Function at 0x44ddd0
Capabilities:
Write file on windows

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x148
test r8, r8
mov r12, rcx
mov r14, rdx
mov qword [rsp + 0xb0], 0
mov qword [rsp + 0xb8], 0
mov rbp, r8
je 0x44de67
mov rax, qword [r8 + 0xe0]
test rax, rax
je 0x44de67
mov rax, qword [rax + 0x58]
test rax, rax
je 0x44de67
movabs rdx, 0xaaaaaaaaaaaaaaab
mov r15, qword [rax]
mov rax, r15
mul rdx
shr rdx, 3
lea rax, [rdx + rdx*2]
shl rax, 2
cmp r15, rax
jne 0x44df30
mov rbx, qword [rbp + 0x38]
test rbx, rbx
jne 0x44de80
test r15, r15
je 0x44de67
mov r8, qword [rbp]
lea rdx, str.Warning:__s_section_size_is_zero_n
mov rcx, r14
call sub.msvcrt.dll_fprintf
mov eax, 1
add rsp, 0x148
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
test r15, r15
mov r8, qword [rbp]
jne 0x44df52
mov rax, qword [r12 + 8]
mov ecx, 0xa
mov dword [rsp + 0x4c], 0
lea rdi, str.pe_x86_64
mov rsi, qword [rax]
repe cmpsb byte [rsi], byte [rdi]
seta dl
setb al
cmp dl, al
je 0x44e7a0
lea rdx, str._nThe_Function_Table__interpreted__s_section_contents__n
mov rcx, r14
call sub.msvcrt.dll_fprintf
mov r9, r14
mov r8d, 0x2d
mov edx, 1
lea rcx, str.vma:_t_t_tBeginAddress_t_EndAddress_t__UnwindData_n
call sub.msvcrt.dll_fwrite
lea r8, [rsp + 0xb0]
mov rdx, rbp
mov rcx, r12
call fcn.0042ae20
mov qword [rsp + 0x30], 0
test eax, eax
jne 0x44dfa0
mov rcx, qword [rsp + 0xb0]
call fcn.004d4f88
mov rcx, qword [rsp + 0x30]
call fcn.004d4f88
mov rcx, qword [rsp + 0xb8]
call fcn.004d4f88
jmp 0x44de67
mov dword [rsp + 0x20], 0xc
mov r8, qword [r8]
mov r9d, r15d
mov rcx, r14
lea rdx, str.Warning:__s_section_size___ld__is_not_a_multiple_of__d_n
call sub.msvcrt.dll_fprintf
jmp 0x44de46
cmp r15, rbx
mov dword [rsp + 0x4c], 0
jbe 0x44deb9
mov dword [rsp + 0x20], r15d
lea rdx, str.Warning:__s_section_size___ld__is_smaller_than_virtual_size___ld__n
mov r9d, ebx
mov rcx, r14
call sub.msvcrt.dll_fprintf
mov rax, rbx
mov r8, qword [rbp]
movabs rdx, 0xaaaaaaaaaaaaaaab
mul rdx
shr rdx, 3
mov r15, rdx
jmp 0x44deb9
movabs rdx, 0xaaaaaaaaaaaaaaab
mov rax, r15
mul rdx
lea rdi, str.pei_x86_64
shr rdx, 3
lea rcx, [rdx*8 + 8]
call fcn.004d1690
mov ecx, 0xb
mov qword [rsp + 0x30], rax
mov rax, qword [r12 + 8]
mov rsi, qword [rax]
repe cmpsb byte [rsi], byte [rdi]
seta dl
setb al
xor r13d, r13d
cmp dl, al
je 0x44e7d0
test r15, r15
je 0x44ed10
cmp r15, 0xb
jbe 0x44ed10
lea rax, [r12 + 8]
xor ebx, ebx
mov dword [rsp + 0x50], 0
xor edi, edi
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0xe0]
mov rsi, 0xffffffffffffffff
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x190], r12
jmp 0x44e071
test al, 1
jne 0x44e1cd
movsxd rdx, dword [rsp + 0x50]
mov rcx, qword [rsp + 0x30]
mov qword [rcx + rdx*8], rax
lea eax, [rdx + 1]
mov dword [rsp + 0x50], eax
lea rax, [rbx + 0xc]
cmp r15, rax
jbe 0x44e250
lea rdx, [rbx + 0x18]
mov rsi, r12
mov rbx, rax
cmp r15, rdx
jb 0x44e250
mov r8, qword [rsp + 0xb0]
mov rdx, qword [rsp + 0x40]
mov rcx, qword [rsp + 0x38]
add r8, rbx
call fcn.0044dd90
cmp qword [rsp + 0xe0], 0
jne 0x44e0b0
cmp qword [rsp + 0xe8], 0
jne 0x44e0b0
cmp qword [rsp + 0xf0], 0
je 0x44e250
mov rdx, r14
mov ecx, 0x20
call sub.msvcrt.dll_fputc
mov r8, qword [rbp + 0x28]
lea rdx, str._016I64x
mov rcx, r14
add r8, rbx
call sub.msvcrt.dll_fprintf
mov r9, r14
mov r8d, 2
mov edx, 1
lea rcx, [0x004f14e2]
call sub.msvcrt.dll_fwrite
mov r8, qword [rsp + 0xe0]
lea rdx, str._016I64x
mov rcx, r14
add r8, r13
call sub.msvcrt.dll_fprintf
mov rdx, r14
mov ecx, 0x20
call sub.msvcrt.dll_fputc
mov r8, qword [rsp + 0xe8]
lea rdx, str._016I64x
mov rcx, r14
add r8, r13
call sub.msvcrt.dll_fprintf
mov rdx, r14
mov ecx, 0x20
call sub.msvcrt.dll_fputc
mov r8, qword [rsp + 0xf0]
lea rdx, str._016I64x
mov rcx, r14
add r8, r13
call sub.msvcrt.dll_fprintf
mov rdx, r14
mov ecx, 0xa
call sub.msvcrt.dll_fputc
test rbx, rbx
mov r12, qword [rsp + 0xe0]
je 0x44e1a2
cmp r12, rsi
ja 0x44e1a2
lea rax, str.smaller
mov rcx, r14
mov edi, 1
lea r8, str.same
cmovb r8, rax
lea rdx, str.__has__s_begin_address_as_predecessor_n
call sub.msvcrt.dll_fprintf
mov r12, qword [rsp + 0xe0]
test r12d, 0x80000000
jne 0x44e225
test byte [rsp + 0xeb], 0x80
jne 0x44e204
mov rax, qword [rsp + 0xf0]
test eax, 0x80000000
jne 0x44e1e0
test rax, rax
jne 0x44e034
mov ecx, dword [rsp + 0x4c]
test ecx, ecx
je 0x44e051
jmp 0x44e03c
mov r9, r14
mov r8d, 0x1e
mov edx, 1
lea rcx, str.__has_negative_unwind_address_n
mov edi, 1
call sub.msvcrt.dll_fwrite
jmp 0x44e051
mov r9, r14
mov r8d, 0x1b
mov edx, 1
lea rcx, str.__has_negative_end_address_n
mov edi, 1
call sub.msvcrt.dll_fwrite
jmp 0x44e1b5
mov r9, r14
mov r8d, 0x1d
mov edx, 1
lea rcx, str.__has_negative_begin_address_n
mov edi, 1
call sub.msvcrt.dll_fwrite
jmp 0x44e1ab
test edi, edi
mov r12, qword [rsp + 0x190]
jne 0x44df06
movsxd rax, dword [rsp + 0x50]
mov rsi, qword [rsp + 0x30]
lea edi, [rax + 1]
cmp edi, 1
mov dword [rsp + 0x70], edi
mov qword [rsi + rax*8], 0xffffffffffffffff
je 0x44e9a0
mov rdi, qword [rsp + 0x30]
lea r9, [0x0044b530]
mov r8d, 8
movsxd rdx, dword [rsp + 0x70]
mov rcx, rdi
call sub.msvcrt.dll_qsort
mov rbx, qword [rdi]
test rbx, rbx
setne byte [rsp + 0x40]
mov rax, qword [rbp]
lea rdi, [0x004f156f]
mov ecx, 7
mov rsi, rax
repe cmpsb byte [rsi], byte [rdi]
je 0x44e8a2
mov rcx, rax
call sub.msvcrt.dll_strlen
lea rsi, [rax + 1]
mov rdi, rax
mov rcx, rsi
call fcn.004d1690
mov rdx, qword [rbp]
mov r8, rsi
mov rcx, rax
call sub.msvcrt.dll_memcpy
cmp rdi, 1
mov rsi, rax
jbe 0x44e2fa
mov byte [rax + 1], 0x78
mov r8, rsi
mov rdx, rbx
mov rcx, r12
call fcn.0044b7a0
mov rcx, rsi
mov rdi, rax
mov qword [rsp + 0x38], rax
call fcn.004d4f88
test rdi, rdi
je 0x44e8a2
mov rdx, qword [rsp + 0x38]
lea r8, [rsp + 0xb8]
mov rcx, r12
call fcn.0042ae20
test eax, eax
je 0x44df06
test r15, r15
je 0x44df06
cmp r15, 0xb
jbe 0x44df06
lea rax, [r12 + 8]
xor ebx, ebx
mov rsi, 0xffffffffffffffff
mov qword [rsp + 0x190], r12
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0xc0]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x1a0], rbp
mov r8, qword [rsp + 0xb0]
mov rdx, qword [rsp + 0x40]
mov rcx, qword [rsp + 0x50]
add r8, rbx
call fcn.0044dd90
cmp qword [rsp + 0xc0], 0
jne 0x44e3c0
cmp qword [rsp + 0xc8], 0
jne 0x44e3c0
cmp qword [rsp + 0xd0], 0
je 0x44df06
test rbx, rbx
je 0x44f180
mov rdx, r14
mov ecx, 0x20
call sub.msvcrt.dll_fputc
mov r8, qword [rsp + 0xd0]
lea rdx, str._016I64x
mov rcx, r14
add r8, r13
call sub.msvcrt.dll_fprintf
mov rbp, qword [rsp + 0xd0]
cmp rbp, rsi
je 0x44e950
lea rdx, str.__rva:__08x_:
mov r8d, ebp
mov rcx, r14
call sub.msvcrt.dll_fprintf
mov r8, qword [rsp + 0xc0]
lea rdx, str._016I64x
mov rcx, r14
add r8, r13
call sub.msvcrt.dll_fprintf
mov r9, r14
mov r8d, 3
mov edx, 1
lea rcx, [0x004f15bc]
call sub.msvcrt.dll_fwrite
mov r8, qword [rsp + 0xc8]
lea rdx, str._016I64x
mov rcx, r14
add r8, r13
call sub.msvcrt.dll_fprintf
mov rdx, r14
mov ecx, 0xa
call sub.msvcrt.dll_fputc
mov rax, qword [rsp + 0xd0]
test rax, rax
jne 0x44e7e4
mov edx, dword [rsp + 0x4c]
test edx, edx
je 0x44e87d
mov rax, qword [rsp + 0x40]
mov r9d, 8
mov rdx, qword [rsp + 0x30]
movsxd r8, dword [rsp + 0x70]
lea rcx, [rax + 0x10]
lea rax, [0x0044b530]
mov qword [rsp + 0x20], rax
call sub.msvcrt.dll_bsearch
mov rcx, qword [rsp + 0xd0]
mov rdx, qword [rax]
cmp rcx, rdx
jb 0x44e4d1
add rax, 8
mov rdx, qword [rax]
cmp rdx, rcx
jbe 0x44e4c5
mov rdi, qword [rsp + 0x38]
cmp rdx, 0xffffffffffffffff
mov edx, 0
cmove rax, rdx
mov rsi, qword [rdi + 0x40]
test rsi, rsi
jne 0x44e4f0
mov rsi, qword [rdi + 0x38]
mov rdi, qword [rsp + 0x190]
mov r8, qword [rdi + 0xf0]
mov rdi, qword [rsp + 0x38]
mov rdx, qword [rdi + 0x28]
sub rdx, qword [r8 + 0xe0]
sub rcx, rdx
cmp rcx, rsi
mov qword [rsp + 0x58], rcx
jae 0x44edab
mov rdi, qword [rsp + 0xb8]
test rax, rax
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], rdi
je 0x44e54b
mov rax, qword [rax]
sub rax, rdx
cmp rsi, rax
mov qword [rsp + 0x60], rax
jb 0x44edca
lea rdx, [rsp + 0xea]
xor eax, eax
mov ecx, 0xa
mov rsi, qword [rsp + 0x68]
mov rdi, rdx
add rsi, qword [rsp + 0x58]
rep stosq qword [rdi], rax
xor eax, eax
lea r10, [rsi + 4]
mov qword [rsp + 0x78], r10
mov dword [rdi], 0
mov word [rdi + 4], ax
movzx r12d, byte [rsi]
mov ecx, r12d
shr r12b, 3
and ecx, 7
mov byte [rsp + 0xe9], r12b
mov byte [rsp + 0xe8], cl
movzx eax, byte [rsi + 1]
lea r9d, [rcx - 1]
mov byte [rsp + 0x74], cl
mov qword [rsp + 0xf0], rax
movzx edi, byte [rsi + 2]
mov byte [rsp + 0xae], al
movzx eax, byte [rsp + 0x100]
mov qword [rsp + 0xf8], rdi
movzx edx, byte [rsi + 3]
and eax, 0xfffffff0
mov byte [rsp + 0xa8], dil
mov qword [rsp + 0x118], r10
mov r11d, edx
shr dl, 4
and r11d, 0xf
mov byte [rsp + 0x80], dl
or eax, r11d
mov byte [rsp + 0x88], r11b
mov byte [rsp + 0x100], al
movzx eax, dl
lea rdx, [rdi + rdi + 2]
mov qword [rsp + 0x108], rax
and edx, 0x3fc
cmp r12b, 1
lea rax, [rdx + 4]
mov qword [rsp + 0x110], rdx
mov qword [rsp + 0xe0], rax
lea r8, [rsi + rax]
jb 0x44ea09
cmp r12b, 3
jbe 0x44e9c2
cmp r12b, 4
mov qword [rsp + 0x90], rdx
jne 0x44ea09
mov rax, qword [rsp + 0x190]
mov byte [rsp + 0xa0], r9b
mov rcx, r8
mov qword [rsp + 0x98], r8
mov rax, qword [rax + 8]
call qword [rax + 0x38]
mov r8, qword [rsp + 0x98]
mov qword [rsp + 0x128], rax
mov rax, qword [rsp + 0x190]
lea rcx, [r8 + 4]
mov rax, qword [rax + 8]
call qword [rax + 0x38]
mov r8, qword [rsp + 0x98]
mov qword [rsp + 0x130], rax
mov rax, qword [rsp + 0x190]
lea rcx, [r8 + 8]
mov r10, qword [rax + 8]
call qword [r10 + 0x38]
mov rdx, qword [rsp + 0x90]
movzx r9d, byte [rsp + 0xa0]
mov qword [rsp + 0x138], rax
add rdx, 0x10
cmp r9b, 1
mov qword [rsp + 0xe0], rdx
jbe 0x44f19c
mov r8d, dword [rsp + 0x74]
lea rdx, str._tVersion__u__unknown_._n
mov rcx, r14
and r8d, 7
call sub.msvcrt.dll_fprintf
mov rax, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x58]
mov rdi, rax
sub rdi, rcx
mov rdx, rdi
xor edi, edi
cmp rcx, rax
jae 0x44e87d
mov qword [rsp + 0x68], rbx
mov rbx, rdi
mov rdi, rsi
mov rsi, rdx
jmp 0x44e76b
movzx r8d, byte [rdi + rbx]
lea rdx, str.__02x
mov rcx, r14
call sub.msvcrt.dll_fprintf
cmp r12d, 0xf
je 0x44e9b0
add rbx, 1
cmp rsi, rbx
je 0x44ed84
mov r12d, ebx
and r12d, 0xf
jne 0x44e740
lea rdx, str._t___03x:
mov r8d, ebx
mov rcx, r14
call sub.msvcrt.dll_fprintf
movzx r8d, byte [rdi + rbx]
lea rdx, str.__02x
mov rcx, r14
call sub.msvcrt.dll_fprintf
jmp 0x44e75e
movabs rdx, 0xaaaaaaaaaaaaaaab
mov rax, rbx
mov dword [rsp + 0x4c], 1
mul rdx
shr rdx, 3
lea rdx, [rdx + rdx*2]
lea r15, [rdx*4]
jmp 0x44deb9
mov rax, qword [r12 + 0xf0]
mov r13, qword [rax + 0xe0]
jmp 0x44dfed
test al, 1
je 0x44e48b
and rax, 0xfffffffffffffffe
mov r8d, 0x1a
mov r9, r14
lea rcx, str._t_shares_information_with
mov rsi, rax
mov edx, 1
mov rax, qword [rsp + 0x1a0]
mov rdi, qword [rax + 0x28]
call sub.msvcrt.dll_fwrite
lea r8, [r13 + rsi]
cmp rdi, r8
ja 0x44e849
mov rax, qword [rsp + 0x1a0]
lea rdx, [r8 + 0xc]
mov rax, qword [rax + 0xe0]
mov rax, qword [rax + 0x58]
mov rsi, qword [rax]
add rsi, rdi
cmp rdx, rsi
jbe 0x44ed31
mov r9, r14
mov r8d, 0x15
mov edx, 1
lea rcx, str.unknown_pdata_element
call sub.msvcrt.dll_fwrite
mov r9, r14
mov r8d, 2
mov edx, 1
lea rcx, [0x004f1605]
call sub.msvcrt.dll_fwrite
lea rax, [rbx + 0xc]
cmp r15, rax
jbe 0x44df06
lea rdx, [rbx + 0x18]
mov rsi, rbp
mov rbx, rax
cmp r15, rdx
jae 0x44e381
jmp 0x44df06
lea r8, [0x004f1576]
mov rdx, rbx
mov rcx, r12
call fcn.0044b7a0
test rax, rax
mov qword [rsp + 0x38], rax
jne 0x44e93c
cmp byte [rsp + 0x40], 0
je 0x44e93c
lea r8, [0x004f157d]
mov rdx, rbx
mov rcx, r12
call fcn.0044b7a0
test rax, rax
mov qword [rsp + 0x38], rax
jne 0x44e321
lea r8, [0x004f1320]
mov rdx, rbx
mov rcx, r12
call fcn.0044b7a0
test rax, rax
mov qword [rsp + 0x38], rax
jne 0x44e321
lea r8, [0x004f156f]
mov rdx, rbx
mov rcx, r12
call fcn.0044b7a0
test rax, rax
mov qword [rsp + 0x38], rax
jne 0x44e321
lea r8, [0x004f131a]
mov rdx, rbx
mov rcx, r12
call fcn.0044b7a0
mov qword [rsp + 0x38], rax
cmp qword [rsp + 0x38], 0
je 0x44df06
jmp 0x44e321
mov r9, r14
mov r8d, 0x1b
mov edx, 1
lea rcx, str._also_used_for_function_at
call sub.msvcrt.dll_fwrite
mov r8, qword [rsp + 0xc0]
mov rcx, r14
lea rdx, str._016I64x
add r8, r13
call sub.msvcrt.dll_fprintf
mov rdx, r14
mov ecx, 0xa
call sub.msvcrt.dll_fputc
jmp 0x44e87d
mov rbx, qword [rsi]
test rbx, rbx
setne byte [rsp + 0x40]
jmp 0x44e2ac
mov rdx, r14
mov ecx, 0xa
call sub.msvcrt.dll_fputc
jmp 0x44e75e
mov rax, qword [rsp + 0x190]
mov byte [rsp + 0x98], r9b
mov rcx, r8
mov qword [rsp + 0x90], rdx
mov rax, qword [rax + 8]
call qword [rax + 0x38]
mov rdx, qword [rsp + 0x90]
movzx r9d, byte [rsp + 0x98]
mov qword [rsp + 0x120], rax
add rdx, 8
mov qword [rsp + 0xe0], rdx
cmp r9b, 1
ja 0x44e6f1
mov r8d, dword [rsp + 0x74]
lea rdx, str._tVersion:__d__Flags:
mov rcx, r14
and r8d, 7
call sub.msvcrt.dll_fprintf
cmp r12b, 4
ja case.default.0x44ea47
lea rdx, [0x004f1928]
movzx eax, r12b
movsxd rax, dword [rdx + rax*4]
add rax, rdx
jmp rax
mov r9, r14
mov r8d, 0x25
mov edx, 1
lea rcx, str.UNW_FLAG_EHANDLER__UNW_FLAG_UHANDLER
call sub.msvcrt.dll_fwrite
mov rdx, r14
mov ecx, 0xa
call sub.msvcrt.dll_fputc
movzx eax, byte [rsp + 0xa8]
lea rdx, str._tNbr_codes:__u_
mov rcx, r14
mov r8d, eax
mov dword [rsp + 0x90], eax
call sub.msvcrt.dll_fprintf
movzx eax, byte [rsp + 0x80]
lea rdx, str.Prologue_size:_0x_02x__Frame_offset:_0x_x_
mov rcx, r14
movzx r8d, byte [rsp + 0xae]
mov r9d, eax
mov dword [rsp + 0xa8], eax
call sub.msvcrt.dll_fprintf
movzx eax, byte [rsp + 0x100]
lea r8, [0x004f13b3]
and eax, 0xf
mov byte [rsp + 0xae], al
je 0x44eaec
mov rdx, qword [rsp + 0x88]
lea rax, [0x004f2c40]
and edx, 0xf
mov r8, qword [rax + rdx*8]
lea rdx, str.Frame_reg:__s_n
mov rcx, r14
call sub.msvcrt.dll_fprintf
mov rcx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x78]
mov rdx, qword [rsp + 0x68]
add rdx, qword [rcx + 0x38]
lea rax, [rax + rdi*2]
cmp rax, rdx
jbe 0x44edee
mov r8d, dword [rsp + 0x90]
lea rdx, str.Too_many_unwind_codes___ld__n
mov rcx, r14
call sub.msvcrt.dll_fprintf
cmp r12b, 1
jb 0x44ebfd
cmp r12b, 3
jbe 0x44f143
cmp r12b, 4
jne 0x44ebfd
mov r9, r14
mov r8d, 0xf
mov edx, 1
lea rcx, str._tChain:_start:
call sub.msvcrt.dll_fwrite
mov r8, qword [rsp + 0x128]
lea rdx, str._016I64x
mov rcx, r14
call sub.msvcrt.dll_fprintf
mov r9, r14
mov r8d, 7
mov edx, 1
lea rcx, str.__end:
call sub.msvcrt.dll_fwrite
mov r8, qword [rsp + 0x130]
lea rdx, str._016I64x
mov rcx, r14
call sub.msvcrt.dll_fprintf
mov r8d, 0x10
mov r9, r14
mov edx, 1
lea rcx, str._n_t_unwind_data:
call sub.msvcrt.dll_fwrite
mov r8, qword [rsp + 0x138]
lea rdx, str._016I64x
mov rcx, r14
call sub.msvcrt.dll_fprintf
mov r9, r14
mov r8d, 2
mov edx, 1
lea rcx, [0x004f1605]
call sub.msvcrt.dll_fwrite
mov rdi, qword [rsp + 0x58]
add rdi, qword [rsp + 0xe0]
cmp qword [rsp + 0x60], rdi
jbe 0x44e87d
mov r9, r14
mov r8d, 0xc
mov edx, 1
lea rcx, str._tUser_data:_n
xor r12d, r12d
call sub.msvcrt.dll_fwrite
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x58], rbp
mov rsi, qword [rsp + 0x60]
mov qword [rsp + 0x68], rdi
add rax, rdi
sub rsi, rdi
mov rdi, r12
mov r12, rbx
mov rbx, rax
jmp 0x44ec81
movzx r8d, byte [rbx + rdi]
lea rdx, str.__02x
mov rcx, r14
call sub.msvcrt.dll_fprintf
cmp ebp, 0xf
je 0x44f111
add rdi, 1
cmp rsi, rdi
je 0x44f123
mov ebp, edi
and ebp, 0xf
jne 0x44ec57
lea rdx, str._t___03x:
mov r8d, edi
mov rcx, r14
call sub.msvcrt.dll_fprintf
movzx r8d, byte [rbx + rdi]
lea rdx, str.__02x
mov rcx, r14
call sub.msvcrt.dll_fprintf
jmp 0x44ec74
mov r9, r14
mov r8d, 0x11
mov edx, 1
lea rcx, str.UNW_FLAG_EHANDLER
call sub.msvcrt.dll_fwrite
jmp 0x44ea63
mov r9, r14
mov r8d, 4
mov edx, 1
lea rcx, [0x004f13b3]
call sub.msvcrt.dll_fwrite
jmp 0x44ea63
mov r9, r14
mov r8d, 0x11
mov edx, 1
lea rcx, str.UNW_FLAG_UHANDLER
call sub.msvcrt.dll_fwrite
jmp 0x44ea63
mov rax, qword [rsp + 0x30]
mov rbx, 0xffffffffffffffff
mov byte [rsp + 0x40], 1
mov dword [rsp + 0x70], 1
mov qword [rax], rbx
jmp 0x44e2ac
mov rcx, qword [rsp + 0x50]
lea rdx, [rsp + 0xe0]
sub r8, rdi
add r8, qword [rsp + 0xb0]
call fcn.0044dd90
mov r9, r14
mov r8d, 0x13
mov edx, 1
lea rcx, str.pdata_element_at_0x
call sub.msvcrt.dll_fwrite
mov r8, qword [rsp + 0xf0]
lea rdx, str._016I64x
mov rcx, r14
call sub.msvcrt.dll_fprintf
jmp 0x44e863
mov eax, dword [rsp + 0x60]
sub eax, dword [rsp + 0x58]
mov rbx, qword [rsp + 0x68]
test al, 0xf
je 0x44e87d
mov rdx, r14
mov ecx, 0xa
call sub.msvcrt.dll_fputc
jmp 0x44e87d
mov r9, r14
mov r8d, 0x1f
mov edx, 1
lea rcx, str.warning:_xdata_section_corrupt_n
call sub.msvcrt.dll_fwrite
jmp 0x44e87d
mov r9, r14
mov r8d, 0x1e
mov edx, 1
lea rcx, str.warning:_xdata_section_corrupt
call sub.msvcrt.dll_fwrite
mov qword [rsp + 0x60], rsi
jmp 0x44e54b
cmp qword [rsp + 0x78], 0
je 0x44eb32
test rdi, rdi
je 0x44eb32
mov dword [rsp + 0x80], 0
cmp byte [rsp + 0x74], 2
je 0x44f214
mov eax, dword [rsp + 0xa8]
mov qword [rsp + 0x98], r15
mov ecx, 1
mov r15, qword [rsp + 0x190]
mov qword [rsp + 0x90], rbp
mov esi, dword [rsp + 0x80]
mov qword [rsp + 0xa0], r13
mov qword [rsp + 0x80], rbx
mov ebx, ecx
shl eax, 4
mov byte [rsp + 0xaf], r12b
mov dword [rsp + 0xa8], eax
mov rax, qword [rsp + 0x88]
and eax, 0xf
mov qword [rsp + 0x88], rax
mov rax, qword [rsp + 0x78]
lea r10d, [rsi + rsi]
mov rcx, r14
lea rdx, str._t__pc0x_02x:
lea r12, [rax + r10]
movzx r8d, byte [r12]
movzx r13d, byte [r12 + 1]
call sub.msvcrt.dll_fprintf
movzx r8d, byte [r12 + 1]
shr r13b, 4
movzx ebp, r13b
and r8d, 0xf
cmp r8b, 0xa
ja case.default.0x44eed0
lea rcx, [0x004f193c]
movzx r8d, r8b
movsxd rax, dword [rcx + r8*4]
add rax, rcx
jmp rax
mov rax, qword [r15 + 8]
lea rcx, [r12 + 2]
add esi, 2
call qword [rax + 0x38]
mov r9d, eax
mov r8d, ebp
mov rcx, r14
lea rdx, str.save_xmm_u_at_rsp__0x_x
shl r9d, 4
call sub.msvcrt.dll_fprintf
mov eax, ebx
xor eax, 1
test eax, eax
je 0x44ef1d
mov r9, r14
mov r8d, 0xe
mov edx, 1
lea rcx, str.__Unexpected__
call sub.msvcrt.dll_fwrite
mov rdx, r14
mov ecx, 0xa
call sub.msvcrt.dll_fputc
lea eax, [rsi + 1]
cmp rdi, rax
mov rsi, rax
ja 0x44ee7b
mov rbp, qword [rsp + 0x90]
mov r15, qword [rsp + 0x98]
mov r13, qword [rsp + 0xa0]
movzx r12d, byte [rsp + 0xaf]
mov rbx, qword [rsp + 0x80]
jmp 0x44eb32
mov rax, qword [r15 + 8]
lea rcx, [r12 + 2]
add esi, 1
call qword [rax + 0x50]
jmp 0x44eee1
mov rax, qword [r15 + 8]
lea rcx, [r12 + 2]
add esi, 2
call qword [rax + 0x38]
lea r9d, [rax*8]
mov r8d, ebp
mov rcx, r14
lea rdx, str.save_mm_u_at_rsp__0x_x
call sub.msvcrt.dll_fprintf
mov eax, ebx
xor eax, 1
jmp 0x44eeff
cmp byte [rsp + 0x74], 1
jne 0x44f344
mov rax, qword [r15 + 8]
lea rcx, [r12 + 2]
add esi, 1
call qword [rax + 0x50]
jmp 0x44ef8a
mov rax, qword [r15 + 8]
lea rcx, [r12 + 2]
add esi, 2
call qword [rax + 0x38]
mov r9d, eax
lea rax, [0x004f2c40]
mov rcx, r14
mov r8, qword [rax + rbp*8]
lea rdx, str.save__s_at_rsp__0x_x
call sub.msvcrt.dll_fprintf
mov eax, ebx
xor eax, 1
jmp 0x44eeff
mov rax, qword [r15 + 8]
lea rcx, [r12 + 2]
test r13b, r13b
jne 0x44f206
call qword [rax + 0x50]
add esi, 1
lea r8d, [rax*8]
lea rdx, str.alloc_large_area:_rsp__rsp___0x_x
mov rcx, r14
call sub.msvcrt.dll_fprintf
jmp 0x44ef1d
lea rax, [0x004f2c40]
mov rcx, r14
mov r8, qword [rax + rbp*8]
lea rdx, str.push__s
call sub.msvcrt.dll_fprintf
jmp 0x44ef1d
mov r9, r14
mov r8d, 0x2d
mov edx, 1
lea rcx, str.interrupt_entry__SS__old_RSP__EFLAGS__CS__RIP
call sub.msvcrt.dll_fwrite
test r13b, r13b
je 0x44f30a
sub r13b, 1
je 0x44f2eb
lea rdx, str.__unknown__u__
mov r8d, ebp
mov rcx, r14
call sub.msvcrt.dll_fprintf
jmp 0x44ef1d
mov rbx, qword [rsp + 0x88]
lea rax, [0x004f2c40]
mov dword [rsp + 0x20], ebp
mov rcx, r14
mov r9d, dword [rsp + 0xa8]
lea rdx, str.FPReg:__s__rsp__0x_x__info__0x_x_
mov r8, qword [rax + rbx*8]
call sub.msvcrt.dll_fprintf
xor eax, eax
cmp byte [rsp + 0xae], 0
sete al
xor ebx, ebx
jmp 0x44eeff
lea r8d, [rbp*8 + 8]
mov rcx, r14
lea rdx, str.alloc_small_area:_rsp__rsp___0x_x
call sub.msvcrt.dll_fprintf
jmp 0x44ef1d
mov rax, qword [r15 + 8]
lea rcx, [r12 + 2]
add esi, 1
call qword [rax + 0x50]
lea r9d, [rax*8]
jmp 0x44efdc
mov rdx, r14
mov ecx, 0xa
call sub.msvcrt.dll_fputc
jmp 0x44ec74
mov rdi, qword [rsp + 0x68]
mov rbx, r12
mov eax, dword [rsp + 0x60]
mov rbp, qword [rsp + 0x58]
sub eax, edi
test al, 0xf
je 0x44e87d
jmp 0x44ed99
mov r8d, 0xa
mov r9, r14
mov edx, 1
lea rcx, str._tHandler:
call sub.msvcrt.dll_fwrite
mov rax, qword [rsp + 0x190]
mov r8, qword [rsp + 0x120]
mov rax, qword [rax + 0xf0]
add r8, qword [rax + 0xe0]
jmp 0x44ebd4
mov rax, qword [rsp + 0x38]
lea rdx, str._nDump_of__s_n
mov rcx, r14
mov r8, qword [rax]
call sub.msvcrt.dll_fprintf
jmp 0x44e3c9
mov r8d, dword [rsp + 0x74]
lea rdx, str._tVersion:__d__Flags:
mov rcx, r14
and r8d, 7
call sub.msvcrt.dll_fprintf
mov r9, r14
mov r8d, 0x12
mov edx, 1
lea rcx, str.UNW_FLAG_CHAININFO
call sub.msvcrt.dll_fwrite
jmp 0x44ea63
lea rdx, str.unknown_flags_value_0x_x
mov r8d, r12d
mov rcx, r14
and r8d, 0x1f
call sub.msvcrt.dll_fprintf
jmp 0x44ea63
lea rdx, str.Unknown:__x
and r8d, 0xf
mov rcx, r14
call sub.msvcrt.dll_fprintf
jmp 0x44ef1d
call qword [rax + 0x38]
add esi, 2
mov r8d, eax
jmp 0x44f020
movzx eax, byte [rsi + 5]
and eax, 0xf
cmp al, 6
jne 0x44ee19
movzx r8d, byte [rsi + 4]
lea rdx, str._tv2_epilog__length:__02x__at_pc:
mov rcx, r14
mov rax, qword [rsp + 0xc8]
sub eax, dword [rsp + 0xc0]
mov dword [rsp + 0x80], eax
call sub.msvcrt.dll_fprintf
movzx eax, byte [rsi + 5]
shr al, 4
test al, al
je 0x44f276
movzx eax, byte [rsi + 4]
lea rdx, str._0x_x
mov rcx, r14
mov r8d, dword [rsp + 0x80]
sub r8d, eax
call sub.msvcrt.dll_fprintf
mov eax, 1
mov rsi, rbx
mov ebx, eax
jmp 0x44f29f
mov r9, r14
mov r8d, 6
mov edx, 1
lea rcx, str.__pad_
call sub.msvcrt.dll_fwrite
add ebx, 1
mov ecx, ebx
cmp rdi, rcx
jbe 0x44f31c
lea edx, [rbx + rbx]
add rdx, qword [rsp + 0x78]
movzx eax, byte [rdx + 1]
mov r8d, eax
and r8d, 0xf
cmp r8b, 6
jne 0x44f31c
movzx edx, byte [rdx]
shr al, 4
movzx eax, al
shl eax, 8
or eax, edx
je 0x44f282
mov r8d, dword [rsp + 0x80]
lea rdx, str._0x_x
mov rcx, r14
sub r8d, eax
call sub.msvcrt.dll_fprintf
jmp 0x44f29c
mov r9, r14
mov r8d, 0xb
mov edx, 1
lea rcx, str._ErrorCode_
call sub.msvcrt.dll_fwrite
jmp 0x44ef1d
mov rdx, r14
mov ecx, 0x29
call sub.msvcrt.dll_fputc
jmp 0x44ef1d
mov dword [rsp + 0x80], ebx
mov rdx, r14
mov rbx, rsi
mov rsi, rcx
mov ecx, 0xa
call sub.msvcrt.dll_fputc
cmp rdi, rsi
jbe 0x44eb32
jmp 0x44ee19
movzx r8d, byte [r12]
lea rdx, str.epilog__02x__01x
mov r9d, ebp
mov rcx, r14
call sub.msvcrt.dll_fprintf
jmp 0x44ef03