Function at 0x1404db448
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
cwde
bswap eax
mov qword [rsp + 0x18], rbp
movsx eax, r13w
push rsi
cwde
cdqe
cmovbe rax, rbx
push rdi
push r12
movzx rax, r8w
push r14
cbw
movzx rax, ax
movzx ax, al
push r15
mov eax, 0x1470
jmp 0x1404db480
call fcn.1404478c5
sub rsp, rax
setae r12b
sal r12b, cl
mov rax, qword [0x1400b7288]
test sil, 0xf7
btr r15d, edi
rcl r15b, cl
xor rax, rsp
bts r14w, r14w
mov qword [rsp + 0x1460], rax
and di, 0x6d19
sal r15, cl
movsxd r10, edx
bsr di, r14w
dec dil
mov rbx, rcx
inc r15d
dec al
cmp spl, 0xb5
mov rax, r10
btr r12d, 0x24
sal r15w, cl
clc
mov r14d, r9d
bts cx, ax
add rdx, 0x63402c85
sar rax, 6
test r15b, 0xcd
shl r15b, 0x98
lea rcx, [0x1400ba940]
and r10d, 0x3f
xor edi, 0x715e1cb6
shl r12b, 0x83
add r14, r8
mov edx, esi
dec dil
mov r15, r8
cmovo dx, ax
cdq
mov rdi, r8
sbb r12w, bp
mov rax, qword [rcx + rax*8]
cqo
shl r12b, 0x50
lea rdx, [r10 + r10*8]
sar r12b, 0x2d
rol r12, cl
btc r12w, 0xfd
mov r12, qword [rax + rdx*8 + 0x28]
jmp 0x1404db549
sub eax, eax
cmc
jmp 0x1404db551
mov qword [rbx], rax
cmc
clc
jmp 0x1404db55b
cmp r8, r14
mov dword [rbx + 8], eax
jmp 0x1404db566
jae 0x1404db73b
lea rax, [rsp + 0x50]
cmp spl, dl
cmp rdi, r14
jae 0x1404db5df
movzx ecx, word [rdi]
add rdi, 2
test rsi, 0x74ff7b21
cmc
cmp cx, 0xa
jne 0x1404db5b6
mov edx, 0xd
cmp si, dx
test dil, 0x5c
cmc
mov word [rax], dx
test r12, 0x3e927889
add rax, 2
jmp 0x1404db5b6
mov word [rax], cx
sbb ecx, eax
add rax, 2
btc ecx, 0x61
bt cx, r13w
lea rcx, [rsp + 0x6f8]
cmp esi, edi
cmp r9b, 0x15
cmp rax, rcx
jb 0x1404db574
and qword [rsp + 0x38], 0
rcl r8b, 0xcd
bts r9d, r13d
lea rcx, [rsp + 0x50]
and qword [rsp + 0x30], 0
jmp 0x1404db601
lea r8, [rsp + 0x50]
movzx r9w, dil
sub rax, rcx
shr cx, cl
bsf r9w, sp
mov dword [rsp + 0x28], 0xd55
shr ecx, 0x96
clc
bts rcx, r15
lea rcx, [rsp + 0x700]
adc r9b, bpl
mov r9w, 0x1038
add r9b, 0x69
sar rax, 1
sub r9b, r10b
mov qword [rsp + 0x20], rcx
shl rcx, 0x9b
mov r9d, eax
xor cl, spl
mov ecx, 0xfde9
cmc
xor edx, edx
jmp 0x1404db65c
call fcn.1404c8440
mov ebp, eax
test bp, 0x1edb
cmp bh, 0xf1
test eax, eax
je 0x1404db72f
xor esi, esi
test eax, eax
jmp 0x1404db67c
je 0x1404db713
and qword [rsp + 0x20], 0
xor r9b, cl
xadd dh, dh
ror r8w, cl
lea rdx, [rsp + 0x700]
mov cx, r11w
movsx ecx, dx
test al, r15b
mov ecx, esi
or r8b, 0x5a
add r9w, 0xffa
xor r9d, 0x28b607d8
lea r9, [rsp + 0x40]
cmp rax, 0x41b16fa0
add r8, 0x371669c8
mov r8d, ebp
cmp r15w, 0x3bc7
jmp 0x1404db6d9
lea rdx, [rdx + rcx]
mov rcx, r12
cmc
sub r8d, esi
jmp 0x1404db6e9
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jmp 0x1404db6f6
je 0x1404db72f
add esi, dword [rsp + 0x40]
cmp r12w, 0x4ee7
cmp esi, ebp
jmp 0x1404db70d
jb 0x1404db682
mov eax, edi
cmc
jmp 0x1404db71b
sub eax, r15d
mov dword [rbx + 4], eax
cmc
cmp rdi, r14
jmp 0x1404db72a
jmp 0x1404db566
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbx], eax
bts rcx, rdx
mov rax, rbx
sar rcx, cl
mov cl, r14b
bt cx, r12w
mov rcx, qword [rsp + 0x1460]
cmc
test r8, r8
xor rcx, rsp
jmp 0x1404db75d
call fcn.14049eb1e
lea r11, [rsp + 0x1470]
xchg bx, r15w
movsx ebx, si
bswap r12d
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x40]
setae r14b
movzx r14, bx
movzx r15w, r10b
mov rsp, r11
movzx r12d, r12w
movsx r15w, cl
setae r14b
pop r15
pop r14
jmp 0x1404db7a6
pop r12
movsx si, spl
movsx edi, r14w
xchg sil, dil
pop rdi
setns sil
pop rsi
ret