Function at 0x4d1f90
Capabilities:
Create process on windows
Get common file path
Query environment variable
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x550
movzx eax, byte [edx + 0x28]
mov esi, dword [edx + 0x24]
mov dword [esp + 0x8c], ecx
mov dword [esp + 0x90], edx
test al, al
sete cl
test esi, esi
sete dl
and dl, cl
call 0x4d1fc5
pop ecx
mov byte [esp + 0x1c], dl
mov dword [esp + 0xcc], ecx
je 0x4d1fe5
xor eax, eax
mov dword [esp + 0x124], 0
jmp 0x4d2926
test al, al
mov dword [esp + 0xa8], 0
mov dword [esp + 0x4c], esi
mov dword [esp + 0xac], 0
je 0x4d201a
mov eax, dword [esp + 0x90]
mov esi, dword [eax + 0x20]
test esi, esi
jne 0x4d2185
jmp 0x4d28f6
call sub.kernel32.dll_GetEnvironmentStringsW
test eax, eax
je 0x4d4e90
lea esi, [esp + 0x15c]
lea ebx, [esp + 0xf0]
lea edi, [esp + 0x20]
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd4], eax
nop word [eax + eax]
lea eax, [esp + 0xd0]
push eax
lea eax, [esp + 0x150]
push eax
call fcn.004cfc50
add esp, 8
cmp byte [esp + 0x158], 2
je 0x4d2167
movsd xmm1, qword [esi + 8]
movsd xmm2, qword [esp + 0x14c]
movq xmm0, qword [esi]
movsd qword [esp + 0x9c], xmm1
movq xmm1, qword [esp + 0x154]
movsd qword [esp + 0x50], xmm2
movq qword [esp + 0x94], xmm0
mov eax, dword [esp + 0x50]
movq qword [esp + 0x58], xmm1
mov ecx, dword [esp + 0x58]
mov dword [esp + 0x20], eax
add ecx, eax
mov dword [esp + 0x24], ecx
mov word [esp + 0x28], 0
lea ecx, [esp + 0x10]
mov edx, edi
call fcn.004b7800
movsd xmm1, qword [esp + 0x154]
movq xmm0, qword [esp + 0x14c]
mov eax, dword [esp + 0x18]
movsd xmm2, qword [esi]
movsd qword [esp + 0xe8], xmm1
movsd xmm1, qword [esp + 0x10]
movq qword [esp + 0xe0], xmm0
mov dword [ebx + 8], eax
movsd qword [esp + 0x50], xmm2
movsd qword [ebx], xmm1
movq xmm1, qword [esi + 8]
movq qword [esp + 0x58], xmm1
lea edx, [esp + 0xa4]
lea eax, [esp + 0x50]
mov ecx, edi
push eax
lea eax, [esp + 0xe4]
push eax
call fcn.004aeae0
add esp, 8
cmp byte [esp + 0x2c], 2
je 0x4d2050
cmp dword [esp + 0x24], 0
je 0x4d2050
push dword [esp + 0x20]
push 0
push dword [0x5880e0]
call sub.kernel32.dll_HeapFree
jmp 0x4d2050
push dword [esp + 0xd0]
call sub.kernel32.dll_FreeEnvironmentStringsW
mov eax, dword [esp + 0x90]
mov esi, dword [eax + 0x20]
test esi, esi
je 0x4d28f6
cmp dword [esp + 0x4c], 0
je 0x4d28f6
mov eax, dword [esp + 0x90]
movd xmm0, dword [eax + 0x1c]
pshufd xmm0, xmm0, 0x51
jmp 0x4d21cf
push 0
push dword [0x5880e0]
call sub.kernel32.dll_HeapFree
movdqa xmm1, xmmword [esp + 0xb0]
dec dword [esp + 0x4c]
pxor xmm0, xmm0
punpckldq xmm1, xmm0
movdqa xmm0, xmm1
je 0x4d28f6
movd eax, xmm0
test eax, eax
je 0x4d2200
cmp eax, 2
je 0x4d4dbf
movdqa xmmword [esp + 0xb0], xmm0
pshufd xmm0, xmm0, 0x55
movd eax, xmm0
jmp 0x4d223c
pshufd xmm0, xmm0, 0x55
mov dword [esp], 0
movd eax, xmm0
test eax, eax
je 0x4d2229
nop word cs:[eax + eax]
nop
mov esi, dword [esi + 0x1ec]
dec eax
jne 0x4d2220
movdqa xmm0, xmmword [0x566670]
xor eax, eax
movdqa xmmword [esp + 0xb0], xmm0
movzx ecx, word [esi + 0x1ea]
mov edi, dword [esp]
mov ebx, esi
cmp edi, ecx
jb 0x4d226d
nop dword [eax]
mov ecx, dword [ebx]
test ecx, ecx
je 0x4d4d34
movzx edi, word [ebx + 0x1e8]
inc eax
mov ebx, ecx
cmp di, word [ecx + 0x1ea]
jae 0x4d2250
test eax, eax
je 0x4d22a0
mov esi, dword [ebx + edi*4 + 0x1f0]
mov dword [esp], 0
dec eax
je 0x4d22a8
nop word cs:[eax + eax]
nop dword [eax]
mov esi, dword [esi + 0x1ec]
dec eax
jne 0x4d2290
jmp 0x4d22a8
lea eax, [edi + 1]
mov esi, ebx
mov dword [esp], eax
lea eax, [edi + edi*8]
lea eax, [eax + eax*2]
add eax, edi
shl edi, 4
cmp byte [ebx + edi + 0x144], 2
lea eax, [ebx + eax + 4]
jne 0x4d2420
mov ebx, dword [esp + 0xa8]
test ebx, ebx
je 0x4d21b0
mov edi, dword [esp + 0xa4]
mov edx, edi
lea ecx, [esp + 0x20]
push dword [eax + 0x18]
push dword [eax + 0x10]
push ebx
call fcn.004b1430
add esp, 0xc
cmp dword [esp + 0x20], 0
jne 0x4d21b0
mov ecx, dword [esp + 0x24]
mov eax, dword [esp + 0x28]
mov edx, dword [esp + 0x2c]
mov byte [esp + 0x94], 0
test ecx, ecx
je 0x4d265a
nop word [eax + eax]
mov eax, dword [eax + edx*4 + 0x1ec]
dec ecx
je 0x4d233b
movzx edx, word [eax + 0x1ea]
mov eax, dword [eax + edx*4 + 0x1ec]
dec ecx
jne 0x4d232a
movzx ecx, word [eax + 0x1ea]
mov dword [esp + 0xe0], 0
mov dword [esp + 0xe4], eax
dec ecx
mov dword [esp + 0xe8], ecx
lea edx, [esp + 0xe0]
lea eax, [esp + 0x94]
lea ecx, [esp + 0x14c]
push eax
call fcn.004b0ec0
add esp, 4
movsd xmm2, qword [esp + 0x164]
movsd xmm1, qword [esp + 0x15c]
mov eax, dword [esp + 0x174]
movq xmm0, qword [esp + 0x16c]
mov edx, dword [esp + 0x17c]
movsd qword [esp + 0x68], xmm2
movsd qword [esp + 0x60], xmm1
movsd xmm2, qword [esp + 0x14c]
movq xmm1, qword [esp + 0x154]
mov dword [esp + 0x78], eax
movq qword [esp + 0x70], xmm0
mov eax, dword [esp + 0x180]
movq qword [esp + 0x58], xmm1
movsd qword [esp + 0x50], xmm2
movzx ecx, word [edx + 0x1ea]
cmp eax, ecx
mov ecx, edx
jb 0x4d2698
nop
mov ecx, dword [edx]
test ecx, ecx
je 0x4d2696
movzx eax, word [edx + 0x1e8]
mov edx, ecx
cmp ax, word [ecx + 0x1ea]
jae 0x4d23f0
jmp 0x4d2698
mov ecx, dword [eax + 8]
mov edx, dword [eax]
mov dword [esp + 0x30], eax
test ecx, ecx
mov dword [esp + 4], ecx
je 0x4d246f
js 0x4d4e17
mov eax, dword [0x5880e0]
mov dword [esp + 0xc], edx
test eax, eax
jne 0x4d2456
call sub.kernel32.dll_GetProcessHeap
test eax, eax
je 0x4d4dd8
mov dword [0x5880e0], eax
push dword [esp + 4]
push 0
push eax
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 0xc]
test eax, eax
jne 0x4d2474
jmp 0x4d4dd8
mov eax, 1
mov dword [esp + 8], eax
push dword [esp + 4]
push edx
push eax
call sub.msvcrt.dll_memcpy
add esp, 0xc
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 8]
movzx eax, byte [ecx + 0xc]
mov dword [esp + 0xe0], edx
mov edx, dword [esp + 4]
mov dword [esp + 0xe4], edx
mov dword [esp + 0xe8], edx
mov byte [esp + 0xec], al
mov edx, dword [ecx + 0x10]
mov ecx, dword [ecx + 0x18]
test ecx, ecx
mov dword [esp + 0x30], ecx
je 0x4d2507
mov dword [esp + 0xc], edx
xor edx, edx
cmp ecx, 0x40000000
setb byte [esp + 8]
jae 0x4d4e21
lea eax, [ecx + ecx]
movzx ecx, byte [esp + 8]
mov dword [esp + 4], eax
mov dl, cl
add edx, edx
cmp dword [esp + 4], 0
js 0x4d4e21
mov dword [esp + 8], edx
je 0x4d2510
mov eax, dword [0x5880e0]
test eax, eax
je 0x4d2516
mov ecx, dword [esp + 4]
jmp 0x4d252c
mov eax, 2
xor ecx, ecx
jmp 0x4d2549
mov ecx, dword [esp + 8]
jmp 0x4d2537
call sub.kernel32.dll_GetProcessHeap
mov ecx, dword [esp + 4]
test eax, eax
je 0x4d4dfb
mov dword [0x5880e0], eax
push ecx
push 0
push eax
call sub.kernel32.dll_HeapAlloc
mov ecx, eax
mov edx, dword [esp + 0xc]
mov eax, ecx
test ecx, ecx
mov ecx, dword [esp + 4]
je 0x4d4dfb
lea edi, [ebx + edi + 0x138]
push ecx
push edx
push eax
mov ebx, eax
call sub.msvcrt.dll_memcpy
add esp, 0xc
movq xmm0, qword [esp + 0xe0]
movq xmm1, qword [esp + 0xe8]
mov eax, dword [esp + 0x30]
mov dword [esp + 4], edi
movq qword [esp + 0x14c], xmm0
movq qword [esp + 0x154], xmm1
mov dword [esp + 0x15c], ebx
mov dword [esp + 0x160], eax
mov dword [esp + 0x164], eax
mov ebx, dword [edi + 8]
mov ecx, dword [edi]
test ebx, ebx
je 0x4d25e4
js 0x4d4e0d
mov eax, dword [0x5880e0]
mov dword [esp + 0x30], ecx
test eax, eax
jne 0x4d25cc
call sub.kernel32.dll_GetProcessHeap
test eax, eax
je 0x4d4deb
mov dword [0x5880e0], eax
push ebx
push 0
push eax
call sub.kernel32.dll_HeapAlloc
mov ecx, dword [esp + 0x30]
mov edi, eax
test eax, eax
jne 0x4d25e9
jmp 0x4d4deb
mov edi, 1
push ebx
push ecx
push edi
call sub.msvcrt.dll_memcpy
add esp, 0xc
mov eax, dword [esp + 4]
movzx eax, byte [eax + 0xc]
mov dword [esp + 0xe0], edi
mov dword [esp + 0xe4], ebx
mov dword [esp + 0xe8], ebx
mov byte [esp + 0xec], al
lea edx, [esp + 0xa4]
lea eax, [esp + 0xe0]
lea ecx, [esp + 0x50]
push eax
lea eax, [esp + 0x150]
push eax
call fcn.004aeae0
add esp, 8
cmp byte [esp + 0x5c], 2
je 0x4d21b0
cmp dword [esp + 0x54], 0
je 0x4d21b0
push dword [esp + 0x50]
jmp 0x4d21a3
mov dword [esp + 0xe0], 0
mov dword [esp + 0xe4], eax
mov dword [esp + 0xe8], edx
lea edx, [esp + 0xe0]
lea eax, [esp + 0x94]
lea ecx, [esp + 0x14c]
push eax
call fcn.004b0ec0
add esp, 4
jmp 0x4d27b8
xor ecx, ecx
lea edx, [eax + eax*8]
mov dword [esp + 4], ebx
lea edx, [edx + edx*2]
add edx, eax
shl eax, 4
mov ebx, dword [ecx + edx + 0x1c]
mov dword [esp + 0xf8], ebx
mov ebx, dword [esp + 0x68]
movsd xmm0, qword [ecx + edx + 0x14]
movsd qword [esp + 0xf0], xmm0
movsd xmm0, qword [ecx + edx + 4]
movsd xmm1, qword [ecx + edx + 0xc]
movsd qword [esp + 0xe8], xmm1
movsd qword [esp + 0xe0], xmm0
mov dword [ecx + edx + 0x1c], ebx
mov ebx, dword [esp + 4]
movsd xmm0, qword [esp + 0x60]
movsd qword [ecx + edx + 0x14], xmm0
movsd xmm0, qword [esp + 0x50]
movsd xmm1, qword [esp + 0x58]
movsd qword [ecx + edx + 0xc], xmm1
movsd qword [ecx + edx + 4], xmm0
lea edx, [esp + 0xfc]
movsd xmm0, qword [ecx + eax + 0x138]
movsd xmm1, qword [ecx + eax + 0x140]
movsd qword [edx + 8], xmm1
movsd qword [edx], xmm0
lea edx, [esp + 0x6c]
movsd xmm0, qword [edx]
movsd xmm1, qword [edx + 8]
movsd qword [ecx + eax + 0x138], xmm0
movsd qword [ecx + eax + 0x140], xmm1
movsd xmm2, qword [esp + 0xf8]
movsd xmm1, qword [esp + 0xf0]
mov eax, dword [esp + 0x108]
movq xmm0, qword [esp + 0x100]
movsd qword [esp + 0x164], xmm2
movsd qword [esp + 0x15c], xmm1
movsd xmm2, qword [esp + 0xe0]
movq xmm1, qword [esp + 0xe8]
mov dword [esp + 0x174], eax
movq qword [esp + 0x16c], xmm0
movq qword [esp + 0x154], xmm1
movsd qword [esp + 0x14c], xmm2
movsd xmm2, qword [esp + 0x164]
movsd xmm1, qword [esp + 0x15c]
mov eax, dword [esp + 0x174]
movq xmm0, qword [esp + 0x16c]
dec dword [esp + 0xac]
cmp byte [esp + 0x94], 0
movsd qword [esp + 0xf8], xmm2
movsd qword [esp + 0xf0], xmm1
movsd xmm2, qword [esp + 0x14c]
movq xmm1, qword [esp + 0x154]
mov dword [esp + 0x108], eax
movq qword [esp + 0x100], xmm0
movq qword [esp + 0xe8], xmm1
movsd qword [esp + 0xe0], xmm2
je 0x4d2862
test edi, edi
je 0x4d4e45
mov eax, dword [ebx + 0x1ec]
dec edi
mov dword [esp + 0xa8], eax
mov dword [esp + 0xa4], edi
mov dword [eax], 0
push ebx
push 0
push dword [0x5880e0]
call sub.kernel32.dll_HeapFree
cmp byte [esp + 0xec], 2
je 0x4d21b0
mov eax, dword [esp + 0xfc]
mov edx, dword [esp + 0x100]
mov ecx, dword [esp + 0xf0]
mov edi, dword [esp + 0xf4]
movzx ebx, byte [esp + 0x108]
cmp dword [esp + 0xe4], 0
mov dword [esp + 0x30], eax
mov dword [esp + 4], edx
je 0x4d28c7
push dword [esp + 0xe0]
push 0
push dword [0x5880e0]
mov byte [esp + 0x14], bl
mov ebx, ecx
call sub.kernel32.dll_HeapFree
mov ecx, ebx
movzx ebx, byte [esp + 8]
test edi, edi
je 0x4d28d9
push ecx
push 0
push dword [0x5880e0]
call sub.kernel32.dll_HeapFree
cmp bl, 2
je 0x4d21b0
cmp dword [esp + 4], 0
je 0x4d21b0
push dword [esp + 0x30]
jmp 0x4d21a3
mov eax, dword [esp + 0xac]
movq xmm0, qword [esp + 0xa4]
mov dword [esp + 0x130], eax
movq qword [esp + 0x128], xmm0
mov dword [esp + 0x124], 1
mov eax, 1
cmp byte [esp + 0x1c], 0
mov dword [esp + 0xe8], 0
mov dword [esp + 0xe4], 0
mov dword [esp + 0xf0], 0
mov dword [esp + 0xec], 0
mov dword [esp + 0xf8], 0
mov dword [esp + 0xf4], 0
mov dword [esp + 0x100], 0
mov dword [esp + 0xfc], 0
mov dword [esp + 0x108], 0
mov dword [esp + 0x104], 0
mov dword [esp + 0x110], 0
mov dword [esp + 0x114], 0
mov dword [esp + 0x118], 0xffffffff
mov dword [esp + 0x11c], 0xffffffff
mov dword [esp + 0x120], 0xffffffff
mov dword [esp + 0xe0], 0x44
mov dword [esp + 0x10c], 0x100
mov dword [esp + 0x4c], eax
je 0x4d2a0b
mov dword [esp + 0x30], 0
mov eax, dword [esp + 0x90]
mov edx, dword [eax + 8]
test edx, edx
jne 0x4d2bd5
jmp 0x4d2c27
mov eax, dword [0x5880e0]
test eax, eax
jne 0x4d2a26
call sub.kernel32.dll_GetProcessHeap
test eax, eax
je 0x4d4e2b
mov dword [0x5880e0], eax
push 4
push 0
push eax
call sub.kernel32.dll_HeapAlloc
test eax, eax
je 0x4d4e2b
movq xmm0, qword [0x566680]
mov ecx, eax
mov dword [eax], 0x48544150
mov dword [esp + 0x50], eax
mov dword [esp + 0x14c], eax
add ecx, 4
mov dword [esp + 0x150], ecx
mov word [esp + 0x154], 0
movq qword [esp + 0x54], xmm0
mov byte [esp + 0x5c], 0
lea ecx, [esp + 0x20]
lea edx, [esp + 0x14c]
call fcn.004b7800
movsd xmm1, qword [esp + 0x58]
movq xmm0, qword [esp + 0x50]
mov eax, dword [esp + 0x28]
mov edx, dword [esp + 0x12c]
xor esi, esi
movsd qword [esp + 0x154], xmm1
movq xmm1, qword [esp + 0x20]
movq qword [esp + 0x14c], xmm0
mov dword [esp + 4], eax
mov dword [esp + 0x164], eax
test edx, edx
movq qword [esp + 0x15c], xmm1
mov eax, dword [esp + 0x15c]
mov dword [esp + 0xb0], eax
je 0x4d2d71
mov eax, dword [esp + 0x128]
mov dword [esp + 8], eax
movzx esi, word [edx + 0x1ea]
lea ecx, [edx + 4]
lea ebx, [edx + 0x130]
mov dword [esp + 0x30], edx
lea eax, [esi + esi*8]
mov dword [esp + 0xc], esi
lea edi, [eax + eax*2]
add edi, esi
mov esi, 0xffffffff
nop dword [eax]
test edi, edi
je 0x4d2b50
lea eax, [ecx + 0x1c]
mov dword [esp], eax
push 1
push dword [ecx + 0x18]
push dword [ecx + 0x10]
push dword [esp + 0x10]
push dword [esp + 0xc0]
call sub.kernel32.dll_CompareStringOrdinal
mov ecx, dword [esp]
add edi, 0xffffffe4
add ebx, 0x10
inc esi
cmp eax, 3
je 0x4d2b10
cmp eax, 1
jne 0x4d2b75
jmp 0x4d2b54
mov esi, dword [esp + 0xc]
mov eax, dword [esp + 8]
mov edx, dword [esp + 0x30]
sub eax, 1
jb 0x4d3010
mov edx, dword [edx + esi*4 + 0x1ec]
mov dword [esp + 8], eax
jmp 0x4d2ae8
cmp eax, 2
jne 0x4d4d56
mov esi, dword [ebx - 8]
mov eax, dword [ebx]
mov dword [esp + 8], eax
cmp dword [esp + 0x150], 0
je 0x4d2ba5
push dword [esp + 0x14c]
push 0
push dword [0x5880e0]
call sub.kernel32.dll_HeapFree
cmp dword [esp + 0x160], 0
je 0x4d2bc3
push dword [esp + 0xb0]
push 0
push dword [0x5880e0]
call sub.kernel32.dll_HeapFree
mov dword [esp + 0x30], esi
mov eax, dword [esp + 0x90]
mov edx, dword [eax + 8]
test edx, edx
je 0x4d2c27
mov eax, dword [esp + 0x90]
mov ecx, 0x4d0810
cmp edx, 4
mov dword [esp], edx
mov ebx, dword [eax]
jb 0x4d2c0e
mov eax, dword [ebx]
xor ecx, ecx
bswap eax
cmp eax, 0x5c5c3f5c
setb cl
cmp eax, 0x5c5c3f5d
mov eax, 0x4d0830
adc ecx, 0xffffffff
mov ecx, 0x4d0810
cmove ecx, eax
mov eax, dword [esp]
movzx eax, byte [eax + ebx - 1]
push eax
call ecx
add esp, 4
mov esi, dword [esp]
test al, al
je 0x4d2ca8
mov eax, 0x568d80
mov dword [esp + 0xa8], 2
mov edi, dword [esp + 0xa8]
mov ecx, dword [esp + 0x8c]
mov dword [ecx + 4], eax
mov eax, dword [esp + 0x4c]
mov dword [ecx], edi
mov dword [ecx + 8], 2
test eax, eax
je 0x4d2d57
mov ecx, dword [esp + 0x12c]
test ecx, ecx
je 0x4d2d2b
mov edx, dword [esp + 0x128]
mov eax, dword [esp + 0x130]
mov dword [esp + 0x14c], 0
mov dword [esp + 0x150], edx
mov dword [esp + 0x154], ecx
mov dword [esp + 0x160], edx
mov dword [esp + 0x164], ecx
xor ecx, ecx
jmp 0x4d2d3d
xor eax, eax
cmp esi, 3
mov ecx, 0
jbe 0x4d2d86
movzx ecx, byte [esi + ebx - 4]
mov edx, ecx
add dl, 0xbf
cmp dl, 0x1a
setb dl
shl dl, 5
or dl, cl
cmp dl, 0x2e
jne 0x4d2d84
movzx ecx, byte [ebx + esi - 3]
mov edx, ecx
add dl, 0xbf
cmp dl, 0x1a
setb dl
shl dl, 5
or dl, cl
cmp dl, 0x65
jne 0x4d2d84
movzx ecx, byte [ebx + esi - 2]
mov edx, ecx
add dl, 0xbf
cmp dl, 0x1a
setb dl
shl dl, 5
or dl, cl
cmp dl, 0x78
jne 0x4d2d84
movzx ecx, byte [ebx + esi - 1]
mov edx, ecx
add dl, 0xbf
cmp dl, 0x1a
setb dl
shl dl, 5
or dl, cl
cmp dl, 0x65
sete cl
jmp 0x4d2d86
xor eax, eax
mov ecx, 2
mov dword [esp + 0x14c], 2
mov dword [esp + 0x15c], ecx
mov dword [esp + 0x16c], eax
lea ecx, [esp + 0x14c]
call fcn.004ab910
cmp dword [ebp + 8], 3
jb 0x4d2d69
push dword [esp + 0xdc]
call sub.kernel32.dll_CloseHandle
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
cmp dword [esp + 0x150], 0
jne 0x4d2b91
jmp 0x4d2ba5
xor ecx, ecx
lea edx, [ebx + esi]
mov dword [esp + 0xb0], ebx
mov dword [esp + 4], edx
nop word cs:[eax + eax]
nop
cmp dword [esp], eax
je 0x4d2dd5
movzx edx, byte [ebx + eax]
cmp edx, 0x2f
je 0x4d2db4
inc eax
cmp edx, 0x5c
jne 0x4d2da0
test cl, cl
je 0x4d2e98
mov edx, ebx
lea ecx, [esp + 0xa4]
push dword [esp]
call fcn.004d0d50
add esp, 4
jmp 0x4d3947
xor esi, esi
mov eax, ebx
jmp 0x4d2deb
xor esi, esi
test cx, cx
je 0x4d2f8b
mov cx, 1
test si, si
jne 0x4d2de0
cmp eax, dword [esp + 4]
je 0x4d2fd0
movzx edx, byte [eax]
test dl, dl
js 0x4d2e08
inc eax
jmp 0x4d2e63
movzx ebx, byte [eax + 1]
mov esi, edx
and esi, 0x1f
and ebx, 0x3f
cmp dl, 0xdf
jbe 0x4d2e52
movzx edi, byte [eax + 2]
shl ebx, 6
and edi, 0x3f
or edi, ebx
cmp dl, 0xf0
jb 0x4d2e6c
movzx edx, byte [eax + 3]
and esi, 7
shl edi, 6
add eax, 4
shl esi, 0x12
and edx, 0x3f
or edx, edi
or edx, esi
mov ebx, dword [esp + 0xb0]
cmp edx, 0xffff
jbe 0x4d2e63
jmp 0x4d2e85
shl esi, 6
add eax, 2
or esi, ebx
mov ebx, dword [esp + 0xb0]
mov edx, esi
xor esi, esi
mov ecx, edx
jmp 0x4d2de2
shl esi, 0xc
add eax, 3
or edi, esi
mov edx, edi
mov ebx, dword [esp + 0xb0]
cmp edx, 0xffff
jbe 0x4d2e63
and edx, 0x3ff
or edx, 0xdc00
mov esi, edx
jmp 0x4d2de2
cmp dword [esp], 0
js 0x4d4f08
mov eax, dword [0x5880e0]
test eax, eax
jne 0x4d2ebd
call sub.kernel32.dll_GetProcessHeap
test eax, eax
je 0x4d4e32
mov dword [0x5880e0], eax
mov esi, dword [esp]
push esi
push 0
push eax
call sub.kernel32.dll_HeapAlloc
test eax, eax
je 0x4d4e32
mov edi, eax
push esi
push ebx
push eax
call sub.msvcrt.dll_memcpy
add esp, 0xc
mov dword [esp + 0x50], edi
mov dword [esp + 0x54], esi
mov dword [esp + 0x58], esi
mov byte [esp + 0x5c], 0
movq xmm0, qword [esp + 0x58]
movq xmm1, qword [esp + 0x50]
movq qword [esp + 0x154], xmm0
movq qword [esp + 0x14c], xmm1
lea esi, [esp + 0x14c]
push 4
push str..exeprogram_not_found
push esi
call fcn.004d0200
add esp, 0xc
movq xmm0, qword [esp + 0x14c]
movq xmm1, qword [esp + 0x154]
movq qword [esp + 0x50], xmm0
movq qword [esp + 0x58], xmm1
mov edi, dword [esp + 0x50]
mov ebx, dword [esp + 0x58]
mov edx, edi
lea ecx, [esp + 0x14c]
push ebx
call fcn.004d53a0
add esp, 4
cmp dword [esp + 0x14c], 0
je 0x4d2fa0
mov eax, dword [esp + 0x154]
movq xmm0, qword [esp + 0x14c]
mov dword [esp + 0xac], eax
movq qword [esp + 0xa4], xmm0
jmp 0x4d3932
mov dword [esp + 0xa8], 2
mov eax, 0x568d54
jmp 0x4d2c37
push ebx
push edi
call fcn.004c7f80
add esp, 8
test eax, eax
je 0x4d3920
mov esi, edx
cmp edx, 2
jne 0x4d3025
movzx ecx, word [eax]
cmp ecx, 0x2e2e
jne 0x4d3025
mov esi, 2
xor ecx, ecx
jmp 0x4d3904
mov eax, dword [esp]
cmp eax, 7
ja 0x4d3062
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 8]
xor eax, eax
nop word cs:[eax + eax]
cmp byte [ebx + eax], 0x2e
je 0x4d3091
inc eax
cmp dword [esp], eax
jne 0x4d2ff0
mov dword [esp + 0x88], 0
jmp 0x4d309c
xor esi, esi
cmp dword [esp + 0x150], 0
jne 0x4d2b91
jmp 0x4d2ba5
mov dword [esp + 0x30], ebx
xor ebx, ebx
mov ecx, eax
mov dword [esp], edi
cmp esi, ebx
je 0x4d307f
cmp byte [ecx + esi - 1], 0x2e
lea edi, [ecx - 1]
mov edx, ebx
lea ebx, [ebx + 1]
mov ecx, edi
jne 0x4d3030
mov ecx, esi
sub ecx, ebx
mov dword [esp + 8], ecx
inc ecx
cmp esi, ecx
jb 0x4d4f36
cmp esi, ebx
jne 0x4d38f5
xor ecx, ecx
jmp 0x4d3085
push eax
push ebx
push 0x2e
call fcn.00417cb0
add esp, 0xc
mov dword [esp + 0x88], eax
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 8]
jmp 0x4d309c
mov ecx, eax
mov edx, esi
xor eax, eax
mov edi, dword [esp]
mov ebx, dword [esp + 0x30]
jmp 0x4d3904
mov dword [esp + 0x88], 1
test ecx, ecx
je 0x4d31f7
add edx, ecx
mov dword [esp + 0x50], ecx
mov dword [esp + 0x54], edx
mov word [esp + 0x58], 0
mov byte [esp + 0x5c], 1
lea eax, [esp + 0x50]
lea edi, [esp + 0x14c]
push eax
push edi
call fcn.004cfdf0
add esp, 8
jmp 0x4d30ee
lea eax, [esp + 0x50]
push eax
push edi
call fcn.004cfdf0
add esp, 8
movzx eax, byte [esp + 0x158]
cmp al, 2
je 0x4d31f7
mov esi, dword [esp + 0x154]
mov ecx, dword [esp + 0x14c]
mov edx, dword [esp + 0x150]
test esi, esi
jne 0x4d312b
test edx, edx
je 0x4d30e0
push ecx
push 0
push dword [0x5880e0]
call sub.kernel32.dll_HeapFree
jmp 0x4d30e0
lea edi, [esp + 0x159]
mov ah, byte [edi + 2]
movzx ebx, word [edi]
mov word [esp + 0x94], bx
mov word [edi], bx
mov byte [edi + 2], ah
mov dword [esp + 0x14c], ecx
mov dword [esp + 0x150], edx
mov dword [esp + 0x154], esi
mov byte [esp + 0x96], ah
mov byte [esp + 0x158], al
push dword [esp]
push dword [esp + 0xb4]
lea edi, [esp + 0x154]
push edi
call fcn.004c6fd0
add esp, 0xc
cmp dword [esp + 0x88], 1
je 0x4d319d
push 3
push str.exeNULexit_code:
push edi
call fcn.004c7a80
add esp, 0xc
mov ebx, dword [esp + 0x14c]
mov edx, ebx
lea ecx, [esp + 0x20]
push dword [esp + 0x154]
call fcn.004d53a0
add esp, 4
cmp dword [esp + 0x150], 0
je 0x4d31d1
push ebx
push 0
push dword [0x5880e0]
call sub.kernel32.dll_HeapFree
mov ebx, dword [esp + 0x20]
test ebx, ebx
jne 0x4d490e
lea eax, [esp + 0x50]
push eax
push edi
call fcn.004cfdf0
add esp, 8
mov ebx, dword [esp + 0xb0]
jmp 0x4d30ee
lea ecx, [esp + 0x20]
call fcn.004d0010
cmp byte [esp + 0x2c], 2
jne 0x4d3257
cmp byte [esp + 0x20], 3
jne 0x4d3328
mov edi, dword [esp + 0x24]
mov eax, dword [edi + 4]
mov eax, dword [eax]
push dword [edi]
call eax
add esp, 4
mov ecx, dword [edi + 4]
cmp dword [ecx + 4], 0
je 0x4d3244
mov eax, dword [edi]
cmp dword [ecx + 8], 9
jb 0x4d3236
mov eax, dword [eax - 4]
push eax
push 0
push dword [0x5880e0]
call sub.kernel32.dll_HeapFree
push edi
push 0
push dword [0x5880e0]
call sub.kernel32.dll_HeapFree
jmp 0x4d3328
movq xmm0, qword [esp + 0x20]
movq xmm1, qword [esp + 0x28]
movq qword [esp + 0x50], xmm0
movq qword [esp + 0x58], xmm1
mov esi, dword [esp + 0x58]
push esi
push dword [esp + 0x54]
call fcn.004c7e50
add esp, 8
test eax, eax
je 0x4d328c
cmp esi, edx
jb 0x4d328c
mov dword [esp + 0x58], edx
movq xmm0, qword [esp + 0x50]
movq xmm1, qword [esp + 0x58]
movq qword [esp + 0x154], xmm1
movq qword [esp + 0x14c], xmm0
lea esi, [esp + 0x14c]
push dword [esp]
push ebx
push esi
call fcn.004c6fd0
add esp, 0xc
cmp dword [esp + 0x88], 1
je 0x4d32d8
push 3
push str.exeNULexit_code:
push esi
call fcn.004c7a80
add esp, 0xc
mov edi, dword [esp + 0x14c]
mov edx, edi
lea ecx, [esp + 0x94]
push dword [esp + 0x154]
call fcn.004d53a0
add esp, 4
cmp dword [esp + 0x150], 0
je 0x4d330f
push edi
push 0
push dword [0x5880e0]
call sub.kernel32.dll_HeapFree
mov ebx, dword [esp + 0x94]
test ebx, ebx
je 0x4d3328
movq xmm0, qword [esp + 0x98]
jmp 0x4d3719
mov edi, 0x200
pxor xmm0, xmm0
mov dword [esp + 0x94], 2
mov dword [esp + 0x30], 0
mov dword [esp + 0x1c], 2
mov dword [esp + 8], 0
movq qword [esp + 0x98], xmm0
cmp edi, 0x201
jb 0x4d3385
jmp 0x4d33a0
mov ebx, dword [esp + 0xb0]
jbe 0x4d343f
cmp edi, 0x201
jae 0x4d33a0
mov dword [esp + 0xc], 0x200
lea esi, [esp + 0x14c]
mov ebx, edi
jmp 0x4d33eb
mov ebx, dword [esp + 0x30]
mov eax, dword [esp + 8]
sub edi, ebx
sub eax, ebx
cmp eax, edi
jae 0x4d33d4
mov edx, ebx
lea ecx, [esp + 0x94]
push edi
call fcn.004b23c0
add esp, 4
mov eax, dword [esp + 0x94]
mov ebx, dword [esp + 0x98]
mov dword [esp + 0x1c], eax
mov esi, dword [esp + 0x1c]
mov dword [esp + 0x9c], ebx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x30], ebx
push 0
call sub.kernel32.dll_SetLastError
push ebx
push esi
call sub.kernel32.dll_GetSystemDirectoryW
mov edi, eax
test eax, eax
jne 0x4d340c
call sub.kernel32.dll_GetLastError
test eax, eax
jne 0x4d34bc
cmp edi, ebx
jne 0x4d3370
call sub.kernel32.dll_GetLastError
cmp eax, 0x7a
jne 0x4d4e5e
add ebx, ebx
mov eax, 0xffffffff
cmovb ebx, eax
mov edi, ebx
cmp edi, 0x201
jae 0x4d33a0
jmp 0x4d3385
mov eax, dword [esp + 0xc]
cmp edi, eax
ja 0x4d4f25
lea eax, [esp + 0x50]
push edi
push esi
mov esi, eax
push eax
call fcn.004c5b70
add esp, 0xc
push dword [esp]
push ebx
push esi
call fcn.004c6fd0
add esp, 0xc
cmp dword [esp + 0x88], 1
je 0x4d3483
push 3
push str.exeNULexit_code:
push esi
call fcn.004c7a80
add esp, 0xc
mov ebx, dword [esp + 0x50]
mov edx, ebx
lea ecx, [esp + 0x20]
push dword [esp + 0x58]
call fcn.004d53a0
add esp, 4
cmp dword [esp + 0x54], 0
je 0x4d34ae
push ebx
push 0
push dword [0x5880e0]
call sub.kernel32.dll_HeapFree
mov esi, dword [esp + 0x20]
movq xmm0, qword [esp + 0x24]
mov bl, 1
jmp 0x4d34c9
call sub.kernel32.dll_GetLastError
movd xmm0, eax
xor esi, esi
xor ebx, ebx
cmp dword [esp + 0x30], 0
je 0x4d34ed
push dword [esp + 0x1c]
push 0
push dword [0x5880e0]
movdqa xmmword [esp + 0x3c], xmm0
call sub.kernel32.dll_HeapFree
movdqa xmm0, xmmword [esp + 0x30]
test bl, bl
je 0x4d34fd
test esi, esi
mov eax, esi
jne 0x4d3717
jmp 0x4d3543
mov eax, esi
cmp al, 3
jne 0x4d3543
movd edi, xmm0
mov eax, dword [edi + 4]
mov eax, dword [eax]
push dword [edi]
call eax
add esp, 4
mov ecx, dword [edi + 4]
cmp dword [ecx + 4], 0
je 0x4d3535
mov eax, dword [edi]
cmp dword [ecx + 8], 9
jb 0x4d3527
mov eax, dword [eax - 4]
push eax
push 0
push dword [0x5880e0]
call sub.kernel32.dll_HeapFree
push edi
push 0
push dword [0x5880e0]
call sub.kernel32.dll_HeapFree
mov esi, 0x200
pxor xmm0, xmm0
mov dword [esp + 0x94], 2
mov dword [esp + 0x30], 0
mov dword [esp + 0x1c], 2
mov dword [esp + 8], 0
movq qword [esp + 0x98], xmm0
cmp esi, 0x201
jb 0x4d35a5
jmp 0x4d35c0
mov ebx, dword [esp + 0xb0]
jbe 0x4d365f
cmp esi, 0x201
jae 0x4d35c0
mov dword [esp + 0xc], 0x200
lea edi, [esp + 0x14c]
mov ebx, esi
jmp 0x4d360b
mov ebx, dword [esp + 0x30]
mov eax, dword [esp + 8]
sub esi, ebx
sub eax, ebx
cmp eax, esi
jae 0x4d35f4
mov edx, ebx
lea ecx, [esp + 0x94]
push esi
call fcn.004b23c0
add esp, 4
mov eax, dword [esp + 0x94]
mov ebx, dword [esp + 0x98]
mov dword [esp + 0x1c], eax
mov edi, dword [esp + 0x1c]
mov dword [esp + 0x9c], ebx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x30], ebx
push 0
call sub.kernel32.dll_SetLastError
push ebx
push edi
call sub.kernel32.dll_GetWindowsDirectoryW
mov esi, eax
test eax, eax
jne 0x4d362c
call sub.kernel32.dll_GetLastError
test eax, eax
jne 0x4d36dc
cmp esi, ebx
jne 0x4d3590
call sub.kernel32.dll_GetLastError
cmp eax, 0x7a
jne 0x4d4e77
add ebx, ebx
mov eax, 0xffffffff
cmovb ebx, eax
mov esi, ebx
cmp esi, 0x201
jae 0x4d35c0
jmp 0x4d35a5
mov eax, dword [esp + 0xc]
cmp esi, eax
ja 0x4d4f47
lea eax, [esp + 0x50]
push esi
mov esi, eax
push edi
push eax
call fcn.004c5b70
add esp, 0xc
push dword [esp]
push ebx
push esi
call fcn.004c6fd0
add esp, 0xc
cmp dword [esp + 0x88], 1
je 0x4d36a3
push 3
push str.exeNULexit_code:
push esi
call fcn.004c7a80
add esp, 0xc
mov ebx, dword [esp + 0x50]
mov edx, ebx
lea ecx, [esp + 0x20]
push dword [esp + 0x58]
call fcn.004d53a0
add esp, 4
cmp dword [esp + 0x54], 0
je 0x4d36ce
push ebx
push 0
push dword [0x5880e0]
call sub.kernel32.dll_HeapFree
mov esi, dword [esp + 0x20]
movq xmm0, qword [esp + 0x24]
mov bl, 1
jmp 0x4d36e9
call sub.kernel32.dll_GetLastError
movd xmm0, eax
xor esi, esi
xor ebx, ebx
cmp dword [esp + 0x30], 0
je 0x4d370d
push dword [esp + 0x1c]
push 0
push dword [0x5880e0]
movdqa xmmword [esp + 0x3c], xmm0
call sub.kernel32.dll_HeapFree
movdqa xmm0, xmmword [esp + 0x30]
test bl, bl
je 0x4d372b
test esi, esi
mov eax, esi
je 0x4d3771
mov ebx, esi
movd edi, xmm0
pshufd xmm0, xmm0, 0x55
movd eax, xmm0
jmp 0x4d395c
mov eax, esi
cmp al, 3
jne 0x4d3771
movd edi, xmm0
mov eax, dword [edi + 4]
mov eax, dword [eax]
push dword [edi]
call eax
add esp, 4
mov ecx, dword [edi + 4]
cmp dword [ecx + 4], 0
je 0x4d3763
mov eax, dword [edi]
cmp dword [ecx + 8], 9
jb 0x4d3755
mov eax, dword [eax - 4]
push eax
push 0
push dword [0x5880e0]
call sub.kernel32.dll_HeapFree
push edi
push 0
push dword [0x5880e0]
call sub.kernel32.dll_HeapFree
push 4
push str.PATHlock_count_overflow_in_reentrant_mutexlibrary_std_src_sys_common_remutex.rs
lea eax, [esp + 0x9c]
push eax
call fcn.004c34b0
add esp, 0xc
cmp byte [esp + 0xa0], 2
je 0x4d4742
movq xmm0, qword [esp + 0x94]
movq xmm1, qword [esp + 0x9c]
lea edi, [esp + 0x14c]
movq qword [esp + 0x20], xmm0
movq qword [esp + 0x28], xmm1
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x28]
add eax, ecx
mov dword [esp + 0x50], ecx
mov dword [esp + 0x30], ecx
mov dword [esp + 0x54], eax
mov word [esp + 0x58], 0
mov byte [esp + 0x5c], 1
jmp 0x4d37eb
mov ebx, dword [esp + 0x10]
test ebx, ebx
jne 0x4d4928
lea eax, [esp + 0x50]
push eax
push edi
call fcn.004cfdf0
add esp, 8
jmp 0x4d3809
lea eax, [esp + 0x50]
push eax
push edi
call fcn.004cfdf0
add esp, 8
movzx eax, byte [esp + 0x158]
cmp al, 2
je 0x4d472a
mov esi, dword [esp + 0x154]
mov ecx, dword [esp + 0x14c]
mov edx, dword [esp + 0x150]
test esi, esi
jne 0x4d3846
test edx, edx
je 0x4d37fb
push ecx
push 0
push dword [0x5880e0]
call sub.kernel32.dll_HeapFree
jmp 0x4d37fb
lea edi, [esp + 0x159]
mov ah, byte [edi + 2]
movzx ebx, word [edi]
mov word [esp + 0xd0], bx
mov word [edi], bx
mov byte [edi + 2], ah
mov dword [esp + 0x14c], ecx
mov dword [esp + 0x150], edx
mov dword [esp + 0x154], esi
mov byte [esp + 0xd2], ah
mov byte [esp + 0x158], al
push dword [esp]
push dword [esp + 0xb4]
lea edi, [esp + 0x154]
push edi
call fcn.004c6fd0
add esp, 0xc
cmp dword [esp + 0x88], 1
je 0x4d38b8
push 3
push str.exeNULexit_code:
push edi
call fcn.004c7a80
add esp, 0xc
mov ebx, dword [esp + 0x14c]
mov edx, ebx
lea ecx, [esp + 0x10]
push dword [esp + 0x154]
call fcn.004d53a0
add esp, 4
cmp dword [esp + 0x150], 0
je 0x4d37df
push ebx
push 0
push dword [0x5880e0]
call sub.kernel32.dll_HeapFree
jmp 0x4d37df
lea ecx, [edi + esi + 1]
mov edi, dword [esp]
mov ebx, dword [esp + 0x30]
mov esi, dword [esp + 8]
test eax, eax
cmovne ecx, eax
test ecx, ecx
je 0x4d3920
test eax, eax
cmove esi, edx
add ecx, esi
sub ecx, edi
cmp ebx, ecx
jb 0x4d3920
mov ebx, ecx
mov dword [esp + 0x58], ecx
mov edx, edi
lea ecx, [esp + 0xa4]
push ebx
call fcn.004d0d50
add esp, 4
cmp dword [esp + 0x54], 0
je 0x4d3947
push edi
push 0
push dword [0x5880e0]
call sub.kernel32.dll_HeapFree
mov ebx, dword [esp + 0xa4]
mov edi, dword [esp + 0xa8]
mov eax, dword [esp + 0xac]
test ebx, ebx
je 0x4d2c3e
mov ecx, eax
mov dword [esp + 0x134], ebx
mov dword [esp + 0x138], edi
mov dword [esp + 0x13c], eax
sub ecx, 5
jae 0x4d3aac
mov eax, dword [esp + 0x90]
pxor xmm0, xmm0
mov dword [esp + 0x50], 2
movq qword [esp + 0x54], xmm0
mov ebx, dword [eax + 0x10]
mov esi, dword [eax + 0x18]
movzx eax, byte [eax + 0x59]
mov byte [esp], al
lea ecx, [esp + 0x50]
xor edx, edx
call fcn.004b1de0
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x58]
mov word [eax + ecx*2], 0x22
mov eax, dword [esp + 0xb0]
inc ecx
mov dword [esp + 0x58], ecx
mov dword [esp + 0x14c], eax
mov eax, dword [esp + 4]
mov dword [esp + 0x150], eax
mov word [esp + 0x154], 0
lea ecx, [esp + 0x50]
lea edx, [esp + 0x14c]
call fcn.004b76b0
mov edx, dword [esp + 0x58]
mov dword [esp + 0x30], edi
cmp edx, dword [esp + 0x54]
jne 0x4d3a16
lea ecx, [esp + 0x50]
call fcn.004b1de0
mov edx, dword [esp + 0x58]
mov edi, dword [esp + 0x50]
mov word [edi + edx*2], 0x22
inc edx
test esi, esi
mov dword [esp + 0x58], edx
je 0x4d3b7f
shl esi, 2
lea edi, [esi + esi*4]
movzx esi, byte [esp]
nop word [eax + eax]
mov edx, dword [esp + 0x58]
cmp edx, dword [esp + 0x54]
jne 0x4d3a57
lea ecx, [esp + 0x50]
call fcn.004b1de0
mov edx, dword [esp + 0x58]
mov eax, dword [esp + 0x50]
mov word [eax + edx*2], 0x20
inc edx
mov dword [esp + 0x58], edx
lea edx, [esp + 0x50]
lea ecx, [esp + 0x14c]
push esi
push ebx
call fcn.004cde70
add esp, 8
movzx eax, byte [esp + 0x14c]
cmp al, 4
jne 0x4d3c9d
add ebx, 0x14
add edi, 0xffffffec
jne 0x4d3a40
mov edi, dword [esp + 0x50]
mov ebx, dword [esp + 0x54]
mov esi, dword [esp + 0x58]
test edi, edi
jne 0x4d3b87
jmp 0x4d3ce6
mov edx, eax
sub edx, ecx
cmp edx, 5
sete dl
xor esi, esi
cmp eax, ecx
lea eax, [ebx + ecx*2]
cmovb eax, esi
jb 0x4d3984
test dl, dl
je 0x4d3984
cmp word [eax], 0x2e
jne 0x4d3984
cmp word [eax + 8], 0
jne 0x4d3984
movzx ecx, word [eax + 2]
lea edx, [ecx - 0x42]
cmp edx, 0x21
ja 0x4d3984
mov esi, dword [esp + 0xcc]
add esi, dword [edx*4 + 0x4d5314]
jmp esi
mov ebx, dword [esp + 0x54]
mov esi, dword [esp + 0x58]
mov eax, dword [esp + 0x13c]
movsd xmm0, qword [esp + 0x134]
mov dword [esp + 0xac], eax
movsd qword [esp + 0xa4], xmm0
mov eax, dword [esp + 0xac]
movq xmm0, qword [esp + 0xa4]
cmp esi, ebx
mov dword [esp + 0xd0], edi
mov dword [esp + 0xd8], esi
mov dword [esp + 0xd4], ebx
mov dword [esp + 0x148], eax
movq qword [esp + 0x140], xmm0
jne 0x4d3bfc
lea ecx, [esp + 0xd0]
mov edx, esi
call fcn.004b1de0
mov edi, dword [esp + 0xd0]
mov esi, dword [esp + 0xd8]
mov ecx, dword [esp + 0x90]
mov word [edi + esi*2], 0
inc esi
mov eax, 0x400
mov edx, 0x608
mov edi, 2
mov dword [esp + 4], 0
mov dword [esp + 0xd8], esi
cmp byte [ecx + 0x58], 0
cmove edx, eax
or edx, dword [ecx + 0x3c]
cmp dword [esp + 0x124], 1
mov dword [esp + 0x4c], edx
jne 0x4d3d29
mov ebx, dword [esp + 0x130]
mov esi, dword [esp + 0x128]
mov edi, dword [esp + 0x12c]
pxor xmm0, xmm0
mov dword [esp + 0x10], 2
movq qword [esp + 0x14], xmm0
test ebx, ebx
mov dword [esp + 0xa4], esi
mov dword [esp + 0xa8], edi
mov dword [esp + 0xac], ebx
je 0x4d3f09
mov ecx, 2
mov dword [esp + 0x88], 0
jmp 0x4d3f30
movzx ecx, byte [esp + 0x153]
mov edi, dword [esp + 0x14d]
movzx esi, word [esp + 0x151]
movzx eax, al
mov ebx, edi
shl ecx, 0x10
or esi, ecx
shl ebx, 8
cmp dword [esp + 0x54], 0
je 0x4d3ce0
push dword [esp + 0x50]
push 0
push dword [0x5880e0]
mov dword [esp + 0xc], eax
call sub.kernel32.dll_HeapFree
mov eax, dword [esp]
shld esi, edi, 8
or ebx, eax
mov eax, dword [esp + 0x8c]
mov dword [eax], ebx
mov dword [eax + 4], esi
mov dword [eax + 8], 2
mov eax, dword [esp + 0x30]
test eax, eax
je 0x4d3d15
push dword [esp + 0x134]
push 0
push dword [0x5880e0]
call sub.kernel32.dll_HeapFree
mov eax, dword [esp + 0x124]
test eax, eax
jne 0x4d2c5d
jmp 0x4d2d57
xor esi, esi
mov eax, 2
xor ecx, ecx
xor edx, edx
mov dword [esp + 0x94], eax
mov dword [esp + 0xb0], ecx
mov dword [esp + 0x98], ecx
mov ecx, dword [esp + 0x90]
mov dword [esp], esi
mov dword [esp + 0x9c], edx
mov esi, 0
mov edx, 0
mov dword [esp + 0x30], eax
cmp byte [ecx + 0x38], 2
mov ecx, 0
je 0x4d440e
mov eax, dword [esp + 0x90]
xor edi, edi
mov edx, dword [eax + 0x2c]
mov eax, dword [eax + 0x34]
add eax, edx
mov dword [esp + 8], edx
mov dword [esp + 4], eax
jmp 0x4d3dab
xor edi, edi
test si, si
je 0x4d3ef6
mov si, 1
test di, di
jne 0x4d3da0
cmp edx, eax
je 0x4d43aa
movzx ebx, byte [edx]
test bl, bl
js 0x4d3dc6
inc edx
jmp 0x4d3e23
movzx ecx, byte [edx + 1]
mov edi, ebx
and edi, 0x1f
and ecx, 0x3f
cmp bl, 0xdf
jbe 0x4d3e01
movzx eax, byte [edx + 2]
shl ecx, 6
and eax, 0x3f
or eax, ecx
cmp bl, 0xf0
jb 0x4d3e0d
movzx ebx, byte [edx + 3]
and edi, 7
shl eax, 6
add edx, 4
shl edi, 0x12
and ebx, 0x3f
or ebx, eax
or ebx, edi
jmp 0x4d3e17
shl edi, 6
add edx, 2
or edi, ecx
mov ebx, edi
jmp 0x4d3e23
shl edi, 0xc
add edx, 3
or eax, edi
mov ebx, eax
mov eax, dword [esp + 4]
cmp ebx, 0xffff
ja 0x4d3e2c
xor edi, edi
mov esi, ebx
jmp 0x4d3da2
and ebx, 0x3ff
or ebx, 0xdc00
mov edi, ebx
jmp 0x4d3da2
xor edi, edi
mov ecx, 2
mov esi, 0x568d54
xor edx, edx
jmp 0x4d440e
lea ecx, [esp + 0x10]
xor edx, edx
call fcn.004b1de0
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0x18]
mov word [eax + edx*2], 0
inc edx
mov ecx, eax
mov dword [esp + 0x88], edx
mov dword [esp + 0x18], edx
xor eax, eax
test edi, edi
lea edx, [esp + 0x14c]
sete al
cmove ebx, edi
add eax, eax
mov dword [esp + 0x14c], eax
mov dword [esp + 0x150], esi
mov dword [esp + 0x154], edi
mov dword [esp + 0x15c], eax
mov dword [esp + 0x160], esi
mov dword [esp + 0x164], edi
mov dword [esp + 0x16c], ebx
lea ebx, [esp + 0x50]
mov edi, 2
mov esi, ecx
mov ecx, ebx
call fcn.004aff20
mov eax, dword [esp + 0x54]
test eax, eax
je 0x4d4781
mov ecx, dword [esp + 0x58]
lea edx, [ecx + ecx*8]
lea edx, [edx + edx*2]
add edx, ecx
cmp byte [eax + edx + 0x10], 2
je 0x4d4781
shl ecx, 4
mov edi, dword [eax + edx + 8]
mov dword [esp], esi
mov esi, dword [eax + edx + 4]
xor ebx, ebx
movq xmm0, qword [eax + ecx + 0x138]
movq xmm1, qword [eax + ecx + 0x140]
mov ecx, dword [eax + edx + 0x14]
mov dword [esp + 0x30], edi
mov edi, dword [eax + edx + 0xc]
mov dword [esp + 0x1c], esi
mov dword [esp + 8], ecx
mov ecx, dword [eax + edx + 0x18]
mov eax, dword [eax + edx + 0x1c]
movq qword [esp + 0x28], xmm1
movq qword [esp + 0x20], xmm0
add edi, esi
mov dword [esp + 0xcc], eax
mov eax, esi
mov dword [esp + 0xc], ecx
mov dword [esp + 0xb0], edi
jmp 0x4d401b
xor ebx, ebx
test si, si
je 0x4d42fd
mov si, 1
test bx, bx
jne 0x4d4010
cmp eax, edi
je 0x4d40bc
movzx ecx, byte [eax]
test cl, cl
js 0x4d4036
inc eax
jmp 0x4d408a
movzx edx, byte [eax + 1]
mov ebx, ecx
and ebx, 0x1f
and edx, 0x3f
cmp cl, 0xdf
jbe 0x4d4080
movzx edi, byte [eax + 2]
shl edx, 6
and edi, 0x3f
or edi, edx
cmp cl, 0xf0
jb 0x4d4090
movzx ecx, byte [eax + 3]
and ebx, 7
shl edi, 6
add eax, 4
shl ebx, 0x12
and ecx, 0x3f
or ecx, edi
or ecx, ebx
mov edi, dword [esp + 0xb0]
cmp ecx, 0xffff
jbe 0x4d408a
jmp 0x4d40a9
shl ebx, 6
add eax, 2
or ebx, edx
mov ecx, ebx
xor ebx, ebx
mov esi, ecx
jmp 0x4d4012
shl ebx, 0xc
add eax, 3
or edi, ebx
mov ecx, edi
mov edi, dword [esp + 0xb0]
cmp ecx, 0xffff
jbe 0x4d408a
and ecx, 0x3ff
or ecx, 0xdc00
mov ebx, ecx
jmp 0x4d4012
cmp dword [esp + 0x30], 0
mov esi, dword [esp + 8]
je 0x4d40d8
push dword [esp + 0x1c]
push 0
push dword [0x5880e0]
call sub.kernel32.dll_HeapFree
mov eax, dword [esp + 0x14]
mov edi, dword [esp + 0x88]
mov ecx, dword [esp + 0xcc]
sub eax, edi
cmp eax, ecx
mov eax, ecx
mov ecx, dword [esp]
jae 0x4d4113
mov edx, edi
lea ecx, [esp + 0x10]
push eax
call fcn.004b23c0
add esp, 4
mov ecx, dword [esp + 0x10]
mov edi, dword [esp + 0x18]
mov eax, dword [esp + 0xcc]
mov ebx, eax
mov dword [esp], ecx
add eax, eax
lea ecx, [ecx + edi*2]
push eax
push esi
push ecx
call sub.msvcrt.dll_memcpy
add esp, 0xc
add edi, ebx
cmp dword [esp + 0xc], 0
mov ebx, edi
mov dword [esp + 0x18], edi
je 0x4d4145
push esi
push 0
push dword [0x5880e0]
call sub.kernel32.dll_HeapFree
cmp ebx, dword [esp + 0x14]
mov edx, ebx
jne 0x4d4160
lea ecx, [esp + 0x10]
call fcn.004b1de0
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0x18]
jmp 0x4d4163
mov eax, dword [esp]
mov word [eax + edx*2], 0x3d
inc edx
xor edi, edi
mov ebx, dword [esp + 0x20]
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x18], edx
mov eax, dword [esp + 0x24]
movzx edx, byte [esp + 0x2c]
lea esi, [ebx + ecx]
mov dword [esp + 0xb0], eax
mov byte [esp + 8], dl
mov dword [esp + 0xc], ecx
mov dword [esp + 0x30], ebx
mov dword [esp], esi
jmp 0x4d41a7
xor edi, edi
test ax, ax
je 0x4d4345
mov ax, 1
test di, di
jne 0x4d419c
cmp ebx, esi
je 0x4d423a
movzx ecx, byte [ebx]
test cl, cl
js 0x4d41c2
inc ebx
jmp 0x4d421e
movzx edx, byte [ebx + 1]
mov edi, ecx
and edi, 0x1f
and edx, 0x3f
cmp cl, 0xdf
jbe 0x4d41fd
movzx esi, byte [ebx + 2]
shl edx, 6
and esi, 0x3f
or esi, edx
cmp cl, 0xf0
jb 0x4d4209
movzx ecx, byte [ebx + 3]
and edi, 7
shl esi, 6
add ebx, 4
shl edi, 0x12
and ecx, 0x3f
or ecx, esi
or ecx, edi
jmp 0x4d4213
shl edi, 6
add ebx, 2
or edi, edx
mov ecx, edi
jmp 0x4d421e
shl edi, 0xc
add ebx, 3
or esi, edi
mov ecx, esi
mov esi, dword [esp]
cmp ecx, 0xffff
ja 0x4d4227
xor edi, edi
mov eax, ecx
jmp 0x4d419e
and ecx, 0x3ff
or ecx, 0xdc00
mov edi, ecx
jmp 0x4d419e
movzx ebx, byte [esp + 8]
mov edi, dword [esp + 0xb0]
cmp bl, 2
je 0x4d4d4d
lea ecx, [esp + 0x2d]
lea edx, [esp + 0x5d]
movzx eax, word [ecx]
mov word [edx], ax
movzx eax, byte [ecx + 2]
mov ecx, dword [esp + 0xc]
mov byte [edx + 2], al
mov eax, dword [esp + 0x30]
mov dword [esp + 0x54], edi
mov dword [esp + 0x50], eax
mov dword [esp + 0x58], ecx
mov dword [esp + 0x94], eax
mov dword [esp + 0x98], esi
mov byte [esp + 0x5c], bl
mov word [esp + 0x9c], 0
lea ecx, [esp + 0x10]
lea edx, [esp + 0x94]
lea ebx, [esp + 0x50]
call fcn.004b76b0
mov eax, edi
mov edi, 2
test eax, eax
je 0x4d42c4
push dword [esp + 0x30]
push 0
push dword [0x5880e0]
call sub.kernel32.dll_HeapFree
mov edx, dword [esp + 0x18]
cmp edx, dword [esp + 0x14]
jne 0x4d42db
lea ecx, [esp + 0x10]
call fcn.004b1de0
mov edx, dword [esp + 0x18]
mov esi, dword [esp + 0x10]
mov word [esi + edx*2], 0
inc edx
mov dword [esp + 0x88], edx
mov dword [esp + 0x18], edx
lea edx, [esp + 0x14c]
jmp 0x4d3f7f
cmp dword [esp + 0x30], 0
je 0x4d4315
push dword [esp + 0x1c]
push 0
push dword [0x5880e0]
call sub.kernel32.dll_HeapFree
cmp dword [esp + 0x24], 0
mov ebx, dword [esp + 8]
je 0x4d4331
push dword [esp + 0x20]
push 0
push dword [0x5880e0]
call sub.kernel32.dll_HeapFree
cmp dword [esp + 0xc], 0
mov edi, 0x568d54
mov esi, 2
je 0x4d436a
push ebx
jmp 0x4d435d
cmp dword [esp + 0xb0], 0
mov esi, 2
mov edi, 0x568d54
je 0x4d436a
push dword [esp + 0x30]
push 0
push dword [0x5880e0]
call sub.kernel32.dll_HeapFree
lea ecx, [esp + 0x14c]
call fcn.004ab910
cmp dword [esp + 0x14], 0
je 0x4d438e
push dword [esp + 0x10]
push 0
push dword [0x5880e0]
call sub.kernel32.dll_HeapFree
mov ecx, esi
mov edx, edi
mov eax, dword [esp + 0x8c]
mov dword [eax], ecx
mov dword [eax + 4], edx
mov dword [eax + 8], 2
jmp 0x4d4885
mov esi, dword [esp + 8]
mov ecx, eax
mov dword [esp + 0x14c], esi
mov dword [esp + 0x150], ecx
mov word [esp + 0x154], 0
lea ecx, [esp + 0x50]
lea edx, [esp + 0x14c]
call fcn.004b7800
mov ecx, dword [esp + 0x54]
mov esi, dword [esp + 0x58]
cmp esi, ecx
jne 0x4d43f7
lea ecx, [esp + 0x50]
mov edx, esi
call fcn.004b1de0
mov ecx, dword [esp + 0x54]
mov esi, dword [esp + 0x58]
mov edi, dword [esp + 0x50]
mov edx, ecx
and edx, 0xffffff00
mov word [edi + esi*2], 0
inc esi
mov dword [esp + 4], edi
movzx ecx, cl
or ecx, edx
test edi, edi
je 0x4d46a6
pxor xmm0, xmm0
mov dword [esp + 0x20], edi
mov dword [esp + 8], edi
mov dword [esp + 0xc], ecx
mov dword [esp + 0x24], ecx
mov dword [esp + 0x28], esi
movdqa xmmword [esp + 0x50], xmm0
push 0x5880e8
call sub.kernel32.dll_AcquireSRWLockExclusive
mov ebx, dword [esp + 0x90]
xor ecx, ecx
mov edx, 1
lea edi, [esp + 0xa4]
mov dword [esp + 0x14c], 0
mov dword [esp + 0x154], 0
mov dword [esp + 0x15c], 0
mov esi, dword [ebx + 0x40]
lea eax, [ebx + 0x40]
cmp esi, 5
cmove eax, ecx
cmp byte [ebp + 0xc], 0
lea ecx, [esp + 0xdc]
cmovne edi, ecx
cmovne edx, dword [ebp + 8]
add eax, 4
cmp esi, 5
mov ecx, 0
cmove eax, edi
mov edi, dword [ebx + 0x48]
cmovne edx, esi
lea esi, [ebx + 0x48]
cmp edi, 5
cmove esi, ecx
mov ecx, dword [ebx + 0x50]
add ebx, 0x50
mov dword [esp + 0x1c], ecx
cmp ecx, 5
mov ecx, 0
cmove ebx, ecx
mov dword [esp + 0x90], ebx
lea ebx, [esp + 0x14c]
lea ecx, [esp + 0x10]
push ebx
push 0xfffffffffffffff6
push dword [eax]
call fcn.004d5480
add esp, 0xc
movzx eax, byte [esp + 0x10]
cmp al, 4
jne 0x4d46c5
mov ecx, dword [esp + 0x14]
add esi, 4
cmp edi, 5
lea eax, [esp + 0x154]
cmove edi, dword [ebp + 8]
mov dword [esp + 0xcc], ecx
lea ecx, [esp + 0xdc]
cmove esi, ecx
mov edx, edi
lea ecx, [esp + 0x10]
push eax
push 0xfffffffffffffff5
push dword [esi]
call fcn.004d5480
add esp, 0xc
mov ebx, dword [esp + 8]
movzx eax, byte [esp + 0x10]
cmp al, 4
jne 0x4d46fd
mov esi, dword [esp + 0x90]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0x14]
lea eax, [esp + 0x15c]
lea ecx, [esp + 0xdc]
add esi, 4
cmp edx, 5
cmove edx, dword [ebp + 8]
cmove esi, ecx
lea ecx, [esp + 0x10]
push eax
push 0xfffffffffffffff4
push dword [esi]
call fcn.004d5480
add esp, 0xc
movzx eax, byte [esp + 0x10]
cmp al, 4
jne 0x4d4757
mov esi, dword [esp + 0xcc]
mov ebx, dword [esp + 0x14]
mov edx, dword [esp + 0x140]
mov eax, dword [esp + 0xd0]
mov dword [esp + 0x118], esi
mov dword [esp + 0x11c], edi
mov dword [esp + 0x120], ebx
lea ecx, [esp + 0x50]
push ecx
lea ecx, [esp + 0xe4]
push ecx
push dword [esp + 0xc]
push dword [esp + 0xc]
push dword [esp + 0x5c]
push 1
push 0
push 0
mov dword [esp + 0x24], eax
push eax
mov dword [esp + 0x24], edx
push edx
call sub.kernel32.dll_CreateProcessW
test eax, eax
je 0x4d47c7
mov eax, dword [esp + 0x8c]
movsd xmm1, qword [esp + 0x154]
movq xmm0, qword [esp + 0x15c]
movsd xmm2, qword [esp + 0x14c]
movsd qword [eax + 0x10], xmm1
movq xmm1, qword [esp + 0x50]
movq qword [eax + 0x18], xmm0
movsd qword [eax + 8], xmm2
movq qword [eax], xmm1
push ebx
call sub.kernel32.dll_CloseHandle
push edi
call sub.kernel32.dll_CloseHandle
push esi
call sub.kernel32.dll_CloseHandle
push 0x5880e8
call sub.kernel32.dll_ReleaseSRWLockExclusive
cmp dword [esp + 0xc], 0
je 0x4d465a
push dword [esp + 8]
push 0
push dword [0x5880e0]
call sub.kernel32.dll_HeapFree
cmp dword [esp + 0xb0], 0
je 0x4d4675
push dword [esp + 0x30]
push 0
push dword [0x5880e0]
call sub.kernel32.dll_HeapFree
cmp dword [esp + 0xd4], 0
je 0x4d4690
push dword [esp + 4]
push 0
push dword [0x5880e0]
call sub.kernel32.dll_HeapFree
cmp dword [esp + 0x144], 0
je 0x4d2d57
push dword [esp]
jmp 0x4d48b8
mov eax, dword [esp + 0x8c]
mov dword [eax + 4], esi
mov esi, dword [esp + 0xb0]
mov dword [eax], ecx
mov dword [eax + 8], 2
jmp 0x4d486f
mov ecx, dword [esp + 0x14]
movzx edx, byte [esp + 0x13]
mov esi, dword [esp + 0x8c]
movzx edi, word [esp + 0x11]
mov ebx, dword [esp + 8]
mov byte [esi + 3], dl
mov word [esi + 1], di
mov byte [esi], al
mov dword [esi + 4], ecx
mov dword [esi + 8], 2
mov esi, dword [esp + 0xb0]
jmp 0x4d480e
mov ecx, dword [esp + 0x14]
movzx edx, byte [esp + 0x13]
mov esi, dword [esp + 0x8c]
movzx edi, word [esp + 0x11]
mov byte [esi + 3], dl
mov word [esi + 1], di
mov byte [esi], al
mov dword [esi + 4], ecx
mov dword [esi + 8], 2
jmp 0x4d47fa
cmp dword [esp + 0x24], 0
je 0x4d4742
push dword [esp + 0x30]
push 0
push dword [0x5880e0]
call sub.kernel32.dll_HeapFree
mov dword [esp + 0xa8], 2
mov eax, 0x568da4
jmp 0x4d2c37
movzx edx, byte [esp + 0x13]
mov esi, dword [esp + 0x8c]
mov ecx, dword [esp + 0x14]
mov byte [esi + 3], dl
movzx edx, word [esp + 0x11]
mov word [esi + 1], dx
mov byte [esi], al
mov dword [esi + 4], ecx
mov dword [esi + 8], 2
jmp 0x4d47f4
lea ecx, [esp + 0x14c]
call fcn.004ab910
mov edx, dword [esp + 0x88]
cmp edx, dword [esp + 0x14]
jne 0x4d47ab
lea ecx, [esp + 0x10]
call fcn.004b1de0
mov esi, dword [esp + 0x10]
mov edx, dword [esp + 0x18]
mov word [esi + edx*2], 0
inc edx
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
test eax, eax
jne 0x4d3d34
jmp 0x4d4392
call sub.kernel32.dll_GetLastError
mov ecx, dword [esp + 0x8c]
mov byte [ecx], 0
mov byte [ecx + 3], 0
mov word [ecx + 1], 0
mov dword [ecx + 4], eax
mov dword [ecx + 8], 2
push ebx
call sub.kernel32.dll_CloseHandle
mov ebx, dword [esp + 8]
push edi
call sub.kernel32.dll_CloseHandle
mov esi, dword [esp + 0xb0]
mov eax, dword [esp + 0xcc]
push eax
call sub.kernel32.dll_CloseHandle
cmp dword [esp + 0x14c], 0
je 0x4d4824
push dword [esp + 0x150]
call sub.kernel32.dll_CloseHandle
cmp dword [esp + 0x154], 0
je 0x4d483a
push dword [esp + 0x158]
call sub.kernel32.dll_CloseHandle
cmp dword [esp + 0x15c], 0
je 0x4d4850
push dword [esp + 0x160]
call sub.kernel32.dll_CloseHandle
push 0x5880e8
call sub.kernel32.dll_ReleaseSRWLockExclusive
cmp dword [esp + 0xc], 0
je 0x4d486f
push ebx
push 0
push dword [0x5880e0]
call sub.kernel32.dll_HeapFree
mov eax, dword [esp + 0x30]
test esi, esi
je 0x4d4885
push eax
push 0
push dword [0x5880e0]
call sub.kernel32.dll_HeapFree
cmp dword [esp + 0xd4], 0
je 0x4d48a3
push dword [esp + 0xd0]
push 0
push dword [0x5880e0]
call sub.kernel32.dll_HeapFree
cmp dword [esp + 0x144], 0
je 0x4d2d57
push dword [esp + 0x140]
push 0
push dword [0x5880e0]
call sub.kernel32.dll_HeapFree
jmp 0x4d2d57
movsd xmm0, qword [esp + 0x24]
jmp 0x4d3719
movq xmm0, qword [esp + 0x14]
cmp dword [esp + 0x24], 0
je 0x4d3719
push dword [esp + 0x30]
push 0
push dword [0x5880e0]
movdqa xmmword [esp + 0x3c], xmm0
call sub.kernel32.dll_HeapFree
movdqa xmm0, xmmword [esp + 0x30]
jmp 0x4d3719
push 0x566f94
push 0x2b
push str.called__Option::unwrap____on_a__None__value_rustc_59e7a308e40fbc6b0901c9a8ee8ed51b17f9e772library_alloc_srccollections_btreemapentry.rs
call fcn.00414ad0
add esp, 0xc
jmp 0x4d4f7a
mov esi, dword [esp + 0x30]
jmp 0x4d436a
call sub.kernel32.dll_GetLastError
mov dword [esp + 0x24], eax
lea eax, [esp + 0x20]
mov dword [esp + 0x50], 0x568cf4
mov dword [esp + 0x54], 1
mov dword [esp + 0x20], 0
mov dword [esp + 0x58], 0
mov dword [esp + 0x94], eax
lea eax, [esp + 0x94]
mov dword [esp + 0x98], fcn.004c4830
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], 1
lea eax, [esp + 0x50]
push 0x568d24
push eax
call fcn.00414c50
add esp, 8
jmp 0x4d4f7a
push 0x566fb4
push 0x2b
push str.called__Option::unwrap____on_a__None__value_rustc_59e7a308e40fbc6b0901c9a8ee8ed51b17f9e772library_alloc_srccollections_btreemapentry.rs
call fcn.00414ad0
add esp, 0xc
jmp 0x4d4f7a
push 1
push dword [esp + 8]
call fcn.004085f0
add esp, 8
jmp 0x4d4f7a
push 1
push ebx
call fcn.004085f0
add esp, 8
jmp 0x4d4f7a
push dword [esp + 8]
push ecx
call fcn.004085f0
add esp, 8
jmp 0x4d4f7a
call fcn.004085b0
jmp 0x4d4f7a
call fcn.004085b0
jmp 0x4d4f7a
call fcn.004085b0
jmp 0x4d4f7a
mov dword [esp], 4
push 1
push dword [esp + 4]
call fcn.004085f0
add esp, 8
jmp 0x4d4f7a
push 0x566c54
push 0x21
push str.assertion_failed:_self.height___0
call fcn.00414ad0
add esp, 0xc
jmp 0x4d4f7a
push 0x568fe0
push 0x28
push str.internal_error:_entered_unreachable_code_kV
call fcn.00414ad0
add esp, 0xc
jmp 0x4d4f7a
push 0x568fe0
push 0x28
push str.internal_error:_entered_unreachable_code_kV
call fcn.00414ad0
add esp, 0xc
jmp 0x4d4f7a
call sub.kernel32.dll_GetLastError
mov dword [esp + 0xe4], eax
lea esi, [esp + 0xe0]
lea eax, [esp + 0x50]
mov dword [esp + 0x14c], 0x568b98
mov dword [esp + 0x150], 1
mov dword [esp + 0x154], 0
mov dword [esp + 0xe0], 0
mov dword [esp + 0x50], esi
mov dword [esp + 0x15c], eax
mov dword [esp + 0x54], fcn.004c4830
mov dword [esp + 0x160], 1
lea eax, [esp + 0x14c]
push 0x568ba0
push eax
call fcn.00414c50
add esp, 8
jmp 0x4d4f7a
call fcn.004085b0
jmp 0x4d4f7a
push 0x568ff0
push eax
push edi
call fcn.00417f20
add esp, 0xc
jmp 0x4d4f7a
push 0x5667a0
push esi
push ecx
call fcn.00417ea0
add esp, 0xc
jmp 0x4d4f7a
push 0x568ff0
push eax
push esi
call fcn.00417f20
add esp, 0xc
jmp 0x4d4f7a
ud2