Function at 0x140064290
Capabilities:
Create process on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x378
movaps xmmword [rsp + 0x360], xmm7
movaps xmmword [rsp + 0x350], xmm6
mov r12, rcx
mov rax, qword [0x140155cc0]
xor rax, rsp
mov qword [rsp + 0x348], rax
call fcn.140094fb0
test al, al
jne 0x1400656ec
xorps xmm0, xmm0
movaps xmmword [rsp + 0x320], xmm0
mov qword [rsp + 0x330], 0
mov rcx, qword [r12]
lea rdx, [rsp + 0x320]
call fcn.140094fe0
mov r8, qword [r12]
mov rsi, qword [r8 + 0x78]
mov r15, qword [r8 + 0x80]
cmp rsi, r15
je 0x140064390
lea rdi, [rsp + 0x178]
lea rbx, [rsp + 0x310]
lea r14, [rsp + 0x320]
jmp 0x140064339
add rsi, 0x18
cmp rsi, r15
je 0x14006438c
movsx rax, byte [rsi + 0x17]
mov rcx, rsi
test rax, rax
jns 0x14006434d
mov rcx, qword [rsi]
mov rax, qword [rsi + 8]
mov qword [rsp + 0x310], rcx
mov qword [rsp + 0x318], rax
mov rcx, rdi
mov rdx, rbx
call fcn.14004ce50
mov rcx, rdi
mov rdx, r14
call fcn.140094fe0
cmp byte [rsp + 0x18f], 0
jns 0x140064330
mov rcx, qword [rsp + 0x178]
call fcn.1400dffa0
jmp 0x140064330
mov r8, qword [r12]
movsx rax, byte [r8 + 0x2f]
test rax, rax
js 0x1400643a4
test rax, rax
jne 0x1400643b1
jmp 0x14006444a
mov rax, qword [r8 + 0x20]
test rax, rax
je 0x14006444a
mov byte [rsp + 0xa7], 8
lea rax, [rsp + 0x98]
lea rcx, str.database
lea rdx, [rsp + 0x90]
cmp rdx, rcx
seta dl
cmp rax, rcx
setbe al
or al, dl
je 0x14006555c
add r8, 0x18
movabs rax, 0x6573616261746164
mov qword [rsp + 0x90], rax
mov byte [rsp + 0x98], 0
lea rdi, [rsp + 0x178]
lea rdx, [rsp + 0x90]
mov rcx, rdi
call fcn.1400667e0
lea rdx, [rsp + 0x320]
mov rcx, rdi
call fcn.140094fe0
cmp byte [rsp + 0x18f], 0
js 0x140064dd8
cmp byte [rsp + 0xa7], 0
js 0x140064df3
mov r8, qword [r12]
movsx rax, byte [r8 + 0x47]
test rax, rax
js 0x14006445e
test rax, rax
jne 0x14006446b
jmp 0x14006450f
mov rax, qword [r8 + 0x38]
test rax, rax
je 0x14006450f
mov byte [rsp + 0xa7], 0xb
lea rax, [rsp + 0x9b]
lea rcx, str.metrics_dir
lea rdx, [rsp + 0x90]
cmp rdx, rcx
seta dl
cmp rax, rcx
setbe al
or al, dl
je 0x14006555c
add r8, 0x30
movabs rax, 0x2d7363697274656d
mov qword [rsp + 0x90], rax
mov dword [rsp + 0x97], 0x7269642d
mov byte [rsp + 0x9b], 0
lea rdi, [rsp + 0x178]
lea rdx, [rsp + 0x90]
mov rcx, rdi
call fcn.1400667e0
lea rdx, [rsp + 0x320]
mov rcx, rdi
call fcn.140094fe0
cmp byte [rsp + 0x18f], 0
js 0x140064e05
cmp byte [rsp + 0xa7], 0
js 0x140064e20
mov r8, qword [r12]
lea rax, [r8 + 0x48]
movsx rcx, byte [r8 + 0x5f]
test rcx, rcx
js 0x140064526
test cl, cl
jne 0x140064536
jmp 0x1400645f7
mov rcx, qword [r8 + 0x50]
test rcx, rcx
je 0x1400645f7
mov rax, qword [rax]
mov qword [rsp + 0x300], rax
mov qword [rsp + 0x308], rcx
lea rcx, [rsp + 0x90]
lea rdx, [rsp + 0x300]
call fcn.14004ce50
mov byte [rsp + 0x147], 3
lea rax, [rsp + 0x133]
lea rcx, [0x14011a104]
lea rdx, [rsp + 0x130]
cmp rdx, rcx
seta dl
cmp rax, rcx
setbe al
or al, dl
je 0x14006555c
mov dword [rsp + 0x130], 0x6c7275
lea rdi, [rsp + 0x178]
lea rdx, [rsp + 0x130]
lea r8, [rsp + 0x90]
mov rcx, rdi
call fcn.1400667e0
lea rdx, [rsp + 0x320]
mov rcx, rdi
call fcn.140094fe0
cmp byte [rsp + 0x18f], 0
js 0x140064e32
cmp byte [rsp + 0x147], 0
js 0x140064e4d
cmp byte [rsp + 0xa7], 0
js 0x140064e68
mov r8, qword [r12]
mov qword [rsp + 0x50], r12
mov rsi, qword [r8 + 0x60]
lea rbp, [r8 + 0x68]
cmp rsi, rbp
je 0x140064862
lea rax, [rsp + 0x2ba]
lea rcx, str.annotation
lea rdx, [rsp + 0x2b0]
cmp rdx, rcx
setbe dl
cmp rax, rcx
seta dil
and dil, dl
lea rbx, [rsp + 0x2d0]
xorps xmm6, xmm6
lea r14, [rsp + 0x90]
lea r15, [rsp + 0x2f0]
lea r12, [rsp + 0x178]
lea r13, [rsp + 0x320]
jmp 0x14006467c
mov rsi, rax
cmp rax, rbp
je 0x14006485a
lea rdx, [rsi + 0x20]
mov rcx, rbx
mov r8b, 0x3d
call fcn.1400164d0
movsx r8, byte [rsi + 0x4f]
test r8, r8
jns 0x1400646a0
mov r8, qword [rsi + 0x40]
mov rdx, qword [rsi + 0x38]
jmp 0x1400646a4
lea rdx, [rsi + 0x38]
mov rcx, rbx
call fcn.140043030
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x140], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x130], xmm0
movups xmmword [rax], xmm6
mov qword [rax + 0x10], 0
movsx rax, byte [rsp + 0x147]
test rax, rax
cmovs rax, qword [rsp + 0x138]
mov rcx, qword [rsp + 0x130]
lea rdx, [rsp + 0x130]
cmovns rcx, rdx
mov qword [rsp + 0x2f0], rcx
mov qword [rsp + 0x2f8], rax
mov rcx, r14
mov rdx, r15
call fcn.14004ce50
mov byte [rsp + 0x2c7], 0xa
test dil, dil
jne 0x14006555c
movabs rax, 0x697461746f6e6e61
mov qword [rsp + 0x2b0], rax
mov word [rsp + 0x2b8], 0x6e6f
mov byte [rsp + 0x2ba], 0
mov rcx, r12
lea rdx, [rsp + 0x2b0]
mov r8, r14
call fcn.1400667e0
mov rcx, r12
mov rdx, r13
call fcn.140094fe0
cmp byte [rsp + 0x18f], 0
js 0x1400647e0
cmp byte [rsp + 0x2c7], 0
js 0x1400647f7
cmp byte [rsp + 0xa7], 0
js 0x140064812
cmp byte [rsp + 0x147], 0
js 0x14006482d
cmp byte [rsp + 0x2e7], 0
js 0x140064848
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x1400647c0
nop dword [rax]
mov rax, rcx
mov rcx, qword [rcx]
test rcx, rcx
jne 0x1400647b0
jmp 0x140064670
mov rax, qword [rsi + 0x10]
cmp rsi, qword [rax]
mov rsi, rax
jne 0x1400647c0
jmp 0x140064670
mov rcx, qword [rsp + 0x178]
call fcn.1400dffa0
cmp byte [rsp + 0x2c7], 0
jns 0x140064779
mov rcx, qword [rsp + 0x2b0]
call fcn.1400dffa0
cmp byte [rsp + 0xa7], 0
jns 0x140064787
mov rcx, qword [rsp + 0x90]
call fcn.1400dffa0
cmp byte [rsp + 0x147], 0
jns 0x140064795
mov rcx, qword [rsp + 0x130]
call fcn.1400dffa0
cmp byte [rsp + 0x2e7], 0
jns 0x1400647a3
mov rcx, qword [rsp + 0x2d0]
call fcn.1400dffa0
jmp 0x1400647a3
mov rax, qword [rsp + 0x50]
mov r8, qword [rax]
mov rdi, qword [r8 + 0x90]
mov rsi, qword [r8 + 0x98]
cmp rdi, rsi
je 0x140064947
lea rax, str.attachment
lea rbx, [rsp + 0x90]
cmp rbx, rax
setbe cl
lea rdx, [rsp + 0x9a]
cmp rdx, rax
seta bpl
and bpl, cl
movabs r12, 0x656d686361747461
lea r14, [rsp + 0x178]
lea r15, [rsp + 0x320]
jmp 0x1400648e0
mov rcx, qword [rsp + 0x178]
call fcn.1400dffa0
cmp byte [rsp + 0xa7], 0
js 0x140064938
add rdi, 0x18
cmp rdi, rsi
je 0x140064947
mov byte [rsp + 0xa7], 0xa
test bpl, bpl
jne 0x14006555c
mov qword [rsp + 0x90], r12
mov word [rsp + 0x98], 0x746e
mov byte [rsp + 0x9a], 0
mov rcx, r14
mov rdx, rbx
mov r8, rdi
call fcn.1400667e0
mov rcx, r14
mov rdx, r15
call fcn.140094fe0
cmp byte [rsp + 0x18f], 0
js 0x1400648c0
cmp byte [rsp + 0xa7], 0
jns 0x1400648d7
mov rcx, qword [rsp + 0x90]
call fcn.1400dffa0
jmp 0x1400648d7
movabs r13, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x2e0], r13
movaps xmm6, xmmword [section..rdata]
movaps xmmword [rsp + 0x2d0], xmm6
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, 0x1f0fff
mov edx, 1
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_OpenProcess]
lea r15, [0x140121ee8]
mov qword [rsp + 0x2d0], r15
mov qword [rsp + 0x2d8], rax
mov byte [rsp + 0x2e0], 0
test rax, rax
je 0x140064d3c
mov qword [rsp + 0x170], r13
movaps xmmword [rsp + 0x160], xmm6
movaps xmmword [rsp + 0x150], xmm6
movaps xmmword [rsp + 0x140], xmm6
movaps xmmword [rsp + 0x130], xmm6
mov r12, qword [rsp + 0x50]
mov rcx, qword [r12]
mov rcx, qword [rcx + 0xc8]
mov r9, qword [0x1401556fc]
mov r8, qword [0x1401556f4]
mov rdx, qword [0x1401556e0]
lea r10, [0x140165278]
mov qword [rsp + 0x40], r10
lea r10, [0x140165268]
mov qword [rsp + 0x38], r10
lea r10, [0x140165258]
mov qword [rsp + 0x30], r10
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rbx, [rsp + 0x130]
mov rcx, rbx
call fcn.1400955e0
lea rdi, [rsp + 0x2b0]
mov rcx, rbx
mov rdx, rdi
call fcn.140095610
mov byte [rsp + 0x117], 0x16
lea rax, [rsp + 0x116]
lea rcx, str.__initial_client_data
lea rdx, [rsp + 0x100]
cmp rdx, rcx
seta dl
cmp rax, rcx
setbe al
or al, dl
je 0x14006555c
movups xmm0, xmmword [str.__initial_client_data]
movaps xmmword [rsp + 0x100], xmm0
movabs rax, 0x3d617461642d746e
mov qword [rsp + 0x10e], rax
movsx r8, byte [rsp + 0x2c7]
test r8, r8
cmovs r8, qword [rsp + 0x2b8]
mov byte [rsp + 0x116], 0
cmovs rdi, qword [rsp + 0x2b0]
lea rcx, [rsp + 0x100]
mov rdx, rdi
call fcn.140043030
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0xa0], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x90], xmm0
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov qword [rax + 0x10], 0
movsx rax, byte [rsp + 0xa7]
test rax, rax
cmovs rax, qword [rsp + 0x98]
lea rdx, [rsp + 0x90]
mov rcx, qword [rsp + 0x90]
cmovns rcx, rdx
mov qword [rsp + 0x120], rcx
mov qword [rsp + 0x128], rax
lea r14, [rsp + 0x178]
lea rdx, [rsp + 0x120]
mov rcx, r14
call fcn.14004ce50
lea rbx, [rsp + 0x320]
mov rcx, r14
mov rdx, rbx
call fcn.140094fe0
cmp byte [rsp + 0x18f], 0
js 0x140064e7a
cmp byte [rsp + 0xa7], 0
js 0x140064e95
cmp byte [rsp + 0x117], 0
js 0x140064eb0
cmp byte [rsp + 0x2c7], 0
js 0x140064ecb
xorps xmm7, xmm7
movaps xmmword [rsp + 0xc0], xmm7
movaps xmmword [rsp + 0xf0], xmm7
movaps xmmword [rsp + 0xe0], xmm7
movaps xmmword [rsp + 0xd0], xmm7
movaps xmmword [rsp + 0xb0], xmm7
movaps xmmword [rsp + 0xa0], xmm7
movaps xmmword [rsp + 0x90], xmm7
mov dword [rsp + 0xcc], 0x100
mov rsi, qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov ecx, 0xfffffff6
call rsi
mov qword [rsp + 0xe0], rax
mov ecx, 0xfffffff5
call rsi
mov qword [rsp + 0xe8], rax
mov ecx, 0xfffffff4
call rsi
mov qword [rsp + 0xf0], rax
movaps xmmword [rsp + 0x2b0], xmm7
mov qword [rsp + 0x2c0], 0
mov qword [rsp + 0x110], r13
lea rax, [0x140121ef0]
mov qword [rsp + 0x100], rax
mov qword [rsp + 0x108], 0
mov byte [rsp + 0x110], 0
mov eax, dword [0x1401652b8]
mov ecx, dword [0x1401652f8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 0x10]
jg 0x1400657a1
mov eax, dword [0x1401652c8]
mov ecx, dword [0x1401652f8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 0x10]
jg 0x1400657e8
mov rax, qword [0x1401652b0]
test rax, rax
je 0x140064da8
cmp qword [0x1401652c0], 0
je 0x140064da8
mov dword [rsp + 0x90], 0x70
mov qword [rsp + 0x70], r13
lea r9, [rsp + 0x70]
xor ecx, ecx
mov edx, 1
xor r8d, r8d
call qword [0x140146120]
test eax, eax
je 0x140064ef6
mov ecx, 2
call fcn.1400504a0
test al, al
je 0x140065403
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rdi, [rsp + 0x178]
mov rcx, rdi
mov r8d, 0x1d8
mov r9d, 2
call fcn.1400505f0
lea rcx, [rsp + 0x188]
lea rdx, str.InitializeProcThreadAttributeList__size__succeeded__expected_failure
mov r8d, 0x44
call fcn.1400034d0
mov rcx, rdi
call fcn.140050b70
jmp 0x140065403
mov ecx, 2
call fcn.1400504a0
test al, al
mov r12, qword [rsp + 0x50]
je 0x140064edd
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rdi, [rsp + 0x178]
mov rcx, rdi
mov r8d, 0x1a7
mov r9d, 2
call fcn.140051bb0
lea rcx, [rsp + 0x188]
lea rdx, [0x140121d83]
mov r8d, 0xb
call fcn.1400034d0
mov rcx, rdi
call fcn.140051ca0
xor ebx, ebx
jmp 0x14006546b
mov dword [rsp + 0x90], 0x68
xor edi, edi
xor esi, esi
mov rdx, qword [r12]
movsx r8, byte [rdx + 0x17]
test r8, r8
js 0x140064ee4
cmp r8b, 0xc
jb 0x140064eef
jmp 0x140065127
mov rcx, qword [rsp + 0x178]
call fcn.1400dffa0
cmp byte [rsp + 0xa7], 0
jns 0x140064446
mov rcx, qword [rsp + 0x90]
call fcn.1400dffa0
jmp 0x140064446
mov rcx, qword [rsp + 0x178]
call fcn.1400dffa0
cmp byte [rsp + 0xa7], 0
jns 0x14006450b
mov rcx, qword [rsp + 0x90]
call fcn.1400dffa0
jmp 0x14006450b
mov rcx, qword [rsp + 0x178]
call fcn.1400dffa0
cmp byte [rsp + 0x147], 0
jns 0x1400645e5
mov rcx, qword [rsp + 0x130]
call fcn.1400dffa0
cmp byte [rsp + 0xa7], 0
jns 0x1400645f3
mov rcx, qword [rsp + 0x90]
call fcn.1400dffa0
jmp 0x1400645f3
mov rcx, qword [rsp + 0x178]
call fcn.1400dffa0
cmp byte [rsp + 0xa7], 0
jns 0x140064b76
mov rcx, qword [rsp + 0x90]
call fcn.1400dffa0
cmp byte [rsp + 0x117], 0
jns 0x140064b84
mov rcx, qword [rsp + 0x100]
call fcn.1400dffa0
cmp byte [rsp + 0x2c7], 0
jns 0x140064b92
mov rcx, qword [rsp + 0x2b0]
call fcn.1400dffa0
jmp 0x140064b92
xor ebx, ebx
jmp 0x14006546b
cmp qword [rdx + 8], 0xc
jae 0x140065123
xor ebp, ebp
jmp 0x140065182
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x1400653a7
mov rcx, qword [rsp + 0x70]
call fcn.1400dffdc
mov rdi, rax
mov qword [rsp + 0xf8], rax
mov rax, qword [0x1401652b0]
lea r9, [rsp + 0x70]
mov rcx, rdi
mov edx, 1
xor r8d, r8d
call qword [0x140146120]
test eax, eax
je 0x140065504
mov r15, qword [rsp + 0x108]
test r15, r15
je 0x140064f8a
cmp r15, rdi
je 0x140065842
mov eax, dword [0x1401652d8]
mov ecx, dword [0x1401652f8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 0x10]
jg 0x140065847
mov rax, qword [0x1401652d0]
mov rcx, r15
call qword [0x140146120]
lea rsi, [rsp + 0x2d8]
mov qword [rsp + 0x108], rdi
mov r12, qword [rsp + 0x2b0]
mov rax, qword [rsp + 0x2c0]
sub rax, r12
cmp rax, 0x3f
ja 0x140065018
mov r15, qword [rsp + 0x2b8]
sub r15, r12
mov ecx, 0x40
call fcn.1400dff64
mov rbp, rax
lea rsi, [rax + r15]
add rax, 0x40
mov qword [rsp + 0x58], rax
mov rcx, rbp
mov rdx, r12
mov r8, r15
call fcn.1401145c0
mov qword [rsp + 0x2b0], rbp
mov qword [rsp + 0x2b8], rsi
lea rsi, [rsp + 0x2d8]
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0x2c0], rax
test r12, r12
je 0x140065018
mov rcx, r12
call fcn.1400dffa0
lea rdx, [0x1401556e0]
lea r12, [rsp + 0x2b0]
mov rcx, r12
call fcn.140011b10
lea rdx, [0x1401556f4]
mov rcx, r12
call fcn.140011b10
lea rdx, [0x1401556fc]
mov rcx, r12
call fcn.140011b10
mov edx, 0xc8
mov rax, qword [rsp + 0x50]
add rdx, qword [rax]
mov rcx, r12
call fcn.140011b10
mov rcx, r12
mov rdx, rsi
call fcn.140011b10
mov r15, qword [rsp + 0xe0]
mov qword [rsp + 0x178], r15
lea rax, [r15 + 1]
cmp rax, 2
jae 0x1400655c7
mov r15, qword [rsp + 0xe8]
mov qword [rsp + 0x178], r15
lea rax, [r15 + 1]
cmp rax, 2
mov r12, qword [rsp + 0x50]
jae 0x14006561d
mov r15, qword [rsp + 0xf0]
mov qword [rsp + 0x178], r15
lea rax, [r15 + 1]
cmp rax, 2
jae 0x140065673
mov r9, qword [rsp + 0x2b0]
mov rcx, qword [rsp + 0x2b8]
sub rcx, r9
je 0x14006578e
mov rax, qword [0x1401652c0]
xorps xmm0, xmm0
movups xmmword [rsp + 0x28], xmm0
mov qword [rsp + 0x20], rcx
mov r8d, 0x20002
mov rcx, rdi
xor edx, edx
call qword [0x140146120]
test eax, eax
lea r15, [0x140121ee8]
je 0x14006556f
mov esi, 0x80000
jmp 0x140064db7
mov r8, qword [rdx + 8]
add r8, 0xfffffffffffffff4
lea rax, [rsp + 0x70]
mov qword [rsp + 0x20], rax
mov rcx, r14
mov r9, 0xffffffffffffffff
call fcn.140043d50
cmp byte [rsp + 0x18f], 0
jns 0x140065156
mov r14, qword [rsp + 0x178]
lea rdx, str.rundll32.exe
mov rcx, r14
call fcn.1400f8808
test eax, eax
sete bpl
cmp byte [rsp + 0x18f], 0
jns 0x140065182
mov rcx, qword [rsp + 0x178]
call fcn.1400dffa0
mov qword [rsp + 0x80], r13
movaps xmmword [rsp + 0x70], xmm6
cmp byte [rsp + 0x337], 0
jns 0x1400651a1
mov rbx, qword [rsp + 0x320]
test bpl, bpl
je 0x1400651aa
xor ecx, ecx
jmp 0x1400651b7
mov rcx, qword [r12]
cmp byte [rcx + 0x17], 0
jns 0x1400651b7
mov rcx, qword [rcx]
lea rax, [rsp + 0x70]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x90]
mov qword [rsp + 0x40], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], 1
mov rdx, rbx
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x140065345
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ebx, eax
mov ecx, 1
call fcn.1400504a0
test al, al
je 0x140065266
test ebx, ebx
jne 0x140065266
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rbx, [rsp + 0x178]
mov rcx, rbx
mov r8d, 0x228
mov r9d, 1
call fcn.140051bb0
lea rcx, [rsp + 0x188]
lea rdx, str.CloseHandle_thread
mov r8d, 0x12
call fcn.1400034d0
mov rcx, rbx
call fcn.140051ca0
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ebx, eax
mov ecx, 1
call fcn.1400504a0
test al, al
je 0x1400652d3
test ebx, ebx
jne 0x1400652d3
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rbx, [rsp + 0x178]
mov rcx, rbx
mov r8d, 0x22b
mov r9d, 1
call fcn.140051bb0
lea rcx, [rsp + 0x188]
lea rdx, str.CloseHandle_process
mov r8d, 0x13
call fcn.1400034d0
mov rcx, rbx
call fcn.140051ca0
mov rsi, qword [r12]
mov rcx, qword [rsi + 0xc8]
cmp rcx, 0xffffffffffffffff
je 0x1400652e9
call fcn.140094340
mov qword [rsi + 0xc8], 0xffffffffffffffff
xorps xmm0, xmm0
movups xmmword [rsp + 0x18c], xmm0
movups xmmword [rsp + 0x17c], xmm0
mov dword [rsp + 0x178], 2
mov dword [rsp + 0x68], 0
mov qword [rsp + 0x60], 0
mov ecx, 0xa8
add rcx, qword [r12]
lea rdx, [rsp + 0x178]
lea r8, [rsp + 0x60]
call fcn.140094600
mov ebx, eax
jmp 0x140065407
mov ecx, 2
call fcn.1400504a0
test al, al
je 0x140065405
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rbx, [rsp + 0x178]
mov rcx, rbx
mov r8d, 0x223
mov r9d, 2
call fcn.140051bb0
lea rcx, [rsp + 0x188]
lea rdx, str.CreateProcess
mov r8d, 0xd
call fcn.1400034d0
mov rcx, rbx
call fcn.140051ca0
jmp 0x140065405
mov ecx, 2
call fcn.1400504a0
test al, al
je 0x140065403
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rdi, [rsp + 0x178]
mov rcx, rdi
mov r8d, 0x1dc
mov r9d, 2
call fcn.140051bb0
lea rcx, [rsp + 0x188]
lea rdx, str.InitializeProcThreadAttributeList__size_
mov r8d, 0x28
call fcn.1400034d0
mov rcx, rdi
call fcn.140051ca0
xor edi, edi
xor ebx, ebx
lea rcx, [rsp + 0x100]
call fcn.1400669a0
test rdi, rdi
je 0x140065421
mov rcx, rdi
call fcn.1400dffe4
mov rcx, qword [rsp + 0x2b0]
test rcx, rcx
je 0x14006546b
mov rax, qword [rsp + 0x2b8]
nop word cs:[rax + rax]
cmp rax, rcx
je 0x14006545e
add rax, 0xfffffffffffffff8
jne 0x140065440
lea rcx, [0x140117223]
lea rdx, str....._third_partylibc_srcinclude__memoryconstruct_at.h:66:_assertion___loc___nullptr_failed:_null_pointer_given_to_destroy_at_n
call fcn.140044b40
mov qword [rsp + 0x2b8], rcx
call fcn.1400dffa0
mov qword [rsp + 0x2d0], r15
cmp byte [rsp + 0x2e0], 1
je 0x14006573d
mov rcx, qword [rsp + 0x2d8]
test rcx, rcx
je 0x140065493
call fcn.140094350
cmp byte [rsp + 0x337], 0
jns 0x1400654aa
mov rcx, qword [rsp + 0x320]
call fcn.1400dffa0
movzx edi, bl
mov eax, 2
sub rax, rdi
mov qword [0x1401652a8], rax
mov rcx, r12
call fcn.140066600
mov rcx, qword [rsp + 0x348]
xor rcx, rsp
cmp rcx, qword [0x140155cc0]
jne 0x1400654fe
mov eax, edi
movaps xmm6, xmmword [rsp + 0x350]
movaps xmm7, xmmword [rsp + 0x360]
add rsp, 0x378
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
call fcn.1400e0180
int3
mov ecx, 2
call fcn.1400504a0
test al, al
je 0x140065405
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rbx, [rsp + 0x178]
mov rcx, rbx
mov r8d, 0x1e7
mov r9d, 2
call fcn.140051bb0
lea rcx, [rsp + 0x188]
lea rdx, str.InitializeProcThreadAttributeList
mov r8d, 0x21
jmp 0x140065398
lea rcx, [0x140117223]
lea rdx, str....._third_partylibc_srcinclude__stringchar_traits.h:148:_assertion__std::__is_pointer_in_range___s1____s1____n____s2__failed:_char_traits::copy:_source_and_destination_ranges_overlap_n
call fcn.140044b40
mov ecx, 2
call fcn.1400504a0
test al, al
je 0x140065405
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rbx, [rsp + 0x178]
mov rcx, rbx
mov r8d, 0x201
mov r9d, 2
call fcn.140051bb0
lea rcx, [rsp + 0x188]
lea rdx, str.UpdateProcThreadAttribute
mov r8d, 0x19
jmp 0x140065398
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_GetFileType]
and eax, 0xfffffffd
cmp eax, 1
jne 0x14006508b
mov rax, qword [rsp + 0x2b0]
mov rcx, qword [rsp + 0x2b8]
cmp rax, rcx
je 0x140065603
cmp qword [rax], r15
je 0x1400656c5
add rax, 8
cmp rax, rcx
jne 0x1400655f1
lea rcx, [rsp + 0x2b0]
lea rdx, [rsp + 0x178]
call fcn.140011b10
jmp 0x14006508b
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_GetFileType]
and eax, 0xfffffffd
cmp eax, 1
jne 0x1400650ae
mov rax, qword [rsp + 0x2b0]
mov rcx, qword [rsp + 0x2b8]
cmp rax, rcx
je 0x140065659
cmp qword [rax], r15
je 0x1400656d3
add rax, 8
cmp rax, rcx
jne 0x140065647
lea rcx, [rsp + 0x2b0]
lea rdx, [rsp + 0x178]
call fcn.140011b10
jmp 0x1400650ae
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_GetFileType]
and eax, 0xfffffffd
cmp eax, 1
jne 0x1400650cc
mov rax, qword [rsp + 0x2b0]
mov rcx, qword [rsp + 0x2b8]
cmp rax, rcx
je 0x1400656ab
cmp qword [rax], r15
je 0x1400656e1
add rax, 8
cmp rax, rcx
jne 0x14006569d
lea rcx, [rsp + 0x2b0]
lea rdx, [rsp + 0x178]
call fcn.140011b10
jmp 0x1400650cc
cmp rax, rcx
jne 0x14006508b
jmp 0x140065603
cmp rax, rcx
jne 0x1400650ae
jmp 0x140065659
cmp rax, rcx
jne 0x1400650cc
jmp 0x1400656ab
lea rdx, str.StartHandlerProcess
lea r8, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rdi, [rsp + 0x178]
mov rcx, rdi
mov r9d, 0x180
call fcn.140054de0
lea rdx, str._IsThreadInLoaderLock__
lea rbx, [rsp + 0x340]
mov rcx, rbx
mov r8d, 0xffffffff
mov r9, rdi
call fcn.14005b640
mov rcx, rbx
call fcn.14005b960
jmp 0x1400642d5
lea rdx, str.ScopedGeneric
lea r8, str....._base_scoped_generic.h
lea rdi, [rsp + 0x178]
mov rcx, rdi
mov r9d, 0x7d
call fcn.140054de0
lea rdx, str._receiving_
lea r14, [rsp + 0x90]
mov rcx, r14
mov r8d, 0xffffffff
mov r9, rdi
call fcn.14005b640
mov rcx, r14
call fcn.14005b960
jmp 0x140065481
lea rcx, [0x140117223]
lea rdx, str....._third_partylibc_srcinclude_vector:1445:_assertion___n___size___failed:_vector___index_out_of_bounds_n
call fcn.140044b40
lea rcx, [0x1401652b8]
call fcn.1400dffec
cmp dword [0x1401652b8], 0xffffffff
jne 0x140064c70
lea rcx, str.kernel32.dll
lea rdx, str.::InitializeProcThreadAttributeList
xor r8d, r8d
call fcn.140095780
mov qword [0x1401652b0], rax
lea rcx, [0x1401652b8]
call fcn.1400e00a0
jmp 0x140064c70
lea rcx, [0x1401652c8]
call fcn.1400dffec
cmp dword [0x1401652c8], 0xffffffff
jne 0x140064c95
cmp qword [0x1401652b0], 0
je 0x140065823
lea rcx, str.kernel32.dll
lea rdx, str.::UpdateProcThreadAttribute
xor r8d, r8d
call fcn.140095780
jmp 0x140065825
xor eax, eax
mov qword [0x1401652c0], rax
lea rcx, [0x1401652c8]
call fcn.1400e00a0
mov r12, qword [rsp + 0x50]
jmp 0x140064c95
call fcn.1400f623c
lea rcx, [0x1401652d8]
call fcn.1400dffec
cmp dword [0x1401652d8], 0xffffffff
jne 0x140064f7a
lea rcx, str.kernel32.dll
lea rdx, str.::DeleteProcThreadAttributeList
mov r8b, 1
call fcn.140095780
mov qword [0x1401652d0], rax
lea rcx, [0x1401652d8]
call fcn.1400e00a0
jmp 0x140064f7a