Function at 0x433bb0
Capabilities:
Write file on windows

Disassembly:
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x2a8
mov rbp, qword [0x006d1040]
lea rbx, [rsp + 0x50]
mov rdi, rcx
mov qword [rsp + 0x58], 0
mov byte [rsp + 0x60], 0
mov rax, qword [rbp]
mov qword [rsp + 0x298], rax
xor eax, eax
lea rax, [rbx + 0x10]
mov qword [rsp + 0x50], rax
call fcn.0043ac30
cmp byte [0x00675095], 0
mov rsi, rax
je 0x433c5d
movabs rdx, 0x431bde82d7b634db
lea r12, [rsp + 0x90]
imul rdx
mov rax, rsi
sar rax, 0x3f
mov rcx, r12
sar rdx, 0x12
sub rdx, rax
call fcn.0043ad20
mov rdx, r12
mov rcx, rbx
add r12, 0x10
call fcn.00643130
mov rcx, qword [rsp + 0x90]
cmp rcx, r12
je 0x433c50
call fcn.00670500
cmp byte [0x0072d649], 0
jne 0x433fb0
lea rsi, [rsp + 0xd0]
mov qword [rsp + 0xd8], 0
mov byte [rsp + 0xe0], 0
lea rax, [rsi + 0x10]
mov rcx, rsi
mov qword [rsp + 0xd0], rax
mov rax, qword [rdi + 8]
lea rdx, [rax + 1]
call fcn.00642500
mov rdx, qword [rsp + 0xd8]
mov dword [rsp + 0x20], 0x20
mov r9d, 1
xor r8d, r8d
mov rcx, rsi
call fcn.00641190
mov r8, qword [rdi + 8]
mov rdx, qword [rdi]
mov rcx, rsi
call fcn.006426e0
mov r8, qword [rsp + 0xd8]
mov rdx, qword [rsp + 0xd0]
mov rcx, rbx
call fcn.006426e0
mov rcx, qword [rsp + 0xd0]
add rsi, 0x10
cmp rcx, rsi
je 0x433cf3
call fcn.00670500
mov rdi, qword [rsp + 0x58]
mov rdx, qword [rsp + 0x50]
test rdi, rdi
je 0x433d45
cmp byte [rdx + rdi - 1], 0xa
je 0x433d45
lea rcx, [rbx + 0x10]
lea rsi, [rdi + 1]
mov eax, 0xf
cmp rdx, rcx
je 0x433d20
mov rax, qword [rsp + 0x60]
cmp rsi, rax
ja 0x433f82
mov byte [rdx + rdi], 0xa
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x58], rsi
mov byte [rax + rsi], 0
mov rdx, qword [rsp + 0x50]
mov rdi, qword [rsp + 0x58]
lea rsi, [rsp + 0x70]
lea r8, [rdx + rdi]
lea rax, [rsi + 0x10]
mov rcx, rsi
mov qword [rsp + 0x70], rax
call fcn.00430ae0
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x58], 0
mov byte [rax], 0
cmp qword [rsp + 0x78], 0
jne 0x433dc4
xor edi, edi
mov rcx, qword [rsp + 0x70]
add rsi, 0x10
cmp rcx, rsi
je 0x433d8d
call fcn.00670500
mov rcx, qword [rsp + 0x50]
add rbx, 0x10
cmp rcx, rbx
je 0x433da0
call fcn.00670500
mov rbx, qword [rsp + 0x298]
xor rbx, qword [rbp]
mov eax, edi
jne 0x4341d5
add rsp, 0x2a8
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
ret
xor edi, edi
cmp byte [0x0072d682], 0
jne 0x433f40
cmp byte [0x00675096], 0
je 0x433d7a
lea rdi, [rsp + 0x40]
lea rax, [0x00430810]
lea rcx, [0x0072d620]
mov rdx, rdi
mov qword [rsp + 0x40], rax
call fcn.006612c0
mov rax, qword [0x0072d848]
mov rcx, rdi
mov byte [rsp + 0x48], 0
mov qword [rsp + 0x40], rax
call fcn.005aad20
mov r9, qword [0x0072d850]
test r9, r9
je 0x4340a1
movzx eax, byte [0x0072d648]
test al, al
je 0x433ece
lea r12, [rsp + 0x120]
lea rdx, str.debug.log
mov byte [0x0072d648], 0
mov rcx, r12
call fcn.00430ed0
mov ecx, 1
call fcn.00433320
lea rdi, [rsp + 0xf0]
mov r8, r12
mov rdx, rax
mov rcx, rdi
call fcn.005a95a0
mov rcx, qword [rsp + 0x120]
add r12, 0x10
cmp rcx, r12
je 0x433e88
call fcn.00670500
mov r8, qword [0x0072d850]
lea rdx, [0x0068d98a]
mov rcx, rdi
call fcn.0043b5b0
test rax, rax
je 0x433eb1
mov rcx, qword [0x0072d850]
xor edx, edx
call sub.msvcrt.dll_setbuf
mov rcx, qword [rsp + 0xf0]
lea rdx, [rdi + 0x10]
cmp rcx, rdx
je 0x433ec7
call fcn.00670500
mov r9, qword [0x0072d850]
mov r8, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x70]
mov edx, 1
call sub.msvcrt.dll_fwrite
mov edi, eax
movzx eax, byte [0x0072d810]
test al, al
je 0x434130
mov eax, dword [0x00675090]
mov edx, 0x82082083
lea ecx, [rax + 1]
mov eax, ecx
mov dword [0x00675090], ecx
imul edx
mov eax, ecx
sar eax, 0x1f
add edx, ecx
sar edx, 5
sub edx, eax
mov eax, edx
shl eax, 6
sub eax, edx
cmp ecx, eax
je 0x434100
cmp byte [rsp + 0x48], 0
je 0x433d7a
mov rcx, qword [rsp + 0x40]
call fcn.005b79d0
jmp 0x433d7a
mov r12, qword [sym.imp.msvcrt.dll___iob_func]
call r12
mov r8, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x70]
lea r9, [rax + 0x30]
mov edx, 1
call sub.msvcrt.dll_fwrite
mov edi, eax
call r12
lea rcx, [rax + 0x30]
call sub.msvcrt.dll_fflush
cmp byte [0x00675096], 0
je 0x433d7a
jmp 0x433ddc
mov qword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
mov rdx, rdi
mov rcx, rbx
call fcn.006428e0
mov rdx, qword [rsp + 0x50]
jmp 0x433d29
mov rax, rsi
movabs rdx, 0x431bde82d7b634db
lea r12, [rsp + 0x120]
imul rdx
mov rax, rsi
sar rax, 0x3f
mov rcx, r12
sar rdx, 0x12
sub rdx, rax
imul rdx, rdx, 0xf4240
sub rsi, rdx
mov edx, 0x10
mov qword [rsp + 0x40], rsi
call fcn.00651a90
lea rax, [rsp + 0x40]
lea r8, [rsp + 0x100]
lea rdx, str.._06d
mov r9d, 1
mov rcx, r12
mov dword [rsp + 0xf8], 1
mov qword [rsp + 0x100], rax
lea rax, [0x005a3230]
mov qword [rsp + 0xf0], r8
mov qword [rsp + 0x108], rax
lea rax, [0x005a3630]
mov qword [rsp + 0x110], rax
call fcn.005a0520
lea rsi, [rsp + 0xb0]
lea rdx, [r12 + 8]
mov rcx, rsi
call fcn.005d4680
mov rcx, r12
call fcn.00652170
mov r8, qword [rsp + 0xb8]
mov rdx, qword [rsp + 0xb0]
mov rcx, rbx
call fcn.006426e0
mov rcx, qword [rsp + 0xb0]
add rsi, 0x10
cmp rcx, rsi
je 0x433c5d
call fcn.00670500
jmp 0x433c5d
mov r12, qword [0x0072d840]
test r12, r12
je 0x4341b0
mov ecx, 0x30
mov edi, dword [rsp + 0x78]
call fcn.00670540
mov rdx, qword [rsp + 0x70]
mov r8, qword [rsp + 0x78]
mov r13, rax
lea rcx, [rax + 0x10]
lea rax, [rax + 0x20]
add r8, rdx
mov qword [r13 + 0x10], rax
call fcn.00430ae0
mov rdx, r12
mov rcx, r13
call fcn.00659aa0
add qword [r12 + 0x10], 1
jmp 0x433f26
lea rcx, [rsp + 0x38]
lea rdx, [0x0072d820]
xor r8d, r8d
call fcn.0046cc00
cmp dword [rsp + 0x38], 1
ja 0x433f26
mov byte [0x0072d648], 1
jmp 0x433f26
lea rcx, [0x0072d810]
call fcn.00670bf0
test eax, eax
je 0x433ef3
lea r12, [rsp + 0x120]
lea rdx, str.debug.log
mov rcx, r12
call fcn.00430ed0
mov ecx, 1
call fcn.00433320
lea rcx, [0x0072d820]
mov r8, r12
mov rdx, rax
call fcn.005a95a0
lea rcx, [0x0072d810]
add r12, 0x10
call fcn.00670d40
lea rcx, [0x00430690]
call fcn.0058ce30
mov rcx, qword [rsp + 0x120]
cmp rcx, r12
je 0x433ef3
call fcn.00670500
jmp 0x433ef3
lea rdx, str.util.cpp
lea rcx, str.vMsgsBeforeOpenLog
mov r8d, 0x1d6
call fcn.00590060
mov r12, qword [0x0072d840]
jmp 0x4340b1
call fcn.00582f30
mov rcx, qword [rsp + 0xf0]
lea rdx, [rdi + 0x10]
mov rbp, rax
cmp rcx, rdx
je 0x4341f3
call fcn.00670500
mov rdi, rbp
cmp byte [rsp + 0x48], 0
je 0x434207
mov rcx, qword [rsp + 0x40]
call fcn.005b79d0
mov rcx, qword [rsp + 0x70]
add rsi, 0x10
cmp rcx, rsi
je 0x43421a
call fcn.00670500
mov rcx, qword [rsp + 0x50]
add rbx, 0x10
cmp rcx, rbx
je 0x43422d
call fcn.00670500
mov rcx, rdi
call fcn.0058e700
mov rdi, rax
jmp 0x4341f6