Function at 0x1400284c8
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x60
xor esi, esi
movsxd r13, ecx
mov r15d, r8d
mov rbx, rdx
test r8d, r8d
je 0x140028725
test rdx, rdx
jne 0x140028517
call fcn.14001ae18
mov dword [rax], esi
call fcn.14001ae38
mov dword [rax], 0x16
call fcn.14001acf0
or eax, 0xffffffff
jmp 0x140028727
mov rax, r13
lea rcx, [0x14005c7b0]
and eax, 0x3f
mov dl, 1
mov r12, r13
sar r12, 6
lea rdi, [rax + rax*8]
mov rcx, qword [rcx + r12*8]
movsx r14d, byte [rcx + rdi*8 + 0x39]
mov al, r14b
sub al, dl
cmp al, dl
ja 0x14002854d
mov eax, r15d
not eax
test dl, al
je 0x1400284f8
test byte [rcx + rdi*8 + 0x38], 0x20
je 0x140028562
xor edx, edx
mov ecx, r13d
lea r8d, [rdx + 2]
call fcn.140028db4
mov ecx, r13d
mov qword [rbp - 0x30], rsi
call fcn.14002fcac
test eax, eax
je 0x140028612
lea rax, [0x14005c7b0]
mov rax, qword [rax + r12*8]
cmp byte [rax + rdi*8 + 0x38], sil
jge 0x140028612
call fcn.1400254d0
mov rcx, qword [rax + 0x90]
cmp qword [rcx + 0x138], rsi
jne 0x1400285b3
lea rax, [0x14005c7b0]
mov rax, qword [rax + r12*8]
cmp byte [rax + rdi*8 + 0x39], sil
je 0x140028612
lea rax, [0x14005c7b0]
mov rcx, qword [rax + r12*8]
lea rdx, [rbp - 0x10]
mov rcx, qword [rcx + rdi*8 + 0x28]
call qword [sym.imp.KERNEL32.dll_GetConsoleMode]
test eax, eax
je 0x140028612
test r14b, r14b
je 0x1400285fe
dec r14b
cmp r14b, 1
ja 0x1400286af
mov r8d, r15d
lea rcx, [rbp - 0x20]
mov rdx, rbx
call fcn.140027eec
movsd xmm0, qword [rax]
mov esi, dword [rax + 8]
jmp 0x1400286aa
mov r9d, r15d
lea rcx, [rbp - 0x20]
mov r8, rbx
mov edx, r13d
call fcn.1400279e4
jmp 0x1400285f2
lea rax, [0x14005c7b0]
mov rcx, qword [rax + r12*8]
cmp byte [rcx + rdi*8 + 0x38], sil
jge 0x140028672
mov ecx, r14d
test r14b, r14b
je 0x14002865e
sub ecx, 1
je 0x14002864a
cmp ecx, 1
jne 0x1400286af
mov r9d, r15d
lea rcx, [rbp - 0x20]
mov r8, rbx
mov edx, r13d
call fcn.1400280d8
jmp 0x1400285f2
mov r9d, r15d
lea rcx, [rbp - 0x20]
mov r8, rbx
mov edx, r13d
call fcn.140028228
jmp 0x1400285f2
mov r9d, r15d
lea rcx, [rbp - 0x20]
mov r8, rbx
mov edx, r13d
call fcn.140027fa0
jmp 0x1400285f2
mov rcx, qword [rcx + rdi*8 + 0x28]
lea r9, [rbp - 0x1c]
xor eax, eax
mov r8d, r15d
and qword [rsp + 0x20], rax
mov rdx, rbx
mov qword [rbp - 0x20], rax
mov dword [rbp - 0x18], eax
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x1400286a2
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x20], eax
movsd xmm0, qword [rbp - 0x20]
mov esi, dword [rbp - 0x18]
movsd qword [rbp - 0x30], xmm0
mov rax, qword [rbp - 0x30]
shr rax, 0x20
test eax, eax
jne 0x14002871e
mov eax, dword [rbp - 0x30]
test eax, eax
je 0x1400286ef
cmp eax, 5
jne 0x1400286e2
call fcn.14001ae38
mov dword [rax], 9
call fcn.14001ae18
mov dword [rax], 5
jmp 0x14002850f
mov ecx, dword [rbp - 0x30]
call fcn.14001add0
jmp 0x14002850f
lea rax, [0x14005c7b0]
mov rax, qword [rax + r12*8]
test byte [rax + rdi*8 + 0x38], 0x40
je 0x140028706
cmp byte [rbx], 0x1a
je 0x140028725
call fcn.14001ae38
mov dword [rax], 0x1c
call fcn.14001ae18
and dword [rax], 0
jmp 0x14002850f
mov eax, dword [rbp - 0x2c]
sub eax, esi
jmp 0x140028727
xor eax, eax
mov rbx, qword [rsp + 0xb8]
add rsp, 0x60
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret