Function at 0x1400ead30
Capabilities:
Create process on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x368
movaps xmmword [rsp + 0x350], xmm7
movaps xmmword [rsp + 0x340], xmm6
mov r13, rcx
mov rax, qword [0x14027c038]
xor rax, rsp
mov qword [rsp + 0x338], rax
call fcn.140107ae0
test al, al
jne 0x1400ec1d2
xorps xmm0, xmm0
lea rdx, [rsp + 0x320]
movaps xmmword [rdx], xmm0
mov qword [rdx + 0x10], 0
mov rcx, qword [r13]
call fcn.140107b10
mov r8, qword [r13]
mov rsi, qword [r8 + 0x78]
mov r15, qword [r8 + 0x80]
cmp rsi, r15
je 0x1400eae4a
lea rdi, [rsp + 0x170]
lea rbx, [rsp + 0x310]
lea r14, [rsp + 0x320]
jmp 0x1400eae1d
mov qword [rsp + 0x310], rsi
mov qword [rsp + 0x318], rax
mov rcx, rsi
test rcx, rcx
jne 0x1400eade7
test rax, rax
jne 0x1400ec17a
mov rcx, rdi
mov rdx, rbx
call fcn.140150c10
mov rcx, rdi
mov rdx, r14
call fcn.140107b10
cmp byte [rsp + 0x187], 0
jns 0x1400eae14
mov rcx, qword [rsp + 0x170]
call fcn.14018f674
add rsi, 0x18
cmp rsi, r15
je 0x1400eae46
movzx eax, byte [rsi + 0x17]
test al, al
jns 0x1400eadc6
mov rcx, qword [rsi]
mov rax, qword [rsi + 8]
mov qword [rsp + 0x310], rcx
mov qword [rsp + 0x318], rax
test rax, rax
jns 0x1400eadd9
jmp 0x1400ec1a6
mov r8, qword [r13]
movzx eax, byte [r8 + 0x2f]
test al, al
jns 0x1400eae57
mov rax, qword [r8 + 0x20]
test rax, rax
je 0x1400eaef4
lea rcx, [rsp + 0x80]
mov byte [rcx + 0x17], 8
lea rax, str.database
cmp rcx, rax
ja 0x1400eae89
lea rcx, [rsp + 0x88]
cmp rcx, rax
ja 0x1400ec14e
add r8, 0x18
movabs rax, 0x6573616261746164
lea rdx, [rsp + 0x80]
mov qword [rdx], rax
mov byte [rdx + 8], 0
lea rdi, [rsp + 0x170]
mov rcx, rdi
call fcn.1400ec4d0
lea rdx, [rsp + 0x320]
mov rcx, rdi
call fcn.140107b10
cmp byte [rdi + 0x17], 0
jns 0x1400eaed9
mov rcx, qword [rsp + 0x170]
call fcn.14018f674
cmp byte [rsp + 0x97], 0
jns 0x1400eaef0
mov rcx, qword [rsp + 0x80]
call fcn.14018f674
mov r8, qword [r13]
movzx eax, byte [r8 + 0x47]
test al, al
jns 0x1400eaf01
mov rax, qword [r8 + 0x38]
test rax, rax
je 0x1400eafa5
lea rcx, [rsp + 0x80]
mov byte [rcx + 0x17], 0xb
lea rax, str.metrics_dir
cmp rcx, rax
ja 0x1400eaf33
lea rcx, [rsp + 0x8b]
cmp rcx, rax
ja 0x1400ec14e
add r8, 0x30
movabs rax, 0x2d7363697274656d
lea rdx, [rsp + 0x80]
mov qword [rdx], rax
mov dword [rdx + 7], 0x7269642d
mov byte [rdx + 0xb], 0
lea rdi, [rsp + 0x170]
mov rcx, rdi
call fcn.1400ec4d0
lea rdx, [rsp + 0x320]
mov rcx, rdi
call fcn.140107b10
cmp byte [rdi + 0x17], 0
jns 0x1400eaf8a
mov rcx, qword [rsp + 0x170]
call fcn.14018f674
cmp byte [rsp + 0x97], 0
jns 0x1400eafa1
mov rcx, qword [rsp + 0x80]
call fcn.14018f674
mov r8, qword [r13]
movzx eax, byte [r8 + 0x5f]
test al, al
js 0x1400eb107
test rax, rax
je 0x1400eb0a2
add r8, 0x48
mov qword [rsp + 0x300], r8
mov qword [rsp + 0x308], rax
test r8, r8
je 0x1400ec17a
lea rcx, [rsp + 0x80]
lea rdx, [rsp + 0x300]
call fcn.140150c10
lea rcx, [rsp + 0x120]
mov byte [rcx + 0x17], 3
lea rax, [0x140252d9d]
cmp rcx, rax
ja 0x1400eb016
lea rcx, [rsp + 0x123]
cmp rcx, rax
ja 0x1400ec14e
mov al, byte [0x140252d9f]
lea rdx, [rsp + 0x120]
mov byte [rdx + 2], al
movzx eax, word [0x140252d9d]
mov word [rdx], ax
mov byte [rdx + 3], 0
lea rdi, [rsp + 0x170]
lea r8, [rsp + 0x80]
mov rcx, rdi
call fcn.1400ec4d0
lea rdx, [rsp + 0x320]
mov rcx, rdi
call fcn.140107b10
cmp byte [rdi + 0x17], 0
jns 0x1400eb070
mov rcx, qword [rsp + 0x170]
call fcn.14018f674
cmp byte [rsp + 0x137], 0
jns 0x1400eb087
mov rcx, qword [rsp + 0x120]
call fcn.14018f674
cmp byte [rsp + 0x97], 0
jns 0x1400eb09e
mov rcx, qword [rsp + 0x80]
call fcn.14018f674
mov r8, qword [r13]
mov rsi, qword [r8 + 0x60]
lea rbp, [r8 + 0x68]
cmp rsi, rbp
je 0x1400eb2e2
mov qword [rsp + 0x60], r13
lea rax, str.annotation
lea rdi, [rsp + 0x2b0]
cmp rdi, rax
seta cl
lea rdx, [rsp + 0x2ba]
cmp rdx, rax
setbe r15b
or r15b, cl
lea rbx, [rsp + 0x2d0]
xorps xmm6, xmm6
lea r14, [rsp + 0x80]
lea r12, [rsp + 0x170]
lea r13, [rsp + 0x320]
jmp 0x1400eb2a1
mov rax, qword [r8 + 0x50]
test rax, rax
je 0x1400eb0a2
mov r8, qword [r8 + 0x48]
mov qword [rsp + 0x300], r8
mov qword [rsp + 0x308], rax
jns 0x1400eafcf
jmp 0x1400ec1a6
mov r8, qword [rsi + 0x40]
mov rdx, qword [rsi + 0x38]
mov rcx, rbx
call fcn.1400c9ab0
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x130], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x120], xmm0
movups xmmword [rax], xmm6
mov qword [rax + 0x10], 0
movzx ecx, byte [rsp + 0x137]
mov eax, ecx
and eax, 0x7f
test cl, cl
cmovs rax, qword [rsp + 0x128]
mov rcx, qword [rsp + 0x120]
lea rdx, [rsp + 0x120]
cmovns rcx, rdx
mov qword [rsp + 0x2f0], rcx
mov qword [rsp + 0x2f8], rax
test rax, rax
js 0x1400ec1a6
test rcx, rcx
jne 0x1400eb1b4
test rax, rax
jne 0x1400ec17a
mov rcx, r14
lea rdx, [rsp + 0x2f0]
call fcn.140150c10
mov byte [rsp + 0x2c7], 0xa
test r15b, r15b
je 0x1400ec14e
movabs rax, 0x697461746f6e6e61
mov qword [rsp + 0x2b0], rax
mov word [rsp + 0x2b8], 0x6e6f
mov byte [rsp + 0x2ba], 0
mov rcx, r12
mov rdx, rdi
mov r8, r14
call fcn.1400ec4d0
mov rcx, r12
mov rdx, r13
call fcn.140107b10
cmp byte [rsp + 0x187], 0
jns 0x1400eb229
mov rcx, qword [rsp + 0x170]
call fcn.14018f674
cmp byte [rsp + 0x2c7], 0
jns 0x1400eb240
mov rcx, qword [rsp + 0x2b0]
call fcn.14018f674
cmp byte [rsp + 0x97], 0
jns 0x1400eb257
mov rcx, qword [rsp + 0x80]
call fcn.14018f674
cmp byte [rsp + 0x137], 0
jns 0x1400eb26e
mov rcx, qword [rsp + 0x120]
call fcn.14018f674
cmp byte [rsp + 0x2e7], 0
jns 0x1400eb285
mov rcx, qword [rsp + 0x2d0]
call fcn.14018f674
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x1400eb2cb
mov rax, rcx
mov rcx, qword [rcx]
test rcx, rcx
jne 0x1400eb28e
mov rsi, rax
cmp rax, rbp
je 0x1400eb2d9
lea rdx, [rsi + 0x20]
mov rcx, rbx
mov r8b, 0x3d
call fcn.1400c0040
movzx r8d, byte [rsi + 0x4f]
test r8b, r8b
js 0x1400eb12f
lea rdx, [rsi + 0x38]
and r8d, 0x7f
jmp 0x1400eb137
mov rax, qword [rsi + 0x10]
cmp qword [rax], rsi
mov rsi, rax
jne 0x1400eb2cb
jmp 0x1400eb299
mov r13, qword [rsp + 0x60]
mov r8, qword [r13]
mov rdi, qword [r8 + 0x90]
mov rsi, qword [r8 + 0x98]
cmp rdi, rsi
je 0x1400eb3b9
lea rax, [0x14025b56b]
lea rbx, [rsp + 0x80]
cmp rbx, rax
seta cl
lea rdx, [rsp + 0x8a]
cmp rdx, rax
setbe bpl
or bpl, cl
movabs r12, 0x656d686361747461
lea r14, [rsp + 0x170]
lea r15, [rsp + 0x320]
jmp 0x1400eb352
mov rcx, qword [rsp + 0x80]
call fcn.14018f674
add rdi, 0x18
cmp rdi, rsi
je 0x1400eb3b9
mov byte [rsp + 0x97], 0xa
test bpl, bpl
je 0x1400ec14e
mov qword [rsp + 0x80], r12
mov word [rsp + 0x88], 0x746e
mov byte [rsp + 0x8a], 0
mov rcx, r14
mov rdx, rbx
mov r8, rdi
call fcn.1400ec4d0
mov rcx, r14
mov rdx, r15
call fcn.140107b10
cmp byte [rsp + 0x187], 0
jns 0x1400eb3ad
mov rcx, qword [rsp + 0x170]
call fcn.14018f674
cmp byte [rsp + 0x97], 0
jns 0x1400eb349
jmp 0x1400eb33c
movabs rbp, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x2e0], rbp
movaps xmm6, xmmword [0x14024afc0]
movaps xmmword [rsp + 0x2d0], xmm6
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, 0x1f0fff
mov edx, 1
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_OpenProcess]
lea r14, [0x14024c630]
mov qword [rsp + 0x2d0], r14
mov qword [rsp + 0x2d8], rax
mov byte [rsp + 0x2e0], 0
test rax, rax
jne 0x1400eb50b
mov ecx, 2
call fcn.140158c90
mov ebx, 2
test al, al
jne 0x1400eb4b8
xor ebp, ebp
mov qword [rsp + 0x2d0], r14
cmp byte [rsp + 0x2e0], 0
jne 0x1400ec1d5
mov rcx, qword [rsp + 0x2d8]
test rcx, rcx
je 0x1400eb45c
call fcn.1401078c0
cmp byte [rsp + 0x337], 0
jns 0x1400eb473
mov rcx, qword [rsp + 0x320]
call fcn.14018f674
mov qword [0x1402954c0], rbx
mov rcx, r13
call fcn.1400ec360
mov rcx, qword [rsp + 0x338]
xor rcx, rsp
call fcn.140190b30
mov eax, ebp
movaps xmm6, xmmword [rsp + 0x340]
movaps xmm7, xmmword [rsp + 0x350]
add rsp, 0x368
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rdi, [rsp + 0x170]
mov rcx, rdi
mov r8d, 0x1a6
mov r9d, 2
call fcn.1401f5220
lea rcx, [rsp + 0x180]
lea rdx, [0x14025b576]
mov r8d, recv
call fcn.1401ca740
mov rcx, rdi
call fcn.1401f52a0
jmp 0x1400eb432
lea rbx, [rsp + 0x120]
mov qword [rbx + 0x40], rbp
movaps xmmword [rbx + 0x30], xmm6
movaps xmmword [rbx + 0x20], xmm6
movaps xmmword [rbx + 0x10], xmm6
movaps xmmword [rbx], xmm6
mov rcx, qword [r13]
mov rcx, qword [rcx + 0xc8]
mov r9, qword [0x14028b88c]
mov r8, qword [0x14028b884]
mov rdx, qword [0x14028b878]
lea r10, [0x140295490]
mov qword [rsp + 0x40], r10
lea r10, [0x140295480]
mov qword [rsp + 0x38], r10
lea r10, [0x140295474]
mov qword [rsp + 0x30], r10
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
mov rcx, rbx
call fcn.140108090
lea rdi, [rsp + 0x2b0]
mov rcx, rbx
mov rdx, rdi
call fcn.1401085e0
lea rcx, [rsp + 0xf0]
mov byte [rcx + 0x17], reloc.WS2_32.dll_shutdown
lea rax, str.__initial_client_data
cmp rcx, rax
ja 0x1400eb5b8
lea rcx, [rsp + 0x106]
cmp rcx, rax
ja 0x1400ec14e
movups xmm0, xmmword [str.__initial_client_data]
lea rbx, [rsp + 0xf0]
movaps xmmword [rbx], xmm0
movabs rax, 0x3d617461642d746e
mov qword [rbx + 0xe], rax
movzx eax, byte [rsp + 0x2c7]
mov r8d, eax
and r8d, 0x7f
test al, al
cmovs r8, qword [rsp + 0x2b8]
mov byte [rbx + 0x16], 0
cmovs rdi, qword [rsp + 0x2b0]
mov rcx, rbx
mov rdx, rdi
call fcn.1400c9ab0
mov rcx, qword [rax + 0x10]
lea rdi, [rsp + 0x80]
mov qword [rdi + 0x10], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rdi], xmm0
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov qword [rax + 0x10], 0
movzx ecx, byte [rdi + 0x17]
mov eax, ecx
and eax, 0x7f
test cl, cl
cmovs rax, qword [rdi + 8]
mov rcx, qword [rdi]
cmovns rcx, rdi
mov qword [rsp + 0x110], rcx
mov qword [rsp + 0x118], rax
test rax, rax
js 0x1400ec1a6
test rcx, rcx
jne 0x1400eb66c
test rax, rax
jne 0x1400ec17a
lea r12, [rsp + 0x170]
lea rdx, [rsp + 0x110]
mov rcx, r12
call fcn.140150c10
lea r15, [rsp + 0x320]
mov rcx, r12
mov rdx, r15
call fcn.140107b10
cmp byte [r12 + 0x17], 0
jns 0x1400eb6ac
mov rcx, qword [rsp + 0x170]
call fcn.14018f674
cmp byte [rsp + 0x97], 0
jns 0x1400eb6c3
mov rcx, qword [rsp + 0x80]
call fcn.14018f674
cmp byte [rsp + 0x107], 0
jns 0x1400eb6da
mov rcx, qword [rsp + 0xf0]
call fcn.14018f674
cmp byte [rsp + 0x2c7], 0
jns 0x1400eb6f1
mov rcx, qword [rsp + 0x2b0]
call fcn.14018f674
xorps xmm7, xmm7
movaps xmmword [rsp + 0xb0], xmm7
movaps xmmword [rsp + 0xe0], xmm7
movaps xmmword [rsp + 0xd0], xmm7
movaps xmmword [rsp + 0xc0], xmm7
movaps xmmword [rsp + 0xa0], xmm7
movaps xmmword [rsp + 0x90], xmm7
movaps xmmword [rsp + 0x80], xmm7
mov dword [rsp + 0xbc], 0x100
mov rsi, qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov ecx, 0xfffffff6
call rsi
mov qword [rsp + 0xd0], rax
mov ecx, 0xfffffff5
call rsi
mov qword [rsp + 0xd8], rax
mov ecx, 0xfffffff4
call rsi
mov qword [rsp + 0xe0], rax
movaps xmmword [rsp + 0x2b0], xmm7
mov qword [rsp + 0x2c0], 0
mov eax, dword [0x1402954d0]
mov ecx, dword [0x14028c168]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400ec107
mov eax, dword [0x1402954e0]
mov ecx, dword [0x14028c168]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400ec0b2
mov rax, qword [0x1402954c8]
test rax, rax
je 0x1400eb8e8
cmp qword [0x1402954d8], 0
je 0x1400eb8e8
mov dword [rsp + 0x80], WSAStartup
lea r9, [rsp + 0xf0]
mov qword [r9], rbp
xor ecx, ecx
mov edx, 1
xor r8d, r8d
call qword [0x1402a8008]
test eax, eax
je 0x1400ebb35
mov ecx, 2
call fcn.140158c90
test al, al
jne 0x1400ebfc2
xor r12d, r12d
xor edi, edi
mov ebx, 2
xor ebp, ebp
test r12, r12
je 0x1400eb8a7
mov eax, dword [0x1402954f0]
mov ecx, dword [0x14028c168]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jle 0x1400eb897
lea rcx, [0x1402954f0]
call fcn.14018f790
cmp dword [0x1402954f0], 0xffffffff
jne 0x1400eb897
lea rcx, [0x140253442]
lea rdx, str.::DeleteProcThreadAttributeList
mov r8b, 1
call fcn.140108680
mov qword [0x1402954e8], rax
lea rcx, [0x1402954f0]
call fcn.14018f828
mov rax, qword [0x1402954e8]
mov rcx, r12
call qword [0x1402a8008]
test rdi, rdi
je 0x1400eb8b4
mov rcx, rdi
call fcn.14018f6b4
mov rcx, qword [rsp + 0x2b0]
test rcx, rcx
je 0x1400eb434
mov rax, qword [rsp + 0x2b8]
cmp rax, rcx
jne 0x1400ebf8c
mov qword [rsp + 0x2b8], rcx
call fcn.14018f674
jmp 0x1400eb434
mov dword [rsp + 0x80], WSAGetLastError
xor eax, eax
mov qword [rsp + 0x68], rax
xor eax, eax
mov qword [rsp + 0x58], rax
xor esi, esi
mov rdx, qword [r13]
movzx r8d, byte [rdx + 0x17]
test r8b, r8b
js 0x1400eba58
cmp r8b, 0xc
jae 0x1400eba67
xor r12d, r12d
mov qword [rsp + 0x100], rbp
movaps xmmword [rsp + 0xf0], xmm6
cmp byte [rsp + 0x337], 0
jns 0x1400eb944
mov r15, qword [rsp + 0x320]
test r12b, r12b
jne 0x1400eb95d
mov rcx, qword [r13]
cmp byte [rcx + 0x17], 0
mov r12, qword [rsp + 0x68]
jns 0x1400eb964
mov rcx, qword [rcx]
jmp 0x1400eb964
xor ecx, ecx
mov r12, qword [rsp + 0x68]
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x40], rdi
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], 1
mov rdx, r15
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x1400ebac6
mov rcx, qword [rsp + 0xf8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ebp, eax
mov ecx, 1
call fcn.140158c90
test al, al
mov rdi, qword [rsp + 0x58]
je 0x1400eb9c4
test ebp, ebp
je 0x1400ec00c
mov rcx, qword [rsp + 0xf0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ebp, eax
mov ecx, 1
call fcn.140158c90
test al, al
je 0x1400eb9ea
test ebp, ebp
je 0x1400ec05f
mov rsi, qword [r13]
mov rcx, qword [rsi + 0xc8]
cmp rcx, 0xffffffffffffffff
je 0x1400eba00
call fcn.1401078b0
mov qword [rsi + 0xc8], 0xffffffffffffffff
xorps xmm0, xmm0
lea rdx, [rsp + 0x170]
movups xmmword [rdx + 0x14], xmm0
movups xmmword [rdx + 4], xmm0
mov dword [rdx], 2
lea r8, [rsp + 0x70]
mov dword [r8 + 8], 0
mov qword [r8], 0
mov ecx, 0xa8
add rcx, qword [r13]
call fcn.140106640
mov ebp, eax
movzx eax, al
mov ebx, 2
sub rbx, rax
jmp 0x1400eb833
cmp qword [rdx + 8], 0xc
jb 0x1400eb91f
mov r8, qword [rdx + 8]
add r8, 0xfffffffffffffff4
mov qword [rsp + 0x20], rbx
mov rcx, r12
mov r9, 0xffffffffffffffff
call fcn.1400ca660
cmp byte [rsp + 0x187], 0
jns 0x1400eba91
mov r12, qword [rsp + 0x170]
lea rdx, str.rundll32.exe
mov rcx, r12
call fcn.1401ac12c
test eax, eax
sete r12b
cmp byte [rsp + 0x187], 0
jns 0x1400eb922
mov rcx, qword [rsp + 0x170]
call fcn.14018f674
jmp 0x1400eb922
mov ecx, 2
call fcn.140158c90
mov ebx, 2
test al, al
mov rdi, qword [rsp + 0x58]
je 0x1400eb831
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea r15, [rsp + 0x170]
mov rcx, r15
mov r8d, 0x222
mov r9d, 2
call fcn.1401f5220
lea rcx, [rsp + 0x180]
lea rdx, str.CreateProcess
mov r8d, recvfrom
call fcn.1401ca740
mov rcx, r15
call fcn.1401f52a0
jmp 0x1400eb831
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
je 0x1400ebba5
mov ecx, 2
call fcn.140158c90
test al, al
je 0x1400eb827
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rdi, [rsp + 0x170]
mov rcx, rdi
mov r8d, 0x1db
mov r9d, 2
call fcn.1401f5220
lea rcx, [rsp + 0x180]
lea rdx, str.InitializeProcThreadAttributeList__size_
mov r8d, 0x28
call fcn.1401ca740
mov rcx, rdi
call fcn.1401f52a0
jmp 0x1400eb827
mov qword [rsp + 0x60], r13
lea r13, [rsp + 0xf0]
mov rcx, qword [r13]
call fcn.14018f6ac
mov rcx, rax
mov qword [rsp + 0xe8], rax
mov rax, qword [0x1402954c8]
mov qword [rsp + 0x58], rcx
mov edx, 1
xor r8d, r8d
mov r9, r13
call qword [0x1402a8008]
test eax, eax
je 0x1400ebe54
mov rax, qword [rsp + 0xe8]
mov qword [rsp + 0x68], rax
mov rcx, qword [rsp + 0x2c0]
mov r13, qword [rsp + 0x2b0]
mov rsi, qword [rsp + 0x2b8]
mov rax, rcx
sub rax, r13
cmp rax, 0x3f
ja 0x1400ec1d8
mov ecx, 0x40
call fcn.14018f638
lea rcx, [rax + 0x40]
mov rdx, rsi
sub rdx, r13
lea rax, [rax + rdx]
mov rdx, rax
jne 0x1400ec1e0
mov qword [rsp + 0x2b0], rdx
mov qword [rsp + 0x2b8], rax
mov qword [rsp + 0x2c0], rcx
cmp rsi, r13
je 0x1400ebc69
add rsi, 0xfffffffffffffff8
jne 0x1400ebc59
jmp 0x1400ebf96
test r13, r13
jne 0x1400ebec4
cmp rax, rcx
jae 0x1400ebc95
test rax, rax
mov rsi, qword [rsp + 0x60]
je 0x1400ebf34
mov rcx, qword [0x14028b878]
mov qword [rax], rcx
add rax, 8
jmp 0x1400ebcae
lea rdx, [0x14028b878]
lea rcx, [rsp + 0x2b0]
call fcn.14013d700
mov rsi, qword [rsp + 0x60]
mov qword [rsp + 0x2b8], rax
cmp rax, qword [rsp + 0x2c0]
jae 0x1400ebcd9
test rax, rax
je 0x1400ebf34
mov rcx, qword [0x14028b884]
mov qword [rax], rcx
add rax, 8
jmp 0x1400ebced
lea rdx, [0x14028b884]
lea rcx, [rsp + 0x2b0]
call fcn.14013d700
mov qword [rsp + 0x2b8], rax
cmp rax, qword [rsp + 0x2c0]
jae 0x1400ebd18
test rax, rax
je 0x1400ebf34
mov rcx, qword [0x14028b88c]
mov qword [rax], rcx
add rax, 8
jmp 0x1400ebd2c
lea rdx, [0x14028b88c]
lea rcx, [rsp + 0x2b0]
call fcn.14013d700
mov qword [rsp + 0x2b8], rax
mov edx, 0xc8
add rdx, qword [rsi]
cmp rax, qword [rsp + 0x2c0]
jae 0x1400ebd5b
test rax, rax
je 0x1400ebf34
mov rcx, qword [rdx]
mov qword [rax], rcx
add rax, 8
jmp 0x1400ebd68
lea rcx, [rsp + 0x2b0]
call fcn.14013d700
mov qword [rsp + 0x2b8], rax
cmp rax, qword [rsp + 0x2c0]
jae 0x1400ebd94
test rax, rax
je 0x1400ebf34
mov rcx, qword [rsp + 0x2d8]
mov qword [rax], rcx
add rax, 8
jmp 0x1400ebda9
lea rdx, [rsp + 0x2d8]
lea rcx, [rsp + 0x2b0]
call fcn.14013d700
lea r13, [rsp + 0x2b0]
mov qword [r13 + 8], rax
mov rdx, qword [rsp + 0xd0]
mov rcx, r13
call fcn.1400ec6e0
mov rdx, qword [rsp + 0xd8]
mov rcx, r13
call fcn.1400ec6e0
mov rdx, qword [rsp + 0xe0]
mov rcx, r13
call fcn.1400ec6e0
mov r9, qword [r13]
mov rdx, qword [r13 + 8]
sub rdx, r9
je 0x1400ebf60
mov rax, qword [0x1402954d8]
mov rcx, qword [rsp + 0xe8]
xorps xmm0, xmm0
movups xmmword [rsp + 0x28], xmm0
mov qword [rsp + 0x20], rdx
mov r8d, 0x20002
xor edx, edx
call qword [0x1402a8008]
test eax, eax
mov r13, qword [rsp + 0x60]
je 0x1400ebe33
mov esi, 0x80000
jmp 0x1400eb903
mov ecx, 2
call fcn.140158c90
test al, al
jne 0x1400ebee1
mov rdi, qword [rsp + 0x58]
mov r12, qword [rsp + 0x68]
jmp 0x1400eb82c
mov ecx, 2
call fcn.140158c90
test al, al
mov r13, qword [rsp + 0x60]
jne 0x1400ebe74
xor r12d, r12d
mov rdi, qword [rsp + 0x58]
jmp 0x1400eb82c
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rbx, [rsp + 0x170]
mov rcx, rbx
mov r8d, 0x1e6
mov r9d, 2
call fcn.1401f5220
lea rcx, [rsp + 0x180]
lea rdx, [0x14025b647]
mov r8d, 0x21
call fcn.1401ca740
mov rcx, rbx
call fcn.1401f52a0
jmp 0x1400ebe67
mov rcx, r13
call fcn.14018f674
mov rax, qword [rsp + 0x2b8]
mov rcx, qword [rsp + 0x2c0]
jmp 0x1400ebc72
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea r15, [rsp + 0x170]
mov rcx, r15
mov r8d, 0x200
mov r9d, 2
call fcn.1401f5220
lea rcx, [rsp + 0x180]
lea rdx, [0x14025b669]
mov r8d, 0x19
call fcn.1401ca740
mov rcx, r15
call fcn.1401f52a0
jmp 0x1400ebe45
lea rax, str.null_pointer_given_to_construct_at
mov qword [rsp + 0x20], rax
lea rcx, str._s:_d:_assertion__s_failed:__s_n
lea rdx, str....._third_partylibc_srcinclude__memoryconstruct_at.h
lea r9, str.__location___nullptr
mov r8d, 0x28
call fcn.1401d5d40
lea rax, str.vector___index_out_of_bounds
mov qword [rsp + 0x20], rax
lea rcx, str._s:_d:_assertion__s_failed:__s_n
lea rdx, str....._third_partylibc_srcinclude_vector
lea r9, str.__n___size__
mov r8d, 0x601
call fcn.1401d5d40
add rax, 0xfffffffffffffff8
jne 0x1400eb8cd
lea rax, str.null_pointer_given_to_destroy_at
mov qword [rsp + 0x20], rax
lea rcx, str._s:_d:_assertion__s_failed:__s_n
lea rdx, str....._third_partylibc_srcinclude__memoryconstruct_at.h
lea r9, str.__loc___nullptr
mov r8d, 0x44
call fcn.1401d5d40
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rdi, [rsp + 0x170]
mov rcx, rdi
mov r8d, 0x1d7
mov r9d, 2
call fcn.1400dada0
lea rcx, [rsp + 0x180]
lea rdx, str.InitializeProcThreadAttributeList__size__succeeded__expected_failure
mov r8d, 0x44
call fcn.1401ca740
mov rcx, rdi
call fcn.1400db3f0
jmp 0x1400eb827
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea r15, [rsp + 0x170]
mov rcx, r15
mov r8d, 0x227
mov r9d, 1
call fcn.1401f5220
lea rcx, [rsp + 0x180]
lea rdx, str.CloseHandle_thread
mov r8d, shutdown
call fcn.1401ca740
mov rcx, r15
call fcn.1401f52a0
jmp 0x1400eb9c4
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea r15, [rsp + 0x170]
mov rcx, r15
mov r8d, 0x22a
mov r9d, 1
call fcn.1401f5220
lea rcx, [rsp + 0x180]
lea rdx, str.CloseHandle_process
mov r8d, shutdown
call fcn.1401ca740
mov rcx, r15
call fcn.1401f52a0
jmp 0x1400eb9ea
lea rcx, [0x1402954e0]
call fcn.14018f790
cmp dword [0x1402954e0], 0xffffffff
jne 0x1400eb7c9
cmp qword [0x1402954c8], 0
je 0x1400ec103
lea rcx, [0x140253442]
lea rdx, str.::UpdateProcThreadAttribute
xor r8d, r8d
call fcn.140108680
mov qword [0x1402954d8], rax
lea rcx, [0x1402954e0]
call fcn.14018f828
jmp 0x1400eb7c9
xor eax, eax
jmp 0x1400ec0eb
lea rcx, [0x1402954d0]
call fcn.14018f790
cmp dword [0x1402954d0], 0xffffffff
jne 0x1400eb7a4
lea rcx, [0x140253442]
lea rdx, str.::InitializeProcThreadAttributeList
xor r8d, r8d
call fcn.140108680
mov qword [0x1402954c8], rax
lea rcx, [0x1402954d0]
call fcn.14018f828
jmp 0x1400eb7a4
lea rax, str.char_traits::copy_overlapped_range
mov qword [rsp + 0x20], rax
lea rcx, str._s:_d:_assertion__s_failed:__s_n
lea rdx, str....._third_partylibc_srcinclude__stringchar_traits.h
lea r9, str.__s2_____s1____s2_____s1____n
mov r8d, 0xf3
call fcn.1401d5d40
lea rax, str.string_view::string_view__CharT___size_t_:_received_nullptr
mov qword [rsp + 0x20], rax
lea rcx, str._s:_d:_assertion__s_failed:__s_n
lea rdx, str....._third_partylibc_srcinclude_string_view
lea r9, str.__len__0____s___nullptr
mov r8d, 0x13c
call fcn.1401d5d40
lea rax, str.string_view::string_view__CharT___size_t_:_length_does_not_fit_in_difference_type
mov qword [rsp + 0x20], rax
lea rcx, str._s:_d:_assertion__s_failed:__s_n
lea rdx, str....._third_partylibc_srcinclude_string_view
lea r9, str.__len___static_cast_size_type__numeric_limits_difference_type_::max___
mov r8d, 0x13a
call fcn.1401d5d40
int3
int3
mov rax, rsi
jmp 0x1400ebc72
mov rdx, rax
mov r8, rsi
mov r9, qword [r8 - 8]
add r8, 0xfffffffffffffff8
mov qword [rdx - 8], r9
add rdx, 0xfffffffffffffff8
cmp r8, r13
je 0x1400ebc41
jmp 0x1400ec1e6