Function at 0x5462d0
Capabilities:
Create process on windows
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x57488e
mov eax, dword fs:[0]
push eax
sub esp, 0xa08
mov eax, dword [0x5bfd00]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor ecx, ecx
mov dword [ebp - 0x260], ecx
mov dword [ebp - 0x268], ecx
mov dword [ebp - 4], ecx
call fcn.005524f0
test al, al
je 0x546364
push 4
push 0x18c
push str.D:PROVINCEprovince.launcherBackendVendor_sentryexternalcrashpadclientcrashpad_client_win.cc
push str.bool___cdecl_crashpad::_anonymous_namespace::StartHandlerProcess_class_std::unique_ptr_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData_struct_std::default_delete_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData____
lea ecx, [ebp - 0x3f4]
call fcn.00559920
push 0x5993c8
mov ecx, 1
mov byte [ebp - 4], 1
push str.Check_failed:__IsThreadInLoaderLock__
push eax
mov dword [ebp - 0x260], ecx
mov dword [ebp - 0x268], ecx
call fcn.0042a880
add esp, 8
push eax
call fcn.0042a880
add esp, 8
mov eax, dword [ebp - 0x260]
mov dword [ebp - 4], 0
test al, 1
je 0x546389
and eax, 0xfffffffe
lea ecx, [ebp - 0x3f4]
mov dword [ebp - 0x260], eax
call fcn.00559c90
mov byte [ebp - 0x269], 0
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
xor eax, eax
mov dword [ebp - 0x14], 7
movups xmmword [ebp - 0x28], xmm0
mov word [ebp - 0x28], ax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 3
push eax
push dword [ebp + 8]
call fcn.00551400
mov eax, dword [ebp + 8]
add esp, 8
mov esi, dword [eax + 0x80]
mov edi, dword [eax + 0x84]
cmp esi, edi
je 0x546478
sub esp, 8
mov eax, esi
cmp dword [esi + 0x14], 0x10
mov ecx, esp
jb 0x5463e4
mov eax, dword [esi]
mov dword [ecx], eax
mov eax, dword [esi + 0x10]
mov dword [ecx + 4], eax
lea eax, [ebp - 0x1c0]
push eax
call fcn.0055a9d0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 4
push ecx
push eax
call fcn.00551400
mov ecx, dword [ebp - 0x1ac]
add esp, 0x14
mov byte [ebp - 4], 3
cmp ecx, 8
jb 0x54644d
mov edx, dword [ebp - 0x1c0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x546443
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x546522
push ecx
push edx
call fcn.00563352
add esp, 8
xor eax, eax
mov dword [ebp - 0x1b0], 0
add esi, 0x18
mov dword [ebp - 0x1ac], 7
mov word [ebp - 0x1c0], ax
cmp esi, edi
jne 0x5463d5
mov eax, dword [ebp + 8]
cmp dword [eax + 0x28], 0
lea ecx, [eax + 0x18]
je 0x546550
xorps xmm0, xmm0
mov dword [ebp - 0xa8], 8
movups xmmword [ebp - 0xb8], xmm0
mov dword [ebp - 0xa4], 0xf
mov dword [ebp - 0xb8], 0x61746164
mov dword [ebp - 0xb4], 0x65736162
mov byte [ebp - 0xb0], 0
push ecx
lea eax, [ebp - 0xb8]
mov byte [ebp - 4], 5
push eax
lea eax, [ebp - 0x244]
push eax
call fcn.005458f0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 6
push ecx
push eax
call fcn.00551400
add esp, 0x14
lea ecx, [ebp - 0x244]
call fcn.0041ca40
mov ecx, dword [ebp - 0xa4]
mov byte [ebp - 4], 3
cmp ecx, 0x10
jb 0x546532
mov edx, dword [ebp - 0xb8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x546528
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x546528
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00563352
add esp, 8
mov eax, dword [ebp + 8]
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xa4], 0xf
mov byte [ebp - 0xb8], 0
cmp dword [eax + 0x40], 0
lea ecx, [eax + 0x30]
je 0x546615
mov ax, word [0x5997b4]
xorps xmm0, xmm0
movups xmmword [ebp - 0x70], xmm0
mov word [ebp - 0x68], ax
movq xmm0, qword [str.metrics_dir]
mov al, byte [0x5997b6]
mov dword [ebp - 0x60], 0xb
mov dword [ebp - 0x5c], 0xf
movq qword [ebp - 0x70], xmm0
mov byte [ebp - 0x66], al
mov byte [ebp - 0x65], 0
push ecx
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 7
push eax
lea eax, [ebp - 0x25c]
push eax
call fcn.005458f0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 8
push ecx
push eax
call fcn.00551400
add esp, 0x14
lea ecx, [ebp - 0x25c]
call fcn.0041ca40
mov ecx, dword [ebp - 0x5c]
mov byte [ebp - 4], 3
cmp ecx, 0x10
jb 0x546600
mov edx, dword [ebp - 0x70]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x5465f6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x5465f6
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00563352
add esp, 8
mov eax, dword [ebp + 8]
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0xf
mov byte [ebp - 0x70], 0
cmp dword [eax + 0x58], 0
je 0x5467c8
sub esp, 8
lea ecx, [eax + 0x48]
cmp dword [eax + 0x5c], 0x10
mov edx, esp
jb 0x546630
mov ecx, dword [eax + 0x48]
mov dword [edx], ecx
mov eax, dword [eax + 0x58]
mov dword [edx + 4], eax
lea eax, [ebp - 0x190]
push eax
call fcn.0055a9d0
mov cx, word [0x59f560]
xorps xmm0, xmm0
movups xmmword [ebp - 0xa0], xmm0
mov word [ebp - 0xa0], cx
mov cl, byte [0x59f562]
mov dword [ebp - 0x90], 3
mov dword [ebp - 0x8c], 0xf
mov byte [ebp - 0x9e], cl
mov byte [ebp - 0x9d], 0
push eax
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0xa
push eax
lea eax, [ebp - 0x1a8]
push eax
call fcn.005458f0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xb
push ecx
push eax
call fcn.00551400
mov ecx, dword [ebp - 0x194]
add esp, 0x20
mov byte [ebp - 4], 0xa
cmp ecx, 8
jb 0x5466f0
mov edx, dword [ebp - 0x1a8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x5466e6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x546798
push ecx
push edx
call fcn.00563352
add esp, 8
mov ecx, dword [ebp - 0x8c]
xor eax, eax
mov dword [ebp - 0x198], 0
mov dword [ebp - 0x194], 7
mov word [ebp - 0x1a8], ax
mov byte [ebp - 4], 9
cmp ecx, 0x10
jb 0x546747
mov edx, dword [ebp - 0xa0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x54673d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x546798
push ecx
push edx
call fcn.00563352
add esp, 8
mov ecx, dword [ebp - 0x17c]
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x8c], 0xf
mov byte [ebp - 0xa0], 0
mov byte [ebp - 4], 3
cmp ecx, 8
jb 0x5467a8
mov edx, dword [ebp - 0x190]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x54679e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x54679e
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00563352
add esp, 8
xor eax, eax
mov dword [ebp - 0x180], 0
mov word [ebp - 0x190], ax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x17c], 7
cmp dword [eax + 0x70], 0
je 0x546918
sub esp, 8
lea ecx, [eax + 0x60]
cmp dword [eax + 0x74], 0x10
mov edx, esp
jb 0x5467e3
mov ecx, dword [eax + 0x60]
mov dword [edx], ecx
mov eax, dword [eax + 0x70]
mov dword [edx + 4], eax
lea eax, [ebp - 0x22c]
push eax
call fcn.0055a9d0
mov cx, word [0x5997c0]
xorps xmm0, xmm0
movups xmmword [ebp - 0x88], xmm0
mov dword [ebp - 0x78], 0xa
movq xmm0, qword [str.http_proxy]
mov dword [ebp - 0x74], 0xf
movq qword [ebp - 0x88], xmm0
mov word [ebp - 0x80], cx
mov byte [ebp - 0x7e], 0
push eax
lea eax, [ebp - 0x88]
mov byte [ebp - 4], 0xd
push eax
lea eax, [ebp - 0x178]
push eax
call fcn.005458f0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xe
push ecx
push eax
call fcn.00551400
mov ecx, dword [ebp - 0x164]
add esp, 0x20
mov byte [ebp - 4], 0xd
cmp ecx, 8
jb 0x546897
mov edx, dword [ebp - 0x178]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x54688d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x5468e1
push ecx
push edx
call fcn.00563352
add esp, 8
mov ecx, dword [ebp - 0x74]
xor eax, eax
mov dword [ebp - 0x168], 0
mov dword [ebp - 0x164], 7
mov word [ebp - 0x178], ax
mov byte [ebp - 4], 0xc
cmp ecx, 0x10
jb 0x5468f1
mov edx, dword [ebp - 0x88]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x5468e7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x5468e7
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00563352
add esp, 8
lea ecx, [ebp - 0x22c]
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 0xf
mov byte [ebp - 0x88], 0
mov byte [ebp - 4], 3
call fcn.0041ca40
mov eax, dword [ebp + 8]
mov esi, dword [eax + 0x78]
mov byte [ebp - 0x28d], 0
mov esi, dword [esi]
cmp byte [esi + 0xd], 0
jne 0x546ce9
nop
mov ecx, dword [esi + 0x20]
lea eax, [esi + 0x10]
mov dword [ebp - 0x268], ecx
cmp ecx, 0x7fffffff
je 0x547bca
cmp dword [eax + 0x14], 0x10
mov dword [ebp - 0x288], eax
jb 0x54695c
mov eax, dword [eax]
mov dword [ebp - 0x288], eax
lea edx, [ecx + 1]
mov dword [ebp - 0x30], 0
mov edi, 0xf
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28c], edx
xorps xmm0, xmm0
lea eax, [ebp - 0x40]
mov dword [ebp - 0x280], eax
movups xmmword [ebp - 0x40], xmm0
cmp edx, edi
jbe 0x5469cc
mov edi, edx
or edi, 0xf
cmp edi, 0x7fffffff
jbe 0x5469a0
mov edi, bind
jmp 0x5469ab
cmp edi, 0x16
mov eax, 0x16
cmovb edi, eax
lea eax, [edi + 1]
push eax
lea ecx, [ebp - 0x40]
call fcn.0040e3f0
mov ecx, dword [ebp - 0x268]
mov edx, dword [ebp - 0x28c]
mov dword [ebp - 0x280], eax
mov dword [ebp - 0x40], eax
push ecx
push dword [ebp - 0x288]
mov dword [ebp - 0x30], edx
push eax
mov dword [ebp - 0x2c], edi
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [ebp - 0x280]
add esp, 0xc
mov ecx, dword [ebp - 0x268]
or dword [ebp - 0x260], 0x1000
mov word [eax + ecx], 0x3d
cmp dword [esi + 0x3c], 0x10
lea eax, [esi + 0x28]
mov ecx, dword [eax + 0x10]
mov byte [ebp - 4], 0xf
jb 0x546a10
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0x40]
call fcn.004174c0
or dword [ebp - 0x260], 0x2000
xorps xmm0, xmm0
movups xmmword [ebp - 0x58], xmm0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x58], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x48], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
sub esp, 8
mov byte [ebp - 4], 0x10
cmp dword [ebp - 0x44], 0x10
lea eax, [ebp - 0x58]
mov ecx, esp
cmovae eax, dword [ebp - 0x58]
mov dword [ecx], eax
mov eax, dword [ebp - 0x48]
mov dword [ecx + 4], eax
lea eax, [ebp - 0x148]
push eax
call fcn.0055a9d0
mov cx, word [0x5997cc]
xorps xmm0, xmm0
movups xmmword [ebp - 0xd0], xmm0
mov dword [ebp - 0xc0], 0xa
movq xmm0, qword [str.annotation]
mov dword [ebp - 0xbc], 0xf
movq qword [ebp - 0xd0], xmm0
mov word [ebp - 0xc8], cx
mov byte [ebp - 0xc6], 0
push eax
lea eax, [ebp - 0xd0]
mov byte [ebp - 4], 0x12
push eax
lea eax, [ebp - 0x160]
push eax
call fcn.005458f0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x13
push ecx
push eax
call fcn.00551400
mov ecx, dword [ebp - 0x14c]
add esp, 0x20
mov byte [ebp - 4], 0x12
cmp ecx, 8
jb 0x546b33
mov edx, dword [ebp - 0x160]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x546b29
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x546522
push ecx
push edx
call fcn.00563352
add esp, 8
mov ecx, dword [ebp - 0xbc]
xor eax, eax
mov dword [ebp - 0x150], 0
mov dword [ebp - 0x14c], 7
mov word [ebp - 0x160], ax
mov byte [ebp - 4], 0x11
cmp ecx, 0x10
jb 0x546b8e
mov edx, dword [ebp - 0xd0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x546b84
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x546522
push ecx
push edx
call fcn.00563352
add esp, 8
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0xc0], 0
mov dword [ebp - 0xbc], 0xf
mov byte [ebp - 0xd0], 0
mov byte [ebp - 4], 0x10
cmp ecx, 8
jb 0x546bed
mov edx, dword [ebp - 0x148]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x546be3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x546522
push ecx
push edx
call fcn.00563352
add esp, 8
mov ecx, dword [ebp - 0x44]
xor eax, eax
mov dword [ebp - 0x138], 0
mov dword [ebp - 0x134], 7
mov word [ebp - 0x148], ax
mov byte [ebp - 4], 0xf
cmp ecx, 0x10
jb 0x546c42
mov edx, dword [ebp - 0x58]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x546c38
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x546522
push ecx
push edx
call fcn.00563352
add esp, 8
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], 0
mov byte [ebp - 4], 3
cmp ecx, 0x10
jb 0x546c8c
mov edx, dword [ebp - 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x546c82
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x546522
push ecx
push edx
call fcn.00563352
add esp, 8
mov eax, dword [esi + 8]
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], 0
cmp byte [eax + 0xd], 0
je 0x546cc4
mov eax, dword [esi + 4]
cmp byte [eax + 0xd], 0
jne 0x546cc0
cmp esi, dword [eax + 8]
jne 0x546cc0
mov esi, eax
mov eax, dword [eax + 4]
cmp byte [eax + 0xd], 0
je 0x546cb0
mov esi, eax
jmp 0x546cdc
mov esi, eax
mov ecx, dword [esi]
cmp byte [ecx + 0xd], 0
jne 0x546cdc
nop
mov eax, dword [ecx]
mov esi, ecx
mov ecx, eax
cmp byte [eax + 0xd], 0
je 0x546cd0
cmp byte [esi + 0xd], 0
je 0x546930
mov eax, dword [ebp + 8]
mov esi, dword [eax + 0x8c]
mov edi, dword [eax + 0x90]
cmp esi, edi
je 0x546e30
nop dword [eax]
mov ax, word [0x57caa4]
xorps xmm0, xmm0
movups xmmword [ebp - 0xe8], xmm0
mov dword [ebp - 0xd8], 0xa
movq xmm0, qword [str.attachment]
mov dword [ebp - 0xd4], 0xf
movq qword [ebp - 0xe8], xmm0
mov word [ebp - 0xe0], ax
mov byte [ebp - 0xde], 0
push esi
lea eax, [ebp - 0xe8]
mov byte [ebp - 4], 0x14
push eax
lea eax, [ebp - 0x1e4]
push eax
call fcn.005458f0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x15
push ecx
push eax
call fcn.00551400
mov ecx, dword [ebp - 0x1d0]
add esp, 0x14
mov byte [ebp - 4], 0x14
cmp ecx, 8
jb 0x546daf
mov edx, dword [ebp - 0x1e4]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x546da5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x546522
push ecx
push edx
call fcn.00563352
add esp, 8
mov ecx, dword [ebp - 0xd4]
xor eax, eax
mov dword [ebp - 0x1d4], 0
mov dword [ebp - 0x1d0], 7
mov word [ebp - 0x1e4], ax
mov byte [ebp - 4], 3
cmp ecx, 0x10
jb 0x546e0a
mov edx, dword [ebp - 0xe8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x546e00
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x546522
push ecx
push edx
call fcn.00563352
add esp, 8
add esi, 0x18
mov dword [ebp - 0xd8], 0
mov dword [ebp - 0xd4], 0xf
mov byte [ebp - 0xe8], 0
cmp esi, edi
jne 0x546d00
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 1
push 0x1f0fff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov ecx, eax
mov dword [ebp - 0x288], ecx
mov byte [ebp - 4], 0x16
test ecx, ecx
jne 0x546ed8
call sub.KERNEL32.dll_GetLastError
push eax
push 2
push 0x1b7
push str.D:PROVINCEprovince.launcherBackendVendor_sentryexternalcrashpadclientcrashpad_client_win.cc
push str.bool___cdecl_crashpad::_anonymous_namespace::StartHandlerProcess_class_std::unique_ptr_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData_struct_std::default_delete_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData____
lea ecx, [ebp - 0x54c]
call fcn.00559b90
mov ecx, dword [ebp - 0x260]
or ecx, 2
mov byte [ebp - 4], 0x17
push 0x5997d0
push eax
mov dword [ebp - 0x260], ecx
mov dword [ebp - 0x268], ecx
call fcn.0042a880
mov eax, dword [ebp - 0x260]
add esp, 8
mov dword [ebp - 4], 0x16
test al, 2
je 0x546ecc
and eax, 0xfffffffd
lea ecx, [ebp - 0x54c]
mov dword [ebp - 0x260], eax
mov dword [ebp - 0x268], eax
call fcn.00559e70
mov byte [ebp - 0x261], 0
jmp 0x547aeb
mov eax, dword [ebp + 8]
push 0
push 0x5c2a40
push 0
push 0x5c2a30
push 0
push 0x5c2a1c
push ecx
push dword [eax + 0xb0]
lea ecx, [ebp - 0x34c]
push dword [0x5bf9b0]
push dword [0x5bf9ac]
push dword [0x5bf9a0]
call fcn.00551f90
lea eax, [ebp - 0x214]
push eax
lea ecx, [ebp - 0x34c]
call fcn.00552450
mov esi, eax
xorps xmm0, xmm0
mov byte [ebp - 4], 0x1a
push 0x20
lea ecx, [ebp - 0x118]
movups xmmword [ebp - 0x118], xmm0
call fcn.0040e3f0
movups xmm0, xmmword [str.__initial_client_data]
mov dword [ebp - 0x118], eax
mov dword [ebp - 0x108], 0x16
movups xmmword [eax], xmm0
mov ecx, dword [0x5997ec]
mov dword [eax + 0x10], ecx
mov cx, word [0x5997f0]
mov word [eax + 0x14], cx
mov dword [ebp - 0x104], 0x1f
mov byte [eax + 0x16], 0
push esi
lea eax, [ebp - 0x118]
mov byte [ebp - 4], 0x1b
push eax
push dword [ebp - 0x284]
lea ecx, [ebp - 0x130]
call fcn.0042e6b0
mov eax, dword [ebp - 0x260]
or eax, 0x800
mov dword [ebp - 0x260], eax
mov dword [ebp - 0x268], eax
sub esp, 8
mov byte [ebp - 4], 0x1c
cmp dword [ebp - 0x11c], 0x10
lea eax, [ebp - 0x130]
mov ecx, esp
cmovae eax, dword [ebp - 0x130]
mov dword [ecx], eax
mov eax, dword [ebp - 0x120]
mov dword [ecx + 4], eax
lea eax, [ebp - 0x1fc]
push eax
call fcn.0055a9d0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x1d
push ecx
push eax
call fcn.00551400
mov ecx, dword [ebp - 0x1e8]
add esp, 0x14
mov byte [ebp - 4], 0x1c
cmp ecx, 8
jb 0x54703c
mov edx, dword [ebp - 0x1fc]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x547032
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x547137
push ecx
push edx
call fcn.00563352
add esp, 8
mov ecx, dword [ebp - 0x11c]
xor eax, eax
mov dword [ebp - 0x1ec], 0
mov dword [ebp - 0x1e8], 7
mov word [ebp - 0x1fc], ax
mov byte [ebp - 4], 0x1b
cmp ecx, 0x10
jb 0x547097
mov edx, dword [ebp - 0x130]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x54708d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x547137
push ecx
push edx
call fcn.00563352
add esp, 8
mov ecx, dword [ebp - 0x104]
mov dword [ebp - 0x120], 0
mov dword [ebp - 0x11c], 0xf
mov byte [ebp - 0x130], 0
mov byte [ebp - 4], 0x1a
cmp ecx, 0x10
jb 0x5470ec
mov edx, dword [ebp - 0x118]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x5470e2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x547137
push ecx
push edx
call fcn.00563352
add esp, 8
mov ecx, dword [ebp - 0x200]
mov dword [ebp - 0x108], 0
mov dword [ebp - 0x104], 0xf
mov byte [ebp - 0x118], 0
mov byte [ebp - 4], 0x16
cmp ecx, 0x10
jb 0x547147
mov edx, dword [ebp - 0x214]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x54713d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x54713d
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00563352
add esp, 8
mov esi, dword [sym.imp.KERNEL32.dll_GetStdHandle]
xorps xmm0, xmm0
push 0xfffffffffffffff6
mov dword [ebp - 0x204], 0
mov dword [ebp - 0x200], 0xf
mov byte [ebp - 0x214], 0
movlpd qword [ebp - 0x2e4], xmm0
movlpd qword [ebp - 0x2dc], xmm0
movlpd qword [ebp - 0x2d4], xmm0
movlpd qword [ebp - 0x2cc], xmm0
movlpd qword [ebp - 0x2c4], xmm0
movlpd qword [ebp - 0x2b8], xmm0
mov dword [ebp - 0x2a4], 0
mov dword [ebp - 0x2bc], 0x100
call esi
push 0xfffffffffffffff5
mov dword [ebp - 0x2b0], eax
call esi
push 0xfffffffffffffff4
mov dword [ebp - 0x2ac], eax
call esi
xor edi, edi
mov dword [ebp - 0x2a8], eax
mov dword [ebp - 0x278], edi
mov dword [ebp - 0x274], edi
mov dword [ebp - 0x270], edi
xor esi, esi
mov dword [ebp - 0x2a0], esi
mov dword [ebp - 0x28c], esi
mov ecx, dword [0x5c2b2c]
mov eax, dword fs:[0x2c]
mov byte [ebp - 4], 0x20
mov eax, dword [eax + ecx*4]
mov dword [ebp - 0x280], eax
mov ecx, eax
mov eax, dword [0x5c2a68]
cmp eax, dword [ecx + 4]
jg 0x547bcf
jmp 0x547223
mov ecx, dword [ebp - 0x280]
mov eax, dword [0x5c2a70]
cmp eax, dword [ecx + 4]
jg 0x547c19
mov eax, dword [0x5c2a64]
test eax, eax
je 0x547689
cmp dword [0x5c2a6c], 0
je 0x547689
lea ecx, [ebp - 0x280]
mov dword [ebp - 0x294], 0x80000
push ecx
push 0
push 1
push 0
mov dword [ebp - 0x2e8], 0x48
call eax
test eax, eax
je 0x5472f3
push 2
push 0x1e8
push str.D:PROVINCEprovince.launcherBackendVendor_sentryexternalcrashpadclientcrashpad_client_win.cc
push str.bool___cdecl_crashpad::_anonymous_namespace::StartHandlerProcess_class_std::unique_ptr_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData_struct_std::default_delete_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData____
lea ecx, [ebp - 0x49c]
call fcn.00559920
mov ecx, dword [ebp - 0x260]
or ecx, 4
mov byte [ebp - 4], 0x23
push str.InitializeProcThreadAttributeList__size__succeeded__expected_failure
push eax
mov dword [ebp - 0x260], ecx
mov dword [ebp - 0x268], ecx
call fcn.0042a880
mov eax, dword [ebp - 0x260]
add esp, 8
mov dword [ebp - 4], 0x20
test al, 4
je 0x547a5c
and eax, 0xfffffffb
lea ecx, [ebp - 0x49c]
mov dword [ebp - 0x260], eax
mov dword [ebp - 0x268], eax
call fcn.00559c90
mov byte [ebp - 0x261], 0
jmp 0x547a73
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
je 0x547386
call sub.KERNEL32.dll_GetLastError
push eax
push 2
push 0x1ec
push str.D:PROVINCEprovince.launcherBackendVendor_sentryexternalcrashpadclientcrashpad_client_win.cc
push str.bool___cdecl_crashpad::_anonymous_namespace::StartHandlerProcess_class_std::unique_ptr_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData_struct_std::default_delete_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData____
lea ecx, [ebp - 0x5fc]
call fcn.00559b90
mov ecx, dword [ebp - 0x260]
or ecx, 8
mov byte [ebp - 4], 0x27
push str.InitializeProcThreadAttributeList__size_
push eax
mov dword [ebp - 0x260], ecx
mov dword [ebp - 0x268], ecx
call fcn.0042a880
mov eax, dword [ebp - 0x260]
add esp, 8
mov dword [ebp - 4], 0x20
test al, 8
je 0x547a5c
and eax, 0xfffffff7
lea ecx, [ebp - 0x5fc]
mov dword [ebp - 0x260], eax
mov dword [ebp - 0x268], eax
call fcn.00559e70
mov byte [ebp - 0x261], 0
jmp 0x547a73
push dword [ebp - 0x280]
call fcn.00563e74
add esp, 4
mov esi, eax
lea eax, [ebp - 0x280]
mov dword [ebp - 0x2a0], esi
mov dword [ebp - 0x2a4], esi
push eax
push 0
push 1
push esi
call dword [0x5c2a64]
test eax, eax
jne 0x547440
call sub.KERNEL32.dll_GetLastError
push eax
push 2
push 0x1f7
push str.D:PROVINCEprovince.launcherBackendVendor_sentryexternalcrashpadclientcrashpad_client_win.cc
push str.bool___cdecl_crashpad::_anonymous_namespace::StartHandlerProcess_class_std::unique_ptr_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData_struct_std::default_delete_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData____
lea ecx, [ebp - 0x6ac]
call fcn.00559b90
mov ecx, dword [ebp - 0x260]
or ecx, 0x10
mov byte [ebp - 4], 0x2b
push str.InitializeProcThreadAttributeList
push eax
mov dword [ebp - 0x260], ecx
mov dword [ebp - 0x268], ecx
call fcn.0042a880
mov eax, dword [ebp - 0x260]
add esp, 8
mov dword [ebp - 4], 0x20
test al, 0x10
je 0x547a5c
and eax, 0xffffffef
lea ecx, [ebp - 0x6ac]
mov dword [ebp - 0x260], eax
mov dword [ebp - 0x268], eax
call fcn.00559e70
mov byte [ebp - 0x261], 0
jmp 0x547a73
mov eax, dword [ebp - 0x2a4]
lea ecx, [ebp - 0x278]
push 8
mov dword [ebp - 0x28c], eax
call fcn.0040fdc0
mov dword [ebp - 0x278], eax
lea ecx, [ebp - 0x278]
mov dword [ebp - 0x274], eax
add eax, 0x20
push 0x5bf9a0
mov dword [ebp - 0x270], eax
call fcn.00548110
push 0x5bf9ac
lea ecx, [ebp - 0x278]
call fcn.00548110
push 0x5bf9b0
lea ecx, [ebp - 0x278]
call fcn.00548110
mov eax, dword [ebp + 8]
lea ecx, [ebp - 0x278]
add eax, 0xb0
push eax
call fcn.00548110
lea eax, [ebp - 0x288]
push eax
lea ecx, [ebp - 0x278]
call fcn.00548110
mov edi, dword [ebp - 0x2b0]
mov dword [ebp - 0x29c], edi
test edi, edi
je 0x547517
cmp edi, 0xffffffff
je 0x547517
push edi
call dword [sym.imp.KERNEL32.dll_GetFileType]
cmp eax, 1
je 0x5474ea
cmp eax, 3
jne 0x547517
push edi
push dword [ebp - 0x274]
mov edi, dword [ebp - 0x278]
push edi
call fcn.00562460
cmp eax, dword [ebp - 0x274]
jne 0x54751d
lea eax, [ebp - 0x29c]
push eax
lea ecx, [ebp - 0x278]
call fcn.00548110
mov edi, dword [ebp - 0x278]
mov eax, dword [ebp - 0x2ac]
mov dword [ebp - 0x27c], eax
mov dword [ebp - 0x298], eax
test eax, eax
je 0x54757b
cmp eax, 0xffffffff
je 0x54757b
push eax
call dword [sym.imp.KERNEL32.dll_GetFileType]
cmp eax, 1
je 0x547549
cmp eax, 3
jne 0x54757b
push dword [ebp - 0x27c]
push dword [ebp - 0x274]
push edi
call fcn.00562460
cmp eax, dword [ebp - 0x274]
jne 0x54757b
lea eax, [ebp - 0x298]
push eax
lea ecx, [ebp - 0x278]
call fcn.00548110
mov edi, dword [ebp - 0x278]
mov eax, dword [ebp - 0x2a8]
mov dword [ebp - 0x27c], eax
mov dword [ebp - 0x284], eax
test eax, eax
je 0x5475d9
cmp eax, 0xffffffff
je 0x5475d9
push eax
call dword [sym.imp.KERNEL32.dll_GetFileType]
cmp eax, 1
je 0x5475a7
cmp eax, 3
jne 0x5475d9
push dword [ebp - 0x27c]
push dword [ebp - 0x274]
push edi
call fcn.00562460
cmp eax, dword [ebp - 0x274]
jne 0x5475d9
lea eax, [ebp - 0x284]
push eax
lea ecx, [ebp - 0x278]
call fcn.00548110
mov edi, dword [ebp - 0x278]
mov eax, dword [ebp - 0x274]
push 0
push 0
sub eax, edi
and eax, 0xfffffffc
push eax
push edi
push 0x20002
push 0
push dword [ebp - 0x2a4]
call dword [0x5c2a6c]
test eax, eax
jne 0x54769d
call sub.KERNEL32.dll_GetLastError
push eax
push 2
push 0x211
push str.D:PROVINCEprovince.launcherBackendVendor_sentryexternalcrashpadclientcrashpad_client_win.cc
push str.bool___cdecl_crashpad::_anonymous_namespace::StartHandlerProcess_class_std::unique_ptr_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData_struct_std::default_delete_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData____
lea ecx, [ebp - 0x75c]
call fcn.00559b90
mov ecx, dword [ebp - 0x260]
or ecx, 0x20
mov byte [ebp - 4], 0x30
push str.UpdateProcThreadAttribute
push eax
mov dword [ebp - 0x260], ecx
mov dword [ebp - 0x268], ecx
call fcn.0042a880
mov eax, dword [ebp - 0x260]
add esp, 8
mov dword [ebp - 4], 0x20
test al, 0x20
je 0x547a5c
and eax, 0xffffffdf
lea ecx, [ebp - 0x75c]
mov dword [ebp - 0x260], eax
mov dword [ebp - 0x268], eax
call fcn.00559e70
mov byte [ebp - 0x261], 0
jmp 0x547a73
mov dword [ebp - 0x294], 0
mov dword [ebp - 0x2e8], 0x44
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 0x10]
mov dword [ebp - 0x27c], eax
cmp eax, 0xc
jb 0x547752
xorps xmm0, xmm0
mov dword [ebp - 0xf0], 0
lea edx, [eax - 0xc]
mov dword [ebp - 0xec], 0
movups xmmword [ebp - 0x100], xmm0
mov eax, dword [ecx + 0x10]
cmp eax, edx
jb 0x547c75
sub eax, edx
or edx, 0xffffffff
cmp eax, 0xffffffff
cmovb edx, eax
cmp dword [ecx + 0x14], 8
jb 0x5476f1
mov ecx, dword [ecx]
mov eax, dword [ebp - 0x27c]
add eax, 0xfffffff4
push edx
lea eax, [ecx + eax*2]
push eax
lea ecx, [ebp - 0x100]
call fcn.0041d2f0
mov eax, dword [ebp - 0x260]
or eax, 0x4040
cmp dword [ebp - 0xec], 8
mov dword [ebp - 0x260], eax
mov dword [ebp - 0x268], eax
lea eax, [ebp - 0x100]
cmovae eax, dword [ebp - 0x100]
push str.rundll32.exe
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
mov ecx, dword [ebp + 8]
add esp, 8
mov byte [ebp - 0x261], 1
test eax, eax
je 0x547759
mov byte [ebp - 0x261], 0
mov eax, dword [ebp - 0x260]
test al, 0x40
je 0x5477d4
and eax, 0xffffffbf
mov dword [ebp - 0x260], eax
mov dword [ebp - 0x268], eax
mov eax, dword [ebp - 0xec]
cmp eax, 8
jb 0x5477b7
mov edx, dword [ebp - 0x100]
lea ecx, [eax*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x5477aa
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x5477aa
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00563352
mov ecx, dword [ebp + 8]
add esp, 8
xor eax, eax
mov dword [ebp - 0xf0], 0
mov dword [ebp - 0xec], 7
mov word [ebp - 0x100], ax
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
cmp byte [ebp - 0x261], 0
je 0x5477ec
xor ecx, ecx
jmp 0x5477f4
cmp dword [ecx + 0x14], 8
jb 0x5477f4
mov ecx, dword [ecx]
lea edx, [ebp - 0x2f8]
push edx
lea edx, [ebp - 0x2e8]
push edx
push 0
push 0
push dword [ebp - 0x294]
push 1
push 0
push 0
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x5478ab
call sub.KERNEL32.dll_GetLastError
push eax
push 2
push 0x233
push str.D:PROVINCEprovince.launcherBackendVendor_sentryexternalcrashpadclientcrashpad_client_win.cc
push str.bool___cdecl_crashpad::_anonymous_namespace::StartHandlerProcess_class_std::unique_ptr_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData_struct_std::default_delete_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData____
lea ecx, [ebp - 0x80c]
call fcn.00559b90
mov ecx, dword [ebp - 0x260]
or ecx, 0x80
mov byte [ebp - 4], 0x34
push str.CreateProcess
push eax
mov dword [ebp - 0x260], ecx
mov dword [ebp - 0x268], ecx
call fcn.0042a880
mov eax, dword [ebp - 0x260]
add esp, 8
mov dword [ebp - 4], 0x20
test al, al
jns 0x547a5c
and eax, 0xffffff7f
lea ecx, [ebp - 0x80c]
mov dword [ebp - 0x260], eax
mov dword [ebp - 0x268], eax
call fcn.00559e70
mov byte [ebp - 0x261], 0
jmp 0x547a73
push dword [ebp - 0x2f4]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
jne 0x547907
call sub.KERNEL32.dll_GetLastError
push eax
push 1
push 0x238
push str.D:PROVINCEprovince.launcherBackendVendor_sentryexternalcrashpadclientcrashpad_client_win.cc
push str.bool___cdecl_crashpad::_anonymous_namespace::StartHandlerProcess_class_std::unique_ptr_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData_struct_std::default_delete_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData____
lea ecx, [ebp - 0x8bc]
call fcn.00559b90
mov ecx, dword [ebp - 0x260]
or ecx, 0x100
mov byte [ebp - 4], 0x38
push str.CloseHandle_thread
push eax
mov dword [ebp - 0x260], ecx
mov dword [ebp - 0x268], ecx
call fcn.0042a880
add esp, 8
mov eax, dword [ebp - 0x260]
mov dword [ebp - 4], 0x20
test eax, 0x100
je 0x547937
and eax, 0xfffffeff
lea ecx, [ebp - 0x8bc]
mov dword [ebp - 0x260], eax
mov dword [ebp - 0x268], eax
call fcn.00559e70
push dword [ebp - 0x2f8]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
jne 0x547993
call sub.KERNEL32.dll_GetLastError
push eax
push 1
push 0x23b
push str.D:PROVINCEprovince.launcherBackendVendor_sentryexternalcrashpadclientcrashpad_client_win.cc
push str.bool___cdecl_crashpad::_anonymous_namespace::StartHandlerProcess_class_std::unique_ptr_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData_struct_std::default_delete_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData____
lea ecx, [ebp - 0x96c]
call fcn.00559b90
mov ecx, dword [ebp - 0x260]
or ecx, 0x200
mov byte [ebp - 4], 0x39
push str.CloseHandle_process
push eax
mov dword [ebp - 0x260], ecx
mov dword [ebp - 0x268], ecx
call fcn.0042a880
add esp, 8
mov eax, dword [ebp - 0x260]
mov dword [ebp - 4], 0x20
test eax, 0x200
je 0x5479c3
and eax, 0xfffffdff
lea ecx, [ebp - 0x96c]
mov dword [ebp - 0x260], eax
mov dword [ebp - 0x268], eax
call fcn.00559e70
mov eax, dword [ebp + 8]
mov dword [ebp - 0x27c], eax
mov ecx, dword [eax + 0xb0]
cmp ecx, 0xffffffff
je 0x5479f0
push ecx
call fcn.0054cf50
mov eax, dword [ebp - 0x27c]
add esp, 4
mov dword [eax + 0xb0], 0xffffffff
mov dword [eax + 0xb0], 0xffffffff
xorps xmm0, xmm0
lea eax, [ebp - 0x1cc]
movlpd qword [ebp - 0x318], xmm0
push eax
lea eax, [ebp - 0x31c]
movlpd qword [ebp - 0x310], xmm0
push eax
mov eax, dword [ebp + 8]
add eax, 0x98
movlpd qword [ebp - 0x308], xmm0
push eax
movlpd qword [ebp - 0x300], xmm0
mov dword [ebp - 0x31c], 2
movq qword [ebp - 0x1cc], xmm0
mov dword [ebp - 0x1c4], 0
call fcn.00556930
add esp, 0xc
test al, al
jne 0x547a65
mov byte [ebp - 0x261], 0
jmp 0x547a73
mov byte [ebp - 0x269], 1
mov byte [ebp - 0x261], 1
lea ecx, [ebp - 0x28c]
mov byte [ebp - 4], 0x3d
call fcn.00545b60
test esi, esi
je 0x547a8f
push esi
call fcn.00563e7d
add esp, 4
mov byte [ebp - 4], 0x16
test edi, edi
je 0x547aeb
mov eax, dword [ebp - 0x270]
sub eax, edi
sar eax, 2
lea ecx, [eax*4]
mov eax, edi
cmp ecx, 0x1000
jb 0x547ac3
mov edi, dword [eax - 4]
add ecx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x547b38
push ecx
push edi
call fcn.00563352
add esp, 8
mov dword [ebp - 0x278], 0
mov dword [ebp - 0x274], 0
mov dword [ebp - 0x270], 0
mov eax, dword [ebp - 0x288]
mov byte [ebp - 4], 0x3e
test eax, eax
je 0x547b0c
push eax
call fcn.0054cf60
add esp, 4
mov dword [ebp - 0x288], 0
mov ecx, dword [ebp - 0x14]
cmp ecx, 8
jb 0x547b48
mov edx, dword [ebp - 0x28]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x547b3e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x547b3e
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00563352
add esp, 8
xor eax, eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
cmp byte [ebp - 0x269], al
sete al
inc eax
mov dword [ebp - 0x27c], eax
mov eax, dword [ebp - 0x260]
test eax, 0x400
je 0x547b8f
and eax, 0xfffffbff
lea ecx, [ebp - 0xa14]
mov dword [ebp - 0x268], eax
call fcn.00559c90
nop
mov ecx, dword [ebp + 8]
mov eax, dword [ebp - 0x27c]
mov dword [0x5c2a3c], eax
test ecx, ecx
je 0x547ba9
push 1
call fcn.005447b0
mov al, byte [ebp - 0x261]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00563360
mov esp, ebp
pop ebp
ret
call fcn.004015b0
push 0x5c2a68
call fcn.005638d4
add esp, 4
cmp dword [0x5c2a68], 0xffffffff
jne 0x54721d
push 0
push str.::InitializeProcThreadAttributeList
push str.kernel32.dll
mov byte [ebp - 4], 0x21
call fcn.00551ee0
push 0x5c2a68
mov dword [0x5c2a64], eax
mov byte [ebp - 4], 0x20
call fcn.00563883
add esp, 0x10
jmp 0x54721d
push 0x5c2a70
call fcn.005638d4
add esp, 4
cmp dword [0x5c2a70], 0xffffffff
jne 0x547234
cmp dword [0x5c2a64], 0
mov byte [ebp - 4], 0x22
je 0x547c56
push 0
push str.::UpdateProcThreadAttribute
push str.kernel32.dll
call fcn.00551ee0
add esp, 0xc
jmp 0x547c5a
xor eax, eax
jmp 0x547c5a
push 0x5c2a70
mov byte [ebp - 4], 0x20
mov dword [0x5c2a6c], eax
call fcn.00563883
add esp, 4
jmp 0x547234
call fcn.0046a080
int3