Function at 0x140031bd4
Capabilities:
Create process on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x378
movaps xmmword [rsp + 0x360], xmm7
movaps xmmword [rsp + 0x350], xmm6
mov r15, rcx
mov rax, qword [0x1400d7618]
xor rax, rsp
mov qword [rsp + 0x348], rax
call fcn.14004e4b0
test al, al
je 0x140031c49
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea r9, str._IsThreadInLoaderLock__
lea rsi, [rsp + 0x178]
mov rcx, rsi
mov r8d, 0x163
call fcn.1400348a0
mov rcx, rsi
call fcn.140034930
mov rcx, rsi
call fcn.140034940
xorps xmm0, xmm0
lea rdx, [rsp + 0x330]
movaps xmmword [rdx], xmm0
mov qword [rdx + 0x10], 0
mov rcx, qword [r15]
call fcn.14004e4dc
mov rdi, qword [r15]
mov rax, qword [rdi + 0x78]
mov rbp, qword [rdi + 0x80]
cmp rax, rbp
je 0x140031d03
lea rsi, [rsp + 0x178]
lea r14, [rsp + 0x320]
lea rbx, [rsp + 0x330]
lea rdi, [rax + 1]
test byte [rax], 1
mov rcx, rdi
je 0x140031ca6
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x320], rcx
movzx ecx, byte [rax]
test cl, 1
je 0x140031cbc
mov rcx, qword [rax + 8]
jmp 0x140031cbf
shr rcx, 1
mov qword [rsp + 0x328], rcx
mov rcx, rsi
mov rdx, r14
call fcn.14002a960
mov rcx, rsi
mov rdx, rbx
call fcn.14004e4dc
test byte [rsp + 0x178], 1
je 0x140031cf4
mov rcx, qword [rsp + 0x188]
call fcn.140083808
add rdi, 0x17
mov rax, rdi
cmp rdi, rbp
jne 0x140031c96
mov rdi, qword [r15]
movzx eax, byte [rdi + 0x18]
test al, 1
jne 0x140031d10
shr rax, 1
jmp 0x140031d14
mov rax, qword [rdi + 0x20]
test rax, rax
je 0x140031d86
add rdi, 0x18
lea rdx, str.database
lea rsi, [rsp + 0x90]
mov rcx, rsi
call fcn.140002836
lea rbx, [rsp + 0x178]
mov rcx, rbx
mov rdx, rsi
mov r8, rdi
call fcn.140033a3a
lea rdx, [rsp + 0x330]
mov rcx, rbx
call fcn.14004e4dc
test byte [rbx], 1
je 0x140031d6c
mov rcx, qword [rsp + 0x188]
call fcn.140083808
test byte [rsp + 0x90], 1
je 0x140031d83
mov rcx, qword [rsp + 0xa0]
call fcn.140083808
mov rdi, qword [r15]
movzx eax, byte [rdi + 0x30]
test al, 1
jne 0x140031d93
shr rax, 1
jmp 0x140031d97
mov rax, qword [rdi + 0x38]
test rax, rax
je 0x140031e09
add rdi, 0x30
lea rdx, str.metrics_dir
lea rsi, [rsp + 0x90]
mov rcx, rsi
call fcn.140002836
lea rbx, [rsp + 0x178]
mov rcx, rbx
mov rdx, rsi
mov r8, rdi
call fcn.140033a3a
lea rdx, [rsp + 0x330]
mov rcx, rbx
call fcn.14004e4dc
test byte [rbx], 1
je 0x140031def
mov rcx, qword [rsp + 0x188]
call fcn.140083808
test byte [rsp + 0x90], 1
je 0x140031e06
mov rcx, qword [rsp + 0xa0]
call fcn.140083808
mov rdi, qword [r15]
movzx eax, byte [rdi + 0x48]
test al, 1
jne 0x140031e19
mov rcx, rax
shr rcx, 1
jmp 0x140031e1d
mov rcx, qword [rdi + 0x50]
test rcx, rcx
mov qword [rsp + 0x58], r15
je 0x140031ee4
lea rcx, [rdi + 0x48]
inc rcx
mov ebx, eax
shr bl, 1
test al, 1
cmovne rcx, qword [rdi + 0x58]
lea rdx, [rsp + 0x310]
mov qword [rdx], rcx
movzx eax, bl
cmovne rax, qword [rdi + 0x50]
mov qword [rdx + 8], rax
lea rsi, [rsp + 0x90]
mov rcx, rsi
call fcn.14002a960
lea rdx, [0x1400b2eb0]
lea rdi, [rsp + 0x130]
mov rcx, rdi
call fcn.140002836
lea rbx, [rsp + 0x178]
mov rcx, rbx
mov rdx, rdi
mov r8, rsi
call fcn.140033a3a
lea rdx, [rsp + 0x330]
mov rcx, rbx
call fcn.14004e4dc
test byte [rbx], 1
je 0x140031eb3
mov rcx, qword [rsp + 0x188]
call fcn.140083808
test byte [rsp + 0x130], 1
je 0x140031eca
mov rcx, qword [rsp + 0x140]
call fcn.140083808
test byte [rsp + 0x90], 1
je 0x140031ee1
mov rcx, qword [rsp + 0xa0]
call fcn.140083808
mov rdi, qword [r15]
mov r15, qword [rdi + 0x60]
add rdi, 0x68
cmp rdi, r15
je 0x14003209f
lea r13, [rsp + 0x2e0]
xorps xmm6, xmm6
lea rsi, [rsp + 0x90]
lea r12, str.annotation
lea rbx, [rsp + 0x2c0]
lea rbp, [rsp + 0x178]
lea r14, [rsp + 0x330]
lea rdx, [r15 + 0x20]
mov rcx, r13
mov r8b, 0x3d
call fcn.140004004
movzx r8d, byte [r15 + 0x38]
test r8b, 1
je 0x140031f4b
mov r8, qword [r15 + 0x40]
mov rdx, qword [r15 + 0x48]
jmp 0x140031f52
shr r8, 1
lea rdx, [r15 + 0x39]
mov rcx, r13
call fcn.14001f792
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x140], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x130], xmm0
movups xmmword [rax], xmm6
mov qword [rax + 0x10], 0
movzx eax, byte [rsp + 0x130]
mov rcx, rax
shr rcx, 1
test al, 1
mov rax, qword [rsp + 0x140]
lea rdx, [rsp + 0x131]
cmove rax, rdx
mov qword [rsp + 0x300], rax
cmovne rcx, qword [rsp + 0x138]
mov qword [rsp + 0x308], rcx
mov rcx, rsi
lea rdx, [rsp + 0x300]
call fcn.14002a960
mov rcx, rbx
mov rdx, r12
call fcn.140002836
mov rcx, rbp
mov rdx, rbx
mov r8, rsi
call fcn.140033a3a
mov rcx, rbp
mov rdx, r14
call fcn.14004e4dc
test byte [rsp + 0x178], 1
je 0x140032004
mov rcx, qword [rsp + 0x188]
call fcn.140083808
test byte [rsp + 0x2c0], 1
je 0x14003201b
mov rcx, qword [rsp + 0x2d0]
call fcn.140083808
test byte [rsp + 0x90], 1
je 0x140032032
mov rcx, qword [rsp + 0xa0]
call fcn.140083808
test byte [rsp + 0x130], 1
je 0x140032049
mov rcx, qword [rsp + 0x140]
call fcn.140083808
test byte [rsp + 0x2e0], 1
je 0x140032060
mov rcx, qword [rsp + 0x2f0]
call fcn.140083808
mov rcx, qword [r15 + 8]
test rcx, rcx
je 0x140032076
mov rax, rcx
mov rcx, qword [rcx]
test rcx, rcx
jne 0x140032069
jmp 0x140032093
mov rax, qword [r15 + 0x10]
cmp qword [rax], r15
je 0x140032093
add r15, 0x10
mov rcx, qword [r15]
mov rax, qword [rcx + 0x10]
lea r15, [rcx + 0x10]
cmp qword [rax], rcx
jne 0x140032083
mov r15, rax
cmp rdi, rax
jne 0x140031f27
movabs r14, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x2f0], r14
movaps xmm6, xmmword [section..rdata]
movaps xmmword [rsp + 0x2e0], xmm6
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, 0x1f0fff
mov edx, 1
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_OpenProcess]
lea rcx, [0x1400b3020]
mov qword [rsp + 0x2e0], rcx
mov qword [rsp + 0x2e8], rax
mov byte [rsp + 0x2f0], 0
test rax, rax
je 0x1400321c1
lea rsi, [rsp + 0x130]
mov qword [rsi + 0x40], r14
movaps xmmword [rsi + 0x30], xmm6
movaps xmmword [rsi + 0x20], xmm6
movaps xmmword [rsi + 0x10], xmm6
movaps xmmword [rsi], xmm6
mov rbp, qword [rsp + 0x58]
mov rcx, qword [rbp]
mov rcx, qword [rcx + 0xb0]
mov r9, qword [0x1400d75f8]
mov r8, qword [0x1400d75f0]
mov rdx, qword [0x1400d75e8]
lea rbx, [0x1400db5e0]
mov qword [rsp + 0x40], rbx
lea rbx, [0x1400db5d0]
mov qword [rsp + 0x38], rbx
lea rbx, [0x1400db5c0]
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
mov rcx, rsi
call fcn.14004e658
lea rdi, [rsp + 0x2c0]
mov rcx, rsi
mov rdx, rdi
call fcn.14004e686
lea rdx, str.__initial_client_data
lea rsi, [rsp + 0x100]
mov rcx, rsi
call fcn.140002836
movzx r8d, byte [rdi]
test r8b, 1
je 0x14003222f
mov r8, qword [rsp + 0x2c8]
mov rdx, qword [rsp + 0x2d0]
jmp 0x14003223a
mov ecx, 2
call fcn.140044070
xor esi, esi
test al, al
mov rbp, qword [rsp + 0x58]
je 0x1400328bb
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x178]
mov rcx, rsi
mov r8d, 0x185
mov r9d, 2
call fcn.140045050
lea rcx, [rsp + 0x188]
lea rdx, [0x1400b2ebf]
mov r8d, 0xb
call fcn.14000482c
mov rcx, rsi
call fcn.140045140
xor esi, esi
jmp 0x1400328bb
shr r8, 1
lea rdx, [rsp + 0x2c1]
mov rcx, rsi
call fcn.14001f792
mov rcx, qword [rax + 0x10]
lea rbx, [rsp + 0x91]
mov qword [rbx + 0xf], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rbx - 1], xmm0
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov qword [rax + 0x10], 0
movzx eax, byte [rbx - 1]
mov rcx, rax
shr rcx, 1
test al, 1
mov rax, qword [rbx + 0xf]
cmove rax, rbx
lea rdx, [rsp + 0x120]
mov qword [rdx], rax
cmovne rcx, qword [rbx + 7]
mov qword [rdx + 8], rcx
lea rsi, [rsp + 0x178]
mov rcx, rsi
call fcn.14002a960
lea rdx, [rsp + 0x330]
mov rcx, rsi
call fcn.14004e4dc
test byte [rsi], 1
je 0x1400322c1
mov rcx, qword [rsp + 0x188]
call fcn.140083808
test byte [rsp + 0x90], 1
je 0x1400322d8
mov rcx, qword [rsp + 0xa0]
call fcn.140083808
test byte [rsp + 0x100], 1
je 0x1400322ef
mov rcx, qword [rsp + 0x110]
call fcn.140083808
test byte [rsp + 0x2c0], 1
je 0x140032306
mov rcx, qword [rsp + 0x2d0]
call fcn.140083808
xorps xmm7, xmm7
movaps xmmword [rsp + 0xc0], xmm7
movaps xmmword [rsp + 0xf0], xmm7
movaps xmmword [rsp + 0xe0], xmm7
movaps xmmword [rsp + 0xd0], xmm7
movaps xmmword [rsp + 0xb0], xmm7
movaps xmmword [rsp + 0xa0], xmm7
movaps xmmword [rsp + 0x90], xmm7
mov dword [rsp + 0xcc], 0x100
mov rsi, qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov ecx, 0xfffffff6
call rsi
mov qword [rsp + 0xe0], rax
mov ecx, 0xfffffff5
call rsi
mov qword [rsp + 0xe8], rax
mov ecx, 0xfffffff4
call rsi
mov qword [rsp + 0xf0], rax
xor eax, eax
mov qword [rsp + 0x2d0], rax
movaps xmmword [rsp + 0x2c0], xmm7
movaps xmmword [rsp + 0x100], xmm6
mov qword [rsp + 0x110], r14
lea rcx, [0x1400b3028]
mov qword [rsp + 0x100], rcx
mov qword [rsp + 0x108], rax
mov byte [rsp + 0x110], 0
mov eax, dword [0x1400db620]
mov ecx, dword [0x1400db698]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140032f1e
mov eax, dword [0x1400db630]
mov ecx, dword [0x1400db698]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140032f65
mov rbx, qword [0x1400db618]
test rbx, rbx
je 0x1400324ac
cmp qword [0x1400db628], 0
je 0x1400324ac
mov dword [rsp + 0x90], 0x70
lea r9, [rsp + 0x70]
mov qword [r9], r14
xor ecx, ecx
mov edx, 1
xor r8d, r8d
call rbx
test eax, eax
je 0x1400324ea
mov ecx, 2
call fcn.140044070
test al, al
je 0x140032882
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x178]
mov rcx, rsi
mov r8d, 0x1b6
mov r9d, 2
call fcn.140044120
lea rcx, [rsp + 0x188]
lea rdx, str.InitializeProcThreadAttributeList__size__succeeded__expected_failure
mov r8d, 0x44
call fcn.14000482c
mov rcx, rsi
call fcn.1400445e0
jmp 0x140032882
mov dword [rsp + 0x90], 0x68
xor r13d, r13d
xor edi, edi
mov rdx, qword [rbp]
movzx r8d, byte [rdx]
test r8b, 1
jne 0x1400324d8
cmp r8b, 0x18
jb 0x1400324e3
shr r8, 1
jmp 0x14003259e
cmp qword [rdx + 8], 0xc
jae 0x14003259a
xor esi, esi
jmp 0x140032602
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x140032826
lea rsi, [rsp + 0x70]
mov rcx, qword [rsi]
call fcn.14008383c
mov r13, rax
mov qword [rsp + 0xf8], rax
mov rcx, rax
mov edx, 1
xor r8d, r8d
mov r9, rsi
call qword [0x1400db618]
test eax, eax
je 0x140032931
movabs r15, 0x1fffffffffffffff
lea rsi, [rsp + 0x100]
mov rcx, rsi
call fcn.140033eb6
mov rax, qword [rsp + 0xf8]
mov qword [rsi + 8], rax
lea rsi, [rsp + 0x2c0]
mov edx, 8
mov rcx, rsi
call fcn.140033be2
mov rdi, qword [rsi + 8]
mov rbx, qword [rsi + 0x10]
cmp rdi, rbx
je 0x140032989
mov rax, qword [0x1400d75e8]
mov qword [rdi], rax
add rdi, 8
mov qword [rsp + 0x2c8], rdi
mov rbx, rdi
mov rdx, r15
jmp 0x140032a71
mov r8, qword [rdx + 8]
add r8, 0xfffffffffffffff4
lea rax, [rdx + 0x18]
mov qword [rsp + 0x20], rax
lea rsi, [rsp + 0x178]
mov rcx, rsi
mov r9, 0xffffffffffffffff
call fcn.14001fe36
test byte [rsi], 1
je 0x1400325d1
mov rcx, qword [rsp + 0x188]
jmp 0x1400325d9
lea rcx, [rsp + 0x17a]
lea rdx, str.rundll32.exe
call fcn.1400973f0
test eax, eax
sete sil
test byte [rsp + 0x178], 1
je 0x140032602
mov rcx, qword [rsp + 0x188]
call fcn.140083808
mov qword [rsp + 0x80], r14
movaps xmmword [rsp + 0x70], xmm6
test byte [rsp + 0x330], 1
je 0x140032623
mov rdx, qword [rsp + 0x340]
jmp 0x14003262b
lea rdx, [rsp + 0x332]
test sil, sil
je 0x140032634
xor ecx, ecx
jmp 0x140032647
mov rcx, qword [rbp]
test byte [rcx], 1
jne 0x140032643
add rcx, 2
jmp 0x140032647
mov rcx, qword [rcx + 0x10]
lea rax, [rsp + 0x70]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x90]
mov qword [rsp + 0x40], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], 1
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x1400327c2
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, eax
mov ecx, 1
call fcn.140044070
test esi, esi
jne 0x1400326f3
test al, al
je 0x1400326f3
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x178]
mov rcx, rsi
mov r8d, 0x206
mov r9d, 1
call fcn.140045050
lea rcx, [rsp + 0x188]
lea rdx, str.CloseHandle_thread
mov r8d, 0x12
call fcn.14000482c
mov rcx, rsi
call fcn.140045140
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, eax
mov ecx, 1
call fcn.140044070
test esi, esi
jne 0x140032760
test al, al
je 0x140032760
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x178]
mov rcx, rsi
mov r8d, 0x209
mov r9d, 1
call fcn.140045050
lea rcx, [rsp + 0x188]
lea rdx, str.CloseHandle_process
mov r8d, 0x13
call fcn.14000482c
mov rcx, rsi
call fcn.140045140
mov ecx, 0xa8
add rcx, qword [rbp]
lea rsi, [rsp + 0x178]
mov qword [rsi], 0xffffffffffffffff
mov rdx, rsi
call fcn.14003353a
xorps xmm0, xmm0
movups xmmword [rsi + 0x14], xmm0
movups xmmword [rsi + 4], xmm0
mov dword [rsi], 2
lea r8, [rsp + 0x60]
mov dword [r8 + 8], 0
mov qword [r8], 0
mov ecx, 0x90
add rcx, qword [rbp]
lea rdx, [rsp + 0x178]
call fcn.14004db3c
mov esi, eax
jmp 0x140032887
mov ecx, 2
call fcn.140044070
xor esi, esi
test al, al
je 0x140032887
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x178]
mov rcx, rsi
mov r8d, 0x201
mov r9d, 2
call fcn.140045050
lea rcx, [rsp + 0x188]
lea rdx, str.CreateProcess
mov r8d, 0xd
call fcn.14000482c
mov rcx, rsi
call fcn.140045140
jmp 0x140032885
mov ecx, 2
call fcn.140044070
test al, al
je 0x140032882
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x178]
mov rcx, rsi
mov r8d, 0x1ba
mov r9d, 2
call fcn.140045050
lea rcx, [rsp + 0x188]
lea rdx, str.InitializeProcThreadAttributeList__size_
mov r8d, 0x28
call fcn.14000482c
mov rcx, rsi
call fcn.140045140
xor r13d, r13d
xor esi, esi
lea rcx, [rsp + 0x100]
call fcn.140033dd0
test r13, r13
je 0x1400328a1
mov rcx, r13
call fcn.140083844
mov rcx, qword [rsp + 0x2c0]
test rcx, rcx
je 0x1400328bb
mov qword [rsp + 0x2c8], rcx
call fcn.140083808
lea rcx, [rsp + 0x2e0]
call fcn.140031568
test byte [rsp + 0x330], 1
je 0x1400328df
mov rcx, qword [rsp + 0x340]
call fcn.140083808
cmp sil, 1
mov eax, 1
adc rax, 0
mov qword [0x1400db610], rax
mov rcx, rbp
call fcn.1400339b2
mov rcx, qword [rsp + 0x348]
xor rcx, rsp
call fcn.140083c20
mov eax, esi
movaps xmm6, xmmword [rsp + 0x350]
movaps xmm7, xmmword [rsp + 0x360]
add rsp, 0x378
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov ecx, 2
call fcn.140044070
test al, al
je 0x140032885
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x178]
mov rcx, rsi
mov r8d, 0x1c5
mov r9d, 2
call fcn.140045050
lea rcx, [rsp + 0x188]
lea rdx, str.InitializeProcThreadAttributeList
mov r8d, 0x21
jmp 0x140032817
mov rsi, qword [rsp + 0x2c0]
sub rdi, rsi
mov r12, rdi
sar r12, 3
lea rax, [r12 + 1]
cmp rax, r15
ja 0x140032fba
mov rdx, r15
sub rbx, rsi
mov rcx, rbx
sar rcx, 3
sar rbx, 2
cmp rbx, rax
cmovb rbx, rax
movabs rax, 0xfffffffffffffff
cmp rcx, rax
cmovae rbx, r15
test rbx, rbx
mov r15, rsi
je 0x1400329ff
cmp rbx, rdx
ja 0x140032fc7
lea rcx, [rbx*8]
call fcn.1400837ac
mov rsi, rax
movabs rdx, 0x1fffffffffffffff
jmp 0x140032a01
xor esi, esi
lea rbp, [rsi + rbx*8]
mov rax, qword [0x1400d75e8]
lea rbx, [rsi + r12*8]
add rbx, 8
mov qword [rbx - 8], rax
test rdi, rdi
jle 0x140032a35
mov rcx, rsi
mov rdx, r15
mov r8, rdi
call fcn.1400865f0
movabs rdx, 0x1fffffffffffffff
mov qword [rsp + 0x2c0], rsi
mov qword [rsp + 0x2c8], rbx
mov qword [rsp + 0x2d0], rbp
test r15, r15
mov rbp, qword [rsp + 0x58]
je 0x140032a71
mov rcx, r15
call fcn.140083808
movabs rdx, 0x1fffffffffffffff
mov rbx, qword [rsp + 0x2c8]
mov rsi, qword [rsp + 0x2d0]
cmp rbx, rsi
je 0x140032a99
mov rax, qword [0x1400d75f0]
mov qword [rbx], rax
add rbx, 8
mov qword [rsp + 0x2c8], rbx
jmp 0x140032b6f
mov r15, qword [rsp + 0x2c0]
sub rsi, r15
mov rbx, rsi
sar rbx, 3
lea rax, [rbx + 1]
cmp rax, rdx
ja 0x140032fba
mov rdi, rsi
sar rdi, 2
cmp rdi, rax
cmovb rdi, rax
movabs rax, 0xfffffffffffffff
cmp rbx, rax
cmovae rdi, rdx
test rdi, rdi
je 0x140032b01
cmp rdi, rdx
ja 0x140032fc7
lea rcx, [rdi*8]
call fcn.1400837ac
mov r12, rax
movabs rdx, 0x1fffffffffffffff
jmp 0x140032b04
xor r12d, r12d
lea rdi, [r12 + rdi*8]
mov rax, qword [0x1400d75f0]
lea rbx, [r12 + rbx*8]
add rbx, 8
mov qword [rbx - 8], rax
test rsi, rsi
jle 0x140032b38
mov rcx, r12
mov rdx, r15
mov r8, rsi
call fcn.1400865f0
movabs rdx, 0x1fffffffffffffff
mov qword [rsp + 0x2c0], r12
mov qword [rsp + 0x2c8], rbx
mov qword [rsp + 0x2d0], rdi
test r15, r15
je 0x140032b6f
mov rcx, r15
call fcn.140083808
movabs rdx, 0x1fffffffffffffff
mov rbx, qword [rsp + 0x2c8]
mov rsi, qword [rsp + 0x2d0]
cmp rbx, rsi
je 0x140032b97
mov rax, qword [0x1400d75f8]
mov qword [rbx], rax
add rbx, 8
mov qword [rsp + 0x2c8], rbx
jmp 0x140032c6d
mov r15, qword [rsp + 0x2c0]
sub rsi, r15
mov rbx, rsi
sar rbx, 3
lea rax, [rbx + 1]
cmp rax, rdx
ja 0x140032fba
mov rdi, rsi
sar rdi, 2
cmp rdi, rax
cmovb rdi, rax
movabs rax, 0xfffffffffffffff
cmp rbx, rax
cmovae rdi, rdx
test rdi, rdi
je 0x140032bff
cmp rdi, rdx
ja 0x140032fc7
lea rcx, [rdi*8]
call fcn.1400837ac
mov r12, rax
movabs rdx, 0x1fffffffffffffff
jmp 0x140032c02
xor r12d, r12d
lea rdi, [r12 + rdi*8]
mov rax, qword [0x1400d75f8]
lea rbx, [r12 + rbx*8]
add rbx, 8
mov qword [rbx - 8], rax
test rsi, rsi
jle 0x140032c36
mov rcx, r12
mov rdx, r15
mov r8, rsi
call fcn.1400865f0
movabs rdx, 0x1fffffffffffffff
mov qword [rsp + 0x2c0], r12
mov qword [rsp + 0x2c8], rbx
mov qword [rsp + 0x2d0], rdi
test r15, r15
je 0x140032c6d
mov rcx, r15
call fcn.140083808
movabs rdx, 0x1fffffffffffffff
mov rbx, qword [rsp + 0x2c8]
mov r12, qword [rbp]
mov r15, qword [rsp + 0x2d0]
cmp rbx, r15
je 0x140032c9a
mov rax, qword [r12 + 0xb0]
mov qword [rbx], rax
add rbx, 8
mov qword [rsp + 0x2c8], rbx
jmp 0x140032d70
mov rbp, qword [rsp + 0x2c0]
sub r15, rbp
mov rbx, r15
sar rbx, 3
lea rax, [rbx + 1]
cmp rax, rdx
ja 0x140032fba
mov rdi, r15
sar rdi, 2
cmp rdi, rax
cmovb rdi, rax
movabs rax, 0xfffffffffffffff
cmp rbx, rax
cmovae rdi, rdx
test rdi, rdi
je 0x140032d02
cmp rdi, rdx
ja 0x140032fc7
lea rcx, [rdi*8]
call fcn.1400837ac
mov rsi, rax
movabs rdx, 0x1fffffffffffffff
jmp 0x140032d04
xor esi, esi
lea rdi, [rsi + rdi*8]
mov rax, qword [r12 + 0xb0]
lea rbx, [rsi + rbx*8]
add rbx, 8
mov qword [rbx - 8], rax
test r15, r15
jle 0x140032d39
mov rcx, rsi
mov rdx, rbp
mov r8, r15
call fcn.1400865f0
movabs rdx, 0x1fffffffffffffff
mov qword [rsp + 0x2c0], rsi
mov qword [rsp + 0x2c8], rbx
mov qword [rsp + 0x2d0], rdi
test rbp, rbp
je 0x140032d70
mov rcx, rbp
call fcn.140083808
movabs rdx, 0x1fffffffffffffff
mov rbx, qword [rsp + 0x2c8]
mov rsi, qword [rsp + 0x2d0]
cmp rbx, rsi
mov rbp, qword [rsp + 0x58]
je 0x140032d9e
mov rax, qword [rsp + 0x2e8]
mov qword [rbx], rax
add rbx, 8
mov qword [rsp + 0x2c8], rbx
jmp 0x140032e53
mov r12, qword [rsp + 0x2c0]
sub rsi, r12
mov r15, rsi
sar r15, 3
lea rax, [r15 + 1]
cmp rax, rdx
ja 0x140032fba
mov rdi, rsi
sar rdi, 2
cmp rdi, rax
cmovb rdi, rax
movabs rax, 0xfffffffffffffff
cmp r15, rax
cmovae rdi, rdx
test rdi, rdi
je 0x140032dfc
cmp rdi, rdx
ja 0x140032fc7
lea rcx, [rdi*8]
call fcn.1400837ac
mov rbx, rax
jmp 0x140032dfe
xor ebx, ebx
lea rbp, [rbx + rdi*8]
mov rax, qword [rsp + 0x2e8]
lea rdi, [rbx + r15*8]
add rdi, 8
mov qword [rdi - 8], rax
test rsi, rsi
jle 0x140032e29
mov rcx, rbx
mov rdx, r12
mov r8, rsi
call fcn.1400865f0
mov qword [rsp + 0x2c0], rbx
mov qword [rsp + 0x2c8], rdi
mov qword [rsp + 0x2d0], rbp
test r12, r12
mov rbp, qword [rsp + 0x58]
je 0x140032e53
mov rcx, r12
call fcn.140083808
mov rdx, qword [rsp + 0xe0]
lea rsi, [rsp + 0x2c0]
mov rcx, rsi
call fcn.140033c7f
mov rdx, qword [rsp + 0xe8]
mov rcx, rsi
call fcn.140033c7f
mov rdx, qword [rsp + 0xf0]
mov rcx, rsi
call fcn.140033c7f
mov r9, qword [rsi]
mov rax, qword [rsi + 8]
sub rax, r9
mov rcx, qword [rsp + 0xf8]
xorps xmm0, xmm0
movups xmmword [rsp + 0x28], xmm0
mov qword [rsp + 0x20], rax
mov r8d, 0x20002
xor edx, edx
call qword [0x1400db628]
test eax, eax
je 0x140032ec6
mov edi, 0x80000
jmp 0x1400324bc
mov ecx, 2
call fcn.140044070
test al, al
je 0x140032885
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x178]
mov rcx, rsi
mov r8d, 0x1df
mov r9d, 2
call fcn.140045050
lea rcx, [rsp + 0x188]
lea rdx, str.UpdateProcThreadAttribute
mov r8d, 0x19
jmp 0x140032817
lea rcx, [0x1400db620]
call fcn.1400839b0
cmp dword [0x1400db620], 0xffffffff
jne 0x1400323e6
lea rcx, [0x1400b2e20]
lea rdx, str.::InitializeProcThreadAttributeList
xor r8d, r8d
call fcn.14004e720
mov qword [0x1400db618], rax
lea rcx, [0x1400db620]
call fcn.140083a48
jmp 0x1400323e6
lea rcx, [0x1400db630]
call fcn.1400839b0
cmp dword [0x1400db630], 0xffffffff
jne 0x14003240b
cmp qword [0x1400db618], 0
je 0x140032fa0
lea rcx, [0x1400b2e20]
lea rdx, str.::UpdateProcThreadAttribute
xor r8d, r8d
call fcn.14004e720
jmp 0x140032fa2
xor eax, eax
mov qword [0x1400db628], rax
lea rcx, [0x1400db630]
call fcn.140083a48
jmp 0x14003240b
lea rcx, [rsp + 0x2c0]
call fcn.140021144
call fcn.1400954ec
int3