Function at 0x40cab0
Capabilities:
Create thread
Get common file path
Get process heap flags
Query environment variable

Disassembly:
push ebp
mov ecx, 0x41
mov ebp, esp
push edi
push esi
mov esi, eax
push ebx
sub esp, 0x7c0
mov dword [ebp - 0x79c], eax
mov dword [ebp - 0x790], edx
lea eax, [ebp - 0x5b0]
lea edx, [ebp - 0x52c]
mov dword [ebp - 0x5ac], eax
mov dword [ebp - 0x5b0], eax
mov edi, edx
xor eax, eax
mov dword [ebp - 0x5e4], 0
rep stosd dword es:[edi], eax
mov eax, esi
mov dword [ebp - 0x5e0], 0xffffffff
shr eax, 1
mov dword [ebp - 0x5dc], 0
xor eax, 1
mov dword [ebp - 0x5d8], 0
and eax, 1
mov dword [ebp - 0x5d4], 0
shl eax, 3
mov dword [ebp - 0x5c8], 0
mov dword [ebp - 0x5c4], 0
mov dword [ebp - 0x5c0], 0
mov dword [ebp - 0x5bc], 0xffffffff
mov dword [ebp - 0x5b8], 0xffffffff
mov dword [ebp - 0x5b4], 0xffffffff
mov dword [ebp - 0x544], 0
mov dword [ebp - 0x534], 0
mov dword [ebp - 0x540], 0
mov dword [ebp - 0x53c], 0
mov dword [ebp - 0x538], 0
mov dword [ebp - 0x530], 0xffffffff
mov dword [ebp - 0x428], 0
mov dword [ebp - 0x424], 0
mov dword [ebp - 0x420], 0
mov dword [ebp - 0x7ac], eax
lea esi, [ebp - 0x5a8]
nop
mov dword [esp + 4], 0xffffffff
mov dword [esp], esi
call dword [sym.imp.kernel32.dll_WaitForDebugEvent]
test eax, eax
push edi
push edi
je 0x40d148
cmp dword [ebp - 0x5a8], 3
jne 0x40ce28
mov ebx, dword [ebp - 0x544]
test ebx, ebx
jne 0x40db02
mov eax, dword [0x4ab5cc]
cmp dword [ebp - 0x5a4], eax
jne 0x40db02
lea eax, [ebp - 0x774]
mov dword [esp], 0x202
mov dword [esp + 4], eax
mov dword [ebp - 0x78c], 1
mov dword [ebp - 0x784], 0
mov dword [ebp - 0x780], 0
mov dword [ebp - 0x77c], 0
mov dword [ebp - 0x778], 0
mov dword [ebp - 0x788], 0x10
call dword [0x4ae8bc]
push ecx
push ecx
mov dword [esp + 8], 0
mov dword [esp + 4], 1
mov dword [esp], 2
call dword [0x4ae8b4]
sub esp, 0xc
mov edi, eax
cmp eax, 0xffffffff
je 0x40ce68
lea eax, [ebp - 0x78c]
mov dword [esp + 0x10], 4
mov dword [esp + 0xc], eax
mov dword [esp + 8], 4
mov eax, dword [0x4ae8b0]
mov dword [esp + 4], 0xffff
mov dword [esp], edi
mov dword [ebp - 0x794], eax
call eax
mov eax, dword [ebp - 0x790]
sub esp, 0x14
and eax, 0xffff
mov word [ebp - 0x784], 2
mov dword [ebp - 0x780], 0
mov dword [esp], eax
call dword [0x4ae898]
mov word [ebp - 0x782], ax
lea eax, [ebp - 0x784]
push edx
mov dword [esp + 8], 0x10
mov dword [esp + 4], eax
mov dword [esp], edi
call dword [0x4ae88c]
sub esp, 0xc
inc eax
je 0x40ce10
mov dword [esp + 4], 1
mov dword [esp], edi
call dword [0x4ae89c]
inc eax
push ecx
push ecx
je 0x40ce10
lea eax, [ebp - 0x788]
mov dword [esp], edi
mov dword [esp + 8], eax
lea eax, [ebp - 0x784]
mov dword [esp + 4], eax
call dword [0x4ae894]
sub esp, 0xc
inc eax
je 0x40ce10
xor edx, edx
lea eax, [ebp - 0x5e4]
call fcn.0040c180
test byte [ebp - 0x79c], 1
je 0x40ceb0
xor eax, eax
mov ax, word [ebp - 0x782]
mov dword [esp], eax
call dword [0x4ae8a0]
mov ebx, eax
push edx
and ebx, 0xffff
mov dword [esp], 2
call dword [sym.imp.ucrtbase.dll___acrt_iob_func]
mov dword [esp + 8], ebx
mov dword [esp + 4], str.target_remote_localhost:_d_n
mov dword [esp], eax
call fcn.00408270
lea ecx, [ebp - 0x214]
mov dword [ebp - 0x214], 1
mov dword [ebp - 0x210], edi
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], ecx
mov dword [esp], 0
call dword [0x4ae8a8]
sub esp, 0x14
test eax, eax
jg 0x40d0c0
test byte [0x438730], 2
jne 0x40d904
nop
mov dword [esp], edi
call dword [0x4ae890]
push eax
lea esp, [ebp - 0xc]
xor eax, eax
pop ebx
pop esi
pop edi
pop ebp
ret
xor edx, edx
lea eax, [ebp - 0x5e4]
call fcn.0040c180
test eax, eax
je 0x40d148
mov eax, dword [ebp - 0x5a0]
mov dword [esp + 8], 0x10002
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x5a4]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_ContinueDebugEvent]
sub esp, 0xc
jmp 0x40cbd0
test byte [0x438730], 2
je 0x40ce1a
call dword [0x4ae8b8]
mov dword [esp + 0xc], str.Failed_to_create_socket:__u_n
mov dword [esp + 0x10], eax
mov dword [esp + 8], str.gdb_startup
mov dword [esp + 4], 0x438730
mov dword [esp], 1
call fcn.00408760
lea esp, [ebp - 0xc]
pop ebx
xor eax, eax
pop esi
pop edi
pop ebp
ret
mov ax, word [ebp - 0x782]
mov dword [esp + 8], 0x18
mov dword [esp + 4], 0
mov word [ebp - 0x7a8], ax
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_HeapAlloc]
sub esp, 0xc
test eax, eax
je 0x40db3c
mov dword [esp], str.WINE_GDB
mov dword [ebp - 0x798], eax
call dword [sym.imp.ucrtbase.dll_getenv]
mov edx, dword [ebp - 0x798]
mov dword [ebp - 0x7a0], eax
test eax, eax
je 0x40d97d
lea ecx, [ebp - 0x214]
mov dword [esp], 0x104
mov dword [esp + 4], ecx
mov dword [ebp - 0x7b0], edx
mov dword [ebp - 0x798], ecx
call dword [sym.imp.kernel32.dll_GetTempPathW]
mov ecx, dword [ebp - 0x798]
push eax
mov dword [ebp - 0x7a4], ecx
push eax
lea eax, [ebp - 0x41c]
mov dword [esp], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0
mov dword [esp + 4], 0x43c2c0
call dword [sym.imp.kernel32.dll_GetTempFileNameW]
lea eax, [ebp - 0x41c]
sub esp, 0x10
mov dword [esp + 4], 0x43c2c8
mov dword [esp], eax
call dword [sym.imp.ucrtbase.dll__wfopen]
mov ecx, dword [ebp - 0x7a4]
mov dword [ebp - 0x798], eax
test eax, eax
je 0x40d0b5
lea ebx, [ebp - 0x41c]
mov dword [esp], ebx
call sub.kernel32.dll_wine_get_unix_file_name
mov ebx, eax
xor eax, eax
mov ax, word [ebp - 0x7a8]
mov dword [esp], eax
call dword [0x4ae8a0]
and eax, 0xffff
push edx
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x798]
mov dword [esp + 4], str.target_remote_localhost:_d_n
mov dword [esp], eax
call fcn.00408270
mov eax, dword [ebp - 0x798]
mov dword [esp + 4], str.set_prompt_Wine_gdb___n
mov dword [esp], eax
call fcn.00408270
mov eax, dword [ebp - 0x798]
mov dword [esp + 4], str.sharedlibrary_n
mov dword [esp], eax
call fcn.00408270
mov eax, dword [ebp - 0x798]
mov dword [esp + 4], str.set_step_mode_on_n
mov dword [esp], eax
call fcn.00408270
mov eax, dword [ebp - 0x798]
mov dword [esp + 8], ebx
mov dword [esp + 4], str.shell_rm__f___s__n
mov dword [esp], eax
call fcn.00408270
mov eax, dword [ebp - 0x798]
mov dword [esp], eax
call dword [sym.imp.ucrtbase.dll_fclose]
mov edx, dword [ebp - 0x7b0]
mov ecx, dword [ebp - 0x7ac]
mov eax, dword [ebp - 0x7a0]
mov dword [edx + 0x10], ebx
mov dword [edx], str.xterm
mov dword [edx + 4], 0x43c31f
mov dword [edx + 8], eax
mov dword [edx + 0xc], 0x43c322
mov dword [edx + 0x14], 0
add edx, ecx
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], edx
mov dword [esp + 8], 0x4082b0
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [sym.imp.kernel32.dll_CreateThread]
mov ecx, dword [ebp - 0x7a4]
sub esp, 0x18
mov ebx, eax
mov dword [ebp - 0x5e4], ebx
jmp 0x40cdbd
lea eax, [ebp - 0x788]
mov dword [ebp - 0x41c], 1
mov dword [esp + 8], eax
lea eax, [ebp - 0x784]
mov dword [esp + 4], eax
mov dword [esp], edi
call dword [0x4ae888]
sub esp, 0xc
mov dword [ebp - 0x5e0], eax
cmp eax, 0xffffffff
je 0x40ce10
test byte [0x438730], 8
jne 0x40d9d7
lea edx, [ebp - 0x41c]
mov dword [esp], eax
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], 4
mov dword [esp + 8], 1
mov dword [esp + 4], 6
mov eax, dword [ebp - 0x794]
call eax
sub esp, 0x14
mov dword [esp], edi
call dword [0x4ae890]
push eax
jmp 0x40ce3d
mov dword [esp + 4], 1
mov dword [esp], 0
call dword [sym.imp.kernel32.dll_SetConsoleCtrlHandler]
push eax
push eax
lea eax, [ebp - 0x214]
mov dword [ebp - 0x7ac], eax
lea eax, [ebp - 0x41c]
mov dword [ebp - 0x79c], eax
nop
mov eax, dword [ebp - 0x5e0]
mov esi, dword [ebp - 0x7ac]
mov dword [ebp - 0x418], eax
mov dword [ebp - 0x210], eax
mov eax, dword [ebp - 0x79c]
mov dword [ebp - 0x41c], 1
mov dword [ebp - 0x214], 1
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], esi
mov dword [esp + 8], 0
mov dword [esp + 4], eax
mov dword [esp], 0
call dword [0x4ae8a8]
sub esp, 0x14
inc eax
je 0x40d582
mov eax, dword [ebp - 0x5e0]
mov dword [esp + 4], esi
mov dword [esp], eax
mov ebx, dword [0x4ae8c0]
call ebx
test eax, eax
push esi
push esi
jne 0x40d98c
mov eax, dword [ebp - 0x79c]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x5e0]
mov dword [esp], eax
call ebx
test eax, eax
push ecx
push ecx
je 0x40d178
mov eax, dword [ebp - 0x5d4]
mov ecx, dword [ebp - 0x5d8]
mov dword [ebp - 0x790], eax
cmp eax, ecx
jg 0x40db47
mov eax, dword [ebp - 0x790]
mov ebx, dword [0x4ae8a4]
mov esi, dword [sym.imp.ucrtbase.dll_realloc]
mov edx, eax
jmp 0x40d297
add eax, edx
sub ecx, edx
dec ecx
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x5e0]
mov dword [esp + 0xc], 0
mov dword [esp + 8], ecx
mov dword [esp], eax
call ebx
sub esp, 0x10
test eax, eax
jle 0x40d2d0
mov edx, dword [ebp - 0x5d4]
mov ecx, dword [ebp - 0x5d8]
add edx, eax
mov dword [ebp - 0x5d4], edx
cmp edx, ecx
jg 0x40dae5
mov edi, ecx
sub edi, edx
cmp eax, edi
jl 0x40d878
lea edi, [edx + 0x7f]
mov eax, dword [ebp - 0x5dc]
cmp edi, ecx
jl 0x40d248
sub ecx, 0xffffff80
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [ebp - 0x5d8], ecx
call esi
mov ecx, dword [ebp - 0x5d8]
mov dword [ebp - 0x5dc], eax
mov edx, dword [ebp - 0x5d4]
jmp 0x40d248
mov eax, dword [ebp - 0x5d4]
mov edx, dword [ebp - 0x5dc]
mov byte [edx + eax], 0
mov eax, dword [ebp - 0x5d4]
cmp eax, dword [ebp - 0x790]
jle 0x40d178
mov edi, dword [ebp - 0x5dc]
mov edx, dword [ebp - 0x534]
test edx, edx
lea esi, [edi + eax]
mov dword [ebp - 0x790], esi
jne 0x40d434
mov dword [ebp - 0x794], edi
lea esi, [esi]
mov esi, dword [ebp - 0x794]
mov eax, dword [ebp - 0x790]
sub eax, esi
mov dword [esp], esi
mov dword [esp + 8], eax
mov dword [esp + 4], 0x24
call dword [sym.imp.ucrtbase.dll_memchr]
mov esi, eax
test eax, eax
je 0x40d428
mov edi, dword [ebp - 0x790]
mov dword [esp + 4], 0x23
mov eax, edi
mov dword [esp], esi
sub eax, esi
mov dword [esp + 8], eax
call dword [sym.imp.ucrtbase.dll_memchr]
mov ebx, eax
test eax, eax
je 0x40d428
mov eax, edi
sub eax, ebx
cmp eax, 2
jle 0x40d428
lea eax, [ebp - 0x774]
mov dword [esp + 4], str._02x
mov dword [esp + 8], eax
mov dword [esp], ebx
call fcn.004083b0
dec eax
jne 0x40d428
mov eax, ebx
lea edi, [ebx + 3]
sub eax, esi
mov dword [ebp - 0x794], edi
dec eax
lea edi, [esi + 1]
mov dword [ebp - 0x798], eax
test eax, eax
jle 0x40d8c8
mov eax, edi
xor edx, edx
nop
inc eax
xor ecx, ecx
mov cl, byte [eax - 1]
add edx, ecx
cmp ebx, eax
jne 0x40d3c0
and edx, 0xff
mov ecx, dword [ebp - 0x774]
mov al, byte [0x438730]
cmp ecx, edx
je 0x40d5a0
test al, 2
jne 0x40d698
mov eax, dword [ebp - 0x5e0]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 1
mov dword [esp + 4], 0x43c3be
mov dword [esp], eax
call dword [0x4ae8ac]
sub esp, 0x10
mov eax, dword [ebp - 0x534]
test eax, eax
je 0x40d318
lea esi, [esi]
mov eax, dword [ebp - 0x5d4]
mov edi, dword [ebp - 0x5dc]
mov dword [ebp - 0x7a0], 0
nop
mov dword [esp], edi
mov dword [esp + 8], eax
mov dword [esp + 4], 0x24
call dword [sym.imp.ucrtbase.dll_memchr]
mov edi, eax
test eax, eax
je 0x40d8cf
mov esi, dword [ebp - 0x790]
mov dword [esp + 4], 0x23
mov eax, esi
mov dword [esp], edi
sub eax, edi
mov dword [esp + 8], eax
call dword [sym.imp.ucrtbase.dll_memchr]
mov ebx, eax
test eax, eax
je 0x40d8cf
mov eax, esi
sub eax, ebx
cmp eax, 2
jle 0x40d8cf
lea eax, [ebp - 0x774]
mov dword [esp + 4], str._02x
mov dword [esp + 8], eax
mov dword [esp], ebx
call fcn.004083b0
dec eax
jne 0x40d8cf
mov eax, dword [ebp - 0x5dc]
mov dl, byte [0x438730]
mov byte [ebp - 0x798], dl
cmp eax, edi
je 0x40d4d5
and edx, 4
jne 0x40d5d8
mov eax, ebx
lea esi, [ebx + 3]
sub eax, edi
mov dword [ebp - 0x794], esi
lea esi, [edi + 1]
lea ecx, [eax - 1]
sub eax, 2
mov dword [ebp - 0x7a4], ecx
mov dword [ebp - 0x7a8], eax
test ecx, ecx
jle 0x40d880
mov eax, esi
xor edx, edx
lea esi, [esi]
nop
inc eax
xor ecx, ecx
mov cl, byte [eax - 1]
add edx, ecx
cmp ebx, eax
jne 0x40d508
and edx, 0xff
mov ecx, dword [ebp - 0x774]
cmp ecx, edx
je 0x40d710
test byte [ebp - 0x798], 4
jne 0x40d620
mov esi, dword [ebp - 0x794]
mov eax, dword [ebp - 0x790]
sub eax, esi
mov dword [esp + 4], esi
mov dword [ebp - 0x5d4], eax
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x5dc]
mov dword [esp], eax
call dword [sym.imp.ucrtbase.dll_memmove]
mov edi, dword [ebp - 0x5dc]
mov eax, dword [ebp - 0x5d4]
test byte [ebp - 0x7a0], 0x80
lea esi, [edi + eax]
mov dword [ebp - 0x790], esi
je 0x40d440
mov eax, dword [ebp - 0x5e4]
mov dword [esp + 4], 0xffffffff
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_WaitForSingleObject]
push edx
push edx
jmp 0x40ce1a
test al, 8
jne 0x40d888
mov eax, dword [ebp - 0x5e0]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 1
mov dword [esp + 4], 0x43c397
mov dword [esp], eax
call dword [0x4ae8ac]
sub esp, 0x10
jmp 0x40d417
mov edx, edi
sub edx, eax
call fcn.00408490
mov dword [esp + 0xc], str.Ignoring:__s_n
mov dword [esp + 0x10], eax
mov dword [esp + 8], str.extract_packets
mov dword [esp + 4], 0x438730
mov dword [esp], 2
call fcn.00408760
mov al, byte [0x438730]
mov byte [ebp - 0x798], al
jmp 0x40d4d5
mov eax, dword [ebp - 0x7a4]
test eax, eax
jle 0x40da59
xor eax, eax
inc esi
xor edx, edx
mov dl, byte [esi - 1]
add eax, edx
cmp ebx, esi
jne 0x40d630
and eax, 0xff
mov ebx, eax
mov edx, dword [ebp - 0x794]
mov eax, edi
sub edx, edi
mov dword [ebp - 0x798], ecx
call fcn.00408490
mov ecx, dword [ebp - 0x798]
mov dword [esp + 0x18], ebx
mov dword [esp + 0x14], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], str.Ignoring:__s__checksum:__d____d__n
mov dword [esp + 8], str.extract_packets
mov dword [esp + 4], 0x438730
mov dword [esp], 2
call fcn.00408760
jmp 0x40d535
mov eax, dword [ebp - 0x798]
test eax, eax
jle 0x40dade
xor eax, eax
inc edi
xor edx, edx
mov dl, byte [edi - 1]
add eax, edx
cmp ebx, edi
jne 0x40d6a8
and eax, 0xff
mov ebx, eax
mov edx, dword [ebp - 0x794]
mov eax, esi
sub edx, esi
mov dword [ebp - 0x798], ecx
call fcn.00408490
mov ecx, dword [ebp - 0x798]
mov dword [esp + 0x18], ebx
mov dword [esp + 0x14], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], str.Nacking:__s__checksum:__d____d__n
mov dword [esp + 8], str.extract_packets
mov dword [esp + 4], 0x438730
mov dword [esp], 1
call fcn.00408760
jmp 0x40d3ed
test byte [ebp - 0x798], 8
jne 0x40d941
mov ebx, dword [ebp - 0x7a8]
lea eax, [edi + 2]
mov dword [ebp - 0x5d0], eax
mov dword [ebp - 0x5cc], ebx
mov byte [ebx + edi + 2], 0
xor ecx, ecx
mov dl, byte [edi + 1]
mov al, 0x3f
jmp 0x40d751
inc ecx
cmp ecx, 0x13
je 0x40d8e8
mov al, byte [ecx*8 + 0x43cb80]
cmp dl, al
jne 0x40d740
lea eax, [ebp - 0x5e4]
mov dword [esp], eax
call dword [ecx*8 + 0x43cb84]
mov dword [ebp - 0x7a0], eax
and eax, 0xffffff7f
jne 0x40d801
test byte [0x438730], 4
jne 0x40daa4
lea eax, [ebp - 0x5e4]
call fcn.00409ae0
lea eax, [ebp - 0x5e4]
xor ecx, ecx
mov edx, 0x43b4be
call fcn.004093a0
lea eax, [ebp - 0x5e4]
call fcn.00409710
test byte [0x438730], 8
jne 0x40d838
mov eax, dword [ebp - 0x5c4]
mov dword [esp + 0xc], 0
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x5c8]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x5e0]
mov dword [esp], eax
call dword [0x4ae8ac]
sub esp, 0x10
cmp dword [ebp - 0x5c4], eax
jne 0x40db1f
mov dword [ebp - 0x5c4], 0
jmp 0x40d535
dec eax
jne 0x40d7ab
lea eax, [ebp - 0x5e4]
call fcn.00409ae0
mov ecx, 2
mov edx, 0x43b565
lea eax, [ebp - 0x5e4]
call fcn.004093a0
lea eax, [ebp - 0x5e4]
call fcn.00409710
test byte [0x438730], 8
je 0x40d7b8
mov edx, dword [ebp - 0x5c4]
mov eax, dword [ebp - 0x5c8]
call fcn.00408490
mov dword [esp + 0xc], str.Reply:__s_n
mov dword [esp + 0x10], eax
mov dword [esp + 8], str.extract_packets
mov dword [esp + 4], 0x438730
mov dword [esp], 3
call fcn.00408760
jmp 0x40d7b8
mov eax, edx
jmp 0x40d2d6
xor edx, edx
jmp 0x40d51a
mov edx, dword [ebp - 0x794]
mov eax, esi
sub edx, esi
call fcn.00408490
mov dword [esp + 0xc], str.Acking:__s_n
mov dword [esp + 0x10], eax
mov dword [esp + 8], str.extract_packets
mov dword [esp + 4], 0x438730
mov dword [esp], 3
call fcn.00408760
jmp 0x40d5a8
xor edx, edx
jmp 0x40d3d2
test byte [ebp - 0x7a0], 0x80
je 0x40d178
jmp 0x40d582
test byte [0x438730], 4
jne 0x40da60
mov dword [ebp - 0x7a0], 0
jmp 0x40d783
call dword [0x4ae8b8]
mov dword [esp + 0xc], str.Failed_to_connect_to_gdb:__u_n
mov dword [esp + 0x10], eax
mov dword [esp + 8], str.gdb_startup
mov dword [esp + 4], 0x438730
mov dword [esp], 1
call fcn.00408760
mov dword [esp], edi
call dword [0x4ae890]
push eax
jmp 0x40ce1a
mov edx, dword [ebp - 0x794]
mov eax, edi
sub edx, edi
call fcn.00408490
mov dword [esp + 0xc], str.Handling:__s_n
mov dword [esp + 0x10], eax
mov dword [esp + 8], str.extract_packets
mov dword [esp + 4], 0x438730
mov dword [esp], 3
call fcn.00408760
jmp 0x40d71d
mov dword [ebp - 0x7a0], 0x43c238
jmp 0x40cf15
test byte [0x438730], 2
jne 0x40da30
xor ecx, ecx
or edx, 0xffffffff
mov dword [esp], 0xffffffff
lea eax, [ebp - 0x5e4]
call fcn.00408da0
mov ebx, dword [ebp - 0x5a8]
test ebx, ebx
jne 0x40da0a
mov eax, dword [ebp - 0x544]
mov dword [esp], eax
call fcn.00421db0
mov dword [ebp - 0x544], 0
jmp 0x40d582
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], str.connected_on__Iu_n
mov dword [esp + 8], str.gdb_startup
mov dword [esp + 4], 0x438730
mov dword [esp], 3
call fcn.00408760
mov eax, dword [ebp - 0x5e0]
jmp 0x40d106
mov eax, dword [ebp - 0x5a0]
mov dword [esp + 8], 0x10002
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x5a4]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_ContinueDebugEvent]
sub esp, 0xc
jmp 0x40d9ba
mov dword [esp + 0xc], str.gdb_hung_up_n
mov dword [esp + 8], str.gdb_remote
mov dword [esp + 4], 0x438730
mov dword [esp], 1
call fcn.00408760
jmp 0x40d999
xor ebx, ebx
jmp 0x40d643
mov edx, dword [ebp - 0x7a4]
mov eax, esi
call fcn.00408490
mov dword [esp + 0xc], str.Unhandled:__s_n
mov dword [esp + 0x10], eax
mov dword [esp + 8], str.extract_packets
mov dword [esp + 4], 0x438730
mov dword [esp], 2
call fcn.00408760
mov dword [ebp - 0x7a0], 0
jmp 0x40d783
mov edx, dword [ebp - 0x7a4]
mov eax, esi
call fcn.00408490
mov dword [esp + 0xc], str.Failed:__s_n
mov dword [esp + 0x10], eax
mov dword [esp + 8], str.extract_packets
mov dword [esp + 4], 0x438730
mov dword [esp], 2
call fcn.00408760
jmp 0x40d783
xor ebx, ebx
jmp 0x40d6bb
mov dword [esp + 8], 0x953
mov dword [esp + 4], str..._wine_9.5_programs_winedbg_gdbproxy.c
mov dword [esp], str.gdbctx__in_len___gdbctx__in_buf_alloc
call dword [sym.imp.ucrtbase.dll__assert]
mov dword [esp + 8], 0x9ea
mov dword [esp + 4], str..._wine_9.5_programs_winedbg_gdbproxy.c
mov dword [esp], str.gdbctx__process__NULL__gdbctx__de.dwProcessId__dbg_curr_pid
call dword [sym.imp.ucrtbase.dll__assert]
mov dword [esp + 8], 0x936
mov dword [esp + 4], str..._wine_9.5_programs_winedbg_gdbproxy.c
mov dword [esp], str.i__gdbctx__out_buf.len
call dword [sym.imp.ucrtbase.dll__assert]
lea ecx, [ebp - 0x214]
jmp 0x40d0b5
mov dword [esp + 8], 0x949
mov dword [esp + 4], str..._wine_9.5_programs_winedbg_gdbproxy.c
mov dword [esp], str.gdbctx__in_len___gdbctx__in_buf_alloc
call dword [sym.imp.ucrtbase.dll__assert]
lea esi, [esi]
lea esi, [esi]
nop