Function at 0x1404d8874
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
lahf
nop
not ax
mov qword [rsp + 0x18], rbp
movzx eax, ax
cwde
push rsi
push rdi
bswap ax
push r12
movsx ax, r13b
movzx ax, r8b
movsxd rax, esi
push r14
push r15
mov rax, r12
jmp 0x1404d88a8
mov eax, 0x1470
jmp 0x1404d88b2
call fcn.14044491f
sub rsp, rax
xchg al, r10b
mov rax, qword [0x1400b7288]
shld r10w, r8w, 0x32
xor rax, rsp
mov qword [rsp + 0x1460], rax
movzx rax, r13w
movsxd r10, edx
cbw
clc
sal r12, cl
mov rbx, rcx
mov rax, r10
mov r14d, r9d
shld r12w, r15w, 0xbd
bswap dx
sets cl
sar rax, 6
lea rcx, [0x1400ba940]
and r10d, 0x3f
add r14, r8
sub r12d, esi
mov r15, r8
movzx rdi, r13w
movzx r12d, di
mov rdi, r8
mov rax, qword [rcx + rax*8]
rol dh, 0xae
rcl r12b, cl
adc r12, rdx
lea rdx, [r10 + r10*8]
sar r12b, 0x79
mov r12, qword [rax + rdx*8 + 0x28]
test r14b, 0xbe
xor eax, eax
cmp dl, r11b
test r12w, r8w
jmp 0x1404d8946
mov qword [rbx], rax
test r14b, al
cmp r8, r14
mov dword [rbx + 8], eax
jae 0x1404d8b18
lea rax, [rsp + 0x50]
cmp rdi, r14
jmp 0x1404d8965
jae 0x1404d89d2
movzx ecx, word [rdi]
cmc
cmp r11d, r12d
add rdi, 2
test al, 0x8f
cmp sil, 0xbc
cmp cx, 0xa
jmp 0x1404d8985
jne 0x1404d89a7
mov edx, 0xd
cmc
test r12w, 0x61db
cmp bpl, 0xc
mov word [rax], dx
add rax, 2
cmc
cmp r12w, bx
mov word [rax], cx
clc
movzx rcx, cx
add rax, 2
movsx cx, cl
inc ecx
shl rcx, 1
lea rcx, [rsp + 0x6f8]
cmp rax, rcx
jmp 0x1404d89cc
jb 0x1404d895d
and qword [rsp + 0x38], 0
bt r9, rdi
btc rcx, rsp
lea rcx, [rsp + 0x50]
or r9w, r8w
xor r9b, dil
and qword [rsp + 0x30], 0
inc r9
jmp 0x1404d89fa
lea r8, [rsp + 0x50]
movzx r9, r13w
sub rax, rcx
rcr r9b, 0x4f
mov dword [rsp + 0x28], 0xd55
bswap r9w
sub cl, r9b
cmp r15w, 0x5462
lea rcx, [rsp + 0x700]
sar rax, 1
add r9b, bl
mov qword [rsp + 0x20], rcx
shl r9b, 0xbe
mov r9d, eax
clc
shld ecx, r9d, 0xbd
seta cl
mov ecx, 0xfde9
sub edx, edx
jmp 0x1404d8a4e
call fcn.1404c57bb
mov ebp, eax
test r14b, r15b
stc
test r8d, 0x28f3043f
test eax, eax
jmp 0x1404d8a67
je 0x1404d8b0b
sub esi, esi
stc
cmc
test eax, eax
jmp 0x1404d8a78
je 0x1404d8aef
and qword [rsp + 0x20], 0
xor r8d, r8d
bsf r9, rdx
lea rdx, [rsp + 0x700]
bsf rcx, rbp
shl cl, cl
mov ecx, esi
lea r9, [rsp + 0x40]
btc r8w, dx
ror r8b, 0xc0
mov r8d, ebp
lea rdx, [rdx + rcx]
or cl, bpl
xadd rcx, rcx
mov rcx, r12
test r9b, 0xb2
sub r8d, esi
jmp 0x1404d8ac6
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jmp 0x1404d8ad3
je 0x1404d8b0b
add esi, dword [rsp + 0x40]
cmc
test r8b, dl
clc
cmp esi, ebp
jmp 0x1404d8ae9
jb 0x1404d8a7e
mov eax, edi
sub eax, r15d
mov dword [rbx + 4], eax
test bx, r11w
cmp dx, ax
cmp rdi, r14
jmp 0x1404d8b06
jmp 0x1404d8952
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbx], eax
movzx ax, dil
mov rax, rbx
dec cl
shl ch, cl
shrd cx, bp, 0xd6
mov rcx, qword [rsp + 0x1460]
test r13, 0x54670062
xor rcx, rsp
jmp 0x1404d8b3b
call fcn.14049bbae
lea r11, [rsp + 0x1470]
setns sil
mov r14b, dil
mov rbx, qword [r11 + 0x30]
movsx rdi, r15w
movsx di, r15b
movzx si, r10b
mov rbp, qword [r11 + 0x40]
not r14
mov r15b, 0x30
cmovnp r12d, r8d
mov rsp, r11
movzx r12w, bpl
movzx r15, cx
movsx si, r11b
pop r15
mov r12w, 0x39d3
xchg r12d, edi
movzx r12d, r15w
pop r14
pop r12
jmp 0x1404d8b97
pop rdi
movzx si, spl
pop rsi
jmp 0x1404d8ba3
ret