Function at 0x1404dceda
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
movsxd rax, esp
movzx rax, bp
cdqe
mov qword [rsp + 0x18], rbp
mov al, r15b
mov al, 0xa6
movsx rax, r10w
push rsi
movsx eax, ax
push rdi
mov ax, si
movsx rax, di
push r12
xchg ah, ah
jmp 0x1404dcf0b
push r14
movsxd rax, ecx
setbe al
mov al, 0x1b
push r15
movsx ax, r12b
jmp 0x1404dcf21
mov eax, 0x1470
jmp 0x1404dcf2b
call fcn.140449554
sub rsp, rax
bts r12, rcx
mov rax, qword [0x1400b7288]
jmp 0x1404dcf43
xor rax, rsp
adc r15w, 0x2d7e
bt r15w, r10w
mov r14w, r15w
mov qword [rsp + 0x1460], rax
stc
bts rdi, r9
movsxd r10, edx
mov rbx, rcx
bts di, bp
cmp r9b, r12b
mov rax, r10
mov r14d, r9d
mov r12b, 6
test sil, 0x99
sar rax, 6
lea rcx, [0x1400ba940]
cwd
cmp cl, 0xb6
and r10d, 0x3f
dec r12b
add dx, r15w
shld r12d, r10d, 0xa
add r14, r8
mov r15, r8
shr r12w, 4
sar r12b, cl
not r12b
mov rdi, r8
and r12, 0x220a0bde
not r12d
add dx, 0x4811
mov rax, qword [rcx + rax*8]
movzx r12d, cx
lea rdx, [r10 + r10*8]
btr r12w, 0xd6
bsr r12w, di
mov r12, qword [rax + rdx*8 + 0x28]
sub eax, eax
cmp cx, r15w
stc
mov qword [rbx], rax
test si, 0xe5b
cmp r8, r14
jmp 0x1404dcff2
mov dword [rbx + 8], eax
jmp 0x1404dcffa
jae 0x1404dd18b
lea rax, [rsp + 0x50]
test r13b, 0xf2
test cx, r13w
cmp rdi, r14
jmp 0x1404dd015
jae 0x1404dd073
movzx ecx, word [rdi]
cmp r15b, 0x63
clc
add rdi, 2
test sp, 0x244e
stc
cmp cx, 0xa
jmp 0x1404dd036
jne 0x1404dd053
mov edx, 0xd
mov word [rax], dx
cmp r10b, spl
test r8d, ebx
add rax, 2
stc
test r9w, di
mov word [rax], cx
add rax, 2
setbe cl
lea rcx, [rsp + 0x6f8]
cmp rax, rcx
jmp 0x1404dd06d
jb 0x1404dd00d
and qword [rsp + 0x38], 0
rol ch, cl
seta r9b
shld ecx, r13d, 0xd0
lea rcx, [rsp + 0x50]
or r8b, 0x4f
and qword [rsp + 0x30], 0
lea r8, [rsp + 0x50]
sub rax, rcx
or r9w, 0x4daa
test r15w, 0x4a6b
cmp sil, 0xb1
mov dword [rsp + 0x28], 0xd55
btc ecx, r10d
lea rcx, [rsp + 0x700]
cmp rdi, rdx
xchg r9b, r9b
sar rax, 1
cmp rbx, r13
mov qword [rsp + 0x20], rcx
mov r9d, ebp
mov r9d, eax
mov ecx, 0xfde9
sub edx, edx
call fcn.1404c9e75
mov ebp, eax
clc
test eax, eax
jmp 0x1404dd0ec
je 0x1404dd183
sub esi, esi
test eax, eax
jmp 0x1404dd0fb
je 0x1404dd164
and qword [rsp + 0x20], 0
bsr r9w, sp
lea rdx, [rsp + 0x700]
mov ecx, esi
cmc
btr r8w, r8w
and r8w, 0x4de3
lea r9, [rsp + 0x40]
stc
clc
sar r8b, cl
mov r8d, ebp
lea rdx, [rdx + rcx]
movsx cx, sil
mov rcx, r12
sub r8d, esi
jmp 0x1404dd143
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jmp 0x1404dd150
je 0x1404dd183
add esi, dword [rsp + 0x40]
stc
clc
cmp esi, ebp
jb 0x1404dd101
mov eax, edi
cmc
sub eax, r15d
test edi, eax
jmp 0x1404dd171
mov dword [rbx + 4], eax
stc
clc
cmp rdi, r14
jmp 0x1404dd17e
jmp 0x1404dcffa
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbx], eax
mov rax, rbx
or cx, r15w
mov rcx, qword [rsp + 0x1460]
jmp 0x1404dd1a2
xor rcx, rsp
jmp 0x1404dd1aa
call fcn.1404a0519
lea r11, [rsp + 0x1470]
mov bpl, al
bswap r14w
cmovne rdi, rbp
mov rbx, qword [r11 + 0x30]
movsx r14, si
mov rbp, qword [r11 + 0x40]
xchg r12w, di
mov rsp, r11
pop r15
setbe r14b
movsx r14w, bl
not sil
pop r14
movsx rsi, r10w
xchg r12b, sil
pop r12
pop rdi
bswap si
movsx rsi, bp
pop rsi
jmp 0x1404dd1fc
ret