Function at 0x14006e7a0
Capabilities:
Create process on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x348
movaps xmmword [rsp + 0x330], xmm7
movaps xmmword [rsp + 0x320], xmm6
mov r12, rcx
mov rax, qword [0x140213038]
xor rax, rsp
mov qword [rsp + 0x318], rax
call fcn.14008ea80
test al, al
jne 0x14006fc1f
xorps xmm0, xmm0
lea rdx, [rsp + 0x300]
movaps xmmword [rdx], xmm0
mov qword [rdx + 0x10], 0
mov rcx, qword [r12]
call fcn.14008eab0
mov rsi, qword [r12]
mov rbp, qword [rsi + 0x78]
mov rdi, qword [rsi + 0x80]
cmp rbp, rdi
je 0x14006e88d
lea rsi, [rsp + 0x148]
lea r14, [rsp + 0x2f0]
lea rbx, [rsp + 0x300]
movzx eax, byte [rbp + 0x17]
test al, al
mov rcx, qword [rbp]
cmovns rcx, rbp
mov qword [rsp + 0x2f0], rcx
cmovs rax, qword [rbp + 8]
mov qword [rsp + 0x2f8], rax
mov rcx, rsi
mov rdx, r14
call fcn.1400dd8e0
mov rcx, rsi
mov rdx, rbx
call fcn.14008eab0
cmp byte [rsp + 0x15f], 0
jns 0x14006e880
mov rcx, qword [rsp + 0x148]
call fcn.140100564
add rbp, 0x18
cmp rdi, rbp
jne 0x14006e830
mov rsi, qword [r12]
movzx eax, byte [rsi + 0x2f]
test al, al
jns 0x14006e899
mov rax, qword [rsi + 0x20]
test rax, rax
jne 0x14006ec0f
movzx eax, byte [rsi + 0x47]
test al, al
jns 0x14006e8ae
mov rax, qword [rsi + 0x38]
test rax, rax
jne 0x14006ec83
movzx eax, byte [rsi + 0x5f]
test al, al
js 0x14006e8c4
mov rcx, rax
jmp 0x14006e8c8
mov rcx, qword [rsi + 0x50]
test rcx, rcx
jne 0x14006ecf7
mov r15, qword [rsi + 0x60]
lea r14, [rsi + 0x68]
cmp r15, r14
je 0x14006ea90
mov qword [rsp + 0x58], r12
lea rdi, [rsp + 0x2b0]
xorps xmm6, xmm6
lea rbx, [rsp + 0x80]
lea r12, str.annotation
lea rsi, [rsp + 0x290]
lea rbp, [rsp + 0x148]
lea r13, [rsp + 0x300]
lea rdx, [r15 + 0x20]
mov rcx, rdi
mov r8b, 0x3d
call fcn.140138c70
movzx r8d, byte [r15 + 0x4f]
test r8b, r8b
jns 0x14006e93c
mov r8, qword [r15 + 0x40]
mov rdx, qword [r15 + 0x38]
jmp 0x14006e940
lea rdx, [r15 + 0x38]
mov rcx, rdi
call fcn.1400d4eb0
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x110], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x100], xmm0
movups xmmword [rax], xmm6
mov qword [rax + 0x10], 0
movzx eax, byte [rsp + 0x117]
test al, al
mov rcx, qword [rsp + 0x100]
lea rdx, [rsp + 0x100]
cmovns rcx, rdx
mov qword [rsp + 0x2d0], rcx
cmovs rax, qword [rsp + 0x108]
mov qword [rsp + 0x2d8], rax
mov rcx, rbx
lea rdx, [rsp + 0x2d0]
call fcn.1400dd8e0
mov rcx, rsi
mov rdx, r12
call fcn.140135f90
mov rcx, rbp
mov rdx, rsi
mov r8, rbx
call fcn.140070480
mov rcx, rbp
mov rdx, r13
call fcn.14008eab0
cmp byte [rsp + 0x15f], 0
jns 0x14006e9ec
mov rcx, qword [rsp + 0x148]
call fcn.140100564
cmp byte [rsp + 0x2a7], 0
jns 0x14006ea03
mov rcx, qword [rsp + 0x290]
call fcn.140100564
cmp byte [rsp + 0x97], 0
jns 0x14006ea1a
mov rcx, qword [rsp + 0x80]
call fcn.140100564
cmp byte [rsp + 0x117], 0
jns 0x14006ea31
mov rcx, qword [rsp + 0x100]
call fcn.140100564
cmp byte [rsp + 0x2c7], 0
jns 0x14006ea48
mov rcx, qword [rsp + 0x2b0]
call fcn.140100564
mov rcx, qword [r15 + 8]
test rcx, rcx
je 0x14006ea5e
mov rax, rcx
mov rcx, qword [rcx]
test rcx, rcx
jne 0x14006ea51
jmp 0x14006ea7b
mov rax, qword [r15 + 0x10]
cmp qword [rax], r15
je 0x14006ea7b
add r15, 0x10
mov rcx, qword [r15]
lea r15, [rcx + 0x10]
mov rax, qword [rcx + 0x10]
cmp qword [rax], rcx
jne 0x14006ea6b
mov r15, rax
cmp rax, r14
jne 0x14006e919
mov r12, qword [rsp + 0x58]
mov rsi, qword [r12]
mov rdi, qword [rsi + 0x90]
mov rsi, qword [rsi + 0x98]
cmp rdi, rsi
je 0x14006eb1d
lea r15, [0x1401ed041]
lea rbx, [rsp + 0x80]
lea rbp, [rsp + 0x148]
lea r14, [rsp + 0x300]
mov rcx, rbx
mov rdx, r15
call fcn.140135f90
mov rcx, rbp
mov rdx, rbx
mov r8, rdi
call fcn.140070480
mov rcx, rbp
mov rdx, r14
call fcn.14008eab0
cmp byte [rsp + 0x15f], 0
jns 0x14006eafd
mov rcx, qword [rsp + 0x148]
call fcn.140100564
cmp byte [rsp + 0x97], 0
jns 0x14006eb14
mov rcx, qword [rsp + 0x80]
call fcn.140100564
add rdi, 0x18
cmp rsi, rdi
jne 0x14006eac2
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, 0x1f0fff
mov edx, 1
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
jne 0x14006edad
mov ecx, 2
call fcn.1400d9610
xor ebx, ebx
mov ebp, 0
test al, al
je 0x14006eba6
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x148]
mov rcx, rsi
mov r8d, 0x18c
mov r9d, 2
call fcn.140158e40
lea rcx, [rsp + 0x158]
lea rdx, [0x1401ed04c]
mov r8d, ntohl
call fcn.1400cf4f0
mov rcx, rsi
call fcn.140158f30
xor ebx, ebx
xor ebp, ebp
cmp byte [rsp + 0x317], 0
jns 0x14006ebbd
mov rcx, qword [rsp + 0x300]
call fcn.140100564
cmp bpl, 1
mov eax, 1
adc rax, 0
mov qword [0x14021b530], rax
mov rcx, r12
call fcn.140070330
mov rcx, qword [rsp + 0x318]
xor rcx, rsp
call fcn.1401013e0
mov eax, ebx
movaps xmm6, xmmword [rsp + 0x320]
movaps xmm7, xmmword [rsp + 0x330]
add rsp, 0x348
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
add rsi, 0x18
lea rdx, str.database
lea rdi, [rsp + 0x80]
mov rcx, rdi
call fcn.140135f90
lea rbx, [rsp + 0x148]
mov rcx, rbx
mov rdx, rdi
mov r8, rsi
call fcn.140070480
lea rdx, [rsp + 0x300]
mov rcx, rbx
call fcn.14008eab0
cmp byte [rbx + 0x17], 0
jns 0x14006ec63
mov rcx, qword [rsp + 0x148]
call fcn.140100564
cmp byte [rsp + 0x97], 0
jns 0x14006ec7a
mov rcx, qword [rsp + 0x80]
call fcn.140100564
mov rsi, qword [r12]
jmp 0x14006e8a2
add rsi, 0x30
lea rdx, str.metrics_dir
lea rdi, [rsp + 0x80]
mov rcx, rdi
call fcn.140135f90
lea rbx, [rsp + 0x148]
mov rcx, rbx
mov rdx, rdi
mov r8, rsi
call fcn.140070480
lea rdx, [rsp + 0x300]
mov rcx, rbx
call fcn.14008eab0
cmp byte [rbx + 0x17], 0
jns 0x14006ecd7
mov rcx, qword [rsp + 0x148]
call fcn.140100564
cmp byte [rsp + 0x97], 0
jns 0x14006ecee
mov rcx, qword [rsp + 0x80]
call fcn.140100564
mov rsi, qword [r12]
jmp 0x14006e8b7
lea rcx, [rsi + 0x48]
test al, al
cmovs rcx, qword [rsi + 0x48]
lea rdx, [rsp + 0x2e0]
mov qword [rdx], rcx
cmovs rax, qword [rsi + 0x50]
mov qword [rdx + 8], rax
lea rsi, [rsp + 0x80]
mov rcx, rsi
call fcn.1400dd8e0
lea rdx, [0x1401ed032]
lea rdi, [rsp + 0x100]
mov rcx, rdi
call fcn.140135f90
lea rbx, [rsp + 0x148]
mov rcx, rbx
mov rdx, rdi
mov r8, rsi
call fcn.140070480
lea rdx, [rsp + 0x300]
mov rcx, rbx
call fcn.14008eab0
cmp byte [rbx + 0x17], 0
jns 0x14006ed76
mov rcx, qword [rsp + 0x148]
call fcn.140100564
cmp byte [rsp + 0x117], 0
jns 0x14006ed8d
mov rcx, qword [rsp + 0x100]
call fcn.140100564
cmp byte [rsp + 0x97], 0
jns 0x14006eda4
mov rcx, qword [rsp + 0x80]
call fcn.140100564
mov rsi, qword [r12]
jmp 0x14006e8d1
mov rdi, rax
movabs r14, 0xaaaaaaaaaaaaaaaa
lea rbx, [rsp + 0x100]
mov qword [rbx + 0x40], r14
movaps xmm6, xmmword [0x1401d9dd0]
movaps xmmword [rbx + 0x30], xmm6
movaps xmmword [rbx + 0x20], xmm6
movaps xmmword [rbx + 0x10], xmm6
movaps xmmword [rbx], xmm6
mov rax, qword [r12]
mov rax, qword [rax + 0xc8]
mov r9, qword [0x140215848]
mov r8, qword [0x140215840]
mov rdx, qword [0x140215838]
lea rcx, [0x14021b500]
mov qword [rsp + 0x40], rcx
lea rcx, [0x14021b4f0]
mov qword [rsp + 0x38], rcx
lea rcx, [0x14021b4e0]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rax
mov rcx, rbx
call fcn.14008ec70
lea rsi, [rsp + 0x2b0]
mov rcx, rbx
mov rdx, rsi
call fcn.14008f030
lea rdx, str.__initial_client_data
lea rbx, [rsp + 0x290]
mov rcx, rbx
call fcn.140135f90
movzx r8d, byte [rsi + 0x17]
test r8b, r8b
jns 0x14006ee76
mov r8, qword [rsp + 0x2b8]
mov rsi, qword [rsp + 0x2b0]
mov rcx, rbx
mov rdx, rsi
call fcn.1400d4eb0
mov rcx, qword [rax + 0x10]
lea r15, [rsp + 0x80]
mov qword [r15 + 0x10], rcx
movups xmm0, xmmword [rax]
movaps xmmword [r15], xmm0
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov qword [rax + 0x10], 0
movzx eax, byte [r15 + 0x17]
test al, al
mov rcx, qword [r15]
cmovns rcx, r15
lea rdx, [rsp + 0xf0]
mov qword [rdx], rcx
cmovs rax, qword [r15 + 8]
mov qword [rdx + 8], rax
lea rsi, [rsp + 0x148]
mov rcx, rsi
call fcn.1400dd8e0
lea rbx, [rsp + 0x300]
mov rcx, rsi
mov rdx, rbx
call fcn.14008eab0
cmp byte [rsi + 0x17], 0
jns 0x14006eefe
mov rcx, qword [rsp + 0x148]
call fcn.140100564
cmp byte [rsp + 0x97], 0
jns 0x14006ef15
mov rcx, qword [rsp + 0x80]
call fcn.140100564
cmp byte [rsp + 0x2a7], 0
jns 0x14006ef2c
mov rcx, qword [rsp + 0x290]
call fcn.140100564
cmp byte [rsp + 0x2c7], 0
jns 0x14006ef43
mov rcx, qword [rsp + 0x2b0]
call fcn.140100564
xorps xmm7, xmm7
movaps xmmword [rsp + 0xb0], xmm7
movaps xmmword [rsp + 0xe0], xmm7
movaps xmmword [rsp + 0xd0], xmm7
movaps xmmword [rsp + 0xc0], xmm7
movaps xmmword [rsp + 0xa0], xmm7
movaps xmmword [rsp + 0x90], xmm7
movaps xmmword [rsp + 0x80], xmm7
mov dword [rsp + 0xbc], 0x100
mov rsi, qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov ecx, 0xfffffff6
call rsi
mov qword [rsp + 0xd0], rax
mov ecx, 0xfffffff5
call rsi
mov qword [rsp + 0xd8], rax
mov ecx, 0xfffffff4
call rsi
mov qword [rsp + 0xe0], rax
movaps xmmword [rsp + 0x2b0], xmm7
mov qword [rsp + 0x2c0], 0
mov eax, dword [0x14021b540]
mov ecx, dword [0x140216fcc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14006fb71
mov eax, dword [0x14021b550]
mov ecx, dword [0x140216fcc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14006fbb8
mov rbp, qword [0x14021b538]
test rbp, rbp
je 0x14006f0bf
cmp qword [0x14021b548], 0
je 0x14006f0bf
mov dword [rsp + 0x80], 0x70
lea r9, [rsp + 0x290]
mov qword [r9], r14
xor ecx, ecx
mov edx, 1
xor r8d, r8d
call rbp
test eax, eax
je 0x14006f103
mov ecx, 2
call fcn.1400d9610
test al, al
je 0x14006f579
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x148]
mov rcx, rsi
mov r8d, 0x1bd
mov r9d, 2
call fcn.14004a520
lea rcx, [rsp + 0x158]
lea rdx, str.InitializeProcThreadAttributeList__size__succeeded__expected_failure
mov r8d, 0x44
call fcn.1400cf4f0
mov rcx, rsi
call fcn.14004a9c0
jmp 0x14006f579
mov r14, r15
mov dword [rsp + 0x80], 0x68
xor r15d, r15d
xor r13d, r13d
xor esi, esi
mov rdx, qword [r12]
movzx r8d, byte [rdx + 0x17]
test r8b, r8b
js 0x14006f0ee
cmp r8b, 0xc
jb 0x14006f0f9
jmp 0x14006f208
cmp qword [rdx + 8], 0xc
jae 0x14006f204
mov rbp, rbx
xor ebx, ebx
jmp 0x14006f26c
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x14006f51d
lea rsi, [rsp + 0x290]
mov rcx, qword [rsi]
call fcn.14010059c
mov r13, rax
mov qword [rsp + 0xe8], rax
mov rcx, rax
mov edx, 1
xor r8d, r8d
mov r9, rsi
call qword [0x14021b538]
test eax, eax
je 0x14006f5a4
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x58], r12
mov rax, qword [rsp + 0xe8]
mov qword [rsp + 0x60], rax
mov rbx, qword [rsp + 0x2b0]
mov r12, qword [rsp + 0x2c0]
mov rax, r12
sub rax, rbx
sar rax, 3
cmp rax, 7
ja 0x14006f1cd
mov rbp, qword [rsp + 0x2b8]
sub rbp, rbx
mov ecx, 0x40
call fcn.140100528
mov rsi, rax
lea r14, [rax + rbp]
mov r12, rax
add r12, 0x40
test rbp, rbp
jg 0x14006fc22
mov qword [rsp + 0x2b0], rsi
mov qword [rsp + 0x2b8], r14
mov qword [rsp + 0x2c0], r12
test rbx, rbx
jne 0x14006fc35
movabs r13, 0x1fffffffffffffff
mov rbp, qword [rsp + 0x2b8]
cmp rbp, r12
je 0x14006f609
mov rax, qword [0x140215838]
mov qword [rbp], rax
add rbp, 8
mov qword [rsp + 0x2b8], rbp
jmp 0x14006f6d3
mov r8, qword [rdx + 8]
mov rbp, rbx
add r8, 0xfffffffffffffff4
lea rax, [rdx + 0x18]
mov qword [rsp + 0x20], rax
lea rbx, [rsp + 0x148]
mov rcx, rbx
mov r9, 0xffffffffffffffff
call fcn.1400319b0
cmp byte [rsp + 0x15f], 0
jns 0x14006f241
mov rbx, qword [rsp + 0x148]
lea rdx, str.rundll32.exe
mov rcx, rbx
call fcn.140116f60
test eax, eax
sete bl
cmp byte [rsp + 0x15f], 0
jns 0x14006f26c
mov rcx, qword [rsp + 0x148]
call fcn.140100564
movabs rax, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x2a0], rax
movaps xmmword [rsp + 0x290], xmm6
cmp byte [rsp + 0x317], 0
jns 0x14006f298
mov rbp, qword [rsp + 0x300]
test bl, bl
je 0x14006f2a3
xor ecx, ecx
mov rdx, rbp
jmp 0x14006f2b3
mov rcx, qword [r12]
cmp byte [rcx + 0x17], 0
mov rdx, rbp
jns 0x14006f2b3
mov rcx, qword [rcx]
lea rax, [rsp + 0x290]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x40], r14
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], 1
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x14006f43a
mov rcx, qword [rsp + 0x298]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, eax
mov ecx, 1
call fcn.1400d9610
test al, al
je 0x14006f35d
test esi, esi
jne 0x14006f35d
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x148]
mov rcx, rsi
mov r8d, 0x20d
mov r9d, 1
call fcn.140158e40
lea rcx, [rsp + 0x158]
lea rdx, str.CloseHandle_thread
mov r8d, 0x12
call fcn.1400cf4f0
mov rcx, rsi
call fcn.140158f30
mov rcx, qword [rsp + 0x290]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, eax
mov ecx, 1
call fcn.1400d9610
test al, al
je 0x14006f3cd
test esi, esi
jne 0x14006f3cd
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x148]
mov rcx, rsi
mov r8d, 0x210
mov r9d, 1
call fcn.140158e40
lea rcx, [rsp + 0x158]
lea rdx, str.CloseHandle_process
mov r8d, 0x13
call fcn.1400cf4f0
mov rcx, rsi
call fcn.140158f30
mov rsi, qword [r12]
mov rcx, qword [rsi + 0xc8]
cmp rcx, 0xffffffffffffffff
je 0x14006f3ee
call fcn.14008e8a0
mov qword [rsi + 0xc8], 0xffffffffffffffff
mov qword [rsi + 0xc8], 0xffffffffffffffff
xorps xmm0, xmm0
lea rdx, [rsp + 0x148]
movups xmmword [rdx + 0x14], xmm0
movups xmmword [rdx + 4], xmm0
mov dword [rdx], 2
lea r8, [rsp + 0x70]
mov dword [r8 + 8], 0
mov qword [r8], 0
mov ecx, 0xa8
add rcx, qword [r12]
call fcn.14008d770
mov ebp, eax
mov ebx, eax
jmp 0x14006f4a1
mov ecx, 2
call fcn.1400d9610
xor ebp, ebp
mov ebx, 0
test al, al
je 0x14006f4a1
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x148]
mov rcx, rsi
mov r8d, 0x208
mov r9d, 2
call fcn.140158e40
lea rcx, [rsp + 0x158]
lea rdx, str.CreateProcess
mov r8d, ntohl
call fcn.1400cf4f0
mov rcx, rsi
call fcn.140158f30
xor ebp, ebp
xor ebx, ebx
test r15, r15
je 0x14006f50e
mov eax, dword [0x14021b560]
mov ecx, dword [0x140216fcc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jle 0x14006f505
lea rcx, [0x14021b560]
call fcn.140100680
cmp dword [0x14021b560], 0xffffffff
jne 0x14006f505
lea rcx, [0x1401e6676]
lea rdx, str.::DeleteProcThreadAttributeList
mov r8b, 1
call fcn.14008f0d0
mov qword [0x14021b558], rax
lea rcx, [0x14021b560]
call fcn.140100718
mov rcx, r15
call qword [0x14021b558]
test r13, r13
je 0x14006f57d
mov rcx, r13
call fcn.1401005a4
jmp 0x14006f57d
mov ecx, 2
call fcn.1400d9610
test al, al
je 0x14006f579
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x148]
mov rcx, rsi
mov r8d, 0x1c1
mov r9d, 2
call fcn.140158e40
lea rcx, [rsp + 0x158]
lea rdx, str.InitializeProcThreadAttributeList__size_
mov r8d, 0x28
call fcn.1400cf4f0
mov rcx, rsi
call fcn.140158f30
xor ebp, ebp
xor ebx, ebx
mov rcx, qword [rsp + 0x2b0]
test rcx, rcx
je 0x14006f597
mov qword [rsp + 0x2b8], rcx
call fcn.140100564
mov rcx, rdi
call fcn.14008e8b0
jmp 0x14006eba6
mov ecx, 2
call fcn.1400d9610
test al, al
je 0x14006f600
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x148]
mov rcx, rsi
mov r8d, 0x1cc
mov r9d, 2
call fcn.140158e40
lea rcx, [rsp + 0x158]
lea rdx, [0x1401ed11d]
mov r8d, 0x21
call fcn.1400cf4f0
mov rcx, rsi
call fcn.140158f30
xor ebx, ebx
xor ebp, ebp
jmp 0x14006f50e
mov rax, qword [rsp + 0x2b0]
mov qword [rsp + 0x50], rax
sub r12, rax
mov rsi, r12
sar rsi, 3
lea rax, [rsi + 1]
cmp rax, r13
ja 0x14006fc0d
mov rcx, r13
mov rbp, r12
sar rbp, 2
cmp rbp, rax
cmovb rbp, rax
movabs rax, 0xfffffffffffffff
cmp rsi, rax
cmovae rbp, r13
test rbp, rbp
je 0x14006f672
cmp rbp, rcx
ja 0x14006fc1a
mov r13, rcx
lea rcx, [rbp*8]
call fcn.140100528
mov rbx, rax
jmp 0x14006f677
mov r13, rcx
xor ebx, ebx
lea r14, [rbx + rbp*8]
mov rax, qword [0x140215838]
lea rbp, [rbx + rsi*8]
add rbp, 8
mov qword [rbp - 8], rax
test r12, r12
mov rsi, qword [rsp + 0x50]
jle 0x14006f6a6
mov rcx, rbx
mov rdx, rsi
mov r8, r12
call fcn.140103960
mov qword [rsp + 0x2b0], rbx
mov qword [rsp + 0x2b8], rbp
mov qword [rsp + 0x2c0], r14
test rsi, rsi
je 0x14006f6d3
mov rcx, rsi
call fcn.140100564
mov rbp, qword [rsp + 0x2b8]
cmp rbp, qword [rsp + 0x2c0]
mov r12, qword [rsp + 0x58]
je 0x14006f701
mov rax, qword [0x140215840]
mov qword [rbp], rax
add rbp, 8
mov qword [rsp + 0x2b8], rbp
mov r14, rbp
jmp 0x14006f7d8
mov rdx, qword [rsp + 0x2b0]
sub rbp, rdx
mov r14, rbp
sar r14, 3
lea rax, [r14 + 1]
cmp rax, r13
ja 0x14006fc0d
mov rsi, rbp
sar rsi, 2
cmp rsi, rax
cmovb rsi, rax
movabs rax, 0xfffffffffffffff
cmp r14, rax
cmovae rsi, r13
test rsi, rsi
je 0x14006f772
mov rax, r13
cmp rsi, r13
ja 0x14006fc1a
mov r13, rdx
lea rcx, [rsi*8]
call fcn.140100528
mov rbx, rax
mov rdx, r13
movabs r13, 0x1fffffffffffffff
jmp 0x14006f774
xor ebx, ebx
lea rsi, [rbx + rsi*8]
mov rax, qword [0x140215840]
lea r14, [rbx + r14*8]
add r14, 8
mov qword [r14 - 8], rax
test rbp, rbp
jle 0x14006f7ab
mov rcx, rbx
mov r13, rdx
mov r8, rbp
call fcn.140103960
mov rdx, r13
movabs r13, 0x1fffffffffffffff
mov qword [rsp + 0x2b0], rbx
mov qword [rsp + 0x2b8], r14
mov qword [rsp + 0x2c0], rsi
test rdx, rdx
je 0x14006f7d8
mov rcx, rdx
call fcn.140100564
mov r14, qword [rsp + 0x2b8]
cmp r14, qword [rsp + 0x2c0]
je 0x14006f800
mov rax, qword [0x140215848]
mov qword [r14], rax
add r14, 8
mov qword [rsp + 0x2b8], r14
mov rsi, r14
jmp 0x14006f8c6
mov rax, qword [rsp + 0x2b0]
mov qword [rsp + 0x50], rax
sub r14, rax
mov rbp, r14
sar rbp, 3
lea rax, [rbp + 1]
cmp rax, r13
ja 0x14006fc0d
mov rsi, r14
sar rsi, 2
cmp rsi, rax
cmovb rsi, rax
movabs rax, 0xfffffffffffffff
cmp rbp, rax
cmovae rsi, r13
test rsi, rsi
je 0x14006f863
cmp rsi, r13
ja 0x14006fc1a
lea rcx, [rsi*8]
call fcn.140100528
mov rbx, rax
jmp 0x14006f865
xor ebx, ebx
lea r12, [rbx + rsi*8]
mov rax, qword [0x140215848]
lea rsi, [rbx + rbp*8]
add rsi, 8
mov qword [rsi - 8], rax
test r14, r14
mov rbp, qword [rsp + 0x50]
jle 0x14006f894
mov rcx, rbx
mov rdx, rbp
mov r8, r14
call fcn.140103960
mov qword [rsp + 0x2b0], rbx
mov qword [rsp + 0x2b8], rsi
mov qword [rsp + 0x2c0], r12
test rbp, rbp
mov r12, qword [rsp + 0x58]
je 0x14006f8c6
mov rcx, rbp
call fcn.140100564
mov rsi, qword [rsp + 0x2b8]
mov r14, qword [r12]
cmp rsi, qword [rsp + 0x2c0]
je 0x14006f8f2
mov rax, qword [r14 + 0xc8]
mov qword [rsi], rax
add rsi, 8
mov qword [rsp + 0x2b8], rsi
mov r12, rsi
jmp 0x14006f9bb
mov rax, qword [rsp + 0x2b0]
mov qword [rsp + 0x50], rax
sub rsi, rax
mov r12, rsi
sar r12, 3
lea rax, [r12 + 1]
cmp rax, r13
ja 0x14006fc0d
mov rbp, rsi
sar rbp, 2
cmp rbp, rax
cmovb rbp, rax
movabs rax, 0xfffffffffffffff
cmp r12, rax
cmovae rbp, r13
test rbp, rbp
je 0x14006f956
cmp rbp, r13
ja 0x14006fc1a
lea rcx, [rbp*8]
call fcn.140100528
mov rbx, rax
jmp 0x14006f958
xor ebx, ebx
lea rcx, [rbx + rbp*8]
mov rax, qword [r14 + 0xc8]
lea r12, [rbx + r12*8]
add r12, 8
mov qword [r12 - 8], rax
test rsi, rsi
mov rbp, qword [rsp + 0x50]
jle 0x14006f98e
mov r14, rcx
mov rcx, rbx
mov rdx, rbp
mov r8, rsi
call fcn.140103960
mov rcx, r14
mov qword [rsp + 0x2b0], rbx
mov qword [rsp + 0x2b8], r12
mov qword [rsp + 0x2c0], rcx
test rbp, rbp
je 0x14006f9bb
mov rcx, rbp
call fcn.140100564
mov r12, qword [rsp + 0x2b8]
cmp r12, qword [rsp + 0x2c0]
je 0x14006f9da
mov qword [r12], rdi
add r12, 8
mov qword [rsp + 0x2b8], r12
jmp 0x14006fa82
mov rbx, qword [rsp + 0x2b0]
sub r12, rbx
mov r14, r12
sar r14, 3
lea rax, [r14 + 1]
cmp rax, r13
ja 0x14006fc0d
mov rbp, r12
sar rbp, 2
cmp rbp, rax
cmovb rbp, rax
movabs rax, 0xfffffffffffffff
cmp r14, rax
cmovae rbp, r13
test rbp, rbp
je 0x14006fa38
cmp rbp, r13
ja 0x14006fc1a
lea rcx, [rbp*8]
call fcn.140100528
mov rsi, rax
jmp 0x14006fa3a
xor esi, esi
lea r13, [rsi + rbp*8]
lea rbp, [rsi + r14*8]
add rbp, 8
mov qword [rbp - 8], rdi
test r12, r12
jle 0x14006fa5d
mov rcx, rsi
mov rdx, rbx
mov r8, r12
call fcn.140103960
mov qword [rsp + 0x2b0], rsi
mov qword [rsp + 0x2b8], rbp
mov qword [rsp + 0x2c0], r13
test rbx, rbx
je 0x14006fa82
mov rcx, rbx
call fcn.140100564
mov rdx, qword [rsp + 0xd0]
lea rsi, [rsp + 0x2b0]
mov rcx, rsi
call fcn.140070600
mov rdx, qword [rsp + 0xd8]
mov rcx, rsi
call fcn.140070600
mov rdx, qword [rsp + 0xe0]
mov rcx, rsi
call fcn.140070600
mov r9, qword [rsi]
mov rax, qword [rsi + 8]
sub rax, r9
mov rcx, qword [rsp + 0xe8]
xorps xmm0, xmm0
movups xmmword [rsp + 0x28], xmm0
mov qword [rsp + 0x20], rax
mov r8d, 0x20002
xor edx, edx
call qword [0x14021b548]
test eax, eax
mov r12, qword [rsp + 0x58]
je 0x14006fb0f
mov r14, r15
mov esi, 0x80000
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x60]
lea rbx, [rsp + 0x300]
jmp 0x14006f0d5
mov ecx, 2
call fcn.1400d9610
test al, al
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x60]
je 0x14006f49d
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x148]
mov rcx, rsi
mov r8d, 0x1e6
mov r9d, 2
call fcn.140158e40
lea rcx, [rsp + 0x158]
lea rdx, [0x1401ed13f]
mov r8d, 0x19
jmp 0x14006f490
lea rcx, [0x14021b540]
call fcn.140100680
cmp dword [0x14021b540], 0xffffffff
jne 0x14006eff6
lea rcx, [0x1401e6676]
lea rdx, str.::InitializeProcThreadAttributeList
xor r8d, r8d
call fcn.14008f0d0
mov qword [0x14021b538], rax
lea rcx, [0x14021b540]
call fcn.140100718
jmp 0x14006eff6
lea rcx, [0x14021b550]
call fcn.140100680
cmp dword [0x14021b550], 0xffffffff
jne 0x14006f01b
cmp qword [0x14021b538], 0
je 0x14006fbf3
lea rcx, [0x1401e6676]
lea rdx, str.::UpdateProcThreadAttribute
xor r8d, r8d
call fcn.14008f0d0
jmp 0x14006fbf5
xor eax, eax
mov qword [0x14021b548], rax
lea rcx, [0x14021b550]
call fcn.140100718
jmp 0x14006f01b
lea rcx, [rsp + 0x2b0]
call fcn.140131070
call fcn.1401143a0
int3
mov rcx, rsi
mov rdx, rbx
mov r8, rbp
call fcn.140103960
jmp 0x14006f1ac
mov rcx, rbx
call fcn.140100564
mov r12, qword [rsp + 0x2c0]
jmp 0x14006f1cd