Function at 0x433c0f
Capabilities:
Check mutex and terminate process on windows
Check mutex on windows
Create thread
Terminate process

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x3c
push ebx
push esi
push edi
push str.kdump.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov ebx, dword [sym.imp.KERNEL32.dll_CloseHandle]
xor edi, edi
cmp eax, edi
je 0x433c66
push str.KxEOpenDumpMonitorEx2
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp eax, edi
je 0x433c66
push edi
push edi
push eax
push 0x433720
push edi
push edi
call dword [sym.imp.MSVCR80.dll__beginthreadex]
add esp, 0x18
push 0xa
mov esi, eax
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp esi, edi
je 0x433c66
push esi
call ebx
push dword [ebp + 0x10]
lea eax, [esp + 0x10]
push eax
call fcn.00402cc5
push str.__type
xor ecx, ecx
lea esi, [esp + 0x10]
call fcn.00406410
cmp eax, 0xffffffff
je 0x433cb3
lea eax, [esp + 0x18]
push eax
mov dword [esp + 0x1c], vtable.KWebkitSubProcess.0
call fcn.004339c1
mov edi, eax
mov eax, dword [esp + 0xc]
add eax, 0xfffffff0
call fcn.004012f9
mov eax, edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
lea eax, [esp + 0xc]
push eax
call fcn.004cf65f
cmp eax, 0x59
pop ecx
mov dword [esp + 0x18], edi
je 0x433cd1
cmp eax, 0x74
jle 0x433d1d
cmp eax, 0x7a
jg 0x433d1d
push eax
xor esi, esi
lea eax, [esp + 0x14]
inc esi
push eax
mov dword [esp + 0x20], esi
call fcn.004cf6f1
pop ecx
pop ecx
push dword [esp + 0x10]
push esi
push edi
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x433d0e
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
call fcn.004012f9
jmp 0x433c9c
push esi
call ebx
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
call fcn.004012f9
push dword [esp + 0xc]
lea eax, [esp + 0x20]
push ecx
push eax
call fcn.00401bfc
pop ecx
mov ebx, eax
call fcn.00401fe7
lea esi, [esp + 0x38]
mov ebx, eax
call fcn.00402d29
mov eax, dword [esp + 0x28]
add eax, 0xfffffff0
call fcn.004012f9
mov eax, dword [esp + 0x24]
add eax, 0xfffffff0
call fcn.004012f9
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
call fcn.004012f9
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
call fcn.004012f9
cmp ebx, edi
je 0x433d9e
cmp dword [0x55ac14], edi
je 0x433c9c
push str.change_run
push ecx
call fcn.004022da
add esp, 4
call fcn.00402322
mov esi, eax
call fcn.0040234b
jmp 0x433c9c
call fcn.00433e6c
mov edi, eax
call fcn.00433f67
call fcn.00452896
mov edi, eax
call fcn.0045295e
push dword [ebp + 0x10]
lea eax, [esp + 0x20]
push eax
call fcn.0043379e
call fcn.004243c8
mov eax, dword [esp + 0x24]
add eax, 0xfffffff0
call fcn.004012f9
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
call fcn.004012f9
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
call fcn.004012f9
xor edi, edi
push edi
call dword [sym.imp.ole32.dll_CoInitialize]
push edi
push edi
push edi
push edi
call dword [sym.imp.USER32.dll_DefWindowProcW]
lea eax, [esp + 0x10]
push eax
mov dword [esp + 0x14], 8
mov dword [esp + 0x18], 0x404
call dword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
call fcn.00436172
push dword [ebp + 0x10]
call fcn.00433b8c
pop ecx
mov ebx, eax
call fcn.00433e6c
call fcn.0043405c
call fcn.00452896
mov esi, eax
call fcn.00452a5e
call fcn.00435ffe
cmp dword [esp + 0x18], edi
je 0x433e64
call dword [sym.imp.ole32.dll_CoUninitialize]
mov eax, dword [esp + 0xc]
add eax, 0xfffffff0
call fcn.004012f9
mov eax, ebx
jmp 0x433caa
push edi
call dword [sym.imp.KERNEL32.dll_ExitProcess]