Function at 0x1404d5689
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
setnp al
mov qword [rsp + 0x18], rbp
cbw
cmova ax, r10w
movsx eax, cx
push rsi
xchg ah, al
bswap rax
lahf
push rdi
cdqe
movsx ax, r8b
push r12
lahf
movzx rax, bp
push r14
movsx ax, r9b
movsx rax, si
lahf
push r15
movsxd rax, r13d
jmp 0x1404d56d1
mov eax, 0x1470
jmp 0x1404d56db
call fcn.140441812
sub rsp, rax
bts ax, bx
adc r12b, 0xea
mov rax, qword [0x1400b7288]
xor rax, rsp
mov qword [rsp + 0x1460], rax
movsx r15, ax
bsf r15w, r15w
add r10b, sil
movsxd r10, edx
mov rbx, rcx
mov rax, r10
btc di, bp
movsx edi, r10w
mov r14d, r9d
xadd cl, dil
sbb r12, 0x5c9b7b86
btr r15, 0xec
sar rax, 6
lea rcx, [0x1400ba940]
and dx, cx
or edx, r11d
and r10d, 0x3f
setno dil
add r14, r8
ror r15b, 0x95
jmp 0x1404d5752
mov r15, r8
mov rdi, r8
mov rax, qword [rcx + rax*8]
rcl r12b, cl
rol r12b, 0xc1
or edx, 0x1abf0c09
lea rdx, [r10 + r10*8]
shrd r12w, si, 0x66
mov r12, qword [rax + rdx*8 + 0x28]
test bl, 0x49
cmc
cmp esp, 0x644431bc
xor eax, eax
mov qword [rbx], rax
clc
cmp bpl, 0xa3
cmp r8, r14
jmp 0x1404d5794
mov dword [rbx + 8], eax
jae 0x1404d5971
lea rax, [rsp + 0x50]
cmp rdi, r14
jmp 0x1404d57aa
jae 0x1404d5818
movzx ecx, word [rdi]
cmp r10b, 0x6e
jmp 0x1404d57bd
add rdi, 2
cmp r15b, dl
clc
cmp cx, 0xa
jmp 0x1404d57ce
jne 0x1404d57e7
mov edx, 0xd
mov word [rax], dx
add rax, 2
test sil, 0xa0
cmp r14, r10
mov word [rax], cx
test edi, r8d
adc cx, 0xc4
bt cx, 0x78
add rax, 2
add cl, r8b
rcl rcx, 0x74
lea rcx, [rsp + 0x6f8]
cmp rax, rcx
jmp 0x1404d5812
jb 0x1404d57a2
and qword [rsp + 0x38], 0
lea rcx, [rsp + 0x50]
jmp 0x1404d582f
and qword [rsp + 0x30], 0
shrd r9d, r9d, 0xd8
shld r9d, r11d, 0xf0
rcl r9d, 0xd7
lea r8, [rsp + 0x50]
bsf r9d, r13d
sub rax, rcx
sar ch, cl
neg r9b
and cx, si
mov dword [rsp + 0x28], 0xd55
lea rcx, [rsp + 0x700]
mov r9b, dil
sar rax, 1
shr r9w, 0x11
mov qword [rsp + 0x20], rcx
dec r9w
rcr r9d, 0xb5
btc r9d, 0xb1
mov r9d, eax
xor cx, bp
rcr ch, 0xe6
adc cl, dil
mov ecx, 0xfde9
jmp 0x1404d589f
xor edx, edx
jmp 0x1404d58a6
call fcn.1404c235c
mov ebp, eax
test r12b, spl
test eax, eax
jmp 0x1404d58b7
je 0x1404d5967
sub esi, esi
cmp r11d, r14d
cmc
test eax, eax
jmp 0x1404d58ca
je 0x1404d5947
and qword [rsp + 0x20], 0
sal cx, cl
shrd r8w, r12w, 0xed
lea rdx, [rsp + 0x700]
or cx, r9w
movsx r8d, ax
mov ecx, esi
btr r9w, 0xce
movzx r8, r15w
setne r9b
lea r9, [rsp + 0x40]
mov r8d, ebp
lea rdx, [rdx + rcx]
shrd ecx, ebx, 0x59
mov rcx, r12
cmp bl, r11b
test bl, r8b
sub r8d, esi
jmp 0x1404d5920
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jmp 0x1404d592d
je 0x1404d5967
add esi, dword [rsp + 0x40]
test r11b, r11b
cmp esi, ebp
jmp 0x1404d5941
jb 0x1404d58d0
mov eax, edi
cmp ax, 0x5aa9
test r14w, 0x7bc1
sub eax, r15d
stc
mov dword [rbx + 4], eax
cmp rdi, r14
jmp 0x1404d5962
jmp 0x1404d5797
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbx], eax
sbb ch, dl
mov rax, rbx
sbb ecx, 0x54530666
mov rcx, qword [rsp + 0x1460]
xor rcx, rsp
jmp 0x1404d598a
call fcn.140498899
lea r11, [rsp + 0x1470]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x40]
mov rsp, r11
movsx r15d, r10w
movzx esi, r14w
cmovnp r14w, ax
pop r15
not sil
movsxd r12, r9d
setp dil
pop r14
pop r12
pop rdi
mov esi, 0x4b0b1f78
pop rsi
jmp 0x1404d59cb
ret