Function at 0x42a340
Capabilities:
Create process on windows
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x190
mov eax, dword [0x49c3bc]
lea esi, [ebp + 8]
lea ecx, [esp + 0x178]
xor eax, ebp
mov dword [esp + 0x188], eax
xor eax, eax
mov dword [esp + 0x14], ecx
mov dword [ecx + 4], eax
mov dword [ecx], eax
mov dword [ecx + 8], eax
push ecx
push dword [esi]
call fcn.00441194
add esp, 8
mov edi, dword [esi]
mov esi, dword [edi + 0x3c]
mov ebx, dword [edi + 0x40]
cmp esi, ebx
je 0x42a3e4
lea edi, [esp + 0xc0]
movzx eax, byte [esi + 0xb]
mov ecx, esi
test al, al
jns 0x42a3a2
mov ecx, dword [esi]
mov eax, dword [esi + 4]
push eax
push ecx
push edi
call fcn.00426070
add esp, 0xc
lea eax, [esp + 0x178]
push eax
push edi
call fcn.00441194
add esp, 8
xor eax, eax
cmp byte [esp + 0xcb], al
jns 0x42a3d8
push dword [esp + 0xc0]
call fcn.004591e8
add esp, 4
add esi, 0xc
cmp ebx, esi
jne 0x42a393
lea eax, [ebp + 8]
mov edi, dword [eax]
movzx eax, byte [edi + 0x17]
test al, al
jns 0x42a3ef
mov eax, dword [edi + 0x10]
test eax, eax
je 0x42a458
lea esi, [esp + 0x40]
add edi, 0xc
mov ecx, esi
push str.database
call fcn.00402b10
lea ebx, [esp + 0xc0]
mov edx, esi
mov ecx, ebx
push edi
call fcn.0042bc88
add esp, 4
lea eax, [esp + 0x178]
push eax
push ebx
call fcn.00441194
add esp, 8
cmp byte [ebx + 0xb], 0
jns 0x42a440
push dword [esp + 0xc0]
call fcn.004591e8
add esp, 4
cmp byte [esp + 0x4b], 0
jns 0x42a453
push dword [esp + 0x40]
call fcn.004591e8
add esp, 4
lea eax, [ebp + 8]
mov edi, dword [eax]
movzx eax, byte [edi + 0x23]
test al, al
jns 0x42a463
mov eax, dword [edi + 0x1c]
test eax, eax
je 0x42a4cc
lea esi, [esp + 0x40]
add edi, 0x18
mov ecx, esi
push str.metrics_dir
call fcn.00402b10
lea ebx, [esp + 0xc0]
mov edx, esi
mov ecx, ebx
push edi
call fcn.0042bc88
add esp, 4
lea eax, [esp + 0x178]
push eax
push ebx
call fcn.00441194
add esp, 8
cmp byte [ebx + 0xb], 0
jns 0x42a4b4
push dword [esp + 0xc0]
call fcn.004591e8
add esp, 4
cmp byte [esp + 0x4b], 0
jns 0x42a4c7
push dword [esp + 0x40]
call fcn.004591e8
add esp, 4
lea eax, [ebp + 8]
mov edi, dword [eax]
movzx eax, byte [edi + 0x2f]
test al, al
js 0x42a4d8
mov ecx, eax
jmp 0x42a4db
mov ecx, dword [edi + 0x28]
test ecx, ecx
je 0x42a580
test al, al
jns 0x42a4ef
mov eax, dword [edi + 0x28]
mov edi, dword [edi + 0x24]
jmp 0x42a4f2
add edi, 0x24
lea ebx, [esp + 0x40]
push eax
push edi
push ebx
call fcn.00426070
add esp, 0xc
lea esi, [esp + 0x90]
mov ecx, esi
push 0x4841de
call fcn.00402b10
lea edi, [esp + 0xc0]
mov edx, esi
mov ecx, edi
push ebx
call fcn.0042bc88
add esp, 4
lea eax, [esp + 0x178]
push eax
push edi
call fcn.00441194
add esp, 8
xor eax, eax
cmp byte [edi + 0xb], al
jns 0x42a54f
push dword [esp + 0xc0]
call fcn.004591e8
add esp, 4
cmp byte [esp + 0x9b], 0
jns 0x42a568
push dword [esp + 0x90]
call fcn.004591e8
add esp, 4
cmp byte [esp + 0x4b], 0
jns 0x42a57b
push dword [esp + 0x40]
call fcn.004591e8
add esp, 4
lea eax, [ebp + 8]
mov edi, dword [eax]
mov esi, dword [edi + 0x30]
add edi, 0x34
cmp edi, esi
je 0x42a6f7
xor ebx, ebx
mov dword [esp + 0xc], edi
lea eax, [esi + 0x10]
push 0x3d
push eax
lea eax, [esp + 0x30]
push eax
call fcn.0042bdc3
add esp, 0xc
movzx eax, byte [esi + 0x27]
test al, al
jns 0x42a5b7
mov eax, dword [esi + 0x20]
mov edx, dword [esi + 0x1c]
jmp 0x42a5ba
lea edx, [esi + 0x1c]
lea ecx, [esp + 0x28]
push eax
push edx
call fcn.0041a09e
mov ecx, dword [eax + 8]
mov dword [esp + 0x98], ecx
lea ecx, [esp + 0x90]
movsd xmm0, qword [eax]
movsd qword [esp + 0x90], xmm0
mov dword [eax], ebx
mov dword [eax + 4], ebx
mov dword [eax + 8], ebx
movzx eax, byte [esp + 0x9b]
test al, al
jns 0x42a605
mov ecx, dword [esp + 0x90]
mov eax, dword [esp + 0x94]
push eax
push ecx
lea eax, [esp + 0x48]
push eax
call fcn.00426070
add esp, 0xc
lea ebx, [esp + 0x16c]
mov ecx, ebx
push str.annotation
call fcn.00402b10
lea edi, [esp + 0xc0]
lea eax, [esp + 0x40]
mov edx, ebx
mov ecx, edi
push eax
call fcn.0042bc88
add esp, 4
lea eax, [esp + 0x178]
push eax
push edi
call fcn.00441194
add esp, 8
xor ebx, ebx
cmp byte [esp + 0xcb], bl
jns 0x42a66a
push dword [esp + 0xc0]
call fcn.004591e8
add esp, 4
cmp byte [esp + 0x177], 0
jns 0x42a683
push dword [esp + 0x16c]
call fcn.004591e8
add esp, 4
cmp byte [esp + 0x4b], 0
mov edi, dword [esp + 0xc]
jns 0x42a69a
push dword [esp + 0x40]
call fcn.004591e8
add esp, 4
cmp byte [esp + 0x9b], 0
jns 0x42a6b3
push dword [esp + 0x90]
call fcn.004591e8
add esp, 4
cmp byte [esp + 0x33], 0
jns 0x42a6c6
push dword [esp + 0x28]
call fcn.004591e8
add esp, 4
mov ecx, dword [esi + 4]
test ecx, ecx
je 0x42a6d7
mov eax, ecx
mov ecx, dword [ecx]
test ecx, ecx
jne 0x42a6cd
jmp 0x42a6ed
mov eax, dword [esi + 8]
cmp dword [eax], esi
je 0x42a6ed
add esi, 8
mov ecx, dword [esi]
mov eax, dword [ecx + 8]
lea esi, [ecx + 8]
cmp dword [eax], ecx
jne 0x42a6e1
cmp edi, eax
mov esi, eax
jne 0x42a594
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 1
push 0x1f0fff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
test eax, eax
mov dword [esp + 0x164], eax
mov byte [esp + 0x168], 0
je 0x42a7c3
lea ecx, [ebp + 8]
xor ebx, ebx
lea esi, [esp + 0x90]
mov edx, dword [ecx]
mov ecx, esi
push ebx
push 0x49f07c
push ebx
push 0x49f070
push ebx
push 0x49f060
push eax
push dword [edx + 0x54]
push dword [0x49c3b0]
push dword [0x49c3ac]
push dword [0x49c3a8]
call fcn.004412a0
lea edi, [esp + 0x28]
mov ecx, esi
push edi
call fcn.004412f6
lea esi, [esp + 0x16c]
mov ecx, esi
push str.__initial_client_data
call fcn.00402b10
movzx eax, byte [edi + 0xb]
test al, al
jns 0x42a78e
mov eax, dword [esp + 0x2c]
mov edi, dword [esp + 0x28]
mov ecx, esi
push eax
push edi
call fcn.0041a09e
mov ecx, dword [eax + 8]
mov dword [esp + 0x48], ecx
movsd xmm0, qword [eax]
movsd qword [esp + 0x40], xmm0
mov dword [eax], ebx
mov dword [eax + 4], ebx
mov dword [eax + 8], ebx
movzx eax, byte [esp + 0x4b]
test al, al
jns 0x42a81c
mov ecx, dword [esp + 0x40]
mov eax, dword [esp + 0x44]
jmp 0x42a820
xor ebx, ebx
push 2
call fcn.0042c980
add esp, 4
test al, al
je 0x42ad58
call sub.KERNEL32.dll_GetLastError
lea esi, [esp + 0xc0]
mov ecx, esi
push eax
push 2
push 0x17d
push str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
call fcn.0042d100
lea eax, [esp + 0xc8]
push 0xb
push 0x4841ed
push eax
call fcn.0041c9c0
add esp, 0xc
mov ecx, esi
call fcn.0042d1c0
xor ebx, ebx
jmp 0x42ad58
lea ecx, [esp + 0x40]
lea edi, [esp + 0xc0]
push eax
push ecx
push edi
call fcn.00426070
add esp, 0xc
lea eax, [esp + 0x178]
push eax
push edi
call fcn.00441194
add esp, 8
cmp byte [edi + 0xb], bl
jns 0x42a857
push dword [esp + 0xc0]
call fcn.004591e8
add esp, 4
cmp byte [esp + 0x4b], 0
jns 0x42a86a
push dword [esp + 0x40]
call fcn.004591e8
add esp, 4
cmp byte [esp + 0x177], 0
jns 0x42a883
push dword [esp + 0x16c]
call fcn.004591e8
add esp, 4
cmp byte [esp + 0x33], 0
jns 0x42a896
push dword [esp + 0x28]
call fcn.004591e8
add esp, 4
mov ebx, dword [sym.imp.KERNEL32.dll_GetStdHandle]
xorps xmm0, xmm0
xor esi, esi
movaps xmmword [esp + 0x60], xmm0
mov dword [esp + 0x84], esi
mov dword [esp + 0x80], esi
movaps xmmword [esp + 0x70], xmm0
movaps xmmword [esp + 0x50], xmm0
movaps xmmword [esp + 0x40], xmm0
mov dword [esp + 0x6c], 0x100
push 0xfffffffffffffff6
call ebx
mov dword [esp + 0x78], eax
push 0xfffffffffffffff5
call ebx
mov dword [esp + 0x7c], eax
push 0xfffffffffffffff4
call ebx
mov dword [esp + 0x16c], esi
mov dword [esp + 0x170], esi
mov dword [esp + 0x38], esi
mov dword [esp + 0x80], eax
mov dword [esp + 0x174], esi
mov byte [esp + 0x3c], 0
mov ecx, dword [0x49f0e0]
mov edx, dword fs:[0x2c]
mov eax, dword [0x49f0a0]
mov ecx, dword [edx + ecx*4]
cmp eax, dword [ecx + 4]
jg 0x42b365
mov ecx, dword [0x49f0e0]
mov edx, dword fs:[0x2c]
mov eax, dword [0x49f0a8]
mov ecx, dword [edx + ecx*4]
cmp eax, dword [ecx + 4]
jg 0x42b3aa
mov ecx, dword [0x49f09c]
test ecx, ecx
je 0x42a9c5
mov eax, dword [0x49f0a4]
test eax, eax
je 0x42a9c5
lea esi, [esp + 0x28]
mov dword [esp + 0x40], 0x48
xor eax, eax
push esi
push eax
push 1
push eax
call ecx
test eax, eax
je 0x42ac13
push 2
call fcn.0042c980
add esp, 4
test al, al
je 0x42ace4
lea esi, [esp + 0xc0]
mov ecx, esi
push 2
push 0x1ae
push str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
call fcn.0042ca20
lea eax, [esp + 0xc4]
push 0x44
push str.InitializeProcThreadAttributeList__size__succeeded__expected_failure
push eax
call fcn.0041c9c0
add esp, 0xc
mov ecx, esi
call fcn.0042c1f0
jmp 0x42ace4
mov dword [esp + 0x40], 0x44
mov dword [esp + 0xc], 0
xor esi, esi
lea eax, [ebp + 8]
mov eax, dword [eax]
movzx edx, byte [eax + 0xb]
test dl, dl
js 0x42a9e8
mov ecx, edx
jmp 0x42a9eb
mov ecx, dword [eax + 4]
cmp ecx, 0xc
mov ebx, 0
jb 0x42aa4d
test dl, dl
jns 0x42a9fc
mov edx, dword [eax + 4]
lea ebx, [eax + 0xc]
add edx, 0xfffffff4
mov ecx, edi
push ebx
push 0xffffffffffffffff
push edx
push eax
call fcn.0041a614
xor eax, eax
cmp byte [esp + 0xcb], al
jns 0x42aa20
mov edi, dword [esp + 0xc0]
push str.rundll32.exe
push edi
call fcn.0046b3b1
add esp, 8
test eax, eax
sete bl
xor eax, eax
cmp byte [esp + 0xcb], al
jns 0x42aa4d
push dword [esp + 0xc0]
call fcn.004591e8
add esp, 4
xor ecx, ecx
cmp byte [esp + 0x183], cl
jns 0x42aa63
mov eax, dword [esp + 0x178]
mov dword [esp + 0x14], eax
mov edi, dword [esp + 0xc]
test bl, bl
jne 0x42aa78
lea eax, [ebp + 8]
mov ecx, dword [eax]
cmp byte [ecx + 0xb], 0
jns 0x42aa78
mov ecx, dword [ecx]
lea eax, [esp + 0x28]
mov ebx, ecx
lea ecx, [esp + 0x40]
xor edx, edx
push eax
push ecx
push edx
push edx
push esi
push 1
push edx
push edx
push dword [esp + 0x34]
push ebx
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x42abbc
push dword [esp + 0x2c]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, eax
push 1
call fcn.0042c980
add esp, 4
test esi, esi
jne 0x42aafc
test al, al
je 0x42aafc
call sub.KERNEL32.dll_GetLastError
lea esi, [esp + 0xc0]
mov ecx, esi
push eax
push 1
push 0x1fe
push str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
call fcn.0042d100
lea eax, [esp + 0xc8]
push 0x12
push str.CloseHandle_thread
push eax
call fcn.0041c9c0
add esp, 0xc
mov ecx, esi
call fcn.0042d1c0
push dword [esp + 0x28]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, eax
push 1
call fcn.0042c980
add esp, 4
test esi, esi
jne 0x42ab58
test al, al
je 0x42ab58
call sub.KERNEL32.dll_GetLastError
lea esi, [esp + 0xc0]
mov ecx, esi
push eax
push 1
push 0x201
push str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
call fcn.0042d100
lea eax, [esp + 0xc8]
push 0x13
push str.CloseHandle_process
push eax
call fcn.0041c9c0
add esp, 0xc
mov ecx, esi
call fcn.0042d1c0
lea eax, [ebp + 8]
lea esi, [esp + 0xc0]
mov ecx, dword [eax]
mov edi, eax
mov dword [esi], 0xffffffff
add ecx, 0x54
push esi
call fcn.0042b8d8
xor eax, eax
lea ecx, [esp + 0x18]
mov dword [esi + 8], eax
mov dword [esi + 4], eax
mov dword [esi + 0x10], eax
mov dword [esi + 0xc], eax
mov dword [esi + 0x18], eax
mov dword [esi + 0x14], eax
mov dword [esi + 0x20], eax
mov dword [esi + 0x1c], eax
mov dword [esi], 2
mov dword [ecx + 4], eax
mov dword [ecx], eax
mov dword [ecx + 8], eax
mov eax, dword [edi]
add eax, 0x48
push ecx
push esi
push eax
call fcn.00440d60
add esp, 0xc
mov ebx, eax
mov edi, dword [esp + 0xc]
jmp 0x42ace8
xor ebx, ebx
push 2
call fcn.0042c980
add esp, 4
test al, al
je 0x42ace8
call sub.KERNEL32.dll_GetLastError
lea esi, [esp + 0xc0]
mov ecx, esi
push eax
push 2
push 0x1f9
push str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
call fcn.0042d100
lea eax, [esp + 0xc8]
push 0xd
push str.CreateProcess
push eax
call fcn.0041c9c0
add esp, 0xc
mov ecx, esi
call fcn.0042d1c0
jmp 0x42ace6
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x42ac98
push dword [esp + 0x28]
call fcn.00459213
add esp, 4
mov dword [esp + 0x84], eax
push esi
push 0
push 1
mov dword [esp + 0x18], eax
push eax
call dword [0x49f09c]
test eax, eax
je 0x42adac
lea esi, [esp + 0x38]
mov ecx, esi
call fcn.0042c010
mov eax, dword [esp + 0x84]
mov dword [esi], eax
lea esi, [esp + 0x16c]
mov ecx, esi
push 8
call fcn.0042be5e
mov ebx, dword [esi + 4]
mov eax, dword [esi + 8]
cmp ebx, eax
je 0x42adf1
mov eax, dword [0x49c3a8]
mov dword [ebx], eax
mov esi, dword [esp + 0x170]
add esi, 4
mov dword [esp + 0x170], esi
jmp 0x42aeb5
push 2
call fcn.0042c980
add esp, 4
test al, al
je 0x42ace4
call sub.KERNEL32.dll_GetLastError
lea esi, [esp + 0xc0]
mov ecx, esi
push eax
push 2
push 0x1b2
push str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
call fcn.0042d100
lea eax, [esp + 0xc8]
push 0x28
push str.InitializeProcThreadAttributeList__size_
push eax
call fcn.0041c9c0
add esp, 0xc
mov ecx, esi
call fcn.0042d1c0
xor edi, edi
xor ebx, ebx
cmp byte [esp + 0x3c], 0
je 0x42ad27
lea esi, [esp + 0xc0]
mov ecx, esi
push str._receiving_
push 0x7b
push str..._.._base_scoped_generic.h
call fcn.0042c100
lea eax, [esp + 0xc4]
push 0x2c
push str.ScopedGeneric_destroyed_with_active_receiver
push eax
call fcn.0041c9c0
add esp, 0xc
mov ecx, esi
call fcn.0042c1f0
lea ecx, [esp + 0x38]
call fcn.0042c010
test edi, edi
je 0x42ad3d
push edi
call fcn.0045921c
add esp, 4
mov eax, dword [esp + 0x16c]
test eax, eax
je 0x42ad58
mov dword [esp + 0x170], eax
push eax
call fcn.004591e8
add esp, 4
lea ecx, [esp + 0x164]
call fcn.00429dfc
cmp byte [esp + 0x183], 0
jns 0x42ad7d
push dword [esp + 0x178]
call fcn.004591e8
add esp, 4
xor eax, eax
lea ecx, [ebp + 8]
inc eax
cmp bl, 1
adc eax, 0
xchg dword [0x49f098], eax
call fcn.0042bc1a
mov ecx, dword [esp + 0x188]
xor ecx, ebp
call fcn.00459221
mov eax, ebx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
push 2
call fcn.0042c980
add esp, 4
test al, al
je 0x42b31d
call sub.KERNEL32.dll_GetLastError
lea esi, [esp + 0xc0]
mov ecx, esi
push eax
push 2
push 0x1bd
push str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
call fcn.0042d100
lea eax, [esp + 0xc8]
push 0x21
push str.InitializeProcThreadAttributeList
jmp 0x42b30d
mov edx, dword [esp + 0x16c]
sub ebx, edx
mov esi, ebx
sar esi, 2
lea ecx, [esi + 1]
cmp ecx, 0x40000000
jae 0x42b3fc
sub eax, edx
mov dword [esp], edx
mov edx, eax
sar edx, 2
cmp edx, 0x1ffffffe
mov edx, 0x3fffffff
ja 0x42ae42
sar eax, 1
cmp eax, ecx
mov edx, eax
cmovb edx, ecx
test edx, edx
je 0x42b324
cmp edx, 0x40000000
jae 0x42b408
lea eax, [edx*4]
mov dword [esp + 4], edx
push eax
call fcn.00459168
mov ecx, dword [esp + 8]
add esp, 4
lea edx, [eax + ecx*4]
mov ecx, dword [0x49c3a8]
lea esi, [eax + esi*4 + 4]
test ebx, ebx
mov dword [esi - 4], ecx
mov ecx, dword [esp]
jle 0x42ae8c
push ebx
push ecx
push eax
mov ebx, eax
mov dword [esp + 0x10], edx
call fcn.0045caa0
mov edx, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov eax, ebx
add esp, 0xc
test ecx, ecx
mov dword [esp + 0x16c], eax
mov dword [esp + 0x170], esi
mov dword [esp + 0x174], edx
je 0x42aeb5
push ecx
call fcn.004591e8
add esp, 4
mov esi, dword [esp + 0x170]
mov ebx, dword [esp + 0x174]
cmp esi, ebx
je 0x42aedd
mov eax, dword [0x49c3ac]
mov dword [esi], eax
mov esi, dword [esp + 0x170]
add esi, 4
mov dword [esp + 0x170], esi
jmp 0x42afa4
mov eax, dword [esp + 0x16c]
sub ebx, eax
mov dword [esp + 4], eax
mov edx, ebx
sar edx, 2
lea eax, [edx + 1]
cmp eax, 0x40000000
jae 0x42b3fc
mov esi, 0x3fffffff
cmp edx, 0x1ffffffe
ja 0x42af27
mov esi, ebx
sar esi, 1
cmp esi, eax
cmovb esi, eax
test esi, esi
je 0x42b32d
cmp esi, 0x40000000
jae 0x42b408
lea eax, [esi*4]
push eax
mov dword [esp + 0xc], edx
call fcn.00459168
mov edx, dword [esp + 0xc]
add esp, 4
mov dword [esp], eax
mov ecx, dword [esp]
test ebx, ebx
lea eax, [ecx + esi*4]
lea esi, [ecx + edx*4 + 4]
mov dword [esp + 8], eax
mov eax, dword [0x49c3ac]
mov dword [esi - 4], eax
jle 0x42af6e
push ebx
mov eax, dword [esp + 8]
push eax
push dword [esp + 8]
call fcn.0045caa0
add esp, 0xc
mov eax, dword [esp]
cmp dword [esp + 4], 0
mov ecx, dword [esp + 8]
mov dword [esp + 0x16c], eax
mov dword [esp + 0x170], esi
mov dword [esp + 0x174], ecx
je 0x42afa4
push dword [esp + 4]
call fcn.004591e8
add esp, 4
mov esi, dword [esp + 0x170]
mov ebx, dword [esp + 0x174]
cmp esi, ebx
je 0x42afcc
mov eax, dword [0x49c3b0]
mov dword [esi], eax
mov esi, dword [esp + 0x170]
add esi, 4
mov dword [esp + 0x170], esi
jmp 0x42b093
mov eax, dword [esp + 0x16c]
sub ebx, eax
mov dword [esp + 4], eax
mov edx, ebx
sar edx, 2
lea eax, [edx + 1]
cmp eax, 0x40000000
jae 0x42b3fc
mov esi, 0x3fffffff
cmp edx, 0x1ffffffe
ja 0x42b016
mov esi, ebx
sar esi, 1
cmp esi, eax
cmovb esi, eax
test esi, esi
je 0x42b33b
cmp esi, 0x40000000
jae 0x42b408
lea eax, [esi*4]
push eax
mov dword [esp + 0xc], edx
call fcn.00459168
mov edx, dword [esp + 0xc]
add esp, 4
mov dword [esp], eax
mov ecx, dword [esp]
test ebx, ebx
lea eax, [ecx + esi*4]
lea esi, [ecx + edx*4 + 4]
mov dword [esp + 8], eax
mov eax, dword [0x49c3b0]
mov dword [esi - 4], eax
jle 0x42b05d
push ebx
mov eax, dword [esp + 8]
push eax
push dword [esp + 8]
call fcn.0045caa0
add esp, 0xc
mov eax, dword [esp]
cmp dword [esp + 4], 0
mov ecx, dword [esp + 8]
mov dword [esp + 0x16c], eax
mov dword [esp + 0x170], esi
mov dword [esp + 0x174], ecx
je 0x42b093
push dword [esp + 4]
call fcn.004591e8
add esp, 4
mov esi, dword [esp + 0x170]
lea eax, [ebp + 8]
mov ebx, dword [esp + 0x174]
mov eax, dword [eax]
cmp esi, ebx
je 0x42b0be
mov eax, dword [eax + 0x54]
mov dword [esi], eax
mov esi, dword [esp + 0x170]
add esi, 4
mov dword [esp + 0x170], esi
jmp 0x42b18b
mov dword [esp + 8], eax
mov eax, dword [esp + 0x16c]
sub ebx, eax
mov dword [esp + 4], eax
mov edx, ebx
sar edx, 2
lea eax, [edx + 1]
cmp eax, 0x40000000
jae 0x42b3fc
mov esi, 0x3fffffff
cmp edx, 0x1ffffffe
ja 0x42b10c
mov esi, ebx
sar esi, 1
cmp esi, eax
cmovb esi, eax
test esi, esi
je 0x42b349
cmp esi, 0x40000000
jae 0x42b408
lea eax, [esi*4]
push eax
mov dword [esp + 0x14], edx
call fcn.00459168
mov edx, dword [esp + 0x14]
add esp, 4
mov dword [esp], eax
mov ecx, dword [esp]
test ebx, ebx
lea eax, [ecx + esi*4]
lea esi, [ecx + edx*4 + 4]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 8]
mov eax, dword [eax + 0x54]
mov dword [esi - 4], eax
jle 0x42b155
push ebx
mov eax, dword [esp + 8]
push eax
push dword [esp + 8]
call fcn.0045caa0
add esp, 0xc
mov eax, dword [esp]
cmp dword [esp + 4], 0
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x16c], eax
mov dword [esp + 0x170], esi
mov dword [esp + 0x174], ecx
je 0x42b18b
push dword [esp + 4]
call fcn.004591e8
add esp, 4
mov esi, dword [esp + 0x170]
mov ebx, dword [esp + 0x174]
cmp esi, ebx
je 0x42b1b0
mov eax, dword [esp + 0x164]
mov ecx, 4
mov dword [esi], eax
add dword [esp + 0x170], ecx
jmp 0x42b278
mov ecx, dword [esp + 0x16c]
sub ebx, ecx
mov edx, ebx
sar edx, 2
lea eax, [edx + 1]
cmp eax, 0x40000000
jae 0x42b3fc
mov esi, 0x3fffffff
cmp edx, 0x1ffffffe
ja 0x42b1f6
mov esi, ebx
sar esi, 1
cmp esi, eax
cmovb esi, eax
test esi, esi
je 0x42b357
cmp esi, 0x40000000
jae 0x42b408
lea eax, [esi*4]
push eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
call fcn.00459168
mov edx, dword [esp + 0xc]
mov ecx, dword [esp + 8]
add esp, 4
mov dword [esp], eax
mov eax, dword [esp]
test ebx, ebx
lea esi, [eax + esi*4]
mov dword [esp + 4], esi
mov esi, dword [esp + 0x164]
mov dword [esp + 8], esi
lea esi, [eax + edx*4 + 4]
mov eax, dword [esp + 8]
mov dword [esi - 4], eax
jle 0x42b24f
push ebx
push ecx
push dword [esp + 8]
mov ebx, ecx
call fcn.0045caa0
mov ecx, ebx
add esp, 0xc
mov eax, dword [esp]
mov edx, dword [esp + 4]
test ecx, ecx
mov dword [esp + 0x16c], eax
mov dword [esp + 0x170], esi
mov dword [esp + 0x174], edx
je 0x42b278
push ecx
call fcn.004591e8
add esp, 4
mov edx, dword [esp + 0x78]
lea esi, [esp + 0x16c]
mov ecx, esi
call fcn.0042beea
mov edx, dword [esp + 0x7c]
mov ecx, esi
call fcn.0042beea
mov edx, dword [esp + 0x80]
mov ecx, esi
call fcn.0042beea
mov eax, dword [esi]
mov ecx, dword [esi + 4]
xor edx, edx
sub ecx, eax
push edx
push edx
push ecx
push eax
push 0x20002
push edx
push dword [esp + 0x9c]
call dword [0x49f0a4]
test eax, eax
je 0x42b2d1
mov esi, 0x80000
jmp 0x42a9d7
push 2
call fcn.0042c980
add esp, 4
test al, al
je 0x42b31d
call sub.KERNEL32.dll_GetLastError
lea esi, [esp + 0xc0]
mov ecx, esi
push eax
push 2
push 0x1d7
push str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
call fcn.0042d100
lea eax, [esp + 0xc8]
push 0x19
push str.UpdateProcThreadAttribute
push eax
call fcn.0041c9c0
add esp, 0xc
mov ecx, esi
call fcn.0042d1c0
xor ebx, ebx
jmp 0x42abb3
xor ecx, ecx
xor eax, eax
jmp 0x42ae5a
xor esi, esi
mov dword [esp], 0
jmp 0x42af42
xor esi, esi
mov dword [esp], 0
jmp 0x42b031
xor esi, esi
mov dword [esp], 0
jmp 0x42b127
xor esi, esi
mov dword [esp], 0
jmp 0x42b219
push 0x49f0a0
call fcn.00459267
add esp, 4
cmp dword [0x49f0a0], 0xffffffff
jne 0x42a925
push 0
push str.::InitializeProcThreadAttributeList
push 0x484156
call fcn.004413a0
add esp, 0xc
mov dword [0x49f09c], eax
push 0x49f0a0
call fcn.004592dd
add esp, 4
jmp 0x42a925
push 0x49f0a8
call fcn.00459267
add esp, 4
cmp dword [0x49f0a8], 0xffffffff
jne 0x42a946
cmp dword [0x49f09c], 0
je 0x42b3e3
push 0
push str.::UpdateProcThreadAttribute
push 0x484156
call fcn.004413a0
add esp, 0xc
jmp 0x42b3e5
xor eax, eax
mov dword [0x49f0a4], eax
push 0x49f0a8
call fcn.004592dd
add esp, 4
jmp 0x42a946
lea ecx, [esp + 0x16c]
call fcn.0041b7dc
call fcn.0046cb17
int3