Function at 0x414a90
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x174
mov eax, dword [ebp + 0xc]
mov dword [0x43ac80], 0
add eax, 4
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
dec eax
mov dword [esp], eax
call sym._dbg_active_attach
mov ebx, eax
test eax, eax
jne 0x414bf0
call sym._display_crash_dialog
cmp eax, 0xc8
je 0x414d50
cmp eax, 0xc9
je 0x414ce0
cmp eax, 1
je 0x414c20
mov dword [ebp - 0x15c], 0xffffffff
mov dword [ebp - 0x160], 0
mov dword [ebp - 0x164], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], str.detach
mov dword [esp + 0x10], str.info_system
mov dword [esp + 0xc], str.info_threads
mov dword [esp + 8], str.echo_Threads:
mov dword [esp + 4], str.info_share
mov dword [esp], str.echo_Modules:
call sym._parser_generate_command_file
mov esi, eax
cmp eax, 0xffffffff
je 0x414d80
mov eax, dword [0x43ac08]
mov edx, dword [eax + 0x34]
test edx, edx
jne 0x414f00
mov dword [esp + 4], esi
mov dword [esp], 0
mov dword [0x43ac20], 1
call sym._parser_handle
cmp dword [ebp - 0x15c], 0xffffffff
mov edi, dword [sym.imp.kernel32.dll_CloseHandle]
je 0x414bde
mov edx, dword [ebp - 0x160]
mov dword [esp], edx
call dword [sym.imp.kernel32.dll_SetEvent]
mov ecx, dword [ebp - 0x164]
sub esp, 4
mov dword [esp], ecx
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.kernel32.dll_WaitForSingleObject]
mov eax, dword [ebp - 0x15c]
sub esp, 8
mov dword [esp], eax
call edi
mov ecx, dword [ebp - 0x164]
sub esp, 4
mov dword [esp], ecx
call edi
mov edx, dword [ebp - 0x160]
sub esp, 4
mov dword [esp], edx
call edi
sub esp, 4
mov dword [esp], esi
call edi
sub esp, 4
lea esp, [ebp - 0xc]
mov eax, ebx
pop ebx
pop esi
pop edi
pop ebp
ret
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x10
mov dword [esp + 4], 0x11
mov dword [esp], 0
call sym._msgbox_res_id
lea esp, [ebp - 0xc]
mov eax, ebx
pop ebx
pop esi
pop edi
pop ebp
ret
mov dword [esp], str.WINE_CRASH_REPORT_DIR
mov edi, dword [sym.imp.ucrtbase.dll_getenv]
mov dword [0x43ad6c], 1
call edi
mov edx, eax
mov eax, 0xffffffff
test edx, edx
je 0x414ef0
cmp byte [edx], 0
je 0x414ef0
lea eax, [ebp - 0x110]
mov dword [esp + 4], edx
mov dword [ebp - 0x15c], edx
mov dword [esp], eax
call dword [sym.imp.ucrtbase.dll_strcpy]
movzx eax, byte [ebp - 0x10f]
mov ecx, dword [sym.imp.kernel32.dll_CreateDirectoryA]
mov edx, dword [ebp - 0x15c]
test al, al
je 0x414d9e
mov ecx, dword [sym.imp.kernel32.dll_CreateDirectoryA]
lea esi, [ebp - 0x10f]
mov dword [ebp - 0x160], ebx
mov dword [ebp - 0x15c], edx
mov ebx, esi
mov esi, ecx
jmp 0x414cb5
movzx eax, byte [ebx + 1]
inc ebx
test al, al
je 0x414d90
cmp al, 0x2f
jne 0x414ca8
lea eax, [ebp - 0x110]
mov byte [ebx], 0
mov dword [esp + 4], 0
mov dword [esp], eax
call esi
mov byte [ebx], 0x2f
sub esp, 8
jmp 0x414ca8
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 1
mov dword [esp], 0
call dword [sym.imp.kernel32.dll_CreateEventW]
mov dword [ebp - 0x160], eax
sub esp, 0x10
test eax, eax
je 0x414ff8
mov dword [esp], eax
call sym._display_crash_details
mov dword [ebp - 0x15c], 0xffffffff
mov dword [ebp - 0x164], eax
test eax, eax
je 0x414b08
call sym._create_temp_file
mov dword [ebp - 0x15c], eax
mov dword [0x43ac18], eax
jmp 0x414b08
call dword [sym.imp.kernel32.dll_AllocConsole]
call sym._dbg_init_console
mov dword [esp + 4], 0xffffffff
mov dword [esp], 0
call sym._dbg_start_interactive
lea esp, [ebp - 0xc]
mov eax, ebx
pop ebx
pop esi
pop edi
pop ebp
ret
mov ebx, 1
jmp 0x414be6
mov edx, dword [ebp - 0x15c]
mov ebx, dword [ebp - 0x160]
mov ecx, esi
lea eax, [ebp - 0x110]
mov dword [ebp - 0x15c], edx
mov dword [esp + 4], 0
mov dword [esp], eax
call ecx
sub esp, 8
mov dword [esp], str.SteamGameId
call edi
mov dword [esp], 0
lea edi, [ebp - 0x154]
mov esi, eax
call dword [sym.imp.ucrtbase.dll__time32]
mov dword [ebp - 0x158], eax
lea eax, [ebp - 0x158]
mov dword [esp], eax
call dword [sym.imp.ucrtbase.dll__localtime32]
mov ecx, dword [eax]
mov dword [ebp - 0x134], ecx
mov ecx, dword [eax + 4]
mov dword [ebp - 0x130], ecx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x12c], ecx
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0x128], ecx
mov ecx, dword [eax + 0x10]
mov dword [ebp - 0x124], ecx
mov ecx, dword [eax + 0x14]
mov dword [ebp - 0x120], ecx
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x11c], ecx
mov ecx, dword [eax + 0x1c]
mov dword [ebp - 0x118], ecx
mov eax, dword [eax + 0x20]
mov dword [esp + 8], str._Y__m__d__H:_M:_S
mov dword [ebp - 0x114], eax
lea eax, [ebp - 0x134]
mov dword [esp + 0xc], eax
mov dword [esp + 4], 0x20
mov dword [esp], edi
call dword [sym.imp.ucrtbase.dll_strftime]
mov edx, dword [ebp - 0x15c]
test esi, esi
mov eax, 0x44328a
cmove esi, eax
mov ecx, 0x443290
mov eax, 0x44328c
cmp byte [edx], 0x2f
mov dword [esp + 0x14], edi
cmovne eax, ecx
mov dword [esp + 0x18], esi
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x110]
mov dword [esp + 8], str._s_s__s_appid__s_crash.log
mov dword [esp + 4], 0x104
mov dword [esp], eax
call sym._snprintf.constprop.0_1
lea eax, [ebp - 0x110]
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], pe_nt_image_headers32
mov dword [esp + 0x10], 2
mov dword [esp + 0xc], 0
mov dword [esp + 8], 1
mov dword [esp + 4], 0x40000000
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_CreateFileA]
sub esp, 0x1c
mov dword [0x43ac00], eax
jmp 0x414aea
mov dword [0x43ac20], 0
lea edi, [ebp - 0x110]
call sym._dbg_num_processes
test eax, eax
je 0x414f48
mov dword [esp + 4], 0xffffffff
mov dword [esp], edi
call dword [sym.imp.kernel32.dll_WaitForDebugEvent]
sub esp, 8
test eax, eax
je 0x414f48
mov eax, dword [ebp - 0x110]
cmp eax, 3
ja 0x414fd8
test eax, eax
jne 0x414fe1
mov edx, dword [0x43ac08]
mov ecx, 0x443290
mov eax, dword [edx + 0x38]
test eax, eax
mov eax, str.__WOW64_
cmove eax, ecx
mov dword [esp + 0xc], eax
mov eax, dword [edx + 0x18]
mov dword [esp], str.Couldnt_get_first_exception_for_process__04lx__ls_s._nNo_backtrace_available_n
mov dword [esp + 8], eax
mov eax, dword [0x43ac04]
mov dword [esp + 4], eax
call sym._dbg_printf
mov dword [esp + 4], esi
mov dword [esp], 0
mov dword [0x43ac20], 1
call sym._parser_handle
mov eax, dword [ebp - 0x108]
mov dword [esp + 8], 0x10002
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x10c]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_ContinueDebugEvent]
mov dword [0x43ac20], 0
sub esp, 0xc
call sym._wait_exception
jmp 0x414b79
cmp eax, 6
jne 0x414f48
mov eax, edi
call sym._dbg_handle_debug_event
test eax, eax
je 0x414f10
jmp 0x414b5f
mov dword [ebp - 0x164], 0
mov dword [ebp - 0x15c], 0xffffffff
jmp 0x414b08