Function at 0x42d0e0
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x21c
mov eax, dword [0x45702c]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
xor ebx, ebx
push edi
mov dword [ebp - 0xa4], ebx
call fcn.00410660
test al, al
je 0x42d14a
push 4
push 0x168
push str..._src_client_crashpad_client_win.cc
push str.bool___cdecl_crashpad::_anonymous_namespace::StartHandlerProcess_class_std::unique_ptr_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData_struct_std::default_delete_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData____
lea ecx, [ebp - 0x1e4]
call fcn.00408ea0
push 0x445510
push str.Check_failed:__IsThreadInLoaderLock__
push eax
call fcn.004011c0
add esp, 8
push eax
call fcn.004011c0
mov ebx, 1
add esp, 8
mov dword [ebp - 0xa4], ebx
test bl, 1
je 0x42d163
and ebx, 0xfffffffe
lea ecx, [ebp - 0x1e4]
mov dword [ebp - 0xa4], ebx
call fcn.00409090
xorps xmm0, xmm0
mov byte [ebp - 0xc0], 0
xor eax, eax
mov dword [ebp - 0x6c], 0
movups xmmword [ebp - 0x7c], xmm0
mov word [ebp - 0x7c], ax
lea eax, [ebp - 0x7c]
push eax
push dword [ebp + 8]
mov dword [ebp - 0x68], 7
call fcn.0040e3d0
mov eax, dword [ebp + 8]
add esp, 8
mov esi, dword [eax + 0x68]
mov edi, dword [eax + 0x6c]
cmp esi, edi
je 0x42d212
lea eax, [ebp - 0x7c]
push eax
sub esp, 8
mov eax, esi
cmp dword [esi + 0x14], 0x10
mov ecx, esp
jb 0x42d1b4
mov eax, dword [esi]
mov dword [ecx], eax
mov eax, dword [esi + 0x10]
mov dword [ecx + 4], eax
lea eax, [ebp - 0x64]
push eax
call fcn.00409cf0
add esp, 0xc
push eax
call fcn.0040e3d0
mov ecx, dword [ebp - 0x50]
add esp, 8
cmp ecx, 8
jb 0x42d20b
mov edx, dword [ebp - 0x64]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x42d201
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42d2d7
push ecx
push edx
call fcn.0043bf97
add esp, 8
add esi, 0x18
cmp esi, edi
jne 0x42d1a1
mov eax, dword [ebp + 8]
add eax, 0x18
cmp dword [eax + 0x10], 0
je 0x42d2e7
lea ecx, [ebp - 0x7c]
mov dword [ebp - 0xc], 8
push ecx
push eax
lea eax, [ebp - 0x1c]
mov dword [ebp - 8], 0xf
push eax
xorps xmm0, xmm0
lea eax, [ebp - 0x4c]
movups xmmword [ebp - 0x1c], xmm0
push eax
mov dword [ebp - 0x1c], 0x61746164
mov dword [ebp - 0x18], 0x65736162
mov byte [ebp - 0x14], 0
call fcn.0042cb60
add esp, 0xc
push eax
call fcn.0040e3d0
mov ecx, dword [ebp - 0x38]
add esp, 8
cmp ecx, 8
jb 0x42d29d
mov edx, dword [ebp - 0x4c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x42d293
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42d2d7
push ecx
push edx
call fcn.0043bf97
add esp, 8
mov ecx, dword [ebp - 8]
xor eax, eax
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], 7
mov word [ebp - 0x4c], ax
cmp ecx, 0x10
jb 0x42d2e7
mov edx, dword [ebp - 0x1c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x42d2dd
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x42d2dd
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0043bf97
add esp, 8
mov ecx, dword [ebp + 8]
add ecx, 0x30
cmp dword [ecx + 0x10], 0
je 0x42d3cd
mov ax, word [0x4443d4]
movq xmm0, qword [str.metrics_dir]
mov word [ebp - 0x44], ax
mov al, byte [0x4443d6]
mov byte [ebp - 0x42], al
lea eax, [ebp - 0x7c]
push eax
push ecx
lea eax, [ebp - 0x4c]
mov dword [ebp - 0x40], 0
push eax
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x3c], 0xb
push eax
mov dword [ebp - 0x38], 0xf
movq qword [ebp - 0x4c], xmm0
mov byte [ebp - 0x41], 0
call fcn.0042cb60
add esp, 0xc
push eax
call fcn.0040e3d0
mov ecx, dword [ebp - 8]
add esp, 8
cmp ecx, 8
jb 0x42d383
mov edx, dword [ebp - 0x1c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x42d379
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42d3bd
push ecx
push edx
call fcn.0043bf97
add esp, 8
mov ecx, dword [ebp - 0x38]
xor eax, eax
mov dword [ebp - 0xc], 0
mov dword [ebp - 8], 7
mov word [ebp - 0x1c], ax
cmp ecx, 0x10
jb 0x42d3cd
mov edx, dword [ebp - 0x4c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x42d3c3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x42d3c3
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0043bf97
add esp, 8
mov eax, dword [ebp + 8]
add eax, 0x48
cmp dword [eax + 0x10], 0
lea ecx, [eax + 0x10]
je 0x42d517
sub esp, 8
cmp dword [eax + 0x14], 0x10
mov edx, esp
jb 0x42d3ed
mov eax, dword [eax]
mov dword [edx], eax
mov eax, dword [ecx]
mov dword [edx + 4], eax
lea eax, [ebp - 0x64]
push eax
call fcn.00409cf0
mov cx, word [0x444474]
xorps xmm0, xmm0
movups xmmword [ebp - 0x34], xmm0
add esp, 0xc
mov word [ebp - 0x34], cx
mov cl, byte [0x444476]
mov byte [ebp - 0x32], cl
lea ecx, [ebp - 0x7c]
mov dword [ebp - 0x24], 3
push ecx
push eax
lea eax, [ebp - 0x34]
mov dword [ebp - 0x20], 0xf
push eax
lea eax, [ebp - 0x1c]
mov byte [ebp - 0x31], 0
push eax
call fcn.0042cb60
add esp, 0xc
push eax
call fcn.0040e3d0
mov ecx, dword [ebp - 8]
add esp, 8
cmp ecx, 8
jb 0x42d485
mov edx, dword [ebp - 0x1c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x42d47b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42d507
push ecx
push edx
call fcn.0043bf97
add esp, 8
mov ecx, dword [ebp - 0x20]
xor eax, eax
mov dword [ebp - 0xc], 0
mov dword [ebp - 8], 7
mov word [ebp - 0x1c], ax
cmp ecx, 0x10
jb 0x42d4c9
mov edx, dword [ebp - 0x34]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x42d4bf
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42d507
push ecx
push edx
call fcn.0043bf97
add esp, 8
mov ecx, dword [ebp - 0x50]
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0xf
mov byte [ebp - 0x34], 0
cmp ecx, 8
jb 0x42d517
mov edx, dword [ebp - 0x64]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x42d50d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x42d50d
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0043bf97
add esp, 8
mov esi, dword [ebp + 8]
mov esi, dword [esi + 0x60]
mov esi, dword [esi]
cmp byte [esi + 0xd], 0
jne 0x42d886
nop dword [eax]
mov edx, dword [esi + 0x20]
lea eax, [esi + 0x10]
mov dword [ebp - 0xb0], eax
lea ecx, [eax + 0x18]
mov dword [ebp - 0xb4], ecx
mov dword [ebp - 0xac], edx
cmp edx, 0x7fffffff
je 0x42e2db
cmp dword [eax + 0x14], 0x10
jb 0x42d565
mov eax, dword [eax]
mov dword [ebp - 0xb0], eax
lea ecx, [edx + 1]
mov dword [ebp - 0xc], 0
mov edi, 0xf
mov dword [ebp - 8], 0
lea ebx, [ebp - 0x1c]
xorps xmm0, xmm0
movups xmmword [ebp - 0x1c], xmm0
cmp ecx, edi
jbe 0x42d5f4
mov edi, ecx
or edi, 0xf
cmp edi, 0x7fffffff
jbe 0x42d5a0
mov edi, 0x7fffffff
lea ecx, [edi + 1]
jmp 0x42d5b6
cmp edi, 0x16
mov ecx, 0x16
cmovb edi, ecx
lea ecx, [edi + 1]
cmp ecx, 0x1000
jb 0x42d5cf
push ecx
call fcn.00401720
mov edx, dword [ebp - 0xac]
mov ebx, eax
mov eax, dword [ebp - 0xb0]
add esp, 4
jmp 0x42d5ee
test ecx, ecx
je 0x42d5ec
push ecx
call fcn.0043bf67
mov edx, dword [ebp - 0xac]
mov ebx, eax
mov eax, dword [ebp - 0xb0]
add esp, 4
jmp 0x42d5ee
xor ebx, ebx
mov dword [ebp - 0x1c], ebx
lea ecx, [edx + 1]
push edx
push eax
push ebx
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], edi
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [ebp - 0xac]
add esp, 0xc
mov word [ebx + eax], 0x3d
mov eax, dword [ebp - 0xb4]
cmp dword [eax + 0x14], 0x10
mov ecx, dword [eax + 0x10]
jb 0x42d622
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0x1c]
call fcn.004067d0
mov dword [ebp - 0x24], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x34], xmm0
mov dword [ebp - 0x20], 0
sub esp, 8
movups xmm0, xmmword [eax]
mov ecx, esp
movups xmmword [ebp - 0x34], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x24], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0x34]
cmp dword [ebp - 0x20], 0x10
cmovae eax, dword [ebp - 0x34]
mov dword [ecx], eax
mov eax, dword [ebp - 0x24]
mov dword [ecx + 4], eax
lea eax, [ebp - 0x64]
push eax
call fcn.00409cf0
mov cx, word [0x444370]
add esp, 0xc
xorps xmm0, xmm0
mov dword [ebp - 0x3c], 0xa
movups xmmword [ebp - 0x4c], xmm0
mov word [ebp - 0x44], cx
lea ecx, [ebp - 0x7c]
movq xmm0, qword [str.annotation]
push ecx
push eax
lea eax, [ebp - 0x4c]
mov dword [ebp - 0x38], 0xf
push eax
lea eax, [ebp - 0x94]
movq qword [ebp - 0x4c], xmm0
push eax
mov byte [ebp - 0x42], 0
call fcn.0042cb60
add esp, 0xc
push eax
call fcn.0040e3d0
mov ecx, dword [ebp - 0x80]
add esp, 8
cmp ecx, 8
jb 0x42d716
mov edx, dword [ebp - 0x94]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x42d70c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42d2d7
push ecx
push edx
call fcn.0043bf97
add esp, 8
mov ecx, dword [ebp - 0x38]
xor eax, eax
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x80], 7
mov word [ebp - 0x94], ax
cmp ecx, 0x10
jb 0x42d764
mov edx, dword [ebp - 0x4c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x42d75a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42d2d7
push ecx
push edx
call fcn.0043bf97
add esp, 8
mov ecx, dword [ebp - 0x50]
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], 0xf
mov byte [ebp - 0x4c], 0
cmp ecx, 8
jb 0x42d7b0
mov edx, dword [ebp - 0x64]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x42d7a6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42d2d7
push ecx
push edx
call fcn.0043bf97
add esp, 8
mov ecx, dword [ebp - 0x20]
xor eax, eax
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 7
mov word [ebp - 0x64], ax
cmp ecx, 0x10
jb 0x42d7f8
mov edx, dword [ebp - 0x34]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x42d7ee
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42d2d7
push ecx
push edx
call fcn.0043bf97
add esp, 8
mov ecx, dword [ebp - 8]
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0xf
mov byte [ebp - 0x34], 0
cmp ecx, 0x10
jb 0x42d83e
mov edx, dword [ebp - 0x1c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x42d834
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42d2d7
push ecx
push edx
call fcn.0043bf97
add esp, 8
mov eax, dword [esi + 8]
cmp byte [eax + 0xd], 0
je 0x42d864
mov eax, dword [esi + 4]
cmp byte [eax + 0xd], 0
jne 0x42d860
cmp esi, dword [eax + 8]
jne 0x42d860
mov esi, eax
mov eax, dword [eax + 4]
cmp byte [eax + 0xd], 0
je 0x42d850
mov esi, eax
jmp 0x42d87c
mov esi, eax
mov ecx, dword [esi]
cmp byte [ecx + 0xd], 0
jne 0x42d87c
nop
mov eax, dword [ecx]
mov esi, ecx
mov ecx, eax
cmp byte [eax + 0xd], 0
je 0x42d870
cmp byte [esi + 0xd], 0
je 0x42d530
mov eax, dword [ebp + 8]
mov esi, dword [eax + 0x74]
mov edi, dword [eax + 0x78]
cmp esi, edi
je 0x42d97b
nop word [eax + eax]
mov ax, word [0x44437c]
xorps xmm0, xmm0
movups xmmword [ebp - 0x1c], xmm0
mov word [ebp - 0x14], ax
lea eax, [ebp - 0x7c]
movq xmm0, qword [0x444374]
push eax
push esi
lea eax, [ebp - 0x1c]
mov dword [ebp - 0xc], 0xa
push eax
lea eax, [ebp - 0x64]
mov dword [ebp - 8], 0xf
push eax
movq qword [ebp - 0x1c], xmm0
mov byte [ebp - 0x12], 0
call fcn.0042cb60
add esp, 0xc
push eax
call fcn.0040e3d0
mov ecx, dword [ebp - 0x50]
add esp, 8
cmp ecx, 8
jb 0x42d928
mov edx, dword [ebp - 0x64]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x42d91e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42d2d7
push ecx
push edx
call fcn.0043bf97
add esp, 8
mov ecx, dword [ebp - 8]
xor eax, eax
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 7
mov word [ebp - 0x64], ax
cmp ecx, 0x10
jb 0x42d970
mov edx, dword [ebp - 0x1c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x42d966
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42d2d7
push ecx
push edx
call fcn.0043bf97
add esp, 8
add esi, 0x18
cmp esi, edi
jne 0x42d8a0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 1
push 0x1f0fff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
mov dword [ebp - 0xbc], esi
test esi, esi
jne 0x42d9db
call sub.KERNEL32.dll_GetLastError
push eax
push 2
push 0x18f
push str..._src_client_crashpad_client_win.cc
push str.bool___cdecl_crashpad::_anonymous_namespace::StartHandlerProcess_class_std::unique_ptr_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData_struct_std::default_delete_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData____
lea ecx, [ebp - 0x1ec]
call fcn.00409060
push 0x44d794
push eax
call fcn.004011c0
add esp, 8
lea ecx, [ebp - 0x1ec]
call fcn.00409240
jmp 0x42e24c
push 0x458ba0
call fcn.00416560
push 0x458b90
mov dword [ebp - 0xb4], eax
mov ebx, edx
call fcn.00416560
push 0x458b80
mov dword [ebp - 0xb8], eax
mov edi, edx
call fcn.00416560
mov ecx, dword [ebp + 8]
add esp, 0xc
push ebx
push dword [ebp - 0xb4]
push edi
push dword [ebp - 0xb8]
push edx
push eax
push esi
push dword [ecx + 0x98]
lea ecx, [ebp - 0x21c]
push dword [0x457020]
push dword [0x45701c]
push dword [0x457018]
call fcn.0040b370
lea eax, [ebp - 0x94]
push eax
lea ecx, [ebp - 0x21c]
call fcn.0040b750
xorps xmm0, xmm0
mov edi, eax
push 0x20
movups xmmword [ebp - 0x4c], xmm0
call fcn.0043bf67
movups xmm0, xmmword [str.__initial_client_data]
add esp, 4
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x3c], 0x16
movups xmmword [eax], xmm0
mov ecx, dword [0x44d7b0]
mov dword [eax + 0x10], ecx
mov cx, word [0x44d7b4]
mov word [eax + 0x14], cx
lea ecx, [ebp - 0x1c]
mov byte [eax + 0x16], 0
lea eax, [ebp - 0x4c]
push edi
push eax
push dword [ebp - 0xb4]
mov dword [ebp - 0x38], 0x1f
call fcn.0042c200
lea eax, [ebp - 0x7c]
push eax
sub esp, 8
lea eax, [ebp - 0x1c]
cmp dword [ebp - 8], 0x10
mov ecx, esp
cmovae eax, dword [ebp - 0x1c]
mov dword [ecx], eax
mov eax, dword [ebp - 0xc]
mov dword [ecx + 4], eax
lea eax, [ebp - 0x64]
push eax
call fcn.00409cf0
add esp, 0xc
push eax
call fcn.0040e3d0
mov ecx, dword [ebp - 0x50]
add esp, 8
cmp ecx, 8
jb 0x42db19
mov edx, dword [ebp - 0x64]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x42db0f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42dbc8
push ecx
push edx
call fcn.0043bf97
add esp, 8
mov ecx, dword [ebp - 8]
xor eax, eax
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 7
mov word [ebp - 0x64], ax
cmp ecx, 0x10
jb 0x42db5d
mov edx, dword [ebp - 0x1c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x42db53
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42dbc8
push ecx
push edx
call fcn.0043bf97
add esp, 8
mov ecx, dword [ebp - 0x38]
mov dword [ebp - 0xc], 0
mov dword [ebp - 8], 0xf
mov byte [ebp - 0x1c], 0
cmp ecx, 0x10
jb 0x42db9f
mov edx, dword [ebp - 0x4c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x42db95
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42dbc8
push ecx
push edx
call fcn.0043bf97
add esp, 8
mov ecx, dword [ebp - 0x80]
cmp ecx, 0x10
jb 0x42dbd8
mov edx, dword [ebp - 0x94]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x42dbce
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x42dbce
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0043bf97
add esp, 8
mov edi, dword [sym.imp.KERNEL32.dll_GetStdHandle]
xorps xmm0, xmm0
push 0xfffffffffffffff6
movlpd qword [ebp - 0x104], xmm0
movlpd qword [ebp - 0xfc], xmm0
movlpd qword [ebp - 0xf4], xmm0
movlpd qword [ebp - 0xec], xmm0
movlpd qword [ebp - 0xe4], xmm0
movlpd qword [ebp - 0xd8], xmm0
mov dword [ebp - 0xc4], 0
mov dword [ebp - 0xdc], 0x100
call edi
push 0xfffffffffffffff5
mov dword [ebp - 0xd0], eax
call edi
push 0xfffffffffffffff4
mov dword [ebp - 0xcc], eax
call edi
xor ecx, ecx
mov dword [ebp - 0xc8], eax
mov eax, dword fs:[0x2c]
xor ebx, ebx
mov dword [ebp - 0xb4], ecx
xor edi, edi
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0xb0], ecx
mov ecx, dword [0x458bfc]
mov eax, dword [eax + ecx*4]
mov dword [ebp - 0xac], eax
mov ecx, eax
mov eax, dword [0x458bc8]
cmp eax, dword [ecx + 4]
jg 0x42e2e0
jmp 0x42dc88
mov ecx, dword [ebp - 0xac]
mov eax, dword [0x458bd0]
cmp eax, dword [ecx + 4]
jg 0x42e322
mov eax, dword [0x458bc4]
test eax, eax
je 0x42df07
cmp dword [0x458bcc], ebx
je 0x42df07
lea ecx, [ebp - 0xac]
mov dword [ebp - 0xb8], 0x80000
push ecx
push 0
push 1
push 0
mov dword [ebp - 0x108], 0x48
call eax
test eax, eax
je 0x42dd1e
push 2
push 0x1c0
push str..._src_client_crashpad_client_win.cc
push str.bool___cdecl_crashpad::_anonymous_namespace::StartHandlerProcess_class_std::unique_ptr_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData_struct_std::default_delete_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData____
lea ecx, [ebp - 0x1e4]
call fcn.00408ea0
push str.InitializeProcThreadAttributeList__size__succeeded__expected_failure
push eax
call fcn.004011c0
add esp, 8
lea ecx, [ebp - 0x1e4]
call fcn.00409090
lea ecx, [ebp - 0xb0]
call fcn.0042cd90
jmp 0x42e219
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
je 0x42dd74
call sub.KERNEL32.dll_GetLastError
push eax
push 2
push 0x1c4
push str..._src_client_crashpad_client_win.cc
push str.bool___cdecl_crashpad::_anonymous_namespace::StartHandlerProcess_class_std::unique_ptr_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData_struct_std::default_delete_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData____
lea ecx, [ebp - 0x1ec]
call fcn.00409060
push str.InitializeProcThreadAttributeList__size_
push eax
call fcn.004011c0
add esp, 8
lea ecx, [ebp - 0x1ec]
call fcn.00409240
lea ecx, [ebp - 0xb0]
call fcn.0042cd90
jmp 0x42e219
push dword [ebp - 0xac]
call fcn.0043c1bb
add esp, 4
mov edi, eax
lea eax, [ebp - 0xac]
mov dword [ebp - 0xc4], edi
push eax
push 0
push 1
push edi
call dword [0x458bc4]
test eax, eax
jne 0x42dde0
call sub.KERNEL32.dll_GetLastError
push eax
push 2
push 0x1cf
push str..._src_client_crashpad_client_win.cc
push str.bool___cdecl_crashpad::_anonymous_namespace::StartHandlerProcess_class_std::unique_ptr_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData_struct_std::default_delete_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData____
lea ecx, [ebp - 0x1ec]
call fcn.00409060
push str.InitializeProcThreadAttributeList
push eax
call fcn.004011c0
add esp, 8
lea ecx, [ebp - 0x1ec]
call fcn.00409240
jmp 0x42e201
mov eax, dword [ebp - 0xc4]
push 0x20
mov dword [ebp - 0xb0], eax
call fcn.0043bf67
mov esi, eax
push esi
push 0
push 0
call fcn.004052d0
add esp, 0x10
mov dword [ebp - 0x28], esi
lea eax, [esi + 0x20]
mov dword [ebp - 0x24], esi
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x20], eax
push 0x457018
call fcn.0041cc50
push 0x45701c
lea ecx, [ebp - 0x28]
call fcn.0041cc50
push 0x457020
lea ecx, [ebp - 0x28]
call fcn.0041cc50
mov eax, dword [ebp + 8]
lea ecx, [ebp - 0x28]
add eax, 0x98
push eax
call fcn.0041cc50
lea eax, [ebp - 0xbc]
push eax
lea ecx, [ebp - 0x28]
call fcn.0041cc50
push dword [ebp - 0xd0]
lea eax, [ebp - 0x28]
push eax
call fcn.0042c740
push dword [ebp - 0xcc]
lea eax, [ebp - 0x28]
push eax
call fcn.0042c740
push dword [ebp - 0xc8]
lea eax, [ebp - 0x28]
push eax
call fcn.0042c740
mov ecx, dword [ebp - 0x28]
add esp, 0x18
mov eax, dword [ebp - 0x24]
sub eax, ecx
mov dword [ebp - 0xb4], ecx
and eax, 0xfffffffc
push 0
push 0
push eax
push ecx
push 0x20002
push 0
push dword [ebp - 0xc4]
call dword [0x458bcc]
test eax, eax
jne 0x42defc
call sub.KERNEL32.dll_GetLastError
push eax
push 2
push 0x1e9
push str..._src_client_crashpad_client_win.cc
push str.bool___cdecl_crashpad::_anonymous_namespace::StartHandlerProcess_class_std::unique_ptr_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData_struct_std::default_delete_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData____
lea ecx, [ebp - 0x1ec]
call fcn.00409060
push str.UpdateProcThreadAttribute
push eax
call fcn.004011c0
add esp, 8
lea ecx, [ebp - 0x1ec]
call fcn.00409240
mov esi, dword [ebp - 0xbc]
mov ebx, dword [ebp - 0x20]
jmp 0x42e201
mov esi, dword [ebp - 0xbc]
mov ebx, dword [ebp - 0x20]
jmp 0x42df17
mov dword [ebp - 0xb8], ebx
mov dword [ebp - 0x108], 0x44
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
mov dword [ebp - 0xbc], ecx
cmp ecx, 0xc
jb 0x42dfaf
lea edx, [ecx - 0xc]
mov dword [ebp - 0xc], 0
mov ecx, dword [ebp - 0xa4]
xorps xmm0, xmm0
or ecx, 0x40
mov dword [ebp - 8], 0
mov dword [ebp - 0xa4], ecx
movups xmmword [ebp - 0x1c], xmm0
mov ecx, dword [eax + 0x10]
cmp ecx, edx
jb 0x42e375
sub ecx, edx
or edx, 0xffffffff
cmp ecx, 0xffffffff
cmovb edx, ecx
cmp dword [eax + 0x14], 8
jb 0x42df71
mov eax, dword [eax]
mov ecx, dword [ebp - 0xbc]
push edx
lea eax, [eax + ecx*2]
add eax, 0xffffffe8
lea ecx, [ebp - 0x1c]
push eax
call fcn.00407870
cmp dword [ebp - 8], 8
lea eax, [ebp - 0x1c]
push str.rundll32.exe
cmovae eax, dword [ebp - 0x1c]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
add esp, 8
mov byte [ebp - 0xa5], 1
test eax, eax
mov eax, dword [ebp + 8]
je 0x42dfb6
mov byte [ebp - 0xa5], 0
mov ecx, dword [ebp - 0xa4]
test cl, 0x40
je 0x42e009
and ecx, 0xffffffbf
mov dword [ebp - 0xa4], ecx
mov ecx, dword [ebp - 8]
cmp ecx, 8
jb 0x42e009
mov edx, dword [ebp - 0x1c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x42dffc
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x42dffc
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0043bf97
mov eax, dword [ebp + 8]
add esp, 8
cmp dword [ebp - 0x68], 8
lea ecx, [ebp - 0x7c]
cmovae ecx, dword [ebp - 0x7c]
cmp byte [ebp - 0xa5], 0
je 0x42e021
xor eax, eax
jmp 0x42e029
cmp dword [eax + 0x14], 8
jb 0x42e029
mov eax, dword [eax]
lea edx, [ebp - 0x118]
push edx
lea edx, [ebp - 0x108]
push edx
push 0
push 0
push dword [ebp - 0xb8]
push 1
push 0
push 0
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x42e07f
call sub.KERNEL32.dll_GetLastError
push eax
push 2
push 0x20b
push str..._src_client_crashpad_client_win.cc
push str.bool___cdecl_crashpad::_anonymous_namespace::StartHandlerProcess_class_std::unique_ptr_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData_struct_std::default_delete_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData____
lea ecx, [ebp - 0x1ec]
call fcn.00409060
push str.CreateProcess
jmp 0x42ddc7
push dword [ebp - 0x114]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
jne 0x42e0d1
mov ecx, dword [ebp - 0xa4]
or ecx, 0x100
mov dword [ebp - 0xa4], ecx
call sub.KERNEL32.dll_GetLastError
push eax
push 1
push 0x210
push str..._src_client_crashpad_client_win.cc
push str.bool___cdecl_crashpad::_anonymous_namespace::StartHandlerProcess_class_std::unique_ptr_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData_struct_std::default_delete_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData____
lea ecx, [ebp - 0x1ec]
call fcn.00409060
push str.CloseHandle_thread
push eax
call fcn.004011c0
add esp, 8
mov eax, dword [ebp - 0xa4]
test eax, 0x100
je 0x42e0f4
and eax, 0xfffffeff
lea ecx, [ebp - 0x1ec]
mov dword [ebp - 0xa4], eax
call fcn.00409240
push dword [ebp - 0x118]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
jne 0x42e13e
or dword [ebp - 0xa4], 0x200
call sub.KERNEL32.dll_GetLastError
push eax
push 1
push 0x213
push str..._src_client_crashpad_client_win.cc
push str.bool___cdecl_crashpad::_anonymous_namespace::StartHandlerProcess_class_std::unique_ptr_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData_struct_std::default_delete_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData____
lea ecx, [ebp - 0x1ec]
call fcn.00409060
push str.CloseHandle_process
push eax
call fcn.004011c0
add esp, 8
test dword [ebp - 0xa4], 0x200
je 0x42e155
lea ecx, [ebp - 0x1ec]
call fcn.00409240
mov eax, dword [ebp + 8]
mov dword [ebp - 0xb8], eax
mov ecx, dword [eax + 0x98]
cmp ecx, 0xffffffff
je 0x42e182
push ecx
call fcn.0040e9c0
mov eax, dword [ebp - 0xb8]
add esp, 4
mov dword [eax + 0x98], 0xffffffff
mov dword [eax + 0x98], 0xffffffff
xorps xmm0, xmm0
lea eax, [ebp - 0xa0]
movlpd qword [ebp - 0x138], xmm0
push eax
lea eax, [ebp - 0x13c]
movlpd qword [ebp - 0x130], xmm0
push eax
mov eax, dword [ebp + 8]
sub eax, 0xffffff80
movlpd qword [ebp - 0x128], xmm0
push eax
movlpd qword [ebp - 0x120], xmm0
mov dword [ebp - 0x13c], 2
movq qword [ebp - 0xa0], xmm0
mov dword [ebp - 0x98], 0
call fcn.0040f100
mov ecx, dword [ebp - 0xc0]
add esp, 0xc
test al, al
movzx ecx, cl
mov edx, 1
cmovne ecx, edx
mov dword [ebp - 0xc0], ecx
lea ecx, [ebp - 0xb0]
call fcn.0042cd90
test edi, edi
je 0x42e219
push edi
call fcn.0043c1c4
add esp, 4
mov ecx, dword [ebp - 0xb4]
test ecx, ecx
je 0x42e24c
sub ebx, ecx
mov eax, ecx
and ebx, 0xfffffffc
cmp ebx, 0x1000
jb 0x42e242
mov ecx, dword [eax - 4]
add ebx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42e285
push ebx
push ecx
call fcn.0043bf97
add esp, 8
test esi, esi
je 0x42e259
push esi
call fcn.0040e9d0
add esp, 4
mov ecx, dword [ebp - 0x68]
cmp ecx, 8
jb 0x42e295
mov edx, dword [ebp - 0x7c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x42e28b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x42e28b
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0043bf97
add esp, 8
mov ebx, dword [ebp - 0xc0]
xor eax, eax
xor ecx, ecx
mov dword [ebp - 0x6c], 0
test bl, bl
mov dword [ebp - 0x68], 7
mov word [ebp - 0x7c], ax
sete cl
inc ecx
push ecx
call fcn.0042cf30
add esp, 4
lea ecx, [ebp + 8]
call fcn.0042c630
mov ecx, dword [ebp - 4]
mov al, bl
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0043c18a
mov esp, ebp
pop ebp
ret
call fcn.00403fa0
push 0x458bc8
call fcn.0043c0b4
add esp, 4
cmp dword [0x458bc8], 0xffffffff
jne 0x42dc82
push 0
push str.::InitializeProcThreadAttributeList
push 0x445918
call fcn.0040b7f0
push 0x458bc8
mov dword [0x458bc4], eax
call fcn.0043c06a
add esp, 0x10
jmp 0x42dc82
push 0x458bd0
call fcn.0043c0b4
add esp, 4
cmp dword [0x458bd0], 0xffffffff
jne 0x42dc99
cmp dword [0x458bc4], ebx
je 0x42e35a
push 0
push str.::UpdateProcThreadAttribute
push 0x445918
call fcn.0040b7f0
add esp, 0xc
jmp 0x42e35e
xor eax, eax
jmp 0x42e35e
push 0x458bd0
mov dword [0x458bcc], eax
call fcn.0043c06a
add esp, 4
jmp 0x42dc99
call fcn.004088a0
int3