Function at 0x432caf
Capabilities:
Check mutex and terminate process on windows
Check mutex on windows
Create thread
Terminate process

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x3c
push ebx
push esi
push edi
push str.kdump.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov ebx, dword [sym.imp.KERNEL32.dll_CloseHandle]
xor edi, edi
cmp eax, edi
je 0x432d06
push str.KxEOpenDumpMonitorEx2
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp eax, edi
je 0x432d06
push edi
push edi
push eax
push 0x4327a2
push edi
push edi
call dword [sym.imp.MSVCR80.dll__beginthreadex]
add esp, 0x18
push 0xa
mov esi, eax
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp esi, edi
je 0x432d06
push esi
call ebx
push dword [ebp + 0x10]
lea eax, [esp + 0x10]
push eax
call fcn.00402d09
push str.__type
xor ecx, ecx
lea esi, [esp + 0x10]
call fcn.004060fb
cmp eax, 0xffffffff
je 0x432d53
lea eax, [esp + 0x18]
push eax
mov dword [esp + 0x1c], vtable.KWebkitSubProcess.0
call fcn.00432a60
mov edi, eax
mov eax, dword [esp + 0xc]
add eax, 0xfffffff0
call fcn.004012f9
mov eax, edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
lea eax, [esp + 0xc]
push eax
call fcn.004c77ed
cmp eax, 0x59
pop ecx
mov dword [esp + 0x18], edi
je 0x432d71
cmp eax, 0x74
jle 0x432dbd
cmp eax, 0x7a
jg 0x432dbd
push eax
xor esi, esi
lea eax, [esp + 0x14]
inc esi
push eax
mov dword [esp + 0x20], esi
call fcn.004c787f
pop ecx
pop ecx
push dword [esp + 0x10]
push esi
push edi
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x432dae
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
call fcn.004012f9
jmp 0x432d3c
push esi
call ebx
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
call fcn.004012f9
push dword [esp + 0xc]
lea eax, [esp + 0x20]
push ecx
push eax
call fcn.00401c14
pop ecx
mov ebx, eax
call fcn.00402003
lea esi, [esp + 0x38]
mov ebx, eax
call fcn.00402d6d
mov eax, dword [esp + 0x28]
add eax, 0xfffffff0
call fcn.004012f9
mov eax, dword [esp + 0x24]
add eax, 0xfffffff0
call fcn.004012f9
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
call fcn.004012f9
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
call fcn.004012f9
cmp ebx, edi
je 0x432e3e
cmp dword [0x550bdc], edi
je 0x432d3c
push str.change_run
push ecx
call fcn.004022f5
add esp, 4
call fcn.0040233d
mov esi, eax
call fcn.00402366
jmp 0x432d3c
call fcn.00432f0c
mov edi, eax
call fcn.00433007
call fcn.00450d4d
mov edi, eax
call fcn.00450e15
push dword [ebp + 0x10]
lea eax, [esp + 0x20]
push eax
call fcn.0043283c
call fcn.00428fe8
mov eax, dword [esp + 0x24]
add eax, 0xfffffff0
call fcn.004012f9
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
call fcn.004012f9
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
call fcn.004012f9
xor edi, edi
push edi
call dword [sym.imp.ole32.dll_CoInitialize]
push edi
push edi
push edi
push edi
call dword [sym.imp.USER32.dll_DefWindowProcW]
lea eax, [esp + 0x10]
push eax
mov dword [esp + 0x14], 8
mov dword [esp + 0x18], 0x404
call dword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
call fcn.00435300
push dword [ebp + 0x10]
call fcn.00432c2b
pop ecx
mov ebx, eax
call fcn.00432f0c
call fcn.004330fc
call fcn.00450d4d
mov esi, eax
call fcn.00450f15
call fcn.0043518c
cmp dword [esp + 0x18], edi
je 0x432f04
call dword [sym.imp.ole32.dll_CoUninitialize]
mov eax, dword [esp + 0xc]
add eax, 0xfffffff0
call fcn.004012f9
mov eax, ebx
jmp 0x432d4a
push edi
call dword [sym.imp.KERNEL32.dll_ExitProcess]