Function at 0x1404e148d
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
xchg ah, al
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r12
setl al
movsxd rax, r14d
movsx eax, r11w
push r14
push r15
movzx rax, si
setns al
cmovle eax, esp
mov eax, 0x1470
jmp 0x1404e14bf
call fcn.14044d4b5
sub rsp, rax
mov rax, qword [0x1400b7288]
bsf r14, r14
xchg dil, r12b
xor rax, rsp
mov qword [rsp + 0x1460], rax
shl bx, cl
clc
movsxd r10, edx
bt r14d, 0x1a
jmp 0x1404e14f1
mov rbx, rcx
mov rax, r10
mov r14d, r9d
sar dil, cl
shld ecx, r8d, 0x8d
sar rax, 6
or rdi, rax
cmc
btr di, 0x19
lea rcx, [0x1400ba940]
movzx r12d, si
and r10d, 0x3f
cmovbe r12w, si
rol r12b, 0xad
lea r14, [r14 + r8]
add r12, 0x189c5107
movzx r12d, dx
mov r15, r8
adc dil, 0xc
bt rdx, 0xe8
sub dil, r14b
mov rdi, r8
cmp r12d, 0x4772168c
mov rax, qword [rcx + rax*8]
movzx dx, ah
sub r12d, 0x3d8a7863
lea rdx, [r10 + r10*8]
sbb r12b, r13b
rcr r12b, 0x8f
ror r12b, cl
mov r12, qword [rax + rdx*8 + 0x28]
sub eax, eax
cmc
mov qword [rbx], rax
cmc
test r8d, ecx
cmp r8, r14
jmp 0x1404e1583
mov dword [rbx + 8], eax
jmp 0x1404e158b
jae 0x1404e1745
lea rax, [rsp + 0x50]
cmp r15d, r10d
clc
cmp rdi, r14
jmp 0x1404e15a2
jae 0x1404e160b
movzx ecx, word [rdi]
cmp r10b, 0x73
add rdi, 2
jmp 0x1404e15bb
cmp cx, 0xa
jne 0x1404e15e2
mov edx, 0xd
cmp sil, r15b
test sil, 0x70
mov word [rax], dx
test r13b, 0xc9
add rax, 2
test r14w, 0x360c
mov word [rax], cx
sar ch, cl
bswap rcx
add rax, 2
not cl
lea rcx, [rsp + 0x6f8]
stc
cmp r8d, esi
cmc
cmp rax, rcx
jmp 0x1404e1605
jb 0x1404e159a
and qword [rsp + 0x38], 0
add cx, 0x47e6
lea rcx, [rsp + 0x50]
shrd r9d, r12d, 0xee
and qword [rsp + 0x30], 0
dec r9w
and r8w, 0x4aa8
movsx r9, bp
lea r8, [rsp + 0x50]
shr r9b, 0xe9
sub rax, rcx
movsx cx, r10b
mov dword [rsp + 0x28], 0xd55
lea rcx, [rsp + 0x700]
rcl r9b, cl
sar rax, 1
shrd r9d, r13d, 0x40
mov qword [rsp + 0x20], rcx
mov r9d, eax
mov ecx, 0xfde9
cmc
xor edx, edx
jmp 0x1404e1675
call fcn.1404ce18c
mov ebp, eax
test r8b, 3
test eax, eax
jmp 0x1404e1687
je 0x1404e1733
sub esi, esi
test eax, eax
jmp 0x1404e1696
je 0x1404e170c
and qword [rsp + 0x20], 0
sub r8b, 0x28
shr r9, 0xc6
lea rdx, [rsp + 0x700]
add cx, r10w
and cl, sil
adc r8b, r10b
mov ecx, esi
or r9w, r8w
bts r8d, ecx
neg r9w
lea r9, [rsp + 0x40]
rcl r8b, cl
movsxd r8, edx
mov r8d, ebp
lea rdx, [rdx + rcx]
mov cl, 0x2c
mov rcx, r12
test spl, r12b
cmc
sub r8d, esi
jmp 0x1404e16ed
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jmp 0x1404e16fa
je 0x1404e1733
add esi, dword [rsp + 0x40]
cmp esi, ebp
jb 0x1404e169c
mov eax, edi
stc
jmp 0x1404e1714
sub eax, r15d
test spl, dil
test spl, 0x5a
jmp 0x1404e1723
mov dword [rbx + 4], eax
cmp rdi, r14
jmp 0x1404e172e
jmp 0x1404e158b
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbx], eax
rcl cx, cl
add al, r9b
rcl ax, 0x1a
mov rax, rbx
mov cl, r9b
cmp ax, 0x536d
mov rcx, qword [rsp + 0x1460]
stc
cmp r13b, cl
xor rcx, rsp
jmp 0x1404e1763
call fcn.1404a4670
lea r11, [rsp + 0x1470]
mov rbx, qword [r11 + 0x30]
movsx r12w, r8b
movsx r12d, r13w
mov rbp, qword [r11 + 0x40]
mov r15d, 0x61482d05
movsx r14w, al
movzx di, r13b
mov rsp, r11
bswap si
movsx r12, r14w
movzx r14d, di
pop r15
mov r12b, 0xe2
movsx r14d, r8w
movsxd rdi, r8d
pop r14
movsxd r12, ebx
movsx rdi, r14w
mov rdi, rdx
pop r12
pop rdi
jmp 0x1404e17bf
pop rsi
jmp 0x1404e17c5
ret