Function at 0x140079824
Capabilities:
Create process on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xa38
movaps xmmword [rsp + 0xa20], xmm7
movaps xmmword [rsp + 0xa10], xmm6
mov r13, rcx
mov rax, qword [0x14019d018]
xor rax, rsp
mov qword [rsp + 0xa08], rax
call fcn.1400c4cc0
test al, al
jne 0x14007ade3
xorps xmm0, xmm0
lea rdx, [rsp + 0x1e0]
movaps xmmword [rdx], xmm0
mov qword [rdx + 0x10], 0
mov rcx, qword [r13]
call fcn.1400c4cec
mov rsi, qword [r13]
mov rbp, qword [rsi + 0x78]
mov rdi, qword [rsi + 0x80]
cmp rbp, rdi
je 0x140079911
lea rsi, [rsp + 0x200]
lea r14, [rsp + 0x1d0]
lea rbx, [rsp + 0x1e0]
movzx eax, byte [rbp + 0x17]
test al, al
mov rcx, qword [rbp]
cmovns rcx, rbp
mov qword [rsp + 0x1d0], rcx
cmovs rax, qword [rbp + 8]
mov qword [rsp + 0x1d8], rax
mov rcx, rsi
mov rdx, r14
call fcn.14004ae70
mov rcx, rsi
mov rdx, rbx
call fcn.1400c4cec
cmp byte [rsp + 0x217], 0
jns 0x140079904
mov rcx, qword [rsp + 0x200]
call fcn.140136524
add rbp, 0x18
cmp rbp, rdi
jne 0x1400798b4
mov rsi, qword [r13]
movzx eax, byte [rsi + 0x2f]
test al, al
jns 0x14007991d
mov rax, qword [rsi + 0x20]
test rax, rax
je 0x140079991
add rsi, 0x18
lea rdx, str.database
lea rdi, [rsp + 0xa0]
mov rcx, rdi
call fcn.14001e654
lea rbx, [rsp + 0x200]
mov rcx, rbx
mov rdx, rdi
mov r8, rsi
call fcn.14007af94
lea rdx, [rsp + 0x1e0]
mov rcx, rbx
call fcn.1400c4cec
cmp byte [rbx + 0x17], 0
jns 0x140079976
mov rcx, qword [rsp + 0x200]
call fcn.140136524
cmp byte [rsp + 0xb7], 0
jns 0x14007998d
mov rcx, qword [rsp + 0xa0]
call fcn.140136524
mov rsi, qword [r13]
movzx eax, byte [rsi + 0x47]
test al, al
jns 0x14007999d
mov rax, qword [rsi + 0x38]
test rax, rax
je 0x140079a11
add rsi, 0x30
lea rdx, str.metrics_dir
lea rdi, [rsp + 0xa0]
mov rcx, rdi
call fcn.14001e654
lea rbx, [rsp + 0x200]
mov rcx, rbx
mov rdx, rdi
mov r8, rsi
call fcn.14007af94
lea rdx, [rsp + 0x1e0]
mov rcx, rbx
call fcn.1400c4cec
cmp byte [rbx + 0x17], 0
jns 0x1400799f6
mov rcx, qword [rsp + 0x200]
call fcn.140136524
cmp byte [rsp + 0xb7], 0
jns 0x140079a0d
mov rcx, qword [rsp + 0xa0]
call fcn.140136524
mov rsi, qword [r13]
movzx eax, byte [rsi + 0x5f]
test al, al
js 0x140079a1e
mov rcx, rax
jmp 0x140079a22
mov rcx, qword [rsi + 0x50]
test rcx, rcx
je 0x140079adc
lea rcx, [rsi + 0x48]
test al, al
cmovs rcx, qword [rsi + 0x48]
lea rdx, [rsp + 0x1c0]
mov qword [rdx], rcx
cmovs rax, qword [rsi + 0x50]
mov qword [rdx + 8], rax
lea rsi, [rsp + 0xa0]
mov rcx, rsi
call fcn.14004ae70
lea rdx, [0x14017c70e]
lea rdi, [rsp + 0x120]
mov rcx, rdi
call fcn.14001e654
lea rbx, [rsp + 0x200]
mov rcx, rbx
mov rdx, rdi
mov r8, rsi
call fcn.14007af94
lea rdx, [rsp + 0x1e0]
mov rcx, rbx
call fcn.1400c4cec
cmp byte [rbx + 0x17], 0
jns 0x140079aaa
mov rcx, qword [rsp + 0x200]
call fcn.140136524
cmp byte [rsp + 0x137], 0
jns 0x140079ac1
mov rcx, qword [rsp + 0x120]
call fcn.140136524
cmp byte [rsp + 0xb7], 0
jns 0x140079ad8
mov rcx, qword [rsp + 0xa0]
call fcn.140136524
mov rsi, qword [r13]
mov r14, qword [rsi + 0x60]
lea r12, [rsi + 0x68]
cmp r14, r12
mov qword [rsp + 0x58], r13
je 0x140079c9b
lea r13, [rsp + 0x190]
xorps xmm6, xmm6
lea rbx, [rsp + 0xa0]
lea r15, str.annotation
lea rsi, [rsp + 0x178]
lea rdi, [rsp + 0x200]
lea rbp, [rsp + 0x1e0]
lea rdx, [r14 + 0x20]
mov rcx, r13
mov r8b, 0x3d
call fcn.140026688
movzx r8d, byte [r14 + 0x4f]
test r8b, r8b
jns 0x140079b47
mov r8, qword [r14 + 0x40]
mov rdx, qword [r14 + 0x38]
jmp 0x140079b4b
lea rdx, [r14 + 0x38]
mov rcx, r13
call fcn.14004407c
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x130], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x120], xmm0
movups xmmword [rax], xmm6
mov qword [rax + 0x10], 0
movzx eax, byte [rsp + 0x137]
test al, al
mov rcx, qword [rsp + 0x120]
lea rdx, [rsp + 0x120]
cmovns rcx, rdx
mov qword [rsp + 0x1b0], rcx
cmovs rax, qword [rsp + 0x128]
mov qword [rsp + 0x1b8], rax
mov rcx, rbx
lea rdx, [rsp + 0x1b0]
call fcn.14004ae70
mov rcx, rsi
mov rdx, r15
call fcn.14001e654
mov rcx, rdi
mov rdx, rsi
mov r8, rbx
call fcn.14007af94
mov rcx, rdi
mov rdx, rbp
call fcn.1400c4cec
cmp byte [rsp + 0x217], 0
jns 0x140079bf7
mov rcx, qword [rsp + 0x200]
call fcn.140136524
cmp byte [rsp + 0x18f], 0
jns 0x140079c0e
mov rcx, qword [rsp + 0x178]
call fcn.140136524
cmp byte [rsp + 0xb7], 0
jns 0x140079c25
mov rcx, qword [rsp + 0xa0]
call fcn.140136524
cmp byte [rsp + 0x137], 0
jns 0x140079c3c
mov rcx, qword [rsp + 0x120]
call fcn.140136524
cmp byte [rsp + 0x1a7], 0
jns 0x140079c53
mov rcx, qword [rsp + 0x190]
call fcn.140136524
mov rcx, qword [r14 + 8]
test rcx, rcx
je 0x140079c69
mov rax, rcx
mov rcx, qword [rcx]
test rcx, rcx
jne 0x140079c5c
jmp 0x140079c86
mov rax, qword [r14 + 0x10]
cmp qword [rax], r14
je 0x140079c86
add r14, 0x10
mov rcx, qword [r14]
lea r14, [rcx + 0x10]
mov rax, qword [rcx + 0x10]
cmp qword [rax], rcx
jne 0x140079c76
mov r14, rax
cmp rax, r12
jne 0x140079b24
mov r13, qword [rsp + 0x58]
mov rsi, qword [r13]
mov rdi, qword [rsi + 0x90]
mov rsi, qword [rsi + 0x98]
cmp rdi, rsi
je 0x140079d28
lea r14, [0x14017c64b]
lea rbx, [rsp + 0xa0]
lea rbp, [rsp + 0x200]
lea r15, [rsp + 0x1e0]
mov rcx, rbx
mov rdx, r14
call fcn.14001e654
mov rcx, rbp
mov rdx, rbx
mov r8, rdi
call fcn.14007af94
mov rcx, rbp
mov rdx, r15
call fcn.1400c4cec
cmp byte [rsp + 0x217], 0
jns 0x140079d08
mov rcx, qword [rsp + 0x200]
call fcn.140136524
cmp byte [rsp + 0xb7], 0
jns 0x140079d1f
mov rcx, qword [rsp + 0xa0]
call fcn.140136524
add rdi, 0x18
cmp rdi, rsi
jne 0x140079ccd
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, 0x1f0fff
mov edx, 1
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
je 0x14007a093
mov r12, rax
movaps xmm6, xmmword [0x140174f60]
lea rsi, [rsp + 0x120]
movaps xmmword [rsi + 0x40], xmm6
movaps xmmword [rsi + 0x30], xmm6
movaps xmmword [rsi + 0x20], xmm6
movaps xmmword [rsi + 0x10], xmm6
movaps xmmword [rsi], xmm6
mov rax, qword [r13]
mov rax, qword [rax + 0xc8]
mov rcx, qword [0x14019f060]
mov r9, qword [0x14019f058]
mov r8, qword [0x14019f050]
mov rdx, qword [0x14019f048]
lea rbp, [0x1401abcc8]
mov qword [rsp + 0x48], rbp
lea rbp, [0x1401abc98]
mov qword [rsp + 0x40], rbp
lea rbp, [0x1401abc58]
mov qword [rsp + 0x38], rbp
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
mov rcx, rsi
call fcn.140052e80
lea rbx, [rsp + 0x190]
mov rcx, rsi
mov rdx, rbx
call fcn.140053240
lea rdx, str.__initial_client_data
lea rsi, [rsp + 0x178]
mov rcx, rsi
call fcn.14001e654
movzx r8d, byte [rbx + 0x17]
test r8b, r8b
jns 0x140079e15
mov r8, qword [rsp + 0x198]
mov rbx, qword [rsp + 0x190]
mov rcx, rsi
mov rdx, rbx
call fcn.14004407c
mov rcx, qword [rax + 0x10]
lea r13, [rsp + 0xa0]
mov qword [r13 + 0x10], rcx
movups xmm0, xmmword [rax]
movaps xmmword [r13], xmm0
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov qword [rax + 0x10], 0
movzx eax, byte [r13 + 0x17]
test al, al
mov rcx, qword [r13]
cmovns rcx, r13
lea rdx, [rsp + 0x110]
mov qword [rdx], rcx
cmovs rax, qword [r13 + 8]
mov qword [rdx + 8], rax
lea rbx, [rsp + 0x200]
mov rcx, rbx
call fcn.14004ae70
lea r15, [rsp + 0x1e0]
mov rcx, rbx
mov rdx, r15
call fcn.1400c4cec
cmp byte [rbx + 0x17], 0
jns 0x140079e9f
mov rcx, qword [rsp + 0x200]
call fcn.140136524
cmp byte [rsp + 0xb7], 0
jns 0x140079eb6
mov rcx, qword [rsp + 0xa0]
call fcn.140136524
cmp byte [rsp + 0x18f], 0
jns 0x140079ecd
mov rcx, qword [rsp + 0x178]
call fcn.140136524
cmp byte [rsp + 0x1a7], 0
jns 0x140079ee4
mov rcx, qword [rsp + 0x190]
call fcn.140136524
movabs rbp, 0xaaaaaaaaaaaaaaaa
xorps xmm7, xmm7
movaps xmmword [rsp + 0xd0], xmm7
movaps xmmword [rsp + 0x100], xmm7
movaps xmmword [rsp + 0xf0], xmm7
movaps xmmword [rsp + 0xe0], xmm7
movaps xmmword [rsp + 0xc0], xmm7
movaps xmmword [rsp + 0xb0], xmm7
movaps xmmword [rsp + 0xa0], xmm7
mov dword [rsp + 0xdc], 0x100
mov rsi, qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov ecx, 0xfffffff6
call rsi
mov qword [rsp + 0xf0], rax
mov ecx, 0xfffffff5
call rsi
mov qword [rsp + 0xf8], rax
mov ecx, 0xfffffff4
call rsi
mov qword [rsp + 0x100], rax
xor eax, eax
mov qword [rsp + 0x1a0], rax
movaps xmmword [rsp + 0x190], xmm7
mov qword [rsp + 0x188], rbp
lea rdi, [0x1401760d0]
mov qword [rsp + 0x178], rdi
mov qword [rsp + 0x180], rax
mov byte [rsp + 0x188], 0
mov eax, dword [0x1401abd20]
mov ecx, dword [0x1401a659c]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14007ad35
mov eax, dword [0x1401abd30]
mov ecx, dword [0x1401a659c]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14007ad7c
mov rax, qword [0x1401abd18]
test rax, rax
je 0x14007a0fc
cmp qword [0x1401abd28], 0
je 0x14007a0fc
mov dword [rsp + 0xa0], 0x70
lea r9, [rsp + 0x80]
mov qword [r9], rbp
xor ecx, ecx
mov edx, 1
xor r8d, r8d
call qword [0x1401c0010]
test eax, eax
je 0x14007a13b
mov ecx, 2
call fcn.14006d690
test al, al
je 0x14007a4cc
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x200]
mov rcx, rsi
mov r8d, 0x1a1
mov r9d, 2
call fcn.14006d740
lea rcx, [rsp + 0x210]
lea rdx, str.InitializeProcThreadAttributeList__size__succeeded__expected_failure
mov r8d, 0x44
call fcn.14001df3c
mov rcx, rsi
call fcn.14006dbd0
jmp 0x14007a4cc
mov ecx, 2
call fcn.14006d690
xor esi, esi
test al, al
je 0x14007a528
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x200]
mov rcx, rsi
mov r8d, 0x16f
mov r9d, 2
call fcn.14006e750
lea rcx, [rsp + 0x210]
lea rdx, [0x14018102f]
mov r8d, inet_ntoa
call fcn.14001df3c
mov rcx, rsi
call fcn.14006e840
xor esi, esi
jmp 0x14007a528
mov dword [rsp + 0xa0], 0x68
xor r14d, r14d
xor esi, esi
mov rax, qword [rsp + 0x58]
mov rdx, qword [rax]
movzx r8d, byte [rdx + 0x17]
test r8b, r8b
js 0x14007a129
cmp r8b, 0xc
jb 0x14007a134
jmp 0x14007a1eb
cmp qword [rdx + 8], 0xc
jae 0x14007a1e7
xor ebx, ebx
jmp 0x14007a244
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x14007a470
lea rsi, [rsp + 0x80]
mov rcx, qword [rsi]
call fcn.14013655c
mov r14, rax
mov qword [rsp + 0x108], rax
mov rax, qword [0x1401abd18]
mov rcx, r14
mov edx, 1
xor r8d, r8d
mov r9, rsi
call qword [0x1401c0010]
test eax, eax
je 0x14007a591
lea rsi, [rsp + 0x178]
mov rcx, rsi
call fcn.14007b32a
mov qword [rsi + 8], r14
lea rbp, [rsp + 0x190]
mov edx, 9
mov rcx, rbp
call fcn.14007b114
mov rsi, qword [rbp + 8]
cmp rsi, qword [rbp + 0x10]
je 0x14007a5e9
mov rax, qword [0x14019f048]
mov qword [rsi], rax
add rsi, 8
mov qword [rsp + 0x198], rsi
mov rdi, rsi
movabs r8, 0x1fffffffffffffff
jmp 0x14007a6dc
mov r8, qword [rdx + 8]
add r8, 0xfffffffffffffff4
lea rax, [rdx + 0x18]
mov qword [rsp + 0x20], rax
mov rcx, rbx
mov r9, 0xffffffffffffffff
call fcn.140044fac
cmp byte [rsp + 0x217], 0
jns 0x14007a219
mov rbx, qword [rsp + 0x200]
lea rdx, str.rundll32.exe
mov rcx, rbx
call fcn.14014e394
test eax, eax
sete bl
cmp byte [rsp + 0x217], 0
jns 0x14007a244
mov rcx, qword [rsp + 0x200]
call fcn.140136524
mov qword [rsp + 0x90], rbp
movaps xmmword [rsp + 0x80], xmm6
cmp byte [rsp + 0x1f7], 0
jns 0x14007a266
mov r15, qword [rsp + 0x1e0]
test bl, bl
je 0x14007a26e
xor ecx, ecx
jmp 0x14007a27f
mov rax, qword [rsp + 0x58]
mov rcx, qword [rax]
cmp byte [rcx + 0x17], 0
jns 0x14007a27f
mov rcx, qword [rcx]
lea rax, [rsp + 0x80]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x40], r13
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], 1
mov rdx, r15
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x14007a405
mov rcx, qword [rsp + 0x88]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, eax
mov ecx, 1
call fcn.14006d690
test al, al
mov r13, qword [rsp + 0x58]
je 0x14007a331
test esi, esi
jne 0x14007a331
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x200]
mov rcx, rsi
mov r8d, 0x1f2
mov r9d, 1
call fcn.14006e750
lea rcx, [rsp + 0x210]
lea rdx, str.CloseHandle_thread
mov r8d, 0x12
call fcn.14001df3c
mov rcx, rsi
call fcn.14006e840
mov rcx, qword [rsp + 0x80]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, eax
mov ecx, 1
call fcn.14006d690
test al, al
je 0x14007a3a1
test esi, esi
jne 0x14007a3a1
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x200]
mov rcx, rsi
mov r8d, 0x1f5
mov r9d, 1
call fcn.14006e750
lea rcx, [rsp + 0x210]
lea rdx, str.CloseHandle_process
mov r8d, 0x13
call fcn.14001df3c
mov rcx, rsi
call fcn.14006e840
mov ecx, 0xc0
add rcx, qword [r13]
lea rdx, [rsp + 0x200]
mov qword [rdx], 0xffffffffffffffff
call fcn.140071132
lea rdx, [0x1401800db]
lea rsi, [rsp + 0x200]
mov r8d, 0x804
mov rcx, rsi
call fcn.140139530
mov dword [rsi], 2
xorps xmm0, xmm0
lea r8, [rsp + 0x70]
movaps xmmword [r8], xmm0
mov ecx, 0xa8
add rcx, qword [r13]
mov rdx, rsi
call fcn.1400b4904
mov esi, eax
jmp 0x14007a4d6
mov ecx, 2
call fcn.14006d690
xor esi, esi
test al, al
mov r13, qword [rsp + 0x58]
je 0x14007a4d6
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x200]
mov rcx, rsi
mov r8d, 0x1ed
mov r9d, 2
call fcn.14006e750
lea rcx, [rsp + 0x210]
lea rdx, str.CreateProcess
mov r8d, 0xd
call fcn.14001df3c
mov rcx, rsi
call fcn.14006e840
xor esi, esi
jmp 0x14007a4d6
mov ecx, 2
call fcn.14006d690
test al, al
je 0x14007a4cc
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x200]
mov rcx, rsi
mov r8d, 0x1a5
mov r9d, 2
call fcn.14006e750
lea rcx, [rsp + 0x210]
lea rdx, str.InitializeProcThreadAttributeList__size_
mov r8d, 0x28
call fcn.14001df3c
mov rcx, rsi
call fcn.14006e840
xor r14d, r14d
xor esi, esi
mov r13, qword [rsp + 0x58]
mov qword [rsp + 0x178], rdi
cmp byte [rsp + 0x188], 0
jne 0x14007ade6
lea rcx, [rsp + 0x178]
call fcn.14007b32a
test r14, r14
je 0x14007a506
mov rcx, r14
call fcn.140136564
mov rcx, qword [rsp + 0x190]
test rcx, rcx
je 0x14007a520
mov qword [rsp + 0x198], rcx
call fcn.140136524
mov rcx, r12
call fcn.14009b82e
cmp byte [rsp + 0x1f7], 0
jns 0x14007a53f
mov rcx, qword [rsp + 0x1e0]
call fcn.140136524
cmp sil, 1
mov eax, 1
adc rax, 0
mov qword [0x1401abcf8], rax
mov rcx, r13
call fcn.14007af00
mov rcx, qword [rsp + 0xa08]
xor rcx, rsp
call fcn.140136dd0
mov eax, esi
movaps xmm6, xmmword [rsp + 0xa10]
movaps xmm7, xmmword [rsp + 0xa20]
add rsp, 0xa38
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov ecx, 2
call fcn.14006d690
test al, al
je 0x14007a4cf
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x200]
mov rcx, rsi
mov r8d, 0x1b0
mov r9d, 2
call fcn.14006e750
lea rcx, [rsp + 0x210]
lea rdx, str.InitializeProcThreadAttributeList
mov r8d, 0x21
jmp 0x14007ad23
mov rdx, qword [rsp + 0x190]
sub rsi, rdx
mov rdi, rsi
sar rdi, 3
lea rax, [rdi + 1]
movabs r8, 0x1fffffffffffffff
cmp rax, r8
ja 0x14007add1
mov rbp, rsi
sar rbp, 2
cmp rbp, rax
cmovb rbp, rax
movabs rax, 0xfffffffffffffff
cmp rdi, rax
cmovae rbp, r8
test rbp, rbp
mov qword [rsp + 0x50], rdx
je 0x14007a662
cmp rbp, r8
ja 0x14007adde
lea rcx, [rbp*8]
call fcn.1401364e8
movabs r8, 0x1fffffffffffffff
mov rdx, qword [rsp + 0x50]
jmp 0x14007a664
xor eax, eax
lea rbp, [rax + rbp*8]
mov rcx, qword [0x14019f048]
lea rdi, [rax + rdi*8]
add rdi, 8
mov qword [rdi - 8], rcx
test rsi, rsi
jle 0x14007a6a5
mov rcx, rax
mov rdx, qword [rsp + 0x50]
mov r8, rsi
mov rsi, rax
call fcn.140139530
mov rax, rsi
mov rdx, qword [rsp + 0x50]
movabs r8, 0x1fffffffffffffff
mov qword [rsp + 0x190], rax
mov qword [rsp + 0x198], rdi
mov qword [rsp + 0x1a0], rbp
test rdx, rdx
je 0x14007a6dc
mov rcx, rdx
call fcn.140136524
movabs r8, 0x1fffffffffffffff
mov rdi, qword [rsp + 0x198]
cmp rdi, qword [rsp + 0x1a0]
je 0x14007a704
mov rax, qword [0x14019f050]
mov qword [rdi], rax
add rdi, 8
mov qword [rsp + 0x198], rdi
mov rsi, rdi
jmp 0x14007a7ed
mov rdx, qword [rsp + 0x190]
sub rdi, rdx
mov rsi, rdi
sar rsi, 3
lea rax, [rsi + 1]
cmp rax, r8
ja 0x14007add1
mov rbp, rdi
sar rbp, 2
cmp rbp, rax
cmovb rbp, rax
movabs rax, 0xfffffffffffffff
cmp rsi, rax
cmovae rbp, r8
test rbp, rbp
mov qword [rsp + 0x50], rdx
je 0x14007a773
cmp rbp, r8
ja 0x14007adde
lea rcx, [rbp*8]
call fcn.1401364e8
movabs r8, 0x1fffffffffffffff
mov rdx, qword [rsp + 0x50]
jmp 0x14007a775
xor eax, eax
lea rbp, [rax + rbp*8]
mov rcx, qword [0x14019f050]
lea rsi, [rax + rsi*8]
add rsi, 8
mov qword [rsi - 8], rcx
test rdi, rdi
jle 0x14007a7b6
mov rcx, rax
mov rdx, qword [rsp + 0x50]
mov r8, rdi
mov rdi, rax
call fcn.140139530
mov rax, rdi
mov rdx, qword [rsp + 0x50]
movabs r8, 0x1fffffffffffffff
mov qword [rsp + 0x190], rax
mov qword [rsp + 0x198], rsi
mov qword [rsp + 0x1a0], rbp
test rdx, rdx
je 0x14007a7ed
mov rcx, rdx
call fcn.140136524
movabs r8, 0x1fffffffffffffff
mov rsi, qword [rsp + 0x198]
cmp rsi, qword [rsp + 0x1a0]
je 0x14007a815
mov rax, qword [0x14019f058]
mov qword [rsi], rax
add rsi, 8
mov qword [rsp + 0x198], rsi
mov rbp, rsi
jmp 0x14007a8fe
mov rdx, qword [rsp + 0x190]
sub rsi, rdx
mov rbp, rsi
sar rbp, 3
lea rax, [rbp + 1]
cmp rax, r8
ja 0x14007add1
mov rdi, rsi
sar rdi, 2
cmp rdi, rax
cmovb rdi, rax
movabs rax, 0xfffffffffffffff
cmp rbp, rax
cmovae rdi, r8
test rdi, rdi
mov qword [rsp + 0x50], rdx
je 0x14007a884
cmp rdi, r8
ja 0x14007adde
lea rcx, [rdi*8]
call fcn.1401364e8
movabs r8, 0x1fffffffffffffff
mov rdx, qword [rsp + 0x50]
jmp 0x14007a886
xor eax, eax
lea rdi, [rax + rdi*8]
mov rcx, qword [0x14019f058]
lea rbp, [rax + rbp*8]
add rbp, 8
mov qword [rbp - 8], rcx
test rsi, rsi
jle 0x14007a8c7
mov rcx, rax
mov rdx, qword [rsp + 0x50]
mov r8, rsi
mov rsi, rax
call fcn.140139530
mov rax, rsi
mov rdx, qword [rsp + 0x50]
movabs r8, 0x1fffffffffffffff
mov qword [rsp + 0x190], rax
mov qword [rsp + 0x198], rbp
mov qword [rsp + 0x1a0], rdi
test rdx, rdx
je 0x14007a8fe
mov rcx, rdx
call fcn.140136524
movabs r8, 0x1fffffffffffffff
mov rbp, qword [rsp + 0x198]
cmp rbp, qword [rsp + 0x1a0]
je 0x14007a927
mov rax, qword [0x14019f060]
mov qword [rbp], rax
add rbp, 8
mov qword [rsp + 0x198], rbp
mov rdi, rbp
jmp 0x14007aa1a
mov rax, qword [rsp + 0x190]
mov qword [rsp + 0x50], rax
sub rbp, rax
mov rsi, rbp
sar rsi, 3
lea rax, [rsi + 1]
cmp rax, r8
ja 0x14007add1
mov rdi, rbp
sar rdi, 2
cmp rdi, rax
cmovb rdi, rax
movabs rax, 0xfffffffffffffff
cmp rsi, rax
cmovae rdi, r8
test rdi, rdi
je 0x14007a994
cmp rdi, r8
ja 0x14007adde
lea rcx, [rdi*8]
call fcn.1401364e8
mov rdx, rax
movabs r8, 0x1fffffffffffffff
jmp 0x14007a996
xor edx, edx
lea rcx, [rdx + rdi*8]
mov rax, qword [0x14019f060]
lea rdi, [rdx + rsi*8]
add rdi, 8
mov qword [rdi - 8], rax
test rbp, rbp
mov rsi, qword [rsp + 0x50]
jle 0x14007a9e3
mov qword [rsp + 0x68], rcx
mov rcx, rdx
mov qword [rsp + 0x60], rdx
mov rdx, rsi
mov r8, rbp
call fcn.140139530
mov rdx, qword [rsp + 0x60]
movabs r8, 0x1fffffffffffffff
mov rcx, qword [rsp + 0x68]
mov qword [rsp + 0x190], rdx
mov qword [rsp + 0x198], rdi
mov qword [rsp + 0x1a0], rcx
test rsi, rsi
je 0x14007aa1a
mov rcx, rsi
call fcn.140136524
movabs r8, 0x1fffffffffffffff
mov rdi, qword [rsp + 0x198]
mov rax, qword [rsp + 0x58]
mov rcx, qword [rax]
cmp rdi, qword [rsp + 0x1a0]
movabs rbp, 0xaaaaaaaaaaaaaaaa
je 0x14007aa54
mov rax, qword [rcx + 0xc8]
mov qword [rdi], rax
add rdi, 8
mov qword [rsp + 0x198], rdi
mov rsi, rdi
jmp 0x14007ab57
mov rdx, qword [rsp + 0x190]
sub rdi, rdx
mov rbp, rdi
sar rbp, 3
lea rax, [rbp + 1]
cmp rax, r8
ja 0x14007add1
mov rsi, rdi
sar rsi, 2
cmp rsi, rax
cmovb rsi, rax
movabs rax, 0xfffffffffffffff
cmp rbp, rax
cmovae rsi, r8
test rsi, rsi
je 0x14007aacd
mov qword [rsp + 0x60], rcx
mov qword [rsp + 0x50], rdx
cmp rsi, r8
ja 0x14007adde
lea rcx, [rsi*8]
call fcn.1401364e8
movabs r8, 0x1fffffffffffffff
mov rdx, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x60]
jmp 0x14007aacf
xor eax, eax
lea r9, [rax + rsi*8]
mov rcx, qword [rcx + 0xc8]
lea rsi, [rax + rbp*8]
add rsi, 8
mov qword [rsi - 8], rcx
test rdi, rdi
jle 0x14007ab16
mov rcx, rax
mov rbp, rdx
mov r8, rdi
mov rdi, rax
mov qword [rsp + 0x50], r9
call fcn.140139530
mov r9, qword [rsp + 0x50]
mov rax, rdi
mov rdx, rbp
movabs r8, 0x1fffffffffffffff
mov qword [rsp + 0x190], rax
mov qword [rsp + 0x198], rsi
mov qword [rsp + 0x1a0], r9
test rdx, rdx
movabs rbp, 0xaaaaaaaaaaaaaaaa
je 0x14007ab57
mov rcx, rdx
call fcn.140136524
movabs r8, 0x1fffffffffffffff
mov rsi, qword [rsp + 0x198]
cmp rsi, qword [rsp + 0x1a0]
lea rdi, [0x1401760d0]
je 0x14007ab7c
mov qword [rsi], r12
add rsi, 8
mov qword [rsp + 0x198], rsi
jmp 0x14007ac56
mov rdx, qword [rsp + 0x190]
sub rsi, rdx
mov rcx, rsi
sar rcx, 3
lea rax, [rcx + 1]
cmp rax, r8
ja 0x14007add1
mov rbp, rsi
sar rbp, 2
cmp rbp, rax
cmovb rbp, rax
movabs rax, 0xfffffffffffffff
cmp rcx, rax
cmovae rbp, r8
test rbp, rbp
mov qword [rsp + 0x50], rdx
je 0x14007abee
mov qword [rsp + 0x60], rcx
cmp rbp, r8
ja 0x14007adde
lea rcx, [rbp*8]
call fcn.1401364e8
mov rdi, rax
mov rdx, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x60]
jmp 0x14007abf0
xor edi, edi
lea rax, [rdi + rbp*8]
lea rbp, [rdi + rcx*8]
add rbp, 8
mov qword [rbp - 8], r12
test rsi, rsi
jle 0x14007ac20
mov rcx, rdi
mov rdx, qword [rsp + 0x50]
mov r8, rsi
mov rsi, rax
call fcn.140139530
mov rax, rsi
mov rdx, qword [rsp + 0x50]
mov qword [rsp + 0x190], rdi
mov qword [rsp + 0x198], rbp
mov qword [rsp + 0x1a0], rax
test rdx, rdx
lea rdi, [0x1401760d0]
movabs rbp, 0xaaaaaaaaaaaaaaaa
je 0x14007ac56
mov rcx, rdx
call fcn.140136524
mov rdx, qword [rsp + 0xf0]
lea rsi, [rsp + 0x190]
mov rcx, rsi
call fcn.14007b1b1
mov rdx, qword [rsp + 0xf8]
mov rcx, rsi
call fcn.14007b1b1
mov rdx, qword [rsp + 0x100]
mov rcx, rsi
call fcn.14007b1b1
mov rax, qword [0x1401abd28]
mov r9, qword [rsi]
mov rdx, qword [rsi + 8]
sub rdx, r9
mov rcx, qword [rsp + 0x108]
xorps xmm0, xmm0
movups xmmword [rsp + 0x28], xmm0
mov qword [rsp + 0x20], rdx
mov r8d, 0x20002
xor edx, edx
call qword [0x1401c0010]
test eax, eax
je 0x14007acd0
mov esi, 0x80000
jmp 0x14007a10c
mov ecx, 2
call fcn.14006d690
test al, al
je 0x14007a4cf
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x200]
mov rcx, rsi
mov r8d, 0x1cb
mov r9d, 2
call fcn.14006e750
lea rcx, [rsp + 0x210]
lea rdx, str.UpdateProcThreadAttribute
mov r8d, 0x19
call fcn.14001df3c
mov rcx, rsi
call fcn.14006e840
jmp 0x14007a4cf
lea rcx, [0x1401abd20]
call fcn.140136640
cmp dword [0x1401abd20], 0xffffffff
jne 0x140079fc6
lea rcx, [0x14017c8be]
lea rdx, str.::InitializeProcThreadAttributeList
xor r8d, r8d
call fcn.140077ba8
mov qword [0x1401abd18], rax
lea rcx, [0x1401abd20]
call fcn.1401366d8
jmp 0x140079fc6
lea rcx, [0x1401abd30]
call fcn.140136640
cmp dword [0x1401abd30], 0xffffffff
jne 0x140079feb
cmp qword [0x1401abd18], 0
je 0x14007adb7
lea rcx, [0x14017c8be]
lea rdx, str.::UpdateProcThreadAttribute
xor r8d, r8d
call fcn.140077ba8
jmp 0x14007adb9
xor eax, eax
mov qword [0x1401abd28], rax
lea rcx, [0x1401abd30]
call fcn.1401366d8
jmp 0x140079feb
lea rcx, [rsp + 0x190]
call fcn.14001ba1a
call fcn.14014b3e0
int3
int3