Function at 0x140048070
Capabilities:
Write file on windows

Disassembly:
push rbx
sub rsp, 0x40
movsxd rax, dword [0x1401bafe8]
mov rbx, rcx
imul rcx, rax, 0x38
mov rax, qword [0x140175020]
test dword [rcx + rax + 0x18], 0x10000
je 0x1400480b8
mov r8, qword [rcx + rax]
lea rcx, str._s_MONITOR:_s:
mov rdx, qword [section..data]
call fcn.140002310
lea rcx, str.Writing_section_2_n
call fcn.140001fb0
cmp dword [rbx + 0x100], 0
mov dword [rbx + 0x84], 0
je 0x140048108
movsxd rax, dword [rbx + 0x4c]
mov edx, 0x40
mov rcx, qword [rbx + 0x28]
add rax, 0x14
lea r8d, [rdx - 0x41]
lea r9, [rbx + rax*4]
call fcn.14007d820
test eax, eax
je 0x140048152
lea r8, [0x1401896d0]
mov edx, 1
mov ecx, 0x2b8f
add rsp, 0x40
pop rbx
jmp fcn.140001480
mov rax, qword [rbx + 8]
test dword [rax + 0x68], 0x800
jne 0x140048152
movsxd rax, dword [rbx + 0x4c]
mov edx, 0x40
mov rcx, qword [rbx + 0x28]
add rax, 0x14
lea r8d, [rdx - 0x41]
lea r9, [rbx + rax*4]
call fcn.14007d5a0
test eax, eax
je 0x140048152
lea r8, [0x140189700]
mov edx, 1
mov ecx, 0x2b91
add rsp, 0x40
pop rbx
jmp fcn.140001480
mov edx, 2
mov rcx, rbx
lea r9d, [rdx - 3]
lea r8d, [rdx + 2]
call qword [0x1401baf10]
mov r9d, 2
mov edx, 0x9b
mov rcx, rbx
lea r8d, [r9 - 3]
call qword [0x1401baf60]
mov rax, qword [rbx + 8]
mov ecx, dword [rax + 0x68]
movsxd rax, dword [rbx + 0x4c]
shl ecx, 0xd
not ecx
and ecx, 0x1000000
or ecx, 2
mov dword [rbx + rax*4 + 0x68], ecx
inc dword [rbx + 0x4c]
mov rax, qword [rbx + 0x18]
mov rax, qword [rax]
mov qword [rsp + 0x50], rax
test rax, rax
je 0x140048351
mov qword [rsp + 0x58], rbp
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], rdi
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r13
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r15
nop dword [rax + rax]
mov r13, qword [rax + 0x18]
test r13, r13
je 0x14004831c
nop dword [rax]
mov r12, qword [r13 + 0x10]
test r12, r12
je 0x14004830a
nop dword [rax]
mov r14, qword [r12 + 0x20]
test r14, r14
je 0x1400482fd
nop
call fcn.140008a90
mov r8d, dword [r14 + 0x18]
mov edx, send
mov r9d, dword [rbx + 0x84]
mov rcx, rbx
lea r8d, [r8*4 + 4]
call qword [0x1401baf10]
movsxd r15, dword [r14 + 0x18]
mov edx, 0x57
mov esi, dword [rbx + 0x90]
mov r9d, r15d
mov rcx, rbx
lea r8d, [rdx - 0x58]
call qword [0x1401baf60]
xor ebp, ebp
test r15d, r15d
jle 0x14004829c
xor edi, edi
nop
mov rax, qword [r14 + 0x10]
mov rcx, qword [rdi + rax]
mov r9d, dword [rcx]
test r9d, r9d
jns 0x140048280
mov r9d, dword [rbx + 0x90]
mov dword [rcx], r9d
inc dword [rbx + 0x90]
mov r8d, ebp
mov edx, send
mov rcx, rbx
call qword [0x1401baf60]
inc ebp
add rdi, 8
cmp ebp, r15d
jl 0x140048260
mov edx, send
mov rcx, rbx
call qword [0x1401baf18]
test eax, eax
jne 0x1400482eb
cmp esi, dword [rbx + 0x90]
je 0x1400482eb
xor edi, edi
mov dword [rbx + 0x90], esi
test r15d, r15d
jle 0x1400482eb
mov rax, qword [r14 + 0x10]
mov rdx, qword [rax + rdi*8]
cmp dword [rdx], esi
jne 0x1400482e3
mov rcx, rbx
call fcn.140041d90
inc dword [rbx + 0x90]
mov esi, dword [rbx + 0x90]
inc rdi
cmp rdi, r15
jl 0x1400482c3
inc dword [rbx + 0x84]
mov r14, qword [r14]
test r14, r14
jne 0x140048210
mov r12, qword [r12]
test r12, r12
jne 0x140048200
mov r13, qword [r13]
test r13, r13
jne 0x1400481f0
mov rax, qword [rsp + 0x50]
mov rax, qword [rax + 8]
mov qword [rsp + 0x50], rax
test rax, rax
jne 0x1400481e0
mov r15, qword [rsp + 0x20]
mov r14, qword [rsp + 0x28]
mov r13, qword [rsp + 0x30]
mov r12, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x60]
mov rbp, qword [rsp + 0x58]
mov edx, 2
mov rcx, rbx
add rsp, 0x40
pop rbx
jmp qword [0x1401baf18]