Function at 0x47a790
Capabilities:
Write file on windows

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x1e8
mov rax, qword [rcx + 0xf0]
movsxd r15, dword [rax + 0x1a8]
mov rsi, rcx
mov rdi, rdx
mov qword [rsp + 0x78], 0
test r15, r15
je 0x47a873
mov rbp, qword [rcx + 0x88]
mov rbx, qword [rax + 0xe0]
add rbx, qword [rax + 0x1a0]
test rbp, rbp
je 0x47a805
mov rax, qword [rbp + 0x28]
cmp rax, rbx
ja 0x47a7fc
mov rdx, qword [rbp + 0x38]
add rax, rdx
cmp rax, rbx
ja 0x47a890
mov rbp, qword [rbp + 0x10]
test rbp, rbp
jne 0x47a7e3
mov r9, rdi
mov r8d, 0x4e
mov edx, 1
lea rcx, str._nThere_is_a_debug_directory__but_the_section_containing_it_could_not_be_found_n
call sub.msvcrt.dll_fwrite
mov eax, 1
jmp 0x47a878
mov r15, qword [rsp + 0x58]
movabs rcx, 0x4924924924924925
mov rdx, r15
shr rdx, 2
mov rax, rdx
mul rcx
shr rdx, 1
lea rax, [rdx*8]
sub rax, rdx
shl rax, 2
cmp r15, rax
je 0x47a873
mov r9, rdi
mov r8d, 0x4d
mov edx, 1
lea rcx, str.The_debug_directory_size_is_not_a_multiple_of_the_debug_directory_entry_size_n
call sub.msvcrt.dll_fwrite
mov eax, 1
add rsp, 0x1e8
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
test byte [rbp + 0x21], 1
mov r8, qword [rbp]
je 0x47aae0
cmp rdx, r15
jb 0x47aac0
lea rdx, str._nThere_is_a_debug_directory_in__s_at_0x_lx_n_n
mov r9d, ebx
mov rcx, rdi
call sub.msvcrt.dll_fprintf
sub rbx, qword [rbp + 0x28]
mov r9, rdi
mov rax, qword [rbp + 0x38]
sub rax, rbx
cmp rax, r15
jb 0x47ab00
mov r8d, 0x2d
mov edx, 1
lea rcx, str.Type________________Size_____Rva______Offset_n
call sub.msvcrt.dll_fwrite
lea r8, [rsp + 0x78]
mov rdx, rbp
mov rcx, rsi
call fcn.00413e50
test eax, eax
je 0x47ab20
movabs rcx, 0x4924924924924925
mov rdx, r15
shr rdx, 2
mov rax, rdx
mul rcx
shr rdx, 1
mov qword [rsp + 0x48], rdx
je 0x47a82b
lea rax, [rsp + 0xd0]
xor ebp, ebp
xor r11d, r11d
mov qword [rsp + 0x58], r15
lea r13, [rsp + 0x80]
mov qword [rsp + 0x50], rax
lea r14, [rsp + 0xd3]
jmp 0x47a962
lea r11d, [rbp + 1]
mov rbp, r11
cmp qword [rsp + 0x48], r11
jbe 0x47a826
lea rax, [r11*8]
mov r8, r13
mov rcx, rsi
sub rax, r11
lea rdx, [rbx + rax*4]
add rdx, qword [rsp + 0x78]
call fcn.0047a510
mov r8d, dword [rsp + 0x8c]
lea r9, str.Unknown
cmp r8d, 0xb
ja 0x47a9a4
lea rdx, str.Unknown
mov eax, r8d
mov r9, qword [rdx + rax*8]
mov eax, dword [rsp + 0x98]
lea rdx, str.__2ld___14s__08lx__08lx__08lx_n
mov rcx, rdi
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x94]
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x90]
mov dword [rsp + 0x20], eax
call sub.msvcrt.dll_fprintf
cmp dword [rsp + 0x8c], 2
jne 0x47a950
mov edx, dword [rsp + 0x98]
mov rcx, rsi
mov r9, qword [rsp + 0x50]
mov r8d, dword [rsp + 0x90]
call fcn.0047a660
test rax, rax
je 0x47a950
mov eax, dword [rsp + 0xe4]
test eax, eax
je 0x47ab40
lea rax, [rsp + 0xa0]
mov r15d, 1
mov qword [rsp + 0x60], rax
lea rbp, str._02x
mov r12, rax
movzx r8d, byte [r14 + r15]
mov rcx, r12
mov rdx, rbp
add r12, 2
call sub.msvcrt.dll_sprintf
mov eax, r15d
add r15, 1
cmp dword [rsp + 0xe4], eax
ja 0x47aa33
lea r11d, [rax + 1]
mov rbp, r11
mov eax, dword [rsp + 0xe8]
mov rcx, rdi
mov qword [rsp + 0x68], r11
movsx r9d, byte [rsp + 0xd1]
lea rdx, str._format__c_c_c_c_signature__s_age__ld__n
movsx r8d, byte [rsp + 0xd0]
mov dword [rsp + 0x38], eax
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x30], rax
movsx eax, byte [rsp + 0xd3]
mov dword [rsp + 0x28], eax
movsx eax, byte [rsp + 0xd2]
mov dword [rsp + 0x20], eax
call sub.msvcrt.dll_fprintf
mov r11, qword [rsp + 0x68]
jmp 0x47a957
lea rdx, str._nError:_section__s_contains_the_debug_data_starting_address_but_it_is_too_small_n
mov rcx, rdi
call sub.msvcrt.dll_fprintf
xor eax, eax
jmp 0x47a878
lea rdx, str._nThere_is_a_debug_directory_in__s__but_that_section_has_no_contents_n
mov rcx, rdi
call sub.msvcrt.dll_fprintf
mov eax, 1
jmp 0x47a878
mov r8d, 0x4a
mov edx, 1
lea rcx, str.The_debug_data_size_field_in_the_data_directory_is_too_big_for_the_section
call sub.msvcrt.dll_fwrite
xor eax, eax
jmp 0x47a878
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x47a878
mov dword [rsp + 0x48], eax
call sub.msvcrt.dll_free
mov eax, dword [rsp + 0x48]
jmp 0x47a878
lea rax, [rsp + 0xa0]
mov r11d, 1
mov ebp, 1
mov qword [rsp + 0x60], rax
jmp 0x47aa5e