Function at 0x4487af
Capabilities:
Create process on windows

Disassembly:
push 0xec
mov eax, 0x4714df
call fcn.00466ebb
mov dword [ebp - 0xa0], edx
mov ebx, ecx
mov eax, dword [ebp + 0x1c]
lea esi, [ebp + 8]
lea edi, [ebp - 0x68]
mov dword [ebp - 0xa4], eax
movsd dword es:[edi], dword [esi]
lea ecx, [ebp - 0x58]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov esi, dword [ebp + 0x18]
call dword [sym.imp.infra.dll_public:_void___thiscall_base::FilePath::constructor_void_]
and dword [ebp - 4], 0
lea eax, [ebp - 0x58]
push eax
push 3
call fcn.00460e80
pop ecx
pop ecx
test al, al
je 0x44896a
push ecx
push ecx
mov ecx, esp
push str.CrashReporter.exe
call fcn.00406144
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x58]
call dword [sym.imp.infra.dll_public:_class_base::FilePath___thiscall_base::FilePath::Append_class_base::BasicStringPiece_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t____]
mov byte [ebp - 4], 1
lea edi, [ebp - 0xb0]
and dword [ebp - 0xb4], 0
xor eax, eax
stosd dword es:[edi], eax
push 0x40
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0xf4]
xor edi, edi
push edi
push eax
call sub.VCRUNTIME140.dll_memset
lea eax, [ebp - 0x68]
mov dword [ebp - 0xf8], 0x44
push eax
lea eax, [ebp - 0x98]
mov dword [ebp - 0xcc], 0x80
push eax
call dword [sym.imp.infra.dll_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char_____cdecl_base::MD5DigestToBase16_struct_base::MD5Digest_const__]
add esp, 0x14
mov edx, eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x80]
call fcn.00413e5a
mov edx, eax
push 8
pop eax
mov byte [ebp - 4], 3
cmp dword [esi + 0x14], eax
jb 0x448886
mov esi, dword [esi]
cmp dword [edx + 0x14], eax
jb 0x44888d
mov edx, dword [edx]
mov ecx, dword [ebp - 0xa0]
cmp dword [ecx + 0x14], eax
jb 0x44889a
mov ecx, dword [ecx]
cmp dword [ebx + 0x14], eax
jb 0x4488a1
mov ebx, dword [ebx]
push dword [ebp - 0xa4]
cmp dword [ebp - 0x2c], 8
lea eax, [ebp - 0x40]
push esi
cmovae eax, dword [ebp - 0x40]
push edx
push ecx
push 0x2af9
push ebx
push eax
lea eax, [ebp - 0x28]
push str._ls__dmpw___ls____d_ls_ls_ls0x_08x_
push eax
call dword [sym.imp.infra.dll_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t_____cdecl_base::StringPrintf_wchar_t_const__]
add esp, 0x24
lea ecx, [ebp - 0x80]
xor ebx, ebx
inc ebx
push edi
push ebx
call fcn.004061ab
push edi
push ebx
lea ecx, [ebp - 0x98]
call fcn.00401c5e
cmp dword [ebp - 0x14], 8
lea ecx, [ebp - 0xb4]
push ecx
lea ecx, [ebp - 0xf8]
push ecx
push edi
push edi
push edi
push ebx
push edi
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push edi
push eax
push edi
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x448957
push 0x2710
push dword [ebp - 0xb4]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
jne 0x448941
lea eax, [ebp - 0x9c]
mov dword [ebp - 0x9c], edi
push eax
push dword [ebp - 0xb4]
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
push dword [ebp - 0xb4]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
push dword [ebp - 0xb0]
call esi
push edi
push ebx
lea ecx, [ebp - 0x28]
call fcn.004061ab
lea ecx, [ebp - 0x40]
call dword [sym.imp.infra.dll_public:_void___thiscall_base::FilePath::destructor_void_]
lea ecx, [ebp - 0x58]
call dword [sym.imp.infra.dll_public:_void___thiscall_base::FilePath::destructor_void_]
call fcn.00466e65
ret