Function at 0x441ee1
Capabilities:
Write file on windows

Disassembly:
push rbp
sub rsp, 0x120
lea rbp, [rsp + 0x80]
mov qword [rbp + 0xb0], rcx
mov qword [rbp + 0xb8], rdx
mov rax, qword [rbp + 0xb8]
mov qword [rbp + 0x48], rax
mov qword [rbp - 8], 0
mov rax, qword [rbp + 0xb0]
mov rax, qword [rax + 0xf0]
mov rax, qword [rax + 0x58]
mov qword [rbp + 0x98], rax
cmp qword [rbp + 0x98], 0
je 0x442205
mov rax, qword [rbp + 0x48]
mov r9, rax
mov r8d, 0x11
mov edx, 1
lea rcx, str._nProgram_Header:_n
call sub.msvcrt.dll_fwrite
mov rax, qword [rbp + 0xb0]
mov rax, qword [rax + 0xf0]
mov eax, dword [rax + 0x3c]
mov dword [rbp + 0x44], eax
mov dword [rbp + 0x94], 0
jmp 0x4421f6
mov rax, qword [rbp + 0x98]
mov eax, dword [rax]
mov ecx, eax
call fcn.00441dbd
mov qword [rbp + 0x88], rax
cmp qword [rbp + 0x88], 0
jne 0x441fc5
mov rax, qword [rbp + 0x98]
mov edx, dword [rax]
lea rax, [rbp - 0x20]
mov r8d, edx
lea rdx, str.0x_lx
mov rcx, rax
call sub.msvcrt.dll_sprintf
lea rax, [rbp - 0x20]
mov qword [rbp + 0x88], rax
mov rdx, qword [rbp + 0x88]
mov rax, qword [rbp + 0x48]
mov r8, rdx
lea rdx, str._8s_off____0x
mov rcx, rax
call sub.msvcrt.dll_fprintf
mov rax, qword [rbp + 0x98]
mov rdx, qword [rax + 8]
mov rax, qword [rbp + 0x48]
mov r8, rdx
mov rdx, rax
mov rcx, qword [rbp + 0xb0]
call fcn.00414baa
mov rax, qword [rbp + 0x48]
mov r9, rax
mov r8d, 9
mov edx, 1
lea rcx, str._vaddr_0x
call sub.msvcrt.dll_fwrite
mov rax, qword [rbp + 0x98]
mov rdx, qword [rax + 0x10]
mov rax, qword [rbp + 0x48]
mov r8, rdx
mov rdx, rax
mov rcx, qword [rbp + 0xb0]
call fcn.00414baa
mov rax, qword [rbp + 0x48]
mov r9, rax
mov r8d, 9
mov edx, 1
lea rcx, str._paddr_0x
call sub.msvcrt.dll_fwrite
mov rax, qword [rbp + 0x98]
mov rdx, qword [rax + 0x18]
mov rax, qword [rbp + 0x48]
mov r8, rdx
mov rdx, rax
mov rcx, qword [rbp + 0xb0]
call fcn.00414baa
mov rax, qword [rbp + 0x98]
mov rax, qword [rax + 0x30]
mov rcx, rax
call fcn.00419dd5
mov edx, eax
mov rax, qword [rbp + 0x48]
mov r8d, edx
lea rdx, str._align_2_u_n
mov rcx, rax
call sub.msvcrt.dll_fprintf
mov rax, qword [rbp + 0x48]
mov r9, rax
mov r8d, 0x12
mov edx, 1
lea rcx, str._________filesz_0x
call sub.msvcrt.dll_fwrite
mov rax, qword [rbp + 0x98]
mov rdx, qword [rax + 0x20]
mov rax, qword [rbp + 0x48]
mov r8, rdx
mov rdx, rax
mov rcx, qword [rbp + 0xb0]
call fcn.00414baa
mov rax, qword [rbp + 0x48]
mov r9, rax
mov r8d, 9
mov edx, 1
lea rcx, str._memsz_0x
call sub.msvcrt.dll_fwrite
mov rax, qword [rbp + 0x98]
mov rdx, qword [rax + 0x28]
mov rax, qword [rbp + 0x48]
mov r8, rdx
mov rdx, rax
mov rcx, qword [rbp + 0xb0]
call fcn.00414baa
mov rax, qword [rbp + 0x98]
mov eax, dword [rax + 4]
and eax, 1
test eax, eax
je 0x442142
mov edx, 0x78
jmp 0x442147
mov edx, 0x2d
mov rax, qword [rbp + 0x98]
mov eax, dword [rax + 4]
and eax, 2
test eax, eax
je 0x442160
mov r8d, 0x77
jmp 0x442166
mov r8d, 0x2d
mov rax, qword [rbp + 0x98]
mov eax, dword [rax + 4]
and eax, 4
test eax, eax
je 0x44217e
mov ecx, 0x72
jmp 0x442183
mov ecx, 0x2d
mov rax, qword [rbp + 0x48]
mov dword [rsp + 0x20], edx
mov r9d, r8d
mov r8d, ecx
lea rdx, str._flags__c_c_c
mov rcx, rax
call sub.msvcrt.dll_fprintf
mov rax, qword [rbp + 0x98]
mov eax, dword [rax + 4]
and eax, 0xfffffff8
test eax, eax
je 0x4421d6
mov rax, qword [rbp + 0x98]
mov eax, dword [rax + 4]
and eax, 0xfffffff8
mov edx, eax
mov rax, qword [rbp + 0x48]
mov r8d, edx
lea rdx, str.__lx
mov rcx, rax
call sub.msvcrt.dll_fprintf
mov rax, qword [rbp + 0x48]
mov rdx, rax
mov ecx, 0xa
call sub.msvcrt.dll_fputc
add dword [rbp + 0x94], 1
add qword [rbp + 0x98], 0x38
mov eax, dword [rbp + 0x94]
cmp eax, dword [rbp + 0x44]
jb 0x441f7a
lea rdx, [0x00502c12]
mov rcx, qword [rbp + 0xb0]
call fcn.0041c7d2
mov qword [rbp + 0x38], rax
cmp qword [rbp + 0x38], 0
je 0x442b73
mov rax, qword [rbp + 0x48]
mov r9, rax
mov r8d, 0x12
mov edx, 1
lea rcx, str._nDynamic_Section:_n
call sub.msvcrt.dll_fwrite
lea rdx, [rbp - 8]
mov rax, qword [rbp + 0x38]
mov r8, rdx
mov rdx, rax
mov rcx, qword [rbp + 0xb0]
call fcn.0041d37a
test eax, eax
je 0x442e72
mov rax, qword [rbp + 0x38]
mov rdx, rax
mov rcx, qword [rbp + 0xb0]
call fcn.0044da0c
mov dword [rbp + 0x34], eax
cmp dword [rbp + 0x34], 0xfffffeff
je 0x442e75
mov rax, qword [rbp + 0xb0]
mov rax, qword [rax + 0xf0]
mov rax, qword [rax + 0x50]
mov edx, dword [rbp + 0x34]
shl rdx, 3
add rax, rdx
mov rax, qword [rax]
mov eax, dword [rax + 0x28]
mov dword [rbp + 0x30], eax
mov rax, qword [rbp + 0xb0]
mov rax, qword [rax + 8]
mov rax, qword [rax + 0x368]
mov rax, qword [rax + 0x300]
movzx eax, byte [rax + 6]
movzx eax, al
mov qword [rbp + 0x28], rax
mov rax, qword [rbp + 0xb0]
mov rax, qword [rax + 8]
mov rax, qword [rax + 0x368]
mov rax, qword [rax + 0x300]
mov rax, qword [rax + 0x50]
mov qword [rbp + 0x20], rax
mov rax, qword [rbp - 8]
mov qword [rbp + 0x80], rax
mov rax, qword [rbp + 0x38]
mov rax, qword [rax + 0x38]
cmp qword [rbp + 0x28], rax
ja 0x442e78
mov rax, qword [rbp + 0x38]
mov rdx, qword [rax + 0x38]
mov rax, qword [rbp + 0x80]
add rax, rdx
mov qword [rbp + 0x18], rax
jmp 0x442b3e
lea rax, [0x00502609]
mov qword [rbp + 0x78], rax
mov rax, qword [rbp + 0xb0]
mov rax, qword [rax + 8]
mov rax, qword [rax + 0x368]
mov qword [rbp + 0x10], rax
lea rcx, [rbp - 0x30]
mov rdx, qword [rbp + 0x80]
mov rax, qword [rbp + 0x20]
mov r8, rcx
mov rcx, qword [rbp + 0xb0]
call rax
mov rax, qword [rbp - 0x30]
test rax, rax
je 0x442b5e
mov dword [rbp + 0x74], 0
mov rax, qword [rbp - 0x30]
cmp rax, 0x1d
je 0x44289b
cmp rax, 0x1d
ja 0x4424d0
cmp rax, 0xe
je 0x44279d
cmp rax, 0xe
ja 0x44243c
cmp rax, 7
je 0x44272d
cmp rax, 7
ja 0x4423fa
cmp rax, 3
je 0x4426ed
cmp rax, 3
ja 0x4423e1
cmp rax, 1
je 0x4426c6
cmp rax, 2
je 0x4426dd
jmp 0x442665
cmp rax, 5
je 0x44270d
cmp rax, 5
ja 0x44271d
jmp 0x4426fd
cmp rax, 0xa
je 0x44275d
cmp rax, 0xa
ja 0x442423
cmp rax, 8
je 0x44273d
cmp rax, 9
je 0x44274d
jmp 0x442665
cmp rax, 0xc
je 0x44277d
cmp rax, 0xc
ja 0x44278d
jmp 0x44276d
cmp rax, 0x15
je 0x44281b
cmp rax, 0x15
ja 0x44248e
cmp rax, 0x11
je 0x4427db
cmp rax, 0x11
ja 0x442475
cmp rax, 0xf
je 0x4427b4
cmp rax, 0x10
je 0x4427cb
jmp 0x442665
cmp rax, 0x13
je 0x4427fb
cmp rax, 0x13
ja 0x44280b
jmp 0x4427eb
cmp rax, 0x19
je 0x44285b
cmp rax, 0x19
ja 0x4424b7
cmp rax, 0x17
je 0x44283b
cmp rax, 0x17
ja 0x44284b
jmp 0x44282b
cmp rax, 0x1b
je 0x44287b
cmp rax, 0x1b
ja 0x44288b
jmp 0x44286b
cmp rax, 0x6ffffefc
je 0x442990
cmp rax, 0x6ffffefc
ja 0x4425a8
cmp rax, 0x6ffffdfb
je 0x442912
cmp rax, 0x6ffffdfb
ja 0x44254e
cmp rax, 0x21
je 0x4428d2
cmp rax, 0x21
ja 0x442525
cmp rax, 0x1e
je 0x4428b2
cmp rax, 0x20
je 0x4428c2
jmp 0x442665
cmp rax, 0x6ffffdf9
je 0x4428f2
cmp rax, 0x6ffffdf9
ja 0x442902
cmp rax, 0x6ffffdf8
je 0x4428e2
jmp 0x442665
cmp rax, 0x6ffffdff
je 0x442952
cmp rax, 0x6ffffdff
ja 0x44257f
cmp rax, 0x6ffffdfd
je 0x442932
cmp rax, 0x6ffffdfd
ja 0x442942
jmp 0x442922
cmp rax, 0x6ffffefa
je 0x442962
cmp rax, 0x6ffffefa
ja 0x442979
cmp rax, 0x6ffffef5
je 0x442a7d
jmp 0x442665
cmp rax, 0x6ffffffb
je 0x4429f7
cmp rax, 0x6ffffffb
ja 0x442610
cmp rax, 0x6ffffeff
je 0x4429c7
cmp rax, 0x6ffffeff
ja 0x4425ea
cmp rax, 0x6ffffefd
je 0x4429a7
cmp rax, 0x6ffffefe
je 0x4429b7
jmp 0x442665
cmp rax, 0x6ffffff9
je 0x4429d7
cmp rax, 0x6ffffff9
ja 0x4429e7
cmp rax, 0x6ffffff0
je 0x442a07
jmp 0x442665
cmp rax, 0x6fffffff
je 0x442a3b
cmp rax, 0x6fffffff
ja 0x442641
cmp rax, 0x6ffffffd
je 0x442a21
cmp rax, 0x6ffffffd
ja 0x442a2e
jmp 0x442a14
cmp rax, 0x7ffffffe
je 0x442a5c
cmp rax, 0x7fffffff
je 0x442a69
cmp rax, 0x7ffffffd
je 0x442a48
mov rax, qword [rbp + 0x10]
mov rax, qword [rax + 0x1d0]
test rax, rax
je 0x44268d
mov rax, qword [rbp + 0x10]
mov rax, qword [rax + 0x1d0]
mov rdx, qword [rbp - 0x30]
mov rcx, rdx
call rax
mov qword [rbp + 0x78], rax
mov rax, qword [rbp + 0x78]
movzx eax, byte [rax]
movzx eax, al
test eax, eax
jne 0x442a8a
mov rdx, qword [rbp - 0x30]
lea rax, [rbp - 0x50]
mov r8, rdx
lea rdx, str._I64x
mov rcx, rax
call sub.msvcrt.dll_sprintf
lea rax, [rbp - 0x50]
mov qword [rbp + 0x78], rax
jmp 0x442a8a
lea rax, str.NEEDED
mov qword [rbp + 0x78], rax
mov dword [rbp + 0x74], 1
jmp 0x442a8b
lea rax, str.PLTRELSZ
mov qword [rbp + 0x78], rax
jmp 0x442a8b
lea rax, str.PLTGOT
mov qword [rbp + 0x78], rax
jmp 0x442a8b
lea rax, str.HASH
mov qword [rbp + 0x78], rax
jmp 0x442a8b
lea rax, str.STRTAB
mov qword [rbp + 0x78], rax
jmp 0x442a8b
lea rax, str.SYMTAB
mov qword [rbp + 0x78], rax
jmp 0x442a8b
lea rax, str.RELA
mov qword [rbp + 0x78], rax
jmp 0x442a8b
lea rax, str.RELASZ
mov qword [rbp + 0x78], rax
jmp 0x442a8b
lea rax, str.RELAENT
mov qword [rbp + 0x78], rax
jmp 0x442a8b
lea rax, str.STRSZ
mov qword [rbp + 0x78], rax
jmp 0x442a8b
lea rax, str.SYMENT
mov qword [rbp + 0x78], rax
jmp 0x442a8b
lea rax, str.INIT
mov qword [rbp + 0x78], rax
jmp 0x442a8b
lea rax, str.FINI
mov qword [rbp + 0x78], rax
jmp 0x442a8b
lea rax, str.SONAME
mov qword [rbp + 0x78], rax
mov dword [rbp + 0x74], 1
jmp 0x442a8b
lea rax, str.RPATH
mov qword [rbp + 0x78], rax
mov dword [rbp + 0x74], 1
jmp 0x442a8b
lea rax, str.SYMBOLIC
mov qword [rbp + 0x78], rax
jmp 0x442a8b
lea rax, [0x00502ca0]
mov qword [rbp + 0x78], rax
jmp 0x442a8b
lea rax, str.RELSZ
mov qword [rbp + 0x78], rax
jmp 0x442a8b
lea rax, str.RELENT
mov qword [rbp + 0x78], rax
jmp 0x442a8b
lea rax, str.PLTREL
mov qword [rbp + 0x78], rax
jmp 0x442a8b
lea rax, [0x00502cb8]
mov qword [rbp + 0x78], rax
jmp 0x442a8b
lea rax, str.TEXTREL
mov qword [rbp + 0x78], rax
jmp 0x442a8b
lea rax, str.JMPREL
mov qword [rbp + 0x78], rax
jmp 0x442a8b
lea rax, str.BIND_NOW
mov qword [rbp + 0x78], rax
jmp 0x442a8b
lea rax, str.INIT_ARRAY
mov qword [rbp + 0x78], rax
jmp 0x442a8b
lea rax, str.FINI_ARRAY
mov qword [rbp + 0x78], rax
jmp 0x442a8b
lea rax, str.INIT_ARRAYSZ
mov qword [rbp + 0x78], rax
jmp 0x442a8b
lea rax, str.FINI_ARRAYSZ
mov qword [rbp + 0x78], rax
jmp 0x442a8b
lea rax, str.RUNPATH
mov qword [rbp + 0x78], rax
mov dword [rbp + 0x74], 1
jmp 0x442a8b
lea rax, str.FLAGS
mov qword [rbp + 0x78], rax
jmp 0x442a8b
lea rax, str.PREINIT_ARRAY
mov qword [rbp + 0x78], rax
jmp 0x442a8b
lea rax, str.PREINIT_ARRAYSZ
mov qword [rbp + 0x78], rax
jmp 0x442a8b
lea rax, str.CHECKSUM
mov qword [rbp + 0x78], rax
jmp 0x442a8b
lea rax, str.PLTPADSZ
mov qword [rbp + 0x78], rax
jmp 0x442a8b
lea rax, str.MOVEENT
mov qword [rbp + 0x78], rax
jmp 0x442a8b
lea rax, str.MOVESZ
mov qword [rbp + 0x78], rax
jmp 0x442a8b
lea rax, str.FEATURE
mov qword [rbp + 0x78], rax
jmp 0x442a8b
lea rax, str.POSFLAG_1
mov qword [rbp + 0x78], rax
jmp 0x442a8b
lea rax, str.SYMINSZ
mov qword [rbp + 0x78], rax
jmp 0x442a8b
lea rax, str.SYMINENT
mov qword [rbp + 0x78], rax
jmp 0x442a8b
lea rax, str.CONFIG
mov qword [rbp + 0x78], rax
mov dword [rbp + 0x74], 1
jmp 0x442a8b
lea rax, str.DEPAUDIT
mov qword [rbp + 0x78], rax
mov dword [rbp + 0x74], 1
jmp 0x442a8b
lea rax, str.AUDIT
mov qword [rbp + 0x78], rax
mov dword [rbp + 0x74], 1
jmp 0x442a8b
lea rax, str.PLTPAD
mov qword [rbp + 0x78], rax
jmp 0x442a8b
lea rax, str.MOVETAB
mov qword [rbp + 0x78], rax
jmp 0x442a8b
lea rax, str.SYMINFO
mov qword [rbp + 0x78], rax
jmp 0x442a8b
lea rax, str.RELACOUNT
mov qword [rbp + 0x78], rax
jmp 0x442a8b
lea rax, str.RELCOUNT
mov qword [rbp + 0x78], rax
jmp 0x442a8b
lea rax, str.FLAGS_1
mov qword [rbp + 0x78], rax
jmp 0x442a8b
lea rax, str.VERSYM
mov qword [rbp + 0x78], rax
jmp 0x442a8b
lea rax, str.VERDEF
mov qword [rbp + 0x78], rax
jmp 0x442a8b
lea rax, str.VERDEFNUM
mov qword [rbp + 0x78], rax
jmp 0x442a8b
lea rax, str.VERNEED
mov qword [rbp + 0x78], rax
jmp 0x442a8b
lea rax, str.VERNEEDNUM
mov qword [rbp + 0x78], rax
jmp 0x442a8b
lea rax, str.AUXILIARY
mov qword [rbp + 0x78], rax
mov dword [rbp + 0x74], 1
jmp 0x442a8b
lea rax, str.USED
mov qword [rbp + 0x78], rax
jmp 0x442a8b
lea rax, str.FILTER
mov qword [rbp + 0x78], rax
mov dword [rbp + 0x74], 1
jmp 0x442a8b
lea rax, str.GNU_HASH
mov qword [rbp + 0x78], rax
jmp 0x442a8b
nop
mov rdx, qword [rbp + 0x78]
mov rax, qword [rbp + 0x48]
mov r8, rdx
lea rdx, str.____20s
mov rcx, rax
call sub.msvcrt.dll_fprintf
cmp dword [rbp + 0x74], 0
jne 0x442ae5
mov rax, qword [rbp + 0x48]
mov r9, rax
mov r8d, 2
mov edx, 1
lea rcx, [0x00502e11]
call sub.msvcrt.dll_fwrite
mov rdx, qword [rbp - 0x28]
mov rax, qword [rbp + 0x48]
mov r8, rdx
mov rdx, rax
mov rcx, qword [rbp + 0xb0]
call fcn.00414baa
jmp 0x442b22
mov rax, qword [rbp - 0x28]
mov dword [rbp + 0xc], eax
mov edx, dword [rbp + 0xc]
mov eax, dword [rbp + 0x30]
mov r8d, edx
mov edx, eax
mov rcx, qword [rbp + 0xb0]
call fcn.0043f52b
mov qword [rbp], rax
cmp qword [rbp], 0
je 0x442e7b
mov rdx, qword [rbp + 0x48]
mov rax, qword [rbp]
mov rcx, rax
call sub.msvcrt.dll_fputs
mov rax, qword [rbp + 0x48]
mov rdx, rax
mov ecx, 0xa
call sub.msvcrt.dll_fputc
mov rax, qword [rbp + 0x28]
add qword [rbp + 0x80], rax
mov rax, qword [rbp + 0x28]
neg rax
mov rdx, rax
mov rax, qword [rbp + 0x18]
add rax, rdx
cmp qword [rbp + 0x80], rax
jbe 0x44232c
jmp 0x442b5f
nop
mov rax, qword [rbp - 8]
mov rcx, rax
call sub.msvcrt.dll_free
mov qword [rbp - 8], 0
mov rax, qword [rbp + 0xb0]
mov rax, qword [rax + 0xf0]
mov eax, dword [rax + 0xc7c]
test eax, eax
je 0x442ba5
mov rax, qword [rbp + 0xb0]
mov rax, qword [rax + 0xf0]
mov rax, qword [rax + 0x340]
test rax, rax
je 0x442bd7
mov rax, qword [rbp + 0xb0]
mov rax, qword [rax + 0xf0]
mov eax, dword [rax + 0xc80]
test eax, eax
je 0x442bf6
mov rax, qword [rbp + 0xb0]
mov rax, qword [rax + 0xf0]
mov rax, qword [rax + 0x348]
test rax, rax
jne 0x442bf6
mov edx, 0
mov rcx, qword [rbp + 0xb0]
call fcn.004521a7
test eax, eax
jne 0x442bf6
mov eax, 0
jmp 0x442e96
mov rax, qword [rbp + 0xb0]
mov rax, qword [rax + 0xf0]
mov eax, dword [rax + 0xc7c]
test eax, eax
je 0x442d55
mov rax, qword [rbp + 0x48]
mov r9, rax
mov r8d, 0x16
mov edx, 1
lea rcx, str._nVersion_definitions:_n
call sub.msvcrt.dll_fwrite
mov rax, qword [rbp + 0xb0]
mov rax, qword [rax + 0xf0]
mov rax, qword [rax + 0x340]
mov qword [rbp + 0x68], rax
jmp 0x442d4a
mov rax, qword [rbp + 0x68]
mov rax, qword [rax + 0x20]
test rax, rax
je 0x442c65
mov rax, qword [rbp + 0x68]
mov rax, qword [rax + 0x20]
jmp 0x442c6c
lea rax, str._corrupt_
mov rdx, qword [rbp + 0x68]
mov edx, dword [rdx + 8]
mov rcx, qword [rbp + 0x68]
movzx ecx, word [rcx + 2]
movzx r9d, cx
mov rcx, qword [rbp + 0x68]
movzx ecx, word [rcx + 4]
movzx r8d, cx
mov rcx, qword [rbp + 0x48]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], edx
lea rdx, str._d_0x_2.2x_0x_8.8lx__s_n
call sub.msvcrt.dll_fprintf
mov rax, qword [rbp + 0x68]
mov rax, qword [rax + 0x30]
test rax, rax
je 0x442d3e
mov rax, qword [rbp + 0x68]
mov rax, qword [rax + 0x30]
mov rax, qword [rax + 0x10]
test rax, rax
je 0x442d3e
mov rax, qword [rbp + 0x48]
mov rdx, rax
mov ecx, 9
call sub.msvcrt.dll_fputc
mov rax, qword [rbp + 0x68]
mov rax, qword [rax + 0x30]
mov rax, qword [rax + 0x10]
mov qword [rbp + 0x60], rax
jmp 0x442d26
mov rax, qword [rbp + 0x60]
mov rax, qword [rax + 8]
test rax, rax
je 0x442d00
mov rax, qword [rbp + 0x60]
mov rax, qword [rax + 8]
jmp 0x442d07
lea rax, str._corrupt_
mov rcx, qword [rbp + 0x48]
mov r8, rax
lea rdx, [0x00502e4d]
call sub.msvcrt.dll_fprintf
mov rax, qword [rbp + 0x60]
mov rax, qword [rax + 0x10]
mov qword [rbp + 0x60], rax
cmp qword [rbp + 0x60], 0
jne 0x442ce9
mov rax, qword [rbp + 0x48]
mov rdx, rax
mov ecx, 0xa
call sub.msvcrt.dll_fputc
mov rax, qword [rbp + 0x68]
mov rax, qword [rax + 0x28]
mov qword [rbp + 0x68], rax
cmp qword [rbp + 0x68], 0
jne 0x442c4e
mov rax, qword [rbp + 0xb0]
mov rax, qword [rax + 0xf0]
mov eax, dword [rax + 0xc80]
test eax, eax
je 0x442e6b
mov rax, qword [rbp + 0x48]
mov r9, rax
mov r8d, 0x15
mov edx, 1
lea rcx, str._nVersion_References:_n
call sub.msvcrt.dll_fwrite
mov rax, qword [rbp + 0xb0]
mov rax, qword [rax + 0xf0]
mov rax, qword [rax + 0x348]
mov qword [rbp + 0x58], rax
jmp 0x442e60
mov rax, qword [rbp + 0x58]
mov rax, qword [rax + 0x18]
test rax, rax
je 0x442dc4
mov rax, qword [rbp + 0x58]
mov rax, qword [rax + 0x18]
jmp 0x442dcb
lea rax, str._corrupt_
mov rcx, qword [rbp + 0x48]
mov r8, rax
lea rdx, str.__required_from__s:_n
call sub.msvcrt.dll_fprintf
mov rax, qword [rbp + 0x58]
mov rax, qword [rax + 0x20]
mov qword [rbp + 0x50], rax
jmp 0x442e4d
mov rax, qword [rbp + 0x50]
mov rax, qword [rax + 0x10]
test rax, rax
je 0x442e03
mov rax, qword [rbp + 0x50]
mov rax, qword [rax + 0x10]
jmp 0x442e0a
lea rax, str._corrupt_
mov rdx, qword [rbp + 0x50]
movzx edx, word [rdx + 6]
movzx edx, dx
mov rcx, qword [rbp + 0x50]
movzx ecx, word [rcx + 4]
movzx r9d, cx
mov rcx, qword [rbp + 0x50]
mov r8d, dword [rcx]
mov rcx, qword [rbp + 0x48]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], edx
lea rdx, str.____0x_8.8lx_0x_2.2x__2.2d__s_n
call sub.msvcrt.dll_fprintf
mov rax, qword [rbp + 0x50]
mov rax, qword [rax + 0x18]
mov qword [rbp + 0x50], rax
cmp qword [rbp + 0x50], 0
jne 0x442dec
mov rax, qword [rbp + 0x58]
mov rax, qword [rax + 0x28]
mov qword [rbp + 0x58], rax
cmp qword [rbp + 0x58], 0
jne 0x442dad
mov eax, 1
jmp 0x442e96
nop
jmp 0x442e7c
nop
jmp 0x442e7c
nop
jmp 0x442e7c
nop
mov rax, qword [rbp - 8]
test rax, rax
je 0x442e91
mov rax, qword [rbp - 8]
mov rcx, rax
call sub.msvcrt.dll_free
mov eax, 0
add rsp, 0x120
pop rbp
ret