Function at 0x1404dc5dc
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
btc rax, r9
push rbp
cmovns rbp, r12
ror ebp, 0x2f
add rbp, r14
push rsi
push rdi
movsx bp, dil
push r12
cbw
mov al, dh
push r13
dec r13b
movzx ebp, ax
not ax
push r14
rcl bp, cl
shl rax, 0xf6
push r15
test r13w, r14w
btr bp, bx
lea rbp, [rsp - 0x27]
sub rsp, 0x100
not r13b
mov r15b, r8b
mov rax, qword [0x1400b7288]
movzx r13d, r8w
xor rax, rsp
and r15d, 0x414b5edb
mov qword [rbp + 0x17], rax
cwde
movsxd rsi, edx
sar r14b, cl
mov r15, r8
sar r13b, 0x60
test r12w, 0x2a1b
rol r14b, cl
mov rax, rsi
mov qword [rbp - 9], rcx
sar ch, cl
mov qword [rbp - 0x11], rax
movsx r13, r13w
cmc
lea rcx, [0x140000000]
sal r12w, cl
sar r12b, 0x58
and eax, 0x3f
xchg r13w, r14w
setnp r13b
mov r13d, r9d
lea r13, [r13 + r8]
xadd r14w, r12w
inc r12b
mov qword [rbp - 0x21], r8
mov r12, rsi
clc
mov qword [rbp - 0x51], r13
sar r12, 6
lea r14, [rax + rax*8]
mov rax, qword [rcx + r12*8 + 0xba940]
jmp 0x1404dc6ba
mov rax, qword [rax + r14*8 + 0x28]
jmp 0x1404dc6c4
mov qword [rbp - 0x49], rax
jmp 0x1404dc6cd
call qword [sym.imp.KERNEL32.dll_GetConsoleOutputCP]
sub edx, edx
not rcx
movzx cx, r15b
lea rcx, [rsp + 0x50]
jmp 0x1404dc6e7
mov dword [rbp - 0x59], eax
jmp 0x1404dc6ef
call fcn.1404a52d5
mov rcx, qword [rsp + 0x58]
not bl
xor r11d, r11d
mov dword [rbp - 0x69], r11d
rcl dil, cl
mov ebx, r11d
shl di, cl
mov dword [rbp - 0x65], ebx
mov rdi, r15
sal dh, cl
cqo
mov edx, dword [rcx + 0xc]
mov ecx, r11d
cmp bpl, r15b
clc
mov dword [rsp + 0x40], ecx
mov dword [rbp - 0x55], edx
cmc
cmp ch, 0x4d
clc
cmp r15, r13
jmp 0x1404dc733
jae 0x1404dcee5
mov rax, rsi
mov rsi, r15
sar rax, 6
mov qword [rbp - 0x19], rax
cmp r15w, r15w
movzx r15w, dil
rcr r15b, cl
mov cl, byte [rdi]
or r15b, r14b
mov r15d, 1
jmp 0x1404dc763
mov byte [rsp + 0x44], cl
test dl, r14b
mov dword [rsp + 0x48], r11d
cmc
clc
cmp edx, 0xfde9
jmp 0x1404dc77c
jne 0x1404dca74
lea r15, [0x140000000]
clc
movsxd rdx, ebx
add esi, ebp
mov edx, r11d
xchg r9b, r9b
and rsi, r12
adc r9w, 0x4ae8
mov r9, qword [r15 + rax*8 + 0xba940]
btc rax, 0xdf
stc
dec rsi
mov rsi, r11
clc
cdqe
test r10, r14
lea rax, [r9 + r14*8]
jmp 0x1404dc7c1
cmp byte [rax + rsi + 0x3e], r11b
je 0x1404dc7e7
inc edx
jmp 0x1404dc7d3
inc rsi
test bpl, 0xc3
test dil, r13b
cmp rsi, 5
jl 0x1404dc7c1
test rsi, rsi
jmp 0x1404dc7ef
jle 0x1404dc9b8
mov rax, qword [r15 + r12*8 + 0xba940]
mov r8, qword [rbp - 0x51]
xchg r13d, ecx
sub r8, rdi
mov r13, 0x18c77dcd
movzx ecx, byte [rax + r14*8 + 0x3e]
dec r13d
movzx r13d, r14w
movsx r15d, byte [rcx + r15 + 0xb7d00]
movsxd r13, edi
movsx r10d, r10w
inc r15d
mov r10b, 0x2e
neg r10b
btr r13w, 0xdb
mov r13d, r15d
sub r13d, edx
add r10d, esi
or r10d, esi
rol r10b, cl
movsxd r10, r13d
cmp r11b, bl
jmp 0x1404dc854
cmp r10, r8
jg 0x1404dcd46
lea rax, [rbp - 1]
bts ecx, ecx
sal rcx, 0x4e
mov rdx, r11
or r8b, 0x50
movsx rcx, cx
sub r9, rax
xor r8b, r15b
shl ch, 0xe8
lea r8, [r9 + r14*8]
and al, 0xc7
lea rcx, [rbp - 1]
add al, spl
adc al, cl
add rcx, rdx
inc rdx
ror al, 0xec
sar al, 0x76
adc al, 0x9d
mov al, byte [rcx + r8 + 0x3e]
mov byte [rcx], al
cmp rdx, rsi
jmp 0x1404dc8a8
jl 0x1404dc882
test r13d, r13d
jmp 0x1404dc8b6
jle 0x1404dc8de
lea rcx, [rbp - 1]
mov r8, r10
add rcx, rsi
mov rdx, rdi
jmp 0x1404dc8ce
call fcn.1404a4302
sub r11d, r11d
or dx, r12w
movsx rdx, r15w
mov rdx, r11
lea r8, [0x140000000]
movsx rcx, r15w
rol cx, 0x80
shr rcx, 0x15
mov rcx, qword [r8 + r12*8 + 0xba940]
test esi, ebx
cmc
add rcx, rdx
inc rdx
test spl, 0x21
mov byte [rcx + r14*8 + 0x3e], r11b
test sp, 0x40cd
clc
cmp rdx, rsi
jmp 0x1404dc91c
jl 0x1404dc8f4
lea rax, [rbp - 1]
mov qword [rbp - 0x41], r11
bsr r9w, r13w
xchg r8, r9
mov qword [rbp - 0x39], rax
bt rax, 0x27
lea r9, [rbp - 0x41]
mov eax, r11d
not ch
bt dx, r15w
lea rdx, [rbp - 0x39]
rcr al, cl
xor al, 0x37
test r8w, bx
cmp r15d, 4
cmovbe r15w, dx
lea rcx, [rsp + 0x48]
sete al
inc r15w
dec r8b
inc eax
movsx r15d, bp
xchg r8b, r15b
mov r8d, eax
mov r15d, eax
jmp 0x1404dc981
call fcn.1404e2047
cmp rax, 0xffffffffffffffff
jmp 0x1404dc98f
je 0x1404dcb4b
lea eax, [r13 - 1]
test r8w, 0x6047
mov r13, qword [rbp - 0x51]
movsxd rsi, eax
cmp r8b, 0x8a
clc
add rsi, rdi
jmp 0x1404dc9b3
jmp 0x1404dcb7d
movzx eax, byte [rdi]
setge sil
mov rdx, r13
inc rsi
or cx, 0x7e15
sub rdx, rdi
rcl rsi, cl
movzx cx, r9b
movsx rsi, byte [rax + r15 + 0xb7d00]
xor cx, 0x4b61
cbw
lea ecx, [rsi + 1]
cmp r14w, 0x22eb
rcr ah, 0xa5
bts ax, sp
movsxd rax, ecx
cmp bh, 0x27
stc
cmp rax, rdx
jmp 0x1404dca04
jg 0x1404dcdb7
cmp ecx, 4
not eax
mov qword [rbp - 0x31], r11
not r8d
mov eax, r11d
bswap cx
mov qword [rbp - 0x29], rdi
not r8b
sete al
inc cl
lea r9, [rbp - 0x31]
dec r8d
movzx ecx, sp
inc eax
mov bx, r10w
bswap r8d
movsxd rbx, r15d
lea rdx, [rbp - 0x29]
mov r8d, eax
movzx rbx, cx
mov bl, 0xfe
bswap rcx
lea rcx, [rsp + 0x48]
mov ebx, eax
call fcn.1404e2047
cmp rax, 0xffffffffffffffff
je 0x1404dcb4b
add rsi, rdi
mov r15d, ebx
jmp 0x1404dca6f
jmp 0x1404dcb7d
lea rax, [0x140000000]
dec cl
test r13w, 0x2fe5
sal dx, 0xd5
mov rdx, qword [rax + r12*8 + 0xba940]
sar cl, 0x60
mov cl, byte [rdx + r14*8 + 0x3d]
test cl, 4
jmp 0x1404dca9f
je 0x1404dcadf
mov al, byte [rdx + r14*8 + 0x3e]
clc
test r12b, bl
and cl, 0xfb
jmp 0x1404dcab6
mov byte [rbp + 7], al
mov al, byte [rdi]
jmp 0x1404dcac0
mov byte [rdx + r14*8 + 0x3d], cl
cdq
not dx
lea rdx, [rbp + 7]
jmp 0x1404dcad2
mov byte [rbp + 8], al
jmp 0x1404dcada
jmp 0x1404dcb1d
call fcn.1404ab9eb
movzx ecx, byte [rdi]
jmp 0x1404dcaed
sub edx, edx
cmp word [rax + rcx*2], dx
jmp 0x1404dcaf8
jge 0x1404dcb59
inc rsi
clc
test sil, 0x85
test r8b, r10b
cmp rsi, r13
jmp 0x1404dcb11
jae 0x1404dce60
mov rdx, rdi
not cx
mov r8d, 2
xchg ecx, ecx
movsx cx, r10b
movzx cx, bh
lea rcx, [rsp + 0x48]
jmp 0x1404dcb38
call fcn.1401c9f66
cmp eax, 0xffffffff
jmp 0x1404dcb45
jne 0x1404dcb7d
cmp byte [rbp - 0x71], 0
jmp 0x1404dcb54
jmp 0x1404dce52
mov r8, r15
lea rcx, [rsp + 0x48]
cdq
mov rdx, rdi
jmp 0x1404dcb6a
call fcn.1401c9f66
cmp eax, 0xffffffff
jmp 0x1404dcb77
je 0x1404dcec6
mov ecx, dword [rbp - 0x59]
lea rax, [rbp + 0xf]
sub ebx, ebx
add dil, r11b
lea r8, [rsp + 0x48]
mov qword [rsp + 0x38], rbx
lea rdi, [rsi + 1]
adc r9w, 0x287f
mov qword [rsp + 0x30], rbx
or r9b, sil
mov r9d, r15d
cmc
jmp 0x1404dcbaf
mov dword [rsp + 0x28], 5
test ax, r15w
sub edx, edx
jmp 0x1404dcbc2
mov qword [rsp + 0x20], rax
jmp 0x1404dcbcc
call fcn.1404ca295
mov esi, eax
clc
cmp edi, esp
test r10, 0x5321278e
test eax, eax
je 0x1404dcf94
mov rcx, qword [rbp - 0x49]
not r9b
movzx rdx, r12w
cqo
lea r9, [rsp + 0x4c]
jmp 0x1404dcbfc
mov r8d, eax
cqo
movsx rdx, r10w
cmovne rdx, r14
mov qword [rsp + 0x20], rbx
movzx dx, r13b
mov rdx, 0x4888717f
movsxd rdx, edi
lea rdx, [rbp + 0xf]
jmp 0x1404dcc26
call qword [sym.imp.KERNEL32.dll_WriteFile]
sub r11d, r11d
cmp r12w, 0xad0
clc
test eax, eax
jmp 0x1404dcc3d
je 0x1404dcf84
mov r15d, dword [rsp + 0x40]
btc rbx, rsi
mov ebx, edi
jmp 0x1404dcc54
sub ebx, dword [rbp - 0x21]
clc
cmp ah, 0x8b
add ebx, r15d
cmp rsp, r13
mov dword [rbp - 0x65], ebx
clc
test r14w, 0x20c2
cmp ecx, 0x21ea565a
cmp dword [rsp + 0x4c], esi
jmp 0x1404dcc7a
jb 0x1404dce46
cmp byte [rsp + 0x44], 0xa
jmp 0x1404dcc8a
jne 0x1404dcd22
mov rcx, qword [rbp - 0x49]
mov al, 0xb6
lea eax, [r11 + 0xd]
mov dl, r14b
mov r9b, 0x34
lea r9, [rsp + 0x4c]
mov word [rsp + 0x44], ax
jmp 0x1404dccb0
lea r8d, [r11 + 1]
movsx rdx, dx
not dx
movsx dx, spl
mov qword [rsp + 0x20], r11
movzx rdx, si
xchg dl, dl
cdq
lea rdx, [rsp + 0x44]
jmp 0x1404dccd6
call qword [sym.imp.KERNEL32.dll_WriteFile]
xor r11d, r11d
stc
cmp r10d, edx
test eax, eax
jmp 0x1404dccea
je 0x1404dcebd
cmp dword [rsp + 0x4c], 1
jmp 0x1404dccfa
jb 0x1404dce46
inc r15d
inc ebx
rcr sil, cl
btr esi, r10d
mov dword [rsp + 0x40], r15d
rol sil, 0x4b
rcl si, 0x10
mov dword [rbp - 0x65], ebx
shl rsi, cl
rcl si, cl
mov rsi, rdi
cmp rdi, r13
jmp 0x1404dcd2d
jae 0x1404dcedc
mov rax, qword [rbp - 0x19]
cqo
mov edx, dword [rbp - 0x55]
jmp 0x1404dcd41
jmp 0x1404dc753
mov edx, r11d
test ch, 0x62
test r8, r8
jmp 0x1404dcd54
jle 0x1404dcdaf
sub rdi, rsi
lea rbx, [0x140000000]
movsx rcx, r13w
mov al, byte [rdi + rsi]
xchg ch, ch
cmovb ecx, r9d
jmp 0x1404dcd76
inc edx
mov rcx, qword [rbx + r12*8 + 0xba940]
stc
cmp si, bx
add rcx, rsi
inc rsi
stc
test r12b, 0x2c
cmc
mov byte [rcx + r14*8 + 0x3e], al
or al, 0xe3
sal rax, cl
movsxd rax, edx
cmp rax, r8
jmp 0x1404dcda5
jl 0x1404dcd68
mov ebx, dword [rbp - 0x65]
clc
add ebx, r8d
jmp 0x1404dce43
mov r9d, r11d
clc
test rdx, rdx
jle 0x1404dce41
mov r13, qword [rbp - 0x11]
setnp r8b
add r10, rsp
mov r8, r11
or r11b, bl
bts ecx, r13d
mov r10, r13
and r13d, 0x3f
ror al, cl
sar r10, 6
stc
sal ch, 0xd6
rcl al, 0xe5
lea r11, [r13*8]
add r11, r13
mov al, byte [r8 + rdi]
jmp 0x1404dce09
inc r9d
mov rcx, qword [r15 + r10*8 + 0xba940]
cmp r15w, sp
stc
add rcx, r8
inc r8
mov byte [rcx + r11*8 + 0x3e], al
movsx eax, di
movsxd rax, r9d
jmp 0x1404dce30
cmp rax, rdx
jmp 0x1404dce38
jl 0x1404dcdf8
sub r11d, r11d
add ebx, edx
mov dword [rbp - 0x65], ebx
cmp byte [rbp - 0x71], r11b
movzx cx, r9b
bswap cx
mov ecx, dword [rsp + 0x40]
jmp 0x1404dce5b
jmp 0x1404dceee
mov al, byte [rdi]
lea r8, [0x140000000]
movsx ecx, di
cmovb cx, ax
bswap ecx
mov rcx, qword [r8 + r12*8 + 0xba940]
jmp 0x1404dce7f
inc ebx
mov dword [rbp - 0x65], ebx
mov byte [rcx + r14*8 + 0x3e], al
add rax, r10
movsxd rax, esi
mov rax, qword [r8 + r12*8 + 0xba940]
test rcx, 0x32431a6c
test r12w, r14w
stc
or byte [rax + r14*8 + 0x3d], 4
cmc
cmp r14w, 0x150e
cmp byte [rbp - 0x71], dl
jmp 0x1404dceb8
jmp 0x1404dce52
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x69], eax
mov ecx, dword [rsp + 0x40]
test r9b, 0xbc
stc
cmp r13b, 0xf0
cmp byte [rbp - 0x71], 0
jmp 0x1404dceee
mov ecx, dword [rsp + 0x40]
cmp bx, r9w
clc
cmp byte [rbp - 0x71], r11b
jmp 0x1404dceee
je 0x1404dcf0d
mov rax, qword [rsp + 0x50]
jmp 0x1404dcf06
and dword [rax + 0x3a8], 0xfffffffd
mov rax, qword [rbp - 9]
jmp 0x1404dcf1a
movsd xmm0, qword [rbp - 0x69]
jmp 0x1404dcf28
movsd qword [rax], xmm0
mov dword [rax + 8], ecx
adc cl, al
cmc
mov rcx, qword [rbp + 0x17]
test al, 0x39
xor rcx, rsp
call fcn.1404a07bb
mov rbx, qword [rsp + 0x140]
add rsp, 0x100
pop r15
not bpl
mov sil, 0x20
mov r13b, bpl
pop r14
xchg r13b, bpl
mov dil, r14b
pop r13
pop r12
pop rdi
movsx rbp, r12w
xchg sil, sil
sets sil
pop rsi
movsx ebp, ax
jmp 0x1404dcf7d
pop rbp
jmp 0x1404dcf83
ret
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x69], eax
adc ecx, 0xeea233d
clc
mov ecx, dword [rsp + 0x40]
cmp byte [rbp - 0x71], bl
jmp 0x1404dceee