Function at 0x1404db1a8
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
cdqe
movzx ax, r14b
push rbp
push rsi
add si, bx
push rdi
xadd ah, al
push r12
cmovne ax, cx
sbb r12b, 0xde
bsr si, r14w
push r13
push r14
add bpl, sil
sal sil, 0x4f
ror bpl, cl
push r15
lea rbp, [rsp - 0x27]
sal r15b, cl
btc r14, 0x44
lahf
sub rsp, 0x100
test r11d, 0xc7a3cd2
mov rax, qword [0x1400b7288]
xor rax, rsp
add r14b, 0xae
mov r14b, 0x9d
mov qword [rbp + 0x17], rax
movsxd rsi, edx
mov r15, r8
shr r12b, cl
add r14w, 0x1363
bsr r14d, r15d
mov rax, rsi
cmovp r14w, r10w
mov qword [rbp - 9], rcx
rol r13b, 0xa9
mov qword [rbp - 0x11], rax
mov r12w, di
lea rcx, [0x140000000]
rcr r12b, cl
and eax, 0x3f
mov r13d, r9d
rol r12b, 0x24
add r13, r8
clc
sub r12, rdx
shl r14b, 1
mov qword [rbp - 0x21], r8
mov r12, rsi
bsf r14d, ebp
btc r14d, 0xb9
mov qword [rbp - 0x51], r13
or r14b, bpl
sar r12, 6
movzx r14d, r13w
setle r14b
lea r14, [rax + rax*8]
cbw
mov rax, qword [rcx + r12*8 + 0xba940]
jmp 0x1404db28c
mov rax, qword [rax + r14*8 + 0x28]
jmp 0x1404db296
mov qword [rbp - 0x49], rax
call qword [sym.imp.KERNEL32.dll_GetConsoleOutputCP]
sub edx, edx
mov ch, 0x85
movsx ecx, r15w
lea rcx, [rsp + 0x50]
jmp 0x1404db2b3
mov dword [rbp - 0x59], eax
jmp 0x1404db2bb
call fcn.1404a41ae
mov rcx, qword [rsp + 0x58]
sub r11d, r11d
neg rdx
sal dl, cl
or dl, 0x96
mov dword [rbp - 0x69], r11d
btc dx, r11w
mov ebx, r11d
btr di, 0x6b
rcl edi, cl
or dh, 0xa4
mov dword [rbp - 0x65], ebx
mov rdi, r15
btr rdx, rdx
mov edx, dword [rcx + 0xc]
bsr cx, bp
ror cl, cl
sbb cl, r8b
mov ecx, r11d
clc
stc
mov dword [rsp + 0x40], ecx
mov dword [rbp - 0x55], edx
cmp eax, 0x4fe26b66
cmp r11, rbp
cmc
cmp r15, r13
jae 0x1404dbad7
mov rax, rsi
sbb cl, 0x56
mov rsi, r15
not cl
test r10b, r12b
sar rax, 6
xor cl, dl
sub r15d, 0x2f2c53b6
mov qword [rbp - 0x19], rax
clc
mov r15b, 0x9c
mov cl, byte [rdi]
mov r15w, bx
mov r15d, 1
mov byte [rsp + 0x44], cl
mov dword [rsp + 0x48], r11d
cmp edx, 0xfde9
jmp 0x1404db35d
jne 0x1404db62e
lea r15, [0x140000000]
cmp r15b, 0xa
movzx esi, r10w
xchg dl, sil
mov edx, r11d
sub esi, r9d
and r9w, 0x655
rol si, cl
mov r9, qword [r15 + rax*8 + 0xba940]
add al, dil
adc ax, 0x4f1b
shr al, 0x5e
mov rsi, r11
sal ax, 0x2a
test r15w, 0xa6f
bts rax, rsp
lea rax, [r9 + r14*8]
jmp 0x1404db3b0
cmp byte [rax + rsi + 0x3e], r11b
jmp 0x1404db3ba
je 0x1404db3d1
inc edx
inc rsi
clc
stc
cmp rsi, 5
jl 0x1404db3b0
test rsi, rsi
jle 0x1404db56a
mov rax, qword [r15 + r12*8 + 0xba940]
mov r8, qword [rbp - 0x51]
sub r8, rdi
inc r10b
movzx ecx, byte [rax + r14*8 + 0x3e]
movsx r10, bp
movsx r15d, byte [rcx + r15 + 0xb7d00]
inc r15d
test ah, 0x96
mov r13d, r15d
sub r13d, edx
sal r10b, cl
shr r10d, cl
movsxd r10, r13d
cmp r10, r8
jmp 0x1404db41c
jg 0x1404db8e9
lea rax, [rbp - 1]
shl dh, 0xe0
mov rdx, r11
btr r8d, r13d
test edi, r13d
ror cl, cl
sub r9, rax
lea r8, [r9 + r14*8]
lea rcx, [rbp - 1]
clc
rcr al, 0x71
add rcx, rdx
seto al
inc rdx
shr al, 0x47
mov al, byte [rcx + r8 + 0x3e]
mov byte [rcx], al
stc
jmp 0x1404db45d
cmp rdx, rsi
jl 0x1404db43c
test r13d, r13d
jmp 0x1404db46e
jle 0x1404db491
lea rcx, [rbp - 1]
mov r8, r10
rcl rdx, cl
add rcx, rsi
mov rdx, rdi
call fcn.1404a31ea
xor r11d, r11d
bt rcx, 0xea
mov rdx, r11
shr ch, 0xf3
lea r8, [0x140000000]
ror ecx, cl
rcl rcx, cl
neg cx
mov rcx, qword [r8 + r12*8 + 0xba940]
test sil, al
test r11b, 0xbb
add rcx, rdx
inc rdx
mov byte [rcx + r14*8 + 0x3e], r11b
jmp 0x1404db4c5
cmp rdx, rsi
jmp 0x1404db4cd
jl 0x1404db4a6
lea rax, [rbp - 1]
mov qword [rbp - 0x41], r11
add r9, 0xf422b49
rol r9, cl
and cl, 0xbf
mov qword [rbp - 0x39], rax
mov dx, 0x1b5d
lea r9, [rbp - 0x41]
sar r8, cl
mov eax, r11d
rol r8b, cl
lea rdx, [rbp - 0x39]
xadd ecx, r8d
sbb r8w, r11w
not r8b
cmp r15d, 4
lea rcx, [rsp + 0x48]
movsx r8d, r9w
sete al
inc eax
movzx r8w, bpl
mov r8d, eax
mov r15d, eax
jmp 0x1404db52e
call fcn.1404e0df9
cmp rax, 0xffffffffffffffff
jmp 0x1404db53c
je 0x1404db6ec
lea eax, [r13 - 1]
mov r13, qword [rbp - 0x51]
and sil, 0xbb
mov sil, r14b
shr sil, 0x77
movsxd rsi, eax
jmp 0x1404db55d
add rsi, rdi
jmp 0x1404db565
jmp 0x1404db731
movzx eax, byte [rdi]
not dl
cmp r8w, r14w
cmovp edx, ecx
mov rdx, r13
rol cx, cl
sub rdx, rdi
sbb cl, r15b
movsx rsi, byte [rax + r15 + 0xb7d00]
lea ecx, [rsi + 1]
bts ax, r9w
dec ah
shr ax, 0x26
movsxd rax, ecx
cmp rax, rdx
jmp 0x1404db5a4
jg 0x1404db982
cmp ecx, 4
rdtsc
movsx cx, dil
mov qword [rbp - 0x31], r11
mov r9b, spl
mov eax, r11d
movsx r9, r13w
movsxd r8, r8d
mov r9d, r14d
mov qword [rbp - 0x29], rdi
sete al
bswap r9
lea r9, [rbp - 0x31]
movzx rdx, r15w
movzx ecx, ax
inc eax
movsx r8d, di
lea rdx, [rbp - 0x29]
not r8d
setbe ch
mov r8d, eax
lea rcx, [rsp + 0x48]
movsx bx, r14b
mov ebx, eax
jmp 0x1404db601
call fcn.1404e0df9
cmp rax, 0xffffffffffffffff
jmp 0x1404db60f
je 0x1404db6ec
add rsi, rdi
movsx r15d, cx
jmp 0x1404db621
mov r15d, ebx
jmp 0x1404db629
jmp 0x1404db731
lea rax, [0x140000000]
adc dh, 0xe0
cqo
sal dh, cl
mov rdx, qword [rax + r12*8 + 0xba940]
sub cl, dil
mov cl, byte [rdx + r14*8 + 0x3d]
test cl, 4
je 0x1404db688
mov al, byte [rdx + r14*8 + 0x3e]
jmp 0x1404db660
and cl, 0xfb
jmp 0x1404db668
mov byte [rbp + 7], al
mov al, byte [rdi]
mov byte [rdx + r14*8 + 0x3d], cl
lea rdx, [rbp + 7]
jmp 0x1404db67b
mov byte [rbp + 8], al
jmp 0x1404db683
jmp 0x1404db6c6
call fcn.1404aa961
movzx ecx, byte [rdi]
xor edx, edx
cmp word [rax + rcx*2], dx
jmp 0x1404db69b
jge 0x1404db6fa
inc rsi
cmp r12b, 0x89
jmp 0x1404db6ad
cmp rsi, r13
jmp 0x1404db6b5
jae 0x1404dba50
mov rdx, rdi
mov ecx, r10d
jmp 0x1404db6c6
mov r8d, 2
setg cl
lea rcx, [rsp + 0x48]
jmp 0x1404db6d9
call fcn.1401c039c
cmp eax, 0xffffffff
jmp 0x1404db6e6
jne 0x1404db731
cmp byte [rbp - 0x71], 0
jmp 0x1404db6f5
jmp 0x1404dba47
mov r8, r15
jmp 0x1404db706
lea rcx, [rsp + 0x48]
movsx edx, r15w
movsx rdx, r8w
setp dl
mov rdx, rdi
jmp 0x1404db71e
call fcn.1401c039c
cmp eax, 0xffffffff
jmp 0x1404db72b
je 0x1404dbac4
mov ecx, dword [rbp - 0x59]
mov r9b, r15b
sal r9, cl
lea rax, [rbp + 0xf]
xor r9w, r15w
bsr r9w, di
sub ebx, ebx
xor di, 0x24f9
lea r8, [rsp + 0x48]
mov qword [rsp + 0x38], rbx
mov r9b, 0xba
btr r9w, bx
lea rdi, [rsi + 1]
not r9w
mov qword [rsp + 0x30], rbx
mov r9d, r15d
test r13d, 0x39994c50
mov dword [rsp + 0x28], 5
xor edx, edx
jmp 0x1404db786
mov qword [rsp + 0x20], rax
call fcn.1404c912f
mov esi, eax
clc
test bx, 0x37db
cmp r15w, r14w
test eax, eax
jmp 0x1404db7a3
je 0x1404dbb7e
mov rcx, qword [rbp - 0x49]
movsx r8, r9w
lea r9, [rsp + 0x4c]
movzx dx, r12b
movsxd r8, edx
mov r8d, eax
jmp 0x1404db7c6
mov qword [rsp + 0x20], rbx
lea rdx, [rbp + 0xf]
jmp 0x1404db7d4
call qword [sym.imp.KERNEL32.dll_WriteFile]
xor r11d, r11d
clc
test eax, eax
je 0x1404dbb75
mov r15d, dword [rsp + 0x40]
btr bx, r8w
mov ebx, edi
clc
sub ebx, dword [rbp - 0x21]
test r13b, 0x53
add ebx, r15d
stc
mov dword [rbp - 0x65], ebx
test cx, 0x76e4
cmc
jmp 0x1404db80c
cmp dword [rsp + 0x4c], esi
jmp 0x1404db815
jb 0x1404dba3b
cmp byte [rsp + 0x44], 0xa
jmp 0x1404db825
jne 0x1404db8be
mov rcx, qword [rbp - 0x49]
cwde
lea eax, [r11 + 0xd]
mov dh, 0xf4
lea r9, [rsp + 0x4c]
mov word [rsp + 0x44], ax
movsx rdx, dx
bswap dx
movsx edx, r9w
lea r8d, [r11 + 1]
mov qword [rsp + 0x20], r11
cwd
xchg dx, dx
mov edx, r13d
lea rdx, [rsp + 0x44]
jmp 0x1404db867
call qword [sym.imp.KERNEL32.dll_WriteFile]
xor r11d, r11d
test eax, eax
jmp 0x1404db877
je 0x1404dbab4
cmp dword [rsp + 0x4c], 1
jmp 0x1404db887
jb 0x1404dba3b
inc r15d
movsx rsi, bp
jmp 0x1404db89e
inc ebx
sar sil, 0xcd
mov dword [rsp + 0x40], r15d
dec sil
rcl si, cl
mov dword [rbp - 0x65], ebx
shl sil, 0xf6
btc si, 0xae
shl sil, cl
mov rsi, rdi
cmp rdi, r13
jmp 0x1404db8c9
jae 0x1404dbad1
mov rax, qword [rbp - 0x19]
mov rdx, 0x31ef2e67
bswap rdx
movsx edx, r14w
mov edx, dword [rbp - 0x55]
jmp 0x1404db33d
mov edx, r11d
test bh, 0xbc
test r8, r8
jmp 0x1404db8f7
jle 0x1404db975
sub rdi, rsi
inc ch
movzx ebx, r9w
mov al, 9
lea rbx, [0x140000000]
movzx rcx, di
mov ch, 0x9a
jmp 0x1404db91b
mov al, byte [rdi + rsi]
seto cl
movzx ecx, dx
movsxd rcx, r10d
inc edx
bts ecx, ebx
rcr ch, cl
xchg cl, cl
mov rcx, qword [rbx + r12*8 + 0xba940]
jmp 0x1404db942
add rcx, rsi
jmp 0x1404db94a
inc rsi
mov byte [rcx + r14*8 + 0x3e], al
or rax, 0x6ea2a5a
movsxd rax, edx
cmp al, 0xe4
cmp rax, r8
jmp 0x1404db966
jl 0x1404db91b
mov ebx, dword [rbp - 0x65]
cmp r12b, al
test r12b, r13b
add ebx, r8d
jmp 0x1404db97d
jmp 0x1404dba38
mov r9d, r11d
test r13b, r14b
test rdx, rdx
jmp 0x1404db990
jle 0x1404dba2d
mov r13, qword [rbp - 0x11]
sar r10b, 0x62
mov r8, r11
or r11b, r12b
cmp r10b, 0xc1
xadd r10b, al
mov r10, r13
shl al, 0x86
sub r11b, 0x2b
and r13d, 0x3f
sar r10, 6
btr r11w, r14w
lea r11, [r13*8]
movsx cx, r11b
add r11, r13
inc rcx
mov al, byte [r8 + rdi]
inc r9d
bts cx, r9w
cmovl cx, si
rcr cx, cl
mov rcx, qword [r15 + r10*8 + 0xba940]
stc
cmp cl, r11b
add rcx, r8
jmp 0x1404db9fd
inc r8
cmp r14w, 0x5e79
jmp 0x1404dba0b
mov byte [rcx + r11*8 + 0x3e], al
add ax, 0x3429
movsxd rax, r9d
cmc
cmp dil, 0x2f
cmp rax, rdx
jmp 0x1404dba24
jl 0x1404db9d6
xor r11d, r11d
add ebx, edx
mov ch, dl
btc rcx, rax
xadd cl, ch
mov dword [rbp - 0x65], ebx
cmp byte [rbp - 0x71], r11b
movzx ecx, cx
movsxd rcx, ebp
mov cl, bl
mov ecx, dword [rsp + 0x40]
jmp 0x1404dbae0
mov al, byte [rdi]
movsx rcx, di
lea r8, [0x140000000]
cmovns ecx, r14d
movsx ecx, bx
mov cx, r15w
mov rcx, qword [r8 + r12*8 + 0xba940]
jmp 0x1404dba75
inc ebx
jmp 0x1404dba7f
mov dword [rbp - 0x65], ebx
cmp ax, 0x3502
mov byte [rcx + r14*8 + 0x3e], al
shrd eax, r14d, 0x7f
cbw
shl ah, 0x2a
mov rax, qword [r8 + r12*8 + 0xba940]
cmp bpl, 0xcf
or byte [rax + r14*8 + 0x3d], 4
cmp byte [rbp - 0x71], dl
jmp 0x1404dbaaf
jmp 0x1404dba47
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x69], eax
xadd rcx, rcx
sbb cl, r11b
mov ecx, dword [rsp + 0x40]
cmp byte [rbp - 0x71], 0
jmp 0x1404dbae0
mov ecx, dword [rsp + 0x40]
cmc
stc
cmp byte [rbp - 0x71], r11b
jmp 0x1404dbae0
je 0x1404dbafb
mov rax, qword [rsp + 0x50]
cmp bl, r14b
cmp edi, 0x5a951d40
and dword [rax + 0x3a8], 0xfffffffd
mov rax, qword [rbp - 9]
test r15w, 0x1995
movsd xmm0, qword [rbp - 0x69]
stc
movsd qword [rax], xmm0
cmp r15d, 0x4ec6769d
mov dword [rax + 8], ecx
sbb cx, 0x73ee
bts rcx, rdi
bts ecx, edx
mov rcx, qword [rbp + 0x17]
cmc
xor rcx, rsp
jmp 0x1404dbb32
call fcn.14049f5cb
mov rbx, qword [rsp + 0x140]
add rsp, 0x100
movzx rbp, r13w
pop r15
movzx rbp, r14w
pop r14
movsx rbp, r13w
pop r13
movsx r12w, sil
pop r12
pop rdi
xchg rbp, rbp
bswap rbp
pop rsi
cmovge rbp, rax
jmp 0x1404dbb73
pop rbp
ret
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x69], eax
mov ecx, dword [rsp + 0x40]
cmc
test r8, 0x763446f6
cmp byte [rbp - 0x71], bl
jmp 0x1404dbb92
jmp 0x1404dbae0