Function at 0x1404dba3d
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
rol bpl, 0xa6
shr bp, 0x2b
xor rbp, 0x52652ee8
push rsi
neg bpl
bts ebp, esp
push rdi
btr bp, si
shr edi, cl
mov dil, 0xbe
push r12
movsx r12, r10w
push r13
neg dil
bsf rbp, r14
shrd rdi, rdx, 0xd4
push r14
bsr di, r13w
push r15
mov rbp, rsp
btc r14, 0xc1
sub rsp, 0x60
inc r12b
xor ebx, ebx
setne r12b
mov r14b, bl
mov r14d, r8d
ror r12d, cl
movsxd r12, ecx
sbb dil, 0x75
movsxd rdi, r12d
mov rdi, rdx
clc
test si, r8w
test r8d, r8d
jmp 0x1404dbab8
je 0x1404dbfaf
test rdx, rdx
jne 0x1404dbaf0
call fcn.1404b5ed3
mov dword [rax], ebx
call fcn.1404b5e92
mov dword [rax], 0x16
jmp 0x1404dbade
call fcn.1404b6b16
or eax, 0xffffffff
jmp 0x1404dbaeb
jmp 0x1404dbfbe
mov rax, r12
sar r13, cl
lea rcx, [0x1400ba940]
movsxd rsi, ebp
adc r15w, r8w
and eax, 0x3f
bt esi, eax
sub r15b, bpl
adc r13w, sp
mov r13, r12
shr r15w, cl
sar r13, 6
jmp 0x1404dbb21
lea r15, [rax + rax*8]
shr al, 0x28
test r15b, cl
sub ax, 0x12ca
mov rcx, qword [rcx + r13*8]
btr ax, 0xe6
cwde
or eax, r12d
movsx esi, byte [rcx + r15*8 + 0x39]
shrd ax, r9w, 0
movzx rax, ax
lea eax, [rsi - 1]
cmp r13w, 0x59a4
test dil, 0xb2
clc
cmp al, 1
ja 0x1404dbb78
mov eax, r14d
test r15, rax
not eax
clc
test al, 1
jmp 0x1404dbb72
je 0x1404dbac7
test byte [rcx + r15*8 + 0x38], 0x20
je 0x1404dbb9b
xor edx, edx
movsx r8d, r12w
mov ecx, r12d
lea r8d, [rdx + 2]
jmp 0x1404dbb96
call fcn.14021c6ea
mov ecx, r12d
jmp 0x1404dbba3
mov qword [rbp - 0x20], rbx
call fcn.1404e1ac9
test eax, eax
jmp 0x1404dbbb3
je 0x1404dbd88
lea rax, [0x1400ba940]
mov rax, qword [rax + r13*8]
clc
cmp sil, 0x30
cmp byte [rax + r15*8 + 0x38], bl
jmp 0x1404dbbd3
jge 0x1404dbd88
call fcn.1404ca067
mov rcx, qword [rax + 0x90]
test r11d, r11d
jmp 0x1404dbbed
cmp qword [rcx + 0x138], rbx
jmp 0x1404dbbf9
jne 0x1404dbc21
lea rax, [0x1400ba940]
mov rax, qword [rax + r13*8]
test sil, 0x97
stc
cmp r11d, 0x5b2f4271
cmp byte [rax + r15*8 + 0x39], bl
je 0x1404dbd88
lea rax, [0x1400ba940]
cdq
movzx dx, sil
bswap dx
mov rcx, qword [rax + r13*8]
cdq
bswap rdx
movsx rdx, cx
lea rdx, [rbp - 0x10]
jmp 0x1404dbc46
mov rcx, qword [rcx + r15*8 + 0x28]
jmp 0x1404dbc50
call qword [sym.imp.KERNEL32.dll_GetConsoleMode]
test eax, eax
jmp 0x1404dbc5d
je 0x1404dbd88
test sil, sil
jmp 0x1404dbc6b
je 0x1404dbd3d
dec sil
cmp sil, 1
jmp 0x1404dbc7d
ja 0x1404dbee0
lea r12, [rdi + r14]
mov qword [rbp - 0x30], rbx
mov r14, rdi
test dl, r11b
cmp r8w, bp
cmp rdi, r12
jmp 0x1404dbc9d
jae 0x1404dbeca
mov esi, dword [rbp - 0x2c]
movzx eax, word [r14]
movzx ecx, ax
jmp 0x1404dbcb2
mov word [rbp - 0x10], ax
jmp 0x1404dbcbb
call fcn.1404e63b5
movzx ecx, word [rbp - 0x10]
cmp ax, cx
jne 0x1404dbd2a
add esi, 2
jmp 0x1404dbcd5
mov dword [rbp - 0x2c], esi
cmp cx, 0xa
jmp 0x1404dbce1
jne 0x1404dbd16
mov ecx, 0xd
jmp 0x1404dbcf1
call fcn.1404e63b5
mov ecx, 0xd
clc
cmc
cmp ax, cx
jne 0x1404dbd2a
inc esi
mov dword [rbp - 0x2c], esi
jmp 0x1404dbd10
inc ebx
cmp sp, r8w
add r14, 2
cmc
clc
cmp r14, r12
jae 0x1404dbeca
jmp 0x1404dbca6
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x30], eax
jmp 0x1404dbd38
jmp 0x1404dbeca
mov r9d, r14d
movsx ecx, r14w
cdq
jmp 0x1404dbd4a
lea rcx, [rbp - 0x30]
movsx r8d, r10w
mov r8, rbx
xchg r8w, dx
mov r8, rdi
movsx dx, bpl
movsx edx, bx
mov edx, r12d
jmp 0x1404dbd6c
call fcn.1404dc015
movsd xmm0, qword [rax]
movsx ebx, bp
jmp 0x1404dbd80
mov ebx, dword [rax + 8]
jmp 0x1404dbed6
lea rax, [0x1400ba940]
mov rcx, qword [rax + r13*8]
cmp byte [rcx + r15*8 + 0x38], bl
jmp 0x1404dbd9d
jge 0x1404dbe54
mov ecx, esi
test r10b, 0xe9
test sil, sil
je 0x1404dbe25
sub ecx, 1
je 0x1404dbdf1
cmp ecx, 1
jmp 0x1404dbdc3
jne 0x1404dbee0
mov r9d, r14d
movzx r8, cx
jmp 0x1404dbdd5
lea rcx, [rbp - 0x30]
mov r8, rdi
mov dh, 0x69
mov edx, r12d
jmp 0x1404dbde7
call fcn.1404dcc91
jmp 0x1404dbd71
mov r9d, r14d
cmovae rcx, r10
movsx edx, r12w
movsxd rcx, r10d
lea rcx, [rbp - 0x30]
movzx r8, r8w
cwd
mov r8, rdi
not dx
cmovle rdx, r13
mov edx, r12d
jmp 0x1404dbe1b
call fcn.1404dceda
jmp 0x1404dbd71
mov r9d, r14d
movzx rdx, di
lea rcx, [rbp - 0x30]
xchg r8b, r8b
setno r8b
cmovs rdx, rdi
mov r8, rdi
cmovbe edx, r12d
mov edx, r12d
jmp 0x1404dbe4a
call fcn.1404dca2b
jmp 0x1404dbd71
mov rcx, qword [rcx + r15*8 + 0x28]
lea r9, [rbp - 0x2c]
cwd
add rdx, 0x285725ae
bt rdx, 0x19
sub eax, eax
xadd dl, dl
not r8b
mov r8d, r14d
ror rdx, 0x2e
rcl dh, cl
or dx, 0x3e22
and qword [rsp + 0x20], rax
mov rdx, rdi
jmp 0x1404dbe8e
mov qword [rbp - 0x30], rax
jmp 0x1404dbe97
mov dword [rbp - 0x28], eax
jmp 0x1404dbe9f
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jmp 0x1404dbeac
jne 0x1404dbec4
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x30], eax
movsx rbx, r13w
adc al, 0x18
xor al, dil
mov ebx, dword [rbp - 0x28]
rol al, 7
movsd xmm0, qword [rbp - 0x30]
btc rax, 0xc7
mov al, bh
movsd qword [rbp - 0x20], xmm0
sub al, 0xb7
test r12b, sil
mov rax, qword [rbp - 0x20]
shr rax, 0x20
jmp 0x1404dbef0
test eax, eax
jmp 0x1404dbef7
jne 0x1404dbf9f
mov eax, dword [rbp - 0x20]
jmp 0x1404dbf05
test eax, eax
jmp 0x1404dbf0c
je 0x1404dbf52
cmp eax, 5
jmp 0x1404dbf1a
jne 0x1404dbf40
call fcn.1404b5e92
mov dword [rax], 9
jmp 0x1404dbf30
call fcn.1404b5ed3
mov dword [rax], 5
jmp 0x1404dbae3
mov ecx, dword [rbp - 0x20]
jmp 0x1404dbf48
call fcn.1404b5f0e
jmp 0x1404dbae3
lea rax, [0x1400ba940]
test sp, r11w
stc
cmc
mov rax, qword [rax + r13*8]
test byte [rax + r15*8 + 0x38], 0x40
jmp 0x1404dbf6e
je 0x1404dbf7d
cmp byte [rdi], 0x1a
je 0x1404dbfaf
call fcn.1404b5e92
mov dword [rax], 0x1c
jmp 0x1404dbf8d
call fcn.1404b5ed3
and dword [rax], 0
jmp 0x1404dbf9a
jmp 0x1404dbae3
mov eax, dword [rbp - 0x1c]
clc
sub eax, ebx
jmp 0x1404dbfaa
jmp 0x1404dbfbe
sub eax, eax
jmp 0x1404dbfbe
mov rbx, qword [rsp + 0xb8]
add rsp, 0x60
bswap r14w
movsx r13w, r15b
movzx r12, sp
pop r15
movsx r12w, dl
mov rbp, rdx
mov r13w, 0x7cf8
pop r14
pop r13
setns bpl
xchg dil, sil
mov sil, 0x25
pop r12
not bpl
pop rdi
bswap rbp
cmovle rbp, rsp
mov bpl, dl
pop rsi
movzx bp, r14b
setbe bpl
pop rbp
jmp 0x1404dc014
ret