Function at 0x1404e05b5
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
bsf ax, r15w
push rbp
sub bpl, 0x69
push rsi
push rdi
jmp 0x1404e05df
push r12
btc r12d, 3
sbb r12b, 0x4d
cmc
push r13
push r14
neg ah
movsxd r12, edx
push r15
xadd r12w, r14w
or r14d, 0xc6b58f3
lea rbp, [rsp - 0x27]
inc al
sub rsp, 0x100
rcr r13, 0x62
mov rax, qword [0x1400b7288]
btc r12w, 0xb6
rol sil, cl
movsx rsi, sp
xor rax, rsp
mov qword [rbp + 0x17], rax
movsxd rsi, edx
mov r15, r8
mov rax, rsi
xchg r12b, r12b
mov qword [rbp - 9], rcx
movzx r12w, bpl
cmp r13b, 0xf6
not r12b
mov qword [rbp - 0x11], rax
clc
cmc
test dl, 0xa5
lea rcx, [0x140000000]
rol r12w, cl
and eax, 0x3f
btc r13w, sp
sbb r12b, 0x82
mov r13d, r9d
lea r13, [r13 + r8]
dec r14b
cmovnp r14w, r12w
mov qword [rbp - 0x21], r8
inc r14
test r15w, 0x2dea
mov r12, rsi
rcr r14w, 0x20
mov qword [rbp - 0x51], r13
sar r12, 6
movsx r14, di
cmovbe r14w, r15w
mov r14b, 0xb7
lea r14, [rax + rax*8]
mov rax, qword [rcx + r12*8 + 0xba940]
jmp 0x1404e06b5
mov rax, qword [rax + r14*8 + 0x28]
mov qword [rbp - 0x49], rax
jmp 0x1404e06c3
call qword [sym.imp.KERNEL32.dll_GetConsoleOutputCP]
sub edx, edx
lea rcx, [rsp + 0x50]
jmp 0x1404e06d5
mov dword [rbp - 0x59], eax
call fcn.1404a91a2
mov rcx, qword [rsp + 0x58]
xor r11d, r11d
mov dword [rbp - 0x69], r11d
shr bl, 0xb3
mov ebx, r11d
adc dh, ch
bswap dx
mov dword [rbp - 0x65], ebx
mov dl, 0x8b
bt di, 0x22
mov dil, spl
mov rdi, r15
shl dx, 0xfd
mov edx, dword [rcx + 0xc]
mov cl, dl
mov ecx, r11d
clc
mov dword [rsp + 0x40], ecx
jmp 0x1404e071a
mov dword [rbp - 0x55], edx
test r13d, 0x285251b8
cmp r15, r13
jmp 0x1404e072c
jae 0x1404e0f1a
mov rax, rsi
test r13b, 0xb2
xor cl, 0x99
cmc
mov rsi, r15
movzx r15w, r15b
sar rax, 6
mov qword [rbp - 0x19], rax
shrd r15w, r9w, 0xaf
mov cl, byte [rdi]
movsxd r15, esi
mov r15d, 1
test sp, cx
test bh, 0x65
mov byte [rsp + 0x44], cl
mov dword [rsp + 0x48], r11d
jmp 0x1404e0772
cmp edx, 0xfde9
jmp 0x1404e077d
jne 0x1404e0a8b
lea r15, [0x140000000]
add rdx, 0x430f727a
stc
mov edx, r11d
shr sil, cl
shl esi, cl
mov r9, qword [r15 + rax*8 + 0xba940]
mov rsi, r11
shr rax, 0x88
sar al, cl
bt eax, r10d
lea rax, [r9 + r14*8]
cmp byte [rax + rsi + 0x3e], r11b
jmp 0x1404e07bd
je 0x1404e07df
inc edx
jmp 0x1404e07ca
inc rsi
cmp rbx, r15
jmp 0x1404e07d5
cmp rsi, 5
jl 0x1404e07b3
test rsi, rsi
jmp 0x1404e07e7
jle 0x1404e09c7
mov rax, qword [r15 + r12*8 + 0xba940]
movsx r8w, r8b
bt r8, 0xf3
sar r13, cl
mov r8, qword [rbp - 0x51]
sub r8, rdi
movsx r10w, dl
sete r10b
movzx ecx, byte [rax + r14*8 + 0x3e]
xchg r13w, r10w
movsx r15d, byte [rcx + r15 + 0xb7d00]
mov r10d, 0x7605120b
movzx r10w, r13b
inc r15d
shr r10b, cl
mov r13d, r15d
btc r10, rsp
xor r10w, sp
sub r13d, edx
xor r10b, cl
cmc
adc r10b, 0xef
movsxd r10, r13d
cmc
cmp r10, r8
jg 0x1404e0d44
lea rax, [rbp - 1]
btr r8, 0x26
shl dx, cl
movzx dx, r11b
mov rdx, r11
rcl r8b, 6
sub r9, rax
lea r8, [r9 + r14*8]
lea rcx, [rbp - 1]
add rcx, rdx
inc rdx
mov al, byte [rcx + r8 + 0x3e]
cmp dh, 0x18
mov byte [rcx], al
test r9d, r8d
cmp rdx, rsi
jl 0x1404e0878
test r13d, r13d
jmp 0x1404e08a0
jle 0x1404e08d6
lea rcx, [rbp - 1]
shl r8, cl
bsf rdx, rbp
bts r8w, r9w
mov r8, r10
xor dh, 0xf4
add rcx, rsi
movsxd rdx, r8d
mov rdx, rdi
jmp 0x1404e08ca
call fcn.1404a81fb
xor r11d, r11d
rol cx, 0x20
mov rdx, r11
bt r8w, r9w
btr rcx, 0x17
lea r8, [0x140000000]
mov rcx, qword [r8 + r12*8 + 0xba940]
test r10b, 0x89
jmp 0x1404e08fb
add rcx, rdx
jmp 0x1404e0903
inc rdx
jmp 0x1404e090b
mov byte [rcx + r14*8 + 0x3e], r11b
stc
cmp rdx, rsi
jmp 0x1404e0919
jl 0x1404e08ea
lea rax, [rbp - 1]
movzx dx, sil
xchg ch, ch
cmp bpl, 0xa6
mov qword [rbp - 0x41], r11
neg dl
cmovno rcx, r8
mov qword [rbp - 0x39], rax
sub r9d, ebp
shrd rax, r14, 0x10
lahf
lea r9, [rbp - 0x41]
cdq
cmovae ax, r14w
mov eax, r11d
setbe al
lea rdx, [rbp - 0x39]
cmp r15d, 4
jmp 0x1404e0962
lea rcx, [rsp + 0x48]
sete al
movsx r8, bx
inc eax
movsxd r8, r11d
not r8d
cmovbe r8w, dx
mov r8d, eax
mov r15, rdx
mov r15d, eax
jmp 0x1404e0989
call fcn.1404e60d9
cmp rax, 0xffffffffffffffff
jmp 0x1404e0997
je 0x1404e0b49
lea eax, [r13 - 1]
jmp 0x1404e09ae
mov r13, qword [rbp - 0x51]
movsx si, r9b
movsxd rsi, eax
add rsi, rdi
jmp 0x1404e09c2
jmp 0x1404e0b8d
movzx eax, byte [rdi]
movsx cx, dh
sub sil, bpl
mov rdx, r13
or sil, r12b
movzx esi, dx
sub rdx, rdi
sar rsi, cl
rcr si, 0xf5
sbb si, sp
movsx rsi, byte [rax + r15 + 0xb7d00]
bt ax, bx
lea ecx, [rsi + 1]
shr ah, cl
movsxd rax, ecx
cmp al, r9b
jmp 0x1404e0a05
cmp rax, rdx
jg 0x1404e0dc3
cmp ecx, 4
jmp 0x1404e0a18
mov qword [rbp - 0x31], r11
mov eax, r11d
bswap cx
mov qword [rbp - 0x29], rdi
cwd
cdq
sete al
movsx r8d, cx
inc cl
lea r9, [rbp - 0x31]
movzx rbx, sp
inc dh
movsx r8, r12w
inc eax
movsx dx, dh
movsx rcx, r14w
cwd
lea rdx, [rbp - 0x29]
mov r8d, eax
xchg cl, bl
setle bh
lea rcx, [rsp + 0x48]
movzx bx, r11b
mov ebx, eax
call fcn.1404e60d9
cmp rax, 0xffffffffffffffff
jmp 0x1404e0a72
je 0x1404e0b49
add rsi, rdi
movsxd r15, ecx
mov r15d, ebx
jmp 0x1404e0a86
jmp 0x1404e0b8d
lea rax, [0x140000000]
mov rdx, qword [rax + r12*8 + 0xba940]
cmc
mov cl, byte [rdx + r14*8 + 0x3d]
stc
test cl, 4
je 0x1404e0ae1
mov al, byte [rdx + r14*8 + 0x3e]
jmp 0x1404e0ab4
and cl, 0xfb
jmp 0x1404e0abc
mov byte [rbp + 7], al
mov al, byte [rdi]
jmp 0x1404e0ac6
mov byte [rdx + r14*8 + 0x3d], cl
lea rdx, [rbp + 7]
jmp 0x1404e0ad4
mov byte [rbp + 8], al
jmp 0x1404e0adc
jmp 0x1404e0b23
call fcn.1404af882
movzx ecx, byte [rdi]
stc
cmp r12b, 0xb
sub edx, edx
clc
test r15d, ecx
cmp r11b, 2
cmp word [rax + rcx*2], dx
jmp 0x1404e0b01
jge 0x1404e0b57
inc rsi
cmp rsi, r13
jae 0x1404e0e8f
mov rdx, rdi
cmovge r8w, si
bswap rcx
movsx r8w, al
mov r8d, 2
movzx ecx, cx
lea rcx, [rsp + 0x48]
jmp 0x1404e0b36
call fcn.14010dd64
cmp eax, 0xffffffff
jmp 0x1404e0b43
jne 0x1404e0b8d
cmp byte [rbp - 0x71], 0
jmp 0x1404e0b52
jmp 0x1404e0e86
mov r8, r15
movzx rdx, bx
movsx dx, r8b
mov cl, r10b
lea rcx, [rsp + 0x48]
movsx rdx, r11w
bswap edx
cdq
mov rdx, rdi
jmp 0x1404e0b7a
call fcn.14010dd64
cmp eax, 0xffffffff
jmp 0x1404e0b87
je 0x1404e0f00
mov ecx, dword [rbp - 0x59]
add al, r15b
shl di, 8
lea rax, [rbp + 0xf]
sub ebx, ebx
xchg r9w, r8w
lea r8, [rsp + 0x48]
mov di, bp
dec di
mov qword [rsp + 0x38], rbx
bt di, 0x77
cmove edi, edx
lea rdi, [rsi + 1]
xchg r9b, r9b
shl r9b, 0x73
mov qword [rsp + 0x30], rbx
mov r9d, r15d
mov dword [rsp + 0x28], 5
cmp r12b, r9b
sub edx, edx
jmp 0x1404e0bde
mov qword [rsp + 0x20], rax
jmp 0x1404e0be8
call fcn.1404ce18c
mov esi, eax
jmp 0x1404e0bf5
test eax, eax
jmp 0x1404e0bfc
je 0x1404e0fd2
mov rcx, qword [rbp - 0x49]
lea r9, [rsp + 0x4c]
cmovs r8, r10
setns r8b
mov r8d, eax
movsxd rdx, r12d
movzx rdx, sp
mov qword [rsp + 0x20], rbx
cqo
lea rdx, [rbp + 0xf]
jmp 0x1404e0c2d
call qword [sym.imp.KERNEL32.dll_WriteFile]
xor r11d, r11d
test eax, eax
je 0x1404e0fc3
mov r15d, dword [rsp + 0x40]
add bx, r14w
xor bh, 2
cmp di, 0x7120
mov ebx, edi
sub ebx, dword [rbp - 0x21]
test dil, r9b
add ebx, r15d
test ebp, 0x5a9c0c13
mov dword [rbp - 0x65], ebx
cmp bl, r10b
cmp dword [rsp + 0x4c], esi
jb 0x1404e0e77
cmp byte [rsp + 0x44], 0xa
jmp 0x1404e0c7a
jne 0x1404e0d18
mov rcx, qword [rbp - 0x49]
movsx r9w, al
lea eax, [r11 + 0xd]
movsx r9, sp
lea r9, [rsp + 0x4c]
not dx
movzx dx, r11b
movsxd r8, ecx
mov word [rsp + 0x44], ax
movsx rdx, r14w
movsx dx, sil
lea r8d, [r11 + 1]
mov edx, 0x262647ee
movzx edx, r10w
cmovle rdx, rdx
mov qword [rsp + 0x20], r11
cmovnp edx, eax
bswap dx
lea rdx, [rsp + 0x44]
call qword [sym.imp.KERNEL32.dll_WriteFile]
sub r11d, r11d
test eax, eax
jmp 0x1404e0ce0
je 0x1404e0ef5
cmp dword [rsp + 0x4c], 1
jmp 0x1404e0cf0
jb 0x1404e0e77
inc r15d
movzx esi, r13w
mov esi, r13d
inc ebx
cmp bp, 0x3e5a
mov dword [rsp + 0x40], r15d
mov dword [rbp - 0x65], ebx
rol sil, cl
xor si, sp
add esi, r11d
mov rsi, rdi
clc
cmp eax, r15d
cmp ecx, 0x610044dc
cmp rdi, r13
jae 0x1404e0f12
mov rax, qword [rbp - 0x19]
mov dx, dx
mov dl, 0x97
mov edx, dword [rbp - 0x55]
jmp 0x1404e0d3f
jmp 0x1404e0753
mov edx, r11d
test r8, r8
jmp 0x1404e0d4f
jle 0x1404e0db6
sub rdi, rsi
dec al
mov cl, 0xba
lea rbx, [0x140000000]
movsx ecx, r8w
inc ch
mov al, byte [rdi + rsi]
not ecx
inc edx
sar cx, 0x86
inc ch
cmovo cx, ax
mov rcx, qword [rbx + r12*8 + 0xba940]
cmp rax, 0x19b2d76
add rcx, rsi
inc rsi
jmp 0x1404e0d97
mov byte [rcx + r14*8 + 0x3e], al
not al
xchg ah, ah
adc al, 0xf3
movsxd rax, edx
cmp rax, r8
jmp 0x1404e0dad
jl 0x1404e0d69
mov ebx, dword [rbp - 0x65]
add ebx, r8d
jmp 0x1404e0dbe
jmp 0x1404e0e74
mov r9d, r11d
test dl, r9b
test rdx, rdx
jmp 0x1404e0dd1
jle 0x1404e0e72
mov r13, qword [rbp - 0x11]
rcr cx, 0x3a
mov r8, r11
mov r11, r8
shrd r11w, r13w, 0x83
mov r10, r13
sub r11w, r14w
sbb r11, 0x416575cf
and r13d, 0x3f
seta al
bsf r11, rcx
sar r10, 6
or al, r9b
jmp 0x1404e0e15
lea r11, [r13*8]
sub al, r10b
movsx ecx, r12w
add r11, r13
movzx cx, spl
xchg cx, cx
mov al, byte [r8 + rdi]
movsx rcx, si
inc r9d
btc ecx, edx
mov rcx, qword [r15 + r10*8 + 0xba940]
add rcx, r8
jmp 0x1404e0e4d
inc r8
jmp 0x1404e0e55
mov byte [rcx + r11*8 + 0x3e], al
movsxd rax, r9d
cmp rax, rdx
jmp 0x1404e0e65
jl 0x1404e0e2f
xor r11d, r11d
movsx cx, ch
add ebx, edx
mov dword [rbp - 0x65], ebx
cmp byte [rbp - 0x71], r11b
movsx ecx, r11w
sete ch
cmovne cx, bx
mov ecx, dword [rsp + 0x40]
jmp 0x1404e0f1e
mov al, byte [rdi]
movsx cx, r15b
movsxd r8, r15d
lea r8, [0x140000000]
movsxd rcx, r13d
jmp 0x1404e0ea8
mov rcx, qword [r8 + r12*8 + 0xba940]
jmp 0x1404e0eb5
inc ebx
jmp 0x1404e0ebc
mov dword [rbp - 0x65], ebx
stc
mov byte [rcx + r14*8 + 0x3e], al
sbb al, spl
rcr al, cl
mov rax, qword [r8 + r12*8 + 0xba940]
cmp r13b, 0x79
or byte [rax + r14*8 + 0x3d], 4
jmp 0x1404e0ee8
cmp byte [rbp - 0x71], dl
jmp 0x1404e0ef0
jmp 0x1404e0e86
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x69], eax
neg cl
mov ecx, dword [rsp + 0x40]
cmp byte [rbp - 0x71], 0
jmp 0x1404e0f0d
jmp 0x1404e0f1e
mov ecx, dword [rsp + 0x40]
stc
cmp bl, 0x6c
cmp byte [rbp - 0x71], r11b
je 0x1404e0f3a
mov rax, qword [rsp + 0x50]
and dword [rax + 0x3a8], 0xfffffffd
bsr eax, r14d
sbb ax, 0x473c
cdqe
mov rax, qword [rbp - 9]
test sp, r13w
stc
movsd xmm0, qword [rbp - 0x69]
movsd qword [rax], xmm0
cmp r8b, 0xc7
cmc
jmp 0x1404e0f56
mov dword [rax + 8], ecx
shr ecx, cl
mov rcx, qword [rbp + 0x17]
test sp, sp
cmp r13, rax
xor rcx, rsp
jmp 0x1404e0f6d
call fcn.1404a4670
mov rbx, qword [rsp + 0x140]
shld r13d, r10d, 0xab
cmp ebp, esi
shr bpl, 0xae
add rsp, 0x100
setge r14b
pop r15
pop r14
movzx r13d, r10w
movzx r12w, dil
mov ebp, 0xa7d7405
pop r13
not r12d
pop r12
movsx di, bpl
jmp 0x1404e0fb3
pop rdi
movsx rsi, dx
pop rsi
movzx ebp, sp
pop rbp
jmp 0x1404e0fc2
ret
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x69], eax
add cl, spl
setne cl
mov ecx, dword [rsp + 0x40]
cmp byte [rbp - 0x71], bl
jmp 0x1404e0fde
jmp 0x1404e0f1e