Function at 0x4c04cd
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x1a0
mov eax, dword [0x63a1e8]
mov esi, ecx
xor eax, ebp
mov dword [esp + 0x198], eax
call fcn.00501bdc
test al, al
jne 0x4c1548
lea ecx, [esp + 0x188]
xor eax, eax
mov dword [ecx + 4], eax
mov dword [ecx], eax
mov dword [ecx + 8], eax
mov dword [esp + 0x24], ecx
push ecx
push dword [esi]
call fcn.00501c00
add esp, 8
mov edi, dword [esi]
mov dword [esp + 0xc], esi
mov esi, dword [edi + 0x3c]
mov ebx, dword [edi + 0x40]
cmp esi, ebx
je 0x4c0581
lea edi, [esp + 0xd0]
movzx eax, byte [esi + 0xb]
mov ecx, esi
test al, al
jns 0x4c053f
mov ecx, dword [esi]
mov eax, dword [esi + 4]
push eax
push ecx
push edi
call fcn.0048a430
add esp, 0xc
lea eax, [esp + 0x188]
push eax
push edi
call fcn.00501c00
add esp, 8
cmp byte [esp + 0xdb], 0
jns 0x4c0574
push dword [esp + 0xd0]
call fcn.005909b6
add esp, 4
add esi, 0xc
cmp ebx, esi
jne 0x4c0530
mov eax, dword [esp + 0xc]
mov edi, dword [eax]
movzx eax, byte [edi + 0x17]
test al, al
jns 0x4c058c
mov eax, dword [edi + 0x10]
test eax, eax
je 0x4c05f6
lea esi, [esp + 0x50]
add edi, 0xc
mov ecx, esi
push str.database
call fcn.0040450e
lea ebx, [esp + 0xd0]
mov edx, esi
mov ecx, ebx
push edi
call fcn.004c19b4
add esp, 4
lea eax, [esp + 0x188]
push eax
push ebx
call fcn.00501c00
add esp, 8
cmp byte [ebx + 0xb], 0
jns 0x4c05dd
push dword [esp + 0xd0]
call fcn.005909b6
add esp, 4
cmp byte [esp + 0x5b], 0
mov esi, dword [esp + 0xc]
jns 0x4c05f4
push dword [esp + 0x50]
call fcn.005909b6
add esp, 4
mov edi, dword [esi]
movzx eax, byte [edi + 0x23]
test al, al
jns 0x4c0601
mov eax, dword [edi + 0x1c]
test eax, eax
je 0x4c066b
lea esi, [esp + 0x50]
add edi, 0x18
mov ecx, esi
push str.metrics_dir
call fcn.0040450e
lea ebx, [esp + 0xd0]
mov edx, esi
mov ecx, ebx
push edi
call fcn.004c19b4
add esp, 4
lea eax, [esp + 0x188]
push eax
push ebx
call fcn.00501c00
add esp, 8
cmp byte [ebx + 0xb], 0
jns 0x4c0652
push dword [esp + 0xd0]
call fcn.005909b6
add esp, 4
cmp byte [esp + 0x5b], 0
mov esi, dword [esp + 0xc]
jns 0x4c0669
push dword [esp + 0x50]
call fcn.005909b6
add esp, 4
mov edi, dword [esi]
movzx eax, byte [edi + 0x2f]
test al, al
js 0x4c0677
mov ecx, eax
jmp 0x4c067a
mov ecx, dword [edi + 0x28]
test ecx, ecx
je 0x4c071f
test al, al
jns 0x4c068e
mov eax, dword [edi + 0x28]
mov edi, dword [edi + 0x24]
jmp 0x4c0691
add edi, 0x24
lea ebx, [esp + 0x50]
push eax
push edi
push ebx
call fcn.0048a430
add esp, 0xc
lea esi, [esp + 0xa0]
mov ecx, esi
push 0x5cd8b4
call fcn.0040450e
lea edi, [esp + 0xd0]
mov edx, esi
mov ecx, edi
push ebx
call fcn.004c19b4
add esp, 4
lea eax, [esp + 0x188]
push eax
push edi
call fcn.00501c00
add esp, 8
cmp byte [edi + 0xb], 0
jns 0x4c06ed
push dword [esp + 0xd0]
call fcn.005909b6
add esp, 4
cmp byte [esp + 0xab], 0
mov esi, dword [esp + 0xc]
jns 0x4c070a
push dword [esp + 0xa0]
call fcn.005909b6
add esp, 4
cmp byte [esp + 0x5b], 0
jns 0x4c071d
push dword [esp + 0x50]
call fcn.005909b6
add esp, 4
mov edi, dword [esi]
mov esi, dword [edi + 0x30]
add edi, 0x34
mov dword [esp + 0x1c], edi
cmp edi, esi
je 0x4c0896
lea eax, [esi + 0x10]
push 0x3d
push eax
lea eax, [esp + 0x3c]
push eax
call fcn.0042b010
add esp, 0xc
movzx eax, byte [esi + 0x27]
test al, al
jns 0x4c0754
mov eax, dword [esi + 0x20]
mov edx, dword [esi + 0x1c]
jmp 0x4c0757
lea edx, [esi + 0x1c]
lea ecx, [esp + 0x34]
push eax
push edx
call fcn.00477ff2
mov ecx, dword [eax + 8]
mov dword [esp + 0xa8], ecx
mov ecx, 0
movsd xmm0, qword [eax]
movsd qword [esp + 0xa0], xmm0
mov dword [eax], ecx
mov dword [eax + 4], ecx
mov dword [eax + 8], ecx
lea ecx, [esp + 0xa0]
movzx eax, byte [esp + 0xab]
test al, al
jns 0x4c07a7
mov ecx, dword [esp + 0xa0]
mov eax, dword [esp + 0xa4]
push eax
push ecx
lea eax, [esp + 0x58]
push eax
call fcn.0048a430
add esp, 0xc
lea edi, [esp + 0x17c]
mov ecx, edi
push str.annotation
call fcn.0040450e
lea ebx, [esp + 0xd0]
lea eax, [esp + 0x50]
mov edx, edi
mov ecx, ebx
push eax
call fcn.004c19b4
add esp, 4
lea eax, [esp + 0x188]
push eax
push ebx
call fcn.00501c00
add esp, 8
cmp byte [esp + 0xdb], 0
jns 0x4c080b
push dword [esp + 0xd0]
call fcn.005909b6
add esp, 4
cmp byte [esp + 0x187], 0
jns 0x4c0824
push dword [esp + 0x17c]
call fcn.005909b6
add esp, 4
cmp byte [esp + 0x5b], 0
jns 0x4c0837
push dword [esp + 0x50]
call fcn.005909b6
add esp, 4
cmp byte [esp + 0xab], 0
jns 0x4c0850
push dword [esp + 0xa0]
call fcn.005909b6
add esp, 4
cmp byte [esp + 0x3f], 0
jns 0x4c0863
push dword [esp + 0x34]
call fcn.005909b6
add esp, 4
mov ecx, dword [esi + 4]
test ecx, ecx
je 0x4c0874
mov eax, ecx
mov ecx, dword [ecx]
test ecx, ecx
jne 0x4c086a
jmp 0x4c088a
mov eax, dword [esi + 8]
cmp dword [eax], esi
je 0x4c088a
add esi, 8
mov ecx, dword [esi]
mov eax, dword [ecx + 8]
lea esi, [ecx + 8]
cmp dword [eax], ecx
jne 0x4c087e
cmp dword [esp + 0x1c], eax
mov esi, eax
jne 0x4c0731
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 1
push 0x1f0fff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
test eax, eax
je 0x4c095a
mov edx, eax
mov eax, dword [esp + 0xc]
lea esi, [esp + 0xa0]
xor edi, edi
mov ecx, esi
mov eax, dword [eax]
push edi
push 0x63d21c
push edi
push 0x63d210
push edi
push 0x63d200
mov dword [esp + 0x34], edx
push edx
push dword [eax + 0x58]
push dword [0x63a1ac]
push dword [0x63a1a8]
push dword [0x63a1a4]
call fcn.00501d5e
lea ebx, [esp + 0x34]
mov ecx, esi
push ebx
call fcn.00502058
lea esi, [esp + 0x17c]
mov ecx, esi
push str.__initial_client_data
call fcn.0040450e
movzx eax, byte [ebx + 0xb]
test al, al
jns 0x4c0925
mov eax, dword [esp + 0x38]
mov ebx, dword [esp + 0x34]
mov ecx, esi
push eax
push ebx
call fcn.00477ff2
mov ecx, dword [eax + 8]
mov dword [esp + 0x58], ecx
movsd xmm0, qword [eax]
movsd qword [esp + 0x50], xmm0
mov dword [eax], edi
mov dword [eax + 4], edi
mov dword [eax + 8], edi
movzx eax, byte [esp + 0x5b]
test al, al
jns 0x4c09b7
mov ecx, dword [esp + 0x50]
mov eax, dword [esp + 0x54]
jmp 0x4c09bb
xor ebx, ebx
push 2
call fcn.004824f0
add esp, 4
mov edi, dword [esp + 0xc]
test al, al
je 0x4c0ee6
call fcn.00482ea0
lea esi, [esp + 0xd0]
mov ecx, esi
push eax
push 2
push 0x185
push str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
call fcn.00482fd0
lea eax, [esp + 0xd8]
push 0xb
push 0x5cd8c3
push eax
call fcn.00401baa
add esp, 0xc
mov ecx, esi
call fcn.00483090
xor ebx, ebx
jmp 0x4c0ee6
lea ecx, [esp + 0x50]
lea ebx, [esp + 0xd0]
push eax
push ecx
push ebx
call fcn.0048a430
add esp, 0xc
lea eax, [esp + 0x188]
push eax
push ebx
call fcn.00501c00
add esp, 8
cmp byte [ebx + 0xb], 0
jns 0x4c09f3
push dword [esp + 0xd0]
call fcn.005909b6
add esp, 4
cmp byte [esp + 0x5b], 0
jns 0x4c0a06
push dword [esp + 0x50]
call fcn.005909b6
add esp, 4
cmp byte [esp + 0x187], 0
jns 0x4c0a1f
push dword [esp + 0x17c]
call fcn.005909b6
add esp, 4
cmp byte [esp + 0x3f], 0
jns 0x4c0a32
push dword [esp + 0x34]
call fcn.005909b6
add esp, 4
mov edi, dword [sym.imp.KERNEL32.dll_GetStdHandle]
xorps xmm0, xmm0
xor esi, esi
movaps xmmword [esp + 0x70], xmm0
mov dword [esp + 0x94], esi
mov dword [esp + 0x90], esi
movaps xmmword [esp + 0x80], xmm0
movaps xmmword [esp + 0x60], xmm0
movaps xmmword [esp + 0x50], xmm0
mov dword [esp + 0x7c], 0x100
push 0xfffffffffffffff6
call edi
mov dword [esp + 0x88], eax
push 0xfffffffffffffff5
call edi
mov dword [esp + 0x8c], eax
push 0xfffffffffffffff4
call edi
mov dword [esp + 0x17c], esi
mov dword [esp + 0x180], esi
mov dword [esp + 0x44], 0x5cda28
mov dword [esp + 0x48], esi
mov dword [esp + 0x90], eax
mov dword [esp + 0x184], esi
mov byte [esp + 0x4c], 0
mov ecx, dword [0x63e310]
mov edx, dword fs:[0x2c]
mov eax, dword [0x63d240]
mov ecx, dword [edx + ecx*4]
cmp eax, dword [ecx + 0x18]
jg 0x4c14ad
mov ecx, dword [0x63e310]
mov edx, dword fs:[0x2c]
mov eax, dword [0x63d248]
mov edi, dword [esp + 0xc]
mov ecx, dword [edx + ecx*4]
cmp eax, dword [ecx + 0x18]
jg 0x4c14f2
mov ecx, dword [0x63d23c]
test ecx, ecx
je 0x4c0b76
cmp dword [0x63d244], 0
je 0x4c0b76
lea esi, [esp + 0x34]
mov dword [esp + 0x50], 0x48
xor eax, eax
push esi
push eax
push 1
push eax
call ecx
test eax, eax
je 0x4c0bad
push 2
call fcn.004824f0
add esp, 4
test al, al
je 0x4c0e92
lea esi, [esp + 0xd0]
mov ecx, esi
push 2
push 0x1b6
push str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
call fcn.00482590
lea eax, [esp + 0xd8]
push 0x44
push str.InitializeProcThreadAttributeList__size__succeeded__expected_failure
push eax
call fcn.00401baa
add esp, 0xc
mov ecx, esi
call fcn.00482940
jmp 0x4c0e92
mov dword [esp + 0x50], 0x44
mov dword [esp + 0x20], 0
xor esi, esi
mov eax, dword [edi]
movzx edx, byte [eax + 0xb]
test dl, dl
js 0x4c0b9c
cmp dl, 0xc
jb 0x4c0ba6
jmp 0x4c0c37
cmp dword [eax + 4], 0xc
jae 0x4c0c34
xor ebx, ebx
jmp 0x4c0c8a
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x4c0e46
push dword [esp + 0x34]
call fcn.005909e3
add esp, 4
mov dword [esp + 0x94], eax
push esi
mov esi, eax
push 0
push 1
push eax
call dword [0x63d23c]
test eax, eax
je 0x4c0f2c
mov dword [esp + 0x20], esi
lea esi, [esp + 0x44]
mov ecx, esi
call fcn.004c1c74
mov eax, dword [esp + 0x94]
mov dword [esi + 4], eax
lea esi, [esp + 0x17c]
mov ecx, esi
push 8
call fcn.0042af58
mov edi, dword [esi + 4]
mov eax, dword [esi + 8]
cmp edi, eax
je 0x4c0f85
mov eax, dword [0x63a1a4]
mov dword [edi], eax
add edi, 4
mov dword [esp + 0x180], edi
mov esi, edi
jmp 0x4c104a
mov edx, dword [eax + 4]
lea edi, [eax + 0xc]
add edx, 0xfffffff4
mov ecx, ebx
push edi
push 0xffffffffffffffff
push edx
push eax
call fcn.00478738
cmp byte [esp + 0xdb], 0
jns 0x4c0c5a
mov ebx, dword [esp + 0xd0]
push str.rundll32.exe
push ebx
call fcn.005a6c81
add esp, 8
test eax, eax
sete bl
cmp byte [esp + 0xdb], 0
jns 0x4c0c86
push dword [esp + 0xd0]
call fcn.005909b6
add esp, 4
mov edi, dword [esp + 0xc]
cmp byte [esp + 0x193], 0
jns 0x4c0c9f
mov eax, dword [esp + 0x188]
mov dword [esp + 0x24], eax
xor eax, eax
test bl, bl
mov ecx, 0
jne 0x4c0cb4
mov ecx, dword [edi]
cmp byte [ecx + 0xb], 0
jns 0x4c0cb4
mov ecx, dword [ecx]
lea edx, [esp + 0x34]
lea edi, [esp + 0x50]
push edx
push edi
push eax
push eax
push esi
push 1
push eax
push eax
push dword [esp + 0x44]
push ecx
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x4c0dec
push dword [esp + 0x38]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, eax
push 1
call fcn.004824f0
add esp, 4
test esi, esi
jne 0x4c0d34
test al, al
je 0x4c0d34
call fcn.00482ea0
lea esi, [esp + 0xd0]
mov ecx, esi
push eax
push 1
push 0x206
push str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
call fcn.00482fd0
lea eax, [esp + 0xd8]
push 0x12
push str.CloseHandle_thread
push eax
call fcn.00401baa
add esp, 0xc
mov ecx, esi
call fcn.00483090
push dword [esp + 0x34]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, eax
push 1
call fcn.004824f0
add esp, 4
mov edi, dword [esp + 0xc]
test esi, esi
jne 0x4c0d94
test al, al
je 0x4c0d94
call fcn.00482ea0
lea esi, [esp + 0xd0]
mov ecx, esi
push eax
push 1
push 0x209
push str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
call fcn.00482fd0
lea eax, [esp + 0xd8]
push 0x13
push str.CloseHandle_process
push eax
call fcn.00401baa
add esp, 0xc
mov ecx, esi
call fcn.00483090
mov ecx, dword [edi]
lea esi, [esp + 0xd0]
mov dword [esi], 0xffffffff
add ecx, 0x54
push esi
call fcn.004c1830
xor eax, eax
lea ecx, [esp + 0x28]
mov dword [esi + 8], eax
mov dword [esi + 4], eax
mov dword [esi + 0x10], eax
mov dword [esi + 0xc], eax
mov dword [esi + 0x18], eax
mov dword [esi + 0x14], eax
mov dword [esi + 0x20], eax
mov dword [esi + 0x1c], eax
mov dword [esi], 2
mov dword [ecx + 4], eax
mov dword [ecx], eax
mov dword [ecx + 8], eax
mov eax, dword [edi]
add eax, 0x48
push ecx
push esi
push eax
call fcn.005015c0
add esp, 0xc
mov ebx, eax
jmp 0x4c0e40
xor ebx, ebx
push 2
call fcn.004824f0
add esp, 4
mov edi, dword [esp + 0xc]
test al, al
je 0x4c0e40
call fcn.00482ea0
lea esi, [esp + 0xd0]
mov ecx, esi
push eax
push 2
push 0x201
push str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
call fcn.00482fd0
lea eax, [esp + 0xd8]
push 0xd
push str.CreateProcess
push eax
call fcn.00401baa
add esp, 0xc
mov ecx, esi
call fcn.00483090
xor ebx, ebx
mov esi, dword [esp + 0x20]
jmp 0x4c0e96
push 2
call fcn.004824f0
add esp, 4
test al, al
je 0x4c0e92
call fcn.00482ea0
lea esi, [esp + 0xd0]
mov ecx, esi
push eax
push 2
push 0x1ba
push str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
call fcn.00482fd0
lea eax, [esp + 0xd8]
push 0x28
push str.InitializeProcThreadAttributeList__size_
push eax
call fcn.00401baa
add esp, 0xc
mov ecx, esi
call fcn.00483090
xor esi, esi
xor ebx, ebx
mov dword [esp + 0x44], 0x5cda28
cmp byte [esp + 0x4c], 0
jne 0x4c154b
lea ecx, [esp + 0x44]
call fcn.004c1c74
test esi, esi
je 0x4c0ebf
push esi
call fcn.005909ec
add esp, 4
mov eax, dword [esp + 0x17c]
test eax, eax
je 0x4c0eda
mov dword [esp + 0x180], eax
push eax
call fcn.005909b6
add esp, 4
push dword [esp + 0x1c]
call fcn.00500dd2
add esp, 4
cmp byte [esp + 0x193], 0
jns 0x4c0eff
push dword [esp + 0x188]
call fcn.005909b6
add esp, 4
xor eax, eax
mov ecx, edi
inc eax
cmp bl, 1
adc eax, 0
mov dword [0x63d238], eax
call fcn.004c1944
mov ecx, dword [esp + 0x198]
xor ecx, ebp
call fcn.005909f1
mov eax, ebx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
push 2
call fcn.004824f0
add esp, 4
test al, al
je 0x4c0e94
call fcn.00482ea0
mov ebx, esi
lea esi, [esp + 0xd0]
mov ecx, esi
push eax
push 2
push 0x1c5
push str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
call fcn.00482fd0
lea eax, [esp + 0xd8]
push 0x21
push 0x5cd994
push eax
call fcn.00401baa
add esp, 0xc
mov ecx, esi
mov esi, ebx
call fcn.00483090
jmp 0x4c0e94
mov edx, dword [esp + 0x17c]
sub edi, edx
mov ecx, edi
sar ecx, 2
mov esi, ecx
mov dword [esp + 0x14], ecx
inc ecx
cmp ecx, 0x40000000
jae 0x4c154e
sub eax, edx
mov dword [esp + 8], edx
mov esi, 0x3fffffff
mov edx, eax
sar eax, 1
sar edx, 2
cmp eax, ecx
cmovb eax, ecx
cmp edx, 0x1fffffff
cmovb esi, eax
test esi, esi
je 0x4c0fe8
cmp esi, 0x40000000
jae 0x4c155a
lea eax, [esi*4]
push eax
call fcn.00590936
add esp, 4
jmp 0x4c0fea
xor eax, eax
lea ecx, [eax + esi*4]
mov edx, dword [0x63a1a4]
test edi, edi
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x14]
lea esi, [eax + ecx*4 + 4]
mov ecx, dword [esp + 8]
mov dword [esi - 4], edx
jle 0x4c101d
push edi
push ecx
push eax
mov edi, eax
call fcn.00594260
mov ecx, dword [esp + 0x14]
mov eax, edi
add esp, 0xc
mov edx, dword [esp + 0x10]
test ecx, ecx
mov dword [esp + 0x17c], eax
mov dword [esp + 0x180], esi
mov dword [esp + 0x184], edx
je 0x4c104a
push ecx
call fcn.005909b6
add esp, 4
mov esi, dword [esp + 0x180]
mov edi, dword [esp + 0x184]
cmp esi, edi
je 0x4c106b
mov eax, dword [0x63a1a8]
mov dword [esi], eax
add esi, 4
mov dword [esp + 0x180], esi
jmp 0x4c113f
mov edx, dword [esp + 0x17c]
sub edi, edx
mov esi, edi
sar esi, 2
lea eax, [esi + 1]
cmp eax, 0x40000000
jae 0x4c154e
mov ecx, edi
mov dword [esp + 0x14], esi
sar ecx, 1
cmp ecx, eax
cmovb ecx, eax
mov eax, esi
cmp esi, 0x1fffffff
mov esi, 0x3fffffff
cmovb esi, ecx
test esi, esi
je 0x4c10ce
cmp esi, 0x40000000
mov dword [esp + 8], edx
jae 0x4c155a
lea eax, [esi*4]
push eax
call fcn.00590936
add esp, 4
mov edx, dword [esp + 8]
jmp 0x4c10d0
xor eax, eax
mov dword [esp + 8], eax
lea eax, [eax + esi*4]
mov ecx, dword [esp + 0x14]
test edi, edi
mov dword [esp + 0x10], eax
mov eax, dword [0x63a1a8]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 8]
lea esi, [eax + ecx*4 + 4]
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x18]
mov dword [esi - 4], ecx
jle 0x4c1112
push edi
push edx
push eax
mov edi, edx
call fcn.00594260
mov eax, dword [esp + 0x14]
mov edx, edi
add esp, 0xc
mov ecx, dword [esp + 0x10]
test edx, edx
mov dword [esp + 0x17c], eax
mov dword [esp + 0x180], esi
mov dword [esp + 0x184], ecx
je 0x4c113f
push edx
call fcn.005909b6
add esp, 4
mov esi, dword [esp + 0x180]
mov edi, dword [esp + 0x184]
cmp esi, edi
je 0x4c1160
mov eax, dword [0x63a1ac]
mov dword [esi], eax
add esi, 4
mov dword [esp + 0x180], esi
jmp 0x4c1234
mov edx, dword [esp + 0x17c]
sub edi, edx
mov esi, edi
sar esi, 2
lea eax, [esi + 1]
cmp eax, 0x40000000
jae 0x4c154e
mov ecx, edi
mov dword [esp + 0x14], esi
sar ecx, 1
cmp ecx, eax
cmovb ecx, eax
mov eax, esi
cmp esi, 0x1fffffff
mov esi, 0x3fffffff
cmovb esi, ecx
test esi, esi
je 0x4c11c3
cmp esi, 0x40000000
mov dword [esp + 8], edx
jae 0x4c155a
lea eax, [esi*4]
push eax
call fcn.00590936
add esp, 4
mov edx, dword [esp + 8]
jmp 0x4c11c5
xor eax, eax
mov dword [esp + 8], eax
lea eax, [eax + esi*4]
mov ecx, dword [esp + 0x14]
test edi, edi
mov dword [esp + 0x10], eax
mov eax, dword [0x63a1ac]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 8]
lea esi, [eax + ecx*4 + 4]
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x18]
mov dword [esi - 4], ecx
jle 0x4c1207
push edi
push edx
push eax
mov edi, edx
call fcn.00594260
mov eax, dword [esp + 0x14]
mov edx, edi
add esp, 0xc
mov ecx, dword [esp + 0x10]
test edx, edx
mov dword [esp + 0x17c], eax
mov dword [esp + 0x180], esi
mov dword [esp + 0x184], ecx
je 0x4c1234
push edx
call fcn.005909b6
add esp, 4
mov esi, dword [esp + 0x180]
mov eax, dword [esp + 0xc]
mov edi, dword [esp + 0x184]
mov eax, dword [eax]
cmp esi, edi
je 0x4c1259
mov eax, dword [eax + 0x58]
mov dword [esi], eax
add esi, 4
mov dword [esp + 0x180], esi
jmp 0x4c132b
mov edx, dword [esp + 0x17c]
mov dword [esp + 0x14], eax
sub edi, edx
mov esi, edi
sar esi, 2
lea eax, [esi + 1]
cmp eax, 0x40000000
jae 0x4c154e
mov ecx, edi
mov dword [esp + 0x10], esi
sar ecx, 1
cmp ecx, eax
cmovb ecx, eax
mov eax, esi
cmp esi, 0x1fffffff
mov esi, 0x3fffffff
cmovb esi, ecx
test esi, esi
je 0x4c12c0
cmp esi, 0x40000000
mov dword [esp + 8], edx
jae 0x4c155a
lea eax, [esi*4]
push eax
call fcn.00590936
add esp, 4
mov edx, dword [esp + 8]
jmp 0x4c12c2
xor eax, eax
mov dword [esp + 8], eax
lea eax, [eax + esi*4]
mov ecx, dword [esp + 0x10]
test edi, edi
mov esi, dword [esp + 8]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x14]
lea esi, [esi + ecx*4 + 4]
mov eax, dword [eax + 0x58]
mov ecx, dword [esp + 8]
mov dword [esi - 4], eax
jle 0x4c12fe
push edi
push edx
push ecx
mov edi, edx
call fcn.00594260
mov ecx, dword [esp + 0x14]
mov edx, edi
add esp, 0xc
mov eax, dword [esp + 0x18]
test edx, edx
mov dword [esp + 0x17c], ecx
mov dword [esp + 0x180], esi
mov dword [esp + 0x184], eax
je 0x4c132b
push edx
call fcn.005909b6
add esp, 4
mov esi, dword [esp + 0x180]
mov edi, dword [esp + 0x184]
cmp esi, edi
je 0x4c134b
mov eax, dword [esp + 0x1c]
mov dword [esi], eax
add esi, 4
mov dword [esp + 0x180], esi
jmp 0x4c1405
mov edx, dword [esp + 0x17c]
sub edi, edx
mov esi, edi
sar esi, 2
lea eax, [esi + 1]
cmp eax, 0x40000000
jae 0x4c154e
mov ecx, edi
mov dword [esp + 0x14], esi
mov dword [esp + 8], edx
sar ecx, 1
cmp ecx, eax
cmovb ecx, eax
mov eax, esi
cmp esi, 0x1fffffff
mov esi, 0x3fffffff
cmovb esi, ecx
test esi, esi
je 0x4c13b0
cmp esi, 0x40000000
jae 0x4c155a
lea eax, [esi*4]
push eax
call fcn.00590936
add esp, 4
mov edx, dword [esp + 8]
mov ecx, eax
jmp 0x4c13b2
xor ecx, ecx
lea eax, [ecx + esi*4]
test edi, edi
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x14]
lea esi, [ecx + eax*4 + 4]
mov eax, dword [esp + 0x1c]
mov dword [esi - 4], eax
jle 0x4c13df
push edi
push edx
push ecx
mov edi, ecx
call fcn.00594260
mov edx, dword [esp + 0x14]
mov ecx, edi
add esp, 0xc
mov eax, dword [esp + 0x10]
test edx, edx
mov dword [esp + 0x17c], ecx
mov dword [esp + 0x180], esi
mov dword [esp + 0x184], eax
je 0x4c1405
push edx
call fcn.005909b6
add esp, 4
mov edx, dword [esp + 0x88]
lea esi, [esp + 0x17c]
mov ecx, esi
call fcn.004c1af8
mov edx, dword [esp + 0x8c]
mov ecx, esi
call fcn.004c1af8
mov edx, dword [esp + 0x90]
mov ecx, esi
call fcn.004c1af8
mov eax, dword [esi]
mov ecx, dword [esi + 4]
xor edx, edx
sub ecx, eax
push edx
push edx
push ecx
push eax
push 0x20002
push edx
push dword [esp + 0xac]
call dword [0x63d244]
mov edi, dword [esp + 0xc]
test eax, eax
je 0x4c1468
mov esi, 0x80000
jmp 0x4c0b88
push 2
call fcn.004824f0
add esp, 4
test al, al
je 0x4c0e3e
call fcn.00482ea0
lea esi, [esp + 0xd0]
mov ecx, esi
push eax
push 2
push 0x1df
push str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
call fcn.00482fd0
lea eax, [esp + 0xd8]
push 0x19
push 0x5cd9b6
jmp 0x4c0e2e
push 0x63d240
call fcn.00590a37
add esp, 4
cmp dword [0x63d240], 0xffffffff
jne 0x4c0ad2
push 0
push str.::InitializeProcThreadAttributeList
push 0x5bfe20
call fcn.00502100
add esp, 0xc
mov dword [0x63d23c], eax
push 0x63d240
call fcn.00590aad
add esp, 4
jmp 0x4c0ad2
push 0x63d248
call fcn.00590a37
add esp, 4
cmp dword [0x63d248], 0xffffffff
jne 0x4c0af7
cmp dword [0x63d23c], 0
je 0x4c152b
push 0
push str.::UpdateProcThreadAttribute
push 0x5bfe20
call fcn.00502100
add esp, 0xc
jmp 0x4c152d
xor eax, eax
mov dword [0x63d244], eax
push 0x63d248
call fcn.00590aad
add esp, 4
mov edi, dword [esp + 0xc]
jmp 0x4c0af7
int3
int3
lea ecx, [esp + 0x17c]
call fcn.00479c7c
call fcn.005a471a
int3