Function at 0x1400dedb4
Capabilities:
Create process on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x388
movaps xmmword [rsp + 0x370], xmm7
movaps xmmword [rsp + 0x360], xmm6
mov r13, rcx
mov rax, qword [0x1401c2c08]
xor rax, rsp
mov qword [rsp + 0x358], rax
call fcn.1401049a4
test al, al
jne 0x1400dfd8f
xorps xmm0, xmm0
lea rdx, [rsp + 0x330]
movaps xmmword [rdx], xmm0
mov qword [rdx + 0x10], 0
mov rcx, qword [r13]
call fcn.1401049d0
mov rdi, qword [r13]
mov rsi, qword [rdi + 0x78]
mov r15, qword [rdi + 0x80]
cmp rsi, r15
je 0x1400deea1
lea rdi, [rsp + 0x320]
lea rbx, [rsp + 0x180]
lea r14, [rsp + 0x330]
movzx r8d, byte [rsi]
test r8b, 1
jne 0x1400dee57
shr r8d, 1
lea rdx, [rsi + 1]
jmp 0x1400dee5f
mov r8, qword [rsi + 8]
mov rdx, qword [rsi + 0x10]
mov rcx, rdi
call fcn.140001af2
mov rcx, rbx
mov rdx, rdi
call fcn.140045780
mov rcx, rbx
mov rdx, r14
call fcn.1401049d0
test byte [rsp + 0x180], 1
je 0x1400dee94
mov rcx, qword [rsp + 0x190]
call fcn.1401438d8
add rsi, 0x18
cmp rsi, r15
jne 0x1400dee44
mov rdi, qword [r13]
movzx eax, byte [rdi + 0x18]
test al, 1
jne 0x1400deead
shr eax, 1
jmp 0x1400deeb1
mov rax, qword [rdi + 0x20]
test rax, rax
je 0x1400def25
add rdi, 0x18
lea rdx, str.database
lea rbx, [rsp + 0x90]
mov rcx, rbx
call fcn.1400029f4
lea r14, [rsp + 0x180]
mov rcx, r14
mov rdx, rbx
mov r8, rdi
call fcn.1400e0240
lea rdx, [rsp + 0x330]
mov rcx, r14
call fcn.1401049d0
test byte [r14], 1
je 0x1400def0a
mov rcx, qword [rsp + 0x190]
call fcn.1401438d8
test byte [rsp + 0x90], 1
je 0x1400def21
mov rcx, qword [rsp + 0xa0]
call fcn.1401438d8
mov rdi, qword [r13]
movzx eax, byte [rdi + 0x30]
test al, 1
jne 0x1400def31
shr eax, 1
jmp 0x1400def35
mov rax, qword [rdi + 0x38]
test rax, rax
je 0x1400defa9
add rdi, 0x30
lea rdx, str.metrics_dir
lea rbx, [rsp + 0x90]
mov rcx, rbx
call fcn.1400029f4
lea r14, [rsp + 0x180]
mov rcx, r14
mov rdx, rbx
mov r8, rdi
call fcn.1400e0240
lea rdx, [rsp + 0x330]
mov rcx, r14
call fcn.1401049d0
test byte [r14], 1
je 0x1400def8e
mov rcx, qword [rsp + 0x190]
call fcn.1401438d8
test byte [rsp + 0x90], 1
je 0x1400defa5
mov rcx, qword [rsp + 0xa0]
call fcn.1401438d8
mov rdi, qword [r13]
movzx r8d, byte [rdi + 0x48]
test r8b, 1
jne 0x1400defc6
test r8, r8
je 0x1400df07f
shr r8d, 1
add rdi, 0x49
jmp 0x1400defd7
mov r8, qword [rdi + 0x50]
test r8, r8
je 0x1400df07f
mov rdi, qword [rdi + 0x58]
lea rbx, [rsp + 0x310]
mov rcx, rbx
mov rdx, rdi
call fcn.140001af2
lea rdi, [rsp + 0x90]
mov rcx, rdi
mov rdx, rbx
call fcn.140045780
lea rdx, [0x140182941]
lea rbx, [rsp + 0x130]
mov rcx, rbx
call fcn.1400029f4
lea r14, [rsp + 0x180]
mov rcx, r14
mov rdx, rbx
mov r8, rdi
call fcn.1400e0240
lea rdx, [rsp + 0x330]
mov rcx, r14
call fcn.1401049d0
test byte [r14], 1
je 0x1400df04d
mov rcx, qword [rsp + 0x190]
call fcn.1401438d8
test byte [rsp + 0x130], 1
je 0x1400df064
mov rcx, qword [rsp + 0x140]
call fcn.1401438d8
test byte [rsp + 0x90], 1
je 0x1400df07b
mov rcx, qword [rsp + 0xa0]
call fcn.1401438d8
mov rdi, qword [r13]
mov r15, qword [rdi + 0x60]
lea rsi, [rdi + 0x68]
cmp r15, rsi
je 0x1400df22e
mov qword [rsp + 0x58], r13
lea rdi, [rsp + 0x2e0]
xorps xmm6, xmm6
lea rbx, [rsp + 0x300]
lea r14, [rsp + 0x90]
lea r12, [rsp + 0x2c0]
lea r13, [rsp + 0x180]
lea rbp, [rsp + 0x330]
lea rdx, [r15 + 0x20]
mov rcx, rdi
mov r8b, 0x3d
call fcn.1400098dc
movzx r8d, byte [r15 + 0x38]
test r8b, 1
je 0x1400df0ec
mov r8, qword [r15 + 0x40]
mov rdx, qword [r15 + 0x48]
jmp 0x1400df0f3
shr r8d, 1
lea rdx, [r15 + 0x39]
mov rcx, rdi
call fcn.14002a996
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x140], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x130], xmm0
movups xmmword [rax], xmm6
mov qword [rax + 0x10], 0
movzx r8d, byte [rsp + 0x130]
test r8b, 1
je 0x1400df13e
mov r8, qword [rsp + 0x138]
mov rdx, qword [rsp + 0x140]
jmp 0x1400df149
shr r8d, 1
lea rdx, [rsp + 0x131]
mov rcx, rbx
call fcn.140001af2
mov rcx, r14
mov rdx, rbx
call fcn.140045780
mov rcx, r12
lea rdx, str.annotation
call fcn.1400029f4
mov rcx, r13
mov rdx, r12
mov r8, r14
call fcn.1400e0240
mov rcx, r13
mov rdx, rbp
call fcn.1401049d0
test byte [rsp + 0x180], 1
je 0x1400df19b
mov rcx, qword [rsp + 0x190]
call fcn.1401438d8
test byte [rsp + 0x2c0], 1
je 0x1400df1b2
mov rcx, qword [rsp + 0x2d0]
call fcn.1401438d8
test byte [rsp + 0x90], 1
je 0x1400df1c9
mov rcx, qword [rsp + 0xa0]
call fcn.1401438d8
test byte [rsp + 0x130], 1
je 0x1400df1e0
mov rcx, qword [rsp + 0x140]
call fcn.1401438d8
test byte [rsp + 0x2e0], 1
je 0x1400df1f7
mov rcx, qword [rsp + 0x2f0]
call fcn.1401438d8
mov rcx, qword [r15 + 8]
test rcx, rcx
je 0x1400df20d
mov rax, rcx
mov rcx, qword [rcx]
test rcx, rcx
jne 0x1400df200
jmp 0x1400df219
mov rax, qword [r15 + 0x10]
cmp qword [rax], r15
mov r15, rax
jne 0x1400df20d
mov r15, rax
cmp rax, rsi
jne 0x1400df0c8
mov r13, qword [rsp + 0x58]
mov rdi, qword [r13]
mov rbx, qword [rdi + 0x90]
mov rsi, qword [rdi + 0x98]
cmp rbx, rsi
je 0x1400df2bb
lea rdi, [0x14019371b]
lea r14, [rsp + 0x90]
lea r15, [rsp + 0x180]
lea r12, [rsp + 0x330]
mov rcx, r14
mov rdx, rdi
call fcn.1400029f4
mov rcx, r15
mov rdx, r14
mov r8, rbx
call fcn.1400e0240
mov rcx, r15
mov rdx, r12
call fcn.1401049d0
test byte [rsp + 0x180], 1
je 0x1400df29b
mov rcx, qword [rsp + 0x190]
call fcn.1401438d8
test byte [rsp + 0x90], 1
je 0x1400df2b2
mov rcx, qword [rsp + 0xa0]
call fcn.1401438d8
add rbx, 0x18
cmp rbx, rsi
jne 0x1400df260
movabs r15, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x2f0], r15
movaps xmm6, xmmword [section..rdata]
movaps xmmword [rsp + 0x2e0], xmm6
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, 0x1f0fff
mov edx, 1
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_OpenProcess]
lea rcx, [0x140198bb0]
mov qword [rsp + 0x2e0], rcx
mov qword [rsp + 0x2e8], rax
mov byte [rsp + 0x2f0], 0
test rax, rax
je 0x1400df3d4
lea rbx, [rsp + 0x130]
mov qword [rbx + 0x40], r15
movaps xmmword [rbx + 0x30], xmm6
movaps xmmword [rbx + 0x20], xmm6
movaps xmmword [rbx + 0x10], xmm6
movaps xmmword [rbx], xmm6
mov rcx, qword [r13]
mov rcx, qword [rcx + 0xc8]
mov r9, qword [0x1401c2cac]
mov r8, qword [0x1401c2ca4]
mov rdx, qword [0x1401c2c90]
lea r10, [0x1401c8a80]
mov qword [rsp + 0x40], r10
lea r10, [0x1401c8a70]
mov qword [rsp + 0x38], r10
lea r10, [0x1401c8a60]
mov qword [rsp + 0x30], r10
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
mov rcx, rbx
call fcn.140062b2a
lea rdi, [rsp + 0x2c0]
mov rcx, rbx
mov rdx, rdi
call fcn.140062fcc
lea rdx, str.__initial_client_data
lea rbx, [rsp + 0x108]
mov rcx, rbx
call fcn.1400029f4
movzx r8d, byte [rdi]
test r8b, 1
je 0x1400df43c
mov r8, qword [rsp + 0x2c8]
mov rdx, qword [rsp + 0x2d0]
jmp 0x1400df447
mov ecx, 2
call fcn.140051fe0
mov esi, 2
test al, al
je 0x1400df435
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rdi, [rsp + 0x180]
mov rcx, rdi
mov r8d, 0x1a7
mov r9d, 2
call fcn.1400533b0
lea rcx, [rsp + 0x190]
lea rdx, [0x140198e9d]
mov r8d, 0xb
call fcn.14000206f
mov rcx, rdi
call fcn.1400534a0
xor ebp, ebp
jmp 0x1400dfad5
shr r8d, 1
lea rdx, [rsp + 0x2c1]
mov rcx, rbx
call fcn.14002a996
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0xa0], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x90], xmm0
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov qword [rax + 0x10], 0
movzx r8d, byte [rsp + 0x90]
test r8b, 1
je 0x1400df495
mov r8, qword [rsp + 0x98]
mov rdx, qword [rsp + 0xa0]
jmp 0x1400df4a0
shr r8d, 1
lea rdx, [rsp + 0x91]
lea rbx, [rsp + 0x120]
mov rcx, rbx
call fcn.140001af2
lea r14, [rsp + 0x180]
mov rcx, r14
mov rdx, rbx
call fcn.140045780
lea rdx, [rsp + 0x330]
mov rcx, r14
call fcn.1401049d0
test byte [r14], 1
je 0x1400df4e6
mov rcx, qword [rsp + 0x190]
call fcn.1401438d8
test byte [rsp + 0x90], 1
je 0x1400df4fd
mov rcx, qword [rsp + 0xa0]
call fcn.1401438d8
test byte [rsp + 0x108], 1
je 0x1400df514
mov rcx, qword [rsp + 0x118]
call fcn.1401438d8
test byte [rsp + 0x2c0], 1
je 0x1400df52b
mov rcx, qword [rsp + 0x2d0]
call fcn.1401438d8
xorps xmm7, xmm7
movaps xmmword [rsp + 0xc0], xmm7
movaps xmmword [rsp + 0xf0], xmm7
movaps xmmword [rsp + 0xe0], xmm7
movaps xmmword [rsp + 0xd0], xmm7
movaps xmmword [rsp + 0xb0], xmm7
movaps xmmword [rsp + 0xa0], xmm7
movaps xmmword [rsp + 0x90], xmm7
mov dword [rsp + 0xcc], 0x100
mov rsi, qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov ecx, 0xfffffff6
call rsi
mov qword [rsp + 0xe0], rax
mov ecx, 0xfffffff5
call rsi
mov qword [rsp + 0xe8], rax
mov ecx, 0xfffffff4
call rsi
mov qword [rsp + 0xf0], rax
xor eax, eax
mov qword [rsp + 0x2d0], rax
movaps xmmword [rsp + 0x2c0], xmm7
mov qword [rsp + 0x118], r15
lea rcx, [0x140199000]
mov qword [rsp + 0x108], rcx
mov qword [rsp + 0x110], rax
mov byte [rsp + 0x118], 0
mov eax, dword [0x1401c8ac0]
mov ecx, dword [0x1401c65c8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 0x40]
jg 0x1400dfe06
mov eax, dword [0x1401c8ad0]
mov ecx, dword [0x1401c65c8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 0x40]
jg 0x1400dfe4d
mov rax, qword [0x1401c8ab8]
test rax, rax
je 0x1400df6cd
cmp qword [0x1401c8ac8], 0
je 0x1400df6cd
mov dword [rsp + 0x90], 0x70
lea r9, [rsp + 0x70]
mov qword [r9], r15
xor ecx, ecx
mov edx, 1
xor r8d, r8d
call qword [0x1401b1be0]
test eax, eax
je 0x1400df70a
mov ecx, 2
call fcn.140051fe0
test al, al
je 0x1400dfaa2
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rbx, [rsp + 0x180]
mov rcx, rbx
mov r8d, 0x1d8
mov r9d, 2
call fcn.1400520b0
lea rcx, [rsp + 0x190]
lea rdx, str.InitializeProcThreadAttributeList__size__succeeded__expected_failure
mov r8d, 0x44
call fcn.14000206f
mov rcx, rbx
call fcn.1400525a0
jmp 0x1400dfaa2
mov dword [rsp + 0x90], 0x68
xor ebx, ebx
xor esi, esi
mov rdx, qword [r13]
movzx r8d, byte [rdx]
test r8b, 1
jne 0x1400df6f8
cmp r8b, 0x18
jb 0x1400df703
shr r8d, 1
jmp 0x1400df7ab
cmp qword [rdx + 8], 0xc
jae 0x1400df7a7
xor ebp, ebp
jmp 0x1400df811
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x1400dfa46
lea r14, [rsp + 0x70]
mov rcx, qword [r14]
call fcn.14014390c
mov rbx, rax
mov qword [rsp + 0xf8], rax
mov rax, qword [0x1401c8ab8]
mov rcx, rbx
mov edx, 1
xor r8d, r8d
mov r9, r14
call qword [0x1401b1be0]
test eax, eax
je 0x1400dfb3e
lea r14, [rsp + 0x108]
mov rcx, r14
call fcn.1400e0616
mov qword [r14 + 8], rbx
lea r14, [rsp + 0x2c0]
mov edx, 8
mov rcx, r14
call fcn.1400e03de
mov rax, qword [r14 + 8]
cmp rax, qword [r14 + 0x10]
jae 0x1400dfb96
test rax, rax
je 0x1400dfde0
mov rcx, qword [0x1401c2c90]
mov qword [rax], rcx
add rax, 8
jmp 0x1400dfbaa
mov r8, qword [rdx + 8]
add r8, 0xfffffffffffffff4
lea rax, [rsp + 0x70]
mov qword [rsp + 0x20], rax
lea r14, [rsp + 0x180]
mov rcx, r14
mov r9, 0xffffffffffffffff
call fcn.14002ba6c
test byte [r14], 1
je 0x1400df7e0
mov rcx, qword [rsp + 0x190]
jmp 0x1400df7e8
lea rcx, [rsp + 0x182]
lea rdx, str.rundll32.exe
call fcn.14015f91c
test eax, eax
sete bpl
test byte [rsp + 0x180], 1
je 0x1400df811
mov rcx, qword [rsp + 0x190]
call fcn.1401438d8
mov qword [rsp + 0x80], r15
movaps xmmword [rsp + 0x70], xmm6
test byte [rsp + 0x330], 1
je 0x1400df832
mov rdx, qword [rsp + 0x340]
jmp 0x1400df83a
lea rdx, [rsp + 0x332]
test bpl, bpl
je 0x1400df843
xor ecx, ecx
jmp 0x1400df856
mov rcx, qword [r13]
test byte [rcx], 1
jne 0x1400df852
add rcx, 2
jmp 0x1400df856
mov rcx, qword [rcx + 0x10]
lea rax, [rsp + 0x70]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x90]
mov qword [rsp + 0x40], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], 1
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x1400df9df
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ebp, eax
mov ecx, 1
call fcn.140051fe0
test al, al
je 0x1400df902
test ebp, ebp
jne 0x1400df902
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea r14, [rsp + 0x180]
mov rcx, r14
mov r8d, 0x228
mov r9d, 1
call fcn.1400533b0
lea rcx, [rsp + 0x190]
lea rdx, str.CloseHandle_thread
mov r8d, 0x12
call fcn.14000206f
mov rcx, r14
call fcn.1400534a0
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ebp, eax
mov ecx, 1
call fcn.140051fe0
test al, al
je 0x1400df96f
test ebp, ebp
jne 0x1400df96f
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea r14, [rsp + 0x180]
mov rcx, r14
mov r8d, 0x22b
mov r9d, 1
call fcn.1400533b0
lea rcx, [rsp + 0x190]
lea rdx, str.CloseHandle_process
mov r8d, 0x13
call fcn.14000206f
mov rcx, r14
call fcn.1400534a0
mov ecx, 0xc0
add rcx, qword [r13]
lea r14, [rsp + 0x180]
mov qword [r14], 0xffffffffffffffff
mov rdx, r14
call fcn.1400dc4aa
xorps xmm0, xmm0
movups xmmword [r14 + 0x14], xmm0
movups xmmword [r14 + 4], xmm0
mov dword [r14], 2
lea r8, [rsp + 0x60]
mov dword [r8 + 8], 0
mov qword [r8], 0
mov ecx, 0xa8
add rcx, qword [r13]
lea rdx, [rsp + 0x180]
call fcn.140103c2c
mov ebp, eax
movzx eax, al
mov esi, 2
sub rsi, rax
jmp 0x1400dfaab
mov ecx, 2
call fcn.140051fe0
mov esi, 2
test al, al
je 0x1400dfaa9
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea r14, [rsp + 0x180]
mov rcx, r14
mov r8d, 0x223
mov r9d, 2
call fcn.1400533b0
lea rcx, [rsp + 0x190]
lea rdx, str.CreateProcess
mov r8d, 0xd
call fcn.14000206f
mov rcx, r14
call fcn.1400534a0
jmp 0x1400dfaa9
mov ecx, 2
call fcn.140051fe0
test al, al
je 0x1400dfaa2
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rbx, [rsp + 0x180]
mov rcx, rbx
mov r8d, 0x1dc
mov r9d, 2
call fcn.1400533b0
lea rcx, [rsp + 0x190]
lea rdx, str.InitializeProcThreadAttributeList__size_
mov r8d, 0x28
call fcn.14000206f
mov rcx, rbx
call fcn.1400534a0
xor ebx, ebx
mov esi, 2
xor ebp, ebp
lea rcx, [rsp + 0x108]
call fcn.1400e0558
test rbx, rbx
je 0x1400dfac5
mov rcx, rbx
call fcn.140143914
lea rcx, [rsp + 0x180]
mov qword [rcx], rdi
call fcn.14000574a
lea rcx, [rsp + 0x2e0]
call fcn.1400dc176
test byte [rsp + 0x330], 1
je 0x1400dfaf9
mov rcx, qword [rsp + 0x340]
call fcn.1401438d8
mov qword [0x1401c8ab0], rsi
mov rcx, r13
call fcn.1400e017c
mov rcx, qword [rsp + 0x358]
xor rcx, rsp
call fcn.140143c30
mov eax, ebp
movaps xmm6, xmmword [rsp + 0x360]
movaps xmm7, xmmword [rsp + 0x370]
add rsp, 0x388
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov ecx, 2
call fcn.140051fe0
test al, al
je 0x1400dfaa4
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea r14, [rsp + 0x180]
mov rcx, r14
mov r8d, 0x1e7
mov r9d, 2
call fcn.1400533b0
lea rcx, [rsp + 0x190]
lea rdx, [0x140198f6e]
mov r8d, 0x21
jmp 0x1400dfd7d
lea rdx, [0x1401c2c90]
lea rcx, [rsp + 0x2c0]
call fcn.1400055a4
mov qword [rsp + 0x2c8], rax
cmp rax, qword [rsp + 0x2d0]
jae 0x1400dfbd5
test rax, rax
je 0x1400dfde0
mov rcx, qword [0x1401c2ca4]
mov qword [rax], rcx
add rax, 8
jmp 0x1400dfbe9
lea rdx, [0x1401c2ca4]
lea rcx, [rsp + 0x2c0]
call fcn.1400055a4
mov qword [rsp + 0x2c8], rax
cmp rax, qword [rsp + 0x2d0]
jae 0x1400dfc14
test rax, rax
je 0x1400dfde0
mov rcx, qword [0x1401c2cac]
mov qword [rax], rcx
add rax, 8
jmp 0x1400dfc28
lea rdx, [0x1401c2cac]
lea rcx, [rsp + 0x2c0]
call fcn.1400055a4
mov qword [rsp + 0x2c8], rax
mov edx, 0xc8
add rdx, qword [r13]
cmp rax, qword [rsp + 0x2d0]
jae 0x1400dfc58
test rax, rax
je 0x1400dfde0
mov rcx, qword [rdx]
mov qword [rax], rcx
add rax, 8
jmp 0x1400dfc65
lea rcx, [rsp + 0x2c0]
call fcn.1400055a4
mov qword [rsp + 0x2c8], rax
cmp rax, qword [rsp + 0x2d0]
jae 0x1400dfc91
test rax, rax
je 0x1400dfde0
mov rcx, qword [rsp + 0x2e8]
mov qword [rax], rcx
add rax, 8
jmp 0x1400dfca6
lea rdx, [rsp + 0x2e8]
lea rcx, [rsp + 0x2c0]
call fcn.1400055a4
lea r14, [rsp + 0x2c0]
mov qword [r14 + 8], rax
mov rdx, qword [rsp + 0xe0]
mov rcx, r14
call fcn.1400e04b0
mov rdx, qword [rsp + 0xe8]
mov rcx, r14
call fcn.1400e04b0
mov rdx, qword [rsp + 0xf0]
mov rcx, r14
call fcn.1400e04b0
mov r9, qword [r14]
mov rdx, qword [r14 + 8]
sub rdx, r9
je 0x1400dfdf3
mov rax, qword [0x1401c8ac8]
mov rcx, qword [rsp + 0xf8]
xorps xmm0, xmm0
movups xmmword [rsp + 0x28], xmm0
mov qword [rsp + 0x20], rdx
mov r8d, 0x20002
xor edx, edx
call qword [0x1401b1be0]
test eax, eax
je 0x1400dfd2a
mov esi, 0x80000
jmp 0x1400df6dc
mov ecx, 2
call fcn.140051fe0
test al, al
je 0x1400dfaa4
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea r14, [rsp + 0x180]
mov rcx, r14
mov r8d, 0x201
mov r9d, 2
call fcn.1400533b0
lea rcx, [rsp + 0x190]
lea rdx, [0x140198f90]
mov r8d, 0x19
call fcn.14000206f
mov rcx, r14
call fcn.1400534a0
jmp 0x1400dfaa4
lea rdx, str.StartHandlerProcess
lea r8, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rdi, [rsp + 0x180]
mov rcx, rdi
mov r9d, 0x180
call fcn.140054d70
lea rdx, str._IsThreadInLoaderLock__
lea rbx, [rsp + 0x350]
mov rcx, rbx
mov r8d, 0xffffffff
mov r9, rdi
call fcn.14005fcb0
mov rcx, rbx
call fcn.14005ff10
jmp 0x1400dedf9
lea rcx, [0x140180113]
lea rdx, str....._third_partylibc_srcinclude__memoryconstruct_at.h:40:_assertion___location___nullptr_failed:_null_pointer_given_to_construct_at_n
call fcn.140005804
lea rcx, [0x140180113]
lea rdx, str....._third_partylibc_srcinclude_vector:1393:_assertion___n___size___failed:_vector___index_out_of_bounds_n
call fcn.140005804
lea rcx, [0x1401c8ac0]
call fcn.1401439f0
cmp dword [0x1401c8ac0], 0xffffffff
jne 0x1400df603
lea rcx, [0x140183f58]
lea rdx, str.::InitializeProcThreadAttributeList
xor r8d, r8d
call fcn.140104518
mov qword [0x1401c8ab8], rax
lea rcx, [0x1401c8ac0]
call fcn.140143a88
jmp 0x1400df603
lea rcx, [0x1401c8ad0]
call fcn.1401439f0
cmp dword [0x1401c8ad0], 0xffffffff
jne 0x1400df628
cmp qword [0x1401c8ab8], 0
je 0x1400dfe88
lea rcx, [0x140183f58]
lea rdx, str.::UpdateProcThreadAttribute
xor r8d, r8d
call fcn.140104518
jmp 0x1400dfe8a
xor eax, eax
mov qword [0x1401c8ac8], rax
lea rcx, [0x1401c8ad0]
call fcn.140143a88
jmp 0x1400df628