Function at 0x14000ebbc
Capabilities:
Create process on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x388
movaps xmmword [rsp + 0x370], xmm7
movaps xmmword [rsp + 0x360], xmm6
mov r12, rcx
mov rax, qword [0x14030d038]
xor rax, rsp
mov qword [rsp + 0x358], rax
call fcn.140187a73
test al, al
jne 0x14000fda9
xorps xmm0, xmm0
lea rdx, [rsp + 0x340]
movaps xmmword [rdx], xmm0
mov qword [rdx + 0x10], 0
mov rcx, qword [r12]
call fcn.1400fdf16
mov r8, qword [r12]
mov rbp, qword [r8 + 0x78]
mov rdi, qword [r8 + 0x80]
cmp rbp, rdi
je 0x14000eca9
lea rsi, [rsp + 0x190]
lea r14, [rsp + 0x330]
lea rbx, [rsp + 0x340]
movzx eax, byte [rbp + 0x17]
test al, al
mov rcx, qword [rbp]
cmovns rcx, rbp
mov qword [rsp + 0x330], rcx
cmovs rax, qword [rbp + 8]
mov qword [rsp + 0x338], rax
mov rcx, rsi
mov rdx, r14
call fcn.1400d94d0
mov rcx, rsi
mov rdx, rbx
call fcn.1400fdf16
cmp byte [rsp + 0x1a7], 0
jns 0x14000ec9c
mov rcx, qword [rsp + 0x190]
call fcn.140112038
add rbp, 0x18
cmp rdi, rbp
jne 0x14000ec4c
mov r8, qword [r12]
movzx eax, byte [r8 + 0x2f]
test al, al
jns 0x14000ecb6
mov rax, qword [r8 + 0x20]
test rax, rax
jne 0x14000f152
movzx eax, byte [r8 + 0x47]
test al, al
jns 0x14000eccc
mov rax, qword [r8 + 0x38]
test rax, rax
jne 0x14000f1c6
movzx eax, byte [r8 + 0x5f]
test al, al
js 0x14000ece3
mov rcx, rax
jmp 0x14000ece7
mov rcx, qword [r8 + 0x50]
test rcx, rcx
jne 0x14000f241
mov rsi, qword [r8 + 0x60]
lea r13, [r8 + 0x68]
cmp rsi, r13
je 0x14000ef53
xorps xmm6, xmm6
lea rbx, [rsp + 0x2f0]
xor r14d, r14d
movaps xmmword [rsp + 0x2f0], xmm6
mov qword [rsp + 0x300], 0
movzx ebp, byte [rsi + 0x37]
test bpl, bpl
jns 0x14000ed36
mov rbp, qword [rsi + 0x28]
mov r15, qword [rsi + 0x20]
jmp 0x14000ed3a
lea r15, [rsi + 0x20]
lea rax, [rbp + 1]
cmp rax, 0xfffffffffffffff0
jae 0x14000fd9c
cmp rax, 0x17
jae 0x14000ed60
mov byte [rsp + 0x307], bpl
mov rdi, rbx
test rbp, rbp
jne 0x14000ed99
jmp 0x14000eda7
mov r14, r12
lea r12, [rbp + 0x11]
and r12, 0xfffffffffffffff0
mov rcx, r12
call fcn.140112048
mov rdi, rax
mov qword [rsp + 0x2f0], rax
bts r12, 0x3f
mov qword [rsp + 0x300], r12
mov r12, r14
xor r14d, r14d
mov qword [rsp + 0x2f8], rbp
mov rcx, rdi
mov rdx, r15
mov r8, rbp
call fcn.1401178b0
mov byte [rdi + rbp], r14b
mov rcx, rbx
mov dl, 0x3d
call fcn.1400afe42
movzx r8d, byte [rsi + 0x4f]
test r8b, r8b
jns 0x14000edc9
mov r8, qword [rsi + 0x40]
mov rdx, qword [rsi + 0x38]
jmp 0x14000edcd
lea rdx, [rsi + 0x38]
mov rcx, rbx
call fcn.1400bef6e
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x150], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x140], xmm0
movups xmmword [rax], xmm6
mov qword [rax + 0x10], 0
movzx eax, byte [rsp + 0x157]
test al, al
mov rcx, qword [rsp + 0x140]
lea rdx, [rsp + 0x140]
cmovns rcx, rdx
mov qword [rsp + 0x310], rcx
cmovs rax, qword [rsp + 0x148]
mov qword [rsp + 0x318], rax
lea rdi, [rsp + 0xa0]
mov rcx, rdi
lea rdx, [rsp + 0x310]
call fcn.1400d94d0
mov byte [rsp + 0x2e7], 0xa
movabs rax, 0x697461746f6e6e61
mov qword [rsp + 0x2d0], rax
mov word [rsp + 0x2d8], 0x6e6f
mov byte [rsp + 0x2da], r14b
lea rbp, [rsp + 0x190]
mov rcx, rbp
lea rdx, [rsp + 0x2d0]
mov r8, rdi
call fcn.1401f1a7a
mov rcx, rbp
lea rdx, [rsp + 0x340]
call fcn.1400fdf16
cmp byte [rsp + 0x1a7], r14b
jns 0x14000eeb4
mov rcx, qword [rsp + 0x190]
call fcn.140112038
cmp byte [rsp + 0x2e7], 0
jns 0x14000eecb
mov rcx, qword [rsp + 0x2d0]
call fcn.140112038
cmp byte [rsp + 0xb7], 0
jns 0x14000eee2
mov rcx, qword [rsp + 0xa0]
call fcn.140112038
cmp byte [rsp + 0x157], 0
jns 0x14000eef9
mov rcx, qword [rsp + 0x140]
call fcn.140112038
cmp byte [rsp + 0x307], 0
jns 0x14000ef10
mov rcx, qword [rsp + 0x2f0]
call fcn.140112038
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x14000ef26
mov rax, rcx
mov rcx, qword [rcx]
test rcx, rcx
jne 0x14000ef19
jmp 0x14000ef43
mov rax, qword [rsi + 0x10]
cmp qword [rax], rsi
je 0x14000ef43
add rsi, 0x10
mov rcx, qword [rsi]
lea rsi, [rcx + 0x10]
mov rax, qword [rcx + 0x10]
cmp qword [rax], rcx
jne 0x14000ef33
mov rsi, rax
cmp rax, r13
jne 0x14000ed0f
mov r8, qword [r12]
mov rsi, qword [r8 + 0x90]
mov rbx, qword [r8 + 0x98]
cmp rsi, rbx
je 0x14000effe
movabs r15, 0x656d686361747461
lea rdi, [rsp + 0x190]
lea r14, [rsp + 0xa0]
lea rbp, [rsp + 0x340]
mov byte [rsp + 0xb7], 0xa
mov qword [rsp + 0xa0], r15
mov word [rsp + 0xa8], 0x746e
mov byte [rsp + 0xaa], 0
mov rcx, rdi
mov rdx, r14
mov r8, rsi
call fcn.1401f1a7a
mov rcx, rdi
mov rdx, rbp
call fcn.1400fdf16
cmp byte [rsp + 0x1a7], 0
jns 0x14000efde
mov rcx, qword [rsp + 0x190]
call fcn.140112038
cmp byte [rsp + 0xb7], 0
jns 0x14000eff5
mov rcx, qword [rsp + 0xa0]
call fcn.140112038
add rsi, 0x18
cmp rbx, rsi
jne 0x14000ef8c
movabs r13, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x300], r13
movaps xmm6, xmmword [0x1402ae190]
movaps xmmword [rsp + 0x2f0], xmm6
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, 0x1f0fff
mov edx, 1
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_OpenProcess]
lea rbx, [0x1402aa288]
mov qword [rsp + 0x2f0], rbx
mov qword [rsp + 0x2f8], rax
mov byte [rsp + 0x300], 0
test rax, rax
jne 0x14000f300
mov ecx, 2
call fcn.1400f34e0
xor esi, esi
test al, al
je 0x14000f0c1
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x190]
mov rcx, rsi
mov r8d, 0x189
mov r9d, 2
call fcn.14019f9e0
lea rcx, [rsp + 0x1a0]
lea rdx, [0x1402c72f3]
mov r8d, 0xb
call fcn.1400ff874
mov rcx, rsi
call fcn.140183e60
xor esi, esi
mov qword [rsp + 0x2f0], rbx
cmp byte [rsp + 0x300], 0
jne 0x14000fdac
mov rcx, qword [rsp + 0x2f8]
test rcx, rcx
je 0x14000f0e9
call fcn.1401f17b8
cmp byte [rsp + 0x357], 0
jns 0x14000f100
mov rcx, qword [rsp + 0x340]
call fcn.140112038
cmp sil, 1
mov eax, 1
adc rax, 0
mov qword [0x1403154b0], rax
mov rcx, r12
call fcn.14001aa36
mov rcx, qword [rsp + 0x358]
xor rcx, rsp
call fcn.140115e50
mov eax, esi
movaps xmm6, xmmword [rsp + 0x360]
movaps xmm7, xmmword [rsp + 0x370]
add rsp, 0x388
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
add r8, 0x18
lea rdx, [rsp + 0xa0]
mov byte [rdx + 0x17], 8
movabs rax, 0x6573616261746164
mov qword [rdx], rax
mov byte [rdx + 8], 0
lea rsi, [rsp + 0x190]
mov rcx, rsi
call fcn.1401f1a7a
lea rdx, [rsp + 0x340]
mov rcx, rsi
call fcn.1400fdf16
cmp byte [rsi + 0x17], 0
jns 0x14000f1a6
mov rcx, qword [rsp + 0x190]
call fcn.140112038
cmp byte [rsp + 0xb7], 0
jns 0x14000f1bd
mov rcx, qword [rsp + 0xa0]
call fcn.140112038
mov r8, qword [r12]
jmp 0x14000ecbf
add r8, 0x30
lea rdx, [rsp + 0xa0]
mov byte [rdx + 0x17], 0xb
movabs rax, 0x2d7363697274656d
mov qword [rdx], rax
mov dword [rdx + 7], 0x7269642d
mov byte [rdx + 0xb], 0
lea rsi, [rsp + 0x190]
mov rcx, rsi
call fcn.1401f1a7a
lea rdx, [rsp + 0x340]
mov rcx, rsi
call fcn.1400fdf16
cmp byte [rsi + 0x17], 0
jns 0x14000f221
mov rcx, qword [rsp + 0x190]
call fcn.140112038
cmp byte [rsp + 0xb7], 0
jns 0x14000f238
mov rcx, qword [rsp + 0xa0]
call fcn.140112038
mov r8, qword [r12]
jmp 0x14000ecd5
lea rcx, [r8 + 0x48]
test al, al
cmovs rcx, qword [r8 + 0x48]
lea rdx, [rsp + 0x320]
mov qword [rdx], rcx
cmovs rax, qword [r8 + 0x50]
mov qword [rdx + 8], rax
lea rsi, [rsp + 0xa0]
mov rcx, rsi
call fcn.1400d94d0
lea rdx, [rsp + 0x140]
mov byte [rdx + 0x17], 3
movzx eax, word [0x1402c0e02]
mov word [rdx], ax
mov al, byte [0x1402c0e04]
mov byte [rdx + 2], al
mov byte [rdx + 3], 0
lea rdi, [rsp + 0x190]
mov rcx, rdi
mov r8, rsi
call fcn.1401f1a7a
lea rdx, [rsp + 0x340]
mov rcx, rdi
call fcn.1400fdf16
cmp byte [rdi + 0x17], 0
jns 0x14000f2c9
mov rcx, qword [rsp + 0x190]
call fcn.140112038
cmp byte [rsp + 0x157], 0
jns 0x14000f2e0
mov rcx, qword [rsp + 0x140]
call fcn.140112038
cmp byte [rsp + 0xb7], 0
jns 0x14000f2f7
mov rcx, qword [rsp + 0xa0]
call fcn.140112038
mov r8, qword [r12]
jmp 0x14000ecf0
lea rdi, [rsp + 0x140]
mov qword [rdi + 0x40], r13
movaps xmmword [rdi + 0x30], xmm6
movaps xmmword [rdi + 0x20], xmm6
movaps xmmword [rdi + 0x10], xmm6
movaps xmmword [rdi], xmm6
mov qword [rsp + 0x58], r12
mov rcx, qword [r12]
mov rcx, qword [rcx + 0xc8]
mov r9, qword [0x140310cf8]
mov r8, qword [0x140310cf0]
mov rdx, qword [0x140310ce8]
lea rbp, [0x140315480]
mov qword [rsp + 0x40], rbp
lea rbp, [0x140315470]
mov qword [rsp + 0x38], rbp
lea rbp, [0x140315460]
mov qword [rsp + 0x30], rbp
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
mov rcx, rdi
call fcn.140292bc6
lea rsi, [rsp + 0x2d0]
mov rcx, rdi
mov rdx, rsi
call fcn.1402199b6
movups xmm0, xmmword [str.__initial_client_data]
movaps xmmword [rsp + 0x110], xmm0
movabs rax, 0x3d617461642d746e
mov qword [rsp + 0x11e], rax
mov word [rsp + 0x126], 0x1600
movzx r8d, byte [rsi + 0x17]
test r8b, r8b
jns 0x14000f3ce
mov r8, qword [rsp + 0x2d8]
mov rsi, qword [rsp + 0x2d0]
lea rcx, [rsp + 0x110]
mov rdx, rsi
call fcn.1400bef6e
mov rcx, qword [rax + 0x10]
lea r15, [rsp + 0xa0]
mov qword [r15 + 0x10], rcx
movups xmm0, xmmword [rax]
movaps xmmword [r15], xmm0
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov qword [rax + 0x10], 0
movzx eax, byte [r15 + 0x17]
test al, al
mov rcx, qword [r15]
cmovns rcx, r15
lea rdx, [rsp + 0x130]
mov qword [rdx], rcx
cmovs rax, qword [r15 + 8]
mov qword [rdx + 8], rax
lea rdi, [rsp + 0x190]
mov rcx, rdi
call fcn.1400d94d0
lea r12, [rsp + 0x340]
mov rcx, rdi
mov rdx, r12
call fcn.1400fdf16
cmp byte [rdi + 0x17], 0
jns 0x14000f45b
mov rcx, qword [rsp + 0x190]
call fcn.140112038
cmp byte [rsp + 0xb7], 0
jns 0x14000f472
mov rcx, qword [rsp + 0xa0]
call fcn.140112038
cmp byte [rsp + 0x127], 0
jns 0x14000f489
mov rcx, qword [rsp + 0x110]
call fcn.140112038
cmp byte [rsp + 0x2e7], 0
jns 0x14000f4a0
mov rcx, qword [rsp + 0x2d0]
call fcn.140112038
movabs rsi, 0xaaaaaaaaaaaaaa00
xorps xmm7, xmm7
movaps xmmword [rsp + 0xd0], xmm7
movaps xmmword [rsp + 0x100], xmm7
movaps xmmword [rsp + 0xf0], xmm7
movaps xmmword [rsp + 0xe0], xmm7
movaps xmmword [rsp + 0xc0], xmm7
movaps xmmword [rsp + 0xb0], xmm7
movaps xmmword [rsp + 0xa0], xmm7
mov dword [rsp + 0xdc], 0x100
mov rbp, qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov ecx, 0xfffffff6
call rbp
mov qword [rsp + 0xf0], rax
mov ecx, 0xfffffff5
call rbp
mov qword [rsp + 0xf8], rax
mov ecx, 0xfffffff4
call rbp
mov qword [rsp + 0x100], rax
xor eax, eax
mov qword [rsp + 0x2e0], rax
movaps xmmword [rsp + 0x2d0], xmm7
mov qword [rsp + 0x120], rsi
lea r14, [0x1402a9ca8]
mov qword [rsp + 0x110], r14
mov qword [rsp + 0x118], rax
mov eax, dword [0x1403154c0]
mov ecx, dword [0x140311f48]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000fd00
mov eax, dword [0x1403154d0]
mov ecx, dword [0x140311f48]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000fd47
mov rbp, qword [0x1403154b8]
test rbp, rbp
je 0x14000f68d
cmp qword [0x1403154c8], 0
je 0x14000f68d
mov dword [rsp + 0xa0], 0x70
add rsi, 0xaa
lea r9, [rsp + 0x80]
mov qword [r9], rsi
xor ecx, ecx
mov edx, 1
xor r8d, r8d
call rbp
test eax, eax
jne 0x14000f949
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x14000f9a2
lea rsi, [rsp + 0x80]
mov rcx, qword [rsi]
call fcn.140112618
mov rbp, rax
mov qword [rsp + 0x108], rax
mov rcx, rax
mov edx, 1
xor r8d, r8d
mov r9, rsi
call qword [0x1403154b8]
test eax, eax
jne 0x14000fa5b
mov ecx, 2
call fcn.1400f34e0
test al, al
je 0x14000fa01
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x190]
mov rcx, rsi
mov r8d, 0x1c9
mov r9d, 2
call fcn.14019f9e0
lea rcx, [rsp + 0x1a0]
lea rdx, [0x1402c73c4]
mov r8d, 0x21
jmp 0x14000fce4
mov dword [rsp + 0xa0], 0x68
xor ebp, ebp
xor esi, esi
mov rax, qword [rsp + 0x58]
mov rdx, qword [rax]
movzx r8d, byte [rdx + 0x17]
test r8b, r8b
jns 0x14000f6bc
mov r8, qword [rdx + 8]
cmp r8, 0xc
jae 0x14000f6c2
xor edi, edi
jmp 0x14000f71c
cmp r8b, 0xc
jb 0x14000f6b8
add r8, 0xfffffffffffffff4
lea rax, [rdx + 0x18]
mov qword [rsp + 0x20], rax
mov rcx, rdi
mov r9, 0xffffffffffffffff
call fcn.1400d1d6e
cmp byte [rsp + 0x1a7], 0
jns 0x14000f6f0
mov rdi, qword [rsp + 0x190]
lea rdx, str.rundll32.exe
mov rcx, rdi
call fcn.140113054
test eax, eax
sete dil
cmp byte [rsp + 0x1a7], 0
jns 0x14000f71c
mov rcx, qword [rsp + 0x190]
call fcn.140112038
mov qword [rsp + 0x90], r13
movaps xmmword [rsp + 0x80], xmm6
cmp byte [rsp + 0x357], 0
jns 0x14000f73e
mov r12, qword [rsp + 0x340]
test dil, dil
je 0x14000f747
xor ecx, ecx
jmp 0x14000f758
mov rax, qword [rsp + 0x58]
mov rcx, qword [rax]
cmp byte [rcx + 0x17], 0
jns 0x14000f758
mov rcx, qword [rcx]
lea rax, [rsp + 0x80]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x40], r15
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], 1
mov rdx, r12
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x14000f800
mov ecx, 2
call fcn.1400f34e0
xor esi, esi
test al, al
mov r12, qword [rsp + 0x58]
je 0x14000fa08
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x190]
mov rcx, rsi
mov r8d, 0x205
mov r9d, 2
call fcn.14019f9e0
lea rcx, [rsp + 0x1a0]
lea rdx, str.CreateProcess
mov r8d, 0xd
call fcn.1400ff874
mov rcx, rsi
call fcn.140183e60
xor esi, esi
jmp 0x14000fa08
mov rcx, qword [rsp + 0x88]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, eax
mov ecx, 1
call fcn.1400f34e0
test al, al
mov r12, qword [rsp + 0x58]
je 0x14000f876
test esi, esi
jne 0x14000f876
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x190]
mov rcx, rsi
mov r8d, 0x20a
mov r9d, 1
call fcn.14019f9e0
lea rcx, [rsp + 0x1a0]
lea rdx, str.CloseHandle_thread
mov r8d, 0x12
call fcn.1400ff874
mov rcx, rsi
call fcn.140183e60
mov rcx, qword [rsp + 0x80]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, eax
mov ecx, 1
call fcn.1400f34e0
test al, al
je 0x14000f8e7
test esi, esi
jne 0x14000f8e7
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x190]
mov rcx, rsi
mov r8d, 0x20d
mov r9d, 1
call fcn.14019f9e0
lea rcx, [rsp + 0x1a0]
lea rdx, str.CloseHandle_process
mov r8d, 0x13
call fcn.1400ff874
mov rcx, rsi
call fcn.140183e60
mov ecx, 0xc0
add rcx, qword [r12]
lea rsi, [rsp + 0x190]
mov qword [rsi], 0xffffffffffffffff
mov rdx, rsi
call fcn.14014d74c
xorps xmm0, xmm0
movups xmmword [rsi + 0x14], xmm0
movups xmmword [rsi + 4], xmm0
mov dword [rsi], 2
lea r8, [rsp + 0x70]
mov dword [r8 + 8], 0
mov qword [r8], 0
mov ecx, 0xa8
add rcx, qword [r12]
lea rdx, [rsp + 0x190]
call fcn.14000d594
mov esi, eax
jmp 0x14000fa08
mov ecx, 2
call fcn.1400f34e0
test al, al
je 0x14000f9ff
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x190]
mov rcx, rsi
mov r8d, 0x1ba
mov r9d, 2
call fcn.14019a740
lea rcx, [rsp + 0x1a0]
lea rdx, str.InitializeProcThreadAttributeList__size__succeeded__expected_failure
mov r8d, 0x44
call fcn.1400ff874
mov rcx, rsi
call fcn.140001d00
jmp 0x14000f9ff
mov ecx, 2
call fcn.1400f34e0
test al, al
je 0x14000f9ff
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x190]
mov rcx, rsi
mov r8d, 0x1be
mov r9d, 2
call fcn.14019f9e0
lea rcx, [rsp + 0x1a0]
lea rdx, str.InitializeProcThreadAttributeList__size_
mov r8d, 0x28
call fcn.1400ff874
mov rcx, rsi
call fcn.140183e60
xor ebp, ebp
xor esi, esi
mov r12, qword [rsp + 0x58]
mov qword [rsp + 0x110], r14
cmp byte [rsp + 0x120], 0
jne 0x14000fdaf
lea rcx, [rsp + 0x110]
call fcn.1401f1c8c
test rbp, rbp
je 0x14000fa38
mov rcx, rbp
call fcn.140112040
mov rcx, qword [rsp + 0x2d0]
test rcx, rcx
je 0x14000f0c1
mov qword [rsp + 0x2d8], rcx
call fcn.140112038
jmp 0x14000f0c1
lea rsi, [rsp + 0x110]
mov rcx, rsi
call fcn.1401f1c8c
mov qword [rsp + 0x68], rbp
mov qword [rsi + 8], rbp
mov rcx, qword [rsp + 0x2d0]
mov rsi, qword [rsp + 0x2e0]
mov rax, rsi
sub rax, rcx
sar rax, 3
cmp rax, 7
ja 0x14000faea
mov rbp, qword [rsp + 0x2d8]
mov qword [rsp + 0x60], rcx
sub rbp, rcx
mov ecx, 0x40
call fcn.140112048
mov r14, rax
add rax, rbp
mov rsi, r14
add rsi, 0x40
test rbp, rbp
jg 0x14000fdb2
mov qword [rsp + 0x2d0], r14
mov qword [rsp + 0x2d8], rax
mov qword [rsp + 0x2e0], rsi
mov rcx, qword [rsp + 0x60]
test rcx, rcx
jne 0x14000fdcd
mov rax, qword [rsp + 0x2d8]
cmp rax, rsi
lea r14, [0x1402a9ca8]
mov rbp, qword [rsp + 0x68]
jne 0x14000fb20
lea rdx, [0x140310ce8]
lea rsi, [rsp + 0x2d0]
mov rcx, rsi
call fcn.14019733c
mov rax, qword [rsi + 8]
jmp 0x14000fb36
mov rcx, qword [0x140310ce8]
mov qword [rax], rcx
add rax, 8
mov qword [rsp + 0x2d8], rax
cmp rax, qword [rsp + 0x2e0]
jne 0x14000fb5d
lea rdx, [0x140310cf0]
lea rsi, [rsp + 0x2d0]
mov rcx, rsi
call fcn.14019733c
mov rax, qword [rsi + 8]
jmp 0x14000fb73
mov rcx, qword [0x140310cf0]
mov qword [rax], rcx
add rax, 8
mov qword [rsp + 0x2d8], rax
cmp rax, qword [rsp + 0x2e0]
jne 0x14000fb9a
lea rdx, [0x140310cf8]
lea rsi, [rsp + 0x2d0]
mov rcx, rsi
call fcn.14019733c
mov rax, qword [rsi + 8]
jmp 0x14000fbb0
mov rcx, qword [0x140310cf8]
mov qword [rax], rcx
add rax, 8
mov qword [rsp + 0x2d8], rax
mov edx, 0xc8
mov rcx, qword [rsp + 0x58]
add rdx, qword [rcx]
cmp rax, qword [rsp + 0x2e0]
jne 0x14000fbdd
lea rsi, [rsp + 0x2d0]
mov rcx, rsi
call fcn.14019733c
mov rax, qword [rsi + 8]
jmp 0x14000fbef
mov rcx, qword [rdx]
mov qword [rax], rcx
add rax, 8
mov qword [rsp + 0x2d8], rax
cmp rax, qword [rsp + 0x2e0]
jne 0x14000fc10
lea rdx, [rsp + 0x2f8]
lea rcx, [rsp + 0x2d0]
call fcn.14019733c
jmp 0x14000fc27
mov rcx, qword [rsp + 0x2f8]
mov qword [rax], rcx
add rax, 8
mov qword [rsp + 0x2d8], rax
mov rdx, qword [rsp + 0xf0]
lea rsi, [rsp + 0x2d0]
mov rcx, rsi
call fcn.1401f1c02
mov rdx, qword [rsp + 0xf8]
mov rcx, rsi
call fcn.1401f1c02
mov rdx, qword [rsp + 0x100]
mov rcx, rsi
call fcn.1401f1c02
mov r9, qword [rsi]
mov rax, qword [rsi + 8]
sub rax, r9
mov rcx, qword [rsp + 0x108]
xorps xmm0, xmm0
movups xmmword [rsp + 0x28], xmm0
mov qword [rsp + 0x20], rax
mov r8d, 0x20002
xor edx, edx
call qword [0x1403154c8]
test eax, eax
jne 0x14000fcf6
mov ecx, 2
call fcn.1400f34e0
test al, al
je 0x14000fa01
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x190]
mov rcx, rsi
mov r8d, 0x1e3
mov r9d, 2
call fcn.14019f9e0
lea rcx, [rsp + 0x1a0]
lea rdx, [0x1402c73e6]
mov r8d, 0x19
call fcn.1400ff874
mov rcx, rsi
call fcn.140183e60
jmp 0x14000fa01
mov esi, 0x80000
jmp 0x14000f69c
lea rcx, [0x1403154c0]
call fcn.1401120e4
cmp dword [0x1403154c0], 0xffffffff
jne 0x14000f57a
lea rcx, [0x1402b2b3a]
lea rdx, str.::InitializeProcThreadAttributeList
xor r8d, r8d
call fcn.14017b2b2
mov qword [0x1403154b8], rax
lea rcx, [0x1403154c0]
call fcn.140112084
jmp 0x14000f57a
lea rcx, [0x1403154d0]
call fcn.1401120e4
cmp dword [0x1403154d0], 0xffffffff
jne 0x14000f59f
cmp qword [0x1403154b8], 0
jne 0x14000fd6e
xor eax, eax
jmp 0x14000fd84
lea rcx, [0x1402b2b3a]
lea rdx, str.::UpdateProcThreadAttribute
xor r8d, r8d
call fcn.14017b2b2
mov qword [0x1403154c8], rax
lea rcx, [0x1403154d0]
call fcn.140112084
jmp 0x14000f59f
lea rcx, [rsp + 0x2f0]
call fcn.1401573b4
int3
int3
int3
mov rcx, r14
mov rdx, qword [rsp + 0x60]
mov r8, rbp
mov rbp, rax
call fcn.1401178b0
mov rax, rbp
jmp 0x14000fac4
call fcn.140112038
mov rsi, qword [rsp + 0x2e0]
jmp 0x14000faea