Function at 0x4443b8
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x1c0
mov eax, dword [0x4e3014]
xor eax, ebp
mov dword [esp + 0x1b8], eax
call fcn.0046c578
test al, al
jne 0x445140
lea ecx, [ebp + 8]
xor eax, eax
lea edx, [esp + 0x1a8]
mov dword [edx + 4], eax
mov dword [edx], eax
mov dword [edx + 8], eax
mov edi, dword [ecx]
mov dword [esp + 0xc], edx
push edx
push edi
call fcn.0046c59c
add esp, 8
mov esi, dword [edi + 0x3c]
mov dword [esp + 4], edi
mov edi, dword [edi + 0x40]
cmp esi, edi
je 0x444466
lea ebx, [esp + 0xf4]
movzx eax, byte [esi + 0xb]
mov ecx, esi
test al, al
jns 0x44442a
mov ecx, dword [esi]
mov eax, dword [esi + 4]
push eax
push ecx
push ebx
call fcn.0043d090
add esp, 0xc
lea eax, [esp + 0x1a8]
push eax
push ebx
call fcn.0046c59c
add esp, 8
cmp byte [esp + 0xff], 0
jns 0x44445f
push dword [esp + 0xf4]
call fcn.0049893c
add esp, 4
add esi, 0xc
cmp esi, edi
jne 0x44441b
mov ebx, dword [esp + 4]
movzx eax, byte [ebx + 0x17]
test al, al
jns 0x444475
mov eax, dword [ebx + 0x10]
lea ecx, [ebx + 0xc]
mov dword [esp + 0x10], ecx
test eax, eax
je 0x4444e0
lea esi, [esp + 0x60]
mov ecx, esi
push str.database
call fcn.00412ade
lea edi, [esp + 0xf4]
mov ecx, edi
mov edx, esi
push dword [esp + 0x10]
call fcn.00445ef8
add esp, 4
lea eax, [esp + 0x1a8]
push eax
push edi
call fcn.0046c59c
add esp, 8
cmp byte [edi + 0xb], 0
jns 0x4444cd
push dword [esp + 0xf4]
call fcn.0049893c
add esp, 4
cmp byte [esp + 0x6b], 0
jns 0x4444e0
push dword [esp + 0x60]
call fcn.0049893c
add esp, 4
movzx eax, byte [ebx + 0x23]
test al, al
jns 0x4444eb
mov eax, dword [ebx + 0x1c]
test eax, eax
je 0x444553
add ebx, 0x18
lea esi, [esp + 0x60]
mov ecx, esi
push str.metrics_dir
call fcn.00412ade
lea edi, [esp + 0xf4]
mov ecx, edi
mov edx, esi
push ebx
call fcn.00445ef8
add esp, 4
lea eax, [esp + 0x1a8]
push eax
push edi
call fcn.0046c59c
add esp, 8
cmp byte [edi + 0xb], 0
jns 0x44453c
push dword [esp + 0xf4]
call fcn.0049893c
add esp, 4
cmp byte [esp + 0x6b], 0
jns 0x44454f
push dword [esp + 0x60]
call fcn.0049893c
add esp, 4
mov ebx, dword [esp + 4]
movzx eax, byte [ebx + 0x2f]
test al, al
js 0x44455f
mov ecx, eax
jmp 0x444562
mov ecx, dword [ebx + 0x28]
test ecx, ecx
je 0x444605
test al, al
jns 0x444576
mov ecx, dword [ebx + 0x24]
mov eax, dword [ebx + 0x28]
jmp 0x444579
lea ecx, [ebx + 0x24]
lea ebx, [esp + 0x60]
push eax
push ecx
push ebx
call fcn.0043d090
add esp, 0xc
lea esi, [esp + 0xb0]
mov ecx, esi
push 0x4d39c1
call fcn.00412ade
lea edi, [esp + 0xf4]
mov ecx, edi
mov edx, esi
push ebx
call fcn.00445ef8
add esp, 4
lea eax, [esp + 0x1a8]
push eax
push edi
call fcn.0046c59c
add esp, 8
cmp byte [edi + 0xb], 0
jns 0x4445d5
push dword [esp + 0xf4]
call fcn.0049893c
add esp, 4
cmp byte [esp + 0xbb], 0
jns 0x4445ee
push dword [esp + 0xb0]
call fcn.0049893c
add esp, 4
cmp byte [esp + 0x6b], 0
mov ebx, dword [esp + 4]
jns 0x444605
push dword [esp + 0x60]
call fcn.0049893c
add esp, 4
mov eax, ebx
mov ebx, dword [ebx + 0x30]
mov dword [esp + 0x19c], ebx
add eax, 0x34
mov dword [esp + 8], eax
cmp ebx, eax
je 0x44475f
lea eax, [ebx + 0x10]
push 0x3d
push eax
lea eax, [esp + 0x38]
push eax
call fcn.00418378
add esp, 0xc
movzx eax, byte [ebx + 0x27]
test al, al
jns 0x444643
mov eax, dword [ebx + 0x20]
mov ebx, dword [ebx + 0x1c]
jmp 0x444646
add ebx, 0x1c
lea ecx, [esp + 0x30]
push eax
push ebx
call fcn.00432d60
mov ecx, dword [eax + 8]
mov dword [esp + 0xb8], ecx
movq xmm0, qword [eax]
movq qword [esp + 0xb0], xmm0
xor ecx, ecx
mov dword [eax], ecx
mov dword [eax + 4], ecx
mov dword [eax + 8], ecx
movzx eax, byte [esp + 0xbb]
lea ecx, [esp + 0xb0]
test al, al
jns 0x444693
mov ecx, dword [esp + 0xb0]
mov eax, dword [esp + 0xb4]
push eax
push ecx
lea ebx, [esp + 0x68]
push ebx
call fcn.0043d090
add esp, 0xc
lea esi, [esp + 0x20]
mov ecx, esi
push str.annotation
call fcn.00412ade
lea edi, [esp + 0xf4]
mov ecx, edi
mov edx, esi
push ebx
call fcn.00445ef8
add esp, 4
lea eax, [esp + 0x1a8]
push eax
push edi
call fcn.0046c59c
add esp, 8
cmp byte [esp + 0xff], 0
jns 0x4446f0
push dword [esp + 0xf4]
call fcn.0049893c
add esp, 4
cmp byte [esp + 0x2b], 0
jns 0x444703
push dword [esp + 0x20]
call fcn.0049893c
add esp, 4
cmp byte [esp + 0x6b], 0
jns 0x444716
push dword [esp + 0x60]
call fcn.0049893c
add esp, 4
cmp byte [esp + 0xbb], 0
jns 0x44472f
push dword [esp + 0xb0]
call fcn.0049893c
add esp, 4
cmp byte [esp + 0x3b], 0
jns 0x444742
push dword [esp + 0x30]
call fcn.0049893c
add esp, 4
lea ecx, [esp + 0x19c]
call fcn.00445d72
mov ebx, dword [esp + 0x19c]
cmp ebx, dword [esp + 8]
jne 0x444620
mov eax, dword [esp + 4]
mov ebx, dword [eax + 0x48]
mov eax, dword [eax + 0x4c]
mov dword [esp + 8], eax
cmp ebx, eax
je 0x4447db
lea edi, [esp + 0x60]
mov ecx, edi
push str.attachment
call fcn.00412ade
lea esi, [esp + 0xf4]
mov ecx, esi
mov edx, edi
push ebx
call fcn.00445ef8
add esp, 4
lea eax, [esp + 0x1a8]
push eax
push esi
call fcn.0046c59c
add esp, 8
cmp byte [esp + 0xff], 0
jns 0x4447bf
push dword [esp + 0xf4]
call fcn.0049893c
add esp, 4
cmp byte [esp + 0x6b], 0
jns 0x4447d2
push dword [esp + 0x60]
call fcn.0049893c
add esp, 4
add ebx, 0xc
cmp ebx, dword [esp + 8]
jne 0x444771
call fcn.0046a8a0
cmp eax, 3
mov ebx, dword [esp + 4]
jge 0x44484d
add ebx, 0x54
lea esi, [esp + 0x60]
mov ecx, esi
push str.pipe_name
call fcn.00412ade
lea edi, [esp + 0xf4]
mov ecx, edi
mov edx, esi
push ebx
call fcn.00445ef8
add esp, 4
lea eax, [esp + 0x1a8]
push eax
push edi
call fcn.0046c59c
add esp, 8
cmp byte [edi + 0xb], 0
jns 0x444836
push dword [esp + 0xf4]
call fcn.0049893c
add esp, 4
cmp byte [esp + 0x6b], 0
jns 0x444849
push dword [esp + 0x60]
call fcn.0049893c
add esp, 4
mov ebx, dword [esp + 4]
xor eax, eax
dec eax
mov dword [esp + 0x1a4], eax
mov dword [esp + 0x1a0], eax
mov dword [esp + 0x19c], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 1
push 0x1f0fff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [esp + 0x19c], 0x4cf644
mov dword [esp + 0x1a0], eax
mov byte [esp + 0x1a4], 0
test eax, eax
je 0x444957
pcmpeqd xmm0, xmm0
lea esi, [esp + 0xb0]
movdqa xmmword [esi + 0x30], xmm0
movdqa xmmword [esi + 0x20], xmm0
movdqa xmmword [esi + 0x10], xmm0
movdqa xmmword [esi], xmm0
xor edi, edi
mov ecx, esi
push edi
push 0x4e93c4
push edi
push 0x5e93c4
push edi
push 0x4e93b8
push edi
push 0x4e93a8
push eax
push dword [ebx + 0x64]
push dword [0x4e4ce0]
push dword [0x4e4cdc]
push dword [0x4e4cd4]
push dword [0x4e4cd0]
call fcn.0046c6b8
lea ebx, [esp + 0x30]
mov ecx, esi
push ebx
call fcn.0046c6e8
lea esi, [esp + 0x20]
mov ecx, esi
push str.__initial_client_data
call fcn.00412ade
movzx eax, byte [ebx + 0xb]
test al, al
jns 0x444922
mov eax, dword [esp + 0x34]
mov ebx, dword [esp + 0x30]
mov ecx, esi
push eax
push ebx
call fcn.00432d60
mov ecx, dword [eax + 8]
mov dword [esp + 0x68], ecx
movq xmm0, qword [eax]
movq qword [esp + 0x60], xmm0
mov dword [eax], edi
mov dword [eax + 4], edi
mov dword [eax + 8], edi
movzx eax, byte [esp + 0x6b]
test al, al
jns 0x4449b7
mov ecx, dword [esp + 0x60]
mov eax, dword [esp + 0x64]
jmp 0x4449bb
xor esi, esi
push 2
call fcn.00451200
add esp, 4
mov ebx, 0
test al, al
je 0x444f7f
call fcn.00451d20
lea esi, [esp + 0xf4]
mov ecx, esi
push eax
push 2
push 0x20f
push str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
call fcn.00451ec0
lea eax, [esp + 0xfc]
push 0xb
push 0x4d39e5
push eax
call fcn.00414114
add esp, 0xc
mov ecx, esi
call fcn.00451f70
xor esi, esi
xor ebx, ebx
jmp 0x444f7f
lea ecx, [esp + 0x60]
lea esi, [esp + 0xf4]
push eax
push ecx
push esi
call fcn.0043d090
add esp, 0xc
lea eax, [esp + 0x1a8]
push eax
push esi
call fcn.0046c59c
add esp, 8
cmp byte [esi + 0xb], 0
jns 0x4449f3
push dword [esp + 0xf4]
call fcn.0049893c
add esp, 4
cmp byte [esp + 0x6b], 0
jns 0x444a06
push dword [esp + 0x60]
call fcn.0049893c
add esp, 4
cmp byte [esp + 0x2b], 0
jns 0x444a19
push dword [esp + 0x20]
call fcn.0049893c
add esp, 4
cmp byte [esp + 0x3b], 0
jns 0x444a2c
push dword [esp + 0x30]
call fcn.0049893c
add esp, 4
pxor xmm0, xmm0
movdqa xmmword [esp + 0x80], xmm0
xor edi, edi
mov dword [esp + 0xa4], edi
mov dword [esp + 0xa0], edi
movdqa xmmword [esp + 0x90], xmm0
movdqa xmmword [esp + 0x70], xmm0
movdqa xmmword [esp + 0x60], xmm0
mov dword [esp + 0x8c], 0x100
mov ebx, dword [sym.imp.KERNEL32.dll_GetStdHandle]
push 0xfffffffffffffff6
call ebx
mov dword [esp + 0x1c], eax
mov dword [esp + 0x98], eax
push 0xfffffffffffffff5
call ebx
mov dword [esp + 0x18], eax
mov dword [esp + 0x9c], eax
push 0xfffffffffffffff4
call ebx
mov ebx, eax
mov dword [esp + 0xa0], eax
mov dword [esp + 0x54], edi
mov dword [esp + 0x58], edi
mov dword [esp + 0x5c], edi
mov dword [esp + 0x50], 0xffffffff
mov dword [esp + 0x48], 0x4cf2cc
mov dword [esp + 0x4c], edi
mov byte [esp + 0x50], 0
mov eax, dword [0x5e93f0]
mov ecx, dword [0x4e71b8]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
cmp eax, dword [ecx + 4]
jg 0x4450a9
mov eax, dword [0x5e93f8]
mov ecx, dword [0x4e71b8]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
cmp eax, dword [ecx + 4]
jg 0x4450ee
mov ecx, dword [0x5e93ec]
test ecx, ecx
je 0x444b90
cmp dword [0x5e93f4], 0
je 0x444b90
mov dword [esp + 0x60], 0x48
lea edi, [esp + 0x30]
mov dword [edi], 0xffffffff
call dword [section..00cfg]
xor eax, eax
push edi
push eax
push 1
push eax
call ecx
test eax, eax
je 0x444bc8
push 2
call fcn.00451200
add esp, 4
test al, al
je 0x444f3b
lea esi, [esp + 0xf4]
mov ecx, esi
push 2
push 0x242
push str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
call fcn.00451260
lea eax, [esp + 0xfc]
push 0x44
push str.InitializeProcThreadAttributeList__size__succeeded__expected_failure
push eax
call fcn.00414114
add esp, 0xc
mov ecx, esi
call fcn.00451670
jmp 0x444f3b
mov dword [esp + 0x60], 0x44
mov dword [esp + 8], 0
xor edi, edi
mov edx, dword [esp + 4]
movzx eax, byte [edx + 0xb]
test al, al
js 0x444bb7
cmp al, 0xc
jb 0x444bc1
jmp 0x444ce2
cmp dword [edx + 4], 0xc
jae 0x444cdf
xor ebx, ebx
jmp 0x444d31
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x444eef
push dword [esp + 0x30]
call fcn.00498973
add esp, 4
mov dword [esp + 8], eax
mov dword [esp + 0xa4], eax
mov ecx, dword [0x5e93ec]
call dword [section..00cfg]
push edi
mov edi, dword [esp + 0xc]
push 0
push 1
push edi
call ecx
test eax, eax
je 0x444ff4
mov eax, dword [esp + 4]
add eax, 0x64
mov dword [esp + 0x14], eax
lea ecx, [esp + 0x48]
call fcn.00446164
lea eax, [esp + 0x48]
mov dword [eax + 4], edi
lea edi, [esp + 0x54]
mov ecx, edi
push 8
call fcn.0044601a
mov ecx, edi
push 0x4e4cd0
call fcn.00414e84
mov ecx, edi
push 0x4e4cd4
call fcn.00414e84
mov ecx, edi
push 0x4e4cdc
call fcn.00414e84
mov ecx, edi
push 0x4e4ce0
call fcn.00414e84
mov ecx, edi
push dword [esp + 0x14]
call fcn.00414e84
mov ecx, edi
lea eax, [esp + 0x1a0]
push eax
call fcn.00414e84
mov ecx, edi
mov edx, dword [esp + 0x1c]
call fcn.00446096
mov ecx, edi
mov edx, dword [esp + 0x18]
call fcn.00446096
mov ecx, edi
mov edx, ebx
call fcn.00446096
mov eax, edi
mov edi, dword [edi]
mov ebx, dword [eax + 4]
sub ebx, edi
je 0x44508b
mov ecx, dword [0x5e93f4]
call dword [section..00cfg]
xor eax, eax
push eax
push eax
push ebx
push edi
push 0x20002
push eax
mov edi, dword [esp + 0x20]
push edi
call ecx
test eax, eax
je 0x445036
mov edi, 0x80000
jmp 0x444ba2
mov eax, dword [edx + 4]
add eax, 0xfffffff4
mov ecx, esi
push dword [esp + 0x10]
push 0xffffffffffffffff
push eax
push edx
call fcn.00433de0
cmp byte [esp + 0xff], 0
jns 0x444d05
mov esi, dword [esp + 0xf4]
push str.rundll32.exe
push esi
call fcn.004afa31
add esp, 8
test eax, eax
sete bl
cmp byte [esp + 0xff], 0
jns 0x444d31
push dword [esp + 0xf4]
call fcn.0049893c
add esp, 4
pcmpeqd xmm0, xmm0
movdqa xmmword [esp + 0x30], xmm0
cmp byte [esp + 0x1b3], 0
jns 0x444d50
mov eax, dword [esp + 0x1a8]
mov dword [esp + 0xc], eax
xor eax, eax
mov ecx, 0
test bl, bl
mov ebx, dword [esp + 4]
jne 0x444d69
cmp byte [ebx + 0xb], 0
mov ecx, ebx
jns 0x444d69
mov ecx, dword [ebx]
lea edx, [esp + 0x30]
lea esi, [esp + 0x60]
push edx
push esi
push eax
push eax
push edi
push 1
push eax
push eax
push dword [esp + 0x2c]
push ecx
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x444e97
push dword [esp + 0x34]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, eax
push 1
call fcn.00451200
add esp, 4
test al, al
mov edi, dword [esp + 8]
je 0x444ded
test esi, esi
jne 0x444ded
call fcn.00451d20
lea esi, [esp + 0xf4]
mov ecx, esi
push eax
push 1
push 0x293
push str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
call fcn.00451ec0
lea eax, [esp + 0xfc]
push 0x12
push str.CloseHandle_thread
push eax
call fcn.00414114
add esp, 0xc
mov ecx, esi
call fcn.00451f70
push dword [esp + 0x30]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, eax
push 1
call fcn.00451200
add esp, 4
test al, al
je 0x444e49
test esi, esi
jne 0x444e49
call fcn.00451d20
lea esi, [esp + 0xf4]
mov ecx, esi
push eax
push 1
push 0x296
push str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
call fcn.00451ec0
lea eax, [esp + 0xfc]
push 0x13
push str.CloseHandle_process
push eax
call fcn.00414114
add esp, 0xc
mov ecx, esi
call fcn.00451f70
lea ecx, [ebx + 0x60]
lea esi, [esp + 0xf4]
mov dword [esi], 0xffffffff
push esi
call fcn.004459ba
xor eax, eax
mov dword [esi + 0x28], eax
mov dword [esi + 0x24], eax
pxor xmm0, xmm0
movdqu xmmword [esi + 0x14], xmm0
movdqu xmmword [esi + 4], xmm0
mov dword [esi], 2
movdqa xmmword [esp + 0x20], xmm0
add ebx, 0x54
lea eax, [esp + 0x20]
push eax
push esi
push ebx
call fcn.0046bd44
add esp, 0xc
mov ebx, eax
jmp 0x444eeb
xor ebx, ebx
push 2
call fcn.00451200
add esp, 4
test al, al
mov edi, dword [esp + 8]
je 0x444eeb
call fcn.00451d20
lea esi, [esp + 0xf4]
mov ecx, esi
push eax
push 2
push 0x28e
push str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
call fcn.00451ec0
lea eax, [esp + 0xfc]
push 0xd
push str.CreateProcess
push eax
call fcn.00414114
add esp, 0xc
mov ecx, esi
call fcn.00451f70
xor ebx, ebx
mov esi, ebx
jmp 0x444f41
push 2
call fcn.00451200
add esp, 4
test al, al
je 0x444f3b
call fcn.00451d20
lea esi, [esp + 0xf4]
mov ecx, esi
push eax
push 2
push 0x246
push str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
call fcn.00451ec0
lea eax, [esp + 0xfc]
push 0x28
push str.InitializeProcThreadAttributeList__size_
push eax
call fcn.00414114
add esp, 0xc
mov ecx, esi
call fcn.00451f70
xor edi, edi
xor esi, esi
xor ebx, ebx
mov dword [esp + 0x48], 0x4cf2cc
cmp byte [esp + 0x50], 0
jne 0x445146
lea ecx, [esp + 0x48]
call fcn.00446164
test edi, edi
je 0x444f6a
push edi
call fcn.0049897c
add esp, 4
mov eax, dword [esp + 0x54]
test eax, eax
je 0x444f7f
mov dword [esp + 0x58], eax
push eax
call fcn.0049893c
add esp, 4
mov dword [esp + 0x19c], 0x4cf644
cmp byte [esp + 0x1a4], 0
jne 0x445143
mov eax, dword [esp + 0x1a0]
test eax, eax
je 0x444fac
push eax
call fcn.0046c342
add esp, 4
cmp byte [esp + 0x1b3], 0
jns 0x444fc5
push dword [esp + 0x1a8]
call fcn.0049893c
add esp, 4
xor eax, eax
mov ecx, esi
cmp cl, 1
adc eax, 1
mov dword [0x5e93e8], eax
lea ecx, [ebp + 8]
call fcn.00445e80
mov ecx, dword [esp + 0x1b8]
xor ecx, ebp
call fcn.00499333
mov eax, ebx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
push 2
call fcn.00451200
add esp, 4
test al, al
je 0x444f3d
call fcn.00451d20
lea esi, [esp + 0xf4]
mov ecx, esi
push eax
push 2
push 0x251
push str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
call fcn.00451ec0
lea eax, [esp + 0xfc]
push 0x21
push str.InitializeProcThreadAttributeList
jmp 0x445076
push 2
call fcn.00451200
add esp, 4
test al, al
je 0x444f3d
call fcn.00451d20
lea esi, [esp + 0xf4]
mov ecx, esi
push eax
push 2
push 0x26c
push str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
call fcn.00451ec0
lea eax, [esp + 0xfc]
push 0x19
push str.UpdateProcThreadAttribute
push eax
call fcn.00414114
add esp, 0xc
mov ecx, esi
call fcn.00451f70
jmp 0x444f3d
push str.vector___index_out_of_bounds
push str.__n___size__
push 0x587
push str....._buildtools_third_partylibc_trunkinclude_vector
push str._s:_d:_assertion__s_failed:__s
call fcn.00414fd8
push 0x5e93f0
call fcn.004989b7
add esp, 4
cmp dword [0x5e93f0], 0xffffffff
jne 0x444ae0
push 0
push str.::InitializeProcThreadAttributeList
push str.kernel32.dll
call fcn.0046c7b4
add esp, 0xc
mov dword [0x5e93ec], eax
push 0x5e93f0
call fcn.00498a2d
add esp, 4
jmp 0x444ae0
push 0x5e93f8
call fcn.004989b7
add esp, 4
cmp dword [0x5e93f8], 0xffffffff
jne 0x444b01
cmp dword [0x5e93ec], 0
je 0x445127
push 0
push str.::UpdateProcThreadAttribute
push str.kernel32.dll
call fcn.0046c7b4
add esp, 0xc
jmp 0x445129
xor eax, eax
mov dword [0x5e93f4], eax
push 0x5e93f8
call fcn.00498a2d
add esp, 4
jmp 0x444b01
int3
int3
int3