Function at 0x1404dfb04
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
cdqe
push rbp
push rsi
or bpl, spl
shl bp, 0xee
stc
push rdi
sar bp, 0x38
push r12
ror r12b, 0x5a
shld bp, r10w, 0xd5
push r13
push r14
rcl r12b, cl
cmp r9d, ebp
push r15
bts esi, r13d
rol r13, 0xd8
lea rbp, [rsp - 0x27]
sub rsp, 0x100
mov rax, qword [0x1400b7288]
shl r13b, 0x20
bsf r12d, edi
xor rax, rsp
test r13w, 0x33c4
jmp 0x1404dfb63
mov qword [rbp + 0x17], rax
cmp cx, si
cbw
inc r14
movsxd rsi, edx
mov r13, 0x7b4f7a70
not r15b
mov r15, r8
cwde
mov rax, rsi
adc r13b, r10b
mov qword [rbp - 9], rcx
mov r13b, 0xa5
neg r13w
mov qword [rbp - 0x11], rax
movsxd r13, r12d
lea rcx, [0x140000000]
shr r14b, cl
ror r13w, 1
movsx r12d, si
and eax, 0x3f
mov r13d, r9d
cmp r14, r8
movsxd r14, eax
add r13, r8
shr r14b, cl
bsr r14, r9
mov qword [rbp - 0x21], r8
mov r12, rsi
stc
mov qword [rbp - 0x51], r13
sar r12, 6
movsx r14d, bx
setnp r14b
lea r14, [rax + rax*8]
cwde
nop
not rax
mov rax, qword [rcx + r12*8 + 0xba940]
mov rax, qword [rax + r14*8 + 0x28]
jmp 0x1404dfbf3
mov qword [rbp - 0x49], rax
jmp 0x1404dfbfc
call qword [sym.imp.KERNEL32.dll_GetConsoleOutputCP]
sub edx, edx
movzx rcx, r15w
not ch
movsx ecx, r12w
lea rcx, [rsp + 0x50]
jmp 0x1404dfc18
mov dword [rbp - 0x59], eax
jmp 0x1404dfc20
call fcn.1404a8900
mov rcx, qword [rsp + 0x58]
or dil, 0x8f
sub r11d, r11d
sbb dil, dil
rcl bx, 0xf8
bsr di, r9w
mov dword [rbp - 0x69], r11d
or rbx, 0x5ea0155e
movsx bx, r11b
mov ebx, r11d
cwd
mov dword [rbp - 0x65], ebx
mov rdi, r15
mov edx, dword [rcx + 0xc]
mov ecx, r11d
test rsi, rax
test r11w, 0x2b4e
clc
mov dword [rsp + 0x40], ecx
clc
mov dword [rbp - 0x55], edx
cmp r15, r13
jmp 0x1404dfc78
jae 0x1404e0451
mov rax, rsi
add sil, 0x24
sar esi, cl
mov rsi, r15
sar rax, 6
btc r15d, 0xff
mov qword [rbp - 0x19], rax
or cl, r9b
rcr cl, 0xd7
ror r15b, 0x20
mov cl, byte [rdi]
mov r15d, 1
mov byte [rsp + 0x44], cl
mov dword [rsp + 0x48], r11d
cmc
stc
cmp edx, 0xfde9
jmp 0x1404dfcbf
jne 0x1404dffd8
lea r15, [0x140000000]
sar sil, cl
and dx, 0x3ffa
mov edx, r11d
sbb r9w, 0x1538
movsx r9w, r13b
movsx r9d, r12w
mov r9, qword [r15 + rax*8 + 0xba940]
btc ax, r9w
ror si, cl
sar al, cl
mov rsi, r11
mov rax, r9
bswap ax
lea rax, [r9 + r14*8]
cmp cl, 0x60
cmp byte [rax + rsi + 0x3e], r11b
je 0x1404dfd2d
inc edx
jmp 0x1404dfd1a
inc rsi
stc
cmp rsi, 5
jmp 0x1404dfd27
jl 0x1404dfd08
test rsi, rsi
jmp 0x1404dfd35
jle 0x1404dff08
mov rax, qword [r15 + r12*8 + 0xba940]
cmp ch, 0x6b
sar r13w, 0x73
mov r8, qword [rbp - 0x51]
rcr cx, 0xbb
clc
xchg cl, cl
sub r8, rdi
xchg r10b, r10b
movzx ecx, byte [rax + r14*8 + 0x3e]
movsx r15d, byte [rcx + r15 + 0xb7d00]
mov r10w, 0x6aa0
inc r15d
and r10w, r12w
mov r13d, r15d
rcr r10d, cl
cmc
sub r13d, edx
movsxd r10, r13d
clc
cmp r10, r8
jmp 0x1404dfd8d
jg 0x1404e0292
lea rax, [rbp - 1]
sbb rcx, 0x37291cf0
mov rdx, r11
jmp 0x1404dfda6
sub r9, rax
sbb cx, 0x3f76
mov cx, 0x74bb
movsx ecx, si
lea r8, [r9 + r14*8]
movsx cx, r10b
cmp cl, 0x30
lea rcx, [rbp - 1]
inc al
add rcx, rdx
mov al, al
inc rdx
dec al
rcl al, 0x87
mov al, byte [rcx + r8 + 0x3e]
mov byte [rcx], al
test ecx, 0x3eb92254
cmp rdx, rsi
jl 0x1404dfdc1
test r13d, r13d
jmp 0x1404dfdf2
jle 0x1404dfe34
lea rcx, [rbp - 1]
sar r8w, cl
dec dl
cmp r11b, r15b
mov r8, r10
btc rdx, 0x73
movzx dx, r9b
cdq
add rcx, rsi
cmovo dx, r15w
movsxd rdx, r10d
mov rdx, rdi
jmp 0x1404dfe26
call fcn.1404a79a8
sub r11d, r11d
adc rdx, rsp
sub cl, r12b
mov rdx, r11
shl r8d, cl
lea r8, [0x140000000]
sub cx, 0x93c
mov rcx, qword [r8 + r12*8 + 0xba940]
clc
stc
add rcx, rdx
jmp 0x1404dfe58
inc rdx
jmp 0x1404dfe60
mov byte [rcx + r14*8 + 0x3e], r11b
cmp r14b, 0x28
test dh, 0x94
cmc
cmp rdx, rsi
jl 0x1404dfe46
lea rax, [rbp - 1]
btr cx, 0xa1
movzx edx, r11w
bts rcx, r9
mov qword [rbp - 0x41], r11
mov qword [rbp - 0x39], rax
lea r9, [rbp - 0x41]
or ax, 0x2d61
dec dx
mov eax, r11d
lea rdx, [rbp - 0x39]
cmp r15d, 4
movsxd r15, ebx
movzx r8d, r10w
lea rcx, [rsp + 0x48]
movzx r15w, r15b
movsx r8d, di
sete al
inc eax
xchg r15w, r8w
movsx r8, r8w
mov r8d, eax
mov r15d, eax
jmp 0x1404dfed2
call fcn.1404e5719
cmp rax, 0xffffffffffffffff
je 0x1404e00ae
lea eax, [r13 - 1]
sbb rsi, r14
mov r13, qword [rbp - 0x51]
movsxd rsi, r9d
rcl si, 0x6b
movsxd rsi, eax
clc
cmp r13b, 0x54
add rsi, rdi
jmp 0x1404dff03
jmp 0x1404e00e5
movzx eax, byte [rdi]
btr dx, ax
neg esi
mov rdx, r13
sub rdx, rdi
bswap cx
xchg sil, cl
neg esi
movsx rsi, byte [rax + r15 + 0xb7d00]
bt ax, 0xdc
cwde
lea ecx, [rsi + 1]
shl ah, cl
cmovp eax, esp
mov al, 0x28
movsxd rax, ecx
stc
cmc
cmp rax, rdx
jmp 0x1404dff45
jg 0x1404e0306
cmp ecx, 4
mov qword [rbp - 0x31], r11
mov r9d, 0x581c4e22
movsx edx, r10w
movzx rbx, r9w
mov eax, r11d
bswap rbx
movzx rdx, si
movzx dx, r8b
mov qword [rbp - 0x29], rdi
movsx cx, bpl
sete al
movzx bx, r15b
movsx r8d, r10w
movsx r8, cx
lea r9, [rbp - 0x31]
movzx bx, ch
movsx r8w, spl
inc eax
lea rdx, [rbp - 0x29]
movzx ecx, r11w
mov r8d, eax
mov ch, 0x4c
lea rcx, [rsp + 0x48]
mov ebx, eax
call fcn.1404e5719
cmp rax, 0xffffffffffffffff
je 0x1404e00ae
add rsi, rdi
cmovae r15w, r10w
movsx r15d, r10w
movzx r15d, di
mov r15d, ebx
jmp 0x1404dffd3
jmp 0x1404e00e5
lea rax, [0x140000000]
adc rdx, r14
cmp r13w, 0x4cfc
mov rdx, qword [rax + r12*8 + 0xba940]
sbb cl, 2
rol cl, cl
mov cl, byte [rdx + r14*8 + 0x3d]
cmc
test cl, 4
jmp 0x1404e0003
je 0x1404e0042
mov al, byte [rdx + r14*8 + 0x3e]
cmc
stc
and cl, 0xfb
jmp 0x1404e0018
mov byte [rbp + 7], al
mov al, byte [rdi]
jmp 0x1404e0022
mov byte [rdx + r14*8 + 0x3d], cl
movzx edx, cx
mov dh, bh
lea rdx, [rbp + 7]
jmp 0x1404e0035
mov byte [rbp + 8], al
jmp 0x1404e003d
jmp 0x1404e007e
call fcn.1404aef18
movzx ecx, byte [rdi]
cmp rsp, rdx
xor edx, edx
jmp 0x1404e0054
cmp word [rax + rcx*2], dx
jge 0x1404e00bc
inc rsi
cmp rsi, r13
jmp 0x1404e0069
jae 0x1404e03ba
mov rdx, rdi
cmovae rcx, r8
movzx rcx, r10w
setne r8b
mov r8d, 2
movzx cx, sil
movsx rcx, r15w
movzx rcx, bx
lea rcx, [rsp + 0x48]
jmp 0x1404e009b
call fcn.1401b0460
cmp eax, 0xffffffff
jmp 0x1404e00a8
jne 0x1404e00e5
cmp byte [rbp - 0x71], 0
jmp 0x1404e00b7
jmp 0x1404e03ac
mov r8, r15
lea rcx, [rsp + 0x48]
bswap edx
cmovo rdx, r12
mov rdx, rdi
jmp 0x1404e00d2
call fcn.1401b0460
cmp eax, 0xffffffff
jmp 0x1404e00df
je 0x1404e0433
mov ecx, dword [rbp - 0x59]
lea rax, [rbp + 0xf]
xchg rdi, r8
movsx r8d, ax
sub r8w, r15w
sub ebx, ebx
sub dil, spl
xor dil, r14b
lea r8, [rsp + 0x48]
xor r9b, 0x98
btc edi, 0xf6
sbb r9b, spl
mov qword [rsp + 0x38], rbx
bsr di, di
movzx r9w, r8b
rol r9w, 0x16
lea rdi, [rsi + 1]
mov qword [rsp + 0x30], rbx
movzx r9w, sil
sal r9w, 0x87
add r9b, 0x81
mov r9d, r15d
mov dword [rsp + 0x28], 5
jmp 0x1404e0149
xor edx, edx
jmp 0x1404e0150
mov qword [rsp + 0x20], rax
call fcn.1404cd7ac
mov esi, eax
stc
test eax, eax
je 0x1404e050d
mov rcx, qword [rbp - 0x49]
xchg r9w, r9w
mov r9b, r9b
lea r9, [rsp + 0x4c]
jmp 0x1404e017f
mov r8d, eax
movsx edx, di
xchg dl, dh
movzx rdx, r10w
mov qword [rsp + 0x20], rbx
movsx rdx, sp
lea rdx, [rbp + 0xf]
jmp 0x1404e019d
call qword [sym.imp.KERNEL32.dll_WriteFile]
xor r11d, r11d
test eax, eax
jmp 0x1404e01ad
je 0x1404e0501
mov r15d, dword [rsp + 0x40]
shr bl, cl
sub bh, 0x86
mov ebx, edi
sub ebx, dword [rbp - 0x21]
test ah, 0x4b
cmp al, dil
add ebx, r15d
mov dword [rbp - 0x65], ebx
stc
cmp dword [rsp + 0x4c], esi
jb 0x1404e03a4
cmp byte [rsp + 0x44], 0xa
jmp 0x1404e01e3
jne 0x1404e026d
mov rcx, qword [rbp - 0x49]
lahf
movsx eax, bx
movsx rax, r11w
lea eax, [r11 + 0xd]
movzx r9, cx
movzx r9w, r9b
cqo
lea r9, [rsp + 0x4c]
mov word [rsp + 0x44], ax
mov edx, ebx
cdq
lea r8d, [r11 + 1]
mov qword [rsp + 0x20], r11
cwd
lea rdx, [rsp + 0x44]
call qword [sym.imp.KERNEL32.dll_WriteFile]
xor r11d, r11d
test eax, eax
jmp 0x1404e0231
je 0x1404e041f
cmp dword [rsp + 0x4c], 1
jmp 0x1404e0241
jb 0x1404e03a4
inc r15d
inc ebx
cmp spl, 0x3e
movsxd rsi, r15d
bswap esi
mov dword [rsp + 0x40], r15d
movzx si, r10b
mov dword [rbp - 0x65], ebx
and sil, 0x5a
rcr rsi, cl
btr esi, 0xc5
mov rsi, rdi
cmp rdi, r13
jae 0x1404e044d
mov rax, qword [rbp - 0x19]
mov dh, 0x88
jmp 0x1404e0285
mov edx, dword [rbp - 0x55]
jmp 0x1404e028d
jmp 0x1404dfca1
mov edx, r11d
clc
test r8, r8
jmp 0x1404e029e
jle 0x1404e02fe
sub rdi, rsi
lea rbx, [0x140000000]
mov al, byte [rdi + rsi]
cmovae cx, ax
not ch
inc edx
cmovg cx, bx
test bpl, 0x83
sub ecx, r15d
mov rcx, qword [rbx + r12*8 + 0xba940]
cmp r11b, 0x5e
add rcx, rsi
jmp 0x1404e02d8
inc rsi
jmp 0x1404e02e0
mov byte [rcx + r14*8 + 0x3e], al
movsxd rax, edx
cmp rax, r8
jmp 0x1404e02f0
jl 0x1404e02ae
mov ebx, dword [rbp - 0x65]
test bp, 0x5802
add ebx, r8d
jmp 0x1404e03a1
mov r9d, r11d
cmp bpl, r13b
cmc
test r10w, cx
test rdx, rdx
jmp 0x1404e0319
jle 0x1404e039f
mov r13, qword [rbp - 0x11]
btc r10w, 0x30
mov r8, r11
bts r11, r11
movzx r10, r15w
neg cl
mov r10, r13
and r13d, 0x3f
rcr cl, cl
sar r10, 6
bsf r11w, sp
lea r11, [r13*8]
inc ch
sal al, 0xd4
setle cl
add r11, r13
mov al, byte [r8 + rdi]
movsx rcx, bx
inc r9d
ror rcx, cl
rol rcx, cl
mov rcx, qword [r15 + r10*8 + 0xba940]
jmp 0x1404e0379
add rcx, r8
inc r8
cmp r8b, 0xbc
mov byte [rcx + r11*8 + 0x3e], al
sub ax, sp
movsxd rax, r9d
cmp rax, rdx
jmp 0x1404e0396
jl 0x1404e035b
xor r11d, r11d
add ebx, edx
mov dword [rbp - 0x65], ebx
cmp byte [rbp - 0x71], r11b
movzx ecx, r12w
mov ecx, dword [rsp + 0x40]
jmp 0x1404e03b5
jmp 0x1404e045a
mov al, byte [rdi]
movsx cx, r11b
inc cx
lea r8, [0x140000000]
movzx cx, bpl
bswap cx
movsxd rcx, ebp
mov rcx, qword [r8 + r12*8 + 0xba940]
jmp 0x1404e03e3
inc ebx
jmp 0x1404e03ea
mov dword [rbp - 0x65], ebx
test r12d, 0xc460671
test r10b, r14b
mov byte [rcx + r14*8 + 0x3e], al
shr ah, 0x90
bt rax, 0x8f
mov rax, qword [r8 + r12*8 + 0xba940]
or byte [rax + r14*8 + 0x3d], 4
cmp byte [rbp - 0x71], dl
jmp 0x1404e041a
jmp 0x1404e03ac
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x69], eax
neg cl
shrd ecx, r9d, 0x93
movzx cx, cl
mov ecx, dword [rsp + 0x40]
cmp sil, bpl
jmp 0x1404e043f
cmp byte [rbp - 0x71], 0
jmp 0x1404e0448
jmp 0x1404e045a
mov ecx, dword [rsp + 0x40]
cmp byte [rbp - 0x71], r11b
jmp 0x1404e045a
je 0x1404e0478
mov rax, qword [rsp + 0x50]
stc
and dword [rax + 0x3a8], 0xfffffffd
xor al, r12b
bt ax, dx
bsf ax, dx
mov rax, qword [rbp - 9]
movsd xmm0, qword [rbp - 0x69]
clc
cmc
movsd qword [rax], xmm0
jmp 0x1404e0490
mov dword [rax + 8], ecx
sub cx, r13w
ror cl, 0x30
mov rcx, qword [rbp + 0x17]
xor rcx, rsp
jmp 0x1404e04a6
call fcn.1404a3d69
mov rbx, qword [rsp + 0x140]
movsx si, sil
sub bpl, 0xc9
add rsp, 0x100
pop r15
movzx r14d, r12w
movzx r13w, r9b
pop r14
bswap di
movsx r12, r10w
movzx di, r8b
pop r13
movzx ebp, r13w
mov bp, 0x2d2d
pop r12
movzx bp, al
pop rdi
movzx ebp, sp
pop rsi
movsx rbp, bp
movsx bp, r14b
pop rbp
jmp 0x1404e0500
ret
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x69], eax
rcl rcx, cl
mov ecx, dword [rsp + 0x40]
cmp r13b, r14b
test r8, 0x71e8418c
jmp 0x1404e0520
cmp byte [rbp - 0x71], bl
jmp 0x1404e0528
jmp 0x1404e045a