Function at 0x41dee0
Capabilities:
Write file on windows

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0xa8
mov edx, dword [rcx + 0x5c]
test edx, edx
mov rbx, rcx
mov qword [rcx + 0x68], 0
jne 0x41df40
cmp qword [rcx + 0x38], 0
jne 0x41e214
mov ebp, dword [0x0049206c]
test ebp, ebp
jne 0x41e900
mov eax, 1
add rsp, 0xa8
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
mov edi, dword [0x0049206c]
test edi, edi
je 0x41df72
mov esi, dword [0x00492054]
test esi, esi
jne 0x41df72
mov r8d, dword [rbx + 0x38]
cmp edx, 1
lea rcx, str.There_are__d_section_headers__starting_at_offset_0x_lx:_n
lea rax, str.There_is__d_section_header__starting_at_offset_0x_lx:_n
cmove rcx, rax
call sub.msvcrt.dll_printf
mov r11d, dword [0x00492034]
xor edx, edx
mov rcx, rbx
test r11d, r11d
je 0x41e200
call fcn.0040d260
test eax, eax
je 0x41e20d
mov eax, dword [rbx + 0x60]
test eax, eax
je 0x41dfc0
cmp eax, dword [rbx + 0x5c]
jae 0x41dfc0
lea rsi, [rax + rax*4]
shl rsi, 4
add rsi, qword [rbx + 0x68]
mov rax, qword [rsi + 0x20]
test rax, rax
jne 0x41ed60
nop dword [rax]
cmp dword [0x00492034], 1
mov qword [0x00492358], 0
mov rsi, qword [0x0048c5d0]
mov qword [0x00492368], 0
mov qword [0x00492350], 0
mov qword [0x00492088], 0
sbb eax, eax
and eax, 4
add eax, 4
mov dword [rsi], eax
movzx eax, word [rbx + 0x4a]
cmp ax, 0x2f
ja 0x41e230
cmp ax, 0x2e
jae 0x41ec64
cmp ax, 8
je 0x41e260
cmp ax, 0xa
je 0x41e260
mov r10d, dword [rbx + 0x5c]
mov rbp, qword [rbx + 0x68]
test r10d, r10d
je 0x41eca3
lea r12, [0x0046b03c]
xor r15d, r15d
lea r13, str._no_strings_
lea r14, [0x0046b043]
jmp 0x41e0c4
cmp eax, 3
je 0x41e2a0
cmp eax, 0x12
je 0x41e860
cmp eax, 2
je 0x41e7d0
cmp eax, 0x11
je 0x41e8a5
cmp eax, 9
jne 0x41f560
cmp dword [0x00492034], 1
mov r8, qword [rbp + 0x38]
sbb rsi, rsi
and esi, 8
add rsi, 8
cmp r8, rsi
jne 0x41e7ee
nop dword [rax + rax]
mov eax, dword [rbx + 0x5c]
add r15d, 1
add rbp, 0x50
cmp r15d, eax
jae 0x41e1a2
test rbp, rbp
mov r9, r12
je 0x41e0ec
mov rdx, qword [rbx + 0x78]
mov r9, r13
test rdx, rdx
je 0x41e0ec
mov eax, dword [rbp]
mov r9, r14
cmp eax, dword [rbx + 0x80]
jae 0x41e0ec
mov r9d, eax
add r9, rdx
mov eax, dword [rbp + 4]
cmp eax, 0xb
jne 0x41e060
cmp qword [0x00492358], 0
jne 0x41e830
mov r9d, dword [0x00492034]
mov r8, qword [rbp + 0x38]
test r9d, r9d
je 0x41e884
cmp r8, 0x10
mov dword [rsp + 0x48], 0x10
mov esi, 0x10
je 0x41e175
lea rdi, [rsp + 0x70]
lea rdx, [0x0046bb25]
mov rcx, rdi
call sub.msvcrt.dll_sprintf
mov r8, rdi
mov edx, r15d
lea rcx, str.Section__d_has_invalid_sh_entsize_of__s_n
call fcn.00448cd0
mov edx, dword [rsp + 0x48]
lea rcx, str._Using_the_expected_size_of__u_for_the_rest_of_this_dump__n
call fcn.00448cd0
mov ecx, dword [0x00492034]
mov qword [rbp + 0x38], rsi
test ecx, ecx
je 0x41e88e
lea r8, [0x00492360]
mov rdx, rbp
mov rcx, rbx
call fcn.0040ca80
mov qword [0x00492358], rax
mov eax, dword [rbx + 0x5c]
add r15d, 1
add rbp, 0x50
cmp r15d, eax
jb 0x41e0c4
mov r8d, dword [0x0049206c]
test r8d, r8d
je 0x41df1e
cmp eax, 1
jbe 0x41ecb1
lea rcx, str._nSection_Headers:
call sub.msvcrt.dll_puts
mov ecx, dword [0x00492034]
mov eax, dword [0x00492064]
test ecx, ecx
je 0x41e960
test eax, eax
je 0x41ecf0
lea rcx, str.___Nr__Name
call sub.msvcrt.dll_puts
lea rcx, str._______Type____________Addr_____Off____Size___ES___Lk_Inf_Al
call sub.msvcrt.dll_puts
jmp 0x41e9a0
call fcn.0040d4c0
test eax, eax
jne 0x41df94
xor eax, eax
jmp 0x41df23
lea rcx, str.possibly_corrupt_ELF_file_header___it_has_a_non_zero_section_header_offset__but_no_section_headers_n
call fcn.00449140
xor eax, eax
jmp 0x41df23
cmp ax, 0x78
je 0x41e240
cmp ax, 0xfeb0
jne 0x41e030
mov eax, dword [rbx + 0x44]
and eax, 0x7f
cmp eax, 0x75
jne 0x41e030
mov dword [rsi], 2
jmp 0x41e030
mov eax, dword [rbx + 0x44]
and eax, 0xf000
cmp eax, 0x4000
jne 0x41e030
lea rdx, str..gcc_compiled_long32
mov rcx, rbx
call fcn.00409b60
test rax, rax
jne 0x41e030
mov dword [rsi], 8
jmp 0x41e030
lea rdi, str..dynstr
mov ecx, 8
mov rsi, r9
repe cmpsb byte [rsi], byte [rdi]
je 0x41e841
mov eax, dword [0x00492044]
test eax, eax
jne 0x41e3a3
mov rdx, qword [0x0048c4c0]
mov edx, dword [rdx]
test edx, edx
jne 0x41e3a3
mov rdx, qword [0x0048c470]
mov edi, dword [rdx]
test edi, edi
jne 0x41e3a3
mov rdx, qword [0x0048c4d0]
mov esi, dword [rdx]
test esi, esi
jne 0x41e3a3
mov rdx, qword [0x0048c510]
mov r11d, dword [rdx]
test r11d, r11d
jne 0x41e3a3
mov rdx, qword [0x0048c520]
mov r10d, dword [rdx]
test r10d, r10d
jne 0x41e3a3
mov rdx, qword [0x0048c490]
mov r8d, dword [rdx]
test r8d, r8d
jne 0x41e3a3
mov rdx, qword [0x0048c4b0]
mov ecx, dword [rdx]
test ecx, ecx
jne 0x41e3a3
mov rdx, qword [0x0048c500]
cmp dword [rdx], 0
jne 0x41e3a3
mov rdx, qword [0x0048c540]
cmp dword [rdx], 0
jne 0x41e3a3
mov rdx, qword [0x0048c4f0]
cmp dword [rdx], 0
jne 0x41e3a3
mov rdx, qword [0x0048c530]
cmp dword [rdx], 0
jne 0x41e3a3
mov rdx, qword [0x0048c480]
cmp dword [rdx], 0
jne 0x41e3a3
mov rdx, qword [0x0048c4a0]
cmp dword [rdx], 0
jne 0x41e3a3
mov rdx, qword [0x0048c4e0]
cmp dword [rdx], 0
jne 0x41e3a3
mov rdx, qword [0x0048c550]
cmp dword [rdx], 0
jne 0x41e430
jmp 0x41e466
lea rdi, str..debug_
mov ecx, 7
mov rsi, r9
repe cmpsb byte [rsi], byte [rdi]
je 0x41e510
lea rdi, str..zdebug_
mov ecx, 8
mov rsi, r9
repe cmpsb byte [rsi], byte [rdi]
je 0x41e510
test eax, eax
jne 0x41e3e4
mov rdx, qword [0x0048c4c0]
mov r11d, dword [rdx]
test r11d, r11d
je 0x41e3fb
lea rdi, str..gnu.linkonce.wi.
mov ecx, 0x11
mov rsi, r9
repe cmpsb byte [rsi], byte [rdi]
je 0x41e4f0
mov rdx, qword [0x0048c4b0]
mov r10d, dword [rdx]
test r10d, r10d
je 0x41e421
lea rdi, [0x00475c30]
mov ecx, 0xa
mov rsi, r9
repe cmpsb byte [rsi], byte [rdi]
je 0x41e4f0
mov rdx, qword [0x0048c550]
mov r8d, dword [rdx]
test r8d, r8d
je 0x41e45e
lea rdi, [0x00475c3a]
mov ecx, 0xb
mov rsi, r9
repe cmpsb byte [rsi], byte [rdi]
je 0x41e4f0
lea rdi, [0x00475c45]
mov ecx, 0xd
mov rsi, r9
repe cmpsb byte [rsi], byte [rdi]
je 0x41e4f0
test eax, eax
jne 0x41f60a
mov rax, qword [0x0048c580]
mov ecx, dword [rax]
test ecx, ecx
jne 0x41f680
mov rax, qword [0x0048c560]
mov edx, dword [rax]
test edx, edx
jne 0x41f6de
mov rsi, qword [0x0048c570]
mov edi, dword [rsi]
test edi, edi
je 0x41f66b
mov rcx, r9
mov r8d, 7
mov qword [rsp + 0x48], r9
lea rdx, str..trace_
call sub.msvcrt.dll_strncmp
mov r9, qword [rsp + 0x48]
test eax, eax
jne 0x41f66b
add r9, 7
mov r11d, dword [rsi]
lea rdi, [0x00475bca]
mov ecx, 8
test r11d, r11d
je 0x41e0b0
mov rsi, r9
repe cmpsb byte [rsi], byte [rdi]
jne 0x41e0b0
nop word [rax + rax]
mov r8d, 4
mov edx, r15d
mov rcx, rbx
call fcn.00409e20
jmp 0x41e0b0
cmp byte [r9 + 1], 0x7a
lea r10, [r9 + 7]
jne 0x41e51f
lea r10, [r9 + 8]
test eax, eax
jne 0x41e4f0
mov rax, qword [0x0048c4c0]
mov edx, dword [rax]
test edx, edx
jne 0x41ed01
mov rax, qword [0x0048c470]
mov eax, dword [rax]
test eax, eax
je 0x41e554
lea rdi, [0x00475ba2]
mov ecx, 6
mov rsi, r10
repe cmpsb byte [rsi], byte [rdi]
je 0x41e4f0
mov rax, qword [0x0048c4d0]
mov eax, dword [rax]
test eax, eax
je 0x41e58f
lea rdi, [0x00475ba9]
mov ecx, 5
mov rsi, r10
repe cmpsb byte [rsi], byte [rdi]
je 0x41e4f0
lea rdi, str.line.
mov ecx, 5
mov rsi, r10
repe cmpsb byte [rsi], byte [rdi]
je 0x41e4f0
mov rax, qword [0x0048c510]
mov eax, dword [rax]
test eax, eax
je 0x41f5d1
lea rdi, [0x00475bb4]
mov ecx, 8
mov rsi, r10
repe cmpsb byte [rsi], byte [rdi]
je 0x41e4f0
mov rax, qword [0x0048c520]
mov ecx, 0xc
lea rdi, str.gnu_pubnames
mov eax, dword [rax]
test eax, eax
jne 0x41f6fb
mov rsi, r10
repe cmpsb byte [rsi], byte [rdi]
je 0x41e4f0
mov rax, qword [0x0048c490]
mov eax, dword [rax]
test eax, eax
je 0x41e603
lea rdi, [0x00475bca]
mov ecx, 7
mov rsi, r10
repe cmpsb byte [rsi], byte [rdi]
je 0x41e4f0
mov rax, qword [0x0048c530]
mov eax, dword [rax]
test eax, eax
je 0x41e63e
lea rdi, [0x00475bd2]
mov ecx, 6
mov rsi, r10
repe cmpsb byte [rsi], byte [rdi]
je 0x41e4f0
lea rdi, str.rnglists
mov ecx, 8
mov rsi, r10
repe cmpsb byte [rsi], byte [rdi]
je 0x41e4f0
mov rax, qword [0x0048c4b0]
mov edi, dword [rax]
test edi, edi
je 0x41e662
lea rdi, str.frame
mov ecx, 5
mov rsi, r10
repe cmpsb byte [rsi], byte [rdi]
je 0x41e4f0
mov rax, qword [0x0048c500]
mov esi, dword [rax]
test esi, esi
je 0x41e6b8
mov r8d, 7
mov rcx, r10
mov qword [rsp + 0x48], r10
lea rdx, [0x00475be8]
call sub.msvcrt.dll_strncmp
test eax, eax
je 0x41e4f0
mov r10, qword [rsp + 0x48]
mov r8d, 5
lea rdx, [0x00475bf0]
mov rcx, r10
call sub.msvcrt.dll_strncmp
mov r10, qword [rsp + 0x48]
test eax, eax
je 0x41e4f0
mov rax, qword [0x0048c540]
cmp dword [rax], 0
je 0x41e6eb
mov rcx, r10
mov r8d, 3
mov qword [rsp + 0x48], r10
lea rdx, [0x00475bf6]
call sub.msvcrt.dll_strncmp
mov r10, qword [rsp + 0x48]
test eax, eax
je 0x41e4f0
mov rax, qword [0x0048c4f0]
cmp dword [rax], 0
je 0x41e740
mov r8d, 3
mov rcx, r10
mov qword [rsp + 0x48], r10
lea rdx, [0x00475bfa]
call sub.msvcrt.dll_strncmp
test eax, eax
je 0x41e4f0
mov r10, qword [rsp + 0x48]
mov r8d, 8
lea rdx, str.loclists
mov rcx, r10
call sub.msvcrt.dll_strncmp
mov r10, qword [rsp + 0x48]
test eax, eax
je 0x41e4f0
mov rax, qword [0x0048c480]
cmp dword [rax], 0
je 0x41e773
mov rcx, r10
mov r8d, 4
mov qword [rsp + 0x48], r10
lea rdx, [0x00475c07]
call sub.msvcrt.dll_strncmp
mov r10, qword [rsp + 0x48]
test eax, eax
je 0x41e4f0
mov rax, qword [0x0048c4a0]
cmp dword [rax], 0
je 0x41e0b0
mov r8d, 8
mov rcx, r10
mov qword [rsp + 0x48], r10
lea rdx, [0x00475c0c]
call sub.msvcrt.dll_strncmp
test eax, eax
je 0x41e4f0
mov r10, qword [rsp + 0x48]
mov r8d, 8
lea rdx, str.tu_index
mov rcx, r10
call sub.msvcrt.dll_strncmp
test eax, eax
jne 0x41e0b0
jmp 0x41e4f0
cmp dword [0x00492034], 1
mov r8, qword [rbp + 0x38]
sbb rsi, rsi
and esi, 8
add rsi, 0x10
cmp r8, rsi
je 0x41e0b0
lea rdi, [rsp + 0x70]
lea rdx, [0x0046bb25]
mov rcx, rdi
call sub.msvcrt.dll_sprintf
mov r8, rdi
mov edx, r15d
lea rcx, str.Section__d_has_invalid_sh_entsize_of__s_n
call fcn.00448cd0
lea rcx, str._Using_the_expected_size_of__u_for_the_rest_of_this_dump__n
mov edx, esi
call fcn.00448cd0
mov qword [rbp + 0x38], rsi
jmp 0x41e0b0
lea rcx, str.File_contains_multiple_dynamic_symbol_tables_n
call fcn.00448cd0
jmp 0x41e0b0
cmp qword [0x00492368], 0
je 0x41e911
lea rcx, str.File_contains_multiple_dynamic_string_tables_n
call fcn.00448cd0
jmp 0x41e0b0
mov ecx, 0x10
call fcn.0044ce50
mov rdx, qword [0x00492088]
mov qword [rax], rbp
mov qword [0x00492088], rax
mov qword [rax + 8], rdx
jmp 0x41e0b0
cmp r8, 0x18
jne 0x41f72e
lea r8, [0x00492360]
mov rdx, rbp
mov rcx, rbx
call fcn.0040ce70
jmp 0x41e187
mov r8, qword [rbp + 0x38]
cmp r8, 4
je 0x41e0b0
lea rsi, [rsp + 0x70]
lea rdx, [0x0046bb25]
mov rcx, rsi
call sub.msvcrt.dll_sprintf
mov r8, rsi
mov edx, r15d
lea rcx, str.Section__d_has_invalid_sh_entsize_of__s_n
call fcn.00448cd0
mov edx, 4
lea rcx, str._Using_the_expected_size_of__u_for_the_rest_of_this_dump__n
call fcn.00448cd0
mov qword [rbp + 0x38], 4
jmp 0x41e0b0
lea rcx, str._nThere_are_no_sections_in_this_file.
call sub.msvcrt.dll_puts
jmp 0x41df1e
lea rax, str.dynamic_strings
mov r9, qword [rbp + 0x18]
xor ecx, ecx
mov qword [rsp + 0x30], rax
mov rax, qword [rbp + 0x20]
lea rdx, [rbx + 8]
mov qword [rsp + 0x20], 1
lea r8, [rbx + 0x10]
mov qword [rsp + 0x28], rax
call fcn.0040c610
xor edx, edx
test rax, rax
mov qword [0x00492368], rax
je 0x41e953
mov edx, dword [rbp + 0x20]
mov dword [0x00492364], edx
jmp 0x41e0b0
mov r13, qword [0x0048c590]
mov edx, dword [r13]
test edx, edx
jne 0x41ecc2
test eax, eax
je 0x41f5a1
lea rcx, str.___Nr__Name
call sub.msvcrt.dll_puts
lea rcx, str._______Type______________Address__________Offset____________Link
call sub.msvcrt.dll_puts
lea rcx, str._______Size______________EntSize__________Info______________Align
call sub.msvcrt.dll_puts
nop
mov eax, dword [0x00492064]
test eax, eax
jne 0x41f2c0
mov eax, dword [rbx + 0x5c]
mov rbp, qword [rbx + 0x68]
test eax, eax
je 0x41f2ee
xor r12d, r12d
mov r13, qword [0x0048c590]
lea r14, str._no_strings_
lea r15, [0x0046b043]
jmp 0x41eb8b
mov rax, qword [rbp + 8]
test al, 0x40
je 0x41f1d0
mov eax, dword [rbp + 0x2c]
test eax, eax
je 0x41e9f8
cmp eax, dword [rbx + 0x5c]
jb 0x41ea10
lea rcx, str.__2u_:_Expected_link_to_another_section_in_info_field
mov edx, r12d
call fcn.00449140
nop word [rax + rax]
mov rax, qword [rbx + 0x10]
cmp qword [rbp + 0x20], rax
jbe 0x41ea31
mov eax, dword [rbp + 4]
lea edx, [rax - 1]
cmp edx, 0x5ffffffe
ja 0x41ea31
cmp eax, 8
jne 0x41f490
lea rcx, str.____2u_
mov edx, r12d
call sub.msvcrt.dll_printf
mov eax, dword [0x00492064]
test eax, eax
jne 0x41ee20
mov rcx, qword [rbx + 0x78]
mov rdx, r14
test rcx, rcx
je 0x41ea6d
mov eax, dword [rbp]
mov rdx, r15
cmp eax, dword [rbx + 0x80]
jae 0x41ea6d
mov edx, eax
add rdx, rcx
mov ecx, 0xffffffef
call fcn.0040a8e0
mov edx, dword [rbp + 4]
mov rcx, rbx
call fcn.0040e4d0
mov edi, dword [r13]
lea rdx, str.___15s
lea rcx, str.___15.15s
test edi, edi
cmovne rcx, rdx
mov rdx, rax
call sub.msvcrt.dll_printf
mov eax, dword [0x00492034]
test eax, eax
jne 0x41ef10
mov r11d, dword [r13]
test r11d, r11d
jne 0x41f0d2
mov r9d, dword [0x00492064]
test r9d, r9d
je 0x41f020
mov edx, dword [rbp + 4]
mov rcx, rbx
call fcn.0040e4d0
lea rcx, str._________15.15s
mov rdx, rax
call sub.msvcrt.dll_printf
mov rcx, qword [rbp + 0x10]
mov edx, 6
call fcn.0040a010
mov rdx, qword [rbp + 0x18]
movsxd rax, edx
cmp rdx, rax
je 0x41f401
lea rcx, [0x0046bd5a]
call sub.msvcrt.dll_printf
mov rcx, qword [rbp + 0x18]
mov edx, 6
call fcn.0040a010
mov edx, dword [rbp + 0x28]
lea rcx, str.___u_n
call sub.msvcrt.dll_printf
mov rcx, qword [rbp + 0x20]
mov edx, 6
call fcn.0040a010
mov ecx, 0x20
call sub.msvcrt.dll_putchar
mov rcx, qword [rbp + 0x38]
mov edx, 6
call fcn.0040a010
mov edx, dword [rbp + 0x2c]
lea rcx, str.____16u___lu_n
mov r8d, dword [rbp + 0x30]
call sub.msvcrt.dll_printf
mov r8d, dword [0x00492064]
test r8d, r8d
jne 0x41ee50
mov eax, dword [rbx + 0x5c]
add r12d, 1
add rbp, 0x50
cmp eax, r12d
jbe 0x41f2e0
mov ecx, dword [rbp + 4]
cmp ecx, 0x10
ja 0x41edb0
cmp ecx, 0xe
jae 0x41f342
cmp ecx, 5
jbe 0x41efd0
cmp ecx, 9
je 0x41edd3
cmp ecx, 0xb
je 0x41efe2
cmp ecx, 6
je 0x41efe2
cmp ecx, 0x12
ja 0x41e9e0
mov eax, 1
shl rax, cl
test eax, 0x20804
jne 0x41ea10
test eax, 0x5c060
jne 0x41f1e7
test eax, 0x210
je 0x41f460
mov r8d, dword [rbp + 0x2c]
test r8d, r8d
je 0x41f4b5
cmp r8d, dword [rbx + 0x5c]
jae 0x41ec50
mov eax, r8d
lea rax, [rax + rax*4]
shl rax, 4
add rax, qword [rbx + 0x68]
mov ecx, dword [rax + 4]
mov eax, 1
cmp ecx, 0xe
ja 0x41ec33
mov eax, 0x4182
shr rax, cl
not rax
and eax, 1
cmp ecx, 0x5fffffff
ja 0x41ea10
test al, al
je 0x41ea10
nop word [rax + rax]
lea rcx, str.__2u_:_Info_field___u__should_index_a_relocatable_section._n
mov edx, r12d
call fcn.00449140
jmp 0x41ea10
mov eax, dword [rbx + 0x44]
and eax, 0xff0000
cmp eax, 0x830000
je 0x41e24f
ja 0x41ed34
cmp eax, 0x810000
je 0x41f550
cmp eax, 0x820000
je 0x41f550
cmp eax, 0x800000
jne 0x41e030
jmp 0x41e24f
mov eax, dword [0x0049206c]
test eax, eax
je 0x41df1e
lea rcx, str._nSection_Header:
call sub.msvcrt.dll_puts
jmp 0x41e1c7
test eax, eax
je 0x41f590
lea rcx, str.___Nr__Name
call sub.msvcrt.dll_puts
lea rcx, str._______Type____________Address__________Off____Size___ES___Lk_Inf_Al
call sub.msvcrt.dll_puts
jmp 0x41e9a0
lea rcx, str.___Nr__Name______________Type____________Addr_____Off____Size___ES_Flg_Lk_Inf_Al
call sub.msvcrt.dll_puts
jmp 0x41e9a0
lea rdi, [0x00475b97]
mov ecx, 4
mov rsi, r10
repe cmpsb byte [rsi], byte [rdi]
je 0x41e4f0
lea rdi, [0x00475b9c]
mov ecx, 5
mov rsi, r10
repe cmpsb byte [rsi], byte [rdi]
je 0x41e4f0
jmp 0x41e534
cmp eax, 0x850000
je 0x41f550
cmp eax, 0x860000
je 0x41e24f
cmp eax, 0x840000
jne 0x41e030
jmp 0x41e24f
mov r9, qword [rsi + 0x18]
lea rdi, str.string_table
xor ecx, ecx
mov qword [rsp + 0x28], rax
lea rdx, [rbx + 8]
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x20], 1
lea r8, [rbx + 0x10]
call fcn.0040c610
xor edx, edx
test rax, rax
mov qword [rbx + 0x78], rax
je 0x41ed9b
mov edx, dword [rsi + 0x20]
mov dword [rbx + 0x80], edx
jmp 0x41dfc0
cmp ecx, 0x6ffffff7
je 0x41efe2
ja 0x41f295
cmp ecx, 0x12
jbe 0x41edd3
cmp ecx, 0x6ffffff6
jne 0x41ebc4
mov r8d, dword [rbp + 0x28]
cmp r8d, eax
jae 0x41ee05
test r8d, r8d
je 0x41ee05
mov eax, r8d
lea rax, [rax + rax*4]
shl rax, 4
add rax, qword [rbx + 0x68]
mov eax, dword [rax + 4]
cmp eax, 2
je 0x41ebc4
cmp eax, 0xb
je 0x41ebc4
lea rcx, str.__2u_:_Link_field___u__should_index_a_symtab_section._n
mov edx, r12d
call fcn.00449140
mov ecx, dword [rbp + 4]
jmp 0x41ebc4
lea rdx, [rbx + 0x80]
mov r8, rbp
lea rcx, [rbx + 0x78]
call fcn.0040be90
lea rcx, str._s_n
mov rdx, rax
call sub.msvcrt.dll_printf
jmp 0x41ea77
mov r8, qword [rbp + 8]
lea rdx, [rbx + 0x4a]
lea rcx, [rbx + 0x1f]
call fcn.0041d680
lea rcx, str.________s_n
mov rdx, rax
call sub.msvcrt.dll_printf
test byte [rbp + 9], 8
je 0x41eb77
mov r9, qword [rbp + 0x18]
lea rax, str.compression_header
mov qword [rsp + 0x28], 0x18
lea rsi, [rsp + 0x50]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x20], 1
lea rdx, [rbx + 8]
mov rcx, rsi
lea r8, [rbx + 0x10]
call fcn.0040c610
test rax, rax
je 0x41eb77
lea rcx, [rsp + 0x70]
mov rdx, rsi
mov r8d, 0x18
call fcn.0040c380
mov edx, dword [rsp + 0x70]
cmp edx, 1
je 0x41f5c0
lea rcx, str._________unknown_:_0x_x__
call sub.msvcrt.dll_printf
mov rcx, qword [rsp + 0x78]
mov edx, 6
call fcn.0040a010
mov edx, dword [rsp + 0x80]
lea rcx, str.___lu_n
call sub.msvcrt.dll_printf
jmp 0x41eb77
mov rcx, qword [rbp + 0x10]
mov edx, 6
call fcn.0040a010
mov r9d, dword [rbp + 0x38]
lea rcx, str.__6.6lx__6.6lx__2.2lx
mov r8d, dword [rbp + 0x20]
mov edx, dword [rbp + 0x18]
call sub.msvcrt.dll_printf
mov esi, dword [0x00492064]
test esi, esi
je 0x41f270
mov ecx, 1
call qword [fcn.00455bf0]
mov r8d, 2
mov edx, 1
lea rcx, [0x0046bd5a]
mov r9, rax
call sub.msvcrt.dll_fwrite
mov edx, dword [rbp + 0x28]
cmp edx, dword [rbx + 0x5c]
mov ecx, dword [0x00492064]
jae 0x41f210
xor esi, esi
test ecx, ecx
je 0x41f470
lea rcx, str._2u
call sub.msvcrt.dll_printf
mov edx, dword [rbp + 0x2c]
lea rcx, str._3u__2lu_n
mov r8d, dword [rbp + 0x30]
call sub.msvcrt.dll_printf
test rsi, rsi
je 0x41eb67
cmp byte [rsi], 0
jne 0x41eb67
mov r8d, dword [rbp + 0x28]
lea rcx, str.section__u:_sh_link_value_of__u_is_larger_than_the_number_of_sections_n
mov edx, r12d
call fcn.00449140
jmp 0x41eb67
cmp ecx, 4
jae 0x41edd3
cmp ecx, 2
jne 0x41ebc4
mov r8d, dword [rbp + 0x28]
test r8d, r8d
je 0x41f009
cmp r8d, eax
jae 0x41f009
mov eax, r8d
lea rax, [rax + rax*4]
shl rax, 4
add rax, qword [rbx + 0x68]
cmp dword [rax + 4], 3
je 0x41ebc4
lea rcx, str.__2u_:_Link_field___u__should_index_a_string_section._n
mov edx, r12d
call fcn.00449140
mov ecx, dword [rbp + 4]
jmp 0x41ebc4
mov ecx, 0x20
call sub.msvcrt.dll_putchar
mov rcx, qword [rbp + 0x10]
mov edx, 6
call fcn.0040a010
mov rdx, qword [rbp + 0x18]
movsxd rax, edx
cmp rdx, rax
je 0x41f3f0
lea rcx, [0x0046bd5a]
call sub.msvcrt.dll_printf
mov rcx, qword [rbp + 0x18]
mov edx, 6
call fcn.0040a010
lea rcx, [0x0047618f]
call sub.msvcrt.dll_printf
mov rcx, qword [rbp + 0x20]
mov edx, 6
call fcn.0040a010
lea rcx, [0x0046bd5a]
call sub.msvcrt.dll_printf
mov rcx, qword [rbp + 0x38]
mov edx, 6
call fcn.0040a010
mov r8, qword [rbp + 8]
lea rdx, [rbx + 0x4a]
lea rcx, [rbx + 0x1f]
call fcn.0041d680
lea rcx, str.__3s
mov rdx, rax
call sub.msvcrt.dll_printf
mov edx, dword [rbp + 0x28]
lea rcx, str.______2u____3u______lu_n
mov r9d, dword [rbp + 0x30]
mov r8d, dword [rbp + 0x2c]
call sub.msvcrt.dll_printf
jmp 0x41eb67
mov rcx, qword [rbp + 0x10]
mov edx, 6
call fcn.0040a010
mov rdx, qword [rbp + 0x18]
movsxd rax, edx
cmp rdx, rax
je 0x41f434
mov ecx, 0x20
call sub.msvcrt.dll_putchar
mov rcx, qword [rbp + 0x18]
mov edx, 6
call fcn.0040a010
mov rdx, qword [rbp + 0x20]
mov eax, edx
cmp rdx, rax
je 0x41f423
mov ecx, 0x20
call sub.msvcrt.dll_putchar
mov rcx, qword [rbp + 0x20]
mov edx, 6
call fcn.0040a010
mov rdx, qword [rbp + 0x38]
mov eax, edx
cmp rdx, rax
je 0x41f412
mov ecx, 0x20
call sub.msvcrt.dll_putchar
mov rcx, qword [rbp + 0x38]
mov edx, 6
call fcn.0040a010
mov r10d, dword [0x00492064]
test r10d, r10d
je 0x41f370
mov ecx, 1
call qword [fcn.00455bf0]
mov r8d, 2
mov edx, 1
lea rcx, [0x0046bd5a]
mov r9, rax
call sub.msvcrt.dll_fwrite
mov edx, dword [rbp + 0x28]
lea rcx, str._2u__3u
mov r8d, dword [rbp + 0x2c]
call sub.msvcrt.dll_printf
mov rdx, qword [rbp + 0x30]
mov eax, edx
cmp rdx, rax
je 0x41f445
lea rcx, str._I64d
call sub.msvcrt.dll_printf
mov ecx, 0xa
call sub.msvcrt.dll_putchar
jmp 0x41eb67
cmp ecx, 0x5fffffff
ja 0x41ea31
test eax, 0x1000000
jne 0x41ea10
mov r8d, dword [rbp + 0x2c]
test r8d, r8d
je 0x41ea10
lea rcx, str.__2u_:_Unexpected_value___u__in_info_field._n
mov edx, r12d
call fcn.00449140
jmp 0x41ea10
movzx eax, word [rbx + 0x4a]
cmp ax, 0x12
je 0x41f3b0
ja 0x41f395
cmp ax, 6
je 0x41f3b0
ja 0x41f522
sub eax, 2
cmp ax, 1
jbe 0x41f3b0
lea rsi, [0x0046bd82]
test ecx, ecx
jne 0x41ef84
mov r9d, dword [rbp + 0x30]
lea rcx, str._2u__3u__2lu_n
mov r8d, dword [rbp + 0x2c]
call sub.msvcrt.dll_printf
jmp 0x41efac
mov r8, qword [rbp + 8]
lea rdx, [rbx + 0x4a]
lea rcx, [rbx + 0x1f]
call fcn.0041d680
lea rcx, str.__3s
mov rdx, rax
call sub.msvcrt.dll_printf
jmp 0x41ef68
cmp ecx, 0x6ffffffd
jb 0x41ebc4
cmp ecx, 0x6ffffffe
jbe 0x41efe2
cmp ecx, 0x6fffffff
je 0x41edd3
jmp 0x41ebc4
lea rcx, str._______Flags
call sub.msvcrt.dll_puts
mov eax, dword [rbx + 0x5c]
mov rbp, qword [rbx + 0x68]
test eax, eax
jne 0x41e9bd
nop dword [rax + rax]
mov ecx, dword [0x00492064]
test ecx, ecx
jne 0x41df1e
lea rcx, str.Key_to_Flags:_n__W__write___A__alloc___X__execute___M__merge___S__strings___I__info___n__L__link_order___O__extra_OS_processing_required___G__group___T__TLS___n__C__compressed___x__unknown___o__OS_specific___E__exclude___n
call sub.msvcrt.dll_printf
movzx eax, word [rbx + 0x4a]
lea edx, [rax - 0xb4]
cmp dx, 1
jbe 0x41f4a4
cmp ax, 0x3e
je 0x41f4a4
cmp ax, 0x28
je 0x41f649
cmp ax, 0x14
je 0x41f65a
lea rcx, str.p__processor_specific_
call sub.msvcrt.dll_puts
mov eax, 1
jmp 0x41df23
mov r8d, dword [rbp + 0x28]
test r8d, r8d
je 0x41ebcd
lea rcx, str.__2u_:_Unexpected_value___u__in_link_field._n
mov edx, r12d
call fcn.00449140
mov ecx, dword [rbp + 4]
jmp 0x41ebc4
mov r8, qword [rbp + 8]
lea rdx, [rbx + 0x4a]
lea rcx, [rbx + 0x1f]
call fcn.0041d680
lea rcx, str.__3s
mov rdx, rax
call sub.msvcrt.dll_printf
jmp 0x41f18b
cmp ax, 0x3e
je 0x41f3b0
ja 0x41f531
cmp ax, 0x2b
jne 0x41f241
nop dword [rax + rax]
cmp edx, 0xff00
je 0x41f544
cmp edx, 0xff01
jne 0x41f241
lea rsi, str.AFTER
test ecx, ecx
je 0x41f250
lea rcx, str.__s_
mov rdx, rsi
call sub.msvcrt.dll_printf
jmp 0x41ef90
lea rcx, str.___8.8lx
call sub.msvcrt.dll_printf
jmp 0x41f062
lea rcx, str.___16.16lx
call sub.msvcrt.dll_printf
jmp 0x41eb1f
lea rcx, str.__2.2lx
call sub.msvcrt.dll_printf
jmp 0x41f156
lea rcx, str.__6.6lx
call sub.msvcrt.dll_printf
jmp 0x41f12f
lea rcx, str.__6.6lx
call sub.msvcrt.dll_printf
jmp 0x41f108
lea rcx, str._2lu_n
call sub.msvcrt.dll_printf
jmp 0x41eb67
cmp ecx, 8
je 0x41ea31
jmp 0x41e9e0
mov r9d, dword [rbp + 0x30]
lea rcx, str._2u__3u__2lu_n
mov r8d, dword [rbp + 0x2c]
call sub.msvcrt.dll_printf
jmp 0x41eb67
lea rcx, str.Size_of_section__u_is_larger_than_the_entire_file__n
mov edx, r12d
call fcn.00449140
jmp 0x41ea31
lea rcx, str.l__large__
call sub.msvcrt.dll_printf
jmp 0x41f32c
movzx eax, word [rbx + 0x48]
sub eax, 2
cmp ax, 1
jbe 0x41ea10
mov rdx, qword [rbx + 0x78]
test rdx, rdx
je 0x41ec50
mov eax, dword [rbp]
cmp eax, dword [rbx + 0x80]
jae 0x41ec50
lea rdi, str..rel.dyn
add rax, rdx
mov ecx, 9
mov rsi, rax
repe cmpsb byte [rsi], byte [rdi]
je 0x41ea10
lea rdx, str..rela.dyn
mov rcx, rax
mov dword [rsp + 0x48], r8d
call sub.msvcrt.dll_strcmp
mov r8d, dword [rsp + 0x48]
test eax, eax
je 0x41ea10
jmp 0x41ec50
cmp ax, 0xb
jne 0x41f241
jmp 0x41f3b0
sub ax, 0xb4
cmp ax, 1
ja 0x41f241
jmp 0x41f3b0
lea rsi, str.BEFORE
jmp 0x41f3cf
mov dword [rsi], 4
jmp 0x41e030
cmp eax, 4
jne 0x41e2b7
cmp dword [0x00492034], 1
mov r8, qword [rbp + 0x38]
sbb rsi, rsi
and esi, 0xc
add rsi, 0xc
cmp r8, rsi
je 0x41e0b0
jmp 0x41e7ee
lea rcx, str.___Nr__Name______________Type____________Address__________Off____Size___ES_Flg_Lk_Inf_Al
call sub.msvcrt.dll_puts
jmp 0x41e9a0
lea rcx, str.___Nr__Name______________Type_____________Address___________Offset
call sub.msvcrt.dll_puts
lea rcx, str._______Size______________EntSize__________Flags__Link__Info__Align
call sub.msvcrt.dll_puts
jmp 0x41e9a0
lea rcx, str._______ZLIB_
call sub.msvcrt.dll_printf
jmp 0x41eee6
mov rax, qword [0x0048c520]
mov edx, dword [rax]
test edx, edx
je 0x41e5df
lea rdi, [0x00476334]
mov ecx, 8
mov rsi, r10
repe cmpsb byte [rsi], byte [rdi]
je 0x41e4f0
lea rdi, str.gnu_pubtypes
mov ecx, 0xc
jmp 0x41e5d4
lea rdi, str..trace_
mov ecx, 7
mov rsi, r9
repe cmpsb byte [rsi], byte [rdi]
je 0x41e4f0
lea rdi, [0x00475c52]
mov ecx, 0xe
mov rsi, r9
repe cmpsb byte [rsi], byte [rdi]
je 0x41e4f0
lea rdi, [0x00475c61]
mov ecx, 0x11
jmp 0x41e4dc
lea rcx, str.y__purecode__
call sub.msvcrt.dll_printf
jmp 0x41f32c
lea rcx, str.v__VLE__
call sub.msvcrt.dll_printf
jmp 0x41f32c
mov rax, qword [0x0048c4e0]
mov r10d, dword [rax]
test r10d, r10d
je 0x41e0b0
jmp 0x41f621
lea rdi, str..trace_
mov ecx, 7
mov rsi, r9
repe cmpsb byte [rsi], byte [rdi]
jne 0x41f66b
add r9, 7
mov ecx, 5
mov rax, qword [0x0048c560]
lea rdi, [0x00475b97]
mov rsi, r9
repe cmpsb byte [rsi], byte [rdi]
je 0x41e4f0
mov esi, dword [rax]
test esi, esi
je 0x41f6d2
lea rdi, [0x00475ba2]
mov ecx, 7
mov rsi, r9
repe cmpsb byte [rsi], byte [rdi]
je 0x41e4f0
mov rsi, qword [0x0048c570]
jmp 0x41e4c4
lea rdi, str..trace_
mov ecx, 7
mov rsi, r9
repe cmpsb byte [rsi], byte [rdi]
jne 0x41f66b
add r9, 7
jmp 0x41f6b5
lea rdi, [0x00476334]
mov ecx, 8
mov rsi, r10
repe cmpsb byte [rsi], byte [rdi]
je 0x41e4f0
lea rdi, str.gnu_pubnames
mov ecx, 0xc
mov rsi, r10
repe cmpsb byte [rsi], byte [rdi]
jne 0x41f5f9
jmp 0x41e4f0
mov dword [rsp + 0x48], 0x18
mov esi, 0x18
jmp 0x41e12d