Function at 0x1404e1497
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
push rbp
xor ax, 0x75d
movsx rax, bp
adc bp, r13w
push rsi
bsf rsi, r8
shrd eax, eax, 0x44
movsx rsi, dx
push rdi
bswap si
bts si, r10w
btr si, 0x29
push r12
push r13
rcl sil, 1
push r14
add r12w, dx
ror bpl, cl
inc r14d
push r15
cmp ebp, 0x762f04dd
lea rbp, [rsp - 0x27]
sal r13w, cl
cbw
shrd r12, rdi, 0x7f
sub rsp, 0x100
bsr r14d, ecx
movsx r12w, dil
mov rax, qword [0x1400b7288]
bt r13w, r14w
movsx r14d, r9w
test r8b, al
xor rax, rsp
sal si, 0x7d
mov qword [rbp + 0x17], rax
and sil, 0xdc
sub r13b, 6
movsx eax, di
movsxd rsi, edx
shl r15d, cl
mov r15, r8
mov r13b, r8b
rcl r13b, cl
shl r12b, cl
mov rax, rsi
mov qword [rbp - 9], rcx
cmovne r14w, r11w
xor r12b, cl
shrd r13, r14, 0x43
mov qword [rbp - 0x11], rax
ror rcx, cl
movsx ecx, cx
lea rcx, [0x140000000]
bts r12w, dx
test r14d, 0x5d676e75
sbb r12d, 0x60674b25
and eax, 0x3f
movsxd r14, ebx
stc
sar r14b, 0x71
mov r13d, r9d
lea r13, [r13 + r8]
dec r12w
mov qword [rbp - 0x21], r8
jmp 0x1404e1592
mov r12, rsi
mov qword [rbp - 0x51], r13
rol r14w, cl
sar r12, 6
lea r14, [rax + rax*8]
movsx ax, ch
lahf
mov rax, qword [rcx + r12*8 + 0xba940]
jmp 0x1404e15b7
mov rax, qword [rax + r14*8 + 0x28]
jmp 0x1404e15c1
mov qword [rbp - 0x49], rax
jmp 0x1404e15ca
call qword [sym.imp.KERNEL32.dll_GetConsoleOutputCP]
sub edx, edx
movsxd rcx, ecx
jmp 0x1404e15da
lea rcx, [rsp + 0x50]
jmp 0x1404e15e4
mov dword [rbp - 0x59], eax
jmp 0x1404e15ec
call fcn.1404aa23f
mov rcx, qword [rsp + 0x58]
sub r11d, r11d
sub edx, 0x6e82713c
mov dword [rbp - 0x69], r11d
xchg bx, bx
neg edx
mov ebx, r11d
clc
xor rdx, r14
sub dil, 0x4f
mov dword [rbp - 0x65], ebx
mov rdi, r15
xchg dl, dl
btc dx, 0x75
cdq
mov edx, dword [rcx + 0xc]
movzx ecx, r12w
neg cl
shld ecx, esi, 0xd7
mov ecx, r11d
clc
mov dword [rsp + 0x40], ecx
mov dword [rbp - 0x55], edx
stc
cmp r9b, 0xdd
test dl, 0x5e
cmp r15, r13
jmp 0x1404e1649
jae 0x1404e1de1
mov rax, rsi
mov rsi, r15
cmp sil, r9b
test r15, r10
not cl
sar rax, 6
btr r15w, bx
rcr cl, cl
mov qword [rbp - 0x19], rax
rcl cl, cl
and cl, 0xa0
mov cl, byte [rdi]
mov r15d, 1
clc
mov byte [rsp + 0x44], cl
stc
mov dword [rsp + 0x48], r11d
test r10w, 0x39b5
cmp r12d, 0x7782472b
test bl, ah
cmp edx, 0xfde9
jmp 0x1404e169e
jne 0x1404e19b4
lea r15, [0x140000000]
movzx r9, sp
sbb dl, 0x45
rol dx, cl
mov edx, r11d
mov r9, qword [r15 + rax*8 + 0xba940]
ror ah, cl
mov rsi, r11
lea rax, [r9 + r14*8]
test r11d, 0x1fa02b7b
cmp byte [rax + rsi + 0x3e], r11b
jmp 0x1404e16da
je 0x1404e16fa
inc edx
inc rsi
test al, r13b
cmp di, bp
cmp rsi, 5
jmp 0x1404e16f4
jl 0x1404e16d0
test rsi, rsi
jmp 0x1404e1702
jle 0x1404e18e0
mov rax, qword [r15 + r12*8 + 0xba940]
sal r13b, cl
test ax, 0x4e81
mov r8, qword [rbp - 0x51]
movzx ecx, bp
sub r8, rdi
movsx r13d, r9w
mov r10w, 0x1015
movzx ecx, byte [rax + r14*8 + 0x3e]
dec r13b
movsx r13w, r15b
movzx r13d, ax
movsx r15d, byte [rcx + r15 + 0xb7d00]
movsx r10, r8w
inc r15d
bsr r13w, r9w
sub r13b, dl
mov r13d, r15d
btr r10w, si
shld r10d, r9d, 0x30
rol r10, cl
sub r13d, edx
movsxd r10, r13d
cmp dil, 0x14
cmp r10, r8
jmp 0x1404e1776
jg 0x1404e1c49
lea rax, [rbp - 1]
or dl, r12b
mov rdx, r11
sub r9, rax
or al, 0x28
shrd ecx, edx, 0x64
lea r8, [r9 + r14*8]
cmp r9b, 0x4d
adc al, bpl
lea rcx, [rbp - 1]
add rcx, rdx
xchg al, al
jmp 0x1404e17a8
inc rdx
mov al, byte [rcx + r8 + 0x3e]
stc
cmp r12w, 0x4c74
cmp edx, r14d
mov byte [rcx], al
cmc
cmp rdx, rsi
jl 0x1404e179a
test r13d, r13d
jmp 0x1404e17ce
jle 0x1404e17fa
lea rcx, [rbp - 1]
and edx, 0x17fe1427
rcr dh, cl
movsx rdx, bx
mov r8, r10
add rcx, rsi
mov rdx, rdi
jmp 0x1404e17f2
call fcn.1404a922d
sub r11d, r11d
mov rdx, r11
bswap r8w
lea r8, [0x140000000]
cmp dh, 0x66
sal cl, 0xdf
bt cx, di
mov rcx, qword [r8 + r12*8 + 0xba940]
add rcx, rdx
jmp 0x1404e1822
inc rdx
cmp r15b, 0xe7
clc
mov byte [rcx + r14*8 + 0x3e], r11b
stc
cmp r15w, 0x6654
clc
cmp rdx, rsi
jmp 0x1404e183f
jl 0x1404e1812
lea rax, [rbp - 1]
rol dh, cl
bt r8d, 0xf2
mov qword [rbp - 0x41], r11
shl dh, cl
mov qword [rbp - 0x39], rax
movsx r9w, r12b
sub edx, 0xb777e18
lea r9, [rbp - 0x41]
bsr rdx, rdi
mov eax, r11d
lea rdx, [rbp - 0x39]
movsx cx, bl
cmp r15d, 4
lea rcx, [rsp + 0x48]
jmp 0x1404e188a
sete al
movzx r8w, r14b
inc r15b
inc eax
movzx r8, r8w
movsxd r8, r9d
mov r8d, eax
xchg r15b, r15b
mov r15d, eax
call fcn.1404e7079
cmp rax, 0xffffffffffffffff
jmp 0x1404e18b5
je 0x1404e1a7b
lea eax, [r13 - 1]
or r13b, bpl
and r13, 0x567c0da7
rcr sil, cl
mov r13, qword [rbp - 0x51]
movsxd rsi, eax
add rsi, rdi
jmp 0x1404e18db
jmp 0x1404e1ab6
movzx eax, byte [rdi]
shl sil, 0x10
mov rdx, r13
rcl sil, cl
adc cl, r10b
sub si, 0x5968
sub rdx, rdi
rcr si, cl
movsx rsi, byte [rax + r15 + 0xb7d00]
not rax
sbb al, r11b
cbw
lea ecx, [rsi + 1]
sar ax, cl
cdqe
rcl al, cl
movsxd rax, ecx
stc
cmp rax, rdx
jmp 0x1404e1922
jg 0x1404e1cc6
cmp ecx, 4
movsx ax, r13b
mov qword [rbp - 0x31], r11
cbw
movsx eax, sp
movzx cx, r15b
mov eax, r11d
bswap rbx
mov qword [rbp - 0x29], rdi
seta al
movzx edx, dx
sete al
movzx r9d, ax
lea r9, [rbp - 0x31]
movsxd rcx, r15d
mov r8d, r10d
inc eax
lea rdx, [rbp - 0x29]
movsx ecx, dx
movsxd rbx, r9d
movsx cx, bl
mov r8d, eax
movsx rbx, r9w
cmovle rbx, r10
jmp 0x1404e197f
lea rcx, [rsp + 0x48]
cmovbe rbx, r15
setl bh
mov ebx, eax
call fcn.1404e7079
cmp rax, 0xffffffffffffffff
jmp 0x1404e199b
je 0x1404e1a7b
add rsi, rdi
xchg r15d, r15d
mov r15d, ebx
jmp 0x1404e19af
jmp 0x1404e1ab6
lea rax, [0x140000000]
test r11w, bx
mov rdx, qword [rax + r12*8 + 0xba940]
mov cl, byte [rdx + r14*8 + 0x3d]
cmp r13d, 0x1c9820fb
cmp r9b, dil
test cl, 4
je 0x1404e1a19
mov al, byte [rdx + r14*8 + 0x3e]
test r8, 0x10f87894
stc
and cl, 0xfb
jmp 0x1404e19f4
mov byte [rbp + 7], al
mov al, byte [rdi]
jmp 0x1404e19fe
mov byte [rdx + r14*8 + 0x3d], cl
lea rdx, [rbp + 7]
jmp 0x1404e1a0c
mov byte [rbp + 8], al
jmp 0x1404e1a14
jmp 0x1404e1a58
call fcn.1404b0883
movzx ecx, byte [rdi]
cmp rbp, 0x55d205b2
jmp 0x1404e1a2d
xor edx, edx
clc
cmp word [rax + rcx*2], dx
jge 0x1404e1a84
inc rsi
test dx, 0x6d82
cmp rsi, r13
jmp 0x1404e1a4a
jae 0x1404e1d68
mov rdx, rdi
movsx r8w, r10b
mov r8d, 2
lea rcx, [rsp + 0x48]
jmp 0x1404e1a68
call fcn.1401d3f2a
cmp eax, 0xffffffff
jmp 0x1404e1a75
jne 0x1404e1ab6
cmp byte [rbp - 0x71], 0
jmp 0x1404e1d5a
mov r8, r15
movzx ecx, dx
setb dh
lea rcx, [rsp + 0x48]
bswap edx
jmp 0x1404e1a9b
mov rdx, rdi
jmp 0x1404e1aa3
call fcn.1401d3f2a
cmp eax, 0xffffffff
jmp 0x1404e1ab0
je 0x1404e1db8
mov ecx, dword [rbp - 0x59]
shl r9, 0x23
movzx di, spl
bt r9w, r10w
lea rax, [rbp + 0xf]
shl dil, 0x13
cmovp r8w, r12w
neg r8b
xor ebx, ebx
lea r8, [rsp + 0x48]
and r9b, cl
and dil, 0x36
cmovbe r9, r11
mov qword [rsp + 0x38], rbx
and dil, 0x32
lea rdi, [rsi + 1]
add r9w, 0x29b
adc r9b, 0x96
mov qword [rsp + 0x30], rbx
mov r9d, r15d
test r10b, 0xa1
cmc
mov dword [rsp + 0x28], 5
sub edx, edx
jmp 0x1404e1b1c
mov qword [rsp + 0x20], rax
jmp 0x1404e1b26
call fcn.1404cf280
mov esi, eax
test al, 0xf1
test eax, eax
je 0x1404e1ea1
mov rcx, qword [rbp - 0x49]
sete r9b
movsx r9d, dx
lea r9, [rsp + 0x4c]
mov r8d, eax
mov qword [rsp + 0x20], rbx
cdq
mov dl, r15b
not dl
lea rdx, [rbp + 0xf]
jmp 0x1404e1b5f
call qword [sym.imp.KERNEL32.dll_WriteFile]
sub r11d, r11d
clc
jmp 0x1404e1b6e
test eax, eax
je 0x1404e1e8f
mov r15d, dword [rsp + 0x40]
mov ebx, edi
sub ebx, dword [rbp - 0x21]
cmc
jmp 0x1404e1b86
add ebx, r15d
cmp r9b, r8b
mov dword [rbp - 0x65], ebx
cmp dword [rsp + 0x4c], esi
jmp 0x1404e1b98
jb 0x1404e1d56
cmp byte [rsp + 0x44], 0xa
jne 0x1404e1c1e
mov rcx, qword [rbp - 0x49]
xchg edx, r8d
setle r8b
movzx rdx, r9w
lea eax, [r11 + 0xd]
lea r9, [rsp + 0x4c]
xchg dl, r8b
movzx r8, bx
mov word [rsp + 0x44], ax
xchg r8, r8
cqo
lea r8d, [r11 + 1]
mov qword [rsp + 0x20], r11
movzx edx, dx
lea rdx, [rsp + 0x44]
jmp 0x1404e1be8
call qword [sym.imp.KERNEL32.dll_WriteFile]
xor r11d, r11d
test eax, eax
je 0x1404e1da7
cmp dword [rsp + 0x4c], 1
jb 0x1404e1d56
inc r15d
movsxd rsi, r12d
mov sil, spl
inc ebx
dec si
mov dword [rsp + 0x40], r15d
ror si, 0x5e
mov dword [rbp - 0x65], ebx
mov rsi, rdi
cmp rsi, rax
stc
cmp rdi, r13
jmp 0x1404e1c2d
jae 0x1404e1dd7
mov rax, qword [rbp - 0x19]
cmovb dx, r9w
mov edx, dword [rbp - 0x55]
jmp 0x1404e1c44
jmp 0x1404e1671
mov edx, r11d
test r8, r8
jmp 0x1404e1c54
jle 0x1404e1cb9
sub rdi, rsi
inc ecx
lea rbx, [0x140000000]
inc cx
mov al, byte [rdi + rsi]
movzx rcx, r8w
cmovno cx, r12w
inc edx
btc ecx, 0xaa
sub cx, 0x1de4
bswap rcx
mov rcx, qword [rbx + r12*8 + 0xba940]
stc
add rcx, rsi
inc rsi
test dh, 0xa6
test r9d, r13d
mov byte [rcx + r14*8 + 0x3e], al
sub al, r8b
shl ah, cl
movsxd rax, edx
cmp al, bpl
cmp rax, r8
jmp 0x1404e1cb0
jl 0x1404e1c69
mov ebx, dword [rbp - 0x65]
add ebx, r8d
jmp 0x1404e1cc1
jmp 0x1404e1d4d
mov r9d, r11d
test rdx, rdx
jmp 0x1404e1cd1
jle 0x1404e1d4b
mov r13, qword [rbp - 0x11]
bswap ecx
mov r8, r11
movzx ecx, dx
rcr cl, 0x5e
shl rcx, cl
mov r10, r13
and r13d, 0x3f
sar r10, 6
lea r11, [r13*8]
or cx, 0x565d
add r11, r13
dec al
mov al, byte [r8 + rdi]
inc r9d
setae ch
bswap cx
mov rcx, qword [r15 + r10*8 + 0xba940]
cmc
stc
add rcx, r8
jmp 0x1404e1d25
inc r8
mov byte [rcx + r11*8 + 0x3e], al
btr ax, ax
sar ah, cl
movsxd rax, r9d
jmp 0x1404e1d3b
cmp rax, rdx
jl 0x1404e1d06
sub r11d, r11d
shl rcx, 0xd6
add ebx, edx
mov dword [rbp - 0x65], ebx
sal cx, cl
not cx
cmp byte [rbp - 0x71], r11b
mov ecx, dword [rsp + 0x40]
jmp 0x1404e1d63
jmp 0x1404e1dea
mov al, byte [rdi]
lea r8, [0x140000000]
movzx rcx, r14w
movsxd rcx, eax
mov rcx, qword [r8 + r12*8 + 0xba940]
inc ebx
cmc
mov dword [rbp - 0x65], ebx
mov byte [rcx + r14*8 + 0x3e], al
cwde
mov rax, qword [r8 + r12*8 + 0xba940]
or byte [rax + r14*8 + 0x3d], 4
cmp r15w, cx
stc
cmp byte [rbp - 0x71], dl
jmp 0x1404e1d5a
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x69], eax
bts cx, r9w
setns cl
mov ecx, dword [rsp + 0x40]
jmp 0x1404e1dc9
cmp byte [rbp - 0x71], 0
jmp 0x1404e1dd2
jmp 0x1404e1dea
mov ecx, dword [rsp + 0x40]
jmp 0x1404e1de1
cmp byte [rbp - 0x71], r11b
jmp 0x1404e1dea
je 0x1404e1e08
mov rax, qword [rsp + 0x50]
cmp r9w, 0x5823
and dword [rax + 0x3a8], 0xfffffffd
lahf
cmovnp ax, r11w
mov rax, qword [rbp - 9]
test ecx, ecx
movsd xmm0, qword [rbp - 0x69]
movsd qword [rax], xmm0
clc
jmp 0x1404e1e20
mov dword [rax + 8], ecx
shld rcx, rbp, 8
rcr cl, cl
ror ecx, 0x48
mov rcx, qword [rbp + 0x17]
stc
cmp r11b, 0x7e
clc
xor rcx, rsp
call fcn.1404a55f8
mov rbx, qword [rsp + 0x140]
xadd esi, r14d
rcl r13w, 0xe4
btc r14, rax
add rsp, 0x100
pop r15
movsxd rsi, r10d
pop r14
not r12b
jmp 0x1404e1e6f
pop r13
pop r12
seto bpl
pop rdi
mov sil, r13b
movsx si, r11b
pop rsi
xchg bpl, bpl
movzx ebp, r13w
pop rbp
jmp 0x1404e1e8e
ret
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x69], eax
xor ch, 0
rol cx, cl
shr ch, 0x99
mov ecx, dword [rsp + 0x40]
jmp 0x1404e1eaa
cmp byte [rbp - 0x71], bl
jmp 0x1404e1eb2
jmp 0x1404e1dea