Function at 0x41b920
Capabilities:
Resume thread
Suspend thread

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0x18]
sub esp, 0xb0
mov eax, dword [eax + 0x24]
push ebx
push esi
mov esi, dword [ebp + 0xc]
push edi
cmp dword [esi + 0x2d0], eax
jne 0x41b965
cmp dword [esi + 0x2d4], 0
jne 0x41b965
push esi
mov dword [esi + 0x2f8], 0
call fcn.00441b20
add esp, 4
pop edi
pop esi
mov al, 1
pop ebx
mov esp, ebp
pop ebp
ret
mov ebx, dword [ebp + 8]
push ebx
call dword [sym.imp.KERNEL32.dll_SuspendThread]
mov edi, eax
cmp edi, 0xffffffff
jne 0x41b9ba
call sub.KERNEL32.dll_GetLastError
push eax
push 2
push 0x96
push str..._src_snapshot_win_process_reader_win.cc
push str.bool___cdecl_crashpad::_anonymous_namespace::FillThreadContextAndSuspendCount_struct_crashpad::process_types::internal::Traits32__void__struct_crashpad::ProcessReaderWin::Thread__enum_crashpad::ProcessSuspensionState_bool_
lea ecx, [ebp - 0xb0]
call fcn.00409060
push 0x44957c
push eax
call fcn.004011c0
add esp, 8
lea ecx, [ebp - 0xb0]
call fcn.00409240
pop edi
pop esi
xor al, al
pop ebx
mov esp, ebp
pop ebp
ret
mov al, byte [ebp + 0x10]
test edi, edi
jne 0x41ba29
cmp al, 1
jne 0x41ba29
push 1
push 0x9b
push str..._src_snapshot_win_process_reader_win.cc
push str.bool___cdecl_crashpad::_anonymous_namespace::FillThreadContextAndSuspendCount_struct_crashpad::process_types::internal::Traits32__void__struct_crashpad::ProcessReaderWin::Thread__enum_crashpad::ProcessSuspensionState_bool_
lea ecx, [ebp - 0xa8]
call fcn.00408ea0
push str.Thread
push eax
call fcn.004011c0
add esp, 8
mov ecx, eax
push str._should_be_suspended__but_previous_suspend_count_is
push dword [esi + 0x2d4]
push dword [esi + 0x2d0]
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_long_unsigned___int64__]
push eax
call fcn.004011c0
add esp, 8
mov ecx, eax
push edi
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
lea ecx, [ebp - 0xa8]
call fcn.00409090
xor edi, edi
jmp 0x41ba2e
movzx eax, al
sub edi, eax
push 0x2c8
lea eax, [esi + 4]
mov dword [esi + 0x2f8], edi
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [esi], 0x1003f
push esi
push ebx
call dword [sym.imp.KERNEL32.dll_GetThreadContext]
test eax, eax
jne 0x41ba85
call sub.KERNEL32.dll_GetLastError
push eax
push 2
push 0xb5
push str..._src_snapshot_win_process_reader_win.cc
push str.bool___cdecl_crashpad::_anonymous_namespace::FillThreadContextAndSuspendCount_struct_crashpad::process_types::internal::Traits32__void__struct_crashpad::ProcessReaderWin::Thread__enum_crashpad::ProcessSuspensionState_bool_
lea ecx, [ebp - 0xb0]
call fcn.00409060
push 0x4495cc
jmp 0x41b99d
push ebx
call dword [sym.imp.KERNEL32.dll_ResumeThread]
test eax, eax
jne 0x41b95c
call sub.KERNEL32.dll_GetLastError
push eax
push 2
push 0xbb
push str..._src_snapshot_win_process_reader_win.cc
push str.bool___cdecl_crashpad::_anonymous_namespace::FillThreadContextAndSuspendCount_struct_crashpad::process_types::internal::Traits32__void__struct_crashpad::ProcessReaderWin::Thread__enum_crashpad::ProcessSuspensionState_bool_
lea ecx, [ebp - 0xb0]
call fcn.00409060
push 0x4495e0
jmp 0x41b99d