Function at 0x420ba0
Capabilities:
Write file on windows

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0xe8
mov rbx, qword [rcx + 0xf0]
mov r8d, dword [rbx + 0x258]
mov r15, rdx
mov r14, rcx
lea rdx, [0x004d3362]
mov rcx, r15
call sub.msvcrt.dll_fprintf
mov eax, dword [rbx + 0x258]
test al, 1
jne 0x421092
test al, 2
jne 0x421071
test al, 4
jne 0x421050
test al, 8
jne 0x420f30
test al, 0x20
jne 0x420f54
test al, 0x80
jne 0x420f78
test ah, 1
jne 0x420f9d
test ah, 2
jne 0x420fc2
test ah, 0x10
jne 0x420fe7
test ah, 0x20
jne 0x42100c
test ah, 0x80
jne 0x421031
movsxd rax, dword [rbx + 0xa8]
mov qword [rsp + 0xc0], rax
lea rax, [rsp + 0xc0]
mov rcx, rax
mov qword [rsp + 0x98], rax
call qword [sym.imp.msvcrt.dll__ctime64]
lea rdx, [0x004d342d]
mov rcx, r15
mov r8, rax
call sub.msvcrt.dll_fprintf
movsx r8d, word [rbx + 0xb8]
cmp r8w, 0x10b
je 0x420cb0
cmp r8w, 0x20b
je 0x4210b3
lea rsi, [0x004d32be]
cmp r8w, 0x107
je 0x420cb7
lea rdx, [0x004d343c]
mov rcx, r15
call sub.msvcrt.dll_fprintf
jmp 0x420cd8
lea rsi, [0x004d32c8]
lea rdx, [0x004d343c]
mov rcx, r15
call sub.msvcrt.dll_fprintf
mov r8, rsi
mov rcx, r15
lea rdx, [0x004d3f2b]
call sub.msvcrt.dll_fprintf
movsx r8d, byte [rbx + 0xba]
lea rdx, [0x004d3449]
mov rcx, r15
call sub.msvcrt.dll_fprintf
movsx r8d, byte [rbx + 0xbb]
lea rdx, [0x004d3461]
mov rcx, r15
call sub.msvcrt.dll_fprintf
mov r8d, dword [rbx + 0xbc]
lea rdx, [0x004d3478]
mov rcx, r15
call sub.msvcrt.dll_fprintf
mov r8d, dword [rbx + 0xc0]
lea rdx, [0x004d348b]
mov rcx, r15
call sub.msvcrt.dll_fprintf
mov r8d, dword [rbx + 0xc4]
lea rdx, [0x004d34a8]
mov rcx, r15
call sub.msvcrt.dll_fprintf
mov r9, r15
mov r8d, 0x14
mov edx, 1
lea rcx, [0x004d34c7]
call sub.msvcrt.dll_fwrite
mov r8, qword [rbx + 0xc8]
mov rdx, r15
mov rcx, r14
call fcn.0040f3c0
mov r9, r15
mov r8d, 0xd
mov edx, 1
lea rcx, [0x004d34dc]
call sub.msvcrt.dll_fwrite
mov r8, qword [rbx + 0xd0]
mov rdx, r15
mov rcx, r14
call fcn.0040f3c0
mov r9, r15
mov r8d, 0xc
mov edx, 1
lea rcx, [0x004d34ea]
call sub.msvcrt.dll_fwrite
mov r8, qword [rbx + 0xe0]
mov rdx, r15
mov rcx, r14
call fcn.0040f3c0
mov r9, r15
mov r8d, 0x12
mov edx, 1
lea rcx, [0x004d34f7]
call sub.msvcrt.dll_fwrite
mov r8, qword [rbx + 0xe8]
mov rdx, r15
mov rcx, r14
call fcn.0040f3c0
mov r9, r15
mov r8d, 0x10
mov edx, 1
lea rcx, [0x004d350a]
call sub.msvcrt.dll_fwrite
mov r8, qword [rbx + 0xf0]
mov rdx, r15
mov rcx, r14
call fcn.0040f3c0
movsx r8d, word [rbx + 0xf8]
lea rdx, [0x004d351b]
mov rcx, r15
call sub.msvcrt.dll_fprintf
movsx r8d, word [rbx + 0xfa]
lea rdx, [0x004d3534]
mov rcx, r15
call sub.msvcrt.dll_fprintf
movsx r8d, word [rbx + 0xfc]
lea rdx, [0x004d354c]
mov rcx, r15
call sub.msvcrt.dll_fprintf
movsx r8d, word [rbx + 0xfe]
lea rdx, [0x004d3562]
mov rcx, r15
call sub.msvcrt.dll_fprintf
movsx r8d, word [rbx + 0x100]
lea rdx, [0x004d3578]
mov rcx, r15
call sub.msvcrt.dll_fprintf
movsx r8d, word [rbx + 0x102]
lea rdx, [0x004d3592]
mov rcx, r15
call sub.msvcrt.dll_fprintf
mov r8d, dword [rbx + 0x104]
lea rdx, [0x004d35ac]
mov rcx, r15
call sub.msvcrt.dll_fprintf
mov r8d, dword [rbx + 0x108]
lea rdx, [0x004d35c1]
mov rcx, r15
call sub.msvcrt.dll_fprintf
mov r8d, dword [rbx + 0x10c]
lea rdx, [0x004d35d5]
mov rcx, r15
call sub.msvcrt.dll_fprintf
mov r8d, dword [rbx + 0x110]
lea rdx, [0x004d35eb]
mov rcx, r15
call sub.msvcrt.dll_fprintf
movsx r8d, word [rbx + 0x114]
cmp r8w, 0xe
ja case.0x420f2b.4
lea rdx, [0x004d4030]
movzx eax, r8w
movsxd rax, dword [rdx + rax*4]
add rax, rdx
jmp rax
lea r8, [0x004d33b4]
mov rcx, r15
lea rdx, [0x004d338e]
call sub.msvcrt.dll_fprintf
mov eax, dword [rbx + 0x258]
test al, 0x20
je 0x420c04
lea r8, [0x004d33c5]
mov rcx, r15
lea rdx, [0x004d338e]
call sub.msvcrt.dll_fprintf
mov eax, dword [rbx + 0x258]
test al, 0x80
je 0x420c0c
lea r8, [0x004d33d9]
mov rcx, r15
lea rdx, [0x004d338e]
call sub.msvcrt.dll_fprintf
mov eax, dword [rbx + 0x258]
test ah, 1
je 0x420c15
lea r8, [0x004d33e7]
mov rcx, r15
lea rdx, [0x004d338e]
call sub.msvcrt.dll_fprintf
mov eax, dword [rbx + 0x258]
test ah, 2
je 0x420c1e
lea r8, [0x004d33f4]
mov rcx, r15
lea rdx, [0x004d338e]
call sub.msvcrt.dll_fprintf
mov eax, dword [rbx + 0x258]
test ah, 0x10
je 0x420c27
lea r8, [0x004d3412]
mov rcx, r15
lea rdx, [0x004d338e]
call sub.msvcrt.dll_fprintf
mov eax, dword [rbx + 0x258]
test ah, 0x20
je 0x420c30
lea r8, [0x004d341e]
mov rcx, r15
lea rdx, [0x004d338e]
call sub.msvcrt.dll_fprintf
mov eax, dword [rbx + 0x258]
test ah, 0x80
je 0x420c39
lea r8, [0x004d3422]
mov rcx, r15
lea rdx, [0x004d338e]
call sub.msvcrt.dll_fprintf
jmp 0x420c39
lea r8, [0x004d339e]
mov rcx, r15
lea rdx, [0x004d338e]
call sub.msvcrt.dll_fprintf
mov eax, dword [rbx + 0x258]
jmp 0x420bf4
lea r8, [0x004d3393]
mov rcx, r15
lea rdx, [0x004d338e]
call sub.msvcrt.dll_fprintf
mov eax, dword [rbx + 0x258]
jmp 0x420bec
lea r8, [0x004d3379]
mov rcx, r15
lea rdx, [0x004d338e]
call sub.msvcrt.dll_fprintf
mov eax, dword [rbx + 0x258]
jmp 0x420be4
lea rsi, [0x004d32c2]
jmp 0x420cb7
lea rsi, [0x004d3334]
nop word cs:[rax + rax]
lea rdx, [0x004d35fc]
mov rcx, r15
call sub.msvcrt.dll_fprintf
mov r8, rsi
mov rcx, r15
lea rdx, [0x004d3f2b]
call sub.msvcrt.dll_fprintf
movzx r8d, word [rbx + 0x116]
mov rcx, r15
add rbx, 0x140
xor r13d, r13d
lea rdx, [0x004d360c]
lea rsi, [0x004d3288]
lea rbp, [0x004d36ba]
call sub.msvcrt.dll_fprintf
mov r9, r15
mov r8d, 0x13
mov edx, 1
lea rcx, [0x004d3626]
call sub.msvcrt.dll_fwrite
mov r8, qword [rbx - 0x28]
mov rdx, r15
mov rcx, r14
lea rdi, [0x004d36c5]
lea r12, [0x004d46e0]
call fcn.0040f3c0
mov r9, r15
mov r8d, 0x13
mov edx, 1
lea rcx, [0x004d363a]
call sub.msvcrt.dll_fwrite
mov r8, qword [rbx - 0x20]
mov rdx, r15
mov rcx, r14
call fcn.0040f3c0
mov r9, r15
mov r8d, 0x13
mov edx, 1
lea rcx, [0x004d364e]
call sub.msvcrt.dll_fwrite
mov r8, qword [rbx - 0x18]
mov rdx, r15
mov rcx, r14
call fcn.0040f3c0
mov r9, r15
mov r8d, 0x12
mov edx, 1
lea rcx, [0x004d3662]
call sub.msvcrt.dll_fwrite
mov r8, qword [rbx - 0x10]
mov rdx, r15
mov rcx, r14
call fcn.0040f3c0
mov r8d, dword [rbx - 8]
lea rdx, [0x004d3675]
mov rcx, r15
call sub.msvcrt.dll_fprintf
mov r8d, dword [rbx - 4]
lea rdx, [0x004d368a]
mov rcx, r15
call sub.msvcrt.dll_fprintf
mov r9, r15
mov r8d, 0x14
mov edx, 1
lea rcx, [0x004d36a5]
call sub.msvcrt.dll_fwrite
jmp 0x421224
mov rsi, qword [r12 + r13*8]
mov r8d, r13d
mov rdx, rbp
mov rcx, r15
call sub.msvcrt.dll_fprintf
mov r8, qword [rbx]
mov rdx, r15
mov rcx, r14
add r13, 1
add rbx, 0x10
call fcn.0040f3c0
mov r8d, dword [rbx - 8]
mov rdx, rdi
mov rcx, r15
call sub.msvcrt.dll_fprintf
mov r8, rsi
mov rcx, r15
lea rdx, [0x004d36cd]
call sub.msvcrt.dll_fprintf
cmp r13, 0x10
jne 0x421220
mov rax, qword [r14 + 0xf0]
mov rbx, qword [rax + 0x150]
mov qword [rsp + 0x68], rax
test rbx, rbx
jne 0x421295
mov ecx, dword [rax + 0x158]
test ecx, ecx
je 0x421f80
mov rax, qword [rsp + 0x68]
mov r13, qword [r14 + 0x88]
add rbx, qword [rax + 0xe0]
test r13, r13
je 0x4212d2
nop dword [rax]
mov rax, qword [r13 + 0x28]
cmp rbx, rax
jb 0x4212c9
mov r12, qword [r13 + 0x38]
add rax, r12
cmp rbx, rax
jb 0x4219d0
mov r13, qword [r13 + 0x10]
test r13, r13
jne 0x4212b0
mov r9, r15
mov r8d, 0x4c
mov edx, 1
lea rcx, [0x004d3f38]
call sub.msvcrt.dll_fwrite
mov r12, qword [r14 + 0xf0]
mov r9, qword [r12 + 0x140]
test r9, r9
jne 0x421310
mov eax, dword [r12 + 0x148]
test eax, eax
je 0x421f40
mov rbp, qword [r14 + 0x88]
add r9, qword [r12 + 0xe0]
test rbp, rbp
je 0x421347
mov rax, qword [rbp + 0x28]
cmp r9, rax
jb 0x42133e
mov rdx, qword [rbp + 0x38]
lea rcx, [rax + rdx]
cmp r9, rcx
jb 0x4214a0
mov rbp, qword [rbp + 0x10]
test rbp, rbp
jne 0x421324
mov r9, r15
mov r8d, 0x4c
mov edx, 1
lea rcx, [0x004d3fd8]
call sub.msvcrt.dll_fwrite
mov rax, qword [r14 + 8]
mov rax, qword [rax + 0x360]
mov rax, qword [rax + 0x150]
test rax, rax
je 0x422225
mov rdx, r15
mov rcx, r14
call rax
lea rdx, [0x004d2ec6]
mov rcx, r14
mov qword [rsp + 0xc0], 0
call fcn.004135c0
test rax, rax
mov rsi, rax
je 0x4213b8
cmp qword [rax + 0x38], 0
je 0x4213b8
test byte [rax + 0x21], 1
jne 0x421ff3
mov rdx, r15
mov rcx, r14
call fcn.004202c0
mov rsi, qword [r14 + 0xf0]
test rsi, rsi
je 0x4213f9
lea rdx, [0x004d2eb2]
mov rcx, r14
call fcn.004135c0
test rax, rax
mov r12, rax
je 0x4213f9
test byte [rax + 0x21], 1
je 0x4213f9
mov rdi, qword [rax + 0x38]
test rdi, rdi
jne 0x42203f
mov eax, 1
add rsp, 0xe8
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
lea rsi, [0x004d32f8]
jmp 0x4210d0
lea rsi, [0x004d32e5]
jmp 0x4210d0
lea rsi, [0x004d32d2]
jmp 0x4210d0
lea rsi, [0x004d32cd]
jmp 0x4210d0
lea rsi, [0x004d3356]
jmp 0x4210d0
lea rsi, [0x004d334c]
jmp 0x4210d0
lea rsi, [0x004d3340]
jmp 0x4210d0
lea rsi, [0x004d3320]
jmp 0x4210d0
lea rsi, [0x004d3310]
jmp 0x4210d0
lea rsi, [0x004d332a]
jmp 0x4210d0
lea rdx, [0x004d35fc]
mov rcx, r15
call sub.msvcrt.dll_fprintf
jmp 0x4210f1
test byte [rbp + 0x21], 1
mov r8, qword [rbp]
je 0x421ef4
movsxd rbx, dword [r12 + 0x148]
mov rdi, r9
sub rdi, rax
sub rdx, rdi
cmp rbx, rdx
ja 0x421fdf
cmp rbx, 0x23
jbe 0x421f10
lea rdx, [0x004d3988]
mov rcx, r15
call sub.msvcrt.dll_fprintf
mov rcx, rbx
call fcn.004110d0
test rax, rax
mov r13, rax
je 0x421361
mov qword [rsp + 0x20], rbx
mov r9, rdi
mov r8, rax
mov rdx, rbp
mov rcx, r14
call fcn.00413d60
test eax, eax
je 0x421361
mov rax, qword [r14 + 8]
mov rcx, r13
call qword [rax + 0x38]
lea rcx, [r13 + 4]
mov qword [rsp + 0x78], rax
mov rax, qword [r14 + 8]
call qword [rax + 0x38]
lea rcx, [r13 + 8]
mov qword [rsp + 0x80], rax
mov rax, qword [r14 + 8]
call qword [rax + 0x50]
lea rcx, [r13 + 0xa]
mov qword [rsp + 0x88], rax
mov rax, qword [r14 + 8]
call qword [rax + 0x50]
lea rcx, [r13 + 0xc]
mov qword [rsp + 0x90], rax
mov rax, qword [r14 + 8]
call qword [rax + 0x38]
lea rcx, [r13 + 0x10]
mov qword [rsp + 0x70], rax
mov rax, qword [r14 + 8]
call qword [rax + 0x38]
lea rcx, [r13 + 0x14]
mov qword [rsp + 0x58], rax
mov rax, qword [r14 + 8]
call qword [rax + 0x38]
lea rcx, [r13 + 0x18]
mov rsi, rax
mov rax, qword [r14 + 8]
call qword [rax + 0x38]
lea rcx, [r13 + 0x1c]
mov qword [rsp + 0x48], rax
mov rax, qword [r14 + 8]
call qword [rax + 0x38]
lea rcx, [r13 + 0x20]
mov qword [rsp + 0x60], rax
mov rax, qword [r14 + 8]
call qword [rax + 0x38]
lea rcx, [r13 + 0x24]
mov qword [rsp + 0x50], rax
mov rax, qword [r14 + 8]
call qword [rax + 0x38]
mov rdx, rdi
mov r8, qword [rbp]
mov rcx, r15
sub rdx, qword [r12 + 0xe0]
mov qword [rsp + 0x68], rax
mov r12, qword [rbp + 0x28]
add r12, rdx
lea rdx, [0x004d39b8]
call sub.msvcrt.dll_fprintf
mov r8d, dword [rsp + 0x78]
lea rdx, [0x004d39ef]
mov rcx, r15
call sub.msvcrt.dll_fprintf
mov r8d, dword [rsp + 0x80]
lea rdx, [0x004d3a04]
mov rcx, r15
call sub.msvcrt.dll_fprintf
lea rdx, [0x004d3a1b]
mov rcx, r15
movsx r9d, word [rsp + 0x90]
movsx r8d, word [rsp + 0x88]
call sub.msvcrt.dll_fprintf
mov r9, r15
mov r8d, 9
mov edx, 1
lea rcx, [0x004d3a31]
call sub.msvcrt.dll_fwrite
mov rdi, qword [rsp + 0x70]
mov rdx, r15
mov rcx, r14
mov r8, rdi
call fcn.0040f3c0
cmp rdi, r12
jb 0x421679
lea rax, [rbx + r12]
cmp rdi, rax
jb 0x422525
mov r9, r15
mov r8d, 0x19
mov edx, 1
lea rcx, [0x004d3a42]
call sub.msvcrt.dll_fwrite
mov rbp, qword [rsp + 0x58]
lea rdx, [0x004d3a5c]
mov rcx, r15
mov r8d, ebp
call sub.msvcrt.dll_fprintf
mov r9, r15
mov r8d, 0xb
mov edx, 1
lea rcx, [0x004d3a71]
call sub.msvcrt.dll_fwrite
mov r8d, esi
mov rcx, r15
lea rdx, [0x004d3a80]
call sub.msvcrt.dll_fprintf
mov r8d, dword [rsp + 0x48]
lea rdx, [0x004d3aa0]
mov rcx, r15
call sub.msvcrt.dll_fprintf
mov r9, r15
mov r8d, 0x10
mov edx, 1
lea rcx, [0x004d3ac5]
call sub.msvcrt.dll_fwrite
mov r9, r15
mov r8d, 0x18
mov edx, 1
lea rcx, [0x004d3ad6]
call sub.msvcrt.dll_fwrite
mov rdi, qword [rsp + 0x60]
mov rdx, r15
mov rcx, r14
mov r8, rdi
sub rdi, r12
call fcn.0040f3c0
mov rdx, r15
mov ecx, 0xa
call sub.msvcrt.dll_fputc
mov r9, r15
mov r8d, 0x16
mov edx, 1
lea rcx, [0x004d3aef]
call sub.msvcrt.dll_fwrite
mov r8, qword [rsp + 0x50]
mov rdx, r15
mov rcx, r14
call fcn.0040f3c0
mov rdx, r15
mov ecx, 0xa
call sub.msvcrt.dll_fputc
mov r9, r15
mov r8d, 0x12
mov edx, 1
lea rcx, [0x004d3b06]
call sub.msvcrt.dll_fwrite
mov r8, qword [rsp + 0x68]
mov rdx, r15
mov rcx, r14
call fcn.0040f3c0
mov rdx, r15
mov ecx, 0xa
call sub.msvcrt.dll_fputc
lea rdx, [0x004d3b20]
mov r8d, ebp
mov rcx, r15
call sub.msvcrt.dll_fprintf
lea eax, [rsi*4]
mov rdx, rax
add rax, rdi
cmp rbx, rax
jbe 0x421889
cmp edx, esi
jb 0x421889
test rdi, rdi
js 0x421889
lea eax, [rbx + r12]
xor ebp, ebp
and esi, 0xffffffff
lea rdi, [r13 + rdi]
mov dword [rsp + 0x60], eax
jne 0x421842
jmp 0x4218a0
add rdx, r13
mov dword [rsp + 0x20], eax
mov r8d, ebp
mov rcx, r15
mov qword [rsp + 0x38], rdx
mov edx, dword [rsp + 0x60]
sub edx, eax
mov dword [rsp + 0x30], edx
lea rdx, [0x004d3bbe]
mov qword [rsp + 0x28], rdx
lea rdx, [0x004d3b98]
call sub.msvcrt.dll_fprintf
add rbp, 1
add rdi, 4
cmp rbp, rsi
je 0x4218a0
mov rax, qword [r14 + 8]
mov rcx, rdi
call qword [rax + 0x38]
test rax, rax
je 0x421835
mov ecx, dword [rsp + 0x58]
mov rdx, rax
sub rdx, r12
cmp rbx, rdx
lea r9d, [rbp + rcx]
jae 0x421801
lea rdx, [0x004d3bea]
mov dword [rsp + 0x20], eax
mov r8d, ebp
mov rcx, r15
mov qword [rsp + 0x28], rdx
lea rdx, [0x004d3bcc]
call sub.msvcrt.dll_fprintf
jmp 0x421835
mov r8d, dword [rsp + 0x60]
lea rdx, [0x004d3b50]
mov r9d, esi
mov rcx, r15
call sub.msvcrt.dll_fprintf
mov edx, 1
mov r9, r15
mov r8d, 0x1e
lea rcx, [0x004d3bf8]
call sub.msvcrt.dll_fwrite
mov rdi, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x50]
mov eax, edi
shl eax, 2
sub rsi, r12
mov rdx, rax
add rax, rsi
cmp rbx, rax
jbe 0x4219a1
cmp edx, edi
jb 0x4219a1
test rsi, rsi
js 0x4219a1
mov rdi, qword [rsp + 0x48]
mov r10, qword [rsp + 0x68]
mov eax, edi
sub r10, r12
add eax, eax
add rax, r10
cmp rbx, rax
jbe 0x422550
test r10, r10
js 0x422550
mov rax, rdi
and eax, 0xffffffff
je 0x4219ba
add r10, r13
add rsi, r13
mov qword [rsp + 0x48], r13
lea rbp, [r10 + rax*2]
mov r13, r10
jmp 0x421958
mov r9d, eax
mov r8d, edi
mov rcx, r15
lea rdx, [0x004d3c98]
call sub.msvcrt.dll_fprintf
add r13, 2
add rsi, 4
cmp rbp, r13
je 0x42256e
mov rax, qword [r14 + 8]
mov rcx, r13
call qword [rax + 0x50]
mov rcx, rsi
mov rdi, rax
mov rax, qword [r14 + 8]
call qword [rax + 0x38]
mov rdx, rax
sub rdx, r12
cmp rbx, rdx
jbe 0x421932
mov rax, qword [rsp + 0x48]
mov r9d, ebx
mov r8d, edi
mov rcx, r15
sub r9d, edx
add rax, rdx
mov qword [rsp + 0x20], rax
lea rdx, [0x004d3cb7]
call sub.msvcrt.dll_fprintf
jmp 0x421947
mov r9d, dword [rsp + 0x48]
lea rdx, [0x004d3c18]
mov rcx, r15
mov r8d, dword [rsp + 0x50]
call sub.msvcrt.dll_fprintf
mov rcx, r13
call sub.msvcrt.dll_free
jmp 0x421361
test byte [r13 + 0x21], 1
mov r8, qword [r13]
je 0x421ee0
lea rdx, [0x004d3720]
mov r9d, ebx
mov rcx, r15
call sub.msvcrt.dll_fprintf
mov r8, qword [r13]
lea rdx, [0x004d3750]
mov rcx, r15
mov rsi, qword [r13 + 0x28]
call sub.msvcrt.dll_fprintf
mov r9, r15
mov r8d, 0x78
mov edx, 1
lea rcx, [0x004d3788]
call sub.msvcrt.dll_fwrite
mov r8, qword [rsp + 0x98]
mov rdx, r13
mov rcx, r14
call fcn.00413e50
test eax, eax
jne 0x421a54
mov rcx, qword [rsp + 0xc0]
test rcx, rcx
je 0x4212ec
call sub.msvcrt.dll_free
jmp 0x4212ec
mov rdi, qword [rsp + 0x68]
sub rbx, rsi
mov qword [rsp + 0x70], r13
mov rax, qword [r13 + 0x28]
sub rax, qword [rdi + 0xe0]
mov qword [rsp + 0x48], rax
lea eax, [r12 - 2]
mov dword [rsp + 0x90], eax
jmp 0x421a9b
test rbx, rbx
jne 0x422750
mov rdx, r15
mov ecx, 0xa
call sub.msvcrt.dll_fputc
mov rbx, qword [rsp + 0x58]
lea rax, [rbx + 0x14]
cmp rax, r12
mov qword [rsp + 0x58], rax
ja 0x421f30
mov eax, dword [rsp + 0x48]
lea rdx, [0x004d3801]
mov rcx, r15
lea r8d, [rax + rbx]
call sub.msvcrt.dll_fprintf
mov rcx, qword [rsp + 0xc0]
mov rax, qword [r14 + 8]
add rcx, rbx
call qword [rax + 0x38]
mov rsi, rax
mov rax, qword [rsp + 0xc0]
mov ebp, esi
lea rcx, [rax + rbx + 4]
mov rax, qword [r14 + 8]
call qword [rax + 0x38]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0xc0]
lea rcx, [rax + rbx + 8]
mov rax, qword [r14 + 8]
call qword [rax + 0x38]
mov r13, rax
mov rax, qword [rsp + 0xc0]
lea rcx, [rax + rbx + 0xc]
mov rax, qword [r14 + 8]
call qword [rax + 0x38]
mov rdi, rax
mov rax, qword [rsp + 0xc0]
lea rcx, [rax + rbx + 0x10]
mov rax, qword [r14 + 8]
call qword [rax + 0x38]
mov r9d, dword [rsp + 0x50]
mov dword [rsp + 0x28], edi
mov r8d, esi
mov dword [rsp + 0x30], eax
lea rdx, [0x004d3810]
mov rcx, r15
mov rbx, rax
mov dword [rsp + 0x20], r13d
call sub.msvcrt.dll_fprintf
mov rax, rsi
or rax, rbx
je 0x421f30
mov rax, qword [rsp + 0x70]
sub rdi, qword [rsp + 0x48]
mov rcx, qword [rsp + 0xc0]
cmp rdi, qword [rax + 0x38]
jae 0x421a4a
lea r9, [rcx + rdi]
mov rax, r12
mov rcx, r15
lea rdx, [0x004d382f]
sub rax, rdi
lea r8d, [rax - 1]
call sub.msvcrt.dll_fprintf
test rsi, rsi
je 0x421a80
mov r8d, 0x25
mov r9, r15
mov edx, 1
lea rcx, [0x004d3848]
call sub.msvcrt.dll_fwrite
mov rdi, qword [rsp + 0x48]
mov eax, ebx
mov rcx, qword [rsp + 0xc0]
sub eax, edi
sub ebp, edi
cdqe
mov r13d, ebp
mov r8, rcx
lea rdi, [rcx + rax]
mov qword [rsp + 0x78], rdi
mov rdi, r12
sub rdi, rax
cmp rsi, rbx
mov qword [rsp + 0x88], rdi
je 0x421ea0
mov rdi, qword [r14 + 0x88]
test rdi, rdi
je 0x421c3f
mov rax, qword [rsp + 0x68]
mov r10, qword [rax + 0xe0]
lea rax, [rbx + r10]
nop dword [rax]
mov rdx, qword [rdi + 0x28]
cmp rax, rdx
jb 0x421c36
mov r8, qword [rdi + 0x38]
lea r9, [rdx + r8]
cmp rax, r9
jb 0x421c60
mov rdi, qword [rdi + 0x10]
test rdi, rdi
jne 0x421c20
mov r9, r15
mov r8d, 0x4a
mov edx, 1
lea rcx, [0x004d3f88]
call sub.msvcrt.dll_fwrite
jmp 0x421a96
cmp rdi, qword [rsp + 0x70]
je 0x421fb4
lea r9d, [rbx + r10]
mov r10d, r9d
sub r10d, edx
movsxd r9, r10d
sub r8, r9
mov qword [rsp + 0x60], r9
mov rcx, r8
mov rbp, r8
mov qword [rsp + 0x88], r8
call fcn.004110d0
test rax, rax
mov qword [rsp + 0x78], rax
mov r8, rax
je 0x421a96
mov r9, qword [rsp + 0x60]
mov qword [rsp + 0x20], rbp
mov rdx, rdi
mov rcx, r14
call fcn.00413d60
test eax, eax
je 0x422080
movsxd rax, r13d
mov qword [rsp + 0x80], rax
mov r13, rax
add rax, 8
cmp r12, rax
jb 0x421e8f
mov rcx, qword [rsp + 0xc0]
mov dword [rsp + 0xac], 1
mov rax, qword [rsp + 0x80]
mov rdx, 0xfffffffffffffffc
mov rbp, r13
mov qword [rsp + 0x60], rsi
lea rdi, [rax + 8]
sub rdx, rax
mov qword [rsp + 0xa0], rdx
jmp 0x421df2
lea rsi, [rdx + 2]
cmp r12, rsi
jbe 0x421e32
mov rcx, qword [rsp + 0xc0]
mov rax, qword [r14 + 8]
add rcx, rdx
call qword [rax + 0x50]
mov edx, dword [rsp + 0x90]
mov r8d, r13d
mov rcx, r15
add rsi, qword [rsp + 0xc0]
mov r9d, eax
sub edx, ebp
mov dword [rsp + 0x20], edx
lea rdx, [0x004d389f]
mov qword [rsp + 0x28], rsi
call sub.msvcrt.dll_fprintf
cmp qword [rsp + 0x50], 0
setne dl
test rbx, rbx
setne al
test dl, al
je 0x421dca
cmp rbx, qword [rsp + 0x60]
je 0x421dca
mov rax, qword [rsp + 0xa0]
add rax, rdi
cmp rax, qword [rsp + 0x88]
ja 0x421dca
mov rax, qword [rsp + 0x78]
lea rcx, [rax - 8]
mov rax, qword [r14 + 8]
sub rcx, qword [rsp + 0x80]
add rcx, rdi
call qword [rax + 0x38]
lea rdx, [0x004d38b1]
mov rcx, r15
mov r8d, eax
call sub.msvcrt.dll_fprintf
mov rdx, r15
mov ecx, 0xa
call sub.msvcrt.dll_fputc
lea rax, [rdi + 8]
cmp r12, rax
jb 0x421e80
mov rcx, qword [rsp + 0xc0]
mov rbp, rdi
mov rdi, rax
mov rax, qword [r14 + 8]
add rcx, rbp
call qword [rax + 0x38]
mov r13, rax
mov rax, qword [rsp + 0xc0]
lea rcx, [rax + rbp + 4]
mov rax, qword [r14 + 8]
call qword [rax + 0x38]
mov esi, eax
or esi, r13d
je 0x421e80
mov edx, r13d
sub rdx, qword [rsp + 0x48]
test eax, eax
mov rbp, rdx
js 0x421e50
cmp r12, rdx
ja 0x421d20
lea rdx, [0x004d388b]
mov r8d, r13d
mov rcx, r15
call sub.msvcrt.dll_fprintf
jmp 0x421d6e
mov edx, eax
mov dword [rsp + 0x28], r13d
mov r9d, r13d
mov r8d, eax
and edx, 0x7fffffff
mov rcx, r15
mov dword [rsp + 0x20], edx
lea rdx, str._t_lx_08lx_t__4lx_08lx___none_
call sub.msvcrt.dll_fprintf
jmp 0x421d6e
mov edx, dword [rsp + 0xac]
test edx, edx
je 0x421a89
mov rcx, qword [rsp + 0x78]
call sub.msvcrt.dll_free
jmp 0x421a89
movsxd rax, ebp
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0x80]
mov r13, rax
add rax, 8
cmp r12, rax
jb 0x421a89
mov rcx, r8
mov rsi, rbx
mov dword [rsp + 0xac], 0
jmp 0x421cef
lea rdx, [0x004d36d8]
mov rcx, r15
call sub.msvcrt.dll_fprintf
jmp 0x4212ec
lea rdx, [0x004d38b8]
mov rcx, r15
call sub.msvcrt.dll_fprintf
jmp 0x421361
lea rdx, [0x004d3948]
mov r9d, ebx
mov rcx, r15
call sub.msvcrt.dll_fprintf
jmp 0x421361
mov rcx, qword [rsp + 0xc0]
jmp 0x421a4a
lea rdx, [0x004d2eab]
mov rcx, r14
call fcn.004135c0
test rax, rax
mov rbp, rax
je 0x421361
mov rbx, qword [rax + 0x38]
test rbx, rbx
je 0x421361
mov r9, qword [rax + 0x28]
xor edi, edi
mov r8, qword [rax]
jmp 0x4214c8
lea rdx, [0x004d2ebf]
mov rcx, r14
call fcn.004135c0
test rax, rax
mov r13, rax
je 0x4212ec
mov r12, qword [rax + 0x38]
test r12, r12
je 0x4212ec
mov rbx, qword [rax + 0x28]
mov r8, qword [rax]
jmp 0x4219df
movsxd rax, r13d
mov qword [rsp + 0x80], rax
mov r13, rax
add rax, 8
cmp r12, rax
jb 0x421a89
mov dword [rsp + 0xac], 0
jmp 0x421cef
lea rdx, [0x004d3900]
mov rcx, r15
call sub.msvcrt.dll_fprintf
jmp 0x421361
mov r9, r15
mov r8d, 0x41
mov edx, 1
lea rcx, [0x004d3d90]
call sub.msvcrt.dll_fwrite
mov r8, qword [rsp + 0x98]
mov rdx, rsi
mov rcx, r14
call fcn.00413e50
test eax, eax
jne 0x42208f
mov rcx, qword [rsp + 0xc0]
test rcx, rcx
je 0x4213b8
call sub.msvcrt.dll_free
jmp 0x4213b8
lea r8, [rsp + 0xb8]
mov rdx, rax
mov rcx, r14
mov rbx, qword [rax + 0x28]
mov rsi, qword [rsi + 0xe0]
call fcn.00413e50
test eax, eax
jne 0x422330
mov rcx, qword [rsp + 0xb8]
test rcx, rcx
je 0x4213f9
call sub.msvcrt.dll_free
jmp 0x4213f9
mov rcx, qword [rsp + 0x78]
call sub.msvcrt.dll_free
jmp 0x421a96
mov rbx, qword [rsp + 0xc0]
mov rax, qword [rsi + 0x38]
add rax, rbx
mov qword [rsp + 0x50], rax
lea rsi, [rbx + 8]
cmp qword [rsp + 0x50], rsi
jb 0x422218
mov rax, qword [r14 + 8]
mov rcx, rbx
call qword [rax + 0x38]
lea rcx, [rbx + 4]
mov rbp, rax
mov rax, qword [r14 + 8]
call qword [rax + 0x38]
mov rdi, rax
lea eax, [rax - 8]
shr eax, 1
test edi, edi
je 0x422218
mov dword [rsp + 0x20], edi
mov r9d, edi
mov r8d, ebp
mov rcx, r15
mov dword [rsp + 0x28], eax
lea rdx, [0x004d3dd8]
mov edi, edi
mov r13d, ebp
call sub.msvcrt.dll_fprintf
mov rax, qword [rsp + 0x50]
add rdi, rbx
cmp rax, rdi
cmovbe rdi, rax
add rbx, 0xa
cmp rdi, rbx
jb 0x422210
xor ebp, ebp
jmp 0x4221a7
mov rax, r10
mov r8d, ebp
mov rcx, r15
mov dword [rsp + 0x48], r10d
lea rdx, [0x004d4500]
and eax, 0xf
mov rax, qword [rdx + rax*8]
lea rdx, [0x004d3e20]
mov qword [rsp + 0x28], rax
lea eax, [r9 + r13]
mov dword [rsp + 0x20], eax
call sub.msvcrt.dll_fprintf
mov r10d, dword [rsp + 0x48]
cmp r10w, 4
jne 0x422200
add rsi, 4
cmp rsi, rdi
ja 0x422200
mov rax, qword [r14 + 8]
mov rcx, rbx
add ebp, 2
call qword [rax + 0x50]
lea rdx, [0x004d3e40]
mov rcx, r15
mov r8d, eax
call sub.msvcrt.dll_fprintf
lea rbx, [rsi + 2]
mov rdx, r15
mov ecx, 0xa
call sub.msvcrt.dll_fputc
cmp rbx, rdi
ja 0x422210
mov rax, qword [r14 + 8]
lea r12d, [rbp + 1]
mov rcx, rsi
call qword [rax + 0x50]
mov r10d, eax
mov r9d, eax
shr r10w, 0xc
and r9d, 0xfff
cmp r10w, 0xc
jbe 0x422120
lea rax, [0x004d4025]
mov r8d, ebp
mov rcx, r15
mov qword [rsp + 0x28], rax
lea eax, [r9 + r13]
mov ebp, r12d
mov rsi, rbx
mov dword [rsp + 0x20], eax
lea rdx, [0x004d3e20]
call sub.msvcrt.dll_fprintf
jmp 0x422191
mov ebp, r12d
mov rsi, rbx
jmp 0x422191
mov rbx, rsi
jmp 0x4220a3
mov rcx, qword [rsp + 0xc0]
jmp 0x422035
lea rdx, [0x004d2eb8]
mov rcx, r14
mov qword [rsp + 0xc0], 0
call fcn.004135c0
test rax, rax
mov rdi, rax
je 0x421384
mov rax, qword [rax + 0xe0]
test rax, rax
je 0x421384
mov rax, qword [rax + 0x58]
test rax, rax
je 0x421384
movabs rdx, 0xcccccccccccccccd
mov rsi, qword [rax]
mov rax, rsi
mul rdx
mov rax, rdx
shr rax, 4
lea rax, [rax + rax*4]
shl rax, 2
cmp rsi, rax
je 0x4222a8
mov r9d, 0x14
mov r8d, esi
mov rcx, r15
lea rdx, [0x004d3170]
call sub.msvcrt.dll_fprintf
mov r9, r15
mov r8d, 0x3a
mov edx, 1
lea rcx, [0x004d31b0]
call sub.msvcrt.dll_fwrite
mov r9, r15
mov r8d, 0x7b
mov edx, 1
lea rcx, [0x004d3cc8]
call sub.msvcrt.dll_fwrite
mov r9, qword [rdi + 0x38]
test r9, r9
je 0x421384
cmp rsi, r9
ja 0x422739
mov r8, qword [rsp + 0x98]
mov rdx, rdi
mov rcx, r14
call fcn.00413e50
test eax, eax
jne 0x422578
mov rcx, qword [rsp + 0xc0]
test rcx, rcx
je 0x421384
call sub.msvcrt.dll_free
jmp 0x421384
mov rax, qword [rsp + 0xb8]
mov rcx, r15
mov qword [rsp + 0xd0], 0
sub rbx, rsi
lea rbp, [0x004d3e98]
mov esi, 1
mov qword [rsp + 0xd8], 0
mov qword [rsp + 0xc0], rax
add rax, rdi
mov qword [rsp + 0xc8], rax
lea rdi, [0x004d3e70]
call fcn.004c1788
mov r8d, 0x27
mov r9, r15
mov edx, 1
lea rcx, [0x004d3e48]
call sub.msvcrt.dll_fwrite
mov r13, qword [rsp + 0xb8]
mov r8, qword [rsp + 0xc8]
nop dword [rax + rax]
cmp r8, r13
jbe 0x4224c6
xor r8d, r8d
mov rdx, r14
mov qword [rsp + 0x28], rbx
mov r9, r13
mov rax, qword [rsp + 0x98]
mov rcx, r15
mov qword [rsp + 0x20], rax
call fcn.0041e1a0
mov r8, qword [rsp + 0xc8]
mov qword [rsp + 0xb8], rax
lea rdx, [r8 + 1]
cmp rax, rdx
je 0x42249b
mov ecx, dword [r12 + 0x70]
mov edx, esi
shl edx, cl
lea ecx, [rdx - 1]
neg edx
movsxd rcx, ecx
movsxd rdx, edx
add rax, rcx
and rax, rdx
mov rcx, rax
mov rdx, rax
mov qword [rsp + 0xb8], rax
sub rcx, r13
add rbx, rcx
lea rcx, [r8 - 4]
cmp rax, rcx
je 0x42248b
cmp r8, rax
mov r13, rax
jbe 0x4223b0
nop dword [rax]
lea r13, [rdx + 1]
cmp r8, r13
mov qword [rsp + 0xb8], r13
jbe 0x4223b0
movzx eax, byte [rdx + 1]
mov rdx, r13
test al, al
je 0x422440
mov r8d, 0x47
mov r9, r15
mov edx, 1
mov rcx, rbp
call sub.msvcrt.dll_fwrite
mov r13, qword [rsp + 0xb8]
mov r8, qword [rsp + 0xc8]
jmp 0x4223b0
mov qword [rsp + 0xb8], r8
mov r13, r8
jmp 0x4223b0
mov r8d, 0x20
mov r9, r15
mov edx, 1
mov rcx, rdi
call sub.msvcrt.dll_fwrite
mov r13, qword [rsp + 0xb8]
mov r8, qword [rsp + 0xc8]
jmp 0x4223b0
mov r8, qword [rsp + 0xd0]
mov rcx, qword [rsp + 0xc0]
test r8, r8
je 0x4224f5
lea rdx, [0x004d3ee0]
sub r8d, ecx
mov rcx, r15
call sub.msvcrt.dll_fprintf
mov rcx, qword [rsp + 0xc0]
mov r8, qword [rsp + 0xd8]
test r8, r8
je 0x422076
lea rdx, [0x004d3f08]
sub r8d, ecx
mov rcx, r15
call sub.msvcrt.dll_fprintf
mov rcx, qword [rsp + 0xc0]
jmp 0x422076
mov rdi, qword [rsp + 0x70]
lea r8d, [rbx + r12]
mov rcx, r15
lea rdx, [0x004d3a3b]
mov rax, rdi
sub r8d, edi
sub rax, r12
lea r9, [r13 + rax]
call sub.msvcrt.dll_fprintf
jmp 0x421693
mov r9d, dword [rsp + 0x48]
lea rdx, [0x004d3c58]
mov rcx, r15
mov r8d, dword [rsp + 0x68]
call sub.msvcrt.dll_fprintf
jmp 0x4219ba
mov r13, qword [rsp + 0x48]
jmp 0x4219ba
cmp rsi, 0x13
mov ebx, 0x14
ja 0x42268e
jmp 0x422727
mov rdx, r15
mov ecx, 0x20
call sub.msvcrt.dll_fputc
add r13, qword [rdi + 0x28]
mov rdx, r15
mov rcx, r14
mov r8, r13
call fcn.0040f3c0
mov rdx, r15
mov ecx, 9
call sub.msvcrt.dll_fputc
mov r8, qword [rsp + 0x48]
mov rdx, r15
mov rcx, r14
call fcn.0040f3c0
mov rdx, r15
mov ecx, 0x20
call sub.msvcrt.dll_fputc
mov r8, qword [rsp + 0x50]
mov rdx, r15
mov rcx, r14
call fcn.0040f3c0
mov rdx, r15
mov ecx, 0x20
call sub.msvcrt.dll_fputc
mov rax, r12
mov rdx, r15
mov rcx, r14
and rax, 0xfffffffffffffffc
mov r8, rax
call fcn.0040f3c0
mov rdx, r15
mov ecx, 0x20
call sub.msvcrt.dll_fputc
mov r8, qword [rsp + 0x58]
mov rdx, r15
mov rcx, r14
call fcn.0040f3c0
mov rdx, r15
mov ecx, 0x20
call sub.msvcrt.dll_fputc
mov r8, rbp
mov rdx, r15
mov rcx, r14
and r8, 0xfffffffffffffffc
call fcn.0040f3c0
lea eax, [r12*4]
mov r8d, ebp
mov rcx, r15
lea rdx, [0x004d3d8a]
and eax, 4
and r8d, 3
or r8d, eax
call sub.msvcrt.dll_fprintf
mov rdx, r15
mov ecx, 0xa
call sub.msvcrt.dll_fputc
cmp rsi, rbx
jbe 0x422727
add rbx, 0x14
cmp rsi, rbx
jb 0x422727
mov rcx, qword [rsp + 0xc0]
lea r13, [rbx - 0x14]
mov rax, qword [r14 + 8]
add rcx, r13
call qword [rax + 0x38]
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0xc0]
lea rcx, [rax + rbx - 0x10]
mov rax, qword [r14 + 8]
call qword [rax + 0x38]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0xc0]
lea rcx, [rax + rbx - 0xc]
mov rax, qword [r14 + 8]
call qword [rax + 0x38]
mov r12, rax
mov rax, qword [rsp + 0xc0]
lea rcx, [rax + rbx - 8]
mov rax, qword [r14 + 8]
call qword [rax + 0x38]
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0xc0]
lea rcx, [rax + rbx - 4]
mov rax, qword [r14 + 8]
call qword [rax + 0x38]
mov rdx, qword [rsp + 0x48]
or rdx, qword [rsp + 0x50]
mov rbp, rax
mov rax, rdx
or rax, r12
or rax, qword [rsp + 0x58]
or rax, rbp
jne 0x422590
mov rcx, qword [rsp + 0xc0]
call sub.msvcrt.dll_free
jmp 0x421384
lea rdx, [0x004d3d48]
mov r8d, esi
mov rcx, r15
call sub.msvcrt.dll_fprintf
jmp 0x421384
mov r8d, 0x25
mov r9, r15
mov edx, 1
lea rcx, [0x004d3848]
mov r13d, ebx
call sub.msvcrt.dll_fwrite
sub r13d, dword [rsp + 0x48]
mov r8, qword [rsp + 0xc0]
movsxd rax, r13d
lea rdi, [r8 + rax]
mov qword [rsp + 0x80], rax
mov qword [rsp + 0x78], rdi
mov rdi, r12
sub rdi, rax
mov qword [rsp + 0x88], rdi
jmp 0x421eab