Function at 0x4cf068
Capabilities:
Create process on windows
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x1c0
lea ebx, [ebp + 8]
mov eax, dword [0x5a8564]
xor eax, ebp
mov dword [esp + 0x1b8], eax
call fcn.004ee104
test al, al
jne 0x4cfda5
xor eax, eax
lea ecx, [esp + 0x1a8]
mov dword [ecx + 4], eax
mov dword [ecx], eax
mov dword [ecx + 8], eax
mov edi, dword [ebx]
mov dword [esp + 0x18], ecx
push ecx
push edi
call fcn.004ee128
add esp, 8
mov esi, dword [edi + 0x3c]
mov dword [esp + 4], edi
mov edi, dword [edi + 0x40]
cmp esi, edi
je 0x4cf116
lea ebx, [esp + 0xf4]
movzx eax, byte [esi + 0xb]
mov ecx, esi
test al, al
jns 0x4cf0da
mov ecx, dword [esi]
mov eax, dword [esi + 4]
push eax
push ecx
push ebx
call fcn.00442120
add esp, 0xc
lea eax, [esp + 0x1a8]
push eax
push ebx
call fcn.004ee128
add esp, 8
cmp byte [esp + 0xff], 0
jns 0x4cf10f
push dword [esp + 0xf4]
call fcn.005327b0
add esp, 4
add esi, 0xc
cmp esi, edi
jne 0x4cf0cb
mov esi, dword [esp + 4]
movzx eax, byte [esi + 0x17]
test al, al
jns 0x4cf125
mov eax, dword [esi + 0x10]
test eax, eax
je 0x4cf18d
lea ebx, [esi + 0xc]
lea esi, [esp + 0x50]
mov ecx, esi
push str.database
call fcn.004029c0
lea edi, [esp + 0xf4]
mov ecx, edi
mov edx, esi
push ebx
call fcn.004d0166
add esp, 4
lea eax, [esp + 0x1a8]
push eax
push edi
call fcn.004ee128
add esp, 8
cmp byte [edi + 0xb], 0
jns 0x4cf176
push dword [esp + 0xf4]
call fcn.005327b0
add esp, 4
cmp byte [esp + 0x5b], 0
jns 0x4cf189
push dword [esp + 0x50]
call fcn.005327b0
add esp, 4
mov esi, dword [esp + 4]
movzx eax, byte [esi + 0x23]
test al, al
jns 0x4cf198
mov eax, dword [esi + 0x1c]
test eax, eax
je 0x4cf200
lea ebx, [esi + 0x18]
lea esi, [esp + 0x50]
mov ecx, esi
push str.metrics_dir
call fcn.004029c0
lea edi, [esp + 0xf4]
mov ecx, edi
mov edx, esi
push ebx
call fcn.004d0166
add esp, 4
lea eax, [esp + 0x1a8]
push eax
push edi
call fcn.004ee128
add esp, 8
cmp byte [edi + 0xb], 0
jns 0x4cf1e9
push dword [esp + 0xf4]
call fcn.005327b0
add esp, 4
cmp byte [esp + 0x5b], 0
jns 0x4cf1fc
push dword [esp + 0x50]
call fcn.005327b0
add esp, 4
mov esi, dword [esp + 4]
movzx eax, byte [esi + 0x2f]
test al, al
js 0x4cf20c
mov ecx, eax
jmp 0x4cf20f
mov ecx, dword [esi + 0x28]
test ecx, ecx
je 0x4cf2b2
test al, al
jns 0x4cf223
mov ecx, dword [esi + 0x24]
mov eax, dword [esi + 0x28]
jmp 0x4cf226
lea ecx, [esi + 0x24]
lea ebx, [esp + 0x50]
push eax
push ecx
push ebx
call fcn.00442120
add esp, 0xc
lea esi, [esp + 0xb0]
mov ecx, esi
push 0x562ceb
call fcn.004029c0
lea edi, [esp + 0xf4]
mov ecx, edi
mov edx, esi
push ebx
call fcn.004d0166
add esp, 4
lea eax, [esp + 0x1a8]
push eax
push edi
call fcn.004ee128
add esp, 8
cmp byte [edi + 0xb], 0
jns 0x4cf282
push dword [esp + 0xf4]
call fcn.005327b0
add esp, 4
cmp byte [esp + 0xbb], 0
jns 0x4cf29b
push dword [esp + 0xb0]
call fcn.005327b0
add esp, 4
cmp byte [esp + 0x5b], 0
mov esi, dword [esp + 4]
jns 0x4cf2b2
push dword [esp + 0x50]
call fcn.005327b0
add esp, 4
mov edi, dword [esi + 0x30]
mov dword [esp + 0xa4], edi
lea eax, [esi + 0x34]
mov dword [esp + 8], eax
cmp edi, eax
je 0x4cf413
lea eax, [edi + 0x10]
push 0x3d
push eax
lea eax, [esp + 0x38]
push eax
call fcn.00408fec
add esp, 0xc
movzx eax, byte [edi + 0x27]
test al, al
jns 0x4cf2ee
mov eax, dword [edi + 0x20]
mov edi, dword [edi + 0x1c]
jmp 0x4cf2f1
add edi, 0x1c
lea ecx, [esp + 0x30]
push eax
push edi
call fcn.00428770
mov ecx, dword [eax + 8]
mov dword [esp + 0xb8], ecx
movq xmm0, qword [eax]
movq qword [esp + 0xb0], xmm0
xor ecx, ecx
mov dword [eax], ecx
mov dword [eax + 4], ecx
mov dword [eax + 8], ecx
movzx eax, byte [esp + 0xbb]
lea ecx, [esp + 0xb0]
test al, al
jns 0x4cf33e
mov ecx, dword [esp + 0xb0]
mov eax, dword [esp + 0xb4]
push eax
push ecx
lea edi, [esp + 0x58]
push edi
call fcn.00442120
add esp, 0xc
lea esi, [esp + 0x19c]
mov ecx, esi
push str.annotation
call fcn.004029c0
lea ebx, [esp + 0xf4]
mov ecx, ebx
mov edx, esi
push edi
call fcn.004d0166
add esp, 4
lea eax, [esp + 0x1a8]
push eax
push ebx
call fcn.004ee128
add esp, 8
cmp byte [esp + 0xff], 0
jns 0x4cf39e
push dword [esp + 0xf4]
call fcn.005327b0
add esp, 4
cmp byte [esp + 0x1a7], 0
jns 0x4cf3b7
push dword [esp + 0x19c]
call fcn.005327b0
add esp, 4
cmp byte [esp + 0x5b], 0
jns 0x4cf3ca
push dword [esp + 0x50]
call fcn.005327b0
add esp, 4
cmp byte [esp + 0xbb], 0
jns 0x4cf3e3
push dword [esp + 0xb0]
call fcn.005327b0
add esp, 4
cmp byte [esp + 0x3b], 0
jns 0x4cf3f6
push dword [esp + 0x30]
call fcn.005327b0
add esp, 4
lea ecx, [esp + 0xa4]
call fcn.00401de8
mov edi, dword [esp + 0xa4]
cmp edi, dword [esp + 8]
jne 0x4cf2cb
mov eax, dword [esp + 4]
mov ebx, dword [eax + 0x48]
mov eax, dword [eax + 0x4c]
mov dword [esp + 8], eax
cmp ebx, eax
je 0x4cf48f
lea edi, [esp + 0x50]
mov ecx, edi
push 0x570dfb
call fcn.004029c0
lea esi, [esp + 0xf4]
mov ecx, esi
mov edx, edi
push ebx
call fcn.004d0166
add esp, 4
lea eax, [esp + 0x1a8]
push eax
push esi
call fcn.004ee128
add esp, 8
cmp byte [esp + 0xff], 0
jns 0x4cf473
push dword [esp + 0xf4]
call fcn.005327b0
add esp, 4
cmp byte [esp + 0x5b], 0
jns 0x4cf486
push dword [esp + 0x50]
call fcn.005327b0
add esp, 4
add ebx, 0xc
cmp ebx, dword [esp + 8]
jne 0x4cf425
xor eax, eax
dec eax
mov dword [esp + 0x1a4], eax
mov dword [esp + 0x1a0], eax
mov dword [esp + 0x19c], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 1
push 0x1f0fff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [esp + 0x19c], 0x5747fc
mov dword [esp + 0x1a0], eax
mov byte [esp + 0x1a4], 0
test eax, eax
je 0x4cf5ed
pcmpeqd xmm0, xmm0
movdqa xmmword [esp + 0xe0], xmm0
movdqa xmmword [esp + 0xd0], xmm0
movdqa xmmword [esp + 0xc0], xmm0
movdqa xmmword [esp + 0xb0], xmm0
mov ebx, dword [esp + 4]
lea ecx, [ebx + 0x54]
movzx eax, byte [ebx + 0x5f]
mov dword [esp + 0x1c], ecx
test al, al
jns 0x4cf51e
mov ecx, dword [ebx + 0x54]
mov eax, dword [ebx + 0x58]
lea esi, [esp + 0xf4]
push eax
push ecx
push esi
call fcn.00442160
add esp, 0xc
xor eax, eax
lea ecx, [esp + 0xb0]
push esi
push eax
push 0x5b83dc
push eax
push 0x5b83d0
push eax
push 0x5b83c0
push dword [esp + 0x1bc]
push dword [ebx + 0x64]
push dword [0x5a8648]
push dword [0x5a8644]
push dword [0x5a863c]
call fcn.0045bfb0
cmp byte [esi + 0xb], 0
jns 0x4cf582
push dword [esp + 0xf4]
call fcn.005327b0
add esp, 4
lea esi, [esp + 0x30]
lea ecx, [esp + 0xb0]
push esi
call fcn.0045c3b6
lea edi, [esp + 0xa4]
mov ecx, edi
push str.__initial_client_data
call fcn.004029c0
movzx eax, byte [esi + 0xb]
test al, al
jns 0x4cf5b6
mov eax, dword [esp + 0x34]
mov esi, dword [esp + 0x30]
mov ecx, edi
push eax
push esi
call fcn.00428770
mov ecx, dword [eax + 8]
mov dword [esp + 0x58], ecx
movq xmm0, qword [eax]
movq qword [esp + 0x50], xmm0
xor ecx, ecx
mov dword [eax], ecx
mov dword [eax + 4], ecx
mov dword [eax + 8], ecx
movzx eax, byte [esp + 0x5b]
test al, al
jns 0x4cf64d
mov ecx, dword [esp + 0x50]
mov eax, dword [esp + 0x54]
jmp 0x4cf651
xor esi, esi
push 2
call fcn.0044f030
add esp, 4
mov ebx, 0
test al, al
je 0x4cfd51
call fcn.0044ff30
lea esi, [esp + 0xf4]
mov ecx, esi
push eax
push 2
push 0x19b
push str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
call fcn.004500d0
lea eax, [esp + 0xfc]
push 0xb
push 0x574c12
push eax
call fcn.0040218b
add esp, 0xc
mov ecx, esi
call fcn.00450180
xor esi, esi
xor ebx, ebx
jmp 0x4cfd51
lea ecx, [esp + 0x50]
push eax
push ecx
lea esi, [esp + 0xfc]
push esi
call fcn.00442120
add esp, 0xc
lea eax, [esp + 0x1a8]
push eax
push esi
call fcn.004ee128
add esp, 8
cmp byte [esp + 0xff], 0
jns 0x4cf68d
push dword [esp + 0xf4]
call fcn.005327b0
add esp, 4
cmp byte [esp + 0x5b], 0
jns 0x4cf6a0
push dword [esp + 0x50]
call fcn.005327b0
add esp, 4
cmp byte [esp + 0xaf], 0
jns 0x4cf6b9
push dword [esp + 0xa4]
call fcn.005327b0
add esp, 4
cmp byte [esp + 0x3b], 0
jns 0x4cf6cc
push dword [esp + 0x30]
call fcn.005327b0
add esp, 4
pxor xmm0, xmm0
movdqa xmmword [esp + 0x70], xmm0
xor esi, esi
mov dword [esp + 0x94], esi
mov dword [esp + 0x90], esi
movdqa xmmword [esp + 0x80], xmm0
movdqa xmmword [esp + 0x60], xmm0
movdqa xmmword [esp + 0x50], xmm0
mov dword [esp + 0x7c], 0x100
mov edi, dword [sym.imp.KERNEL32.dll_GetStdHandle]
push 0xfffffffffffffff6
call edi
mov dword [esp + 0x10], eax
mov dword [esp + 0x88], eax
push 0xfffffffffffffff5
call edi
mov dword [esp + 0x14], eax
mov dword [esp + 0x8c], eax
push 0xfffffffffffffff4
call edi
mov dword [esp + 8], eax
mov dword [esp + 0x90], eax
mov dword [esp + 0xa4], esi
mov dword [esp + 0xa8], esi
mov dword [esp + 0xac], esi
mov dword [esp + 0x4c], 0xffffffff
mov dword [esp + 0x44], 0x574da0
mov dword [esp + 0x48], esi
mov byte [esp + 0x4c], 0
mov eax, dword [0x5b8400]
test al, 1
je 0x4cfe04
test al, 2
je 0x4cfe2f
mov eax, dword [0x5b8404]
lea esi, [esp + 0x1a0]
add ebx, 0x64
mov ecx, dword [0x5b83fc]
test ecx, ecx
je 0x4cf80e
test eax, eax
je 0x4cf80e
mov dword [esp + 0x50], 0x48
lea esi, [esp + 0x30]
mov dword [esi], 0xffffffff
call dword [section..00cfg]
xor edi, edi
push esi
push edi
push 1
push edi
call ecx
test eax, eax
je 0x4cf91c
push 2
call fcn.0044f030
add esp, 4
test al, al
je 0x4cfd03
lea esi, [esp + 0xf4]
mov ecx, esi
push 2
push 0x1e1
push str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
call fcn.0044f100
lea eax, [esp + 0xfc]
push 0x44
push str.InitializeProcThreadAttributeList__size__succeeded__expected_failure
push eax
call fcn.0040218b
add esp, 0xc
mov ecx, esi
call fcn.0044f510
jmp 0x4cfd03
mov dword [esp + 0x50], 0x44
lea edi, [esp + 0xa4]
mov ecx, edi
push 6
call fcn.004d0286
mov ecx, edi
push 0x5a863c
call fcn.00407794
mov ecx, edi
push ebx
call fcn.00407794
mov ecx, edi
push esi
call fcn.00407794
mov ecx, edi
mov edx, dword [esp + 0x10]
call fcn.004d0310
mov ecx, edi
mov edx, dword [esp + 0x14]
call fcn.004d0310
mov ecx, edi
mov edx, dword [esp + 8]
call fcn.004d0310
mov eax, dword [edi]
cmp dword [edi + 4], eax
je 0x4cf8e5
xor ebx, ebx
xor esi, esi
inc esi
mov edi, dword [sym.imp.KERNEL32.dll_SetHandleInformation]
push esi
push esi
push dword [eax + ebx*4]
call edi
test eax, eax
jne 0x4cf8cd
push str.StartHandlerProcess__SetHandleInformation_fail_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push 0x1d6
push str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
push str.StartHandlerProcess
lea eax, [esp + 0x100]
push eax
call fcn.00451690
add esp, 0x10
lea eax, [esp + 0xf4]
push eax
push str.result
lea eax, [esp + 0x48]
push eax
call fcn.00458c20
add esp, 0xc
lea ecx, [esp + 0x40]
call fcn.00458cb0
inc ebx
mov eax, dword [esp + 0xa4]
mov ecx, dword [esp + 0xa8]
sub ecx, eax
sar ecx, 2
cmp ebx, ecx
jb 0x4cf875
mov dword [esp + 0xc], 0
xor edi, edi
mov esi, dword [esp + 4]
lea ebx, [esp + 0xf4]
movzx eax, byte [esi + 0xb]
test al, al
js 0x4cf90b
cmp al, 0xc
jb 0x4cf915
jmp 0x4cfa28
cmp dword [esi + 4], 0xc
jae 0x4cfa25
xor ebx, ebx
jmp 0x4cfa78
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x4cfc37
push dword [esp + 0x30]
call fcn.005327e3
add esp, 4
mov edi, eax
mov dword [esp + 0x94], eax
mov ecx, dword [0x5b83fc]
call dword [section..00cfg]
push esi
push 0
push 1
push edi
call ecx
test eax, eax
je 0x4cfc79
mov esi, edi
lea edi, [esp + 0x44]
mov ecx, edi
call fcn.004d0402
mov dword [esp + 0xc], esi
mov dword [edi + 4], esi
lea edi, [esp + 0xa4]
mov ecx, edi
push 8
call fcn.004d0286
mov ecx, edi
push 0x5a863c
call fcn.00407794
mov ecx, edi
push 0x5a8644
call fcn.00407794
mov ecx, edi
push 0x5a8648
call fcn.00407794
mov ecx, edi
push ebx
call fcn.00407794
mov ecx, edi
lea eax, [esp + 0x1a0]
push eax
call fcn.00407794
mov ecx, edi
mov edx, dword [esp + 0x10]
call fcn.004d0310
mov ecx, edi
mov edx, dword [esp + 0x14]
call fcn.004d0310
mov ecx, edi
mov edx, dword [esp + 8]
call fcn.004d0310
mov esi, dword [edi]
mov edi, dword [edi + 4]
sub edi, esi
je 0x4cfde6
mov ecx, dword [0x5b8404]
call dword [section..00cfg]
xor eax, eax
push eax
push eax
push edi
push esi
push 0x20002
push eax
mov edi, dword [esp + 0x24]
push edi
call ecx
test eax, eax
mov esi, dword [esp + 4]
lea ebx, [esp + 0xf4]
je 0x4cfcb7
mov edi, 0x80000
jmp 0x4cf8fa
mov eax, dword [esi + 4]
add eax, 0xfffffff4
lea edx, [esp + 0x30]
mov ecx, ebx
push edx
push 0xffffffffffffffff
push eax
push esi
call fcn.00429a70
cmp byte [esp + 0xff], 0
jns 0x4cfa4c
mov ebx, dword [esp + 0xf4]
push str.rundll32.exe
push ebx
call fcn.00548987
add esp, 8
test eax, eax
sete bl
cmp byte [esp + 0xff], 0
jns 0x4cfa78
push dword [esp + 0xf4]
call fcn.005327b0
add esp, 4
pcmpeqd xmm0, xmm0
movdqa xmmword [esp + 0x30], xmm0
cmp byte [esp + 0x1b3], 0
jns 0x4cfa97
mov eax, dword [esp + 0x1a8]
mov dword [esp + 0x18], eax
xor eax, eax
mov ecx, 0
test bl, bl
mov ebx, dword [esp + 4]
jne 0x4cfab0
cmp byte [ebx + 0xb], 0
mov ecx, ebx
jns 0x4cfab0
mov ecx, dword [ebx]
lea edx, [esp + 0x30]
lea esi, [esp + 0x50]
push edx
push esi
push eax
push eax
push edi
push 1
push eax
push eax
push dword [esp + 0x38]
push ecx
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x4cfbdc
push dword [esp + 0x34]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, eax
push 1
call fcn.0044f030
add esp, 4
test al, al
mov edi, dword [esp + 0xc]
je 0x4cfb34
test esi, esi
jne 0x4cfb34
call fcn.0044ff30
lea esi, [esp + 0xf4]
mov ecx, esi
push eax
push 1
push 0x231
push str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
call fcn.004500d0
lea eax, [esp + 0xfc]
push 0x12
push str.CloseHandle_thread
push eax
call fcn.0040218b
add esp, 0xc
mov ecx, esi
call fcn.00450180
push dword [esp + 0x30]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, eax
push 1
call fcn.0044f030
add esp, 4
test al, al
je 0x4cfb90
test esi, esi
jne 0x4cfb90
call fcn.0044ff30
lea esi, [esp + 0xf4]
mov ecx, esi
push eax
push 1
push 0x234
push str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
call fcn.004500d0
lea eax, [esp + 0xfc]
push 0x13
push str.CloseHandle_process
push eax
call fcn.0040218b
add esp, 0xc
mov ecx, esi
call fcn.00450180
add ebx, 0x60
lea esi, [esp + 0xf4]
mov dword [esi], 0xffffffff
mov ecx, ebx
push esi
call fcn.004cce88
pxor xmm0, xmm0
movdqu xmmword [esi + 0x14], xmm0
movdqu xmmword [esi + 4], xmm0
mov dword [esi], 2
xor eax, eax
lea ecx, [esp + 0x20]
mov dword [ecx + 4], eax
mov dword [ecx], eax
mov dword [ecx + 8], eax
push ecx
push esi
push dword [esp + 0x24]
call fcn.004ed6b8
add esp, 0xc
mov ebx, eax
jmp 0x4cfc30
xor ebx, ebx
push 2
call fcn.0044f030
add esp, 4
test al, al
mov edi, dword [esp + 0xc]
je 0x4cfc30
call fcn.0044ff30
lea esi, [esp + 0xf4]
mov ecx, esi
push eax
push 2
push 0x22c
push str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
call fcn.004500d0
lea eax, [esp + 0xfc]
push 0xd
push str.CreateProcess
push eax
call fcn.0040218b
add esp, 0xc
mov ecx, esi
call fcn.00450180
xor ebx, ebx
mov esi, ebx
jmp 0x4cfd07
push 2
call fcn.0044f030
add esp, 4
test al, al
je 0x4cfd03
call fcn.0044ff30
lea esi, [esp + 0xf4]
mov ecx, esi
push eax
push 2
push 0x1e5
push str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
call fcn.004500d0
lea eax, [esp + 0xfc]
push 0x28
push str.InitializeProcThreadAttributeList__size_
jmp 0x4cfcf3
push 2
call fcn.0044f030
add esp, 4
test al, al
je 0x4cfd03
call fcn.0044ff30
lea esi, [esp + 0xf4]
mov ecx, esi
push eax
push 2
push 0x1f0
push str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
call fcn.004500d0
lea eax, [esp + 0xfc]
push 0x21
push str.InitializeProcThreadAttributeList
jmp 0x4cfcf3
push 2
call fcn.0044f030
add esp, 4
test al, al
je 0x4cfd03
call fcn.0044ff30
lea esi, [esp + 0xf4]
mov ecx, esi
push eax
push 2
push 0x20a
push str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
call fcn.004500d0
lea eax, [esp + 0xfc]
push 0x19
push str.UpdateProcThreadAttribute
push eax
call fcn.0040218b
add esp, 0xc
mov ecx, esi
call fcn.00450180
xor esi, esi
xor ebx, ebx
lea ecx, [esp + 0x44]
call fcn.004d0372
test edi, edi
je 0x4cfd1d
push edi
call fcn.005327ec
add esp, 4
mov eax, dword [esp + 0xa4]
test eax, eax
je 0x4cfd38
mov dword [esp + 0xa8], eax
push eax
call fcn.005327b0
add esp, 4
cmp byte [esp + 0xe7], 0
jns 0x4cfd51
push dword [esp + 0xdc]
call fcn.005327b0
add esp, 4
lea ecx, [esp + 0x19c]
call fcn.004ccc80
cmp byte [esp + 0x1b3], 0
jns 0x4cfd76
push dword [esp + 0x1a8]
call fcn.005327b0
add esp, 4
xor eax, eax
mov ecx, esi
cmp cl, 1
adc eax, 1
mov dword [0x5b83f8], eax
lea ecx, [ebp + 8]
call fcn.004d00ca
mov ecx, dword [esp + 0x1b8]
xor ecx, ebp
call fcn.005327f1
mov eax, ebx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
lea edi, [esp + 0xf4]
push 0x174
push str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
push str.StartHandlerProcess
push edi
call fcn.00451690
add esp, 0x10
lea esi, [esp + 0x1b4]
push edi
push str._IsThreadInLoaderLock__
push esi
call fcn.00458b50
add esp, 0xc
mov ecx, esi
call fcn.00458cb0
jmp 0x4cf095
push str.vector___index_out_of_bounds
push str.__n___size__
push 0x5b5
push str....._buildtools_third_partylibc_trunkinclude_vector
push str._s:_d:_assertion__s_failed:__s
call fcn.00404fa4
or eax, 1
mov dword [0x5b8400], eax
push 0
push str.::InitializeProcThreadAttributeList
push 0x562d10
call fcn.004edd64
add esp, 0xc
mov dword [0x5b83fc], eax
mov eax, dword [0x5b8400]
jmp 0x4cf771
or eax, 2
mov dword [0x5b8400], eax
cmp dword [0x5b83fc], 0
je 0x4cfe56
push 0
push str.::UpdateProcThreadAttribute
push 0x562d10
call fcn.004edd64
add esp, 0xc
jmp 0x4cfe58
xor eax, eax
mov dword [0x5b8404], eax
mov ebx, dword [esp + 4]
jmp 0x4cf77e