Function at 0x4cf14b0
Capabilities:
Terminate process

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x18
push esi
mov esi, dword [ebp + 8]
push edi
mov edi, 1
cmp esi, edi
mov eax, ecx
mov dword [ebp - 4], eax
mov dword [ebp - 8], edi
mov dword [eax], edi
jle 0x4cf17e9
cmp esi, 2
jne 0x4cf14f5
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + 4]
mov cl, byte [edx]
cmp cl, 0x2d
je 0x4cf14eb
cmp cl, 0x2f
jne 0x4cf14f5
cmp byte [edx + 1], 0x3f
je 0x4cf17e9
xor ecx, ecx
cmp esi, ecx
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x18], ecx
jle 0x4cf16cc
mov dword [ebp - 0xc], edi
push ebx
lea esp, [esp]
mov edx, dword [ebp + 0xc]
mov ebx, dword [edx + ecx*4]
mov edi, str._filtered
mov esi, ebx
mov ecx, 0xa
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x4cf1560
mov ecx, dword [ebp - 0xc]
cmp ecx, dword [ebp + 8]
jge 0x4cf16da
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp + 0xc]
mov esi, dword [ebp - 0xc]
inc ecx
mov dword [ebp - 0x10], ecx
mov ecx, dword [edx + ecx*4]
push ecx
inc esi
mov ecx, eax
mov dword [ebp - 0xc], esi
call fcn.04cf1250
test eax, eax
je 0x4cf16ed
mov eax, dword [ebp - 4]
jmp 0x4cf16ab
mov ecx, dword [ebp - 0x18]
cmp ecx, 7
ja case.default.0x4cf156c
jmp dword [ecx*4 + 0x4cf1808]
test ebx, ebx
je 0x4cf16a8
mov dword [eax + 8], ebx
jmp 0x4cf16a8
push 0xa
lea edx, [ebp - 0x14]
push edx
push ebx
call dword [sym.imp.MSVCR71.dll_strtoul]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0xc], eax
mov eax, dword [ebp - 0x14]
add esp, 0xc
cmp ebx, eax
jne 0x4cf16a5
push ebx
push str.Invalid_value_for_process_id____s_n
jmp 0x4cf1695
push 0xa
lea edx, [ebp - 0x14]
push edx
push ebx
call dword [sym.imp.MSVCR71.dll_strtoul]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x14], eax
mov eax, dword [ebp - 0x14]
add esp, 0xc
cmp ebx, eax
jne 0x4cf16a5
push ebx
push str.Invalid_value_for_thread_id____s_n
jmp 0x4cf1695
lea esi, [eax + 0x22c]
add eax, 0x230
push eax
push esi
push str._X:_X
push ebx
call dword [sym.imp.MSVCR71.dll_sscanf]
add esp, 0x10
test eax, eax
jne 0x4cf160f
push ebx
push str.Invalid_value_for_dump_flags____s_n
mov dword [esi], eax
mov dword [ebp - 8], eax
call dword [sym.imp.MSVCR71.dll_printf]
add esp, 8
test byte [esi], 1
je 0x4cf16a5
call dword [sym.imp.KERNEL32.dll_DebugBreak]
jmp 0x4cf16a5
lea esi, [eax + 0x274]
push esi
push 0x4cf55d4
push ebx
call dword [sym.imp.MSVCR71.dll_sscanf]
add esp, 0xc
test eax, eax
jne 0x4cf16a5
push ebx
push str.Invalid_value_for_DumpInfo____s_n
jmp 0x4cf168f
mov dword [eax + 0x278], ebx
jmp 0x4cf16a8
lea esi, [eax + 0x27c]
push esi
push 0x4cf55d4
push ebx
call dword [sym.imp.MSVCR71.dll_sscanf]
add esp, 0xc
test eax, eax
jne 0x4cf16a5
push ebx
push str.Invalid_value_for_exception_record____s_n
jmp 0x4cf168f
lea esi, [eax + 0x284]
push esi
push 0x4cf55d4
push ebx
call dword [sym.imp.MSVCR71.dll_sscanf]
add esp, 0xc
test eax, eax
jne 0x4cf16a5
push ebx
push str.Invalid_value_for_context____s_n
mov dword [esi], 0
mov dword [ebp - 8], 0
call dword [sym.imp.MSVCR71.dll_printf]
add esp, 8
mov eax, dword [ebp - 4]
inc dword [ebp - 0x18]
mov ecx, dword [ebp - 0x10]
mov esi, dword [ebp - 0xc]
mov edx, dword [ebp + 8]
inc ecx
inc esi
cmp ecx, edx
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0xc], esi
jl 0x4cf1510
mov ecx, dword [ebp - 8]
test ecx, ecx
pop ebx
je 0x4cf170b
mov esi, dword [sym.imp.MSVCR71.dll_printf]
mov dword [eax], 2
jmp 0x4cf1730
push str.Filtered_dumping_requires_version_specific_initialization_string_n
call dword [sym.imp.MSVCR71.dll_printf]
add esp, 4
jmp 0x4cf17fd
push str.Invalid_filter_initialization_string_n
call dword [sym.imp.MSVCR71.dll_printf]
add esp, 4
jmp 0x4cf17fd
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
push eax
jmp 0x4cf17ef
mov edx, dword [0x4cf7064]
mov esi, dword [sym.imp.MSVCR71.dll_printf]
or edx, 0x20000001
push str.Parameter_error_n
mov dword [0x4cf7064], edx
call esi
mov eax, dword [ebp - 4]
add esp, 4
mov ecx, dword [eax + 0x22c]
test ch, 1
je 0x4cf17de
mov ecx, dword [ebp + 8]
dec ecx
push ecx
push str.Input_parameters:__d_supplied_n
call esi
mov edi, dword [ebp - 4]
mov eax, dword [edi + 8]
add esp, 8
test eax, eax
jne 0x4cf175d
mov eax, str._NULL_
push eax
push str.____Program_name___s
call esi
mov edx, dword [edi + 0xc]
push edx
push str.____ProcessID___d_n
call esi
mov eax, dword [edi + 0x14]
push eax
push str.____ThreadId___d_n
call esi
mov ecx, dword [edi + 0x22c]
push ecx
push str.____Flags__0x_X_n
call esi
mov edx, dword [edi + 0x230]
push edx
push str.____Override_flags__0x_X_n
call esi
mov eax, dword [edi + 0x274]
push eax
push str.____SqlInfoPtr__0x_p_n
call esi
mov eax, dword [edi + 0x278]
add esp, 0x30
test eax, eax
jne 0x4cf17b7
mov eax, str._NULL_
push eax
push str.____DumpDir___s_n
call esi
mov ecx, dword [edi + 0x27c]
push ecx
push str.____ExceptionRecordPtr__0x_p_n
call esi
mov edx, dword [edi + 0x284]
push edx
push str.____ContextPtr__0x_p_n
call esi
add esp, 0x18
mov eax, dword [ebp - 8]
pop edi
pop esi
mov esp, ebp
pop ebp
ret 8
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax]
push ecx
push str.Usage:__s__ProcessID__ThreadId__Flags_:MinidumpOverrideFlags___SqlInfoPtr__DumpDir__ExceptionRecordPtr__ContextPtr__________filtered__filtered_dump_init_parameters___n
call dword [sym.imp.MSVCR71.dll_printf]
add esp, 8
push 0x20000001
call dword [sym.imp.MSVCR71.dll_exit]
jae 0x4cf181f
iretd
add al, 0x4d
push ss
iretd