Function at 0x40f2b0
Capabilities:
Create process on windows
Terminate process

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x498
mov eax, dword [0x47ea94]
xor eax, esp
mov dword [esp + 0x494], eax
push esi
push edi
push 0x4809ac
mov esi, ecx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push 5
call fcn.00408fa0
mov ecx, eax
call fcn.0040a870
test eax, eax
je 0x40f31e
push dword [0x4809a8]
push str.TXBugReport::DoBugReport
push str.__s__:_g_once__d_.
push str.TXBugReport::DoBugReport
push 0x14c
push str.e:qci_workspace_root_workspaces__qci_pipeline_603700_2_ftcommonqmcommonlibdll_bugreportbase_bugreportbase.cpp
push 0
push 5
push 0
call fcn.00408fa0
push eax
call fcn.0040a910
add esp, 0x28
cmp dword [0x4809a8], 0
je 0x40f348
push 0x4809ac
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
xor eax, eax
pop edi
pop esi
mov ecx, dword [esp + 0x494]
xor ecx, esp
call fcn.0045be1b
mov esp, ebp
pop ebp
ret
mov dword [0x4809a8], 1
mov dword [esp + 8], 0
mov eax, dword fs:[0x18]
mov dword [esp + 8], eax
mov ecx, dword [0x4809c4]
mov eax, dword [esp + 8]
mov dword [ecx + 0x20], eax
mov eax, dword [0x4809c4]
mov dword [eax + 0x34c], esi
mov eax, dword [esi]
mov ecx, dword [0x4809c4]
movups xmm0, xmmword [eax]
movups xmmword [ecx + 0x30], xmm0
movups xmm0, xmmword [eax + 0x10]
movups xmmword [ecx + 0x40], xmm0
movups xmm0, xmmword [eax + 0x20]
movups xmmword [ecx + 0x50], xmm0
movups xmm0, xmmword [eax + 0x30]
movups xmmword [ecx + 0x60], xmm0
movups xmm0, xmmword [eax + 0x40]
movups xmmword [ecx + 0x70], xmm0
mov edi, dword [0x4809c4]
mov ecx, 0xb3
mov esi, dword [esi + 4]
sub edi, 0xffffff80
rep movsd dword es:[edi], dword [esi]
mov eax, dword [0x4809c4]
mov dword [eax + 0x5f4], 0
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov ecx, dword [0x4809c4]
mov dword [ecx + 0x18], eax
mov eax, dword [0x48098c]
test eax, eax
je 0x40f3e7
call eax
push 0
push 0
push 1
lea eax, [esp + 0x20]
mov dword [esp + 0x20], 0xc
push eax
mov dword [esp + 0x28], 0
mov dword [esp + 0x2c], 1
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 1
push 0x1f0fff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
push 0x20a
mov edi, eax
lea eax, [esp + 0x7c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x78]
push 0
push eax
push 0x105
push 0
push str.bugreport.exe
push 0
call dword [sym.imp.KERNEL32.dll_SearchPathW]
push 5
call fcn.00408fa0
mov ecx, eax
call fcn.0040a870
test eax, eax
je 0x40f49d
lea eax, [esp + 0x78]
push eax
push esi
push edi
push str.TXBugReport::DoBugReport
push str.__s__:_hClientProcess_0x_x___hEvent_0x_x___wszBugreport__s_.
push str.TXBugReport::DoBugReport
push 0x16e
push str.e:qci_workspace_root_workspaces__qci_pipeline_603700_2_ftcommonqmcommonlibdll_bugreportbase_bugreportbase.cpp
push 0
push 5
push 0
call fcn.00408fa0
push eax
call fcn.0040a910
add esp, 0x30
test edi, edi
je 0x40f62b
test esi, esi
je 0x40f62b
cmp word [esp + 0x78], 0
je 0x40f62b
push 0x20a
lea eax, [esp + 0x28c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push dword [0x4809c4]
lea eax, [esp + 0x80]
push edi
push esi
push eax
push str.__s__bugreport__buginfo:_p:_p:_p:_lu
push 0xffffffffffffffff
lea eax, [esp + 0x2a4]
push 0x105
push eax
call fcn.0040c7f0
add esp, 0x24
mov dword [esp + 0x30], 0x44
lea eax, [esp + 0x34]
xorps xmm0, xmm0
movaps xmmword [esp + 0x20], xmm0
push 0x40
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [esp + 0x5c], 0x81
mov eax, 1
mov word [esp + 0x60], ax
lea eax, [esp + 0x20]
push eax
lea eax, [esp + 0x34]
push eax
push 0
push 0
push 0
push 1
push 0
push 0
lea eax, [esp + 0x2a8]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
push 5
mov dword [esp + 0x10], eax
call fcn.00408fa0
mov ecx, eax
call fcn.0040a870
test eax, eax
je 0x40f5ab
lea eax, [esp + 0x288]
push eax
push dword [esp + 0x10]
push str.TXBugReport::DoBugReport
push str.__s__:_bRet__d___wszCmdLine__s_.
push str.TXBugReport::DoBugReport
push 0x17f
push str.e:qci_workspace_root_workspaces__qci_pipeline_603700_2_ftcommonqmcommonlibdll_bugreportbase_bugreportbase.cpp
push 0
push 5
push 0
call fcn.00408fa0
push eax
call fcn.0040a910
add esp, 0x2c
cmp dword [esp + 0xc], 0
je 0x40f5e5
mov eax, dword [esp + 0x20]
push 0xffffffffffffffff
mov dword [esp + 0x14], eax
lea eax, [esp + 0x10]
push 0
push eax
push 2
mov dword [esp + 0x1c], esi
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
push dword [esp + 0x20]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push dword [esp + 0x24]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x40f62b
push 5
call fcn.00408fa0
mov ecx, eax
call fcn.0040a870
test eax, eax
je 0x40f62b
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.TXBugReport::DoBugReport
push str.__s__:_LastError__d_.
push str.TXBugReport::DoBugReport
push 0x187
push str.e:qci_workspace_root_workspaces__qci_pipeline_603700_2_ftcommonqmcommonlibdll_bugreportbase_bugreportbase.cpp
push 0
push 5
push 0
call fcn.00408fa0
push eax
call fcn.0040a910
add esp, 0x28
mov eax, dword [0x480988]
test eax, eax
je 0x40f636
call eax
test esi, esi
je 0x40f645
push esi
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
jmp 0x40f64b
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
test edi, edi
je 0x40f652
push edi
call esi
push 0x4809ac
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 0x1234
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov ecx, dword [esp + 0x49c]
xor eax, eax
pop edi
pop esi
xor ecx, esp
call fcn.0045be1b
mov esp, ebp
pop ebp
ret