Function at 0x1404dbd65
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
cwde
push rbp
mov bp, r15w
btc ax, 0x22
cbw
push rsi
push rdi
push r12
push r13
push r14
shr eax, 0xa2
add bpl, cl
push r15
sal bpl, cl
adc r13d, r12d
cmp r15b, dl
lea rbp, [rsp - 0x27]
xor r12w, dx
sub rsp, 0x100
sub r12w, 0x3e6b
mov rax, qword [0x1400b7288]
rol r15b, 0x71
sar si, 0xfa
xor rax, rsp
shr r13b, cl
mov qword [rbp + 0x17], rax
cmc
movsxd rsi, edx
jmp 0x1404dbdcc
mov r15, r8
cdqe
sal ah, 0x8e
mov rax, rsi
adc r12b, sil
rol r12w, 0x87
shl r12, 0x89
mov qword [rbp - 9], rcx
ror r13, cl
cmc
sal ch, cl
mov qword [rbp - 0x11], rax
bts r14d, r10d
stc
lea rcx, [0x140000000]
and eax, 0x3f
movsx r14w, cl
rcr r12b, 0x89
sbb r13, 0x463b1cd1
mov r13d, r9d
and r14w, cx
and r12w, 0x15c6
add r13, r8
mov qword [rbp - 0x21], r8
xor r12w, 0x5f5a
mov r12, rsi
xchg r14b, r14b
mov qword [rbp - 0x51], r13
rol r14w, 0x76
sar r12, 6
lea r14, [rax + rax*8]
xchg al, al
movsxd rax, r8d
setb ah
mov rax, qword [rcx + r12*8 + 0xba940]
mov rax, qword [rax + r14*8 + 0x28]
jmp 0x1404dbe5b
mov qword [rbp - 0x49], rax
jmp 0x1404dbe64
call qword [sym.imp.KERNEL32.dll_GetConsoleOutputCP]
sub edx, edx
movsx ecx, r9w
mov cl, r11b
lea rcx, [rsp + 0x50]
mov dword [rbp - 0x59], eax
call fcn.1404a4f65
mov rcx, qword [rsp + 0x58]
adc ebx, 0x45e77e69
xor r11d, r11d
shr dil, cl
mov dword [rbp - 0x69], r11d
shr rbx, cl
dec dil
ror bh, cl
mov ebx, r11d
movzx rdx, r15w
cmovge dx, bx
movsx rdi, ax
mov dword [rbp - 0x65], ebx
bswap rdx
cmc
ror dil, 0xdf
mov rdi, r15
mov edx, dword [rcx + 0xc]
mov ecx, r11d
mov dword [rsp + 0x40], ecx
cmc
mov dword [rbp - 0x55], edx
cmp al, 0x51
test r14d, 0x4de40c22
cmp r15, r13
jmp 0x1404dbed9
jae 0x1404dc659
mov rax, rsi
mov rsi, r15
sar rax, 6
mov qword [rbp - 0x19], rax
mov cl, byte [rdi]
sal r15b, cl
mov r15d, 1
stc
mov byte [rsp + 0x44], cl
test r13b, r8b
stc
mov dword [rsp + 0x48], r11d
cmp edx, 0xfde9
jmp 0x1404dbf11
jne 0x1404dc219
lea r15, [0x140000000]
bt r9w, r12w
movsx r9, bp
test dh, bh
mov edx, r11d
xchg r9b, r9b
shr r9b, cl
sar r9w, cl
mov r9, qword [r15 + rax*8 + 0xba940]
rcl sil, 0x64
sal sil, cl
dec sil
mov rsi, r11
mov rax, 0x743d3001
lea rax, [r9 + r14*8]
cmc
cmp byte [rax + rsi + 0x3e], r11b
jmp 0x1404dbf61
je 0x1404dbf7b
inc edx
jmp 0x1404dbf6e
inc rsi
cmp rsi, 5
jl 0x1404dbf57
test rsi, rsi
jle 0x1404dc167
mov rax, qword [r15 + r12*8 + 0xba940]
bsf r13w, dx
shld r10, r8, 0x8c
mov r8, qword [rbp - 0x51]
sub r8, rdi
mov r13, 0x8ce2b99
not r13b
movzx r13, bx
movzx ecx, byte [rax + r14*8 + 0x3e]
movsx r15d, byte [rcx + r15 + 0xb7d00]
setbe r10b
inc r15d
sbb r13b, al
bsr r10w, ax
adc r10, 0x83517ff
mov r13d, r15d
sbb r10b, 0xd6
shr r10, cl
sub r13d, edx
rol r10, 0x4f
movsxd r10, r13d
test bp, r10w
cmp r13, rdx
cmp r10, r8
jmp 0x1404dbff3
jg 0x1404dc4b0
lea rax, [rbp - 1]
btc edx, 0x19
xor cx, 0x1825
add r8b, r13b
mov rdx, r11
shr r8b, cl
rcl r8d, cl
shld cx, r12w, 0x7d
sub r9, rax
shl al, cl
lea r8, [r9 + r14*8]
rcl cx, cl
cmp rcx, r12
lea rcx, [rbp - 1]
mov al, r15b
xadd al, al
add rcx, rdx
mov al, r15b
inc rdx
mov al, byte [rcx + r8 + 0x3e]
stc
mov byte [rcx], al
test dl, dh
cmp dil, r12b
clc
cmp rdx, rsi
jmp 0x1404dc050
jl 0x1404dc027
test r13d, r13d
jle 0x1404dc091
lea rcx, [rbp - 1]
movsx r8, bp
shrd dx, sp, 0x96
mov r8, r10
add rcx, rsi
movzx rdx, sp
mov rdx, rdi
jmp 0x1404dc07e
call fcn.1404a3fa8
sub r11d, r11d
bsr dx, bp
shld r8d, r13d, 0x37
cwd
mov rdx, r11
lea r8, [0x140000000]
mov rcx, qword [r8 + r12*8 + 0xba940]
test dil, sil
cmp dil, r13b
clc
add rcx, rdx
jmp 0x1404dc0b2
inc rdx
mov byte [rcx + r14*8 + 0x3e], r11b
test r10b, sil
cmp r14b, r14b
cmp dh, 0x86
cmp rdx, rsi
jl 0x1404dc09b
lea rax, [rbp - 1]
cmp r11b, 0xdd
rcl cx, 0xa6
mov qword [rbp - 0x41], r11
mov qword [rbp - 0x39], rax
btr cx, r12w
lea r9, [rbp - 0x41]
neg ax
cqo
mov eax, r11d
xor r8d, 0x144d6076
shrd rcx, r8, 0xdf
lea rdx, [rbp - 0x39]
xor al, bl
neg r8b
cmp r15d, 4
lea rcx, [rsp + 0x48]
sete al
movsx r8, dx
movsxd r15, eax
inc eax
mov r8d, eax
movsx r15, cx
mov r15d, eax
jmp 0x1404dc12a
call fcn.1404e187f
cmp rax, 0xffffffffffffffff
jmp 0x1404dc138
je 0x1404dc2ec
lea eax, [r13 - 1]
bt r13d, r10d
movsx esi, r9w
movsx r13w, dil
mov r13, qword [rbp - 0x51]
add sil, 0x27
movsxd rsi, eax
add rsi, rdi
jmp 0x1404dc162
jmp 0x1404dc31e
movzx eax, byte [rdi]
mov rdx, r13
shr ecx, cl
sar ecx, 0x46
sub rdx, rdi
or cx, 0x532f
mov cl, dil
movsx rsi, byte [rax + r15 + 0xb7d00]
sbb al, r15b
lea ecx, [rsi + 1]
movsxd rax, ecx
test r11b, 0xb6
cmp rax, rdx
jmp 0x1404dc19b
jg 0x1404dc529
cmp ecx, 4
bswap dx
jmp 0x1404dc1ac
mov qword [rbp - 0x31], r11
lahf
movzx cx, spl
mov eax, r11d
mov qword [rbp - 0x29], rdi
cwd
movsxd rbx, ebx
mov r8b, 0xe0
sete al
movsx edx, dx
mov cx, r13w
lea r9, [rbp - 0x31]
inc eax
lea rdx, [rbp - 0x29]
movzx ebx, si
mov r8d, eax
lea rcx, [rsp + 0x48]
jmp 0x1404dc1ee
mov ebx, eax
jmp 0x1404dc1f5
call fcn.1404e187f
cmp rax, 0xffffffffffffffff
jmp 0x1404dc203
je 0x1404dc2ec
add rsi, rdi
mov r15d, ebx
jmp 0x1404dc214
jmp 0x1404dc31e
lea rax, [0x140000000]
movzx edx, r14w
mov rdx, qword [rax + r12*8 + 0xba940]
cmc
mov cl, byte [rdx + r14*8 + 0x3d]
stc
jmp 0x1404dc239
test cl, 4
jmp 0x1404dc241
je 0x1404dc286
mov al, byte [rdx + r14*8 + 0x3e]
stc
jmp 0x1404dc253
and cl, 0xfb
jmp 0x1404dc25b
mov byte [rbp + 7], al
mov al, byte [rdi]
jmp 0x1404dc265
mov byte [rdx + r14*8 + 0x3d], cl
movsx edx, di
movsx dx, r13b
movzx edx, dx
lea rdx, [rbp + 7]
mov byte [rbp + 8], al
jmp 0x1404dc281
jmp 0x1404dc2cb
call fcn.1404ab6c6
movzx ecx, byte [rdi]
test edi, edx
cmp cx, ax
xor edx, edx
test r10w, 0x7349
cmp r11, rcx
cmp r15, 0x57bb47ad
cmp word [rax + rcx*2], dx
jmp 0x1404dc2ae
jge 0x1404dc2f5
inc rsi
cmp spl, dil
cmp rsi, r13
jmp 0x1404dc2c2
jae 0x1404dc5cf
mov rdx, rdi
mov r8d, 2
mov ch, 0xa8
xchg cx, cx
not cl
lea rcx, [rsp + 0x48]
call fcn.1401d441c
cmp eax, 0xffffffff
jne 0x1404dc31e
cmp byte [rbp - 0x71], 0
jmp 0x1404dc5c1
mov r8, r15
lea rcx, [rsp + 0x48]
cqo
cmovo rdx, r11
mov rdx, rdi
jmp 0x1404dc30b
call fcn.1401d441c
cmp eax, 0xffffffff
jmp 0x1404dc318
je 0x1404dc63d
mov ecx, dword [rbp - 0x59]
sbb ah, 0x85
lea rax, [rbp + 0xf]
xor ebx, ebx
xchg r8b, r9b
inc di
adc dil, r8b
lea r8, [rsp + 0x48]
mov qword [rsp + 0x38], rbx
sar r9w, 0xde
lea rdi, [rsi + 1]
sal r9b, 0x71
cmp bp, 0x54a9
mov qword [rsp + 0x30], rbx
dec r9b
ror r9b, 0xc4
mov r9d, r15d
stc
test r11b, 0x3a
mov dword [rsp + 0x28], 5
cmp dh, 0x7c
sub edx, edx
jmp 0x1404dc375
mov qword [rsp + 0x20], rax
call fcn.1404c9d04
mov esi, eax
cmp rbp, r8
test eax, eax
je 0x1404dc720
mov rcx, qword [rbp - 0x49]
lea r9, [rsp + 0x4c]
jmp 0x1404dc39a
mov r8d, eax
cwd
mov dl, bl
mov qword [rsp + 0x20], rbx
cqo
setnp dl
lea rdx, [rbp + 0xf]
jmp 0x1404dc3b4
call qword [sym.imp.KERNEL32.dll_WriteFile]
xor r11d, r11d
test eax, eax
je 0x1404dc711
mov r15d, dword [rsp + 0x40]
mov ebx, edi
sub ebx, dword [rbp - 0x21]
test rax, 0x4b6964bf
clc
add ebx, r15d
mov dword [rbp - 0x65], ebx
cmp dword [rsp + 0x4c], esi
jmp 0x1404dc3e5
jb 0x1404dc5bd
cmp byte [rsp + 0x44], 0xa
jmp 0x1404dc3f5
jne 0x1404dc48d
mov rcx, qword [rbp - 0x49]
lea eax, [r11 + 0xd]
lea r9, [rsp + 0x4c]
movzx r8w, r13b
jmp 0x1404dc412
mov word [rsp + 0x44], ax
not dl
movzx r8w, al
lea r8d, [r11 + 1]
xchg dx, dx
jmp 0x1404dc42a
mov qword [rsp + 0x20], r11
mov dl, r13b
lea rdx, [rsp + 0x44]
jmp 0x1404dc43c
call qword [sym.imp.KERNEL32.dll_WriteFile]
sub r11d, r11d
cmc
cmp r15b, 0x4b
cmp di, r12w
test eax, eax
jmp 0x1404dc455
je 0x1404dc634
cmp dword [rsp + 0x4c], 1
jmp 0x1404dc465
jb 0x1404dc5bd
inc r15d
inc sil
inc ebx
sal sil, 0x4a
neg esi
mov dword [rsp + 0x40], r15d
ror esi, cl
movzx si, dil
btr si, 0x1a
mov dword [rbp - 0x65], ebx
mov rsi, rdi
stc
cmp rdi, r13
jae 0x1404dc653
mov rax, qword [rbp - 0x19]
movsxd rdx, esp
mov dl, 0x19
mov edx, dword [rbp - 0x55]
jmp 0x1404dc4ab
jmp 0x1404dbeed
mov edx, r11d
cmp ebp, 0x129b04f4
test r8, r8
jmp 0x1404dc4c1
jle 0x1404dc521
sub rdi, rsi
dec ebx
lea rbx, [0x140000000]
inc cx
mov al, byte [rdi + rsi]
movzx ecx, di
inc edx
mov rcx, qword [rbx + r12*8 + 0xba940]
jmp 0x1404dc4eb
add rcx, rsi
jmp 0x1404dc4f3
inc rsi
stc
test r9w, 0x15d6
mov byte [rcx + r14*8 + 0x3e], al
movsxd rax, edx
clc
test r8d, 0x2682741d
cmp rax, r8
jmp 0x1404dc515
jl 0x1404dc4d6
mov ebx, dword [rbp - 0x65]
cmp dh, 0x9e
add ebx, r8d
jmp 0x1404dc5b4
mov r9d, r11d
cmc
test rdx, rdx
jmp 0x1404dc535
jle 0x1404dc5b2
mov r13, qword [rbp - 0x11]
clc
dec r8d
add r10d, 0x722e3171
mov r8, r11
or r11b, 0x4d
mov r10, r13
and r13d, 0x3f
xchg r11b, cl
add r11, r12
sar r10, 6
lea r11, [r13*8]
or cx, si
clc
shl ecx, cl
add r11, r13
inc cl
mov al, byte [r8 + rdi]
xchg ch, cl
inc cl
inc r9d
mov rcx, qword [r15 + r10*8 + 0xba940]
add rcx, r8
jmp 0x1404dc590
inc r8
mov byte [rcx + r11*8 + 0x3e], al
stc
movsxd rax, r9d
clc
cmp r11d, r14d
cmp rax, rdx
jl 0x1404dc575
xor r11d, r11d
sub ecx, r15d
mov cl, r13b
add ebx, edx
mov dword [rbp - 0x65], ebx
add cl, 0xca
rol ch, 0xea
cmp byte [rbp - 0x71], r11b
mov ecx, dword [rsp + 0x40]
jmp 0x1404dc5ca
jmp 0x1404dc65d
mov al, byte [rdi]
mov rcx, 0x767a4763
dec cl
inc r8b
lea r8, [0x140000000]
not cl
xchg ch, ch
setnp ch
mov rcx, qword [r8 + r12*8 + 0xba940]
jmp 0x1404dc5f8
inc ebx
jmp 0x1404dc5ff
mov dword [rbp - 0x65], ebx
mov byte [rcx + r14*8 + 0x3e], al
and rax, 0x7755968
sub ax, r8w
mov rax, qword [r8 + r12*8 + 0xba940]
test esp, 0x35bf010a
clc
or byte [rax + r14*8 + 0x3d], 4
cmp r9b, r14b
clc
cmc
cmp byte [rbp - 0x71], dl
jmp 0x1404dc5c1
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x69], eax
mov ecx, dword [rsp + 0x40]
cmp r14w, sp
cmp byte [rbp - 0x71], 0
jmp 0x1404dc64e
jmp 0x1404dc65d
mov ecx, dword [rsp + 0x40]
clc
stc
cmp byte [rbp - 0x71], r11b
je 0x1404dc67e
mov rax, qword [rsp + 0x50]
stc
jmp 0x1404dc66e
and dword [rax + 0x3a8], 0xfffffffd
bts eax, r8d
movzx eax, ax
ror eax, 1
mov rax, qword [rbp - 9]
movsd xmm0, qword [rbp - 0x69]
movsd qword [rax], xmm0
test sil, sil
cmc
mov dword [rax + 8], ecx
movsxd rcx, r8d
inc ecx
shr ecx, 0x4e
mov rcx, qword [rbp + 0x17]
xor rcx, rsp
jmp 0x1404dc6a6
call fcn.1404a0330
mov rbx, qword [rsp + 0x140]
bts r14w, ax
shrd si, sp, 0x31
adc rsi, 0x2dba2bcf
add rsp, 0x100
movzx rdi, bp
mov sil, 0xda
bswap r13w
pop r15
movsx si, r10b
jmp 0x1404dc6e7
pop r14
pop r13
cmovno di, r13w
bswap r12d
movsxd rdi, esi
pop r12
xchg bp, bp
not si
pop rdi
movzx ebp, dx
pop rsi
movzx ebp, bp
seta bpl
pop rbp
jmp 0x1404dc710
ret
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x69], eax
sub ecx, r9d
and ch, 0x95
mov ecx, dword [rsp + 0x40]
clc
cmp byte [rbp - 0x71], bl
jmp 0x1404dc72d
jmp 0x1404dc65d