Function at 0x1404dc17c
Capabilities:
Check for software breakpoints
Encrypt data using speck
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
push rbp
btc ax, 0xaf
sal bpl, cl
adc bpl, r12b
push rsi
push rdi
movzx bp, dil
bt si, r15w
stc
push r12
btc eax, edi
shrd si, dx, 0x2c
movzx rsi, ax
push r13
mov r12b, bl
neg sil
push r14
neg sil
bt r14w, 0x29
add r13b, 0xc9
push r15
mov sil, 0xd3
setle r14b
movsx r15, bp
lea rbp, [rsp - 0x27]
add r15b, 0xc1
movzx r13d, r9w
setge r12b
sub rsp, 0x100
rcr r12, 0x43
sbb sil, spl
xchg si, ax
mov rax, qword [0x1400b7288]
xor rax, rsp
rcl r13b, 0xba
shld r15d, esp, 0xdb
mov qword [rbp + 0x17], rax
add r12w, r14w
ror al, 0xfb
inc r15b
movsxd rsi, edx
mov r12b, 0x8a
rol r12b, 0x2f
mov r15, r8
movsx r14w, r8b
xchg al, r12b
mov rax, rsi
mov qword [rbp - 9], rcx
mov qword [rbp - 0x11], rax
xor cl, r15b
jmp 0x1404dc23b
lea rcx, [0x140000000]
and eax, 0x3f
mov r13d, r9d
sbb r14b, bpl
lea r13, [r13 + r8]
mov qword [rbp - 0x21], r8
adc r12, r13
xchg r14d, r14d
mov r12, rsi
mov qword [rbp - 0x51], r13
btr r14w, r13w
sar r12, 6
movzx r14w, r12b
bswap r14w
lea r14, [rax + rax*8]
movsx ax, r13b
mov rax, qword [rcx + r12*8 + 0xba940]
jmp 0x1404dc289
mov rax, qword [rax + r14*8 + 0x28]
mov qword [rbp - 0x49], rax
jmp 0x1404dc297
call qword [sym.imp.KERNEL32.dll_GetConsoleOutputCP]
xor edx, edx
lea rcx, [rsp + 0x50]
jmp 0x1404dc2a9
mov dword [rbp - 0x59], eax
jmp 0x1404dc2b1
call fcn.1404a5306
mov rcx, qword [rsp + 0x58]
cmp r12, rax
add rdx, rax
xor r11d, r11d
mov dword [rbp - 0x69], r11d
btr ebx, 0xd6
bsr di, r14w
mov ebx, r11d
mov rdi, rdx
mov dword [rbp - 0x65], ebx
mov rdi, r15
movzx dx, r10b
movsx rdx, dx
mov edx, dword [rcx + 0xc]
mov ecx, r11d
test r9w, 0x785c
cmp r12w, 0x60b8
mov dword [rsp + 0x40], ecx
cmp edx, edi
mov dword [rbp - 0x55], edx
cmp r10b, 0x55
test r11w, cx
cmp r15, r13
jae 0x1404dca98
mov rax, rsi
cmovle si, bp
rol si, cl
mov rsi, r15
rol r15w, cl
sar rax, 6
inc r15
adc r15w, 0x1141
mov qword [rbp - 0x19], rax
sub cl, bpl
btc r15w, si
mov cl, byte [rdi]
sbb r15d, r11d
mov r15d, 1
cmc
mov byte [rsp + 0x44], cl
test eax, esi
cmc
mov dword [rsp + 0x48], r11d
cmp edx, 0xfde9
jmp 0x1404dc35f
jne 0x1404dc658
lea r15, [0x140000000]
setl dh
stc
xor sil, r11b
mov edx, r11d
mov r9, qword [r15 + rax*8 + 0xba940]
xor rax, rsi
bts ax, dx
lahf
mov rsi, r11
cmp r15b, 9
clc
movzx rax, ax
lea rax, [r9 + r14*8]
test dil, cl
cmp si, r8w
cmp byte [rax + rsi + 0x3e], r11b
jmp 0x1404dc3a7
je 0x1404dc3ce
inc edx
jmp 0x1404dc3b4
inc rsi
jmp 0x1404dc3bf
cmp rsi, 5
jmp 0x1404dc3c8
jl 0x1404dc39d
test rsi, rsi
jle 0x1404dc599
mov rax, qword [r15 + r12*8 + 0xba940]
and r8, 0x49a64371
adc r8d, r13d
mov r8, qword [rbp - 0x51]
sub r8, rdi
jmp 0x1404dc3f8
movzx ecx, byte [rax + r14*8 + 0x3e]
mov r10d, esp
movsx r15d, byte [rcx + r15 + 0xb7d00]
mov r10, 0x6a67f71
inc r15d
cmp rbp, 0x62aa5da8
movsx r10, dx
cmovo r13, rsi
mov r13d, r15d
test r12b, 0x89
sub r13d, edx
shr r10b, 0x35
btc r10, rcx
shl r10b, cl
movsxd r10, r13d
cmp r10, r8
jg 0x1404dc8ee
lea rax, [rbp - 1]
bsf dx, cx
mov rdx, r11
test rax, 0x27707562
sub r9, rax
lea r8, [r9 + r14*8]
lea rcx, [rbp - 1]
add rcx, rdx
inc rdx
cmp r11b, r8b
mov al, byte [rcx + r8 + 0x3e]
test rsi, 0x15600788
clc
mov byte [rcx], al
test r11, r9
cmp rdx, rsi
jmp 0x1404dc483
jl 0x1404dc45c
test r13d, r13d
jle 0x1404dc4bd
lea rcx, [rbp - 1]
not edx
cmp ch, 0x31
mov r8, r10
mov dl, r9b
add rcx, rsi
mov dh, 0x1f
movsx edx, r8w
cwd
mov rdx, rdi
jmp 0x1404dc4b5
call fcn.1404a4307
sub r11d, r11d
mov rdx, r11
lea r8, [0x140000000]
cmove ecx, ebx
cmc
sal ch, cl
mov rcx, qword [r8 + r12*8 + 0xba940]
stc
add rcx, rdx
jmp 0x1404dc4de
inc rdx
mov byte [rcx + r14*8 + 0x3e], r11b
stc
cmp ebx, ebx
cmp rdx, rsi
jl 0x1404dc4cd
lea rax, [rbp - 1]
sal r8d, 0x4d
and r9b, 0x59
mov qword [rbp - 0x41], r11
bt dx, ax
neg r8
mov qword [rbp - 0x39], rax
cdq
lea r9, [rbp - 0x41]
sal cx, cl
test r12b, 0xc
mov eax, r11d
lea rdx, [rbp - 0x39]
cmp r15d, 4
lea rcx, [rsp + 0x48]
sete al
dec r8b
inc r8w
movzx r15d, r10w
inc eax
movsx r8d, dx
movzx r15d, bx
movzx r8, r15w
mov r8d, eax
jmp 0x1404dc550
mov r15d, eax
jmp 0x1404dc558
call fcn.1404e1d1a
cmp rax, 0xffffffffffffffff
je 0x1404dc71a
lea eax, [r13 - 1]
rol sil, cl
bswap r13w
clc
mov r13, qword [rbp - 0x51]
ror sil, cl
adc si, ax
sbb esi, r15d
movsxd rsi, eax
cmp r11b, 0xcc
jmp 0x1404dc58c
add rsi, rdi
jmp 0x1404dc594
jmp 0x1404dc75c
movzx eax, byte [rdi]
mov rdx, r13
sub rdx, rdi
movsx rcx, r9w
sub ch, bh
xadd cl, sil
movsx rsi, byte [rax + r15 + 0xb7d00]
rol ecx, cl
cmc
rol ch, 0x4d
lea ecx, [rsi + 1]
add al, 3
not rax
movsxd rax, ecx
cmp rax, rdx
jmp 0x1404dc5ce
jg 0x1404dc972
cmp ecx, 4
mov r9b, 0xf4
mov qword [rbp - 0x31], r11
mov eax, r11d
cmovp r8, r9
movsx r9w, spl
mov qword [rbp - 0x29], rdi
xchg r9b, r8b
sete al
lea r9, [rbp - 0x31]
xchg dl, dh
cqo
inc eax
cdq
cwd
bswap ebx
lea rdx, [rbp - 0x29]
mov r8d, eax
mov ecx, 0x11243c44
movsx bx, r15b
lea rcx, [rsp + 0x48]
cmovp bx, r10w
movsx rbx, r12w
not ebx
mov ebx, eax
jmp 0x1404dc62b
call fcn.1404e1d1a
cmp rax, 0xffffffffffffffff
jmp 0x1404dc639
je 0x1404dc71a
add rsi, rdi
xchg r15b, r15b
movsxd r15, r12d
not r15d
mov r15d, ebx
jmp 0x1404dc653
jmp 0x1404dc75c
lea rax, [0x140000000]
mov rdx, qword [rax + r12*8 + 0xba940]
shr cl, 0x9a
setb cl
mov cl, byte [rdx + r14*8 + 0x3d]
stc
test cl, 4
jmp 0x1404dc67b
je 0x1404dc6ba
mov al, byte [rdx + r14*8 + 0x3e]
test r9b, bpl
and cl, 0xfb
jmp 0x1404dc691
mov byte [rbp + 7], al
mov al, r11b
mov al, byte [rdi]
jmp 0x1404dc69e
mov byte [rdx + r14*8 + 0x3d], cl
cqo
movsx edx, r12w
lea rdx, [rbp + 7]
jmp 0x1404dc6b2
mov byte [rbp + 8], al
jmp 0x1404dc6ee
call fcn.1404abae2
movzx ecx, byte [rdi]
stc
xor edx, edx
cmp word [rax + rcx*2], dx
jmp 0x1404dc6ce
jge 0x1404dc728
inc rsi
jmp 0x1404dc6dd
cmp rsi, r13
jmp 0x1404dc6e5
jae 0x1404dca2c
mov rdx, rdi
mov r8d, 2
movsx ecx, r13w
movzx ecx, ax
xchg ch, ch
lea rcx, [rsp + 0x48]
jmp 0x1404dc707
call fcn.14026e477
cmp eax, 0xffffffff
jmp 0x1404dc714
jne 0x1404dc75c
cmp byte [rbp - 0x71], 0
jmp 0x1404dc723
jmp 0x1404dca1e
mov r8, r15
cqo
movsx ecx, r13w
mov rcx, r15
lea rcx, [rsp + 0x48]
bswap edx
movzx edx, bp
movsxd rdx, ebx
mov rdx, rdi
jmp 0x1404dc749
call fcn.14026e477
cmp eax, 0xffffffff
jmp 0x1404dc756
je 0x1404dca79
mov ecx, dword [rbp - 0x59]
add eax, 0x315f6e5c
lea rax, [rbp + 0xf]
xor ebx, ebx
rcl r8b, cl
and di, r15w
lea r8, [rsp + 0x48]
movsx r9d, bx
xadd edi, r9d
mov qword [rsp + 0x38], rbx
sub r9, r12
rcr r9, 0x23
lea rdi, [rsi + 1]
sal r9b, 0xaa
mov qword [rsp + 0x30], rbx
cmp r9w, 0x4f3b
mov r9d, r15d
mov dword [rsp + 0x28], 5
sub edx, edx
jmp 0x1404dc7af
mov qword [rsp + 0x20], rax
call fcn.1404c9fc1
mov esi, eax
test eax, eax
je 0x1404dcb36
mov rcx, qword [rbp - 0x49]
mov r8b, dl
lea r9, [rsp + 0x4c]
xchg dl, dh
mov r8d, eax
mov qword [rsp + 0x20], rbx
movzx edx, r13w
bswap edx
movsx dx, r10b
lea rdx, [rbp + 0xf]
jmp 0x1404dc7ed
call qword [sym.imp.KERNEL32.dll_WriteFile]
sub r11d, r11d
test r10b, 0xfe
cmp cx, 0x7e49
test eax, eax
jmp 0x1404dc806
je 0x1404dcb21
mov r15d, dword [rsp + 0x40]
sub bx, 0x4068
mov ebx, edi
test bx, 0x5867
jmp 0x1404dc822
sub ebx, dword [rbp - 0x21]
test r12w, r12w
stc
cmp bh, 0x1a
add ebx, r15d
jmp 0x1404dc835
mov dword [rbp - 0x65], ebx
cmp dword [rsp + 0x4c], esi
jmp 0x1404dc841
jb 0x1404dca0f
cmp byte [rsp + 0x44], 0xa
jmp 0x1404dc851
jne 0x1404dc8cd
mov rcx, qword [rbp - 0x49]
bswap eax
lea eax, [r11 + 0xd]
lea r9, [rsp + 0x4c]
xchg r8w, dx
mov edx, 0x26713d40
mov word [rsp + 0x44], ax
cdq
lea r8d, [r11 + 1]
mov dl, r8b
movsx dx, r8b
mov qword [rsp + 0x20], r11
seta dl
movsx edx, di
lea rdx, [rsp + 0x44]
call qword [sym.imp.KERNEL32.dll_WriteFile]
xor r11d, r11d
jmp 0x1404dc8a2
test eax, eax
je 0x1404dca69
cmp dword [rsp + 0x4c], 1
jmp 0x1404dc8b4
jb 0x1404dca0f
inc r15d
inc ebx
rol sil, cl
mov dword [rsp + 0x40], r15d
xchg rsi, rsi
mov dword [rbp - 0x65], ebx
mov rsi, rdi
test r9d, r9d
clc
cmp rdi, r13
jae 0x1404dca91
mov rax, qword [rbp - 0x19]
mov edx, dword [rbp - 0x55]
jmp 0x1404dc8e9
jmp 0x1404dc33c
mov edx, r11d
jmp 0x1404dc8f6
test r8, r8
jle 0x1404dc965
sub rdi, rsi
setb cl
mov rbx, 0x2c917dd8
inc bx
lea rbx, [0x140000000]
setnp al
mov al, byte [rdi + rsi]
mov cx, 0x34ac
setae ch
jmp 0x1404dc928
inc edx
sub cx, 0x5d5e
mov rcx, qword [rbx + r12*8 + 0xba940]
clc
test r11b, 0xf7
add rcx, rsi
jmp 0x1404dc944
inc rsi
clc
cmc
mov byte [rcx + r14*8 + 0x3e], al
bsf eax, ebx
inc al
cmova eax, edi
movsxd rax, edx
cmp rax, r8
jl 0x1404dc919
mov ebx, dword [rbp - 0x65]
add ebx, r8d
jmp 0x1404dc96d
jmp 0x1404dca09
mov r9d, r11d
cmp ebp, 0x27b16faf
test rdx, rdx
jmp 0x1404dc983
jle 0x1404dc9fa
mov r13, qword [rbp - 0x11]
ror al, 0xb2
mov r8, r11
mov r10, r13
sub r11d, r14d
stc
and r13d, 0x3f
sar r10, 6
lea r11, [r13*8]
add r11, r13
movsx ecx, sp
mov al, byte [r8 + rdi]
bswap cx
inc r9d
xchg ch, cl
sal cx, cl
movzx rcx, r10w
mov rcx, qword [r15 + r10*8 + 0xba940]
add rcx, r8
jmp 0x1404dc9d3
inc r8
mov byte [rcx + r11*8 + 0x3e], al
sete al
movsxd rax, r9d
cmp rax, rdx
jmp 0x1404dc9e9
jl 0x1404dc9b0
xor r11d, r11d
movsx ecx, di
sar ecx, 0x1e
test al, 0x71
add ebx, edx
btc cx, 0x2b
sbb ecx, 0x1c2969d4
dec cl
mov dword [rbp - 0x65], ebx
mov cx, di
cmp byte [rbp - 0x71], r11b
movsx rcx, dx
mov ch, dh
jmp 0x1404dca1e
mov ecx, dword [rsp + 0x40]
jmp 0x1404dca27
jmp 0x1404dca9c
mov al, byte [rdi]
lea r8, [0x140000000]
movsx rcx, r13w
mov rcx, qword [r8 + r12*8 + 0xba940]
jmp 0x1404dca46
inc ebx
mov dword [rbp - 0x65], ebx
mov byte [rcx + r14*8 + 0x3e], al
rol eax, cl
mov rax, qword [r8 + r12*8 + 0xba940]
clc
or byte [rax + r14*8 + 0x3d], 4
cmp byte [rbp - 0x71], dl
jmp 0x1404dca1e
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x69], eax
add ch, 0x3a
sar cx, 0x2d
mov ecx, dword [rsp + 0x40]
cmc
stc
cmp r13b, 0xff
cmp byte [rbp - 0x71], 0
jmp 0x1404dca8c
jmp 0x1404dca9c
mov ecx, dword [rsp + 0x40]
cmp dl, 0xf1
cmp byte [rbp - 0x71], r11b
je 0x1404dcab1
mov rax, qword [rsp + 0x50]
and dword [rax + 0x3a8], 0xfffffffd
test r9, rcx
mov rax, qword [rbp - 9]
stc
cmp dh, 0xf4
movsd xmm0, qword [rbp - 0x69]
test r10d, edi
cmp r12d, r9d
movsd qword [rax], xmm0
cmc
clc
mov dword [rax + 8], ecx
cmp r12w, 0x3f63
xchg cl, cl
mov rcx, qword [rbp + 0x17]
clc
xor rcx, rsp
jmp 0x1404dcae2
call fcn.1404a0622
mov rbx, qword [rsp + 0x140]
add rsp, 0x100
pop r15
movsx edi, ax
not r13b
pop r14
setb r12b
pop r13
movzx bp, sil
movsxd r12, r15d
pop r12
pop rdi
mov sil, r8b
pop rsi
movzx bp, r12b
pop rbp
jmp 0x1404dcb20
ret
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x69], eax
xchg rcx, rcx
test bpl, 0xa9
bsr cx, r15w
mov ecx, dword [rsp + 0x40]
jmp 0x1404dcb3f
cmp byte [rbp - 0x71], bl
jmp 0x1404dcb47
jmp 0x1404dca9c