Function at 0x14004a11d
Capabilities:
Create process on windows

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x338
lea rbp, [rsp + 0x80]
movaps xmmword [rbp + 0x2a0], xmm8
movaps xmmword [rbp + 0x290], xmm7
movaps xmmword [rbp + 0x280], xmm6
mov qword [rbp + 0x278], 0xfffffffffffffffe
mov qword [rbp + 0x260], rcx
call fcn.1400698a8
test al, al
je 0x14004a1b6
mov dword [rsp + 0x20], 4
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace_::StartHandlerProcess_std::unique_ptr_BackgroundHandlerStartThreadData__
lea r8, str.xplat_third_partycrashpadclientcrashpad_client_win.cc
lea rcx, [rbp + 0x70]
mov r9d, 0x178
call fcn.1400366da
lea rdx, str.Check_failed:__IsThreadInLoaderLock__
lea rcx, [rbp + 0x70]
call fcn.14000345f
lea rdx, [0x140146f36]
mov rcx, rax
call fcn.14000345f
lea rcx, [rbp + 0x70]
call fcn.140036d3a
lea rdx, [rbp + 0x180]
mov qword [rdx], 0
movaps xmm8, xmmword [0x140115390]
movups xmmword [rdx + 0x10], xmm8
mov word [rdx], 0
mov rax, qword [rbp + 0x260]
mov rcx, qword [rax]
call fcn.1400698d8
mov rax, qword [rbp + 0x260]
mov rax, qword [rax]
mov rdi, qword [rax + 0x90]
mov rbx, qword [rax + 0x98]
lea r12, [rbp + 0x70]
lea r14, [rbp - 0x10]
lea r15, [rbp + 0x180]
cmp rdi, rbx
je 0x14004a296
cmp qword [rdi + 0x18], 0x10
mov rax, rdi
jb 0x14004a222
mov rax, qword [rdi]
mov qword [rbp - 0x10], rax
mov rax, qword [rdi + 0x10]
mov qword [rbp - 8], rax
mov rcx, r12
mov rdx, r14
call fcn.1400478ac
mov rcx, r12
mov rdx, r15
call fcn.1400698d8
mov rax, qword [rbp + 0x88]
cmp rax, 8
jb 0x14004a28d
mov rcx, qword [rbp + 0x70]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x14004a288
mov rsi, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rsi
cmp rcx, 0x20
jae 0x14004b78d
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, rsi
call fcn.1400e7768
add rdi, 0x20
jmp 0x14004a20c
mov rax, qword [rbp + 0x260]
mov rsi, qword [rax]
cmp qword [rsi + 0x30], 0
je 0x14004a3a6
lea rcx, [rbp + 0x1a0]
mov qword [rcx], 0
movaps xmm0, xmmword [section..rdata]
movups xmmword [rcx + 0x10], xmm0
mov byte [rcx], 0
lea rdx, str.database
mov r8d, 8
call fcn.14000136e
add rsi, 0x20
lea rcx, [rbp + 0x70]
lea rdx, [rbp + 0x1a0]
mov r8, rsi
call fcn.14004d291
lea rcx, [rbp + 0x70]
lea rdx, [rbp + 0x180]
call fcn.1400698d8
mov rax, qword [rbp + 0x88]
cmp rax, 8
jb 0x14004a349
mov rcx, qword [rbp + 0x70]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x14004a344
mov rbx, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rbx
cmp rcx, 0x20
jae 0x14004b841
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, rbx
call fcn.1400e7768
movups xmmword [rbp + 0x80], xmm8
mov word [rbp + 0x70], 0
mov rax, qword [rbp + 0x1b8]
cmp rax, 0x10
jb 0x14004a39c
mov rcx, qword [rbp + 0x1a0]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14004a397
mov rbx, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rbx
cmp rcx, 0x20
jae 0x14004b846
add rax, 0x28
mov rdx, rax
mov rcx, rbx
call fcn.1400e7768
mov rax, qword [rbp + 0x260]
mov rsi, qword [rax]
cmp qword [rsi + 0x50], 0
je 0x14004a4ac
lea rcx, [rbp + 0x1a0]
mov qword [rcx], 0
movaps xmm0, xmmword [section..rdata]
movups xmmword [rcx + 0x10], xmm0
mov byte [rcx], 0
lea rdx, str.metrics_dir
mov r8d, 0xb
call fcn.14000136e
add rsi, 0x40
lea rcx, [rbp + 0x70]
lea rdx, [rbp + 0x1a0]
mov r8, rsi
call fcn.14004d291
lea rcx, [rbp + 0x70]
lea rdx, [rbp + 0x180]
call fcn.1400698d8
mov rax, qword [rbp + 0x88]
cmp rax, 8
jb 0x14004a44f
mov rcx, qword [rbp + 0x70]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x14004a44a
mov rbx, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rbx
cmp rcx, 0x20
jae 0x14004b84b
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, rbx
call fcn.1400e7768
movups xmmword [rbp + 0x80], xmm8
mov word [rbp + 0x70], 0
mov rax, qword [rbp + 0x1b8]
cmp rax, 0x10
jb 0x14004a4a2
mov rcx, qword [rbp + 0x1a0]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14004a49d
mov rbx, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rbx
cmp rcx, 0x20
jae 0x14004b850
add rax, 0x28
mov rdx, rax
mov rcx, rbx
call fcn.1400e7768
mov rax, qword [rbp + 0x260]
mov rsi, qword [rax]
mov rax, qword [rsi + 0x70]
test rax, rax
je 0x14004a61c
cmp qword [rsi + 0x78], 0x10
jb 0x14004a4c6
mov rsi, qword [rsi + 0x60]
jmp 0x14004a4ca
add rsi, 0x60
lea rdx, [rbp - 0x30]
mov qword [rdx], rsi
mov qword [rdx + 8], rax
lea rcx, [rbp + 0x1a0]
call fcn.1400478ac
lea rcx, [rbp + 0x10]
mov qword [rcx], 0
movaps xmm0, xmmword [section..rdata]
movups xmmword [rcx + 0x10], xmm0
mov byte [rcx], 0
lea rdx, [0x14013c004]
mov r8d, 3
call fcn.14000136e
lea rcx, [rbp + 0x70]
lea rdx, [rbp + 0x10]
lea r8, [rbp + 0x1a0]
call fcn.14004d291
lea rcx, [rbp + 0x70]
lea rdx, [rbp + 0x180]
call fcn.1400698d8
mov rax, qword [rbp + 0x88]
cmp rax, 8
jb 0x14004a579
mov rcx, qword [rbp + 0x70]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x14004a574
mov rbx, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rbx
cmp rcx, 0x20
jae 0x14004b855
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, rbx
call fcn.1400e7768
movups xmmword [rbp + 0x80], xmm8
mov word [rbp + 0x70], 0
mov rax, qword [rbp + 0x28]
cmp rax, 0x10
jb 0x14004a5c6
mov rcx, qword [rbp + 0x10]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14004a5c1
mov rbx, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rbx
cmp rcx, 0x20
jae 0x14004b85a
add rax, 0x28
mov rdx, rax
mov rcx, rbx
call fcn.1400e7768
mov rax, qword [rbp + 0x1b8]
cmp rax, 8
jb 0x14004a612
mov rcx, qword [rbp + 0x1a0]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x14004a60d
mov rbx, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rbx
cmp rcx, 0x20
jae 0x14004b85f
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, rbx
call fcn.1400e7768
mov rax, qword [rbp + 0x260]
mov rsi, qword [rax]
mov r14, qword [rsi + 0x80]
mov r13, qword [r14]
lea rax, [rbp + 0x60]
mov qword [rax], r13
xorps xmm6, xmm6
movaps xmm7, xmmword [section..rdata]
mov qword [rbp + 0x178], r14
cmp r13, r14
je 0x14004a9d0
mov r15, qword [r13 + 0x30]
movabs rax, 0x7fffffffffffffff
cmp r15, rax
je 0x14004b788
mov rax, qword [r13 + 0x20]
mov qword [rbp + 0x268], rax
mov rbx, qword [r13 + 0x38]
mov qword [rbp + 0x240], 0
lea rax, [rbp + 0x250]
movups xmmword [rax], xmm6
lea rsi, [r15 + 1]
mov r12d, send
lea rdi, [rbp + 0x240]
cmp rsi, 0x10
jb 0x14004a6f6
mov r14, rsi
or r14, 0xf
movabs rcx, 0x8000000000000000
movabs r12, 0x7fffffffffffffff
js 0x14004a6d3
cmp r14, 0x17
mov eax, 0x16
cmovb r14, rax
lea rcx, [r14 + 1]
cmp r14, 0xfff
jb 0x14004a6dd
mov r12, r14
call fcn.1400014ce
mov rdi, rax
jmp 0x14004a6e8
call fcn.1400e7770
mov rdi, rax
mov r12, r14
mov r14, qword [rbp + 0x178]
mov qword [rbp + 0x240], rdi
lea rdx, [r13 + 0x20]
cmp rbx, 0x10
cmovae rdx, qword [rbp + 0x268]
mov qword [rbp + 0x250], rsi
mov qword [rbp + 0x258], r12
mov rcx, rdi
mov r8, r15
call sub.VCRUNTIME140.dll_memcpy
mov word [rdi + r15], 0x3d
cmp qword [r13 + 0x58], 0x10
jb 0x14004a733
mov r9, qword [r13 + 0x40]
jmp 0x14004a737
lea r9, [r13 + 0x40]
mov r8, qword [r13 + 0x50]
mov rcx, qword [rbp + 0x250]
mov rax, qword [rbp + 0x258]
mov rdx, rax
sub rdx, rcx
cmp rdx, r8
jae 0x14004a76a
mov qword [rsp + 0x20], r8
lea rcx, [rbp + 0x240]
mov rdx, r8
call fcn.1400022ee
jmp 0x14004a79f
lea rsi, [rcx + r8]
mov qword [rbp + 0x250], rsi
lea rdi, [rbp + 0x240]
cmp rax, 0x10
jb 0x14004a789
mov rdi, qword [rbp + 0x240]
add rcx, rdi
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
mov byte [rdi + rsi], 0
lea rax, [rbp + 0x240]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
movaps xmmword [rbp + 0x20], xmm1
movaps xmmword [rbp + 0x10], xmm0
movups xmmword [rax + 0x10], xmm7
mov byte [rax], 0
mov rax, qword [rbp + 0x20]
cmp qword [rbp + 0x28], 0x10
lea rcx, [rbp + 0x10]
jb 0x14004a7c8
mov rcx, qword [rbp + 0x10]
mov qword [rbp], rcx
mov qword [rbp + 8], rax
lea rcx, [rbp + 0x1a0]
mov rdx, rbp
call fcn.1400478ac
mov qword [rbp + 0x210], 0
movups xmmword [rbp + 0x220], xmm7
mov byte [rbp + 0x210], 0
mov r8d, 0xa
lea rsi, [rbp + 0x210]
mov rcx, rsi
lea rdx, [0x14013bcc9]
call fcn.14000136e
lea rdi, [rbp + 0x70]
mov rcx, rdi
mov rdx, rsi
lea r8, [rbp + 0x1a0]
call fcn.14004d291
mov rcx, rdi
lea rdx, [rbp + 0x180]
call fcn.1400698d8
mov rax, qword [rbp + 0x88]
cmp rax, 8
jb 0x14004a882
mov rcx, qword [rbp + 0x70]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x14004a87d
mov rbx, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rbx
cmp rcx, 0x20
jae 0x14004b792
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, rbx
call fcn.1400e7768
movups xmmword [rbp + 0x80], xmm8
mov word [rbp + 0x70], 0
mov rax, qword [rbp + 0x228]
cmp rax, 0x10
jb 0x14004a8d5
mov rcx, qword [rbp + 0x210]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14004a8d0
mov rbx, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rbx
cmp rcx, 0x20
jae 0x14004b797
add rax, 0x28
mov rdx, rax
mov rcx, rbx
call fcn.1400e7768
mov rax, qword [rbp + 0x1b8]
cmp rax, 8
jb 0x14004a921
mov rcx, qword [rbp + 0x1a0]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x14004a91c
mov rbx, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rbx
cmp rcx, 0x20
jae 0x14004b79c
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, rbx
call fcn.1400e7768
movups xmmword [rbp + 0x1b0], xmm8
mov word [rbp + 0x1a0], 0
mov rax, qword [rbp + 0x28]
cmp rax, 0x10
jb 0x14004a971
mov rcx, qword [rbp + 0x10]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14004a96c
mov rbx, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rbx
cmp rcx, 0x20
jae 0x14004b7a1
add rax, 0x28
mov rdx, rax
mov rcx, rbx
call fcn.1400e7768
movaps xmmword [rbp + 0x20], xmm7
mov byte [rbp + 0x10], 0
mov rax, qword [rbp + 0x258]
cmp rax, 0x10
jb 0x14004a9be
mov rcx, qword [rbp + 0x240]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14004a9b9
mov rbx, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rbx
cmp rcx, 0x20
jae 0x14004b7a6
add rax, 0x28
mov rdx, rax
mov rcx, rbx
call fcn.1400e7768
lea rcx, [rbp + 0x60]
call fcn.14001480c
mov r13, qword [rbp + 0x60]
jmp 0x14004a63e
mov rax, qword [rbp + 0x260]
mov rax, qword [rax]
mov rsi, qword [rax + 0xa8]
mov rbx, qword [rax + 0xb0]
lea r14, str.attachment
lea r12, [rbp + 0x1a0]
lea r13, [rbp + 0x70]
lea r15, [rbp + 0x180]
cmp rsi, rbx
je 0x14004aaf2
mov qword [rbp + 0x1a0], 0
movups xmmword [rbp + 0x1b0], xmm7
mov byte [rbp + 0x1a0], 0
mov r8d, 0xa
mov rcx, r12
mov rdx, r14
call fcn.14000136e
mov rcx, r13
mov rdx, r12
mov r8, rsi
call fcn.14004d291
mov rcx, r13
mov rdx, r15
call fcn.1400698d8
mov rax, qword [rbp + 0x88]
cmp rax, 8
jb 0x14004aa96
mov rcx, qword [rbp + 0x70]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x14004aa91
mov rdi, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rdi
cmp rcx, 0x20
jae 0x14004b7ab
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, rdi
call fcn.1400e7768
movups xmmword [rbp + 0x80], xmm8
mov word [rbp + 0x70], 0
mov rax, qword [rbp + 0x1b8]
cmp rax, 0x10
jb 0x14004aae9
mov rcx, qword [rbp + 0x1a0]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14004aae4
mov rdi, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rdi
cmp rcx, 0x20
jae 0x14004b7b0
add rax, 0x28
mov rdx, rax
mov rcx, rdi
call fcn.1400e7768
add rsi, 0x20
jmp 0x14004aa01
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, 0x1f0fff
mov edx, 1
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [rbp + 0x230], rax
test rax, rax
je 0x14004aeb6
mov rcx, qword [rbp + 0x260]
mov rcx, qword [rcx]
mov rcx, qword [rcx + 0xe0]
mov r9, qword [0x14019974c]
mov r8, qword [0x140199744]
mov rdx, qword [0x140199738]
lea rbx, [0x14019f178]
mov qword [rsp + 0x40], rbx
lea rbx, [0x14019f168]
mov qword [rsp + 0x38], rbx
lea rbx, [0x14019f158]
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rbp + 0x10]
call fcn.1400388a0
lea rcx, [rbp + 0x10]
lea rdx, [rbp + 0x240]
call fcn.140038c44
lea rcx, [rbp + 0x210]
mov qword [rcx], 0
movups xmmword [rcx + 0x10], xmm7
mov byte [rcx], 0
lea rdx, str.__initial_client_data
mov r8d, 0x16
call fcn.14000136e
lea rsi, [rbp + 0x1a0]
lea r14, [rbp + 0x210]
lea r9, [rbp + 0x240]
mov rcx, rsi
mov r8, r14
call fcn.140014ec6
mov rax, qword [rbp + 0x1b0]
cmp qword [rbp + 0x1b8], 0x10
jb 0x14004abe7
mov rsi, qword [rbp + 0x1a0]
lea rdx, [rbp - 0x20]
mov qword [rdx], rsi
mov qword [rdx + 8], rax
lea rcx, [rbp + 0x70]
call fcn.1400478ac
lea rcx, [rbp + 0x70]
lea r15, [rbp + 0x180]
mov rdx, r15
call fcn.1400698d8
mov rax, qword [rbp + 0x88]
cmp rax, 8
jb 0x14004ac57
mov rcx, qword [rbp + 0x70]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x14004ac52
mov rbx, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rbx
cmp rcx, 0x20
jae 0x14004b864
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, rbx
call fcn.1400e7768
movups xmmword [rbp + 0x80], xmm8
mov word [rbp + 0x70], 0
mov rax, qword [rbp + 0x1b8]
cmp rax, 0x10
jb 0x14004acaa
mov rcx, qword [rbp + 0x1a0]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14004aca5
mov rbx, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rbx
cmp rcx, 0x20
jae 0x14004b869
add rax, 0x28
mov rdx, rax
mov rcx, rbx
call fcn.1400e7768
movups xmmword [rbp + 0x1b0], xmm7
mov byte [rbp + 0x1a0], 0
mov rax, qword [rbp + 0x228]
cmp rax, 0x10
jb 0x14004acfd
mov rcx, qword [rbp + 0x210]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14004acf8
mov rbx, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rbx
cmp rcx, 0x20
jae 0x14004b86e
add rax, 0x28
mov rdx, rax
mov rcx, rbx
call fcn.1400e7768
mov rax, qword [rbp + 0x258]
cmp rax, 0x10
jb 0x14004ad42
mov rcx, qword [rbp + 0x240]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14004ad3d
mov rbx, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rbx
cmp rcx, 0x20
jae 0x14004b873
add rax, 0x28
mov rdx, rax
mov rcx, rbx
call fcn.1400e7768
xorps xmm0, xmm0
movaps xmmword [rbp + 0x1d0], xmm0
movaps xmmword [rbp + 0x200], xmm0
movaps xmmword [rbp + 0x1f0], xmm0
movaps xmmword [rbp + 0x1e0], xmm0
movaps xmmword [rbp + 0x1c0], xmm0
movaps xmmword [rbp + 0x1b0], xmm0
movaps xmmword [rbp + 0x1a0], xmm0
mov dword [rbp + 0x1dc], 0x100
mov ecx, 0xfffffff6
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov qword [rbp + 0x1f0], rax
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov qword [rbp + 0x1f8], rax
mov ecx, 0xfffffff4
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov qword [rbp + 0x200], rax
xor eax, eax
mov qword [rbp + 0x250], rax
xorps xmm0, xmm0
movaps xmmword [rbp + 0x240], xmm0
mov qword [rbp + 0x238], rax
mov eax, dword [0x14019f1b8]
mov ecx, dword [0x14019ea3c]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14004b7b5
mov eax, dword [0x14019f1c8]
mov ecx, dword [0x14019ea3c]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14004b7fc
mov rbx, qword [0x14019f1b0]
test rbx, rbx
je 0x14004af06
cmp qword [0x14019f1c0], 0
je 0x14004af06
mov dword [rbp + 0x1a0], WSACleanup
mov qword [rbp + 0x270], 0
lea r9, [rbp + 0x210]
xor ecx, ecx
mov edx, 1
xor r8d, r8d
call rbx
test eax, eax
je 0x14004b020
mov qword [rbp + 0x270], 0
mov dword [rsp + 0x20], 2
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace_::StartHandlerProcess_std::unique_ptr_BackgroundHandlerStartThreadData__
lea r8, str.xplat_third_partycrashpadclientcrashpad_client_win.cc
lea rcx, [rbp + 0x70]
mov r9d, 0x1d0
call fcn.1400366da
lea rdx, str.InitializeProcThreadAttributeList__size__succeeded__expected_failure
lea rcx, [rbp + 0x70]
call fcn.14000345f
lea rcx, [rbp + 0x70]
call fcn.140036d3a
jmp 0x14004b3f2
call fcn.1400372c2
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 2
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace_::StartHandlerProcess_std::unique_ptr_BackgroundHandlerStartThreadData__
lea r8, str.xplat_third_partycrashpadclientcrashpad_client_win.cc
lea rcx, [rbp + 0x70]
mov r9d, 0x19f
call fcn.1400372da
lea rdx, [0x14013ae31]
lea rcx, [rbp + 0x70]
call fcn.14000345f
lea rcx, [rbp + 0x70]
call fcn.14003730a
xor esi, esi
xor edi, edi
jmp 0x14004b451
mov dword [rbp + 0x1a0], WSAGetLastError
xor ebx, ebx
xor edi, edi
mov rax, qword [rbp + 0x260]
mov rcx, qword [rax]
mov rax, qword [rcx + 0x10]
cmp rax, 0xb
mov qword [rbp + 0x268], rbx
ja 0x14004af49
cmp qword [rbp + 0x198], 8
jb 0x14004b181
mov r15, qword [rbp + 0x180]
jmp 0x14004b188
mov qword [rbp + 0x70], 0
movups xmmword [rbp + 0x80], xmm8
mov word [rbp + 0x70], 0
cmp qword [rcx + 0x18], 8
jb 0x14004af69
mov rcx, qword [rcx]
lea r9, [rcx + rax*2]
add r9, 0xffffffffffffffe8
mov qword [rbp + 0x270], rbx
lea rsi, [rbp + 0x70]
mov edx, 0xc
mov rcx, rsi
call fcn.14000a448
cmp qword [rbp + 0x88], 8
jb 0x14004af97
mov rsi, qword [rbp + 0x70]
lea rdx, str.rundll32.exe
mov rcx, rsi
call sub.api_ms_win_crt_string_l1_1_0.dll__wcsicmp
mov esi, eax
mov rax, qword [rbp + 0x88]
cmp rax, 8
mov rbx, qword [rbp + 0x268]
jb 0x14004aff8
mov rcx, qword [rbp + 0x70]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x14004aff3
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14004b892
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
call fcn.1400e7768
cmp qword [rbp + 0x198], 8
jb 0x14004b009
mov r15, qword [rbp + 0x180]
test esi, esi
je 0x14004b194
mov rax, qword [rbp + 0x260]
mov rcx, qword [rax]
jmp 0x14004b188
mov qword [rbp + 0x270], 0
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x14004b395
mov rcx, qword [rbp + 0x210]
mov qword [rbp + 0x270], 0
call fcn.1400eb800
mov rbx, rax
mov qword [rbp + 0x208], rax
mov rax, qword [0x14019f1b0]
mov qword [rbp + 0x270], rbx
lea r9, [rbp + 0x210]
mov rcx, rbx
mov edx, 1
xor r8d, r8d
call rax
test eax, eax
je 0x14004b4f7
mov qword [rbp + 0x270], rbx
lea rcx, [rbp + 0x238]
call fcn.14004d8d6
mov rax, qword [rbp + 0x208]
mov qword [rbp + 0x238], rax
mov rdi, qword [rbp + 0x250]
mov r12, qword [rbp + 0x240]
mov r13, qword [rbp + 0x248]
mov rax, rdi
sub rax, r12
cmp rax, 0x3f
ja 0x14004b156
mov qword [rbp + 0x270], rbx
mov ecx, 0x40
call fcn.1400e7770
mov rdi, rax
mov rsi, qword [rbp + 0x240]
mov r8, qword [rbp + 0x248]
sub r8, rsi
mov rcx, rax
mov rdx, rsi
call sub.VCRUNTIME140.dll_memmove
test rsi, rsi
je 0x14004b137
mov rdx, qword [rbp + 0x250]
sub rdx, rsi
cmp rdx, 0x1000
jb 0x14004b12f
mov rax, qword [rsi - 8]
add rsi, 0xfffffffffffffff8
sub rsi, rax
cmp rsi, 0x20
jae 0x14004b897
add rdx, 0x27
mov rsi, rax
mov rcx, rsi
call fcn.1400e7768
sub r13, r12
mov qword [rbp + 0x240], rdi
add r13, rdi
mov qword [rbp + 0x248], r13
add rdi, 0x40
mov qword [rbp + 0x250], rdi
cmp r13, rdi
je 0x14004b54f
mov rax, qword [0x140199738]
mov qword [r13], rax
mov rdx, qword [rbp + 0x248]
add rdx, 8
mov qword [rbp + 0x248], rdx
jmp 0x14004b573
lea r15, [rbp + 0x180]
cmp qword [rcx + 0x18], 8
jb 0x14004b196
mov rcx, qword [rcx]
jmp 0x14004b196
xor ecx, ecx
mov qword [rbp + 0x270], rbx
mov qword [rsp + 0x48], r14
lea rax, [rbp + 0x1a0]
mov qword [rsp + 0x40], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], 1
mov rdx, r15
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x14004b333
mov rcx, qword [rbp + 0x218]
mov qword [rbp + 0x270], rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
jne 0x14004b24d
mov qword [rbp + 0x270], rbx
call fcn.1400372c2
mov qword [rbp + 0x270], rbx
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 1
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace_::StartHandlerProcess_std::unique_ptr_BackgroundHandlerStartThreadData__
lea r8, str.xplat_third_partycrashpadclientcrashpad_client_win.cc
lea rcx, [rbp + 0x70]
mov r9d, 0x220
call fcn.1400372da
lea rdx, str.CloseHandle_thread
lea rcx, [rbp + 0x70]
call fcn.14000345f
lea rcx, [rbp + 0x70]
call fcn.14003730a
mov rbx, qword [rbp + 0x268]
mov rcx, qword [rbp + 0x210]
mov qword [rbp + 0x270], rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
jne 0x14004b2c1
mov qword [rbp + 0x270], rbx
call fcn.1400372c2
mov qword [rbp + 0x270], rbx
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 1
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace_::StartHandlerProcess_std::unique_ptr_BackgroundHandlerStartThreadData__
lea r8, str.xplat_third_partycrashpadclientcrashpad_client_win.cc
lea rcx, [rbp + 0x70]
mov r9d, 0x223
call fcn.1400372da
lea rdx, str.CloseHandle_process
lea rcx, [rbp + 0x70]
call fcn.14000345f
lea rcx, [rbp + 0x70]
call fcn.14003730a
mov rbx, qword [rbp + 0x268]
mov ecx, 0xe0
mov rax, qword [rbp + 0x260]
add rcx, qword [rax]
lea rdx, [rbp + 0x70]
mov qword [rdx], 0xffffffffffffffff
mov qword [rbp + 0x270], rbx
call fcn.140045830
xorps xmm0, xmm0
lea rdx, [rbp + 0x70]
movups xmmword [rdx + 0x14], xmm0
movups xmmword [rdx + 4], xmm0
mov dword [rdx], 2
lea r8, [rbp + 0x60]
mov dword [r8 + 8], 0
mov qword [r8], 0
mov ecx, 0xc0
mov rax, qword [rbp + 0x260]
add rcx, qword [rax]
mov qword [rbp + 0x270], rbx
call fcn.1400681a8
mov esi, eax
mov edi, eax
jmp 0x14004b3f8
mov qword [rbp + 0x270], rbx
call fcn.1400372c2
mov qword [rbp + 0x270], rbx
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 2
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace_::StartHandlerProcess_std::unique_ptr_BackgroundHandlerStartThreadData__
lea r8, str.xplat_third_partycrashpadclientcrashpad_client_win.cc
lea rcx, [rbp + 0x70]
mov r9d, 0x21b
call fcn.1400372da
lea rdx, str.CreateProcess
lea rcx, [rbp + 0x70]
call fcn.14000345f
lea rcx, [rbp + 0x70]
call fcn.14003730a
xor esi, esi
xor edi, edi
mov rbx, qword [rbp + 0x268]
jmp 0x14004b3f8
mov qword [rbp + 0x270], 0
call fcn.1400372c2
mov qword [rbp + 0x270], 0
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 2
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace_::StartHandlerProcess_std::unique_ptr_BackgroundHandlerStartThreadData__
lea r8, str.xplat_third_partycrashpadclientcrashpad_client_win.cc
lea rcx, [rbp + 0x70]
mov r9d, 0x1d4
call fcn.1400372da
lea rdx, str.InitializeProcThreadAttributeList__size_
lea rcx, [rbp + 0x70]
call fcn.14000345f
lea rcx, [rbp + 0x70]
call fcn.14003730a
xor ebx, ebx
xor esi, esi
xor edi, edi
lea rcx, [rbp + 0x238]
call fcn.14004d8d6
test rbx, rbx
je 0x14004b411
mov rcx, rbx
call fcn.1400e7768
mov rcx, qword [rbp + 0x240]
test rcx, rcx
je 0x14004b451
mov rdx, qword [rbp + 0x250]
sub rdx, rcx
cmp rdx, 0x1000
jb 0x14004b44c
mov rax, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rax
cmp rcx, 0x20
jae 0x14004b83c
add rdx, 0x27
mov rcx, rax
call fcn.1400e7768
mov rcx, qword [rbp + 0x230]
test rcx, rcx
je 0x14004b462
call fcn.14005cd4e
mov rax, qword [rbp + 0x198]
cmp rax, 8
jb 0x14004b4ae
mov rcx, qword [rbp + 0x180]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x14004b4a9
mov rbx, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rbx
cmp rcx, 0x20
jae 0x14004b837
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, rbx
call fcn.1400e7768
xor eax, eax
cmp sil, 1
adc rax, 1
mov qword [0x14019f1a8], rax
mov rcx, qword [rbp + 0x260]
call fcn.14004d074
mov eax, edi
movaps xmm6, xmmword [rbp + 0x280]
movaps xmm7, xmmword [rbp + 0x290]
movaps xmm8, xmmword [rbp + 0x2a0]
add rsp, 0x338
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
mov qword [rbp + 0x270], rbx
call fcn.1400372c2
mov qword [rbp + 0x270], rbx
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 2
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace_::StartHandlerProcess_std::unique_ptr_BackgroundHandlerStartThreadData__
lea r8, str.xplat_third_partycrashpadclientcrashpad_client_win.cc
lea rcx, [rbp + 0x70]
mov r9d, 0x1df
call fcn.1400372da
mov qword [rbp + 0x268], rbx
lea rdx, [0x14013a8a3]
lea rcx, [rbp + 0x70]
call fcn.14000345f
jmp 0x14004b773
mov qword [rbp + 0x270], rbx
lea r8, [0x140199738]
lea rcx, [rbp + 0x240]
mov rdx, rdi
call fcn.14004d994
mov rdx, qword [rbp + 0x248]
cmp rdx, qword [rbp + 0x250]
je 0x14004b59a
mov rax, qword [0x140199744]
mov qword [rdx], rax
mov rdx, qword [rbp + 0x248]
add rdx, 8
mov qword [rbp + 0x248], rdx
jmp 0x14004b5bb
mov qword [rbp + 0x270], rbx
lea r8, [0x140199744]
lea rcx, [rbp + 0x240]
call fcn.14004d994
mov rdx, qword [rbp + 0x248]
cmp rdx, qword [rbp + 0x250]
je 0x14004b5e2
mov rax, qword [0x14019974c]
mov qword [rdx], rax
mov rdx, qword [rbp + 0x248]
add rdx, 8
mov qword [rbp + 0x248], rdx
jmp 0x14004b603
mov qword [rbp + 0x270], rbx
lea r8, [0x14019974c]
lea rcx, [rbp + 0x240]
call fcn.14004d994
mov rdx, qword [rbp + 0x248]
mov r8d, 0xe0
mov rax, qword [rbp + 0x260]
add r8, qword [rax]
cmp rdx, qword [rbp + 0x250]
je 0x14004b636
mov rax, qword [r8]
mov qword [rdx], rax
mov rdx, qword [rbp + 0x248]
add rdx, 8
mov qword [rbp + 0x248], rdx
jmp 0x14004b650
mov qword [rbp + 0x270], rbx
lea rcx, [rbp + 0x240]
call fcn.14004d994
mov rdx, qword [rbp + 0x248]
cmp rdx, qword [rbp + 0x250]
je 0x14004b66d
mov rax, qword [rbp + 0x230]
mov qword [rdx], rax
add qword [rbp + 0x248], 8
jmp 0x14004b687
mov qword [rbp + 0x270], rbx
lea rcx, [rbp + 0x240]
lea r8, [rbp + 0x230]
call fcn.14004d994
mov rdx, qword [rbp + 0x1f0]
mov qword [rbp + 0x270], rbx
lea rcx, [rbp + 0x240]
call fcn.14004d68f
mov rdx, qword [rbp + 0x1f8]
mov qword [rbp + 0x270], rbx
lea rcx, [rbp + 0x240]
call fcn.14004d68f
mov rdx, qword [rbp + 0x200]
mov qword [rbp + 0x270], rbx
lea rcx, [rbp + 0x240]
call fcn.14004d68f
mov rax, qword [0x14019f1c0]
mov r9, qword [rbp + 0x240]
mov rdx, qword [rbp + 0x248]
sub rdx, r9
mov rcx, qword [rbp + 0x208]
mov qword [rbp + 0x270], rbx
xorps xmm0, xmm0
movups xmmword [rsp + 0x28], xmm0
mov qword [rsp + 0x20], rdx
mov r8d, 0x20002
xor edx, edx
call rax
test eax, eax
je 0x14004b720
mov edi, 0x80000
jmp 0x14004af14
mov qword [rbp + 0x270], rbx
call fcn.1400372c2
mov qword [rbp + 0x270], rbx
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 2
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace_::StartHandlerProcess_std::unique_ptr_BackgroundHandlerStartThreadData__
lea r8, str.xplat_third_partycrashpadclientcrashpad_client_win.cc
lea rcx, [rbp + 0x70]
mov r9d, 0x1f9
call fcn.1400372da
mov qword [rbp + 0x268], rbx
lea rdx, [0x14013ca7b]
lea rcx, [rbp + 0x70]
call fcn.14000345f
lea rcx, [rbp + 0x70]
call fcn.14003730a
mov rbx, qword [rbp + 0x268]
jmp 0x14004b3f4
call fcn.1400014b7
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
lea rcx, [0x14019f1b8]
call fcn.1400e78b0
cmp dword [0x14019f1b8], 0xffffffff
jne 0x14004adf5
lea rcx, [0x140147d12]
lea rdx, str.::InitializeProcThreadAttributeList
xor r8d, r8d
call fcn.140068a78
mov qword [0x14019f1b0], rax
lea rcx, [0x14019f1b8]
call fcn.1400e7948
jmp 0x14004adf5
lea rcx, [0x14019f1c8]
call fcn.1400e78b0
cmp dword [0x14019f1c8], 0xffffffff
jne 0x14004ae1a
cmp qword [0x14019f1b0], 0
je 0x14004b878
lea rcx, [0x140147d12]
lea rdx, str.::UpdateProcThreadAttribute
xor r8d, r8d
call fcn.140068a78
jmp 0x14004b87a
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
xor eax, eax
mov qword [0x14019f1c0], rax
lea rcx, [0x14019f1c8]
call fcn.1400e7948
jmp 0x14004ae1a
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
int3