Function at 0x436b00
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x4c
mov eax, dword [0x458004]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 8]
push esi
mov esi, ecx
mov dword [ebp - 0x48], edx
mov edx, dword [ebp + 0x14]
push edi
test esi, esi
je 0x436cfd
cmp dword [esi], 0
je 0x436cfd
mov eax, dword [ebp + 0x10]
mov ecx, eax
shr ecx, 8
mov dword [ebp - 0x18], ecx
mov ecx, edx
shr ecx, 8
mov dword [ebp - 0x24], ecx
mov ecx, ebx
shr ecx, 8
mov dword [ebp - 0x30], ecx
mov ecx, eax
shr ecx, 0x10
mov dword [ebp - 0x1c], ecx
mov ecx, edx
shr ecx, 0x10
mov dword [ebp - 0x28], ecx
mov ecx, ebx
shr ecx, 0x10
mov dword [ebp - 0x34], ecx
mov ecx, dword [ebp + 0xc]
mov edi, ecx
shr edi, 8
mov dword [ebp - 0x3c], edi
mov edi, eax
shr edi, 0x18
mov dword [ebp - 0x20], edi
mov edi, edx
shr edi, 0x18
mov dword [ebp - 0x2c], edi
mov edi, ebx
shr edi, 0x18
mov dword [ebp - 0x38], edi
mov edi, ecx
shr edi, 0x10
mov dword [ebp - 0x40], edi
mov edi, ecx
shr edi, 0x18
cmp dword [esi + 0x118], 1
mov dword [ebp - 0x44], edi
jne 0x436bf6
mov ebx, dword [ebp - 0x20]
mov byte [ebp - 0x11], al
mov eax, dword [ebp - 0x2c]
mov byte [ebp - 0x10], al
mov eax, dword [ebp - 0x28]
mov byte [ebp - 0xf], al
mov eax, dword [ebp - 0x24]
mov byte [ebp - 0xe], al
mov eax, dword [ebp - 0x38]
mov byte [ebp - 0xc], al
mov eax, dword [ebp - 0x34]
mov byte [ebp - 0xb], al
mov eax, dword [ebp - 0x30]
mov byte [ebp - 0xa], al
mov eax, edi
mov byte [ebp - 0x14], bl
mov ebx, dword [ebp - 0x1c]
mov byte [ebp - 0x13], bl
mov ebx, dword [ebp - 0x18]
mov byte [ebp - 8], al
mov eax, dword [ebp - 0x40]
mov byte [ebp - 0x12], bl
mov ebx, dword [ebp + 8]
mov byte [ebp - 7], al
mov eax, dword [ebp - 0x3c]
mov byte [ebp - 0xd], dl
mov byte [ebp - 9], bl
mov byte [ebp - 6], al
mov byte [ebp - 5], cl
jmp 0x436c4a
mov byte [ebp - 0x14], al
mov eax, dword [ebp - 0x18]
mov byte [ebp - 0x13], al
mov eax, dword [ebp - 0x1c]
mov byte [ebp - 0x12], al
mov eax, dword [ebp - 0x20]
mov byte [ebp - 0x11], al
mov eax, dword [ebp - 0x24]
mov byte [ebp - 0xf], al
mov eax, dword [ebp - 0x28]
mov byte [ebp - 0xe], al
mov eax, dword [ebp - 0x2c]
mov byte [ebp - 0xd], al
mov eax, dword [ebp - 0x30]
mov byte [ebp - 0xb], al
mov eax, dword [ebp - 0x34]
mov byte [ebp - 0xa], al
mov eax, dword [ebp - 0x38]
mov byte [ebp - 9], al
mov eax, dword [ebp - 0x3c]
mov byte [ebp - 7], al
mov eax, dword [ebp - 0x40]
mov byte [ebp - 6], al
mov eax, dword [ebp - 0x44]
mov byte [ebp - 0x10], dl
mov byte [ebp - 0xc], bl
mov byte [ebp - 8], cl
mov byte [ebp - 5], al
mov eax, dword [esi]
lea edi, [esi + 0x18]
push eax
push 0x10
lea eax, [ebp - 0x14]
push 1
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
add esp, 0x10
cmp eax, 0x10
je 0x436ca7
push dword [esi + 0x124]
push dword [esi + 0x120]
push edi
push str._s:_lld:_could_not_write_packet_header_n
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push eax
call fcn.00401010
add esp, 0x14
push edi
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_perror]
add esp, 4
push dword [esi]
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
add esp, 4
mov dword [esi], 0
push dword [esi]
push ebx
push 1
push dword [ebp - 0x48]
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
add esp, 0x10
cmp eax, ebx
je 0x436cfd
push dword [esi + 0x124]
push dword [esi + 0x120]
push edi
push str._s:_lld:_could_not_write_packet_contents_n
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push eax
call fcn.00401010
add esp, 0x14
push edi
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_perror]
add esp, 4
push dword [esi]
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
add esp, 4
mov dword [esi], 0
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00443732
mov esp, ebp
pop ebp
ret