Function at 0x14011bcd0
Capabilities:
Create process on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x368
movaps xmmword [rsp + 0x350], xmm7
movaps xmmword [rsp + 0x340], xmm6
mov r13, rcx
mov rax, qword [0x1402ea038]
xor rax, rsp
mov qword [rsp + 0x338], rax
call fcn.14013e0b0
test al, al
jne 0x14011d172
xorps xmm0, xmm0
lea rdx, [rsp + 0x320]
movaps xmmword [rdx], xmm0
mov qword [rdx + 0x10], 0
mov rcx, qword [r13]
call fcn.14013e0e0
mov r8, qword [r13]
mov rsi, qword [r8 + 0x78]
mov r15, qword [r8 + 0x80]
cmp rsi, r15
je 0x14011bdea
lea rdi, [rsp + 0x170]
lea rbx, [rsp + 0x310]
lea r14, [rsp + 0x320]
jmp 0x14011bdbd
mov qword [rsp + 0x310], rsi
mov qword [rsp + 0x318], rax
mov rcx, rsi
test rcx, rcx
jne 0x14011bd87
test rax, rax
jne 0x14011d11a
mov rcx, rdi
mov rdx, rbx
call fcn.140183b70
mov rcx, rdi
mov rdx, r14
call fcn.14013e0e0
cmp byte [rsp + 0x187], 0
jns 0x14011bdb4
mov rcx, qword [rsp + 0x170]
call fcn.1401abf3c
add rsi, 0x18
cmp rsi, r15
je 0x14011bde6
movzx eax, byte [rsi + 0x17]
test al, al
jns 0x14011bd66
mov rcx, qword [rsi]
mov rax, qword [rsi + 8]
mov qword [rsp + 0x310], rcx
mov qword [rsp + 0x318], rax
test rax, rax
jns 0x14011bd79
jmp 0x14011d146
mov r8, qword [r13]
movzx eax, byte [r8 + 0x2f]
test al, al
jns 0x14011bdf7
mov rax, qword [r8 + 0x20]
test rax, rax
je 0x14011be94
lea rcx, [rsp + 0x80]
mov byte [rcx + 0x17], 8
lea rax, str.database
cmp rcx, rax
ja 0x14011be29
lea rcx, [rsp + 0x88]
cmp rcx, rax
ja 0x14011d0ee
add r8, 0x18
movabs rax, 0x6573616261746164
lea rdx, [rsp + 0x80]
mov qword [rdx], rax
mov byte [rdx + 8], 0
lea rdi, [rsp + 0x170]
mov rcx, rdi
call fcn.14011d470
lea rdx, [rsp + 0x320]
mov rcx, rdi
call fcn.14013e0e0
cmp byte [rdi + 0x17], 0
jns 0x14011be79
mov rcx, qword [rsp + 0x170]
call fcn.1401abf3c
cmp byte [rsp + 0x97], 0
jns 0x14011be90
mov rcx, qword [rsp + 0x80]
call fcn.1401abf3c
mov r8, qword [r13]
movzx eax, byte [r8 + 0x47]
test al, al
jns 0x14011bea1
mov rax, qword [r8 + 0x38]
test rax, rax
je 0x14011bf45
lea rcx, [rsp + 0x80]
mov byte [rcx + 0x17], ntohl
lea rax, str.metrics_dir
cmp rcx, rax
ja 0x14011bed3
lea rcx, [rsp + 0x8b]
cmp rcx, rax
ja 0x14011d0ee
add r8, 0x30
movabs rax, 0x2d7363697274656d
lea rdx, [rsp + 0x80]
mov qword [rdx], rax
mov dword [rdx + 7], 0x7269642d
mov byte [rdx + 0xb], 0
lea rdi, [rsp + 0x170]
mov rcx, rdi
call fcn.14011d470
lea rdx, [rsp + 0x320]
mov rcx, rdi
call fcn.14013e0e0
cmp byte [rdi + 0x17], 0
jns 0x14011bf2a
mov rcx, qword [rsp + 0x170]
call fcn.1401abf3c
cmp byte [rsp + 0x97], 0
jns 0x14011bf41
mov rcx, qword [rsp + 0x80]
call fcn.1401abf3c
mov r8, qword [r13]
movzx eax, byte [r8 + 0x5f]
test al, al
js 0x14011c0a7
test rax, rax
je 0x14011c042
add r8, 0x48
mov qword [rsp + 0x300], r8
mov qword [rsp + 0x308], rax
test r8, r8
je 0x14011d11a
lea rcx, [rsp + 0x80]
lea rdx, [rsp + 0x300]
call fcn.140183b70
lea rcx, [rsp + 0x120]
mov byte [rcx + 0x17], 3
lea rax, [0x1402ba61b]
cmp rcx, rax
ja 0x14011bfb6
lea rcx, [rsp + 0x123]
cmp rcx, rax
ja 0x14011d0ee
mov al, byte [0x1402ba61d]
lea rdx, [rsp + 0x120]
mov byte [rdx + 2], al
movzx eax, word [0x1402ba61b]
mov word [rdx], ax
mov byte [rdx + 3], 0
lea rdi, [rsp + 0x170]
lea r8, [rsp + 0x80]
mov rcx, rdi
call fcn.14011d470
lea rdx, [rsp + 0x320]
mov rcx, rdi
call fcn.14013e0e0
cmp byte [rdi + 0x17], 0
jns 0x14011c010
mov rcx, qword [rsp + 0x170]
call fcn.1401abf3c
cmp byte [rsp + 0x137], 0
jns 0x14011c027
mov rcx, qword [rsp + 0x120]
call fcn.1401abf3c
cmp byte [rsp + 0x97], 0
jns 0x14011c03e
mov rcx, qword [rsp + 0x80]
call fcn.1401abf3c
mov r8, qword [r13]
mov rsi, qword [r8 + 0x60]
lea rbp, [r8 + 0x68]
cmp rsi, rbp
je 0x14011c282
mov qword [rsp + 0x60], r13
lea rax, str.annotation
lea rdi, [rsp + 0x2b0]
cmp rdi, rax
seta cl
lea rdx, [rsp + 0x2ba]
cmp rdx, rax
setbe r15b
or r15b, cl
lea rbx, [rsp + 0x2d0]
xorps xmm6, xmm6
lea r14, [rsp + 0x80]
lea r12, [rsp + 0x170]
lea r13, [rsp + 0x320]
jmp 0x14011c241
mov rax, qword [r8 + 0x50]
test rax, rax
je 0x14011c042
mov r8, qword [r8 + 0x48]
mov qword [rsp + 0x300], r8
mov qword [rsp + 0x308], rax
jns 0x14011bf6f
jmp 0x14011d146
mov r8, qword [rsi + 0x40]
mov rdx, qword [rsi + 0x38]
mov rcx, rbx
call fcn.1400d86a0
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x130], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x120], xmm0
movups xmmword [rax], xmm6
mov qword [rax + 0x10], 0
movzx ecx, byte [rsp + 0x137]
mov eax, ecx
and eax, 0x7f
test cl, cl
cmovs rax, qword [rsp + 0x128]
mov rcx, qword [rsp + 0x120]
lea rdx, [rsp + 0x120]
cmovns rcx, rdx
mov qword [rsp + 0x2f0], rcx
mov qword [rsp + 0x2f8], rax
test rax, rax
js 0x14011d146
test rcx, rcx
jne 0x14011c154
test rax, rax
jne 0x14011d11a
mov rcx, r14
lea rdx, [rsp + 0x2f0]
call fcn.140183b70
mov byte [rsp + 0x2c7], 0xa
test r15b, r15b
je 0x14011d0ee
movabs rax, 0x697461746f6e6e61
mov qword [rsp + 0x2b0], rax
mov word [rsp + 0x2b8], 0x6e6f
mov byte [rsp + 0x2ba], 0
mov rcx, r12
mov rdx, rdi
mov r8, r14
call fcn.14011d470
mov rcx, r12
mov rdx, r13
call fcn.14013e0e0
cmp byte [rsp + 0x187], 0
jns 0x14011c1c9
mov rcx, qword [rsp + 0x170]
call fcn.1401abf3c
cmp byte [rsp + 0x2c7], 0
jns 0x14011c1e0
mov rcx, qword [rsp + 0x2b0]
call fcn.1401abf3c
cmp byte [rsp + 0x97], 0
jns 0x14011c1f7
mov rcx, qword [rsp + 0x80]
call fcn.1401abf3c
cmp byte [rsp + 0x137], 0
jns 0x14011c20e
mov rcx, qword [rsp + 0x120]
call fcn.1401abf3c
cmp byte [rsp + 0x2e7], 0
jns 0x14011c225
mov rcx, qword [rsp + 0x2d0]
call fcn.1401abf3c
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x14011c26b
mov rax, rcx
mov rcx, qword [rcx]
test rcx, rcx
jne 0x14011c22e
mov rsi, rax
cmp rax, rbp
je 0x14011c279
lea rdx, [rsi + 0x20]
mov rcx, rbx
mov r8b, 0x3d
call fcn.1400c91d0
movzx r8d, byte [rsi + 0x4f]
test r8b, r8b
js 0x14011c0cf
lea rdx, [rsi + 0x38]
and r8d, 0x7f
jmp 0x14011c0d7
mov rax, qword [rsi + 0x10]
cmp qword [rax], rsi
mov rsi, rax
jne 0x14011c26b
jmp 0x14011c239
mov r13, qword [rsp + 0x60]
mov r8, qword [r13]
mov rdi, qword [r8 + 0x90]
mov rsi, qword [r8 + 0x98]
cmp rdi, rsi
je 0x14011c359
lea rax, [0x1402c721b]
lea rbx, [rsp + 0x80]
cmp rbx, rax
seta cl
lea rdx, [rsp + 0x8a]
cmp rdx, rax
setbe bpl
or bpl, cl
movabs r12, 0x656d686361747461
lea r14, [rsp + 0x170]
lea r15, [rsp + 0x320]
jmp 0x14011c2f2
mov rcx, qword [rsp + 0x80]
call fcn.1401abf3c
add rdi, 0x18
cmp rdi, rsi
je 0x14011c359
mov byte [rsp + 0x97], 0xa
test bpl, bpl
je 0x14011d0ee
mov qword [rsp + 0x80], r12
mov word [rsp + 0x88], 0x746e
mov byte [rsp + 0x8a], 0
mov rcx, r14
mov rdx, rbx
mov r8, rdi
call fcn.14011d470
mov rcx, r14
mov rdx, r15
call fcn.14013e0e0
cmp byte [rsp + 0x187], 0
jns 0x14011c34d
mov rcx, qword [rsp + 0x170]
call fcn.1401abf3c
cmp byte [rsp + 0x97], 0
jns 0x14011c2e9
jmp 0x14011c2dc
movabs rbp, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x2e0], rbp
movaps xmm6, xmmword [0x1402af0f0]
movaps xmmword [rsp + 0x2d0], xmm6
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, 0x1f0fff
mov edx, 1
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_OpenProcess]
lea r14, str._o_
mov qword [rsp + 0x2d0], r14
mov qword [rsp + 0x2d8], rax
mov byte [rsp + 0x2e0], 0
test rax, rax
jne 0x14011c4ab
mov ecx, 2
call fcn.14018cad0
mov ebx, 2
test al, al
jne 0x14011c458
xor ebp, ebp
mov qword [rsp + 0x2d0], r14
cmp byte [rsp + 0x2e0], 0
jne 0x14011d175
mov rcx, qword [rsp + 0x2d8]
test rcx, rcx
je 0x14011c3fc
call fcn.14013de90
cmp byte [rsp + 0x337], 0
jns 0x14011c413
mov rcx, qword [rsp + 0x320]
call fcn.1401abf3c
mov qword [0x1403059e8], rbx
mov rcx, r13
call fcn.14011d300
mov rcx, qword [rsp + 0x338]
xor rcx, rsp
call fcn.1401ad700
mov eax, ebp
movaps xmm6, xmmword [rsp + 0x340]
movaps xmm7, xmmword [rsp + 0x350]
add rsp, 0x368
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rdi, [rsp + 0x170]
mov rcx, rdi
mov r8d, 0x1a6
mov r9d, 2
call fcn.1402274c0
lea rcx, [rsp + 0x180]
lea rdx, [0x1402c7226]
mov r8d, ntohl
call fcn.1401e9050
mov rcx, rdi
call fcn.140227540
jmp 0x14011c3d2
lea rbx, [rsp + 0x120]
mov qword [rbx + 0x40], rbp
movaps xmmword [rbx + 0x30], xmm6
movaps xmmword [rbx + 0x20], xmm6
movaps xmmword [rbx + 0x10], xmm6
movaps xmmword [rbx], xmm6
mov rcx, qword [r13]
mov rcx, qword [rcx + 0xc8]
mov r9, qword [0x1402f9c2c]
mov r8, qword [0x1402f9c24]
mov rdx, qword [0x1402f9c10]
lea r10, [0x1403059b8]
mov qword [rsp + 0x40], r10
lea r10, [0x1403059ac]
mov qword [rsp + 0x38], r10
lea r10, [0x1403059a0]
mov qword [rsp + 0x30], r10
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
mov rcx, rbx
call fcn.14013e660
lea rdi, [rsp + 0x2b0]
mov rcx, rbx
mov rdx, rdi
call fcn.14013ebb0
lea rcx, [rsp + 0xf0]
mov byte [rcx + 0x17], 0x16
lea rax, str.__initial_client_data
cmp rcx, rax
ja 0x14011c558
lea rcx, [rsp + 0x106]
cmp rcx, rax
ja 0x14011d0ee
movups xmm0, xmmword [str.__initial_client_data]
lea rbx, [rsp + 0xf0]
movaps xmmword [rbx], xmm0
movabs rax, 0x3d617461642d746e
mov qword [rbx + 0xe], rax
movzx eax, byte [rsp + 0x2c7]
mov r8d, eax
and r8d, 0x7f
test al, al
cmovs r8, qword [rsp + 0x2b8]
mov byte [rbx + 0x16], 0
cmovs rdi, qword [rsp + 0x2b0]
mov rcx, rbx
mov rdx, rdi
call fcn.1400d86a0
mov rcx, qword [rax + 0x10]
lea rdi, [rsp + 0x80]
mov qword [rdi + 0x10], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rdi], xmm0
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov qword [rax + 0x10], 0
movzx ecx, byte [rdi + 0x17]
mov eax, ecx
and eax, 0x7f
test cl, cl
cmovs rax, qword [rdi + 8]
mov rcx, qword [rdi]
cmovns rcx, rdi
mov qword [rsp + 0x110], rcx
mov qword [rsp + 0x118], rax
test rax, rax
js 0x14011d146
test rcx, rcx
jne 0x14011c60c
test rax, rax
jne 0x14011d11a
lea r12, [rsp + 0x170]
lea rdx, [rsp + 0x110]
mov rcx, r12
call fcn.140183b70
lea r15, [rsp + 0x320]
mov rcx, r12
mov rdx, r15
call fcn.14013e0e0
cmp byte [r12 + 0x17], 0
jns 0x14011c64c
mov rcx, qword [rsp + 0x170]
call fcn.1401abf3c
cmp byte [rsp + 0x97], 0
jns 0x14011c663
mov rcx, qword [rsp + 0x80]
call fcn.1401abf3c
cmp byte [rsp + 0x107], 0
jns 0x14011c67a
mov rcx, qword [rsp + 0xf0]
call fcn.1401abf3c
cmp byte [rsp + 0x2c7], 0
jns 0x14011c691
mov rcx, qword [rsp + 0x2b0]
call fcn.1401abf3c
xorps xmm7, xmm7
movaps xmmword [rsp + 0xb0], xmm7
movaps xmmword [rsp + 0xe0], xmm7
movaps xmmword [rsp + 0xd0], xmm7
movaps xmmword [rsp + 0xc0], xmm7
movaps xmmword [rsp + 0xa0], xmm7
movaps xmmword [rsp + 0x90], xmm7
movaps xmmword [rsp + 0x80], xmm7
mov dword [rsp + 0xbc], 0x100
mov rsi, qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov ecx, 0xfffffff6
call rsi
mov qword [rsp + 0xd0], rax
mov ecx, 0xfffffff5
call rsi
mov qword [rsp + 0xd8], rax
mov ecx, 0xfffffff4
call rsi
mov qword [rsp + 0xe0], rax
movaps xmmword [rsp + 0x2b0], xmm7
mov qword [rsp + 0x2c0], 0
mov eax, dword [0x1403059f8]
mov ecx, dword [0x1402fa5e8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14011d0a7
mov eax, dword [0x140305a08]
mov ecx, dword [0x1402fa5e8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14011d052
mov rax, qword [0x1403059f0]
test rax, rax
je 0x14011c888
cmp qword [0x140305a00], 0
je 0x14011c888
mov dword [rsp + 0x80], 0x70
lea r9, [rsp + 0xf0]
mov qword [r9], rbp
xor ecx, ecx
mov edx, 1
xor r8d, r8d
call qword [0x14031b008]
test eax, eax
je 0x14011cad5
mov ecx, 2
call fcn.14018cad0
test al, al
jne 0x14011cf62
xor r12d, r12d
xor edi, edi
mov ebx, 2
xor ebp, ebp
test r12, r12
je 0x14011c847
mov eax, dword [0x140305a18]
mov ecx, dword [0x1402fa5e8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jle 0x14011c837
lea rcx, [0x140305a18]
call fcn.1401ac060
cmp dword [0x140305a18], 0xffffffff
jne 0x14011c837
lea rcx, [0x1402bb02c]
lea rdx, str.::DeleteProcThreadAttributeList
mov r8b, 1
call fcn.14013ec50
mov qword [0x140305a10], rax
lea rcx, [0x140305a18]
call fcn.1401ac0f8
mov rax, qword [0x140305a10]
mov rcx, r12
call qword [0x14031b008]
test rdi, rdi
je 0x14011c854
mov rcx, rdi
call fcn.1401abf84
mov rcx, qword [rsp + 0x2b0]
test rcx, rcx
je 0x14011c3d4
mov rax, qword [rsp + 0x2b8]
cmp rax, rcx
jne 0x14011cf2c
mov qword [rsp + 0x2b8], rcx
call fcn.1401abf3c
jmp 0x14011c3d4
mov dword [rsp + 0x80], 0x68
xor eax, eax
mov qword [rsp + 0x68], rax
xor eax, eax
mov qword [rsp + 0x58], rax
xor esi, esi
mov rdx, qword [r13]
movzx r8d, byte [rdx + 0x17]
test r8b, r8b
js 0x14011c9f8
cmp r8b, 0xc
jae 0x14011ca07
xor r12d, r12d
mov qword [rsp + 0x100], rbp
movaps xmmword [rsp + 0xf0], xmm6
cmp byte [rsp + 0x337], 0
jns 0x14011c8e4
mov r15, qword [rsp + 0x320]
test r12b, r12b
jne 0x14011c8fd
mov rcx, qword [r13]
cmp byte [rcx + 0x17], 0
mov r12, qword [rsp + 0x68]
jns 0x14011c904
mov rcx, qword [rcx]
jmp 0x14011c904
xor ecx, ecx
mov r12, qword [rsp + 0x68]
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x40], rdi
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], 1
mov rdx, r15
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x14011ca66
mov rcx, qword [rsp + 0xf8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ebp, eax
mov ecx, 1
call fcn.14018cad0
test al, al
mov rdi, qword [rsp + 0x58]
je 0x14011c964
test ebp, ebp
je 0x14011cfac
mov rcx, qword [rsp + 0xf0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ebp, eax
mov ecx, 1
call fcn.14018cad0
test al, al
je 0x14011c98a
test ebp, ebp
je 0x14011cfff
mov rsi, qword [r13]
mov rcx, qword [rsi + 0xc8]
cmp rcx, 0xffffffffffffffff
je 0x14011c9a0
call fcn.14013de80
mov qword [rsi + 0xc8], 0xffffffffffffffff
xorps xmm0, xmm0
lea rdx, [rsp + 0x170]
movups xmmword [rdx + 0x14], xmm0
movups xmmword [rdx + 4], xmm0
mov dword [rdx], 2
lea r8, [rsp + 0x70]
mov dword [r8 + 8], 0
mov qword [r8], 0
mov ecx, 0xa8
add rcx, qword [r13]
call fcn.14013cc10
mov ebp, eax
movzx eax, al
mov ebx, 2
sub rbx, rax
jmp 0x14011c7d3
cmp qword [rdx + 8], 0xc
jb 0x14011c8bf
mov r8, qword [rdx + 8]
add r8, 0xfffffffffffffff4
mov qword [rsp + 0x20], rbx
mov rcx, r12
mov r9, 0xffffffffffffffff
call fcn.1400d9430
cmp byte [rsp + 0x187], 0
jns 0x14011ca31
mov r12, qword [rsp + 0x170]
lea rdx, str.rundll32.exe
mov rcx, r12
call fcn.1401ca080
test eax, eax
sete r12b
cmp byte [rsp + 0x187], 0
jns 0x14011c8c2
mov rcx, qword [rsp + 0x170]
call fcn.1401abf3c
jmp 0x14011c8c2
mov ecx, 2
call fcn.14018cad0
mov ebx, 2
test al, al
mov rdi, qword [rsp + 0x58]
je 0x14011c7d1
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea r15, [rsp + 0x170]
mov rcx, r15
mov r8d, 0x222
mov r9d, 2
call fcn.1402274c0
lea rcx, [rsp + 0x180]
lea rdx, str.CreateProcess
mov r8d, ntohl
call fcn.1401e9050
mov rcx, r15
call fcn.140227540
jmp 0x14011c7d1
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
je 0x14011cb45
mov ecx, 2
call fcn.14018cad0
test al, al
je 0x14011c7c7
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rdi, [rsp + 0x170]
mov rcx, rdi
mov r8d, 0x1db
mov r9d, 2
call fcn.1402274c0
lea rcx, [rsp + 0x180]
lea rdx, str.InitializeProcThreadAttributeList__size_
mov r8d, 0x28
call fcn.1401e9050
mov rcx, rdi
call fcn.140227540
jmp 0x14011c7c7
mov qword [rsp + 0x60], r13
lea r13, [rsp + 0xf0]
mov rcx, qword [r13]
call fcn.1401abf7c
mov rcx, rax
mov qword [rsp + 0xe8], rax
mov rax, qword [0x1403059f0]
mov qword [rsp + 0x58], rcx
mov edx, 1
xor r8d, r8d
mov r9, r13
call qword [0x14031b008]
test eax, eax
je 0x14011cdf4
mov rax, qword [rsp + 0xe8]
mov qword [rsp + 0x68], rax
mov rcx, qword [rsp + 0x2c0]
mov r13, qword [rsp + 0x2b0]
mov rsi, qword [rsp + 0x2b8]
mov rax, rcx
sub rax, r13
cmp rax, 0x3f
ja 0x14011d178
mov ecx, 0x40
call fcn.1401abf00
lea rcx, [rax + 0x40]
mov rdx, rsi
sub rdx, r13
lea rax, [rax + rdx]
mov rdx, rax
jne 0x14011d180
mov qword [rsp + 0x2b0], rdx
mov qword [rsp + 0x2b8], rax
mov qword [rsp + 0x2c0], rcx
cmp rsi, r13
je 0x14011cc09
add rsi, 0xfffffffffffffff8
jne 0x14011cbf9
jmp 0x14011cf36
test r13, r13
jne 0x14011ce64
cmp rax, rcx
jae 0x14011cc35
test rax, rax
mov rsi, qword [rsp + 0x60]
je 0x14011ced4
mov rcx, qword [0x1402f9c10]
mov qword [rax], rcx
add rax, 8
jmp 0x14011cc4e
lea rdx, [0x1402f9c10]
lea rcx, [rsp + 0x2b0]
call fcn.140174eb0
mov rsi, qword [rsp + 0x60]
mov qword [rsp + 0x2b8], rax
cmp rax, qword [rsp + 0x2c0]
jae 0x14011cc79
test rax, rax
je 0x14011ced4
mov rcx, qword [0x1402f9c24]
mov qword [rax], rcx
add rax, 8
jmp 0x14011cc8d
lea rdx, [0x1402f9c24]
lea rcx, [rsp + 0x2b0]
call fcn.140174eb0
mov qword [rsp + 0x2b8], rax
cmp rax, qword [rsp + 0x2c0]
jae 0x14011ccb8
test rax, rax
je 0x14011ced4
mov rcx, qword [0x1402f9c2c]
mov qword [rax], rcx
add rax, 8
jmp 0x14011cccc
lea rdx, [0x1402f9c2c]
lea rcx, [rsp + 0x2b0]
call fcn.140174eb0
mov qword [rsp + 0x2b8], rax
mov edx, 0xc8
add rdx, qword [rsi]
cmp rax, qword [rsp + 0x2c0]
jae 0x14011ccfb
test rax, rax
je 0x14011ced4
mov rcx, qword [rdx]
mov qword [rax], rcx
add rax, 8
jmp 0x14011cd08
lea rcx, [rsp + 0x2b0]
call fcn.140174eb0
mov qword [rsp + 0x2b8], rax
cmp rax, qword [rsp + 0x2c0]
jae 0x14011cd34
test rax, rax
je 0x14011ced4
mov rcx, qword [rsp + 0x2d8]
mov qword [rax], rcx
add rax, 8
jmp 0x14011cd49
lea rdx, [rsp + 0x2d8]
lea rcx, [rsp + 0x2b0]
call fcn.140174eb0
lea r13, [rsp + 0x2b0]
mov qword [r13 + 8], rax
mov rdx, qword [rsp + 0xd0]
mov rcx, r13
call fcn.14011d680
mov rdx, qword [rsp + 0xd8]
mov rcx, r13
call fcn.14011d680
mov rdx, qword [rsp + 0xe0]
mov rcx, r13
call fcn.14011d680
mov r9, qword [r13]
mov rdx, qword [r13 + 8]
sub rdx, r9
je 0x14011cf00
mov rax, qword [0x140305a00]
mov rcx, qword [rsp + 0xe8]
xorps xmm0, xmm0
movups xmmword [rsp + 0x28], xmm0
mov qword [rsp + 0x20], rdx
mov r8d, 0x20002
xor edx, edx
call qword [0x14031b008]
test eax, eax
mov r13, qword [rsp + 0x60]
je 0x14011cdd3
mov esi, 0x80000
jmp 0x14011c8a3
mov ecx, 2
call fcn.14018cad0
test al, al
jne 0x14011ce81
mov rdi, qword [rsp + 0x58]
mov r12, qword [rsp + 0x68]
jmp 0x14011c7cc
mov ecx, 2
call fcn.14018cad0
test al, al
mov r13, qword [rsp + 0x60]
jne 0x14011ce14
xor r12d, r12d
mov rdi, qword [rsp + 0x58]
jmp 0x14011c7cc
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rbx, [rsp + 0x170]
mov rcx, rbx
mov r8d, 0x1e6
mov r9d, 2
call fcn.1402274c0
lea rcx, [rsp + 0x180]
lea rdx, [0x1402c72f7]
mov r8d, 0x21
call fcn.1401e9050
mov rcx, rbx
call fcn.140227540
jmp 0x14011ce07
mov rcx, r13
call fcn.1401abf3c
mov rax, qword [rsp + 0x2b8]
mov rcx, qword [rsp + 0x2c0]
jmp 0x14011cc12
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea r15, [rsp + 0x170]
mov rcx, r15
mov r8d, 0x200
mov r9d, 2
call fcn.1402274c0
lea rcx, [rsp + 0x180]
lea rdx, [0x1402c7319]
mov r8d, 0x19
call fcn.1401e9050
mov rcx, r15
call fcn.140227540
jmp 0x14011cde5
lea rax, str.null_pointer_given_to_construct_at
mov qword [rsp + 0x20], rax
lea rcx, str._s:_d:_assertion__s_failed:__s_n
lea rdx, str....._third_partylibc_srcinclude__memoryconstruct_at.h
lea r9, str.__location___nullptr
mov r8d, 0x28
call fcn.1401f6bb0
lea rax, str.vector___index_out_of_bounds
mov qword [rsp + 0x20], rax
lea rcx, str._s:_d:_assertion__s_failed:__s_n
lea rdx, str....._third_partylibc_srcinclude_vector
lea r9, str.__n___size__
mov r8d, 0x601
call fcn.1401f6bb0
add rax, 0xfffffffffffffff8
jne 0x14011c86d
lea rax, str.null_pointer_given_to_destroy_at
mov qword [rsp + 0x20], rax
lea rcx, str._s:_d:_assertion__s_failed:__s_n
lea rdx, str....._third_partylibc_srcinclude__memoryconstruct_at.h
lea r9, str.__loc___nullptr
mov r8d, 0x44
call fcn.1401f6bb0
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rdi, [rsp + 0x170]
mov rcx, rdi
mov r8d, 0x1d7
mov r9d, 2
call fcn.1400ff950
lea rcx, [rsp + 0x180]
lea rdx, str.InitializeProcThreadAttributeList__size__succeeded__expected_failure
mov r8d, 0x44
call fcn.1401e9050
mov rcx, rdi
call fcn.1400fffa0
jmp 0x14011c7c7
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea r15, [rsp + 0x170]
mov rcx, r15
mov r8d, 0x227
mov r9d, 1
call fcn.1402274c0
lea rcx, [rsp + 0x180]
lea rdx, str.CloseHandle_thread
mov r8d, 0x12
call fcn.1401e9050
mov rcx, r15
call fcn.140227540
jmp 0x14011c964
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea r15, [rsp + 0x170]
mov rcx, r15
mov r8d, 0x22a
mov r9d, 1
call fcn.1402274c0
lea rcx, [rsp + 0x180]
lea rdx, str.CloseHandle_process
mov r8d, 0x13
call fcn.1401e9050
mov rcx, r15
call fcn.140227540
jmp 0x14011c98a
lea rcx, [0x140305a08]
call fcn.1401ac060
cmp dword [0x140305a08], 0xffffffff
jne 0x14011c769
cmp qword [0x1403059f0], 0
je 0x14011d0a3
lea rcx, [0x1402bb02c]
lea rdx, str.::UpdateProcThreadAttribute
xor r8d, r8d
call fcn.14013ec50
mov qword [0x140305a00], rax
lea rcx, [0x140305a08]
call fcn.1401ac0f8
jmp 0x14011c769
xor eax, eax
jmp 0x14011d08b
lea rcx, [0x1403059f8]
call fcn.1401ac060
cmp dword [0x1403059f8], 0xffffffff
jne 0x14011c744
lea rcx, [0x1402bb02c]
lea rdx, str.::InitializeProcThreadAttributeList
xor r8d, r8d
call fcn.14013ec50
mov qword [0x1403059f0], rax
lea rcx, [0x1403059f8]
call fcn.1401ac0f8
jmp 0x14011c744
lea rax, str.char_traits::copy_overlapped_range
mov qword [rsp + 0x20], rax
lea rcx, str._s:_d:_assertion__s_failed:__s_n
lea rdx, str....._third_partylibc_srcinclude__stringchar_traits.h
lea r9, str.__s2_____s1____s2_____s1____n
mov r8d, 0xf3
call fcn.1401f6bb0
lea rax, str.string_view::string_view__CharT___size_t_:_received_nullptr
mov qword [rsp + 0x20], rax
lea rcx, str._s:_d:_assertion__s_failed:__s_n
lea rdx, str....._third_partylibc_srcinclude_string_view
lea r9, str.__len__0____s___nullptr
mov r8d, 0x13c
call fcn.1401f6bb0
lea rax, str.string_view::string_view__CharT___size_t_:_length_does_not_fit_in_difference_type
mov qword [rsp + 0x20], rax
lea rcx, str._s:_d:_assertion__s_failed:__s_n
lea rdx, str....._third_partylibc_srcinclude_string_view
lea r9, str.__len___static_cast_size_type__numeric_limits_difference_type_::max___
mov r8d, 0x13a
call fcn.1401f6bb0
int3
int3
mov rax, rsi
jmp 0x14011cc12
mov rdx, rax
mov r8, rsi
mov r9, qword [r8 - 8]
add r8, 0xfffffffffffffff8
mov qword [rdx - 8], r9
add rdx, 0xfffffffffffffff8
cmp r8, r13
je 0x14011cbe1
jmp 0x14011d186