Function at 0x405120
Capabilities:
Create process on windows

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x424f4d
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x198
mov eax, dword [0x435080]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x178], 0
cmp dword [0x4359d0], 0
jne 0x405217
push 0x16
xor eax, eax
mov dword [ebp - 0x54], 0
push str.Chrome_path_not_found.
lea ecx, [ebp - 0x64]
mov dword [ebp - 0x50], 7
mov word [ebp - 0x64], ax
call fcn.00407e50
mov edx, str.Error:
mov dword [ebp - 4], 0
mov ecx, 0x4361c0
call fcn.00408800
cmp dword [ebp - 0x50], 8
lea edx, [ebp - 0x64]
push dword [ebp - 0x54]
cmovae edx, dword [ebp - 0x64]
mov ecx, eax
call fcn.00409f30
add esp, 4
push eax
call fcn.00408ac0
mov edx, dword [ebp - 0x50]
add esp, 4
cmp edx, 8
jb 0x405b07
mov ecx, dword [ebp - 0x64]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x405208
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x405b25
push edx
push ecx
call fcn.0040d2e6
add esp, 8
jmp 0x405b07
push 0x98
lea eax, [ebp - 0x118]
push 0
push eax
call fcn.0040efe0
add esp, 4
lea ecx, [ebp - 0x118]
call fcn.00406eb0
mov dword [ebp - 4], 1
mov eax, 0x2aaaaaab
mov ecx, dword [edi + 4]
mov esi, dword [edi]
sub ecx, esi
imul ecx
mov dword [ebp - 0x174], 0
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x4052f6
xor eax, eax
mov dword [ebp - 0x178], eax
nop
cmp dword [eax + esi + 0x14], 8
lea edx, [eax + esi]
mov eax, dword [edx + 0x10]
jb 0x40527f
mov edx, dword [edx]
push eax
lea ecx, [ebp - 0x118]
call fcn.00409f30
mov ecx, dword [edi + 4]
mov eax, 0x2aaaaaab
mov esi, dword [edi]
add esp, 4
sub ecx, esi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
dec eax
add eax, edx
cmp dword [ebp - 0x174], eax
jae 0x4052c1
mov edx, 0x431c04
lea ecx, [ebp - 0x118]
call fcn.00408800
mov esi, dword [edi]
mov ecx, dword [edi + 4]
mov eax, 0x2aaaaaab
add dword [ebp - 0x178], 0x18
sub ecx, esi
inc dword [ebp - 0x174]
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [ebp - 0x174], eax
mov eax, dword [ebp - 0x178]
jb 0x405270
mov byte [ebp - 4], 2
xor eax, eax
mov ecx, dword [ebp - 0xd8]
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 7
mov word [ebp - 0x64], ax
mov dword [ebp - 0x178], 2
test cl, 2
jne 0x40534b
mov eax, dword [ebp - 0xf4]
mov edx, dword [eax]
test edx, edx
je 0x40534b
cmp edx, dword [ebp - 0xdc]
mov eax, dword [ebp - 0x104]
cmovb edx, dword [ebp - 0xdc]
mov ecx, dword [eax]
sub edx, ecx
sar edx, 1
push edx
jmp 0x405375
test cl, 4
jne 0x40537e
mov eax, dword [ebp - 0xf8]
mov edx, dword [eax]
test edx, edx
je 0x40537e
mov eax, dword [ebp - 0x108]
mov ecx, dword [eax]
mov eax, dword [ebp - 0xe8]
mov eax, dword [eax]
add eax, eax
sub eax, ecx
add eax, edx
sar eax, 1
push eax
push ecx
lea ecx, [ebp - 0x64]
call fcn.00407e50
mov edx, 0x431c08
mov dword [ebp - 4], 3
mov ecx, 0x4360c8
call fcn.00408800
mov esi, dword [edi]
mov eax, dword [edi + 4]
mov edi, eax
cmp esi, edi
je 0x4053cd
nop
cmp dword [esi + 0x14], 8
mov edx, esi
jb 0x4053aa
mov edx, dword [esi]
push dword [esi + 0x10]
mov ecx, 0x4360c8
call fcn.00409f30
add esp, 4
mov edx, 0x431c2c
mov ecx, eax
call fcn.00408800
add esi, 0x18
cmp esi, edi
jne 0x4053a0
push 0x4360c8
call fcn.00408ac0
add esp, 4
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x190]
xor eax, eax
mov dword [ebp - 0x180], 0
mov word [ebp - 0x190], ax
mov eax, dword [0x4359d0]
add eax, 0x13
mov dword [ebp - 0x17c], 7
push eax
mov dword [ebp - 0x178], 5
call fcn.004066b0
cmp dword [0x4359d4], 8
mov edx, 0x4359c0
mov esi, dword [ebp - 0x180]
cmovae edx, dword [0x4359c0]
mov eax, dword [ebp - 0x17c]
mov ecx, dword [0x4359d0]
sub eax, esi
mov dword [ebp - 0x174], esi
cmp ecx, eax
ja 0x405486
cmp dword [ebp - 0x17c], 8
lea edi, [esi + ecx]
lea eax, [ecx + ecx]
mov dword [ebp - 0x180], edi
push eax
mov eax, dword [ebp - 0x174]
lea esi, [ebp - 0x190]
cmovae esi, dword [ebp - 0x190]
push edx
lea eax, [esi + eax*2]
push eax
call fcn.0040ea60
add esp, 0xc
xor eax, eax
mov word [esi + edi*2], ax
jmp 0x4054a1
push ecx
push edx
mov byte [ebp - 0x174], 0
push dword [ebp - 0x174]
push ecx
lea ecx, [ebp - 0x190]
call fcn.00409370
mov edx, dword [ebp - 0x17c]
mov eax, edx
mov ecx, dword [ebp - 0x180]
sub eax, ecx
cmp eax, 0x13
jb 0x4054ea
cmp edx, 8
lea esi, [ebp - 0x190]
push 0x26
cmovae esi, dword [ebp - 0x190]
lea edi, [ecx + 0x13]
push 0x431c34
mov dword [ebp - 0x180], edi
lea eax, [esi + ecx*2]
push eax
call fcn.0040ea60
add esp, 0xc
xor eax, eax
mov word [esi + edi*2], ax
jmp 0x40550b
push 0x13
push 0x431c34
mov byte [ebp - 0x174], 0
lea ecx, [ebp - 0x190]
push dword [ebp - 0x174]
push 0x13
call fcn.00409370
cmp dword [ebp - 0x50], 8
lea edx, [ebp - 0x64]
mov esi, dword [ebp - 0x180]
cmovae edx, dword [ebp - 0x64]
mov eax, dword [ebp - 0x17c]
mov ecx, dword [ebp - 0x54]
sub eax, esi
mov dword [ebp - 0x174], esi
cmp ecx, eax
ja 0x405573
cmp dword [ebp - 0x17c], 8
lea edi, [esi + ecx]
lea eax, [ecx + ecx]
mov dword [ebp - 0x180], edi
push eax
mov eax, dword [ebp - 0x174]
lea esi, [ebp - 0x190]
cmovae esi, dword [ebp - 0x190]
push edx
lea eax, [esi + eax*2]
push eax
call fcn.0040ea60
add esp, 0xc
lea ecx, [ebp - 0x190]
xor eax, eax
mov word [esi + edi*2], ax
jmp 0x405590
push ecx
push edx
mov byte [ebp - 0x174], 0
push dword [ebp - 0x174]
push ecx
lea ecx, [ebp - 0x190]
call fcn.00409370
mov ecx, eax
mov dword [ebp - 0x198], 0
xor eax, eax
mov dword [ebp - 0x194], 0
movups xmm0, xmmword [ecx]
mov dword [ebp - 0x178], 0xd
movups xmmword [ebp - 0x1a8], xmm0
movq xmm0, qword [ecx + 0x10]
movq qword [ebp - 0x198], xmm0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
mov word [ecx], ax
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x194]
mov eax, edx
mov ecx, dword [ebp - 0x198]
sub eax, ecx
cmp eax, 1
jb 0x40562b
cmp edx, 8
lea esi, [ebp - 0x1a8]
push 2
cmovae esi, dword [ebp - 0x1a8]
lea edi, [ecx + 1]
push 0x431c30
mov dword [ebp - 0x198], edi
lea eax, [esi + ecx*2]
push eax
call fcn.0040ea60
add esp, 0xc
xor eax, eax
mov word [esi + edi*2], ax
lea eax, [ebp - 0x1a8]
jmp 0x40564c
push 1
push 0x431c30
mov byte [ebp - 0x174], 0
lea ecx, [ebp - 0x1a8]
push dword [ebp - 0x174]
push 1
call fcn.00409370
mov dword [ebp - 0x6c], 0
xor ecx, ecx
mov dword [ebp - 0x68], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x7c], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x6c], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov byte [ebp - 4], 7
mov edx, dword [ebp - 0x194]
cmp edx, 8
jb 0x4056c2
mov ecx, dword [ebp - 0x1a8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4056b8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x405b2a
push edx
push ecx
call fcn.0040d2e6
add esp, 8
xor eax, eax
mov dword [ebp - 0x198], 0
mov dword [ebp - 0x194], 7
mov word [ebp - 0x1a8], ax
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0x17c]
cmp edx, 8
jb 0x405723
mov ecx, dword [ebp - 0x190]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x405719
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x405b2f
push edx
push ecx
call fcn.0040d2e6
add esp, 8
xor eax, eax
mov dword [ebp - 0x180], 0
mov edx, str.Command:
mov dword [ebp - 0x17c], 7
mov ecx, 0x4360c8
mov word [ebp - 0x190], ax
call fcn.00408800
cmp dword [ebp - 0x68], 8
lea edx, [ebp - 0x7c]
push dword [ebp - 0x6c]
cmovae edx, dword [ebp - 0x7c]
mov ecx, eax
call fcn.00409f30
add esp, 4
push eax
call fcn.00408ac0
mov eax, dword [ebp - 0x6c]
lea edx, [ebp - 0x7c]
add esp, 4
mov dword [ebp - 0x44], 0
cmp dword [ebp - 0x68], 8
lea ecx, [ebp - 0x4c]
xorps xmm0, xmm0
mov dword [ebp - 0x44], 0
cmovae edx, dword [ebp - 0x7c]
push dword [ebp - 0x178]
movq qword [ebp - 0x4c], xmm0
mov dword [ebp - 0x4c], 0
lea eax, [edx + eax*2]
mov dword [ebp - 0x48], 0
lea edx, [ebp - 0x7c]
cmovae edx, dword [ebp - 0x7c]
push eax
push edx
call fcn.0040a1b0
mov byte [ebp - 4], 9
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x178], 0
cmp dword [ebp - 0x44], eax
je 0x4057df
xor ecx, ecx
mov word [eax], cx
add eax, 2
mov dword [ebp - 0x48], eax
jmp 0x4057ef
lea ecx, [ebp - 0x178]
push ecx
push eax
lea ecx, [ebp - 0x4c]
call fcn.00408c20
push 0x40
lea eax, [ebp - 0x15c]
mov dword [ebp - 0x160], 0x44
push 0
push eax
call fcn.0040efe0
mov edi, dword [ebp - 0x4c]
lea eax, [ebp - 0x170]
add esp, 0xc
push eax
lea eax, [ebp - 0x160]
push eax
push 0
push 0
push 0
push 0
push 0
push 0
push edi
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x4059ae
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
lea esi, [ebp - 0x16]
mov eax, 0xcccccccd
sub esi, 2
mul ecx
shr edx, 3
lea eax, [edx + edx*4]
add eax, eax
sub ecx, eax
add ecx, 0x30
mov word [esi], cx
mov ecx, edx
test ecx, ecx
jne 0x405845
xor eax, eax
mov dword [ebp - 0x198], edx
mov word [ebp - 0x1a8], ax
lea eax, [ebp - 0x16]
mov dword [ebp - 0x194], 7
cmp esi, eax
je 0x405896
sub eax, esi
lea ecx, [ebp - 0x1a8]
sar eax, 1
push eax
push esi
call fcn.00407e50
lea eax, [ebp - 0x1a8]
mov byte [ebp - 4], 0xa
push eax
mov edx, str.Failed_to_start_Chrome._Error_code:
lea ecx, [ebp - 0x190]
call fcn.00408b00
add esp, 4
mov esi, eax
mov edx, str.Error:
mov byte [ebp - 4], 0xb
mov ecx, 0x4361c0
call fcn.00408800
cmp dword [esi + 0x14], 8
mov ecx, dword [esi + 0x10]
jb 0x4058d4
mov esi, dword [esi]
push ecx
mov edx, esi
mov ecx, eax
call fcn.00409f30
add esp, 4
push eax
call fcn.00408ac0
mov byte [ebp - 4], 0xa
add esp, 4
mov edx, dword [ebp - 0x17c]
cmp edx, 8
jb 0x40592e
mov ecx, dword [ebp - 0x190]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x405924
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x405b34
push edx
push ecx
call fcn.0040d2e6
add esp, 8
xor eax, eax
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x194]
mov dword [ebp - 0x180], 0
mov dword [ebp - 0x17c], 7
mov word [ebp - 0x190], ax
cmp edx, 8
jb 0x40598f
mov ecx, dword [ebp - 0x1a8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x405985
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x405b39
push edx
push ecx
call fcn.0040d2e6
add esp, 8
xor eax, eax
mov dword [ebp - 0x198], 0
mov dword [ebp - 0x194], 7
mov word [ebp - 0x1a8], ax
jmp 0x4059c4
push dword [ebp - 0x170]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
push dword [ebp - 0x16c]
call esi
mov byte [ebp - 4], 8
test edi, edi
je 0x4059fe
mov eax, dword [ebp - 0x44]
sub eax, edi
sar eax, 1
lea ecx, [eax + eax]
mov eax, edi
cmp ecx, 0x1000
jb 0x4059f4
mov edi, dword [edi - 4]
add ecx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x405b3e
push ecx
push edi
call fcn.0040d2e6
add esp, 8
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x68]
cmp edx, 8
jb 0x405a3c
mov ecx, dword [ebp - 0x7c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x405a32
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x405b43
push edx
push ecx
call fcn.0040d2e6
add esp, 8
xor eax, eax
mov byte [ebp - 4], 1
mov word [ebp - 0x7c], ax
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 7
cmp eax, 8
jb 0x405a8e
mov ecx, dword [ebp - 0x64]
lea edx, [eax*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x405a84
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x405b48
push edx
push ecx
call fcn.0040d2e6
add esp, 8
mov eax, dword [ebp - 0x118]
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ostringstream_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__.virtual_0], vtable.std::basic_ostringstream_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__.0
mov eax, dword [ebp - 0x118]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x50]
mov dword [ebp + ecx - 0x11c], eax
lea ecx, [ebp - 0x114]
call fcn.00407630
mov eax, dword [ebp - 0x118]
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__.virtual_0], vtable.std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__.0
mov eax, dword [ebp - 0x118]
mov ecx, dword [eax + 4]
lea eax, [ecx - 8]
mov dword [ebp + ecx - 0x11c], eax
lea eax, [ebp - 0xc8]
mov dword [ebp - 4], 0xc
push eax
mov dword [ebp - 0xc8], vtable.std::ios_base.0
call fcn.0040c135
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0040cf25
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.00411af1
call fcn.00411af1
call fcn.00411af1
call fcn.00411af1
call fcn.00411af1
call fcn.00411af1
call fcn.00411af1
call fcn.00411af1
int3