Function at 0x14048f9c2
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
lahf
jmp 0x14048f9f3
mov qword [rsp + 0x18], rbp
push rsi
movsx rax, r8w
movsx ax, al
push rdi
cbw
push r12
movzx eax, si
push r14
not ax
movsx rax, dx
movsx ax, sil
push r15
mov eax, 0x1470
call fcn.1403fcd88
sub rsp, rax
adc dil, al
mov rax, qword [0x1400b4278]
shld r12d, ebx, 0xb5
sar r12b, cl
xor rax, rsp
sub r14d, 0x75f927d5
mov qword [rsp + 0x1460], rax
rol r15b, 0xab
setge r12b
movsxd r10, edx
test rsp, r14
xor al, 0xc6
mov rbx, rcx
movzx ax, r8b
sub dil, 0xf8
mov rax, r10
xor r12, rbp
ror r15b, 0xf7
cdq
mov r14d, r9d
bts r15, rdx
btc r12d, r8d
rcr r15w, cl
sar rax, 6
sbb rdi, rcx
lea rcx, [0x1400b7aa0]
and r10d, 0x3f
sal r15, 0x25
rcl r12w, cl
shl dl, cl
add r14, r8
shr r12w, cl
mov r15, r8
mov r12d, r9d
shl dx, cl
cmp spl, 0x65
mov rdi, r8
bsf edx, esp
mov rax, qword [rcx + rax*8]
rcl edx, 0xfe
lea rdx, [r10 + r10*8]
movzx r12d, r9w
clc
mov r12, qword [rax + rdx*8 + 0x28]
xor eax, eax
mov qword [rbx], rax
test r11b, sil
cmp r8, r14
jmp 0x14048fadb
mov dword [rbx + 8], eax
jmp 0x14048fae3
jae 0x14048fc87
lea rax, [rsp + 0x50]
cmp r11, rcx
cmc
cmp rdi, r14
jmp 0x14048fafa
jae 0x14048fb53
movzx ecx, word [rdi]
stc
add rdi, 2
test r14b, r10b
clc
cmp cx, 0xa
jne 0x14048fb2a
mov edx, 0xd
cmp rax, 0x104b30de
mov word [rax], dx
add rax, 2
stc
mov word [rax], cx
movsx ecx, r12w
add rax, 2
neg cl
sal cl, cl
lea rcx, [rsp + 0x6f8]
cmc
test esi, r15d
cmp rax, rcx
jmp 0x14048fb4d
jb 0x14048faf2
and qword [rsp + 0x38], 0
movsx r9w, r9b
lea rcx, [rsp + 0x50]
and qword [rsp + 0x30], 0
rol r8, 0x48
btr r8w, 0xd8
lea r8, [rsp + 0x50]
sub r9b, 0x2d
movsxd r9, ebx
sub rax, rcx
mov dword [rsp + 0x28], 0xd55
rol ecx, 7
dec cl
test cl, sil
lea rcx, [rsp + 0x700]
sar rax, 1
movzx r9d, r13w
bt r9w, 0x10
mov qword [rsp + 0x20], rcx
mov r9d, eax
shld cx, cx, 0x87
mov cl, 0x32
add rcx, rdx
mov ecx, 0xfde9
sub edx, edx
jmp 0x14048fbc5
call fcn.14047c8b4
mov ebp, eax
cmp sil, bl
test sp, 0x5353
stc
test eax, eax
jmp 0x14048fbdc
je 0x14048fc7e
sub esi, esi
test eax, eax
jmp 0x14048fbeb
je 0x14048fc66
and qword [rsp + 0x20], 0
lea rdx, [rsp + 0x700]
or r8, 0x15f27937
rcl r9b, 0x6d
mov ecx, esi
btr r9d, esp
xadd r9, r9
add r9b, r8b
lea r9, [rsp + 0x40]
mov r8d, ebp
lea rdx, [rdx + rcx]
ror rcx, 0xb6
mov rcx, r12
cmp r14, r14
test dil, r12b
jmp 0x14048fc35
sub r8d, esi
jmp 0x14048fc3d
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jmp 0x14048fc4a
je 0x14048fc7e
add esi, dword [rsp + 0x40]
jmp 0x14048fc59
cmp esi, ebp
jmp 0x14048fc60
jb 0x14048fbf1
mov eax, edi
test r12b, 0xb8
cmc
sub eax, r15d
mov dword [rbx + 4], eax
cmp r8b, r11b
cmp rdi, r14
jmp 0x14048fae3
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbx], eax
xchg ecx, eax
mov rax, rbx
cmp r14b, 0x2c
xor cx, 0x119e
bt rcx, r12
mov rcx, qword [rsp + 0x1460]
cmc
jmp 0x14048fca5
xor rcx, rsp
jmp 0x14048fcad
call fcn.1404525ed
lea r11, [rsp + 0x1470]
movzx si, dil
cmovbe si, r15w
mov rbx, qword [r11 + 0x30]
movsxd r14, ebp
mov rbp, qword [r11 + 0x40]
mov rsp, r11
movzx r12d, r9w
movzx r15w, r11b
pop r15
pop r14
jmp 0x14048fce7
pop r12
cmovno di, ax
pop rdi
mov sil, cl
setno sil
pop rsi
jmp 0x14048fcfb
ret