Function at 0x40e8c3
Capabilities:
Access the windows event log
Create process on windows

Disassembly:
push 0x4c
mov eax, 0x43a77e
call fcn.00422e53
mov eax, dword [ecx + 0x2c]
mov edi, dword [ecx + 4]
mov esi, dword [ecx + 0x18]
mov dword [ebp - 0x20], eax
mov eax, dword [ecx + 8]
mov dword [ebp - 0x38], eax
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x34], eax
mov al, byte [ecx + 0x46]
push 0x65aac
mov dword [ebp - 0x50], edi
mov dword [ebp - 0x54], esi
mov byte [ebp - 0x2d], al
mov dword [ebp - 0x4c], 1
call fcn.0041dca4
pop ecx
test eax, eax
je 0x40e914
mov ecx, eax
call fcn.00411b2d
mov ebx, eax
jmp 0x40e916
xor ebx, ebx
test ebx, ebx
je 0x40ee1d
mov ecx, ebx
call fcn.00412981
push 0
push dword [ebp - 0x20]
push 0x443570
call fcn.004127fe
push 0
push edi
push str.vendor
mov ecx, ebx
call fcn.004127fe
push 0
push dword [ebp - 0x38]
mov ecx, ebx
push 0x443588
call fcn.004127fe
push 0
push dword [ebp - 0x34]
mov ecx, ebx
push str.version
call fcn.004127fe
push 0
push esi
push 0x4435a0
mov ecx, ebx
call fcn.004127fe
mov eax, dword [0x44c5d0]
mov dword [ebp - 0x48], eax
push dword [ebp - 0x34]
mov esi, dword [ebp - 0x38]
lea eax, [ebp - 0x48]
and dword [ebp - 4], 0
push esi
push edi
push str._s_s_s
push eax
call fcn.00410fe2
mov eax, dword [0x44c5d0]
add esp, 0x14
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 1
push eax
push str.post_pretendpost_action.php
push 0x442998
push dword [ebp - 0x34]
mov edx, esi
mov ecx, edi
call fcn.00414e10
add esp, 0x10
push 0x1bb
push ecx
push 3
push dword [ebp - 0x3c]
mov ecx, ebx
call fcn.00411dcb
test eax, eax
jne 0x40e9ef
push 0x50
push ecx
push 3
push dword [ebp - 0x3c]
mov ecx, ebx
call fcn.00411dcb
test eax, eax
je 0x40ee05
mov ecx, ebx
call fcn.00412f6d
push eax
lea ecx, [ebp - 0x28]
call fcn.0041131c
mov eax, dword [0x44c5d0]
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x48]
mov edx, str.LogPostResponse
push eax
call fcn.004148cd
mov dword [esp], str.True
push dword [ebp - 0x44]
call fcn.0041e344
pop ecx
pop ecx
test eax, eax
jne 0x40ea66
and dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push 0x4433c4
push str.BugSplatPost.log
push eax
call fcn.0041f6b8
add esp, 0xc
cmp dword [ebp - 0x2c], 0
je 0x40ea66
push dword [ebp - 0x28]
push dword [ebp - 0x2c]
call fcn.004206a6
push dword [ebp - 0x2c]
call fcn.0041f833
add esp, 0xc
push str.:::::_START_STACKKEY_
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x4c], 2
call fcn.00410b51
mov dword [ebp - 0x20], eax
test eax, eax
js 0x40edf1
mov esi, dword [0x44c5d0]
and dword [ebp - 0x4c], 0
mov dword [ebp - 0x2c], esi
mov edi, esi
mov dword [ebp - 0x40], edi
push str.:::::_START_STACKKEY_
mov byte [ebp - 4], 5
call fcn.0041e578
add eax, dword [ebp - 0x20]
pop ecx
push eax
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x28]
call fcn.00410b2c
push eax
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 6
call fcn.00411378
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 5
call fcn.0041115a
push 0x4434a0
lea ecx, [ebp - 0x28]
call fcn.00410b51
mov dword [ebp - 0x24], eax
test eax, eax
js 0x40ebb0
push eax
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x28]
call fcn.00410a23
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 7
call fcn.00411378
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 5
call fcn.0041115a
mov esi, 0x4434a0
push esi
call fcn.0041e578
add eax, dword [ebp - 0x24]
pop ecx
push eax
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x28]
call fcn.00410b2c
push eax
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 8
call fcn.00411378
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 5
call fcn.0041115a
push esi
lea ecx, [ebp - 0x28]
call fcn.00410b51
mov esi, eax
test esi, esi
js 0x40ebad
push esi
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x28]
call fcn.00410a23
push eax
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 9
call fcn.00411378
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 5
call fcn.0041115a
push 0x4434a0
call fcn.0041e578
pop ecx
add eax, esi
lea ecx, [ebp - 0x28]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.00410b2c
push eax
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xa
call fcn.00411378
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 5
call fcn.0041115a
mov edi, dword [ebp - 0x40]
mov esi, dword [ebp - 0x2c]
cmp dword [esi - 8], 0
jle 0x40ed87
push esi
call fcn.004204ae
pop ecx
test eax, eax
js 0x40ed87
cmp byte [ebp - 0x2d], 0
jne 0x40ed87
cmp dword [edi - 8], 0
je 0x40ebf2
push 1
push 0
push 0
push edi
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
jmp 0x40ed87
mov eax, dword [0x44c5d0]
mov dword [ebp - 0x24], eax
mov edi, dword [ebp - 0x50]
lea eax, [ebp - 0x24]
mov edx, dword [ebp - 0x38]
mov ecx, edi
push eax
push str.browse_crashinfo.php
push str.http:__
push dword [ebp - 0x34]
mov byte [ebp - 4], 0xb
call fcn.00414e10
add esp, 0x10
lea ecx, [ebp - 0x20]
push str._vendor
call fcn.0041110a
mov byte [ebp - 4], 0xc
mov eax, dword [ebp - 0x20]
cmp dword [eax - 8], 0
je 0x40ec45
push eax
push dword [eax - 8]
lea ecx, [ebp - 0x24]
call fcn.00410c2e
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0xb
call fcn.0041115a
push edi
lea ecx, [ebp - 0x24]
call fcn.00410c94
push str.app
lea ecx, [ebp - 0x20]
call fcn.0041110a
mov byte [ebp - 4], 0xd
mov eax, dword [ebp - 0x20]
cmp dword [eax - 8], 0
je 0x40ec80
push eax
push dword [eax - 8]
lea ecx, [ebp - 0x24]
call fcn.00410c2e
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0xb
call fcn.0041115a
push dword [ebp - 0x38]
lea ecx, [ebp - 0x24]
call fcn.00410c94
push 0x443528
lea ecx, [ebp - 0x20]
call fcn.0041110a
mov byte [ebp - 4], 0xe
mov eax, dword [ebp - 0x20]
cmp dword [eax - 8], 0
je 0x40ecbd
push eax
push dword [eax - 8]
lea ecx, [ebp - 0x24]
call fcn.00410c2e
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0xb
call fcn.0041115a
push dword [ebp - 0x34]
lea ecx, [ebp - 0x24]
call fcn.00410c94
mov edi, dword [ebp - 0x54]
test edi, edi
je 0x40ed21
push edi
call fcn.0041e578
pop ecx
test eax, eax
je 0x40ed21
push str.key
lea ecx, [ebp - 0x20]
call fcn.0041110a
mov byte [ebp - 4], 0xf
mov eax, dword [ebp - 0x20]
cmp dword [eax - 8], 0
je 0x40ed0c
push eax
push dword [eax - 8]
lea ecx, [ebp - 0x24]
call fcn.00410c2e
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0xb
call fcn.0041115a
push edi
lea ecx, [ebp - 0x24]
call fcn.00410c94
push str.id
lea ecx, [ebp - 0x20]
call fcn.0041110a
mov byte [ebp - 4], 0x10
mov eax, dword [ebp - 0x20]
cmp dword [eax - 8], 0
je 0x40ed47
push eax
push dword [eax - 8]
lea ecx, [ebp - 0x24]
call fcn.00410c2e
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0xb
call fcn.0041115a
cmp dword [esi - 8], 0
je 0x40ed65
push esi
push dword [esi - 8]
lea ecx, [ebp - 0x24]
call fcn.00410c2e
push 1
push 0
push 0
push dword [ebp - 0x24]
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 5
call fcn.0041115a
call fcn.00414b61
push str.BugSplat
push 0
call dword [sym.imp.ADVAPI32.dll_RegisterEventSourceW]
mov esi, eax
test esi, esi
je 0x40ede1
mov eax, dword [ebp - 0x50]
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x38]
push 0
mov dword [ebp - 0x18], eax
call fcn.004111a4
push 0
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x1c]
push eax
push 0
push 3
push 0
push 1
push 0
push 1
push esi
call dword [sym.imp.ADVAPI32.dll_ReportEventW]
push ecx
lea ecx, [ebp - 0x2c]
call fcn.00411235
push esi
call dword [sym.imp.ADVAPI32.dll_DeregisterEventSource]
lea ecx, [ebp - 0x40]
call fcn.0041115a
lea ecx, [ebp - 0x2c]
call fcn.0041115a
lea ecx, [ebp - 0x44]
call fcn.0041115a
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 1
call fcn.0041115a
mov edx, dword [ebx]
mov ecx, ebx
push 1
call dword [edx]
lea ecx, [ebp - 0x3c]
call fcn.0041115a
lea ecx, [ebp - 0x48]
call fcn.0041115a
mov eax, dword [ebp - 0x4c]
call fcn.00422e02
ret