Function at 0x41ced3
Capabilities:
Write file on windows

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0xf0
mov qword [rbp + 0x10], rcx
mov rax, qword [rbp + 0x10]
mov qword [rax + 0x68], 0
mov rax, qword [rbp + 0x10]
mov eax, dword [rax + 0x5c]
test eax, eax
jne 0x41cf3c
mov rax, qword [rbp + 0x10]
mov rax, qword [rax + 0x38]
test rax, rax
je 0x41cf1c
lea rcx, str.possibly_corrupt_ELF_file_header___it_has_a_non_zero_section_header_offset__but_no_section_headers_n
call fcn.0045d7fb
mov eax, 0
jmp 0x41eca8
mov eax, dword [0x004a8384]
test eax, eax
je 0x41cf32
lea rcx, str._nThere_are_no_sections_in_this_file.
call sub.msvcrt.dll_puts
mov eax, 1
jmp 0x41eca8
mov eax, dword [0x004a8384]
test eax, eax
je 0x41cf88
mov eax, dword [0x004a839c]
test eax, eax
jne 0x41cf88
mov rax, qword [rbp + 0x10]
mov rax, qword [rax + 0x38]
mov ecx, eax
mov rax, qword [rbp + 0x10]
mov edx, dword [rax + 0x5c]
mov rax, qword [rbp + 0x10]
mov eax, dword [rax + 0x5c]
cmp eax, 1
jne 0x41cf76
lea rax, str.There_is__d_section_header__starting_at_offset_0x_lx:_n
jmp 0x41cf7d
lea rax, str.There_are__d_section_headers__starting_at_offset_0x_lx:_n
mov r8d, ecx
mov rcx, rax
call sub.msvcrt.dll_printf
mov eax, dword [0x004a83bc]
test eax, eax
je 0x41cfae
mov edx, 0
mov rcx, qword [rbp + 0x10]
call fcn.0041b1ca
test eax, eax
jne 0x41cfca
mov eax, 0
jmp 0x41eca8
mov edx, 0
mov rcx, qword [rbp + 0x10]
call fcn.0041b61c
test eax, eax
jne 0x41cfca
mov eax, 0
jmp 0x41eca8
mov rax, qword [rbp + 0x10]
mov eax, dword [rax + 0x60]
test eax, eax
je 0x41d08f
mov rax, qword [rbp + 0x10]
mov edx, dword [rax + 0x60]
mov rax, qword [rbp + 0x10]
mov eax, dword [rax + 0x5c]
cmp edx, eax
jae 0x41d08f
mov rax, qword [rbp + 0x10]
mov rdx, qword [rax + 0x68]
mov rax, qword [rbp + 0x10]
mov eax, dword [rax + 0x60]
mov ecx, eax
mov rax, rcx
shl rax, 2
add rax, rcx
shl rax, 4
add rax, rdx
mov qword [rbp - 8], rax
mov rax, qword [rbp - 8]
mov rax, qword [rax + 0x20]
test rax, rax
je 0x41d08f
mov rax, qword [rbp - 8]
mov rax, qword [rax + 0x20]
mov rdx, qword [rbp - 8]
mov rdx, qword [rdx + 0x18]
mov ecx, edx
lea rdx, str.string_table
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x20], rax
mov r9d, 1
mov r8d, ecx
mov rdx, qword [rbp + 0x10]
mov ecx, 0
call fcn.0040be81
mov rdx, rax
mov rax, qword [rbp + 0x10]
mov qword [rax + 0x78], rdx
mov rax, qword [rbp + 0x10]
mov rax, qword [rax + 0x78]
test rax, rax
je 0x41d080
mov rax, qword [rbp - 8]
mov rax, qword [rax + 0x20]
mov edx, eax
jmp 0x41d085
mov edx, 0
mov rax, qword [rbp + 0x10]
mov dword [rax + 0x80], edx
mov qword [0x004a8070], 0
mov qword [0x004a8060], 0
mov qword [0x004a8078], 0
mov qword [0x004a8368], 0
mov eax, dword [0x004a83bc]
test eax, eax
je 0x41d0cc
mov edx, 4
jmp 0x41d0d1
mov edx, 8
mov rax, qword [0x004a2fd0]
mov dword [rax], edx
mov rax, qword [rbp + 0x10]
movzx eax, word [rax + 0x4a]
movzx eax, ax
cmp eax, 0x2f
jg 0x41d0fe
cmp eax, 0x2e
jge 0x41d159
cmp eax, 8
je 0x41d117
cmp eax, 0xa
je 0x41d117
jmp 0x41d1e2
cmp eax, 0x78
je 0x41d1c0
cmp eax, 0xfeb0
je 0x41d1c0
jmp 0x41d1e2
mov rax, qword [rbp + 0x10]
mov eax, dword [rax + 0x44]
and eax, 0xf000
cmp eax, 0x4000
jne 0x41d1e1
lea rdx, str..gcc_compiled_long32
mov rcx, qword [rbp + 0x10]
call fcn.0040c5d3
test rax, rax
jne 0x41d1e1
mov rax, qword [0x004a2fd0]
mov dword [rax], 8
jmp 0x41d1e1
mov rax, qword [rbp + 0x10]
mov eax, dword [rax + 0x44]
and eax, 0xff0000
cmp eax, 0x830000
je 0x41d1a1
cmp eax, 0x830000
ja 0x41d18a
cmp eax, 0x810000
je 0x41d1b0
cmp eax, 0x820000
je 0x41d1b0
cmp eax, 0x800000
je 0x41d1a1
jmp 0x41d1e2
cmp eax, 0x850000
je 0x41d1b0
cmp eax, 0x860000
je 0x41d1a1
cmp eax, 0x840000
je 0x41d1a1
jmp 0x41d1e2
mov rax, qword [0x004a2fd0]
mov dword [rax], 2
jmp 0x41d1be
mov rax, qword [0x004a2fd0]
mov dword [rax], 4
nop
jmp 0x41d1e2
mov rax, qword [rbp + 0x10]
mov eax, dword [rax + 0x44]
and eax, 0x7f
cmp eax, 0x75
je 0x41d1d1
jmp 0x41d1e2
mov rax, qword [0x004a2fd0]
mov dword [rax], 2
nop
jmp 0x41d1e2
nop
mov dword [rbp - 0xc], 0
mov rax, qword [rbp + 0x10]
mov rax, qword [rax + 0x68]
mov qword [rbp - 8], rax
jmp 0x41dde7
cmp qword [rbp - 8], 0
je 0x41d249
mov rax, qword [rbp + 0x10]
mov rax, qword [rax + 0x78]
test rax, rax
je 0x41d240
mov rax, qword [rbp - 8]
mov edx, dword [rax]
mov rax, qword [rbp + 0x10]
mov eax, dword [rax + 0x80]
cmp edx, eax
jae 0x41d237
mov rax, qword [rbp + 0x10]
mov rdx, qword [rax + 0x78]
mov rax, qword [rbp - 8]
mov eax, dword [rax]
mov eax, eax
add rax, rdx
jmp 0x41d250
lea rax, [0x0048487c]
jmp 0x41d250
lea rax, str._no_strings_
jmp 0x41d250
lea rax, [0x00484893]
mov qword [rbp - 0x18], rax
mov rax, qword [rbp - 8]
mov eax, dword [rax + 4]
cmp eax, 0xb
jne 0x41d349
mov rax, qword [0x004a8070]
test rax, rax
je 0x41d281
lea rcx, str.File_contains_multiple_dynamic_symbol_tables_n
call fcn.0045d76f
jmp 0x41ddde
mov eax, dword [0x004a83bc]
test eax, eax
je 0x41d292
mov eax, 0x10
jmp 0x41d297
mov eax, 0x18
mov qword [rbp - 0x50], rax
mov rax, qword [rbp - 8]
mov rax, qword [rax + 0x38]
cmp qword [rbp - 0x50], rax
je 0x41d303
mov rax, qword [rbp - 8]
mov rdx, qword [rax + 0x38]
lea rax, [rbp - 0xc0]
mov r8, rdx
lea rdx, [0x0048482e]
mov rcx, rax
call sub.msvcrt.dll_sprintf
lea rdx, [rbp - 0xc0]
mov eax, dword [rbp - 0xc]
mov r8, rdx
mov edx, eax
lea rcx, str.Section__d_has_invalid_sh_entsize_of__s_n
call fcn.0045d76f
mov rax, qword [rbp - 0x50]
mov edx, eax
lea rcx, str._Using_the_expected_size_of__u_for_the_rest_of_this_dump__n
call fcn.0045d76f
mov rax, qword [rbp - 8]
mov rdx, qword [rbp - 0x50]
mov qword [rax + 0x38], rdx
mov eax, dword [0x004a83bc]
test eax, eax
je 0x41d326
mov rax, qword [rbp - 8]
lea r8, [0x004a806c]
mov rdx, rax
mov rcx, qword [rbp + 0x10]
call fcn.0041b9e5
jmp 0x41d33d
mov rax, qword [rbp - 8]
lea r8, [0x004a806c]
mov rdx, rax
mov rcx, qword [rbp + 0x10]
call fcn.0041bef0
mov qword [0x004a8070], rax
jmp 0x41ddde
mov rax, qword [rbp - 8]
mov eax, dword [rax + 4]
cmp eax, 3
jne 0x41d3f8
mov rax, qword [rbp - 0x18]
lea rdx, str..dynstr
mov rcx, rax
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x41d3f8
mov rax, qword [0x004a8060]
test rax, rax
je 0x41d391
lea rcx, str.File_contains_multiple_dynamic_string_tables_n
call fcn.0045d76f
jmp 0x41ddde
mov rax, qword [rbp - 8]
mov rax, qword [rax + 0x20]
mov rdx, qword [rbp - 8]
mov rdx, qword [rdx + 0x18]
mov ecx, edx
lea rdx, str.dynamic_strings
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x20], rax
mov r9d, 1
mov r8d, ecx
mov rdx, qword [rbp + 0x10]
mov ecx, 0
call fcn.0040be81
mov qword [0x004a8060], rax
mov rax, qword [0x004a8060]
test rax, rax
je 0x41d3e8
mov rax, qword [rbp - 8]
mov rax, qword [rax + 0x20]
jmp 0x41d3ed
mov eax, 0
mov dword [0x004a8068], eax
jmp 0x41ddde
mov rax, qword [rbp - 8]
mov eax, dword [rax + 4]
cmp eax, 0x12
jne 0x41d43c
mov ecx, 0x10
call fcn.00464276
mov qword [rbp - 0x48], rax
mov rax, qword [rbp - 0x48]
mov rdx, qword [rbp - 8]
mov qword [rax], rdx
mov rdx, qword [0x004a8368]
mov rax, qword [rbp - 0x48]
mov qword [rax + 8], rdx
mov rax, qword [rbp - 0x48]
mov qword [0x004a8368], rax
jmp 0x41ddde
mov rax, qword [rbp - 8]
mov eax, dword [rax + 4]
cmp eax, 2
jne 0x41d4d7
mov eax, dword [0x004a83bc]
test eax, eax
je 0x41d45d
mov eax, 0x10
jmp 0x41d462
mov eax, 0x18
mov qword [rbp - 0x40], rax
mov rax, qword [rbp - 8]
mov rax, qword [rax + 0x38]
cmp qword [rbp - 0x40], rax
je 0x41ddde
mov rax, qword [rbp - 8]
mov rdx, qword [rax + 0x38]
lea rax, [rbp - 0xc0]
mov r8, rdx
lea rdx, [0x0048482e]
mov rcx, rax
call sub.msvcrt.dll_sprintf
lea rdx, [rbp - 0xc0]
mov eax, dword [rbp - 0xc]
mov r8, rdx
mov edx, eax
lea rcx, str.Section__d_has_invalid_sh_entsize_of__s_n
call fcn.0045d76f
mov rax, qword [rbp - 0x40]
mov edx, eax
lea rcx, str._Using_the_expected_size_of__u_for_the_rest_of_this_dump__n
call fcn.0045d76f
mov rax, qword [rbp - 8]
mov rdx, qword [rbp - 0x40]
mov qword [rax + 0x38], rdx
jmp 0x41ddde
mov rax, qword [rbp - 8]
mov eax, dword [rax + 4]
cmp eax, 0x11
jne 0x41d55c
mov qword [rbp - 0x38], 4
mov rax, qword [rbp - 8]
mov rax, qword [rax + 0x38]
cmp qword [rbp - 0x38], rax
je 0x41ddde
mov rax, qword [rbp - 8]
mov rdx, qword [rax + 0x38]
lea rax, [rbp - 0xc0]
mov r8, rdx
lea rdx, [0x0048482e]
mov rcx, rax
call sub.msvcrt.dll_sprintf
lea rdx, [rbp - 0xc0]
mov eax, dword [rbp - 0xc]
mov r8, rdx
mov edx, eax
lea rcx, str.Section__d_has_invalid_sh_entsize_of__s_n
call fcn.0045d76f
mov rax, qword [rbp - 0x38]
mov edx, eax
lea rcx, str._Using_the_expected_size_of__u_for_the_rest_of_this_dump__n
call fcn.0045d76f
mov rax, qword [rbp - 8]
mov rdx, qword [rbp - 0x38]
mov qword [rax + 0x38], rdx
jmp 0x41ddde
mov rax, qword [rbp - 8]
mov eax, dword [rax + 4]
cmp eax, 9
jne 0x41d5f7
mov eax, dword [0x004a83bc]
test eax, eax
je 0x41d57d
mov eax, 8
jmp 0x41d582
mov eax, 0x10
mov qword [rbp - 0x30], rax
mov rax, qword [rbp - 8]
mov rax, qword [rax + 0x38]
cmp qword [rbp - 0x30], rax
je 0x41ddde
mov rax, qword [rbp - 8]
mov rdx, qword [rax + 0x38]
lea rax, [rbp - 0xc0]
mov r8, rdx
lea rdx, [0x0048482e]
mov rcx, rax
call sub.msvcrt.dll_sprintf
lea rdx, [rbp - 0xc0]
mov eax, dword [rbp - 0xc]
mov r8, rdx
mov edx, eax
lea rcx, str.Section__d_has_invalid_sh_entsize_of__s_n
call fcn.0045d76f
mov rax, qword [rbp - 0x30]
mov edx, eax
lea rcx, str._Using_the_expected_size_of__u_for_the_rest_of_this_dump__n
call fcn.0045d76f
mov rax, qword [rbp - 8]
mov rdx, qword [rbp - 0x30]
mov qword [rax + 0x38], rdx
jmp 0x41ddde
mov rax, qword [rbp - 8]
mov eax, dword [rax + 4]
cmp eax, 4
jne 0x41d692
mov eax, dword [0x004a83bc]
test eax, eax
je 0x41d618
mov eax, 0xc
jmp 0x41d61d
mov eax, 0x18
mov qword [rbp - 0x28], rax
mov rax, qword [rbp - 8]
mov rax, qword [rax + 0x38]
cmp qword [rbp - 0x28], rax
je 0x41ddde
mov rax, qword [rbp - 8]
mov rdx, qword [rax + 0x38]
lea rax, [rbp - 0xc0]
mov r8, rdx
lea rdx, [0x0048482e]
mov rcx, rax
call sub.msvcrt.dll_sprintf
lea rdx, [rbp - 0xc0]
mov eax, dword [rbp - 0xc]
mov r8, rdx
mov edx, eax
lea rcx, str.Section__d_has_invalid_sh_entsize_of__s_n
call fcn.0045d76f
mov rax, qword [rbp - 0x28]
mov edx, eax
lea rcx, str._Using_the_expected_size_of__u_for_the_rest_of_this_dump__n
call fcn.0045d76f
mov rax, qword [rbp - 8]
mov rdx, qword [rbp - 0x28]
mov qword [rax + 0x38], rdx
jmp 0x41ddde
mov eax, dword [0x004a83ac]
test eax, eax
jne 0x41d76a
mov rax, qword [0x004a2ec0]
mov eax, dword [rax]
test eax, eax
jne 0x41d76a
mov rax, qword [0x004a2e70]
mov eax, dword [rax]
test eax, eax
jne 0x41d76a
mov rax, qword [0x004a2ed0]
mov eax, dword [rax]
test eax, eax
jne 0x41d76a
mov rax, qword [0x004a2f10]
mov eax, dword [rax]
test eax, eax
jne 0x41d76a
mov rax, qword [0x004a2f20]
mov eax, dword [rax]
test eax, eax
jne 0x41d76a
mov rax, qword [0x004a2e90]
mov eax, dword [rax]
test eax, eax
jne 0x41d76a
mov rax, qword [0x004a2eb0]
mov eax, dword [rax]
test eax, eax
jne 0x41d76a
mov rax, qword [0x004a2f00]
mov eax, dword [rax]
test eax, eax
jne 0x41d76a
mov rax, qword [0x004a2f40]
mov eax, dword [rax]
test eax, eax
jne 0x41d76a
mov rax, qword [0x004a2ef0]
mov eax, dword [rax]
test eax, eax
jne 0x41d76a
mov rax, qword [0x004a2f30]
mov eax, dword [rax]
test eax, eax
jne 0x41d76a
mov rax, qword [0x004a2e80]
mov eax, dword [rax]
test eax, eax
jne 0x41d76a
mov rax, qword [0x004a2ea0]
mov eax, dword [rax]
test eax, eax
jne 0x41d76a
mov rax, qword [0x004a2ee0]
mov eax, dword [rax]
test eax, eax
je 0x41dba6
mov rax, qword [rbp - 0x18]
mov r8d, 7
lea rdx, str..debug_
mov rcx, rax
call sub.msvcrt.dll_strncmp
test eax, eax
je 0x41d7a8
mov rax, qword [rbp - 0x18]
mov r8d, 8
lea rdx, str..zdebug_
mov rcx, rax
call sub.msvcrt.dll_strncmp
test eax, eax
jne 0x41dba6
mov rax, qword [rbp - 0x18]
add rax, 1
movzx eax, byte [rax]
cmp al, 0x7a
jne 0x41d7be
add qword [rbp - 0x18], 8
jmp 0x41d7c3
add qword [rbp - 0x18], 7
mov eax, dword [0x004a83ac]
test eax, eax
jne 0x41db8d
mov rax, qword [0x004a2ec0]
mov eax, dword [rax]
test eax, eax
je 0x41d7ff
mov rax, qword [rbp - 0x18]
mov r8d, 4
lea rdx, [0x00489dc7]
mov rcx, rax
call sub.msvcrt.dll_strncmp
test eax, eax
je 0x41db8d
mov rax, qword [0x004a2ec0]
mov eax, dword [rax]
test eax, eax
je 0x41d82d
mov rax, qword [rbp - 0x18]
mov r8d, 5
lea rdx, [0x00489dcc]
mov rcx, rax
call sub.msvcrt.dll_strncmp
test eax, eax
je 0x41db8d
mov rax, qword [0x004a2e70]
mov eax, dword [rax]
test eax, eax
je 0x41d85b
mov rax, qword [rbp - 0x18]
mov r8d, 6
lea rdx, [0x00489dd2]
mov rcx, rax
call sub.msvcrt.dll_strncmp
test eax, eax
je 0x41db8d
mov rax, qword [0x004a2ed0]
mov eax, dword [rax]
test eax, eax
je 0x41d883
mov rax, qword [rbp - 0x18]
lea rdx, [0x00489dd9]
mov rcx, rax
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x41db8d
mov rax, qword [0x004a2ed0]
mov eax, dword [rax]
test eax, eax
je 0x41d8b1
mov rax, qword [rbp - 0x18]
mov r8d, 5
lea rdx, str.line.
mov rcx, rax
call sub.msvcrt.dll_strncmp
test eax, eax
je 0x41db8d
mov rax, qword [0x004a2f10]
mov eax, dword [rax]
test eax, eax
je 0x41d8df
mov rax, qword [rbp - 0x18]
mov r8d, 8
lea rdx, case.0x41e15f.0
mov rcx, rax
call sub.msvcrt.dll_strncmp
test eax, eax
je 0x41db8d
mov rax, qword [0x004a2f20]
mov eax, dword [rax]
test eax, eax
je 0x41d90d
mov rax, qword [rbp - 0x18]
mov r8d, 8
lea rdx, [0x00489ded]
mov rcx, rax
call sub.msvcrt.dll_strncmp
test eax, eax
je 0x41db8d
mov rax, qword [0x004a2f10]
mov eax, dword [rax]
test eax, eax
je 0x41d93b
mov rax, qword [rbp - 0x18]
mov r8d, 0xc
lea rdx, str.gnu_pubnames
mov rcx, rax
call sub.msvcrt.dll_strncmp
test eax, eax
je 0x41db8d
mov rax, qword [0x004a2f20]
mov eax, dword [rax]
test eax, eax
je 0x41d969
mov rax, qword [rbp - 0x18]
mov r8d, 0xc
lea rdx, str.gnu_pubtypes
mov rcx, rax
call sub.msvcrt.dll_strncmp
test eax, eax
je 0x41db8d
mov rax, qword [0x004a2e90]
mov eax, dword [rax]
test eax, eax
je 0x41d997
mov rax, qword [rbp - 0x18]
mov r8d, 7
lea rdx, [0x00489e10]
mov rcx, rax
call sub.msvcrt.dll_strncmp
test eax, eax
je 0x41db8d
mov rax, qword [0x004a2f30]
mov eax, dword [rax]
test eax, eax
je 0x41d9c5
mov rax, qword [rbp - 0x18]
mov r8d, 6
lea rdx, case.0x41e15f.3
mov rcx, rax
call sub.msvcrt.dll_strncmp
test eax, eax
je 0x41db8d
mov rax, qword [0x004a2f30]
mov eax, dword [rax]
test eax, eax
je 0x41d9f3
mov rax, qword [rbp - 0x18]
mov r8d, 8
lea rdx, str.rnglists
mov rcx, rax
call sub.msvcrt.dll_strncmp
test eax, eax
je 0x41db8d
mov rax, qword [0x004a2eb0]
mov eax, dword [rax]
test eax, eax
je 0x41da21
mov rax, qword [rbp - 0x18]
mov r8d, 5
lea rdx, str.frame
mov rcx, rax
call sub.msvcrt.dll_strncmp
test eax, eax
je 0x41db8d
mov rax, qword [0x004a2f00]
mov eax, dword [rax]
test eax, eax
je 0x41da4f
mov rax, qword [rbp - 0x18]
mov r8d, 7
lea rdx, [0x00489e2e]
mov rcx, rax
call sub.msvcrt.dll_strncmp
test eax, eax
je 0x41db8d
mov rax, qword [0x004a2f00]
mov eax, dword [rax]
test eax, eax
je 0x41da7d
mov rax, qword [rbp - 0x18]
mov r8d, 5
lea rdx, [0x00489e36]
mov rcx, rax
call sub.msvcrt.dll_strncmp
test eax, eax
je 0x41db8d
mov rax, qword [0x004a2f40]
mov eax, dword [rax]
test eax, eax
je 0x41daab
mov rax, qword [rbp - 0x18]
mov r8d, 3
lea rdx, [0x00489e3c]
mov rcx, rax
call sub.msvcrt.dll_strncmp
test eax, eax
je 0x41db8d
mov rax, qword [0x004a2ef0]
mov eax, dword [rax]
test eax, eax
je 0x41dad9
mov rax, qword [rbp - 0x18]
mov r8d, 3
lea rdx, [0x00489e40]
mov rcx, rax
call sub.msvcrt.dll_strncmp
test eax, eax
je 0x41db8d
mov rax, qword [0x004a2ef0]
mov eax, dword [rax]
test eax, eax
je 0x41db07
mov rax, qword [rbp - 0x18]
mov r8d, 8
lea rdx, str.loclists
mov rcx, rax
call sub.msvcrt.dll_strncmp
test eax, eax
je 0x41db8d
mov rax, qword [0x004a2e80]
mov eax, dword [rax]
test eax, eax
je 0x41db31
mov rax, qword [rbp - 0x18]
mov r8d, 4
lea rdx, [0x00489e4d]
mov rcx, rax
call sub.msvcrt.dll_strncmp
test eax, eax
je 0x41db8d
mov rax, qword [0x004a2ea0]
mov eax, dword [rax]
test eax, eax
je 0x41db5b
mov rax, qword [rbp - 0x18]
mov r8d, 8
lea rdx, [0x00489e52]
mov rcx, rax
call sub.msvcrt.dll_strncmp
test eax, eax
je 0x41db8d
mov rax, qword [0x004a2ea0]
mov eax, dword [rax]
test eax, eax
je 0x41ddda
mov rax, qword [rbp - 0x18]
mov r8d, 8
lea rdx, str.tu_index
mov rcx, rax
call sub.msvcrt.dll_strncmp
test eax, eax
jne 0x41ddda
mov eax, dword [rbp - 0xc]
mov r8d, 4
mov edx, eax
mov rcx, qword [rbp + 0x10]
call fcn.00418fa6
jmp 0x41ddda
mov eax, dword [0x004a83ac]
test eax, eax
jne 0x41dbbd
mov rax, qword [0x004a2ec0]
mov eax, dword [rax]
test eax, eax
je 0x41dbf3
mov rax, qword [rbp - 0x18]
mov r8d, 0x11
lea rdx, str..gnu.linkonce.wi.
mov rcx, rax
call sub.msvcrt.dll_strncmp
test eax, eax
jne 0x41dbf3
mov eax, dword [rbp - 0xc]
mov r8d, 4
mov edx, eax
mov rcx, qword [rbp + 0x10]
call fcn.00418fa6
jmp 0x41ddde
mov rax, qword [0x004a2eb0]
mov eax, dword [rax]
test eax, eax
je 0x41dc30
mov rax, qword [rbp - 0x18]
lea rdx, [0x00489e76]
mov rcx, rax
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x41dc30
mov eax, dword [rbp - 0xc]
mov r8d, 4
mov edx, eax
mov rcx, qword [rbp + 0x10]
call fcn.00418fa6
jmp 0x41ddde
mov rax, qword [0x004a2f50]
mov eax, dword [rax]
test eax, eax
je 0x41dc84
mov rax, qword [rbp - 0x18]
lea rdx, [0x00489e80]
mov rcx, rax
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x41dc6b
mov rax, qword [rbp - 0x18]
lea rdx, [0x00489e8b]
mov rcx, rax
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x41dc84
mov eax, dword [rbp - 0xc]
mov r8d, 4
mov edx, eax
mov rcx, qword [rbp + 0x10]
call fcn.00418fa6
jmp 0x41ddde
mov eax, dword [0x004a83ac]
test eax, eax
jne 0x41dcb9
mov rax, qword [0x004a2f80]
mov eax, dword [rax]
test eax, eax
jne 0x41dcb9
mov rax, qword [0x004a2f60]
mov eax, dword [rax]
test eax, eax
jne 0x41dcb9
mov rax, qword [0x004a2f70]
mov eax, dword [rax]
test eax, eax
je 0x41dd73
mov rax, qword [rbp - 0x18]
mov r8d, 7
lea rdx, str..trace_
mov rcx, rax
call sub.msvcrt.dll_strncmp
test eax, eax
jne 0x41dd73
add qword [rbp - 0x18], 7
mov eax, dword [0x004a83ac]
test eax, eax
jne 0x41dd5d
mov rax, qword [0x004a2f80]
mov eax, dword [rax]
test eax, eax
je 0x41dd0d
mov rax, qword [rbp - 0x18]
lea rdx, [0x00489dc7]
mov rcx, rax
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x41dd5d
mov rax, qword [0x004a2f60]
mov eax, dword [rax]
test eax, eax
je 0x41dd31
mov rax, qword [rbp - 0x18]
lea rdx, [0x00489dd2]
mov rcx, rax
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x41dd5d
mov rax, qword [0x004a2f70]
mov eax, dword [rax]
test eax, eax
je 0x41dddd
mov rax, qword [rbp - 0x18]
lea rdx, [0x00489e10]
mov rcx, rax
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x41dddd
mov eax, dword [rbp - 0xc]
mov r8d, 4
mov edx, eax
mov rcx, qword [rbp + 0x10]
call fcn.00418fa6
jmp 0x41dddd
mov eax, dword [0x004a83ac]
test eax, eax
jne 0x41dd8a
mov rax, qword [0x004a2ee0]
mov eax, dword [rax]
test eax, eax
je 0x41ddde
mov rax, qword [rbp - 0x18]
mov r8d, 0xe
lea rdx, [0x00489ea0]
mov rcx, rax
call sub.msvcrt.dll_strncmp
test eax, eax
je 0x41ddc4
mov rax, qword [rbp - 0x18]
mov r8d, 0x11
lea rdx, [0x00489eaf]
mov rcx, rax
call sub.msvcrt.dll_strncmp
test eax, eax
jne 0x41ddde
mov eax, dword [rbp - 0xc]
mov r8d, 4
mov edx, eax
mov rcx, qword [rbp + 0x10]
call fcn.00418fa6
jmp 0x41ddde
nop
jmp 0x41ddde
nop
add dword [rbp - 0xc], 1
add qword [rbp - 8], 0x50
mov rax, qword [rbp + 0x10]
mov eax, dword [rax + 0x5c]
cmp dword [rbp - 0xc], eax
jb 0x41d1fa
mov eax, dword [0x004a8384]
test eax, eax
jne 0x41de0b
mov eax, 1
jmp 0x41eca8
mov rax, qword [rbp + 0x10]
mov eax, dword [rax + 0x5c]
cmp eax, 1
jbe 0x41de25
lea rcx, str._nSection_Headers:
call sub.msvcrt.dll_puts
jmp 0x41de31
lea rcx, str._nSection_Header:
call sub.msvcrt.dll_puts
mov eax, dword [0x004a83bc]
test eax, eax
je 0x41de73
mov eax, dword [0x004a838c]
test eax, eax
je 0x41de62
lea rcx, str.___Nr__Name
call sub.msvcrt.dll_puts
lea rcx, str._______Type____________Addr_____Off____Size___ES___Lk_Inf_Al
call sub.msvcrt.dll_puts
jmp 0x41defa
lea rcx, str.___Nr__Name______________Type____________Addr_____Off____Size___ES_Flg_Lk_Inf_Al
call sub.msvcrt.dll_puts
jmp 0x41defa
mov rax, qword [0x004a2f90]
mov eax, dword [rax]
test eax, eax
je 0x41deb2
mov eax, dword [0x004a838c]
test eax, eax
je 0x41dea4
lea rcx, str.___Nr__Name
call sub.msvcrt.dll_puts
lea rcx, str._______Type____________Address__________Off____Size___ES___Lk_Inf_Al
call sub.msvcrt.dll_puts
jmp 0x41defa
lea rcx, str.___Nr__Name______________Type____________Address__________Off____Size___ES_Flg_Lk_Inf_Al
call sub.msvcrt.dll_puts
jmp 0x41defa
mov eax, dword [0x004a838c]
test eax, eax
je 0x41dee2
lea rcx, str.___Nr__Name
call sub.msvcrt.dll_puts
lea rcx, str._______Type______________Address__________Offset____________Link
call sub.msvcrt.dll_puts
lea rcx, str._______Size______________EntSize__________Info______________Align
call sub.msvcrt.dll_puts
jmp 0x41defa
lea rcx, str.___Nr__Name______________Type_____________Address___________Offset
call sub.msvcrt.dll_puts
lea rcx, str._______Size______________EntSize__________Flags__Link__Info__Align
call sub.msvcrt.dll_puts
mov eax, dword [0x004a838c]
test eax, eax
je 0x41df10
lea rcx, str._______Flags
call sub.msvcrt.dll_puts
mov dword [rbp - 0xc], 0
mov rax, qword [rbp + 0x10]
mov rax, qword [rax + 0x68]
mov qword [rbp - 8], rax
jmp 0x41ebff
mov rax, qword [rbp - 8]
mov eax, dword [rax + 4]
cmp eax, 0x10
ja 0x41df7a
cmp eax, 0xe
jae 0x41e0eb
cmp eax, 5
je 0x41dfee
cmp eax, 5
ja 0x41df5e
cmp eax, 2
je 0x41e087
cmp eax, 4
je 0x41dfbf
jmp 0x41e121
cmp eax, 9
je 0x41dfbf
cmp eax, 0xb
je 0x41e087
cmp eax, 6
je 0x41e087
jmp 0x41e121
cmp eax, 0x6ffffff7
je 0x41e087
cmp eax, 0x6ffffff7
ja 0x41df9d
cmp eax, 0x12
jbe 0x41dfee
cmp eax, 0x6ffffff6
je 0x41dfee
jmp 0x41e121
cmp eax, 0x6ffffffd
jb 0x41e121
cmp eax, 0x6ffffffe
jbe 0x41e087
cmp eax, 0x6fffffff
je 0x41dfee
jmp 0x41e121
mov rax, qword [rbp - 8]
mov eax, dword [rax + 0x28]
test eax, eax
jne 0x41dfee
mov rax, qword [rbp + 0x10]
movzx eax, word [rax + 0x48]
cmp ax, 2
je 0x41e124
mov rax, qword [rbp + 0x10]
movzx eax, word [rax + 0x48]
cmp ax, 3
je 0x41e124
mov rax, qword [rbp - 8]
mov eax, dword [rax + 0x28]
test eax, eax
je 0x41e067
mov rax, qword [rbp - 8]
mov edx, dword [rax + 0x28]
mov rax, qword [rbp + 0x10]
mov eax, dword [rax + 0x5c]
cmp edx, eax
jae 0x41e067
mov rax, qword [rbp + 0x10]
mov rdx, qword [rax + 0x68]
mov rax, qword [rbp - 8]
mov eax, dword [rax + 0x28]
mov ecx, eax
mov rax, rcx
shl rax, 2
add rax, rcx
shl rax, 4
add rax, rdx
mov eax, dword [rax + 4]
cmp eax, 2
je 0x41e127
mov rax, qword [rbp + 0x10]
mov rdx, qword [rax + 0x68]
mov rax, qword [rbp - 8]
mov eax, dword [rax + 0x28]
mov ecx, eax
mov rax, rcx
shl rax, 2
add rax, rcx
shl rax, 4
add rax, rdx
mov eax, dword [rax + 4]
cmp eax, 0xb
je 0x41e127
mov rax, qword [rbp - 8]
mov edx, dword [rax + 0x28]
mov eax, dword [rbp - 0xc]
mov r8d, edx
mov edx, eax
lea rcx, str.__2u_:_Link_field___u__should_index_a_symtab_section._n
call fcn.0045d7fb
jmp 0x41e127
mov rax, qword [rbp - 8]
mov eax, dword [rax + 0x28]
test eax, eax
je 0x41e0ce
mov rax, qword [rbp - 8]
mov edx, dword [rax + 0x28]
mov rax, qword [rbp + 0x10]
mov eax, dword [rax + 0x5c]
cmp edx, eax
jae 0x41e0ce
mov rax, qword [rbp + 0x10]
mov rdx, qword [rax + 0x68]
mov rax, qword [rbp - 8]
mov eax, dword [rax + 0x28]
mov ecx, eax
mov rax, rcx
shl rax, 2
add rax, rcx
shl rax, 4
add rax, rdx
mov eax, dword [rax + 4]
cmp eax, 3
je 0x41e12a
mov rax, qword [rbp - 8]
mov edx, dword [rax + 0x28]
mov eax, dword [rbp - 0xc]
mov r8d, edx
mov edx, eax
lea rcx, str.__2u_:_Link_field___u__should_index_a_string_section._n
call fcn.0045d7fb
jmp 0x41e12a
mov rax, qword [rbp - 8]
mov eax, dword [rax + 4]
cmp eax, 0x5fffffff
ja 0x41e12d
mov rax, qword [rbp - 8]
mov eax, dword [rax + 0x28]
test eax, eax
je 0x41e12d
mov rax, qword [rbp - 8]
mov edx, dword [rax + 0x28]
mov eax, dword [rbp - 0xc]
mov r8d, edx
mov edx, eax
lea rcx, str.__2u_:_Unexpected_value___u__in_link_field._n
call fcn.0045d7fb
jmp 0x41e12d
nop
jmp 0x41e12e
nop
jmp 0x41e12e
nop
jmp 0x41e12e
nop
jmp 0x41e12e
nop
mov rax, qword [rbp - 8]
mov eax, dword [rax + 4]
cmp eax, 0x12
ja case.default.0x41e15f
mov eax, eax
lea rdx, [rax*4]
lea rax, [0x0048a574]
mov eax, dword [rdx + rax]
movsxd rdx, eax
lea rax, [0x0048a574]
add rax, rdx
jmp rax
mov rax, qword [rbp - 8]
mov eax, dword [rax + 4]
cmp eax, 8
je 0x41e3ec
mov rax, qword [rbp - 8]
mov rax, qword [rax + 8]
and eax, 0x40
test rax, rax
je 0x41e398
mov rax, qword [rbp - 8]
mov eax, dword [rax + 0x2c]
test eax, eax
je 0x41e385
mov rax, qword [rbp - 8]
mov edx, dword [rax + 0x2c]
mov rax, qword [rbp + 0x10]
mov eax, dword [rax + 0x5c]
cmp edx, eax
jb 0x41e3ec
mov eax, dword [rbp - 0xc]
mov edx, eax
lea rcx, str.__2u_:_Expected_link_to_another_section_in_info_field
call fcn.0045d7fb
jmp 0x41e3ec
mov rax, qword [rbp - 8]
mov eax, dword [rax + 4]
cmp eax, 0x5fffffff
ja 0x41e3ec
mov rax, qword [rbp - 8]
mov rax, qword [rax + 8]
and eax, 0x1000000
test rax, rax
jne 0x41e3ec
mov rax, qword [rbp - 8]
mov eax, dword [rax + 0x2c]
test eax, eax
je 0x41e3ec
mov rax, qword [rbp - 8]
mov edx, dword [rax + 0x2c]
mov eax, dword [rbp - 0xc]
mov r8d, edx
mov edx, eax
lea rcx, str.__2u_:_Unexpected_value___u__in_info_field._n
call fcn.0045d7fb
jmp 0x41e3ec
nop
mov rax, qword [rbp - 8]
mov rdx, qword [rax + 0x20]
mov rax, qword [rbp + 0x10]
mov rax, qword [rax + 0x10]
cmp rdx, rax
jbe 0x41e438
mov rax, qword [rbp - 8]
mov eax, dword [rax + 4]
cmp eax, 8
je 0x41e438
mov rax, qword [rbp - 8]
mov eax, dword [rax + 4]
test eax, eax
je 0x41e438
mov rax, qword [rbp - 8]
mov eax, dword [rax + 4]
cmp eax, 0x5fffffff
ja 0x41e438
mov eax, dword [rbp - 0xc]
mov edx, eax
lea rcx, str.Size_of_section__u_is_larger_than_the_entire_file__n
call fcn.0045d7fb
mov eax, dword [rbp - 0xc]
mov edx, eax
lea rcx, str.____2u_
call sub.msvcrt.dll_printf
mov eax, dword [0x004a838c]
test eax, eax
je 0x41e474
mov rax, qword [rbp - 8]
mov rdx, rax
mov rcx, qword [rbp + 0x10]
call fcn.0040c3b9
mov rdx, rax
lea rcx, str._s_n
call sub.msvcrt.dll_printf
jmp 0x41e4d7
cmp qword [rbp - 8], 0
je 0x41e4c3
mov rax, qword [rbp + 0x10]
mov rax, qword [rax + 0x78]
test rax, rax
je 0x41e4ba
mov rax, qword [rbp - 8]
mov edx, dword [rax]
mov rax, qword [rbp + 0x10]
mov eax, dword [rax + 0x80]
cmp edx, eax
jae 0x41e4b1
mov rax, qword [rbp + 0x10]
mov rdx, qword [rax + 0x78]
mov rax, qword [rbp - 8]
mov eax, dword [rax]
mov eax, eax
add rax, rdx
jmp 0x41e4ca
lea rax, [0x0048487c]
jmp 0x41e4ca
lea rax, str._no_strings_
jmp 0x41e4ca
lea rax, [0x00484893]
mov rdx, rax
mov ecx, 0xffffffef
call fcn.0040c1fe
mov rax, qword [rbp - 8]
mov eax, dword [rax + 4]
mov edx, eax
mov rcx, qword [rbp + 0x10]
call fcn.00418862
mov rdx, rax
mov rax, qword [0x004a2f90]
mov eax, dword [rax]
test eax, eax
je 0x41e502
lea rax, str.___15s
jmp 0x41e509
lea rax, str.___15.15s
mov rcx, rax
call sub.msvcrt.dll_printf
mov eax, dword [0x004a83bc]
test eax, eax
je 0x41e73b
mov qword [rbp - 0x20], 0
mov rax, qword [rbp - 8]
mov rax, qword [rax + 0x10]
mov edx, 6
mov rcx, rax
call fcn.0040c0ea
mov rax, qword [rbp - 8]
mov rax, qword [rax + 0x38]
mov ecx, eax
mov rax, qword [rbp - 8]
mov rax, qword [rax + 0x20]
mov edx, eax
mov rax, qword [rbp - 8]
mov rax, qword [rax + 0x18]
mov r9d, ecx
mov r8d, edx
mov edx, eax
lea rcx, str.__6.6lx__6.6lx__2.2lx
call sub.msvcrt.dll_printf
mov eax, dword [0x004a838c]
test eax, eax
je 0x41e59f
mov rax, qword [sym.imp.msvcrt.dll___iob_func]
call rax
add rax, 0x30
mov r9, rax
mov r8d, 2
mov edx, 1
lea rcx, [0x0048a310]
call sub.msvcrt.dll_fwrite
jmp 0x41e5c2
mov rax, qword [rbp - 8]
mov rax, qword [rax + 8]
mov rdx, rax
mov rcx, qword [rbp + 0x10]
call fcn.0041c44f
mov rdx, rax
lea rcx, str.__3s
call sub.msvcrt.dll_printf
mov rax, qword [rbp - 8]
mov edx, dword [rax + 0x28]
mov rax, qword [rbp + 0x10]
mov eax, dword [rax + 0x5c]
cmp edx, eax
jb 0x41e664
lea rax, [0x00488d34]
mov qword [rbp - 0x20], rax
mov rax, qword [rbp + 0x10]
movzx eax, word [rax + 0x4a]
movzx eax, ax
cmp eax, 0x12
je 0x41e62e
cmp eax, 0x12
jg 0x41e613
cmp eax, 6
je 0x41e62e
cmp eax, 6
jg 0x41e60c
sub eax, 2
cmp eax, 1
ja 0x41e667
jmp 0x41e62e
cmp eax, 0xb
je 0x41e62e
jmp 0x41e667
cmp eax, 0x3e
je 0x41e62e
cmp eax, 0x3e
jg 0x41e624
cmp eax, 0x2b
je 0x41e62e
jmp 0x41e667
sub eax, 0xb4
cmp eax, 1
ja 0x41e667
mov rax, qword [rbp - 8]
mov eax, dword [rax + 0x28]
cmp eax, 0xff00
jne 0x41e649
lea rax, str.BEFORE
mov qword [rbp - 0x20], rax
jmp 0x41e66a
mov rax, qword [rbp - 8]
mov eax, dword [rax + 0x28]
cmp eax, 0xff01
jne 0x41e66a
lea rax, str.AFTER
mov qword [rbp - 0x20], rax
jmp 0x41e66a
nop
jmp 0x41e66b
nop
jmp 0x41e66b
nop
mov eax, dword [0x004a838c]
test eax, eax
je 0x41e6d5
cmp qword [rbp - 0x20], 0
je 0x41e69c
mov rax, qword [rbp - 0x20]
movzx eax, byte [rax]
test al, al
je 0x41e69c
mov rax, qword [rbp - 0x20]
mov rdx, rax
lea rcx, str.__s_
call sub.msvcrt.dll_printf
jmp 0x41e6b1
mov rax, qword [rbp - 8]
mov eax, dword [rax + 0x28]
mov edx, eax
lea rcx, str._2u
call sub.msvcrt.dll_printf
mov rax, qword [rbp - 8]
mov rax, qword [rax + 0x30]
mov edx, eax
mov rax, qword [rbp - 8]
mov eax, dword [rax + 0x2c]
mov r8d, edx
mov edx, eax
lea rcx, str._3u__2lu_n
call sub.msvcrt.dll_printf
jmp 0x41e701
mov rax, qword [rbp - 8]
mov rax, qword [rax + 0x30]
mov ecx, eax
mov rax, qword [rbp - 8]
mov edx, dword [rax + 0x2c]
mov rax, qword [rbp - 8]
mov eax, dword [rax + 0x28]
mov r9d, ecx
mov r8d, edx
mov edx, eax
lea rcx, str._2u__3u__2lu_n
call sub.msvcrt.dll_printf
cmp qword [rbp - 0x20], 0
je 0x41eb06
mov rax, qword [rbp - 0x20]
movzx eax, byte [rax]
test al, al
jne 0x41eb06
mov rax, qword [rbp - 8]
mov edx, dword [rax + 0x28]
mov eax, dword [rbp - 0xc]
mov r8d, edx
mov edx, eax
lea rcx, str.section__u:_sh_link_value_of__u_is_larger_than_the_number_of_sections_n
call fcn.0045d7fb
jmp 0x41eb06
mov rax, qword [0x004a2f90]
mov eax, dword [rax]
test eax, eax
je 0x41e917
mov rax, qword [rbp - 8]
mov rax, qword [rax + 0x10]
mov edx, 6
mov rcx, rax
call fcn.0040c0ea
mov rax, qword [rbp - 8]
mov rax, qword [rax + 0x18]
movsxd rdx, eax
mov rax, qword [rbp - 8]
mov rax, qword [rax + 0x18]
cmp rdx, rax
jne 0x41e791
mov rax, qword [rbp - 8]
mov rax, qword [rax + 0x18]
mov edx, eax
lea rcx, str.__6.6lx
call sub.msvcrt.dll_printf
jmp 0x41e7b0
mov ecx, 0x20
call sub.msvcrt.dll_putchar
mov rax, qword [rbp - 8]
mov rax, qword [rax + 0x18]
mov edx, 6
mov rcx, rax
call fcn.0040c0ea
mov rax, qword [rbp - 8]
mov rax, qword [rax + 0x20]
mov edx, eax
mov rax, qword [rbp - 8]
mov rax, qword [rax + 0x20]
cmp rdx, rax
jne 0x41e7df
mov rax, qword [rbp - 8]
mov rax, qword [rax + 0x20]
mov edx, eax
lea rcx, str.__6.6lx
call sub.msvcrt.dll_printf
jmp 0x41e7fe
mov ecx, 0x20
call sub.msvcrt.dll_putchar
mov rax, qword [rbp - 8]
mov rax, qword [rax + 0x20]
mov edx, 6
mov rcx, rax
call fcn.0040c0ea
mov rax, qword [rbp - 8]
mov rax, qword [rax + 0x38]
mov edx, eax
mov rax, qword [rbp - 8]
mov rax, qword [rax + 0x38]
cmp rdx, rax
jne 0x41e82d
mov rax, qword [rbp - 8]
mov rax, qword [rax + 0x38]
mov edx, eax
lea rcx, str.__2.2lx
call sub.msvcrt.dll_printf
jmp 0x41e84c
mov ecx, 0x20
call sub.msvcrt.dll_putchar
mov rax, qword [rbp - 8]
mov rax, qword [rax + 0x38]
mov edx, 6
mov rcx, rax
call fcn.0040c0ea
mov eax, dword [0x004a838c]
test eax, eax
je 0x41e87f
mov rax, qword [sym.imp.msvcrt.dll___iob_func]
call rax
add rax, 0x30
mov r9, rax
mov r8d, 2
mov edx, 1
lea rcx, [0x0048a310]
call sub.msvcrt.dll_fwrite
jmp 0x41e8a2
mov rax, qword [rbp - 8]
mov rax, qword [rax + 8]
mov rdx, rax
mov rcx, qword [rbp + 0x10]
call fcn.0041c44f
mov rdx, rax
lea rcx, str.__3s
call sub.msvcrt.dll_printf
mov rax, qword [rbp - 8]
mov edx, dword [rax + 0x2c]
mov rax, qword [rbp - 8]
mov eax, dword [rax + 0x28]
mov r8d, edx
mov edx, eax
lea rcx, str._2u__3u
call sub.msvcrt.dll_printf
mov rax, qword [rbp - 8]
mov rax, qword [rax + 0x30]
mov edx, eax
mov rax, qword [rbp - 8]
mov rax, qword [rax + 0x30]
cmp rdx, rax
jne 0x41e8f3
mov rax, qword [rbp - 8]
mov rax, qword [rax + 0x30]
mov edx, eax
lea rcx, str._2lu_n
call sub.msvcrt.dll_printf
jmp 0x41eb06
mov rax, qword [rbp - 8]
mov rax, qword [rax + 0x30]
mov edx, 1
mov rcx, rax
call fcn.0040c0ea
mov ecx, 0xa
call sub.msvcrt.dll_putchar
jmp 0x41eb06
mov eax, dword [0x004a838c]
test eax, eax
je 0x41ea05
mov ecx, 0x20
call sub.msvcrt.dll_putchar
mov rax, qword [rbp - 8]
mov rax, qword [rax + 0x10]
mov edx, 6
mov rcx, rax
call fcn.0040c0ea
mov rax, qword [rbp - 8]
mov rax, qword [rax + 0x18]
movsxd rdx, eax
mov rax, qword [rbp - 8]
mov rax, qword [rax + 0x18]
cmp rdx, rax
jne 0x41e974
mov rax, qword [rbp - 8]
mov rax, qword [rax + 0x18]
mov edx, eax
lea rcx, str.___16.16lx
call sub.msvcrt.dll_printf
jmp 0x41e995
lea rcx, [0x0048a310]
call sub.msvcrt.dll_printf
mov rax, qword [rbp - 8]
mov rax, qword [rax + 0x18]
mov edx, 6
mov rcx, rax
call fcn.0040c0ea
mov rax, qword [rbp - 8]
mov eax, dword [rax + 0x28]
mov edx, eax
lea rcx, str.___u_n
call sub.msvcrt.dll_printf
mov rax, qword [rbp - 8]
mov rax, qword [rax + 0x20]
mov edx, 6
mov rcx, rax
call fcn.0040c0ea
mov ecx, 0x20
call sub.msvcrt.dll_putchar
mov rax, qword [rbp - 8]
mov rax, qword [rax + 0x38]
mov edx, 6
mov rcx, rax
call fcn.0040c0ea
mov rax, qword [rbp - 8]
mov rax, qword [rax + 0x30]
mov edx, eax
mov rax, qword [rbp - 8]
mov eax, dword [rax + 0x2c]
mov r8d, edx
mov edx, eax
lea rcx, str.____16u___lu_n
call sub.msvcrt.dll_printf
jmp 0x41eb06
mov ecx, 0x20
call sub.msvcrt.dll_putchar
mov rax, qword [rbp - 8]
mov rax, qword [rax + 0x10]
mov edx, 6
mov rcx, rax
call fcn.0040c0ea
mov rax, qword [rbp - 8]
mov rax, qword [rax + 0x18]
movsxd rdx, eax
mov rax, qword [rbp - 8]
mov rax, qword [rax + 0x18]
cmp rdx, rax
jne 0x41ea54
mov rax, qword [rbp - 8]
mov rax, qword [rax + 0x18]
mov edx, eax
lea rcx, str.___8.8lx
call sub.msvcrt.dll_printf
jmp 0x41ea75
lea rcx, [0x0048a310]
call sub.msvcrt.dll_printf
mov rax, qword [rbp - 8]
mov rax, qword [rax + 0x18]
mov edx, 6
mov rcx, rax
call fcn.0040c0ea
lea rcx, str._n
call sub.msvcrt.dll_printf
mov rax, qword [rbp - 8]
mov rax, qword [rax + 0x20]
mov edx, 6
mov rcx, rax
call fcn.0040c0ea
lea rcx, [0x0048a310]
call sub.msvcrt.dll_printf
mov rax, qword [rbp - 8]
mov rax, qword [rax + 0x38]
mov edx, 6
mov rcx, rax
call fcn.0040c0ea
mov rax, qword [rbp - 8]
mov rax, qword [rax + 8]
mov rdx, rax
mov rcx, qword [rbp + 0x10]
call fcn.0041c44f
mov rdx, rax
lea rcx, str.__3s
call sub.msvcrt.dll_printf
mov rax, qword [rbp - 8]
mov rax, qword [rax + 0x30]
mov ecx, eax
mov rax, qword [rbp - 8]
mov edx, dword [rax + 0x2c]
mov rax, qword [rbp - 8]
mov eax, dword [rax + 0x28]
mov r9d, ecx
mov r8d, edx
mov edx, eax
lea rcx, str.______2u____3u______lu_n
call sub.msvcrt.dll_printf
mov eax, dword [0x004a838c]
test eax, eax
je 0x41ebf6
mov rax, qword [rbp - 8]
mov rax, qword [rax + 8]
mov rdx, rax
mov rcx, qword [rbp + 0x10]
call fcn.0041c44f
mov rdx, rax
lea rcx, str.________s_n
call sub.msvcrt.dll_printf
mov rax, qword [rbp - 8]
mov rax, qword [rax + 8]
and eax, 0x800
test rax, rax
je 0x41ebf6
mov rax, qword [rbp - 8]
mov rax, qword [rax + 0x18]
mov ecx, eax
lea rax, [rbp - 0x70]
lea rdx, str.compression_header
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x20], 0x18
mov r9d, 1
mov r8d, ecx
mov rdx, qword [rbp + 0x10]
mov rcx, rax
call fcn.0040be81
test rax, rax
je 0x41ebf6
lea rdx, [rbp - 0x70]
lea rax, [rbp - 0x90]
mov r8d, 0x18
mov rcx, rax
call fcn.0041cd8b
mov eax, dword [rbp - 0x90]
cmp eax, 1
jne 0x41ebbc
lea rcx, str._______ZLIB_
call sub.msvcrt.dll_printf
jmp 0x41ebd0
mov eax, dword [rbp - 0x90]
mov edx, eax
lea rcx, str._________unknown_:_0x_x__
call sub.msvcrt.dll_printf
mov rax, qword [rbp - 0x88]
mov edx, 6
mov rcx, rax
call fcn.0040c0ea
mov rax, qword [rbp - 0x80]
mov edx, eax
lea rcx, str.___lu_n
call sub.msvcrt.dll_printf
add dword [rbp - 0xc], 1
add qword [rbp - 8], 0x50
mov rax, qword [rbp + 0x10]
mov eax, dword [rax + 0x5c]
cmp dword [rbp - 0xc], eax
jb 0x41df28
mov eax, dword [0x004a838c]
test eax, eax
jne 0x41eca3
lea rcx, str.Key_to_Flags:_n__W__write___A__alloc___X__execute___M__merge___S__strings___I__info___n__L__link_order___O__extra_OS_processing_required___G__group___T__TLS___n__C__compressed___x__unknown___o__OS_specific___E__exclude___n
call sub.msvcrt.dll_printf
mov rax, qword [rbp + 0x10]
movzx eax, word [rax + 0x4a]
cmp ax, 0x3e
je 0x41ec53
mov rax, qword [rbp + 0x10]
movzx eax, word [rax + 0x4a]
cmp ax, 0xb4
je 0x41ec53
mov rax, qword [rbp + 0x10]
movzx eax, word [rax + 0x4a]
cmp ax, 0xb5
jne 0x41ec61
lea rcx, str.l__large__
call sub.msvcrt.dll_printf
jmp 0x41ec97
mov rax, qword [rbp + 0x10]
movzx eax, word [rax + 0x4a]
cmp ax, 0x28
jne 0x41ec7d
lea rcx, str.y__purecode__
call sub.msvcrt.dll_printf
jmp 0x41ec97
mov rax, qword [rbp + 0x10]
movzx eax, word [rax + 0x4a]
cmp ax, 0x14
jne 0x41ec97
lea rcx, str.v__VLE__
call sub.msvcrt.dll_printf
lea rcx, str.p__processor_specific_
call sub.msvcrt.dll_puts
mov eax, 1
add rsp, 0xf0
pop rbp
ret
jo str.tu_index
invalid
jae case.0x41e15f.3
jb 0x489e7b
outsb dx, byte [rsi]
jae str.rnglists
jae str.rnglists
jb 0x489e8f
insb byte [edi], dx
imul esi, dword [rbx + 0x74], 0x72660073
jb 0x489e8c
insd dword [rdi], dx
add byte gs:[rbp + 0x61], ch
invalid
je 0x489ed2
pop rdi
imul ebp, dword [rsi + 0x64], 0x2e007865
outsb dx, byte cs:[esi]
jne 0x489e97
insb byte [rdi], dx
imul ebp, dword [rsi + 0x6b], 0x65636e6f
ja 0x489edd
add byte cs:[rsi], ch
push 0x6172665f
jb 0x489ede
insd dword [rdi], dx
add byte gs:[rsi], ch
invalid
jne 0x489ef8
pop rdi
outsb dx, byte [rsi]
invalid
add byte [rsi], ch
je 0x489f0d
invalid
add byte [rdx], cl
or dl, byte [rbx + 0x65]
invalid
invalid
jns 0x489f6a
and byte gs:[rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
jb 0x489f2c
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rdi + 0x66], cl
and byte [rax], ah
and byte [rax], ah
push rbx
imul edi, dword [rdx + 0x65], 0x45202020
push rbx
and byte [rax], ah
and byte [rbx + rbp*2 + 0x20], cl
outsb dx, byte [rsi]
and byte [rcx + 0x6c], al
add byte [rax], al
add byte [rax], al
and byte [rax], ah
pop rbx
jb 0x489f93
and byte [rsi + 0x61], cl
insd dword [rdi], dx
and byte gs:[rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
push rsp
jns 0x489fbc
and byte gs:[rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
jb 0x489f7e
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
push rbx
imul edi, dword [rdx + 0x65], 0x45202020
push rbx
and byte [rsi + 0x6c], al
and byte [ebx + ebp*2 + 0x20], cl
outsb dx, byte [rsi]
and byte [rcx + 0x6c], al
insb byte [rdi], dx
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rcx + rdi*2 + 0x70], dl
and byte gs:[rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
jb 0x48a009
jae 0x48a019
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
push rbx
imul edi, dword [rdx + 0x65], 0x45202020
push rbx
and byte [rax], ah
push r11
and byte [rax], ah
and byte [rbx + rbp*2 + 0x20], cl
outsb dx, byte [rsi]
and byte [rcx + 0x6c], al
add byte [rax], al
add byte [rax], al
and byte [rax], ah
pop rbx
jb 0x48a033
and byte [rsi + 0x61], cl
insd dword [rdi], dx
and byte gs:[rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
push rsp
jns 0x48a05c
and byte gs:[rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
jb 0x48a063
jae 0x48a073
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rdi + 0x66], cl
and byte [rax], ah
and byte [rax], ah
push rbx
imul edi, dword [rdx + 0x65], 0x45202020
push rbx
and byte [rsi + 0x6c], al
and byte [ebx + ebp*2 + 0x20], cl
outsb dx, byte [rsi]
and byte [rcx + 0x6c], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rcx + rdi*2 + 0x70], dl
and byte [rax], ah
and byte [rax], ah
push rsp
jns 0x48a0aa
and byte gs:[rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
jb 0x48a0b3
jae 0x48a0c3
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
jae 0x48a0c4
jae 0x48a0c4
je 0x48a081
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rcx + rbp*2 + 0x6e], cl
imul eax, dword [rax], 0
add byte [rax], al
add byte [rax], al
add byte [rax], al
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rbx + 0x69], dl
add byte [rax], al
add byte [rax], al
add byte [rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rbx + 0x69], dl
jp 0x48a0e8
and byte [rax], ah
and byte [rax], ah
jp 0x48a0e8
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
outsb dx, byte [rsi]
je 0x48a0e8
imul edi, dword [rdx + 0x65], 0x20202020
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
outsb dx, byte [rsi]
outsw dx, word [rsi]
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
insb byte [rdi], dx
and byte [rcx + 0x6c], al
imul esp, dword [rdi + 0x6e], 0
add byte [rax], al
add byte [rax], ah
and byte [rax], ah
pop rbx
invalid
jb 0x48a123
jb 0x48a123
and byte [rsi + 0x61], cl
insd dword [rdi], dx
and byte gs:[rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
push rsp
jns 0x48a14c
and byte gs:[rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rcx + 0x64], al
jb 0x48a154
and byte [rax], ah
jb 0x48a154
jae 0x48a164
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rdi + 0x66], cl
jae 0x48a166
je 0x48a103
add byte [rax], al
add byte [rax], al
add byte [rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rbx + 0x69], dl
jp 0x48a178
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
outsb dx, byte [rsi]
je 0x48a178
imul edi, dword [rdx + 0x65], 0x20202020
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
insb byte [rdi], dx
invalid
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
insb byte [rdi], dx
invalid
imul sp, word [rbp + 0x6c], 0x2064
sub byte [0x7368cae5], ah
insb byte [rdi], dx
and byte fs:[rax], ch
and eax, 0x73202975
push 0x646c756f
and byte [rcx + 0x6e], ch
js 0x48a19c
invalid
imul sp, word [rbp + 0x6c], 0x2064
sub byte [0x7368cb1d], ah
push 0x646c756f
and byte [rcx + 0x6e], ch
js 0x48a1d4
invalid
invalid