Function at 0x1404ddf11
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
bt ebp, ebp
push rsi
xor bpl, r14b
push rdi
xadd bpl, dil
sar rbp, 0x65
push r12
movsx rbp, cx
add bp, 0x3573
push r13
bts di, r9w
shl r12w, 0xd9
push r14
inc bp
movsx r12d, r14w
push r15
mov rbp, rsp
sub rsp, 0x60
btr r14w, dx
mov r12w, si
sub ebx, ebx
mov r14d, r8d
movzx edi, si
movsxd r12, ecx
bt di, r10w
movzx edi, r15w
cmova di, r13w
mov rdi, rdx
test r8d, r8d
jmp 0x1404ddf7d
je 0x1404de47f
test rdx, rdx
jmp 0x1404ddf8b
jne 0x1404ddfbf
call fcn.1404b83e0
mov dword [rax], ebx
jmp 0x1404ddf9d
call fcn.1404b83a5
mov dword [rax], 0x16
jmp 0x1404ddfad
call fcn.1404b904e
or eax, 0xffffffff
jmp 0x1404ddfba
jmp 0x1404de481
mov rax, r12
shl si, 0x26
mov r15b, dl
lea rcx, [0x1400ba940]
xchg r13b, sil
and eax, 0x3f
test r8b, 0x1b
sbb si, 0x4ac8
mov r13, r12
sar r13, 6
sbb r15w, si
cmova r15w, si
bt esi, r15d
lea r15, [rax + rax*8]
sub ax, 0x4b42
mov rcx, qword [rcx + r13*8]
shr sil, 0xe
movsx esi, byte [rcx + r15*8 + 0x39]
rcr rax, 0xa4
lea eax, [rsi - 1]
cmp rbx, 0x2e094a36
cmp al, 1
jmp 0x1404de01e
ja 0x1404de03d
mov eax, r14d
not eax
cmp r8, 0x1bea5776
cmp dx, r14w
cmc
test al, 1
je 0x1404ddf91
test byte [rcx + r15*8 + 0x38], 0x20
jmp 0x1404de048
je 0x1404de079
sub edx, edx
mov cl, r15b
cmove cx, r9w
movzx r8w, al
mov ecx, r12d
mov r8, rax
not r8b
movsx r8w, r13b
lea r8d, [rdx + 2]
jmp 0x1404de074
call fcn.140251bbc
mov ecx, r12d
jmp 0x1404de081
mov qword [rbp - 0x20], rbx
jmp 0x1404de08a
call fcn.1404e4084
test eax, eax
jmp 0x1404de096
je 0x1404de270
lea rax, [0x1400ba940]
cmp di, 0x66f8
mov rax, qword [rax + r13*8]
stc
cmp dx, 0x6419
cmp byte [rax + r15*8 + 0x38], bl
jge 0x1404de270
call fcn.1404cc699
mov rcx, qword [rax + 0x90]
clc
cmp qword [rcx + 0x138], rbx
jmp 0x1404de0d6
jne 0x1404de0f2
lea rax, [0x1400ba940]
mov rax, qword [rax + r13*8]
cmp byte [rax + r15*8 + 0x39], bl
je 0x1404de270
lea rax, [0x1400ba940]
movsx rcx, r12w
mov rcx, qword [rax + r13*8]
lea rdx, [rbp - 0x10]
mov rcx, qword [rcx + r15*8 + 0x28]
jmp 0x1404de10f
call qword [sym.imp.KERNEL32.dll_GetConsoleMode]
test eax, eax
jmp 0x1404de11c
je 0x1404de270
test sil, sil
je 0x1404de22e
dec sil
jmp 0x1404de136
cmp sil, 1
jmp 0x1404de13f
ja 0x1404de3a3
lea r12, [rdi + r14]
add r14w, 0x2cf8
mov qword [rbp - 0x30], rbx
xchg r14, r14
mov r14, rdi
cmp rdi, r12
jmp 0x1404de161
jae 0x1404de395
mov esi, dword [rbp - 0x2c]
setp cl
movzx ax, r13b
movsxd rax, edx
movzx eax, word [r14]
movzx ecx, ax
jmp 0x1404de181
mov word [rbp - 0x10], ax
jmp 0x1404de18a
call fcn.1404e88e7
movzx ecx, word [rbp - 0x10]
cmc
cmp ax, cx
jmp 0x1404de19c
jne 0x1404de21b
add esi, 2
mov dword [rbp - 0x2c], esi
cmp r8w, r8w
cmc
cmp cx, 0xa
jmp 0x1404de1b6
jne 0x1404de1f9
mov ecx, 0xd
jmp 0x1404de1c6
call fcn.1404e88e7
mov ecx, 0xd
cmp r8b, 0x6f
jmp 0x1404de1d9
cmp ax, cx
jmp 0x1404de1e1
jne 0x1404de21b
inc esi
jmp 0x1404de1ee
mov dword [rbp - 0x2c], esi
jmp 0x1404de1f6
inc ebx
stc
add r14, 2
cmc
test r15w, 0x3aa6
cmp r8b, 0x78
cmp r14, r12
jmp 0x1404de210
jae 0x1404de395
jmp 0x1404de175
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x30], eax
jmp 0x1404de229
jmp 0x1404de395
mov r9d, r14d
jmp 0x1404de23b
lea rcx, [rbp - 0x30]
mov r8, rdi
cwd
not dx
mov edx, r12d
jmp 0x1404de24f
call fcn.1404de4d3
movsd xmm0, qword [rax]
xchg bh, bh
movzx bx, r9b
movsx rbx, ax
mov ebx, dword [rax + 8]
jmp 0x1404de26b
jmp 0x1404de39a
lea rax, [0x1400ba940]
or cl, 0x7a
mov rcx, qword [rax + r13*8]
cmp spl, r14b
cmp byte [rcx + r15*8 + 0x38], bl
jmp 0x1404de28b
jge 0x1404de33c
mov ecx, esi
cmc
stc
test sil, sil
jmp 0x1404de29d
je 0x1404de312
sub ecx, 1
jmp 0x1404de2ab
je 0x1404de2e8
cmp ecx, 1
jmp 0x1404de2b9
jne 0x1404de3a3
mov r9d, r14d
bswap r8d
lea rcx, [rbp - 0x30]
not dh
setae dl
mov r8, rdi
jmp 0x1404de2d6
mov edx, r12d
jmp 0x1404de2de
call fcn.1404df168
jmp 0x1404de254
mov r9d, r14d
movzx ecx, di
lea rcx, [rbp - 0x30]
xchg r8b, r8b
mov r8, rdi
movzx edx, r13w
mov dx, 0x110c
mov edx, r12d
jmp 0x1404de308
call fcn.1404df3d0
jmp 0x1404de254
mov r9d, r14d
bswap dx
cmovg r8w, r13w
cqo
lea rcx, [rbp - 0x30]
mov r8, rdi
mov edx, ecx
cqo
mov edx, r12d
jmp 0x1404de332
call fcn.1404def17
jmp 0x1404de254
mov rcx, qword [rcx + r15*8 + 0x28]
lea r9, [rbp - 0x2c]
adc dl, sil
xor eax, eax
mov r8d, r14d
bsf dx, r13w
bts dx, r9w
and qword [rsp + 0x20], rax
not rdx
mov rdx, rdi
mov qword [rbp - 0x30], rax
jmp 0x1404de36b
mov dword [rbp - 0x28], eax
jmp 0x1404de373
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jmp 0x1404de380
jne 0x1404de38f
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x30], eax
mov ebx, dword [rbp - 0x28]
adc ah, 0x8f
movsd xmm0, qword [rbp - 0x30]
movsd qword [rbp - 0x20], xmm0
add ah, 0x4e
clc
mov rax, qword [rbp - 0x20]
cmp cx, bx
shr rax, 0x20
jmp 0x1404de3b5
test eax, eax
jmp 0x1404de3bc
jne 0x1404de46f
mov eax, dword [rbp - 0x20]
jmp 0x1404de3d0
test eax, eax
jmp 0x1404de3d7
je 0x1404de418
cmp eax, 5
jne 0x1404de406
call fcn.1404b83a5
mov dword [rax], 9
jmp 0x1404de3f6
call fcn.1404b83e0
mov dword [rax], 5
jmp 0x1404ddfb2
mov ecx, dword [rbp - 0x20]
jmp 0x1404de40e
call fcn.1404b8418
jmp 0x1404ddfb2
lea rax, [0x1400ba940]
cmp r8, rdi
test r12, r12
mov rax, qword [rax + r13*8]
jmp 0x1404de42e
test byte [rax + r15*8 + 0x38], 0x40
jmp 0x1404de439
je 0x1404de44d
cmp byte [rdi], 0x1a
jmp 0x1404de447
je 0x1404de47f
call fcn.1404b83a5
mov dword [rax], 0x1c
jmp 0x1404de45d
call fcn.1404b83e0
and dword [rax], 0
jmp 0x1404de46a
jmp 0x1404ddfb2
mov eax, dword [rbp - 0x1c]
clc
sub eax, ebx
jmp 0x1404de47a
jmp 0x1404de481
xor eax, eax
mov rbx, qword [rsp + 0xb8]
clc
test bpl, 0x14
movsx r15w, spl
add rsp, 0x60
xchg bp, bp
movsx r14, bp
movsx edi, sp
pop r15
bswap rbp
not r13b
pop r14
pop r13
cmovl r12w, r8w
pop r12
pop rdi
movzx esi, r8w
movsxd rbp, eax
pop rsi
movzx ebp, bx
jmp 0x1404de4cc
pop rbp
jmp 0x1404de4d2
ret