Function at 0x14001545a
Capabilities:
Get system information on windows

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x9f8
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x970], 0xfffffffffffffffe
mov r14, rdx
mov rdi, rcx
mov qword [rcx + 8], rdx
mov eax, dword [0x1400c4fe8]
mov ecx, dword [0x1400c3824]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400164a1
mov rbx, qword [0x1400c4fe0]
test rbx, rbx
je 0x140015533
lea rdx, [rbp - 0x50]
mov rcx, r14
call rbx
test eax, eax
je 0x1400154e1
cmp dword [rbp - 0x50], 0
setne byte [rdi + 0x89]
je 0x14001553a
mov byte [rdi + 0x88], 0
mov r15b, 1
jmp 0x140015560
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
mov dword [rsp + 0x20], 2
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace_::IsProcessWow64_HANDLE_
lea r8, str..._.._.._third_party_crashpad_util_win_process_info.cc
lea rsi, [rbp + 0x308]
push 0x4b
pop r9
mov rcx, rsi
call fcn.14004b54e
mov dword [rsi + 0x100], ebx
lea rdx, [0x1400968af]
mov rcx, rsi
call fcn.140002bc9
lea rcx, [rbp + 0x308]
call fcn.14004bba4
mov byte [rdi + 0x89], 0
lea rsi, [rbp + 0x308]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
cmp word [rsi], 9
sete byte [rdi + 0x88]
cmp byte [rdi + 0x89], 0
setne r15b
lea rsi, [rbp + 0x748]
mov qword [rsp + 0x20], rsi
lea r8, [rbp - 0x50]
push 0x30
pop r9
mov rcx, r14
xor edx, edx
call fcn.14001761b
test eax, eax
js 0x1400155eb
cmp dword [rbp + 0x748], 0x30
jne 0x14001563b
mov eax, dword [rbp - 0x30]
mov dword [rdi], eax
mov eax, dword [rbp - 0x28]
mov dword [rdi + 4], eax
test r15b, r15b
je 0x1400156c0
mov qword [rsp + 0x20], rsi
push 0x1a
pop rdx
lea r8, [rbp + 0x810]
push 8
pop r9
mov rcx, r14
call fcn.14001761b
test eax, eax
js 0x140015a31
cmp dword [rbp + 0x748], 8
jne 0x140015a78
mov rbx, qword [rbp + 0x810]
mov qword [rdi + 0x30], rbx
mov qword [rdi + 0x38], 0x230
jmp 0x1400156d0
mov ebx, eax
mov dword [rsp + 0x20], 2
lea rdx, str.bool___cdecl_crashpad::GetProcessBasicInformation_HANDLE__bool__crashpad::ProcessInfo___crashpad::WinVMAddress___crashpad::WinVMSize____Traits__crashpad::process_types::internal::Traits64_
lea r8, str..._.._.._third_party_crashpad_util_win_process_info.cc
lea rsi, [rbp + 0x308]
mov rcx, rsi
mov r9d, 0xc5
call fcn.14004b54e
mov dword [rsi + 0x100], ebx
lea rdx, [0x140096854]
mov rcx, rsi
call fcn.140002bc9
lea rcx, [rbp + 0x308]
call fcn.1400149d0
jmp 0x140015681
mov dword [rsp + 0x20], 2
lea rdx, str.bool___cdecl_crashpad::GetProcessBasicInformation_HANDLE__bool__crashpad::ProcessInfo___crashpad::WinVMAddress___crashpad::WinVMSize____Traits__crashpad::process_types::internal::Traits64_
lea r8, str..._.._.._third_party_crashpad_util_win_process_info.cc
lea rsi, [rbp + 0x308]
mov rcx, rsi
mov r9d, 0xc9
call fcn.14004b54e
lea rdx, str.NtQueryInformationProcess_incorrect_size
mov rcx, rsi
call fcn.140002bc9
lea rcx, [rbp + 0x308]
call fcn.14004ba62
mov dword [rsp + 0x20], 2
lea rdx, str.bool___cdecl_crashpad::ProcessInfo::Initialize_HANDLE_
lea r8, str..._.._.._third_party_crashpad_util_win_process_info.cc
lea rsi, [rbp + 0x308]
mov rcx, rsi
mov r9d, 0x21e
call fcn.14004b54e
lea rdx, str.GetProcessBasicInformation_failed
mov rcx, rsi
call fcn.140002bc9
jmp 0x140015f47
mov rbx, qword [rbp - 0x48]
mov qword [rdi + 0x30], rbx
mov qword [rdi + 0x38], 0x354
cmp byte [rdi + 0x88], 0
je 0x140015889
lea rax, [rbp + 0x810]
mov qword [rsp + 0x20], rax
lea r8, [rbp - 0x50]
mov r9d, 0x354
mov rcx, r14
mov rdx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x140015ab7
cmp qword [rbp + 0x810], 0x354
jne 0x140015b11
mov rdx, qword [rbp - 0x30]
mov qword [rsp + 0x20], rsi
lea r8, [rbp + 0x308]
mov r9d, 0x3f4
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x140015bc5
cmp qword [rbp + 0x748], 0x3f4
jne 0x140015c80
lea r8, [rdi + 0x10]
lea rdx, [rbp + 0x378]
mov rcx, r14
call fcn.1400176e8
test al, al
je 0x140015f0d
mov rdx, qword [rbp - 0x38]
mov qword [rsp + 0x20], rsi
lea r8, [rbp + 0x700]
push 0x40
pop r9
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x140015df7
cmp qword [rbp + 0x748], 0x40
jne 0x140015e51
xorps xmm0, xmm0
lea r12, [rbp + 0x7d0]
movaps xmmword [r12], xmm0
and qword [r12 + 0x10], 0
mov qword [r12 + 0x18], 7
movaps xmmword [r12 + 0x20], xmm0
and qword [r12 + 0x30], 0
mov rbx, qword [rbp + 0x710]
mov rsi, qword [rbp + 0x718]
lea r15, [rdi + 0x40]
mov r13, qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
lea rax, [rbp + 0x958]
mov qword [rsp + 0x20], rax
mov r9d, 0x84
mov rcx, r14
mov rdx, rbx
lea r8, [rbp + 0x748]
call r13
test eax, eax
je 0x140015f69
cmp qword [rbp + 0x958], 0x84
jne 0x140015fcd
mov rcx, r14
lea rdx, [rbp + 0x790]
mov r8, r12
call fcn.1400176e8
test al, al
jne 0x140015841
mov rcx, r12
lea rdx, [0x1400a0656]
call fcn.140017894
mov rax, qword [rbp + 0x778]
mov qword [rbp + 0x7f0], rax
mov eax, dword [rbp + 0x788]
mov qword [rbp + 0x7f8], rax
mov eax, dword [rbp + 0x7c8]
mov qword [rbp + 0x800], rax
mov rcx, r15
mov rdx, r12
call fcn.1400178bc
cmp rbx, rsi
je 0x140016030
mov rbx, qword [rbp + 0x748]
jmp 0x1400157e1
mov rax, rbx
shr rax, 0x20
jne 0x140015b6c
lea rax, [rbp + 0x810]
mov qword [rsp + 0x20], rax
lea r8, [rbp - 0x50]
mov r9d, 0x230
mov rcx, r14
mov rdx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x140015c1f
cmp qword [rbp + 0x810], 0x230
jne 0x140015cdb
mov edx, dword [rbp - 0x40]
mov qword [rsp + 0x20], rsi
lea r8, [rbp + 0x308]
mov r9d, 0x294
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x140015d42
cmp qword [rbp + 0x748], 0x294
jne 0x140015d9c
lea r8, [rdi + 0x10]
lea rdx, [rbp + 0x348]
mov rcx, r14
call fcn.140017ba3
test al, al
je 0x140015f0d
mov edx, dword [rbp - 0x44]
mov qword [rsp + 0x20], rsi
lea r8, [rbp + 0x7d0]
push 0x24
pop r9
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x140015eac
cmp qword [rbp + 0x748], 0x24
jne 0x14001603c
lea rbx, [rbp + 0x700]
and qword [rbx + 0x10], 0
xorps xmm0, xmm0
movaps xmmword [rbx], xmm0
mov qword [rbx + 0x18], 7
movaps xmmword [rbx + 0x20], xmm0
and qword [rbx + 0x30], 0
mov r12d, dword [rbp + 0x7dc]
mov esi, dword [rbp + 0x7e0]
lea r15, [rdi + 0x40]
push 0x48
pop r13
mov edx, r12d
lea rax, [rbp + 0x958]
mov qword [rsp + 0x20], rax
mov rcx, r14
lea r8, [rbp + 0x748]
mov r9, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x14001609e
cmp qword [rbp + 0x958], 0x48
jne 0x140016102
mov rcx, r14
lea rdx, [rbp + 0x76c]
mov r8, rbx
call fcn.140017ba3
test al, al
jne 0x1400159ea
mov rcx, rbx
lea rdx, [0x1400a0656]
call fcn.140017894
mov eax, dword [rbp + 0x760]
mov ecx, dword [rbp + 0x768]
mov qword [rbp + 0x720], rax
mov qword [rbp + 0x728], rcx
mov eax, dword [rbp + 0x78c]
mov qword [rbp + 0x730], rax
mov rcx, r15
mov rdx, rbx
call fcn.1400178bc
cmp r12d, esi
je 0x140016165
mov r12d, dword [rbp + 0x748]
jmp 0x14001598d
mov ebx, eax
mov dword [rsp + 0x20], 2
lea rdx, str.bool___cdecl_crashpad::GetProcessBasicInformation_HANDLE__bool__crashpad::ProcessInfo___crashpad::WinVMAddress___crashpad::WinVMSize____Traits__crashpad::process_types::internal::Traits64_
lea r8, str..._.._.._third_party_crashpad_util_win_process_info.cc
lea rsi, [rbp + 0x308]
mov rcx, rsi
mov r9d, 0xe3
call fcn.14004b54e
mov dword [rsi + 0x100], ebx
lea rdx, [0x140096854]
mov rcx, rsi
call fcn.140002bc9
jmp 0x14001562d
mov dword [rsp + 0x20], 2
lea rdx, str.bool___cdecl_crashpad::GetProcessBasicInformation_HANDLE__bool__crashpad::ProcessInfo___crashpad::WinVMAddress___crashpad::WinVMSize____Traits__crashpad::process_types::internal::Traits64_
lea r8, str..._.._.._third_party_crashpad_util_win_process_info.cc
lea rsi, [rbp + 0x308]
mov rcx, rsi
mov r9d, 0xe7
call fcn.14004b54e
lea rdx, str.NtQueryInformationProcess_incorrect_size
mov rcx, rsi
call fcn.140002bc9
jmp 0x140015675
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov dword [rsp + 0x20], 2
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace_::ReadStruct_HANDLE__crashpad::WinVMAddress__T____T__crashpad::process_types::PEB_crashpad::process_types::internal::Traits64__
lea r8, str..._.._.._third_party_crashpad_util_win_process_info.cc
lea rdi, [rbp + 0x308]
push 0x76
pop r9
mov rcx, rdi
call fcn.14004b54e
mov dword [rdi + 0x100], esi
lea rdx, [0x14009f1d3]
mov rcx, rdi
call fcn.140002bc9
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace_::ReadStruct_HANDLE__crashpad::WinVMAddress__T____T__crashpad::process_types::PEB_crashpad::process_types::internal::Traits64__
mov rcx, rax
call fcn.140002bc9
jmp 0x140015c74
mov dword [rsp + 0x20], 2
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace_::ReadStruct_HANDLE__crashpad::WinVMAddress__T____T__crashpad::process_types::PEB_crashpad::process_types::internal::Traits64__
lea r8, str..._.._.._third_party_crashpad_util_win_process_info.cc
lea rsi, [rbp + 0x308]
push 0x7a
pop r9
mov rcx, rsi
call fcn.14004b54e
lea rdx, [0x14009f1d3]
mov rcx, rsi
call fcn.140002bc9
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace_::ReadStruct_HANDLE__crashpad::WinVMAddress__T____T__crashpad::process_types::PEB_crashpad::process_types::internal::Traits64__
mov rcx, rax
call fcn.140002bc9
lea rdx, [0x1400971e2]
mov rcx, rax
call fcn.140002bc9
jmp 0x140015d31
mov dword [rsp + 0x20], 2
lea rdx, str.bool___cdecl_crashpad::ReadProcessData_HANDLE__crashpad::WinVMAddress__crashpad::ProcessInfo____Traits__crashpad::process_types::internal::Traits32_
lea r8, str..._.._.._third_party_crashpad_util_win_process_info.cc
lea rcx, [rbp + 0x308]
mov r9d, 0xf7
call fcn.14004b54e
lea rdx, str.peb_address_0x_llx_out_of_range
lea rcx, [rbp - 0x50]
mov r8, rbx
call fcn.14004bf98
lea rcx, [rbp + 0x308]
lea rdx, [rbp - 0x50]
call fcn.140003113
lea rcx, [rbp - 0x50]
call fcn.1400049ea
jmp 0x140015d31
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov dword [rsp + 0x20], 2
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace_::ReadStruct_HANDLE__crashpad::WinVMAddress__T____T__crashpad::process_types::RTL_USER_PROCESS_PARAMETERS_crashpad::process_types::internal::Traits64__
lea r8, str..._.._.._third_party_crashpad_util_win_process_info.cc
lea rdi, [rbp + 0x810]
push 0x76
pop r9
mov rcx, rdi
call fcn.14004b54e
mov dword [rdi + 0x100], esi
lea rdx, [0x14009f1d3]
mov rcx, rdi
call fcn.140002bc9
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace_::ReadStruct_HANDLE__crashpad::WinVMAddress__T____T__crashpad::process_types::RTL_USER_PROCESS_PARAMETERS_crashpad::process_types::internal::Traits64__
mov rcx, rax
call fcn.140002bc9
jmp 0x140015f01
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov dword [rsp + 0x20], 2
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace_::ReadStruct_HANDLE__crashpad::WinVMAddress__T____T__crashpad::process_types::PEB_crashpad::process_types::internal::Traits32__
lea r8, str..._.._.._third_party_crashpad_util_win_process_info.cc
lea rdi, [rbp + 0x308]
push 0x76
pop r9
mov rcx, rdi
call fcn.14004b54e
mov dword [rdi + 0x100], esi
lea rdx, [0x14009f1d3]
mov rcx, rdi
call fcn.140002bc9
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace_::ReadStruct_HANDLE__crashpad::WinVMAddress__T____T__crashpad::process_types::PEB_crashpad::process_types::internal::Traits32__
mov rcx, rax
call fcn.140002bc9
lea rcx, [rbp + 0x308]
jmp 0x140015f08
mov dword [rsp + 0x20], 2
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace_::ReadStruct_HANDLE__crashpad::WinVMAddress__T____T__crashpad::process_types::RTL_USER_PROCESS_PARAMETERS_crashpad::process_types::internal::Traits64__
lea r8, str..._.._.._third_party_crashpad_util_win_process_info.cc
lea rsi, [rbp + 0x810]
push 0x7a
pop r9
mov rcx, rsi
call fcn.14004b54e
lea rdx, [0x14009f1d3]
mov rcx, rsi
call fcn.140002bc9
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace_::ReadStruct_HANDLE__crashpad::WinVMAddress__T____T__crashpad::process_types::RTL_USER_PROCESS_PARAMETERS_crashpad::process_types::internal::Traits64__
mov rcx, rax
call fcn.140002bc9
lea rdx, [0x1400971e2]
mov rcx, rax
call fcn.140002bc9
jmp 0x140016092
mov dword [rsp + 0x20], 2
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace_::ReadStruct_HANDLE__crashpad::WinVMAddress__T____T__crashpad::process_types::PEB_crashpad::process_types::internal::Traits32__
lea r8, str..._.._.._third_party_crashpad_util_win_process_info.cc
lea rsi, [rbp + 0x308]
push 0x7a
pop r9
mov rcx, rsi
call fcn.14004b54e
lea rdx, [0x14009f1d3]
mov rcx, rsi
call fcn.140002bc9
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace_::ReadStruct_HANDLE__crashpad::WinVMAddress__T____T__crashpad::process_types::PEB_crashpad::process_types::internal::Traits32__
mov rcx, rax
call fcn.140002bc9
lea rdx, [0x1400971e2]
mov rcx, rax
call fcn.140002bc9
lea rcx, [rbp + 0x308]
call fcn.14004ba62
jmp 0x140015f0d
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov dword [rsp + 0x20], 2
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace_::ReadStruct_HANDLE__crashpad::WinVMAddress__T____T__crashpad::process_types::RTL_USER_PROCESS_PARAMETERS_crashpad::process_types::internal::Traits32__
lea r8, str..._.._.._third_party_crashpad_util_win_process_info.cc
lea rdi, [rbp + 0x810]
push 0x76
pop r9
mov rcx, rdi
call fcn.14004b54e
mov dword [rdi + 0x100], esi
lea rdx, [0x14009f1d3]
mov rcx, rdi
call fcn.140002bc9
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace_::ReadStruct_HANDLE__crashpad::WinVMAddress__T____T__crashpad::process_types::RTL_USER_PROCESS_PARAMETERS_crashpad::process_types::internal::Traits32__
mov rcx, rax
call fcn.140002bc9
jmp 0x140015f01
mov dword [rsp + 0x20], 2
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace_::ReadStruct_HANDLE__crashpad::WinVMAddress__T____T__crashpad::process_types::RTL_USER_PROCESS_PARAMETERS_crashpad::process_types::internal::Traits32__
lea r8, str..._.._.._third_party_crashpad_util_win_process_info.cc
lea rsi, [rbp + 0x810]
push 0x7a
pop r9
mov rcx, rsi
call fcn.14004b54e
lea rdx, [0x14009f1d3]
mov rcx, rsi
call fcn.140002bc9
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace_::ReadStruct_HANDLE__crashpad::WinVMAddress__T____T__crashpad::process_types::RTL_USER_PROCESS_PARAMETERS_crashpad::process_types::internal::Traits32__
mov rcx, rax
call fcn.140002bc9
lea rdx, [0x1400971e2]
mov rcx, rax
call fcn.140002bc9
jmp 0x140016092
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov dword [rsp + 0x20], 2
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace_::ReadStruct_HANDLE__crashpad::WinVMAddress__T____T__crashpad::process_types::PEB_LDR_DATA_crashpad::process_types::internal::Traits64__
lea r8, str..._.._.._third_party_crashpad_util_win_process_info.cc
lea rdi, [rbp + 0x810]
push 0x76
pop r9
mov rcx, rdi
call fcn.14004b54e
mov dword [rdi + 0x100], esi
lea rdx, [0x14009f1d3]
mov rcx, rdi
call fcn.140002bc9
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace_::ReadStruct_HANDLE__crashpad::WinVMAddress__T____T__crashpad::process_types::PEB_LDR_DATA_crashpad::process_types::internal::Traits64__
mov rcx, rax
call fcn.140002bc9
jmp 0x140015f01
mov dword [rsp + 0x20], 2
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace_::ReadStruct_HANDLE__crashpad::WinVMAddress__T____T__crashpad::process_types::PEB_LDR_DATA_crashpad::process_types::internal::Traits64__
lea r8, str..._.._.._third_party_crashpad_util_win_process_info.cc
lea rsi, [rbp + 0x810]
push 0x7a
pop r9
mov rcx, rsi
call fcn.14004b54e
lea rdx, [0x14009f1d3]
mov rcx, rsi
call fcn.140002bc9
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace_::ReadStruct_HANDLE__crashpad::WinVMAddress__T____T__crashpad::process_types::PEB_LDR_DATA_crashpad::process_types::internal::Traits64__
mov rcx, rax
call fcn.140002bc9
lea rdx, [0x1400971e2]
mov rcx, rax
call fcn.140002bc9
jmp 0x140016092
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov dword [rsp + 0x20], 2
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace_::ReadStruct_HANDLE__crashpad::WinVMAddress__T____T__crashpad::process_types::PEB_LDR_DATA_crashpad::process_types::internal::Traits32__
lea r8, str..._.._.._third_party_crashpad_util_win_process_info.cc
lea rdi, [rbp + 0x810]
push 0x76
pop r9
mov rcx, rdi
call fcn.14004b54e
mov dword [rdi + 0x100], esi
lea rdx, [0x14009f1d3]
mov rcx, rdi
call fcn.140002bc9
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace_::ReadStruct_HANDLE__crashpad::WinVMAddress__T____T__crashpad::process_types::PEB_LDR_DATA_crashpad::process_types::internal::Traits32__
mov rcx, rax
call fcn.140002bc9
lea rcx, [rbp + 0x810]
call fcn.14004bba4
mov dword [rsp + 0x20], 2
lea rdx, str.bool___cdecl_crashpad::ProcessInfo::Initialize_HANDLE_
lea r8, str..._.._.._third_party_crashpad_util_win_process_info.cc
lea rsi, [rbp + 0x308]
mov rcx, rsi
mov r9d, 0x227
call fcn.14004b54e
lea rdx, str.ReadProcessData_failed
mov rcx, rsi
call fcn.140002bc9
lea rcx, [rbp + 0x308]
call fcn.14004ba62
xor eax, eax
add rsp, 0x9f8
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
mov dword [rsp + 0x20], 2
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace_::ReadStruct_HANDLE__crashpad::WinVMAddress__T____T__crashpad::process_types::LDR_DATA_TABLE_ENTRY_crashpad::process_types::internal::Traits64__
lea r8, str..._.._.._third_party_crashpad_util_win_process_info.cc
lea rcx, [rbp + 0x810]
push 0x76
pop r9
call fcn.14004b54e
lea rcx, [rbp + 0x810]
mov dword [rcx + 0x100], ebx
lea rdx, [0x14009f1d3]
call fcn.140002bc9
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace_::ReadStruct_HANDLE__crashpad::WinVMAddress__T____T__crashpad::process_types::LDR_DATA_TABLE_ENTRY_crashpad::process_types::internal::Traits64__
mov rcx, rax
call fcn.140002bc9
lea rcx, [rbp + 0x810]
call fcn.14004bba4
jmp 0x140016030
mov dword [rsp + 0x20], 2
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace_::ReadStruct_HANDLE__crashpad::WinVMAddress__T____T__crashpad::process_types::LDR_DATA_TABLE_ENTRY_crashpad::process_types::internal::Traits64__
lea r8, str..._.._.._third_party_crashpad_util_win_process_info.cc
lea rcx, [rbp + 0x810]
push 0x7a
pop r9
call fcn.14004b54e
lea rdx, [0x14009f1d3]
lea rcx, [rbp + 0x810]
call fcn.140002bc9
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace_::ReadStruct_HANDLE__crashpad::WinVMAddress__T____T__crashpad::process_types::LDR_DATA_TABLE_ENTRY_crashpad::process_types::internal::Traits64__
mov rcx, rax
call fcn.140002bc9
lea rdx, [0x1400971e2]
mov rcx, rax
call fcn.140002bc9
lea rcx, [rbp + 0x810]
call fcn.14004ba62
lea rcx, [rbp + 0x7d0]
jmp 0x14001616c
mov dword [rsp + 0x20], 2
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace_::ReadStruct_HANDLE__crashpad::WinVMAddress__T____T__crashpad::process_types::PEB_LDR_DATA_crashpad::process_types::internal::Traits32__
lea r8, str..._.._.._third_party_crashpad_util_win_process_info.cc
lea rsi, [rbp + 0x810]
push 0x7a
pop r9
mov rcx, rsi
call fcn.14004b54e
lea rdx, [0x14009f1d3]
mov rcx, rsi
call fcn.140002bc9
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace_::ReadStruct_HANDLE__crashpad::WinVMAddress__T____T__crashpad::process_types::PEB_LDR_DATA_crashpad::process_types::internal::Traits32__
mov rcx, rax
call fcn.140002bc9
lea rdx, [0x1400971e2]
mov rcx, rax
call fcn.140002bc9
lea rcx, [rbp + 0x810]
jmp 0x140015d38
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
mov dword [rsp + 0x20], 2
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace_::ReadStruct_HANDLE__crashpad::WinVMAddress__T____T__crashpad::process_types::LDR_DATA_TABLE_ENTRY_crashpad::process_types::internal::Traits32__
lea r8, str..._.._.._third_party_crashpad_util_win_process_info.cc
lea rcx, [rbp + 0x810]
push 0x76
pop r9
call fcn.14004b54e
lea rcx, [rbp + 0x810]
mov dword [rcx + 0x100], ebx
lea rdx, [0x14009f1d3]
call fcn.140002bc9
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace_::ReadStruct_HANDLE__crashpad::WinVMAddress__T____T__crashpad::process_types::LDR_DATA_TABLE_ENTRY_crashpad::process_types::internal::Traits32__
mov rcx, rax
call fcn.140002bc9
lea rcx, [rbp + 0x810]
call fcn.14004bba4
jmp 0x140016165
mov dword [rsp + 0x20], 2
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace_::ReadStruct_HANDLE__crashpad::WinVMAddress__T____T__crashpad::process_types::LDR_DATA_TABLE_ENTRY_crashpad::process_types::internal::Traits32__
lea r8, str..._.._.._third_party_crashpad_util_win_process_info.cc
lea rcx, [rbp + 0x810]
push 0x7a
pop r9
call fcn.14004b54e
lea rdx, [0x14009f1d3]
lea rcx, [rbp + 0x810]
call fcn.140002bc9
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace_::ReadStruct_HANDLE__crashpad::WinVMAddress__T____T__crashpad::process_types::LDR_DATA_TABLE_ENTRY_crashpad::process_types::internal::Traits32__
mov rcx, rax
call fcn.140002bc9
lea rdx, [0x1400971e2]
mov rcx, rax
call fcn.140002bc9
lea rcx, [rbp + 0x810]
call fcn.14004ba62
lea rcx, [rbp + 0x700]
call fcn.140004a1e
mov r12b, byte [rdi + 0x88]
lea rax, [rdi + 0x58]
mov qword [rbp + 0x930], rax
xor esi, esi
mov byte [rbp + 0x96f], r12b
mov rcx, r14
mov rdx, rsi
lea r8, [rbp - 0x50]
push 0x30
pop r9
call qword [sym.imp.KERNEL32.dll_VirtualQueryEx]
test rax, rax
je 0x1400163b4
mov qword [rbp + 0x960], rsi
mov r15, qword [rbp - 0x50]
mov r8, qword [rbp - 0x48]
mov ebx, dword [rbp - 0x40]
mov rsi, qword [rbp - 0x38]
mov edx, dword [rbp - 0x30]
mov ecx, dword [rbp - 0x2c]
mov eax, dword [rbp - 0x28]
mov r13, qword [rdi + 0x60]
cmp r13, qword [rdi + 0x68]
je 0x140016209
mov qword [r13], r15
mov qword [r13 + 8], r8
mov dword [r13 + 0x10], ebx
and dword [r13 + 0x14], 0
mov qword [r13 + 0x18], rsi
mov dword [r13 + 0x20], edx
mov dword [r13 + 0x24], ecx
mov dword [r13 + 0x28], eax
and dword [r13 + 0x2c], 0
add qword [rdi + 0x60], 0x30
mov rsi, qword [rbp + 0x960]
jmp 0x140016390
mov dword [rbp + 0x94c], eax
mov rax, r13
sub rax, qword [rdi + 0x58]
mov qword [rbp + 0x928], rax
mov dword [rbp + 0x954], edx
cqo
mov dword [rbp + 0x950], ecx
push 0x30
pop rcx
idiv rcx
mov qword [rbp + 0x920], rax
lea rdx, [rax + 1]
mov rcx, qword [rbp + 0x930]
mov qword [rbp + 0x938], rdx
mov qword [rbp + 0x918], rsi
mov rsi, r8
call fcn.14001732a
mov qword [rbp + 0x940], rax
imul rdx, rax, 0x30
push 0x10
pop rcx
call fcn.14000d4d4
mov r12, rax
imul rax, qword [rbp + 0x920], 0x30
mov qword [r12 + rax], r15
mov qword [r12 + rax + 8], rsi
mov dword [r12 + rax + 0x10], ebx
and dword [r12 + rax + 0x14], 0
mov rcx, qword [rbp + 0x918]
mov qword [r12 + rax + 0x18], rcx
mov ecx, dword [rbp + 0x954]
mov dword [r12 + rax + 0x20], ecx
mov ecx, dword [rbp + 0x950]
mov dword [r12 + rax + 0x24], ecx
mov ecx, dword [rbp + 0x94c]
mov dword [r12 + rax + 0x28], ecx
and dword [r12 + rax + 0x2c], 0
mov rax, qword [rdi + 0x58]
mov r8, qword [rdi + 0x60]
sub r8, r13
je 0x14001633a
mov rcx, r12
cmp rax, r13
mov rsi, qword [rbp + 0x960]
je 0x1400162fd
movaps xmm0, xmmword [rax]
movaps xmm1, xmmword [rax + 0x10]
movaps xmm2, xmmword [rax + 0x20]
movaps xmmword [rcx + 0x20], xmm2
movaps xmmword [rcx + 0x10], xmm1
movaps xmmword [rcx], xmm0
add rcx, 0x30
add rax, 0x30
cmp rax, r13
jne 0x1400162da
mov rax, qword [rbp + 0x928]
lea rcx, [rax + r12]
add rcx, 0x30
add r8, 0xffffffffffffffd0
mov rax, r8
xor edx, edx
push 0x30
pop rbx
div rbx
sub r8, rdx
add r8, 0x30
mov rdx, r13
call fcn.14006f9f0
mov r8, qword [rbp + 0x938]
mov r9, qword [rbp + 0x940]
jmp 0x14001637a
cmp rax, r13
mov rsi, qword [rbp + 0x960]
mov r8, qword [rbp + 0x938]
mov r9, qword [rbp + 0x940]
je 0x14001637a
mov rcx, r12
movaps xmm0, xmmword [rax]
movaps xmm1, xmmword [rax + 0x10]
movaps xmm2, xmmword [rax + 0x20]
movaps xmmword [rcx + 0x20], xmm2
movaps xmmword [rcx + 0x10], xmm1
movaps xmmword [rcx], xmm0
add rcx, 0x30
add rax, 0x30
cmp rax, r13
jne 0x140016357
mov rcx, qword [rbp + 0x930]
mov rdx, r12
call fcn.14001736a
mov r12b, byte [rbp + 0x96f]
mov rax, qword [rbp - 0x38]
test rax, rax
je 0x1400163c6
add rsi, rax
test r12b, r12b
jne 0x14001618c
mov rax, rsi
shr rax, 0x20
je 0x14001618c
jmp 0x1400163bf
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x57
jne 0x14001640e
mov al, 1
jmp 0x140015f55
mov dword [rsp + 0x20], 2
lea rdx, str.bool___cdecl_crashpad::ReadMemoryInfo_HANDLE__bool__crashpad::ProcessInfo__
lea r8, str..._.._.._third_party_crashpad_util_win_process_info.cc
lea rsi, [rbp + 0x308]
mov rcx, rsi
mov r9d, 0x152
call fcn.14004b54e
lea rdx, str.RegionSize__0
mov rcx, rsi
call fcn.140002bc9
lea rcx, [rbp + 0x308]
call fcn.14004ba62
jmp 0x140016462
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov dword [rsp + 0x20], 2
lea rdx, str.bool___cdecl_crashpad::ReadMemoryInfo_HANDLE__bool__crashpad::ProcessInfo__
lea r8, str..._.._.._third_party_crashpad_util_win_process_info.cc
lea rdi, [rbp + 0x308]
mov rcx, rdi
mov r9d, 0x149
call fcn.14004b54e
mov dword [rdi + 0x100], esi
lea rdx, [0x140095b3f]
mov rcx, rdi
call fcn.140002bc9
lea rcx, [rbp + 0x308]
call fcn.14004bba4
mov dword [rsp + 0x20], 2
lea rdx, str.bool___cdecl_crashpad::ProcessInfo::Initialize_HANDLE_
lea r8, str..._.._.._third_party_crashpad_util_win_process_info.cc
lea rsi, [rbp + 0x308]
mov rcx, rsi
mov r9d, 0x22c
call fcn.14004b54e
lea rdx, str.ReadMemoryInfo_failed
mov rcx, rsi
call fcn.140002bc9
jmp 0x140015f47
lea rcx, [0x1400c4fe8]
call fcn.140052d98
cmp dword [0x1400c4fe8], 0xffffffff
jne 0x1400154af
lea rcx, [0x1400a05ca]
lea rdx, str.::IsWow64Process
xor r8d, r8d
call fcn.140013c90
mov qword [0x1400c4fe0], rax
lea rcx, [0x1400c4fe8]
call fcn.140052e30
jmp 0x1400154af