 0x1404dd8b6
ret
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x69], eax
mov ecx, dword [rsp + 0x40]
test r15b, spl
jmp 0x1404dd8cc
cmp byte [rbp - 0x71], bl
jmp 0x1404dd81a