Function at 0x1800c1090
Capabilities:
Create process on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x840]
sub rsp, 0x940
mov rax, qword [0x1801df668]
xor rax, rsp
mov qword [rbp + 0x838], rax
mov r14, rcx
mov qword [rbp - 0x78], rcx
mov qword [rbp + 0x90], rcx
xor r13d, r13d
mov r12d, r13d
mov dword [rsp + 0x50], r13d
call fcn.1800e19d0
test al, al
je 0x1800c113d
mov dword [rsp + 0x20], 4
mov r9d, 0x170
lea r8, str..._src_4c3e2d1c10_1c4f0a1e28.clean_client_crashpad_client_win.cc
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace::StartHandlerProcess_class_std::unique_ptr_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData_struct_std::default_delete_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData____
lea rcx, [rbp + 0x488]
call fcn.1800daee0
nop
mov r12d, 1
mov dword [rsp + 0x50], r12d
lea rdx, str.Check_failed:__IsThreadInLoaderLock__
mov rcx, rax
call fcn.1800aac20
mov rcx, rax
lea rdx, [0x1801ae8cc]
call fcn.1800aac20
nop
test r12b, 1
je 0x1800c1153
and r12d, 0xfffffffe
lea rcx, [rbp + 0x488]
call fcn.1800db070
mov byte [rsp + 0x58], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x588], xmm0
movdqa xmm1, xmmword [0x18015e0c0]
movdqu xmmword [rbp + 0x598], xmm1
mov word [rbp + 0x588], r13w
lea rdx, [rbp + 0x588]
mov rcx, qword [r14]
call fcn.1800e12f0
mov rax, qword [r14]
mov rbx, qword [rax + 0x90]
mov rdi, qword [rax + 0x98]
cmp rbx, rdi
je 0x1800c1236
mov rax, rbx
cmp qword [rbx + 0x18], 0x10
jb 0x1800c11b0
mov rax, qword [rbx]
mov qword [rbp - 0x20], rax
mov rax, qword [rbx + 0x10]
mov qword [rbp - 0x18], rax
movaps xmm0, xmmword [rbp - 0x20]
movdqa xmmword [rbp + 0xa0], xmm0
lea rdx, [rbp + 0xa0]
lea rcx, [rbp + 0x6f8]
call fcn.1800df4e0
nop
lea rdx, [rbp + 0x588]
mov rcx, rax
call fcn.1800e12f0
nop
mov r8, qword [rbp + 0x710]
cmp r8, 8
jb 0x1800c120f
inc r8
mov rdx, qword [rbp + 0x6f8]
lea rcx, [rbp + 0x6f8]
call fcn.1800bfa00
mov qword [rbp + 0x708], r13
mov qword [rbp + 0x710], 7
mov word [rbp + 0x6f8], r13w
add rbx, 0x20
cmp rbx, rdi
jne 0x1800c11a3
mov r8, qword [r14]
cmp qword [r8 + 0x30], 0
je 0x1800c1332
add r8, 0x20
xorps xmm0, xmm0
movups xmmword [rbp + 0x6a8], xmm0
mov qword [rbp + 0x6b8], 8
mov qword [rbp + 0x6c0], reloc.WS2_32.dll_ntohs
movabs rax, 0x6573616261746164
mov qword [rbp + 0x6a8], rax
lea rdx, [rbp + 0x6a8]
lea rcx, [rbp + 0x718]
call fcn.1800c0340
nop
lea rdx, [rbp + 0x588]
mov rcx, rax
call fcn.1800e12f0
nop
mov r8, qword [rbp + 0x730]
cmp r8, 8
jb 0x1800c12c0
inc r8
mov rdx, qword [rbp + 0x718]
lea rcx, [rbp + 0x718]
call fcn.1800bfa00
movdqa xmm0, xmmword [0x18015e0c0]
movdqu xmmword [rbp + 0x728], xmm0
mov word [rbp + 0x718], r13w
mov rdx, qword [rbp + 0x6c0]
cmp rdx, 0x10
jb 0x1800c1319
inc rdx
mov rcx, qword [rbp + 0x6a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800c1314
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800c2e16
call fcn.1800c38fc
mov qword [rbp + 0x6b8], r13
mov qword [rbp + 0x6c0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x6a8], 0
mov r8, qword [r14]
add r8, 0x40
cmp qword [r8 + 0x10], 0
je 0x1800c142a
xorps xmm0, xmm0
movups xmmword [rbp + 0x5e8], xmm0
mov qword [rbp + 0x5f8], select
mov qword [rbp + 0x600], reloc.WS2_32.dll_ntohs
movsd xmm0, qword [str.metrics_dir]
movsd qword [rbp + 0x5e8], xmm0
movzx eax, word [0x1801b1198]
mov word [rbp + 0x5f0], ax
movzx eax, byte [0x1801b119a]
mov byte [rbp + 0x5f2], al
lea rdx, [rbp + 0x5e8]
lea rcx, [rbp + 0x738]
call fcn.1800c0340
nop
lea rdx, [rbp + 0x588]
mov rcx, rax
call fcn.1800e12f0
nop
mov r8, qword [rbp + 0x750]
cmp r8, 8
jb 0x1800c13d6
inc r8
mov rdx, qword [rbp + 0x738]
lea rcx, [rbp + 0x738]
call fcn.1800bfa00
movdqa xmm0, xmmword [0x18015e0c0]
movdqu xmmword [rbp + 0x748], xmm0
mov word [rbp + 0x738], r13w
mov r8, qword [rbp + 0x600]
cmp r8, 0x10
jb 0x1800c1411
inc r8
mov rdx, qword [rbp + 0x5e8]
lea rcx, [rbp + 0x5e8]
call fcn.1800b9f20
mov qword [rbp + 0x5f8], r13
mov qword [rbp + 0x600], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x5e8], 0
mov rax, qword [r14]
cmp qword [rax + 0x70], 0
je 0x1800c1548
lea rcx, [rax + 0x60]
cmp qword [rax + 0x78], 0x10
jb 0x1800c1447
mov rcx, qword [rax + 0x60]
mov qword [rbp - 0x10], rcx
mov rax, qword [rax + 0x70]
mov qword [rbp - 8], rax
movaps xmm0, xmmword [rbp - 0x10]
movdqa xmmword [rbp + 0xb0], xmm0
lea rdx, [rbp + 0xb0]
lea rcx, [rbp + 0x818]
call fcn.1800df4e0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x688], xmm0
mov qword [rbp + 0x698], 3
mov qword [rbp + 0x6a0], reloc.WS2_32.dll_ntohs
movzx ecx, word [0x1801adfe4]
mov word [rbp + 0x688], cx
movzx ecx, byte [0x1801adfe6]
mov byte [rbp + 0x68a], cl
mov r8, rax
lea rdx, [rbp + 0x688]
lea rcx, [rbp + 0x7f8]
call fcn.1800c0340
nop
lea rdx, [rbp + 0x588]
mov rcx, rax
call fcn.1800e12f0
nop
lea rcx, [rbp + 0x7f8]
call fcn.1800b6260
nop
mov rdx, qword [rbp + 0x6a0]
cmp rdx, 0x10
jb 0x1800c1523
inc rdx
mov rcx, qword [rbp + 0x688]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800c151e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800c2e1c
call fcn.1800c38fc
mov qword [rbp + 0x698], r13
mov qword [rbp + 0x6a0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x688], 0
lea rcx, [rbp + 0x818]
call fcn.1800b6260
mov rbx, qword [r14]
mov rbx, qword [rbx + 0x80]
mov rbx, qword [rbx]
xor eax, eax
mov byte [rsp + 0x59], al
lea edx, [rax + 0x16]
lea ecx, [rax + 0xa]
cmp byte [rbx + 0x19], al
jne 0x1800c19b8
movabs rcx, 0x8000000000000000
movabs rax, 0x7fffffffffffffff
lea r14, [rbx + 0x20]
mov r15, qword [r14 + 0x10]
cmp r15, rax
je 0x1800c2e46
mov qword [rbp - 0x80], r14
cmp qword [r14 + 0x18], 0x10
jb 0x1800c15ab
mov rax, qword [r14]
mov qword [rbp - 0x80], rax
movabs rax, 0x7fffffffffffffff
xorps xmm0, xmm0
movups xmmword [rbp + 0x608], xmm0
mov qword [rbp + 0x618], r13
mov qword [rbp + 0x620], r13
lea r13, [r15 + 1]
mov edi, reloc.WS2_32.dll_ntohs
lea rsi, [rbp + 0x608]
cmp r13, rdi
jbe 0x1800c1647
mov rdi, r13
or rdi, 0xf
cmp rdi, rax
jbe 0x1800c15ed
mov rdi, rax
lea rax, [rcx + 0x27]
jmp 0x1800c160f
cmp rdi, 0x16
cmovb rdi, rdx
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x1800c162e
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1800c2e22
mov rcx, rax
call fcn.1800c38b8
test rax, rax
je 0x1800c2e40
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x1800c1640
test rcx, rcx
je 0x1800c163d
call fcn.1800c38b8
mov rsi, rax
jmp 0x1800c1640
mov rsi, rcx
mov qword [rbp + 0x608], rsi
mov qword [rbp + 0x618], r13
mov qword [rbp + 0x620], rdi
mov r8, r15
mov rdx, qword [rbp - 0x80]
mov rcx, rsi
call fcn.1801258c0
mov byte [rsi + r15], 0x3d
mov byte [rsi + r13], 0
bts r12d, 0xd
lea rdx, [r14 + 0x20]
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0x10
jb 0x1800c1685
mov rdx, qword [rdx]
lea rcx, [rbp + 0x608]
call fcn.1800b5c40
xorps xmm0, xmm0
movups xmmword [rbp + 0x5c8], xmm0
xor r13d, r13d
mov qword [rbp + 0x5d8], r13
mov qword [rbp + 0x5e0], r13
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x5c8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x5d8], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], r13b
bts r12d, 0xc
lea rax, [rbp + 0x5c8]
cmp qword [rbp + 0x5e0], 0x10
cmovae rax, qword [rbp + 0x5c8]
mov qword [rbp], rax
mov rax, qword [rbp + 0x5d8]
mov qword [rbp + 8], rax
movaps xmm0, xmmword [rbp]
movdqa xmmword [rbp + 0xc0], xmm0
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0x798]
call fcn.1800df4e0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x628], xmm0
mov qword [rbp + 0x638], 0xa
mov qword [rbp + 0x640], reloc.WS2_32.dll_ntohs
movsd xmm0, qword [str.annotation]
movsd qword [rbp + 0x628], xmm0
movzx ecx, word [0x1801b17f8]
mov word [rbp + 0x630], cx
mov r8, rax
lea rdx, [rbp + 0x628]
lea rcx, [rbp + 0x758]
call fcn.1800c0340
nop
lea rdx, [rbp + 0x588]
mov rcx, rax
call fcn.1800e12f0
nop
mov rdx, qword [rbp + 0x770]
cmp rdx, 8
jb 0x1800c17c6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x758]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800c17c1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800c2e28
call fcn.1800c38fc
mov qword [rbp + 0x768], r13
mov qword [rbp + 0x770], 7
mov word [rbp + 0x758], r13w
mov rdx, qword [rbp + 0x640]
cmp rdx, 0x10
jb 0x1800c1821
inc rdx
mov rcx, qword [rbp + 0x628]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800c181c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800c2e2e
call fcn.1800c38fc
mov qword [rbp + 0x638], r13
mov qword [rbp + 0x640], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x628], 0
mov rdx, qword [rbp + 0x7b0]
cmp rdx, 8
jb 0x1800c1880
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x798]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800c187b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800c2e34
call fcn.1800c38fc
mov qword [rbp + 0x7a8], r13
mov qword [rbp + 0x7b0], 7
mov word [rbp + 0x798], r13w
mov rdx, qword [rbp + 0x5e0]
cmp rdx, 0x10
jb 0x1800c18db
inc rdx
mov rcx, qword [rbp + 0x5c8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800c18d6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800c2e3a
call fcn.1800c38fc
mov qword [rbp + 0x5d8], r13
mov qword [rbp + 0x5e0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x5c8], 0
mov rdx, qword [rbp + 0x620]
cmp rdx, 0x10
jb 0x1800c1935
inc rdx
mov rcx, qword [rbp + 0x608]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800c1930
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800c2e40
call fcn.1800c38fc
mov qword [rbp + 0x618], r13
mov qword [rbp + 0x620], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x608], 0
mov rax, qword [rbx + 0x10]
cmp byte [rax + 0x19], 0
je 0x1800c197a
mov rax, qword [rbx + 8]
cmp byte [rax + 0x19], 0
jne 0x1800c1975
cmp rbx, qword [rax + 0x10]
jne 0x1800c1975
mov rbx, rax
mov rax, qword [rax + 8]
cmp byte [rax + 0x19], 0
je 0x1800c1962
mov rbx, rax
jmp 0x1800c199f
mov rbx, rax
mov rcx, qword [rax]
cmp byte [rcx + 0x19], 0
jne 0x1800c199f
nop word [rax + rax]
mov rbx, rcx
mov rax, qword [rcx]
mov rcx, rax
cmp byte [rax + 0x19], 0
je 0x1800c1990
cmp byte [rbx + 0x19], 0
jne 0x1800c19af
mov edx, reloc.WLDAP32.dll_Ordinal_22
jmp 0x1800c156a
mov r14, qword [rbp - 0x78]
mov ecx, 0xa
mov rax, qword [r14]
mov rbx, qword [rax + 0xa8]
mov rdi, qword [rax + 0xb0]
cmp rbx, rdi
je 0x1800c1b00
xorps xmm0, xmm0
movups xmmword [rbp + 0x648], xmm0
mov qword [rbp + 0x658], rcx
mov qword [rbp + 0x660], reloc.WS2_32.dll_ntohs
movsd xmm0, qword [str.attachment]
movsd qword [rbp + 0x648], xmm0
movzx eax, word [0x1801af8f0]
mov word [rbp + 0x650], ax
mov r8, rbx
lea rdx, [rbp + 0x648]
lea rcx, [rbp + 0x778]
call fcn.1800c0340
nop
lea rdx, [rbp + 0x588]
mov rcx, rax
call fcn.1800e12f0
nop
mov rdx, qword [rbp + 0x790]
cmp rdx, 8
jb 0x1800c1a79
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x778]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800c1a74
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800c2e4c
call fcn.1800c38fc
mov qword [rbp + 0x788], r13
mov qword [rbp + 0x790], 7
mov word [rbp + 0x778], r13w
mov rdx, qword [rbp + 0x660]
cmp rdx, 0x10
jb 0x1800c1ad4
inc rdx
mov rcx, qword [rbp + 0x648]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800c1acf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800c2e52
call fcn.1800c38fc
mov qword [rbp + 0x658], r13
mov qword [rbp + 0x660], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x648], 0
add rbx, 0x20
cmp rbx, rdi
je 0x1800c1b00
mov ecx, 0xa
jmp 0x1800c19d2
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
mov edx, 1
mov ecx, 0x1f0fff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rdi, rax
mov qword [rsp + 0x78], rax
test rax, rax
jne 0x1800c1c27
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 2
mov r9d, 0x197
lea r8, str..._src_4c3e2d1c10_1c4f0a1e28.clean_client_crashpad_client_win.cc
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace::StartHandlerProcess_class_std::unique_ptr_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData_struct_std::default_delete_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData____
lea rcx, [rbp + 0x228]
call fcn.1800dbc60
nop
or r12d, 2
mov dword [rsp + 0x50], r12d
lea rdx, [0x1801afee8]
mov rcx, rax
call fcn.1800aac20
nop
test r12b, 2
je 0x1800c1b91
and r12d, 0xfffffffd
mov dword [rsp + 0x50], r12d
lea rcx, [rbp + 0x228]
call fcn.1800dbce0
nop
mov rdx, qword [rbp + 0x5a0]
cmp rdx, 8
jb 0x1800c1bd7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x588]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800c1bd2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800c2e58
call fcn.1800c38fc
movdqa xmm0, xmmword [0x18015e0c0]
movdqu xmmword [rbp + 0x598], xmm0
mov word [rbp + 0x588], r13w
bt r12d, 0xa
jae 0x1800c1c0c
btr r12d, 0xa
mov dword [rsp + 0x50], r12d
lea rcx, [rbp + 0x120]
call fcn.1800db070
nop
mov qword [0x1801e4ce0], 2
mov rcx, r14
call fcn.1800c3050
xor al, al
jmp 0x1800c2de0
mov rax, qword [r14]
mov rcx, qword [rax + 0xe0]
lea rax, [0x1801e4ce8]
mov qword [rsp + 0x40], rax
lea rax, [0x1801e4cd0]
mov qword [rsp + 0x38], rax
lea rax, [0x1801e4cb8]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rcx
mov r9, qword [0x1801df05c]
mov r8, qword [0x1801df054]
mov rdx, qword [0x1801df040]
lea rcx, [rbp + 0x330]
call fcn.1800e18d0
lea rdx, [rbp + 0x7d8]
lea rcx, [rbp + 0x330]
call fcn.1800e1910
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x668], xmm0
mov edx, reloc.WLDAP32.dll_Ordinal_32
lea rcx, [rbp + 0x668]
call fcn.1800b5b00
mov qword [rbp + 0x668], rax
mov qword [rbp + 0x678], reloc.WLDAP32.dll_Ordinal_22
mov qword [rbp + 0x680], Ordinal_32
movups xmm0, xmmword [str.__initial_client_data]
movups xmmword [rax], xmm0
mov ecx, dword [0x1801b5890]
mov dword [rax + 0x10], ecx
movzx ecx, word [0x1801b5894]
mov word [rax + 0x14], cx
mov byte [rax + 0x16], 0
mov r9, rbx
lea r8, [rbp + 0x668]
movzx edx, byte [rsp + 0x59]
lea rcx, [rbp + 0x6c8]
call fcn.18007b480
bts r12d, 0xb
mov dword [rsp + 0x50], r12d
lea rax, [rbp + 0x6c8]
cmp qword [rbp + 0x6e0], 0x10
cmovae rax, qword [rbp + 0x6c8]
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x6d8]
mov qword [rbp + 0x18], rax
movaps xmm0, xmmword [rbp + 0x10]
movdqa xmmword [rbp + 0xd0], xmm0
lea rdx, [rbp + 0xd0]
lea rcx, [rbp + 0x7b8]
call fcn.1800df4e0
nop
lea rdx, [rbp + 0x588]
mov rcx, rax
call fcn.1800e12f0
nop
mov rdx, qword [rbp + 0x7d0]
cmp rdx, 8
jb 0x1800c1db1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x7b8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800c1dac
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800c2e5e
call fcn.1800c38fc
movdqa xmm0, xmmword [0x18015e0c0]
movdqu xmmword [rbp + 0x7c8], xmm0
mov word [rbp + 0x7b8], r13w
mov rdx, qword [rbp + 0x6e0]
cmp rdx, 0x10
jb 0x1800c1e0a
inc rdx
mov rcx, qword [rbp + 0x6c8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800c1e05
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800c2e64
call fcn.1800c38fc
movdqa xmm0, xmmword [0x18015e0d0]
movdqu xmmword [rbp + 0x6d8], xmm0
mov byte [rbp + 0x6c8], 0
mov rdx, qword [rbp + 0x680]
cmp rdx, 0x10
jb 0x1800c1e62
inc rdx
mov rcx, qword [rbp + 0x668]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800c1e5d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800c2e6a
call fcn.1800c38fc
mov qword [rbp + 0x678], r13
mov qword [rbp + 0x680], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x668], 0
mov rdx, qword [rbp + 0x7f0]
cmp rdx, 0x10
jb 0x1800c1ebc
inc rdx
mov rcx, qword [rbp + 0x7d8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800c1eb7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800c2e70
call fcn.1800c38fc
movdqa xmm0, xmmword [0x18015e0d0]
movdqu xmmword [rbp + 0x7e8], xmm0
mov byte [rbp + 0x7d8], 0
xorps xmm1, xmm1
movups xmmword [rbp + 0x20], xmm1
movups xmmword [rbp + 0x30], xmm1
movups xmmword [rbp + 0x40], xmm1
movups xmmword [rbp + 0x50], xmm1
movups xmmword [rbp + 0x60], xmm1
movups xmmword [rbp + 0x70], xmm1
movups xmmword [rbp + 0x80], xmm1
mov dword [rbp + 0x5c], 0x100
mov ecx, 0xfffffff6
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov qword [rbp + 0x70], rax
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov qword [rbp + 0x78], rax
mov ecx, 0xfffffff4
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov qword [rbp + 0x80], rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x60], xmm0
mov rax, r13
mov qword [rbp - 0x80], rax
mov qword [rsp + 0x70], rax
mov rbx, r13
mov qword [rbp - 0x58], rbx
mov rsi, r13
mov qword [rbp - 0x68], r13
mov ecx, dword [0x1801e986c]
mov rax, qword gs:[0x58]
mov edx, 4
mov r15, qword [rax + rcx*8]
add r15, rdx
mov qword [rbp - 0x30], r15
mov eax, dword [r15]
cmp dword [0x1801e4d30], eax
jg 0x1800c2e76
mov eax, dword [r15]
cmp dword [0x1801e4d40], eax
jg 0x1800c2ebd
mov rax, qword [0x1801e4d28]
test rax, rax
je 0x1800c264d
cmp qword [0x1801e4d38], 0
je 0x1800c264d
mov ebx, 0x80000
mov dword [rbp - 0x70], ebx
mov dword [rbp + 0x20], reloc.WS2_32.dll_WSASetLastError
lea r9, [rbp - 0x60]
xor r8d, r8d
lea edx, [r8 + 1]
xor ecx, ecx
call rax
test eax, eax
je 0x1800c20d1
mov dword [rsp + 0x20], 2
mov r9d, 0x1c8
lea r8, str..._src_4c3e2d1c10_1c4f0a1e28.clean_client_crashpad_client_win.cc
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace::StartHandlerProcess_class_std::unique_ptr_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData_struct_std::default_delete_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData____
lea rcx, [rbp + 0x120]
call fcn.1800daee0
nop
or r12d, 4
mov dword [rsp + 0x50], r12d
lea rdx, str.InitializeProcThreadAttributeList__size__succeeded__expected_failure
mov rcx, rax
call fcn.1800aac20
nop
test r12b, 4
je 0x1800c202e
and r12d, 0xfffffffb
mov dword [rsp + 0x50], r12d
lea rcx, [rbp + 0x120]
call fcn.1800db070
nop
mov rcx, rdi
call fcn.1800dc1e0
mov qword [rsp + 0x78], r13
mov rdx, qword [rbp + 0x5a0]
cmp rdx, 8
jb 0x1800c2081
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x588]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800c207c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800c2f13
call fcn.1800c38fc
movdqa xmm0, xmmword [0x18015e0c0]
movdqu xmmword [rbp + 0x598], xmm0
mov word [rbp + 0x588], r13w
bt r12d, 0x12
jae 0x1800c20b6
btr r12d, 0x12
mov dword [rsp + 0x50], r12d
lea rcx, [rbp + 0x228]
call fcn.1800db070
nop
mov qword [0x1801e4ce0], 2
mov rcx, r14
call fcn.1800c3050
xor al, al
jmp 0x1800c2de0
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
je 0x1800c21e8
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 2
mov r9d, 0x1cc
lea r8, str..._src_4c3e2d1c10_1c4f0a1e28.clean_client_crashpad_client_win.cc
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace::StartHandlerProcess_class_std::unique_ptr_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData_struct_std::default_delete_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData____
lea rcx, [rbp + 0x120]
call fcn.1800dbc60
nop
or r12d, 8
mov dword [rsp + 0x50], r12d
lea rdx, str.InitializeProcThreadAttributeList__size_
mov rcx, rax
call fcn.1800aac20
nop
test r12b, 8
je 0x1800c2147
and r12d, 0xfffffff7
mov dword [rsp + 0x50], r12d
lea rcx, [rbp + 0x120]
call fcn.1800dbce0
nop
mov rcx, rdi
call fcn.1800dc1e0
mov qword [rsp + 0x78], r13
mov rdx, qword [rbp + 0x5a0]
cmp rdx, 8
jb 0x1800c219a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x588]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800c2195
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800c2f13
call fcn.1800c38fc
movdqa xmm0, xmmword [0x18015e0c0]
movdqu xmmword [rbp + 0x598], xmm0
mov word [rbp + 0x588], r13w
test ebx, r12d
je 0x1800c21cd
btr r12d, 0x13
mov dword [rsp + 0x50], r12d
lea rcx, [rbp + 0x228]
call fcn.1800db070
nop
mov qword [0x1801e4ce0], 2
mov rcx, r14
call fcn.1800c3050
xor al, al
jmp 0x1800c2de0
mov rcx, qword [rbp - 0x60]
call fcn.1800c3930
mov rbx, rax
mov qword [rbp - 0x58], rax
mov qword [rbp + 0x88], rax
lea r9, [rbp - 0x60]
xor r8d, r8d
lea edx, [r8 + 1]
mov rcx, rax
call qword [0x1801e4d28]
test eax, eax
jne 0x1800c2333
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 2
mov r9d, 0x1d7
lea r8, str..._src_4c3e2d1c10_1c4f0a1e28.clean_client_crashpad_client_win.cc
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace::StartHandlerProcess_class_std::unique_ptr_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData_struct_std::default_delete_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData____
lea rcx, [rbp + 0x120]
call fcn.1800dbc60
nop
or r12d, 0x10
mov dword [rsp + 0x50], r12d
lea rdx, str.InitializeProcThreadAttributeList
mov rcx, rax
call fcn.1800aac20
nop
test r12b, 0x10
je 0x1800c2282
and r12d, 0xffffffef
mov dword [rsp + 0x50], r12d
lea rcx, [rbp + 0x120]
call fcn.1800dbce0
nop
test rbx, rbx
je 0x1800c2290
mov rcx, rbx
call fcn.1800c38fc
nop
mov rcx, rdi
call fcn.1800dc1e0
mov qword [rsp + 0x78], r13
mov rdx, qword [rbp + 0x5a0]
cmp rdx, 8
jb 0x1800c22e3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x588]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800c22de
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800c2f13
call fcn.1800c38fc
movdqa xmm0, xmmword [0x18015e0c0]
movdqu xmmword [rbp + 0x598], xmm0
mov word [rbp + 0x588], r13w
bt r12d, 0x14
jae 0x1800c2318
btr r12d, 0x14
mov dword [rsp + 0x50], r12d
lea rcx, [rbp + 0x228]
call fcn.1800db070
nop
mov qword [0x1801e4ce0], 2
mov rcx, r14
call fcn.1800c3050
xor al, al
jmp 0x1800c2de0
mov rsi, qword [rbp + 0x88]
mov qword [rbp - 0x68], rsi
mov edx, 8
lea rcx, [rsp + 0x60]
call fcn.1800c0600
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], rax
add rax, 0x40
mov qword [rsp + 0x70], rax
lea rdx, [0x1801df040]
lea rcx, [rsp + 0x60]
call fcn.1800c06d0
lea rdx, [0x1801df054]
lea rcx, [rsp + 0x60]
call fcn.1800c06d0
lea rdx, [0x1801df05c]
lea rcx, [rsp + 0x60]
call fcn.1800c06d0
mov rdx, qword [r14]
add rdx, 0xe0
lea rcx, [rsp + 0x60]
call fcn.1800c06d0
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x60]
call fcn.1800c06d0
mov rdi, qword [rbp + 0x70]
mov qword [rbp - 0x50], rdi
lea rax, [rdi - 1]
cmp rax, 0xfffffffffffffffd
ja 0x1800c2405
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetFileType]
dec eax
test eax, 0xfffffffd
jne 0x1800c2405
mov r8, rdi
mov rdi, qword [rsp + 0x68]
mov rdx, rdi
mov r13, qword [rsp + 0x60]
mov rcx, r13
call fcn.1800c59a0
cmp rax, rdi
jne 0x1800c240f
lea rdx, [rbp - 0x50]
lea rcx, [rsp + 0x60]
call fcn.1800c06d0
mov r13, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x68]
mov r14, qword [rbp + 0x78]
mov qword [rbp - 0x48], r14
lea rax, [r14 - 1]
cmp rax, 0xfffffffffffffffd
ja 0x1800c245e
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_GetFileType]
dec eax
test eax, 0xfffffffd
jne 0x1800c245e
mov r8, r14
mov rdx, rdi
mov rcx, r13
call fcn.1800c59a0
cmp rax, rdi
jne 0x1800c245e
lea rdx, [rbp - 0x48]
lea rcx, [rsp + 0x60]
call fcn.1800c06d0
mov rdi, qword [rsp + 0x68]
mov r13, qword [rsp + 0x60]
mov r14, qword [rbp + 0x80]
mov qword [rbp - 0x40], r14
lea rax, [r14 - 1]
cmp rax, 0xfffffffffffffffd
ja 0x1800c24b0
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_GetFileType]
dec eax
test eax, 0xfffffffd
jne 0x1800c24b0
mov r8, r14
mov rdx, rdi
mov rcx, r13
call fcn.1800c59a0
cmp rax, rdi
jne 0x1800c24b0
lea rdx, [rbp - 0x40]
lea rcx, [rsp + 0x60]
call fcn.1800c06d0
mov rdi, qword [rsp + 0x68]
mov r13, qword [rsp + 0x60]
sub rdi, r13
sar rdi, 3
lea rax, [rdi*8]
xor edi, edi
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rax
mov r9, r13
xor edx, edx
mov r8d, 0x20002
mov rcx, qword [rbp + 0x88]
call qword [0x1801e4d38]
test eax, eax
jne 0x1800c2639
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 2
mov r9d, 0x1f1
lea r8, str..._src_4c3e2d1c10_1c4f0a1e28.clean_client_crashpad_client_win.cc
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace::StartHandlerProcess_class_std::unique_ptr_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData_struct_std::default_delete_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData____
lea rcx, [rbp + 0x120]
call fcn.1800dbc60
nop
or r12d, 0x20
mov dword [rsp + 0x50], r12d
lea rdx, str.UpdateProcThreadAttribute
mov rcx, rax
call fcn.1800aac20
nop
test r12b, 0x20
je 0x1800c2557
and r12d, 0xffffffdf
mov dword [rsp + 0x50], r12d
lea rcx, [rbp + 0x120]
call fcn.1800dbce0
nop
test rsi, rsi
je 0x1800c2578
mov eax, dword [r15]
cmp dword [0x1801e4d20], eax
jg 0x1800c2f19
mov rcx, rsi
call qword [0x1801e4d18]
mov qword [rbp - 0x68], rdi
test rbx, rbx
je 0x1800c2586
mov rcx, rbx
call fcn.1800c38fc
nop
test r13, r13
je 0x1800c25b2
mov r8, qword [rsp + 0x70]
sub r8, r13
sar r8, 3
mov rdx, r13
lea rcx, [rsp + 0x60]
call fcn.1800c05b0
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], rdi
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x1800c25c6
call fcn.1800dc1e0
mov qword [rsp + 0x78], rdi
mov r8, qword [rbp + 0x5a0]
cmp r8, 8
jb 0x1800c25e9
inc r8
mov rdx, qword [rbp + 0x588]
lea rcx, [rbp + 0x588]
call fcn.1800bfa00
movdqa xmm0, xmmword [0x18015e0c0]
movdqu xmmword [rbp + 0x598], xmm0
mov word [rbp + 0x588], di
bt r12d, 0x15
jae 0x1800c261d
btr r12d, 0x15
mov dword [rsp + 0x50], r12d
lea rcx, [rbp + 0x228]
call fcn.1800db070
nop
mov qword [0x1801e4ce0], 2
mov rcx, qword [rbp - 0x78]
call fcn.1800c3050
xor al, al
jmp 0x1800c2de0
mov rdi, qword [rsp + 0x78]
mov rax, qword [rsp + 0x70]
mov qword [rbp - 0x80], rax
mov r14, qword [rbp - 0x78]
jmp 0x1800c265d
mov dword [rbp - 0x70], r13d
mov dword [rbp + 0x20], 0x68
mov r13, qword [rsp + 0x60]
mov rax, qword [r14]
mov rdx, qword [rax + 0x10]
cmp rdx, 0xc
jb 0x1800c279d
add rdx, 0xfffffffffffffff4
xorps xmm0, xmm0
movups xmmword [rbp + 0x5a8], xmm0
xor ecx, ecx
mov qword [rbp + 0x5b8], rcx
mov rcx, qword [rax + 0x10]
cmp rcx, rdx
jb 0x1800c2f60
sub rcx, rdx
mov r14, 0xffffffffffffffff
cmp rcx, r14
cmovb r14, rcx
cmp qword [rax + 0x18], 8
jb 0x1800c26ad
mov rax, qword [rax]
lea rcx, [rax + rdx*2]
mov qword [rbp - 0x38], rcx
movabs rax, 0x7ffffffffffffffe
mov qword [rsp + 0x50], rax
cmp r14, rax
ja 0x1800c2f66
mov qword [rbp + 0x5c0], 7
cmp r14, 8
jae 0x1800c26fa
mov qword [rbp + 0x5b8], r14
lea r8, [r14 + r14]
mov rdx, rcx
lea rcx, [rbp + 0x5a8]
call fcn.1801258c0
jmp 0x1800c2765
mov rcx, r14
or rcx, 7
cmp rcx, rax
ja 0x1800c271b
mov rax, rcx
cmp rcx, 0xa
mov ecx, 0xa
cmovb rax, rcx
mov qword [rsp + 0x50], rax
lea rdx, [rax + 1]
lea rcx, [rbp + 0x5a8]
call fcn.1800b5cd0
mov r15, rax
mov qword [rbp + 0x5a8], rax
mov qword [rbp + 0x5b8], r14
mov rax, qword [rsp + 0x50]
mov qword [rbp + 0x5c0], rax
add r14, r14
mov r8, r14
mov rdx, qword [rbp - 0x38]
mov rcx, r15
call fcn.1801258c0
xor eax, eax
mov word [r14 + r15], ax
mov r15, qword [rbp - 0x30]
or r12d, 0x4040
mov dword [rsp + 0x50], r12d
lea rcx, [rbp + 0x5a8]
cmp qword [rbp + 0x5c0], 8
cmovae rcx, qword [rbp + 0x5a8]
lea rdx, str.rundll32.exe
call fcn.18013ba88
test eax, eax
jne 0x1800c279d
mov r14b, 1
jmp 0x1800c27a0
xor r14b, r14b
test r12b, 0x40
je 0x1800c2814
and r12d, 0xffffffbf
mov dword [rsp + 0x50], r12d
mov rdx, qword [rbp + 0x5c0]
cmp rdx, 8
jb 0x1800c27f5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x5a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800c27f0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800c2f6c
call fcn.1800c38fc
xor r8d, r8d
mov qword [rbp + 0x5b8], r8
mov qword [rbp + 0x5c0], 7
mov word [rbp + 0x5a8], r8w
jmp 0x1800c2817
xor r8d, r8d
lea rdx, [rbp + 0x588]
cmp qword [rbp + 0x5a0], 8
cmovae rdx, qword [rbp + 0x588]
test r14b, r14b
mov r14, qword [rbp - 0x78]
je 0x1800c283c
mov rcx, r8
jmp 0x1800c2849
mov rcx, qword [r14]
cmp qword [rcx + 0x18], 8
jb 0x1800c2849
mov rcx, qword [rcx]
lea rax, [rbp + 0xe0]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0x20]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r8
mov qword [rsp + 0x30], r8
mov eax, dword [rbp - 0x70]
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x1800c2a1e
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 2
mov r9d, 0x213
lea r8, str..._src_4c3e2d1c10_1c4f0a1e28.clean_client_crashpad_client_win.cc
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace::StartHandlerProcess_class_std::unique_ptr_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData_struct_std::default_delete_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData____
lea rcx, [rbp + 0x120]
call fcn.1800dbc60
nop
bts r12d, 7
mov dword [rsp + 0x50], r12d
lea rdx, str.CreateProcess
mov rcx, rax
call fcn.1800aac20
nop
test r12b, r12b
jns 0x1800c28f3
btr r12d, 7
mov dword [rsp + 0x50], r12d
lea rcx, [rbp + 0x120]
call fcn.1800dbce0
nop
test rsi, rsi
je 0x1800c2916
mov eax, dword [r15]
cmp dword [0x1801e4d20], eax
jg 0x1800c2f72
mov rcx, rsi
call qword [0x1801e4d18]
xor esi, esi
mov qword [rbp - 0x68], rsi
test rbx, rbx
je 0x1800c2924
mov rcx, rbx
call fcn.1800c38fc
nop
test r13, r13
je 0x1800c2977
mov rax, qword [rbp - 0x80]
sub rax, r13
sar rax, 3
lea rdx, [rax*8]
mov rax, r13
cmp rdx, 0x1000
jb 0x1800c2961
add rdx, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800c3047
mov rcx, r13
call fcn.1800c38fc
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], rsi
test rdi, rdi
je 0x1800c2989
mov rcx, rdi
call fcn.1800dc1e0
mov qword [rsp + 0x78], rsi
mov rdx, qword [rbp + 0x5a0]
cmp rdx, 8
jb 0x1800c29cf
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x588]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800c29ca
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800c2e10
call fcn.1800c38fc
movdqa xmm0, xmmword [0x18015e0c0]
movdqu xmmword [rbp + 0x598], xmm0
mov word [rbp + 0x588], si
bt r12d, 0xf
jae 0x1800c2a03
btr r12d, 0xf
mov dword [rsp + 0x50], r12d
lea rcx, [rbp + 0x228]
call fcn.1800db070
nop
mov qword [0x1801e4ce0], 2
mov rcx, r14
call fcn.1800c3050
xor al, al
jmp 0x1800c2de0
mov rcx, qword [rbp + 0xe8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
jne 0x1800c2a7b
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 1
mov r9d, 0x218
lea r8, str..._src_4c3e2d1c10_1c4f0a1e28.clean_client_crashpad_client_win.cc
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace::StartHandlerProcess_class_std::unique_ptr_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData_struct_std::default_delete_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData____
lea rcx, [rbp + 0x120]
call fcn.1800dbc60
nop
bts r12d, 8
mov dword [rsp + 0x50], r12d
lea rdx, str.CloseHandle_thread
mov rcx, rax
call fcn.1800aac20
nop
bt r12d, 8
jae 0x1800c2a98
btr r12d, 8
mov dword [rsp + 0x50], r12d
lea rcx, [rbp + 0x120]
call fcn.1800dbce0
mov rcx, qword [rbp + 0xe0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
jne 0x1800c2af5
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 1
mov r9d, 0x21b
lea r8, str..._src_4c3e2d1c10_1c4f0a1e28.clean_client_crashpad_client_win.cc
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace::StartHandlerProcess_class_std::unique_ptr_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData_struct_std::default_delete_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData____
lea rcx, [rbp + 0x380]
call fcn.1800dbc60
nop
bts r12d, 9
mov dword [rsp + 0x50], r12d
lea rdx, str.CloseHandle_process
mov rcx, rax
call fcn.1800aac20
nop
bt r12d, 9
jae 0x1800c2b12
btr r12d, 9
mov dword [rsp + 0x50], r12d
lea rcx, [rbp + 0x380]
call fcn.1800dbce0
mov r14, qword [r14]
mov rcx, qword [r14 + 0xe0]
cmp rcx, 0xffffffffffffffff
je 0x1800c2b27
call fcn.1800dc1d0
mov qword [r14 + 0xe0], 0xffffffffffffffff
xorps xmm0, xmm0
movdqu xmmword [rbp + 0xfc], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x10c], xmm1
mov dword [rbp + 0xf8], 2
xor eax, eax
mov qword [rbp + 0x6e8], rax
mov dword [rbp + 0x6f0], eax
mov r14, qword [rbp - 0x78]
mov rcx, qword [r14]
add rcx, 0xc0
lea r8, [rbp + 0x6e8]
lea rdx, [rbp + 0xf8]
call fcn.1800e1a00
test al, al
jne 0x1800c2cb5
test rsi, rsi
je 0x1800c2bad
mov eax, dword [r15]
cmp dword [0x1801e4d20], eax
jg 0x1800c2fb9
mov rcx, rsi
call qword [0x1801e4d18]
xor esi, esi
mov qword [rbp - 0x68], rsi
test rbx, rbx
je 0x1800c2bbb
mov rcx, rbx
call fcn.1800c38fc
nop
test r13, r13
je 0x1800c2c0e
mov rax, qword [rbp - 0x80]
sub rax, r13
sar rax, 3
lea rdx, [rax*8]
mov rax, r13
cmp rdx, 0x1000
jb 0x1800c2bf8
add rdx, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800c3047
mov rcx, r13
call fcn.1800c38fc
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], rsi
test rdi, rdi
je 0x1800c2c20
mov rcx, rdi
call fcn.1800dc1e0
mov qword [rsp + 0x78], rsi
mov rdx, qword [rbp + 0x5a0]
cmp rdx, 8
jb 0x1800c2c66
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x588]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800c2c61
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800c2e10
call fcn.1800c38fc
movdqa xmm0, xmmword [0x18015e0c0]
movdqu xmmword [rbp + 0x598], xmm0
mov word [rbp + 0x588], si
bt r12d, 0x10
jae 0x1800c2c9a
btr r12d, 0x10
mov dword [rsp + 0x50], r12d
lea rcx, [rbp + 0x228]
call fcn.1800db070
nop
mov qword [0x1801e4ce0], 2
mov rcx, r14
call fcn.1800c3050
xor al, al
jmp 0x1800c2de0
mov byte [rsp + 0x58], 1
test rsi, rsi
je 0x1800c2cdd
mov eax, dword [r15]
cmp dword [0x1801e4d20], eax
jg 0x1800c3000
mov rcx, rsi
call qword [0x1801e4d18]
xor esi, esi
mov qword [rbp - 0x68], rsi
test rbx, rbx
je 0x1800c2ceb
mov rcx, rbx
call fcn.1800c38fc
nop
test r13, r13
je 0x1800c2d3e
mov rax, qword [rbp - 0x80]
sub rax, r13
sar rax, 3
lea rdx, [rax*8]
mov rax, r13
cmp rdx, 0x1000
jb 0x1800c2d28
add rdx, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800c3047
mov rcx, r13
call fcn.1800c38fc
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], rsi
test rdi, rdi
je 0x1800c2d50
mov rcx, rdi
call fcn.1800dc1e0
mov qword [rsp + 0x78], rsi
mov rdx, qword [rbp + 0x5a0]
cmp rdx, 8
jb 0x1800c2d96
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x588]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800c2d91
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800c2e10
call fcn.1800c38fc
movdqa xmm0, xmmword [0x18015e0c0]
movdqu xmmword [rbp + 0x598], xmm0
mov word [rbp + 0x588], si
bt r12d, 0x11
jae 0x1800c2dca
btr r12d, 0x11
mov dword [rsp + 0x50], r12d
lea rcx, [rbp + 0x228]
call fcn.1800db070
nop
mov qword [0x1801e4ce0], 1
mov rcx, r14
call fcn.1800c3050
mov al, 1
mov rcx, qword [rbp + 0x838]
xor rcx, rsp
call fcn.1800da5d0
lea r11, [rsp + 0x940]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.180139754
nop
call fcn.180139754
nop
call fcn.180139754
nop
call fcn.1800015b0
nop
call fcn.180139754
nop
call fcn.180139754
nop
call fcn.180139754
nop
call fcn.180139754
nop
call fcn.180139754
int3
call fcn.180001590
nop
call fcn.180139754
nop
call fcn.180139754
nop
call fcn.180139754
nop
call fcn.180139754
nop
call fcn.180139754
nop
call fcn.180139754
nop
call fcn.180139754
nop
lea rcx, [0x1801e4d30]
call fcn.1800e0a54
cmp dword [0x1801e4d30], 0xffffffff
jne 0x1800c1f7d
xor r8d, r8d
lea rdx, str.::InitializeProcThreadAttributeList
lea rcx, str.kernel32.dll
call fcn.1800e1870
mov qword [0x1801e4d28], rax
lea rcx, [0x1801e4d30]
call fcn.1800e0aec
jmp 0x1800c1f7d
lea rcx, [0x1801e4d40]
call fcn.1800e0a54
cmp dword [0x1801e4d40], 0xffffffff
jne 0x1800c1f8c
cmp qword [0x1801e4d28], 0
je 0x1800c2ef8
xor r8d, r8d
lea rdx, str.::UpdateProcThreadAttribute
lea rcx, str.kernel32.dll
call fcn.1800e1870
jmp 0x1800c2efb
mov rax, r13
mov qword [0x1801e4d38], rax
lea rcx, [0x1801e4d40]
call fcn.1800e0aec
jmp 0x1800c1f8c
call fcn.180139754
nop
lea rcx, [0x1801e4d20]
call fcn.1800e0a54
cmp dword [0x1801e4d20], 0xffffffff
jne 0x1800c256b
mov r8b, 1
lea rdx, str.::DeleteProcThreadAttributeList
lea rcx, str.kernel32.dll
call fcn.1800e1870
mov qword [0x1801e4d18], rax
lea rcx, [0x1801e4d20]
call fcn.1800e0aec
jmp 0x1800c256b
call fcn.1800073b0
int3
call fcn.180001590
int3
call fcn.180139754
nop
lea rcx, [0x1801e4d20]
call fcn.1800e0a54
cmp dword [0x1801e4d20], 0xffffffff
jne 0x1800c2907
mov r8b, 1
lea rdx, str.::DeleteProcThreadAttributeList
lea rcx, str.kernel32.dll
call fcn.1800e1870
mov qword [0x1801e4d18], rax
lea rcx, [0x1801e4d20]
call fcn.1800e0aec
jmp 0x1800c2907
lea rcx, [0x1801e4d20]
call fcn.1800e0a54
cmp dword [0x1801e4d20], 0xffffffff
jne 0x1800c2b9e
mov r8b, 1
lea rdx, str.::DeleteProcThreadAttributeList
lea rcx, str.kernel32.dll
call fcn.1800e1870
mov qword [0x1801e4d18], rax
lea rcx, [0x1801e4d20]
call fcn.1800e0aec
jmp 0x1800c2b9e
lea rcx, [0x1801e4d20]
call fcn.1800e0a54
cmp dword [0x1801e4d20], 0xffffffff
jne 0x1800c2cce
mov r8b, 1
lea rdx, str.::DeleteProcThreadAttributeList
lea rcx, str.kernel32.dll
call fcn.1800e1870
mov qword [0x1801e4d18], rax
lea rcx, [0x1801e4d20]
call fcn.1800e0aec
jmp 0x1800c2cce
call fcn.180139754
int3