Function at 0x140085900
Capabilities:
Create process on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x348
movaps xmmword [rsp + 0x330], xmm7
movaps xmmword [rsp + 0x320], xmm6
mov r13, rcx
mov rax, qword [0x14024f038]
xor rax, rsp
mov qword [rsp + 0x318], rax
call fcn.1400a6a60
test al, al
jne 0x1400868b5
xorps xmm0, xmm0
lea rdx, [rsp + 0x300]
movaps xmmword [rdx], xmm0
mov qword [rdx + 0x10], 0
mov rcx, qword [r13]
call fcn.1400a6a90
mov rdi, qword [r13]
mov rsi, qword [rdi + 0x78]
mov r15, qword [rdi + 0x80]
cmp rsi, r15
je 0x140085a22
lea rdi, [rsp + 0x158]
lea rbx, [rsp + 0x2f0]
lea r14, [rsp + 0x300]
jmp 0x1400859f3
mov qword [rsp + 0x2f0], rsi
mov qword [rsp + 0x2f8], rax
mov rcx, rsi
test rax, rax
sete al
test rcx, rcx
setne cl
or cl, al
je 0x140086833
mov rcx, rdi
mov rdx, rbx
call fcn.1400d2d60
mov rcx, rdi
mov rdx, r14
call fcn.1400a6a90
cmp byte [rsp + 0x16f], 0
jns 0x1400859ea
mov rcx, qword [rsp + 0x158]
call fcn.1400fc308
add rsi, 0x18
cmp rsi, r15
je 0x140085a1e
movsx rax, byte [rsi + 0x17]
test rax, rax
jns 0x140085996
mov rcx, qword [rsi]
mov rax, qword [rsi + 8]
mov qword [rsp + 0x2f0], rcx
mov qword [rsp + 0x2f8], rax
test rax, rax
jns 0x1400859a9
jmp 0x140086846
mov rdi, qword [r13]
movsx rax, byte [rdi + 0x2f]
test rax, rax
jns 0x140085a30
mov rax, qword [rdi + 0x20]
test rax, rax
je 0x140085ac4
lea rax, [rsp + 0x78]
mov byte [rax + 0xf], 8
lea rcx, str.database
lea rdx, [rsp + 0x70]
cmp rdx, rcx
seta dl
cmp rax, rcx
setbe al
or al, dl
je 0x14008686c
add rdi, 0x18
movabs rax, 0x6573616261746164
lea rdx, [rsp + 0x70]
mov qword [rdx], rax
mov byte [rdx + 8], 0
lea rbx, [rsp + 0x158]
mov rcx, rbx
mov r8, rdi
call fcn.140087400
lea rdx, [rsp + 0x300]
mov rcx, rbx
call fcn.1400a6a90
cmp byte [rbx + 0x17], 0
jns 0x140085ab2
mov rcx, qword [rsp + 0x158]
call fcn.1400fc308
cmp byte [rsp + 0x87], 0
js 0x1400868f7
mov rdi, qword [r13]
movsx rax, byte [rdi + 0x47]
test rax, rax
js 0x1400868b8
test rax, rax
jne 0x140086c4f
movsx rax, byte [rdi + 0x5f]
test rax, rax
jns 0x140086906
mov rax, qword [rdi + 0x50]
test rax, rax
je 0x140085bd7
mov rdi, qword [rdi + 0x48]
mov qword [rsp + 0x2e0], rdi
mov qword [rsp + 0x2e8], rax
js 0x140086846
test rdi, rdi
je 0x140086833
lea rcx, [rsp + 0x70]
lea rdx, [rsp + 0x2e0]
call fcn.1400d2d60
lea rax, [rsp + 0x113]
mov byte [rax + 0x14], 3
lea rcx, [0x140214550]
lea rdx, [rsp + 0x110]
cmp rdx, rcx
seta dl
cmp rax, rcx
setbe al
or al, dl
je 0x14008686c
mov al, byte [0x140214552]
lea rdx, [rsp + 0x110]
mov byte [rdx + 2], al
movzx eax, word [0x140214550]
mov word [rdx], ax
mov byte [rdx + 3], 0
lea rdi, [rsp + 0x158]
lea r8, [rsp + 0x70]
mov rcx, rdi
call fcn.140087400
lea rdx, [rsp + 0x300]
mov rcx, rdi
call fcn.1400a6a90
cmp byte [rdi + 0x17], 0
jns 0x140085bb1
mov rcx, qword [rsp + 0x158]
call fcn.1400fc308
cmp byte [rsp + 0x127], 0
js 0x140086927
cmp byte [rsp + 0x87], 0
jns 0x140085bd3
mov rcx, qword [rsp + 0x70]
call fcn.1400fc308
mov rdi, qword [r13]
mov rsi, qword [rdi + 0x60]
lea rbp, [rdi + 0x68]
cmp rsi, rbp
mov qword [rsp + 0x58], r13
je 0x140085dcb
lea rax, [rsp + 0x29a]
lea rcx, str.annotation
lea rdi, [rsp + 0x290]
cmp rdi, rcx
setbe dl
cmp rax, rcx
seta r15b
and r15b, dl
lea rbx, [rsp + 0x2b0]
xorps xmm6, xmm6
lea r14, [rsp + 0x70]
lea r12, [rsp + 0x158]
lea r13, [rsp + 0x300]
jmp 0x140085c4d
mov rax, rcx
mov rcx, qword [rcx]
test rcx, rcx
jne 0x140085c36
mov rsi, rax
cmp rax, rbp
je 0x140085dc2
lea rdx, [rsi + 0x20]
mov rcx, rbx
mov r8b, 0x3d
call fcn.1400377c0
movsx r8, byte [rsi + 0x4f]
test r8, r8
js 0x140085c6c
lea rdx, [rsi + 0x38]
jmp 0x140085c74
mov r8, qword [rsi + 0x40]
mov rdx, qword [rsi + 0x38]
mov rcx, rbx
call fcn.1400cb6f0
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x120], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x110], xmm0
movups xmmword [rax], xmm6
mov qword [rax + 0x10], 0
movsx rcx, byte [rsp + 0x127]
test rcx, rcx
cmovs rcx, qword [rsp + 0x118]
mov rax, qword [rsp + 0x110]
lea rdx, [rsp + 0x110]
cmovns rax, rdx
mov qword [rsp + 0x2d0], rax
mov qword [rsp + 0x2d8], rcx
test rcx, rcx
js 0x140086846
sete cl
test rax, rax
setne al
or al, cl
je 0x140086833
mov rcx, r14
lea rdx, [rsp + 0x2d0]
call fcn.1400d2d60
mov byte [rsp + 0x2a7], 0xa
test r15b, r15b
jne 0x14008686c
movabs rax, 0x697461746f6e6e61
mov qword [rsp + 0x290], rax
mov word [rsp + 0x298], 0x6e6f
mov byte [rsp + 0x29a], 0
mov rcx, r12
mov rdx, rdi
mov r8, r14
call fcn.140087400
mov rcx, r12
mov rdx, r13
call fcn.1400a6a90
cmp byte [rsp + 0x16f], 0
jns 0x140085d66
mov rcx, qword [rsp + 0x158]
call fcn.1400fc308
cmp byte [rsp + 0x2a7], 0
js 0x14008687f
cmp byte [rsp + 0x87], 0
jns 0x140085d88
mov rcx, qword [rsp + 0x70]
call fcn.1400fc308
cmp byte [rsp + 0x127], 0
js 0x140086891
cmp byte [rsp + 0x2c7], 0
js 0x1400868a3
mov rcx, qword [rsi + 8]
test rcx, rcx
jne 0x140085c36
mov rax, qword [rsi + 0x10]
cmp qword [rax], rsi
mov rsi, rax
jne 0x140085db1
jmp 0x140085c41
mov r13, qword [rsp + 0x58]
mov rdi, qword [r13]
mov rbx, qword [rdi + 0x90]
mov rsi, qword [rdi + 0x98]
cmp rbx, rsi
jne 0x140086a29
movabs r12, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x2c0], r12
movaps xmm6, xmmword [0x1402103c0]
movaps xmmword [rsp + 0x2b0], xmm6
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, 0x1f0fff
mov edx, 1
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_OpenProcess]
lea r14, [0x14020c768]
mov qword [rsp + 0x2b0], r14
mov qword [rsp + 0x2b8], rax
mov byte [rsp + 0x2c0], 0
test rax, rax
je 0x140086cbe
lea rbx, [rsp + 0x110]
mov qword [rbx + 0x40], r12
movaps xmmword [rbx + 0x30], xmm6
movaps xmmword [rbx + 0x20], xmm6
movaps xmmword [rbx + 0x10], xmm6
movaps xmmword [rbx], xmm6
mov rcx, qword [r13]
mov rcx, qword [rcx + 0xc8]
mov r9, qword [0x140251afc]
mov r8, qword [0x140251af4]
mov rdx, qword [0x140251ae8]
lea r10, [0x1402639b8]
mov qword [rsp + 0x40], r10
lea r10, [0x1402639ac]
mov qword [rsp + 0x38], r10
lea r10, [0x1402639a0]
mov qword [rsp + 0x30], r10
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
mov rcx, rbx
call fcn.1400a6cd0
lea rdi, [rsp + 0x290]
mov rcx, rbx
mov rdx, rdi
call fcn.1400a71e0
lea rax, [rsp + 0xf6]
mov byte [rax + 1], 0x16
lea rcx, str.__initial_client_data
lea rdx, [rsp + 0xe0]
cmp rdx, rcx
seta dl
cmp rax, rcx
setbe al
or al, dl
je 0x14008686c
movups xmm0, xmmword [str.__initial_client_data]
lea rbp, [rsp + 0xe0]
movaps xmmword [rbp], xmm0
movabs rax, 0x3d617461642d746e
mov qword [rbp + 0xe], rax
movsx r8, byte [rsp + 0x2a7]
test r8, r8
cmovs r8, qword [rsp + 0x298]
mov byte [rbp + 0x16], 0
cmovs rdi, qword [rsp + 0x290]
mov rcx, rbp
mov rdx, rdi
call fcn.1400cb6f0
mov rcx, qword [rax + 0x10]
lea rdx, [rsp + 0x70]
mov qword [rdx + 0x10], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rdx], xmm0
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov qword [rax + 0x10], 0
movsx rcx, byte [rdx + 0x17]
test rcx, rcx
cmovs rcx, qword [rdx + 8]
mov rax, qword [rdx]
cmovns rax, rdx
mov qword [rsp + 0x100], rax
mov qword [rsp + 0x108], rcx
test rcx, rcx
js 0x140086846
sete cl
test rax, rax
setne al
or al, cl
je 0x140086833
lea rbx, [rsp + 0x158]
lea rdx, [rsp + 0x100]
mov rcx, rbx
call fcn.1400d2d60
lea rdx, [rsp + 0x300]
mov rcx, rbx
call fcn.1400a6a90
cmp byte [rbx + 0x17], 0
jns 0x140085fdf
mov rcx, qword [rsp + 0x158]
call fcn.1400fc308
cmp byte [rsp + 0x87], 0
jns 0x140085ff3
mov rcx, qword [rsp + 0x70]
call fcn.1400fc308
cmp byte [rsp + 0xf7], 0
js 0x140086939
cmp byte [rsp + 0x2a7], 0
jns 0x140086018
mov rcx, qword [rsp + 0x290]
call fcn.1400fc308
xorps xmm7, xmm7
movaps xmmword [rsp + 0xa0], xmm7
movaps xmmword [rsp + 0xd0], xmm7
movaps xmmword [rsp + 0xc0], xmm7
movaps xmmword [rsp + 0xb0], xmm7
movaps xmmword [rsp + 0x90], xmm7
movaps xmmword [rsp + 0x80], xmm7
movaps xmmword [rsp + 0x70], xmm7
mov dword [rsp + 0xac], 0x100
mov rsi, qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov ecx, 0xfffffff6
call rsi
mov qword [rsp + 0xc0], rax
mov ecx, 0xfffffff5
call rsi
mov qword [rsp + 0xc8], rax
mov ecx, 0xfffffff4
call rsi
mov qword [rsp + 0xd0], rax
movaps xmmword [rsp + 0x290], xmm7
mov qword [rsp + 0x2a0], 0
mov eax, dword [0x1402639f8]
mov ecx, dword [0x14025e4e8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jle 0x140086102
lea rcx, [0x1402639f8]
call fcn.1400fc420
cmp dword [0x1402639f8], 0xffffffff
jne 0x140086102
lea rcx, [0x140217240]
lea rdx, str.::InitializeProcThreadAttributeList
xor r8d, r8d
call fcn.1400a7280
mov qword [0x1402639f0], rax
lea rcx, [0x1402639f8]
call fcn.1400fc4b8
mov eax, dword [0x140263a08]
mov ecx, dword [0x14025e4e8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jle 0x14008616f
lea rcx, [0x140263a08]
call fcn.1400fc420
cmp dword [0x140263a08], 0xffffffff
jne 0x14008616f
cmp qword [0x1402639f0], 0
je 0x1400868c1
lea rcx, [0x140217240]
lea rdx, str.::UpdateProcThreadAttribute
xor r8d, r8d
call fcn.1400a7280
mov qword [0x140263a00], rax
lea rcx, [0x140263a08]
call fcn.1400fc4b8
mov rax, qword [0x1402639f0]
test rax, rax
je 0x1400868e3
cmp qword [0x140263a00], 0
je 0x1400868e3
mov dword [rsp + 0x70], 0x70
lea r9, [rsp + 0xe0]
mov qword [r9], r12
xor ecx, ecx
mov edx, 1
xor r8d, r8d
call qword [0x14023e858]
test eax, eax
jne 0x140086b8d
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x140086b2b
lea rbx, [rsp + 0xe0]
mov rcx, qword [rbx]
call fcn.1400fc33c
mov rdi, rax
mov qword [rsp + 0xd8], rax
mov rax, qword [0x1402639f0]
mov rcx, rdi
mov edx, 1
xor r8d, r8d
mov r9, rbx
call qword [0x14023e858]
test eax, eax
je 0x140086ac7
mov r15, qword [rsp + 0xd8]
mov rbp, qword [rsp + 0x290]
mov rsi, qword [rsp + 0x2a0]
mov rax, rsi
sub rax, rbp
cmp rax, 0x3f
ja 0x140086826
mov r12, r14
mov rbx, qword [rsp + 0x298]
mov ecx, 0x40
call fcn.1400fc2cc
mov r14, rax
lea rsi, [rax + 0x40]
sub rbx, rbp
lea r13, [rax + rbx]
jne 0x140086a16
mov qword [rsp + 0x290], r14
mov qword [rsp + 0x298], r13
mov qword [rsp + 0x2a0], rsi
test rbp, rbp
mov r14, r12
movabs r12, 0xaaaaaaaaaaaaaaaa
jne 0x140086816
cmp r13, rsi
lea rbx, [rsp + 0x158]
jae 0x140086aa3
test r13, r13
lea rbp, [rsp + 0xe0]
je 0x140086859
mov rax, qword [0x140251ae8]
mov qword [r13], rax
add r13, 8
mov qword [rsp + 0x298], r13
cmp r13, qword [rsp + 0x2a0]
jae 0x1400869c1
test r13, r13
je 0x140086859
mov rax, qword [0x140251af4]
mov qword [r13], rax
add r13, 8
mov qword [rsp + 0x298], r13
cmp r13, qword [rsp + 0x2a0]
jae 0x1400869dd
test r13, r13
je 0x140086859
mov rax, qword [0x140251afc]
mov qword [r13], rax
add r13, 8
mov qword [rsp + 0x298], r13
mov edx, 0xc8
mov rax, qword [rsp + 0x58]
add rdx, qword [rax]
cmp r13, qword [rsp + 0x2a0]
jae 0x14008695e
test r13, r13
je 0x140086859
mov rax, qword [rdx]
mov qword [r13], rax
add r13, 8
mov qword [rsp + 0x298], r13
cmp r13, qword [rsp + 0x2a0]
jae 0x1400869f9
test r13, r13
je 0x140086859
mov rax, qword [rsp + 0x2b8]
mov qword [r13], rax
add r13, 8
mov qword [rsp + 0x298], r13
mov r13, qword [rsp + 0xc0]
mov qword [rsp + 0x158], r13
lea rax, [r13 + 1]
cmp rax, 2
jb 0x1400863f0
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_GetFileType]
and eax, 0xfffffffd
cmp eax, 1
jne 0x1400863f0
mov rcx, qword [rsp + 0x290]
mov rax, qword [rsp + 0x298]
jmp 0x1400863c5
cmp qword [rcx], r13
je 0x1400863f0
add rcx, 8
cmp rcx, rax
jne 0x1400863bc
cmp rax, qword [rsp + 0x2a0]
jae 0x140086973
test rax, rax
je 0x140086859
mov qword [rax], r13
add rax, 8
mov qword [rsp + 0x298], rax
mov r13, qword [rsp + 0xc8]
mov qword [rsp + 0x158], r13
lea rax, [r13 + 1]
cmp rax, 2
jb 0x140086461
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_GetFileType]
and eax, 0xfffffffd
cmp eax, 1
jne 0x140086461
mov rcx, qword [rsp + 0x290]
mov rax, qword [rsp + 0x298]
jmp 0x140086436
cmp qword [rcx], r13
je 0x140086461
add rcx, 8
cmp rcx, rax
jne 0x14008642d
cmp rax, qword [rsp + 0x2a0]
jae 0x14008698d
test rax, rax
je 0x140086859
mov qword [rax], r13
add rax, 8
mov qword [rsp + 0x298], rax
mov r13, qword [rsp + 0xd0]
mov qword [rsp + 0x158], r13
lea rax, [r13 + 1]
cmp rax, 2
jb 0x1400864d2
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_GetFileType]
and eax, 0xfffffffd
cmp eax, 1
jne 0x1400864d2
mov rcx, qword [rsp + 0x290]
mov rax, qword [rsp + 0x298]
jmp 0x1400864a7
cmp qword [rcx], r13
je 0x1400864d2
add rcx, 8
cmp rcx, rax
jne 0x14008649e
cmp rax, qword [rsp + 0x2a0]
jae 0x1400869a7
test rax, rax
je 0x140086859
mov qword [rax], r13
add rax, 8
mov qword [rsp + 0x298], rax
mov r9, qword [rsp + 0x290]
mov rdx, qword [rsp + 0x298]
sub rdx, r9
je 0x14008694b
mov rax, qword [0x140263a00]
mov rcx, qword [rsp + 0xd8]
xorps xmm0, xmm0
movups xmmword [rsp + 0x28], xmm0
mov qword [rsp + 0x20], rdx
mov r8d, 0x20002
xor edx, edx
call qword [0x14023e858]
test eax, eax
mov r13, qword [rsp + 0x58]
je 0x140086bf1
mov esi, 0x80000
mov rdx, qword [r13]
movsx r8, byte [rdx + 0x17]
test r8, r8
jns 0x1400868c8
cmp qword [rdx + 8], 0xc
jb 0x1400868d2
mov r8, qword [rdx + 8]
add r8, 0xfffffffffffffff4
mov qword [rsp + 0x20], rbp
mov rcx, rbx
mov r9, 0xffffffffffffffff
call fcn.1400cc7f0
cmp byte [rsp + 0x16f], 0
jns 0x140086572
mov rbx, qword [rsp + 0x158]
lea rdx, str.rundll32.exe
mov rcx, rbx
call fcn.14011a360
test eax, eax
sete bl
cmp byte [rsp + 0x16f], 0
jns 0x14008659d
mov rcx, qword [rsp + 0x158]
call fcn.1400fc308
mov qword [rsp + 0xf0], r12
movaps xmmword [rsp + 0xe0], xmm6
cmp byte [rsp + 0x317], 0
lea rdx, [rsp + 0x300]
jns 0x1400865c7
mov rdx, qword [rsp + 0x300]
test bl, bl
jne 0x1400868d9
mov rcx, qword [r13]
cmp byte [rcx + 0x17], 0
jns 0x1400865dc
mov rcx, qword [rcx]
mov qword [rsp + 0x48], rbp
lea rax, [rsp + 0x70]
mov qword [rsp + 0x40], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], 1
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x140086d21
mov rcx, qword [rsp + 0xe8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ebx, eax
mov ecx, 1
call fcn.1400dc0e0
test al, al
je 0x140086639
test ebx, ebx
je 0x140086d84
mov rcx, qword [rsp + 0xe0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ebx, eax
mov ecx, 1
call fcn.1400dc0e0
test al, al
je 0x14008665f
test ebx, ebx
je 0x140086dd7
mov rsi, qword [r13]
mov rcx, qword [rsi + 0xc8]
cmp rcx, 0xffffffffffffffff
je 0x140086675
call fcn.1400a6830
mov qword [rsi + 0xc8], 0xffffffffffffffff
xorps xmm0, xmm0
lea rdx, [rsp + 0x158]
movups xmmword [rdx + 0x14], xmm0
movups xmmword [rdx + 4], xmm0
mov dword [rdx], 2
lea r8, [rsp + 0x60]
mov dword [r8 + 8], 0
mov qword [r8], 0
mov ecx, 0xa8
add rcx, qword [r13]
call fcn.1400a5ed0
mov ebp, eax
test r15, r15
je 0x140086731
mov eax, dword [0x140263a18]
mov ecx, dword [0x14025e4e8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jle 0x140086721
lea rcx, [0x140263a18]
call fcn.1400fc420
cmp dword [0x140263a18], 0xffffffff
jne 0x140086721
lea rcx, [0x140217240]
lea rdx, str.::DeleteProcThreadAttributeList
mov r8b, 1
call fcn.1400a7280
mov qword [0x140263a10], rax
lea rcx, [0x140263a18]
call fcn.1400fc4b8
mov rax, qword [0x140263a10]
mov rcx, r15
call qword [0x14023e858]
test rdi, rdi
je 0x14008673e
mov rcx, rdi
call fcn.1400fc344
mov rcx, qword [rsp + 0x290]
test rcx, rcx
je 0x140086769
mov rax, qword [rsp + 0x298]
cmp rax, rcx
jne 0x1400867f9
mov qword [rsp + 0x298], rcx
call fcn.1400fc308
mov qword [rsp + 0x2b0], r14
cmp byte [rsp + 0x2c0], 1
je 0x1400868e0
mov rcx, qword [rsp + 0x2b8]
test rcx, rcx
je 0x140086791
call fcn.1400a6840
cmp byte [rsp + 0x317], 0
jns 0x1400867a8
mov rcx, qword [rsp + 0x300]
call fcn.1400fc308
movzx edi, bpl
mov eax, 2
sub rax, rdi
mov qword [0x1402639e8], rax
mov rcx, r13
call fcn.140087260
mov rcx, qword [rsp + 0x318]
xor rcx, rsp
call fcn.1400fd9d0
mov eax, edi
movaps xmm6, xmmword [rsp + 0x320]
movaps xmm7, xmmword [rsp + 0x330]
add rsp, 0x348
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
add rax, 0xfffffffffffffff8
jne 0x140086753
lea rcx, [0x140210516]
lea rdx, str....._third_partylibc_srcinclude__memoryconstruct_at.h:66:_assertion___loc___nullptr_failed:_null_pointer_given_to_destroy_at_n
call fcn.140139400
mov rcx, rbp
call fcn.1400fc308
mov rsi, qword [rsp + 0x2a0]
mov r13, qword [rsp + 0x298]
jmp 0x140086284
lea rcx, [0x140210516]
lea rdx, str....._third_partylibc_srcinclude_string_view:320:_assertion___len__0____s___nullptr_failed:_string_view::string_view__CharT___size_t_:_received_nullptr_n
call fcn.140139400
lea rcx, [0x140210516]
lea rdx, str....._third_partylibc_srcinclude_string_view:318:_assertion___len___static_cast_size_type__numeric_limits_difference_type_::max____failed:_string_view::string_view__CharT___size_t_:_length_does_not_fit_in_difference_type_n
call fcn.140139400
lea rcx, [0x140210516]
lea rdx, str....._third_partylibc_srcinclude__memoryconstruct_at.h:40:_assertion___location___nullptr_failed:_null_pointer_given_to_construct_at_n
call fcn.140139400
lea rcx, [0x140210516]
lea rdx, str....._third_partylibc_srcinclude__stringchar_traits.h:145:_assertion__std::__is_pointer_in_range___s1____s1____n____s2__failed:_char_traits::copy:_source_and_destination_ranges_overlap_n
call fcn.140139400
mov rcx, qword [rsp + 0x290]
call fcn.1400fc308
jmp 0x140085d74
mov rcx, qword [rsp + 0x110]
call fcn.1400fc308
jmp 0x140085d96
mov rcx, qword [rsp + 0x2b0]
call fcn.1400fc308
jmp 0x140085da4
int3
mov rax, qword [rdi + 0x38]
jmp 0x140085ad2
xor eax, eax
jmp 0x14008615c
cmp r8b, 0xc
jae 0x140086548
xor ebx, ebx
jmp 0x14008659d
xor ecx, ecx
jmp 0x1400865dc
int3
mov dword [rsp + 0x70], 0x68
xor r15d, r15d
xor edi, edi
xor esi, esi
jmp 0x140086527
mov rcx, qword [rsp + 0x70]
call fcn.1400fc308
jmp 0x140085ac0
test al, al
je 0x140085bd7
add rdi, 0x48
mov qword [rsp + 0x2e0], rdi
mov qword [rsp + 0x2e8], rax
jmp 0x140085b10
mov rcx, qword [rsp + 0x110]
call fcn.1400fc308
jmp 0x140085bbf
mov rcx, qword [rsp + 0xe0]
call fcn.1400fc308
jmp 0x140086001
lea rcx, [0x140210516]
lea rdx, str....._third_partylibc_srcinclude_vector:1411:_assertion___n___size___failed:_vector___index_out_of_bounds_n
call fcn.140139400
lea rcx, [rsp + 0x290]
call fcn.1400350a0
mov r13, rax
jmp 0x140086348
lea rcx, [rsp + 0x290]
lea rdx, [rsp + 0x158]
call fcn.1400350a0
jmp 0x1400863e8
lea rcx, [rsp + 0x290]
lea rdx, [rsp + 0x158]
call fcn.1400350a0
jmp 0x140086459
lea rcx, [rsp + 0x290]
lea rdx, [rsp + 0x158]
call fcn.1400350a0
jmp 0x1400864ca
lea rdx, [0x140251af4]
lea rcx, [rsp + 0x290]
call fcn.1400350a0
mov r13, rax
jmp 0x1400862e3
lea rdx, [0x140251afc]
lea rcx, [rsp + 0x290]
call fcn.1400350a0
mov r13, rax
jmp 0x140086311
lea rdx, [rsp + 0x2b8]
lea rcx, [rsp + 0x290]
call fcn.1400350a0
mov r13, rax
jmp 0x140086377
mov rcx, r14
mov rdx, rbp
mov r8, rbx
call fcn.1400ff470
jmp 0x140086256
lea rdi, [0x140228b0b]
lea r14, [rsp + 0x70]
lea r15, [rsp + 0x158]
lea r12, [rsp + 0x300]
mov rcx, r14
mov rdx, rdi
call fcn.1400bead0
mov rcx, r15
mov rdx, r14
mov r8, rbx
call fcn.140087400
mov rcx, r15
mov rdx, r12
call fcn.1400a6a90
cmp byte [rsp + 0x16f], 0
jns 0x140086a80
mov rcx, qword [rsp + 0x158]
call fcn.1400fc308
cmp byte [rsp + 0x87], 0
jns 0x140086a94
mov rcx, qword [rsp + 0x70]
call fcn.1400fc308
add rbx, 0x18
cmp rbx, rsi
je 0x140085de2
jmp 0x140086a45
lea rdx, [0x140251ae8]
lea rcx, [rsp + 0x290]
call fcn.1400350a0
mov r13, rax
lea rbp, [rsp + 0xe0]
jmp 0x1400862b5
mov ecx, 2
call fcn.1400dc0e0
test al, al
je 0x140086b23
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rbx, [rsp + 0x158]
mov rcx, rbx
mov r8d, 0x1e7
mov r9d, 2
call fcn.14016b430
lea rcx, [rsp + 0x168]
lea rdx, [0x140228be7]
mov r8d, 0x21
call fcn.1400be440
mov rcx, rbx
call fcn.14016b4a0
xor r15d, r15d
jmp 0x140086be5
mov ecx, 2
call fcn.1400dc0e0
test al, al
je 0x140086be0
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rdi, [rsp + 0x158]
mov rcx, rdi
mov r8d, 0x1dc
mov r9d, 2
call fcn.14016b430
lea rcx, [rsp + 0x168]
lea rdx, str.InitializeProcThreadAttributeList__size_
mov r8d, 0x28
call fcn.1400be440
mov rcx, rdi
call fcn.14016b4a0
jmp 0x140086be0
mov ecx, 2
call fcn.1400dc0e0
test al, al
je 0x140086be0
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rdi, [rsp + 0x158]
mov rcx, rdi
mov r8d, 0x1d8
mov r9d, 2
call fcn.140067850
lea rcx, [rsp + 0x168]
lea rdx, str.InitializeProcThreadAttributeList__size__succeeded__expected_failure
mov r8d, 0x44
call fcn.1400be440
mov rcx, rdi
call fcn.140067e60
xor r15d, r15d
xor edi, edi
xor ebp, ebp
mov r13, qword [rsp + 0x58]
jmp 0x1400866bd
mov ecx, 2
call fcn.1400dc0e0
test al, al
je 0x140086be5
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rbx, [rsp + 0x158]
mov rcx, rbx
mov r8d, 0x201
mov r9d, 2
call fcn.14016b430
lea rcx, [rsp + 0x168]
lea rdx, [0x140228c09]
mov r8d, 0x19
call fcn.1400be440
mov rcx, rbx
call fcn.14016b4a0
jmp 0x140086be5
add rdi, 0x30
lea rdx, str.metrics_dir
lea rbx, [rsp + 0x70]
mov rcx, rbx
call fcn.1400bead0
lea r14, [rsp + 0x158]
mov rcx, r14
mov rdx, rbx
mov r8, rdi
call fcn.140087400
lea rdx, [rsp + 0x300]
mov rcx, r14
call fcn.1400a6a90
cmp byte [r14 + 0x17], 0
jns 0x140086ca1
mov rcx, qword [rsp + 0x158]
call fcn.1400fc308
cmp byte [rsp + 0x87], 0
jns 0x140086cb5
mov rcx, qword [rsp + 0x70]
call fcn.1400fc308
mov rdi, qword [r13]
jmp 0x140085adb
mov ecx, 2
call fcn.1400dc0e0
test al, al
je 0x140086d1a
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rdi, [rsp + 0x158]
mov rcx, rdi
mov r8d, 0x1a7
mov r9d, 2
call fcn.14016b430
lea rcx, [rsp + 0x168]
lea rdx, [0x140228b16]
mov r8d, ntohl
call fcn.1400be440
mov rcx, rdi
call fcn.14016b4a0
xor ebp, ebp
jmp 0x140086769
mov ecx, 2
call fcn.1400dc0e0
test al, al
je 0x140086d7d
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rbx, [rsp + 0x158]
mov rcx, rbx
mov r8d, 0x223
mov r9d, 2
call fcn.14016b430
lea rcx, [rsp + 0x168]
lea rdx, str.CreateProcess
mov r8d, ntohl
call fcn.1400be440
mov rcx, rbx
call fcn.14016b4a0
xor ebp, ebp
jmp 0x1400866bd
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rbx, [rsp + 0x158]
mov rcx, rbx
mov r8d, 0x228
mov r9d, 1
call fcn.14016b430
lea rcx, [rsp + 0x168]
lea rdx, str.CloseHandle_thread
mov r8d, 0x12
call fcn.1400be440
mov rcx, rbx
call fcn.14016b4a0
jmp 0x140086639
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rbx, [rsp + 0x158]
mov rcx, rbx
mov r8d, 0x22b
mov r9d, 1
call fcn.14016b430
lea rcx, [rsp + 0x168]
lea rdx, str.CloseHandle_process
mov r8d, 0x13
call fcn.1400be440
mov rcx, rbx
call fcn.14016b4a0
jmp 0x14008665f