Function at 0x1400677a0
Capabilities:
Create process on windows
Self delete

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x2f8
movaps xmmword [rsp + 0x2e0], xmm6
mov r13, rcx
mov rax, qword [0x14029b028]
xor rax, rsp
mov qword [rsp + 0x2d8], rax
mov rax, qword gs:[0x30]
mov rax, qword [rax + 0x60]
mov rax, qword [rax + 0x110]
mov rax, qword [rax + 0x10]
mov rcx, qword gs:[0x30]
cmp rax, qword [rcx + 0x48]
je 0x140068c0d
xorps xmm0, xmm0
lea rdx, [rsp + 0x2c0]
movaps xmmword [rdx], xmm0
mov qword [rdx + 0x10], 0
mov rcx, qword [r13]
call fcn.1400d1270
mov rdi, qword [r13]
mov r14, qword [rdi + 0x78]
mov r15, qword [rdi + 0x80]
cmp r14, r15
je 0x1400678d1
lea rsi, [rsp + 0xf8]
lea rdi, [rsp + 0x2b0]
lea rbx, [rsp + 0x2c0]
jmp 0x1400678a3
mov qword [rsp + 0x2b0], r14
mov qword [rsp + 0x2b8], rax
mov rcx, r14
test rcx, rcx
jne 0x14006786d
test rax, rax
jne 0x140068bfe
mov rcx, rsi
mov rdx, rdi
call fcn.140121e20
mov rcx, rsi
mov rdx, rbx
call fcn.1400d1270
cmp byte [rsp + 0x10f], 0
jns 0x14006789a
mov rcx, qword [rsp + 0xf8]
call fcn.1401833ec
add r14, 0x18
cmp r14, r15
je 0x1400678cd
movzx eax, byte [r14 + 0x17]
test al, al
jns 0x14006784c
mov rcx, qword [r14]
mov rax, qword [r14 + 8]
mov qword [rsp + 0x2b0], rcx
mov qword [rsp + 0x2b8], rax
test rax, rax
jns 0x14006785f
jmp 0x140068c01
mov rdi, qword [r13]
movzx eax, byte [rdi + 0x2f]
test al, al
jns 0x1400678dd
mov rax, qword [rdi + 0x20]
test rax, rax
jne 0x1400689a9
movzx eax, byte [rdi + 0x47]
test al, al
jns 0x1400678f2
mov rax, qword [rdi + 0x38]
test rax, rax
jne 0x140068a17
movzx eax, byte [rdi + 0x5f]
test al, al
js 0x140067938
test rax, rax
jne 0x1400688f3
mov rbx, qword [rdi + 0x60]
lea rbp, [rdi + 0x68]
cmp rbx, rbp
je 0x140067bcb
movabs rax, 0x7ffffffffffffff8
lea r14, [rax - 9]
xorps xmm6, xmm6
mov qword [rsp + 0x50], rbp
jmp 0x140067ba1
mov rax, qword [rdi + 0x50]
test rax, rax
je 0x14006790c
mov rdi, qword [rdi + 0x48]
mov qword [rsp + 0x2a0], rdi
mov qword [rsp + 0x2a8], rax
jns 0x140068907
jmp 0x140068c56
mov rbp, r14
mov r14, r13
mov r13, r15
or r13, 0xf
inc r13
mov rcx, r13
call fcn.1401833f4
mov rdi, rax
movabs rax, 0x7ffffffffffffff8
add rax, 8
or rax, r13
mov r13, r14
mov r14, rbp
mov rbp, qword [rsp + 0x50]
mov qword [rsp + 0x260], rax
mov qword [rsp + 0x250], rdi
mov qword [rsp + 0x258], r15
jmp 0x1400679ec
mov rsi, qword [rbx + 0x28]
lea r15, [rsi + 1]
cmp r15, r14
ja 0x140068c04
cmp r15, 0x16
ja 0x140067960
movaps xmmword [rsp + 0x250], xmm6
mov qword [rsp + 0x260], 0
mov byte [rsp + 0x267], r15b
lea rdi, [rsp + 0x250]
lea rdx, [rbx + 0x20]
test r12b, r12b
jns 0x1400679f8
mov rdx, qword [rdx]
cmp rdx, rdi
jb 0x140067a0a
lea rax, [rdi + rsi]
cmp rax, rdx
ja 0x140068c10
mov rcx, rdi
mov r8, rsi
call fcn.140187ab0
mov word [rdi + rsi], 0x3d
movzx r8d, byte [rbx + 0x4f]
test r8b, r8b
js 0x140067a2f
lea rdx, [rbx + 0x38]
and r8d, 0x7f
jmp 0x140067a37
mov r8, qword [rbx + 0x40]
mov rdx, qword [rbx + 0x38]
lea rcx, [rsp + 0x250]
call fcn.14015d9f0
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x290], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x280], xmm0
movups xmmword [rax], xmm6
mov qword [rax + 0x10], 0
movzx ecx, byte [rsp + 0x297]
mov eax, ecx
and eax, 0x7f
test cl, cl
cmovs rax, qword [rsp + 0x288]
mov rcx, qword [rsp + 0x280]
lea rdx, [rsp + 0x280]
cmovns rcx, rdx
mov qword [rsp + 0x270], rcx
mov qword [rsp + 0x278], rax
test rax, rax
js 0x140068c07
test rcx, rcx
jne 0x140067ab9
test rax, rax
jne 0x140068c13
lea rsi, [rsp + 0x70]
mov rcx, rsi
lea rdx, [rsp + 0x270]
call fcn.140121e20
lea rdi, [rsp + 0x238]
mov rcx, rdi
lea rdx, str.annotation
call fcn.1401c3730
lea r15, [rsp + 0xf8]
mov rcx, r15
mov rdx, rdi
mov r8, rsi
call fcn.1400762f0
mov rcx, r15
lea rdx, [rsp + 0x2c0]
call fcn.1400d1270
cmp byte [rsp + 0x10f], 0
jns 0x140067b22
mov rcx, qword [rsp + 0xf8]
call fcn.1401833ec
cmp byte [rsp + 0x24f], 0
jns 0x140067b39
mov rcx, qword [rsp + 0x238]
call fcn.1401833ec
cmp byte [rsp + 0x87], 0
jns 0x140067b4d
mov rcx, qword [rsp + 0x70]
call fcn.1401833ec
cmp byte [rsp + 0x297], 0
jns 0x140067b64
mov rcx, qword [rsp + 0x280]
call fcn.1401833ec
cmp byte [rsp + 0x267], 0
jns 0x140067b7b
mov rcx, qword [rsp + 0x250]
call fcn.1401833ec
test rbx, rbx
je 0x140068c0a
mov rcx, qword [rbx + 8]
test rcx, rcx
jne 0x140067bba
mov rax, qword [rbx + 0x10]
cmp qword [rax], rbx
mov rbx, rax
jne 0x140067b8d
mov rbx, rax
cmp rax, rbp
je 0x140067bc7
movzx r12d, byte [rbx + 0x37]
test r12b, r12b
js 0x1400679b1
mov esi, r12d
and esi, 0x7f
jmp 0x1400679b5
mov rax, rcx
mov rcx, qword [rcx]
test rcx, rcx
je 0x140067b99
jmp 0x140067bba
mov rdi, qword [r13]
mov rsi, qword [rdi + 0x90]
mov r12, qword [rdi + 0x98]
cmp rsi, r12
je 0x140067c52
lea rdi, [0x140283e70]
lea rbx, [rsp + 0x70]
lea r14, [rsp + 0xf8]
lea r15, [rsp + 0x2c0]
mov rcx, rbx
mov rdx, rdi
call fcn.1401c3730
mov rcx, r14
mov rdx, rbx
mov r8, rsi
call fcn.1400762f0
mov rcx, r14
mov rdx, r15
call fcn.1400d1270
cmp byte [rsp + 0x10f], 0
jns 0x140067c35
mov rcx, qword [rsp + 0xf8]
call fcn.1401833ec
cmp byte [rsp + 0x87], 0
jns 0x140067c49
mov rcx, qword [rsp + 0x70]
call fcn.1401833ec
add rsi, 0x18
cmp rsi, r12
jne 0x140067bfa
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, 0x1f0fff
mov edx, 1
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
jne 0x140067d31
cmp dword [0x1402b65e0], 2
jg 0x140067ccc
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rsi, [rsp + 0xf8]
mov rcx, rsi
mov r8d, 0x1a3
mov r9d, 2
call fcn.1401f99b0
lea rcx, [rsp + 0x108]
lea rdx, [0x140286087]
mov r8d, 0xb
call fcn.1401c1300
mov rcx, rsi
call fcn.1401f9a30
xor r15d, r15d
xor r12d, r12d
cmp byte [rsp + 0x2d7], 0
jns 0x140067ce9
mov rcx, qword [rsp + 0x2c0]
call fcn.1401833ec
xor eax, eax
cmp r12b, 1
adc rax, 1
mov qword [0x1402b6c20], rax
mov rcx, r13
call fcn.140076140
mov rcx, qword [rsp + 0x2d8]
xor rcx, rsp
call fcn.140186020
mov eax, r15d
movaps xmm6, xmmword [rsp + 0x2e0]
add rsp, 0x2f8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov rdi, rax
mov rax, qword [r13]
mov rax, qword [rax + 0xc8]
mov rcx, qword [0x1402aafc0]
mov r9, qword [0x1402aafb0]
mov r8, qword [0x1402aafa0]
movsxd rdx, edi
cmp rdx, rdi
jne 0x140068c1c
mov edx, edi
movsxd r10, eax
cmp r10, rax
jne 0x140068c24
movsxd r10, ecx
cmp r10, rcx
jne 0x140068c2c
movsxd r10, r9d
cmp r10, r9
jne 0x140068c34
movsxd r10, r8d
cmp r10, r8
jne 0x140068c3d
lea r10, [0x1402b6bf0]
mov qword [rsp + 0x48], r10
lea r10, [0x1402b6be0]
mov qword [rsp + 0x40], r10
lea r10, [0x1402b6bd0]
mov qword [rsp + 0x38], r10
mov dword [rsp + 0x30], edx
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], ecx
lea rdx, str.0x_x_0x_x_0x_x_0x_x_0x_x_0x_I64x_0x_I64x_0x_I64x
lea rsi, [rsp + 0x280]
mov rcx, rsi
call fcn.140121a90
lea rdx, str.__initial_client_data
lea rbx, [rsp + 0x250]
mov rcx, rbx
call fcn.1401c3730
movzx r8d, byte [rsi + 0x17]
test r8b, r8b
js 0x140067e00
and r8d, 0x7f
jmp 0x140067e10
mov r8, qword [rsp + 0x288]
mov rsi, qword [rsp + 0x280]
mov rcx, rbx
mov rdx, rsi
call fcn.14015d9f0
mov rcx, qword [rax + 0x10]
lea r15, [rsp + 0x70]
mov qword [r15 + 0x10], rcx
movups xmm0, xmmword [rax]
movaps xmmword [r15], xmm0
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov qword [rax + 0x10], 0
movzx ecx, byte [r15 + 0x17]
mov eax, ecx
and eax, 0x7f
test cl, cl
cmovs rax, qword [r15 + 8]
mov rcx, qword [r15]
cmovns rcx, r15
mov qword [rsp + 0xe8], rcx
mov qword [rsp + 0xf0], rax
test rax, rax
js 0x140068c16
mov qword [rsp + 0x50], r13
test rcx, rcx
jne 0x140067e81
test rax, rax
jne 0x140068c46
lea r13, [rsp + 0xf8]
lea rdx, [rsp + 0xe8]
mov rcx, r13
call fcn.140121e20
lea r12, [rsp + 0x2c0]
mov rcx, r13
mov rdx, r12
call fcn.1400d1270
cmp byte [r13 + 0x17], 0
jns 0x140067ec0
mov rcx, qword [rsp + 0xf8]
call fcn.1401833ec
cmp byte [rsp + 0x87], 0
jns 0x140067ed4
mov rcx, qword [rsp + 0x70]
call fcn.1401833ec
cmp byte [rsp + 0x267], 0
jns 0x140067eeb
mov rcx, qword [rsp + 0x250]
call fcn.1401833ec
cmp byte [rsp + 0x297], 0
jns 0x140067f02
mov rcx, qword [rsp + 0x280]
call fcn.1401833ec
xorps xmm6, xmm6
movaps xmmword [rsp + 0xa0], xmm6
movaps xmmword [rsp + 0xd0], xmm6
movaps xmmword [rsp + 0xc0], xmm6
movaps xmmword [rsp + 0xb0], xmm6
movaps xmmword [rsp + 0x90], xmm6
movaps xmmword [rsp + 0x80], xmm6
movaps xmmword [rsp + 0x70], xmm6
mov dword [rsp + 0xac], 0x100
mov rsi, qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov ecx, 0xfffffff6
call rsi
mov qword [rsp + 0xc0], rax
mov ecx, 0xfffffff5
call rsi
mov qword [rsp + 0xc8], rax
mov ecx, 0xfffffff4
call rsi
mov qword [rsp + 0xd0], rax
movaps xmmword [rsp + 0x280], xmm6
mov qword [rsp + 0x290], 0
mov eax, dword [0x1402b6c30]
mov ecx, dword [0x1402ab5e0]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140068b46
mov eax, dword [0x1402b6c40]
mov ecx, dword [0x1402ab5e0]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140068b9d
mov rax, qword [0x1402b6c28]
movabs rcx, 0xaaaaaaaaaaaaaaaa
test rax, rax
je 0x140068091
cmp qword [0x1402b6c38], 0
je 0x140068091
mov dword [rsp + 0x70], 0x70
lea r9, [rsp + 0x250]
mov qword [r9], rcx
xor ecx, ecx
mov edx, 1
xor r8d, r8d
call qword [0x1402c9008]
test eax, eax
je 0x1400683e7
cmp dword [0x1402b65e0], 2
jg 0x140068078
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rsi, [rsp + 0xf8]
mov rcx, rsi
mov r8d, 0x1d4
mov r9d, 2
call fcn.140007440
lea rcx, [rsp + 0x108]
lea rdx, str.InitializeProcThreadAttributeList__size__succeeded__expected_failure
mov r8d, 0x44
call fcn.1401c1300
mov rcx, rsi
call fcn.140007530
xor r14d, r14d
xor ebp, ebp
xor esi, esi
xor ebx, ebx
mov r13, qword [rsp + 0x50]
xor r12d, r12d
xor r15d, r15d
jmp 0x14006820c
mov dword [rsp + 0x70], 0x68
xor r14d, r14d
xor ebp, ebp
xor eax, eax
mov qword [rsp + 0x60], rax
xor ebx, ebx
xor esi, esi
mov rax, qword [rsp + 0x50]
mov rdx, qword [rax]
movzx r8d, byte [rdx + 0x17]
test r8b, r8b
js 0x140068334
cmp r8b, 0xc
jae 0x140068342
mov qword [rsp + 0x260], rcx
movaps xmm0, xmmword [0x14026cc70]
movaps xmmword [rsp + 0x250], xmm0
cmp byte [rsp + 0x2d7], 0
js 0x1400680f4
lea r12, [rsp + 0x2c0]
jmp 0x1400680fc
mov r12, qword [rsp + 0x2c0]
mov r13, qword [rsp + 0x50]
cmp byte [rdx + 0x17], 0
jns 0x14006810a
mov rdx, qword [rdx]
lea rax, [rsp + 0x250]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x40], r15
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], 1
mov rcx, rdx
mov rdx, r12
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x1400682d1
mov rcx, qword [rsp + 0x258]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [0x1402b65e0], 1
jg 0x140068172
cmp dword [0x1402aaf58], 0
je 0x140068172
test eax, eax
je 0x140068a9e
mov rcx, qword [rsp + 0x250]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [0x1402b65e0], 1
jg 0x14006819a
cmp dword [0x1402aaf58], 0
je 0x14006819a
test eax, eax
je 0x140068af2
mov rsi, qword [r13]
mov rcx, qword [rsi + 0xc8]
cmp rcx, 0xffffffffffffffff
je 0x1400681b8
call fcn.140060390
test al, al
je 0x140068c59
mov qword [rsi + 0xc8], 0xffffffffffffffff
xorps xmm0, xmm0
lea rdx, [rsp + 0xf8]
movups xmmword [rdx + 0x14], xmm0
movups xmmword [rdx + 4], xmm0
mov dword [rdx], 2
lea r8, [rsp + 0x238]
mov dword [r8 + 8], 0
mov qword [r8], 0
mov ecx, 0xa8
add rcx, qword [r13]
call fcn.14005eee0
mov r12d, eax
mov r15d, eax
mov rsi, qword [rsp + 0x60]
test rsi, rsi
je 0x140068290
mov eax, dword [0x1402b6c50]
mov ecx, dword [0x1402ab5e0]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jle 0x140068280
lea rcx, [0x1402b6c50]
call fcn.140183590
cmp dword [0x1402b6c50], 0xffffffff
jne 0x140068280
lea rcx, [0x140277570]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
test rax, rax
je 0x140068c49
lea rdx, [0x1402861e5]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1402b6c48], rax
lea rcx, [0x1402b6c50]
call fcn.1401835f8
mov rax, qword [0x1402b6c48]
mov rcx, rsi
call qword [0x1402c9008]
test rbx, rbx
je 0x14006829d
mov rcx, rbx
call fcn.140183588
test rbp, rbp
je 0x1400682bb
cmp r14, rbp
jne 0x140068a85
mov qword [rsp + 0x288], rbp
mov rcx, rbp
call fcn.1401833ec
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
jne 0x140067cd2
jmp 0x140068c5c
cmp dword [0x1402b65e0], 2
jg 0x140068329
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rsi, [rsp + 0xf8]
mov rcx, rsi
mov r8d, 0x21f
mov r9d, 2
call fcn.1401f99b0
lea rcx, [rsp + 0x108]
lea rdx, str.CreateProcess
mov r8d, 0xd
call fcn.1401c1300
mov rcx, rsi
call fcn.1401f9a30
xor r12d, r12d
xor r15d, r15d
jmp 0x140068207
mov r8, qword [rdx + 8]
cmp r8, 0xc
jb 0x1400680c9
add r8, 0xfffffffffffffff4
lea rax, [rsp + 0x250]
mov qword [rsp + 0x20], rax
mov rcx, r13
mov r9, 0xffffffffffffffff
call fcn.14001f150
cmp byte [rsp + 0x10f], 0
jns 0x140068374
mov r13, qword [rsp + 0xf8]
lea rdx, str.rundll32.exe
mov rcx, r13
call fcn.1401a0134
mov r13d, eax
cmp byte [rsp + 0x10f], 0
jns 0x14006839d
mov rcx, qword [rsp + 0xf8]
call fcn.1401833ec
cmp byte [rsp + 0x2d7], 0
jns 0x1400683af
mov r12, qword [rsp + 0x2c0]
movabs rax, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x260], rax
movaps xmm0, xmmword [0x14026cc70]
movaps xmmword [rsp + 0x250], xmm0
test r13d, r13d
je 0x140068a92
mov r13, qword [rsp + 0x50]
mov rdx, qword [r13]
jmp 0x140068101
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
je 0x140068453
cmp dword [0x1402b65e0], 2
jg 0x140068078
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rsi, [rsp + 0xf8]
mov rcx, rsi
mov r8d, 0x1d8
mov r9d, 2
call fcn.1401f99b0
lea rcx, [rsp + 0x108]
lea rdx, str.InitializeProcThreadAttributeList__size_
mov r8d, 0x28
call fcn.1401c1300
mov rcx, rsi
call fcn.1401f9a30
jmp 0x140068078
lea rsi, [rsp + 0x250]
mov rcx, qword [rsi]
call fcn.140183658
mov rbx, rax
mov qword [rsp + 0xd8], rax
mov rax, qword [0x1402b6c28]
mov rcx, rbx
mov edx, 1
xor r8d, r8d
mov r9, rsi
call qword [0x1402c9008]
test eax, eax
je 0x140068617
mov rsi, qword [rsp + 0xd8]
mov ecx, 0x40
call fcn.1401833f4
mov rbp, rax
add rax, 0x40
mov qword [rsp + 0x280], rbp
mov qword [rsp + 0x290], rax
test rbp, rbp
je 0x140068cac
mov rax, qword [0x1402aafa0]
mov qword [rbp], rax
mov rax, rbp
add rax, 8
mov qword [rsp + 0x288], rax
je 0x140068caf
mov qword [rsp + 0x58], rbx
mov rax, qword [0x1402aafb0]
mov qword [rbp + 8], rax
cmp rbp, 0xfffffffffffffff0
je 0x140068cb2
mov rax, qword [0x1402aafc0]
mov qword [rbp + 0x10], rax
lea rax, [rbp + 0x18]
mov qword [rsp + 0x288], rax
mov rbx, qword [rsp + 0x290]
mov rcx, qword [rsp + 0x50]
mov r8, qword [rcx]
cmp rax, rbx
mov qword [rsp + 0x60], rsi
je 0x14006867b
test rax, rax
je 0x140068cb5
mov rax, qword [r8 + 0xc8]
mov qword [rbp + 0x18], rax
mov rsi, rbp
add rsi, 0x20
mov qword [rsp + 0x288], rsi
mov r8, qword [rsp + 0x290]
mov rbx, qword [rsp + 0x58]
cmp rsi, r8
je 0x1400687de
test rsi, rsi
je 0x140068cb8
mov qword [rsi], rdi
add rsi, 8
mov qword [rsp + 0x288], rsi
mov rdx, qword [rsp + 0xc0]
lea rsi, [rsp + 0x280]
mov rcx, rsi
call fcn.1400c4d00
mov rdx, qword [rsp + 0xc8]
mov rcx, rsi
call fcn.1400c4d00
mov rdx, qword [rsp + 0xd0]
mov rcx, rsi
call fcn.1400c4d00
mov rbp, qword [rsi]
mov r14, qword [rsi + 8]
mov rdx, r14
sub rdx, rbp
je 0x1400688e6
mov rax, qword [0x1402b6c38]
mov rcx, qword [rsp + 0xd8]
xorps xmm0, xmm0
movups xmmword [rsp + 0x28], xmm0
mov qword [rsp + 0x20], rdx
mov r8d, 0x20002
xor edx, edx
mov r9, rbp
call qword [0x1402c9008]
test eax, eax
je 0x140068777
mov esi, 0x80000
movabs rcx, 0xaaaaaaaaaaaaaaaa
jmp 0x1400680a9
cmp dword [0x1402b65e0], 2
jg 0x14006866f
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rsi, [rsp + 0xf8]
mov rcx, rsi
mov r8d, 0x1e3
mov r9d, 2
call fcn.1401f99b0
lea rcx, [rsp + 0x108]
lea rdx, [0x140286158]
mov r8d, 0x21
call fcn.1401c1300
mov rcx, rsi
call fcn.1401f9a30
xor r14d, r14d
xor ebp, ebp
xor esi, esi
jmp 0x140068081
mov rax, rbx
sub rax, rbp
mov r14, rax
sar r14, 3
lea rdx, [r14 + 1]
mov rcx, rdx
shr rcx, 0x3d
jne 0x140068cbb
movabs rcx, 0x1fffffffffffffff
mov rsi, rax
sar rsi, 2
cmp rsi, rdx
cmovbe rsi, rdx
movabs rdx, 0x7ffffffffffffff8
cmp rax, rdx
cmovae rsi, rcx
test rsi, rsi
mov qword [rsp + 0x68], r8
je 0x140068cbe
cmp rsi, rcx
ja 0x140068cc5
lea rcx, [rsi*8]
call fcn.1401833f4
shl r14, 3
add r14, rax
je 0x140068cc8
lea r8, [rax + rsi*8]
mov rax, qword [rsp + 0x68]
mov rax, qword [rax + 0xc8]
mov qword [r14], rax
lea rsi, [r14 + 8]
cmp rbx, rbp
je 0x140068736
mov rax, qword [rbx - 8]
add rbx, 0xfffffffffffffff8
mov qword [r14 - 8], rax
add r14, 0xfffffffffffffff8
cmp rbx, rbp
jne 0x14006870f
mov rcx, qword [rsp + 0x280]
mov rbp, qword [rsp + 0x288]
jmp 0x140068739
mov rcx, rbp
mov qword [rsp + 0x280], r14
mov qword [rsp + 0x288], rsi
mov qword [rsp + 0x290], r8
mov rbx, qword [rsp + 0x58]
cmp rbp, rcx
je 0x140068766
add rbp, 0xfffffffffffffff8
jne 0x140068756
jmp 0x140068c50
test rcx, rcx
jne 0x1400688d6
mov rbp, r14
jmp 0x140068562
cmp dword [0x1402b65e0], 2
jg 0x1400687cf
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rsi, [rsp + 0xf8]
mov rcx, rsi
mov r8d, 0x1fd
mov r9d, 2
call fcn.1401f99b0
lea rcx, [rsp + 0x108]
lea rdx, [0x14028617a]
mov r8d, 0x19
call fcn.1401c1300
mov rcx, rsi
call fcn.1401f9a30
mov r13, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x60]
jmp 0x140068086
mov rax, r8
sub rax, rbp
mov rsi, rax
sar rsi, 3
lea rdx, [rsi + 1]
mov rcx, rdx
shr rcx, 0x3d
jne 0x140068ccb
movabs rcx, 0x1fffffffffffffff
mov rbx, rax
sar rbx, 2
cmp rbx, rdx
cmovbe rbx, rdx
movabs rdx, 0x7ffffffffffffff8
cmp rax, rdx
cmovae rbx, rcx
test rbx, rbx
je 0x1400688e9
cmp rbx, rcx
ja 0x140068cce
mov r14, r8
lea rcx, [rbx*8]
call fcn.1401833f4
shl rsi, 3
add rsi, rax
je 0x140068cd1
mov r8, r14
lea rax, [rax + rbx*8]
mov qword [rsi], rdi
lea rdx, [rsi + 8]
cmp r14, rbp
jne 0x140068871
mov rcx, rbp
mov rbx, qword [rsp + 0x58]
jmp 0x14006889b
mov rbx, qword [rsp + 0x58]
mov rcx, qword [r8 - 8]
add r8, 0xfffffffffffffff8
mov qword [rsi - 8], rcx
add rsi, 0xfffffffffffffff8
cmp r8, rbp
jne 0x140068876
mov rcx, qword [rsp + 0x280]
mov rbp, qword [rsp + 0x288]
mov qword [rsp + 0x280], rsi
mov qword [rsp + 0x288], rdx
mov qword [rsp + 0x290], rax
cmp rbp, rcx
je 0x1400688c3
add rbp, 0xfffffffffffffff8
jne 0x1400688b3
jmp 0x140068c53
test rcx, rcx
je 0x140068583
call fcn.1401833ec
jmp 0x140068583
mov rbp, r8
call fcn.1401833ec
mov r8, rbp
jmp 0x14006876f
int3
mov r14, r8
xor eax, eax
jmp 0x140068847
add rdi, 0x48
mov qword [rsp + 0x2a0], rdi
mov qword [rsp + 0x2a8], rax
test rdi, rdi
je 0x140068c19
lea rsi, [rsp + 0x70]
lea rdx, [rsp + 0x2a0]
mov rcx, rsi
call fcn.140121e20
lea rdx, [0x14027754c]
lea rdi, [rsp + 0x280]
mov rcx, rdi
call fcn.1401c3730
lea rbx, [rsp + 0xf8]
mov rcx, rbx
mov rdx, rdi
mov r8, rsi
call fcn.1400762f0
lea rdx, [rsp + 0x2c0]
mov rcx, rbx
call fcn.1400d1270
cmp byte [rbx + 0x17], 0
jns 0x140068975
mov rcx, qword [rsp + 0xf8]
call fcn.1401833ec
cmp byte [rsp + 0x297], 0
jns 0x14006898c
mov rcx, qword [rsp + 0x280]
call fcn.1401833ec
cmp byte [rsp + 0x87], 0
jns 0x1400689a0
mov rcx, qword [rsp + 0x70]
call fcn.1401833ec
mov rdi, qword [r13]
jmp 0x14006790c
add rdi, 0x18
lea rdx, str.database
lea rsi, [rsp + 0x70]
mov rcx, rsi
call fcn.1401c3730
lea rbx, [rsp + 0xf8]
mov rcx, rbx
mov rdx, rsi
mov r8, rdi
call fcn.1400762f0
lea rdx, [rsp + 0x2c0]
mov rcx, rbx
call fcn.1400d1270
cmp byte [rbx + 0x17], 0
jns 0x1400689fa
mov rcx, qword [rsp + 0xf8]
call fcn.1401833ec
cmp byte [rsp + 0x87], 0
jns 0x140068a0e
mov rcx, qword [rsp + 0x70]
call fcn.1401833ec
mov rdi, qword [r13]
jmp 0x1400678e6
add rdi, 0x30
lea rdx, str.metrics_dir
lea rsi, [rsp + 0x70]
mov rcx, rsi
call fcn.1401c3730
lea rbx, [rsp + 0xf8]
mov rcx, rbx
mov rdx, rsi
mov r8, rdi
call fcn.1400762f0
lea rdx, [rsp + 0x2c0]
mov rcx, rbx
call fcn.1400d1270
cmp byte [rbx + 0x17], 0
jns 0x140068a68
mov rcx, qword [rsp + 0xf8]
call fcn.1401833ec
cmp byte [rsp + 0x87], 0
jns 0x140068a7c
mov rcx, qword [rsp + 0x70]
call fcn.1401833ec
mov rdi, qword [r13]
jmp 0x1400678fb
add r14, 0xfffffffffffffff8
jne 0x1400682a2
int3
xor edx, edx
mov r13, qword [rsp + 0x50]
jmp 0x14006810a
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rsi, [rsp + 0xf8]
mov rcx, rsi
mov r8d, 0x224
mov r9d, 1
call fcn.1401f99b0
lea rcx, [rsp + 0x108]
lea rdx, str.CloseHandle_thread
mov r8d, 0x12
call fcn.1401c1300
mov rcx, rsi
call fcn.1401f9a30
jmp 0x140068172
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rsi, [rsp + 0xf8]
mov rcx, rsi
mov r8d, 0x227
mov r9d, 1
call fcn.1401f99b0
lea rcx, [rsp + 0x108]
lea rdx, str.CloseHandle_process
mov r8d, 0x13
call fcn.1401c1300
mov rcx, rsi
call fcn.1401f9a30
jmp 0x14006819a
lea rcx, [0x1402b6c30]
call fcn.140183590
cmp dword [0x1402b6c30], 0xffffffff
jne 0x140067fb2
lea rcx, [0x140277570]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
test rax, rax
je 0x140068b99
lea rdx, [0x1402860ac]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1402b6c28], rax
lea rcx, [0x1402b6c30]
call fcn.1401835f8
jmp 0x140067fb2
xor eax, eax
jmp 0x140068b81
lea rcx, [0x1402b6c40]
call fcn.140183590
cmp dword [0x1402b6c40], 0xffffffff
jne 0x140067fd7
cmp qword [0x1402b6c28], 0
je 0x140068bfa
lea rcx, [0x140277570]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
test rax, rax
je 0x140068bfa
lea rdx, [0x1402860d0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1402b6c38], rax
lea rcx, [0x1402b6c40]
call fcn.1401835f8
jmp 0x140067fd7
xor eax, eax
jmp 0x140068be2
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
xor eax, eax
jmp 0x14006826d
int3
int3
int3
int3
lea rdx, str.Free
lea r8, str....._third_partycrashpadcrashpadutilwin_scoped_handle.cc
lea rsi, [rsp + 0xf8]
mov rcx, rsi
mov r9d, 0x1e
call fcn.1400ed1b0
lea rdi, [rsp + 0x70]
mov rcx, rdi
mov rdx, rsi
call fcn.1401fae80
lea rdx, [0x140287b91]
mov rcx, rdi
call fcn.14020fca0
mov rcx, rdi
call fcn.1401faeb0
jmp 0x140067cd2
int3
int3
int3
int3
int3
int3
xor eax, eax
jmp 0x1400686e6
int3
int3
int3
int3
int3