Function at 0x14024d644
Capabilities:
Create process on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x398
movaps xmmword [rsp + 0x380], xmm7
movaps xmmword [rsp + 0x370], xmm6
mov r12, rcx
mov rax, qword [0x14033f038]
xor rax, rsp
mov qword [rsp + 0x368], rax
mov rax, qword gs:[0x30]
mov rax, qword [rax + 0x60]
mov rax, qword [rax + 0x110]
mov rax, qword [rax + 0x10]
mov rcx, qword gs:[0x30]
cmp rax, qword [rcx + 0x48]
je 0x14024e846
xorps xmm0, xmm0
lea rdx, [rsp + 0x350]
movaps xmmword [rdx], xmm0
mov qword [rdx + 0x10], 0
mov rcx, qword [r12]
call fcn.14028f809
mov r8, qword [r12]
mov rsi, qword [r8 + 0x78]
mov r15, qword [r8 + 0x80]
cmp rsi, r15
je 0x14024d753
lea rdi, [rsp + 0x1a0]
lea rbx, [rsp + 0x340]
lea r14, [rsp + 0x350]
movzx eax, byte [rsi + 0x17]
mov ecx, eax
and ecx, 0x7f
test al, al
mov rax, qword [rsi]
cmovns rax, rsi
mov qword [rsp + 0x340], rax
cmovs rcx, qword [rsi + 8]
mov qword [rsp + 0x348], rcx
mov rcx, rdi
mov rdx, rbx
call fcn.140071320
mov rcx, rdi
mov rdx, r14
call fcn.14028f809
cmp byte [rsp + 0x1b7], 0
jns 0x14024d746
mov rcx, qword [rsp + 0x1a0]
call fcn.14016eccc
add rsi, 0x18
cmp rsi, r15
jne 0x14024d6f2
mov r8, qword [r12]
movzx eax, byte [r8 + 0x2f]
test al, al
jns 0x14024d760
mov rax, qword [r8 + 0x20]
test rax, rax
je 0x14024d7fd
lea rcx, [rsp + 0xb0]
mov byte [rcx + 0x17], 8
lea rax, str.database
cmp rcx, rax
ja 0x14024d792
lea rcx, [rsp + 0xb8]
cmp rcx, rax
ja 0x14024e858
add r8, 0x18
movabs rax, 0x6573616261746164
lea rdx, [rsp + 0xb0]
mov qword [rdx], rax
mov byte [rdx + 8], 0
lea rdi, [rsp + 0x1a0]
mov rcx, rdi
call fcn.14024eb64
lea rdx, [rsp + 0x350]
mov rcx, rdi
call fcn.14028f809
cmp byte [rdi + 0x17], 0
jns 0x14024d7e2
mov rcx, qword [rsp + 0x1a0]
call fcn.14016eccc
cmp byte [rsp + 0xc7], 0
jns 0x14024d7f9
mov rcx, qword [rsp + 0xb0]
call fcn.14016eccc
mov r8, qword [r12]
movzx eax, byte [r8 + 0x47]
test al, al
jns 0x14024d80a
mov rax, qword [r8 + 0x38]
test rax, rax
je 0x14024d8ad
lea rcx, [rsp + 0xb0]
mov byte [rcx + 0x17], 0xb
lea rax, str.metrics_dir
cmp rcx, rax
ja 0x14024d83c
lea rcx, [rsp + 0xbb]
cmp rcx, rax
ja 0x14024e85b
add r8, 0x30
mov eax, dword [0x140315eed]
lea rdx, [rsp + 0xb0]
mov dword [rdx + 7], eax
mov rax, qword [str.metrics_dir]
mov qword [rdx], rax
mov byte [rdx + 0xb], 0
lea rdi, [rsp + 0x1a0]
mov rcx, rdi
call fcn.14024eb64
lea rdx, [rsp + 0x350]
mov rcx, rdi
call fcn.14028f809
cmp byte [rdi + 0x17], 0
jns 0x14024d892
mov rcx, qword [rsp + 0x1a0]
call fcn.14016eccc
cmp byte [rsp + 0xc7], 0
jns 0x14024d8a9
mov rcx, qword [rsp + 0xb0]
call fcn.14016eccc
mov r8, qword [r12]
movzx eax, byte [r8 + 0x5f]
test al, al
jns 0x14024d8bc
mov rcx, qword [r8 + 0x50]
jmp 0x14024d8bf
mov rcx, rax
test rcx, rcx
je 0x14024d9b0
lea rcx, [r8 + 0x48]
mov r9d, eax
and r9d, 0x7f
test al, al
cmovs rcx, qword [r8 + 0x48]
lea rdx, [rsp + 0x330]
mov qword [rdx], rcx
cmovs r9, qword [r8 + 0x50]
mov qword [rdx + 8], r9
lea rcx, [rsp + 0xb0]
call fcn.140071320
lea rcx, [rsp + 0x150]
mov byte [rcx + 0x17], 3
lea rax, [0x1403062fe]
cmp rcx, rax
ja 0x14024d924
lea rcx, [rsp + 0x153]
cmp rcx, rax
ja 0x14024e85e
mov al, byte [0x140306300]
lea rdx, [rsp + 0x150]
mov byte [rdx + 2], al
movzx eax, word [0x1403062fe]
mov word [rdx], ax
mov byte [rdx + 3], 0
lea rdi, [rsp + 0x1a0]
lea r8, [rsp + 0xb0]
mov rcx, rdi
call fcn.14024eb64
lea rdx, [rsp + 0x350]
mov rcx, rdi
call fcn.14028f809
cmp byte [rdi + 0x17], 0
jns 0x14024d97e
mov rcx, qword [rsp + 0x1a0]
call fcn.14016eccc
cmp byte [rsp + 0x167], 0
jns 0x14024d995
mov rcx, qword [rsp + 0x150]
call fcn.14016eccc
cmp byte [rsp + 0xc7], 0
jns 0x14024d9ac
mov rcx, qword [rsp + 0xb0]
call fcn.14016eccc
mov r8, qword [r12]
mov rsi, qword [r8 + 0x60]
lea rbp, [r8 + 0x68]
cmp rsi, rbp
mov qword [rsp + 0x58], r12
je 0x14024dbbc
lea rax, str.annotation
lea rcx, [rsp + 0x2e0]
cmp rcx, rax
seta cl
lea rdx, [rsp + 0x2ea]
cmp rdx, rax
setbe dil
or dil, cl
lea rbx, [rsp + 0x300]
xorps xmm6, xmm6
lea r14, [rsp + 0xb0]
lea r15, [rsp + 0x320]
lea r12, [rsp + 0x1a0]
lea r13, [rsp + 0x350]
lea rdx, [rsi + 0x20]
mov rcx, rbx
mov r8b, 0x3d
call fcn.14009dc77
movzx r8d, byte [rsi + 0x4f]
test r8b, r8b
jns 0x14024da3b
mov r8, qword [rsi + 0x40]
mov rdx, qword [rsi + 0x38]
jmp 0x14024da43
lea rdx, [rsi + 0x38]
and r8d, 0x7f
mov rcx, rbx
call fcn.140041fae
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x160], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x150], xmm0
movups xmmword [rax], xmm6
mov qword [rax + 0x10], 0
movzx eax, byte [rsp + 0x167]
mov ecx, eax
and ecx, 0x7f
test al, al
mov rax, qword [rsp + 0x150]
lea rdx, [rsp + 0x150]
cmovns rax, rdx
mov qword [rsp + 0x320], rax
cmovs rcx, qword [rsp + 0x158]
mov qword [rsp + 0x328], rcx
mov rcx, r14
mov rdx, r15
call fcn.140071320
mov byte [rsp + 0x2f7], 0xa
test dil, dil
je 0x14024e83d
movzx eax, word [0x140315ed8]
mov word [rsp + 0x2e8], ax
mov rax, qword [str.annotation]
mov qword [rsp + 0x2e0], rax
mov byte [rsp + 0x2ea], 0
mov rcx, r12
lea rdx, [rsp + 0x2e0]
mov r8, r14
call fcn.14024eb64
mov rcx, r12
mov rdx, r13
call fcn.14028f809
cmp byte [rsp + 0x1b7], 0
jns 0x14024db20
mov rcx, qword [rsp + 0x1a0]
call fcn.14016eccc
cmp byte [rsp + 0x2f7], 0
jns 0x14024db37
mov rcx, qword [rsp + 0x2e0]
call fcn.14016eccc
cmp byte [rsp + 0xc7], 0
jns 0x14024db4e
mov rcx, qword [rsp + 0xb0]
call fcn.14016eccc
cmp byte [rsp + 0x167], 0
jns 0x14024db65
mov rcx, qword [rsp + 0x150]
call fcn.14016eccc
cmp byte [rsp + 0x317], 0
jns 0x14024db7c
mov rcx, qword [rsp + 0x300]
call fcn.14016eccc
test rsi, rsi
je 0x14024e840
mov rcx, qword [rsi + 8]
test rcx, rcx
jne 0x14024db9c
mov rax, qword [rsi + 0x10]
cmp qword [rax], rsi
mov rsi, rax
je 0x14024dba7
jmp 0x14024db8e
mov rax, rcx
mov rcx, qword [rcx]
test rcx, rcx
jne 0x14024db9c
mov rsi, rax
cmp rax, rbp
jne 0x14024da18
mov r12, qword [rsp + 0x58]
mov r8, qword [r12]
mov rdi, qword [r8 + 0x90]
mov rsi, qword [r8 + 0x98]
cmp rdi, rsi
je 0x14024dc95
lea rax, [0x140315edb]
lea rbx, [rsp + 0xb0]
cmp rbx, rax
seta cl
lea rdx, [rsp + 0xba]
cmp rdx, rax
setbe bpl
or bpl, cl
lea r14, [rsp + 0x1a0]
lea r15, [rsp + 0x350]
mov byte [rsp + 0xc7], 0xa
test bpl, bpl
je 0x14024e843
movzx eax, word [0x140315ee3]
mov word [rsp + 0xb8], ax
mov rax, qword [0x140315edb]
mov qword [rsp + 0xb0], rax
mov byte [rsp + 0xba], 0
mov rcx, r14
mov rdx, rbx
mov r8, rdi
call fcn.14024eb64
mov rcx, r14
mov rdx, r15
call fcn.14028f809
cmp byte [rsp + 0x1b7], 0
jns 0x14024dc71
mov rcx, qword [rsp + 0x1a0]
call fcn.14016eccc
cmp byte [rsp + 0xc7], 0
jns 0x14024dc88
mov rcx, qword [rsp + 0xb0]
call fcn.14016eccc
add rdi, 0x18
cmp rdi, rsi
jne 0x14024dc0a
movabs rbp, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x310], rbp
movaps xmm6, xmmword [0x140301d60]
movaps xmmword [rsp + 0x300], xmm6
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, 0x1f0fff
mov edx, 1
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_OpenProcess]
lea r15, [0x1402fd450]
mov qword [rsp + 0x300], r15
mov qword [rsp + 0x308], rax
mov byte [rsp + 0x310], 0
test rax, rax
jne 0x14024dde4
cmp dword [0x140352b00], 2
jg 0x14024e84c
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rdi, [rsp + 0x1a0]
mov rcx, rdi
mov r8d, 0x19b
mov r9d, 2
call fcn.14020a880
lea rcx, [rsp + 0x1b0]
lea rdx, [0x14031a0b2]
mov r8d, 0xb
call fcn.14015f6d6
mov rcx, rdi
call fcn.14020a900
xor ebx, ebx
xor ebp, ebp
mov qword [rsp + 0x300], r15
cmp byte [rsp + 0x310], 0
jne 0x14024e849
mov rcx, qword [rsp + 0x308]
test rcx, rcx
je 0x14024dd7f
call fcn.1400d0a94
cmp byte [rsp + 0x367], 0
jns 0x14024dd96
mov rcx, qword [rsp + 0x350]
call fcn.14016eccc
xor eax, eax
cmp bl, 1
adc rax, 1
mov qword [0x14035bff8], rax
mov rcx, r12
call fcn.14024ea2a
mov rcx, qword [rsp + 0x368]
xor rcx, rsp
call fcn.140171860
mov eax, ebp
movaps xmm6, xmmword [rsp + 0x370]
movaps xmm7, xmmword [rsp + 0x380]
add rsp, 0x398
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
lea rcx, [rsp + 0x150]
mov qword [rcx + 0x40], rbp
mov rdx, qword [r12]
mov rdx, qword [rdx + 0xc8]
movups xmm0, xmmword [0x14034ec54]
mov r8, qword [0x14034ec40]
lea r9, [0x14035bfa8]
mov qword [rcx], r9
lea r9, [0x14035bfb8]
mov qword [rcx + 8], r9
lea r9, [0x14035bfc8]
mov qword [rcx + 0x10], r9
mov qword [rcx + 0x18], r8
movups xmmword [rcx + 0x20], xmm0
mov qword [rcx + 0x30], rdx
mov qword [rcx + 0x38], rax
mov byte [rcx + 0x40], 1
lea rdi, [rsp + 0x2e0]
mov rdx, rdi
call fcn.14021aafa
lea rcx, [rsp + 0x120]
mov byte [rcx + 0x17], 0x16
lea rax, str.__initial_client_data
cmp rcx, rax
ja 0x14024de76
lea rcx, [rsp + 0x136]
cmp rcx, rax
ja 0x14024e861
movups xmm0, xmmword [str.__initial_client_data]
lea rcx, [rsp + 0x120]
movaps xmmword [rcx], xmm0
movabs rax, 0x3d617461642d746e
mov qword [rcx + 0xe], rax
movzx eax, byte [rsp + 0x2f7]
mov r8d, eax
and r8d, 0x7f
test al, al
cmovs r8, qword [rsp + 0x2e8]
mov byte [rcx + 0x16], 0
cmovs rdi, qword [rsp + 0x2e0]
mov rdx, rdi
call fcn.140041fae
mov rcx, qword [rax + 0x10]
lea rbx, [rsp + 0xb0]
mov qword [rbx + 0x10], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rbx], xmm0
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov qword [rax + 0x10], 0
movzx eax, byte [rbx + 0x17]
mov ecx, eax
and ecx, 0x7f
test al, al
mov rax, qword [rbx]
cmovns rax, rbx
lea rdx, [rsp + 0x140]
mov qword [rdx], rax
cmovs rcx, qword [rbx + 8]
mov qword [rdx + 8], rcx
lea r14, [rsp + 0x1a0]
mov rcx, r14
call fcn.140071320
lea rdi, [rsp + 0x350]
mov rcx, r14
mov rdx, rdi
call fcn.14028f809
cmp byte [r14 + 0x17], 0
jns 0x14024df46
mov rcx, qword [rsp + 0x1a0]
call fcn.14016eccc
cmp byte [rsp + 0xc7], 0
jns 0x14024df5d
mov rcx, qword [rsp + 0xb0]
call fcn.14016eccc
cmp byte [rsp + 0x137], 0
jns 0x14024df74
mov rcx, qword [rsp + 0x120]
call fcn.14016eccc
cmp byte [rsp + 0x2f7], 0
jns 0x14024df8b
mov rcx, qword [rsp + 0x2e0]
call fcn.14016eccc
xorps xmm7, xmm7
movaps xmmword [rsp + 0xe0], xmm7
movaps xmmword [rsp + 0x110], xmm7
movaps xmmword [rsp + 0x100], xmm7
movaps xmmword [rsp + 0xf0], xmm7
movaps xmmword [rsp + 0xd0], xmm7
movaps xmmword [rsp + 0xc0], xmm7
movaps xmmword [rsp + 0xb0], xmm7
mov dword [rsp + 0xec], 0x100
mov rsi, qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov ecx, 0xfffffff6
call rsi
mov r15, rax
mov qword [rsp + 0x100], rax
mov ecx, 0xfffffff5
call rsi
mov r12, rax
mov qword [rsp + 0x108], rax
mov ecx, 0xfffffff4
call rsi
mov r13, rax
mov qword [rsp + 0x110], rax
xor eax, eax
mov qword [rsp + 0x2f0], rax
movaps xmmword [rsp + 0x2e0], xmm7
lea rcx, [rbp - 0xaa]
mov qword [rsp + 0x130], rcx
lea rsi, [0x1402fd458]
mov qword [rsp + 0x120], rsi
mov qword [rsp + 0x128], rax
mov eax, dword [0x14035c008]
mov ecx, dword [0x14034fed0]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14024e7a1
mov eax, dword [0x14035c018]
mov ecx, dword [0x14034fed0]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14024e7e8
mov rax, qword [0x14035c000]
test rax, rax
je 0x14024e190
cmp qword [0x14035c010], 0
je 0x14024e190
mov dword [rsp + 0xb0], 0x70
lea r9, [rsp + 0x90]
mov qword [r9], rbp
xor ecx, ecx
mov edx, 1
xor r8d, r8d
call qword [case.0x140211850.0]
test eax, eax
jne 0x14024e4a1
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x14024e554
mov qword [rsp + 0x60], rdi
lea rbp, [rsp + 0x90]
mov rcx, qword [rbp]
call fcn.14016f248
mov rdi, rax
mov qword [rsp + 0x118], rax
mov rax, qword [0x14035c000]
mov rcx, rdi
mov edx, 1
xor r8d, r8d
mov r9, rbp
call qword [case.0x140211850.0]
test eax, eax
jne 0x14024e5b1
cmp dword [0x140352b00], 2
jg 0x14024e4f1
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rbx, [rsp + 0x1a0]
mov rcx, rbx
mov r8d, 0x1db
mov r9d, 2
call fcn.14020a880
lea rcx, [rsp + 0x1b0]
lea rdx, [0x14031a183]
mov r8d, 0x21
call fcn.14015f6d6
mov rcx, rbx
call fcn.14020a900
jmp 0x14024e4f1
mov qword [rsp + 0x60], rdi
mov r13, rsi
mov dword [rsp + 0xb0], 0x68
xor edi, edi
xor esi, esi
mov r12, qword [rsp + 0x58]
lea r15, [0x1402fd450]
mov rdx, qword [r12]
movzx r8d, byte [rdx + 0x17]
test r8b, r8b
mov qword [rsp + 0x68], rdi
jns 0x14024e1f5
mov r8, qword [rdx + 8]
cmp r8, 0xc
jae 0x14024e1fb
xor edi, edi
mov qword [rsp + 0xa0], rbp
movaps xmmword [rsp + 0x90], xmm6
call fcn.14028f116
test al, al
je 0x14024e25a
call fcn.14028f193
mov r14, rax
jmp 0x14024e25d
cmp r8b, 0xc
jb 0x14024e1d0
add r8, 0xfffffffffffffff4
lea rax, [rdx + 0x18]
mov qword [rsp + 0x20], rax
mov rcx, r14
mov r9, 0xffffffffffffffff
call fcn.140051096
cmp byte [rsp + 0x1b7], 0
jns 0x14024e229
mov r14, qword [rsp + 0x1a0]
lea rdx, str.rundll32.exe
mov rcx, r14
call fcn.14018e600
test eax, eax
sete dil
cmp byte [rsp + 0x1b7], 0
jns 0x14024e1d2
mov rcx, qword [rsp + 0x1a0]
call fcn.14016eccc
jmp 0x14024e1d2
xor r14d, r14d
cmp byte [rsp + 0x367], 0
jns 0x14024e274
mov rax, qword [rsp + 0x350]
mov qword [rsp + 0x60], rax
test dil, dil
je 0x14024e327
xor edx, edx
mov r8, qword [rsp + 0x60]
lea rax, [rsp + 0x90]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], rbx
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
mov dword [rsp + 0x30], esi
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], 0
mov rcx, r14
xor r9d, r9d
call qword [sym.imp.ADVAPI32.dll_CreateProcessAsUserW]
test eax, eax
jne 0x14024e342
cmp dword [0x140352b00], 2
mov rsi, r13
jg 0x14024e31e
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rdi, [rsp + 0x1a0]
mov rcx, rdi
mov r8d, 0x21f
mov r9d, 2
call fcn.14020a880
lea rcx, [rsp + 0x1b0]
lea rdx, str.CreateProcess
mov r8d, 0xd
call fcn.14015f6d6
mov rcx, rdi
call fcn.14020a900
xor ebx, ebx
xor ebp, ebp
jmp 0x14024e48d
mov rdx, qword [r12]
cmp byte [rdx + 0x17], 0
mov r8, qword [rsp + 0x60]
jns 0x14024e284
mov rdx, qword [rdx]
jmp 0x14024e284
mov rcx, qword [rsp + 0x98]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [0x140352b00], 1
mov rsi, r13
jg 0x14024e3b8
cmp dword [0x1403411a8], 0
je 0x14024e3b8
test eax, eax
jne 0x14024e3b8
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rdi, [rsp + 0x1a0]
mov rcx, rdi
mov r8d, 0x224
mov r9d, 1
call fcn.14020a880
lea rcx, [rsp + 0x1b0]
lea rdx, str.CloseHandle_thread
mov r8d, 0x12
call fcn.14015f6d6
mov rcx, rdi
call fcn.14020a900
mov rcx, qword [rsp + 0x90]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [0x140352b00], 1
jg 0x14024e42b
cmp dword [0x1403411a8], 0
je 0x14024e42b
test eax, eax
jne 0x14024e42b
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rdi, [rsp + 0x1a0]
mov rcx, rdi
mov r8d, 0x227
mov r9d, 1
call fcn.14020a880
lea rcx, [rsp + 0x1b0]
lea rdx, str.CloseHandle_process
mov r8d, 0x13
call fcn.14015f6d6
mov rcx, rdi
call fcn.14020a900
mov ecx, 0xc0
add rcx, qword [r12]
lea rdi, [rsp + 0x1a0]
mov qword [rdi], 0xffffffffffffffff
mov rdx, rdi
call fcn.1400d03b2
xorps xmm0, xmm0
movups xmmword [rdi + 0x14], xmm0
movups xmmword [rdi + 4], xmm0
mov dword [rdi], 2
lea r8, [rsp + 0x80]
mov dword [r8 + 8], 0
mov qword [r8], 0
mov ecx, 0xa8
add rcx, qword [r12]
lea rdx, [rsp + 0x1a0]
call fcn.1400d0c6e
mov ebx, eax
mov ebp, eax
test r14, r14
mov rdi, qword [rsp + 0x68]
je 0x14024e501
mov rcx, r14
call fcn.1400d0a94
jmp 0x14024e501
cmp dword [0x140352b00], 2
jg 0x14024e4ef
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rdi, [rsp + 0x1a0]
mov rcx, rdi
mov r8d, 0x1cc
mov r9d, 2
call fcn.1400d3710
lea rcx, [rsp + 0x1b0]
lea rdx, str.InitializeProcThreadAttributeList__size__succeeded__expected_failure
mov r8d, 0x44
call fcn.14015f6d6
mov rcx, rdi
call fcn.140169410
xor edi, edi
mov r12, qword [rsp + 0x58]
lea r15, [0x1402fd450]
xor ebx, ebx
xor ebp, ebp
mov qword [rsp + 0x120], rsi
cmp byte [rsp + 0x130], 0
jne 0x14024e855
lea rcx, [rsp + 0x120]
call fcn.14024edda
test rdi, rdi
je 0x14024e531
mov rcx, rdi
call fcn.14016efec
mov rcx, qword [rsp + 0x2e0]
test rcx, rcx
je 0x14024dd57
mov qword [rsp + 0x2e8], rcx
call fcn.14016eccc
jmp 0x14024dd57
cmp dword [0x140352b00], 2
jg 0x14024e4ef
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rdi, [rsp + 0x1a0]
mov rcx, rdi
mov r8d, 0x1d0
mov r9d, 2
call fcn.14020a880
lea rcx, [rsp + 0x1b0]
lea rdx, str.InitializeProcThreadAttributeList__size_
mov r8d, 0x28
call fcn.14015f6d6
mov rcx, rdi
call fcn.14020a900
jmp 0x14024e4ef
lea rbp, [rsp + 0x120]
mov rcx, rbp
call fcn.14024edda
mov qword [rbp + 8], rdi
mov rdx, qword [rsp + 0x2e0]
mov rax, qword [rsp + 0x2f0]
sub rax, rdx
cmp rax, 0x3f
ja 0x14024e657
mov qword [rsp + 0x68], rdi
mov rdi, qword [rsp + 0x2e8]
sub rdi, rdx
mov ecx, 0x40
mov rsi, rdx
call fcn.14016ecd4
mov rbp, rax
add rax, rdi
mov qword [rsp + 0x78], rax
lea rax, [rbp + 0x40]
mov qword [rsp + 0x70], rax
mov rcx, rbp
mov rdx, rsi
mov r8, rdi
mov rdi, qword [rsp + 0x68]
call fcn.1401730b0
mov rcx, rsi
mov qword [rsp + 0x2e0], rbp
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x2e8], rax
lea rsi, [0x1402fd458]
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x2f0], rax
test rcx, rcx
jne 0x14024e797
lea rdx, [0x14034ec40]
lea rbp, [rsp + 0x2e0]
mov rcx, rbp
call fcn.14012dc2e
lea rdx, [0x14034ec54]
mov rcx, rbp
call fcn.14012dc2e
lea rdx, [0x14034ec5c]
mov rcx, rbp
call fcn.14012dc2e
mov edx, 0xc8
mov rax, qword [rsp + 0x58]
add rdx, qword [rax]
mov rcx, rbp
call fcn.14012dc2e
mov rcx, rbp
lea rdx, [rsp + 0x308]
call fcn.14012dc2e
mov rcx, rbp
mov rdx, r15
call fcn.14024ed22
mov rcx, rbp
mov rdx, r12
call fcn.14024ed22
mov rcx, rbp
mov rdx, r13
call fcn.14024ed22
mov r9, qword [rbp]
mov rcx, qword [rbp + 8]
sub rcx, r9
je 0x14024e864
mov rax, qword [0x14035c010]
xorps xmm0, xmm0
movups xmmword [rsp + 0x28], xmm0
mov qword [rsp + 0x20], rcx
mov r8d, 0x20002
mov rcx, rdi
xor edx, edx
call qword [case.0x140211850.0]
test eax, eax
lea r15, [0x1402fd450]
movabs rbp, 0xaaaaaaaaaaaaaaaa
jne 0x14024e785
mov rbx, rdi
cmp dword [0x140352b00], 2
mov r12, qword [rsp + 0x58]
jg 0x14024e77d
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rdi, [rsp + 0x1a0]
mov rcx, rdi
mov r8d, 0x1f5
mov r9d, 2
call fcn.14020a880
lea rcx, [rsp + 0x1b0]
lea rdx, [0x14031a1a5]
mov r8d, 0x19
call fcn.14015f6d6
mov rcx, rdi
call fcn.14020a900
mov rdi, rbx
jmp 0x14024e4fd
mov r13, rsi
mov esi, 0x80000
mov r12, qword [rsp + 0x58]
jmp 0x14024e1b3
call fcn.14016eccc
jmp 0x14024e657
lea rcx, [0x14035c008]
call fcn.14016f8b4
cmp dword [0x14035c008], 0xffffffff
jne 0x14024e06b
lea rcx, [0x140302266]
lea rdx, str.::InitializeProcThreadAttributeList
xor r8d, r8d
call fcn.140108be3
mov qword [0x14035c000], rax
lea rcx, [0x14035c008]
call fcn.14016ef8c
jmp 0x14024e06b
lea rcx, [0x14035c018]
call fcn.14016f8b4
cmp dword [0x14035c018], 0xffffffff
jne 0x14024e090
cmp qword [0x14035c000], 0
jne 0x14024e80f
xor eax, eax
jmp 0x14024e825
lea rcx, [0x140302266]
lea rdx, str.::UpdateProcThreadAttribute
xor r8d, r8d
call fcn.140108be3
mov qword [0x14035c010], rax
lea rcx, [0x14035c018]
call fcn.14016ef8c
jmp 0x14024e090
int3
int3
int3
int3
int3
xor ebx, ebx
xor ebp, ebp
jmp 0x14024dd7f
int3
int3
int3
int3
int3
int3