Function at 0x1404d9d8e
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
movsxd rax, esi
mov qword [rsp + 0x18], rbp
movsx eax, r9w
push rsi
jmp 0x1404d9dc2
push rdi
movsx ax, r12b
push r12
push r14
movzx rax, r14w
jmp 0x1404d9dd8
push r15
mov eax, 0x1470
jmp 0x1404d9de4
call fcn.1404460bf
sub rsp, rax
mov rax, qword [0x1400b7288]
clc
xor rax, rsp
and dil, r10b
bt r10, r9
sal dil, 0x5a
mov qword [rsp + 0x1460], rax
btr r12, r15
add ebx, 0x3256e4f
movsxd r10, edx
cdqe
sub bl, r9b
mov rbx, rcx
mov rax, r10
btr rdi, 0xf0
mov cx, r10w
movsx rdi, r10w
mov r14d, r9d
inc r12w
sar rax, 6
movzx edx, bx
lea rcx, [0x1400ba940]
and r10d, 0x3f
bsf di, bp
shrd edi, edx, 0x50
movsx r15d, di
add r14, r8
clc
jmp 0x1404d9e61
mov r15, r8
test bpl, bpl
mov rdi, r8
and r12, 0x314b53d1
add r12b, r13b
bt r12w, 0x50
mov rax, qword [rcx + rax*8]
lea rdx, [r10 + r10*8]
sub r12w, cx
cmc
mov r12d, 0x7b85094f
mov r12, qword [rax + rdx*8 + 0x28]
cmp rax, rsi
cmp r15b, 0x3a
xor eax, eax
test r8w, di
cmp r11w, 0x7d0f
cmc
mov qword [rbx], rax
jmp 0x1404d9eb4
cmp r8, r14
jmp 0x1404d9ebc
mov dword [rbx + 8], eax
jmp 0x1404d9ec4
jae 0x1404da07b
lea rax, [rsp + 0x50]
stc
cmp edx, eax
cmc
cmp rdi, r14
jmp 0x1404d9edb
jae 0x1404d9f37
movzx ecx, word [rdi]
add rdi, 2
stc
cmp cx, 0xa
jmp 0x1404d9ef2
jne 0x1404d9f0b
mov edx, 0xd
test r15b, 0x78
clc
mov word [rax], dx
add rax, 2
clc
cmc
mov word [rax], cx
add rax, 2
bt cx, r11w
sal ecx, 0x81
lea rcx, [rsp + 0x6f8]
cmp r14, 0x6394784d
cmp rax, rcx
jmp 0x1404d9f31
jb 0x1404d9ed3
and qword [rsp + 0x38], 0
bt rcx, r8
lea rcx, [rsp + 0x50]
sbb r8d, r11d
movsxd r8, r11d
xor r9b, 0xcb
and qword [rsp + 0x30], 0
movsx r8d, r12w
ror r8b, cl
lea r8, [rsp + 0x50]
inc r9b
rol r9d, 0x65
sub rax, rcx
shl ch, cl
cmovns cx, r10w
sub r9b, 0xcc
mov dword [rsp + 0x28], 0xd55
sal ch, cl
movsx r9d, r13w
lea rcx, [rsp + 0x700]
movzx r9d, cx
rol r9b, cl
sar rax, 1
sar r9, 0xc
movsx r9, r14w
mov qword [rsp + 0x20], rcx
ror r9w, cl
adc r9b, 0x81
inc rcx
mov r9d, eax
mov ecx, 0xfde9
sub edx, edx
jmp 0x1404d9fbe
call fcn.1404c6bef
mov ebp, eax
stc
test eax, eax
jmp 0x1404d9fcd
je 0x1404da067
xor esi, esi
cmp r14b, r10b
clc
stc
test eax, eax
je 0x1404da04b
and qword [rsp + 0x20], 0
rcl cl, 0xea
stc
lea rdx, [rsp + 0x700]
shl r8w, 0x86
movsx r9d, r9w
mov ecx, esi
bt r8d, r8d
shrd r9d, r11d, 0x3c
lea r9, [rsp + 0x40]
dec r8b
shr r8b, cl
cmp bl, r9b
mov r8d, ebp
lea rdx, [rdx + rcx]
or ch, 0x5d
stc
mov rcx, r12
sub r8d, esi
jmp 0x1404da02c
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x1404da067
add esi, dword [rsp + 0x40]
cmp esi, ebp
jmp 0x1404da045
jb 0x1404d9fe2
mov eax, edi
sub eax, r15d
mov dword [rbx + 4], eax
stc
cmp r14w, 0x5e2d
cmp rdi, r14
jmp 0x1404da062
jmp 0x1404d9ec4
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbx], eax
sal cl, cl
adc eax, 0x1b75564e
movzx ax, r13b
mov rax, rbx
jmp 0x1404da083
mov rcx, qword [rsp + 0x1460]
cmc
stc
xor rcx, rsp
jmp 0x1404da095
call fcn.14049cfde
lea r11, [rsp + 0x1470]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x40]
jmp 0x1404da0b4
mov rsp, r11
movzx r12w, bl
bswap rsi
mov r12b, 0x5b
pop r15
xchg si, r14w
movsx di, spl
pop r14
pop r12
movsx rdi, cx
mov sil, 0xd7
pop rdi
pop rsi
jmp 0x1404da0df
ret