Function at 0x426420
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0xec
mov edi, ecx
mov eax, dword [0x4e2024]
xor eax, ebp
mov dword [ebp - 0x10], eax
xor eax, eax
dec eax
lea esi, [ebp - 0xdc]
mov dword [esi], eax
mov dword [esi + 4], eax
mov dword [esi + 8], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push str..pipecrashpad__lu_
push esi
call fcn.004586e0
add esp, 0xc
mov esi, 0xfffffffc
lea ebx, [ebp - 0x34]
push ebx
call fcn.00436a00
add esp, 4
movzx eax, byte [ebp - 0xd1]
test al, al
cmovs eax, dword [ebp - 0xd8]
mov edx, dword [ebp - 0xdc]
lea ecx, [ebp - 0xdc]
cmovns edx, ecx
mov ecx, ebx
push eax
push edx
xor ebx, ebx
push ebx
call fcn.00449c60
mov ecx, dword [eax + 8]
mov dword [ebp - 0x20], ecx
movsd xmm0, qword [eax]
movsd qword [ebp - 0x28], xmm0
mov dword [eax], ebx
mov dword [eax + 4], ebx
mov dword [eax + 8], ebx
movzx eax, byte [ebp - 0x1d]
lea ecx, [ebp - 0x28]
test al, al
jns 0x4264c2
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
push eax
push ecx
lea eax, [ebp - 0x1c]
push eax
call fcn.0044eda0
add esp, 0xc
cmp byte [edi + 0xb], 0
js 0x4267d7
mov eax, dword [ebp - 0x14]
mov dword [edi + 8], eax
movsd xmm0, qword [ebp - 0x1c]
movsd qword [edi], xmm0
mov byte [ebp - 0x11], 0
mov word [ebp - 0x1c], 0
cmp byte [ebp - 0x1d], 0
jns 0x426504
push dword [ebp - 0x28]
call fcn.0046acdd
add esp, 4
cmp byte [ebp - 0x29], 0
js 0x4267e6
push 1
push edi
call fcn.00436690
add esp, 8
cmp eax, 0xffffffff
jne 0x42652b
lea ecx, [esi + 1]
test esi, esi
mov esi, ecx
jne 0x426463
mov dword [ebp - 0xf8], eax
cmp eax, 0xffffffff
je 0x4267f6
mov dword [ebp - 0xec], edi
cmp byte [ebp - 0xd1], 0
jns 0x426557
push dword [ebp - 0xdc]
call fcn.0046acdd
add esp, 4
xor esi, esi
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], 0xc
mov dword [ebp - 0x14], 1
mov edi, dword [sym.imp.KERNEL32.dll_CreateEventW]
push esi
push esi
push esi
lea ebx, [ebp - 0x1c]
push ebx
call edi
mov dword [0x4e3e90], eax
push esi
push esi
push esi
push ebx
call edi
mov dword [0x4e3e94], eax
push esi
push esi
push esi
push ebx
call edi
mov dword [0x4e3e98], eax
push 0x4e8004
call fcn.00436c70
add esp, 4
push 4
call fcn.0046acad
add esp, 4
mov esi, eax
mov ecx, eax
call fcn.004505d0
mov dword [0x4e801c], esi
push fcn.004ac490
call dword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
push 0x4ac5c0
push 0x16
call fcn.00481fb3
add esp, 8
push 0x6c
call fcn.0046acad
add esp, 4
mov esi, eax
mov edi, esp
mov ecx, eax
push dword [ebp + 8]
call fcn.0044bd40
lea ecx, [esi + 0xc]
push dword [ebp + 0xc]
call fcn.0044bd40
lea ecx, [esi + 0x18]
push dword [ebp + 0x10]
call fcn.0044bd40
lea ecx, [esi + 0x24]
mov edx, dword [ebp + 0x14]
cmp byte [edx + 0xb], 0
mov dword [ebp - 0xf4], edi
jns 0x42682f
push dword [edx + 4]
push dword [edx]
call fcn.00449c00
mov eax, esi
add esi, 0x34
xor edi, edi
mov dword [eax + 0x34], edi
mov dword [eax + 0x38], edi
mov dword [ebp - 0xe4], eax
mov dword [eax + 0x30], esi
mov eax, dword [ebp + 0x18]
mov ebx, dword [eax]
add eax, 4
mov dword [ebp - 0xe8], eax
cmp ebx, eax
je 0x4266a6
mov eax, dword [ebp - 0xe4]
add eax, 0x30
mov dword [ebp - 0xf0], eax
lea eax, [ebx + 0x10]
mov ecx, dword [ebp - 0xf0]
push eax
push eax
push esi
lea eax, [ebp - 0xdc]
push eax
call fcn.00427c20
mov ecx, dword [ebx + 4]
test ecx, ecx
jne 0x42668b
mov eax, dword [ebx + 8]
cmp dword [eax], ebx
jne 0x426695
mov ebx, eax
cmp eax, dword [ebp - 0xe8]
jne 0x426659
jmp 0x4266a6
mov eax, ecx
mov ecx, dword [ecx]
test ecx, ecx
je 0x42667f
jmp 0x42668b
add ebx, 8
mov ecx, dword [ebx]
lea ebx, [ecx + 8]
mov eax, dword [ecx + 8]
cmp dword [eax], ecx
je 0x42667f
jmp 0x426698
mov esi, dword [ebp - 0xe4]
mov dword [esi + 0x3c], edi
mov dword [esi + 0x40], edi
mov dword [esi + 0x44], edi
mov eax, dword [ebp + 0x1c]
mov edi, dword [eax]
mov ebx, dword [eax + 4]
mov ecx, ebx
sub ecx, edi
mov eax, ebx
sub eax, edi
je 0x426743
sar ecx, 2
imul edx, ecx, 0xaaaaaaab
mov ecx, edx
mov dword [ebp - 0xe8], edx
cmp edx, 0x15555556
jae 0x426915
push eax
call fcn.0046acad
add esp, 4
mov esi, eax
mov ecx, dword [ebp - 0xe4]
mov dword [ecx + 0x40], eax
mov dword [ecx + 0x3c], eax
mov eax, dword [ebp - 0xe8]
lea eax, [eax + eax*2]
lea eax, [esi + eax*4]
mov dword [ecx + 0x44], eax
cmp byte [edi + 0xb], 0
jns 0x426728
mov ecx, esi
push dword [edi + 4]
push dword [edi]
call fcn.00449c00
add edi, 0xc
add esi, 0xc
cmp edi, ebx
jne 0x42670a
jmp 0x426738
mov eax, dword [edi + 8]
mov dword [esi + 8], eax
movsd xmm0, qword [edi]
movsd qword [esi], xmm0
jmp 0x42671c
mov eax, dword [ebp - 0xe4]
mov dword [eax + 0x40], esi
mov esi, eax
xor eax, eax
mov dword [esi + 0x48], eax
mov dword [esi + 0x4c], eax
mov dword [esi + 0x50], eax
mov eax, dword [ebp + 0x28]
mov edi, dword [eax]
mov ebx, dword [eax + 4]
mov ecx, ebx
sub ecx, edi
mov eax, ebx
sub eax, edi
jne 0x426842
mov ecx, esi
add ecx, 0x54
mov edi, dword [ebp - 0xec]
cmp byte [edi + 0xb], 0
jns 0x4268a7
push dword [edi + 4]
push dword [edi]
call fcn.0044ac90
mov dword [esi + 0x60], 0x4d0dc8
mov eax, dword [ebp - 0xf8]
mov dword [esi + 0x64], eax
mov byte [esi + 0x68], 0
mov esp, dword [ebp - 0xf4]
cmp byte [ebp + 0x24], 0
jne 0x4268ba
mov dword [ebp - 0xe0], esi
mov eax, dword [ebp - 0xe0]
push eax
call fcn.004269b0
add esp, 4
mov ebx, eax
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0046b8b5
mov eax, ebx
add esp, 0xec
pop esi
pop edi
pop ebx
pop ebp
ret 0x24
push dword [edi]
call fcn.0046acdd
add esp, 4
jmp 0x4264da
push dword [ebp - 0x34]
call fcn.0046acdd
add esp, 4
jmp 0x42650e
push 0x131
push str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea esi, [ebp - 0x1c]
push esi
call fcn.004b62a0
add esp, 0xc
mov ecx, esi
call fcn.004b61e0
push 0xf
push str.CreateNamedPipe
push eax
call fcn.00494230
add esp, 0xc
mov ecx, esi
call fcn.004b61f0
jmp 0x42653a
mov eax, dword [edx + 8]
mov dword [ecx + 8], eax
movsd xmm0, qword [edx]
movsd qword [ecx], xmm0
jmp 0x426622
sar ecx, 2
imul edx, ecx, 0xaaaaaaab
mov ecx, edx
mov dword [ebp - 0xe8], edx
cmp edx, 0x15555556
jae 0x426961
push eax
call fcn.0046acad
add esp, 4
mov esi, eax
mov ecx, dword [ebp - 0xe4]
mov dword [ecx + 0x4c], eax
mov dword [ecx + 0x48], eax
mov eax, dword [ebp - 0xe8]
lea eax, [eax + eax*2]
lea eax, [esi + eax*4]
mov dword [ecx + 0x50], eax
mov ecx, esi
push edi
call fcn.0044bd40
add edi, 0xc
add esi, 0xc
cmp edi, ebx
jne 0x426885
mov eax, dword [ebp - 0xe4]
mov dword [eax + 0x4c], esi
mov esi, eax
jmp 0x426764
mov eax, dword [edi + 8]
mov dword [ecx + 8], eax
movsd xmm0, qword [edi]
movsd qword [ecx], xmm0
jmp 0x426783
mov eax, esi
lea esi, [edi + 0xc]
xor edi, edi
push edi
push edi
push eax
push 0x4ac0f0
push edi
push edi
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [ebp - 0xdc], eax
mov ecx, esi
lea eax, [ebp - 0xdc]
push eax
call fcn.00426970
mov bl, 1
mov eax, dword [ebp - 0xec]
cmp dword [eax + 0x10], edi
jne 0x4267be
push 2
call fcn.004552c0
add esp, 4
test al, al
jne 0x426923
mov dword [0x4e8020], 2
xor ebx, ebx
jmp 0x4267be
mov ecx, dword [ebp - 0xe4]
add ecx, 0x3c
call fcn.00494190
call fcn.004af950
lea esi, [ebp - 0xdc]
mov ecx, esi
push eax
push 2
push 0x298
push str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
call fcn.004afa80
lea eax, [ebp - 0xd4]
push 0xc
push 0x4d4537
push eax
call fcn.00494230
add esp, 0xc
mov ecx, esi
call fcn.004afae0
jmp 0x426904
mov ecx, dword [ebp - 0xe4]
add ecx, 0x48
call fcn.00494190
int3