Function at 0x1400f13f4
Capabilities:
Create process on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x338
movaps xmmword [rsp + 0x320], xmm7
movaps xmmword [rsp + 0x310], xmm6
mov r15, rcx
mov rax, qword [0x1401c1028]
xor rax, rsp
mov qword [rsp + 0x308], rax
mov rax, qword gs:[0x30]
mov rax, qword [rax + 0x60]
mov rax, qword [rax + 0x110]
mov rax, qword [rax + 0x10]
mov rcx, qword gs:[0x30]
cmp rax, qword [rcx + 0x48]
je 0x1400f25d5
xorps xmm6, xmm6
lea rdx, [rsp + 0x2f0]
movaps xmmword [rdx], xmm6
mov qword [rdx + 0x10], 0
mov rcx, qword [r15]
call fcn.140119bc8
mov rdi, qword [r15]
mov rsi, qword [rdi + 0x78]
mov r14, qword [rdi + 0x80]
cmp rsi, r14
je 0x1400f150f
lea rdi, [rsp + 0x170]
lea rbx, [rsp + 0x2f0]
movzx edx, byte [rsi + 0x17]
mov rcx, rsi
test dl, dl
jns 0x1400f14b7
mov rdx, qword [rsi + 8]
test rdx, rdx
js 0x1400f25d2
mov rcx, qword [rsi]
test rcx, rcx
jne 0x1400f14c5
test rdx, rdx
jne 0x1400f25c9
movaps xmmword [rsp + 0x170], xmm6
mov qword [rsp + 0x180], 0
mov r8, rdi
call fcn.140065290
mov rcx, rdi
mov rdx, rbx
call fcn.140119bc8
cmp byte [rsp + 0x187], 0
jns 0x1400f1503
mov rcx, qword [rsp + 0x170]
call fcn.14014b4e4
add rsi, 0x18
cmp rsi, r14
jne 0x1400f149c
mov rdi, qword [r15]
movzx eax, byte [rdi + 0x2f]
test al, al
jns 0x1400f151b
mov rax, qword [rdi + 0x20]
test rax, rax
je 0x1400f158f
add rdi, 0x18
lea rdx, str.database
lea rbx, [rsp + 0x90]
mov rcx, rbx
call fcn.14002828c
lea r14, [rsp + 0x170]
mov rcx, r14
mov rdx, rbx
mov r8, rdi
call fcn.1400f28f0
lea rdx, [rsp + 0x2f0]
mov rcx, r14
call fcn.140119bc8
cmp byte [r14 + 0x17], 0
jns 0x1400f1575
mov rcx, qword [rsp + 0x170]
call fcn.14014b4e4
cmp byte [rsp + 0xa7], 0
jns 0x1400f158c
mov rcx, qword [rsp + 0x90]
call fcn.14014b4e4
mov rdi, qword [r15]
movzx eax, byte [rdi + 0x47]
test al, al
jns 0x1400f159b
mov rax, qword [rdi + 0x38]
test rax, rax
je 0x1400f160f
add rdi, 0x30
lea rdx, str.metrics_dir
lea rbx, [rsp + 0x90]
mov rcx, rbx
call fcn.14002828c
lea r14, [rsp + 0x170]
mov rcx, r14
mov rdx, rbx
mov r8, rdi
call fcn.1400f28f0
lea rdx, [rsp + 0x2f0]
mov rcx, r14
call fcn.140119bc8
cmp byte [r14 + 0x17], 0
jns 0x1400f15f5
mov rcx, qword [rsp + 0x170]
call fcn.14014b4e4
cmp byte [rsp + 0xa7], 0
jns 0x1400f160c
mov rcx, qword [rsp + 0x90]
call fcn.14014b4e4
mov rdi, qword [r15]
lea rcx, [rdi + 0x48]
movzx edx, byte [rdi + 0x5f]
test dl, dl
js 0x1400f1625
test rdx, rdx
jne 0x1400f163b
jmp 0x1400f16e4
mov rdx, qword [rdi + 0x50]
test rdx, rdx
je 0x1400f16e4
js 0x1400f25e7
mov rcx, qword [rcx]
test rcx, rcx
je 0x1400f25db
xorps xmm0, xmm0
lea rdi, [rsp + 0x90]
movaps xmmword [rdi], xmm0
mov qword [rdi + 0x10], 0
mov r8, rdi
call fcn.140065290
lea rdx, [0x140199e2f]
lea rbx, [rsp + 0x120]
mov rcx, rbx
call fcn.14002828c
lea r14, [rsp + 0x170]
mov rcx, r14
mov rdx, rbx
mov r8, rdi
call fcn.1400f28f0
lea rdx, [rsp + 0x2f0]
mov rcx, r14
call fcn.140119bc8
cmp byte [r14 + 0x17], 0
jns 0x1400f16b3
mov rcx, qword [rsp + 0x170]
call fcn.14014b4e4
cmp byte [rsp + 0x137], 0
jns 0x1400f16ca
mov rcx, qword [rsp + 0x120]
call fcn.14014b4e4
cmp byte [rsp + 0xa7], 0
jns 0x1400f16e1
mov rcx, qword [rsp + 0x90]
call fcn.14014b4e4
mov rdi, qword [r15]
mov qword [rsp + 0x50], r15
mov rsi, qword [rdi + 0x60]
lea rbp, [rdi + 0x68]
cmp rsi, rbp
je 0x1400f18a1
lea rdi, [rsp + 0x2d0]
xorps xmm6, xmm6
lea rbx, [rsp + 0x90]
lea r14, str.annotation
lea r15, [rsp + 0x2b0]
lea r12, [rsp + 0x170]
lea r13, [rsp + 0x2f0]
lea rdx, [rsi + 0x20]
mov rcx, rdi
mov r8b, 0x3d
call fcn.140030238
movzx r8d, byte [rsi + 0x4f]
test r8b, r8b
jns 0x1400f174f
mov r8, qword [rsi + 0x40]
mov rdx, qword [rsi + 0x38]
jmp 0x1400f1753
lea rdx, [rsi + 0x38]
mov rcx, rdi
call fcn.1400501e2
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x130], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x120], xmm0
movups xmmword [rax], xmm6
mov qword [rax + 0x10], 0
movzx edx, byte [rsp + 0x137]
test dl, dl
cmovs rdx, qword [rsp + 0x128]
mov rcx, qword [rsp + 0x120]
lea rax, [rsp + 0x120]
cmovns rcx, rax
test rdx, rdx
js 0x1400f25cc
je 0x1400f17b8
test rcx, rcx
je 0x1400f25cf
movaps xmmword [rsp + 0x90], xmm6
mov qword [rsp + 0xa0], 0
mov r8, rbx
call fcn.140065290
mov rcx, r15
mov rdx, r14
call fcn.14002828c
mov rcx, r12
mov rdx, r15
mov r8, rbx
call fcn.1400f28f0
mov rcx, r12
mov rdx, r13
call fcn.140119bc8
cmp byte [rsp + 0x187], 0
jns 0x1400f180f
mov rcx, qword [rsp + 0x170]
call fcn.14014b4e4
cmp byte [rsp + 0x2c7], 0
jns 0x1400f1826
mov rcx, qword [rsp + 0x2b0]
call fcn.14014b4e4
cmp byte [rsp + 0xa7], 0
jns 0x1400f183d
mov rcx, qword [rsp + 0x90]
call fcn.14014b4e4
cmp byte [rsp + 0x137], 0
jns 0x1400f1854
mov rcx, qword [rsp + 0x120]
call fcn.14014b4e4
cmp byte [rsp + 0x2e7], 0
jns 0x1400f186b
mov rcx, qword [rsp + 0x2d0]
call fcn.14014b4e4
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x1400f1881
mov rax, rcx
mov rcx, qword [rcx]
test rcx, rcx
jne 0x1400f1874
jmp 0x1400f188d
mov rax, qword [rsi + 0x10]
cmp qword [rax], rsi
mov rsi, rax
jne 0x1400f1881
mov rsi, rax
cmp rax, rbp
jne 0x1400f172c
mov rax, qword [rsp + 0x50]
mov rdi, qword [rax]
mov rbx, qword [rdi + 0x90]
mov rsi, qword [rdi + 0x98]
cmp rbx, rsi
je 0x1400f192e
lea rdi, [0x1401a9180]
lea r14, [rsp + 0x90]
lea r15, [rsp + 0x170]
lea r12, [rsp + 0x2f0]
mov rcx, r14
mov rdx, rdi
call fcn.14002828c
mov rcx, r15
mov rdx, r14
mov r8, rbx
call fcn.1400f28f0
mov rcx, r15
mov rdx, r12
call fcn.140119bc8
cmp byte [rsp + 0x187], 0
jns 0x1400f190e
mov rcx, qword [rsp + 0x170]
call fcn.14014b4e4
cmp byte [rsp + 0xa7], 0
jns 0x1400f1925
mov rcx, qword [rsp + 0x90]
call fcn.14014b4e4
add rbx, 0x18
cmp rbx, rsi
jne 0x1400f18d3
movabs r13, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x2e0], r13
movaps xmm6, xmmword [0x1401940a0]
movaps xmmword [rsp + 0x2d0], xmm6
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, 0x1f0fff
mov edx, 1
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_OpenProcess]
lea r15, [0x140196028]
mov qword [rsp + 0x2d0], r15
mov qword [rsp + 0x2d8], rax
mov byte [rsp + 0x2e0], 0
test rax, rax
je 0x1400f1ca8
lea rcx, [rsp + 0x120]
mov qword [rcx + 0x40], r13
mov r12, qword [rsp + 0x50]
mov rdx, qword [r12]
mov rdx, qword [rdx + 0xc8]
movups xmm0, xmmword [0x1401cf714]
mov r8, qword [0x1401cf708]
lea r9, [0x1401d91b8]
mov qword [rcx], r9
lea r9, [0x1401d91c4]
mov qword [rcx + 8], r9
lea r9, [0x1401d91d0]
mov qword [rcx + 0x10], r9
mov qword [rcx + 0x18], r8
movups xmmword [rcx + 0x20], xmm0
mov qword [rcx + 0x30], rdx
mov qword [rcx + 0x38], rax
mov byte [rcx + 0x40], 1
lea rdi, [rsp + 0x2b0]
mov rdx, rdi
call fcn.140085808
lea rdx, str.__initial_client_data
lea rbx, [rsp + 0x108]
mov rcx, rbx
call fcn.14002828c
movzx r8d, byte [rdi + 0x17]
test r8b, r8b
jns 0x1400f1a2f
mov r8, qword [rsp + 0x2b8]
mov rdi, qword [rsp + 0x2b0]
mov rcx, rbx
mov rdx, rdi
call fcn.1400501e2
mov rcx, qword [rax + 0x10]
lea rdi, [rsp + 0x90]
mov qword [rdi + 0x10], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rdi], xmm0
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov qword [rax + 0x10], 0
movzx edx, byte [rdi + 0x17]
test dl, dl
cmovs rdx, qword [rdi + 8]
mov rcx, qword [rdi]
cmovns rcx, rdi
test rdx, rdx
js 0x1400f25de
je 0x1400f1a84
test rcx, rcx
je 0x1400f25e1
lea r14, [rsp + 0x170]
movaps xmmword [r14], xmm0
mov qword [r14 + 0x10], 0
mov r8, r14
call fcn.140065290
lea rbx, [rsp + 0x2f0]
mov rcx, r14
mov rdx, rbx
call fcn.140119bc8
cmp byte [r14 + 0x17], 0
jns 0x1400f1ac7
mov rcx, qword [rsp + 0x170]
call fcn.14014b4e4
cmp byte [rsp + 0xa7], 0
jns 0x1400f1ade
mov rcx, qword [rsp + 0x90]
call fcn.14014b4e4
cmp byte [rsp + 0x11f], 0
jns 0x1400f1af5
mov rcx, qword [rsp + 0x108]
call fcn.14014b4e4
cmp byte [rsp + 0x2c7], 0
jns 0x1400f1b0c
mov rcx, qword [rsp + 0x2b0]
call fcn.14014b4e4
xorps xmm7, xmm7
movaps xmmword [rsp + 0xc0], xmm7
movaps xmmword [rsp + 0xf0], xmm7
movaps xmmword [rsp + 0xe0], xmm7
movaps xmmword [rsp + 0xd0], xmm7
movaps xmmword [rsp + 0xb0], xmm7
movaps xmmword [rsp + 0xa0], xmm7
movaps xmmword [rsp + 0x90], xmm7
mov dword [rsp + 0xcc], 0x100
mov rsi, qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov ecx, 0xfffffff6
call rsi
mov qword [rsp + 0xe0], rax
mov ecx, 0xfffffff5
call rsi
mov qword [rsp + 0xe8], rax
mov ecx, 0xfffffff4
call rsi
mov qword [rsp + 0xf0], rax
xor eax, eax
mov qword [rsp + 0x2c0], rax
movaps xmmword [rsp + 0x2b0], xmm7
lea rcx, [r13 - 0xaa]
mov qword [rsp + 0x118], rcx
lea rbp, [0x140196030]
mov qword [rsp + 0x108], rbp
mov qword [rsp + 0x110], rax
mov eax, dword [0x1401d9210]
mov ecx, dword [0x1401d0348]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400f2523
mov eax, dword [0x1401d9220]
mov ecx, dword [0x1401d0348]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400f256a
mov rax, qword [0x1401d9208]
test rax, rax
je 0x1400f1cc2
cmp qword [0x1401d9218], 0
je 0x1400f1cc2
mov dword [rsp + 0x90], 0x70
lea r9, [rsp + 0x70]
mov qword [r9], r13
xor ecx, ecx
mov edx, 1
xor r8d, r8d
call qword [0x1401b4100]
test eax, eax
je 0x1400f1d8c
cmp dword [0x1401d3120], 2
jg 0x1400f21df
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rdi, [rsp + 0x170]
mov rcx, rdi
mov r8d, 0x1d8
mov r9d, 2
call fcn.140072e00
lea rcx, [rsp + 0x180]
lea rdx, str.InitializeProcThreadAttributeList__size__succeeded__expected_failure
mov r8d, 0x44
call fcn.140027941
mov rcx, rdi
call fcn.140073340
jmp 0x1400f21df
cmp dword [0x1401d3120], 2
mov r12, qword [rsp + 0x50]
jle 0x1400f1cf1
mov esi, 2
xor ebx, ebx
jmp 0x1400f2259
mov dword [rsp + 0x90], 0x68
xor r13d, r13d
xor esi, esi
mov r9, qword [r12]
mov al, byte [r9 + 0x17]
test al, al
js 0x1400f1d4c
cmp al, 0xc
jb 0x1400f1d5a
mov rdi, r15
mov r15, r13
movzx r8d, al
jmp 0x1400f1ed7
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rdi, [rsp + 0x170]
mov rcx, rdi
mov r8d, 0x1a7
mov r9d, 2
call fcn.140073fd0
lea rcx, [rsp + 0x180]
lea rdx, [0x1401ab8f7]
mov r8d, 0xb
call fcn.140027941
mov rcx, rdi
call fcn.140074160
mov esi, 2
xor ebx, ebx
jmp 0x1400f2231
mov r8, qword [r9 + 8]
cmp r8, 0xc
jae 0x1400f1ed1
movabs rcx, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x80], rcx
movaps xmmword [rsp + 0x70], xmm6
cmp byte [rsp + 0x307], 0
jns 0x1400f1ec4
mov rdx, qword [rsp + 0x2f0]
jmp 0x1400f1f7d
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x1400f2187
lea r15, [rsp + 0x70]
mov rcx, qword [r15]
call fcn.14014b51c
mov r13, rax
mov qword [rsp + 0xf8], rax
mov rax, qword [0x1401d9208]
mov rcx, r13
mov edx, 1
xor r8d, r8d
mov r9, r15
call qword [0x1401b4100]
test eax, eax
je 0x1400f22b5
mov rax, qword [rsp + 0x110]
test rax, rax
je 0x1400f1dec
cmp rax, r13
je 0x1400f25c4
lea r15, [rsp + 0x108]
mov rcx, r15
call fcn.1400f2bfa
mov qword [r15 + 8], r13
mov rdx, qword [rsp + 0x2b0]
mov rsi, qword [rsp + 0x2c0]
mov rax, rsi
sub rax, rdx
cmp rax, 0x3f
ja 0x1400f1e97
mov r12, qword [rsp + 0x2b8]
sub r12, rdx
mov ecx, 0x40
mov rbx, rdx
call fcn.14014b4a8
mov qword [rsp + 0x58], r13
mov r13, rbp
mov rbp, rax
lea r15, [rax + r12]
lea rsi, [rax + 0x40]
mov rcx, rax
mov rdx, rbx
mov r8, r12
mov r12, qword [rsp + 0x50]
call fcn.14014e420
mov rcx, rbx
mov qword [rsp + 0x2b0], rbp
mov rbp, r13
mov r13, qword [rsp + 0x58]
lea rbx, [rsp + 0x2f0]
mov qword [rsp + 0x2b8], r15
mov qword [rsp + 0x2c0], rsi
test rcx, rcx
je 0x1400f1e9f
call fcn.14014b4e4
mov rsi, qword [rsp + 0x2c0]
mov r15, qword [rsp + 0x2b8]
cmp r15, rsi
jae 0x1400f2310
test r15, r15
je 0x1400f25ed
mov rax, qword [0x1401cf708]
mov qword [r15], rax
add r15, 8
jmp 0x1400f2327
lea rdx, [rsp + 0x2f0]
jmp 0x1400f1f7d
mov rdi, r15
mov r15, r13
mov r13, rbp
add r8, 0xfffffffffffffff4
lea rax, [rsp + 0x70]
mov qword [rsp + 0x20], rax
mov rcx, r14
mov rdx, r9
mov r9, 0xffffffffffffffff
call fcn.140050f96
cmp byte [rsp + 0x187], 0
jns 0x1400f1f0c
mov r14, qword [rsp + 0x170]
lea rdx, str.rundll32.exe
mov rcx, r14
call fcn.14016771c
mov ebp, eax
cmp byte [rsp + 0x187], 0
jns 0x1400f1f34
mov rcx, qword [rsp + 0x170]
call fcn.14014b4e4
cmp byte [rsp + 0x307], 0
jns 0x1400f1f46
mov rbx, qword [rsp + 0x2f0]
movabs rax, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x80], rax
movaps xmmword [rsp + 0x70], xmm6
test ebp, ebp
je 0x1400f1f86
mov r9, qword [r12]
mov al, byte [r9 + 0x17]
mov rbp, r13
mov r13, r15
mov rdx, rbx
mov r15, rdi
lea rdi, [rsp + 0x90]
test al, al
jns 0x1400f1f9d
mov r9, qword [r9]
jmp 0x1400f1f9d
xor r9d, r9d
mov rbp, r13
mov r13, r15
mov rdx, rbx
mov r15, rdi
lea rdi, [rsp + 0x90]
lea rax, [rsp + 0x70]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x40], rdi
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], 1
mov rcx, r9
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x1400f2124
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [0x1401d3120], 1
jg 0x1400f2047
cmp dword [0x1401c3550], 0
je 0x1400f2047
test eax, eax
jne 0x1400f2047
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rbx, [rsp + 0x170]
mov rcx, rbx
mov r8d, 0x228
mov r9d, 1
call fcn.140073fd0
lea rcx, [rsp + 0x180]
lea rdx, str.CloseHandle_thread
mov r8d, 0x12
call fcn.140027941
mov rcx, rbx
call fcn.140074160
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [0x1401d3120], 1
jg 0x1400f20b7
cmp dword [0x1401c3550], 0
je 0x1400f20b7
test eax, eax
jne 0x1400f20b7
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rbx, [rsp + 0x170]
mov rcx, rbx
mov r8d, 0x22b
mov r9d, 1
call fcn.140073fd0
lea rcx, [rsp + 0x180]
lea rdx, str.CloseHandle_process
mov r8d, 0x13
call fcn.140027941
mov rcx, rbx
call fcn.140074160
mov ecx, 0xc0
add rcx, qword [r12]
lea rbx, [rsp + 0x170]
mov qword [rbx], 0xffffffffffffffff
mov rdx, rbx
call fcn.1400ee9a0
xorps xmm0, xmm0
movups xmmword [rbx + 0x14], xmm0
movups xmmword [rbx + 4], xmm0
mov dword [rbx], 2
lea r8, [rsp + 0x60]
mov dword [r8 + 8], 0
mov qword [r8], 0
mov ecx, 0xa8
add rcx, qword [r12]
lea rdx, [rsp + 0x170]
call fcn.140115b3c
mov ebx, eax
movzx eax, al
mov esi, 2
sub rsi, rax
jmp 0x1400f21e9
mov esi, 2
cmp dword [0x1401d3120], 2
jg 0x1400f21e7
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rbx, [rsp + 0x170]
mov rcx, rbx
mov r8d, 0x223
mov r9d, 2
call fcn.140073fd0
lea rcx, [rsp + 0x180]
lea rdx, str.CreateProcess
mov r8d, 0xd
call fcn.140027941
mov rcx, rbx
call fcn.140074160
jmp 0x1400f21e7
cmp dword [0x1401d3120], 2
jg 0x1400f21df
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rdi, [rsp + 0x170]
mov rcx, rdi
mov r8d, 0x1dc
mov r9d, 2
call fcn.140073fd0
lea rcx, [rsp + 0x180]
lea rdx, str.InitializeProcThreadAttributeList__size_
mov r8d, 0x28
call fcn.140027941
mov rcx, rdi
call fcn.140074160
xor r13d, r13d
mov esi, 2
xor ebx, ebx
mov qword [rsp + 0x108], rbp
cmp byte [rsp + 0x118], 0
jne 0x1400f25e4
lea rcx, [rsp + 0x108]
call fcn.1400f2bfa
test r13, r13
je 0x1400f2219
mov rcx, r13
call fcn.14014b524
lea rax, [rsp + 0x2b0]
lea rcx, [rsp + 0x170]
mov qword [rcx], rax
call fcn.14002a004
mov qword [rsp + 0x2d0], r15
cmp byte [rsp + 0x2e0], 0
jne 0x1400f25d8
mov rcx, qword [rsp + 0x2d8]
test rcx, rcx
je 0x1400f2259
call fcn.14010e8a4
cmp byte [rsp + 0x307], 0
jns 0x1400f2270
mov rcx, qword [rsp + 0x2f0]
call fcn.14014b4e4
mov qword [0x1401d9200], rsi
mov rcx, r12
call fcn.1400f281a
mov rcx, qword [rsp + 0x308]
xor rcx, rsp
call fcn.14014c9b0
mov eax, ebx
movaps xmm6, xmmword [rsp + 0x310]
movaps xmm7, xmmword [rsp + 0x320]
add rsp, 0x338
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
cmp dword [0x1401d3120], 2
lea r15, [0x140196028]
jg 0x1400f21e2
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rbx, [rsp + 0x170]
mov rcx, rbx
mov r8d, 0x1e7
mov r9d, 2
call fcn.140073fd0
lea rcx, [rsp + 0x180]
lea rdx, [0x1401ab9c8]
mov r8d, 0x21
jmp 0x1400f2511
lea rdx, [0x1401cf708]
lea rcx, [rsp + 0x2b0]
call fcn.14002c830
mov r15, rax
mov qword [rsp + 0x2b8], r15
cmp r15, qword [rsp + 0x2c0]
jae 0x1400f2352
test r15, r15
je 0x1400f25f0
mov rax, qword [0x1401cf714]
mov qword [r15], rax
add r15, 8
jmp 0x1400f2369
lea rdx, [0x1401cf714]
lea rcx, [rsp + 0x2b0]
call fcn.14002c830
mov r15, rax
mov qword [rsp + 0x2b8], r15
cmp r15, qword [rsp + 0x2c0]
jae 0x1400f2394
test r15, r15
je 0x1400f25f3
mov rax, qword [0x1401cf71c]
mov qword [r15], rax
add r15, 8
jmp 0x1400f23ab
lea rdx, [0x1401cf71c]
lea rcx, [rsp + 0x2b0]
call fcn.14002c830
mov r15, rax
mov qword [rsp + 0x2b8], r15
mov edx, 0xc8
add rdx, qword [r12]
cmp r15, qword [rsp + 0x2c0]
jae 0x1400f23db
test r15, r15
je 0x1400f25f6
mov rax, qword [rdx]
mov qword [r15], rax
add r15, 8
jmp 0x1400f23eb
lea rcx, [rsp + 0x2b0]
call fcn.14002c830
mov r15, rax
mov qword [rsp + 0x2b8], r15
cmp r15, qword [rsp + 0x2c0]
jae 0x1400f2417
test r15, r15
je 0x1400f25f9
mov rax, qword [rsp + 0x2d8]
mov qword [r15], rax
add r15, 8
jmp 0x1400f242f
lea rdx, [rsp + 0x2d8]
lea rcx, [rsp + 0x2b0]
call fcn.14002c830
mov r15, rax
lea r12, [rsp + 0x2b0]
mov qword [r12 + 8], r15
mov rdx, qword [rsp + 0xe0]
mov rcx, r12
call fcn.1400f2a8e
mov rdx, qword [rsp + 0xe8]
mov rcx, r12
call fcn.1400f2a8e
mov rdx, qword [rsp + 0xf0]
mov rcx, r12
call fcn.1400f2a8e
mov r9, qword [r12]
mov rdx, qword [r12 + 8]
sub rdx, r9
je 0x1400f25ea
mov rax, qword [0x1401d9218]
mov rcx, qword [rsp + 0xf8]
xorps xmm0, xmm0
movups xmmword [rsp + 0x28], xmm0
mov qword [rsp + 0x20], rdx
mov r8d, 0x20002
xor edx, edx
call qword [0x1401b4100]
test eax, eax
mov r12, qword [rsp + 0x50]
lea r15, [0x140196028]
je 0x1400f24c2
mov esi, 0x80000
jmp 0x1400f1cd2
cmp dword [0x1401d3120], 2
jg 0x1400f21e2
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rbx, [rsp + 0x170]
mov rcx, rbx
mov r8d, 0x201
mov r9d, 2
call fcn.140073fd0
lea rcx, [rsp + 0x180]
lea rdx, [0x1401ab9ea]
mov r8d, 0x19
call fcn.140027941
mov rcx, rbx
call fcn.140074160
jmp 0x1400f21e2
lea rcx, [0x1401d9210]
call fcn.14014b600
cmp dword [0x1401d9210], 0xffffffff
jne 0x1400f1be3
lea rcx, [0x14019a392]
lea rdx, str.::InitializeProcThreadAttributeList
xor r8d, r8d
call fcn.140116230
mov qword [0x1401d9208], rax
lea rcx, [0x1401d9210]
call fcn.14014b698
jmp 0x1400f1be3
lea rcx, [0x1401d9220]
call fcn.14014b600
cmp dword [0x1401d9220], 0xffffffff
jne 0x1400f1c08
cmp qword [0x1401d9208], 0
je 0x1400f25a5
lea rcx, [0x14019a392]
lea rdx, str.::UpdateProcThreadAttribute
xor r8d, r8d
call fcn.140116230
jmp 0x1400f25a7
xor eax, eax
mov qword [0x1401d9218], rax
lea rcx, [0x1401d9220]
call fcn.14014b698
mov r12, qword [rsp + 0x50]
jmp 0x1400f1c08
call fcn.140164568
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3