Function at 0x4b1a10
Capabilities:
Check os version
Create process on windows
Query environment variable

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x5d8
mov rax, qword [sym.imp.libssp_0.dll___stack_chk_guard]
mov r13, qword [rsp + 0x640]
mov rdi, qword [rax]
mov qword [rsp + 0x5c8], rdi
xor edi, edi
mov qword [rsp + 0x58], r9
mov r12, rcx
mov rbx, rdx
mov rsi, r8
mov r15, rcx
test rcx, rcx
je 0x4b2440
cmp byte [r15], 0x73
jne 0x4b1d98
cmp byte [r15 + 1], 0x68
jne 0x4b1d98
cmp byte [r15 + 2], 0
jne 0x4b1d98
mov eax, dword [0x005764e4]
test eax, eax
js 0x4b26b0
test eax, eax
je 0x4b1dc0
lea rbp, [0x004ab9e0]
mov rax, qword [sym.imp.msvcrt.dll__errno]
mov qword [rsp + 0x80], rax
call rax
mov r11d, dword [0x005764e8]
mov dword [rax], 0
test r11d, r11d
js 0x4b23f0
mov r10d, dword [0x005ee8f4]
mov r15, qword [0x005ee9f8]
test r10d, r10d
jne 0x4b1b20
test r15, r15
je 0x4b1b20
mov dword [0x005ee8f4], 1
jmp 0x4b1afd
mov byte [rax], 0
cmp byte [r15], 0
je 0x4b1af9
mov rcx, r15
call fcn.004adc30
lea r15, [rdi + 1]
mov edx, 0x2c
mov rcx, r15
call sub.msvcrt.dll_strchr
mov rdi, rax
test rax, rax
jne 0x4b1ae8
cmp byte [r15], 0
je 0x4b1b20
mov rcx, r15
call fcn.004adc30
lea rcx, [0x00590d36]
xor r9d, r9d
mov qword [rsp + 0x30], 0
mov r8d, 2
mov dword [rsp + 0x28], pe_nt_image_headers64
mov edx, 0x40000000
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [rsp + 0x70], 0x408
mov rcx, rax
cmp rax, 0xffffffffffffffff
je 0x4b1b73
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [rsp + 0x70], 0x400
lea rdi, [rsp + 0x120]
xor eax, eax
mov ecx, 0xe
mov qword [rsp + 0x78], rdi
rep stosq qword [rdi], rax
mov ecx, dword [rsp + 0x648]
mov dword [rsp + 0x120], 0x70
call fcn.004b5060
mov ecx, dword [rsp + 0x650]
mov qword [rsp + 0x170], rax
call fcn.004b5060
mov ecx, dword [rsp + 0x658]
mov qword [rsp + 0x178], rax
call fcn.004b5060
mov rdx, qword [rsp + 0x170]
mov qword [rsp + 0x180], rax
cmp rdx, 0xffffffffffffffff
je 0x4b2460
mov rcx, qword [rsp + 0x178]
mov qword [rsp + 0x190], rdx
cmp rcx, 0xffffffffffffffff
je 0x4b25b8
cmp rdx, rcx
je 0x4b2578
mov dword [rsp + 0x74], 2
mov r8d, 1
mov qword [rsp + r8*8 + 0x190], rcx
cmp rax, 0xffffffffffffffff
je 0x4b1c41
cmp rax, rcx
je 0x4b1c41
cmp rax, rdx
je 0x4b1c41
mov edi, dword [rsp + 0x74]
mov ecx, edi
add edi, 1
mov dword [rsp + 0x74], edi
mov qword [rsp + rcx*8 + 0x190], rax
or dword [rsp + 0x15c], 0x100
mov rdx, qword [rbx]
test rdx, rdx
je 0x4b2170
mov rcx, r12
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x4b2170
xor r9d, r9d
mov word [rsp + 0x1b0], r9w
mov rdx, qword [rsp + 0x58]
test rdx, rdx
je 0x4b1cbd
lea r12, [rsp + 0x3c0]
mov r9d, 0xffffffff
mov r8d, 0x104
mov rcx, r12
call fcn.004ad7d0
mov edx, eax
test eax, eax
js 0x4b2420
xor r9d, r9d
mov r8d, 0x104
mov rcx, r12
call fcn.004af110
test eax, eax
js 0x4b2433
lea r12, [rsp + 0xe0]
xor edx, edx
mov rcx, r12
call fcn.00472870
test r13, r13
je 0x4b1d2f
mov rcx, r13
call rbp
mov rcx, rax
mov r15, rax
call sub.msvcrt.dll_strlen
mov rdx, r15
mov rcx, r12
mov r8, rax
call fcn.00472fb0
cmp r13, r15
je 0x4b1d2f
mov rcx, r15
call fcn.004c9260
jmp 0x4b1d2f
mov rcx, r13
call sub.msvcrt.dll_strlen
mov rdx, r13
mov rcx, r12
mov r8, rax
call fcn.00472fb0
cmp qword [rbx], r13
je 0x4b1d2b
mov rcx, r13
call fcn.004c9260
add rbx, 8
mov rcx, qword [rbx]
test rcx, rcx
je 0x4b1df8
call rbp
mov r13, rax
mov rax, qword [rsp + 0xf0]
cmp byte [rax], 0
je 0x4b1d08
mov rcx, qword [rsp + 0xe0]
test rcx, rcx
je 0x4b1dd0
mov rdx, qword [rsp + 0xe8]
sub rcx, rdx
cmp rcx, 1
je 0x4b1dd0
lea rcx, [rdx + 1]
mov qword [rsp + 0xe8], rcx
mov byte [rax + rdx], 0x20
mov rdx, qword [rsp + 0xf0]
mov rax, qword [rsp + 0xe8]
mov byte [rdx + rax], 0
jmp 0x4b1d08
mov rcx, r15
call sub.msvcrt.dll_strlen
cmp rax, 6
jbe 0x4b1dc0
lea rax, [r15 + rax - 7]
cmp dword [rax], 0x2e68735c
jne 0x4b1dc0
cmp word [rax + 4], 0x7865
je 0x4b2993
nop
lea rbp, [0x004ab150]
jmp 0x4b1a96
mov edx, 1
mov rcx, r12
call fcn.004727c0
mov rax, qword [rsp + 0xf0]
mov rdx, qword [rsp + 0xe8]
jmp 0x4b1d6b
lea rcx, str.GIT_STRACE_COMMANDS
call fcn.004adf70
mov rbx, rax
test rax, rax
je 0x4b1ea1
mov edx, 1
lea rcx, str.strace.exe
call fcn.004b0090
mov r13, rax
test rax, rax
je 0x4b2b1c
mov rdx, rax
lea r15, [rsp + 0x1b0]
mov r9d, 0xffffffff
mov r8d, 0x104
mov rcx, r15
call fcn.004ad7d0
mov edx, eax
test eax, eax
js 0x4b2740
xor r9d, r9d
mov r8d, 0x104
mov rcx, r15
call fcn.004af110
test eax, eax
js 0x4b2753
mov rcx, r13
call fcn.004c9260
cmp byte [rbx], 0x31
jne 0x4b24a0
cmp byte [rbx + 1], 0
jne 0x4b24a0
mov r9d, 7
lea r8, str.strace
xor edx, edx
mov rcx, r12
call fcn.00472db0
mov r8, qword [rsp + 0xe8]
test r8, r8
js 0x4b2b4b
lea rcx, [r8 + r8 + 1]
xor eax, eax
test rcx, rcx
sets al
mov qword [rsp + 0x88], rax
js 0x4b2b48
add rcx, rcx
call fcn.004996e0
mov rdx, qword [rsp + 0xf0]
mov r9d, 0xffffffff
mov rcx, rax
mov qword [rsp + 0x68], rax
mov rax, qword [rsp + 0xe8]
lea r8, [rax + rax + 1]
call fcn.004ad7d0
mov rcx, r12
call fcn.004727a0
call qword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
mov qword [rsp + 0x60], rax
test rsi, rsi
je 0x4b21c0
mov rcx, qword [rsi]
test rcx, rcx
je 0x4b21c0
cmp qword [rsp + 0x60], 0
je 0x4b2a30
mov rbp, qword [rsp + 0x60]
xor ebx, ebx
xor r15d, r15d
mov edi, 1
xor r12d, r12d
jmp 0x4b1f99
add r15, 1
cmp r15, rbx
jbe 0x4b1f80
lea rbx, [rbx + rbx*2 + 0x30]
shr rbx, 1
cmp r15, rbx
cmovae rbx, r15
mov rax, rbx
shr rax, 0x3d
jne 0x4b2b08
mov rcx, r12
lea rdx, [rbx*8]
call fcn.00499790
mov r12, rax
mov rcx, rbp
call sub.msvcrt.dll_wcslen
mov qword [r12 + r15*8 - 8], rbp
add rax, 1
lea rbp, [rbp + rax*2]
add rdi, rax
cmp word [rbp], 0
jne 0x4b1f48
mov rcx, qword [rsi]
test rcx, rcx
je 0x4b2989
lea r13, [rsi + 8]
xor ebp, ebp
nop word [rax + rax]
call sub.msvcrt.dll_strlen
mov rcx, qword [r13]
add r13, 8
lea rbp, [rbp + rax*2 + 1]
test rcx, rcx
jne 0x4b1fb8
test rbp, rbp
js 0x4b2b34
lea r13, [rbp + rbp]
mov rcx, r13
call fcn.004996e0
cmp qword [rsi], 0
mov qword [rsp + 0x90], rax
mov rdx, rax
je 0x4b2077
mov rax, r15
mov r14, rdx
add r13, rdx
neg rax
lea rsi, [rsi + rax*8]
nop word [rax + rax]
add r15, 1
cmp r15, rbx
jbe 0x4b2048
lea rbx, [rbx + rbx*2 + 0x30]
shr rbx, 1
cmp r15, rbx
cmovae rbx, r15
mov rax, rbx
shr rax, 0x3d
jne 0x4b2b08
mov rcx, r12
lea rdx, [rbx*8]
call fcn.00499790
mov r12, rax
mov r8, r13
mov rdx, qword [rsi + r15*8 - 8]
mov rcx, r14
mov r9d, 0xffffffff
sub r8, r14
sar r8, 1
call fcn.004ad7d0
cmp qword [rsi + r15*8], 0
mov qword [r12 + r15*8 - 8], r14
cdqe
lea r14, [r14 + rax*2 + 2]
jne 0x4b2010
lea r9, [fcn.004ab390]
mov rdx, r15
mov rcx, r12
xor ebx, ebx
mov r8d, 8
call fcn.00472570
add rdi, rbp
sets bl
js 0x4b2b5c
lea rcx, [rdi + rdi]
call fcn.004996e0
mov r13, rax
mov rsi, rax
test r15, r15
je 0x4b2128
nop dword [rax]
lea rbp, [r12 + rbx*8]
jmp 0x4b20d3
lea rbp, [rbp + 8]
mov rcx, rdi
mov rdx, rbp
call fcn.004ab390
test eax, eax
jne 0x4b2150
add rbx, 1
mov rdi, rbp
cmp r15, rbx
ja 0x4b20c0
mov rcx, qword [rbp]
mov edx, 0x3d
call sub.msvcrt.dll_wcschr
test rax, rax
je 0x4b2128
mov rcx, qword [rdi]
call sub.msvcrt.dll_wcslen
add rax, 1
mov rbp, rax
je 0x4b211d
test rax, rax
js 0x4b2b34
add rbp, rbp
mov rdx, qword [rdi]
mov rcx, rsi
mov r8, rbp
call sub.msvcrt.dll_memcpy
add rsi, rbp
cmp r15, rbx
ja 0x4b20b8
nop dword [rax]
xor r8d, r8d
mov rcx, r12
mov word [rsi], r8w
call fcn.004c9260
mov rcx, qword [rsp + 0x90]
call fcn.004c9260
jmp 0x4b221a
mov rcx, qword [rdi]
mov edx, 0x3d
call sub.msvcrt.dll_wcschr
test rax, rax
jne 0x4b20f2
jmp 0x4b20b8
mov rdx, r12
lea r15, [rsp + 0x1b0]
mov r9d, 0xffffffff
mov r8d, 0x104
mov rcx, r15
call fcn.004ad7d0
mov edx, eax
test eax, eax
js 0x4b2420
xor r9d, r9d
mov r8d, 0x104
mov rcx, r15
call fcn.004af110
test eax, eax
jns 0x4b1c74
jmp 0x4b2433
mov rax, qword [rsp + 0x60]
mov ebx, 1
mov rsi, rax
test rax, rax
jne 0x4b21f3
jmp 0x4b254c
mov rcx, rsi
call sub.msvcrt.dll_wcslen
add rax, 1
add rbx, rax
lea rsi, [rsi + rax*2]
cmp word [rsi], 0
jne 0x4b21e0
test rbx, rbx
js 0x4b2b70
lea rsi, [rbx + rbx]
mov rcx, rsi
call fcn.004996e0
mov r13, rax
test rbx, rbx
jne 0x4b2560
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsW]
mov edx, dword [rsp + 0x74]
mov ecx, dword [0x005764e8]
mov qword [rsp + 0xc0], 0
mov qword [rsp + 0xc8], 0
mov qword [rsp + 0xd0], 0
test edx, edx
setne dil
test ecx, ecx
je 0x4b2266
test dil, dil
jne 0x4b25e0
xor esi, esi
mov rdx, qword [rsp + 0x58]
lea rax, [rsp + 0x3c0]
lea rcx, [rsp + 0x1b0]
mov qword [rsp + 0x30], r13
lea r12, [rsp + 0xc0]
mov rbp, qword [sym.imp.KERNEL32.dll_CreateProcessW]
test rdx, rdx
mov qword [rsp + 0x48], r12
cmove rax, rdx
mov edx, 0
cmp word [rsp + 0x1b0], 0
cmove rcx, rdx
mov rdx, qword [rsp + 0x78]
xor r9d, r9d
xor r8d, r8d
mov rbx, rax
mov qword [rsp + 0x58], rax
movzx eax, dil
mov qword [rsp + 0x40], rdx
mov edx, dword [rsp + 0x70]
mov qword [rsp + 0x38], rbx
mov dword [rsp + 0x28], edx
mov rdx, qword [rsp + 0x68]
mov dword [rsp + 0x20], eax
call rbp
mov ebx, eax
test eax, eax
jne 0x4b231c
mov eax, dword [0x005764e8]
test eax, eax
je 0x4b22fc
test dil, dil
jne 0x4b2760
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r12d, eax
mov rax, qword [rsp + 0x80]
call rax
mov ecx, r12d
mov rdi, rax
call fcn.004abd60
mov dword [rdi], eax
mov rcx, qword [rsp + 0x188]
test rcx, rcx
je 0x4b232f
call qword [sym.imp.KERNEL32.dll_DeleteProcThreadAttributeList]
test rsi, rsi
je 0x4b2348
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, r13
call fcn.004c9260
mov rcx, qword [rsp + 0x68]
call fcn.004c9260
test ebx, ebx
je 0x4b2433
lea r12, [0x00605dc0]
mov rcx, qword [rsp + 0xc8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov ecx, 0x18
call fcn.004996e0
mov rdx, qword [rsp + 0xc0]
mov esi, dword [rsp + 0xd0]
mov rcx, r12
mov qword [rax + 0x10], rdx
mov rdx, qword [0x005ee9b0]
mov qword [rax + 8], rsi
mov qword [rax], rdx
mov qword [0x005ee9b0], rax
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [rsp + 0xd0]
mov rsi, qword [sym.imp.libssp_0.dll___stack_chk_guard]
mov rdi, qword [rsp + 0x5c8]
xor rdi, qword [rsi]
jne 0x4b2b84
add rsp, 0x5d8
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
mov eax, dword [0x005765e0]
mov dword [0x005764e8], eax
test eax, eax
jns 0x4b1abd
call qword [sym.imp.KERNEL32.dll_GetVersion]
cmp eax, 0x1db0ffff
seta al
movzx eax, al
mov dword [0x005764e8], eax
jmp 0x4b1abd
mov rax, qword [rsp + 0x80]
call rax
cmp dword [rax], 0x22
je 0x4b295e
mov rax, 0xffffffffffffffff
jmp 0x4b23c2
mov r15, qword [rdx]
test r15, r15
jne 0x4b1a59
lea rbp, [0x004ab150]
jmp 0x4b1a96
mov rcx, qword [rsp + 0x178]
mov dword [rsp + 0x74], 1
xor r8d, r8d
cmp rcx, 0xffffffffffffffff
jne 0x4b1c14
xor ecx, ecx
cmp rax, 0xffffffffffffffff
jne 0x4b1c39
mov dword [rsp + 0x74], 0
jmp 0x4b1c4c
mov rdi, qword [sym.imp.msvcrt.dll__stricmp]
mov rdx, rbx
lea rcx, [0x005907ac]
call rdi
test eax, eax
je 0x4b1e8a
mov rdx, rbx
lea rcx, [0x00590d7f]
call rdi
test eax, eax
je 0x4b1e8a
mov rcx, rbx
lea rdi, [rsp + 0x100]
call rbp
lea rdx, str.strace__o__s
mov rcx, rdi
mov qword [rsp + 0x100], 0
mov qword [rsp + 0x108], 0
mov r13, rax
mov rax, qword [0x005ab200]
mov r8, r13
mov qword [rsp + 0x110], rax
call fcn.004737e0
cmp r13, rbx
je 0x4b2525
mov rcx, r13
call fcn.004c9260
mov r9, qword [rsp + 0x108]
mov r8, qword [rsp + 0x110]
mov rcx, r12
xor edx, edx
call fcn.00472db0
mov rcx, rdi
call fcn.004727a0
jmp 0x4b1ea1
mov ecx, 2
mov esi, 2
call fcn.004996e0
mov r13, rax
nop
mov rdx, qword [rsp + 0x60]
mov r8, rsi
mov rcx, r13
call sub.msvcrt.dll_memcpy
jmp 0x4b221a
mov dword [rsp + 0x74], 1
cmp rax, 0xffffffffffffffff
je 0x4b1c41
cmp rax, rdx
je 0x4b25a8
mov dword [rsp + 0x74], 2
mov ecx, 1
jne 0x4b1c39
nop word [rax + rax]
mov dword [rsp + 0x74], 1
jmp 0x4b1c41
cmp rax, 0xffffffffffffffff
je 0x4b25a8
mov dword [rsp + 0x74], 2
mov ecx, 1
cmp rax, rdx
jne 0x4b1c39
jmp 0x4b25a8
lea rbp, [rsp + 0xb8]
xor r8d, r8d
xor ecx, ecx
mov rbx, qword [sym.imp.KERNEL32.dll_InitializeProcThreadAttributeList]
mov r9, rbp
mov edx, 1
call rbx
test eax, eax
jne 0x4b2611
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x4b2266
mov rsi, qword [rsp + 0xb8]
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
xor edx, edx
mov r8, rsi
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov rsi, rax
test rax, rax
je 0x4b2268
xor r8d, r8d
mov r9, rbp
mov edx, 1
mov rcx, rax
call rbx
test eax, eax
je 0x4b2268
mov eax, dword [rsp + 0x74]
xor edx, edx
mov r8d, 0x20002
mov rcx, rsi
mov qword [rsp + 0x30], 0
lea r9, [rsp + 0x190]
mov qword [rsp + 0x28], 0
shl rax, 3
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_UpdateProcThreadAttribute]
test eax, eax
je 0x4b2268
or dword [rsp + 0x70], 0x80000
mov qword [rsp + 0x188], rsi
jmp 0x4b2268
mov rcx, r15
xor edx, edx
call fcn.004b0090
mov r15, rax
test rax, rax
je 0x4b297a
mov rcx, rax
call sub.msvcrt.dll_strlen
cmp rax, 6
jbe 0x4b2728
movsx edx, byte [r15 + rax - 7]
lea rdi, [rax - 7]
cmp edx, 0x2f
je 0x4b26e8
cmp edx, 0x5c
jne 0x4b2728
lea rcx, [r15 + rax - 6]
mov r8d, 6
lea rdx, str.sh.exe
call fcn.0041d4e0
test eax, eax
je 0x4b2723
jmp 0x4b2728
movsx eax, byte [r15 + rdi - 1]
lea rdx, [rdi - 1]
cmp eax, 0x2f
je 0x4b2720
cmp eax, 0x5c
jne 0x4b2a42
mov rdi, rdx
test rdi, rdi
jne 0x4b2708
mov dword [0x005764e4], 0
mov rcx, r15
call fcn.004c9260
jmp 0x4b1dc0
mov rax, qword [rsp + 0x80]
call rax
cmp dword [rax], 0x22
je 0x4b29f1
mov rcx, r13
call fcn.004c9260
jmp 0x4b2433
mov rax, qword [sym.imp.KERNEL32.dll_GetLastError]
mov qword [rsp + 0x90], rax
call rax
mov qword [rsp + 0x100], 0
mov dword [rsp + 0x60], eax
mov edi, eax
mov rax, qword [0x005ab200]
mov qword [rsp + 0x108], 0
mov qword [rsp + 0x110], rax
cmp edi, 0x5aa
je 0x4b28cc
cmp dword [rsp + 0x60], 0x57
je 0x4b28bb
lea rcx, str.SUPPRESS_HANDLE_INHERITANCE_WARNING
call fcn.004adf70
test rax, rax
jne 0x4b28cc
mov r8d, 1
lea rdx, [0x00590ddc]
lea rcx, str.SUPPRESS_HANDLE_INHERITANCE_WARNING
mov dword [rsp + 0xb4], 0
call fcn.004b7d70
lea rax, [rsp + 0x190]
mov r14, qword [rsp + 0x88]
mov qword [rsp + 0xa0], rsi
mov qword [rsp + 0x98], rax
lea r10, [rsp + 0xb4]
lea rdi, [rsp + 0x100]
mov qword [rsp + 0x88], r12
lea rbx, str.handle__d:__p__type__lx__handle_info___d___lx_n
mov r15, r10
mov qword [rsp + 0xa8], rbp
mov rax, qword [rsp + 0x98]
mov rdx, r15
mov r12d, dword [rsp + 0xb4]
mov rsi, qword [rax + r14*8]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetHandleInformation]
mov rcx, rsi
mov ebp, eax
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rsp + 0x30], r12d
mov r8d, r14d
mov r9, rsi
mov dword [rsp + 0x28], ebp
mov rdx, rbx
mov rcx, rdi
add r14, 1
mov dword [rsp + 0x20], eax
call fcn.004737e0
cmp dword [rsp + 0x74], r14d
ja 0x4b2838
mov r8d, 0xbd
lea rdx, str._nThis_is_a_bug__please_report_it_at_nhttps:__github.com_git_for_windows_git_issues_new_n_nTo_suppress_this_warning__please_set_the_environment_variable_n_n_tSUPPRESS_HANDLE_INHERITANCE_WARNING1_n
mov rcx, rdi
mov rsi, qword [rsp + 0xa0]
mov r12, qword [rsp + 0x88]
mov rbp, qword [rsp + 0xa8]
call fcn.00472fb0
jmp 0x4b28d4
call qword [sym.imp.KERNEL32.dll_GetVersion]
cmp eax, 0x23efffff
ja 0x4b27b5
lea rdi, [rsp + 0x100]
mov eax, dword [rsp + 0x70]
mov edx, 0
lea rcx, [rsp + 0x1b0]
mov dword [0x005764e8], 0
mov qword [rsp + 0x48], r12
and eax, 0xfff7ffff
mov qword [rsp + 0x30], r13
cmp word [rsp + 0x1b0], 0
cmove rcx, rdx
mov rdx, qword [rsp + 0x78]
mov dword [rsp + 0x28], eax
xor r9d, r9d
mov dword [rsp + 0x20], 1
xor r8d, r8d
mov qword [rsp + 0x40], rdx
mov rdx, qword [rsp + 0x58]
mov qword [rsp + 0x38], rdx
mov rdx, qword [rsp + 0x68]
call rbp
mov ebx, eax
test eax, eax
je 0x4b2a06
cmp qword [rsp + 0x108], 0
jne 0x4b29d4
mov rcx, rdi
call fcn.004727a0
jmp 0x4b231c
mov rax, qword [rsp + 0x80]
call rax
mov dword [rax], 0x26
mov rax, 0xffffffffffffffff
jmp 0x4b23c2
mov dword [0x005764e4], 0
jmp 0x4b1dc0
xor r13d, r13d
xor ebp, ebp
jmp 0x4b1fdd
cmp byte [rax + 6], 0x65
jne 0x4b1dc0
mov rdx, qword [0x005ee8f8]
test rdx, rdx
jne 0x4b29bf
lea rcx, [0x00590c27]
call fcn.004b0090
mov qword [0x005ee8f8], rax
mov rdx, rax
mov rcx, r15
call fcn.0041d4c0
test eax, eax
sete al
movzx eax, al
jmp 0x4b1a87
mov r8, qword [rsp + 0x110]
mov edx, dword [rsp + 0x60]
lea rcx, str.failed_to_restrict_file_handles___ld__n_n_s
call fcn.00494a30
jmp 0x4b2951
mov rax, qword [rsp + 0x80]
call rax
mov dword [rax], 0x26
jmp 0x4b2753
mov rax, qword [rsp + 0x90]
call rax
mov r12d, eax
mov rax, qword [rsp + 0x80]
call rax
mov ecx, r12d
mov rbp, rax
call fcn.004abd60
mov dword [rbp], eax
jmp 0x4b2951
xor r15d, r15d
xor ebx, ebx
xor r12d, r12d
mov edi, 1
jmp 0x4b1fac
cmp rdi, 3
jbe 0x4b2728
movsx eax, byte [r15 + rdi - 4]
lea rbp, [rdi - 4]
cmp eax, 0x2f
je 0x4b2a64
cmp eax, 0x5c
jne 0x4b2728
lea rcx, [r15 + rdi - 3]
mov r8d, 3
lea rdx, [0x00590d25]
call fcn.0041d4e0
test eax, eax
je 0x4b2a9f
jmp 0x4b2728
movsx eax, byte [r15 + rbp - 1]
lea rdx, [rbp - 1]
cmp eax, 0x2f
je 0x4b2a9c
cmp eax, 0x5c
jne 0x4b2aa9
mov rbp, rdx
test rbp, rbp
jne 0x4b2a88
jmp 0x4b2728
cmp rbp, 3
jbe 0x4b2728
movsx eax, byte [r15 + rbp - 4]
cmp eax, 0x2f
je 0x4b2ac7
cmp eax, 0x5c
jne 0x4b2728
lea rcx, [r15 + rbp - 3]
mov r8d, 3
lea rdx, [0x00590d29]
call fcn.0041d4e0
test eax, eax
jne 0x4b2728
mov rcx, r15
lea rbp, [0x004ab9e0]
mov dword [0x005764e4], 1
call fcn.004c9260
jmp 0x4b1a96
mov r8, rbx
mov edx, 8
lea rcx, [0x00590d98]
call fcn.00494770
lea rcx, str.strace_not_found_
call fcn.00494950
mov rax, 0xffffffffffffffff
jmp 0x4b23c2
mov r8, rbp
mov edx, 2
lea rcx, [0x00590d98]
call fcn.00494770
mov r8, rcx
mov edx, 2
lea rcx, [0x00590d98]
call fcn.00494770
mov r8, rdi
mov edx, 2
lea rcx, [0x00590d98]
call fcn.00494770
mov r8, rbx
mov edx, 2
lea rcx, [0x00590d98]
call fcn.00494770
call sub.libssp_0.dll___stack_chk_fail
nop
nop word [rax + rax]