Function at 0x550da0
Capabilities:
Contain obfuscated stackstrings
Create process on windows
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x190
mov eax, dword [0x7a9040]
xor eax, ebp
mov dword [esp + 0x188], eax
call fcn.00580f40
test al, al
jne 0x552648
lea eax, [ebp + 8]
pxor xmm0, xmm0
lea ecx, [esp + 0x178]
movq qword [ecx], xmm0
mov dword [ecx + 8], 0
mov ebx, dword [eax]
mov dword [esp + 0x18], ecx
push ecx
push ebx
call fcn.00580f70
add esp, 8
mov esi, dword [ebx + 0x48]
mov edi, dword [ebx + 0x4c]
cmp esi, edi
je 0x550e72
lea ebx, [esp + 0xcc]
jmp 0x550e61
mov eax, dword [esi + 4]
test eax, eax
js 0x551abf
mov ecx, dword [esi]
test eax, eax
sete dl
test ecx, ecx
setne dh
or dh, dl
je 0x551abf
push eax
push ecx
push ebx
call fcn.005d85c0
add esp, 0xc
lea eax, [esp + 0x178]
push eax
push ebx
call fcn.00580f70
add esp, 8
cmp byte [esp + 0xd7], 0
jns 0x550e5a
push dword [esp + 0xcc]
call fcn.006507ee
add esp, 4
add esi, 0xc
cmp esi, edi
je 0x550e6d
movsx eax, byte [esi + 0xb]
mov ecx, esi
test eax, eax
jns 0x550e13
jmp 0x550e06
lea eax, [ebp + 8]
mov ebx, dword [eax]
movsx eax, byte [ebx + 0x17]
test eax, eax
jns 0x550e7d
mov eax, dword [ebx + 0x10]
test eax, eax
je 0x550f0b
lea eax, [esp + 0x48]
mov byte [eax + 3], 8
mov ecx, str.database
lea edx, [esp + 0x40]
cmp edx, ecx
seta dl
cmp eax, ecx
setbe al
or al, dl
je 0x551abf
lea eax, [ebx + 0xc]
lea edx, [esp + 0x40]
mov dword [edx + 4], 0x65736162
mov dword [edx], 0x61746164
mov byte [edx + 8], 0
lea esi, [esp + 0xcc]
mov ecx, esi
push eax
call fcn.00552910
add esp, 4
lea eax, [esp + 0x178]
push eax
push esi
call fcn.00580f70
add esp, 8
cmp byte [esi + 0xb], 0
jns 0x550ef8
push dword [esp + 0xcc]
call fcn.006507ee
add esp, 4
cmp byte [esp + 0x4b], 0
jns 0x550f0b
push dword [esp + 0x40]
call fcn.006507ee
add esp, 4
movsx eax, byte [ebx + 0x23]
test eax, eax
jns 0x550f16
mov eax, dword [ebx + 0x1c]
test eax, eax
je 0x550fc4
mov esi, ebx
push 0x10
call fcn.006507be
add esp, 4
mov dword [esp + 0x40], eax
mov dword [esp + 0x48], reloc.WS2_32.dll_recv
mov dword [esp + 0x44], 0xb
lea ecx, [eax + 0xb]
mov edx, str.metrics_dir
cmp eax, edx
seta bl
cmp ecx, edx
setbe cl
or cl, bl
je 0x551abf
mov ebx, esi
lea edi, [esi + 0x18]
mov dword [eax + 7], 0x7269642d
mov dword [eax + 4], 0x2d736369
mov dword [eax], 0x7274656d
mov byte [eax + 0xb], 0
lea esi, [esp + 0xcc]
lea edx, [esp + 0x40]
mov ecx, esi
push edi
call fcn.00552910
add esp, 4
lea eax, [esp + 0x178]
push eax
push esi
call fcn.00580f70
add esp, 8
cmp byte [esi + 0xb], 0
jns 0x550fb1
push dword [esp + 0xcc]
call fcn.006507ee
add esp, 4
cmp byte [esp + 0x4b], 0
jns 0x550fc4
push dword [esp + 0x40]
call fcn.006507ee
add esp, 4
movsx eax, byte [ebx + 0x2f]
test eax, eax
jns 0x550fcf
mov eax, dword [ebx + 0x28]
test eax, eax
je 0x551075
mov esi, ebx
push 0x18
call fcn.006507be
add esp, 4
mov dword [esp + 0x40], eax
mov dword [esp + 0x48], 0x80000018
mov dword [esp + 0x44], 0x10
lea ecx, [eax + 0x10]
mov edx, str.crash_count_file
cmp eax, edx
seta bl
cmp ecx, edx
setbe cl
or cl, bl
je 0x551abf
mov ebx, esi
lea edi, [esi + 0x24]
movdqu xmm0, xmmword [str.crash_count_file]
movdqu xmmword [eax], xmm0
mov byte [eax + 0x10], 0
lea esi, [esp + 0xcc]
lea edx, [esp + 0x40]
mov ecx, esi
push edi
call fcn.00552910
add esp, 4
lea eax, [esp + 0x178]
push eax
push esi
call fcn.00580f70
add esp, 8
cmp byte [esi + 0xb], 0
jns 0x551062
push dword [esp + 0xcc]
call fcn.006507ee
add esp, 4
cmp byte [esp + 0x4b], 0
jns 0x551075
push dword [esp + 0x40]
call fcn.006507ee
add esp, 4
movsx eax, byte [ebx + 0x3b]
test eax, eax
js 0x551187
test al, al
je 0x55114d
lea ecx, [ebx + 0x30]
test ecx, ecx
je 0x551abf
lea edi, [esp + 0x40]
push eax
push ecx
push edi
call fcn.005d85c0
add esp, 0xc
lea eax, [esp + 0x93]
mov byte [eax + 8], 3
mov ecx, 0x7378ce
lea edx, [esp + 0x90]
cmp edx, ecx
seta dl
cmp eax, ecx
setbe al
or al, dl
je 0x551abf
mov al, byte [0x7378d0]
lea edx, [esp + 0x90]
mov byte [edx + 2], al
movzx eax, word [0x7378ce]
mov word [edx], ax
mov byte [edx + 3], 0
lea esi, [esp + 0xcc]
mov ecx, esi
push edi
call fcn.00552910
add esp, 4
lea eax, [esp + 0x178]
push eax
push esi
call fcn.00580f70
add esp, 8
cmp byte [esi + 0xb], 0
jns 0x551121
push dword [esp + 0xcc]
call fcn.006507ee
add esp, 4
cmp byte [esp + 0x9b], 0
jns 0x55113a
push dword [esp + 0x90]
call fcn.006507ee
add esp, 4
cmp byte [esp + 0x4b], 0
jns 0x55114d
push dword [esp + 0x40]
call fcn.006507ee
add esp, 4
mov edi, dword [ebx + 0x3c]
add ebx, 0x40
cmp edi, ebx
je 0x551412
mov eax, str.annotation
lea ecx, [esp + 0x16c]
cmp ecx, eax
setbe cl
lea edx, [esp + 0x176]
cmp edx, eax
seta al
and al, cl
mov byte [esp + 0x13], al
mov dword [esp + 0x1c], ebx
jmp 0x55137d
mov eax, dword [ebx + 0x34]
test eax, eax
je 0x55114d
js 0x551abf
mov ecx, dword [ebx + 0x30]
jmp 0x55108c
pxor xmm0, xmm0
movq qword [esp + 0x30], xmm0
mov dword [esp + 0x38], 0
mov byte [esp + 0x3b], al
cmp byte [esp + 0xc], 0
jns 0x5511bb
mov edx, dword [edx]
lea esi, [esp + 0x30]
test ecx, ecx
jns 0x5511d0
jmp 0x551abf
mov ecx, dword [esp + 4]
mov edx, dword [esp + 8]
cmp edx, esi
jb 0x5511df
lea eax, [esi + ecx]
cmp eax, edx
ja 0x551abf
test ecx, ecx
je 0x5511f2
push ecx
push edx
push esi
mov ebx, ecx
call fcn.00654250
mov ecx, ebx
add esp, 0xc
mov word [esi + ecx], 0x3d
movsx eax, byte [edi + 0x27]
test eax, eax
js 0x551205
lea edx, [edi + 0x1c]
jmp 0x55120b
mov eax, dword [edi + 0x20]
mov edx, dword [edi + 0x1c]
lea esi, [esp + 0x40]
lea ecx, [esp + 0x30]
push eax
push edx
call fcn.005cd4f0
mov ecx, dword [eax + 8]
mov dword [esp + 0x98], ecx
movq xmm0, qword [eax]
movq qword [esp + 0x90], xmm0
pxor xmm0, xmm0
movq qword [eax], xmm0
mov dword [eax + 8], 0
movsx eax, byte [esp + 0x9b]
test eax, eax
cmovs eax, dword [esp + 0x94]
mov ecx, dword [esp + 0x90]
lea edx, [esp + 0x90]
cmovns ecx, edx
test eax, eax
js 0x551abf
sete dl
test ecx, ecx
setne dh
or dh, dl
je 0x551abf
push eax
push ecx
push esi
call fcn.005d85c0
add esp, 0xc
mov byte [esp + 0x177], 0xa
cmp byte [esp + 0x13], 0
jne 0x551abf
mov word [esp + 0x174], 0x6e6f
mov dword [esp + 0x170], 0x69746174
mov dword [esp + 0x16c], 0x6f6e6e61
mov byte [esp + 0x176], 0
lea ebx, [esp + 0xcc]
mov ecx, ebx
lea edx, [esp + 0x16c]
push esi
call fcn.00552910
add esp, 4
lea eax, [esp + 0x178]
push eax
push ebx
call fcn.00580f70
add esp, 8
cmp byte [esp + 0xd7], 0
jns 0x551304
push dword [esp + 0xcc]
call fcn.006507ee
add esp, 4
cmp byte [esp + 0x177], 0
mov ebx, dword [esp + 0x1c]
jns 0x551321
push dword [esp + 0x16c]
call fcn.006507ee
add esp, 4
cmp byte [esp + 0x4b], 0
jns 0x551334
push dword [esp + 0x40]
call fcn.006507ee
add esp, 4
cmp byte [esp + 0x9b], 0
jns 0x55134d
push dword [esp + 0x90]
call fcn.006507ee
add esp, 4
cmp byte [esp + 0x3b], 0
jns 0x551360
push dword [esp + 0x30]
call fcn.006507ee
add esp, 4
mov ecx, dword [edi + 4]
test ecx, ecx
je 0x551404
mov eax, ecx
mov ecx, dword [ecx]
test ecx, ecx
jne 0x55136b
mov edi, eax
cmp eax, ebx
je 0x551412
movsx eax, byte [edi + 0x1b]
mov ecx, eax
mov dword [esp + 0xc], eax
test eax, eax
jns 0x55138e
mov ecx, dword [edi + 0x14]
xor eax, eax
dec eax
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], eax
lea eax, [ecx + 1]
cmp eax, 0x7ffffff8
jae 0x55263f
lea edx, [edi + 0x10]
cmp eax, 0xb
jb 0x55119c
mov dword [esp + 8], edx
mov dword [esp + 4], ecx
mov ebx, eax
or ebx, 7
inc ebx
push ebx
mov dword [esp + 0x18], eax
call fcn.006507be
add esp, 4
mov esi, eax
or ebx, 0x80000000
mov dword [esp + 0x38], ebx
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x14]
mov dword [esp + 0x34], eax
cmp byte [esp + 0xc], 0
jns 0x5511c8
mov edx, dword [esp + 8]
mov edx, dword [edx]
mov ecx, dword [esp + 4]
jmp 0x5511d0
mov eax, dword [edi + 8]
cmp dword [eax], edi
mov edi, eax
jne 0x551404
jmp 0x551373
lea eax, [ebp + 8]
mov eax, dword [eax]
mov ebx, dword [eax + 0x54]
mov dword [esp + 4], eax
mov esi, dword [eax + 0x58]
cmp ebx, esi
je 0x5514d6
lea eax, [esp + 0x4a]
mov ecx, 0x744119
lea edx, [esp + 0x40]
cmp edx, ecx
setbe dl
cmp eax, ecx
seta al
and al, dl
mov byte [esp + 0xc], al
lea edi, [esp + 0xcc]
jmp 0x551478
push dword [esp + 0xcc]
call fcn.006507ee
add esp, 4
cmp byte [esp + 0x4b], 0
jns 0x551471
push dword [esp + 0x40]
call fcn.006507ee
add esp, 4
add ebx, 0xc
cmp ebx, esi
je 0x5514d6
mov byte [esp + 0x4b], 0xa
cmp byte [esp + 0xc], 0
jne 0x551abf
movzx eax, word [0x744121]
mov word [esp + 0x48], ax
movq xmm0, qword [0x744119]
movq qword [esp + 0x40], xmm0
mov byte [esp + 0x4a], 0
mov ecx, edi
lea edx, [esp + 0x40]
push ebx
call fcn.00552910
add esp, 4
lea eax, [esp + 0x178]
push eax
push edi
call fcn.00580f70
add esp, 8
cmp byte [esp + 0xd7], 0
jns 0x55145e
jmp 0x55144f
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 1
push 0x1f0fff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
test eax, eax
je 0x551b26
pcmpeqd xmm0, xmm0
lea esi, [esp + 0x90]
movdqa xmmword [esi + 0x20], xmm0
movdqa xmmword [esi + 0x10], xmm0
movdqa xmmword [esi], xmm0
xor edx, edx
mov ecx, esi
push edx
push 0x7bda68
push edx
push 0x7bda5c
push edx
push 0x7bda50
mov dword [esp + 0x24], eax
push eax
mov eax, dword [esp + 0x20]
push dword [eax + 0x70]
push dword [0x7aba10]
push dword [0x7aba0c]
push dword [0x7aba04]
call fcn.00581210
lea edi, [esp + 0x30]
mov ecx, esi
push edi
call fcn.00581600
push 0x18
call fcn.006507be
add esp, 4
mov dword [esp + 0x16c], eax
mov dword [esp + 0x174], 0x80000018
mov dword [esp + 0x170], 0x16
lea ecx, [eax + 0x16]
mov edx, str.__initial_client_data
cmp eax, edx
seta bl
cmp ecx, edx
setbe cl
or cl, bl
je 0x551abf
movsd xmm0, qword [0x78a9c1]
movsd qword [eax + 0xe], xmm0
movups xmm0, xmmword [str.__initial_client_data]
movups xmmword [eax], xmm0
movsx edx, byte [esp + 0x3b]
test edx, edx
cmovs edx, dword [esp + 0x34]
mov byte [eax + 0x16], 0
mov eax, dword [esp + 0x30]
cmovns eax, edi
lea ecx, [esp + 0x16c]
push edx
push eax
call fcn.005cd4f0
mov ecx, dword [eax + 8]
lea ebx, [esp + 0x40]
mov dword [ebx + 8], ecx
movq xmm0, qword [eax]
movq qword [ebx], xmm0
pxor xmm0, xmm0
movq qword [eax], xmm0
mov dword [eax + 8], 0
movsx eax, byte [ebx + 0xb]
test eax, eax
cmovs eax, dword [ebx + 4]
mov ecx, dword [ebx]
cmovns ecx, ebx
test eax, eax
js 0x551abf
sete dl
test ecx, ecx
setne dh
or dh, dl
je 0x551abf
lea esi, [esp + 0xcc]
push eax
push ecx
push esi
call fcn.005d85c0
add esp, 0xc
lea eax, [esp + 0x178]
push eax
push esi
call fcn.00580f70
add esp, 8
cmp byte [esi + 0xb], 0
jns 0x55164d
push dword [esp + 0xcc]
call fcn.006507ee
add esp, 4
cmp byte [esp + 0x4b], 0
jns 0x551660
push dword [esp + 0x40]
call fcn.006507ee
add esp, 4
cmp byte [esp + 0x177], 0
jns 0x551679
push dword [esp + 0x16c]
call fcn.006507ee
add esp, 4
cmp byte [esp + 0x3b], 0
jns 0x55168c
push dword [esp + 0x30]
call fcn.006507ee
add esp, 4
pxor xmm0, xmm0
movdqa xmmword [esp + 0x60], xmm0
xorps xmm1, xmm1
movsd qword [esp + 0x80], xmm1
movdqa xmmword [esp + 0x70], xmm0
movdqa xmmword [esp + 0x50], xmm0
movdqa xmmword [esp + 0x40], xmm0
mov dword [esp + 0x6c], 0x100
mov esi, dword [sym.imp.KERNEL32.dll_GetStdHandle]
push 0xfffffffffffffff6
call esi
mov dword [esp + 0x78], eax
push 0xfffffffffffffff5
call esi
mov dword [esp + 0x7c], eax
push 0xfffffffffffffff4
call esi
mov dword [esp + 0x80], eax
xor eax, eax
mov dword [esp + 0x16c], eax
mov dword [esp + 0x170], eax
mov dword [esp + 0x174], eax
mov eax, dword [0x7bda8c]
mov ecx, dword [0x7ad2c4]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
cmp eax, dword [ecx + 4]
jg 0x5525fa
mov eax, dword [0x7bda94]
mov ecx, dword [0x7ad2c4]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
cmp eax, dword [ecx + 4]
mov esi, dword [esp + 4]
jg 0x5525a4
mov ecx, dword [0x7bda88]
test ecx, ecx
je 0x5517c3
cmp dword [0x7bda90], 0
je 0x5517c3
mov dword [esp + 0x40], 0x48
mov dword [esp + 0x30], 0xffffffff
call dword [0x7a29f4]
xor esi, esi
push edi
push esi
push 1
push esi
call ecx
test eax, eax
je 0x551c3e
push 2
call fcn.005e3f20
add esp, 4
test al, al
je 0x5517ba
lea edi, [esp + 0xcc]
mov ecx, edi
push 2
push 0x1e1
push str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
call fcn.0053b2e0
lea eax, [esp + 0xd4]
push 0x44
push str.InitializeProcThreadAttributeList__size__succeeded__expected_failure
push eax
call fcn.005b72e0
add esp, 0xc
mov ecx, edi
call fcn.0053b7a0
xor edi, edi
xor ebx, ebx
jmp 0x551a2b
mov dword [esp + 0x40], 0x44
mov dword [esp + 8], 0
xor edx, edx
movsx eax, byte [esi + 0xb]
test eax, eax
mov dword [esp + 4], esi
js 0x5518ae
cmp al, 0xc
jb 0x5518bc
mov ecx, eax
mov dword [esp + 0x14], edx
cmp ecx, 0xb
jbe 0x55265c
mov edx, esi
test al, al
jns 0x551804
mov edx, dword [esi]
lea edi, [edx + ecx*2]
add edi, 0xffffffe8
push 0x20
call fcn.006507be
add esp, 4
mov dword [esp + 0xcc], eax
mov dword [esp + 0xd4], reloc.WS2_32.dll_recv
mov dword [esp + 0xd0], 0xc
lea ecx, [eax + 0x18]
cmp eax, edi
seta dl
cmp ecx, edi
setbe cl
or cl, dl
je 0x551abf
mov esi, ebx
movdqu xmm0, xmmword [edi]
movsd xmm1, qword [edi + 0x10]
movsd qword [eax + 0x10], xmm1
movdqu xmmword [eax], xmm0
mov word [eax + 0x18], 0
cmp byte [esp + 0xd7], 0
lea eax, [esp + 0xcc]
jns 0x551878
mov eax, dword [esp + 0xcc]
push str.rundll32.exe
push eax
call fcn.0066980f
add esp, 8
test eax, eax
sete bl
cmp byte [esp + 0xd7], 0
lea edi, [esp + 0x30]
jns 0x5518a8
push dword [esp + 0xcc]
call fcn.006507ee
add esp, 4
mov edx, dword [esp + 0x14]
jmp 0x5518c0
cmp dword [esi + 4], 0xc
jb 0x5518bc
mov ecx, dword [esi + 4]
jmp 0x5517ef
mov esi, ebx
xor ebx, ebx
pcmpeqd xmm0, xmm0
movdqa xmmword [esp + 0x30], xmm0
cmp byte [esp + 0x183], 0
jns 0x5518df
mov eax, dword [esp + 0x178]
mov dword [esp + 0x18], eax
xor eax, eax
mov ecx, 0
test bl, bl
jne 0x5518f6
mov ecx, dword [esp + 4]
cmp byte [ecx + 0xb], 0
jns 0x5518f6
mov ecx, dword [ecx]
push edi
push esi
push eax
push eax
push edx
push 1
push eax
push eax
push dword [esp + 0x38]
push ecx
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x551b79
push dword [esp + 0x34]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ebx, eax
push 1
call fcn.005e3f20
add esp, 4
test al, al
je 0x55196e
test ebx, ebx
jne 0x55196e
call fcn.006a5890
lea ebx, [esp + 0xcc]
mov ecx, ebx
push eax
push 1
push 0x231
push str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
call fcn.006a5a40
lea eax, [esp + 0xd4]
push 0x12
push str.CloseHandle_thread
push eax
call fcn.005b72e0
add esp, 0xc
mov ecx, ebx
call fcn.006a5aa0
push dword [esp + 0x30]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ebx, eax
push 1
call fcn.005e3f20
add esp, 4
test al, al
je 0x5519ca
test ebx, ebx
jne 0x5519ca
call fcn.006a5890
lea ebx, [esp + 0xcc]
mov ecx, ebx
push eax
push 1
push 0x234
push str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
call fcn.006a5a40
lea eax, [esp + 0xd4]
push 0x13
push str.CloseHandle_process
push eax
call fcn.005b72e0
add esp, 0xc
mov ecx, ebx
call fcn.006a5aa0
lea eax, [ebp + 8]
mov esi, dword [eax]
mov eax, dword [esi + 0x70]
cmp eax, 0xffffffff
je 0x5519e0
push eax
call fcn.00580d40
add esp, 4
mov dword [esi + 0x70], 0xffffffff
pxor xmm0, xmm0
lea eax, [esp + 0xcc]
movdqu xmmword [eax + 0x14], xmm0
movdqu xmmword [eax + 4], xmm0
mov dword [eax], 2
pxor xmm0, xmm0
lea ecx, [esp + 0x20]
movq qword [ecx], xmm0
mov dword [ecx + 8], 0
add esi, 0x60
push ecx
push eax
push esi
call fcn.005801f0
add esp, 0xc
mov ebx, eax
mov esi, dword [esp + 8]
mov edi, esi
test esi, esi
je 0x551a97
mov eax, dword [0x7bda9c]
mov ecx, dword [0x7ad2c4]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
cmp eax, dword [ecx + 4]
jle 0x551a88
push 0x7bda9c
call fcn.00650831
add esp, 4
cmp dword [0x7bda9c], 0xffffffff
jne 0x551a88
push 1
push str.::DeleteProcThreadAttributeList
push 0x74c634
call fcn.005816c0
add esp, 0xc
mov dword [0x7bda98], eax
push 0x7bda9c
call fcn.006508ab
add esp, 4
mov ecx, dword [0x7bda98]
call dword [0x7a29f4]
push esi
call ecx
test edi, edi
je 0x551aa4
push edi
call fcn.0065082c
add esp, 4
mov eax, dword [esp + 0x16c]
test eax, eax
je 0x551ad1
mov ecx, dword [esp + 0x170]
cmp ecx, eax
je 0x551ac1
add ecx, 0xfffffffc
jne 0x551ab6
ud2
mov dword [esp + 0x170], eax
push eax
call fcn.006507ee
add esp, 4
push dword [esp + 0xc]
call fcn.00580d50
add esp, 4
cmp byte [esp + 0x183], 0
jns 0x551af6
push dword [esp + 0x178]
call fcn.006507ee
add esp, 4
movzx eax, bl
mov ecx, 2
sub ecx, eax
mov dword [0x7bda84], ecx
lea ecx, [ebp + 8]
call fcn.005527e0
mov ecx, dword [esp + 0x188]
xor ecx, ebp
call fcn.00650d60
mov eax, ebx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
push 2
call fcn.005e3f20
add esp, 4
test al, al
je 0x551b72
call fcn.006a5890
lea esi, [esp + 0xcc]
mov ecx, esi
push eax
push 2
push 0x1b0
push str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
call fcn.006a5a40
lea eax, [esp + 0xd4]
push 0xb
push 0x78a9a7
push eax
call fcn.005b72e0
add esp, 0xc
mov ecx, esi
call fcn.006a5aa0
xor ebx, ebx
jmp 0x551add
push 2
call fcn.005e3f20
add esp, 4
test al, al
mov esi, dword [esp + 8]
je 0x551bc9
call fcn.006a5890
lea ebx, [esp + 0xcc]
mov ecx, ebx
push eax
push 2
push 0x22c
push str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
call fcn.006a5a40
lea eax, [esp + 0xd4]
push 0xd
push str.CreateProcess
push eax
call fcn.005b72e0
add esp, 0xc
mov ecx, ebx
call fcn.006a5aa0
xor ebx, ebx
jmp 0x551a29
push 2
call fcn.005e3f20
add esp, 4
test al, al
je 0x551c1c
call fcn.006a5890
lea ebx, [esp + 0xcc]
mov ecx, ebx
push eax
push 2
push 0x1f0
push str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
call fcn.006a5a40
lea eax, [esp + 0xd4]
push 0x21
push 0x78aa78
push eax
call fcn.005b72e0
add esp, 0xc
mov ecx, ebx
call fcn.006a5aa0
mov edi, dword [esp + 8]
jmp 0x5517bc
test esi, esi
je 0x551abf
mov eax, dword [0x7aba10]
mov dword [esi], eax
add esi, 4
mov edi, esi
jmp 0x551fc0
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
je 0x551cd4
push 2
call fcn.005e3f20
add esp, 4
test al, al
je 0x5517ba
call fcn.006a5890
lea edi, [esp + 0xcc]
mov ecx, edi
push eax
push 2
push 0x1e5
push str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
call fcn.006a5a40
lea eax, [esp + 0xd4]
push 0x28
push str.InitializeProcThreadAttributeList__size_
push eax
call fcn.005b72e0
add esp, 0xc
mov ecx, edi
call fcn.006a5aa0
jmp 0x5517ba
test ebx, ebx
je 0x551abf
mov eax, dword [0x7aba0c]
mov dword [ebx], eax
add ebx, 4
mov esi, ebx
jmp 0x551ef5
test esi, esi
je 0x551abf
mov eax, dword [0x7aba04]
mov dword [esi], eax
add esi, 4
mov ebx, esi
jmp 0x551e2a
push dword [esp + 0x30]
call fcn.00650823
add esp, 4
mov ebx, edi
mov edi, eax
mov dword [esp + 0x84], eax
mov ecx, dword [0x7bda88]
call dword [0x7a29f4]
push ebx
push 0
push 1
mov dword [esp + 0x14], edi
push edi
call ecx
test eax, eax
je 0x551bd0
mov ecx, dword [esp + 0x16c]
mov edx, dword [esp + 0x174]
mov eax, edx
mov dword [esp + 4], ecx
sub eax, ecx
cmp eax, 0x1f
ja 0x552598
mov edi, dword [esp + 0x170]
push 0x20
call fcn.006507be
add esp, 4
mov ebx, eax
lea edx, [eax + 0x20]
mov eax, dword [esp + 4]
sub edi, eax
lea esi, [ebx + edi]
jne 0x5526a0
mov dword [esp + 0x16c], ebx
mov dword [esp + 0x170], esi
mov dword [esp + 0x174], edx
test eax, eax
jne 0x552588
cmp esi, edx
jb 0x551cbb
mov eax, dword [esp + 0x16c]
sub esi, eax
sar esi, 2
lea ecx, [esi + 1]
cmp ecx, 0x40000000
jae 0x552650
sub edx, eax
mov eax, edx
sar eax, 1
cmp eax, ecx
cmovbe eax, ecx
cmp edx, 0x7ffffffc
mov edi, 0x3fffffff
cmovb edi, eax
test edi, edi
je 0x552668
cmp edi, 0x40000000
jae 0x55264b
lea eax, [edi*4]
push eax
call fcn.006507be
add esp, 4
shl esi, 2
add esi, eax
je 0x551abf
lea edi, [eax + edi*4]
mov eax, dword [0x7aba04]
mov dword [esi], eax
lea ebx, [esi + 4]
mov eax, dword [esp + 0x16c]
mov ecx, dword [esp + 0x170]
sub ecx, eax
sub esi, ecx
push ecx
push eax
push esi
call fcn.00654250
add esp, 0xc
mov eax, dword [esp + 0x16c]
mov dword [esp + 0x16c], esi
mov dword [esp + 0x170], ebx
mov dword [esp + 0x174], edi
test eax, eax
je 0x551e2a
push eax
call fcn.006507ee
add esp, 4
mov dword [esp + 0x170], ebx
mov eax, dword [esp + 0x174]
cmp ebx, eax
jb 0x551ca2
mov ecx, dword [esp + 0x16c]
sub ebx, ecx
sar ebx, 2
lea edx, [ebx + 1]
cmp edx, 0x40000000
jae 0x552650
sub eax, ecx
mov ecx, eax
sar ecx, 1
cmp ecx, edx
cmovbe ecx, edx
cmp eax, 0x7ffffffc
mov esi, 0x3fffffff
cmovb esi, ecx
test esi, esi
je 0x55266f
cmp esi, 0x40000000
jae 0x55264b
lea eax, [esi*4]
push eax
call fcn.006507be
add esp, 4
shl ebx, 2
add ebx, eax
je 0x551abf
lea edi, [eax + esi*4]
mov eax, dword [0x7aba0c]
mov dword [ebx], eax
lea esi, [ebx + 4]
mov eax, dword [esp + 0x16c]
mov ecx, dword [esp + 0x170]
sub ecx, eax
sub ebx, ecx
push ecx
push eax
push ebx
call fcn.00654250
add esp, 0xc
mov eax, dword [esp + 0x16c]
mov dword [esp + 0x16c], ebx
mov dword [esp + 0x170], esi
mov dword [esp + 0x174], edi
test eax, eax
je 0x551ef5
push eax
call fcn.006507ee
add esp, 4
mov dword [esp + 0x170], esi
mov eax, dword [esp + 0x174]
cmp esi, eax
jb 0x551c25
mov ecx, dword [esp + 0x16c]
sub esi, ecx
sar esi, 2
lea edx, [esi + 1]
cmp edx, 0x40000000
jae 0x552650
sub eax, ecx
mov ecx, eax
sar ecx, 1
cmp ecx, edx
cmovbe ecx, edx
cmp eax, 0x7ffffffc
mov edi, 0x3fffffff
cmovb edi, ecx
test edi, edi
je 0x552676
cmp edi, 0x40000000
jae 0x55264b
lea eax, [edi*4]
push eax
call fcn.006507be
add esp, 4
shl esi, 2
add esi, eax
je 0x551abf
lea ebx, [eax + edi*4]
mov eax, dword [0x7aba10]
mov dword [esi], eax
lea edi, [esi + 4]
mov eax, dword [esp + 0x16c]
mov ecx, dword [esp + 0x170]
sub ecx, eax
sub esi, ecx
push ecx
push eax
push esi
call fcn.00654250
add esp, 0xc
mov eax, dword [esp + 0x16c]
mov dword [esp + 0x16c], esi
mov dword [esp + 0x170], edi
mov dword [esp + 0x174], ebx
test eax, eax
je 0x551fc0
push eax
call fcn.006507ee
add esp, 4
mov dword [esp + 0x170], edi
lea eax, [ebp + 8]
mov esi, dword [eax]
mov eax, dword [esp + 0x174]
cmp edi, eax
jb 0x552559
mov ecx, dword [esp + 0x16c]
sub edi, ecx
sar edi, 2
lea edx, [edi + 1]
cmp edx, 0x40000000
jae 0x552650
sub eax, ecx
mov ecx, eax
sar ecx, 1
cmp ecx, edx
cmovbe ecx, edx
cmp eax, 0x7ffffffc
mov ebx, 0x3fffffff
cmovb ebx, ecx
test ebx, ebx
je 0x55267d
cmp ebx, 0x40000000
jae 0x55264b
lea eax, [ebx*4]
push eax
call fcn.006507be
add esp, 4
shl edi, 2
add edi, eax
je 0x551abf
mov ecx, esi
lea esi, [eax + ebx*4]
mov eax, dword [ecx + 0x70]
mov dword [edi], eax
lea ebx, [edi + 4]
mov eax, dword [esp + 0x16c]
mov ecx, dword [esp + 0x170]
sub ecx, eax
sub edi, ecx
push ecx
push eax
push edi
call fcn.00654250
add esp, 0xc
mov eax, dword [esp + 0x16c]
mov dword [esp + 0x16c], edi
mov dword [esp + 0x170], ebx
mov dword [esp + 0x174], esi
test eax, eax
je 0x552090
push eax
call fcn.006507ee
add esp, 4
mov dword [esp + 0x170], ebx
mov eax, dword [esp + 0x174]
cmp ebx, eax
jb 0x552570
mov ecx, dword [esp + 0x16c]
sub ebx, ecx
sar ebx, 2
lea edx, [ebx + 1]
cmp edx, 0x40000000
jae 0x552650
sub eax, ecx
mov ecx, eax
sar ecx, 1
cmp ecx, edx
cmovbe ecx, edx
cmp eax, 0x7ffffffc
mov esi, 0x3fffffff
cmovb esi, ecx
test esi, esi
je 0x552684
cmp esi, 0x40000000
jae 0x55264b
lea eax, [esi*4]
push eax
call fcn.006507be
add esp, 4
shl ebx, 2
add ebx, eax
je 0x551abf
lea edi, [eax + esi*4]
mov eax, dword [esp + 0xc]
mov dword [ebx], eax
lea esi, [ebx + 4]
mov eax, dword [esp + 0x16c]
mov ecx, dword [esp + 0x170]
sub ecx, eax
sub ebx, ecx
push ecx
push eax
push ebx
call fcn.00654250
add esp, 0xc
mov eax, dword [esp + 0x16c]
mov dword [esp + 0x16c], ebx
mov dword [esp + 0x170], esi
mov dword [esp + 0x174], edi
test eax, eax
je 0x55215a
push eax
call fcn.006507ee
add esp, 4
mov dword [esp + 0x170], esi
mov esi, dword [esp + 0x78]
lea eax, [esi + 1]
cmp eax, 2
jb 0x552267
push esi
call dword [sym.imp.KERNEL32.dll_GetFileType]
and eax, 0xfffffffd
cmp eax, 1
jne 0x552267
mov eax, dword [esp + 0x16c]
mov edi, dword [esp + 0x170]
cmp eax, edi
je 0x5521a7
mov ecx, eax
cmp dword [ecx], esi
je 0x552267
add ecx, 4
cmp ecx, edi
jne 0x552198
mov ecx, dword [esp + 0x174]
cmp edi, ecx
jb 0x5524ee
sub edi, eax
sar edi, 2
lea edx, [edi + 1]
cmp edx, 0x40000000
jae 0x552650
sub ecx, eax
mov eax, ecx
sar eax, 1
cmp eax, edx
cmovbe eax, edx
cmp ecx, 0x7ffffffc
mov ebx, 0x3fffffff
cmovb ebx, eax
test ebx, ebx
je 0x55268b
cmp ebx, 0x40000000
jae 0x55264b
lea eax, [ebx*4]
push eax
call fcn.006507be
add esp, 4
shl edi, 2
add edi, eax
je 0x551abf
lea ebx, [eax + ebx*4]
mov dword [edi], esi
lea esi, [edi + 4]
mov eax, dword [esp + 0x16c]
mov ecx, dword [esp + 0x170]
sub ecx, eax
sub edi, ecx
push ecx
push eax
push edi
call fcn.00654250
add esp, 0xc
mov eax, dword [esp + 0x16c]
mov dword [esp + 0x16c], edi
mov dword [esp + 0x170], esi
mov dword [esp + 0x174], ebx
test eax, eax
je 0x552260
push eax
call fcn.006507ee
add esp, 4
mov dword [esp + 0x170], esi
mov esi, dword [esp + 0x7c]
lea eax, [esi + 1]
cmp eax, 2
jb 0x55236d
push esi
call dword [sym.imp.KERNEL32.dll_GetFileType]
and eax, 0xfffffffd
cmp eax, 1
jne 0x55236d
mov eax, dword [esp + 0x16c]
mov edi, dword [esp + 0x170]
cmp eax, edi
je 0x5522ad
mov ecx, eax
cmp dword [ecx], esi
je 0x55236d
add ecx, 4
cmp ecx, edi
jne 0x55229e
mov ecx, dword [esp + 0x174]
cmp edi, ecx
jb 0x5524c9
sub edi, eax
sar edi, 2
lea edx, [edi + 1]
cmp edx, 0x40000000
jae 0x552650
sub ecx, eax
mov eax, ecx
sar eax, 1
cmp eax, edx
cmovbe eax, edx
cmp ecx, 0x7ffffffc
mov ebx, 0x3fffffff
cmovb ebx, eax
test ebx, ebx
je 0x552692
cmp ebx, 0x40000000
jae 0x55264b
lea eax, [ebx*4]
push eax
call fcn.006507be
add esp, 4
shl edi, 2
add edi, eax
je 0x551abf
lea ebx, [eax + ebx*4]
mov dword [edi], esi
lea esi, [edi + 4]
mov eax, dword [esp + 0x16c]
mov ecx, dword [esp + 0x170]
sub ecx, eax
sub edi, ecx
push ecx
push eax
push edi
call fcn.00654250
add esp, 0xc
mov eax, dword [esp + 0x16c]
mov dword [esp + 0x16c], edi
mov dword [esp + 0x170], esi
mov dword [esp + 0x174], ebx
test eax, eax
je 0x552366
push eax
call fcn.006507ee
add esp, 4
mov dword [esp + 0x170], esi
mov esi, dword [esp + 0x80]
lea eax, [esi + 1]
cmp eax, 2
jb 0x552476
push esi
call dword [sym.imp.KERNEL32.dll_GetFileType]
and eax, 0xfffffffd
cmp eax, 1
jne 0x552476
mov eax, dword [esp + 0x16c]
mov edi, dword [esp + 0x170]
cmp eax, edi
je 0x5523b6
mov ecx, eax
cmp dword [ecx], esi
je 0x552476
add ecx, 4
cmp ecx, edi
jne 0x5523a7
mov ecx, dword [esp + 0x174]
cmp edi, ecx
jb 0x5524dd
sub edi, eax
sar edi, 2
lea edx, [edi + 1]
cmp edx, 0x40000000
jae 0x552650
sub ecx, eax
mov eax, ecx
sar eax, 1
cmp eax, edx
cmovbe eax, edx
cmp ecx, 0x7ffffffc
mov ebx, 0x3fffffff
cmovb ebx, eax
test ebx, ebx
je 0x552699
cmp ebx, 0x40000000
jae 0x55264b
lea eax, [ebx*4]
push eax
call fcn.006507be
add esp, 4
shl edi, 2
add edi, eax
je 0x551abf
lea ebx, [eax + ebx*4]
mov dword [edi], esi
lea esi, [edi + 4]
mov eax, dword [esp + 0x16c]
mov ecx, dword [esp + 0x170]
sub ecx, eax
sub edi, ecx
push ecx
push eax
push edi
call fcn.00654250
add esp, 0xc
mov eax, dword [esp + 0x16c]
mov dword [esp + 0x16c], edi
mov dword [esp + 0x170], esi
mov dword [esp + 0x174], ebx
test eax, eax
je 0x55246f
push eax
call fcn.006507ee
add esp, 4
mov dword [esp + 0x170], esi
mov esi, dword [esp + 0x16c]
mov edi, dword [esp + 0x170]
sub edi, esi
je 0x551abf
mov ecx, dword [0x7bda90]
mov ebx, dword [esp + 0x84]
call dword [0x7a29f4]
xor eax, eax
push eax
push eax
push edi
push esi
push 0x20002
push eax
push ebx
call ecx
test eax, eax
je 0x552502
lea eax, [ebp + 8]
mov esi, dword [eax]
mov edx, 0x80000
lea edi, [esp + 0x30]
lea ebx, [esp + 0x40]
jmp 0x5517d5
test edi, edi
je 0x551abf
mov dword [edi], esi
add edi, 4
mov esi, edi
jmp 0x552366
test edi, edi
je 0x551abf
mov dword [edi], esi
add edi, 4
mov esi, edi
jmp 0x55246f
test edi, edi
je 0x551abf
mov dword [edi], esi
add edi, 4
mov esi, edi
jmp 0x552260
push 2
call fcn.005e3f20
add esp, 4
test al, al
je 0x55254e
call fcn.006a5890
lea ebx, [esp + 0xcc]
mov ecx, ebx
push eax
push 2
push 0x20a
push str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
call fcn.006a5a40
lea eax, [esp + 0xd4]
push 0x19
push 0x78aa9a
push eax
call fcn.005b72e0
add esp, 0xc
mov ecx, ebx
call fcn.006a5aa0
mov edi, dword [esp + 8]
mov esi, edi
jmp 0x5517bc
test edi, edi
je 0x551abf
mov eax, dword [esi + 0x70]
mov dword [edi], eax
add edi, 4
mov ebx, edi
jmp 0x552090
test ebx, ebx
je 0x551abf
mov eax, dword [esp + 0xc]
mov dword [ebx], eax
add ebx, 4
mov esi, ebx
jmp 0x55215a
push eax
call fcn.006507ee
add esp, 4
mov edx, dword [esp + 0x174]
mov esi, dword [esp + 0x170]
jmp 0x551d6c
push 0x7bda94
call fcn.00650831
add esp, 4
cmp dword [0x7bda94], 0xffffffff
jne 0x55173a
cmp dword [0x7bda88], 0
je 0x5525f6
push 0
push str.::UpdateProcThreadAttribute
push 0x74c634
call fcn.005816c0
add esp, 0xc
mov dword [0x7bda90], eax
push 0x7bda94
call fcn.006508ab
add esp, 4
mov esi, dword [esp + 4]
jmp 0x55173a
xor eax, eax
jmp 0x5525db
push 0x7bda8c
call fcn.00650831
add esp, 4
cmp dword [0x7bda8c], 0xffffffff
jne 0x551715
push 0
push str.::InitializeProcThreadAttributeList
push 0x74c634
call fcn.005816c0
add esp, 0xc
mov dword [0x7bda88], eax
push 0x7bda8c
call fcn.006508ab
add esp, 4
jmp 0x551715
lea ecx, [esp + 0x30]
call fcn.006837c0
int3
call fcn.006837b0
lea ecx, [esp + 0x16c]
call fcn.006838c0
lea ecx, [esp + 0xcc]
call fcn.006837d0
xor eax, eax
jmp 0x551dcc
xor eax, eax
jmp 0x551e97
xor eax, eax
jmp 0x551f62
xor eax, eax
jmp 0x552032
xor eax, eax
jmp 0x5520fd
xor eax, eax
jmp 0x552207
xor eax, eax
jmp 0x55230d
xor eax, eax
jmp 0x552416
push edi
push eax
push ebx
mov edi, edx
call fcn.00654250
mov eax, dword [esp + 0x10]
mov edx, edi
add esp, 0xc
jmp 0x551d4f