Function at 0x4cbb80
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x440
mov eax, dword [0x584fa8]
mov ebx, 0x4000
mov esi, 0x14
xor eax, ebp
mov dword [esp + 0x438], eax
mov dword [esp + 0x10], ecx
mov eax, dword [ecx]
mov dword [esp + 8], eax
lea eax, [esp + 0x80]
mov dword [eax], 0xffffffff
push 0x4000
call fcn.005031e3
add esp, 4
lea ecx, [esp + 0x80]
push ecx
push ebx
mov dword [esp + 0xc], eax
push eax
push 5
call fcn.004b72a8
add esp, 0x10
mov edi, eax
cmp eax, 0xc0000023
je 0x4cbbf4
cmp edi, 0xc0000004
jne 0x4cbc23
mov ebx, dword [esp + 0x80]
mov eax, 0x1000
add ebx, eax
push dword [esp + 4]
call fcn.005031ec
add esp, 4
push ebx
call fcn.005031e3
add esp, 4
dec esi
jne 0x4cbbcb
mov dword [esp + 4], eax
jmp 0x4cbcb8
test edi, edi
js 0x4cbcb8
push dword [esp + 8]
call dword [0x57e708]
mov ecx, dword [esp + 4]
mov edi, eax
mov esi, ecx
cmp dword [esi + 0x44], edi
je 0x4cbd21
mov eax, dword [esi]
add esi, eax
test eax, eax
cmove esi, eax
test esi, esi
jne 0x4cbc3d
push 2
call fcn.00427300
mov ecx, dword [esp + 8]
add esp, 4
test al, al
je 0x4cbd00
lea esi, [esp + 0x130]
mov ecx, esi
push 2
push 0x6c
push str..._.._third_party_crashpad_crashpad_snapshot_win_process_reader_win.cc
call fcn.00427390
lea eax, [esp + 0x134]
push 8
push str.process
push eax
call fcn.00401b93
add esp, 0xc
mov ecx, eax
push edi
call fcn.00407310
push 0xa
push str._not_found
push eax
call fcn.00401b93
add esp, 0xc
mov ecx, esi
call fcn.004268f0
jmp 0x4cbcfc
push 2
call fcn.00427300
add esp, 4
test al, al
je 0x4cbcfc
lea esi, [esp + 0x130]
mov ecx, esi
push edi
push 2
push 0x5a
push str..._.._third_party_crashpad_crashpad_snapshot_win_process_reader_win.cc
call fcn.004b7608
lea eax, [esp + 0x134]
push 0x18
push str.NtQuerySystemInformation
push eax
call fcn.00401b93
add esp, 0xc
mov ecx, esi
call fcn.004b762e
mov ecx, dword [esp + 4]
push ecx
call fcn.005031ec
add esp, 4
mov ecx, dword [esp + 0x438]
xor ecx, ebp
call fcn.005031f1
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret 4
test esi, esi
je 0x4cbd00
cmp dword [esi + 4], 0
je 0x4cbd00
mov edx, dword [esp + 0x10]
mov ecx, 4
lea eax, [esp + 0x50]
mov ebx, 8
xor edi, edi
add eax, ecx
mov dword [esp + 0x28], eax
lea eax, [esp + 0x80]
add ecx, eax
add ebx, eax
lea eax, [edx + 0x58]
mov dword [esp + 0x14], ebx
lea ebx, [esi + 0xd8]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x1c], eax
lea eax, [edx + 0xb8]
mov dword [esp + 0x24], eax
xor eax, eax
mov dword [esp + 0x2c], eax
push 0x308
push 0xff
lea eax, [esp + 0x138]
push eax
call fcn.005076c0
add esp, 0xc
push 0x2cc
push edi
lea eax, [esp + 0x138]
push eax
call fcn.005076c0
add esp, 0xc
lea eax, [esp + 0x400]
mov dword [esp + 8], ebx
mov dword [eax + 4], edi
mov dword [eax], edi
mov dword [eax + 0xc], edi
mov dword [eax + 8], edi
mov dword [eax + 0x14], edi
mov dword [eax + 0x10], edi
mov dword [eax + 0x1c], edi
mov dword [eax + 0x18], edi
mov dword [eax + 0x24], edi
mov dword [eax + 0x20], edi
mov dword [eax + 0x2c], edi
mov dword [eax + 0x28], edi
mov dword [eax + 0x30], edi
mov eax, dword [ebx + 4]
mov dword [esp + 0x404], edi
mov dword [esp + 0x400], eax
mov eax, 0xffffffff
mov dword [esp + 0x7c], eax
mov dword [esp + 0x78], eax
mov dword [esp + 0x74], eax
mov dword [esp + 0x30], eax
mov eax, 0x18
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x28]
mov dword [eax + 4], edi
mov dword [eax], edi
mov dword [eax + 0xc], edi
mov dword [eax + 8], edi
mov dword [eax + 0x10], edi
push ebx
lea eax, [esp + 0x54]
push eax
push 0x4a
lea eax, [esp + 0x3c]
push eax
call fcn.004b7584
add esp, 0x10
test eax, eax
js 0x4cbe38
mov edx, dword [esp + 0x30]
xor edi, edi
jmp 0x4cbe7e
mov edi, eax
push 2
call fcn.00427300
add esp, 4
test al, al
je 0x4cbe7a
lea ebx, [esp + 0x80]
mov ecx, ebx
push edi
push 2
push 0x7b
push str..._.._third_party_crashpad_crashpad_snapshot_win_process_reader_win.cc
call fcn.004b7608
push 0xc
push str.NtOpenThread
push dword [esp + 0x14]
call fcn.00401b93
add esp, 0xc
mov ecx, ebx
call fcn.004b762e
xor edi, edi
xor edx, edx
test edx, edx
mov dword [esp + 0x74], 0x5408d4
mov dword [esp + 0x78], edx
mov byte [esp + 0x7c], 0
je 0x4cc324
mov eax, dword [esp + 0x10]
mov bl, byte [eax + 0xd0]
mov eax, dword [esp + 0x400]
mov ecx, dword fs:[0x18]
xor eax, dword [ecx + 0x24]
or eax, dword [esp + 0x404]
jne 0x4cbee2
lea eax, [esp + 0x130]
mov dword [esp + 0x428], 0
push eax
call fcn.00504c20
add esp, 4
mov eax, dword [esp + 8]
xor ebx, ebx
dec ebx
jmp 0x4cc014
mov dword [esp + 0x18], edx
push edx
call dword [0x57e890]
mov edi, eax
test eax, eax
je 0x4cbf3f
cmp edi, 0xffffffff
jne 0x4cbfb7
push 2
call fcn.00427300
add esp, 4
test al, al
mov edi, 0
je 0x4cc324
call fcn.004278b0
lea edi, [esp + 0x80]
mov ecx, edi
push eax
push 2
push 0x97
push str..._.._third_party_crashpad_crashpad_snapshot_win_process_reader_win.cc
call fcn.00427b00
push 0xd
push 0x546638
jmp 0x4cc30f
test bl, bl
je 0x4cbfb7
xor edi, edi
push 1
call fcn.00427300
add esp, 4
test al, al
je 0x4cbfbc
lea ebx, [esp + 0x80]
mov ecx, ebx
push 1
push 0x9c
push str..._.._third_party_crashpad_crashpad_snapshot_win_process_reader_win.cc
call fcn.00427390
push 7
push str.Thread
push dword [esp + 0x14]
call fcn.00401b93
add esp, 0xc
mov ecx, eax
push dword [esp + 0x404]
push dword [esp + 0x404]
call fcn.00407710
push 0x34
push str._should_be_suspended__but_previous_suspend_count_is
push eax
call fcn.00401b93
add esp, 0xc
mov ecx, eax
push 0
call fcn.00407310
mov ecx, ebx
call fcn.004268f0
jmp 0x4cbfbc
movzx eax, bl
sub edi, eax
xor ebx, ebx
mov dword [esp + 0x428], edi
dec ebx
push 0x2cc
push 0
lea edi, [esp + 0x138]
push edi
call fcn.005076c0
add esp, 0xc
mov dword [esp + 0x130], 0x1003f
push edi
mov edi, dword [esp + 0x1c]
push edi
call dword [0x57e738]
test eax, eax
je 0x4cc195
push edi
call dword [0x57e82c]
test eax, eax
mov eax, dword [esp + 8]
mov edi, 0
je 0x4cc2da
mov dword [esp + 0x42c], 0x20
pcmpeqd xmm0, xmm0
mov eax, dword [eax + 8]
mov dword [esp + 0x64], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x68], ebx
movdqa xmmword [esp + 0x50], xmm0
mov dword [esp + 0x430], eax
push edi
push 0x1c
lea eax, [esp + 0x58]
push eax
push edi
push dword [esp + 0x88]
call fcn.004b732a
add esp, 0x14
xor edx, edx
test eax, eax
js 0x4cc147
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x1c]
pcmpeqd xmm0, xmm0
lea edi, [esp + 0x30]
mov dword [esp + 0x44], ebx
mov dword [esp + 0x40], ebx
mov dword [esp + 0x48], ebx
mov dword [esp + 0x40c], edx
movdqa xmmword [esp + 0x30], xmm0
mov dword [esp + 0x408], eax
mov dword [esp + 0x414], edx
mov dword [esp + 0x410], 0xf98
push edi
push edx
push 0x1c
push edx
push eax
call fcn.00494c44
test al, al
mov eax, dword [esp + 0x10]
je 0x4cc28f
cmp byte [ebp + 8], 0
je 0x4cc1d8
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x1c]
pcmpeqd xmm0, xmm0
xor edi, edi
lea edx, [esp + 0x80]
mov dword [esp + 0x94], ebx
mov dword [esp + 0x90], ebx
mov dword [esp + 0x98], ebx
movdqa xmmword [esp + 0x80], xmm0
mov dword [esp + 0x40c], edi
mov dword [esp + 0x408], eax
mov dword [esp + 0x414], edi
mov dword [esp + 0x410], 0xf98
push edx
push edi
push 0x1c
push edi
push eax
call fcn.00494c44
test al, al
mov ebx, 0
mov ecx, 0
je 0x4cc1e2
mov ebx, dword [esp + 0x84]
mov ecx, dword [esp + 0x88]
jmp 0x4cc1e2
mov edi, eax
push 2
call fcn.00427300
add esp, 4
test al, al
je 0x4cc2d6
lea ebx, [esp + 0x80]
mov ecx, ebx
push edi
push 2
push 0x15b
push str..._.._third_party_crashpad_crashpad_snapshot_win_process_reader_win.cc
call fcn.004b7608
push 0x18
push str.NtQueryInformationThread
push dword [esp + 0x14]
call fcn.00401b93
add esp, 0xc
mov ecx, ebx
call fcn.004b762e
jmp 0x4cc2d6
push 2
call fcn.00427300
add esp, 4
test al, al
mov edi, 0
je 0x4cc324
call fcn.004278b0
lea edi, [esp + 0x80]
mov ecx, edi
push eax
push 2
push 0xb6
push str..._.._third_party_crashpad_crashpad_snapshot_win_process_reader_win.cc
call fcn.00427b00
push 0x10
push 0x546683
jmp 0x4cc30f
mov ebx, dword [esp + 0x34]
mov ecx, dword [esp + 0x38]
xor edi, edi
cmp ebx, ecx
mov eax, edi
mov dword [esp + 0x418], ecx
mov dword [esp + 0x41c], edi
sbb eax, edi
jae 0x4cc277
mov dword [esp + 0x20], ebx
xor ebx, ebx
mov dword [esp + 0x18], ecx
push 2
call fcn.00427300
add esp, 4
test al, al
mov eax, 0
je 0x4cc27d
lea ebx, [esp + 0x80]
mov ecx, ebx
push 2
push 0x17b
push str..._.._third_party_crashpad_crashpad_snapshot_win_process_reader_win.cc
call fcn.00427390
push 0x15
push str.invalid_stack_range:
push dword [esp + 0x14]
call fcn.00401b93
add esp, 0xc
mov ecx, eax
push edi
push dword [esp + 0x24]
call fcn.00407710
push 3
push 0x53b40c
push eax
call fcn.00401b93
add esp, 0xc
mov ecx, eax
push edi
push dword [esp + 0x1c]
call fcn.00407710
mov ecx, ebx
call fcn.004268f0
xor ebx, ebx
xor eax, eax
jmp 0x4cc27d
sub ebx, ecx
sbb edi, edi
mov eax, edi
mov dword [esp + 0x424], eax
mov eax, dword [esp + 0x10]
mov dword [esp + 0x420], ebx
mov edi, dword [eax + 0xbc]
cmp edi, dword [eax + 0xc0]
je 0x4cc2c5
mov ebx, eax
mov eax, 0x308
push eax
lea eax, [esp + 0x134]
push eax
push edi
call fcn.00506bc0
add esp, 0xc
mov eax, 0x308
add edi, eax
mov dword [ebx + 0xbc], edi
jmp 0x4cc2d6
mov ecx, dword [esp + 0x24]
lea eax, [esp + 0x130]
push eax
call fcn.004cc436
xor edi, edi
jmp 0x4cc324
push 2
call fcn.00427300
add esp, 4
test al, al
je 0x4cc324
call fcn.004278b0
lea edi, [esp + 0x80]
mov ecx, edi
push eax
push 2
push 0xbc
push str..._.._third_party_crashpad_crashpad_snapshot_win_process_reader_win.cc
call fcn.00427b00
push 0xc
push 0x546694
push dword [esp + 0x1c]
call fcn.00401b93
add esp, 0xc
mov ecx, edi
xor edi, edi
call fcn.00427bc0
lea ecx, [esp + 0x74]
call fcn.004967b6
mov eax, dword [esp + 0x2c]
mov ebx, dword [esp + 8]
inc eax
add ebx, 0x40
cmp eax, dword [esi + 4]
jb 0x4cbd71
jmp 0x4cbcfc