Function at 0x435970
Capabilities:
Write file on windows

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x148
test r8, r8
mov r12, rcx
mov r14, rdx
mov qword [rsp + 0xb0], 0
mov qword [rsp + 0xb8], 0
mov rbp, r8
je 0x435a07
mov rax, qword [r8 + 0xe0]
test rax, rax
je 0x435a07
mov rax, qword [rax + 0x58]
test rax, rax
je 0x435a07
movabs rdx, 0xaaaaaaaaaaaaaaab
mov r15, qword [rax]
mov rax, r15
mul rdx
shr rdx, 3
lea rax, [rdx + rdx*2]
shl rax, 2
cmp r15, rax
jne 0x435ad0
mov rbx, qword [rbp + 0x38]
test rbx, rbx
jne 0x435a20
test r15, r15
je 0x435a07
mov r8, qword [rbp]
lea rdx, str.Warning:__s_section_size_is_zero_n
mov rcx, r14
call sub.msvcrt.dll_fprintf
mov eax, 1
add rsp, 0x148
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
test r15, r15
mov r8, qword [rbp]
jne 0x435af2
mov rax, qword [r12 + 8]
mov ecx, 0xa
mov dword [rsp + 0x4c], 0
lea rdi, str.pe_x86_64
mov rsi, qword [rax]
repe cmpsb byte [rsi], byte [rdi]
seta dl
setb al
cmp dl, al
je 0x436340
lea rdx, str._nThe_Function_Table__interpreted__s_section_contents__n
mov rcx, r14
call sub.msvcrt.dll_fprintf
mov r9, r14
mov r8d, 0x2d
mov edx, 1
lea rcx, str.vma:_t_t_tBeginAddress_t_EndAddress_t__UnwindData_n
call sub.msvcrt.dll_fwrite
lea r8, [rsp + 0xb0]
mov rdx, rbp
mov rcx, r12
call fcn.00413e50
mov qword [rsp + 0x30], 0
test eax, eax
jne 0x435b40
mov rcx, qword [rsp + 0xb0]
call sub.msvcrt.dll_free
mov rcx, qword [rsp + 0x30]
call sub.msvcrt.dll_free
mov rcx, qword [rsp + 0xb8]
call sub.msvcrt.dll_free
jmp 0x435a07
mov dword [rsp + 0x20], 0xc
mov r8, qword [r8]
mov r9d, r15d
mov rcx, r14
lea rdx, str.Warning:__s_section_size___ld__is_not_a_multiple_of__d_n
call sub.msvcrt.dll_fprintf
jmp 0x4359e6
cmp r15, rbx
mov dword [rsp + 0x4c], 0
jbe 0x435a59
mov dword [rsp + 0x20], r15d
lea rdx, str.Warning:__s_section_size___ld__is_smaller_than_virtual_size___ld__n
mov r9d, ebx
mov rcx, r14
call sub.msvcrt.dll_fprintf
mov rax, rbx
mov r8, qword [rbp]
movabs rdx, 0xaaaaaaaaaaaaaaab
mul rdx
shr rdx, 3
mov r15, rdx
jmp 0x435a59
movabs rdx, 0xaaaaaaaaaaaaaaab
mov rax, r15
mul rdx
lea rdi, str.pei_x86_64
shr rdx, 3
lea rcx, [rdx*8 + 8]
call fcn.004be5f0
mov ecx, 0xb
mov qword [rsp + 0x30], rax
mov rax, qword [r12 + 8]
mov rsi, qword [rax]
repe cmpsb byte [rsi], byte [rdi]
seta dl
setb al
xor r13d, r13d
cmp dl, al
je 0x436370
test r15, r15
je 0x4368b0
cmp r15, 0xb
jbe 0x4368b0
lea rax, [r12 + 8]
xor ebx, ebx
mov dword [rsp + 0x50], 0
xor edi, edi
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0xe0]
mov rsi, 0xffffffffffffffff
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x190], r12
jmp 0x435c11
test al, 1
jne 0x435d6d
movsxd rdx, dword [rsp + 0x50]
mov rcx, qword [rsp + 0x30]
mov qword [rcx + rdx*8], rax
lea eax, [rdx + 1]
mov dword [rsp + 0x50], eax
lea rax, [rbx + 0xc]
cmp r15, rax
jbe 0x435df0
lea rdx, [rbx + 0x18]
mov rsi, r12
mov rbx, rax
cmp r15, rdx
jb 0x435df0
mov r8, qword [rsp + 0xb0]
mov rdx, qword [rsp + 0x40]
mov rcx, qword [rsp + 0x38]
add r8, rbx
call fcn.00435930
cmp qword [rsp + 0xe0], 0
jne 0x435c50
cmp qword [rsp + 0xe8], 0
jne 0x435c50
cmp qword [rsp + 0xf0], 0
je 0x435df0
mov rdx, r14
mov ecx, 0x20
call sub.msvcrt.dll_fputc
mov r8, qword [rbp + 0x28]
lea rdx, str._016I64x
mov rcx, r14
add r8, rbx
call sub.msvcrt.dll_fprintf
mov r9, r14
mov r8d, 2
mov edx, 1
lea rcx, [0x004d5c62]
call sub.msvcrt.dll_fwrite
mov r8, qword [rsp + 0xe0]
lea rdx, str._016I64x
mov rcx, r14
add r8, r13
call sub.msvcrt.dll_fprintf
mov rdx, r14
mov ecx, 0x20
call sub.msvcrt.dll_fputc
mov r8, qword [rsp + 0xe8]
lea rdx, str._016I64x
mov rcx, r14
add r8, r13
call sub.msvcrt.dll_fprintf
mov rdx, r14
mov ecx, 0x20
call sub.msvcrt.dll_fputc
mov r8, qword [rsp + 0xf0]
lea rdx, str._016I64x
mov rcx, r14
add r8, r13
call sub.msvcrt.dll_fprintf
mov rdx, r14
mov ecx, 0xa
call sub.msvcrt.dll_fputc
test rbx, rbx
mov r12, qword [rsp + 0xe0]
je 0x435d42
cmp r12, rsi
ja 0x435d42
lea rax, str.smaller
mov rcx, r14
mov edi, 1
lea r8, str.same
cmovb r8, rax
lea rdx, str.__has__s_begin_address_as_predecessor_n
call sub.msvcrt.dll_fprintf
mov r12, qword [rsp + 0xe0]
test r12d, 0x80000000
jne 0x435dc5
test byte [rsp + 0xeb], 0x80
jne 0x435da4
mov rax, qword [rsp + 0xf0]
test eax, 0x80000000
jne 0x435d80
test rax, rax
jne 0x435bd4
mov ecx, dword [rsp + 0x4c]
test ecx, ecx
je 0x435bf1
jmp 0x435bdc
mov r9, r14
mov r8d, 0x1e
mov edx, 1
lea rcx, str.__has_negative_unwind_address_n
mov edi, 1
call sub.msvcrt.dll_fwrite
jmp 0x435bf1
mov r9, r14
mov r8d, 0x1b
mov edx, 1
lea rcx, str.__has_negative_end_address_n
mov edi, 1
call sub.msvcrt.dll_fwrite
jmp 0x435d55
mov r9, r14
mov r8d, 0x1d
mov edx, 1
lea rcx, str.__has_negative_begin_address_n
mov edi, 1
call sub.msvcrt.dll_fwrite
jmp 0x435d4b
test edi, edi
mov r12, qword [rsp + 0x190]
jne 0x435aa6
movsxd rax, dword [rsp + 0x50]
mov rsi, qword [rsp + 0x30]
lea edi, [rax + 1]
cmp edi, 1
mov dword [rsp + 0x70], edi
mov qword [rsi + rax*8], 0xffffffffffffffff
je 0x436540
mov rdi, qword [rsp + 0x30]
lea r9, [0x004330d0]
mov r8d, 8
movsxd rdx, dword [rsp + 0x70]
mov rcx, rdi
call sub.msvcrt.dll_qsort
mov rbx, qword [rdi]
test rbx, rbx
setne byte [rsp + 0x40]
mov rax, qword [rbp]
lea rdi, [0x004d5cef]
mov ecx, 7
mov rsi, rax
repe cmpsb byte [rsi], byte [rdi]
je 0x436442
mov rcx, rax
call sub.msvcrt.dll_strlen
lea rsi, [rax + 1]
mov rdi, rax
mov rcx, rsi
call fcn.004be5f0
mov rdx, qword [rbp]
mov r8, rsi
mov rcx, rax
call sub.msvcrt.dll_memcpy
cmp rdi, 1
mov rsi, rax
jbe 0x435e9a
mov byte [rax + 1], 0x78
mov r8, rsi
mov rdx, rbx
mov rcx, r12
call fcn.00433340
mov rcx, rsi
mov rdi, rax
mov qword [rsp + 0x38], rax
call sub.msvcrt.dll_free
test rdi, rdi
je 0x436442
mov rdx, qword [rsp + 0x38]
lea r8, [rsp + 0xb8]
mov rcx, r12
call fcn.00413e50
test eax, eax
je 0x435aa6
test r15, r15
je 0x435aa6
cmp r15, 0xb
jbe 0x435aa6
lea rax, [r12 + 8]
xor ebx, ebx
mov rsi, 0xffffffffffffffff
mov qword [rsp + 0x190], r12
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0xc0]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x1a0], rbp
mov r8, qword [rsp + 0xb0]
mov rdx, qword [rsp + 0x40]
mov rcx, qword [rsp + 0x50]
add r8, rbx
call fcn.00435930
cmp qword [rsp + 0xc0], 0
jne 0x435f60
cmp qword [rsp + 0xc8], 0
jne 0x435f60
cmp qword [rsp + 0xd0], 0
je 0x435aa6
test rbx, rbx
je 0x436d20
mov rdx, r14
mov ecx, 0x20
call sub.msvcrt.dll_fputc
mov r8, qword [rsp + 0xd0]
lea rdx, str._016I64x
mov rcx, r14
add r8, r13
call sub.msvcrt.dll_fprintf
mov rbp, qword [rsp + 0xd0]
cmp rbp, rsi
je 0x4364f0
lea rdx, str.__rva:__08x_:
mov r8d, ebp
mov rcx, r14
call sub.msvcrt.dll_fprintf
mov r8, qword [rsp + 0xc0]
lea rdx, str._016I64x
mov rcx, r14
add r8, r13
call sub.msvcrt.dll_fprintf
mov r9, r14
mov r8d, 3
mov edx, 1
lea rcx, [0x004d5d3c]
call sub.msvcrt.dll_fwrite
mov r8, qword [rsp + 0xc8]
lea rdx, str._016I64x
mov rcx, r14
add r8, r13
call sub.msvcrt.dll_fprintf
mov rdx, r14
mov ecx, 0xa
call sub.msvcrt.dll_fputc
mov rax, qword [rsp + 0xd0]
test rax, rax
jne 0x436384
mov edx, dword [rsp + 0x4c]
test edx, edx
je 0x43641d
mov rax, qword [rsp + 0x40]
mov r9d, 8
mov rdx, qword [rsp + 0x30]
movsxd r8, dword [rsp + 0x70]
lea rcx, [rax + 0x10]
lea rax, [0x004330d0]
mov qword [rsp + 0x20], rax
call sub.msvcrt.dll_bsearch
mov rcx, qword [rsp + 0xd0]
mov rdx, qword [rax]
cmp rcx, rdx
jb 0x436071
add rax, 8
mov rdx, qword [rax]
cmp rdx, rcx
jbe 0x436065
mov rdi, qword [rsp + 0x38]
cmp rdx, 0xffffffffffffffff
mov edx, 0
cmove rax, rdx
mov rsi, qword [rdi + 0x40]
test rsi, rsi
jne 0x436090
mov rsi, qword [rdi + 0x38]
mov rdi, qword [rsp + 0x190]
mov r8, qword [rdi + 0xf0]
mov rdi, qword [rsp + 0x38]
mov rdx, qword [rdi + 0x28]
sub rdx, qword [r8 + 0xe0]
sub rcx, rdx
cmp rcx, rsi
mov qword [rsp + 0x58], rcx
jae 0x43694b
mov rdi, qword [rsp + 0xb8]
test rax, rax
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], rdi
je 0x4360eb
mov rax, qword [rax]
sub rax, rdx
cmp rsi, rax
mov qword [rsp + 0x60], rax
jb 0x43696a
lea rdx, [rsp + 0xea]
xor eax, eax
mov ecx, 0xa
mov rsi, qword [rsp + 0x68]
mov rdi, rdx
add rsi, qword [rsp + 0x58]
rep stosq qword [rdi], rax
xor eax, eax
lea r10, [rsi + 4]
mov qword [rsp + 0x78], r10
mov dword [rdi], 0
mov word [rdi + 4], ax
movzx r12d, byte [rsi]
mov ecx, r12d
shr r12b, 3
and ecx, 7
mov byte [rsp + 0xe9], r12b
mov byte [rsp + 0xe8], cl
movzx eax, byte [rsi + 1]
lea r9d, [rcx - 1]
mov byte [rsp + 0x74], cl
mov qword [rsp + 0xf0], rax
movzx edi, byte [rsi + 2]
mov byte [rsp + 0xae], al
movzx eax, byte [rsp + 0x100]
mov qword [rsp + 0xf8], rdi
movzx edx, byte [rsi + 3]
and eax, 0xfffffff0
mov byte [rsp + 0xa8], dil
mov qword [rsp + 0x118], r10
mov r11d, edx
shr dl, 4
and r11d, 0xf
mov byte [rsp + 0x80], dl
or eax, r11d
mov byte [rsp + 0x88], r11b
mov byte [rsp + 0x100], al
movzx eax, dl
lea rdx, [rdi + rdi + 2]
mov qword [rsp + 0x108], rax
and edx, 0x3fc
cmp r12b, 1
lea rax, [rdx + 4]
mov qword [rsp + 0x110], rdx
mov qword [rsp + 0xe0], rax
lea r8, [rsi + rax]
jb 0x4365a9
cmp r12b, 3
jbe 0x436562
cmp r12b, 4
mov qword [rsp + 0x90], rdx
jne 0x4365a9
mov rax, qword [rsp + 0x190]
mov byte [rsp + 0xa0], r9b
mov rcx, r8
mov qword [rsp + 0x98], r8
mov rax, qword [rax + 8]
call qword [rax + 0x38]
mov r8, qword [rsp + 0x98]
mov qword [rsp + 0x128], rax
mov rax, qword [rsp + 0x190]
lea rcx, [r8 + 4]
mov rax, qword [rax + 8]
call qword [rax + 0x38]
mov r8, qword [rsp + 0x98]
mov qword [rsp + 0x130], rax
mov rax, qword [rsp + 0x190]
lea rcx, [r8 + 8]
mov r10, qword [rax + 8]
call qword [r10 + 0x38]
mov rdx, qword [rsp + 0x90]
movzx r9d, byte [rsp + 0xa0]
mov qword [rsp + 0x138], rax
add rdx, 0x10
cmp r9b, 1
mov qword [rsp + 0xe0], rdx
jbe 0x436d3c
mov r8d, dword [rsp + 0x74]
lea rdx, str._tVersion__u__unknown_._n
mov rcx, r14
and r8d, 7
call sub.msvcrt.dll_fprintf
mov rax, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x58]
mov rdi, rax
sub rdi, rcx
mov rdx, rdi
xor edi, edi
cmp rcx, rax
jae 0x43641d
mov qword [rsp + 0x68], rbx
mov rbx, rdi
mov rdi, rsi
mov rsi, rdx
jmp 0x43630b
movzx r8d, byte [rdi + rbx]
lea rdx, str.__02x
mov rcx, r14
call sub.msvcrt.dll_fprintf
cmp r12d, 0xf
je 0x436550
add rbx, 1
cmp rsi, rbx
je 0x436924
mov r12d, ebx
and r12d, 0xf
jne 0x4362e0
lea rdx, str._t___03x:
mov r8d, ebx
mov rcx, r14
call sub.msvcrt.dll_fprintf
movzx r8d, byte [rdi + rbx]
lea rdx, str.__02x
mov rcx, r14
call sub.msvcrt.dll_fprintf
jmp 0x4362fe
movabs rdx, 0xaaaaaaaaaaaaaaab
mov rax, rbx
mov dword [rsp + 0x4c], 1
mul rdx
shr rdx, 3
lea rdx, [rdx + rdx*2]
lea r15, [rdx*4]
jmp 0x435a59
mov rax, qword [r12 + 0xf0]
mov r13, qword [rax + 0xe0]
jmp 0x435b8d
test al, 1
je 0x43602b
and rax, 0xfffffffffffffffe
mov r8d, 0x1a
mov r9, r14
lea rcx, str._t_shares_information_with
mov rsi, rax
mov edx, 1
mov rax, qword [rsp + 0x1a0]
mov rdi, qword [rax + 0x28]
call sub.msvcrt.dll_fwrite
lea r8, [r13 + rsi]
cmp rdi, r8
ja 0x4363e9
mov rax, qword [rsp + 0x1a0]
lea rdx, [r8 + 0xc]
mov rax, qword [rax + 0xe0]
mov rax, qword [rax + 0x58]
mov rsi, qword [rax]
add rsi, rdi
cmp rdx, rsi
jbe 0x4368d1
mov r9, r14
mov r8d, 0x15
mov edx, 1
lea rcx, str.unknown_pdata_element
call sub.msvcrt.dll_fwrite
mov r9, r14
mov r8d, 2
mov edx, 1
lea rcx, [0x004d5d85]
call sub.msvcrt.dll_fwrite
lea rax, [rbx + 0xc]
cmp r15, rax
jbe 0x435aa6
lea rdx, [rbx + 0x18]
mov rsi, rbp
mov rbx, rax
cmp r15, rdx
jae 0x435f21
jmp 0x435aa6
lea r8, [0x004d5cf6]
mov rdx, rbx
mov rcx, r12
call fcn.00433340
test rax, rax
mov qword [rsp + 0x38], rax
jne 0x4364dc
cmp byte [rsp + 0x40], 0
je 0x4364dc
lea r8, [0x004d5cfd]
mov rdx, rbx
mov rcx, r12
call fcn.00433340
test rax, rax
mov qword [rsp + 0x38], rax
jne 0x435ec1
lea r8, [0x004d5aa0]
mov rdx, rbx
mov rcx, r12
call fcn.00433340
test rax, rax
mov qword [rsp + 0x38], rax
jne 0x435ec1
lea r8, [0x004d5cef]
mov rdx, rbx
mov rcx, r12
call fcn.00433340
test rax, rax
mov qword [rsp + 0x38], rax
jne 0x435ec1
lea r8, [0x004d5a9a]
mov rdx, rbx
mov rcx, r12
call fcn.00433340
mov qword [rsp + 0x38], rax
cmp qword [rsp + 0x38], 0
je 0x435aa6
jmp 0x435ec1
mov r9, r14
mov r8d, 0x1b
mov edx, 1
lea rcx, str._also_used_for_function_at
call sub.msvcrt.dll_fwrite
mov r8, qword [rsp + 0xc0]
mov rcx, r14
lea rdx, str._016I64x
add r8, r13
call sub.msvcrt.dll_fprintf
mov rdx, r14
mov ecx, 0xa
call sub.msvcrt.dll_fputc
jmp 0x43641d
mov rbx, qword [rsi]
test rbx, rbx
setne byte [rsp + 0x40]
jmp 0x435e4c
mov rdx, r14
mov ecx, 0xa
call sub.msvcrt.dll_fputc
jmp 0x4362fe
mov rax, qword [rsp + 0x190]
mov byte [rsp + 0x98], r9b
mov rcx, r8
mov qword [rsp + 0x90], rdx
mov rax, qword [rax + 8]
call qword [rax + 0x38]
mov rdx, qword [rsp + 0x90]
movzx r9d, byte [rsp + 0x98]
mov qword [rsp + 0x120], rax
add rdx, 8
mov qword [rsp + 0xe0], rdx
cmp r9b, 1
ja 0x436291
mov r8d, dword [rsp + 0x74]
lea rdx, str._tVersion:__d__Flags:
mov rcx, r14
and r8d, 7
call sub.msvcrt.dll_fprintf
cmp r12b, 4
ja case.default.0x4365e7
lea rdx, [0x004d60a8]
movzx eax, r12b
movsxd rax, dword [rdx + rax*4]
add rax, rdx
jmp rax
mov r9, r14
mov r8d, 0x25
mov edx, 1
lea rcx, str.UNW_FLAG_EHANDLER__UNW_FLAG_UHANDLER
call sub.msvcrt.dll_fwrite
mov rdx, r14
mov ecx, 0xa
call sub.msvcrt.dll_fputc
movzx eax, byte [rsp + 0xa8]
lea rdx, str._tNbr_codes:__u_
mov rcx, r14
mov r8d, eax
mov dword [rsp + 0x90], eax
call sub.msvcrt.dll_fprintf
movzx eax, byte [rsp + 0x80]
lea rdx, str.Prologue_size:_0x_02x__Frame_offset:_0x_x_
mov rcx, r14
movzx r8d, byte [rsp + 0xae]
mov r9d, eax
mov dword [rsp + 0xa8], eax
call sub.msvcrt.dll_fprintf
movzx eax, byte [rsp + 0x100]
lea r8, [0x004d5b33]
and eax, 0xf
mov byte [rsp + 0xae], al
je 0x43668c
mov rdx, qword [rsp + 0x88]
lea rax, [0x004d73c0]
and edx, 0xf
mov r8, qword [rax + rdx*8]
lea rdx, str.Frame_reg:__s_n
mov rcx, r14
call sub.msvcrt.dll_fprintf
mov rcx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x78]
mov rdx, qword [rsp + 0x68]
add rdx, qword [rcx + 0x38]
lea rax, [rax + rdi*2]
cmp rax, rdx
jbe 0x43698e
mov r8d, dword [rsp + 0x90]
lea rdx, str.Too_many_unwind_codes___ld__n
mov rcx, r14
call sub.msvcrt.dll_fprintf
cmp r12b, 1
jb 0x43679d
cmp r12b, 3
jbe 0x436ce3
cmp r12b, 4
jne 0x43679d
mov r9, r14
mov r8d, 0xf
mov edx, 1
lea rcx, str._tChain:_start:
call sub.msvcrt.dll_fwrite
mov r8, qword [rsp + 0x128]
lea rdx, str._016I64x
mov rcx, r14
call sub.msvcrt.dll_fprintf
mov r9, r14
mov r8d, 7
mov edx, 1
lea rcx, str.__end:
call sub.msvcrt.dll_fwrite
mov r8, qword [rsp + 0x130]
lea rdx, str._016I64x
mov rcx, r14
call sub.msvcrt.dll_fprintf
mov r8d, 0x10
mov r9, r14
mov edx, 1
lea rcx, str._n_t_unwind_data:
call sub.msvcrt.dll_fwrite
mov r8, qword [rsp + 0x138]
lea rdx, str._016I64x
mov rcx, r14
call sub.msvcrt.dll_fprintf
mov r9, r14
mov r8d, 2
mov edx, 1
lea rcx, [0x004d5d85]
call sub.msvcrt.dll_fwrite
mov rdi, qword [rsp + 0x58]
add rdi, qword [rsp + 0xe0]
cmp qword [rsp + 0x60], rdi
jbe 0x43641d
mov r9, r14
mov r8d, 0xc
mov edx, 1
lea rcx, str._tUser_data:_n
xor r12d, r12d
call sub.msvcrt.dll_fwrite
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x58], rbp
mov rsi, qword [rsp + 0x60]
mov qword [rsp + 0x68], rdi
add rax, rdi
sub rsi, rdi
mov rdi, r12
mov r12, rbx
mov rbx, rax
jmp 0x436821
movzx r8d, byte [rbx + rdi]
lea rdx, str.__02x
mov rcx, r14
call sub.msvcrt.dll_fprintf
cmp ebp, 0xf
je 0x436cb1
add rdi, 1
cmp rsi, rdi
je 0x436cc3
mov ebp, edi
and ebp, 0xf
jne 0x4367f7
lea rdx, str._t___03x:
mov r8d, edi
mov rcx, r14
call sub.msvcrt.dll_fprintf
movzx r8d, byte [rbx + rdi]
lea rdx, str.__02x
mov rcx, r14
call sub.msvcrt.dll_fprintf
jmp 0x436814
mov r9, r14
mov r8d, 0x11
mov edx, 1
lea rcx, str.UNW_FLAG_EHANDLER
call sub.msvcrt.dll_fwrite
jmp 0x436603
mov r9, r14
mov r8d, 4
mov edx, 1
lea rcx, [0x004d5b33]
call sub.msvcrt.dll_fwrite
jmp 0x436603
mov r9, r14
mov r8d, 0x11
mov edx, 1
lea rcx, str.UNW_FLAG_UHANDLER
call sub.msvcrt.dll_fwrite
jmp 0x436603
mov rax, qword [rsp + 0x30]
mov rbx, 0xffffffffffffffff
mov byte [rsp + 0x40], 1
mov dword [rsp + 0x70], 1
mov qword [rax], rbx
jmp 0x435e4c
mov rcx, qword [rsp + 0x50]
lea rdx, [rsp + 0xe0]
sub r8, rdi
add r8, qword [rsp + 0xb0]
call fcn.00435930
mov r9, r14
mov r8d, 0x13
mov edx, 1
lea rcx, str.pdata_element_at_0x
call sub.msvcrt.dll_fwrite
mov r8, qword [rsp + 0xf0]
lea rdx, str._016I64x
mov rcx, r14
call sub.msvcrt.dll_fprintf
jmp 0x436403
mov eax, dword [rsp + 0x60]
sub eax, dword [rsp + 0x58]
mov rbx, qword [rsp + 0x68]
test al, 0xf
je 0x43641d
mov rdx, r14
mov ecx, 0xa
call sub.msvcrt.dll_fputc
jmp 0x43641d
mov r9, r14
mov r8d, 0x1f
mov edx, 1
lea rcx, str.warning:_xdata_section_corrupt_n
call sub.msvcrt.dll_fwrite
jmp 0x43641d
mov r9, r14
mov r8d, 0x1e
mov edx, 1
lea rcx, str.warning:_xdata_section_corrupt
call sub.msvcrt.dll_fwrite
mov qword [rsp + 0x60], rsi
jmp 0x4360eb
cmp qword [rsp + 0x78], 0
je 0x4366d2
test rdi, rdi
je 0x4366d2
mov dword [rsp + 0x80], 0
cmp byte [rsp + 0x74], 2
je 0x436db4
mov eax, dword [rsp + 0xa8]
mov qword [rsp + 0x98], r15
mov ecx, 1
mov r15, qword [rsp + 0x190]
mov qword [rsp + 0x90], rbp
mov esi, dword [rsp + 0x80]
mov qword [rsp + 0xa0], r13
mov qword [rsp + 0x80], rbx
mov ebx, ecx
shl eax, 4
mov byte [rsp + 0xaf], r12b
mov dword [rsp + 0xa8], eax
mov rax, qword [rsp + 0x88]
and eax, 0xf
mov qword [rsp + 0x88], rax
mov rax, qword [rsp + 0x78]
lea r10d, [rsi + rsi]
mov rcx, r14
lea rdx, str._t__pc0x_02x:
lea r12, [rax + r10]
movzx r8d, byte [r12]
movzx r13d, byte [r12 + 1]
call sub.msvcrt.dll_fprintf
movzx r8d, byte [r12 + 1]
shr r13b, 4
movzx ebp, r13b
and r8d, 0xf
cmp r8b, 0xa
ja case.default.0x436a70
lea rcx, [0x004d60bc]
movzx r8d, r8b
movsxd rax, dword [rcx + r8*4]
add rax, rcx
jmp rax
mov rax, qword [r15 + 8]
lea rcx, [r12 + 2]
add esi, 2
call qword [rax + 0x38]
mov r9d, eax
mov r8d, ebp
mov rcx, r14
lea rdx, str.save_xmm_u_at_rsp__0x_x
shl r9d, 4
call sub.msvcrt.dll_fprintf
mov eax, ebx
xor eax, 1
test eax, eax
je 0x436abd
mov r9, r14
mov r8d, 0xe
mov edx, 1
lea rcx, str.__Unexpected__
call sub.msvcrt.dll_fwrite
mov rdx, r14
mov ecx, 0xa
call sub.msvcrt.dll_fputc
lea eax, [rsi + 1]
cmp rdi, rax
mov rsi, rax
ja 0x436a1b
mov rbp, qword [rsp + 0x90]
mov r15, qword [rsp + 0x98]
mov r13, qword [rsp + 0xa0]
movzx r12d, byte [rsp + 0xaf]
mov rbx, qword [rsp + 0x80]
jmp 0x4366d2
mov rax, qword [r15 + 8]
lea rcx, [r12 + 2]
add esi, 1
call qword [rax + 0x50]
jmp 0x436a81
mov rax, qword [r15 + 8]
lea rcx, [r12 + 2]
add esi, 2
call qword [rax + 0x38]
lea r9d, [rax*8]
mov r8d, ebp
mov rcx, r14
lea rdx, str.save_mm_u_at_rsp__0x_x
call sub.msvcrt.dll_fprintf
mov eax, ebx
xor eax, 1
jmp 0x436a9f
cmp byte [rsp + 0x74], 1
jne 0x436ee4
mov rax, qword [r15 + 8]
lea rcx, [r12 + 2]
add esi, 1
call qword [rax + 0x50]
jmp 0x436b2a
mov rax, qword [r15 + 8]
lea rcx, [r12 + 2]
add esi, 2
call qword [rax + 0x38]
mov r9d, eax
lea rax, [0x004d73c0]
mov rcx, r14
mov r8, qword [rax + rbp*8]
lea rdx, str.save__s_at_rsp__0x_x
call sub.msvcrt.dll_fprintf
mov eax, ebx
xor eax, 1
jmp 0x436a9f
mov rax, qword [r15 + 8]
lea rcx, [r12 + 2]
test r13b, r13b
jne 0x436da6
call qword [rax + 0x50]
add esi, 1
lea r8d, [rax*8]
lea rdx, str.alloc_large_area:_rsp__rsp___0x_x
mov rcx, r14
call sub.msvcrt.dll_fprintf
jmp 0x436abd
lea rax, [0x004d73c0]
mov rcx, r14
mov r8, qword [rax + rbp*8]
lea rdx, str.push__s
call sub.msvcrt.dll_fprintf
jmp 0x436abd
mov r9, r14
mov r8d, 0x2d
mov edx, 1
lea rcx, str.interrupt_entry__SS__old_RSP__EFLAGS__CS__RIP
call sub.msvcrt.dll_fwrite
test r13b, r13b
je 0x436eaa
sub r13b, 1
je 0x436e8b
lea rdx, str.__unknown__u__
mov r8d, ebp
mov rcx, r14
call sub.msvcrt.dll_fprintf
jmp 0x436abd
mov rbx, qword [rsp + 0x88]
lea rax, [0x004d73c0]
mov dword [rsp + 0x20], ebp
mov rcx, r14
mov r9d, dword [rsp + 0xa8]
lea rdx, str.FPReg:__s__rsp__0x_x__info__0x_x_
mov r8, qword [rax + rbx*8]
call sub.msvcrt.dll_fprintf
xor eax, eax
cmp byte [rsp + 0xae], 0
sete al
xor ebx, ebx
jmp 0x436a9f
lea r8d, [rbp*8 + 8]
mov rcx, r14
lea rdx, str.alloc_small_area:_rsp__rsp___0x_x
call sub.msvcrt.dll_fprintf
jmp 0x436abd
mov rax, qword [r15 + 8]
lea rcx, [r12 + 2]
add esi, 1
call qword [rax + 0x50]
lea r9d, [rax*8]
jmp 0x436b7c
mov rdx, r14
mov ecx, 0xa
call sub.msvcrt.dll_fputc
jmp 0x436814
mov rdi, qword [rsp + 0x68]
mov rbx, r12
mov eax, dword [rsp + 0x60]
mov rbp, qword [rsp + 0x58]
sub eax, edi
test al, 0xf
je 0x43641d
jmp 0x436939
mov r8d, 0xa
mov r9, r14
mov edx, 1
lea rcx, str._tHandler:
call sub.msvcrt.dll_fwrite
mov rax, qword [rsp + 0x190]
mov r8, qword [rsp + 0x120]
mov rax, qword [rax + 0xf0]
add r8, qword [rax + 0xe0]
jmp 0x436774
mov rax, qword [rsp + 0x38]
lea rdx, str._nDump_of__s_n
mov rcx, r14
mov r8, qword [rax]
call sub.msvcrt.dll_fprintf
jmp 0x435f69
mov r8d, dword [rsp + 0x74]
lea rdx, str._tVersion:__d__Flags:
mov rcx, r14
and r8d, 7
call sub.msvcrt.dll_fprintf
mov r9, r14
mov r8d, 0x12
mov edx, 1
lea rcx, str.UNW_FLAG_CHAININFO
call sub.msvcrt.dll_fwrite
jmp 0x436603
lea rdx, str.unknown_flags_value_0x_x
mov r8d, r12d
mov rcx, r14
and r8d, 0x1f
call sub.msvcrt.dll_fprintf
jmp 0x436603
lea rdx, str.Unknown:__x
and r8d, 0xf
mov rcx, r14
call sub.msvcrt.dll_fprintf
jmp 0x436abd
call qword [rax + 0x38]
add esi, 2
mov r8d, eax
jmp 0x436bc0
movzx eax, byte [rsi + 5]
and eax, 0xf
cmp al, 6
jne 0x4369b9
movzx r8d, byte [rsi + 4]
lea rdx, str._tv2_epilog__length:__02x__at_pc:
mov rcx, r14
mov rax, qword [rsp + 0xc8]
sub eax, dword [rsp + 0xc0]
mov dword [rsp + 0x80], eax
call sub.msvcrt.dll_fprintf
movzx eax, byte [rsi + 5]
shr al, 4
test al, al
je 0x436e16
movzx eax, byte [rsi + 4]
lea rdx, str._0x_x
mov rcx, r14
mov r8d, dword [rsp + 0x80]
sub r8d, eax
call sub.msvcrt.dll_fprintf
mov eax, 1
mov rsi, rbx
mov ebx, eax
jmp 0x436e3f
mov r9, r14
mov r8d, 6
mov edx, 1
lea rcx, str.__pad_
call sub.msvcrt.dll_fwrite
add ebx, 1
mov ecx, ebx
cmp rdi, rcx
jbe 0x436ebc
lea edx, [rbx + rbx]
add rdx, qword [rsp + 0x78]
movzx eax, byte [rdx + 1]
mov r8d, eax
and r8d, 0xf
cmp r8b, 6
jne 0x436ebc
movzx edx, byte [rdx]
shr al, 4
movzx eax, al
shl eax, 8
or eax, edx
je 0x436e22
mov r8d, dword [rsp + 0x80]
lea rdx, str._0x_x
mov rcx, r14
sub r8d, eax
call sub.msvcrt.dll_fprintf
jmp 0x436e3c
mov r9, r14
mov r8d, 0xb
mov edx, 1
lea rcx, str._ErrorCode_
call sub.msvcrt.dll_fwrite
jmp 0x436abd
mov rdx, r14
mov ecx, 0x29
call sub.msvcrt.dll_fputc
jmp 0x436abd
mov dword [rsp + 0x80], ebx
mov rdx, r14
mov rbx, rsi
mov rsi, rcx
mov ecx, 0xa
call sub.msvcrt.dll_fputc
cmp rdi, rsi
jbe 0x4366d2
jmp 0x4369b9
movzx r8d, byte [r12]
lea rdx, str.epilog__02x__01x
mov r9d, ebp
mov rcx, r14
call sub.msvcrt.dll_fprintf
jmp 0x436aa3