Function at 0x1404d54e8
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
push rbp
adc bpl, r10b
shrd eax, r13d, 0xa1
mov rbp, 0x39a76ab3
push rsi
adc bpl, 0xc1
bsf esi, eax
xadd rbp, rbp
push rdi
push r12
push r13
bts rax, r15
xchg sil, r12b
push r14
push r15
movsx rsi, bp
btr r13w, 0xca
lea rbp, [rsp - 0x27]
sub rsp, 0x100
and r15b, r12b
mov rax, qword [0x1400b7288]
ror r15, cl
stc
xor rax, rsp
cmp sp, 0x55be
mov qword [rbp + 0x17], rax
sar r12w, cl
movsxd rsi, edx
cwde
xor r13d, r8d
cbw
mov r15, r8
mov r13b, 0x10
mov rax, rsi
btr r13w, r13w
mov qword [rbp - 9], rcx
shl r12, 0xf
rol cl, cl
mov qword [rbp - 0x11], rax
lea rcx, [0x140000000]
and eax, 0x3f
movzx r13w, spl
stc
xor r13w, r8w
mov r13d, r9d
movsx r12d, bx
shr r12d, 0xf4
add r13, r8
rcl r12d, cl
mov qword [rbp - 0x21], r8
setle r12b
mov r12, rsi
dec r14
test r12w, 0x235d
mov qword [rbp - 0x51], r13
rcr r14w, 0xb5
xchg r14b, r14b
sar r12, 6
lea r14, [rax + rax*8]
mov rax, qword [rcx + r12*8 + 0xba940]
jmp 0x1404d55cc
mov rax, qword [rax + r14*8 + 0x28]
mov qword [rbp - 0x49], rax
jmp 0x1404d55da
call qword [sym.imp.KERNEL32.dll_GetConsoleOutputCP]
sub edx, edx
mov cx, 0x2ff
bswap cx
lea rcx, [rsp + 0x50]
mov dword [rbp - 0x59], eax
jmp 0x1404d55f6
call fcn.14049e2d5
mov rcx, qword [rsp + 0x58]
sub ebx, r14d
bt dx, 0xd7
sub r11d, r11d
mov dword [rbp - 0x69], r11d
mov ebx, r11d
shrd dx, sp, 0x91
bsr rdi, rdx
seta dh
mov dword [rbp - 0x65], ebx
dec dl
sub dil, r10b
shrd edx, r8d, 0xa6
mov rdi, r15
mov edx, dword [rcx + 0xc]
btr ecx, 0x35
mov ecx, r11d
cmp ah, 0xf0
mov dword [rsp + 0x40], ecx
mov dword [rbp - 0x55], edx
clc
cmp r15, r13
jmp 0x1404d564b
jae 0x1404d5dfc
mov rax, rsi
inc si
bt esi, 0xac
mov rsi, r15
btr r15w, r15w
shl cl, 0xdb
mov cl, 0x34
sar rax, 6
or r15b, 0x45
mov qword [rbp - 0x19], rax
or cl, sil
sar r15b, 0x33
rcr cl, 0x32
mov cl, byte [rdi]
btr r15, rdi
bts r15w, r8w
mov r15d, 1
clc
stc
mov byte [rsp + 0x44], cl
mov dword [rsp + 0x48], r11d
clc
jmp 0x1404d56a3
cmp edx, 0xfde9
jmp 0x1404d56ae
jne 0x1404d597d
lea r15, [0x140000000]
btr rsi, rcx
btr r9w, 0xcd
mov edx, r11d
mov r9, qword [r15 + rax*8 + 0xba940]
mov rsi, r11
or ax, 0x10c3
stc
lea rax, [r9 + r14*8]
cmp byte [rax + rsi + 0x3e], r11b
je 0x1404d56fc
inc edx
inc rsi
cmc
cmp rsi, 5
jmp 0x1404d56f6
jl 0x1404d56dc
test rsi, rsi
jmp 0x1404d5704
jle 0x1404d58c9
mov rax, qword [r15 + r12*8 + 0xba940]
movzx r8d, r12w
mov r8, qword [rbp - 0x51]
sub r8, rdi
not r10b
movzx r13d, r12w
movsx r13d, r15w
movzx ecx, byte [rax + r14*8 + 0x3e]
inc r13d
setnp r10b
movsx r15d, byte [rcx + r15 + 0xb7d00]
movsxd r10, edx
dec r13b
inc r15d
mov r13d, r15d
sub r13d, edx
bts r10, r12
movsx r10, sp
movsxd r10, r13d
test r11b, 0x2c
cmp r10, r8
jmp 0x1404d5764
jg 0x1404d5c40
lea rax, [rbp - 1]
bt r8d, 0x7d
neg ch
mov rdx, r11
sub r9, rax
lea r8, [r9 + r14*8]
mov cx, ax
ror al, cl
lea rcx, [rbp - 1]
rcr al, cl
add rcx, rdx
inc rdx
mov al, byte [rcx + r8 + 0x3e]
mov byte [rcx], al
test r12w, 0x2497
cmp rdx, rsi
jmp 0x1404d57a5
jl 0x1404d5784
test r13d, r13d
jmp 0x1404d57b3
jle 0x1404d57e8
lea rcx, [rbp - 1]
cdq
inc dl
mov r8, r10
cmovle edx, edi
add rcx, rsi
mov rdx, 0x15682781
mov rdx, rdi
jmp 0x1404d57d8
call fcn.14049d2da
xor r11d, r11d
btr dx, 0xa8
add dl, r12b
mov rdx, r11
not cl
lea r8, [0x140000000]
and cx, r8w
btr ecx, 0xbe
xor cl, r12b
mov rcx, qword [r8 + r12*8 + 0xba940]
cmc
test r12, 0x52986914
add rcx, rdx
jmp 0x1404d5817
inc rdx
cmp r12b, r11b
cmp rdx, 0x228c588c
mov byte [rcx + r14*8 + 0x3e], r11b
test r10d, ebx
cmp r15b, 0xb0
cmp rdx, rsi
jmp 0x1404d5838
jl 0x1404d57ff
lea rax, [rbp - 1]
movzx dx, spl
ror ecx, 0x69
mov qword [rbp - 0x41], r11
dec rdx
mov qword [rbp - 0x39], rax
ror cl, cl
cqo
lea r9, [rbp - 0x41]
mov eax, r11d
add edx, r8d
lea rdx, [rbp - 0x39]
cmp r15d, 4
mov r15b, 0xe0
mov r8b, r8b
bswap cx
lea rcx, [rsp + 0x48]
not r15b
mov al, 0xf8
sete al
inc eax
mov r8d, eax
movzx r15w, r8b
mov r15b, cl
cmova r15, r8
mov r15d, eax
call fcn.1404db057
cmp rax, 0xffffffffffffffff
jmp 0x1404d58a3
je 0x1404d5a49
lea eax, [r13 - 1]
cmc
mov r13, qword [rbp - 0x51]
xadd si, si
not rsi
movsxd rsi, eax
add rsi, rdi
jmp 0x1404d58c4
jmp 0x1404d5a81
movzx eax, byte [rdi]
adc dh, 0x2a
rol dh, cl
mov rdx, r13
sub rdx, rdi
jmp 0x1404d58dc
movsx rsi, byte [rax + r15 + 0xb7d00]
test edi, 0x41552e76
bsf rcx, r11
cdqe
lea ecx, [rsi + 1]
and ax, bx
movsxd rax, ecx
cmp rax, rdx
jmp 0x1404d5902
jg 0x1404d5cb9
cmp ecx, 4
mov qword [rbp - 0x31], r11
cqo
rdtsc
xchg bl, r8b
mov eax, r11d
mov al, r11b
movzx rbx, r11w
mov dh, 0x6f
mov qword [rbp - 0x29], rdi
movsxd r9, ecx
sete al
lea r9, [rbp - 0x31]
inc eax
setg r8b
cdq
movsx edx, r14w
lea rdx, [rbp - 0x29]
mov r8d, eax
jmp 0x1404d594a
lea rcx, [rsp + 0x48]
movzx rbx, r15w
mov ebx, eax
call fcn.1404db057
cmp rax, 0xffffffffffffffff
jmp 0x1404d5963
je 0x1404d5a49
add rsi, rdi
bswap r15w
mov r15d, ebx
jmp 0x1404d5978
jmp 0x1404d5a81
lea rax, [0x140000000]
cmp r11d, 0x59c6106a
ror cl, 0x4f
clc
mov rdx, qword [rax + r12*8 + 0xba940]
mov cl, dil
mov cl, byte [rdx + r14*8 + 0x3d]
cmp r11b, r8b
cmc
test cl, 4
jmp 0x1404d59ab
je 0x1404d59e8
mov al, byte [rdx + r14*8 + 0x3e]
test spl, 0xba
cmp edi, 0x458b54d1
jmp 0x1404d59c5
and cl, 0xfb
jmp 0x1404d59cd
mov byte [rbp + 7], al
mov al, byte [rdi]
mov byte [rdx + r14*8 + 0x3d], cl
lea rdx, [rbp + 7]
mov byte [rbp + 8], al
jmp 0x1404d59e3
jmp 0x1404d5a23
call fcn.1404a485a
movzx ecx, byte [rdi]
xor edx, edx
clc
cmp word [rax + rcx*2], dx
jmp 0x1404d59fc
jge 0x1404d5a57
inc rsi
jmp 0x1404d5a0a
cmp rsi, r13
jmp 0x1404d5a12
jae 0x1404d5d83
mov rdx, rdi
mov r8w, 0x1362
not r8b
mov r8d, 2
movsxd rcx, r8d
bswap cx
not cl
lea rcx, [rsp + 0x48]
jmp 0x1404d5a3b
call fcn.14010a156
cmp eax, 0xffffffff
jne 0x1404d5a81
cmp byte [rbp - 0x71], 0
jmp 0x1404d5a52
jmp 0x1404d5d75
mov r8, r15
movzx edx, r10w
lea rcx, [rsp + 0x48]
movsxd rdx, ebp
mov rdx, rdi
jmp 0x1404d5a6e
call fcn.14010a156
cmp eax, 0xffffffff
jmp 0x1404d5a7b
je 0x1404d5ddd
mov ecx, dword [rbp - 0x59]
btr r8, 0x87
xor edi, 0x67f55551
cmp r10d, 0x6383652f
lea rax, [rbp + 0xf]
sub ebx, ebx
movsx r8w, r10b
movsx edi, si
lea r8, [rsp + 0x48]
bt edi, ebx
mov qword [rsp + 0x38], rbx
shl r9b, cl
ror r9b, 0xc5
clc
lea rdi, [rsi + 1]
bt r9w, 0xb7
bswap r9
mov qword [rsp + 0x30], rbx
neg r9b
btc r9w, cx
btr r9, rdx
mov r9d, r15d
test bpl, dil
mov dword [rsp + 0x28], 5
jmp 0x1404d5aee
xor edx, edx
jmp 0x1404d5af5
mov qword [rsp + 0x20], rax
jmp 0x1404d5aff
call fcn.1404c3178
mov esi, eax
cmp r13d, 0x2f7e7efc
test eax, eax
jmp 0x1404d5b14
je 0x1404d5ebd
mov rcx, qword [rbp - 0x49]
movzx r8d, r15w
cwd
lea r9, [rsp + 0x4c]
cqo
mov r8d, eax
cqo
movsx edx, dx
movsx rdx, si
mov qword [rsp + 0x20], rbx
lea rdx, [rbp + 0xf]
jmp 0x1404d5b45
call qword [sym.imp.KERNEL32.dll_WriteFile]
sub r11d, r11d
cmp r12b, 0xe5
test eax, eax
jmp 0x1404d5b59
je 0x1404d5eb4
mov r15d, dword [rsp + 0x40]
movzx bx, r9b
mov ebx, edi
sub ebx, dword [rbp - 0x21]
cmp sp, bp
add ebx, r15d
test rdx, rcx
mov dword [rbp - 0x65], ebx
cmc
test bpl, 0x99
cmp cl, 0xba
cmp dword [rsp + 0x4c], esi
jmp 0x1404d5b8b
jb 0x1404d5d6d
cmp byte [rsp + 0x44], 0xa
jne 0x1404d5c1a
mov rcx, qword [rbp - 0x49]
lea eax, [r11 + 0xd]
cdq
lea r9, [rsp + 0x4c]
mov r8b, 0xcc
bswap r8w
cqo
mov word [rsp + 0x44], ax
movsx dx, sil
lea r8d, [r11 + 1]
mov qword [rsp + 0x20], r11
not dl
lea rdx, [rsp + 0x44]
call qword [sym.imp.KERNEL32.dll_WriteFile]
sub r11d, r11d
jmp 0x1404d5bdb
test eax, eax
jmp 0x1404d5be2
je 0x1404d5dcf
cmp dword [rsp + 0x4c], 1
jmp 0x1404d5bf2
jb 0x1404d5d6d
inc r15d
mov sil, r11b
inc ebx
shr si, 0x3c
cmc
sar sil, 0x4a
mov dword [rsp + 0x40], r15d
shr si, 0x18
mov dword [rbp - 0x65], ebx
btc rsi, 0xb7
mov rsi, rdi
cmp rdi, r13
jmp 0x1404d5c25
jae 0x1404d5def
mov rax, qword [rbp - 0x19]
cmovge rdx, r9
mov edx, dword [rbp - 0x55]
jmp 0x1404d5c3b
jmp 0x1404d567e
mov edx, r11d
test r8, r8
jmp 0x1404d5c4b
jle 0x1404d5cac
sub rdi, rsi
lea rbx, [0x140000000]
mov al, byte [rdi + rsi]
movsx ecx, r8w
bswap rcx
movsx cx, bl
inc edx
rcl cl, 0x14
sar cl, 0x5e
cmc
mov rcx, qword [rbx + r12*8 + 0xba940]
add rcx, rsi
jmp 0x1404d5c82
inc rsi
mov byte [rcx + r14*8 + 0x3e], al
cmovne rax, r13
shrd ax, si, 0xfc
movsxd rax, edx
clc
cmp bh, 0x10
cmp rax, r8
jmp 0x1404d5ca2
jl 0x1404d5c5b
mov ebx, dword [rbp - 0x65]
cmc
add ebx, r8d
jmp 0x1404d5cb4
jmp 0x1404d5d6a
mov r9d, r11d
jmp 0x1404d5cc1
test rdx, rdx
jmp 0x1404d5cc9
jle 0x1404d5d65
mov r13, qword [rbp - 0x11]
movzx ecx, r11w
ror r8w, 0xfe
mov r8, r11
mov r10, r13
xor r11, 0x202e2d21
cmovbe cx, r11w
and r13d, 0x3f
or al, r12b
sar r10, 6
movzx rcx, bp
rcr ch, cl
lea r11, [r13*8]
add r11, r13
dec ch
mov rcx, rsp
mov al, byte [r8 + rdi]
movsx rcx, cx
dec cx
inc r9d
btr cx, 0x3b
mov rcx, qword [r15 + r10*8 + 0xba940]
add rcx, r8
inc r8
cmp r10w, 0x4731
mov byte [rcx + r11*8 + 0x3e], al
btr rax, r15
and al, r9b
movsxd rax, r9d
test r15w, 0x16da
cmp rax, rdx
jmp 0x1404d5d53
jl 0x1404d5d0f
sub r11d, r11d
setle cl
rol ch, cl
bsf cx, bx
add ebx, edx
add cl, r11b
mov dword [rbp - 0x65], ebx
cmp byte [rbp - 0x71], r11b
movsx cx, dl
mov ecx, dword [rsp + 0x40]
jmp 0x1404d5d7e
jmp 0x1404d5e05
mov al, byte [rdi]
cmovns ecx, esi
lea r8, [0x140000000]
not cl
mov rcx, qword [r8 + r12*8 + 0xba940]
jmp 0x1404d5d9e
inc ebx
mov dword [rbp - 0x65], ebx
cmc
stc
mov byte [rcx + r14*8 + 0x3e], al
movzx rax, r10w
mov rax, qword [r8 + r12*8 + 0xba940]
or byte [rax + r14*8 + 0x3d], 4
test r14b, sil
cmp cl, 0xe3
cmp byte [rbp - 0x71], dl
jmp 0x1404d5dca
jmp 0x1404d5d75
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x69], eax
xchg ecx, ecx
shr ch, 0x45
mov ecx, dword [rsp + 0x40]
cmp byte [rbp - 0x71], 0
jmp 0x1404d5dea
jmp 0x1404d5e05
mov ecx, dword [rsp + 0x40]
jmp 0x1404d5dfc
cmp byte [rbp - 0x71], r11b
jmp 0x1404d5e05
je 0x1404d5e1c
mov rax, qword [rsp + 0x50]
cmp esp, esi
clc
and dword [rax + 0x3a8], 0xfffffffd
cdqe
mov rax, qword [rbp - 9]
cmp r15b, 0xe6
movsd xmm0, qword [rbp - 0x69]
cmp bl, 0xc9
movsd qword [rax], xmm0
mov dword [rax + 8], ecx
sar cx, cl
xadd cx, cx
bts cx, sp
mov rcx, qword [rbp + 0x17]
cmp bp, bp
clc
xor rcx, rsp
jmp 0x1404d5e4e
call fcn.1404996f5
mov rbx, qword [rsp + 0x140]
sbb dil, bpl
shrd r13d, eax, 0x9a
cmp r15w, 0x577f
add rsp, 0x100
movsx r15, r14w
cmovnp r12, r12
pop r15
movsxd r14, r15d
pop r14
jmp 0x1404d5e8b
pop r13
movzx r12w, r11b
pop r12
jmp 0x1404d5ea0
pop rdi
cmovs ebp, ecx
movzx si, r14b
pop rsi
jmp 0x1404d5eb2
pop rbp
ret
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x69], eax
mov ecx, dword [rsp + 0x40]
cmp byte [rbp - 0x71], bl
jmp 0x1404d5ec9
jmp 0x1404d5e05