Function at 0x44aec0
Capabilities:
Create process on windows
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x190
mov eax, dword [0x542040]
xor eax, ebp
mov dword [esp + 0x188], eax
call fcn.00451310
test al, al
jne 0x44c517
lea eax, [ebp + 8]
pxor xmm0, xmm0
lea ecx, [esp + 0x178]
movq qword [ecx], xmm0
mov dword [ecx + 8], 0
mov ebx, dword [eax]
mov dword [esp + 0x1c], ecx
push ecx
push ebx
call fcn.00451340
add esp, 8
mov esi, dword [ebx + 0x48]
mov edi, dword [ebx + 0x4c]
cmp esi, edi
je 0x44af92
lea ebx, [esp + 0xc8]
jmp 0x44af81
mov eax, dword [esi + 4]
test eax, eax
js 0x44b68b
mov ecx, dword [esi]
test eax, eax
sete dl
test ecx, ecx
setne dh
or dh, dl
je 0x44b684
push eax
push ecx
push ebx
call fcn.004664c0
add esp, 0xc
lea eax, [esp + 0x178]
push eax
push ebx
call fcn.00451340
add esp, 8
cmp byte [esp + 0xd3], 0
jns 0x44af7a
push dword [esp + 0xc8]
call fcn.0048d98d
add esp, 4
add esi, 0xc
cmp esi, edi
je 0x44af8d
movsx eax, byte [esi + 0xb]
mov ecx, esi
test eax, eax
jns 0x44af33
jmp 0x44af26
lea eax, [ebp + 8]
mov ebx, dword [eax]
movsx eax, byte [ebx + 0x17]
test eax, eax
jns 0x44af9d
mov eax, dword [ebx + 0x10]
test eax, eax
je 0x44b02b
lea eax, [esp + 0x48]
mov byte [eax + 3], 8
mov ecx, str.database
lea edx, [esp + 0x40]
cmp edx, ecx
seta dl
cmp eax, ecx
setbe al
or al, dl
je 0x44c4bf
lea eax, [ebx + 0xc]
lea edx, [esp + 0x40]
mov dword [edx + 4], 0x65736162
mov dword [edx], 0x61746164
mov byte [edx + 8], 0
lea esi, [esp + 0xc8]
mov ecx, esi
push eax
call fcn.0044c920
add esp, 4
lea eax, [esp + 0x178]
push eax
push esi
call fcn.00451340
add esp, 8
cmp byte [esi + 0xb], 0
jns 0x44b018
push dword [esp + 0xc8]
call fcn.0048d98d
add esp, 4
cmp byte [esp + 0x4b], 0
jns 0x44b02b
push dword [esp + 0x40]
call fcn.0048d98d
add esp, 4
movsx eax, byte [ebx + 0x23]
test eax, eax
jns 0x44b036
mov eax, dword [ebx + 0x1c]
test eax, eax
je 0x44b0e5
mov esi, ebx
push 0x10
call fcn.0048d95d
add esp, 4
mov dword [esp + 0x40], eax
mov dword [esp + 0x48], 0x80000010
mov dword [esp + 0x44], 0xb
lea ecx, [eax + 0xb]
mov edx, str.metrics_dir
cmp eax, edx
seta bl
cmp ecx, edx
setbe cl
or cl, bl
je 0x44c4bf
mov ebx, esi
lea edi, [esi + 0x18]
mov ecx, dword [0x534ebe]
mov dword [eax + 7], ecx
movq xmm0, qword [str.metrics_dir]
movq qword [eax], xmm0
mov byte [eax + 0xb], 0
lea esi, [esp + 0xc8]
lea edx, [esp + 0x40]
mov ecx, esi
push edi
call fcn.0044c920
add esp, 4
lea eax, [esp + 0x178]
push eax
push esi
call fcn.00451340
add esp, 8
cmp byte [esi + 0xb], 0
jns 0x44b0d2
push dword [esp + 0xc8]
call fcn.0048d98d
add esp, 4
cmp byte [esp + 0x4b], 0
jns 0x44b0e5
push dword [esp + 0x40]
call fcn.0048d98d
add esp, 4
movsx eax, byte [ebx + 0x2f]
test eax, eax
jns 0x44b0f0
mov eax, dword [ebx + 0x28]
test eax, eax
je 0x44b196
mov esi, ebx
push 0x18
call fcn.0048d95d
add esp, 4
mov dword [esp + 0x40], eax
mov dword [esp + 0x48], 0x80000018
mov dword [esp + 0x44], 0x10
lea ecx, [eax + 0x10]
mov edx, str.crash_count_file
cmp eax, edx
seta bl
cmp ecx, edx
setbe cl
or cl, bl
je 0x44c4bf
mov ebx, esi
lea edi, [esi + 0x24]
movdqu xmm0, xmmword [str.crash_count_file]
movdqu xmmword [eax], xmm0
mov byte [eax + 0x10], 0
lea esi, [esp + 0xc8]
lea edx, [esp + 0x40]
mov ecx, esi
push edi
call fcn.0044c920
add esp, 4
lea eax, [esp + 0x178]
push eax
push esi
call fcn.00451340
add esp, 8
cmp byte [esi + 0xb], 0
jns 0x44b183
push dword [esp + 0xc8]
call fcn.0048d98d
add esp, 4
cmp byte [esp + 0x4b], 0
jns 0x44b196
push dword [esp + 0x40]
call fcn.0048d98d
add esp, 4
movsx eax, byte [ebx + 0x3b]
test eax, eax
js 0x44b2a8
test al, al
je 0x44b26e
lea ecx, [ebx + 0x30]
test ecx, ecx
je 0x44b684
lea edi, [esp + 0x40]
push eax
push ecx
push edi
call fcn.004664c0
add esp, 0xc
lea eax, [esp + 0x93]
mov byte [eax + 8], 3
mov ecx, 0x527488
lea edx, [esp + 0x90]
cmp edx, ecx
seta dl
cmp eax, ecx
setbe al
or al, dl
je 0x44c4bf
mov al, byte [0x52748a]
lea edx, [esp + 0x90]
mov byte [edx + 2], al
movzx eax, word [0x527488]
mov word [edx], ax
mov byte [edx + 3], 0
lea esi, [esp + 0xc8]
mov ecx, esi
push edi
call fcn.0044c920
add esp, 4
lea eax, [esp + 0x178]
push eax
push esi
call fcn.00451340
add esp, 8
cmp byte [esi + 0xb], 0
jns 0x44b242
push dword [esp + 0xc8]
call fcn.0048d98d
add esp, 4
cmp byte [esp + 0x9b], 0
jns 0x44b25b
push dword [esp + 0x90]
call fcn.0048d98d
add esp, 4
cmp byte [esp + 0x4b], 0
jns 0x44b26e
push dword [esp + 0x40]
call fcn.0048d98d
add esp, 4
mov esi, dword [ebx + 0x3c]
add ebx, 0x40
cmp esi, ebx
je 0x44b50d
mov eax, str.annotation
lea ecx, [esp + 0x168]
cmp ecx, eax
setbe cl
lea edx, [esp + 0x172]
cmp edx, eax
seta al
and al, cl
mov byte [esp + 0x18], al
mov dword [esp + 0x14], ebx
jmp 0x44b431
mov eax, dword [ebx + 0x34]
test eax, eax
je 0x44b26e
js 0x44b68b
mov ecx, dword [ebx + 0x30]
jmp 0x44b1ad
lea edx, [esi + 0x1c]
lea edi, [esp + 0x40]
lea ecx, [esp + 0x30]
push eax
push edx
call fcn.00461740
mov ecx, dword [eax + 8]
mov dword [esp + 0x98], ecx
movsd xmm0, qword [eax]
movsd qword [esp + 0x90], xmm0
xorps xmm0, xmm0
movsd qword [eax], xmm0
mov dword [eax + 8], 0
movsx eax, byte [esp + 0x9b]
test eax, eax
cmovs eax, dword [esp + 0x94]
mov ecx, dword [esp + 0x90]
lea edx, [esp + 0x90]
cmovns ecx, edx
test eax, eax
js 0x44b68b
sete dl
test ecx, ecx
setne dh
or dh, dl
je 0x44b684
push eax
push ecx
push edi
call fcn.004664c0
add esp, 0xc
mov byte [esp + 0x173], 0xa
cmp byte [esp + 0x18], 0
jne 0x44c4bf
movzx eax, word [0x534e84]
mov word [esp + 0x170], ax
movq xmm0, qword [str.annotation]
movq qword [esp + 0x168], xmm0
mov byte [esp + 0x172], 0
lea ebx, [esp + 0xc8]
mov ecx, ebx
lea edx, [esp + 0x168]
push edi
call fcn.0044c920
add esp, 4
lea eax, [esp + 0x178]
push eax
push ebx
call fcn.00451340
add esp, 8
cmp byte [esp + 0xd3], 0
jns 0x44b3b8
push dword [esp + 0xc8]
call fcn.0048d98d
add esp, 4
cmp byte [esp + 0x173], 0
mov ebx, dword [esp + 0x14]
jns 0x44b3d5
push dword [esp + 0x168]
call fcn.0048d98d
add esp, 4
cmp byte [esp + 0x4b], 0
jns 0x44b3e8
push dword [esp + 0x40]
call fcn.0048d98d
add esp, 4
cmp byte [esp + 0x9b], 0
jns 0x44b401
push dword [esp + 0x90]
call fcn.0048d98d
add esp, 4
cmp byte [esp + 0x3b], 0
jns 0x44b414
push dword [esp + 0x30]
call fcn.0048d98d
add esp, 4
mov ecx, dword [esi + 4]
test ecx, ecx
je 0x44b4e3
mov eax, ecx
mov ecx, dword [ecx]
test ecx, ecx
jne 0x44b41f
mov esi, eax
cmp eax, ebx
je 0x44b50d
movsx edx, byte [esi + 0x1b]
mov ecx, edx
test edx, edx
jns 0x44b43e
mov ecx, dword [esi + 0x14]
xor eax, eax
dec eax
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], eax
lea eax, [ecx + 1]
cmp eax, 0x7ffffff8
jae 0x44c50e
mov dword [esp + 0x10], ecx
cmp eax, 0xa
jbe 0x44b4f1
mov ebx, eax
or ebx, 7
inc ebx
push ebx
mov edi, edx
mov dword [esp + 0x10], eax
call fcn.0048d95d
mov edx, edi
add esp, 4
mov edi, eax
or ebx, 0x80000000
mov dword [esp + 0x38], ebx
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0xc]
mov dword [esp + 0x34], eax
lea eax, [esi + 0x10]
test dl, dl
jns 0x44b4a0
mov eax, dword [eax]
mov edx, dword [esp + 0x10]
cmp eax, edi
jb 0x44b4b3
lea ecx, [edi + edx]
cmp ecx, eax
ja 0x44c4bf
test edx, edx
je 0x44b4c6
push edx
push eax
push edi
call fcn.00491320
mov edx, dword [esp + 0x1c]
add esp, 0xc
mov word [edi + edx], 0x3d
movsx eax, byte [esi + 0x27]
test eax, eax
jns 0x44b2bd
mov eax, dword [esi + 0x20]
mov edx, dword [esi + 0x1c]
jmp 0x44b2c0
mov eax, dword [esi + 8]
cmp dword [eax], esi
mov esi, eax
jne 0x44b4e3
jmp 0x44b427
pxor xmm0, xmm0
movq qword [esp + 0x30], xmm0
mov dword [esp + 0x38], 0
mov byte [esp + 0x3b], al
lea edi, [esp + 0x30]
jmp 0x44b497
lea eax, [ebp + 8]
mov eax, dword [eax]
mov ebx, dword [eax + 0x54]
mov dword [esp + 0xc], eax
mov esi, dword [eax + 0x58]
cmp ebx, esi
je 0x44b5d1
lea eax, [esp + 0x4a]
mov ecx, 0x534e87
lea edx, [esp + 0x40]
cmp edx, ecx
setbe dl
cmp eax, ecx
seta al
and al, dl
mov byte [esp + 0x10], al
lea edi, [esp + 0xc8]
jmp 0x44b573
push dword [esp + 0xc8]
call fcn.0048d98d
add esp, 4
cmp byte [esp + 0x4b], 0
jns 0x44b56c
push dword [esp + 0x40]
call fcn.0048d98d
add esp, 4
add ebx, 0xc
cmp ebx, esi
je 0x44b5d1
mov byte [esp + 0x4b], 0xa
cmp byte [esp + 0x10], 0
jne 0x44c4bf
movzx eax, word [0x534e8f]
mov word [esp + 0x48], ax
movq xmm0, qword [0x534e87]
movq qword [esp + 0x40], xmm0
mov byte [esp + 0x4a], 0
mov ecx, edi
lea edx, [esp + 0x40]
push ebx
call fcn.0044c920
add esp, 4
lea eax, [esp + 0x178]
push eax
push edi
call fcn.00451340
add esp, 8
cmp byte [esp + 0xd3], 0
jns 0x44b559
jmp 0x44b54a
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 1
push 0x1f0fff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
test eax, eax
jne 0x44b750
push 2
call fcn.0046d8e0
add esp, 4
test al, al
je 0x44b639
call fcn.004d4ac0
lea esi, [esp + 0xc8]
mov ecx, esi
push eax
push 2
push 0x1b0
push str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
call fcn.004d4c90
lea eax, [esp + 0xd0]
push 0xb
push 0x53701d
push eax
call fcn.00454f30
add esp, 0xc
mov ecx, esi
call fcn.004d4cf0
xor ebx, ebx
cmp byte [esp + 0x183], 0
jns 0x44b654
push dword [esp + 0x178]
call fcn.0048d98d
add esp, 4
movzx eax, bl
mov ecx, 2
sub ecx, eax
mov dword [0x557270], ecx
lea ecx, [ebp + 8]
call fcn.0044c7c0
mov ecx, dword [esp + 0x188]
xor ecx, ebp
call fcn.0048e2e5
mov eax, ebx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
push str....._third_partylibc_srcinclude_string_view:320:_assertion___len__0____s___nullptr_failed:_string_view::string_view__CharT___size_t_:_received_nullptr_n
jmp 0x44b690
push str....._third_partylibc_srcinclude_string_view:318:_assertion___len___static_cast_size_type__numeric_limits_difference_type_::max____failed:_string_view::string_view__CharT___size_t_:_length_does_not_fit_in_difference_type_n
push 0x524b41
call fcn.004bbec0
mov eax, dword [ecx + 4]
mov edx, ecx
add eax, 0xfffffff4
lea ebx, [esp + 0xc8]
mov ecx, ebx
push esi
push 0xffffffffffffffff
push eax
push edx
call fcn.00462890
cmp byte [esp + 0xd3], 0
jns 0x44b6c6
mov ebx, dword [esp + 0xc8]
push str.rundll32.exe
push ebx
call fcn.004a2d06
add esp, 8
test eax, eax
sete bl
cmp byte [esp + 0xd3], 0
jns 0x44ba68
push dword [esp + 0xc8]
call fcn.0048d98d
add esp, 4
jmp 0x44ba68
push 2
call fcn.0046d8e0
add esp, 4
test al, al
je 0x44b747
call fcn.004d4ac0
lea ebx, [esp + 0xc8]
mov ecx, ebx
push eax
push 2
push 0x1f0
push str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
call fcn.004d4c90
lea eax, [esp + 0xd0]
push 0x21
push 0x5370ee
push eax
call fcn.00454f30
add esp, 0xc
mov ecx, ebx
call fcn.004d4cf0
mov esi, dword [esp + 0x10]
jmp 0x44ba24
pcmpeqd xmm0, xmm0
lea esi, [esp + 0x90]
movdqa xmmword [esi + 0x20], xmm0
movdqa xmmword [esi + 0x10], xmm0
movdqa xmmword [esi], xmm0
xor edx, edx
mov ecx, esi
push edx
push 0x557254
push edx
push 0x557248
push edx
push 0x55723c
mov dword [esp + 0x2c], eax
push eax
mov eax, dword [esp + 0x28]
push dword [eax + 0x70]
push dword [0x5450c8]
push dword [0x5450c4]
push dword [0x5450bc]
call fcn.004458a0
lea edi, [esp + 0x30]
mov ecx, esi
push edi
call fcn.00445ca0
push 0x18
call fcn.0048d95d
add esp, 4
mov dword [esp + 0x168], eax
mov dword [esp + 0x170], 0x80000018
mov dword [esp + 0x16c], 0x16
lea ecx, [eax + 0x16]
mov edx, str.__initial_client_data
cmp eax, edx
seta bl
cmp ecx, edx
setbe cl
or cl, bl
je 0x44c4bf
movsd xmm0, qword [0x537037]
movsd qword [eax + 0xe], xmm0
movups xmm0, xmmword [str.__initial_client_data]
movups xmmword [eax], xmm0
movsx edx, byte [esp + 0x3b]
test edx, edx
cmovs edx, dword [esp + 0x34]
mov byte [eax + 0x16], 0
mov eax, dword [esp + 0x30]
cmovns eax, edi
lea ecx, [esp + 0x168]
push edx
push eax
call fcn.00461740
mov ecx, dword [eax + 8]
lea edx, [esp + 0x40]
mov dword [edx + 8], ecx
movq xmm0, qword [eax]
movq qword [edx], xmm0
pxor xmm0, xmm0
movq qword [eax], xmm0
mov dword [eax + 8], 0
movsx eax, byte [edx + 0xb]
test eax, eax
cmovs eax, dword [edx + 4]
mov ecx, dword [edx]
cmovns ecx, edx
test eax, eax
js 0x44b68b
mov ebx, edi
sete dl
test ecx, ecx
setne dh
or dh, dl
mov edi, dword [esp + 0x14]
je 0x44b684
lea esi, [esp + 0xc8]
push eax
push ecx
push esi
call fcn.004664c0
add esp, 0xc
lea eax, [esp + 0x178]
push eax
push esi
call fcn.00451340
add esp, 8
cmp byte [esi + 0xb], 0
jns 0x44b8b1
push dword [esp + 0xc8]
call fcn.0048d98d
add esp, 4
cmp byte [esp + 0x4b], 0
jns 0x44b8c4
push dword [esp + 0x40]
call fcn.0048d98d
add esp, 4
cmp byte [esp + 0x173], 0
jns 0x44b8dd
push dword [esp + 0x168]
call fcn.0048d98d
add esp, 4
cmp byte [esp + 0x3b], 0
jns 0x44b8f0
push dword [esp + 0x30]
call fcn.0048d98d
add esp, 4
pxor xmm0, xmm0
movdqa xmmword [esp + 0x60], xmm0
xorps xmm1, xmm1
movsd qword [esp + 0x80], xmm1
movdqa xmmword [esp + 0x70], xmm0
movdqa xmmword [esp + 0x50], xmm0
movdqa xmmword [esp + 0x40], xmm0
mov dword [esp + 0x6c], 0x100
mov esi, dword [sym.imp.KERNEL32.dll_GetStdHandle]
push 0xfffffffffffffff6
call esi
mov dword [esp + 0x78], eax
push 0xfffffffffffffff5
call esi
mov dword [esp + 0x7c], eax
push 0xfffffffffffffff4
call esi
mov dword [esp + 0x80], eax
xor eax, eax
mov dword [esp + 0x168], eax
mov dword [esp + 0x16c], eax
mov dword [esp + 0x170], eax
mov eax, dword [0x557278]
mov ecx, dword [0x545744]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
cmp eax, dword [ecx + 4]
jg 0x44c4c9
mov eax, dword [0x557280]
mov ecx, dword [0x545744]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
cmp eax, dword [ecx + 4]
jg 0x44c469
mov ecx, dword [0x557274]
test ecx, ecx
je 0x44ba38
cmp dword [0x55727c], 0
je 0x44ba38
mov dword [esp + 0x40], 0x48
mov dword [esp + 0x30], 0xffffffff
call dword [0x53cee4]
xor eax, eax
push ebx
push eax
push 1
push eax
call ecx
test eax, eax
je 0x44bceb
push 2
call fcn.0046d8e0
add esp, 4
test al, al
je 0x44ba22
lea ebx, [esp + 0xc8]
mov ecx, ebx
push 2
push 0x1e1
push str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
call fcn.00429cd0
lea eax, [esp + 0xd0]
push 0x44
push str.InitializeProcThreadAttributeList__size__succeeded__expected_failure
push eax
call fcn.00454f30
add esp, 0xc
mov ecx, ebx
call fcn.0042a1b0
xor esi, esi
xor eax, eax
xor ebx, ebx
jmp 0x44bbda
cmp dword [ecx + 4], 0xc
jb 0x44ba66
jmp 0x44b69a
mov dword [esp + 0x40], 0x44
mov dword [esp + 0x10], 0
mov dword [esp + 0x18], 0
mov esi, ebx
mov ecx, dword [esp + 0xc]
movsx eax, byte [ecx + 0xb]
test eax, eax
js 0x44ba2d
cmp al, 0xc
jae 0x44b69d
xor ebx, ebx
pcmpeqd xmm0, xmm0
movdqa xmmword [esp + 0x30], xmm0
cmp byte [esp + 0x183], 0
jns 0x44ba87
mov eax, dword [esp + 0x178]
mov dword [esp + 0x1c], eax
xor eax, eax
mov ecx, 0
test bl, bl
jne 0x44ba9e
mov ecx, dword [esp + 0xc]
cmp byte [ecx + 0xb], 0
jns 0x44ba9e
mov ecx, dword [ecx]
push esi
lea edx, [esp + 0x44]
push edx
push eax
push eax
push dword [esp + 0x28]
push 1
push eax
push eax
push dword [esp + 0x3c]
push ecx
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x44bc98
push dword [esp + 0x34]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, eax
push 1
call fcn.0046d8e0
add esp, 4
test al, al
je 0x44bb1d
test esi, esi
jne 0x44bb1d
call fcn.004d4ac0
lea esi, [esp + 0xc8]
mov ecx, esi
push eax
push 1
push 0x231
push str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
call fcn.004d4c90
lea eax, [esp + 0xd0]
push 0x12
push str.CloseHandle_thread
push eax
call fcn.00454f30
add esp, 0xc
mov ecx, esi
call fcn.004d4cf0
push dword [esp + 0x30]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, eax
push 1
call fcn.0046d8e0
add esp, 4
test al, al
je 0x44bb79
test esi, esi
jne 0x44bb79
call fcn.004d4ac0
lea esi, [esp + 0xc8]
mov ecx, esi
push eax
push 1
push 0x234
push str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
call fcn.004d4c90
lea eax, [esp + 0xd0]
push 0x13
push str.CloseHandle_process
push eax
call fcn.00454f30
add esp, 0xc
mov ecx, esi
call fcn.004d4cf0
lea eax, [ebp + 8]
mov esi, dword [eax]
mov eax, dword [esi + 0x70]
cmp eax, 0xffffffff
je 0x44bb8f
push eax
call fcn.0044f530
add esp, 4
mov dword [esi + 0x70], 0xffffffff
pxor xmm0, xmm0
lea eax, [esp + 0xc8]
movdqu xmmword [eax + 0x14], xmm0
movdqu xmmword [eax + 4], xmm0
mov dword [eax], 2
pxor xmm0, xmm0
lea ecx, [esp + 0x20]
movq qword [ecx], xmm0
mov dword [ecx + 8], 0
add esi, 0x60
push ecx
push eax
push esi
call fcn.00450290
add esp, 0xc
mov ebx, eax
mov eax, dword [esp + 0x10]
mov esi, eax
test eax, eax
je 0x44bc4d
mov dword [esp + 0x10], eax
mov eax, dword [0x557288]
mov ecx, dword [0x545744]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
cmp eax, dword [ecx + 4]
jle 0x44bc3b
push 0x557288
call fcn.0048d9d1
add esp, 4
cmp dword [0x557288], 0xffffffff
jne 0x44bc3b
push 1
push str.::DeleteProcThreadAttributeList
push 0x529b4a
call fcn.00450940
add esp, 0xc
mov dword [0x557284], eax
push 0x557288
call fcn.0048da4b
add esp, 4
mov ecx, dword [0x557284]
call dword [0x53cee4]
push dword [esp + 0x10]
call ecx
test esi, esi
je 0x44bc5a
push esi
call fcn.0048d9cc
add esp, 4
mov eax, dword [esp + 0x168]
test eax, eax
je 0x44bc80
mov ecx, dword [esp + 0x16c]
cmp ecx, eax
jne 0x44bc8e
mov dword [esp + 0x16c], eax
push eax
call fcn.0048d98d
add esp, 4
push edi
call fcn.0044f540
add esp, 4
jmp 0x44b63b
add ecx, 0xfffffffc
jne 0x44bc6c
jmp 0x44c51a
push 2
call fcn.0046d8e0
add esp, 4
test al, al
je 0x44bce4
call fcn.004d4ac0
lea esi, [esp + 0xc8]
mov ecx, esi
push eax
push 2
push 0x22c
push str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
call fcn.004d4c90
lea eax, [esp + 0xd0]
push 0xd
push str.CreateProcess
push eax
call fcn.00454f30
add esp, 0xc
mov ecx, esi
call fcn.004d4cf0
xor ebx, ebx
jmp 0x44bbd4
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
je 0x44bd4b
push 2
call fcn.0046d8e0
add esp, 4
test al, al
je 0x44ba22
call fcn.004d4ac0
lea ebx, [esp + 0xc8]
mov ecx, ebx
push eax
push 2
push 0x1e5
push str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
call fcn.004d4c90
lea eax, [esp + 0xd0]
push 0x28
push str.InitializeProcThreadAttributeList__size_
push eax
call fcn.00454f30
add esp, 0xc
mov ecx, ebx
call fcn.004d4cf0
jmp 0x44ba22
push dword [esp + 0x30]
call fcn.0048d9c3
add esp, 4
mov esi, eax
mov dword [esp + 0x84], eax
mov ecx, dword [0x557274]
call dword [0x53cee4]
push ebx
push 0
push 1
mov dword [esp + 0x1c], esi
push esi
call ecx
test eax, eax
je 0x44b6fb
mov ecx, dword [esp + 0x168]
mov edx, dword [esp + 0x170]
mov eax, edx
sub eax, ecx
cmp eax, 0x1f
ja 0x44c45d
mov edi, ecx
mov esi, dword [esp + 0x16c]
push 0x20
call fcn.0048d95d
add esp, 4
lea edx, [eax + 0x20]
mov ecx, edi
sub esi, edi
lea ebx, [eax + esi]
jne 0x44c769
mov dword [esp + 0x168], eax
mov dword [esp + 0x16c], ebx
mov dword [esp + 0x170], edx
test ecx, ecx
jne 0x44c44d
cmp ebx, edx
mov edi, dword [esp + 0x14]
jb 0x44bea7
mov eax, dword [esp + 0x168]
sub ebx, eax
sar ebx, 2
lea ecx, [ebx + 1]
cmp ecx, 0x40000000
jae 0x44c529
sub edx, eax
mov eax, edx
sar eax, 1
cmp eax, ecx
cmovbe eax, ecx
cmp edx, 0x7ffffffc
mov esi, 0x3fffffff
cmovb esi, eax
test esi, esi
je 0x44c535
cmp esi, 0x40000000
jae 0x44c524
lea eax, [esi*4]
push eax
call fcn.0048d95d
add esp, 4
shl ebx, 2
add ebx, eax
je 0x44c439
lea eax, [eax + esi*4]
mov dword [esp + 0xc], eax
mov eax, dword [0x5450bc]
mov dword [ebx], eax
lea esi, [ebx + 4]
mov eax, dword [esp + 0x168]
mov ecx, dword [esp + 0x16c]
sub ecx, eax
sub ebx, ecx
push ecx
push eax
push ebx
call fcn.00491320
add esp, 0xc
mov eax, dword [esp + 0x168]
mov dword [esp + 0x168], ebx
mov dword [esp + 0x16c], esi
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x170], ecx
test eax, eax
je 0x44bebb
push eax
call fcn.0048d98d
add esp, 4
jmp 0x44bebb
test ebx, ebx
je 0x44c439
mov eax, dword [0x5450bc]
mov dword [ebx], eax
add ebx, 4
mov esi, ebx
mov dword [esp + 0x16c], esi
mov eax, dword [esp + 0x170]
cmp esi, eax
jb 0x44bf90
mov ecx, dword [esp + 0x168]
sub esi, ecx
sar esi, 2
lea edx, [esi + 1]
cmp edx, 0x40000000
jae 0x44c529
sub eax, ecx
mov ecx, eax
sar ecx, 1
cmp ecx, edx
cmovbe ecx, edx
cmp eax, 0x7ffffffc
mov ebx, 0x3fffffff
cmovb ebx, ecx
test ebx, ebx
je 0x44c53c
cmp ebx, 0x40000000
jae 0x44c524
lea eax, [ebx*4]
push eax
call fcn.0048d95d
add esp, 4
shl esi, 2
add esi, eax
je 0x44c439
lea eax, [eax + ebx*4]
mov dword [esp + 0xc], eax
mov eax, dword [0x5450c4]
mov dword [esi], eax
lea ebx, [esi + 4]
mov eax, dword [esp + 0x168]
mov ecx, dword [esp + 0x16c]
sub ecx, eax
sub esi, ecx
push ecx
push eax
push esi
call fcn.00491320
add esp, 0xc
mov eax, dword [esp + 0x168]
mov dword [esp + 0x168], esi
mov dword [esp + 0x16c], ebx
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x170], ecx
test eax, eax
je 0x44bfa4
push eax
call fcn.0048d98d
add esp, 4
jmp 0x44bfa4
test esi, esi
je 0x44c439
mov eax, dword [0x5450c4]
mov dword [esi], eax
add esi, 4
mov ebx, esi
mov dword [esp + 0x16c], ebx
mov eax, dword [esp + 0x170]
cmp ebx, eax
jb 0x44c079
mov ecx, dword [esp + 0x168]
sub ebx, ecx
sar ebx, 2
lea edx, [ebx + 1]
cmp edx, 0x40000000
jae 0x44c529
sub eax, ecx
mov ecx, eax
sar ecx, 1
cmp ecx, edx
cmovbe ecx, edx
cmp eax, 0x7ffffffc
mov esi, 0x3fffffff
cmovb esi, ecx
test esi, esi
je 0x44c543
cmp esi, 0x40000000
jae 0x44c524
lea eax, [esi*4]
push eax
call fcn.0048d95d
add esp, 4
shl ebx, 2
add ebx, eax
je 0x44c439
lea eax, [eax + esi*4]
mov dword [esp + 0xc], eax
mov eax, dword [0x5450c8]
mov dword [ebx], eax
lea esi, [ebx + 4]
mov eax, dword [esp + 0x168]
mov ecx, dword [esp + 0x16c]
sub ecx, eax
sub ebx, ecx
push ecx
push eax
push ebx
call fcn.00491320
add esp, 0xc
mov eax, dword [esp + 0x168]
mov dword [esp + 0x168], ebx
mov dword [esp + 0x16c], esi
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x170], ecx
test eax, eax
je 0x44c08d
push eax
call fcn.0048d98d
add esp, 4
jmp 0x44c08d
test ebx, ebx
je 0x44c439
mov eax, dword [0x5450c8]
mov dword [ebx], eax
add ebx, 4
mov esi, ebx
mov dword [esp + 0x16c], esi
lea eax, [ebp + 8]
mov ecx, dword [eax]
mov eax, dword [esp + 0x170]
cmp esi, eax
jb 0x44c16d
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x168]
sub esi, ecx
sar esi, 2
lea edx, [esi + 1]
cmp edx, 0x40000000
jae 0x44c529
sub eax, ecx
mov ecx, eax
sar ecx, 1
cmp ecx, edx
cmovbe ecx, edx
cmp eax, 0x7ffffffc
mov ebx, 0x3fffffff
cmovb ebx, ecx
test ebx, ebx
je 0x44c54a
cmp ebx, 0x40000000
jae 0x44c524
lea eax, [ebx*4]
push eax
call fcn.0048d95d
add esp, 4
shl esi, 2
add esi, eax
je 0x44c439
lea eax, [eax + ebx*4]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0xc]
mov eax, dword [eax + 0x70]
mov dword [esi], eax
lea ebx, [esi + 4]
mov eax, dword [esp + 0x168]
mov ecx, dword [esp + 0x16c]
sub ecx, eax
sub esi, ecx
push ecx
push eax
push esi
call fcn.00491320
add esp, 0xc
mov eax, dword [esp + 0x168]
mov dword [esp + 0x168], esi
mov dword [esp + 0x16c], ebx
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x170], ecx
test eax, eax
je 0x44c17f
push eax
call fcn.0048d98d
add esp, 4
jmp 0x44c17f
test esi, esi
je 0x44c439
mov eax, dword [ecx + 0x70]
mov dword [esi], eax
add esi, 4
mov ebx, esi
mov dword [esp + 0x16c], ebx
mov eax, dword [esp + 0x170]
cmp ebx, eax
jb 0x44c24f
mov ecx, dword [esp + 0x168]
sub ebx, ecx
sar ebx, 2
lea edx, [ebx + 1]
cmp edx, 0x40000000
jae 0x44c529
sub eax, ecx
mov ecx, eax
sar ecx, 1
cmp ecx, edx
cmovbe ecx, edx
cmp eax, 0x7ffffffc
mov esi, 0x3fffffff
cmovb esi, ecx
test esi, esi
je 0x44c551
cmp esi, 0x40000000
jae 0x44c524
lea eax, [esi*4]
push eax
call fcn.0048d95d
add esp, 4
shl ebx, 2
add ebx, eax
je 0x44c439
lea eax, [eax + esi*4]
mov dword [esp + 0xc], eax
mov dword [ebx], edi
lea esi, [ebx + 4]
mov eax, dword [esp + 0x168]
mov ecx, dword [esp + 0x16c]
sub ecx, eax
sub ebx, ecx
push ecx
push eax
push ebx
call fcn.00491320
add esp, 0xc
mov eax, dword [esp + 0x168]
mov dword [esp + 0x168], ebx
mov dword [esp + 0x16c], esi
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x170], ecx
test eax, eax
je 0x44c25e
push eax
call fcn.0048d98d
add esp, 4
jmp 0x44c25e
test ebx, ebx
je 0x44c439
mov dword [ebx], edi
add ebx, 4
mov esi, ebx
mov dword [esp + 0x16c], esi
mov esi, dword [esp + 0x78]
lea eax, [esi + 1]
cmp eax, 2
jb 0x44c2c4
push esi
call dword [sym.imp.KERNEL32.dll_GetFileType]
and eax, 0xfffffffd
cmp eax, 1
jne 0x44c2c4
mov eax, dword [esp + 0x168]
mov ebx, dword [esp + 0x16c]
cmp eax, ebx
je 0x44c29f
mov ecx, eax
cmp dword [ecx], esi
je 0x44c2c4
add ecx, 4
cmp ecx, ebx
jne 0x44c294
mov ecx, dword [esp + 0x170]
cmp ebx, ecx
jae 0x44c558
test ebx, ebx
je 0x44c439
mov dword [ebx], esi
add ebx, 4
mov esi, ebx
mov dword [esp + 0x16c], esi
mov esi, dword [esp + 0x7c]
lea eax, [esi + 1]
cmp eax, 2
jb 0x44c323
push esi
call dword [sym.imp.KERNEL32.dll_GetFileType]
and eax, 0xfffffffd
cmp eax, 1
jne 0x44c323
mov eax, dword [esp + 0x168]
mov ebx, dword [esp + 0x16c]
cmp eax, ebx
je 0x44c2fe
mov ecx, eax
cmp dword [ecx], esi
je 0x44c323
add ecx, 4
cmp ecx, ebx
jne 0x44c2f3
mov ecx, dword [esp + 0x170]
cmp ebx, ecx
jae 0x44c603
test ebx, ebx
je 0x44c439
mov dword [ebx], esi
add ebx, 4
mov esi, ebx
mov dword [esp + 0x16c], esi
mov esi, dword [esp + 0x80]
lea eax, [esi + 1]
cmp eax, 2
jb 0x44c385
push esi
call dword [sym.imp.KERNEL32.dll_GetFileType]
and eax, 0xfffffffd
cmp eax, 1
jne 0x44c385
mov eax, dword [esp + 0x168]
mov ebx, dword [esp + 0x16c]
cmp eax, ebx
je 0x44c360
mov ecx, eax
cmp dword [ecx], esi
je 0x44c385
add ecx, 4
cmp ecx, ebx
jne 0x44c355
mov ecx, dword [esp + 0x170]
cmp ebx, ecx
jae 0x44c6b6
test ebx, ebx
je 0x44c439
mov dword [ebx], esi
add ebx, 4
mov esi, ebx
mov dword [esp + 0x16c], esi
mov esi, dword [esp + 0x168]
mov ebx, dword [esp + 0x16c]
sub ebx, esi
je 0x44c443
mov ecx, dword [0x55727c]
mov eax, dword [esp + 0x84]
mov dword [esp + 0xc], eax
call dword [0x53cee4]
xor eax, eax
push eax
push eax
push ebx
push esi
push 0x20002
push eax
push dword [esp + 0x24]
call ecx
test eax, eax
je 0x44c3e2
lea eax, [ebp + 8]
mov eax, dword [eax]
mov dword [esp + 0xc], eax
mov dword [esp + 0x18], 0x80000
lea ebx, [esp + 0x30]
jmp 0x44ba50
push 2
call fcn.0046d8e0
add esp, 4
test al, al
je 0x44c42e
call fcn.004d4ac0
lea esi, [esp + 0xc8]
mov ecx, esi
push eax
push 2
push 0x20a
push str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
call fcn.004d4c90
lea eax, [esp + 0xd0]
push 0x19
push 0x537110
push eax
call fcn.00454f30
add esp, 0xc
mov ecx, esi
call fcn.004d4cf0
mov esi, dword [esp + 0x10]
mov eax, esi
jmp 0x44ba26
push str....._third_partylibc_srcinclude__memoryconstruct_at.h:40:_assertion___location___nullptr_failed:_null_pointer_given_to_construct_at_n
jmp 0x44b690
push str....._third_partylibc_srcinclude_vector:1411:_assertion___n___size___failed:_vector___index_out_of_bounds_n
jmp 0x44b690
push ecx
call fcn.0048d98d
add esp, 4
mov edx, dword [esp + 0x170]
mov ebx, dword [esp + 0x16c]
jmp 0x44bddb
push 0x557280
call fcn.0048d9d1
add esp, 4
cmp dword [0x557280], 0xffffffff
jne 0x44b99a
cmp dword [0x557274], 0
je 0x44c4bb
push 0
push str.::UpdateProcThreadAttribute
push 0x529b4a
call fcn.00450940
add esp, 0xc
mov dword [0x55727c], eax
push 0x557280
call fcn.0048da4b
add esp, 4
mov edi, dword [esp + 0x14]
jmp 0x44b99a
xor eax, eax
jmp 0x44c4a0
push str....._third_partylibc_srcinclude__stringchar_traits.h:145:_assertion__std::__is_pointer_in_range___s1____s1____n____s2__failed:_char_traits::copy:_source_and_destination_ranges_overlap_n
jmp 0x44b690
push 0x557278
call fcn.0048d9d1
add esp, 4
cmp dword [0x557278], 0xffffffff
jne 0x44b979
push 0
push str.::InitializeProcThreadAttributeList
push 0x529b4a
call fcn.00450940
add esp, 0xc
mov dword [0x557274], eax
push 0x557278
call fcn.0048da4b
add esp, 4
jmp 0x44b979
lea ecx, [esp + 0x30]
call fcn.004bb270
int3
push str....._third_partylibc_srcinclude__memoryconstruct_at.h:66:_assertion___loc___nullptr_failed:_null_pointer_given_to_destroy_at_n
jmp 0x44b690
call fcn.004bb3a0
lea ecx, [esp + 0x168]
call fcn.004bb250
xor eax, eax
jmp 0x44be3f
xor eax, eax
jmp 0x44bf28
xor eax, eax
jmp 0x44c011
xor eax, eax
jmp 0x44c103
xor eax, eax
jmp 0x44c1ec
sub ebx, eax
sar ebx, 2
lea edx, [ebx + 1]
cmp edx, 0x40000000
jae 0x44c529
sub ecx, eax
mov eax, ecx
sar eax, 1
cmp eax, edx
cmovbe eax, edx
cmp ecx, 0x7ffffffc
mov edi, 0x3fffffff
cmovb edi, eax
test edi, edi
je 0x44c787
cmp edi, 0x40000000
jae 0x44c524
lea eax, [edi*4]
push eax
call fcn.0048d95d
add esp, 4
shl ebx, 2
add ebx, eax
je 0x44c439
lea edi, [eax + edi*4]
mov dword [ebx], esi
lea esi, [ebx + 4]
mov eax, dword [esp + 0x168]
mov ecx, dword [esp + 0x16c]
sub ecx, eax
sub ebx, ecx
push ecx
push eax
push ebx
call fcn.00491320
add esp, 0xc
mov eax, dword [esp + 0x168]
mov dword [esp + 0x168], ebx
mov dword [esp + 0x16c], esi
mov dword [esp + 0x170], edi
test eax, eax
je 0x44c5fa
push eax
call fcn.0048d98d
add esp, 4
mov edi, dword [esp + 0x14]
jmp 0x44c2bd
sub ebx, eax
sar ebx, 2
lea edx, [ebx + 1]
cmp edx, 0x40000000
jae 0x44c529
sub ecx, eax
mov eax, ecx
sar eax, 1
cmp eax, edx
cmovbe eax, edx
cmp ecx, 0x7ffffffc
mov edi, 0x3fffffff
cmovb edi, eax
test edi, edi
je 0x44c78e
cmp edi, 0x40000000
jae 0x44c524
lea eax, [edi*4]
push eax
call fcn.0048d95d
add esp, 4
shl ebx, 2
add ebx, eax
je 0x44c439
lea edi, [eax + edi*4]
mov dword [ebx], esi
lea esi, [ebx + 4]
mov eax, dword [esp + 0x168]
mov ecx, dword [esp + 0x16c]
sub ecx, eax
sub ebx, ecx
push ecx
push eax
push ebx
call fcn.00491320
add esp, 0xc
mov eax, dword [esp + 0x168]
mov dword [esp + 0x168], ebx
mov dword [esp + 0x16c], esi
mov dword [esp + 0x170], edi
test eax, eax
je 0x44c6ad
push eax
call fcn.0048d98d
add esp, 4
mov edi, dword [esp + 0x14]
jmp 0x44c31c
sub ebx, eax
sar ebx, 2
lea edx, [ebx + 1]
cmp edx, 0x40000000
jae 0x44c529
sub ecx, eax
mov eax, ecx
sar eax, 1
cmp eax, edx
cmovbe eax, edx
cmp ecx, 0x7ffffffc
mov edi, 0x3fffffff
cmovb edi, eax
test edi, edi
je 0x44c795
cmp edi, 0x40000000
jae 0x44c524
lea eax, [edi*4]
push eax
call fcn.0048d95d
add esp, 4
shl ebx, 2
add ebx, eax
je 0x44c439
lea edi, [eax + edi*4]
mov dword [ebx], esi
lea esi, [ebx + 4]
mov eax, dword [esp + 0x168]
mov ecx, dword [esp + 0x16c]
sub ecx, eax
sub ebx, ecx
push ecx
push eax
push ebx
call fcn.00491320
add esp, 0xc
mov eax, dword [esp + 0x168]
mov dword [esp + 0x168], ebx
mov dword [esp + 0x16c], esi
mov dword [esp + 0x170], edi
test eax, eax
je 0x44c760
push eax
call fcn.0048d98d
add esp, 4
mov edi, dword [esp + 0x14]
jmp 0x44c37e
push esi
push ecx
push eax
mov esi, edx
mov dword [esp + 0x18], eax
call fcn.00491320
mov eax, dword [esp + 0x18]
mov ecx, edi
mov edx, esi
add esp, 0xc
jmp 0x44bdbe
xor eax, eax
jmp 0x44c5a1
xor eax, eax
jmp 0x44c654
xor eax, eax
jmp 0x44c707