Function at 0x1404dd020
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
movsxd rax, r13d
mov qword [rsp + 0x18], rbp
xchg ah, ah
push rsi
mov al, 0x7b
movsx ax, r12b
movsx rax, di
push rdi
movzx eax, r12w
movzx ax, dh
push r12
movzx eax, sp
push r14
push r15
movsxd rax, ecx
mov eax, 0x1470
jmp 0x1404dd05a
call fcn.140448f9b
sub rsp, rax
lahf
test r11b, dil
ror bh, 0xe9
mov rax, qword [0x1400b7288]
shl bl, cl
xor rax, rsp
rol rdi, cl
btr r12w, 0xc8
add edi, r13d
mov qword [rsp + 0x1460], rax
ror r15, cl
btr r15w, 0xd3
movsxd r10, edx
sets r12b
mov rbx, rcx
mov rax, r10
mov r14d, r9d
sar rax, 6
bswap edx
movsx r12w, r10b
lea rcx, [0x1400ba940]
and r10d, 0x3f
sal r15b, 0x62
rcl rdx, 0x19
add r14, r8
mov r15, r8
sub dil, bpl
mov rdi, r8
bswap r12
cmp spl, sil
mov rax, qword [rcx + rax*8]
rcl dl, cl
sal r12w, 0x44
lea rdx, [r10 + r10*8]
sal r12d, cl
btr r12w, di
mov r12, qword [rax + rdx*8 + 0x28]
cmp al, 0x41
test bx, r10w
sub eax, eax
mov qword [rbx], rax
test cx, 0x75e
test dl, r11b
cmp r8, r14
jmp 0x1404dd109
mov dword [rbx + 8], eax
jmp 0x1404dd111
jae 0x1404dd2ca
lea rax, [rsp + 0x50]
cmc
cmp rdi, rdx
cmp rdi, r14
jae 0x1404dd187
movzx ecx, word [rdi]
clc
test sil, 0xa8
add rdi, 2
jmp 0x1404dd13b
cmp cx, 0xa
jmp 0x1404dd144
jne 0x1404dd15f
mov edx, 0xd
cmp r15b, dil
mov word [rax], dx
test spl, 0xba
stc
add rax, 2
cmc
mov word [rax], cx
test spl, 0xcb
sar rcx, 0x65
add rax, 2
jmp 0x1404dd176
lea rcx, [rsp + 0x6f8]
cmp rax, rcx
jb 0x1404dd120
and qword [rsp + 0x38], 0
bswap rcx
cmp r8w, 0x7744
shl cx, cl
lea rcx, [rsp + 0x50]
shl r8w, 0xde
sar r9b, cl
and qword [rsp + 0x30], 0
sal r8w, cl
sal r8w, 0x51
sbb r9b, 0x7c
lea r8, [rsp + 0x50]
and r9b, r12b
sub rax, rcx
mov dword [rsp + 0x28], 0xd55
cmp bl, ch
lea rcx, [rsp + 0x700]
sar rax, 1
ror r9b, cl
mov qword [rsp + 0x20], rcx
cmp rdi, r9
mov r9d, eax
movsxd rcx, edi
mov ecx, 0xfde9
jmp 0x1404dd1fa
sub edx, edx
jmp 0x1404dd201
call fcn.1404c9fc1
mov ebp, eax
cmp r10w, r10w
test eax, eax
jmp 0x1404dd213
je 0x1404dd2bc
sub esi, esi
cmp spl, 0x12
test eax, eax
je 0x1404dd2a0
and qword [rsp + 0x20], 0
sar ecx, 0x54
lea rdx, [rsp + 0x700]
sub r9w, 0x1d9b
rcl r9w, 0x23
bts cx, r11w
mov ecx, esi
test dx, di
sub r8w, bx
cmp r8b, 0xed
lea r9, [rsp + 0x40]
ror r8w, cl
bsr r8, r8
mov r8d, ebp
cmp r13d, ebp
lea rdx, [rdx + rcx]
xor cl, r9b
mov rcx, r12
clc
cmc
sub r8d, esi
jmp 0x1404dd27c
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jmp 0x1404dd289
je 0x1404dd2bc
add esi, dword [rsp + 0x40]
cmp dl, r11b
stc
cmc
cmp esi, ebp
jb 0x1404dd227
mov eax, edi
test edi, eax
sub eax, r15d
cmp r13w, 0x404b
mov dword [rbx + 4], eax
test dil, 0x2c
cmp rdi, r14
jmp 0x1404dd111
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbx], eax
adc cl, r11b
xchg cx, ax
clc
mov rax, rbx
mov rcx, qword [rsp + 0x1460]
xor rcx, rsp
jmp 0x1404dd2dd
call fcn.1404a0622
lea r11, [rsp + 0x1470]
mov r12, 0x5275662f
mov rbx, qword [r11 + 0x30]
movzx rbp, di
mov rbp, qword [r11 + 0x40]
movsx r14d, r12w
not r14w
movsx rdi, ax
mov rsp, r11
xchg r15b, sil
movsx r15d, dx
pop r15
movsx edi, r12w
movsx di, bl
pop r14
movsx di, r12b
xchg dil, sil
pop r12
movzx rsi, r15w
pop rdi
mov si, 0x72e3
pop rsi
jmp 0x1404dd338
ret