Function at 0x4cebb6
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0xec
mov dword [ebp - 0xf0], ecx
mov eax, dword [0x5a8564]
xor eax, ebp
mov dword [ebp - 0x10], eax
xor eax, eax
dec eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x40], 0x5741b8
mov dword [ebp - 0x3c], eax
lea esi, [ebp - 0x1c]
mov dword [esi], eax
mov dword [esi + 4], eax
mov dword [esi + 8], eax
mov byte [ebp - 0x38], 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push str..pipecrashpad__lu_
push esi
call fcn.00443150
add esp, 0xc
mov ebx, 0xfffffffc
xor esi, esi
lea edi, [ebp - 0x34]
push edi
call fcn.004edf80
add esp, 4
movzx eax, byte [ebp - 0x11]
test al, al
cmovs eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x1c]
lea ecx, [ebp - 0x1c]
cmovns edx, ecx
mov ecx, edi
push eax
push edx
push esi
call fcn.004283a0
mov ecx, dword [eax + 8]
mov dword [ebp - 0x20], ecx
movsd xmm0, qword [eax]
movsd qword [ebp - 0x28], xmm0
mov dword [eax], esi
mov dword [eax + 4], esi
mov dword [eax + 8], esi
movzx eax, byte [ebp - 0x1d]
lea ecx, [ebp - 0x28]
test al, al
jns 0x4cec5e
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
push eax
push ecx
lea eax, [ebp - 0xe8]
push eax
call fcn.00442120
add esp, 0xc
mov edi, dword [ebp - 0xf0]
cmp byte [edi + 0xb], 0
jns 0x4cec85
push dword [edi]
call fcn.005327b0
add esp, 4
mov eax, dword [ebp - 0xe0]
mov dword [edi + 8], eax
movsd xmm0, qword [ebp - 0xe8]
movsd qword [edi], xmm0
mov byte [ebp - 0xdd], 0
mov word [ebp - 0xe8], 0
cmp byte [ebp - 0x1d], 0
jns 0x4cecbb
push dword [ebp - 0x28]
call fcn.005327b0
add esp, 4
cmp byte [ebp - 0x29], 0
jns 0x4ceccc
push dword [ebp - 0x34]
call fcn.005327b0
add esp, 4
push 1
push edi
call fcn.004ed941
add esp, 8
mov edi, eax
mov eax, dword [ebp - 0x3c]
cmp eax, 0xffffffff
je 0x4cecf2
cmp eax, edi
je 0x4cefe0
push eax
call fcn.004e4654
add esp, 4
mov dword [ebp - 0x3c], edi
cmp edi, 0xffffffff
jne 0x4ced07
lea eax, [ebx + 1]
test ebx, ebx
mov ebx, eax
jne 0x4cec0d
cmp edi, 0xffffffff
je 0x4cef98
cmp byte [ebp - 0x11], 0
jns 0x4ced21
push dword [ebp - 0x1c]
call fcn.005327b0
add esp, 4
xor esi, esi
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], 0xc
mov dword [ebp - 0x14], 1
mov eax, dword [sym.imp.KERNEL32.dll_CreateEventW]
push esi
push esi
push esi
lea ebx, [ebp - 0x1c]
push ebx
mov ebx, eax
call eax
mov dword [0x5a863c], eax
push esi
push esi
push esi
lea eax, [ebp - 0x1c]
push eax
call ebx
mov dword [0x5a8644], eax
push esi
push esi
push esi
lea eax, [ebp - 0x1c]
push eax
call ebx
mov dword [0x5a8648], eax
call 0x4cefe5
push fcn.004cfe70
call dword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
push 0x4cffa0
push 0x16
call fcn.0054b7a3
add esp, 8
push 0x6c
call fcn.00532780
add esp, 4
mov ebx, eax
mov dword [ebp - 0xf4], esp
sub esp, 0x2c
mov esi, esp
mov dword [esi + 0x20], 0x5741b8
mov dword [ebp - 0x3c], 0xffffffff
mov dword [esi + 0x24], edi
mov byte [esi + 0x28], 0
mov edx, dword [ebp + 8]
mov dword [esi], edx
mov eax, dword [ebp + 0xc]
mov dword [esi + 4], eax
mov eax, dword [ebp + 0x10]
mov dword [esi + 8], eax
mov eax, dword [ebp + 0x14]
mov dword [esi + 0xc], eax
mov eax, dword [ebp + 0x18]
mov dword [esi + 0x10], eax
mov eax, dword [ebp + 0x1c]
mov dword [esi + 0x14], eax
mov eax, dword [ebp + 0x28]
mov dword [esi + 0x18], eax
mov eax, dword [ebp - 0xf0]
mov dword [esi + 0x1c], eax
mov ecx, ebx
push edx
call fcn.00452a90
lea ecx, [ebx + 0xc]
push dword [ebp + 0xc]
call fcn.00452a90
lea ecx, [ebx + 0x18]
push dword [ebp + 0x10]
call fcn.00452a90
mov edx, dword [ebp + 0x14]
lea ecx, [ebx + 0x24]
cmp byte [edx + 0xb], 0
js 0x4cee1c
mov eax, dword [edx + 8]
mov dword [ecx + 8], eax
movsd xmm0, qword [edx]
movsd qword [ecx], xmm0
jmp 0x4cee26
push dword [edx + 4]
push dword [edx]
call fcn.004282d0
mov eax, esi
add eax, 0x20
mov dword [ebp - 0xf8], eax
xor eax, eax
mov dword [ebx + 0x34], eax
mov dword [ebx + 0x38], eax
lea eax, [ebx + 0x34]
mov dword [ebx + 0x30], eax
mov edx, dword [ebp + 0x18]
lea eax, [edx + 4]
mov dword [ebp - 0xe8], eax
lea ecx, [ebx + 0x30]
mov eax, dword [edx]
mov dword [ebp - 0x28], eax
mov edx, dword [ebp - 0xe8]
push edx
push eax
call fcn.0040c4e2
lea ecx, [ebx + 0x3c]
push dword [ebp + 0x1c]
call fcn.0040846e
lea ecx, [ebx + 0x48]
push dword [ebp + 0x28]
call fcn.004d0032
mov ecx, ebx
add ecx, 0x54
mov edx, dword [ebp - 0xf0]
cmp byte [edx + 0xb], 0
js 0x4cee97
mov eax, dword [edx + 8]
mov dword [ecx + 8], eax
movsd xmm0, qword [edx]
movsd qword [ecx], xmm0
jmp 0x4ceea1
push dword [edx + 4]
push dword [edx]
call fcn.00429420
mov dword [ebx + 0x60], 0x5741b8
mov dword [esi + 0x24], 0xffffffff
mov dword [ebx + 0x64], edi
mov byte [ebx + 0x68], 0
mov ecx, dword [ebp - 0xf8]
call fcn.004c8f42
mov esp, dword [ebp - 0xf4]
cmp byte [ebp + 0x24], 0
je 0x4cef69
mov edi, dword [ebp - 0xf0]
lea eax, [edi + 0xc]
mov dword [ebp - 0xf4], eax
xor esi, esi
push esi
push esi
push ebx
push 0x4cf020
push esi
push esi
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [ebp - 0xe8], eax
mov ecx, dword [ebp - 0xf4]
lea eax, [ebp - 0xe8]
push eax
call fcn.004cd494
mov bl, 1
cmp dword [edi + 0x10], esi
jne 0x4cef7a
push 2
call fcn.0044f030
add esp, 4
test al, al
je 0x4cef5b
call fcn.0044ff30
lea esi, [ebp - 0xe8]
mov ecx, esi
push eax
push 2
push 0x2b5
push str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
call fcn.004500d0
lea eax, [ebp - 0xe0]
push 0xc
push 0x574707
push eax
call fcn.0040218b
add esp, 0xc
mov ecx, esi
call fcn.00450180
mov dword [0x5b83f8], 2
xor ebx, ebx
jmp 0x4cef7a
mov dword [ebp - 0xec], ebx
push ebx
call fcn.004cf068
add esp, 4
mov ebx, eax
lea ecx, [ebp - 0x40]
call fcn.004c8f42
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005327f1
mov eax, ebx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret 0x24
push 0x139
push str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
push str.CreatePipe
lea esi, [ebp - 0xe8]
push esi
call fcn.00451690
add esp, 0x10
lea ebx, [ebp - 0x28]
push esi
push str.pipe_instance__is_valid__
push ebx
call fcn.00458c20
add esp, 0xc
mov ecx, ebx
push str.CreateNamedPipe
call fcn.0040b260
mov ecx, ebx
call fcn.00458cb0
jmp 0x4ced10
call fcn.0054627b
push ebp
mov ebp, esp
push esi
push 0x5b83dc
call fcn.004edfbc
add esp, 4
push 4
call fcn.00532780
add esp, 4
mov esi, eax
mov ecx, eax
call fcn.00434ee0
mov dword [0x5b83f4], esi
pop esi
pop ebp
ret