Function at 0x1404dc723
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
cbw
movsx rax, di
setb ah
mov qword [rsp + 0x18], rbp
push rsi
movzx ax, ah
movsx rax, r10w
cdqe
push rdi
mov al, r15b
push r12
cbw
mov ax, r13w
movzx eax, r8w
push r14
push r15
mov eax, 0x1470
call fcn.140448aad
sub rsp, rax
mov eax, 0x66a9530d
sub r15w, ax
rcl r14w, cl
mov rax, qword [0x1400b7288]
movsxd r10, ebp
xor rax, rsp
movsx bx, bh
sub bl, bh
not r10w
mov qword [rsp + 0x1460], rax
movsxd r10, edx
movzx ebx, si
ror dl, cl
mov rbx, rcx
bswap di
sub rcx, 0x60e864b5
bt eax, 0x1c
mov rax, r10
mov r14d, r9d
rcl r12, 0x41
test r14b, 0xc2
sar rax, 6
movsx rcx, di
lea rcx, [0x1400ba940]
test bx, 0x587d
adc r15b, 0xd2
and r10d, 0x3f
rcl dil, cl
lea r14, [r14 + r8]
ror di, 0x13
mov r15, r8
mov rdi, r8
rcl dh, 0x15
mov rax, qword [rcx + rax*8]
rcr dx, cl
rcr dx, 0xff
lea rdx, [r10 + r10*8]
mov r12, qword [rax + rdx*8 + 0x28]
cmp r11b, sil
xor eax, eax
test cl, r8b
cmc
test edx, 0x438b1275
mov qword [rbx], rax
test r15b, r9b
clc
cmp r8, r14
jmp 0x1404dc817
mov dword [rbx + 8], eax
jmp 0x1404dc81f
jae 0x1404dca08
lea rax, [rsp + 0x50]
clc
jmp 0x1404dc830
cmp rdi, r14
jmp 0x1404dc838
jae 0x1404dc8ac
movzx ecx, word [rdi]
cmp r13b, 0xe4
cmp r11b, dl
add rdi, 2
cmp ch, 0x79
stc
cmp cx, 0xa
jmp 0x1404dc859
jne 0x1404dc87a
mov edx, 0xd
cmp cx, ax
mov word [rax], dx
jmp 0x1404dc870
add rax, 2
jmp 0x1404dc87a
mov word [rax], cx
and ch, 0x17
sub cl, r8b
ror cx, 0xbe
add rax, 2
lea rcx, [rsp + 0x6f8]
cmp r15b, r12b
stc
cmp rdi, 0x3048496b
cmp rax, rcx
jmp 0x1404dc8a6
jb 0x1404dc830
and qword [rsp + 0x38], 0
adc r8w, bp
bt r8d, r13d
lea rcx, [rsp + 0x50]
mov r8d, 0x431a0322
bswap r9w
movzx r8, r9w
and qword [rsp + 0x30], 0
shr r9, cl
bt r9w, cx
rcr r8, cl
lea r8, [rsp + 0x50]
movzx r9, r13w
sub rax, rcx
mov dword [rsp + 0x28], 0xd55
cmc
or cx, r11w
lea rcx, [rsp + 0x700]
rcl r9d, 0x63
or r9b, r11b
sar rax, 1
ror r9b, 0xe8
bswap r9w
test r11b, sil
mov qword [rsp + 0x20], rcx
mov r9d, eax
adc cl, r10b
bsr cx, cx
mov ecx, 0xfde9
cmp dx, r12w
test r11b, r11b
sub edx, edx
jmp 0x1404dc936
call fcn.1404c9779
mov ebp, eax
cmp r15b, cl
test eax, eax
jmp 0x1404dc947
je 0x1404dc9fb
sub esi, esi
stc
test eax, eax
jmp 0x1404dc957
je 0x1404dc9d3
and qword [rsp + 0x20], 0
sar r9w, 0x70
shr cl, 0xb1
btr r9d, eax
lea rdx, [rsp + 0x700]
and r8b, 0xd6
bsf cx, si
mov ecx, esi
shl r9b, cl
shr r9w, cl
lea r9, [rsp + 0x40]
and r8b, 0xfb
mov r8d, ebp
test r11w, r14w
cmp r12b, 0x38
lea rdx, [rdx + rcx]
bswap ecx
xchg cl, cl
mov rcx, r12
sub r8d, esi
jmp 0x1404dc9af
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jmp 0x1404dc9bc
je 0x1404dc9fb
add esi, dword [rsp + 0x40]
clc
test r9w, bp
cmp esi, ebp
jb 0x1404dc95d
mov eax, edi
cmc
cmp r14b, 0x64
test r13w, 0x5a56
sub eax, r15d
test r14b, dil
cmp sp, r12w
mov dword [rbx + 4], eax
cmc
cmp rdi, r14
jmp 0x1404dc9f6
jmp 0x1404dc81f
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbx], eax
not ax
sar ch, cl
mov rax, rbx
mov rcx, qword [rsp + 0x1460]
test bl, spl
clc
xor rcx, rsp
jmp 0x1404dca1f
call fcn.14049fbde
lea r11, [rsp + 0x1470]
mov rbx, qword [r11 + 0x30]
movzx edi, r15w
movsx r12, bx
mov rbp, qword [r11 + 0x40]
movzx r15, r8w
mov rsp, r11
mov dil, 0xe9
movzx r15d, r9w
pop r15
setno r14b
pop r14
movsx rsi, r10w
mov si, 0x3524
movsx di, bl
pop r12
movsx si, r14b
pop rdi
pop rsi
jmp 0x1404dca6c
ret