Function at 0x1db2608
Capabilities:
Create process on windows
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x1c0
mov eax, dword [0x1f07010]
xor eax, ebp
mov dword [esp + 0x1b8], eax
call fcn.01e096f8
test al, al
jne 0x1db34a1
lea ecx, [ebp + 8]
xor eax, eax
lea edx, [esp + 0x1a8]
mov dword [edx + 4], eax
mov dword [edx], eax
mov dword [edx + 8], eax
mov esi, dword [ecx]
mov dword [esp + 8], edx
push edx
push esi
call fcn.01e0971c
add esp, 8
mov edi, dword [esi + 0x3c]
mov ebx, dword [esi + 0x40]
cmp edi, ebx
je 0x1db26d1
lea esi, [esp + 0xdc]
movzx eax, byte [edi + 0xb]
mov edx, edi
test al, al
jns 0x1db2676
mov edx, dword [edi]
mov eax, dword [edi + 4]
lea ecx, [esp + 0x1a0]
push eax
push edx
call fcn.01cd2c42
push dword [esp + 0x1a4]
push dword [esp + 0x1a4]
push esi
call fcn.01d95160
add esp, 0xc
lea eax, [esp + 0x1a8]
push eax
push esi
call fcn.01e0971c
add esp, 8
cmp byte [esp + 0xe7], 0
jns 0x1db26c5
push dword [esp + 0xdc]
call fcn.01e5f36c
add esp, 4
add edi, 0xc
cmp edi, ebx
jne 0x1db2667
lea eax, [ebp + 8]
mov esi, dword [eax]
movzx eax, byte [esi + 0x17]
test al, al
jns 0x1db26dc
mov eax, dword [esi + 0x10]
test eax, eax
mov dword [esp + 4], esi
je 0x1db2748
lea ebx, [esi + 0xc]
lea esi, [esp + 0x40]
mov ecx, esi
push str.database
call fcn.01cd492a
lea edi, [esp + 0xdc]
mov ecx, edi
mov edx, esi
push ebx
call fcn.01db3b50
add esp, 4
lea eax, [esp + 0x1a8]
push eax
push edi
call fcn.01e0971c
add esp, 8
cmp byte [edi + 0xb], 0
jns 0x1db2731
push dword [esp + 0xdc]
call fcn.01e5f36c
add esp, 4
cmp byte [esp + 0x4b], 0
jns 0x1db2744
push dword [esp + 0x40]
call fcn.01e5f36c
add esp, 4
mov esi, dword [esp + 4]
movzx eax, byte [esi + 0x23]
test al, al
jns 0x1db2753
mov eax, dword [esi + 0x1c]
test eax, eax
je 0x1db27bb
lea ebx, [esi + 0x18]
lea esi, [esp + 0x40]
mov ecx, esi
push str.metrics_dir
call fcn.01cd492a
lea edi, [esp + 0xdc]
mov ecx, edi
mov edx, esi
push ebx
call fcn.01db3b50
add esp, 4
lea eax, [esp + 0x1a8]
push eax
push edi
call fcn.01e0971c
add esp, 8
cmp byte [edi + 0xb], 0
jns 0x1db27a4
push dword [esp + 0xdc]
call fcn.01e5f36c
add esp, 4
cmp byte [esp + 0x4b], 0
jns 0x1db27b7
push dword [esp + 0x40]
call fcn.01e5f36c
add esp, 4
mov esi, dword [esp + 4]
lea eax, [esi + 0x24]
movzx edx, byte [esi + 0x2f]
test dl, dl
js 0x1db27cf
test edx, edx
jne 0x1db27dc
jmp 0x1db287b
mov edx, dword [esi + 0x28]
test edx, edx
je 0x1db287b
mov eax, dword [eax]
lea esi, [esp + 0x198]
mov ecx, esi
push edx
push eax
call fcn.01cd2c42
lea ebx, [esp + 0x40]
push dword [esi + 4]
push dword [esi]
push ebx
call fcn.01d95160
add esp, 0xc
lea esi, [esp + 0xa0]
mov ecx, esi
push 0x1eb5e6c
call fcn.01cd492a
lea edi, [esp + 0xdc]
mov ecx, edi
mov edx, esi
push ebx
call fcn.01db3b50
add esp, 4
lea eax, [esp + 0x1a8]
push eax
push edi
call fcn.01e0971c
add esp, 8
cmp byte [edi + 0xb], 0
jns 0x1db284b
push dword [esp + 0xdc]
call fcn.01e5f36c
add esp, 4
cmp byte [esp + 0xab], 0
jns 0x1db2864
push dword [esp + 0xa0]
call fcn.01e5f36c
add esp, 4
cmp byte [esp + 0x4b], 0
mov esi, dword [esp + 4]
jns 0x1db287b
push dword [esp + 0x40]
call fcn.01e5f36c
add esp, 4
mov eax, esi
mov esi, dword [esi + 0x30]
add eax, 0x34
mov dword [esp + 4], eax
cmp esi, eax
je 0x1db2a00
lea eax, [esi + 0x10]
push 0x3d
push eax
lea eax, [esp + 0x28]
push eax
call fcn.01cfcece
add esp, 0xc
movzx eax, byte [esi + 0x27]
test al, al
jns 0x1db28b2
mov eax, dword [esi + 0x20]
mov edx, dword [esi + 0x1c]
jmp 0x1db28b5
lea edx, [esi + 0x1c]
lea ecx, [esp + 0x20]
push eax
push edx
call fcn.01d737f0
movq xmm0, qword [eax]
movq qword [esp + 0xa0], xmm0
mov ecx, dword [eax + 8]
mov dword [esp + 0xa8], ecx
xor ecx, ecx
mov dword [eax], ecx
mov dword [eax + 8], ecx
mov dword [eax + 4], ecx
movzx eax, byte [esp + 0xab]
test al, al
cmovs eax, dword [esp + 0xa4]
mov edx, dword [esp + 0xa0]
lea ecx, [esp + 0xa0]
cmovns edx, ecx
lea ecx, [esp + 0x190]
push eax
push edx
call fcn.01cd2c42
push dword [esp + 0x194]
push dword [esp + 0x194]
lea eax, [esp + 0x48]
push eax
call fcn.01d95160
add esp, 0xc
lea edi, [esp + 0x184]
mov ecx, edi
push str.annotation
call fcn.01cd492a
lea ebx, [esp + 0xdc]
mov ecx, ebx
mov edx, edi
lea eax, [esp + 0x40]
push eax
call fcn.01db3b50
add esp, 4
lea eax, [esp + 0x1a8]
push eax
push ebx
call fcn.01e0971c
add esp, 8
cmp byte [esp + 0xe7], 0
jns 0x1db2982
push dword [esp + 0xdc]
call fcn.01e5f36c
add esp, 4
cmp byte [esp + 0x18f], 0
jns 0x1db299b
push dword [esp + 0x184]
call fcn.01e5f36c
add esp, 4
cmp byte [esp + 0x4b], 0
jns 0x1db29ae
push dword [esp + 0x40]
call fcn.01e5f36c
add esp, 4
cmp byte [esp + 0xab], 0
jns 0x1db29c7
push dword [esp + 0xa0]
call fcn.01e5f36c
add esp, 4
cmp byte [esp + 0x2b], 0
jns 0x1db29da
push dword [esp + 0x20]
call fcn.01e5f36c
add esp, 4
mov ecx, dword [esi + 4]
test ecx, ecx
je 0x1db29eb
mov eax, ecx
mov ecx, dword [ecx]
test ecx, ecx
jne 0x1db29e1
jmp 0x1db29f4
mov eax, dword [esi + 8]
cmp dword [eax], esi
mov esi, eax
jne 0x1db29eb
mov esi, eax
cmp eax, dword [esp + 4]
jne 0x1db288f
lea eax, [ebp + 8]
mov eax, dword [eax]
mov ebx, dword [eax + 0x48]
mov dword [esp], eax
mov eax, dword [eax + 0x4c]
mov dword [esp + 4], eax
cmp ebx, eax
je 0x1db2a80
lea edi, [esp + 0x40]
mov ecx, edi
push str.attachment
call fcn.01cd492a
lea esi, [esp + 0xdc]
mov ecx, esi
mov edx, edi
push ebx
call fcn.01db3b50
add esp, 4
lea eax, [esp + 0x1a8]
push eax
push esi
call fcn.01e0971c
add esp, 8
cmp byte [esp + 0xe7], 0
jns 0x1db2a64
push dword [esp + 0xdc]
call fcn.01e5f36c
add esp, 4
cmp byte [esp + 0x4b], 0
jns 0x1db2a77
push dword [esp + 0x40]
call fcn.01e5f36c
add esp, 4
add ebx, 0xc
cmp ebx, dword [esp + 4]
jne 0x1db2a16
xor eax, eax
dec eax
mov dword [esp + 0x18c], eax
mov dword [esp + 0x188], eax
mov dword [esp + 0x184], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 1
push 0x1f0fff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [esp + 0x184], 0x1eae69c
mov dword [esp + 0x188], eax
mov byte [esp + 0x18c], 0
test eax, eax
je 0x1db2d6a
pcmpeqd xmm0, xmm0
lea esi, [esp + 0xa0]
movdqa xmmword [esi + 0x20], xmm0
movdqa xmmword [esi + 0x10], xmm0
movdqa xmmword [esi], xmm0
xor edi, edi
mov ecx, esi
push edi
push 0x1f1ae90
push edi
push 0x1f1ae84
push edi
push 0x1f1ae78
push eax
mov eax, dword [esp + 0x1c]
push dword [eax + 0x64]
push dword [0x1f0a9e8]
push dword [0x1f0a9e4]
push dword [0x1f0a9dc]
call fcn.01e09838
lea ebx, [esp + 0x20]
mov ecx, esi
push ebx
call fcn.01e09868
lea esi, [esp + 0x8c]
mov ecx, esi
push str.__initial_client_data
call fcn.01cd492a
movzx eax, byte [ebx + 0xb]
test al, al
jns 0x1db2b4b
mov eax, dword [esp + 0x24]
mov ebx, dword [esp + 0x20]
mov ecx, esi
push eax
push ebx
call fcn.01d737f0
movq xmm0, qword [eax]
lea esi, [esp + 0x40]
movq qword [esi], xmm0
mov ecx, dword [eax + 8]
mov dword [esi + 8], ecx
mov dword [eax], edi
mov dword [eax + 8], edi
mov dword [eax + 4], edi
movzx eax, byte [esi + 0xb]
test al, al
cmovs eax, dword [esi + 4]
mov edx, dword [esi]
cmovns edx, esi
lea esi, [esp + 0x98]
mov ecx, esi
push eax
push edx
call fcn.01cd2c42
lea edi, [esp + 0xdc]
push dword [esi + 4]
push dword [esi]
push edi
call fcn.01d95160
add esp, 0xc
lea eax, [esp + 0x1a8]
push eax
push edi
call fcn.01e0971c
add esp, 8
cmp byte [edi + 0xb], 0
jns 0x1db2bc8
push dword [esp + 0xdc]
call fcn.01e5f36c
add esp, 4
cmp byte [esp + 0x4b], 0
jns 0x1db2bdb
push dword [esp + 0x40]
call fcn.01e5f36c
add esp, 4
cmp byte [esp + 0x97], 0
jns 0x1db2bf4
push dword [esp + 0x8c]
call fcn.01e5f36c
add esp, 4
cmp byte [esp + 0x2b], 0
jns 0x1db2c07
push dword [esp + 0x20]
call fcn.01e5f36c
add esp, 4
pxor xmm0, xmm0
movdqa xmmword [esp + 0x60], xmm0
xor esi, esi
mov dword [esp + 0x84], esi
mov dword [esp + 0x80], esi
movdqa xmmword [esp + 0x70], xmm0
movdqa xmmword [esp + 0x50], xmm0
movdqa xmmword [esp + 0x40], xmm0
mov dword [esp + 0x6c], 0x100
mov ebx, dword [sym.imp.KERNEL32.dll_GetStdHandle]
push 0xfffffffffffffff6
call ebx
mov dword [esp + 0x78], eax
push 0xfffffffffffffff5
call ebx
mov dword [esp + 0x7c], eax
push 0xfffffffffffffff4
call ebx
mov dword [esp + 0x80], eax
mov dword [esp + 0x8c], esi
mov dword [esp + 0x90], esi
mov dword [esp + 0x94], esi
mov dword [esp + 0x3c], 0xffffffff
mov dword [esp + 0x34], 0x1eae6a0
mov dword [esp + 0x38], esi
mov byte [esp + 0x3c], 0
mov eax, dword [0x1f1aeb4]
mov ecx, dword [0x1f0c740]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
cmp eax, dword [ecx + 4]
jg 0x1db3407
mov eax, dword [0x1f1aebc]
mov ecx, dword [0x1f0c740]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
cmp eax, dword [ecx + 4]
mov ebx, dword [esp]
jg 0x1db344c
mov ecx, dword [0x1f1aeb0]
test ecx, ecx
je 0x1db2dc2
cmp dword [0x1f1aeb8], 0
je 0x1db2dc2
mov dword [esp + 0x40], 0x48
lea esi, [esp + 0x20]
mov dword [esi], 0xffffffff
call dword [section..00cfg]
xor eax, eax
push esi
push eax
push 1
mov dword [esp + 0x10], 0
push eax
call ecx
test eax, eax
je 0x1db2dfc
push 2
call fcn.01da24f0
add esp, 4
test al, al
je 0x1db3118
lea edi, [esp + 0xdc]
mov ecx, edi
push 2
push 0x1db
push str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
call fcn.01da2590
lea eax, [esp + 0xe4]
push 0x44
push str.InitializeProcThreadAttributeList__size__succeeded__expected_failure
push eax
call fcn.01cdcc16
add esp, 0xc
mov ecx, edi
call fcn.01da29c0
jmp 0x1db3118
mov edi, 2
push 2
call fcn.01da24f0
add esp, 4
test al, al
je 0x1db2dbb
call fcn.01da3130
lea esi, [esp + 0xdc]
mov ecx, esi
push eax
push 2
push 0x1aa
push str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
call fcn.01da32d0
lea eax, [esp + 0xe4]
push 0xb
push 0x1ebdb69
push eax
call fcn.01cdcc16
add esp, 0xc
mov ecx, esi
call fcn.01da3380
xor ebx, ebx
jmp 0x1db3161
mov dword [esp + 0x40], 0x44
mov dword [esp + 4], 0
xor ecx, ecx
movzx eax, byte [ebx + 0xb]
test al, al
mov dword [esp + 0xc], ecx
js 0x1db2de9
cmp al, 0xc
jb 0x1db2df3
jmp 0x1db2e88
cmp dword [ebx + 4], 0xc
jae 0x1db2e85
mov esi, ebx
xor ebx, ebx
jmp 0x1db2eda
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x1db30cc
push dword [esp + 0x20]
call fcn.01e5f3a3
add esp, 4
mov ebx, eax
mov dword [esp + 0x84], eax
mov ecx, dword [0x1f1aeb0]
call dword [section..00cfg]
push esi
push 0
push 1
push ebx
call ecx
test eax, eax
mov dword [esp + 4], ebx
je 0x1db31cd
lea esi, [esp + 0x34]
mov ecx, esi
call fcn.01db3d84
mov dword [esi + 4], ebx
lea esi, [esp + 0x8c]
mov ecx, esi
push 8
call fcn.01cfc98c
mov eax, dword [esi + 4]
cmp eax, dword [esi + 8]
jae 0x1db3219
test eax, eax
mov esi, dword [esp]
je 0x1db33d6
mov ecx, dword [0x1f0a9dc]
mov dword [eax], ecx
add eax, 4
jmp 0x1db322d
mov eax, dword [ebx + 4]
add eax, 0xfffffff4
lea edx, [esp + 0x20]
mov ecx, edi
push edx
push 0xffffffffffffffff
push eax
mov esi, ebx
push ebx
call fcn.01d745c0
cmp byte [esp + 0xe7], 0
jns 0x1db2eae
mov edi, dword [esp + 0xdc]
push str.rundll32.exe
push edi
call fcn.01e75d64
add esp, 8
test eax, eax
sete bl
cmp byte [esp + 0xe7], 0
jns 0x1db2eda
push dword [esp + 0xdc]
call fcn.01e5f36c
add esp, 4
lea edi, [esp + 0x40]
pcmpeqd xmm0, xmm0
movdqa xmmword [esp + 0x20], xmm0
mov dword [esp], 0
call fcn.01e05e74
test al, al
je 0x1db2f00
call fcn.01e05f49
mov dword [esp], eax
cmp byte [esp + 0x1b3], 0
jns 0x1db2f15
mov eax, dword [esp + 0x1a8]
mov dword [esp + 8], eax
xor eax, eax
mov ecx, 0
test bl, bl
jne 0x1db2f2c
cmp byte [esi + 0xb], 0
js 0x1db2f2a
mov ecx, esi
jmp 0x1db2f2c
mov ecx, dword [esi]
lea edx, [esp + 0x20]
push edx
push edi
push eax
push eax
push dword [esp + 0x1c]
push 1
push eax
push eax
push dword [esp + 0x28]
push ecx
push dword [esp + 0x28]
call dword [sym.imp.ADVAPI32.dll_CreateProcessAsUserW]
test eax, eax
je 0x1db3060
push dword [esp + 0x24]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ebx, eax
push 1
call fcn.01da24f0
add esp, 4
test al, al
je 0x1db2faf
test ebx, ebx
jne 0x1db2faf
call fcn.01da3130
lea ebx, [esp + 0xdc]
mov ecx, ebx
push eax
push 1
push 0x233
push str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
call fcn.01da32d0
lea eax, [esp + 0xe4]
push 0x12
push str.CloseHandle_thread
push eax
call fcn.01cdcc16
add esp, 0xc
mov ecx, ebx
call fcn.01da3380
push dword [esp + 0x20]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ebx, eax
push 1
call fcn.01da24f0
add esp, 4
test al, al
je 0x1db300b
test ebx, ebx
jne 0x1db300b
call fcn.01da3130
lea ebx, [esp + 0xdc]
mov ecx, ebx
push eax
push 1
push 0x236
push str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
call fcn.01da32d0
lea eax, [esp + 0xe4]
push 0x13
push str.CloseHandle_process
push eax
call fcn.01cdcc16
add esp, 0xc
mov ecx, ebx
call fcn.01da3380
lea eax, [ebp + 8]
mov ebx, dword [eax]
lea ecx, [ebx + 0x60]
lea esi, [esp + 0xdc]
mov dword [esi], 0xffffffff
push esi
call fcn.01db3a54
pxor xmm0, xmm0
movdqu xmmword [esi + 0x14], xmm0
movdqu xmmword [esi + 4], xmm0
mov edi, 2
mov dword [esi], edi
xor eax, eax
lea ecx, [esp + 0x10]
mov dword [ecx + 4], eax
mov dword [ecx], eax
mov dword [ecx + 8], eax
add ebx, 0x54
push ecx
push esi
push ebx
call fcn.01e08f84
add esp, 0xc
mov ebx, eax
movzx eax, al
sub edi, eax
jmp 0x1db30b3
mov edi, 2
push 2
call fcn.01da24f0
add esp, 4
test al, al
je 0x1db30b1
call fcn.01da3130
lea ebx, [esp + 0xdc]
mov ecx, ebx
push eax
push 2
push 0x22e
push str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
call fcn.01da32d0
lea eax, [esp + 0xe4]
push 0xd
push str.CreateProcess
push eax
call fcn.01cdcc16
add esp, 0xc
mov ecx, ebx
call fcn.01da3380
xor ebx, ebx
lea esi, [esp + 0x8c]
mov eax, dword [esp]
test eax, eax
je 0x1db3126
push eax
call fcn.01db4896
add esp, 4
jmp 0x1db3126
push 2
call fcn.01da24f0
add esp, 4
test al, al
je 0x1db3118
call fcn.01da3130
lea edi, [esp + 0xdc]
mov ecx, edi
push eax
push 2
push 0x1df
push str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
call fcn.01da32d0
lea eax, [esp + 0xe4]
push 0x28
push str.InitializeProcThreadAttributeList__size_
push eax
call fcn.01cdcc16
add esp, 0xc
mov ecx, edi
call fcn.01da3380
lea esi, [esp + 0x8c]
mov edi, 2
xor ebx, ebx
mov dword [esp + 0x34], 0x1eae6a0
cmp byte [esp + 0x3c], 0
jne 0x1db34a7
lea ecx, [esp + 0x34]
call fcn.01db3d84
mov eax, dword [esp + 4]
test eax, eax
je 0x1db3153
push eax
call fcn.01e5f3ac
add esp, 4
lea ecx, [esp + 0xdc]
mov dword [ecx], esi
call fcn.01cd9584
mov dword [esp + 0x184], 0x1eae69c
cmp byte [esp + 0x18c], 0
jne 0x1db34a4
mov eax, dword [esp + 0x188]
test eax, eax
je 0x1db318e
push eax
call fcn.01db4896
add esp, 4
cmp byte [esp + 0x1b3], 0
jns 0x1db31a7
push dword [esp + 0x1a8]
call fcn.01e5f36c
add esp, 4
mov dword [0x1f1aeac], edi
lea ecx, [ebp + 8]
call fcn.01db3ab4
mov ecx, dword [esp + 0x1b8]
xor ecx, ebp
call fcn.01e60425
mov eax, ebx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
push 2
call fcn.01da24f0
add esp, 4
test al, al
lea esi, [esp + 0x8c]
je 0x1db311f
call fcn.01da3130
lea edi, [esp + 0xdc]
mov ecx, edi
push eax
push 2
push 0x1ea
push str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
call fcn.01da32d0
lea eax, [esp + 0xe4]
push 0x21
push 0x1ebdc3a
jmp 0x1db33c1
lea ecx, [esp + 0x8c]
push 0x1f0a9dc
call fcn.01cd9258
mov esi, dword [esp]
mov dword [esp + 0x90], eax
cmp eax, dword [esp + 0x94]
jae 0x1db3252
test eax, eax
je 0x1db33d6
mov ecx, dword [0x1f0a9e4]
mov dword [eax], ecx
add eax, 4
jmp 0x1db3263
lea ecx, [esp + 0x8c]
push 0x1f0a9e4
call fcn.01cd9258
mov dword [esp + 0x90], eax
cmp eax, dword [esp + 0x94]
jae 0x1db3288
test eax, eax
je 0x1db33d6
mov ecx, dword [0x1f0a9e8]
mov dword [eax], ecx
add eax, 4
jmp 0x1db3299
lea ecx, [esp + 0x8c]
push 0x1f0a9e8
call fcn.01cd9258
add esi, 0x64
mov dword [esp + 0x90], eax
cmp eax, dword [esp + 0x94]
jae 0x1db32bd
test eax, eax
je 0x1db33d6
mov ecx, dword [esi]
mov dword [eax], ecx
add eax, 4
jmp 0x1db32ca
lea ecx, [esp + 0x8c]
push esi
call fcn.01cd9258
mov dword [esp + 0x90], eax
cmp eax, dword [esp + 0x94]
jae 0x1db32f0
test eax, eax
je 0x1db33d6
mov ecx, dword [esp + 0x188]
mov dword [eax], ecx
add eax, 4
jmp 0x1db3304
lea eax, [esp + 0x188]
lea ecx, [esp + 0x8c]
push eax
call fcn.01cd9258
lea ebx, [esp + 0x8c]
mov dword [ebx + 4], eax
mov edx, dword [esp + 0x78]
mov ecx, ebx
call fcn.01db3c81
mov edx, dword [esp + 0x7c]
mov ecx, ebx
call fcn.01db3c81
mov edx, dword [esp + 0x80]
mov ecx, ebx
call fcn.01db3c81
mov esi, dword [ebx]
mov ebx, dword [ebx + 4]
sub ebx, esi
je 0x1db33e9
mov ecx, dword [0x1f1aeb8]
mov eax, dword [esp + 0x84]
mov dword [esp], eax
call dword [section..00cfg]
xor eax, eax
push eax
push eax
push ebx
push esi
push 0x20002
push eax
push dword [esp + 0x18]
call ecx
test eax, eax
je 0x1db337a
lea eax, [ebp + 8]
mov ebx, dword [eax]
mov ecx, 0x80000
jmp 0x1db2dd4
push 2
call fcn.01da24f0
add esp, 4
test al, al
lea esi, [esp + 0x8c]
je 0x1db311f
call fcn.01da3130
lea edi, [esp + 0xdc]
mov ecx, edi
push eax
push 2
push 0x204
push str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
call fcn.01da32d0
lea eax, [esp + 0xe4]
push 0x19
push 0x1ebdc5c
push eax
call fcn.01cdcc16
add esp, 0xc
mov ecx, edi
call fcn.01da3380
jmp 0x1db311f
push str.null_pointer_given_to_construct_at
push str.__location___nullptr
push 0x28
push str....._third_partylibc_srcinclude__memoryconstruct_at.h
jmp 0x1db33fd
push str.vector___index_out_of_bounds
push str.__n___size__
push 0x601
push str....._third_partylibc_srcinclude_vector
push str._s:_d:_assertion__s_failed:__s_n
call fcn.01ce782c
push 0x1f1aeb4
call fcn.01e5f3e7
add esp, 4
cmp dword [0x1f1aeb4], 0xffffffff
jne 0x1db2cab
push 0
push str.::InitializeProcThreadAttributeList
push 0x1eb4188
call fcn.01db49d0
add esp, 0xc
mov dword [0x1f1aeb0], eax
push 0x1f1aeb4
call fcn.01e5f45d
add esp, 4
jmp 0x1db2cab
push 0x1f1aebc
call fcn.01e5f3e7
add esp, 4
cmp dword [0x1f1aebc], 0xffffffff
jne 0x1db2ccf
cmp dword [0x1f1aeb0], 0
je 0x1db3485
push 0
push str.::UpdateProcThreadAttribute
push 0x1eb4188
call fcn.01db49d0
add esp, 0xc
jmp 0x1db3487
xor eax, eax
mov dword [0x1f1aeb8], eax
push 0x1f1aebc
call fcn.01e5f45d
add esp, 4
mov ebx, dword [esp]
jmp 0x1db2ccf
int3
int3
int3