Function at 0x48c860
Capabilities:
Write file on windows

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rbx
mov rbp, rsp
sub rsp, 0x90
movabs rax, 0x6c75662074696d62
movabs r10, 0x756f6e6520746f6e
movabs r11, 0x6563617073206867
sub rdx, rcx
mov qword [rbp - 0x40], rax
mov r9, rcx
mov r8, rdx
lea rsi, [rdx + 1]
movabs rdx, 0x657220677562206c
lea rax, [r8 + 0x87]
mov qword [rbp - 0x38], rdx
movabs rcx, 0x2074612074726f70
movabs rdx, 0x2e756e672e636367
movabs r14, 0x726f6620726f6620
movabs r15, 0x617078652074616d
movabs r12, 0x5028206e6f69736e
movabs r13, 0x757320657361656c
movabs rbx, 0x2f2f3a7370747468
mov qword [rbp - 0x30], rcx
mov qword [rbp - 0x20], rdx
movabs rcx, 0x736775622f67726f
movabs rdx, 0x202020200a3a292f
and rax, 0xfffffffffffffff0
mov qword [rbp - 0x70], r10
mov qword [rbp - 0x68], r11
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x58], r15
mov qword [rbp - 0x50], r12
mov qword [rbp - 0x48], r13
mov qword [rbp - 0x28], rbx
mov qword [rbp - 0x18], rcx
mov qword [rbp - 0x10], rdx
mov byte [rbp - 8], 0
call fcn.0047f1f0
sub rsp, rax
lea rbx, [rsp + 0x20]
mov qword [rsp + 0x20], r10
mov qword [rsp + 0x28], r11
movabs r10, 0x6c75662074696d62
movabs r11, 0x657220677562206c
lea rcx, [rsp + 0x88]
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x38], r15
movabs r14, 0x2074612074726f70
mov qword [rsp + 0x50], r10
mov qword [rsp + 0x58], r11
movabs r10, 0x2e756e672e636367
movabs r11, 0x736775622f67726f
mov qword [rsp + 0x80], rdx
movabs r15, 0x2f2f3a7370747468
mov rdx, r9
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], r15
mov qword [rsp + 0x70], r10
mov qword [rsp + 0x78], r11
call sub.msvcrt.dll_memcpy
mov byte [rbx + rsi + 0x67], 0
mov rcx, rbx
call fcn.004a8270
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
push rdi
push rsi
push rbx
sub rsp, 0x30
cmp byte [0x004aa380], 0
jne 0x48c925
mov byte [0x004aa380], 1
call fcn.004a9700
test rax, rax
je 0x48c95e
mov rbx, qword [rax + 8]
cmp byte [rbx], 0x2a
je 0x48c94b
lea r9, [rsp + 0x2c]
xor r8d, r8d
xor edx, edx
mov rcx, rbx
mov dword [rsp + 0x2c], 0xffffffff
call fcn.0047daa0
mov rsi, qword [sym.imp.msvcrt.dll___iob_func]
mov rdi, rax
call rsi
lea rcx, str.terminate_called_after_throwing_an_instance_of_
lea r9, [rax + 0x60]
mov r8d, 0x30
mov edx, 1
call sub.msvcrt.dll_fwrite
cmp dword [rsp + 0x2c], 0
je 0x48c915
call rsi
lea rdx, [rax + 0x60]
mov rcx, rbx
call sub.msvcrt.dll_fputs
call rsi
lea rcx, [0x004b7591]
lea r9, [rax + 0x60]
mov r8d, 2
mov edx, 1
call sub.msvcrt.dll_fwrite
cmp dword [rsp + 0x2c], 0
je 0x48c954
call fcn.004a9920
call rsi
lea rdx, [rax + 0x60]
mov rcx, rdi
call sub.msvcrt.dll_fputs
jmp 0x48c8ec
call qword [sym.imp.msvcrt.dll___iob_func]
lea rcx, str.terminate_called_recursively_n
lea r9, [rax + 0x60]
mov r8d, 0x1d
mov edx, 1
call sub.msvcrt.dll_fwrite
call sub.msvcrt.dll_abort
add rbx, 1
jmp 0x48c896
mov rcx, rdi
call sub.msvcrt.dll_free
jmp 0x48c910
call qword [sym.imp.msvcrt.dll___iob_func]
lea rcx, str.terminate_called_without_an_active_exception_n
lea r9, [rax + 0x60]
mov r8d, 0x2d
mov edx, 1
call sub.msvcrt.dll_fwrite
call sub.msvcrt.dll_abort
sub rdx, 1
mov rcx, rax
jne 0x48c9e0
call fcn.004a9550
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x10]
mov rbx, rax
call rsi
lea r9, [rax + 0x60]
lea rcx, str.__what__:
mov r8d, 0xb
mov edx, 1
call sub.msvcrt.dll_fwrite
call rsi
lea rdx, [rax + 0x60]
mov rcx, rbx
call sub.msvcrt.dll_fputs
call rsi
lea rdx, [rax + 0x60]
mov ecx, 0xa
call sub.msvcrt.dll_fputc
call fcn.004a9770
jmp 0x48c97f
call fcn.004a9550
call fcn.004a9770
jmp 0x48c97f