Function at 0x1404dfa01
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
neg rax
bsf ebp, ecx
btr esi, r15d
push rdi
setb sil
push r12
sar r12b, 0x6b
sub r12b, dil
bswap rax
push r13
movsxd r13, r15d
sub r13w, r15w
bt r12, 0x85
push r14
push r15
ror bpl, 0
lea rbp, [rsp - 0x27]
bt si, si
xor r14b, 0xf5
or r14, 0x67db3e28
sub rsp, 0x100
movsx rsi, ax
mov rax, qword [0x1400b7288]
sbb si, 0x2d96
setge sil
movsx r13, r15w
xor rax, rsp
not r15b
mov qword [rbp + 0x17], rax
movsxd rsi, edx
xchg al, r12b
mov r15, r8
mov r12w, r11w
mov rax, rsi
bt r13d, esp
sar r12b, 0x9a
movsx r13d, r12w
mov qword [rbp - 9], rcx
xor r13b, 0xec
mov qword [rbp - 0x11], rax
bts ecx, r8d
lea rcx, [0x140000000]
adc r12b, 0x25
add r12b, 0x11
and eax, 0x3f
mov r13d, r9d
movsx r14w, bl
movsx r14d, cx
add r13, r8
cmc
mov qword [rbp - 0x21], r8
bts r14d, r9d
adc r12b, 0xcb
mov r12, rsi
rcr r14w, 0xf7
mov r14b, dl
or r14, 0x4df23903
mov qword [rbp - 0x51], r13
shr r14b, 0xe1
test r9b, r12b
sar r12, 6
movsx r14, dx
bswap r14
lea r14, [rax + rax*8]
mov rax, qword [rcx + r12*8 + 0xba940]
jmp 0x1404dfb09
mov rax, qword [rax + r14*8 + 0x28]
jmp 0x1404dfb13
mov qword [rbp - 0x49], rax
jmp 0x1404dfb1c
call qword [sym.imp.KERNEL32.dll_GetConsoleOutputCP]
xor edx, edx
movsx ecx, r13w
movzx cx, ah
not ch
lea rcx, [rsp + 0x50]
mov dword [rbp - 0x59], eax
call fcn.1404a8a13
mov rcx, qword [rsp + 0x58]
cwd
sub r11d, r11d
mov dword [rbp - 0x69], r11d
bt bx, 0x3c
mov ebx, r11d
xor dl, r10b
bsf edi, esp
mov dword [rbp - 0x65], ebx
movsx di, r11b
shl di, 0x5e
cmovo dx, ax
mov rdi, r15
add dx, 0x18c6
mov edx, dword [rcx + 0xc]
btc rcx, 0x37
shr ch, 0x13
rcr cx, 0xb6
mov ecx, r11d
jmp 0x1404dfb87
mov dword [rsp + 0x40], ecx
cmc
mov dword [rbp - 0x55], edx
cmc
cmp r13b, spl
cmp r15, r13
jmp 0x1404dfb9b
jae 0x1404e0360
mov rax, rsi
mov rsi, r15
ror r15w, cl
sar rax, 6
adc r15w, dx
or r15b, r13b
mov qword [rbp - 0x19], rax
mov cl, byte [rdi]
sal r15, cl
mov r15d, 1
mov byte [rsp + 0x44], cl
mov dword [rsp + 0x48], r11d
test r10b, r10b
clc
cmp edx, 0xfde9
jne 0x1404dfeea
lea r15, [0x140000000]
shrd dx, r9w, 0xc8
btr r9, 0x66
mov edx, r11d
mov r9, qword [r15 + rax*8 + 0xba940]
clc
movsx eax, r12w
mov rsi, r11
sub al, spl
xadd ax, ax
bts eax, r10d
lea rax, [r9 + r14*8]
cmp byte [rax + rsi + 0x3e], r11b
je 0x1404dfc36
inc edx
jmp 0x1404dfc24
inc rsi
cmp rsi, 5
jmp 0x1404dfc30
jl 0x1404dfc12
test rsi, rsi
jmp 0x1404dfc3e
jle 0x1404dfe1b
mov rax, qword [r15 + r12*8 + 0xba940]
bt r13, 0x6d
mov r8, qword [rbp - 0x51]
sub r8, rdi
cmove rcx, rbx
movsx r13, dx
seta ch
movzx ecx, byte [rax + r14*8 + 0x3e]
movsx r15d, byte [rcx + r15 + 0xb7d00]
mov r10d, 0x52240e38
jmp 0x1404dfc81
inc r15d
ror r13d, 0x9c
movsx r10, r14w
mov r13d, r15d
sal r10d, cl
test bx, r10w
and r10w, r10w
sub r13d, edx
seta r10b
bt r10w, 0x8a
bswap r10w
movsxd r10, r13d
cmc
cmp r10, r8
jmp 0x1404dfcb7
jg 0x1404e019a
lea rax, [rbp - 1]
mov rdx, r11
bsr rcx, r15
sal ch, 0xef
sub r8, 0x729a4e4a
sub r9, rax
lea r8, [r9 + r14*8]
shr rcx, 3
lea rcx, [rbp - 1]
add rcx, rdx
inc rdx
mov al, byte [rcx + r8 + 0x3e]
jmp 0x1404dfcf1
mov byte [rcx], al
test esi, 0x7e7b7b3b
cmp edi, esi
cmp rdx, rsi
jl 0x1404dfcdd
test r13d, r13d
jmp 0x1404dfd0c
jle 0x1404dfd44
lea rcx, [rbp - 1]
movsx edx, dx
cwd
mov r8, r10
add rcx, rsi
movsx rdx, sp
bswap dx
cdq
mov rdx, rdi
jmp 0x1404dfd31
call fcn.1404a79e3
xor r11d, r11d
shld dx, sp, 0xed
sbb dh, 0xb3
xadd cl, dl
mov rdx, r11
lea r8, [0x140000000]
movsx cx, spl
rcl cx, cl
mov rcx, qword [r8 + r12*8 + 0xba940]
cmp bpl, cl
add rcx, rdx
jmp 0x1404dfd69
inc rdx
test dl, dil
cmp r8, 0x7edb0a1f
mov byte [rcx + r14*8 + 0x3e], r11b
cmp rdx, rsi
jl 0x1404dfd56
lea rax, [rbp - 1]
mov qword [rbp - 0x41], r11
mov qword [rbp - 0x39], rax
lea r9, [rbp - 0x41]
mov eax, r11d
sub edx, 0x4bd54686
shr ch, 0x81
and cl, 0x3a
lea rdx, [rbp - 0x39]
cmc
shrd cx, r15w, 0xc3
cmp r15d, 4
movsx rcx, bp
lea rcx, [rsp + 0x48]
mov r15b, 0xa2
movzx r8w, sil
sete al
not r15b
xchg r8b, r15b
inc eax
movzx r8, bx
seto r8b
mov r8d, eax
mov r15d, eax
jmp 0x1404dfde1
call fcn.1404e5533
cmp rax, 0xffffffffffffffff
je 0x1404dff9f
lea eax, [r13 - 1]
test dil, 0xac
movsxd r13, esi
mov r13, qword [rbp - 0x51]
adc si, 0x4f95
stc
btc si, 0xd2
movsxd rsi, eax
clc
add rsi, rdi
jmp 0x1404dfe16
jmp 0x1404dffd0
movzx eax, byte [rdi]
mov rdx, r13
test r8, 0x6b8626da
sub rdx, rdi
and ecx, r10d
sub rsi, r8
not ch
movsx rsi, byte [rax + r15 + 0xb7d00]
lea ecx, [rsi + 1]
rcl ah, cl
bt ax, dx
movsxd rax, ecx
cmp al, r14b
cmp rax, rdx
jmp 0x1404dfe53
jg 0x1404e022b
cmp ecx, 4
mov dl, 0x43
mov qword [rbp - 0x31], r11
movzx r9, bx
cdqe
mov eax, r11d
movsxd rcx, r15d
mov al, spl
mov qword [rbp - 0x29], rdi
movzx rbx, r12w
movzx r9d, r14w
movsxd r8, ebx
sete al
setne r9b
movzx bx, dil
lea r9, [rbp - 0x31]
inc eax
mov cl, 0x83
sets cl
bswap r8
lea rdx, [rbp - 0x29]
movsx rbx, sp
cmovne cx, r15w
movsx bx, r9b
mov r8d, eax
xchg ecx, ebx
jmp 0x1404dfeb6
lea rcx, [rsp + 0x48]
setle bh
mov bl, 0xf5
cmovs bx, bx
mov ebx, eax
jmp 0x1404dfecb
call fcn.1404e5533
cmp rax, 0xffffffffffffffff
je 0x1404dff9f
add rsi, rdi
mov r15d, ebx
jmp 0x1404dfee5
jmp 0x1404dffd0
lea rax, [0x140000000]
rcr edx, 0x39
mov rdx, qword [rax + r12*8 + 0xba940]
sbb cl, 0x21
mov cl, byte [rdx + r14*8 + 0x3d]
stc
test cl, 4
jmp 0x1404dff0d
je 0x1404dff4a
mov al, byte [rdx + r14*8 + 0x3e]
stc
cmp dx, r9w
and cl, 0xfb
jmp 0x1404dff25
mov byte [rbp + 7], al
mov al, byte [rdi]
jmp 0x1404dff2f
mov byte [rdx + r14*8 + 0x3d], cl
lea rdx, [rbp + 7]
jmp 0x1404dff3d
mov byte [rbp + 8], al
jmp 0x1404dff45
jmp 0x1404dff76
call fcn.1404af167
movzx ecx, byte [rdi]
cmp r14d, edi
cmc
sub edx, edx
cmp word [rax + rcx*2], dx
jge 0x1404dffad
inc rsi
cmp rsi, r13
jmp 0x1404dff6d
jae 0x1404e02ec
mov rdx, rdi
mov r8d, 2
mov cx, sp
movsxd rcx, r14d
lea rcx, [rsp + 0x48]
jmp 0x1404dff8c
call fcn.140236527
cmp eax, 0xffffffff
jmp 0x1404dff99
jne 0x1404dffd0
cmp byte [rbp - 0x71], 0
jmp 0x1404dffa8
jmp 0x1404e02de
mov r8, r15
lea rcx, [rsp + 0x48]
cwd
movsxd rdx, esi
mov rdx, rdi
call fcn.140236527
cmp eax, 0xffffffff
jmp 0x1404dffca
je 0x1404e0348
mov ecx, dword [rbp - 0x59]
dec r9b
lea rax, [rbp + 0xf]
sub r8w, bp
and r9b, 0xf2
xor ebx, ebx
sub dil, bl
and r8b, 0x57
lea r8, [rsp + 0x48]
btc r9d, 0x66
mov qword [rsp + 0x38], rbx
lea rdi, [rsi + 1]
movsx r9, sp
and r9w, r14w
mov qword [rsp + 0x30], rbx
not r9w
jmp 0x1404e0014
mov r9d, r15d
clc
jmp 0x1404e001d
mov dword [rsp + 0x28], 5
cmp rcx, rdi
xor edx, edx
jmp 0x1404e002f
mov qword [rsp + 0x20], rax
jmp 0x1404e0039
call fcn.1404cd8ec
mov esi, eax
test eax, eax
je 0x1404e03f5
mov rcx, qword [rbp - 0x49]
movzx rdx, r11w
movsx r8, r12w
mov r8b, 0xe5
lea r9, [rsp + 0x4c]
mov r8d, eax
bswap rdx
movzx dx, bl
mov dl, cl
mov qword [rsp + 0x20], rbx
jmp 0x1404e0075
lea rdx, [rbp + 0xf]
jmp 0x1404e007e
call qword [sym.imp.KERNEL32.dll_WriteFile]
xor r11d, r11d
cmp ecx, 0x2b1305fa
cmp spl, r15b
test eax, eax
jmp 0x1404e0097
je 0x1404e03eb
mov r15d, dword [rsp + 0x40]
mov ebx, edi
test bl, bh
cmc
sub ebx, dword [rbp - 0x21]
add ebx, r15d
clc
stc
test cx, 0x1d82
mov dword [rbp - 0x65], ebx
cmc
cmp r10d, r9d
cmp dword [rsp + 0x4c], esi
jmp 0x1404e00c4
jb 0x1404e02d3
cmp byte [rsp + 0x44], 0xa
jmp 0x1404e00d4
jne 0x1404e0170
mov rcx, qword [rbp - 0x49]
cwd
movsx r9d, r13w
nop
lea eax, [r11 + 0xd]
xchg r9w, r9w
cdq
lea r9, [rsp + 0x4c]
movsx r8, r11w
jmp 0x1404e00fd
mov word [rsp + 0x44], ax
mov dx, 0x14be
movzx dx, r9b
lea r8d, [r11 + 1]
mov dh, 0x32
cdq
movsx dx, r11b
mov qword [rsp + 0x20], r11
lea rdx, [rsp + 0x44]
call qword [sym.imp.KERNEL32.dll_WriteFile]
sub r11d, r11d
test r13, r15
test r8d, 0xe3016d6
clc
test eax, eax
jmp 0x1404e013d
je 0x1404e0334
cmp dword [rsp + 0x4c], 1
jmp 0x1404e014d
jb 0x1404e02d3
inc r15d
inc ebx
stc
movzx rsi, r12w
neg sil
mov dword [rsp + 0x40], r15d
mov dword [rbp - 0x65], ebx
mov sil, spl
sal esi, cl
xor rsi, r9
mov rsi, rdi
stc
cmp ax, 0x7c02
cmp rdi, r13
jmp 0x1404e0180
jae 0x1404e0359
mov rax, qword [rbp - 0x19]
setno dl
mov edx, dword [rbp - 0x55]
jmp 0x1404e0195
jmp 0x1404dfbba
mov edx, r11d
test r8, r8
jmp 0x1404e01a5
jle 0x1404e021e
sub rdi, rsi
movsxd rcx, edi
movsx rcx, r9w
movzx cx, r13b
lea rbx, [0x140000000]
jmp 0x1404e01cb
mov al, byte [rdi + rsi]
mov rcx, 0x56270cf8
bswap cx
inc edx
shr ch, cl
jmp 0x1404e01e5
mov rcx, qword [rbx + r12*8 + 0xba940]
cmp r15b, 0xe6
add rcx, rsi
jmp 0x1404e01f9
inc rsi
stc
mov byte [rcx + r14*8 + 0x3e], al
movzx eax, sp
movsxd rax, edx
cmp ch, bl
clc
cmp rax, r8
jl 0x1404e01cb
mov ebx, dword [rbp - 0x65]
cmp ch, bl
jmp 0x1404e021e
add ebx, r8d
jmp 0x1404e0226
jmp 0x1404e02d0
mov r9d, r11d
test rdx, rdx
jmp 0x1404e0236
jle 0x1404e02ca
mov r13, qword [rbp - 0x11]
mov r8, r11
mov r10, r13
rcr cl, cl
and r13d, 0x3f
bt r11w, 0x1b
add al, 8
sar r10, 6
mov rcx, 0x342c566f
rcr ch, 0xc8
lea r11, [r13*8]
inc al
mov rcx, 0x77014cc3
add r11, r13
movzx rcx, r10w
mov al, byte [r8 + rdi]
movsxd rcx, r12d
movzx cx, r11b
movsx ecx, sp
inc r9d
bsr cx, si
mov rcx, qword [r15 + r10*8 + 0xba940]
clc
add rcx, r8
jmp 0x1404e02a1
inc r8
stc
cmp r11d, r12d
mov byte [rcx + r11*8 + 0x3e], al
ror al, 0x44
movsxd rax, r9d
cmp rax, rdx
jmp 0x1404e02bb
jl 0x1404e027a
xor r11d, r11d
movzx ecx, cx
bts ecx, edx
add ebx, edx
shl cx, 0x6e
mov dword [rbp - 0x65], ebx
cmp byte [rbp - 0x71], r11b
setne ch
movzx cx, bl
mov ecx, dword [rsp + 0x40]
jmp 0x1404e02e7
jmp 0x1404e0369
mov al, byte [rdi]
lea r8, [0x140000000]
setl ch
mov rcx, qword [r8 + r12*8 + 0xba940]
jmp 0x1404e0305
inc ebx
test r8b, sil
mov dword [rbp - 0x65], ebx
cmc
jmp 0x1404e0313
mov byte [rcx + r14*8 + 0x3e], al
mov rax, qword [r8 + r12*8 + 0xba940]
or byte [rax + r14*8 + 0x3d], 4
stc
cmp byte [rbp - 0x71], dl
jmp 0x1404e032f
jmp 0x1404e02de
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x69], eax
movsx cx, dh
btc ecx, 0x7f
setne cl
mov ecx, dword [rsp + 0x40]
cmp r14w, sp
cmp byte [rbp - 0x71], 0
jmp 0x1404e0369
mov ecx, dword [rsp + 0x40]
test bl, r12b
cmp byte [rbp - 0x71], r11b
jmp 0x1404e0369
je 0x1404e0385
mov rax, qword [rsp + 0x50]
and dword [rax + 0x3a8], 0xfffffffd
movzx rax, di
movzx eax, r14w
rcl ah, cl
mov rax, qword [rbp - 9]
movsd xmm0, qword [rbp - 0x69]
stc
test r14b, r15b
clc
movsd qword [rax], xmm0
clc
test dil, 0x49
mov dword [rax + 8], ecx
ror ecx, 0x5f
mov rcx, qword [rbp + 0x17]
cmp r13w, bx
xor rcx, rsp
jmp 0x1404e03b2
call fcn.1404a3da6
mov rbx, qword [rsp + 0x140]
jmp 0x1404e03c4
add rsp, 0x100
mov r15b, r15b
not r14b
pop r15
pop r14
mov r13, rax
setb r13b
pop r13
pop r12
pop rdi
pop rsi
bswap bp
movsx ebp, r8w
pop rbp
ret
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x69], eax
clc
mov ecx, dword [rsp + 0x40]
cmp bpl, 0xea
cmp r11b, sil
jmp 0x1404e0405
cmp byte [rbp - 0x71], bl
jmp 0x1404e040d
jmp 0x1404e0369