Function at 0x4a3eb0
Capabilities:
Write file on windows

Disassembly:
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x60
mov rdi, qword [0x00828ba0]
mov rsi, qword [rdi]
mov r12, rcx
mov rbx, rdx
mov rbp, r8
mov rcx, rsi
call fcn.00479d10
mov rdx, qword [rsi]
mov rcx, r12
call sub.msvcrt.dll_fputs
mov r9, qword [rsi]
mov r8d, 7
mov edx, 1
lea rcx, str._Time_
call sub.msvcrt.dll_fwrite
movabs rdx, 0xd6bf94d5e57a42bd
mov rax, rbx
mul rdx
lea rsi, [rsp + 0x20]
shr rdx, 0x17
mov r12, rdx
lea rdx, [rsi + 0x20]
mov rcx, r12
call fcn.004a8b40
cmp byte [rsp + 0x40], 0
je 0x4a4133
xor r8d, r8d
jmp 0x4a3f35
mov r8d, edx
lea edx, [r8 + 1]
cmp byte [rsp + rdx + 0x40], 0
mov rax, rdx
jne 0x4a3f32
cmp eax, 5
ja 0x4a4148
cmp r8d, 4
mov byte [rsp + 0x3f], 0x20
je 0x4a4183
add r8d, 3
mov byte [rsp + 0x3e], 0x20
cmp r8d, 6
je 0x4a418c
cmp r8d, 5
mov byte [rsp + 0x3d], 0x20
je 0x4a4195
cmp r8d, 4
mov byte [rsp + 0x3c], 0x20
je 0x4a41c2
cmp r8d, 3
mov byte [rsp + 0x3b], 0x20
je 0x4a41cb
mov byte [rsp + 0x3a], 0x20
lea rcx, [rsi + 0x1a]
mov rax, qword [rdi]
mov rdx, qword [rax]
call sub.msvcrt.dll_fputs
mov rax, qword [rdi]
mov ecx, 0x2e
mov rdx, qword [rax]
call sub.msvcrt.dll_fputc
imul r12d, r12d, 0x989680
mov edx, ebx
mov ecx, 0xd1b71759
lea r8, [rsi + 0x20]
sub edx, r12d
mov eax, edx
mul ecx
shr edx, 0xd
mov ecx, edx
mov rdx, r8
call fcn.004a8b40
cmp byte [rsp + 0x40], 0
je 0x4a4151
xor edx, edx
jmp 0x4a3ff6
mov edx, ecx
lea ecx, [rdx + 1]
cmp byte [rsp + rcx + 0x40], 0
mov rax, rcx
jne 0x4a3ff4
cmp eax, 2
ja 0x4a4160
cmp edx, 1
mov byte [rsp + 0x3f], 0x30
je 0x4a41d4
test edx, edx
mov byte [rsp + 0x3e], 0x30
je 0x4a41dd
mov byte [rsp + 0x3d], 0x30
lea rcx, [rsi + 0x1d]
mov rax, qword [rdi]
mov rdx, qword [rax]
call sub.msvcrt.dll_fputs
movabs rax, 0x100000000000000
cmp rbx, rax
jbe 0x4a405b
nop word [rax + rax]
shr rbx, 1
shr rbp, 1
cmp rbx, rax
ja 0x4a4050
test rbp, rbp
je 0x4a4074
lea rax, [rbx + rbx*4]
xor edx, edx
lea rax, [rax + rax*4]
shl rax, 2
div rbp
mov rbp, rax
mov rax, qword [rdi]
mov r8d, 2
mov edx, 1
lea rcx, [0x0081063b]
mov r9, qword [rax]
call sub.msvcrt.dll_fwrite
lea rdx, [rsi + 0x20]
mov rcx, rbp
call fcn.004a8b40
cmp byte [rsp + 0x40], 0
je 0x4a4169
xor edx, edx
jmp 0x4a40b2
mov edx, ecx
lea ecx, [rdx + 1]
cmp byte [rsp + rcx + 0x40], 0
mov rax, rcx
jne 0x4a40b0
cmp eax, 4
ja 0x4a417d
cmp edx, 3
mov byte [rsp + 0x3f], 0x20
je 0x4a419e
add edx, 3
mov byte [rsp + 0x3e], 0x20
cmp edx, 5
je 0x4a41a7
cmp edx, 4
mov byte [rsp + 0x3d], 0x20
je 0x4a41b0
cmp edx, 3
mov byte [rsp + 0x3c], 0x20
je 0x4a41b9
mov byte [rsp + 0x3b], 0x20
lea rcx, [rsi + 0x1b]
mov rax, qword [rdi]
mov rdx, qword [rax]
call sub.msvcrt.dll_fputs
mov rax, qword [rdi]
mov ecx, 0x25
mov rdx, qword [rax]
call sub.msvcrt.dll_fputc
nop
add rsp, 0x60
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
ret
mov byte [rsp + 0x3f], 0x20
mov r8d, 2
mov byte [rsp + 0x3e], 0x20
jmp 0x4a3f6e
lea rcx, [rsi + 0x20]
jmp 0x4a3fa4
mov byte [rsp + 0x3f], 0x30
mov byte [rsp + 0x3e], 0x30
jmp 0x4a4027
lea rcx, [rsi + 0x20]
jmp 0x4a4030
mov byte [rsp + 0x3f], 0x20
mov edx, 2
mov byte [rsp + 0x3e], 0x20
jmp 0x4a40e7
lea rcx, [rsi + 0x20]
jmp 0x4a410c
lea rcx, [rsi + 0x1f]
jmp 0x4a3fa4
lea rcx, [rsi + 0x1e]
jmp 0x4a3fa4
lea rcx, [rsi + 0x1d]
jmp 0x4a3fa4
lea rcx, [rsi + 0x1f]
jmp 0x4a410c
lea rcx, [rsi + 0x1e]
jmp 0x4a410c
lea rcx, [rsi + 0x1d]
jmp 0x4a410c
lea rcx, [rsi + 0x1c]
jmp 0x4a410c
lea rcx, [rsi + 0x1c]
jmp 0x4a3fa4
lea rcx, [rsi + 0x1b]
jmp 0x4a3fa4
lea rcx, [rsi + 0x1f]
jmp 0x4a4030
lea rcx, [rsi + 0x1e]
jmp 0x4a4030