Function at 0x43fb70
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x280
mov ebx, ecx
mov eax, dword [0x5c4738]
xor eax, ebp
mov dword [esp + 0x278], eax
call fcn.00547d00
test al, al
jne 0x440d1d
xor eax, eax
lea ecx, [esp + 0x268]
mov dword [ecx + 4], eax
mov dword [ecx], eax
mov dword [ecx + 8], eax
mov dword [esp + 0x18], ecx
push ecx
push dword [ebx]
call fcn.00490d60
add esp, 8
mov edx, dword [ebx]
mov edi, dword [edx + 0x3c]
mov esi, dword [edx + 0x40]
cmp edi, esi
mov dword [esp + 8], ebx
je 0x43fc24
lea ebx, [esp + 0x1bc]
movzx eax, byte [edi + 0xb]
mov ecx, edi
test al, al
jns 0x43fbe2
mov ecx, dword [edi]
mov eax, dword [edi + 4]
push eax
push ecx
push ebx
call fcn.00418f90
add esp, 0xc
lea eax, [esp + 0x268]
push eax
push ebx
call fcn.00490d60
add esp, 8
cmp byte [esp + 0x1c7], 0
jns 0x43fc17
push dword [esp + 0x1bc]
call fcn.004cf0d6
add esp, 4
add edi, 0xc
cmp esi, edi
jne 0x43fbd3
mov ebx, dword [esp + 8]
mov edx, dword [ebx]
movzx eax, byte [edx + 0x17]
test al, al
jns 0x43fc2f
mov eax, dword [edx + 0x10]
test eax, eax
je 0x43fc97
add edx, 0xc
lea ecx, [esp + 0x50]
push str.database
mov esi, edx
call fcn.004fc470
lea edi, [esp + 0x1bc]
mov ecx, edi
lea edx, [esp + 0x50]
push esi
call fcn.004680d0
add esp, 4
lea eax, [esp + 0x268]
push eax
push edi
call fcn.00490d60
add esp, 8
cmp byte [edi + 0xb], 0
jns 0x43fc82
push dword [esp + 0x1bc]
call fcn.004cf0d6
add esp, 4
cmp byte [esp + 0x5b], 0
jns 0x43fc95
push dword [esp + 0x50]
call fcn.004cf0d6
add esp, 4
mov edx, dword [ebx]
movzx eax, byte [edx + 0x23]
test al, al
jns 0x43fca2
mov eax, dword [edx + 0x1c]
test eax, eax
je 0x43fd0a
add edx, 0x18
lea ecx, [esp + 0x50]
push str.metrics_dir
mov esi, edx
call fcn.004fc470
lea edi, [esp + 0x1bc]
mov ecx, edi
lea edx, [esp + 0x50]
push esi
call fcn.004680d0
add esp, 4
lea eax, [esp + 0x268]
push eax
push edi
call fcn.00490d60
add esp, 8
cmp byte [edi + 0xb], 0
jns 0x43fcf5
push dword [esp + 0x1bc]
call fcn.004cf0d6
add esp, 4
cmp byte [esp + 0x5b], 0
jns 0x43fd08
push dword [esp + 0x50]
call fcn.004cf0d6
add esp, 4
mov edx, dword [ebx]
movzx eax, byte [edx + 0x2f]
test al, al
jns 0x43fd17
mov ecx, dword [edx + 0x28]
jmp 0x43fd19
mov ecx, eax
test ecx, ecx
je 0x43fdbe
test al, al
jns 0x43fd2d
mov eax, dword [edx + 0x28]
mov edx, dword [edx + 0x24]
jmp 0x43fd30
add edx, 0x24
lea ebx, [esp + 0x50]
push eax
push edx
push ebx
call fcn.00418f90
add esp, 0xc
lea esi, [esp + 0x130]
mov ecx, esi
push 0x579b17
call fcn.004fc470
lea edi, [esp + 0x1bc]
mov ecx, edi
mov edx, esi
push ebx
call fcn.004680d0
add esp, 4
lea eax, [esp + 0x268]
push eax
push edi
call fcn.00490d60
add esp, 8
cmp byte [edi + 0xb], 0
jns 0x43fd8c
push dword [esp + 0x1bc]
call fcn.004cf0d6
add esp, 4
cmp byte [esp + 0x13b], 0
mov esi, dword [esp + 8]
jns 0x43fda9
push dword [esp + 0x130]
call fcn.004cf0d6
add esp, 4
cmp byte [esp + 0x5b], 0
jns 0x43fdbc
push dword [esp + 0x50]
call fcn.004cf0d6
add esp, 4
mov edx, dword [esi]
mov edi, dword [edx + 0x30]
lea eax, [edx + 0x34]
mov dword [esp + 0xc], eax
cmp edi, eax
je 0x43ff3b
lea eax, [edi + 0x10]
push 0x3d
push eax
lea eax, [esp + 0x188]
push eax
call fcn.00500590
add esp, 0xc
movzx eax, byte [edi + 0x27]
test al, al
jns 0x43fdf6
mov eax, dword [edi + 0x20]
mov edx, dword [edi + 0x1c]
jmp 0x43fdf9
lea edx, [edi + 0x1c]
lea ecx, [esp + 0x180]
push eax
push edx
call fcn.004b8680
mov ecx, dword [eax + 8]
mov dword [esp + 0x138], ecx
movq xmm0, qword [eax]
movq qword [esp + 0x130], xmm0
xor ecx, ecx
mov dword [eax], ecx
mov dword [eax + 4], ecx
mov dword [eax + 8], ecx
movzx eax, byte [esp + 0x13b]
lea ecx, [esp + 0x130]
test al, al
jns 0x43fe49
mov ecx, dword [esp + 0x130]
mov eax, dword [esp + 0x134]
push eax
push ecx
lea eax, [esp + 0x58]
push eax
call fcn.00418f90
add esp, 0xc
lea esi, [esp + 0x2c]
mov ecx, esi
push str.annotation
call fcn.004fc470
lea ebx, [esp + 0x1bc]
mov ecx, ebx
mov edx, esi
lea eax, [esp + 0x50]
push eax
call fcn.004680d0
add esp, 4
lea eax, [esp + 0x268]
push eax
push ebx
call fcn.00490d60
add esp, 8
cmp byte [esp + 0x1c7], 0
jns 0x43feaa
push dword [esp + 0x1bc]
call fcn.004cf0d6
add esp, 4
cmp byte [esp + 0x37], 0
jns 0x43febd
push dword [esp + 0x2c]
call fcn.004cf0d6
add esp, 4
cmp byte [esp + 0x5b], 0
jns 0x43fed0
push dword [esp + 0x50]
call fcn.004cf0d6
add esp, 4
cmp byte [esp + 0x13b], 0
jns 0x43fee9
push dword [esp + 0x130]
call fcn.004cf0d6
add esp, 4
cmp byte [esp + 0x18b], 0
jns 0x43ff02
push dword [esp + 0x180]
call fcn.004cf0d6
add esp, 4
mov ecx, dword [edi + 4]
test ecx, ecx
jne 0x43ff21
mov eax, dword [edi + 8]
cmp dword [eax], edi
je 0x43ff29
add edi, 8
mov ecx, dword [edi]
lea edi, [ecx + 8]
mov eax, dword [ecx + 8]
cmp dword [eax], ecx
jne 0x43ff13
jmp 0x43ff29
mov eax, ecx
mov ecx, dword [ecx]
test ecx, ecx
jne 0x43ff21
mov edi, eax
cmp eax, dword [esp + 0xc]
jne 0x43fdd0
mov eax, dword [esp + 8]
mov edx, dword [eax]
mov ebx, dword [edx + 0x48]
mov eax, dword [edx + 0x4c]
mov dword [esp + 0xc], eax
cmp ebx, eax
je 0x43ffb3
lea edi, [esp + 0x50]
mov ecx, edi
push 0x583a99
call fcn.004fc470
lea esi, [esp + 0x1bc]
mov ecx, esi
mov edx, edi
push ebx
call fcn.004680d0
add esp, 4
lea eax, [esp + 0x268]
push eax
push esi
call fcn.00490d60
add esp, 8
cmp byte [esp + 0x1c7], 0
jns 0x43ff97
push dword [esp + 0x1bc]
call fcn.004cf0d6
add esp, 4
cmp byte [esp + 0x5b], 0
jns 0x43ffaa
push dword [esp + 0x50]
call fcn.004cf0d6
add esp, 4
add ebx, 0xc
cmp dword [esp + 0xc], ebx
jne 0x43ff49
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 1
push 0x1f0fff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
test eax, eax
jne 0x44002b
xor ebx, ebx
push 2
call fcn.004cb810
add esp, 4
mov esi, 0
test al, al
je 0x440c1f
call fcn.00501800
lea esi, [esp + 0x1bc]
mov ecx, esi
push eax
push 2
push 0x18c
push str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
call fcn.00501810
lea eax, [esp + 0x1c4]
push 0xb
push 0x583aa4
push eax
call fcn.004b7fc0
add esp, 0xc
mov ecx, esi
call fcn.005018c0
xor ebx, ebx
xor esi, esi
jmp 0x440c1f
mov edx, eax
pcmpeqd xmm0, xmm0
lea esi, [esp + 0x180]
movdqa xmmword [esi + 0x20], xmm0
movdqa xmmword [esi + 0x10], xmm0
movdqa xmmword [esi], xmm0
mov eax, dword [esp + 8]
mov eax, dword [eax]
xor edi, edi
mov ecx, esi
push edi
push 0x5c7474
push edi
push 0x5c7468
push edi
push 0x5c7458
mov dword [esp + 0x24], edx
push edx
push dword [eax + 0x64]
push dword [0x5c42e0]
push dword [0x5c42dc]
push dword [0x5c42d8]
call fcn.00576430
lea ebx, [esp + 0x130]
mov ecx, esi
push ebx
call fcn.00547e30
lea esi, [esp + 0x2c]
mov ecx, esi
push str.__initial_client_data
call fcn.004fc470
movzx eax, byte [ebx + 0xb]
test al, al
jns 0x4400b6
mov eax, dword [esp + 0x134]
mov ebx, dword [esp + 0x130]
mov ecx, esi
push eax
push ebx
call fcn.004b8680
mov ecx, dword [eax + 8]
mov dword [esp + 0x58], ecx
movq xmm0, qword [eax]
movq qword [esp + 0x50], xmm0
mov dword [eax], edi
mov dword [eax + 4], edi
mov dword [eax + 8], edi
movzx eax, byte [esp + 0x5b]
test al, al
jns 0x4400eb
mov ecx, dword [esp + 0x50]
mov eax, dword [esp + 0x54]
jmp 0x4400ef
lea ecx, [esp + 0x50]
lea edi, [esp + 0x1bc]
push eax
push ecx
push edi
call fcn.00418f90
add esp, 0xc
lea eax, [esp + 0x268]
push eax
push edi
call fcn.00490d60
add esp, 8
cmp byte [edi + 0xb], 0
jns 0x440127
push dword [esp + 0x1bc]
call fcn.004cf0d6
add esp, 4
cmp byte [esp + 0x5b], 0
jns 0x44013a
push dword [esp + 0x50]
call fcn.004cf0d6
add esp, 4
cmp byte [esp + 0x37], 0
jns 0x44014d
push dword [esp + 0x2c]
call fcn.004cf0d6
add esp, 4
cmp byte [esp + 0x13b], 0
jns 0x440166
push dword [esp + 0x130]
call fcn.004cf0d6
add esp, 4
pxor xmm0, xmm0
movdqa xmmword [esp + 0x150], xmm0
xor esi, esi
mov dword [esp + 0x174], esi
mov dword [esp + 0x170], esi
movdqa xmmword [esp + 0x160], xmm0
movdqa xmmword [esp + 0x140], xmm0
movdqa xmmword [esp + 0x130], xmm0
mov dword [esp + 0x15c], 0x100
mov ebx, dword [sym.imp.KERNEL32.dll_GetStdHandle]
push 0xfffffffffffffff6
call ebx
mov dword [esp + 0x168], eax
push 0xfffffffffffffff5
call ebx
mov dword [esp + 0x16c], eax
push 0xfffffffffffffff4
call ebx
mov dword [esp + 0x170], eax
mov dword [esp + 0x124], esi
mov dword [esp + 0x128], esi
mov dword [esp + 0x12c], esi
mov dword [esp + 0x120], 0xffffffff
mov dword [esp + 0x118], 0x583c08
mov dword [esp + 0x11c], esi
mov byte [esp + 0x120], 0
mov eax, dword [0x5c7498]
mov ecx, dword [0x5c7534]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
cmp eax, dword [ecx + 0x18]
jg 0x440c84
mov eax, dword [0x5c74a0]
mov ecx, dword [0x5c7534]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
cmp eax, dword [ecx + 0x18]
mov ebx, dword [esp + 8]
jg 0x440cc9
mov ecx, dword [0x5c7494]
test ecx, ecx
je 0x440310
cmp dword [0x5c749c], 0
je 0x440310
mov dword [esp + 0x130], 0x48
lea esi, [esp + 0x50]
mov dword [esi], 0xffffffff
xor eax, eax
push esi
push eax
push 1
push eax
call ecx
test eax, eax
jne 0x440586
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x4405d2
push dword [esp + 0x50]
call fcn.004d021a
add esp, 4
mov dword [esp + 0x174], eax
push esi
push 0
push 1
mov dword [esp + 0x20], eax
push eax
call dword [0x5c7494]
test eax, eax
jne 0x440629
push 2
call fcn.004cb810
add esp, 4
test al, al
je 0x440bbe
call fcn.00501800
lea esi, [esp + 0x1bc]
mov ecx, esi
push eax
push 2
push 0x1cc
push str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
call fcn.00501810
lea eax, [esp + 0x1c4]
push 0x21
push 0x583b75
jmp 0x440bae
mov dword [esp + 0x130], 0x44
mov dword [esp + 0x14], 0
xor esi, esi
mov eax, dword [ebx]
movzx edx, byte [eax + 0xb]
test dl, dl
jns 0x44033a
cmp dword [eax + 4], 0xc
jb 0x44033f
mov edx, dword [eax + 4]
jmp 0x440343
cmp dl, 0xc
jae 0x440343
xor ebx, ebx
jmp 0x440392
add edx, 0xfffffff4
lea ebx, [eax + 0xc]
mov ecx, edi
push ebx
push 0xffffffffffffffff
push edx
push eax
call fcn.00418b90
cmp byte [esp + 0x1c7], 0
jns 0x440366
mov edi, dword [esp + 0x1bc]
push str.rundll32.exe
push edi
call fcn.004d24b5
add esp, 8
test eax, eax
sete bl
cmp byte [esp + 0x1c7], 0
jns 0x440392
push dword [esp + 0x1bc]
call fcn.004cf0d6
add esp, 4
pcmpeqd xmm0, xmm0
movdqa xmmword [esp + 0x100], xmm0
cmp byte [esp + 0x273], 0
jns 0x4403b4
mov eax, dword [esp + 0x268]
mov dword [esp + 0x18], eax
xor eax, eax
mov ecx, 0
test bl, bl
jne 0x4403cd
mov ecx, dword [esp + 8]
mov ecx, dword [ecx]
cmp byte [ecx + 0xb], 0
jns 0x4403cd
mov ecx, dword [ecx]
lea edx, [esp + 0x100]
lea edi, [esp + 0x130]
push edx
push edi
push eax
push eax
push esi
push 1
push eax
push eax
push dword [esp + 0x38]
push ecx
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x440453
xor esi, esi
push 2
call fcn.004cb810
add esp, 4
mov ebx, 0
test al, al
mov edi, dword [esp + 0x14]
je 0x440bc6
call fcn.00501800
lea esi, [esp + 0x1bc]
mov ecx, esi
push eax
push 2
push 0x208
push str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
call fcn.00501810
lea eax, [esp + 0x1c4]
push 0xd
push str.CreateProcess
push eax
call fcn.004b7fc0
add esp, 0xc
mov ecx, esi
call fcn.005018c0
jmp 0x440620
push dword [esp + 0x104]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, eax
push 1
call fcn.004cb810
add esp, 4
mov ebx, eax
test esi, esi
jne 0x4404ab
test bl, bl
je 0x4404ab
call fcn.00501800
lea ecx, [esp + 0x1bc]
push eax
push 1
push 0x20d
push str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
call fcn.00501810
lea eax, [esp + 0x1c4]
push 0x12
push str.CloseHandle_thread
push eax
call fcn.004b7fc0
add esp, 0xc
test esi, esi
sete al
and bl, al
cmp bl, 1
jne 0x4404c3
lea ecx, [esp + 0x1bc]
call fcn.005018c0
push dword [esp + 0x100]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, eax
push 1
call fcn.004cb810
add esp, 4
mov ebx, eax
test esi, esi
jne 0x440515
test bl, bl
je 0x440515
call fcn.00501800
lea ecx, [esp + 0x50]
push eax
push 1
push 0x210
push str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
call fcn.00501810
lea eax, [esp + 0x58]
push 0x13
push str.CloseHandle_process
push eax
call fcn.004b7fc0
add esp, 0xc
test esi, esi
sete al
and bl, al
cmp bl, 1
jne 0x44052a
lea ecx, [esp + 0x50]
call fcn.005018c0
mov edi, dword [esp + 8]
mov esi, dword [edi]
mov eax, dword [esi + 0x64]
cmp eax, 0xffffffff
jne 0x440d23
mov dword [esi + 0x64], 0xffffffff
pxor xmm0, xmm0
movdqu xmmword [esp + 0x40], xmm0
movdqu xmmword [esp + 0x30], xmm0
mov dword [esp + 0x2c], 2
xor eax, eax
lea ecx, [esp + 0x20]
mov dword [ecx + 4], eax
mov dword [ecx], eax
mov dword [ecx + 8], eax
mov eax, dword [edi]
add eax, 0x54
push ecx
lea ecx, [esp + 0x30]
push ecx
push eax
call fcn.0042b6b0
add esp, 0xc
mov esi, eax
mov ebx, eax
jmp 0x440bc2
push 2
call fcn.004cb810
add esp, 4
test al, al
je 0x44061e
lea esi, [esp + 0x1bc]
mov ecx, esi
push 2
push 0x1bd
push str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
call fcn.00408a90
lea eax, [esp + 0x1c4]
push 0x44
push str.InitializeProcThreadAttributeList__size__succeeded__expected_failure
push eax
call fcn.004b7fc0
add esp, 0xc
mov ecx, esi
call fcn.00408d50
jmp 0x44061e
push 2
call fcn.004cb810
add esp, 4
test al, al
je 0x44061e
call fcn.00501800
lea esi, [esp + 0x1bc]
mov ecx, esi
push eax
push 2
push 0x1c1
push str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
call fcn.00501810
lea eax, [esp + 0x1c4]
push 0x28
push str.InitializeProcThreadAttributeList__size_
push eax
call fcn.004b7fc0
add esp, 0xc
mov ecx, esi
call fcn.005018c0
xor edi, edi
xor esi, esi
xor ebx, ebx
jmp 0x440bc6
lea esi, [esp + 0x118]
mov ecx, esi
call fcn.00530d90
mov eax, dword [esp + 0x174]
mov dword [esi + 4], eax
mov ecx, dword [esp + 0x124]
mov edx, dword [esp + 0x12c]
mov eax, edx
sub eax, ecx
sar eax, 2
cmp eax, 7
ja 0x4406a4
mov ebx, dword [esp + 0x128]
mov dword [esp + 4], ecx
sub ebx, ecx
push 0x20
call fcn.004cf0a6
add esp, 4
mov esi, eax
add eax, ebx
mov edx, esi
add edx, 0x20
test ebx, ebx
jg 0x440d38
mov dword [esp + 0x124], esi
mov dword [esp + 0x128], eax
mov dword [esp + 0x12c], edx
mov eax, dword [esp + 4]
test eax, eax
jne 0x440d57
mov esi, dword [esp + 0x128]
cmp esi, edx
mov ebx, dword [esp + 8]
jne 0x440775
mov eax, dword [esp + 0x124]
mov dword [esp + 4], eax
sub edx, eax
mov esi, edx
sar esi, 2
lea eax, [esi + 1]
cmp eax, 0x40000000
jae 0x440c73
mov ecx, edx
sar ecx, 1
cmp ecx, eax
cmovb ecx, eax
cmp esi, 0x1fffffff
mov ebx, 0x3fffffff
cmovb ebx, ecx
xor eax, eax
test ebx, ebx
je 0x440716
mov dword [esp], edx
cmp ebx, 0x40000000
jae 0x440c7f
lea eax, [ebx*4]
push eax
call fcn.004cf0a6
add esp, 4
mov edx, dword [esp]
lea ebx, [eax + ebx*4]
mov ecx, dword [0x5c42d8]
lea esi, [eax + esi*4]
add esi, 4
mov dword [esi - 4], ecx
test edx, edx
jle 0x440742
push edx
push dword [esp + 8]
push eax
mov dword [esp + 0xc], eax
call fcn.004d4f00
mov eax, dword [esp + 0xc]
add esp, 0xc
mov dword [esp + 0x124], eax
mov dword [esp + 0x128], esi
mov dword [esp + 0x12c], ebx
mov eax, dword [esp + 4]
test eax, eax
mov ebx, dword [esp + 8]
je 0x440786
push eax
call fcn.004cf0d6
add esp, 4
mov esi, dword [esp + 0x128]
jmp 0x440786
mov eax, dword [0x5c42d8]
mov dword [esi], eax
add esi, 4
mov dword [esp + 0x128], esi
cmp esi, dword [esp + 0x12c]
jne 0x440855
mov eax, dword [esp + 0x124]
mov dword [esp + 4], eax
sub esi, eax
mov edx, esi
sar edx, 2
lea eax, [edx + 1]
cmp eax, 0x40000000
jae 0x440c73
mov ecx, esi
sar ecx, 1
cmp ecx, eax
cmovb ecx, eax
cmp edx, 0x1fffffff
mov ebx, 0x3fffffff
cmovb ebx, ecx
xor eax, eax
test ebx, ebx
je 0x4407f2
mov dword [esp], edx
cmp ebx, 0x40000000
jae 0x440c7f
lea eax, [ebx*4]
push eax
call fcn.004cf0a6
add esp, 4
mov edx, dword [esp]
lea ebx, [eax + ebx*4]
mov ecx, dword [0x5c42dc]
lea edx, [eax + edx*4]
add edx, 4
mov dword [edx - 4], ecx
test esi, esi
jle 0x440822
push esi
push dword [esp + 8]
push eax
mov dword [esp + 0xc], edx
mov esi, eax
call fcn.004d4f00
mov eax, esi
mov edx, dword [esp + 0xc]
add esp, 0xc
mov dword [esp + 0x124], eax
mov dword [esp + 0x128], edx
mov dword [esp + 0x12c], ebx
mov eax, dword [esp + 4]
test eax, eax
mov ebx, dword [esp + 8]
je 0x440868
push eax
call fcn.004cf0d6
add esp, 4
mov edx, dword [esp + 0x128]
jmp 0x440868
mov eax, dword [0x5c42dc]
mov dword [esi], eax
add esi, 4
mov dword [esp + 0x128], esi
mov edx, esi
cmp edx, dword [esp + 0x12c]
jne 0x440933
mov eax, dword [esp + 0x124]
mov dword [esp + 4], eax
sub edx, eax
mov esi, edx
sar esi, 2
lea eax, [esi + 1]
cmp eax, 0x40000000
jae 0x440c73
mov ecx, edx
sar ecx, 1
cmp ecx, eax
cmovb ecx, eax
cmp esi, 0x1fffffff
mov ebx, 0x3fffffff
cmovb ebx, ecx
xor eax, eax
test ebx, ebx
je 0x4408d4
mov dword [esp], edx
cmp ebx, 0x40000000
jae 0x440c7f
lea eax, [ebx*4]
push eax
call fcn.004cf0a6
add esp, 4
mov edx, dword [esp]
lea ebx, [eax + ebx*4]
mov ecx, dword [0x5c42e0]
lea esi, [eax + esi*4]
add esi, 4
mov dword [esi - 4], ecx
test edx, edx
jle 0x440900
push edx
push dword [esp + 8]
push eax
mov dword [esp + 0xc], eax
call fcn.004d4f00
mov eax, dword [esp + 0xc]
add esp, 0xc
mov dword [esp + 0x124], eax
mov dword [esp + 0x128], esi
mov dword [esp + 0x12c], ebx
mov eax, dword [esp + 4]
test eax, eax
mov ebx, dword [esp + 8]
je 0x440946
push eax
call fcn.004cf0d6
add esp, 4
mov esi, dword [esp + 0x128]
jmp 0x440946
mov eax, dword [0x5c42e0]
mov dword [edx], eax
add edx, 4
mov dword [esp + 0x128], edx
mov esi, edx
mov edx, dword [ebx]
cmp esi, dword [esp + 0x12c]
jne 0x440a2a
mov eax, dword [esp + 0x124]
mov dword [esp + 4], eax
sub esi, eax
mov ebx, esi
sar ebx, 2
lea eax, [ebx + 1]
cmp eax, 0x40000000
jae 0x440c73
mov ecx, esi
sar ecx, 1
cmp ecx, eax
cmovb ecx, eax
mov eax, ebx
mov dword [esp], ebx
cmp ebx, 0x1fffffff
mov ebx, 0x3fffffff
cmovb ebx, ecx
xor eax, eax
test ebx, ebx
je 0x4409bb
mov dword [esp + 0x10], edx
cmp ebx, 0x40000000
jae 0x440c7f
lea eax, [ebx*4]
push eax
call fcn.004cf0a6
add esp, 4
mov edx, dword [esp + 0x10]
lea ecx, [eax + ebx*4]
mov dword [esp + 0x10], ecx
mov ecx, dword [edx + 0x64]
mov dword [esp + 0x1c], ecx
mov ecx, dword [esp]
lea edx, [eax + ecx*4]
add edx, 4
mov ecx, dword [esp + 0x1c]
mov dword [edx - 4], ecx
test esi, esi
jle 0x4409f3
mov ebx, eax
push esi
push dword [esp + 8]
push eax
mov esi, edx
call fcn.004d4f00
mov eax, ebx
mov edx, esi
add esp, 0xc
mov dword [esp + 0x124], eax
mov dword [esp + 0x128], edx
mov eax, dword [esp + 0x10]
mov dword [esp + 0x12c], eax
mov eax, dword [esp + 4]
test eax, eax
mov ebx, dword [esp + 8]
je 0x440a3b
push eax
call fcn.004cf0d6
add esp, 4
mov edx, dword [esp + 0x128]
jmp 0x440a3b
mov eax, dword [edx + 0x64]
mov dword [esi], eax
add esi, 4
mov dword [esp + 0x128], esi
mov edx, esi
cmp edx, dword [esp + 0x12c]
jne 0x440b09
mov eax, dword [esp + 0x124]
mov dword [esp + 4], eax
sub edx, eax
mov esi, edx
sar esi, 2
lea eax, [esi + 1]
cmp eax, 0x40000000
jae 0x440c73
mov ecx, edx
sar ecx, 1
cmp ecx, eax
cmovb ecx, eax
mov eax, esi
mov dword [esp], esi
cmp esi, 0x1fffffff
mov ebx, 0x3fffffff
cmovb ebx, ecx
xor esi, esi
test ebx, ebx
je 0x440ab0
mov dword [esp + 0x10], edx
cmp ebx, 0x40000000
jae 0x440c7f
lea eax, [ebx*4]
push eax
call fcn.004cf0a6
add esp, 4
mov esi, eax
mov edx, dword [esp + 0x10]
lea ecx, [esi + ebx*4]
mov eax, dword [esp]
lea ebx, [esi + eax*4]
add ebx, 4
mov eax, dword [esp + 0xc]
mov dword [ebx - 4], eax
test edx, edx
jle 0x440add
push edx
push dword [esp + 8]
push esi
mov dword [esp + 0xc], ecx
call fcn.004d4f00
mov ecx, dword [esp + 0xc]
add esp, 0xc
mov dword [esp + 0x124], esi
mov dword [esp + 0x128], ebx
mov dword [esp + 0x12c], ecx
mov eax, dword [esp + 4]
test eax, eax
mov ebx, dword [esp + 8]
je 0x440b19
push eax
call fcn.004cf0d6
add esp, 4
jmp 0x440b19
mov eax, dword [esp + 0xc]
mov dword [edx], eax
add edx, 4
mov dword [esp + 0x128], edx
mov edx, dword [esp + 0x168]
lea esi, [esp + 0x124]
mov ecx, esi
call fcn.00468220
mov edx, dword [esp + 0x16c]
mov ecx, esi
call fcn.00468220
mov edx, dword [esp + 0x170]
mov ecx, esi
call fcn.00468220
mov eax, dword [esi]
mov ecx, dword [esi + 4]
sub ecx, eax
xor edx, edx
push edx
push edx
push ecx
push eax
push 0x20002
push edx
push dword [esp + 0x18c]
call dword [0x5c749c]
test eax, eax
jne 0x440c69
push 2
call fcn.004cb810
add esp, 4
test al, al
je 0x440bbe
call fcn.00501800
lea esi, [esp + 0x1bc]
mov ecx, esi
push eax
push 2
push 0x1e6
push str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
call fcn.00501810
lea eax, [esp + 0x1c4]
push 0x19
push 0x583b97
push eax
call fcn.004b7fc0
add esp, 0xc
mov ecx, esi
call fcn.005018c0
xor esi, esi
xor ebx, ebx
mov edi, dword [esp + 0x14]
mov dword [esp + 0x118], 0x583c08
cmp byte [esp + 0x120], 0
jne 0x440d20
lea ecx, [esp + 0x118]
call fcn.00530d90
test edi, edi
je 0x440bf8
push edi
call fcn.004cffe7
add esp, 4
mov eax, dword [esp + 0x124]
test eax, eax
je 0x440c13
mov dword [esp + 0x128], eax
push eax
call fcn.004cf0d6
add esp, 4
push dword [esp + 0xc]
call fcn.0042b460
add esp, 4
cmp byte [esp + 0x273], 0
jns 0x440c38
push dword [esp + 0x268]
call fcn.004cf0d6
add esp, 4
xor eax, eax
inc eax
mov ecx, esi
cmp cl, 1
adc eax, 0
mov dword [0x5c7490], eax
mov ecx, dword [esp + 8]
call fcn.00530430
mov ecx, dword [esp + 0x278]
xor ecx, ebp
call fcn.004d25a3
mov eax, ebx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov esi, 0x80000
jmp 0x440325
lea ecx, [esp + 0x124]
call fcn.004ff350
call fcn.004d16b0
push 0x5c7498
call fcn.004d02b9
add esp, 4
cmp dword [0x5c7498], 0xffffffff
jne 0x44022b
push 0
push str.::InitializeProcThreadAttributeList
push 0x57fcdc
call fcn.0042a320
add esp, 0xc
mov dword [0x5c7494], eax
push 0x5c7498
call fcn.004d03d3
add esp, 4
jmp 0x44022b
push 0x5c74a0
call fcn.004d02b9
add esp, 4
cmp dword [0x5c74a0], 0xffffffff
jne 0x440250
xor eax, eax
cmp dword [0x5c7494], 0
je 0x440d02
push 0
push str.::UpdateProcThreadAttribute
push 0x57fcdc
call fcn.0042a320
add esp, 0xc
mov dword [0x5c749c], eax
push 0x5c74a0
call fcn.004d03d3
add esp, 4
mov ebx, dword [esp + 8]
jmp 0x440250
int3
int3
push eax
call fcn.0042b930
add esp, 4
mov dword [esi + 0x64], 0xffffffff
jmp 0x44053c
push ebx
push dword [esp + 8]
push esi
mov dword [esp + 0xc], edx
mov ebx, eax
call fcn.004d4f00
mov eax, ebx
mov edx, dword [esp + 0xc]
add esp, 0xc
jmp 0x440683
push eax
call fcn.004cf0d6
add esp, 4
mov edx, dword [esp + 0x12c]
jmp 0x4406a4