Function at 0x490931
Capabilities:
Write file on windows

Disassembly:
push rbp
sub rsp, 0x120
lea rbp, [rsp + 0x80]
mov qword [rbp + 0xb0], rcx
mov qword [rbp + 0xb8], rdx
mov rax, qword [rbp + 0xb8]
mov qword [rbp + 0x48], rax
mov qword [rbp - 8], 0
mov rax, qword [rbp + 0xb0]
mov rax, qword [rax + 0xf0]
mov rax, qword [rax + 0x58]
mov qword [rbp + 0x98], rax
cmp qword [rbp + 0x98], 0
je 0x490c55
mov rax, qword [rbp + 0x48]
mov r9, rax
mov r8d, 0x11
mov edx, 1
lea rcx, str._nProgram_Header:_n
call main
mov rax, qword [rbp + 0xb0]
mov rax, qword [rax + 0xf0]
mov eax, dword [rax + 0x3c]
mov dword [rbp + 0x44], eax
mov dword [rbp + 0x94], 0
jmp 0x490c46
mov rax, qword [rbp + 0x98]
mov eax, dword [rax]
mov ecx, eax
call fcn.0049080d
mov qword [rbp + 0x88], rax
cmp qword [rbp + 0x88], 0
jne 0x490a15
mov rax, qword [rbp + 0x98]
mov edx, dword [rax]
lea rax, [rbp - 0x20]
mov r8d, edx
lea rdx, str.0x_lx
mov rcx, rax
call sub.msvcrt.dll_sprintf
lea rax, [rbp - 0x20]
mov qword [rbp + 0x88], rax
mov rdx, qword [rbp + 0x88]
mov rax, qword [rbp + 0x48]
mov r8, rdx
lea rdx, str._8s_off____0x
mov rcx, rax
call sub.msvcrt.dll_fprintf
mov rax, qword [rbp + 0x98]
mov rdx, qword [rax + 8]
mov rax, qword [rbp + 0x48]
mov r8, rdx
mov rdx, rax
mov rcx, qword [rbp + 0xb0]
call fcn.0044aa1a
mov rax, qword [rbp + 0x48]
mov r9, rax
mov r8d, 9
mov edx, 1
lea rcx, str._vaddr_0x
call main
mov rax, qword [rbp + 0x98]
mov rdx, qword [rax + 0x10]
mov rax, qword [rbp + 0x48]
mov r8, rdx
mov rdx, rax
mov rcx, qword [rbp + 0xb0]
call fcn.0044aa1a
mov rax, qword [rbp + 0x48]
mov r9, rax
mov r8d, 9
mov edx, 1
lea rcx, str._paddr_0x
call main
mov rax, qword [rbp + 0x98]
mov rdx, qword [rax + 0x18]
mov rax, qword [rbp + 0x48]
mov r8, rdx
mov rdx, rax
mov rcx, qword [rbp + 0xb0]
call fcn.0044aa1a
mov rax, qword [rbp + 0x98]
mov rax, qword [rax + 0x30]
mov rcx, rax
call fcn.004518b5
mov edx, eax
mov rax, qword [rbp + 0x48]
mov r8d, edx
lea rdx, str._align_2_u_n
mov rcx, rax
call sub.msvcrt.dll_fprintf
mov rax, qword [rbp + 0x48]
mov r9, rax
mov r8d, 0x12
mov edx, 1
lea rcx, str._________filesz_0x
call main
mov rax, qword [rbp + 0x98]
mov rdx, qword [rax + 0x20]
mov rax, qword [rbp + 0x48]
mov r8, rdx
mov rdx, rax
mov rcx, qword [rbp + 0xb0]
call fcn.0044aa1a
mov rax, qword [rbp + 0x48]
mov r9, rax
mov r8d, 9
mov edx, 1
lea rcx, str._memsz_0x
call main
mov rax, qword [rbp + 0x98]
mov rdx, qword [rax + 0x28]
mov rax, qword [rbp + 0x48]
mov r8, rdx
mov rdx, rax
mov rcx, qword [rbp + 0xb0]
call fcn.0044aa1a
mov rax, qword [rbp + 0x98]
mov eax, dword [rax + 4]
and eax, 1
test eax, eax
je 0x490b92
mov edx, 0x78
jmp 0x490b97
mov edx, 0x2d
mov rax, qword [rbp + 0x98]
mov eax, dword [rax + 4]
and eax, 2
test eax, eax
je 0x490bb0
mov r8d, 0x77
jmp 0x490bb6
mov r8d, 0x2d
mov rax, qword [rbp + 0x98]
mov eax, dword [rax + 4]
and eax, 4
test eax, eax
je 0x490bce
mov ecx, 0x72
jmp 0x490bd3
mov ecx, 0x2d
mov rax, qword [rbp + 0x48]
mov dword [rsp + 0x20], edx
mov r9d, r8d
mov r8d, ecx
lea rdx, str._flags__c_c_c
mov rcx, rax
call sub.msvcrt.dll_fprintf
mov rax, qword [rbp + 0x98]
mov eax, dword [rax + 4]
and eax, 0xfffffff8
test eax, eax
je 0x490c26
mov rax, qword [rbp + 0x98]
mov eax, dword [rax + 4]
and eax, 0xfffffff8
mov edx, eax
mov rax, qword [rbp + 0x48]
mov r8d, edx
lea rdx, str.__lx
mov rcx, rax
call sub.msvcrt.dll_fprintf
mov rax, qword [rbp + 0x48]
mov rdx, rax
mov ecx, 0xa
call sub.msvcrt.dll_fputc
add dword [rbp + 0x94], 1
add qword [rbp + 0x98], 0x38
mov eax, dword [rbp + 0x94]
cmp eax, dword [rbp + 0x44]
jb 0x4909ca
lea rdx, [0x005471f2]
mov rcx, qword [rbp + 0xb0]
call fcn.004542b2
mov qword [rbp + 0x38], rax
cmp qword [rbp + 0x38], 0
je 0x4915c3
mov rax, qword [rbp + 0x48]
mov r9, rax
mov r8d, 0x12
mov edx, 1
lea rcx, str._nDynamic_Section:_n
call main
lea rdx, [rbp - 8]
mov rax, qword [rbp + 0x38]
mov r8, rdx
mov rdx, rax
mov rcx, qword [rbp + 0xb0]
call fcn.00454e5a
test eax, eax
je 0x4918c2
mov rax, qword [rbp + 0x38]
mov rdx, rax
mov rcx, qword [rbp + 0xb0]
call fcn.0049c45c
mov dword [rbp + 0x34], eax
cmp dword [rbp + 0x34], 0xfffffeff
je 0x4918c5
mov rax, qword [rbp + 0xb0]
mov rax, qword [rax + 0xf0]
mov rax, qword [rax + 0x50]
mov edx, dword [rbp + 0x34]
shl rdx, 3
add rax, rdx
mov rax, qword [rax]
mov eax, dword [rax + 0x28]
mov dword [rbp + 0x30], eax
mov rax, qword [rbp + 0xb0]
mov rax, qword [rax + 8]
mov rax, qword [rax + 0x368]
mov rax, qword [rax + 0x300]
movzx eax, byte [rax + 6]
movzx eax, al
mov qword [rbp + 0x28], rax
mov rax, qword [rbp + 0xb0]
mov rax, qword [rax + 8]
mov rax, qword [rax + 0x368]
mov rax, qword [rax + 0x300]
mov rax, qword [rax + 0x50]
mov qword [rbp + 0x20], rax
mov rax, qword [rbp - 8]
mov qword [rbp + 0x80], rax
mov rax, qword [rbp + 0x38]
mov rax, qword [rax + 0x38]
cmp qword [rbp + 0x28], rax
ja 0x4918c8
mov rax, qword [rbp + 0x38]
mov rdx, qword [rax + 0x38]
mov rax, qword [rbp + 0x80]
add rax, rdx
mov qword [rbp + 0x18], rax
jmp 0x49158e
lea rax, [0x00546be9]
mov qword [rbp + 0x78], rax
mov rax, qword [rbp + 0xb0]
mov rax, qword [rax + 8]
mov rax, qword [rax + 0x368]
mov qword [rbp + 0x10], rax
lea rcx, [rbp - 0x30]
mov rdx, qword [rbp + 0x80]
mov rax, qword [rbp + 0x20]
mov r8, rcx
mov rcx, qword [rbp + 0xb0]
call rax
mov rax, qword [rbp - 0x30]
test rax, rax
je 0x4915ae
mov dword [rbp + 0x74], 0
mov rax, qword [rbp - 0x30]
cmp rax, 0x1d
je 0x4912eb
cmp rax, 0x1d
ja 0x490f20
cmp rax, 0xe
je 0x4911ed
cmp rax, 0xe
ja 0x490e8c
cmp rax, 7
je 0x49117d
cmp rax, 7
ja 0x490e4a
cmp rax, 3
je 0x49113d
cmp rax, 3
ja 0x490e31
cmp rax, 1
je 0x491116
cmp rax, 2
je 0x49112d
jmp 0x4910b5
cmp rax, 5
je 0x49115d
cmp rax, 5
ja 0x49116d
jmp 0x49114d
cmp rax, 0xa
je 0x4911ad
cmp rax, 0xa
ja 0x490e73
cmp rax, 8
je 0x49118d
cmp rax, 9
je 0x49119d
jmp 0x4910b5
cmp rax, 0xc
je 0x4911cd
cmp rax, 0xc
ja 0x4911dd
jmp 0x4911bd
cmp rax, 0x15
je 0x49126b
cmp rax, 0x15
ja 0x490ede
cmp rax, 0x11
je 0x49122b
cmp rax, 0x11
ja 0x490ec5
cmp rax, 0xf
je 0x491204
cmp rax, 0x10
je 0x49121b
jmp 0x4910b5
cmp rax, 0x13
je 0x49124b
cmp rax, 0x13
ja 0x49125b
jmp 0x49123b
cmp rax, 0x19
je 0x4912ab
cmp rax, 0x19
ja 0x490f07
cmp rax, 0x17
je 0x49128b
cmp rax, 0x17
ja 0x49129b
jmp 0x49127b
cmp rax, 0x1b
je 0x4912cb
cmp rax, 0x1b
ja 0x4912db
jmp 0x4912bb
cmp rax, 0x6ffffefc
je 0x4913e0
cmp rax, 0x6ffffefc
ja 0x490ff8
cmp rax, 0x6ffffdfb
je 0x491362
cmp rax, 0x6ffffdfb
ja 0x490f9e
cmp rax, 0x21
je 0x491322
cmp rax, 0x21
ja 0x490f75
cmp rax, 0x1e
je 0x491302
cmp rax, 0x20
je 0x491312
jmp 0x4910b5
cmp rax, 0x6ffffdf9
je 0x491342
cmp rax, 0x6ffffdf9
ja 0x491352
cmp rax, 0x6ffffdf8
je 0x491332
jmp 0x4910b5
cmp rax, 0x6ffffdff
je 0x4913a2
cmp rax, 0x6ffffdff
ja 0x490fcf
cmp rax, 0x6ffffdfd
je 0x491382
cmp rax, 0x6ffffdfd
ja 0x491392
jmp 0x491372
cmp rax, 0x6ffffefa
je 0x4913b2
cmp rax, 0x6ffffefa
ja 0x4913c9
cmp rax, 0x6ffffef5
je 0x4914cd
jmp 0x4910b5
cmp rax, 0x6ffffffb
je 0x491447
cmp rax, 0x6ffffffb
ja 0x491060
cmp rax, 0x6ffffeff
je 0x491417
cmp rax, 0x6ffffeff
ja 0x49103a
cmp rax, 0x6ffffefd
je 0x4913f7
cmp rax, 0x6ffffefe
je 0x491407
jmp 0x4910b5
cmp rax, 0x6ffffff9
je 0x491427
cmp rax, 0x6ffffff9
ja 0x491437
cmp rax, 0x6ffffff0
je 0x491457
jmp 0x4910b5
cmp rax, 0x6fffffff
je 0x49148b
cmp rax, 0x6fffffff
ja 0x491091
cmp rax, 0x6ffffffd
je 0x491471
cmp rax, 0x6ffffffd
ja 0x49147e
jmp 0x491464
cmp rax, 0x7ffffffe
je 0x4914ac
cmp rax, 0x7fffffff
je 0x4914b9
cmp rax, 0x7ffffffd
je 0x491498
mov rax, qword [rbp + 0x10]
mov rax, qword [rax + 0x1d0]
test rax, rax
je 0x4910dd
mov rax, qword [rbp + 0x10]
mov rax, qword [rax + 0x1d0]
mov rdx, qword [rbp - 0x30]
mov rcx, rdx
call rax
mov qword [rbp + 0x78], rax
mov rax, qword [rbp + 0x78]
movzx eax, byte [rax]
movzx eax, al
test eax, eax
jne 0x4914da
mov rdx, qword [rbp - 0x30]
lea rax, [rbp - 0x50]
mov r8, rdx
lea rdx, str._I64x
mov rcx, rax
call sub.msvcrt.dll_sprintf
lea rax, [rbp - 0x50]
mov qword [rbp + 0x78], rax
jmp 0x4914da
lea rax, str.NEEDED
mov qword [rbp + 0x78], rax
mov dword [rbp + 0x74], 1
jmp 0x4914db
lea rax, str.PLTRELSZ
mov qword [rbp + 0x78], rax
jmp 0x4914db
lea rax, str.PLTGOT
mov qword [rbp + 0x78], rax
jmp 0x4914db
lea rax, str.HASH
mov qword [rbp + 0x78], rax
jmp 0x4914db
lea rax, str.STRTAB
mov qword [rbp + 0x78], rax
jmp 0x4914db
lea rax, str.SYMTAB
mov qword [rbp + 0x78], rax
jmp 0x4914db
lea rax, str.RELA
mov qword [rbp + 0x78], rax
jmp 0x4914db
lea rax, str.RELASZ
mov qword [rbp + 0x78], rax
jmp 0x4914db
lea rax, str.RELAENT
mov qword [rbp + 0x78], rax
jmp 0x4914db
lea rax, str.STRSZ
mov qword [rbp + 0x78], rax
jmp 0x4914db
lea rax, str.SYMENT
mov qword [rbp + 0x78], rax
jmp 0x4914db
lea rax, str.INIT
mov qword [rbp + 0x78], rax
jmp 0x4914db
lea rax, str.FINI
mov qword [rbp + 0x78], rax
jmp 0x4914db
lea rax, str.SONAME
mov qword [rbp + 0x78], rax
mov dword [rbp + 0x74], 1
jmp 0x4914db
lea rax, str.RPATH
mov qword [rbp + 0x78], rax
mov dword [rbp + 0x74], 1
jmp 0x4914db
lea rax, str.SYMBOLIC
mov qword [rbp + 0x78], rax
jmp 0x4914db
lea rax, [0x00547280]
mov qword [rbp + 0x78], rax
jmp 0x4914db
lea rax, str.RELSZ
mov qword [rbp + 0x78], rax
jmp 0x4914db
lea rax, str.RELENT
mov qword [rbp + 0x78], rax
jmp 0x4914db
lea rax, str.PLTREL
mov qword [rbp + 0x78], rax
jmp 0x4914db
lea rax, str.DEBUG
mov qword [rbp + 0x78], rax
jmp 0x4914db
lea rax, str.TEXTREL
mov qword [rbp + 0x78], rax
jmp 0x4914db
lea rax, str.JMPREL
mov qword [rbp + 0x78], rax
jmp 0x4914db
lea rax, str.BIND_NOW
mov qword [rbp + 0x78], rax
jmp 0x4914db
lea rax, str.INIT_ARRAY
mov qword [rbp + 0x78], rax
jmp 0x4914db
lea rax, str.FINI_ARRAY
mov qword [rbp + 0x78], rax
jmp 0x4914db
lea rax, str.INIT_ARRAYSZ
mov qword [rbp + 0x78], rax
jmp 0x4914db
lea rax, str.FINI_ARRAYSZ
mov qword [rbp + 0x78], rax
jmp 0x4914db
lea rax, str.RUNPATH
mov qword [rbp + 0x78], rax
mov dword [rbp + 0x74], 1
jmp 0x4914db
lea rax, str.FLAGS
mov qword [rbp + 0x78], rax
jmp 0x4914db
lea rax, str.PREINIT_ARRAY
mov qword [rbp + 0x78], rax
jmp 0x4914db
lea rax, str.PREINIT_ARRAYSZ
mov qword [rbp + 0x78], rax
jmp 0x4914db
lea rax, str.CHECKSUM
mov qword [rbp + 0x78], rax
jmp 0x4914db
lea rax, str.PLTPADSZ
mov qword [rbp + 0x78], rax
jmp 0x4914db
lea rax, str.MOVEENT
mov qword [rbp + 0x78], rax
jmp 0x4914db
lea rax, str.MOVESZ
mov qword [rbp + 0x78], rax
jmp 0x4914db
lea rax, str.FEATURE
mov qword [rbp + 0x78], rax
jmp 0x4914db
lea rax, str.POSFLAG_1
mov qword [rbp + 0x78], rax
jmp 0x4914db
lea rax, str.SYMINSZ
mov qword [rbp + 0x78], rax
jmp 0x4914db
lea rax, str.SYMINENT
mov qword [rbp + 0x78], rax
jmp 0x4914db
lea rax, str.CONFIG
mov qword [rbp + 0x78], rax
mov dword [rbp + 0x74], 1
jmp 0x4914db
lea rax, str.DEPAUDIT
mov qword [rbp + 0x78], rax
mov dword [rbp + 0x74], 1
jmp 0x4914db
lea rax, str.AUDIT
mov qword [rbp + 0x78], rax
mov dword [rbp + 0x74], 1
jmp 0x4914db
lea rax, str.PLTPAD
mov qword [rbp + 0x78], rax
jmp 0x4914db
lea rax, str.MOVETAB
mov qword [rbp + 0x78], rax
jmp 0x4914db
lea rax, str.SYMINFO
mov qword [rbp + 0x78], rax
jmp 0x4914db
lea rax, str.RELACOUNT
mov qword [rbp + 0x78], rax
jmp 0x4914db
lea rax, str.RELCOUNT
mov qword [rbp + 0x78], rax
jmp 0x4914db
lea rax, str.FLAGS_1
mov qword [rbp + 0x78], rax
jmp 0x4914db
lea rax, str.VERSYM
mov qword [rbp + 0x78], rax
jmp 0x4914db
lea rax, str.VERDEF
mov qword [rbp + 0x78], rax
jmp 0x4914db
lea rax, str.VERDEFNUM
mov qword [rbp + 0x78], rax
jmp 0x4914db
lea rax, str.VERNEED
mov qword [rbp + 0x78], rax
jmp 0x4914db
lea rax, str.VERNEEDNUM
mov qword [rbp + 0x78], rax
jmp 0x4914db
lea rax, str.AUXILIARY
mov qword [rbp + 0x78], rax
mov dword [rbp + 0x74], 1
jmp 0x4914db
lea rax, str.USED
mov qword [rbp + 0x78], rax
jmp 0x4914db
lea rax, str.FILTER
mov qword [rbp + 0x78], rax
mov dword [rbp + 0x74], 1
jmp 0x4914db
lea rax, str.GNU_HASH
mov qword [rbp + 0x78], rax
jmp 0x4914db
nop
mov rdx, qword [rbp + 0x78]
mov rax, qword [rbp + 0x48]
mov r8, rdx
lea rdx, str.____20s
mov rcx, rax
call sub.msvcrt.dll_fprintf
cmp dword [rbp + 0x74], 0
jne 0x491535
mov rax, qword [rbp + 0x48]
mov r9, rax
mov r8d, 2
mov edx, 1
lea rcx, [0x005473f1]
call main
mov rdx, qword [rbp - 0x28]
mov rax, qword [rbp + 0x48]
mov r8, rdx
mov rdx, rax
mov rcx, qword [rbp + 0xb0]
call fcn.0044aa1a
jmp 0x491572
mov rax, qword [rbp - 0x28]
mov dword [rbp + 0xc], eax
mov edx, dword [rbp + 0xc]
mov eax, dword [rbp + 0x30]
mov r8d, edx
mov edx, eax
mov rcx, qword [rbp + 0xb0]
call fcn.0048df7b
mov qword [rbp], rax
cmp qword [rbp], 0
je 0x4918cb
mov rdx, qword [rbp + 0x48]
mov rax, qword [rbp]
mov rcx, rax
call sub.msvcrt.dll_fputs
mov rax, qword [rbp + 0x48]
mov rdx, rax
mov ecx, 0xa
call sub.msvcrt.dll_fputc
mov rax, qword [rbp + 0x28]
add qword [rbp + 0x80], rax
mov rax, qword [rbp + 0x28]
neg rax
mov rdx, rax
mov rax, qword [rbp + 0x18]
add rax, rdx
cmp qword [rbp + 0x80], rax
jbe 0x490d7c
jmp 0x4915af
nop
mov rax, qword [rbp - 8]
mov rcx, rax
call sub.msvcrt.dll_free
mov qword [rbp - 8], 0
mov rax, qword [rbp + 0xb0]
mov rax, qword [rax + 0xf0]
mov eax, dword [rax + 0xc7c]
test eax, eax
je 0x4915f5
mov rax, qword [rbp + 0xb0]
mov rax, qword [rax + 0xf0]
mov rax, qword [rax + 0x340]
test rax, rax
je 0x491627
mov rax, qword [rbp + 0xb0]
mov rax, qword [rax + 0xf0]
mov eax, dword [rax + 0xc80]
test eax, eax
je 0x491646
mov rax, qword [rbp + 0xb0]
mov rax, qword [rax + 0xf0]
mov rax, qword [rax + 0x348]
test rax, rax
jne 0x491646
mov edx, 0
mov rcx, qword [rbp + 0xb0]
call fcn.004a0bf7
test eax, eax
jne 0x491646
mov eax, 0
jmp 0x4918e6
mov rax, qword [rbp + 0xb0]
mov rax, qword [rax + 0xf0]
mov eax, dword [rax + 0xc7c]
test eax, eax
je 0x4917a5
mov rax, qword [rbp + 0x48]
mov r9, rax
mov r8d, 0x16
mov edx, 1
lea rcx, str._nVersion_definitions:_n
call main
mov rax, qword [rbp + 0xb0]
mov rax, qword [rax + 0xf0]
mov rax, qword [rax + 0x340]
mov qword [rbp + 0x68], rax
jmp 0x49179a
mov rax, qword [rbp + 0x68]
mov rax, qword [rax + 0x20]
test rax, rax
je 0x4916b5
mov rax, qword [rbp + 0x68]
mov rax, qword [rax + 0x20]
jmp 0x4916bc
lea rax, str._corrupt_
mov rdx, qword [rbp + 0x68]
mov edx, dword [rdx + 8]
mov rcx, qword [rbp + 0x68]
movzx ecx, word [rcx + 2]
movzx r9d, cx
mov rcx, qword [rbp + 0x68]
movzx ecx, word [rcx + 4]
movzx r8d, cx
mov rcx, qword [rbp + 0x48]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], edx
lea rdx, str._d_0x_2.2x_0x_8.8lx__s_n
call sub.msvcrt.dll_fprintf
mov rax, qword [rbp + 0x68]
mov rax, qword [rax + 0x30]
test rax, rax
je 0x49178e
mov rax, qword [rbp + 0x68]
mov rax, qword [rax + 0x30]
mov rax, qword [rax + 0x10]
test rax, rax
je 0x49178e
mov rax, qword [rbp + 0x48]
mov rdx, rax
mov ecx, 9
call sub.msvcrt.dll_fputc
mov rax, qword [rbp + 0x68]
mov rax, qword [rax + 0x30]
mov rax, qword [rax + 0x10]
mov qword [rbp + 0x60], rax
jmp 0x491776
mov rax, qword [rbp + 0x60]
mov rax, qword [rax + 8]
test rax, rax
je 0x491750
mov rax, qword [rbp + 0x60]
mov rax, qword [rax + 8]
jmp 0x491757
lea rax, str._corrupt_
mov rcx, qword [rbp + 0x48]
mov r8, rax
lea rdx, [0x0054742d]
call sub.msvcrt.dll_fprintf
mov rax, qword [rbp + 0x60]
mov rax, qword [rax + 0x10]
mov qword [rbp + 0x60], rax
cmp qword [rbp + 0x60], 0
jne 0x491739
mov rax, qword [rbp + 0x48]
mov rdx, rax
mov ecx, 0xa
call sub.msvcrt.dll_fputc
mov rax, qword [rbp + 0x68]
mov rax, qword [rax + 0x28]
mov qword [rbp + 0x68], rax
cmp qword [rbp + 0x68], 0
jne 0x49169e
mov rax, qword [rbp + 0xb0]
mov rax, qword [rax + 0xf0]
mov eax, dword [rax + 0xc80]
test eax, eax
je 0x4918bb
mov rax, qword [rbp + 0x48]
mov r9, rax
mov r8d, 0x15
mov edx, 1
lea rcx, str._nVersion_References:_n
call main
mov rax, qword [rbp + 0xb0]
mov rax, qword [rax + 0xf0]
mov rax, qword [rax + 0x348]
mov qword [rbp + 0x58], rax
jmp 0x4918b0
mov rax, qword [rbp + 0x58]
mov rax, qword [rax + 0x18]
test rax, rax
je 0x491814
mov rax, qword [rbp + 0x58]
mov rax, qword [rax + 0x18]
jmp 0x49181b
lea rax, str._corrupt_
mov rcx, qword [rbp + 0x48]
mov r8, rax
lea rdx, str.__required_from__s:_n
call sub.msvcrt.dll_fprintf
mov rax, qword [rbp + 0x58]
mov rax, qword [rax + 0x20]
mov qword [rbp + 0x50], rax
jmp 0x49189d
mov rax, qword [rbp + 0x50]
mov rax, qword [rax + 0x10]
test rax, rax
je 0x491853
mov rax, qword [rbp + 0x50]
mov rax, qword [rax + 0x10]
jmp 0x49185a
lea rax, str._corrupt_
mov rdx, qword [rbp + 0x50]
movzx edx, word [rdx + 6]
movzx edx, dx
mov rcx, qword [rbp + 0x50]
movzx ecx, word [rcx + 4]
movzx r9d, cx
mov rcx, qword [rbp + 0x50]
mov r8d, dword [rcx]
mov rcx, qword [rbp + 0x48]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], edx
lea rdx, str.____0x_8.8lx_0x_2.2x__2.2d__s_n
call sub.msvcrt.dll_fprintf
mov rax, qword [rbp + 0x50]
mov rax, qword [rax + 0x18]
mov qword [rbp + 0x50], rax
cmp qword [rbp + 0x50], 0
jne 0x49183c
mov rax, qword [rbp + 0x58]
mov rax, qword [rax + 0x28]
mov qword [rbp + 0x58], rax
cmp qword [rbp + 0x58], 0
jne 0x4917fd
mov eax, 1
jmp 0x4918e6
nop
jmp 0x4918cc
nop
jmp 0x4918cc
nop
jmp 0x4918cc
nop
mov rax, qword [rbp - 8]
test rax, rax
je 0x4918e1
mov rax, qword [rbp - 8]
mov rcx, rax
call sub.msvcrt.dll_free
mov eax, 0
add rsp, 0x120
pop rbp
ret