Function at 0x4108a0
Capabilities:
Write file on windows

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0xf8
mov rax, qword [0x00492378]
test rax, rax
mov rbx, rcx
jne 0x4108f0
mov r11d, dword [0x0049207c]
test r11d, r11d
jne 0x410d50
mov r12d, 1
mov eax, r12d
add rsp, 0xf8
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
mov r12d, dword [0x00492034]
lea rsi, [rcx + 8]
mov qword [rsp + 0x28], rax
lea rdi, [rcx + 0x10]
xor ecx, ecx
mov r9d, dword [0x00492380]
mov qword [rsp + 0x20], 1
lea rdx, str.dynamic_section
mov r8, rdi
mov qword [rsp + 0x30], rdx
mov rdx, rsi
test r12d, r12d
je 0x410c60
call fcn.0040c610
test rax, rax
mov r13, rax
je 0x410d80
mov qword [0x00492370], 0
mov rbp, rax
xor ecx, ecx
mov r12, qword [0x0048c400]
jmp 0x410984
add rcx, 1
mov edx, 4
mov qword [0x00492370], rcx
lea rcx, [rbp - 8]
call qword [r12]
mov rcx, qword [0x00492370]
test rax, rax
je 0x410997
mov rax, qword [0x00492378]
add rbp, 8
add rax, r13
cmp rbp, rax
jbe 0x410960
mov edx, 0x10
call fcn.004484c0
test rax, rax
mov r14, rax
mov qword [0x00492090], rax
je 0x411ad0
mov rax, qword [0x00492370]
mov r12, r13
mov rbp, qword [0x0048c400]
shl rax, 4
add rax, r14
cmp r14, rax
jae 0x410a10
mov rcx, r12
mov edx, 4
add r14, 0x10
call qword [rbp]
lea rcx, [r12 + 4]
mov edx, 4
add r12, 8
mov qword [r14 - 0x10], rax
call qword [rbp]
mov qword [r14 - 8], rax
mov rax, qword [0x00492370]
shl rax, 4
add rax, qword [0x00492090]
cmp r14, rax
jb 0x4109d1
mov rcx, r13
call fcn.00455b00
cmp qword [0x00492358], 0
je 0x4112f0
cmp qword [0x00492368], 0
je 0x4114c0
cmp qword [0x00492350], 0
je 0x411420
mov edx, dword [0x0049207c]
test edx, edx
je 0x410a90
mov edx, dword [0x00492380]
test edx, edx
je 0x410db3
mov r8, qword [0x00492370]
lea rax, str._nDynamic_section_at_offset_0x_lx_contains__lu_entries:_n
lea rcx, str._nDynamic_section_at_offset_0x_lx_contains__lu_entry:_n
cmp r8, 1
cmovne rcx, rax
call sub.msvcrt.dll_printf
mov eax, dword [0x0049207c]
test eax, eax
jne 0x410db3
nop word [rax + rax]
mov r8, qword [0x00492370]
mov rcx, qword [0x00492090]
mov rax, r8
shl rax, 4
mov r14, rcx
add rax, rcx
cmp rcx, rax
jae 0x4108d2
lea rdi, [0x00492140]
lea r13, [0x0046f120]
lea rsi, [0x0046bdfb]
jmp 0x410b27
mov rax, qword [r14]
cmp rax, 0x1e
je 0x410b10
jbe 0x410dc4
cmp rax, 0x6ffffef5
je 0x41127c
ja 0x410e30
cmp rax, 0x6ffffdfb
jbe 0x411033
cmp rax, 0x6ffffdfd
je 0x410b10
jae 0x411aa0
nop dword [rax + rax]
mov rax, r8
add r14, 0x10
shl rax, 4
add rax, rcx
cmp r14, rax
jae 0x4108d2
mov edx, dword [0x0049207c]
test edx, edx
je 0x410ad0
mov ecx, 0x20
call sub.msvcrt.dll_putchar
mov rcx, qword [r14]
mov edx, 5
call fcn.0040a010
mov r8d, dword [r14]
lea rdx, [rbx + 0x4a]
lea rcx, [rbx + 0x1f]
call fcn.0040ef60
cmp dword [0x00492034], 1
mov rcx, rax
mov r12, rax
sbb ebp, ebp
call sub.msvcrt.dll_strlen
and ebp, 0xfffffff8
mov rdx, r12
mov r9, rsi
lea rcx, str.___s__s
add ebp, 0x1b
mov r8d, ebp
sub r8d, eax
call sub.msvcrt.dll_printf
mov rax, qword [r14]
mov edx, dword [0x0049207c]
cmp rax, 0x1e
je 0x411210
jbe 0x410f00
cmp rax, 0x6ffffefc
ja 0x411062
cmp rax, 0x6ffffefa
jae 0x411956
cmp rax, 0x6ffffdfb
jbe 0x4116d0
cmp rax, 0x6ffffdff
ja 0x411270
cmp rax, 0x6ffffdfe
jae 0x41186c
cmp rax, 0x6ffffdfc
je 0x410d90
cmp rax, 0x6ffffdfd
jne 0x410e70
test edx, edx
je 0x410da0
lea rcx, str.Flags:
call sub.msvcrt.dll_printf
mov rbp, qword [r14 + 8]
test rbp, rbp
je 0x411a80
mov r12d, ebp
and ebp, 1
jne 0x411e6c
test r12b, 2
jne 0x411dfb
test r12d, r12d
jne 0x411b8b
lea rcx, [0x0046bd82]
call sub.msvcrt.dll_puts
mov r8, qword [0x00492370]
mov rcx, qword [0x00492090]
jmp 0x410b10
call fcn.0040c610
test rax, rax
mov r13, rax
je 0x410d80
mov qword [0x00492370], 0
mov rbp, rax
xor ecx, ecx
mov r14, qword [0x0048c400]
jmp 0x410cb3
add rcx, 1
mov edx, 8
mov qword [0x00492370], rcx
lea rcx, [rbp - 0x10]
call qword [r14]
mov rcx, qword [0x00492370]
test rax, rax
je 0x410cc6
mov rax, qword [0x00492378]
add rbp, 0x10
add rax, r13
cmp rbp, rax
jbe 0x410c90
mov edx, 0x10
call fcn.004484c0
test rax, rax
mov r14, rax
mov qword [0x00492090], rax
je 0x411ab1
mov rax, qword [0x00492370]
mov r12, r13
mov rbp, qword [0x0048c400]
shl rax, 4
add rax, r14
cmp r14, rax
jae 0x410a10
mov rcx, r12
mov edx, 8
add r14, 0x10
call qword [rbp]
lea rcx, [r12 + 8]
mov edx, 8
add r12, 0x10
mov qword [r14 - 0x10], rax
call qword [rbp]
mov qword [r14 - 8], rax
mov rax, qword [0x00492370]
shl rax, 4
add rax, qword [0x00492090]
cmp r14, rax
jb 0x410d04
jmp 0x410a10
lea rcx, str._nThere_is_no_dynamic_section_in_this_file.
mov r12d, 1
call sub.msvcrt.dll_puts
jmp 0x4108d8
lea rcx, str.Out_of_memory_allocating__lu_byte_for_dynamic_symbol_info_n
mov edx, r12d
call fcn.00448cd0
nop word cs:[rax + rax]
xor r12d, r12d
jmp 0x4108d8
test edx, edx
jne 0x411a40
nop dword [rax + rax]
mov r8, qword [0x00492370]
mov rcx, qword [0x00492090]
jmp 0x410b10
lea rcx, str.__Tag________Type_________________________Name_Value
call sub.msvcrt.dll_puts
jmp 0x410a90
cmp rax, 0x13
jbe 0x410fc0
cmp rax, 0x1a
ja 0x4119d0
cmp rax, 0x19
jae 0x410b10
cmp rax, 0x17
ja 0x410b10
cmp rax, 0x15
jae 0x411026
mov r8, qword [r14 + 8]
test edx, edx
mov qword [0x004921e0], r8
je 0x410da0
lea rdx, [rbx + 0x4a]
lea rcx, [rbx + 0x1f]
call fcn.0040ef60
mov rcx, rax
call sub.msvcrt.dll_puts
mov r8, qword [0x00492370]
mov rcx, qword [0x00492090]
jmp 0x410b10
cmp rax, 0x6ffffffa
jbe 0x411590
cmp rax, 0x6fffffff
je 0x410b10
ja 0x411af2
cmp rax, 0x6ffffffb
je 0x410b10
cmp rax, 0x6ffffffd
je 0x410b10
nop word cs:[rax + rax]
lea rcx, [rax - 0x6ffffff0]
cmp rcx, 0xf
ja 0x410e94
mov r9, qword [r14 + 8]
lea r8, [0x004920a0]
mov ecx, 0x6fffffff
sub rcx, rax
mov qword [r8 + rcx*8], r9
test edx, edx
je 0x410da0
movzx edx, word [rbx + 0x4a]
mov rbp, qword [r14 + 8]
cmp dx, 0xa
je 0x411bcb
jbe 0x411bc1
cmp dx, 0xf
je 0x411d15
cmp dx, 0x32
jne case.0x411be3.1879048195
cmp rax, 0x60000035
je 0x41222e
cmp rax, 0x70000000
je 0x4119df
cmp rax, 0x60000015
je 0x4120e5
nop dword [rax + rax]
mov edx, 4
mov rcx, rbp
jmp 0x411294
cmp rax, 0x13
jbe 0x4116a0
cmp rax, 0x1a
ja 0x411b30
cmp rax, 0x19
jae 0x41186c
cmp rax, 0x17
ja 0x410fb0
cmp rax, 0x15
jb 0x410df6
mov rcx, qword [r14 + 8]
test edx, edx
mov qword [rdi + rax*8], rcx
je 0x410da0
mov rdx, qword [0x00492368]
test rdx, rdx
je 0x411a00
mov r8d, dword [0x00492364]
cmp rcx, r8
jae 0x411a00
add rdx, rcx
mov rbp, rdx
je 0x411a00
cmp rax, 0xe
je 0x41224c
jbe 0x4120a7
cmp rax, 0xf
je 0x41223b
cmp rax, 0x1d
jne 0x411a00
lea rcx, str.Library_runpath:___s_
call sub.msvcrt.dll_printf
nop
mov ecx, 0xa
call sub.msvcrt.dll_putchar
jmp 0x410da0
test edx, edx
je 0x410da0
jmp 0x410fa0
cmp rax, 0x12
jae 0x410fd8
cmp rax, 7
ja 0x411020
cmp rax, 3
jae 0x411026
cmp rax, 1
jbe 0x411026
mov rcx, qword [r14 + 8]
mov qword [rdi + rax*8], rcx
test edx, edx
je 0x410da0
mov rdx, qword [r14 + 8]
lea rcx, str._I64u
call sub.msvcrt.dll_printf
lea rcx, str.__bytes_
call sub.msvcrt.dll_puts
mov r8, qword [0x00492370]
mov rcx, qword [0x00492090]
jmp 0x410b10
cmp rax, 0xb
jbe 0x410fd8
mov rdx, qword [r14 + 8]
mov qword [rdi + rax*8], rdx
jmp 0x410b10
cmp rax, 0x6ffffdf9
jae 0x410b10
cmp rax, 0x6ffffdf5
je 0x410b10
jb 0x410e70
cmp rax, 0x6ffffdf7
jbe 0x410b10
jmp 0x410e70
cmp rax, 0x6ffffffd
je 0x4112b4
ja 0x411930
cmp rax, 0x6ffffffa
jbe 0x411854
cmp rax, 0x6ffffffb
jne 0x410e70
test edx, edx
je 0x410da0
lea rcx, str.Flags:
call sub.msvcrt.dll_printf
mov r12, qword [r14 + 8]
test r12, r12
je 0x411a80
mov ebp, r12d
and r12d, 1
jne 0x412093
test bpl, 2
jne 0x41207f
test bpl, 4
jne 0x41206b
test bpl, 8
jne 0x412057
test bpl, 0x10
jne 0x412043
test bpl, 0x20
jne 0x41202f
test bpl, 0x40
jne 0x41201b
test bpl, 0x80
jne 0x412006
test ebp, 0x100
jne 0x411fef
test ebp, 0x200
jne 0x411fd8
test ebp, 0x400
jne 0x411fc1
test ebp, 0x800
jne 0x411faa
test ebp, 0x1000
jne 0x411f93
test ebp, 0x2000
jne 0x411f7c
test ebp, 0x4000
jne 0x411f65
test ebp, 0x8000
jne 0x411f4e
test ebp, 0x10000
jne 0x411f37
test ebp, 0x20000
jne 0x411f20
test ebp, 0x40000
jne 0x411f09
test ebp, 0x80000
jne 0x411ef2
test ebp, 0x100000
jne 0x411edb
test ebp, 0x200000
jne 0x411ec4
test ebp, 0x400000
jne 0x411ead
test ebp, 0x800000
jne 0x411e96
test ebp, 0x1000000
jne 0x411e55
test ebp, 0x2000000
jne 0x411e3e
test ebp, 0x4000000
jne 0x411e27
test ebp, 0x8000000
jne 0x411e10
test ebp, ebp
je 0x410c37
lea rcx, str.__lx
mov edx, ebp
call sub.msvcrt.dll_printf
jmp 0x410c37
test edx, edx
je 0x410da0
mov rax, qword [r14 + 8]
test rax, rax
je 0x410c37
mov r8, rax
mov r12, qword [fcn.00455bf0]
lea rbp, [0x0046f0dc]
neg r8
and r8, rax
mov r11, r8
not r11
and r11, rax
mov r15, r11
nop dword [rax + rax]
cmp r8, 0x10
mov ecx, 1
ja case.0x411267.0
movsxd rax, dword [rbp + r8*4]
add rax, rbp
jmp rax
cmp rax, 0x6ffffef5
jne 0x410e70
mov rcx, qword [r14 + 8]
test edx, edx
mov qword [0x00492120], rcx
je 0x410da0
mov edx, 4
call fcn.0040a010
mov ecx, 0xa
call sub.msvcrt.dll_putchar
jmp 0x410da0
cmp rax, 0x6fffffff
jne 0x410e70
test edx, edx
je 0x410da0
mov rdx, qword [r14 + 8]
lea rcx, str._I64u
call sub.msvcrt.dll_printf
mov ecx, 0xa
call sub.msvcrt.dll_putchar
mov r8, qword [0x00492370]
mov rcx, qword [0x00492090]
jmp 0x410b10
mov r8, qword [0x00492370]
mov rcx, qword [0x00492090]
mov rax, r8
shl rax, 4
mov r14, rcx
add rax, rcx
cmp rcx, rax
jae 0x410a34
lea r13, str.Unable_to_determine_the_number_of_symbols_to_load_n
lea r12, [rsp + 0x70]
lea rbp, [0x00492360]
jmp 0x411347
mov rax, r8
add r14, 0x10
shl rax, 4
add rax, rcx
cmp r14, rax
jae 0x410a26
cmp qword [r14], 6
jne 0x411330
mov rdx, qword [r14 + 8]
xor r8d, r8d
mov rcx, rbx
mov qword [0x00492170], rdx
call fcn.004107f0
mov r8, qword [rbx + 0x10]
movsxd rcx, eax
mov qword [rsp + 0x88], rcx
cmp rcx, r8
ja 0x411b10
mov r10d, dword [0x00492388]
test r10d, r10d
je 0x4113f2
mov eax, dword [0x00492384]
sub rax, rcx
mov qword [rsp + 0x90], rax
mov r9d, dword [0x00492034]
mov eax, dword [rbx + 0x80]
test r9d, r9d
je 0x411400
mov r8, rbp
mov rdx, r12
mov rcx, rbx
mov dword [rsp + 0x70], eax
mov qword [rsp + 0xa8], 0x10
call fcn.0040ca80
mov r8d, dword [0x00492360]
mov qword [0x00492358], rax
test r8d, r8d
je 0x411922
mov r8, qword [0x00492370]
mov rcx, qword [0x00492090]
jmp 0x411330
sub r8, rcx
mov qword [rsp + 0x90], r8
jmp 0x411398
mov r8, rbp
mov rdx, r12
mov rcx, rbx
mov dword [rsp + 0x70], eax
mov qword [rsp + 0xa8], 0x18
call fcn.0040ce70
jmp 0x4113c8
mov r8, qword [0x00492370]
mov rcx, qword [0x00492090]
mov rax, r8
shl rax, 4
mov rbp, rcx
add rax, rcx
cmp rcx, rax
jae 0x410a42
lea r13, str.Bad_value___d__for_SYMINENT_entry_n
xor r12d, r12d
jmp 0x41147b
cmp rax, 0x6ffffdfe
je 0x4114b0
cmp rax, 0x6ffffeff
je 0x411a10
mov rax, r8
add rbp, 0x10
shl rax, 4
add rax, rcx
cmp rbp, rax
jae 0x4115c5
mov rax, qword [rbp]
cmp rax, 0x6ffffdff
jne 0x411450
mov rdx, qword [rbp + 8]
cmp rdx, 4
je 0x411464
mov rcx, r13
call fcn.00448cd0
mov r8, qword [0x00492370]
mov rcx, qword [0x00492090]
jmp 0x411464
mov r12d, dword [rbp + 8]
jmp 0x411464
mov r8, qword [0x00492370]
mov rcx, qword [0x00492090]
mov rax, r8
shl rax, 4
mov rbp, rcx
add rax, rcx
cmp rcx, rax
jae 0x410a34
lea r12, str.Unable_to_determine_the_length_of_the_dynamic_string_table_n
cmp qword [rbp], 5
je 0x411510
mov rax, r8
add rbp, 0x10
shl rax, 4
add rax, rcx
cmp rbp, rax
jb 0x4114eb
jmp 0x410a34
mov rdx, qword [rbp + 8]
xor r8d, r8d
mov rcx, rbx
mov qword [0x00492168], rdx
call fcn.004107f0
mov ecx, dword [0x00492388]
mov r9d, eax
test ecx, ecx
jne 0x411760
mov r13d, dword [rbx + 0x10]
test r13d, r13d
jle 0x411b70
lea rax, str.dynamic_string_table
xor ecx, ecx
mov r8, rdi
mov qword [rsp + 0x20], 1
mov qword [rsp + 0x30], rax
movsxd rax, r13d
mov rdx, rsi
mov qword [rsp + 0x28], rax
call fcn.0040c610
test rax, rax
mov qword [0x00492368], rax
mov eax, 0
cmove r13d, eax
mov dword [0x00492364], r13d
jmp 0x410a34
cmp rax, 0x6ffffff9
jae 0x410b10
cmp rax, 0x6ffffefa
jb 0x410e70
cmp rax, 0x6ffffefc
jbe 0x410b10
cmp rax, 0x6ffffeff
je 0x410b10
jmp 0x410e70
mov r9d, dword [0x00492348]
test r9d, r9d
je 0x410a42
test r12d, r12d
je 0x410a42
lea rax, str.symbol_information
mov ebp, r12d
xor ecx, ecx
mov qword [rsp + 0x20], 1
mov qword [rsp + 0x30], rax
mov r8, rdi
mov rdx, rsi
mov qword [rsp + 0x28], rbp
call fcn.0040c610
test rax, rax
mov r13, rax
je 0x410d80
mov rcx, rbp
call sub.msvcrt.dll_malloc
test rax, rax
mov rsi, rax
mov qword [0x00492350], rax
je 0x410d67
shr r12d, 2
lea rax, [rax + r12*4]
mov dword [0x00492344], r12d
cmp rsi, rax
jae 0x41168d
mov rbp, qword [0x0048c400]
mov rdi, r13
nop dword [rax]
mov rcx, rdi
mov edx, 2
add rsi, 4
call qword [rbp]
lea rcx, [rdi + 2]
mov edx, 2
add rdi, 4
mov word [rsi - 4], ax
call qword [rbp]
mov edx, dword [0x00492344]
mov word [rsi - 2], ax
mov rax, qword [0x00492350]
lea rax, [rax + rdx*4]
cmp rsi, rax
jb 0x411650
mov rcx, r13
call fcn.00455b00
jmp 0x410a42
cmp rax, 0x12
jae 0x410fd8
cmp rax, 7
ja 0x4118d0
cmp rax, 3
jae 0x410f32
cmp rax, 1
ja 0x410fd8
jmp 0x410f32
cmp rax, 0x6ffffdf9
jae 0x410fe0
cmp rax, 0x6ffffdf5
jne 0x4118e0
test edx, edx
je 0x410da0
mov rax, qword [r14 + 8]
lea rcx, [rsp + 0x70]
mov qword [rsp + 0x70], rax
call qword [sym.imp.msvcrt.dll__gmtime64]
test rax, rax
je 0x411d7b
mov r8d, dword [rax]
mov ecx, dword [rax + 0x10]
mov edx, dword [rax + 0x14]
mov r9d, dword [rax + 0xc]
mov dword [rsp + 0x30], r8d
mov r8d, dword [rax + 4]
add edx, 0x76c
mov dword [rsp + 0x28], r8d
mov eax, dword [rax + 8]
lea r8d, [rcx + 1]
lea rcx, str._04u__02u__02uT_02u:_02u:_02u_n
mov dword [rsp + 0x20], eax
call sub.msvcrt.dll_printf
mov r8, qword [0x00492370]
mov rcx, qword [0x00492090]
jmp 0x410b10
mov r13d, dword [0x00492384]
sub r13d, eax
jmp 0x41153b
call r12
mov r8d, 0xa
mov edx, 1
lea rcx, str.STATIC_TLS
mov r9, rax
call sub.msvcrt.dll_fwrite
nop dword [rax]
test r15, r15
je 0x410c37
mov r8, r15
mov ecx, 1
neg r8
and r8, r15
mov rax, r8
mov qword [rsp + 0x58], r8
not rax
and r15, rax
call r12
mov ecx, 0x20
mov rdx, rax
call sub.msvcrt.dll_putc
mov r8, qword [rsp + 0x58]
jmp 0x411250
call r12
mov r8d, 8
mov edx, 1
lea rcx, str.BIND_NOW
mov r9, rax
call sub.msvcrt.dll_fwrite
jmp 0x411790
call r12
mov r8d, 7
mov edx, 1
lea rcx, str.TEXTREL
mov r9, rax
call sub.msvcrt.dll_fwrite
jmp 0x411790
call r12
mov r8d, 8
mov edx, 1
lea rcx, str.SYMBOLIC
mov r9, rax
call sub.msvcrt.dll_fwrite
jmp 0x411790
call r12
mov r8d, 6
mov edx, 1
lea rcx, str.ORIGIN
mov r9, rax
call sub.msvcrt.dll_fwrite
jmp 0x411790
cmp rax, 0x6ffffff9
jae 0x4112b4
cmp rax, 0x6ffffeff
jne 0x410e70
test edx, edx
je 0x410da0
cmp rax, 0x7ffffffe
mov rcx, qword [r14 + 8]
jne 0x41128f
mov rax, qword [0x00492368]
test rax, rax
je 0x41128f
mov edx, dword [0x00492364]
cmp rdx, rcx
jbe 0x41128f
lea rdx, [rax + rcx]
cmp byte [rdx], 0
je 0x41128f
lea rcx, str.Not_needed_object:___s__n
call sub.msvcrt.dll_printf
mov r8, qword [0x00492370]
mov rcx, qword [0x00492090]
jmp 0x410b10
cmp rax, 0xb
jbe 0x410fd8
jmp 0x410f32
jb 0x410e70
cmp rax, 0x6ffffdf7
jbe 0x410fe0
jmp 0x410e70
call r12
mov r8d, 7
mov edx, 1
lea rcx, str.unknown
mov r9, rax
call sub.msvcrt.dll_fwrite
jmp 0x411790
mov rcx, r13
call fcn.00448cd0
jmp 0x4113df
cmp rax, 0x7ffffffd
je 0x411956
jbe 0x4112a8
cmp rax, 0x7ffffffe
je 0x41186c
cmp rax, 0x7fffffff
jne 0x410e70
test edx, edx
je 0x410da0
cmp rax, 0x6ffffefc
je 0x411d9e
ja 0x411b40
cmp rax, 0x6ffffefa
je 0x411dea
cmp rax, 0x6ffffefb
jne 0x411990
lea rcx, str.Dependency_audit_library
call sub.msvcrt.dll_printf
mov rax, qword [0x00492368]
test rax, rax
je 0x4119af
mov rdx, qword [r14 + 8]
mov ecx, dword [0x00492364]
cmp rdx, rcx
jb 0x411b9f
lea rcx, [0x0046edfb]
call sub.msvcrt.dll_printf
mov rcx, qword [r14 + 8]
mov edx, 4
jmp 0x411294
cmp rax, 0x1c
jbe 0x410b10
jmp 0x411026
mov edx, 4
mov rcx, rbp
call fcn.0040a010
lea rcx, str.___
call sub.msvcrt.dll_printf
mov rax, qword [r14 + 8]
lea rcx, [rax + 0x18]
mov edx, 4
call fcn.0040a010
jmp 0x410fa0
mov rdx, qword [rbp + 8]
mov r8d, r12d
mov rcx, rbx
call fcn.004107f0
mov r8, qword [0x00492370]
mov dword [0x00492348], eax
mov rcx, qword [0x00492090]
jmp 0x411464
lea rcx, str.Flags:
call sub.msvcrt.dll_printf
mov rbp, qword [r14 + 8]
test rbp, rbp
je 0x411a80
mov r12d, ebp
and ebp, 1
jne 0x411e81
test r12b, 2
je 0x410c2e
lea rcx, str._CONFEXP
xor r12d, 2
call sub.msvcrt.dll_printf
jmp 0x410c2e
lea rcx, str._None
call sub.msvcrt.dll_puts
mov r8, qword [0x00492370]
mov rcx, qword [0x00492090]
jmp 0x410b10
cmp rax, 0x6ffffdff
jbe 0x410b10
jmp 0x410e70
mov edx, dword [0x00492370]
lea rcx, str.Out_of_memory_allocating_space_for__lu_dynamic_entries_n
call fcn.00448cd0
mov rcx, r13
call fcn.00455b00
jmp 0x4108d8
mov edx, dword [0x00492370]
lea rcx, str.Out_of_memory_allocating_space_for__lu_dynamic_entries_n
xor r12d, r12d
call fcn.00448cd0
mov rcx, r13
call fcn.00455b00
jmp 0x4108d8
lea r9, [rax - 0x7ffffffd]
cmp r9, 2
jbe 0x410b10
jmp 0x410e70
lea rcx, str.Invalid_DT_SYMTAB_entry:__lx
mov edx, eax
xor r12d, r12d
call fcn.00448cd0
jmp 0x4108d8
cmp rax, 0x1c
jbe 0x410fe0
jmp 0x410f32
cmp rax, 0x7ffffffd
je 0x411dd9
cmp rax, 0x7fffffff
jne 0x411990
lea rcx, str.Filter_library
call sub.msvcrt.dll_printf
jmp 0x411990
mov rcx, r12
call fcn.00448cd0
mov r8, qword [0x00492370]
mov rcx, qword [0x00492090]
jmp 0x4114f2
lea rcx, str.__lx
mov edx, r12d
call sub.msvcrt.dll_printf
jmp 0x410c37
lea rcx, str.:___s__n
add rdx, rax
call sub.msvcrt.dll_printf
mov r8, qword [0x00492370]
mov rcx, qword [0x00492090]
jmp 0x410b10
cmp dx, 8
jne case.0x411be3.1879048195
sub rax, 0x70000001
cmp rax, 0x2e
ja case.0x411be3.1879048195
movsxd rax, dword [r13 + rax*4]
add rax, r13
jmp rax
lea r15, [0x0046bd82]
xor r12d, r12d
test rbp, rbp
mov edx, 1
jne 0x411c04
jmp 0x412290
mov rbp, qword [r14 + 8]
mov eax, 1
mov ecx, r12d
shl eax, cl
cdqe
test rax, rbp
je 0x411c37
lea rax, str.QUICKSTART
test edx, edx
mov rdx, r15
mov r8, qword [rax + r12*8]
lea rcx, [0x0046effc]
cmove rdx, rsi
call sub.msvcrt.dll_printf
xor edx, edx
add r12, 1
cmp r12, 0xf
jne 0x411c00
jmp 0x410fa0
mov rax, qword [0x00492368]
test rax, rax
je 0x411c61
mov edx, dword [0x00492364]
cmp rdx, rbp
ja 0x41227b
lea r12, [rsp + 0x70]
mov r8, rbp
lea rdx, [0x0046bb25]
mov rcx, r12
call sub.msvcrt.dll_sprintf
lea rcx, str._corrupt:__s_
mov rdx, r12
call sub.msvcrt.dll_printf
jmp 0x410fa0
mov qword [rsp + 0x68], rbp
lea rcx, [rsp + 0x68]
call qword [sym.imp.msvcrt.dll__gmtime64]
test rax, rax
je 0x41225d
mov ecx, dword [rax]
lea rbp, [rsp + 0x70]
mov edx, dword [rax + 0x14]
lea r8, str._04u__02u__02uT_02u:_02u:_02u
mov dword [rsp + 0x40], ecx
mov ecx, dword [rax + 4]
lea r9d, [rdx + 0x76c]
mov edx, pe_nt_image_headers64
mov dword [rsp + 0x38], ecx
mov ecx, dword [rax + 8]
mov dword [rsp + 0x30], ecx
mov ecx, dword [rax + 0xc]
mov dword [rsp + 0x28], ecx
mov eax, dword [rax + 0x10]
mov rcx, rbp
add eax, 1
mov dword [rsp + 0x20], eax
call fcn.00408a00
lea rcx, str.Time_Stamp:__s
mov rdx, rbp
call sub.msvcrt.dll_printf
jmp 0x410fa0
lea rcx, str._I64d
mov rdx, rbp
call sub.msvcrt.dll_printf
jmp 0x410fa0
cmp rax, 0x60000001
jne case.0x411be3.1879048195
lea r12, str.HP_DEBUG_PRIVATE
mov r15d, 1
mov eax, 1
jmp 0x411d66
mov ecx, 1
xor rbp, r15
call qword [fcn.00455bf0]
mov rcx, qword [r12]
mov rdx, rax
call sub.msvcrt.dll_fputs
xor eax, eax
lea rdx, [0x0047b5d8]
add r12, 0x10
cmp rdx, r12
je 0x411daf
movsxd r15, dword [r12 - 8]
test r15, rbp
je 0x411d51
test eax, eax
jne 0x411d35
mov ecx, 0x20
call sub.msvcrt.dll_putchar
jmp 0x411d35
mov edx, dword [rsp + 0x70]
lea rcx, str._corrupt_time_val:__lx
call sub.msvcrt.dll_printf
mov r8, qword [0x00492370]
mov rcx, qword [0x00492090]
jmp 0x410b10
lea rcx, str.Audit_library
call sub.msvcrt.dll_printf
jmp 0x411990
test rbp, rbp
jne 0x411dbc
test eax, eax
je 0x410fa0
test eax, eax
jne 0x411dca
mov ecx, 0x20
call sub.msvcrt.dll_putchar
xor edx, edx
mov rcx, rbp
call fcn.0040a010
jmp 0x410fa0
lea rcx, str.Auxiliary_library
call sub.msvcrt.dll_printf
jmp 0x411990
lea rcx, str.Configuration_file
call sub.msvcrt.dll_printf
jmp 0x411990
lea rcx, str._GROUPPERM
xor r12d, 2
call sub.msvcrt.dll_printf
jmp 0x410c2e
lea rcx, str._PIE
xor ebp, 0x8000000
call sub.msvcrt.dll_printf
jmp 0x4111f0
lea rcx, str._STUB
xor ebp, 0x4000000
call sub.msvcrt.dll_printf
jmp 0x4111e4
lea rcx, str._SINGLETON
xor ebp, 0x2000000
call sub.msvcrt.dll_printf
jmp 0x4111d8
lea rcx, str._GLOBAUDIT
xor ebp, 0x1000000
call sub.msvcrt.dll_printf
jmp 0x4111cc
lea rcx, str._LAZYLOAD
xor r12d, 1
call sub.msvcrt.dll_printf
jmp 0x410c24
lea rcx, str._PARINIT
xor r12d, 1
call sub.msvcrt.dll_printf
jmp 0x411a61
lea rcx, str._SYMINTPOSE
xor ebp, 0x800000
call sub.msvcrt.dll_printf
jmp 0x4111c0
lea rcx, str._NORELOC
xor ebp, 0x400000
call sub.msvcrt.dll_printf
jmp 0x4111b4
lea rcx, str._EDITED
xor ebp, 0x200000
call sub.msvcrt.dll_printf
jmp 0x4111a8
lea rcx, str._NOHDR
xor ebp, 0x100000
call sub.msvcrt.dll_printf
jmp 0x41119c
lea rcx, str._NOKSYMS
xor ebp, 0x80000
call sub.msvcrt.dll_printf
jmp 0x411190
lea rcx, str._IGNMULDEF
xor ebp, 0x40000
call sub.msvcrt.dll_printf
jmp 0x411184
lea rcx, str._NODIRECT
xor ebp, 0x20000
call sub.msvcrt.dll_printf
jmp 0x411178
lea rcx, str._DISPRELPND
xor ebp, 0x10000
call sub.msvcrt.dll_printf
jmp 0x41116c
lea rcx, str._DISPRELDNE
xor ebp, 0x8000
call sub.msvcrt.dll_printf
jmp 0x411160
lea rcx, str._ENDFILTEE
xor ebp, 0x4000
call sub.msvcrt.dll_printf
jmp 0x411154
lea rcx, str._CONFALT
xor ebp, 0x2000
call sub.msvcrt.dll_printf
jmp 0x411148
lea rcx, str._NODUMP
xor ebp, 0x1000
call sub.msvcrt.dll_printf
jmp 0x41113c
lea rcx, str._NODEFLIB
xor ebp, 0x800
call sub.msvcrt.dll_printf
jmp 0x411130
lea rcx, str._INTERPOSE
xor ebp, 0x400
call sub.msvcrt.dll_printf
jmp 0x411124
lea rcx, str._TRANS
xor ebp, 0x200
call sub.msvcrt.dll_printf
jmp 0x411118
lea rcx, str._DIRECT
xor ebp, 0x100
call sub.msvcrt.dll_printf
jmp 0x41110c
lea rcx, str._ORIGIN
xor bpl, 0x80
call sub.msvcrt.dll_printf
jmp 0x411100
lea rcx, str._NOOPEN
xor ebp, 0x40
call sub.msvcrt.dll_printf
jmp 0x4110f6
lea rcx, str._INITFIRST
xor ebp, 0x20
call sub.msvcrt.dll_printf
jmp 0x4110ec
lea rcx, str._LOADFLTR
xor ebp, 0x10
call sub.msvcrt.dll_printf
jmp 0x4110e2
lea rcx, str._NODELETE
xor ebp, 8
call sub.msvcrt.dll_printf
jmp 0x4110d8
lea rcx, str._GROUP
xor ebp, 4
call sub.msvcrt.dll_printf
jmp 0x4110ce
lea rcx, str._GLOBAL
xor ebp, 2
call sub.msvcrt.dll_printf
jmp 0x4110c4
lea rcx, str._NOW
xor ebp, 1
call sub.msvcrt.dll_printf
jmp 0x4110ba
cmp rax, 1
jne 0x411a00
lea rcx, str.Shared_library:___s_
call sub.msvcrt.dll_printf
lea rdx, [0x00492240]
mov rcx, rbp
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x410fa0
lea rcx, str._program_interpreter
call sub.msvcrt.dll_printf
jmp 0x410fa0
mov edx, 4
mov rcx, rbp
call fcn.0040a010
mov rax, qword [r14 + 8]
test al, 1
je 0x41210a
lea rcx, str._CALL_DEBUG
call sub.msvcrt.dll_printf
mov rax, qword [r14 + 8]
test al, 2
je 0x41211e
lea rcx, str._NOP0BUFS
call sub.msvcrt.dll_printf
mov rax, qword [r14 + 8]
test al, 4
je 0x412132
lea rcx, str._P0IMAGE
call sub.msvcrt.dll_printf
mov rax, qword [r14 + 8]
test al, 8
je 0x412146
lea rcx, str._MKTHREADS
call sub.msvcrt.dll_printf
mov rax, qword [r14 + 8]
test al, 0x10
je 0x41215a
lea rcx, str._UPCALLS
call sub.msvcrt.dll_printf
mov rax, qword [r14 + 8]
test al, 0x20
je 0x41216e
lea rcx, str._IMGSTA
call sub.msvcrt.dll_printf
mov rax, qword [r14 + 8]
test al, 0x40
je 0x412182
lea rcx, str._INITIALIZE
call sub.msvcrt.dll_printf
mov rax, qword [r14 + 8]
test al, 0x80
je 0x412196
lea rcx, str._MAIN
call sub.msvcrt.dll_printf
mov rax, qword [r14 + 8]
test ah, 2
je 0x4121ab
lea rcx, str._EXE_INIT
call sub.msvcrt.dll_printf
mov rax, qword [r14 + 8]
test ah, 4
je 0x4121c0
lea rcx, str._TBK_IN_IMG
call sub.msvcrt.dll_printf
mov rax, qword [r14 + 8]
test ah, 8
je 0x4121d5
lea rcx, str._DBG_IN_IMG
call sub.msvcrt.dll_printf
mov rax, qword [r14 + 8]
test ah, 0x10
je 0x4121ea
lea rcx, str._TBK_IN_DSF
call sub.msvcrt.dll_printf
mov rax, qword [r14 + 8]
test ah, 0x20
je 0x4121ff
lea rcx, str._DBG_IN_DSF
call sub.msvcrt.dll_printf
mov rax, qword [r14 + 8]
test ah, 0x40
je 0x412214
lea rcx, str._SIGNATURES
call sub.msvcrt.dll_printf
mov rax, qword [r14 + 8]
test ah, 0x80
je 0x410fa0
lea rcx, str._REL_SEG_OFF
call sub.msvcrt.dll_printf
jmp 0x410fa0
mov rcx, rbp
call fcn.0040a7e0
jmp 0x410fa0
lea rcx, str.Library_rpath:___s_
call sub.msvcrt.dll_printf
jmp 0x410fa0
lea rcx, str.Library_soname:___s_
call sub.msvcrt.dll_printf
jmp 0x410fa0
lea rbp, [rsp + 0x70]
mov edx, pe_nt_image_headers64
lea r8, [0x0046b043]
mov rcx, rbp
call fcn.00408a00
jmp 0x411ced
lea rdx, [rax + rbp]
lea rcx, str.Interface_Version:__s
call sub.msvcrt.dll_printf
jmp 0x410fa0
lea rcx, str.NONE
call sub.msvcrt.dll_printf
jmp 0x410fa0