Function at 0x4c45fd
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x270
mov ebx, ecx
mov eax, dword [0x6401e4]
xor eax, ebp
mov dword [esp + 0x268], eax
call fcn.00507934
test al, al
jne 0x4c573e
xor eax, eax
lea ecx, [esp + 0x258]
mov dword [ecx + 4], eax
mov dword [ecx], eax
mov dword [ecx + 8], eax
mov dword [esp + 0x24], ecx
push ecx
push dword [ebx]
call fcn.00507958
add esp, 8
mov edx, dword [ebx]
mov esi, dword [edx + 0x3c]
mov edi, dword [edx + 0x40]
cmp esi, edi
mov dword [esp + 0x14], ebx
je 0x4c46b1
lea ebx, [esp + 0x1ac]
movzx eax, byte [esi + 0xb]
mov ecx, esi
test al, al
jns 0x4c466f
mov ecx, dword [esi]
mov eax, dword [esi + 4]
push eax
push ecx
push ebx
call fcn.0048c140
add esp, 0xc
lea eax, [esp + 0x258]
push eax
push ebx
call fcn.00507958
add esp, 8
cmp byte [esp + 0x1b7], 0
jns 0x4c46a4
push dword [esp + 0x1ac]
call fcn.00596316
add esp, 4
add esi, 0xc
cmp edi, esi
jne 0x4c4660
mov ebx, dword [esp + 0x14]
mov edx, dword [ebx]
movzx eax, byte [edx + 0x17]
test al, al
jns 0x4c46bc
mov eax, dword [edx + 0x10]
test eax, eax
je 0x4c4724
add edx, 0xc
lea ecx, [esp + 0x58]
push str.database
mov esi, edx
call fcn.00404538
lea edi, [esp + 0x1ac]
mov ecx, edi
lea edx, [esp + 0x58]
push esi
call fcn.004c5bb2
add esp, 4
lea eax, [esp + 0x258]
push eax
push edi
call fcn.00507958
add esp, 8
cmp byte [edi + 0xb], 0
jns 0x4c470f
push dword [esp + 0x1ac]
call fcn.00596316
add esp, 4
cmp byte [esp + 0x63], 0
jns 0x4c4722
push dword [esp + 0x58]
call fcn.00596316
add esp, 4
mov edx, dword [ebx]
movzx eax, byte [edx + 0x23]
test al, al
jns 0x4c472f
mov eax, dword [edx + 0x1c]
test eax, eax
je 0x4c4797
add edx, 0x18
lea ecx, [esp + 0x58]
push str.metrics_dir
mov esi, edx
call fcn.00404538
lea edi, [esp + 0x1ac]
mov ecx, edi
lea edx, [esp + 0x58]
push esi
call fcn.004c5bb2
add esp, 4
lea eax, [esp + 0x258]
push eax
push edi
call fcn.00507958
add esp, 8
cmp byte [edi + 0xb], 0
jns 0x4c4782
push dword [esp + 0x1ac]
call fcn.00596316
add esp, 4
cmp byte [esp + 0x63], 0
jns 0x4c4795
push dword [esp + 0x58]
call fcn.00596316
add esp, 4
mov edx, dword [ebx]
movzx eax, byte [edx + 0x2f]
test al, al
js 0x4c47a3
mov ecx, eax
jmp 0x4c47a6
mov ecx, dword [edx + 0x28]
test ecx, ecx
je 0x4c484b
test al, al
jns 0x4c47ba
mov eax, dword [edx + 0x28]
mov edx, dword [edx + 0x24]
jmp 0x4c47bd
add edx, 0x24
lea ebx, [esp + 0x58]
push eax
push edx
push ebx
call fcn.0048c140
add esp, 0xc
lea esi, [esp + 0x130]
mov ecx, esi
push 0x5d3ef3
call fcn.00404538
lea edi, [esp + 0x1ac]
mov ecx, edi
mov edx, esi
push ebx
call fcn.004c5bb2
add esp, 4
lea eax, [esp + 0x258]
push eax
push edi
call fcn.00507958
add esp, 8
cmp byte [edi + 0xb], 0
jns 0x4c4819
push dword [esp + 0x1ac]
call fcn.00596316
add esp, 4
cmp byte [esp + 0x13b], 0
mov esi, dword [esp + 0x14]
jns 0x4c4836
push dword [esp + 0x130]
call fcn.00596316
add esp, 4
cmp byte [esp + 0x63], 0
jns 0x4c4849
push dword [esp + 0x58]
call fcn.00596316
add esp, 4
mov edx, dword [esi]
mov esi, dword [edx + 0x30]
lea eax, [edx + 0x34]
mov dword [esp + 0x18], eax
cmp eax, esi
je 0x4c49c8
lea eax, [esi + 0x10]
push 0x3d
push eax
lea eax, [esp + 0x180]
push eax
call fcn.0042be6c
add esp, 0xc
movzx eax, byte [esi + 0x27]
test al, al
jns 0x4c4883
mov eax, dword [esi + 0x20]
mov edx, dword [esi + 0x1c]
jmp 0x4c4886
lea edx, [esi + 0x1c]
lea ecx, [esp + 0x178]
push eax
push edx
call fcn.0047879a
mov ecx, dword [eax + 8]
mov dword [esp + 0x138], ecx
movsd xmm0, qword [eax]
movsd qword [esp + 0x130], xmm0
xor ecx, ecx
mov dword [eax], ecx
mov dword [eax + 4], ecx
mov dword [eax + 8], ecx
movzx eax, byte [esp + 0x13b]
lea ecx, [esp + 0x130]
test al, al
jns 0x4c48d6
mov ecx, dword [esp + 0x130]
mov eax, dword [esp + 0x134]
push eax
push ecx
lea eax, [esp + 0x60]
push eax
call fcn.0048c140
add esp, 0xc
lea ebx, [esp + 0x34]
mov ecx, ebx
push str.annotation
call fcn.00404538
lea edi, [esp + 0x1ac]
mov ecx, edi
mov edx, ebx
lea eax, [esp + 0x58]
push eax
call fcn.004c5bb2
add esp, 4
lea eax, [esp + 0x258]
push eax
push edi
call fcn.00507958
add esp, 8
cmp byte [esp + 0x1b7], 0
jns 0x4c4937
push dword [esp + 0x1ac]
call fcn.00596316
add esp, 4
cmp byte [esp + 0x3f], 0
jns 0x4c494a
push dword [esp + 0x34]
call fcn.00596316
add esp, 4
cmp byte [esp + 0x63], 0
jns 0x4c495d
push dword [esp + 0x58]
call fcn.00596316
add esp, 4
cmp byte [esp + 0x13b], 0
jns 0x4c4976
push dword [esp + 0x130]
call fcn.00596316
add esp, 4
cmp byte [esp + 0x183], 0
jns 0x4c498f
push dword [esp + 0x178]
call fcn.00596316
add esp, 4
mov ecx, dword [esi + 4]
test ecx, ecx
je 0x4c49a0
mov eax, ecx
mov ecx, dword [ecx]
test ecx, ecx
jne 0x4c4996
jmp 0x4c49b6
mov eax, dword [esi + 8]
cmp dword [eax], esi
je 0x4c49b6
add esi, 8
mov ecx, dword [esi]
lea esi, [ecx + 8]
mov eax, dword [ecx + 8]
cmp dword [eax], ecx
jne 0x4c49aa
mov esi, eax
cmp dword [esp + 0x18], eax
jne 0x4c485d
mov eax, dword [esp + 0x14]
mov edx, dword [eax]
mov ebx, dword [edx + 0x48]
mov eax, dword [edx + 0x4c]
mov dword [esp + 0x18], eax
cmp ebx, eax
je 0x4c4a40
lea edi, [esp + 0x58]
mov ecx, edi
push str.attachment
call fcn.00404538
lea esi, [esp + 0x1ac]
mov ecx, esi
mov edx, edi
push ebx
call fcn.004c5bb2
add esp, 4
lea eax, [esp + 0x258]
push eax
push esi
call fcn.00507958
add esp, 8
cmp byte [esp + 0x1b7], 0
jns 0x4c4a24
push dword [esp + 0x1ac]
call fcn.00596316
add esp, 4
cmp byte [esp + 0x63], 0
jns 0x4c4a37
push dword [esp + 0x58]
call fcn.00596316
add esp, 4
add ebx, 0xc
cmp dword [esp + 0x18], ebx
jne 0x4c49d6
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 1
push 0x1f0fff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
test eax, eax
je 0x4c4b0a
mov edx, eax
mov eax, dword [esp + 0x14]
mov eax, dword [eax]
xor edi, edi
lea esi, [esp + 0x178]
mov ecx, esi
push edi
push 0x64321c
push edi
push 0x643210
push edi
push 0x643200
mov dword [esp + 0x30], edx
push edx
push dword [eax + 0x64]
push dword [0x6401a8]
push dword [0x6401a4]
push dword [0x6401a0]
call fcn.00507aa8
lea ebx, [esp + 0x130]
mov ecx, esi
push ebx
call fcn.00507d82
lea esi, [esp + 0x34]
mov ecx, esi
push str.__initial_client_data
call fcn.00404538
movzx eax, byte [ebx + 0xb]
test al, al
jns 0x4c4ad5
mov eax, dword [esp + 0x134]
mov ebx, dword [esp + 0x130]
mov ecx, esi
push eax
push ebx
call fcn.0047879a
mov ecx, dword [eax + 8]
mov dword [esp + 0x60], ecx
movsd xmm0, qword [eax]
movsd qword [esp + 0x58], xmm0
mov dword [eax], edi
mov dword [eax + 4], edi
mov dword [eax + 8], edi
movzx eax, byte [esp + 0x63]
test al, al
jns 0x4c4b63
mov ecx, dword [esp + 0x58]
mov eax, dword [esp + 0x5c]
jmp 0x4c4b67
xor ebx, ebx
push 2
call fcn.00483a10
add esp, 4
test al, al
je 0x4c50dc
call fcn.00484390
lea esi, [esp + 0x1ac]
mov ecx, esi
push eax
push 2
push 0x18d
push str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
call fcn.004844c0
lea eax, [esp + 0x1b4]
push 0xb
push 0x5d3f0d
push eax
call fcn.00401baa
add esp, 0xc
mov ecx, esi
call fcn.00484570
xor ebx, ebx
jmp 0x4c50dc
lea ecx, [esp + 0x58]
lea ebx, [esp + 0x1ac]
push eax
push ecx
push ebx
call fcn.0048c140
add esp, 0xc
lea eax, [esp + 0x258]
push eax
push ebx
call fcn.00507958
add esp, 8
cmp byte [ebx + 0xb], 0
jns 0x4c4b9f
push dword [esp + 0x1ac]
call fcn.00596316
add esp, 4
cmp byte [esp + 0x63], 0
jns 0x4c4bb2
push dword [esp + 0x58]
call fcn.00596316
add esp, 4
cmp byte [esp + 0x3f], 0
jns 0x4c4bc5
push dword [esp + 0x34]
call fcn.00596316
add esp, 4
cmp byte [esp + 0x13b], 0
jns 0x4c4bde
push dword [esp + 0x130]
call fcn.00596316
add esp, 4
xorps xmm0, xmm0
movaps xmmword [esp + 0x150], xmm0
xor esi, esi
mov dword [esp + 0x174], esi
mov dword [esp + 0x170], esi
movaps xmmword [esp + 0x160], xmm0
movaps xmmword [esp + 0x140], xmm0
movaps xmmword [esp + 0x130], xmm0
mov dword [esp + 0x15c], 0x100
mov edi, dword [sym.imp.KERNEL32.dll_GetStdHandle]
push 0xfffffffffffffff6
call edi
mov dword [esp + 0x168], eax
push 0xfffffffffffffff5
call edi
mov dword [esp + 0x16c], eax
push 0xfffffffffffffff4
call edi
mov dword [esp + 0x170], eax
mov dword [esp + 0x124], esi
mov dword [esp + 0x128], esi
mov dword [esp + 0x12c], esi
mov dword [esp + 0x118], 0x5d4074
mov dword [esp + 0x11c], esi
mov byte [esp + 0x120], 0
mov eax, dword [0x643240]
mov ecx, dword [0x644310]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
cmp eax, dword [ecx + 0x18]
jg 0x4c56a7
mov eax, dword [0x643248]
mov ecx, dword [0x644310]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
cmp eax, dword [ecx + 0x18]
jg 0x4c56ec
mov ecx, dword [0x64323c]
test ecx, ecx
je 0x4c4d36
cmp dword [0x643244], 0
je 0x4c4d36
mov dword [esp + 0x130], 0x48
lea esi, [esp + 0x58]
xor eax, eax
push esi
push eax
push 1
push eax
call ecx
test eax, eax
je 0x4c4d74
push 2
call fcn.00483a10
add esp, 4
test al, al
je 0x4c507f
lea esi, [esp + 0x1ac]
mov ecx, esi
push 2
push 0x1be
push str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
call fcn.00483ab0
lea eax, [esp + 0x1b4]
push 0x44
push str.InitializeProcThreadAttributeList__size__succeeded__expected_failure
push eax
call fcn.00401baa
add esp, 0xc
mov ecx, esi
call fcn.00483e50
jmp 0x4c507f
mov dword [esp + 0x130], 0x44
mov dword [esp + 0x20], 0
xor esi, esi
mov eax, dword [esp + 0x14]
mov eax, dword [eax]
movzx edx, byte [eax + 0xb]
test dl, dl
js 0x4c4d63
cmp dl, 0xc
jb 0x4c4d6d
jmp 0x4c4e01
cmp dword [eax + 4], 0xc
jae 0x4c4dfe
xor ebx, ebx
jmp 0x4c4e50
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x4c5033
push dword [esp + 0x58]
call fcn.00596343
add esp, 4
mov dword [esp + 0x174], eax
push esi
mov esi, eax
push 0
push 1
push eax
call dword [0x64323c]
test eax, eax
je 0x4c5124
mov dword [esp + 0x20], esi
lea esi, [esp + 0x118]
mov ecx, esi
call fcn.004c5e74
mov eax, dword [esp + 0x174]
mov dword [esi + 4], eax
lea esi, [esp + 0x124]
mov ecx, esi
push 8
call fcn.0042bde0
mov edi, dword [esi + 4]
mov eax, dword [esi + 8]
cmp edi, eax
je 0x4c517d
mov eax, dword [0x6401a0]
mov dword [edi], eax
add edi, 4
mov dword [esp + 0x128], edi
mov esi, edi
jmp 0x4c5244
mov edx, dword [eax + 4]
add edx, 0xfffffff4
lea edi, [eax + 0xc]
mov ecx, ebx
push edi
push 0xffffffffffffffff
push edx
push eax
call fcn.00478ee8
cmp byte [esp + 0x1b7], 0
jns 0x4c4e24
mov ebx, dword [esp + 0x1ac]
push str.rundll32.exe
push ebx
call fcn.005ac8e5
add esp, 8
test eax, eax
sete bl
cmp byte [esp + 0x1b7], 0
jns 0x4c4e50
push dword [esp + 0x1ac]
call fcn.00596316
add esp, 4
cmp byte [esp + 0x263], 0
jns 0x4c4e65
mov eax, dword [esp + 0x258]
mov dword [esp + 0x24], eax
xor eax, eax
mov ecx, 0
test bl, bl
jne 0x4c4e7e
mov ecx, dword [esp + 0x14]
mov ecx, dword [ecx]
cmp byte [ecx + 0xb], 0
jns 0x4c4e7e
mov ecx, dword [ecx]
lea edx, [esp + 0x108]
lea edi, [esp + 0x130]
push edx
push edi
push eax
push eax
push esi
push 1
push eax
push eax
push dword [esp + 0x44]
push ecx
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x4c4f11
push dword [esp + 0x10c]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, eax
push 1
call fcn.00483a10
add esp, 4
mov ebx, eax
test esi, esi
jne 0x4c4f6a
test bl, bl
je 0x4c4f6a
lea esi, [esp + 0x1ac]
call fcn.00484390
mov ecx, esi
push eax
push 1
push 0x20e
push str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
call fcn.004844c0
lea eax, [esp + 0x1b4]
push 0x12
push str.CloseHandle_thread
push eax
call fcn.00401baa
add esp, 0xc
mov ecx, esi
call fcn.00484570
test bl, bl
jmp 0x4c4f74
xor ebx, ebx
push 2
call fcn.00483a10
add esp, 4
test al, al
je 0x4c502d
call fcn.00484390
lea esi, [esp + 0x1ac]
mov ecx, esi
push eax
push 2
push 0x209
push str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
call fcn.004844c0
lea eax, [esp + 0x1b4]
push 0xd
push str.CreateProcess
push eax
call fcn.00401baa
add esp, 0xc
mov ecx, esi
call fcn.00484570
xor ebx, ebx
jmp 0x4c502d
test esi, esi
sete al
and bl, al
cmp bl, 1
push dword [esp + 0x108]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, eax
push 1
call fcn.00483a10
add esp, 4
mov ebx, eax
test esi, esi
jne 0x4c4fd3
test bl, bl
je 0x4c4fd3
lea esi, [esp + 0x58]
call fcn.00484390
mov ecx, esi
push eax
push 1
push 0x211
push str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
call fcn.004844c0
lea eax, [esp + 0x60]
push 0x13
push str.CloseHandle_process
push eax
call fcn.00401baa
add esp, 0xc
mov ecx, esi
call fcn.00484570
test bl, bl
jmp 0x4c4fdd
test esi, esi
sete al
and bl, al
cmp bl, 1
mov esi, dword [esp + 0x14]
mov ecx, dword [esi]
add ecx, 0x60
mov dword [esp + 0x34], 0xffffffff
lea edi, [esp + 0x34]
push edi
call fcn.004c5a20
xorps xmm0, xmm0
movups xmmword [esp + 0x48], xmm0
movups xmmword [esp + 0x38], xmm0
mov dword [esp + 0x34], 2
xor eax, eax
lea ecx, [esp + 0x28]
mov dword [ecx + 4], eax
mov dword [ecx], eax
mov dword [ecx + 8], eax
mov eax, dword [esi]
add eax, 0x54
push ecx
push edi
push eax
call fcn.00507300
add esp, 0xc
mov ebx, eax
mov esi, dword [esp + 0x20]
jmp 0x4c5083
push 2
call fcn.00483a10
add esp, 4
test al, al
je 0x4c507f
call fcn.00484390
lea esi, [esp + 0x1ac]
mov ecx, esi
push eax
push 2
push 0x1c2
push str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
call fcn.004844c0
lea eax, [esp + 0x1b4]
push 0x28
push str.InitializeProcThreadAttributeList__size_
push eax
call fcn.00401baa
add esp, 0xc
mov ecx, esi
call fcn.00484570
xor esi, esi
xor ebx, ebx
mov dword [esp + 0x118], 0x5d4074
cmp byte [esp + 0x120], 0
jne 0x4c5741
lea ecx, [esp + 0x118]
call fcn.004c5e74
test esi, esi
je 0x4c50b5
push esi
call fcn.0059634c
add esp, 4
mov eax, dword [esp + 0x124]
test eax, eax
je 0x4c50d0
mov dword [esp + 0x128], eax
push eax
call fcn.00596316
add esp, 4
push dword [esp + 0x18]
call fcn.00505932
add esp, 4
cmp byte [esp + 0x263], 0
jns 0x4c50f5
push dword [esp + 0x258]
call fcn.00596316
add esp, 4
xor eax, eax
inc eax
cmp bl, 1
adc eax, 0
mov dword [0x643238], eax
mov ecx, dword [esp + 0x14]
call fcn.004c5b3a
mov ecx, dword [esp + 0x268]
xor ecx, ebp
call fcn.00596351
mov eax, ebx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
push 2
call fcn.00483a10
add esp, 4
test al, al
je 0x4c5081
call fcn.00484390
mov edi, esi
lea esi, [esp + 0x1ac]
mov ecx, esi
push eax
push 2
push 0x1cd
push str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
call fcn.004844c0
lea eax, [esp + 0x1b4]
push 0x21
push 0x5d3fde
push eax
call fcn.00401baa
add esp, 0xc
mov ecx, esi
mov esi, edi
call fcn.00484570
jmp 0x4c5081
mov edx, dword [esp + 0x124]
sub edi, edx
mov ecx, edi
sar ecx, 2
mov esi, ecx
mov dword [esp + 0x10], ecx
inc ecx
cmp ecx, 0x40000000
jae 0x4c5744
mov dword [esp + 8], edx
sub eax, edx
mov edx, eax
sar edx, 2
sar eax, 1
cmp eax, ecx
cmovb eax, ecx
cmp edx, 0x1fffffff
mov esi, 0x3fffffff
cmovb esi, eax
test esi, esi
je 0x4c51e0
cmp esi, 0x40000000
jae 0x4c5750
lea eax, [esi*4]
push eax
call fcn.00596296
add esp, 4
jmp 0x4c51e2
xor eax, eax
lea ecx, [eax + esi*4]
mov dword [esp + 0xc], ecx
mov edx, dword [0x6401a0]
mov ecx, dword [esp + 0x10]
lea esi, [eax + ecx*4]
add esi, 4
mov dword [esi - 4], edx
test edi, edi
mov ecx, dword [esp + 8]
jle 0x4c5217
push edi
push ecx
push eax
mov edi, eax
call fcn.00599c40
mov eax, edi
mov ecx, dword [esp + 0x14]
add esp, 0xc
mov dword [esp + 0x124], eax
mov dword [esp + 0x128], esi
mov eax, dword [esp + 0xc]
mov dword [esp + 0x12c], eax
test ecx, ecx
je 0x4c5244
push ecx
call fcn.00596316
add esp, 4
mov esi, dword [esp + 0x128]
mov edi, dword [esp + 0x12c]
cmp esi, edi
je 0x4c5265
mov eax, dword [0x6401a4]
mov dword [esi], eax
add esi, 4
mov dword [esp + 0x128], esi
jmp 0x4c5339
mov edx, dword [esp + 0x124]
sub edi, edx
mov esi, edi
sar esi, 2
lea eax, [esi + 1]
cmp eax, 0x40000000
jae 0x4c5744
mov ecx, edi
sar ecx, 1
cmp ecx, eax
cmovb ecx, eax
mov eax, esi
mov dword [esp + 0x10], esi
cmp esi, 0x1fffffff
mov esi, 0x3fffffff
cmovb esi, ecx
test esi, esi
je 0x4c52c8
mov dword [esp + 8], edx
cmp esi, 0x40000000
jae 0x4c5750
lea eax, [esi*4]
push eax
call fcn.00596296
add esp, 4
mov edx, dword [esp + 8]
jmp 0x4c52ca
xor eax, eax
mov dword [esp + 8], eax
lea eax, [eax + esi*4]
mov dword [esp + 0xc], eax
mov eax, dword [0x6401a4]
mov dword [esp + 0x1c], eax
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 8]
lea esi, [eax + ecx*4 + 4]
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x1c]
mov dword [esi - 4], ecx
test edi, edi
jle 0x4c530c
push edi
push edx
push eax
mov edi, edx
call fcn.00599c40
mov eax, dword [esp + 0x14]
mov edx, edi
add esp, 0xc
mov dword [esp + 0x124], eax
mov dword [esp + 0x128], esi
mov eax, dword [esp + 0xc]
mov dword [esp + 0x12c], eax
test edx, edx
je 0x4c5339
push edx
call fcn.00596316
add esp, 4
mov esi, dword [esp + 0x128]
mov edi, dword [esp + 0x12c]
cmp esi, edi
je 0x4c535a
mov eax, dword [0x6401a8]
mov dword [esi], eax
add esi, 4
mov dword [esp + 0x128], esi
jmp 0x4c542e
mov edx, dword [esp + 0x124]
sub edi, edx
mov esi, edi
sar esi, 2
lea eax, [esi + 1]
cmp eax, 0x40000000
jae 0x4c5744
mov ecx, edi
sar ecx, 1
cmp ecx, eax
cmovb ecx, eax
mov eax, esi
mov dword [esp + 0x10], esi
cmp esi, 0x1fffffff
mov esi, 0x3fffffff
cmovb esi, ecx
test esi, esi
je 0x4c53bd
mov dword [esp + 8], edx
cmp esi, 0x40000000
jae 0x4c5750
lea eax, [esi*4]
push eax
call fcn.00596296
add esp, 4
mov edx, dword [esp + 8]
jmp 0x4c53bf
xor eax, eax
mov dword [esp + 8], eax
lea eax, [eax + esi*4]
mov dword [esp + 0xc], eax
mov eax, dword [0x6401a8]
mov dword [esp + 0x1c], eax
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 8]
lea esi, [eax + ecx*4 + 4]
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x1c]
mov dword [esi - 4], ecx
test edi, edi
jle 0x4c5401
push edi
push edx
push eax
mov edi, edx
call fcn.00599c40
mov eax, dword [esp + 0x14]
mov edx, edi
add esp, 0xc
mov dword [esp + 0x124], eax
mov dword [esp + 0x128], esi
mov eax, dword [esp + 0xc]
mov dword [esp + 0x12c], eax
test edx, edx
je 0x4c542e
push edx
call fcn.00596316
add esp, 4
mov esi, dword [esp + 0x128]
mov eax, dword [esp + 0x14]
mov eax, dword [eax]
mov edi, dword [esp + 0x12c]
cmp esi, edi
je 0x4c5453
mov eax, dword [eax + 0x64]
mov dword [esi], eax
add esi, 4
mov dword [esp + 0x128], esi
jmp 0x4c5527
mov dword [esp + 0x10], eax
mov edx, dword [esp + 0x124]
sub edi, edx
mov esi, edi
sar esi, 2
lea eax, [esi + 1]
cmp eax, 0x40000000
jae 0x4c5744
mov ecx, edi
sar ecx, 1
cmp ecx, eax
cmovb ecx, eax
mov eax, esi
mov dword [esp + 0xc], esi
cmp esi, 0x1fffffff
mov esi, 0x3fffffff
cmovb esi, ecx
test esi, esi
je 0x4c54ba
mov dword [esp + 8], edx
cmp esi, 0x40000000
jae 0x4c5750
lea eax, [esi*4]
push eax
call fcn.00596296
add esp, 4
mov edx, dword [esp + 8]
jmp 0x4c54bc
xor eax, eax
mov dword [esp + 8], eax
lea eax, [eax + esi*4]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x10]
mov eax, dword [eax + 0x64]
mov ecx, dword [esp + 0xc]
mov esi, dword [esp + 8]
lea esi, [esi + ecx*4]
add esi, 4
mov ecx, dword [esp + 8]
mov dword [esi - 4], eax
test edi, edi
jle 0x4c54fa
push edi
push edx
push ecx
mov edi, edx
call fcn.00599c40
mov ecx, dword [esp + 0x14]
mov edx, edi
add esp, 0xc
mov dword [esp + 0x124], ecx
mov dword [esp + 0x128], esi
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x12c], eax
test edx, edx
je 0x4c5527
push edx
call fcn.00596316
add esp, 4
mov esi, dword [esp + 0x128]
mov edi, dword [esp + 0x12c]
cmp esi, edi
je 0x4c5547
mov eax, dword [esp + 0x18]
mov dword [esi], eax
add esi, 4
mov dword [esp + 0x128], esi
jmp 0x4c5603
mov edx, dword [esp + 0x124]
sub edi, edx
mov esi, edi
sar esi, 2
lea eax, [esi + 1]
cmp eax, 0x40000000
jae 0x4c5744
mov ecx, edi
sar ecx, 1
cmp ecx, eax
cmovb ecx, eax
mov eax, esi
mov dword [esp + 0x10], esi
cmp esi, 0x1fffffff
mov esi, 0x3fffffff
cmovb esi, ecx
test esi, esi
mov dword [esp + 8], edx
je 0x4c55ac
cmp esi, 0x40000000
jae 0x4c5750
lea eax, [esi*4]
push eax
call fcn.00596296
add esp, 4
mov ecx, eax
mov edx, dword [esp + 8]
jmp 0x4c55ae
xor ecx, ecx
lea eax, [ecx + esi*4]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x10]
lea esi, [ecx + eax*4]
add esi, 4
mov eax, dword [esp + 0x18]
mov dword [esi - 4], eax
test edi, edi
jle 0x4c55dd
push edi
push edx
push ecx
mov edi, ecx
call fcn.00599c40
mov ecx, edi
mov edx, dword [esp + 0x14]
add esp, 0xc
mov dword [esp + 0x124], ecx
mov dword [esp + 0x128], esi
mov eax, dword [esp + 0xc]
mov dword [esp + 0x12c], eax
test edx, edx
je 0x4c5603
push edx
call fcn.00596316
add esp, 4
mov edx, dword [esp + 0x168]
lea esi, [esp + 0x124]
mov ecx, esi
call fcn.004c5cf6
mov edx, dword [esp + 0x16c]
mov ecx, esi
call fcn.004c5cf6
mov edx, dword [esp + 0x170]
mov ecx, esi
call fcn.004c5cf6
mov eax, dword [esi]
mov ecx, dword [esi + 4]
sub ecx, eax
xor edx, edx
push edx
push edx
push ecx
push eax
push 0x20002
push edx
push dword [esp + 0x18c]
call dword [0x643244]
test eax, eax
je 0x4c5662
mov esi, 0x80000
jmp 0x4c4d4b
push 2
call fcn.00483a10
add esp, 4
test al, al
je 0x4c4f63
call fcn.00484390
lea esi, [esp + 0x1ac]
mov ecx, esi
push eax
push 2
push 0x1e7
push str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
call fcn.004844c0
lea eax, [esp + 0x1b4]
push 0x19
push 0x5d4000
jmp 0x4c4f53
push 0x643240
call fcn.00596397
add esp, 4
cmp dword [0x643240], 0xffffffff
jne 0x4c4c93
push 0
push str.::InitializeProcThreadAttributeList
push 0x5c5e58
call fcn.00507e40
add esp, 0xc
mov dword [0x64323c], eax
push 0x643240
call fcn.0059640d
add esp, 4
jmp 0x4c4c93
push 0x643248
call fcn.00596397
add esp, 4
cmp dword [0x643248], 0xffffffff
jne 0x4c4cb4
cmp dword [0x64323c], 0
je 0x4c5725
push 0
push str.::UpdateProcThreadAttribute
push 0x5c5e58
call fcn.00507e40
add esp, 0xc
jmp 0x4c5727
xor eax, eax
mov dword [0x643244], eax
push 0x643248
call fcn.0059640d
add esp, 4
jmp 0x4c4cb4
int3
int3
lea ecx, [esp + 0x124]
call fcn.0047a3cc
call fcn.005aa3fa
int3