Function at 0x14002aed0
Capabilities:
Create process on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x820]
sub rsp, 0x920
mov rax, qword [0x1400601c8]
xor rax, rsp
mov qword [rbp + 0x818], rax
mov r13, rcx
mov qword [rbp - 0x80], rcx
mov qword [rbp + 0x70], rcx
xor esi, esi
mov r14d, esi
mov dword [rsp + 0x50], esi
call fcn.140038580
test al, al
je 0x14002af78
mov dword [rsp + 0x20], 4
mov r9d, 0x179
lea r8, str.D:p.bornovalovconan_sentry_crashpad0.5.0___buildd140711d95cc16a85766a8fc3a551dfafe84cf63_source_subfolderexternalcrashpadclientcrashpad_client_win.cc
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace::StartHandlerProcess_class_std::unique_ptr_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData_struct_std::default_delete_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData____
lea rcx, [rbp + 0x468]
call fcn.1400406b0
nop
mov r14d, 1
mov dword [rsp + 0x50], r14d
lea rdx, str.Check_failed:__IsThreadInLoaderLock__
mov rcx, rax
call fcn.1400012c0
mov rcx, rax
lea rdx, [0x14004d050]
call fcn.1400012c0
nop
test r14b, 1
je 0x14002af8e
and r14d, 0xfffffffe
lea rcx, [rbp + 0x468]
call fcn.1400408c0
mov byte [rsp + 0x54], 0
mov qword [rbp + 0x568], rsi
mov qword [rbp + 0x578], rsi
mov qword [rbp + 0x580], 7
mov word [rbp + 0x568], si
lea rdx, [rbp + 0x568]
mov rcx, qword [r13]
call fcn.1400374b0
mov rax, qword [r13]
mov rbx, qword [rax + 0x90]
mov rdi, qword [rax + 0x98]
cmp rbx, rdi
je 0x14002b092
mov rax, rbx
cmp qword [rbx + 0x18], 0x10
jb 0x14002afeb
mov rax, qword [rbx]
mov qword [rbp - 0x40], rax
mov rax, qword [rbx + 0x10]
mov qword [rbp - 0x38], rax
movaps xmm0, xmmword [rbp - 0x40]
movdqa xmmword [rbp + 0x80], xmm0
lea rdx, [rbp + 0x80]
lea rcx, [rbp + 0x6d8]
call fcn.140041830
nop
lea rdx, [rbp + 0x568]
mov rcx, rax
call fcn.1400374b0
nop
mov rdx, qword [rbp + 0x6f0]
cmp rdx, 8
jb 0x14002b069
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x6d8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002b064
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002b08b
call fcn.140043654
mov qword [rbp + 0x6e8], rsi
mov qword [rbp + 0x6f0], 7
mov word [rbp + 0x6d8], si
add rbx, 0x20
jmp 0x14002afd5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov r8, qword [r13]
cmp qword [r8 + 0x30], 0
je 0x14002b1b6
add r8, 0x20
mov qword [rbp + 0x6a0], 0xf
mov qword [rbp + 0x698], 8
movabs rax, 0x6573616261746164
mov qword [rbp + 0x688], rax
mov byte [rbp + 0x690], 0
lea rdx, [rbp + 0x688]
lea rcx, [rbp + 0x6f8]
call fcn.14002a6c0
nop
lea rdx, [rbp + 0x568]
mov rcx, rax
call fcn.1400374b0
nop
mov rdx, qword [rbp + 0x710]
cmp rdx, 8
jb 0x14002b140
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x6f8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002b13b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002b13b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140043654
mov qword [rbp + 0x708], rsi
mov qword [rbp + 0x710], 7
mov word [rbp + 0x6f8], si
mov rdx, qword [rbp + 0x6a0]
cmp rdx, 0x10
jb 0x14002b19d
inc rdx
mov rcx, qword [rbp + 0x688]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002b198
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002b198
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140043654
mov qword [rbp + 0x698], rsi
mov qword [rbp + 0x6a0], 0xf
mov byte [rbp + 0x688], 0
mov r8, qword [r13]
cmp qword [r8 + 0x50], 0
je 0x14002b2f4
add r8, 0x40
mov qword [rbp + 0x5e0], 0xf
mov qword [rbp + 0x5d8], 0xb
movsd xmm0, qword [str.metrics_dir]
movsd qword [rbp + 0x5c8], xmm0
movzx eax, word [0x14004d488]
mov word [rbp + 0x5d0], ax
movzx eax, byte [0x14004d48a]
mov byte [rbp + 0x5d2], al
mov byte [rbp + 0x5d3], 0
lea rdx, [rbp + 0x5c8]
lea rcx, [rbp + 0x718]
call fcn.14002a6c0
nop
lea rdx, [rbp + 0x568]
mov rcx, rax
call fcn.1400374b0
nop
mov rdx, qword [rbp + 0x730]
cmp rdx, 8
jb 0x14002b27e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x718]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002b279
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002b279
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140043654
mov qword [rbp + 0x728], rsi
mov qword [rbp + 0x730], 7
mov word [rbp + 0x718], si
mov rdx, qword [rbp + 0x5e0]
cmp rdx, 0x10
jb 0x14002b2db
inc rdx
mov rcx, qword [rbp + 0x5c8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002b2d6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002b2d6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140043654
mov qword [rbp + 0x5d8], rsi
mov qword [rbp + 0x5e0], 0xf
mov byte [rbp + 0x5c8], 0
mov rax, qword [r13]
cmp qword [rax + 0x70], 0
je 0x14002b4c5
lea rcx, [rax + 0x60]
cmp qword [rax + 0x78], 0x10
jb 0x14002b312
mov rcx, qword [rax + 0x60]
mov qword [rbp - 0x30], rcx
mov rax, qword [rax + 0x70]
mov qword [rbp - 0x28], rax
movaps xmm0, xmmword [rbp - 0x30]
movdqa xmmword [rbp + 0x90], xmm0
lea rdx, [rbp + 0x90]
lea rcx, [rbp + 0x7f8]
call fcn.140041830
nop
mov qword [rbp + 0x5e8], rsi
mov qword [rbp + 0x600], 0xf
mov qword [rbp + 0x5f8], 3
movzx ecx, word [0x14004d48c]
mov word [rbp + 0x5e8], cx
movzx ecx, byte [0x14004d48e]
mov byte [rbp + 0x5ea], cl
mov byte [rbp + 0x5eb], 0
mov r8, rax
lea rdx, [rbp + 0x5e8]
lea rcx, [rbp + 0x738]
call fcn.14002a6c0
nop
lea rdx, [rbp + 0x568]
mov rcx, rax
call fcn.1400374b0
nop
mov rdx, qword [rbp + 0x750]
cmp rdx, 8
jb 0x14002b3ed
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x738]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002b3e8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002b3e8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140043654
mov qword [rbp + 0x748], rsi
mov qword [rbp + 0x750], 7
mov word [rbp + 0x738], si
mov rdx, qword [rbp + 0x600]
cmp rdx, 0x10
jb 0x14002b44a
inc rdx
mov rcx, qword [rbp + 0x5e8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002b445
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002b445
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140043654
mov qword [rbp + 0x5f8], rsi
mov qword [rbp + 0x600], 0xf
mov byte [rbp + 0x5e8], 0
mov rdx, qword [rbp + 0x810]
cmp rdx, 8
jb 0x14002b4ac
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x7f8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002b4a7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002b4a7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140043654
mov qword [rbp + 0x808], rsi
mov qword [rbp + 0x810], 7
mov word [rbp + 0x7f8], si
mov rbx, qword [r13]
mov rbx, qword [rbx + 0x80]
mov rbx, qword [rbx]
xor eax, eax
mov byte [rsp + 0x55], al
lea edx, [rax + 0x16]
cmp byte [rbx + 0x19], al
jne 0x14002b946
movabs rcx, 0x8000000000000027
movabs rax, 0x7fffffffffffffff
lea r15, [rbx + 0x20]
mov r13, qword [r15 + 0x10]
cmp r13, rax
je 0x14002cc8e
mov qword [rsp + 0x78], r15
cmp qword [r15 + 0x18], 0x10
jb 0x14002b528
mov rax, qword [r15]
mov qword [rsp + 0x78], rax
movabs rax, 0x7fffffffffffffff
mov qword [rbp + 0x5a8], rsi
mov qword [rbp + 0x5b8], rsi
mov qword [rbp + 0x5c0], rsi
lea r12, [r13 + 1]
mov edi, 0xf
lea rsi, [rbp + 0x5a8]
cmp r12, rdi
jbe 0x14002b5bf
mov rdi, r12
or rdi, 0xf
cmp rdi, rax
jbe 0x14002b566
mov rdi, rax
mov rax, rcx
jmp 0x14002b588
cmp rdi, 0x16
cmovb rdi, rdx
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x14002b5a7
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14002cc88
mov rcx, rax
call fcn.140043618
test rax, rax
je 0x14002b93b
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x14002b5b8
test rcx, rcx
je 0x14002b5b3
call fcn.140043618
jmp 0x14002b5b5
xor eax, eax
mov rsi, rax
mov qword [rbp + 0x5a8], rsi
mov qword [rbp + 0x5b8], r12
mov qword [rbp + 0x5c0], rdi
mov r8, r13
mov rdx, qword [rsp + 0x78]
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsi + r13], 0x3d
mov byte [rsi + r12], 0
bts r14d, 0xa
lea rdx, [r15 + 0x20]
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0x10
jb 0x14002b5fe
mov rdx, qword [rdx]
lea rcx, [rbp + 0x5a8]
call fcn.14002d330
xor esi, esi
mov qword [rbp + 0x588], rsi
mov qword [rbp + 0x598], rsi
mov qword [rbp + 0x5a0], rsi
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x588], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x598], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], sil
bts r14d, 0xb
lea rax, [rbp + 0x588]
cmp qword [rbp + 0x5a0], 0x10
cmovae rax, qword [rbp + 0x588]
mov qword [rbp - 0x20], rax
mov rax, qword [rbp + 0x598]
mov qword [rbp - 0x18], rax
movaps xmm0, xmmword [rbp - 0x20]
movdqa xmmword [rbp + 0xa0], xmm0
lea rdx, [rbp + 0xa0]
lea rcx, [rbp + 0x778]
call fcn.140041830
nop
mov qword [rbp + 0x640], 0xf
mov qword [rbp + 0x638], 0xa
movsd xmm0, qword [str.annotation]
movsd qword [rbp + 0x628], xmm0
movzx ecx, word [0x14004d498]
mov word [rbp + 0x630], cx
mov byte [rbp + 0x632], sil
mov r8, rax
lea rdx, [rbp + 0x628]
lea rcx, [rbp + 0x758]
call fcn.14002a6c0
nop
lea rdx, [rbp + 0x568]
mov rcx, rax
call fcn.1400374b0
nop
mov rdx, qword [rbp + 0x770]
cmp rdx, 8
jb 0x14002b738
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x758]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002b733
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002b91f
call fcn.140043654
mov qword [rbp + 0x768], rsi
mov qword [rbp + 0x770], 7
mov word [rbp + 0x758], si
mov rdx, qword [rbp + 0x640]
cmp rdx, 0x10
jb 0x14002b792
inc rdx
mov rcx, qword [rbp + 0x628]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002b78d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002b926
call fcn.140043654
mov qword [rbp + 0x638], rsi
mov qword [rbp + 0x640], 0xf
mov byte [rbp + 0x628], 0
mov rdx, qword [rbp + 0x790]
cmp rdx, 8
jb 0x14002b7f1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x778]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002b7ec
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002b92d
call fcn.140043654
mov qword [rbp + 0x788], rsi
mov qword [rbp + 0x790], 7
mov word [rbp + 0x778], si
mov rdx, qword [rbp + 0x5a0]
cmp rdx, 0x10
jb 0x14002b84b
inc rdx
mov rcx, qword [rbp + 0x588]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002b846
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002b934
call fcn.140043654
mov qword [rbp + 0x598], rsi
mov qword [rbp + 0x5a0], 0xf
mov byte [rbp + 0x588], 0
mov rdx, qword [rbp + 0x5c0]
cmp rdx, 0x10
jb 0x14002b8a5
inc rdx
mov rcx, qword [rbp + 0x5a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002b8a0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002b93b
call fcn.140043654
mov qword [rbp + 0x5b8], rsi
mov qword [rbp + 0x5c0], 0xf
mov byte [rbp + 0x5a8], 0
mov rax, qword [rbx + 0x10]
cmp byte [rax + 0x19], 0
je 0x14002b8ea
mov rax, qword [rbx + 8]
cmp byte [rax + 0x19], 0
jne 0x14002b8e5
cmp rbx, qword [rax + 0x10]
jne 0x14002b8e5
mov rbx, rax
mov rax, qword [rax + 8]
cmp byte [rax + 0x19], 0
je 0x14002b8d2
mov rbx, rax
jmp 0x14002b90f
mov rbx, rax
mov rcx, qword [rax]
cmp byte [rcx + 0x19], 0
jne 0x14002b90f
nop word [rax + rax]
mov rbx, rcx
mov rax, qword [rcx]
mov rcx, rax
cmp byte [rax + 0x19], 0
je 0x14002b900
cmp byte [rbx + 0x19], 0
jne 0x14002b942
mov edx, 0x16
jmp 0x14002b4e5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov r13, qword [rbp - 0x80]
mov rax, qword [r13]
mov rbx, qword [rax + 0xa8]
mov rdi, qword [rax + 0xb0]
cmp rbx, rdi
je 0x14002ba8b
mov qword [rbp + 0x660], 0xf
mov qword [rbp + 0x658], 0xa
movsd xmm0, qword [str.attachment]
movsd qword [rbp + 0x648], xmm0
movzx eax, word [0x14004b0e8]
mov word [rbp + 0x650], ax
mov byte [rbp + 0x652], 0
mov r8, rbx
lea rdx, [rbp + 0x648]
lea rcx, [rbp + 0x798]
call fcn.14002a6c0
nop
lea rdx, [rbp + 0x568]
mov rcx, rax
call fcn.1400374b0
nop
mov rdx, qword [rbp + 0x7b0]
cmp rdx, 8
jb 0x14002ba05
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x798]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002ba00
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002ba7d
call fcn.140043654
mov qword [rbp + 0x7a8], rsi
mov qword [rbp + 0x7b0], 7
mov word [rbp + 0x798], si
mov rdx, qword [rbp + 0x660]
cmp rdx, 0x10
jb 0x14002ba5b
inc rdx
mov rcx, qword [rbp + 0x648]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002ba56
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002ba84
call fcn.140043654
mov qword [rbp + 0x658], rsi
mov qword [rbp + 0x660], 0xf
mov byte [rbp + 0x648], 0
add rbx, 0x20
jmp 0x14002b958
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
mov edx, 1
mov ecx, 0x1f0fff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
mov qword [rsp + 0x70], rax
test rax, rax
jne 0x14002bbb6
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 2
mov r9d, 0x19f
lea r8, str.D:p.bornovalovconan_sentry_crashpad0.5.0___buildd140711d95cc16a85766a8fc3a551dfafe84cf63_source_subfolderexternalcrashpadclientcrashpad_client_win.cc
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace::StartHandlerProcess_class_std::unique_ptr_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData_struct_std::default_delete_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData____
lea rcx, [rbp + 0x208]
call fcn.140040840
nop
or r14d, 2
mov dword [rsp + 0x50], r14d
lea rdx, [0x14004d4a0]
mov rcx, rax
call fcn.1400012c0
nop
test r14b, 2
je 0x14002bb1c
and r14d, 0xfffffffd
mov dword [rsp + 0x50], r14d
lea rcx, [rbp + 0x208]
call fcn.140040b50
nop
mov rdx, qword [rbp + 0x580]
cmp rdx, 8
jb 0x14002bb65
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x568]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002bb60
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002bb60
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140043654
mov qword [rbp + 0x578], rsi
mov qword [rbp + 0x580], 7
mov word [rbp + 0x568], si
bt r14d, 0xc
jae 0x14002bb9b
btr r14d, 0xc
mov dword [rsp + 0x50], r14d
lea rcx, [rbp + 0x100]
call fcn.1400408c0
nop
mov qword [0x140060bb0], 2
mov rcx, r13
call fcn.140028b80
xor al, al
jmp 0x14002cc11
mov rax, qword [r13]
mov rcx, qword [rax + 0xe0]
lea rax, [0x140060bb8]
mov qword [rsp + 0x40], rax
lea rax, [0x140060ba0]
mov qword [rsp + 0x38], rax
lea rax, [0x140060b88]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rcx
mov r9, qword [0x1400601a8]
mov r8, qword [0x1400601a0]
mov rdx, qword [0x140060198]
lea rcx, [rbp + 0x310]
call fcn.140038080
lea rdx, [rbp + 0x7d8]
lea rcx, [rbp + 0x310]
call fcn.1400384c0
mov rdi, rax
mov qword [rbp + 0x668], rsi
mov qword [rbp + 0x678], rsi
mov qword [rbp + 0x680], 0xf
mov byte [rbp + 0x668], 0
mov r8d, 0x16
lea rdx, str.__initial_client_data
lea rcx, [rbp + 0x668]
call fcn.140002c20
nop
mov r9, rdi
lea r8, [rbp + 0x668]
movzx edx, byte [rsp + 0x55]
lea rcx, [rbp + 0x6a8]
call fcn.140028290
bts r14d, 0xd
mov dword [rsp + 0x50], r14d
lea rax, [rbp + 0x6a8]
cmp qword [rbp + 0x6c0], 0x10
cmovae rax, qword [rbp + 0x6a8]
mov qword [rbp - 0x10], rax
mov rax, qword [rbp + 0x6b8]
mov qword [rbp - 8], rax
movaps xmm0, xmmword [rbp - 0x10]
movdqa xmmword [rbp + 0xb0], xmm0
lea rdx, [rbp + 0xb0]
lea rcx, [rbp + 0x7b8]
call fcn.140041830
nop
lea rdx, [rbp + 0x568]
mov rcx, rax
call fcn.1400374b0
nop
mov rdx, qword [rbp + 0x7d0]
cmp rdx, 8
jb 0x14002bd24
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x7b8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002bd1f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002bd1f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140043654
mov qword [rbp + 0x7c8], rsi
mov qword [rbp + 0x7d0], 7
mov word [rbp + 0x7b8], si
mov rdx, qword [rbp + 0x6c0]
cmp rdx, 0x10
jb 0x14002bd81
inc rdx
mov rcx, qword [rbp + 0x6a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002bd7c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002bd7c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140043654
mov qword [rbp + 0x6b8], rsi
mov qword [rbp + 0x6c0], 0xf
mov byte [rbp + 0x6a8], 0
mov rdx, qword [rbp + 0x680]
cmp rdx, 0x10
jb 0x14002bdde
inc rdx
mov rcx, qword [rbp + 0x668]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002bdd9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002bdd9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140043654
mov qword [rbp + 0x678], rsi
mov qword [rbp + 0x680], 0xf
mov byte [rbp + 0x668], 0
mov rdx, qword [rbp + 0x7f0]
cmp rdx, 0x10
jb 0x14002be3b
inc rdx
mov rcx, qword [rbp + 0x7d8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002be36
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002be36
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140043654
mov qword [rbp + 0x7e8], rsi
mov qword [rbp + 0x7f0], 0xf
mov byte [rbp + 0x7d8], 0
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
movups xmmword [rbp + 0x10], xmm0
movups xmmword [rbp + 0x20], xmm0
movups xmmword [rbp + 0x30], xmm0
movups xmmword [rbp + 0x40], xmm0
movups xmmword [rbp + 0x50], xmm0
movups xmmword [rbp + 0x60], xmm0
mov dword [rbp + 0x3c], 0x100
mov ecx, 0xfffffff6
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov qword [rbp + 0x50], rax
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov qword [rbp + 0x58], rax
mov ecx, 0xfffffff4
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov qword [rbp + 0x60], rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x58], xmm0
mov r12, rsi
mov qword [rsp + 0x68], rsi
mov rdi, rsi
mov qword [rbp - 0x60], rsi
mov qword [rbp - 0x70], rsi
mov ecx, dword [0x140061328]
mov rax, qword gs:[0x58]
mov edx, 4
mov r15, qword [rax + rcx*8]
add r15, rdx
mov qword [rsp + 0x78], r15
mov eax, dword [r15]
cmp dword [0x140060c00], eax
jg 0x14002cc94
mov eax, dword [r15]
cmp dword [0x140060c10], eax
jg 0x14002ccdb
mov rax, qword [0x140060bf8]
test rax, rax
je 0x14002c5e9
cmp qword [0x140060c08], 0
je 0x14002c5e9
mov dword [rbp - 0x78], 0x80000
mov dword [rbp], 0x70
lea r9, [rbp - 0x68]
xor r8d, r8d
lea edx, [r8 + 1]
xor ecx, ecx
call rax
test eax, eax
je 0x14002c048
mov dword [rsp + 0x20], 2
mov r9d, 0x1d0
lea r8, str.D:p.bornovalovconan_sentry_crashpad0.5.0___buildd140711d95cc16a85766a8fc3a551dfafe84cf63_source_subfolderexternalcrashpadclientcrashpad_client_win.cc
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace::StartHandlerProcess_class_std::unique_ptr_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData_struct_std::default_delete_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData____
lea rcx, [rbp + 0x100]
call fcn.1400406b0
nop
or r14d, 4
mov dword [rsp + 0x50], r14d
lea rdx, str.InitializeProcThreadAttributeList__size__succeeded__expected_failure
mov rcx, rax
call fcn.1400012c0
nop
test r14b, 4
je 0x14002bfa2
and r14d, 0xfffffffb
mov dword [rsp + 0x50], r14d
lea rcx, [rbp + 0x100]
call fcn.1400408c0
nop
mov rcx, rbx
call fcn.140032db0
xor ebx, ebx
mov qword [rsp + 0x70], rbx
mov rdx, qword [rbp + 0x580]
cmp rdx, 8
jb 0x14002bff7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x568]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002bff2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002c255
call fcn.140043654
mov qword [rbp + 0x578], rbx
mov qword [rbp + 0x580], 7
mov word [rbp + 0x568], bx
bt r14d, 0xe
jae 0x14002c02d
btr r14d, 0xe
mov dword [rsp + 0x50], r14d
lea rcx, [rbp + 0x208]
call fcn.1400408c0
nop
mov qword [0x140060bb0], 2
mov rcx, r13
call fcn.140028b80
xor al, al
jmp 0x14002cc11
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
je 0x14002c164
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 2
mov r9d, 0x1d4
lea r8, str.D:p.bornovalovconan_sentry_crashpad0.5.0___buildd140711d95cc16a85766a8fc3a551dfafe84cf63_source_subfolderexternalcrashpadclientcrashpad_client_win.cc
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace::StartHandlerProcess_class_std::unique_ptr_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData_struct_std::default_delete_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData____
lea rcx, [rbp + 0x100]
call fcn.140040840
nop
or r14d, 8
mov dword [rsp + 0x50], r14d
lea rdx, str.InitializeProcThreadAttributeList__size_
mov rcx, rax
call fcn.1400012c0
nop
test r14b, 8
je 0x14002c0be
and r14d, 0xfffffff7
mov dword [rsp + 0x50], r14d
lea rcx, [rbp + 0x100]
call fcn.140040b50
nop
mov rcx, rbx
call fcn.140032db0
xor ebx, ebx
mov qword [rsp + 0x70], rbx
mov rdx, qword [rbp + 0x580]
cmp rdx, 8
jb 0x14002c113
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x568]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002c10e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002c255
call fcn.140043654
mov qword [rbp + 0x578], rbx
mov qword [rbp + 0x580], 7
mov word [rbp + 0x568], bx
bt r14d, 0xf
jae 0x14002c149
btr r14d, 0xf
mov dword [rsp + 0x50], r14d
lea rcx, [rbp + 0x208]
call fcn.1400408c0
nop
mov qword [0x140060bb0], 2
mov rcx, r13
call fcn.140028b80
xor al, al
jmp 0x14002cc11
mov rcx, qword [rbp - 0x68]
call fcn.140044310
mov rdi, rax
mov qword [rbp - 0x60], rax
mov qword [rbp + 0x68], rax
lea r9, [rbp - 0x68]
xor r8d, r8d
lea edx, [r8 + 1]
mov rcx, rax
call qword [0x140060bf8]
test eax, eax
jne 0x14002c2b2
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 2
mov r9d, 0x1df
lea r8, str.D:p.bornovalovconan_sentry_crashpad0.5.0___buildd140711d95cc16a85766a8fc3a551dfafe84cf63_source_subfolderexternalcrashpadclientcrashpad_client_win.cc
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace::StartHandlerProcess_class_std::unique_ptr_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData_struct_std::default_delete_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData____
lea rcx, [rbp + 0x100]
call fcn.140040840
nop
or r14d, 0x10
mov dword [rsp + 0x50], r14d
lea rdx, str.InitializeProcThreadAttributeList
mov rcx, rax
call fcn.1400012c0
nop
test r14b, 0x10
je 0x14002c1fb
and r14d, 0xffffffef
mov dword [rsp + 0x50], r14d
lea rcx, [rbp + 0x100]
call fcn.140040b50
nop
test rdi, rdi
je 0x14002c209
mov rcx, rdi
call fcn.140044318
nop
mov rcx, rbx
call fcn.140032db0
xor ebx, ebx
mov qword [rsp + 0x70], rbx
mov rdx, qword [rbp + 0x580]
cmp rdx, 8
jb 0x14002c261
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x568]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002c25c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002c25c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140043654
mov qword [rbp + 0x578], rbx
mov qword [rbp + 0x580], 7
mov word [rbp + 0x568], bx
bt r14d, 0x10
jae 0x14002c297
btr r14d, 0x10
mov dword [rsp + 0x50], r14d
lea rcx, [rbp + 0x208]
call fcn.1400408c0
nop
mov qword [0x140060bb0], 2
mov rcx, r13
call fcn.140028b80
xor al, al
jmp 0x14002cc11
mov rsi, qword [rbp + 0x68]
mov qword [rbp - 0x70], rsi
mov edx, 8
lea rcx, [rsp + 0x58]
call fcn.14002d2c0
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], rax
add rax, 0x40
mov qword [rsp + 0x68], rax
lea rdx, [0x140060198]
lea rcx, [rsp + 0x58]
call fcn.140028130
lea rdx, [0x1400601a0]
lea rcx, [rsp + 0x58]
call fcn.140028130
lea rdx, [0x1400601a8]
lea rcx, [rsp + 0x58]
call fcn.140028130
mov rdx, qword [r13]
add rdx, 0xe0
lea rcx, [rsp + 0x58]
call fcn.140028130
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x58]
call fcn.140028130
mov r13, qword [rbp + 0x50]
mov qword [rbp - 0x58], r13
lea rax, [r13 - 1]
cmp rax, 0xfffffffffffffffd
ja 0x14002c391
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_GetFileType]
dec eax
test eax, 0xfffffffd
jne 0x14002c391
mov r15, qword [rsp + 0x58]
mov rax, r15
mov rbx, qword [rsp + 0x60]
cmp r15, rbx
je 0x14002c37e
nop dword [rax]
cmp qword [rax], r13
je 0x14002c37e
add rax, 8
cmp rax, rbx
jne 0x14002c370
cmp rax, rbx
jne 0x14002c39b
lea rdx, [rbp - 0x58]
lea rcx, [rsp + 0x58]
call fcn.140028130
mov r15, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x60]
mov r13, qword [rbp + 0x58]
mov qword [rbp - 0x50], r13
lea rax, [r13 - 1]
cmp rax, 0xfffffffffffffffd
ja 0x14002c3f2
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_GetFileType]
dec eax
test eax, 0xfffffffd
jne 0x14002c3f2
mov rax, r15
cmp r15, rbx
je 0x14002c3d5
cmp qword [rax], r13
je 0x14002c3d5
add rax, 8
cmp rax, rbx
jne 0x14002c3c7
cmp rax, rbx
jne 0x14002c3f2
lea rdx, [rbp - 0x50]
lea rcx, [rsp + 0x58]
call fcn.140028130
mov rbx, qword [rsp + 0x60]
mov r15, qword [rsp + 0x58]
mov r13, qword [rbp + 0x60]
mov qword [rbp - 0x48], r13
lea rax, [r13 - 1]
cmp rax, 0xfffffffffffffffd
ja 0x14002c44b
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_GetFileType]
dec eax
test eax, 0xfffffffd
jne 0x14002c44b
mov rax, r15
cmp r15, rbx
je 0x14002c42e
nop
cmp qword [rax], r13
je 0x14002c42e
add rax, 8
cmp rax, rbx
jne 0x14002c420
cmp rax, rbx
jne 0x14002c44b
lea rdx, [rbp - 0x48]
lea rcx, [rsp + 0x58]
call fcn.140028130
mov rbx, qword [rsp + 0x60]
mov r15, qword [rsp + 0x58]
sub rbx, r15
sar rbx, 3
lea rax, [rbx*8]
xor ebx, ebx
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rax
mov r9, r15
xor edx, edx
mov r8d, 0x20002
mov rcx, qword [rbp + 0x68]
call qword [0x140060c08]
test eax, eax
jne 0x14002c5d7
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 2
mov r9d, 0x1f9
lea r8, str.D:p.bornovalovconan_sentry_crashpad0.5.0___buildd140711d95cc16a85766a8fc3a551dfafe84cf63_source_subfolderexternalcrashpadclientcrashpad_client_win.cc
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace::StartHandlerProcess_class_std::unique_ptr_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData_struct_std::default_delete_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData____
lea rcx, [rbp + 0x100]
call fcn.140040840
nop
or r14d, 0x20
mov dword [rsp + 0x50], r14d
lea rdx, str.UpdateProcThreadAttribute
mov rcx, rax
call fcn.1400012c0
nop
test r14b, 0x20
je 0x14002c4ef
and r14d, 0xffffffdf
mov dword [rsp + 0x50], r14d
lea rcx, [rbp + 0x100]
call fcn.140040b50
nop
test rsi, rsi
je 0x14002c514
mov rax, qword [rsp + 0x78]
mov eax, dword [rax]
cmp dword [0x140060bf0], eax
jg 0x14002cd30
mov rcx, rsi
call qword [0x140060be8]
mov qword [rbp - 0x70], rbx
test rdi, rdi
je 0x14002c522
mov rcx, rdi
call fcn.140044318
nop
test r15, r15
je 0x14002c54e
mov r8, qword [rsp + 0x68]
sub r8, r15
sar r8, 3
mov rdx, r15
lea rcx, [rsp + 0x58]
call fcn.14002d3c0
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], rbx
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x14002c562
call fcn.140032db0
mov qword [rsp + 0x70], rbx
mov r8, qword [rbp + 0x580]
cmp r8, 8
jb 0x14002c585
inc r8
mov rdx, qword [rbp + 0x568]
lea rcx, [rbp + 0x568]
call fcn.140002fe0
mov qword [rbp + 0x578], rbx
mov qword [rbp + 0x580], 7
mov word [rbp + 0x568], bx
bt r14d, 0x11
jae 0x14002c5bb
btr r14d, 0x11
mov dword [rsp + 0x50], r14d
lea rcx, [rbp + 0x208]
call fcn.1400408c0
nop
mov qword [0x140060bb0], 2
mov rcx, qword [rbp - 0x80]
call fcn.140028b80
xor al, al
jmp 0x14002cc11
mov rbx, qword [rsp + 0x70]
mov r12, qword [rsp + 0x68]
mov r13, qword [rbp - 0x80]
xor ecx, ecx
jmp 0x14002c5fa
xor ecx, ecx
mov dword [rbp - 0x78], ecx
mov dword [rbp], 0x68
mov r15, qword [rsp + 0x58]
mov rax, qword [r13]
mov rdx, qword [rax + 0x10]
cmp rdx, 0xc
jb 0x14002c69a
add rdx, 0xfffffffffffffff4
mov qword [rbp + 0x608], rcx
mov qword [rbp + 0x618], rcx
mov qword [rbp + 0x620], 7
mov rcx, qword [rax + 0x10]
cmp rcx, rdx
jb 0x14002cd77
sub rcx, rdx
mov r8, 0xffffffffffffffff
cmp rcx, r8
cmovb r8, rcx
cmp qword [rax + 0x18], 8
jb 0x14002c651
mov rax, qword [rax]
lea rdx, [rax + rdx*2]
lea rcx, [rbp + 0x608]
call fcn.1400098f0
or r14d, 0x40040
mov dword [rsp + 0x50], r14d
lea rcx, [rbp + 0x608]
cmp qword [rbp + 0x620], 8
cmovae rcx, qword [rbp + 0x608]
lea rdx, str.rundll32.exe
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14002c69a
mov r13b, 1
jmp 0x14002c69d
xor r13b, r13b
test r14b, 0x40
je 0x14002c714
and r14d, 0xffffffbf
mov dword [rsp + 0x50], r14d
mov rdx, qword [rbp + 0x620]
cmp rdx, 8
jb 0x14002c6f5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x608]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002c6f0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002c6f0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140043654
xor r8d, r8d
mov qword [rbp + 0x618], r8
mov qword [rbp + 0x620], 7
mov word [rbp + 0x608], r8w
jmp 0x14002c717
xor r8d, r8d
lea rdx, [rbp + 0x568]
cmp qword [rbp + 0x580], 8
cmovae rdx, qword [rbp + 0x568]
test r13b, r13b
mov r13, qword [rbp - 0x80]
je 0x14002c73c
mov rcx, r8
jmp 0x14002c74a
mov rcx, qword [r13]
cmp qword [rcx + 0x18], 8
jb 0x14002c74a
mov rcx, qword [rcx]
lea rax, [rbp + 0xc0]
mov qword [rsp + 0x48], rax
lea rax, [rbp]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r8
mov qword [rsp + 0x30], r8
mov eax, dword [rbp - 0x78]
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x14002c8d9
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 2
mov r9d, 0x21b
lea r8, str.D:p.bornovalovconan_sentry_crashpad0.5.0___buildd140711d95cc16a85766a8fc3a551dfafe84cf63_source_subfolderexternalcrashpadclientcrashpad_client_win.cc
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace::StartHandlerProcess_class_std::unique_ptr_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData_struct_std::default_delete_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData____
lea rcx, [rbp + 0x100]
call fcn.140040840
nop
bts r14d, 7
mov dword [rsp + 0x50], r14d
lea rdx, str.CreateProcess
mov rcx, rax
call fcn.1400012c0
nop
test r14b, r14b
jns 0x14002c7f4
btr r14d, 7
mov dword [rsp + 0x50], r14d
lea rcx, [rbp + 0x100]
call fcn.140040b50
nop
test rsi, rsi
je 0x14002c81b
mov rax, qword [rsp + 0x78]
mov eax, dword [rax]
cmp dword [0x140060bf0], eax
jg 0x14002cd7d
mov rcx, rsi
call qword [0x140060be8]
xor esi, esi
mov qword [rbp - 0x70], rsi
test rdi, rdi
je 0x14002c829
mov rcx, rdi
call fcn.140044318
nop
test r15, r15
je 0x14002c853
sub r12, r15
sar r12, 3
mov r8, r12
mov rdx, r15
lea rcx, [rsp + 0x58]
call fcn.14002d3c0
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], rsi
test rbx, rbx
je 0x14002c865
mov rcx, rbx
call fcn.140032db0
mov qword [rsp + 0x70], rsi
mov r8, qword [rbp + 0x580]
cmp r8, 8
jb 0x14002c888
inc r8
mov rdx, qword [rbp + 0x568]
lea rcx, [rbp + 0x568]
call fcn.140002fe0
mov qword [rbp + 0x578], rsi
mov qword [rbp + 0x580], 7
mov word [rbp + 0x568], si
bt r14d, 0x13
jae 0x14002c8be
btr r14d, 0x13
mov dword [rsp + 0x50], r14d
lea rcx, [rbp + 0x208]
call fcn.1400408c0
nop
mov qword [0x140060bb0], 2
mov rcx, r13
call fcn.140028b80
xor al, al
jmp 0x14002cc11
mov rcx, qword [rbp + 0xc8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
jne 0x14002c936
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 1
mov r9d, 0x220
lea r8, str.D:p.bornovalovconan_sentry_crashpad0.5.0___buildd140711d95cc16a85766a8fc3a551dfafe84cf63_source_subfolderexternalcrashpadclientcrashpad_client_win.cc
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace::StartHandlerProcess_class_std::unique_ptr_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData_struct_std::default_delete_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData____
lea rcx, [rbp + 0x100]
call fcn.140040840
nop
bts r14d, 8
mov dword [rsp + 0x50], r14d
lea rdx, str.CloseHandle_thread
mov rcx, rax
call fcn.1400012c0
nop
bt r14d, 8
jae 0x14002c953
btr r14d, 8
mov dword [rsp + 0x50], r14d
lea rcx, [rbp + 0x100]
call fcn.140040b50
mov rcx, qword [rbp + 0xc0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
jne 0x14002c9b0
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 1
mov r9d, 0x223
lea r8, str.D:p.bornovalovconan_sentry_crashpad0.5.0___buildd140711d95cc16a85766a8fc3a551dfafe84cf63_source_subfolderexternalcrashpadclientcrashpad_client_win.cc
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace::StartHandlerProcess_class_std::unique_ptr_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData_struct_std::default_delete_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData____
lea rcx, [rbp + 0x360]
call fcn.140040840
nop
bts r14d, 9
mov dword [rsp + 0x50], r14d
lea rdx, str.CloseHandle_process
mov rcx, rax
call fcn.1400012c0
nop
bt r14d, 9
jae 0x14002c9cd
btr r14d, 9
mov dword [rsp + 0x50], r14d
lea rcx, [rbp + 0x360]
call fcn.140040b50
mov r13, qword [r13]
mov rcx, qword [r13 + 0xe0]
cmp rcx, 0xffffffffffffffff
je 0x14002c9e3
call fcn.140032da0
mov qword [r13 + 0xe0], 0xffffffffffffffff
xorps xmm0, xmm0
movdqu xmmword [rbp + 0xdc], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xec], xmm1
mov dword [rbp + 0xd8], 2
xor eax, eax
mov qword [rbp + 0x6c8], rax
mov dword [rbp + 0x6d0], eax
mov r13, qword [rbp - 0x80]
mov rcx, qword [r13]
add rcx, 0xc0
lea r8, [rbp + 0x6c8]
lea rdx, [rbp + 0xd8]
call fcn.14003d300
test al, al
jne 0x14002cb2c
test rsi, rsi
je 0x14002ca6e
mov rax, qword [rsp + 0x78]
mov eax, dword [rax]
cmp dword [0x140060bf0], eax
jg 0x14002cdc4
mov rcx, rsi
call qword [0x140060be8]
xor esi, esi
mov qword [rbp - 0x70], rsi
test rdi, rdi
je 0x14002ca7c
mov rcx, rdi
call fcn.140044318
nop
test r15, r15
je 0x14002caa6
sub r12, r15
sar r12, 3
mov r8, r12
mov rdx, r15
lea rcx, [rsp + 0x58]
call fcn.14002d3c0
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], rsi
test rbx, rbx
je 0x14002cab8
mov rcx, rbx
call fcn.140032db0
mov qword [rsp + 0x70], rsi
mov r8, qword [rbp + 0x580]
cmp r8, 8
jb 0x14002cadb
inc r8
mov rdx, qword [rbp + 0x568]
lea rcx, [rbp + 0x568]
call fcn.140002fe0
mov qword [rbp + 0x578], rsi
mov qword [rbp + 0x580], 7
mov word [rbp + 0x568], si
bt r14d, 0x14
jae 0x14002cb11
btr r14d, 0x14
mov dword [rsp + 0x50], r14d
lea rcx, [rbp + 0x208]
call fcn.1400408c0
nop
mov qword [0x140060bb0], 2
mov rcx, r13
call fcn.140028b80
xor al, al
jmp 0x14002cc11
mov byte [rsp + 0x54], 1
test rsi, rsi
je 0x14002cb58
mov rax, qword [rsp + 0x78]
mov eax, dword [rax]
cmp dword [0x140060bf0], eax
jg 0x14002cc41
mov rcx, rsi
call qword [0x140060be8]
xor esi, esi
mov qword [rbp - 0x70], rsi
test rdi, rdi
je 0x14002cb66
mov rcx, rdi
call fcn.140044318
nop
test r15, r15
je 0x14002cb90
sub r12, r15
sar r12, 3
mov r8, r12
mov rdx, r15
lea rcx, [rsp + 0x58]
call fcn.14002d3c0
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], rsi
test rbx, rbx
je 0x14002cba2
mov rcx, rbx
call fcn.140032db0
mov qword [rsp + 0x70], rsi
mov r8, qword [rbp + 0x580]
cmp r8, 8
jb 0x14002cbc5
inc r8
mov rdx, qword [rbp + 0x568]
lea rcx, [rbp + 0x568]
call fcn.140002fe0
mov qword [rbp + 0x578], rsi
mov qword [rbp + 0x580], 7
mov word [rbp + 0x568], si
bt r14d, 0x15
jae 0x14002cbfb
btr r14d, 0x15
mov dword [rsp + 0x50], r14d
lea rcx, [rbp + 0x208]
call fcn.1400408c0
nop
mov qword [0x140060bb0], 1
mov rcx, r13
call fcn.140028b80
mov al, 1
mov rcx, qword [rbp + 0x818]
xor rcx, rsp
call fcn.140043bb0
lea r11, [rsp + 0x920]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
lea rcx, [0x140060bf0]
call fcn.140044560
cmp dword [0x140060bf0], 0xffffffff
jne 0x14002cb49
mov r8b, 1
lea rdx, str.::DeleteProcThreadAttributeList
lea rcx, str.kernel32.dll
call fcn.140038000
mov qword [0x140060be8], rax
lea rcx, [0x140060bf0]
call fcn.140044500
jmp 0x14002cb49
call fcn.1400029f0
int3
call fcn.140002b00
nop
lea rcx, [0x140060c00]
call fcn.140044560
cmp dword [0x140060c00], 0xffffffff
jne 0x14002bef2
xor r8d, r8d
lea rdx, str.::InitializeProcThreadAttributeList
lea rcx, str.kernel32.dll
call fcn.140038000
mov qword [0x140060bf8], rax
lea rcx, [0x140060c00]
call fcn.140044500
jmp 0x14002bef2
lea rcx, [0x140060c10]
call fcn.140044560
cmp dword [0x140060c10], 0xffffffff
jne 0x14002bf01
cmp qword [0x140060bf8], 0
je 0x14002cd16
xor r8d, r8d
lea rdx, str.::UpdateProcThreadAttribute
lea rcx, str.kernel32.dll
call fcn.140038000
jmp 0x14002cd18
xor eax, eax
mov qword [0x140060c08], rax
lea rcx, [0x140060c10]
call fcn.140044500
jmp 0x14002bf01
lea rcx, [0x140060bf0]
call fcn.140044560
cmp dword [0x140060bf0], 0xffffffff
jne 0x14002c507
mov r8b, 1
lea rdx, str.::DeleteProcThreadAttributeList
lea rcx, str.kernel32.dll
call fcn.140038000
mov qword [0x140060be8], rax
lea rcx, [0x140060bf0]
call fcn.140044500
jmp 0x14002c507
call fcn.14002d2a0
nop
lea rcx, [0x140060bf0]
call fcn.140044560
cmp dword [0x140060bf0], 0xffffffff
jne 0x14002c80c
mov r8b, 1
lea rdx, str.::DeleteProcThreadAttributeList
lea rcx, str.kernel32.dll
call fcn.140038000
mov qword [0x140060be8], rax
lea rcx, [0x140060bf0]
call fcn.140044500
jmp 0x14002c80c
lea rcx, [0x140060bf0]
call fcn.140044560
cmp dword [0x140060bf0], 0xffffffff
jne 0x14002ca5f
mov r8b, 1
lea rdx, str.::DeleteProcThreadAttributeList
lea rcx, str.kernel32.dll
call fcn.140038000
mov qword [0x140060be8], rax
lea rcx, [0x140060bf0]
call fcn.140044500
jmp 0x14002ca5f