Function at 0x4313d0
Capabilities:
Write file on windows

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rdi
push rsi
push rbx
sub rsp, 0xa8
lea rbp, [rsp + 0x80]
movabs rbx, 0x6f2e756e672e6363
movabs r15, 0x756f6e6520746f6e
movabs r14, 0x6563617073206867
sub rdx, rcx
mov qword [rbp + 0x70], rcx
movabs r13, 0x726f6620726f6620
lea rax, [rdx + 1]
mov r8, rdx
movabs r12, 0x617078652074616d
movabs rdi, 0x5028206e6f69736e
movabs rsi, 0x757320657361656c
movabs r11, 0x6c75662074696d62
mov qword [rbp - 0x58], rax
lea rax, [r8 + 0x8a]
movabs r10, 0x657220677562206c
movabs rcx, 0x2074612074726f70
movabs rdx, 0x672f2f3a70747468
mov qword [rbp], rbx
movabs r9, 0x200a3a296c6d7468
movabs rbx, 0x2e736775622f6772
and rax, 0xfffffffffffffff0
mov qword [rbp - 0x50], r15
mov qword [rbp - 0x48], r14
mov qword [rbp - 0x40], r13
mov qword [rbp - 0x38], r12
mov qword [rbp - 0x30], rdi
mov qword [rbp - 0x28], rsi
mov qword [rbp - 0x20], r11
mov qword [rbp - 0x18], r10
mov qword [rbp - 0x10], rcx
mov qword [rbp - 8], rdx
mov qword [rbp + 8], rbx
mov qword [rbp + 0x10], r9
mov dword [rbp + 0x18], 0x202020
call fcn.0041b900
sub rsp, rax
mov eax, 0x2020
lea rbx, [rsp + 0x20]
mov qword [rbx + 0x48], rdx
mov rdx, qword [rbp + 0x70]
mov qword [rbx + 0x20], rdi
mov qword [rbx + 0x28], rsi
movabs rdi, 0x2e736775622f6772
mov qword [rbx + 0x40], rcx
movabs rsi, 0x6f2e756e672e6363
lea rcx, [rbx + 0x6b]
mov qword [rbx], r15
mov qword [rbx + 8], r14
mov qword [rbx + 0x10], r13
mov qword [rbx + 0x18], r12
mov qword [rbx + 0x30], r11
mov qword [rbx + 0x38], r10
mov qword [rbx + 0x50], rsi
mov qword [rbx + 0x58], rdi
mov qword [rbx + 0x60], r9
mov word [rbx + 0x68], ax
mov byte [rbx + 0x6a], 0x20
call sub.msvcrt.dll_memcpy
mov rax, qword [rbp - 0x58]
mov rcx, rbx
mov byte [rbx + rax + 0x6a], 0
call fcn.0047d0a0
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
push rdi
push rsi
push rbx
sub rsp, 0x30
cmp byte [0x00498090], 0
jne 0x431497
mov byte [0x00498090], 1
call fcn.00482100
test rax, rax
je 0x43152a
mov rbx, qword [rax + 8]
xor eax, eax
lea r9, [rsp + 0x2c]
cmp byte [rbx], 0x2a
mov dword [rsp + 0x2c], 0xffffffff
sete al
xor r8d, r8d
xor edx, edx
add rbx, rax
mov rcx, rbx
call fcn.00419d90
mov rsi, qword [sym.imp.msvcrt.dll___iob_func]
mov rdi, rax
call rsi
lea rcx, str.terminate_called_after_throwing_an_instance_of_
lea r9, [rax + 0x60]
mov r8d, 0x30
mov edx, 1
call sub.msvcrt.dll_fwrite
cmp dword [rsp + 0x2c], 0
je 0x431487
call rsi
lea rdx, [rax + 0x60]
mov rcx, rbx
call sub.msvcrt.dll_fputs
call rsi
lea rcx, [0x0049c941]
lea r9, [rax + 0x60]
mov r8d, 2
mov edx, 1
call sub.msvcrt.dll_fwrite
cmp dword [rsp + 0x2c], 0
je 0x4314bd
call fcn.00482760
call rsi
lea rdx, [rax + 0x60]
mov rcx, rdi
call sub.msvcrt.dll_fputs
jmp 0x43145e
call qword [sym.imp.msvcrt.dll___iob_func]
lea rcx, str.terminate_called_recursively_n
lea r9, [rax + 0x60]
mov r8d, 0x1d
mov edx, 1
call sub.msvcrt.dll_fwrite
call sub.msvcrt.dll_abort
mov rcx, rdi
call fcn.00425f48
jmp 0x431482
call sub.msvcrt.dll_abort
call qword [sym.imp.msvcrt.dll___iob_func]
lea rcx, str.terminate_called_without_an_active_exception_n
lea r9, [rax + 0x60]
mov r8d, 0x2d
mov edx, 1
call sub.msvcrt.dll_fwrite
jmp 0x431525