Function at 0x1404d79d5
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
shld rax, r12, 0xf
btr ax, 0x10
setne sil
push rdi
sbb bpl, 0x3b
bts ax, r14w
shl ebp, 0x5d
push r12
shrd r12d, esp, 1
stc
push r13
and r12b, r9b
xchg r12, rbp
rcr r12b, cl
push r14
movsx bp, r11b
add bpl, dl
rol sil, cl
push r15
movzx r14d, r15w
cdqe
test cx, r12w
lea rbp, [rsp - 0x27]
sub rsp, 0x100
mov rax, qword [0x1400b7288]
cmp r15w, bx
ror r14, cl
xor rax, rsp
rol sil, 0x48
mov qword [rbp + 0x17], rax
adc r13b, r12b
movsxd rsi, edx
neg al
movsx r12w, spl
adc r15b, r9b
mov r15, r8
movsxd r13, ebx
mov rax, rsi
mov qword [rbp - 9], rcx
mov qword [rbp - 0x11], rax
movsx r13, r15w
bsf r12d, r11d
lea rcx, [0x140000000]
adc r14, 0x71cb407f
xor r13b, 0x55
and eax, 0x3f
ror r14b, 0xac
movsxd r13, ebx
mov r13d, r9d
movzx r12, r9w
bt r12d, 0xc6
bsf r14, rcx
lea r13, [r13 + r8]
clc
mov qword [rbp - 0x21], r8
bt r14, r9
btc r14, 0xa4
mov r12, rsi
mov qword [rbp - 0x51], r13
jmp 0x1404d7abc
sar r12, 6
movsx r14w, r13b
movsx r14, bx
lea r14, [rax + rax*8]
cbw
movsx eax, cx
mov rax, qword [rcx + r12*8 + 0xba940]
jmp 0x1404d7adf
mov rax, qword [rax + r14*8 + 0x28]
jmp 0x1404d7ae9
mov qword [rbp - 0x49], rax
jmp 0x1404d7af2
call qword [sym.imp.KERNEL32.dll_GetConsoleOutputCP]
xor edx, edx
lea rcx, [rsp + 0x50]
jmp 0x1404d7b04
mov dword [rbp - 0x59], eax
jmp 0x1404d7b0c
call fcn.1404a0828
mov rcx, qword [rsp + 0x58]
rcr rbx, cl
sal di, cl
sub r11d, r11d
mov dword [rbp - 0x69], r11d
test r8w, 0x7aa8
mov ebx, r11d
sbb di, ax
mov dword [rbp - 0x65], ebx
bts rdx, r13
mov rdi, r15
bts dx, r15w
bswap edx
mov edx, dword [rcx + 0xc]
xadd ecx, ecx
add cl, 0xb0
mov ecx, r11d
test dh, 0xb2
stc
mov dword [rsp + 0x40], ecx
test di, 0x5f4
cmp r8b, bl
mov dword [rbp - 0x55], edx
cmp r15, r13
jmp 0x1404d7b67
jae 0x1404d833f
mov rax, rsi
sbb sil, 0x19
shr cl, cl
mov rsi, r15
cmc
adc cl, 0xed
sar rax, 6
bsf r15w, si
sar cl, 0x4a
mov qword [rbp - 0x19], rax
shl cl, 4
mov cl, byte [rdi]
shr r15d, cl
xadd r15w, r15w
mov r15d, 1
test r8b, 0x35
cmp al, sil
mov byte [rsp + 0x44], cl
mov dword [rsp + 0x48], r11d
cmp bl, 0xd
cmp edx, 0xfde9
jne 0x1404d7ebd
lea r15, [0x140000000]
mov edx, r11d
cmp sil, 0x6d
bt r9w, dx
sar r9w, cl
mov r9, qword [r15 + rax*8 + 0xba940]
rcr al, cl
cmc
or si, 0x4c55
mov rsi, r11
lahf
lea rax, [r9 + r14*8]
cmp ax, 0x790d
cmp byte [rax + rsi + 0x3e], r11b
jmp 0x1404d7bfc
je 0x1404d7c1e
inc edx
jmp 0x1404d7c09
inc rsi
test r14d, r13d
cmp rsi, 5
jmp 0x1404d7c18
jl 0x1404d7bf2
test rsi, rsi
jle 0x1404d7e04
mov rax, qword [r15 + r12*8 + 0xba940]
bswap r8d
bt r13w, r10w
mov r8, qword [rbp - 0x51]
sub r8, rdi
inc cx
movzx ecx, byte [rax + r14*8 + 0x3e]
mov r10d, r10d
movzx r13, r8w
movsx r15d, byte [rcx + r15 + 0xb7d00]
movzx r10w, r11b
setno r10b
movsx r13d, r15w
inc r15d
add r10w, 0x7fc
add r10b, r8b
mov r13d, r15d
xadd r10w, r10w
sub r13d, edx
dec r10w
movzx r10d, r12w
movsxd r10, r13d
jmp 0x1404d7c8c
cmp r10, r8
jmp 0x1404d7c94
jg 0x1404d8186
lea rax, [rbp - 1]
sar dl, 0x6a
mov rdx, r11
sub r9, rax
lea r8, [r9 + r14*8]
cmp bl, 0xce
lea rcx, [rbp - 1]
add rcx, rdx
mov al, bpl
inc rdx
shl al, cl
xadd al, al
mov al, byte [rcx + r8 + 0x3e]
jmp 0x1404d7cca
mov byte [rcx], al
cmp al, spl
cmc
cmp rdx, rsi
jmp 0x1404d7cd8
jl 0x1404d7cae
test r13d, r13d
jmp 0x1404d7ce6
jle 0x1404d7d15
lea rcx, [rbp - 1]
cwd
mov r8, r10
setne dh
add rcx, rsi
xchg dl, dh
cmova rdx, r13
movzx rdx, si
mov rdx, rdi
jmp 0x1404d7d0d
call fcn.14049f837
sub r11d, r11d
mov rdx, r11
adc ecx, r15d
shl r8w, 0xc3
add r8d, 0x5c1772a3
lea r8, [0x140000000]
sub cl, 0xd9
cmp r8d, r13d
and ecx, esp
mov rcx, qword [r8 + r12*8 + 0xba940]
add rcx, rdx
jmp 0x1404d7d46
inc rdx
mov byte [rcx + r14*8 + 0x3e], r11b
cmp r8, 0x43341239
cmp rdx, rsi
jmp 0x1404d7d5d
jl 0x1404d7d36
lea rax, [rbp - 1]
or cl, dil
mov qword [rbp - 0x41], r11
mov qword [rbp - 0x39], rax
lea r9, [rbp - 0x41]
shl cx, 0xaf
sbb edx, ecx
mov eax, r11d
sbb al, 0xa7
btr edx, 0xb6
movsx r8, r12w
lea rdx, [rbp - 0x39]
btc rcx, 0x11
cmp r15d, 4
lea rcx, [rsp + 0x48]
movzx r8d, cx
not al
jmp 0x1404d7da6
sete al
movsxd r8, r11d
mov r15, 0x2efd2684
inc eax
jmp 0x1404d7dba
mov r8d, eax
mov r15d, eax
call fcn.1404dd45c
cmp rax, 0xffffffffffffffff
jmp 0x1404d7dce
je 0x1404d7fa0
lea eax, [r13 - 1]
add rsi, 0x36ea096b
bswap r13w
or r13b, r15b
mov r13, qword [rbp - 0x51]
movsxd rsi, eax
test bx, r13w
clc
jmp 0x1404d7df7
add rsi, rdi
jmp 0x1404d7dff
jmp 0x1404d7fdf
movzx eax, byte [rdi]
inc sil
movsxd rcx, r10d
and si, 0x220
mov rdx, r13
jmp 0x1404d7e20
sub rdx, rdi
stc
movsx rsi, byte [rax + r15 + 0xb7d00]
lea ecx, [rsi + 1]
adc al, r12b
movsxd rax, ecx
stc
clc
cmp rax, rdx
jmp 0x1404d7e40
jg 0x1404d8205
cmp ecx, 4
xchg r8, rbx
cdqe
cwd
mov qword [rbp - 0x31], r11
movzx rcx, cx
mov eax, r11d
mov qword [rbp - 0x29], rdi
sete al
cdq
movsx r8w, r12b
lea r9, [rbp - 0x31]
movzx bx, r10b
inc dx
xchg r8d, r8d
inc eax
xchg ch, bh
movsxd rdx, r12d
lea rdx, [rbp - 0x29]
movzx rcx, bp
mov r8d, eax
bswap bx
movzx cx, bh
lea rcx, [rsp + 0x48]
cmovp bx, ax
mov ebx, eax
call fcn.1404dd45c
cmp rax, 0xffffffffffffffff
je 0x1404d7fa0
add rsi, rdi
not r15
mov r15d, ebx
jmp 0x1404d7eb8
jmp 0x1404d7fdf
lea rax, [0x140000000]
add rdx, r12
sar rdx, cl
mov rdx, qword [rax + r12*8 + 0xba940]
mov cl, byte [rdx + r14*8 + 0x3d]
test r11d, ecx
test al, 0x9b
test cl, 4
jmp 0x1404d7ee4
je 0x1404d7f2f
mov al, byte [rdx + r14*8 + 0x3e]
cmp r13b, bl
test cl, 0x4d
and cl, 0xfb
jmp 0x1404d7efd
mov byte [rbp + 7], al
mov al, byte [rdi]
jmp 0x1404d7f07
mov byte [rdx + r14*8 + 0x3d], cl
movsxd rdx, r12d
movzx dx, bpl
jmp 0x1404d7f19
lea rdx, [rbp + 7]
jmp 0x1404d7f22
mov byte [rbp + 8], al
jmp 0x1404d7f2a
jmp 0x1404d7f7d
call fcn.1404a6e40
movzx ecx, byte [rdi]
test r11b, 0xa6
cmp r11b, dl
cmp dx, 0x47ee
sub edx, edx
stc
cmp r15b, 0xb6
cmp word [rax + rcx*2], dx
jge 0x1404d7fa9
inc rsi
test r12b, 0xa
cmp rsi, r13
jmp 0x1404d7f63
jae 0x1404d82bc
mov rdx, rdi
movzx r8w, bl
mov r8, 0x4c750981
movsx cx, r10b
mov r8d, 2
lea rcx, [rsp + 0x48]
jmp 0x1404d7f8d
call fcn.1401a6c27
cmp eax, 0xffffffff
jmp 0x1404d7f9a
jne 0x1404d7fdf
cmp byte [rbp - 0x71], 0
jmp 0x1404d82ae
mov r8, r15
mov ch, 0x39
cwd
movsx rcx, bp
lea rcx, [rsp + 0x48]
movzx edx, r15w
movzx rdx, dx
not dh
mov rdx, rdi
jmp 0x1404d7fcc
call fcn.1401a6c27
cmp eax, 0xffffffff
jmp 0x1404d7fd9
je 0x1404d8317
mov ecx, dword [rbp - 0x59]
add r8b, 0xe2
lea rax, [rbp + 0xf]
bt r9w, r15w
rcr edi, 1
neg r9b
xor ebx, ebx
bsf r9d, esi
shld rdi, r13, 0xa5
bt rdi, 0xa3
lea r8, [rsp + 0x48]
mov qword [rsp + 0x38], rbx
clc
lea rdi, [rsi + 1]
rcl r9b, 0x49
cmovge r9, r9
mov qword [rsp + 0x30], rbx
shl r9w, cl
mov r9d, r15d
mov dword [rsp + 0x28], 5
sub edx, edx
jmp 0x1404d8036
mov qword [rsp + 0x20], rax
jmp 0x1404d8040
call fcn.1404c57bb
mov esi, eax
cmp bpl, spl
test eax, eax
jmp 0x1404d8051
je 0x1404d83d9
mov rcx, qword [rbp - 0x49]
not r8b
movsx rdx, di
movzx r9w, r10b
lea r9, [rsp + 0x4c]
movzx rdx, r10w
cwd
mov r8d, eax
movzx dx, r9b
cdq
movzx edx, cx
mov qword [rsp + 0x20], rbx
movsxd rdx, r12d
mov dx, 0x48c1
movzx edx, r9w
lea rdx, [rbp + 0xf]
jmp 0x1404d8097
call qword [sym.imp.KERNEL32.dll_WriteFile]
sub r11d, r11d
test eax, eax
je 0x1404d83c9
mov r15d, dword [rsp + 0x40]
bsf ebx, esp
mov ebx, edi
cmp r10b, r12b
sub ebx, dword [rbp - 0x21]
clc
add ebx, r15d
mov dword [rbp - 0x65], ebx
cmp rbx, rsp
cmp dword [rsp + 0x4c], esi
jmp 0x1404d80cb
jb 0x1404d82a7
cmp byte [rsp + 0x44], 0xa
jmp 0x1404d80db
jne 0x1404d8158
mov rcx, qword [rbp - 0x49]
lea eax, [r11 + 0xd]
cdq
lea r9, [rsp + 0x4c]
movsx r8, di
mov edx, 0x59b81cba
movsx r8w, r15b
mov word [rsp + 0x44], ax
mov dx, r14w
mov dh, 0x68
bswap r8
lea r8d, [r11 + 1]
movzx dx, ah
mov dh, 0xab
mov qword [rsp + 0x20], r11
lea rdx, [rsp + 0x44]
jmp 0x1404d8126
call qword [sym.imp.KERNEL32.dll_WriteFile]
sub r11d, r11d
test bl, spl
test eax, eax
je 0x1404d830e
cmp dword [rsp + 0x4c], 1
jmp 0x1404d8144
jb 0x1404d82a7
inc r15d
inc ebx
cmc
mov dword [rsp + 0x40], r15d
mov dword [rbp - 0x65], ebx
mov rsi, rdi
test ch, 0x2a
cmp rdi, r13
jmp 0x1404d8166
jae 0x1404d8334
mov rax, qword [rbp - 0x19]
not rdx
bswap dx
mov dl, r13b
mov edx, dword [rbp - 0x55]
jmp 0x1404d8181
jmp 0x1404d7b90
mov edx, r11d
clc
cmp r13b, bl
test r8, r8
jmp 0x1404d8195
jle 0x1404d81f8
sub rdi, rsi
xchg cl, ch
lea rbx, [0x140000000]
mov al, byte [rdi + rsi]
movzx rcx, bp
inc edx
cmc
stc
bswap cx
mov rcx, qword [rbx + r12*8 + 0xba940]
test bpl, 0x35
add rcx, rsi
jmp 0x1404d81c9
inc rsi
stc
test r8b, 0x3e
mov byte [rcx + r14*8 + 0x3e], al
adc ah, 0x5f
movsxd rax, edx
jmp 0x1404d81e5
cmp rax, r8
jmp 0x1404d81ed
jl 0x1404d81a7
mov ebx, dword [rbp - 0x65]
clc
stc
add ebx, r8d
jmp 0x1404d8200
jmp 0x1404d829b
mov r9d, r11d
test esi, 0x34a21818
clc
jmp 0x1404d8214
test rdx, rdx
jle 0x1404d8290
mov r13, qword [rbp - 0x11]
mov r8, r11
mov r10, r13
and r13d, 0x3f
sar r10, 6
not r11b
bt cx, 0x56
btc r11, 0xc9
lea r11, [r13*8]
dec al
add r11, r13
movsx cx, r14b
mov al, byte [r8 + rdi]
movzx ecx, ax
inc r9d
rcr ch, cl
mov rcx, qword [r15 + r10*8 + 0xba940]
clc
add rcx, r8
jmp 0x1404d826b
inc r8
cmc
mov byte [rcx + r11*8 + 0x3e], al
movsxd rax, r9d
clc
test dh, 0x32
cmc
cmp rax, rdx
jmp 0x1404d8284
jl 0x1404d824e
xor r11d, r11d
clc
neg cl
add ebx, edx
rol cl, cl
jmp 0x1404d829b
mov dword [rbp - 0x65], ebx
rol rcx, 0xe
btc cx, 0x50
cmp byte [rbp - 0x71], r11b
movsxd rcx, eax
mov ecx, dword [rsp + 0x40]
jmp 0x1404d82b7
jmp 0x1404d8348
mov al, byte [rdi]
lea r8, [0x140000000]
mov rcx, qword [r8 + r12*8 + 0xba940]
jmp 0x1404d82d2
inc ebx
test r12b, 0xa2
jmp 0x1404d82dd
mov dword [rbp - 0x65], ebx
mov byte [rcx + r14*8 + 0x3e], al
mov rax, qword [r8 + r12*8 + 0xba940]
cmp dh, 0x1c
jmp 0x1404d82f5
or byte [rax + r14*8 + 0x3d], 4
cmc
jmp 0x1404d8301
cmp byte [rbp - 0x71], dl
jmp 0x1404d8309
jmp 0x1404d82ae
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x69], eax
mov ecx, dword [rsp + 0x40]
cmp bh, 0x1f
jmp 0x1404d8326
cmp byte [rbp - 0x71], 0
jmp 0x1404d832f
jmp 0x1404d8348
mov ecx, dword [rsp + 0x40]
test edx, 0x9d958a2
clc
cmp byte [rbp - 0x71], r11b
jmp 0x1404d8348
je 0x1404d8361
mov rax, qword [rsp + 0x50]
and dword [rax + 0x3a8], 0xfffffffd
movzx rax, si
rol al, 0x41
mov rax, qword [rbp - 9]
movsd xmm0, qword [rbp - 0x69]
stc
movsd qword [rax], xmm0
mov dword [rax + 8], ecx
clc
mov rcx, qword [rbp + 0x17]
xor rcx, rsp
jmp 0x1404d837f
call fcn.14049bbae
mov rbx, qword [rsp + 0x140]
add rsp, 0x100
movsx r15w, r15b
movzx rbp, dx
pop r15
pop r14
movzx rsi, r8w
movzx ebp, bx
movzx di, r13b
pop r13
bswap si
pop r12
pop rdi
pop rsi
mov bp, si
jmp 0x1404d83c2
pop rbp
jmp 0x1404d83c8
ret
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x69], eax
sal cl, 0xf9
bts rcx, rdi
mov ecx, dword [rsp + 0x40]
cmp r14w, r11w
cmp byte [rbp - 0x71], bl
jmp 0x1404d83e9
jmp 0x1404d8348