Function at 0x14048eab1
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
bts ax, r8w
push rbp
movzx rbp, sp
push rsi
shrd eax, r13d, 0x88
jmp 0x14048eadb
push rdi
and rax, 0x359e7a30
bts si, r14w
push r12
push r13
push r14
mov r12b, 0xb4
rcr al, 0x95
movsx r14, r13w
push r15
shr r15w, 0x27
lea rbp, [rsp - 0x27]
movsx r12w, r14b
sub r15d, 0x7d38178e
shr r13d, 0x80
sub rsp, 0x100
mov rax, qword [0x1400b4278]
btc r14w, 0x84
neg sil
bts r15w, r10w
xor rax, rsp
movsx r14, di
add r12b, r12b
cmp r14w, 0x5b26
mov qword [rbp + 0x17], rax
movsx r12d, di
dec r12b
movsxd rsi, edx
mov r15, r8
shrd r13w, cx, 0x31
cwde
mov rax, rsi
cmc
mov qword [rbp - 9], rcx
adc r13w, 0x68e2
mov qword [rbp - 0x11], rax
bsf r14, r15
movsx r13, bp
movsxd rcx, edi
lea rcx, [0x140002000]
and eax, 0x3f
bsr r14d, r10d
movsx r13d, ax
add r13b, al
mov r13d, r9d
neg r14b
bsf r12d, esp
add r14w, r12w
lea r13, [r13 + r8]
add r14b, dl
mov qword [rbp - 0x21], r8
shl r14, 0x89
cmc
mov r12, rsi
mov qword [rbp - 0x51], r13
sar r12, 6
lea r14, [rax + rax*8]
mov rax, qword [rcx + r12*8 + 0xb5aa0]
mov rax, qword [rax + r14*8 + 0x28]
jmp 0x14048ebca
mov qword [rbp - 0x49], rax
jmp 0x14048ebd3
call qword [sym.imp.KERNEL32.dll_GetConsoleOutputCP]
xor edx, edx
cmovp cx, r13w
lea rcx, [rsp + 0x50]
jmp 0x14048ebea
mov dword [rbp - 0x59], eax
call fcn.14045861f
mov rcx, qword [rsp + 0x58]
bswap rdi
btr rdx, r10
xor r11d, r11d
ror edi, cl
mov dword [rbp - 0x69], r11d
shrd rbx, r15, 0xfc
shld ebx, ebp, 0x5a
mov ebx, r11d
movsx dx, r11b
adc dl, 0x45
xor edi, edi
mov dword [rbp - 0x65], ebx
xadd dil, dl
neg dil
movzx edi, si
mov rdi, r15
clc
sar dl, cl
rol dl, 1
mov edx, dword [rcx + 0xc]
bswap cx
mov ecx, r11d
mov dword [rsp + 0x40], ecx
test r11, 0x19c51d9f
mov dword [rbp - 0x55], edx
jmp 0x14048ec4f
cmp r15, r13
jmp 0x14048ec57
jae 0x14048f42b
mov rax, rsi
and cl, cl
mov rsi, r15
btr r15, 0xf7
sar rax, 6
add r15b, 0x6f
dec r15w
mov qword [rbp - 0x19], rax
mov cl, byte [rdi]
mov r15d, 1
test ah, 0x1c
test r14b, bpl
mov byte [rsp + 0x44], cl
test dl, bl
stc
clc
mov dword [rsp + 0x48], r11d
cmp r12, r11
stc
jmp 0x14048ec9e
cmp edx, 0xfde9
jmp 0x14048eca9
jne 0x14048efd0
lea r15, [0x140002000]
mov edx, r11d
rcr r9w, 0xb2
or rsi, 0x52062712
mov r9, qword [r15 + rax*8 + 0xb5aa0]
mov rsi, r11
lea rax, [r9 + r14*8]
test r8b, 0xc1
test bpl, r11b
cmp byte [rax + rsi + 0x3e], r11b
jmp 0x14048ece5
je 0x14048ed00
inc edx
inc rsi
clc
jmp 0x14048ecf6
cmp rsi, 5
jl 0x14048ecdb
test rsi, rsi
jmp 0x14048ed08
jle 0x14048eeff
mov rax, qword [r15 + r12*8 + 0xb5aa0]
xadd r10w, r10w
rcl r10, cl
bt r13, 0xa3
mov r8, qword [rbp - 0x51]
sub r8, rdi
mov r13b, 0x6c
movzx r13w, dl
movsxd r10, ebp
movzx ecx, byte [rax + r14*8 + 0x3e]
not r13
dec r13d
movsx r10, r14w
movsx r15d, byte [rcx + r15 + 0xb2d00]
movsx r13, di
movsx r10d, bx
movzx r10w, sil
inc r15d
or r10b, 0x8a
movsxd r13, edi
mov r13d, r15d
sal r10, 3
xchg r10w, r10w
xadd r10b, r10b
sub r13d, edx
movsxd r10, r13d
cmc
cmp r10, r8
jg 0x14048f269
lea rax, [rbp - 1]
movzx rdx, r13w
sar r8b, 0xe4
mov rdx, r11
sub r9, rax
or cl, r8b
sar al, 0x14
lea r8, [r9 + r14*8]
btc ecx, edi
bsf ecx, eax
test dl, 0xe7
lea rcx, [rbp - 1]
add rcx, rdx
not al
inc rdx
adc al, r13b
mov al, byte [rcx + r8 + 0x3e]
mov byte [rcx], al
cmp edi, 0x22442c77
cmp rdx, rsi
jmp 0x14048edcd
jl 0x14048eda9
test r13d, r13d
jmp 0x14048eddb
jle 0x14048ee0e
lea rcx, [rbp - 1]
mov r8, r10
add rcx, rsi
movsxd rdx, eax
bswap dx
mov dl, bpl
mov rdx, rdi
jmp 0x14048edfc
call fcn.140457667
xor r11d, r11d
movzx r8, r11w
bt r8w, 0x7f
mov rdx, r11
shrd ecx, edi, 0x50
lea r8, [0x140002000]
mov rcx, qword [r8 + r12*8 + 0xb5aa0]
test sil, r13b
cmp r15, 0xd0864e4
add rcx, rdx
inc rdx
cmp bh, 0x18
mov byte [rcx + r14*8 + 0x3e], r11b
cmp rdx, rsi
jmp 0x14048ee44
jl 0x14048ee1c
lea rax, [rbp - 1]
sal r8, 0x8a
mov qword [rbp - 0x41], r11
mov qword [rbp - 0x39], rax
rcr cx, 0xfd
sbb ax, 0x416
bsf r8, rcx
lea r9, [rbp - 0x41]
shl r8b, 0xc2
movzx edx, r11w
shr dx, 0x8d
mov eax, r11d
lea rdx, [rbp - 0x39]
shr r8b, cl
movsxd r8, r9d
cmp r15d, 4
cmovns rcx, rbp
lea rcx, [rsp + 0x48]
mov r15w, 0x1d64
sete al
movzx r8w, r14b
movzx r8d, r11w
dec r15d
inc eax
mov r8d, 0x499b0308
jmp 0x14048eeb4
mov r8d, eax
not r15b
mov r15d, eax
jmp 0x14048eec2
call fcn.140494747
cmp rax, 0xffffffffffffffff
jmp 0x14048eed0
je 0x14048f09c
lea eax, [r13 - 1]
setns r13b
cmp r8b, sil
mov r13, qword [rbp - 0x51]
xor sil, 0xb5
setle sil
movsxd rsi, eax
stc
cmc
add rsi, rdi
jmp 0x14048eefa
jmp 0x14048f0ca
movzx eax, byte [rdi]
stc
cdq
or cx, 0x38af
mov rdx, r13
setl sil
jmp 0x14048ef18
sub rdx, rdi
movsx rsi, byte [rax + r15 + 0xb2d00]
inc ah
xadd cl, cl
btr eax, 0x61
lea ecx, [rsi + 1]
bswap eax
bts eax, r11d
movsxd rax, ecx
test r12b, 0x70
cmc
cmp rax, rdx
jmp 0x14048ef46
jg 0x14048f300
cmp ecx, 4
movzx ebx, cx
lahf
movzx r8w, sil
mov qword [rbp - 0x31], r11
cwde
movzx bx, r15b
cmovb rbx, rbx
mov eax, r11d
jmp 0x14048ef6e
mov qword [rbp - 0x29], rdi
movsxd rdx, r10d
movzx ebx, cx
sete al
movsxd rdx, esi
jmp 0x14048ef83
lea r9, [rbp - 0x31]
movzx r8w, r14b
cdq
inc eax
lea rdx, [rbp - 0x29]
movzx rcx, r9w
mov r8d, eax
bswap ecx
lea rcx, [rsp + 0x48]
mov ebx, eax
jmp 0x14048efa8
call fcn.140494747
cmp rax, 0xffffffffffffffff
jmp 0x14048efb6
je 0x14048f09c
add rsi, rdi
mov r15w, r10w
jmp 0x14048efc8
mov r15d, ebx
jmp 0x14048f0ca
lea rax, [0x140002000]
mov rdx, qword [rax + r12*8 + 0xb5aa0]
and cl, 0xef
mov cl, byte [rdx + r14*8 + 0x3d]
stc
clc
cmp al, dil
test cl, 4
jmp 0x14048eff4
je 0x14048f037
mov al, byte [rdx + r14*8 + 0x3e]
cmp edx, ecx
cmp r15, 0x19f82509
and cl, 0xfb
jmp 0x14048f010
mov byte [rbp + 7], al
mov al, byte [rdi]
jmp 0x14048f01a
mov byte [rdx + r14*8 + 0x3d], cl
cmovo dx, r8w
cwd
lea rdx, [rbp + 7]
jmp 0x14048f02f
mov byte [rbp + 8], al
jmp 0x14048f07b
call fcn.14045ed52
movzx ecx, byte [rdi]
cmp dh, 0xec
test r8w, 0x1949
clc
sub edx, edx
cmp r12b, sil
cmp word [rax + rcx*2], dx
jge 0x14048f0a5
inc rsi
clc
test r15b, spl
cmp rdi, rbp
cmp rsi, r13
jmp 0x14048f06a
jae 0x14048f3a8
mov rdx, rdi
movsx cx, r13b
movsxd rcx, r14d
mov r8d, 2
setg ch
lea rcx, [rsp + 0x48]
jmp 0x14048f08e
call fcn.140118bac
cmp eax, 0xffffffff
jne 0x14048f0ca
cmp byte [rbp - 0x71], 0
jmp 0x14048f39f
mov r8, r15
lea rcx, [rsp + 0x48]
cqo
mov rdx, rdi
jmp 0x14048f0b7
call fcn.140118bac
cmp eax, 0xffffffff
jmp 0x14048f0c4
je 0x14048f409
mov ecx, dword [rbp - 0x59]
lea rax, [rbp + 0xf]
sub r8, r8
xor ebx, ebx
movzx di, r14b
lea r8, [rsp + 0x48]
movsx r9d, sp
mov qword [rsp + 0x38], rbx
sub dil, 0xc2
lea rdi, [rsi + 1]
mov qword [rsp + 0x30], rbx
jmp 0x14048f0fb
mov r9d, r15d
cmc
mov dword [rsp + 0x28], 5
jmp 0x14048f112
sub edx, edx
jmp 0x14048f119
mov qword [rsp + 0x20], rax
jmp 0x14048f123
call fcn.14047c8b4
mov esi, eax
cmc
test eax, eax
jmp 0x14048f132
je 0x14048f4f1
mov rcx, qword [rbp - 0x49]
mov r9w, 0x330d
lea r9, [rsp + 0x4c]
xchg dx, r8w
setl dl
movzx rdx, di
mov r8d, eax
movsx edx, bp
mov qword [rsp + 0x20], rbx
cdq
jmp 0x14048f162
lea rdx, [rbp + 0xf]
call qword [sym.imp.KERNEL32.dll_WriteFile]
sub r11d, r11d
cmp r8w, si
test eax, eax
jmp 0x14048f17a
je 0x14048f4e2
mov r15d, dword [rsp + 0x40]
sal bl, 0xe0
mov ebx, edi
test r10w, di
sub ebx, dword [rbp - 0x21]
cmp rbp, r15
add ebx, r15d
jmp 0x14048f1a0
mov dword [rbp - 0x65], ebx
jmp 0x14048f1a9
cmp dword [rsp + 0x4c], esi
jmp 0x14048f1b2
jb 0x14048f39b
cmp byte [rsp + 0x44], 0xa
jmp 0x14048f1c2
jne 0x14048f23e
mov rcx, qword [rbp - 0x49]
cbw
lea eax, [r11 + 0xd]
bswap rdx
lea r9, [rsp + 0x4c]
jmp 0x14048f1df
mov word [rsp + 0x44], ax
bswap r8d
movzx r8d, si
movsx rdx, r9w
lea r8d, [r11 + 1]
mov qword [rsp + 0x20], r11
lea rdx, [rsp + 0x44]
jmp 0x14048f202
call qword [sym.imp.KERNEL32.dll_WriteFile]
sub r11d, r11d
test eax, eax
je 0x14048f400
cmp dword [rsp + 0x4c], 1
jb 0x14048f39b
inc r15d
not esi
inc ebx
mov sil, bpl
rol sil, cl
bt rsi, rbp
mov dword [rsp + 0x40], r15d
shl si, cl
mov dword [rbp - 0x65], ebx
rcr sil, 0xf5
mov rsi, rdi
clc
cmp rdi, r13
jmp 0x14048f24a
jae 0x14048f420
mov rax, qword [rbp - 0x19]
movsx dx, r10b
not dx
mov edx, dword [rbp - 0x55]
jmp 0x14048f264
jmp 0x14048ec7a
mov edx, r11d
jmp 0x14048f271
test r8, r8
jmp 0x14048f279
jle 0x14048f2f3
sub rdi, rsi
setb al
movsx ecx, r11w
xchg al, al
lea rbx, [0x140002000]
movsx ecx, di
movsx rcx, sp
dec al
mov al, byte [rdi + rsi]
setnp cl
jmp 0x14048f2a8
inc edx
shl ch, 0x3c
adc cl, 0xb3
btr cx, r13w
mov rcx, qword [rbx + r12*8 + 0xb5aa0]
add rcx, rsi
jmp 0x14048f2c5
inc rsi
mov byte [rcx + r14*8 + 0x3e], al
bswap rax
or ah, 0x33
sbb rax, 0x218f3706
movsxd rax, edx
cmp rax, r8
jl 0x14048f29b
mov ebx, dword [rbp - 0x65]
test r15d, edx
test edi, 0x481061a3
stc
add ebx, r8d
jmp 0x14048f2fb
jmp 0x14048f393
mov r9d, r11d
test rdx, rdx
jmp 0x14048f30b
jle 0x14048f391
mov r13, qword [rbp - 0x11]
sar r10d, cl
setno r10b
mov r8, r11
mov r10, r13
cmovs r11, rbp
inc al
and r13d, 0x3f
sar r10, 6
movsx r11d, dx
lea r11, [r13*8]
add r11, r13
bswap ecx
mov al, byte [r8 + rdi]
jmp 0x14048f352
inc r9d
mov rcx, qword [r15 + r10*8 + 0xb5aa0]
add rcx, r8
jmp 0x14048f365
inc r8
test r14, 0x37313f2f
mov byte [rcx + r11*8 + 0x3e], al
movsxd rax, r9d
clc
stc
cmp rax, rdx
jl 0x14048f341
xor r11d, r11d
rol cx, 0x92
sub rcx, 0x78b6148a
stc
add ebx, edx
mov dword [rbp - 0x65], ebx
shrd cx, bp, 0x53
cmp byte [rbp - 0x71], r11b
mov ecx, dword [rsp + 0x40]
jmp 0x14048f434
mov al, byte [rdi]
dec r8b
lea r8, [0x140002000]
bswap cx
inc cl
mov rcx, qword [r8 + r12*8 + 0xb5aa0]
jmp 0x14048f3c6
inc ebx
cmc
clc
mov dword [rbp - 0x65], ebx
cmc
mov byte [rcx + r14*8 + 0x3e], al
sal ax, cl
mov ax, 0x4374
movsxd rax, esi
mov rax, qword [r8 + r12*8 + 0xb5aa0]
or byte [rax + r14*8 + 0x3d], 4
cmp rax, 0x56d11c46
clc
cmp byte [rbp - 0x71], dl
jmp 0x14048f3fb
jmp 0x14048f39f
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x69], eax
mov ecx, dword [rsp + 0x40]
jmp 0x14048f412
cmp byte [rbp - 0x71], 0
jmp 0x14048f41b
jmp 0x14048f434
mov ecx, dword [rsp + 0x40]
jmp 0x14048f42b
cmp byte [rbp - 0x71], r11b
jmp 0x14048f434
je 0x14048f44c
mov rax, qword [rsp + 0x50]
clc
and dword [rax + 0x3a8], 0xfffffffd
adc ax, bp
cdqe
mov rax, qword [rbp - 9]
jmp 0x14048f45b
movsd xmm0, qword [rbp - 0x69]
test r14b, r8b
stc
movsd qword [rax], xmm0
cmp cx, 0x9b4
stc
mov dword [rax + 8], ecx
cmovo ecx, r14d
mov rcx, qword [rbp + 0x17]
cmc
xor rcx, rsp
jmp 0x14048f482
call fcn.1404525ed
mov rbx, qword [rsp + 0x140]
add rsp, 0x100
mov rsi, 0x3d7c6298
mov r12b, r13b
bswap r13
pop r15
mov bpl, bl
pop r14
pop r13
jmp 0x14048f4b9
pop r12
movsxd rbp, ecx
setbe dil
mov sil, spl
pop rdi
xchg sil, sil
cmovbe si, r15w
not rsi
pop rsi
movsx bp, r8b
movsx rbp, r10w
pop rbp
jmp 0x14048f4e1
ret
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x69], eax
neg cx
sar ch, cl
clc
mov ecx, dword [rsp + 0x40]
cmp byte [rbp - 0x71], bl
jmp 0x14048f4fd
jmp 0x14048f434