Function at 0x14006fae0
Capabilities:
Create process on windows

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r13
push r15
lea rbp, [rsp - 0xa20]
sub rsp, 0xb20
mov rax, qword [0x140100258]
xor rax, rsp
mov qword [rbp + 0xa10], rax
xor r15d, r15d
mov qword [rsp + 0x58], rcx
mov r13d, r15d
mov dword [rsp + 0x54], r15d
mov rsi, rcx
call fcn.14003d160
test al, al
je 0x14006fb79
mov r9d, 0x165
mov dword [rsp + 0x20], 4
lea r8, str..._.._.._client_crashpad_client_win.cc
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace::StartHandlerProcess_class_std::unique_ptr_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData_struct_std::default_delete_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData____
lea rcx, [rbp + 0x320]
call fcn.140028380
mov rcx, rax
lea rdx, str.Check_failed:__IsThreadInLoaderLock__
call fcn.140007ed0
mov rcx, rax
lea rdx, [0x1400ca83c]
call fcn.140007ed0
mov r13d, 1
mov dword [rsp + 0x54], r13d
test r13b, 1
je 0x14006fb94
and r13d, 0xfffffffe
lea rcx, [rbp + 0x320]
mov dword [rsp + 0x54], r13d
call fcn.140028580
mov rcx, qword [rsi]
lea rdx, [rbp + 0x528]
mov qword [rbp + 0x528], r15
mov qword [rbp + 0x538], r15
mov qword [rbp + 0x540], 7
call fcn.1400c43b0
mov rax, qword [rsi]
mov r8, rax
mov rbx, qword [rax + 0x90]
mov rdi, qword [rax + 0x98]
cmp rbx, rdi
je 0x14006fc94
nop dword [rax]
cmp qword [rbx + 0x18], 0x10
mov rax, rbx
jb 0x14006fbed
mov rax, qword [rbx]
mov qword [rbp - 0x50], rax
lea rdx, [rbp + 0x60]
mov rax, qword [rbx + 0x10]
lea rcx, [rbp + 0x698]
mov qword [rbp - 0x48], rax
movaps xmm0, xmmword [rbp - 0x50]
movdqa xmmword [rbp + 0x60], xmm0
call fcn.140026ad0
mov rcx, rax
lea rdx, [rbp + 0x528]
call fcn.1400c43b0
mov rdx, qword [rbp + 0x6b0]
cmp rdx, 8
jb 0x14006fc67
mov rcx, qword [rbp + 0x698]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006fc62
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007163d
call fcn.14008df80
add rbx, 0x20
mov qword [rbp + 0x6a8], r15
mov qword [rbp + 0x6b0], 7
mov word [rbp + 0x698], r15w
cmp rbx, rdi
jne 0x14006fbe0
mov rax, qword [rsi]
mov r8, rax
cmp qword [rax + 0x30], r15
je 0x14006fdaf
movabs rax, 0x6573616261746164
mov qword [rbp + 0x660], 0xf
add r8, 0x20
mov qword [rbp + 0x648], rax
lea rdx, [rbp + 0x648]
mov qword [rbp + 0x658], 8
lea rcx, [rbp + 0x6b8]
mov byte [rbp + 0x650], r15b
call fcn.14006f540
mov rcx, rax
lea rdx, [rbp + 0x528]
call fcn.1400c43b0
mov rdx, qword [rbp + 0x6d0]
cmp rdx, 8
jb 0x14006fd38
mov rcx, qword [rbp + 0x6b8]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006fd33
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140071637
call fcn.14008df80
mov rdx, qword [rbp + 0x660]
mov qword [rbp + 0x6c8], r15
mov qword [rbp + 0x6d0], 7
mov word [rbp + 0x6b8], r15w
cmp rdx, 0x10
jb 0x14006fd93
mov rcx, qword [rbp + 0x648]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006fd8e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140071637
call fcn.14008df80
mov rax, qword [rsi]
mov qword [rbp + 0x658], r15
mov qword [rbp + 0x660], 0xf
mov byte [rbp + 0x648], r15b
cmp qword [rax + 0x50], r15
je 0x14006fee7
movzx eax, word [0x1400c7f10]
lea rdx, [rbp + 0x588]
mov r8, qword [rsi]
lea rcx, [rbp + 0x6d8]
movsd xmm0, qword [str.metrics_dir]
add r8, 0x40
mov word [rbp + 0x590], ax
movzx eax, byte [0x1400c7f12]
mov byte [rbp + 0x592], al
mov qword [rbp + 0x5a0], 0xf
mov qword [rbp + 0x598], 0xb
movsd qword [rbp + 0x588], xmm0
mov byte [rbp + 0x593], r15b
call fcn.14006f540
mov rcx, rax
lea rdx, [rbp + 0x528]
call fcn.1400c43b0
mov rdx, qword [rbp + 0x6f0]
cmp rdx, 8
jb 0x14006fe70
mov rcx, qword [rbp + 0x6d8]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006fe6b
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140071643
call fcn.14008df80
mov rdx, qword [rbp + 0x5a0]
mov qword [rbp + 0x6e8], r15
mov qword [rbp + 0x6f0], 7
mov word [rbp + 0x6d8], r15w
cmp rdx, 0x10
jb 0x14006fecb
mov rcx, qword [rbp + 0x588]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006fec6
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140071643
call fcn.14008df80
mov rax, qword [rsi]
mov qword [rbp + 0x598], r15
mov qword [rbp + 0x5a0], 0xf
mov byte [rbp + 0x588], r15b
cmp qword [rax + 0x70], r15
je 0x1400700a9
movzx eax, word [0x1400c7fbc]
mov qword [rbp + 0x5a8], r15
mov word [rbp + 0x5a8], ax
movzx eax, byte [0x1400c7fbe]
mov byte [rbp + 0x5aa], al
mov rax, qword [rsi]
mov qword [rbp + 0x5c0], 0xf
mov qword [rbp + 0x5b8], 3
mov byte [rbp + 0x5ab], r15b
cmp qword [rax + 0x78], 0x10
lea rcx, [rax + 0x60]
jb 0x14006ff42
mov rcx, qword [rax + 0x60]
mov rax, qword [rax + 0x70]
lea rdx, [rbp + 0x70]
mov qword [rbp - 0x40], rcx
lea rcx, [rbp + 0x7b8]
mov qword [rbp - 0x38], rax
movaps xmm0, xmmword [rbp - 0x40]
movdqa xmmword [rbp + 0x70], xmm0
call fcn.140026ad0
mov r8, rax
lea rdx, [rbp + 0x5a8]
lea rcx, [rbp + 0x6f8]
call fcn.14006f540
mov rcx, rax
lea rdx, [rbp + 0x528]
call fcn.1400c43b0
mov rdx, qword [rbp + 0x710]
cmp rdx, 8
jb 0x14006ffd2
mov rcx, qword [rbp + 0x6f8]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006ffcd
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140071649
call fcn.14008df80
mov rdx, qword [rbp + 0x7d0]
mov qword [rbp + 0x708], r15
mov qword [rbp + 0x710], 7
mov word [rbp + 0x6f8], r15w
cmp rdx, 8
jb 0x140070032
mov rcx, qword [rbp + 0x7b8]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007002d
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140071649
call fcn.14008df80
mov rdx, qword [rbp + 0x5c0]
mov qword [rbp + 0x7c8], r15
mov qword [rbp + 0x7d0], 7
mov word [rbp + 0x7b8], r15w
cmp rdx, 0x10
jb 0x14007008d
mov rcx, qword [rbp + 0x5a8]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140070088
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140071649
call fcn.14008df80
mov rax, qword [rsi]
mov qword [rbp + 0x5b8], r15
mov qword [rbp + 0x5c0], 0xf
mov byte [rbp + 0x5a8], r15b
mov rbx, qword [rax + 0x80]
xor ecx, ecx
mov qword [rsp + 0xb58], r12
mov qword [rsp + 0xb60], r14
mov byte [rsp + 0x50], cl
mov rbx, qword [rbx]
lea r8d, [rcx + 0x16]
cmp byte [rbx + 0x19], cl
jne 0x1400704ed
mov r13, qword [rbx + 0x30]
movabs rcx, 0x7fffffffffffffff
movsd xmm0, qword [str.annotation]
movabs rdx, 0x8000000000000027
movzx eax, word [0x1400c7ec8]
mov qword [rbp + 0x600], 0xf
mov qword [rbp + 0x5f8], 0xa
movsd qword [rbp + 0x5e8], xmm0
mov word [rbp + 0x5f0], ax
mov byte [rbp + 0x5f2], 0
cmp r13, rcx
je 0x14007165b
cmp qword [rbx + 0x38], 0x10
lea r12, [rbx + 0x20]
jb 0x140070141
mov r12, qword [rbx + 0x20]
mov qword [rbp + 0x548], r15
lea rsi, [rbp + 0x548]
mov qword [rbp + 0x558], r15
mov edi, 0xf
mov qword [rbp + 0x560], r15
lea r15, [r13 + 1]
cmp r15, rdi
jbe 0x1400701d8
mov rdi, r15
or rdi, 0xf
cmp rdi, rcx
jbe 0x14007017f
mov rdi, rcx
mov rax, rdx
jmp 0x1400701a1
cmp rdi, 0x16
cmovb rdi, r8
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x1400701c0
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14007164f
mov rcx, rax
call fcn.14008df44
test rax, rax
je 0x140071655
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x1400701d1
test rcx, rcx
je 0x1400701cc
call fcn.14008df44
jmp 0x1400701ce
xor eax, eax
mov rsi, rax
mov qword [rbp + 0x548], rsi
mov r8, r13
mov qword [rbp + 0x558], r15
mov rdx, r12
mov qword [rbp + 0x560], rdi
mov rcx, rsi
call fcn.14008f1a0
mov byte [rsi + r13], 0x3d
lea rdx, [rbx + 0x40]
mov byte [rsi + r15], 0
cmp qword [rbx + 0x58], 0x10
jb 0x14007020d
mov rdx, qword [rbx + 0x40]
mov r8, qword [rbx + 0x50]
lea rcx, [rbp + 0x548]
call fcn.14000ef60
xor r15d, r15d
lea rdx, [rbp + 0x80]
lea rcx, [rbp + 0x738]
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x5c8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x5d8], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], r15b
lea rax, [rbp + 0x5c8]
cmp qword [rbp + 0x5e0], 0x10
cmovae rax, qword [rbp + 0x5c8]
mov qword [rbp - 0x30], rax
mov rax, qword [rbp + 0x5d8]
mov qword [rbp - 0x28], rax
movaps xmm0, xmmword [rbp - 0x30]
movdqa xmmword [rbp + 0x80], xmm0
call fcn.140026ad0
mov r8, rax
lea rdx, [rbp + 0x5e8]
lea rcx, [rbp + 0x718]
call fcn.14006f540
mov rcx, rax
lea rdx, [rbp + 0x528]
call fcn.1400c43b0
mov rdx, qword [rbp + 0x730]
cmp rdx, 8
jb 0x1400702f4
mov rcx, qword [rbp + 0x718]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400702ef
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140071655
call fcn.14008df80
mov rdx, qword [rbp + 0x750]
mov qword [rbp + 0x728], r15
mov qword [rbp + 0x730], 7
mov word [rbp + 0x718], r15w
cmp rdx, 8
jb 0x140070354
mov rcx, qword [rbp + 0x738]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007034f
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140071655
call fcn.14008df80
mov rdx, qword [rbp + 0x5e0]
mov qword [rbp + 0x748], r15
mov qword [rbp + 0x750], 7
mov word [rbp + 0x738], r15w
cmp rdx, 0x10
jb 0x1400703af
mov rcx, qword [rbp + 0x5c8]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400703aa
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140071655
call fcn.14008df80
mov rdx, qword [rbp + 0x560]
mov qword [rbp + 0x5d8], r15
mov qword [rbp + 0x5e0], 0xf
mov byte [rbp + 0x5c8], r15b
cmp rdx, 0x10
jb 0x140070409
mov rcx, qword [rbp + 0x548]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140070404
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140071655
call fcn.14008df80
mov rdx, qword [rbp + 0x600]
mov qword [rbp + 0x558], r15
mov qword [rbp + 0x560], 0xf
mov byte [rbp + 0x548], r15b
cmp rdx, 0x10
jb 0x140070463
mov rcx, qword [rbp + 0x5e8]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007045e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140071655
call fcn.14008df80
mov rax, qword [rbx + 0x10]
mov qword [rbp + 0x5f8], r15
mov qword [rbp + 0x600], 0xf
mov byte [rbp + 0x5e8], r15b
cmp byte [rax + 0x19], r15b
je 0x1400704a8
mov rax, qword [rbx + 8]
cmp byte [rax + 0x19], r15b
jne 0x1400704a3
cmp rbx, qword [rax + 0x10]
jne 0x1400704a3
mov rbx, rax
mov rax, qword [rax + 8]
cmp byte [rax + 0x19], r15b
je 0x140070490
mov rbx, rax
jmp 0x1400704cf
mov rcx, qword [rax]
mov rbx, rax
cmp byte [rcx + 0x19], r15b
jne 0x1400704cf
nop dword [rax]
nop dword [rax + rax]
mov rax, qword [rcx]
mov rbx, rcx
mov rcx, rax
cmp byte [rax + 0x19], r15b
je 0x1400704c0
cmp byte [rbx + 0x19], r15b
jne 0x1400704e0
mov r8d, 0x16
jmp 0x1400700d6
mov rsi, qword [rsp + 0x58]
mov r13d, dword [rsp + 0x54]
mov rax, qword [rsi]
mov rbx, qword [rax + 0xa8]
mov rdi, qword [rax + 0xb0]
cmp rbx, rdi
je 0x140070637
nop dword [rax]
nop dword [rax + rax]
movsd xmm0, qword [0x1400c7ed0]
lea rdx, [rbp + 0x608]
movzx eax, word [0x1400c7ed8]
lea rcx, [rbp + 0x758]
mov r8, rbx
movsd qword [rbp + 0x608], xmm0
mov word [rbp + 0x610], ax
mov qword [rbp + 0x620], 0xf
mov qword [rbp + 0x618], 0xa
mov byte [rbp + 0x612], 0
call fcn.14006f540
mov rcx, rax
lea rdx, [rbp + 0x528]
call fcn.1400c43b0
mov rdx, qword [rbp + 0x770]
cmp rdx, 8
jb 0x1400705b6
mov rcx, qword [rbp + 0x758]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400705b1
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140071661
call fcn.14008df80
mov rdx, qword [rbp + 0x620]
mov qword [rbp + 0x768], r15
mov qword [rbp + 0x770], 7
mov word [rbp + 0x758], r15w
cmp rdx, 0x10
jb 0x140070611
mov rcx, qword [rbp + 0x608]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007060c
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140071661
call fcn.14008df80
add rbx, 0x20
mov qword [rbp + 0x618], r15
mov qword [rbp + 0x620], 0xf
mov byte [rbp + 0x608], 0
cmp rbx, rdi
jne 0x140070510
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov edx, 1
mov ecx, 0x1f0fff
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [rsp + 0x78], rax
mov r12, rax
test rax, rax
jne 0x14007072c
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x28], eax
lea r8, str..._.._.._client_crashpad_client_win.cc
mov r9d, 0x18c
mov dword [rsp + 0x20], 2
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace::StartHandlerProcess_class_std::unique_ptr_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData_struct_std::default_delete_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData____
lea rcx, [rbp + 0x1c0]
call fcn.140028500
mov rcx, rax
lea rdx, [0x1400d7440]
call fcn.140007ed0
lea rcx, [rbp + 0x1c0]
or r13d, 2
call fcn.140028830
mov rdx, qword [rbp + 0x540]
cmp rdx, 8
jb 0x1400706f7
mov rcx, qword [rbp + 0x528]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400706f2
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140071631
call fcn.14008df80
mov qword [rbp + 0x538], r15
mov qword [rbp + 0x540], 7
mov word [rbp + 0x528], r15w
bt r13d, 0xa
jae 0x140070724
lea rcx, [rbp + 0xb8]
call fcn.140028580
mov rcx, rsi
jmp 0x1400714f4
mov rax, qword [rsi]
lea rcx, [0x140103948]
mov r9, qword [0x140100068]
mov r8, qword [0x140100060]
mov rdx, qword [0x140100058]
mov rax, qword [rax + 0xe0]
mov qword [rsp + 0x40], rcx
lea rcx, [0x140103930]
mov qword [rsp + 0x38], rcx
lea rcx, [0x140103918]
mov qword [rsp + 0x30], rcx
lea rcx, [rbp + 0x2d0]
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], rax
call fcn.14002b0c0
mov r8d, 0x16
mov qword [rbp + 0x628], r15
lea rdx, str.__initial_client_data
mov qword [rbp + 0x638], r15
lea rcx, [rbp + 0x628]
mov qword [rbp + 0x640], 0xf
call fcn.14000eff0
lea rdx, [rbp + 0x798]
lea rcx, [rbp + 0x2d0]
call fcn.14002b4e0
movzx edx, byte [rsp + 0x50]
lea r8, [rbp + 0x628]
mov r9, rax
lea rcx, [rbp + 0x668]
call fcn.14005dcb0
cmp qword [rbp + 0x680], 0x10
lea rax, [rbp + 0x668]
lea rdx, [rbp + 0x90]
cmovae rax, qword [rbp + 0x668]
lea rcx, [rbp + 0x778]
mov qword [rbp - 0x20], rax
mov rax, qword [rbp + 0x678]
mov qword [rbp - 0x18], rax
movaps xmm0, xmmword [rbp - 0x20]
movdqa xmmword [rbp + 0x90], xmm0
call fcn.140026ad0
mov rcx, rax
lea rdx, [rbp + 0x528]
call fcn.1400c43b0
mov rdx, qword [rbp + 0x790]
cmp rdx, 8
jb 0x14007087f
mov rcx, qword [rbp + 0x778]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007087a
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140071667
call fcn.14008df80
mov rdx, qword [rbp + 0x680]
mov qword [rbp + 0x788], r15
mov qword [rbp + 0x790], 7
mov word [rbp + 0x778], r15w
cmp rdx, 0x10
jb 0x1400708da
mov rcx, qword [rbp + 0x668]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400708d5
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140071667
call fcn.14008df80
mov rdx, qword [rbp + 0x640]
mov qword [rbp + 0x678], r15
mov qword [rbp + 0x680], 0xf
mov byte [rbp + 0x668], 0
cmp rdx, 0x10
jb 0x140070934
mov rcx, qword [rbp + 0x628]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007092f
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140071667
call fcn.14008df80
mov rdx, qword [rbp + 0x7b0]
mov qword [rbp + 0x638], r15
mov qword [rbp + 0x640], 0xf
mov byte [rbp + 0x628], 0
cmp rdx, 0x10
jb 0x14007098e
mov rcx, qword [rbp + 0x798]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140070989
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140071667
call fcn.14008df80
xorps xmm0, xmm0
mov qword [rbp + 0x7a8], r15
movups xmmword [rbp + 0x20], xmm0
mov ecx, 0xfffffff6
mov dword [rbp + 0x2c], 0x100
mov qword [rbp + 0x7b0], 0xf
mov byte [rbp + 0x798], 0
movups xmmword [rbp - 0x10], xmm0
movups xmmword [rbp], xmm0
movups xmmword [rbp + 0x10], xmm0
movups xmmword [rbp + 0x30], xmm0
movups xmmword [rbp + 0x40], xmm0
movups xmmword [rbp + 0x50], xmm0
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov ecx, 0xfffffff5
mov qword [rbp + 0x40], rax
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov ecx, 0xfffffff4
mov qword [rbp + 0x48], rax
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov ecx, dword [0x140104188]
mov rsi, r15
mov qword [rbp + 0x50], rax
mov r14, r15
mov rax, qword gs:[0x58]
mov rbx, r15
mov qword [rsp + 0x60], r15
mov rdi, r15
mov qword [rsp + 0x70], r15
mov edx, 0x80
mov r15, qword [rax + rcx*8]
add r15, rdx
mov qword [rbp - 0x80], r15
mov eax, dword [r15]
cmp dword [0x140103990], eax
jg 0x14007166d
mov eax, dword [r15]
cmp dword [0x1401039a0], eax
jg 0x1400716b4
mov rax, qword [0x140103988]
test rax, rax
je 0x140071006
cmp qword [0x140103998], 0
je 0x140071006
xor r8d, r8d
mov dword [rsp + 0x54], 0x80000
lea r9, [rbp - 0x78]
mov dword [rbp - 0x10], 0x70
xor ecx, ecx
lea edx, [r8 + 1]
call rax
test eax, eax
je 0x140070b65
mov r9d, 0x1bd
mov dword [rsp + 0x20], 2
lea r8, str..._.._.._client_crashpad_client_win.cc
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace::StartHandlerProcess_class_std::unique_ptr_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData_struct_std::default_delete_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData____
lea rcx, [rbp + 0xb8]
call fcn.140028380
mov rcx, rax
lea rdx, str.InitializeProcThreadAttributeList__size__succeeded__expected_failure
call fcn.140007ed0
lea rcx, [rbp + 0xb8]
or r13d, 4
call fcn.140028580
mov rcx, r12
call fcn.140039d30
mov rdx, qword [rbp + 0x540]
xor ebx, ebx
mov qword [rsp + 0x78], rbx
cmp rdx, 8
jb 0x140070b2d
mov rcx, qword [rbp + 0x528]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140070b28
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140071750
call fcn.14008df80
test r13d, 0x800
mov qword [rbp + 0x538], rbx
mov word [rbp + 0x528], bx
mov qword [rbp + 0x540], 7
je 0x140070b5b
lea rcx, [rbp + 0x1c0]
call fcn.140028580
mov rcx, qword [rsp + 0x58]
jmp 0x1400714f4
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
je 0x140070c25
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x28], eax
lea r8, str..._.._.._client_crashpad_client_win.cc
mov r9d, 0x1c1
mov dword [rsp + 0x20], 2
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace::StartHandlerProcess_class_std::unique_ptr_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData_struct_std::default_delete_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData____
lea rcx, [rbp + 0xb8]
call fcn.140028500
mov rcx, rax
lea rdx, str.InitializeProcThreadAttributeList__size_
call fcn.140007ed0
lea rcx, [rbp + 0xb8]
or r13d, 8
call fcn.140028830
mov rcx, r12
call fcn.140039d30
mov rdx, qword [rbp + 0x540]
xor ebx, ebx
mov qword [rsp + 0x78], rbx
cmp rdx, 8
jb 0x140070c19
mov rcx, qword [rbp + 0x528]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140070c14
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140071750
call fcn.14008df80
test r13d, 0x1000
jmp 0x140070b34
mov rcx, qword [rbp - 0x78]
call fcn.14008dfb4
xor r8d, r8d
mov qword [rbp + 0x58], rax
lea r9, [rbp - 0x78]
mov rcx, rax
mov rbx, rax
lea edx, [r8 + 1]
call qword [0x140103988]
test eax, eax
jne 0x140070d0f
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x28], eax
lea r8, str..._.._.._client_crashpad_client_win.cc
mov r9d, 0x1cc
mov dword [rsp + 0x20], 2
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace::StartHandlerProcess_class_std::unique_ptr_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData_struct_std::default_delete_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData____
lea rcx, [rbp + 0xb8]
call fcn.140028500
mov rcx, rax
lea rdx, str.InitializeProcThreadAttributeList
call fcn.140007ed0
lea rcx, [rbp + 0xb8]
or r13d, 0x10
call fcn.140028830
test rbx, rbx
je 0x140070cae
mov rcx, rbx
call fcn.14008df80
mov rcx, r12
call fcn.140039d30
mov rdx, qword [rbp + 0x540]
xor ebx, ebx
mov qword [rsp + 0x78], rbx
cmp rdx, 8
jb 0x140070d03
mov rcx, qword [rbp + 0x528]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140070cfe
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140071750
call fcn.14008df80
test r13d, 0x2000
jmp 0x140070b34
mov rdi, qword [rbp + 0x58]
mov ecx, 0x40
call fcn.14008df44
mov qword [rsp + 0x60], rax
lea rdx, [0x140100058]
mov qword [rsp + 0x68], rax
lea rcx, [rsp + 0x60]
add rax, 0x40
mov qword [rsp + 0x70], rax
call fcn.140065220
lea rdx, [0x140100060]
lea rcx, [rsp + 0x60]
call fcn.140065220
lea rdx, [0x140100068]
lea rcx, [rsp + 0x60]
call fcn.140065220
mov rax, qword [rsp + 0x58]
lea rcx, [rsp + 0x60]
mov rdx, qword [rax]
add rdx, 0xe0
call fcn.140065220
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x60]
call fcn.140065220
mov r15, qword [rbp + 0x40]
mov qword [rbp - 0x70], r15
lea rax, [r15 - 1]
cmp rax, 0xfffffffffffffffd
ja 0x140070de4
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_GetFileType]
dec eax
test eax, 0xfffffffd
jne 0x140070de4
mov rsi, qword [rsp + 0x60]
mov r14, qword [rsp + 0x68]
mov rax, rsi
cmp rsi, r14
je 0x140070dd6
cmp qword [rax], r15
je 0x140070dd1
add rax, 8
cmp rax, r14
jne 0x140070dc1
jmp 0x140070dd6
cmp rax, r14
jne 0x140070dee
lea rdx, [rbp - 0x70]
lea rcx, [rsp + 0x60]
call fcn.140065220
mov rsi, qword [rsp + 0x60]
mov r14, qword [rsp + 0x68]
mov r15, qword [rbp + 0x48]
mov qword [rbp - 0x68], r15
lea rax, [r15 - 1]
cmp rax, 0xfffffffffffffffd
ja 0x140070e4d
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_GetFileType]
dec eax
test eax, 0xfffffffd
jne 0x140070e4d
mov rax, rsi
cmp rsi, r14
je 0x140070e35
nop word [rax + rax]
cmp qword [rax], r15
je 0x140070e30
add rax, 8
cmp rax, r14
jne 0x140070e20
jmp 0x140070e35
cmp rax, r14
jne 0x140070e4d
lea rdx, [rbp - 0x68]
lea rcx, [rsp + 0x60]
call fcn.140065220
mov r14, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x60]
mov r15, qword [rbp + 0x50]
mov qword [rbp - 0x60], r15
lea rax, [r15 - 1]
cmp rax, 0xfffffffffffffffd
ja 0x140070ead
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_GetFileType]
dec eax
test eax, 0xfffffffd
jne 0x140070ead
mov rax, rsi
cmp rsi, r14
je 0x140070e95
nop dword [rax]
cmp qword [rax], r15
je 0x140070e90
add rax, 8
cmp rax, r14
jne 0x140070e80
jmp 0x140070e95
cmp rax, r14
jne 0x140070ead
lea rdx, [rbp - 0x60]
lea rcx, [rsp + 0x60]
call fcn.140065220
mov r14, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x60]
mov rcx, qword [rbp + 0x58]
xor r15d, r15d
mov qword [rsp + 0x30], r15
sub r14, rsi
sar r14, 3
mov r9, rsi
mov qword [rsp + 0x28], r15
xor edx, edx
mov r8d, 0x20002
lea rax, [r14*8]
mov qword [rsp + 0x20], rax
call qword [0x140103998]
test eax, eax
jne 0x140070fff
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x28], eax
lea r8, str..._.._.._client_crashpad_client_win.cc
mov r9d, 0x1e6
mov dword [rsp + 0x20], 2
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace::StartHandlerProcess_class_std::unique_ptr_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData_struct_std::default_delete_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData____
lea rcx, [rbp + 0xb8]
call fcn.140028500
mov rcx, rax
lea rdx, str.UpdateProcThreadAttribute
call fcn.140007ed0
lea rcx, [rbp + 0xb8]
or r13d, 0x20
call fcn.140028830
test rdi, rdi
je 0x140070f5b
mov rax, qword [rbp - 0x80]
mov eax, dword [rax]
cmp dword [0x140103980], eax
jg 0x140071709
mov rcx, rdi
call qword [0x140103978]
test rbx, rbx
je 0x140070f68
mov rcx, rbx
call fcn.14008df80
test rsi, rsi
je 0x140070fb4
mov rdx, qword [rsp + 0x70]
mov rax, rsi
sub rdx, rsi
and rdx, 0xfffffffffffffff8
cmp rdx, 0x1000
jb 0x140070f9e
mov rsi, qword [rsi - 8]
add rdx, 0x27
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140071750
mov rcx, rsi
call fcn.14008df80
xorps xmm0, xmm0
mov qword [rsp + 0x70], r15
movdqu xmmword [rsp + 0x60], xmm0
mov rcx, r12
call fcn.140039d30
mov r8, qword [rbp + 0x540]
mov qword [rsp + 0x78], r15
cmp r8, 8
jb 0x140070fe4
mov rdx, qword [rbp + 0x528]
lea rcx, [rbp + 0x528]
inc r8
call fcn.140039050
mov qword [rbp + 0x538], r15
test r13d, 0x4000
mov word [rbp + 0x528], r15w
jmp 0x140070b42
mov r14, qword [rsp + 0x70]
jmp 0x140071015
xor r15d, r15d
mov dword [rbp - 0x10], 0x68
mov dword [rsp + 0x54], r15d
mov rax, qword [rsp + 0x58]
mov rax, qword [rax]
mov rdx, qword [rax + 0x10]
cmp rdx, 0xc
jb 0x1400710b0
mov qword [rbp + 0x568], r15
or r13d, 0x40
mov qword [rbp + 0x578], r15
add rdx, 0xfffffffffffffff4
mov qword [rbp + 0x580], 7
mov rcx, qword [rax + 0x10]
cmp rcx, rdx
jb 0x140071756
sub rcx, rdx
mov r8, 0xffffffffffffffff
cmp rcx, r8
cmovb r8, rcx
cmp qword [rax + 0x18], 8
jb 0x140071074
mov rax, qword [rax]
lea rdx, [rax + rdx*2]
lea rcx, [rbp + 0x568]
call fcn.1400225c0
cmp qword [rbp + 0x580], 8
lea rcx, [rbp + 0x568]
lea rdx, str.rundll32.exe
cmovae rcx, qword [rbp + 0x568]
call fcn.1400a8f90
test eax, eax
jne 0x1400710b0
mov r15b, 1
jmp 0x1400710b3
xor r15b, r15b
test r13b, 0x40
je 0x140071122
mov rdx, qword [rbp + 0x580]
and r13d, 0xffffffbf
cmp rdx, 8
jb 0x140071103
mov rcx, qword [rbp + 0x568]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400710fe
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007175c
call fcn.14008df80
xor r8d, r8d
mov qword [rbp + 0x580], 7
mov qword [rbp + 0x578], r8
mov word [rbp + 0x568], r8w
jmp 0x140071125
xor r8d, r8d
test r15b, r15b
mov r15, qword [rsp + 0x58]
je 0x140071134
mov rcx, r8
jmp 0x140071141
mov rcx, qword [r15]
cmp qword [rcx + 0x18], 8
jb 0x140071141
mov rcx, qword [rcx]
cmp qword [rbp + 0x540], 8
lea rax, [rbp + 0xa0]
mov qword [rsp + 0x48], rax
lea rdx, [rbp + 0x528]
cmovae rdx, qword [rbp + 0x528]
lea rax, [rbp - 0x10]
mov qword [rsp + 0x40], rax
xor r9d, r9d
mov eax, dword [rsp + 0x54]
mov qword [rsp + 0x38], r8
mov qword [rsp + 0x30], r8
xor r8d, r8d
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 1
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x1400712a5
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x28], eax
lea r8, str..._.._.._client_crashpad_client_win.cc
mov r9d, 0x208
mov dword [rsp + 0x20], 2
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace::StartHandlerProcess_class_std::unique_ptr_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData_struct_std::default_delete_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData____
lea rcx, [rbp + 0xb8]
call fcn.140028500
mov rcx, rax
lea rdx, str.CreateProcess
call fcn.140007ed0
lea rcx, [rbp + 0xb8]
bts r13d, 7
call fcn.140028830
test rdi, rdi
je 0x14007120c
mov rax, qword [rbp - 0x80]
mov eax, dword [rax]
cmp dword [0x140103980], eax
jg 0x140071762
mov rcx, rdi
call qword [0x140103978]
test rbx, rbx
je 0x140071219
mov rcx, rbx
call fcn.14008df80
test rsi, rsi
je 0x140071267
sub r14, rsi
mov rax, rsi
and r14, 0xfffffffffffffff8
cmp r14, 0x1000
jb 0x14007124a
mov rsi, qword [rsi - 8]
add r14, 0x27
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140071631
mov rdx, r14
mov rcx, rsi
call fcn.14008df80
xorps xmm0, xmm0
xor ebx, ebx
movdqu xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], rbx
jmp 0x140071269
xor ebx, ebx
mov rcx, r12
call fcn.140039d30
mov r8, qword [rbp + 0x540]
mov qword [rsp + 0x78], rbx
cmp r8, 8
jb 0x140071299
mov rdx, qword [rbp + 0x528]
lea rcx, [rbp + 0x528]
inc r8
call fcn.140039050
test r13d, 0x8000
jmp 0x1400714ca
mov rcx, qword [rbp + 0xa8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
jne 0x1400712fb
bts r13d, 8
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x28], eax
lea r8, str..._.._.._client_crashpad_client_win.cc
mov r9d, 0x20d
mov dword [rsp + 0x20], 1
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace::StartHandlerProcess_class_std::unique_ptr_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData_struct_std::default_delete_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData____
lea rcx, [rbp + 0xb8]
call fcn.140028500
mov rcx, rax
lea rdx, str.CloseHandle_thread
call fcn.140007ed0
bt r13d, 8
jae 0x140071313
btr r13d, 8
lea rcx, [rbp + 0xb8]
call fcn.140028830
mov rcx, qword [rbp + 0xa0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
jne 0x140071369
bts r13d, 9
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x28], eax
lea r8, str..._.._.._client_crashpad_client_win.cc
mov r9d, 0x210
mov dword [rsp + 0x20], 1
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace::StartHandlerProcess_class_std::unique_ptr_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData_struct_std::default_delete_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData____
lea rcx, [rbp + 0x420]
call fcn.140028500
mov rcx, rax
lea rdx, str.CloseHandle_process
call fcn.140007ed0
bt r13d, 9
jae 0x140071381
btr r13d, 9
lea rcx, [rbp + 0x420]
call fcn.140028830
mov r15, qword [r15]
mov rcx, qword [r15 + 0xe0]
cmp rcx, 0xffffffffffffffff
je 0x140071396
call fcn.140039d20
xor eax, eax
mov qword [r15 + 0xe0], 0xffffffffffffffff
xor edx, edx
mov qword [rbp + 0x7e4], rax
mov r8d, 0x200
mov qword [rbp + 0x7ec], rax
lea rcx, [rbp + 0x804]
mov qword [rbp + 0x7f4], rax
mov qword [rbp + 0x7fc], rax
call fcn.14008f9b0
mov r15, qword [rsp + 0x58]
lea r8, [rbp + 0x688]
xor eax, eax
mov dword [rbp + 0x7e0], 2
lea rdx, [rbp + 0x7e0]
mov qword [rbp + 0x688], rax
mov dword [rbp + 0x690], eax
mov rcx, qword [r15]
add rcx, 0xc0
call fcn.14003a580
test al, al
jne 0x14007150c
test rdi, rdi
je 0x140071436
mov rax, qword [rbp - 0x80]
mov eax, dword [rax]
cmp dword [0x140103980], eax
jg 0x1400717a9
mov rcx, rdi
call qword [0x140103978]
test rbx, rbx
je 0x140071443
mov rcx, rbx
call fcn.14008df80
test rsi, rsi
je 0x140071491
sub r14, rsi
mov rax, rsi
and r14, 0xfffffffffffffff8
cmp r14, 0x1000
jb 0x140071474
mov rsi, qword [rsi - 8]
add r14, 0x27
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140071631
mov rdx, r14
mov rcx, rsi
call fcn.14008df80
xorps xmm0, xmm0
xor ebx, ebx
movdqu xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], rbx
jmp 0x140071493
xor ebx, ebx
mov rcx, r12
call fcn.140039d30
mov r8, qword [rbp + 0x540]
mov qword [rsp + 0x78], rbx
cmp r8, 8
jb 0x1400714c3
mov rdx, qword [rbp + 0x528]
lea rcx, [rbp + 0x528]
inc r8
call fcn.140039050
test r13d, 0x10000
mov word [rbp + 0x528], bx
mov qword [rbp + 0x540], 7
mov qword [rbp + 0x538], rbx
je 0x1400714f1
lea rcx, [rbp + 0x1c0]
call fcn.140028580
mov rcx, r15
nop
mov qword [0x140103940], 2
call fcn.14006efe0
xor al, al
jmp 0x1400715fb
test rdi, rdi
je 0x14007152c
mov rax, qword [rbp - 0x80]
mov eax, dword [rax]
cmp dword [0x140103980], eax
jg 0x1400717f0
mov rcx, rdi
call qword [0x140103978]
test rbx, rbx
je 0x140071539
mov rcx, rbx
call fcn.14008df80
test rsi, rsi
je 0x140071587
sub r14, rsi
mov rax, rsi
and r14, 0xfffffffffffffff8
cmp r14, 0x1000
jb 0x14007156a
mov rsi, qword [rsi - 8]
add r14, 0x27
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140071631
mov rdx, r14
mov rcx, rsi
call fcn.14008df80
xorps xmm0, xmm0
xor ebx, ebx
movdqu xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], rbx
jmp 0x140071589
xor ebx, ebx
mov rcx, r12
call fcn.140039d30
mov r8, qword [rbp + 0x540]
mov qword [rsp + 0x78], rbx
cmp r8, 8
jb 0x1400715b9
mov rdx, qword [rbp + 0x528]
lea rcx, [rbp + 0x528]
inc r8
call fcn.140039050
mov qword [rbp + 0x538], rbx
mov qword [rbp + 0x540], 7
mov word [rbp + 0x528], bx
bt r13d, 0x11
jae 0x1400715e5
lea rcx, [rbp + 0x1c0]
call fcn.140028580
nop
mov rcx, r15
mov qword [0x140103940], 1
call fcn.14006efe0
mov al, 1
mov r12, qword [rsp + 0xb58]
mov r14, qword [rsp + 0xb60]
mov rcx, qword [rbp + 0xa10]
xor rcx, rsp
call fcn.14008e050
mov rbx, qword [rsp + 0xb68]
add rsp, 0xb20
pop r15
pop r13
pop rdi
pop rsi
pop rbp
ret
call fcn.14009464c
int3
call fcn.14009464c
int3
call fcn.14009464c
int3
call fcn.14009464c
int3
call fcn.14009464c
int3
call fcn.1400073c0
int3
call fcn.14009464c
int3
call fcn.14000eec0
int3
call fcn.14009464c
int3
call fcn.14009464c
int3
lea rcx, [0x140103990]
call fcn.14008e434
cmp dword [0x140103990], 0xffffffff
jne 0x140070a3e
xor r8d, r8d
lea rdx, str.::InitializeProcThreadAttributeList
lea rcx, [0x1400cac58]
call fcn.14003a1c0
lea rcx, [0x140103990]
mov qword [0x140103988], rax
call fcn.14008e3d4
jmp 0x140070a3e
lea rcx, [0x1401039a0]
call fcn.14008e434
cmp dword [0x1401039a0], 0xffffffff
jne 0x140070a4d
cmp qword [0x140103988], 0
je 0x1400716ef
xor r8d, r8d
lea rdx, str.::UpdateProcThreadAttribute
lea rcx, [0x1400cac58]
call fcn.14003a1c0
jmp 0x1400716f1
xor eax, eax
lea rcx, [0x1401039a0]
mov qword [0x140103998], rax
call fcn.14008e3d4
jmp 0x140070a4d
lea rcx, [0x140103980]
call fcn.14008e434
cmp dword [0x140103980], 0xffffffff
jne 0x140070f52
mov r8b, 1
lea rdx, str.::DeleteProcThreadAttributeList
lea rcx, [0x1400cac58]
call fcn.14003a1c0
lea rcx, [0x140103980]
mov qword [0x140103978], rax
call fcn.14008e3d4
jmp 0x140070f52
call fcn.14009464c
int3
call fcn.14000eee0
int3
call fcn.14009464c
int3
lea rcx, [0x140103980]
call fcn.14008e434
cmp dword [0x140103980], 0xffffffff
jne 0x140071203
mov r8b, 1
lea rdx, str.::DeleteProcThreadAttributeList
lea rcx, [0x1400cac58]
call fcn.14003a1c0
lea rcx, [0x140103980]
mov qword [0x140103978], rax
call fcn.14008e3d4
jmp 0x140071203
lea rcx, [0x140103980]
call fcn.14008e434
cmp dword [0x140103980], 0xffffffff
jne 0x14007142d
mov r8b, 1
lea rdx, str.::DeleteProcThreadAttributeList
lea rcx, [0x1400cac58]
call fcn.14003a1c0
lea rcx, [0x140103980]
mov qword [0x140103978], rax
call fcn.14008e3d4
jmp 0x14007142d
lea rcx, [0x140103980]
call fcn.14008e434
cmp dword [0x140103980], 0xffffffff
jne 0x140071523
mov r8b, 1
lea rdx, str.::DeleteProcThreadAttributeList
lea rcx, [0x1400cac58]
call fcn.14003a1c0
lea rcx, [0x140103980]
mov qword [0x140103978], rax
call fcn.14008e3d4
jmp 0x140071523