Function at 0x180043290
Capabilities:
Write file on windows

Disassembly:
mov r11, rsp
mov qword [r11 + 0x20], r9
mov qword [r11 + 0x18], r8
mov dword [rsp + 0x10], edx
push rbp
push rdi
push r12
push r15
lea rbp, [r11 - 0x57]
sub rsp, 0x98
imul r12d, edx, 0x34d
mov rax, r8
mov r15d, edx
mov rdi, rcx
mov dword [rbp + 3], r12d
cmp edx, r12d
ja 0x180043907
mov qword [r11 + 8], rbx
mov qword [r11 - 0x28], rsi
mov qword [r11 - 0x30], r13
imul r13d, r15d, 0x41
mov qword [r11 - 0x38], r14
mov dword [rbp - 1], r13d
nop word [rax + rax]
cmp r15d, 0xc710
ja 0x180043684
je 0x180043663
cmp r15d, 0x14fb
ja 0x180043614
je 0x1800434b5
cmp r15d, 0x29
je 0x1800434a3
cmp r15d, 0x104
je 0x180043484
cmp r15d, 0xa92
jne 0x1800438d7
cmp byte [0x18009613f], 0
je 0x1800438d7
mov r15d, 0x41
nop dword [rax]
cmp r15d, 0x41
je 0x180043452
cmp r15d, 0x1aea
je 0x18004343d
cmp r15d, 0x3593
jne 0x18004345f
mov r14d, dword [rbp - 0x11]
mov esi, 0x10
mov r12d, dword [rbp - 5]
mov r13d, dword [rbp - 9]
mov dword [rbp - 0x31], r14d
nop dword [rax]
mov eax, esi
sub eax, 0xc
je 0x1800433e5
sub eax, 4
je 0x1800433d0
sub eax, 1
je 0x1800433c6
cmp eax, 3
jne 0x180043426
movzx eax, byte [rdi]
mov ecx, dword [rdi]
mov byte [rbp - 0x31], al
mov eax, ecx
sar eax, 8
sar ecx, 0x10
mov byte [rbp - 0x2f], cl
mov byte [rbp - 0x30], al
mov r14d, dword [rbp - 0x31]
jmp 0x180043426
add dword [rdi + 4], r13d
add dword [rdi + 8], r12d
jmp 0x180043426
test r14b, 1
je 0x1800433d9
mov byte [rdi], 1
test r14b, 2
je 0x180043426
mov byte [rdi + 1], 1
jmp 0x180043426
lea rbx, [rbp - 0x31]
nop dword [rax]
mov rdx, qword [rbx + 0x10]
xor r8d, r8d
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__fseeki64]
test eax, eax
jne 0x180043433
mov edx, dword [rbx + 0x18]
lea r8d, [rax + 1]
mov rcx, qword [rbx]
mov r9, rdi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rax, 1
jne 0x180043433
mov rbx, qword [rbx + 8]
test rbx, rbx
jne 0x1800433f0
inc esi
cmp esi, 0x14
jb 0x180043390
jmp 0x18004345f
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_perror]
jmp 0x18004345f
mov r8d, 1
lea rdx, [rbp - 9]
lea rcx, [rbp - 5]
call fcn.180016fc0
jmp 0x18004345f
xor edx, edx
lea ecx, [rdx + 0x16]
call fcn.180025b60
mov dword [rbp - 0x11], eax
add r15d, 0x1aa9
cmp r15d, 0x4ffb
jbe 0x180043350
mov r15d, dword [rbp + 0x67]
mov r12d, dword [rbp + 3]
mov r13d, dword [rbp - 1]
jmp 0x1800438cf
mov eax, dword [rdi]
shl eax, 3
mov dword [0x180096fd4], eax
mov rax, qword [rbp + 0x7f]
mov eax, dword [rax]
shl eax, 3
mov dword [0x180096fd8], eax
jmp 0x1800438d3
mov qword [rdi + 4], 0
mov word [rdi], 0
jmp 0x1800438d7
lea rax, [0x18009614c]
xor r13d, r13d
mov qword [rbp - 0x21], rax
cmp byte [rax], 0
je 0x1800435ef
xor r8d, r8d
mov dword [rbp - 0x11], r13d
mov edx, 0xb6
lea rcx, [rbp - 0x11]
call fcn.18004e770
mov dword [rbp - 0x11], eax
lea r9, [rbp - 0x31]
lea rax, [rbp - 9]
mov byte [rbp - 0x19], 1
mov r8d, 0xb9
mov qword [rsp + 0x20], rax
lea rdx, [rbp - 0x19]
mov dword [rbp - 0x31], r13d
lea rcx, [rbp - 5]
call fcn.180025710
mov eax, dword [rbp - 9]
mov esi, 0x10
mov r14d, dword [rbp - 0x11]
cdq
and edx, 0x3f
mov dword [rbp - 0x31], r14d
lea r15d, [rdx + rax]
mov eax, dword [rbp - 5]
cdq
sar r15d, 6
and edx, 0x3f
mov dword [rbp - 9], r15d
lea r12d, [rdx + rax]
sar r12d, 6
mov dword [rbp - 5], r12d
nop
mov ecx, esi
sub ecx, 0xc
je 0x180043595
sub ecx, 4
je 0x180043580
sub ecx, 1
je 0x180043576
cmp ecx, 3
jne 0x1800435d6
movzx eax, byte [rdi]
mov ecx, dword [rdi]
mov byte [rbp - 0x31], al
mov eax, ecx
sar eax, 8
sar ecx, 0x10
mov byte [rbp - 0x2f], cl
mov byte [rbp - 0x30], al
mov r14d, dword [rbp - 0x31]
jmp 0x1800435d6
add dword [rdi + 4], r15d
add dword [rdi + 8], r12d
jmp 0x1800435d6
test r14b, 1
je 0x180043589
mov byte [rdi], 1
test r14b, 2
je 0x1800435d6
mov byte [rdi + 1], 1
jmp 0x1800435d6
lea rbx, [rbp - 0x31]
nop dword [rax]
mov rdx, qword [rbx + 0x10]
xor r8d, r8d
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__fseeki64]
test eax, eax
jne 0x1800435e3
mov edx, dword [rbx + 0x18]
lea r8d, [rax + 1]
mov rcx, qword [rbx]
mov r9, rdi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rax, 1
jne 0x1800435e3
mov rbx, qword [rbx + 8]
test rbx, rbx
jne 0x1800435a0
inc esi
cmp esi, 0x14
jb 0x180043540
jmp 0x1800435eb
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_perror]
mov rax, qword [rbp - 0x21]
inc rax
inc r13d
mov qword [rbp - 0x21], rax
cmp r13d, 2
jb 0x1800434c3
mov r15d, dword [rbp + 0x67]
mov r12d, dword [rbp + 3]
mov r13d, dword [rbp - 1]
jmp 0x1800438cf
cmp r15d, 0x4308
je 0x180043653
cmp r15d, 0x850c
jne 0x1800438d7
mov eax, dword [r9]
shl eax, 3
mov dword [0x180096fe0], eax
mov eax, dword [0x180096fd4]
mov dword [0x180096fcc], eax
mov eax, dword [0x180096fd8]
mov dword [0x180096fd0], eax
jmp 0x1800438d3
mov eax, dword [rax]
shl eax, 3
mov dword [0x180096fdc], eax
jmp 0x1800438d3
mov eax, dword [rdi]
lea eax, [rax*8 - 8]
mov dword [rbp + 0xf], eax
mov rax, qword [rbp + 0x7f]
mov eax, dword [rax]
lea eax, [rax*8 - 8]
mov dword [rbp + 7], eax
jmp 0x1800438d3
cmp r15d, 0x1cf20
ja 0x1800437e1
je 0x180043757
cmp r15d, 0x10914
je 0x180043746
cmp r15d, 0x14b18
je 0x180043734
cmp r15d, 0x18d1c
jne 0x1800438d7
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, 0xcc
call fcn.180036040
mov r13d, dword [rbp + 7]
lea r9, [rbp + 0x67]
mov r12d, dword [rbp + 0xf]
lea r8, [rbp - 0x31]
lea rdx, [rbp - 0x21]
mov dword [rbp + 0x67], 0
mov ecx, 0x10c
mov dword [rbp - 0x31], r13d
mov dword [rbp - 0x21], r12d
call fcn.180046880
mov eax, dword [rbp + 0xb]
lea r9, [rbp + 0x67]
add eax, r13d
mov dword [rbp + 0x67], 6
lea r8, [rbp - 0x21]
mov dword [rbp - 0x21], eax
lea rdx, [rbp - 0x31]
mov dword [rbp - 0x31], r12d
mov ecx, 0x10c
call fcn.180046880
mov r12d, dword [rbp + 3]
mov r13d, dword [rbp - 1]
jmp 0x1800438cf
mov eax, dword [r9]
lea eax, [rax*8 + 8]
mov dword [rbp + 0xb], eax
jmp 0x1800438d3
mov eax, dword [rax]
lea eax, [rax*8 + 8]
mov dword [rbp + 0x13], eax
jmp 0x1800438d3
mov ecx, dword [rbp + 0xf]
lea r14d, [rcx + 8]
lea ebx, [rcx - 8]
mov dword [rbp - 0x29], r14d
add ebx, dword [rbp + 0x13]
cmp r14d, ebx
ja 0x1800438d3
mov esi, dword [rbp + 0xb]
mov r13d, dword [rbp + 7]
add esi, r13d
mov dword [rbp + 0x67], 1
mov dword [rbp - 0x31], 7
nop dword [rax]
lea r9, [rbp + 0x67]
mov dword [rbp - 0x21], r13d
lea r8, [rbp - 0x21]
mov dword [rbp - 0x29], r14d
lea rdx, [rbp - 0x29]
mov ecx, 0x10c
call fcn.180046880
lea r9, [rbp - 0x31]
mov dword [rbp - 0x21], esi
lea r8, [rbp - 0x21]
mov dword [rbp - 0x29], r14d
lea rdx, [rbp - 0x29]
mov ecx, 0x10c
call fcn.180046880
add r14d, 8
cmp r14d, ebx
jbe 0x180043790
mov r13d, dword [rbp - 1]
mov dword [rbp - 0x29], r14d
jmp 0x1800438cf
cmp r15d, 0x21124
je 0x18004387e
cmp r15d, 0x25328
jne 0x1800438d7
mov esi, dword [rbp + 7]
lea r14d, [rsi + 8]
lea ebx, [rsi - 8]
mov dword [rbp - 0x29], r14d
add ebx, dword [rbp + 0xb]
cmp r14d, ebx
ja 0x1800438d3
mov esi, dword [rbp + 0x13]
mov r12d, dword [rbp + 0xf]
add esi, r12d
mov dword [rbp + 0x67], 3
mov dword [rbp - 0x31], 5
nop dword [rax]
lea r9, [rbp + 0x67]
mov dword [rbp - 0x21], r14d
lea r8, [rbp - 0x21]
mov dword [rbp - 0x29], r12d
lea rdx, [rbp - 0x29]
mov ecx, 0x10c
call fcn.180046880
lea r9, [rbp - 0x31]
mov dword [rbp - 0x21], r14d
lea r8, [rbp - 0x21]
mov dword [rbp - 0x29], esi
lea rdx, [rbp - 0x29]
mov ecx, 0x10c
call fcn.180046880
add r14d, 8
cmp r14d, ebx
jbe 0x180043830
mov r12d, dword [rbp + 3]
mov dword [rbp - 0x29], r14d
jmp 0x1800438cf
mov esi, dword [rbp + 7]
lea r9, [rbp + 0x67]
mov ebx, dword [rbp - 0x29]
lea r8, [rbp - 0x21]
lea rdx, [rbp - 0x31]
mov dword [rbp - 0x21], esi
mov ecx, 0x10c
mov dword [rbp - 0x31], ebx
mov dword [rbp + 0x67], 2
call fcn.180046880
mov eax, dword [rbp + 0xb]
lea r9, [rbp + 0x67]
add eax, esi
mov dword [rbp + 0x67], 8
lea r8, [rbp - 0x21]
mov dword [rbp - 0x21], eax
lea rdx, [rbp - 0x31]
mov dword [rbp - 0x31], ebx
mov ecx, 0x10c
call fcn.180046880
mov r9, qword [rbp + 0x77]
mov rax, qword [rbp + 0x6f]
add r15d, r13d
mov dword [rbp + 0x67], r15d
cmp r15d, r12d
jbe 0x1800432f0
mov r14, qword [rsp + 0x80]
mov r13, qword [rsp + 0x88]
mov rsi, qword [rsp + 0x90]
mov rbx, qword [rsp + 0xc0]
add rsp, 0x98
pop r15
pop r12
pop rdi
pop rbp
ret