Function at 0x1400e7eb0
Capabilities:
Create process on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x820]
sub rsp, 0x920
mov rax, qword [0x1406fe698]
xor rax, rsp
mov qword [rbp + 0x818], rax
mov r13, rcx
mov qword [rbp - 0x80], rcx
mov qword [rbp + 0x70], rcx
xor esi, esi
mov r14d, esi
mov dword [rsp + 0x50], esi
call fcn.1400f5530
test al, al
je 0x1400e7f58
mov dword [rsp + 0x20], 4
mov r9d, 0x180
lea r8, str.D:3party_code_sentry_nativeexternalcrashpadclientcrashpad_client_win.cc
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace::StartHandlerProcess_class_std::unique_ptr_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData_struct_std::default_delete_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData____
lea rcx, [rbp + 0x468]
call fcn.1400fd530
nop
mov r14d, 1
mov dword [rsp + 0x50], r14d
lea rdx, str.Check_failed:__IsThreadInLoaderLock__
mov rcx, rax
call fcn.1400dbf30
mov rcx, rax
lea rdx, [0x140425780]
call fcn.1400dbf30
nop
test r14b, 1
je 0x1400e7f6e
and r14d, 0xfffffffe
lea rcx, [rbp + 0x468]
call fcn.1400fd740
mov byte [rsp + 0x54], 0
mov qword [rbp + 0x568], rsi
mov qword [rbp + 0x578], rsi
mov qword [rbp + 0x580], 7
mov word [rbp + 0x568], si
lea rdx, [rbp + 0x568]
mov rcx, qword [r13]
call fcn.1400f4460
mov rax, qword [r13]
mov rbx, qword [rax + 0x90]
mov rdi, qword [rax + 0x98]
cmp rbx, rdi
je 0x1400e806f
mov rax, rbx
cmp qword [rbx + 0x18], 0x10
jb 0x1400e7fcb
mov rax, qword [rbx]
mov qword [rbp - 0x40], rax
mov rax, qword [rbx + 0x10]
mov qword [rbp - 0x38], rax
movaps xmm0, xmmword [rbp - 0x40]
movdqa xmmword [rbp + 0x80], xmm0
lea rdx, [rbp + 0x80]
lea rcx, [rbp + 0x6d8]
call fcn.1400feaa0
nop
lea rdx, [rbp + 0x568]
mov rcx, rax
call fcn.1400f4460
nop
mov rdx, qword [rbp + 0x6f0]
cmp rdx, 8
jb 0x1400e804d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x6d8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400e8048
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400e9c37
call fcn.140133e68
mov qword [rbp + 0x6e8], rsi
mov qword [rbp + 0x6f0], 7
mov word [rbp + 0x6d8], si
add rbx, 0x20
jmp 0x1400e7fb5
mov r8, qword [r13]
cmp qword [r8 + 0x30], 0
je 0x1400e818d
add r8, 0x20
mov qword [rbp + 0x6a0], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x698], 8
movabs rax, 0x6573616261746164
mov qword [rbp + 0x688], rax
mov byte [rbp + 0x690], 0
lea rdx, [rbp + 0x688]
lea rcx, [rbp + 0x6f8]
call fcn.1400e75c0
nop
lea rdx, [rbp + 0x568]
mov rcx, rax
call fcn.1400f4460
nop
mov rdx, qword [rbp + 0x710]
cmp rdx, 8
jb 0x1400e811a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x6f8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400e8115
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400e9c3d
call fcn.140133e68
mov qword [rbp + 0x708], rsi
mov qword [rbp + 0x710], 7
mov word [rbp + 0x6f8], si
mov rdx, qword [rbp + 0x6a0]
cmp rdx, 0x10
jb 0x1400e8174
inc rdx
mov rcx, qword [rbp + 0x688]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400e816f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400e9c43
call fcn.140133e68
mov qword [rbp + 0x698], rsi
mov qword [rbp + 0x6a0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x688], 0
mov r8, qword [r13]
cmp qword [r8 + 0x50], 0
je 0x1400e82c5
add r8, 0x40
mov qword [rbp + 0x5e0], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x5d8], reloc.WS2_32.dll_inet_addr
movsd xmm0, qword [str.metrics_dir]
movsd qword [rbp + 0x5c8], xmm0
movzx eax, word [0x140425b68]
mov word [rbp + 0x5d0], ax
movzx eax, byte [0x140425b6a]
mov byte [rbp + 0x5d2], al
mov byte [rbp + 0x5d3], 0
lea rdx, [rbp + 0x5c8]
lea rcx, [rbp + 0x718]
call fcn.1400e75c0
nop
lea rdx, [rbp + 0x568]
mov rcx, rax
call fcn.1400f4460
nop
mov rdx, qword [rbp + 0x730]
cmp rdx, 8
jb 0x1400e8252
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x718]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400e824d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400e9c49
call fcn.140133e68
mov qword [rbp + 0x728], rsi
mov qword [rbp + 0x730], 7
mov word [rbp + 0x718], si
mov rdx, qword [rbp + 0x5e0]
cmp rdx, 0x10
jb 0x1400e82ac
inc rdx
mov rcx, qword [rbp + 0x5c8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400e82a7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400e9c4f
call fcn.140133e68
mov qword [rbp + 0x5d8], rsi
mov qword [rbp + 0x5e0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x5c8], 0
mov rax, qword [r13]
cmp qword [rax + 0x70], 0
je 0x1400e848d
lea rcx, [rax + 0x60]
cmp qword [rax + 0x78], 0x10
jb 0x1400e82e3
mov rcx, qword [rax + 0x60]
mov qword [rbp - 0x30], rcx
mov rax, qword [rax + 0x70]
mov qword [rbp - 0x28], rax
movaps xmm0, xmmword [rbp - 0x30]
movdqa xmmword [rbp + 0x90], xmm0
lea rdx, [rbp + 0x90]
lea rcx, [rbp + 0x7f8]
call fcn.1400feaa0
nop
mov qword [rbp + 0x5e8], rsi
mov qword [rbp + 0x600], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x5f8], 3
movzx ecx, word [0x140425b6c]
mov word [rbp + 0x5e8], cx
movzx ecx, byte [0x140425b6e]
mov byte [rbp + 0x5ea], cl
mov byte [rbp + 0x5eb], 0
mov r8, rax
lea rdx, [rbp + 0x5e8]
lea rcx, [rbp + 0x738]
call fcn.1400e75c0
nop
lea rdx, [rbp + 0x568]
mov rcx, rax
call fcn.1400f4460
nop
mov rdx, qword [rbp + 0x750]
cmp rdx, 8
jb 0x1400e83bb
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x738]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400e83b6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400e9c55
call fcn.140133e68
mov qword [rbp + 0x748], rsi
mov qword [rbp + 0x750], 7
mov word [rbp + 0x738], si
mov rdx, qword [rbp + 0x600]
cmp rdx, 0x10
jb 0x1400e8415
inc rdx
mov rcx, qword [rbp + 0x5e8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400e8410
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400e9c5b
call fcn.140133e68
mov qword [rbp + 0x5f8], rsi
mov qword [rbp + 0x600], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x5e8], 0
mov rdx, qword [rbp + 0x810]
cmp rdx, 8
jb 0x1400e8474
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x7f8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400e846f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400e9c61
call fcn.140133e68
mov qword [rbp + 0x808], rsi
mov qword [rbp + 0x810], 7
mov word [rbp + 0x7f8], si
mov rbx, qword [r13]
mov rbx, qword [rbx + 0x80]
mov rbx, qword [rbx]
xor eax, eax
mov byte [rsp + 0x55], al
lea edx, [rax + 0x16]
cmp byte [rbx + 0x19], al
jne 0x1400e88f3
movabs rcx, 0x8000000000000027
movabs rax, 0x7fffffffffffffff
lea r15, [rbx + 0x20]
mov r13, qword [r15 + 0x10]
cmp r13, rax
je 0x1400e9c8b
mov qword [rsp + 0x78], r15
cmp qword [r15 + 0x18], 0x10
jb 0x1400e84f0
mov rax, qword [r15]
mov qword [rsp + 0x78], rax
movabs rax, 0x7fffffffffffffff
mov qword [rbp + 0x5a8], rsi
mov qword [rbp + 0x5b8], rsi
mov qword [rbp + 0x5c0], rsi
lea r12, [r13 + 1]
mov edi, reloc.WS2_32.dll_ntohs
lea rsi, [rbp + 0x5a8]
cmp r12, rdi
jbe 0x1400e8587
mov rdi, r12
or rdi, 0xf
cmp rdi, rax
jbe 0x1400e852e
mov rdi, rax
mov rax, rcx
jmp 0x1400e8550
cmp rdi, 0x16
cmovb rdi, rdx
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x1400e856f
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400e9c67
mov rcx, rax
call fcn.140133e2c
test rax, rax
je 0x1400e9c85
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x1400e8580
test rcx, rcx
je 0x1400e857b
call fcn.140133e2c
jmp 0x1400e857d
xor eax, eax
mov rsi, rax
mov qword [rbp + 0x5a8], rsi
mov qword [rbp + 0x5b8], r12
mov qword [rbp + 0x5c0], rdi
mov r8, r13
mov rdx, qword [rsp + 0x78]
mov rcx, rsi
call fcn.1401378a0
mov byte [rsi + r13], 0x3d
mov byte [rsi + r12], 0
bts r14d, 0xa
lea rdx, [r15 + 0x20]
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0x10
jb 0x1400e85c6
mov rdx, qword [rdx]
lea rcx, [rbp + 0x5a8]
call fcn.1400162b0
xor esi, esi
mov qword [rbp + 0x588], rsi
mov qword [rbp + 0x598], rsi
mov qword [rbp + 0x5a0], rsi
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x588], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x598], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], sil
bts r14d, 0xb
lea rax, [rbp + 0x588]
cmp qword [rbp + 0x5a0], 0x10
cmovae rax, qword [rbp + 0x588]
mov qword [rbp - 0x20], rax
mov rax, qword [rbp + 0x598]
mov qword [rbp - 0x18], rax
movaps xmm0, xmmword [rbp - 0x20]
movdqa xmmword [rbp + 0xa0], xmm0
lea rdx, [rbp + 0xa0]
lea rcx, [rbp + 0x778]
call fcn.1400feaa0
nop
mov qword [rbp + 0x640], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x638], 0xa
movsd xmm0, qword [str.annotation]
movsd qword [rbp + 0x628], xmm0
movzx ecx, word [0x140425b78]
mov word [rbp + 0x630], cx
mov byte [rbp + 0x632], sil
mov r8, rax
lea rdx, [rbp + 0x628]
lea rcx, [rbp + 0x758]
call fcn.1400e75c0
nop
lea rdx, [rbp + 0x568]
mov rcx, rax
call fcn.1400f4460
nop
mov rdx, qword [rbp + 0x770]
cmp rdx, 8
jb 0x1400e8700
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x758]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400e86fb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400e9c6d
call fcn.140133e68
mov qword [rbp + 0x768], rsi
mov qword [rbp + 0x770], 7
mov word [rbp + 0x758], si
mov rdx, qword [rbp + 0x640]
cmp rdx, 0x10
jb 0x1400e875a
inc rdx
mov rcx, qword [rbp + 0x628]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400e8755
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400e9c73
call fcn.140133e68
mov qword [rbp + 0x638], rsi
mov qword [rbp + 0x640], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x628], 0
mov rdx, qword [rbp + 0x790]
cmp rdx, 8
jb 0x1400e87b9
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x778]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400e87b4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400e9c79
call fcn.140133e68
mov qword [rbp + 0x788], rsi
mov qword [rbp + 0x790], 7
mov word [rbp + 0x778], si
mov rdx, qword [rbp + 0x5a0]
cmp rdx, 0x10
jb 0x1400e8813
inc rdx
mov rcx, qword [rbp + 0x588]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400e880e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400e9c7f
call fcn.140133e68
mov qword [rbp + 0x598], rsi
mov qword [rbp + 0x5a0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x588], 0
mov rdx, qword [rbp + 0x5c0]
cmp rdx, 0x10
jb 0x1400e886d
inc rdx
mov rcx, qword [rbp + 0x5a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400e8868
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400e9c85
call fcn.140133e68
mov qword [rbp + 0x5b8], rsi
mov qword [rbp + 0x5c0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x5a8], 0
mov rax, qword [rbx + 0x10]
cmp byte [rax + 0x19], 0
je 0x1400e88b8
mov rax, qword [rbx + 8]
cmp byte [rax + 0x19], 0
jne 0x1400e88b3
nop word [rax + rax]
cmp rbx, qword [rax + 0x10]
jne 0x1400e88b3
mov rbx, rax
mov rax, qword [rax + 8]
cmp byte [rax + 0x19], 0
je 0x1400e88a0
mov rbx, rax
jmp 0x1400e88df
mov rbx, rax
mov rcx, qword [rax]
cmp byte [rcx + 0x19], 0
jne 0x1400e88df
nop dword [rax]
nop dword [rax + rax]
mov rbx, rcx
mov rax, qword [rcx]
mov rcx, rax
cmp byte [rax + 0x19], 0
je 0x1400e88d0
cmp byte [rbx + 0x19], 0
jne 0x1400e88ef
mov edx, reloc.WLDAP32.dll_Ordinal_22
jmp 0x1400e84ad
mov r13, qword [rbp - 0x80]
mov rax, qword [r13]
mov rbx, qword [rax + 0xa8]
mov rdi, qword [rax + 0xb0]
cmp rbx, rdi
je 0x1400e8a32
mov qword [rbp + 0x660], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x658], 0xa
movsd xmm0, qword [str.attachment]
movsd qword [rbp + 0x648], xmm0
movzx eax, word [0x1404234c8]
mov word [rbp + 0x650], ax
mov byte [rbp + 0x652], 0
mov r8, rbx
lea rdx, [rbp + 0x648]
lea rcx, [rbp + 0x798]
call fcn.1400e75c0
nop
lea rdx, [rbp + 0x568]
mov rcx, rax
call fcn.1400f4460
nop
mov rdx, qword [rbp + 0x7b0]
cmp rdx, 8
jb 0x1400e89b6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x798]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400e89b1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400e9c91
call fcn.140133e68
mov qword [rbp + 0x7a8], rsi
mov qword [rbp + 0x7b0], 7
mov word [rbp + 0x798], si
mov rdx, qword [rbp + 0x660]
cmp rdx, 0x10
jb 0x1400e8a10
inc rdx
mov rcx, qword [rbp + 0x648]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400e8a0b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400e9c97
call fcn.140133e68
mov qword [rbp + 0x658], rsi
mov qword [rbp + 0x660], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x648], 0
add rbx, 0x20
jmp 0x1400e8905
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
mov edx, 1
mov ecx, 0x1f0fff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
mov qword [rsp + 0x70], rax
test rax, rax
jne 0x1400e8b5a
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 2
mov r9d, 0x1a6
lea r8, str.D:3party_code_sentry_nativeexternalcrashpadclientcrashpad_client_win.cc
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace::StartHandlerProcess_class_std::unique_ptr_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData_struct_std::default_delete_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData____
lea rcx, [rbp + 0x208]
call fcn.1400fd6c0
nop
or r14d, 2
mov dword [rsp + 0x50], r14d
lea rdx, [0x140425b80]
mov rcx, rax
call fcn.1400dbf30
nop
test r14b, 2
je 0x1400e8ac3
and r14d, 0xfffffffd
mov dword [rsp + 0x50], r14d
lea rcx, [rbp + 0x208]
call fcn.1400fd990
nop
mov rdx, qword [rbp + 0x580]
cmp rdx, 8
jb 0x1400e8b09
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x568]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400e8b04
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400e9c9d
call fcn.140133e68
mov qword [rbp + 0x578], rsi
mov qword [rbp + 0x580], 7
mov word [rbp + 0x568], si
bt r14d, 0xc
jae 0x1400e8b3f
btr r14d, 0xc
mov dword [rsp + 0x50], r14d
lea rcx, [rbp + 0x100]
call fcn.1400fd740
nop
mov qword [0x14070a990], 2
mov rcx, r13
call fcn.1400e5960
xor al, al
jmp 0x1400e9bc0
mov rax, qword [r13]
mov rcx, qword [rax + 0xe0]
lea rax, [0x14070a998]
mov qword [rsp + 0x40], rax
lea rax, [0x14070a980]
mov qword [rsp + 0x38], rax
lea rax, [0x14070a968]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rcx
mov r9, qword [0x1406fdebc]
mov r8, qword [0x1406fdeb4]
mov rdx, qword [0x1406fdea0]
lea rcx, [rbp + 0x310]
call fcn.1400f5030
lea rdx, [rbp + 0x7d8]
lea rcx, [rbp + 0x310]
call fcn.1400f5470
mov rdi, rax
mov qword [rbp + 0x668], rsi
mov qword [rbp + 0x678], rsi
mov qword [rbp + 0x680], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x668], 0
mov r8d, reloc.WLDAP32.dll_Ordinal_22
lea rdx, str.__initial_client_data
lea rcx, [rbp + 0x668]
call fcn.1400157e0
nop
mov r9, rdi
lea r8, [rbp + 0x668]
movzx edx, byte [rsp + 0x55]
lea rcx, [rbp + 0x6a8]
call fcn.14001fbb0
bts r14d, 0xd
mov dword [rsp + 0x50], r14d
lea rax, [rbp + 0x6a8]
cmp qword [rbp + 0x6c0], 0x10
cmovae rax, qword [rbp + 0x6a8]
mov qword [rbp - 0x10], rax
mov rax, qword [rbp + 0x6b8]
mov qword [rbp - 8], rax
movaps xmm0, xmmword [rbp - 0x10]
movdqa xmmword [rbp + 0xb0], xmm0
lea rdx, [rbp + 0xb0]
lea rcx, [rbp + 0x7b8]
call fcn.1400feaa0
nop
lea rdx, [rbp + 0x568]
mov rcx, rax
call fcn.1400f4460
nop
mov rdx, qword [rbp + 0x7d0]
cmp rdx, 8
jb 0x1400e8cc5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x7b8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400e8cc0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400e9ca3
call fcn.140133e68
mov qword [rbp + 0x7c8], rsi
mov qword [rbp + 0x7d0], 7
mov word [rbp + 0x7b8], si
mov rdx, qword [rbp + 0x6c0]
cmp rdx, 0x10
jb 0x1400e8d1f
inc rdx
mov rcx, qword [rbp + 0x6a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400e8d1a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400e9ca9
call fcn.140133e68
mov qword [rbp + 0x6b8], rsi
mov qword [rbp + 0x6c0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x6a8], 0
mov rdx, qword [rbp + 0x680]
cmp rdx, 0x10
jb 0x1400e8d79
inc rdx
mov rcx, qword [rbp + 0x668]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400e8d74
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400e9caf
call fcn.140133e68
mov qword [rbp + 0x678], rsi
mov qword [rbp + 0x680], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x668], 0
mov rdx, qword [rbp + 0x7f0]
cmp rdx, 0x10
jb 0x1400e8dd3
inc rdx
mov rcx, qword [rbp + 0x7d8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400e8dce
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400e9cb5
call fcn.140133e68
mov qword [rbp + 0x7e8], rsi
mov qword [rbp + 0x7f0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x7d8], 0
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
movups xmmword [rbp + 0x10], xmm0
movups xmmword [rbp + 0x20], xmm0
movups xmmword [rbp + 0x30], xmm0
movups xmmword [rbp + 0x40], xmm0
movups xmmword [rbp + 0x50], xmm0
movups xmmword [rbp + 0x60], xmm0
mov dword [rbp + 0x3c], VarUI2FromI4
mov ecx, 0xfffffff6
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov qword [rbp + 0x50], rax
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov qword [rbp + 0x58], rax
mov ecx, 0xfffffff4
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov qword [rbp + 0x60], rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x58], xmm0
mov r12, rsi
mov qword [rsp + 0x68], rsi
mov rdi, rsi
mov qword [rbp - 0x60], rsi
mov qword [rbp - 0x70], rsi
mov ecx, dword [0x14070b620]
mov rax, qword gs:[0x58]
mov edx, 4
mov r15, qword [rax + rcx*8]
add r15, rdx
mov qword [rsp + 0x78], r15
mov eax, dword [r15]
cmp dword [0x14070a9e0], eax
jg 0x1400e9cbb
mov eax, dword [r15]
cmp dword [0x14070a9f0], eax
jg 0x1400e9d02
mov rax, qword [0x14070a9d8]
test rax, rax
je 0x1400e9579
cmp qword [0x14070a9e8], 0
je 0x1400e9579
mov dword [rbp - 0x78], 0x80000
mov dword [rbp], reloc.WS2_32.dll_WSASetLastError
lea r9, [rbp - 0x68]
xor r8d, r8d
lea edx, [r8 + 1]
xor ecx, ecx
call rax
test eax, eax
je 0x1400e8fe0
mov dword [rsp + 0x20], 2
mov r9d, 0x1d7
lea r8, str.D:3party_code_sentry_nativeexternalcrashpadclientcrashpad_client_win.cc
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace::StartHandlerProcess_class_std::unique_ptr_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData_struct_std::default_delete_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData____
lea rcx, [rbp + 0x100]
call fcn.1400fd530
nop
or r14d, 4
mov dword [rsp + 0x50], r14d
lea rdx, str.InitializeProcThreadAttributeList__size__succeeded__expected_failure
mov rcx, rax
call fcn.1400dbf30
nop
test r14b, 4
je 0x1400e8f3a
and r14d, 0xfffffffb
mov dword [rsp + 0x50], r14d
lea rcx, [rbp + 0x100]
call fcn.1400fd740
nop
mov rcx, rbx
call fcn.1400efe90
xor ebx, ebx
mov qword [rsp + 0x70], rbx
mov rdx, qword [rbp + 0x580]
cmp rdx, 8
jb 0x1400e8f8f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x568]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400e8f8a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400e9d57
call fcn.140133e68
mov qword [rbp + 0x578], rbx
mov qword [rbp + 0x580], 7
mov word [rbp + 0x568], bx
bt r14d, 0xe
jae 0x1400e8fc5
btr r14d, 0xe
mov dword [rsp + 0x50], r14d
lea rcx, [rbp + 0x208]
call fcn.1400fd740
nop
mov qword [0x14070a990], 2
mov rcx, r13
call fcn.1400e5960
xor al, al
jmp 0x1400e9bc0
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
je 0x1400e90fc
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 2
mov r9d, 0x1db
lea r8, str.D:3party_code_sentry_nativeexternalcrashpadclientcrashpad_client_win.cc
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace::StartHandlerProcess_class_std::unique_ptr_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData_struct_std::default_delete_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData____
lea rcx, [rbp + 0x100]
call fcn.1400fd6c0
nop
or r14d, 8
mov dword [rsp + 0x50], r14d
lea rdx, str.InitializeProcThreadAttributeList__size_
mov rcx, rax
call fcn.1400dbf30
nop
test r14b, 8
je 0x1400e9056
and r14d, 0xfffffff7
mov dword [rsp + 0x50], r14d
lea rcx, [rbp + 0x100]
call fcn.1400fd990
nop
mov rcx, rbx
call fcn.1400efe90
xor ebx, ebx
mov qword [rsp + 0x70], rbx
mov rdx, qword [rbp + 0x580]
cmp rdx, 8
jb 0x1400e90ab
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x568]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400e90a6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400e9d57
call fcn.140133e68
mov qword [rbp + 0x578], rbx
mov qword [rbp + 0x580], 7
mov word [rbp + 0x568], bx
bt r14d, 0xf
jae 0x1400e90e1
btr r14d, 0xf
mov dword [rsp + 0x50], r14d
lea rcx, [rbp + 0x208]
call fcn.1400fd740
nop
mov qword [0x14070a990], 2
mov rcx, r13
call fcn.1400e5960
xor al, al
jmp 0x1400e9bc0
mov rcx, qword [rbp - 0x68]
call fcn.140134664
mov rdi, rax
mov qword [rbp - 0x60], rax
mov qword [rbp + 0x68], rax
lea r9, [rbp - 0x68]
xor r8d, r8d
lea edx, [r8 + 1]
mov rcx, rax
call qword [0x14070a9d8]
test eax, eax
jne 0x1400e9247
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 2
mov r9d, 0x1e6
lea r8, str.D:3party_code_sentry_nativeexternalcrashpadclientcrashpad_client_win.cc
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace::StartHandlerProcess_class_std::unique_ptr_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData_struct_std::default_delete_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData____
lea rcx, [rbp + 0x100]
call fcn.1400fd6c0
nop
or r14d, 0x10
mov dword [rsp + 0x50], r14d
lea rdx, str.InitializeProcThreadAttributeList
mov rcx, rax
call fcn.1400dbf30
nop
test r14b, 0x10
je 0x1400e9193
and r14d, 0xffffffef
mov dword [rsp + 0x50], r14d
lea rcx, [rbp + 0x100]
call fcn.1400fd990
nop
test rdi, rdi
je 0x1400e91a1
mov rcx, rdi
call fcn.14013466c
nop
mov rcx, rbx
call fcn.1400efe90
xor ebx, ebx
mov qword [rsp + 0x70], rbx
mov rdx, qword [rbp + 0x580]
cmp rdx, 8
jb 0x1400e91f6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x568]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400e91f1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400e9d57
call fcn.140133e68
mov qword [rbp + 0x578], rbx
mov qword [rbp + 0x580], 7
mov word [rbp + 0x568], bx
bt r14d, 0x10
jae 0x1400e922c
btr r14d, 0x10
mov dword [rsp + 0x50], r14d
lea rcx, [rbp + 0x208]
call fcn.1400fd740
nop
mov qword [0x14070a990], 2
mov rcx, r13
call fcn.1400e5960
xor al, al
jmp 0x1400e9bc0
mov rsi, qword [rbp + 0x68]
mov qword [rbp - 0x70], rsi
mov edx, 8
lea rcx, [rsp + 0x58]
call fcn.140059f40
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], rax
add rax, 0x40
mov qword [rsp + 0x68], rax
lea rdx, [0x1406fdea0]
lea rcx, [rsp + 0x58]
call fcn.1400e50c0
lea rdx, [0x1406fdeb4]
lea rcx, [rsp + 0x58]
call fcn.1400e50c0
lea rdx, [0x1406fdebc]
lea rcx, [rsp + 0x58]
call fcn.1400e50c0
mov rdx, qword [r13]
add rdx, 0xe0
lea rcx, [rsp + 0x58]
call fcn.1400e50c0
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x58]
call fcn.1400e50c0
mov r13, qword [rbp + 0x50]
mov qword [rbp - 0x58], r13
lea rax, [r13 - 1]
cmp rax, 0xfffffffffffffffd
ja 0x1400e9321
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_GetFileType]
dec eax
test eax, 0xfffffffd
jne 0x1400e9321
mov r15, qword [rsp + 0x58]
mov rax, r15
mov rbx, qword [rsp + 0x60]
cmp r15, rbx
je 0x1400e930e
nop
cmp qword [rax], r13
je 0x1400e930e
add rax, 8
cmp rax, rbx
jne 0x1400e9300
cmp rax, rbx
jne 0x1400e932b
lea rdx, [rbp - 0x58]
lea rcx, [rsp + 0x58]
call fcn.1400e50c0
mov r15, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x60]
mov r13, qword [rbp + 0x58]
mov qword [rbp - 0x50], r13
lea rax, [r13 - 1]
cmp rax, 0xfffffffffffffffd
ja 0x1400e9382
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_GetFileType]
dec eax
test eax, 0xfffffffd
jne 0x1400e9382
mov rax, r15
cmp r15, rbx
je 0x1400e9365
cmp qword [rax], r13
je 0x1400e9365
add rax, 8
cmp rax, rbx
jne 0x1400e9357
cmp rax, rbx
jne 0x1400e9382
lea rdx, [rbp - 0x50]
lea rcx, [rsp + 0x58]
call fcn.1400e50c0
mov rbx, qword [rsp + 0x60]
mov r15, qword [rsp + 0x58]
mov r13, qword [rbp + 0x60]
mov qword [rbp - 0x48], r13
lea rax, [r13 - 1]
cmp rax, 0xfffffffffffffffd
ja 0x1400e93db
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_GetFileType]
dec eax
test eax, 0xfffffffd
jne 0x1400e93db
mov rax, r15
cmp r15, rbx
je 0x1400e93be
nop
cmp qword [rax], r13
je 0x1400e93be
add rax, 8
cmp rax, rbx
jne 0x1400e93b0
cmp rax, rbx
jne 0x1400e93db
lea rdx, [rbp - 0x48]
lea rcx, [rsp + 0x58]
call fcn.1400e50c0
mov rbx, qword [rsp + 0x60]
mov r15, qword [rsp + 0x58]
sub rbx, r15
sar rbx, 3
lea rax, [rbx*8]
xor ebx, ebx
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rax
mov r9, r15
xor edx, edx
mov r8d, 0x20002
mov rcx, qword [rbp + 0x68]
call qword [0x14070a9e8]
test eax, eax
jne 0x1400e9567
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 2
mov r9d, 0x200
lea r8, str.D:3party_code_sentry_nativeexternalcrashpadclientcrashpad_client_win.cc
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace::StartHandlerProcess_class_std::unique_ptr_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData_struct_std::default_delete_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData____
lea rcx, [rbp + 0x100]
call fcn.1400fd6c0
nop
or r14d, 0x20
mov dword [rsp + 0x50], r14d
lea rdx, str.UpdateProcThreadAttribute
mov rcx, rax
call fcn.1400dbf30
nop
test r14b, 0x20
je 0x1400e947f
and r14d, 0xffffffdf
mov dword [rsp + 0x50], r14d
lea rcx, [rbp + 0x100]
call fcn.1400fd990
nop
test rsi, rsi
je 0x1400e94a4
mov rax, qword [rsp + 0x78]
mov eax, dword [rax]
cmp dword [0x14070a9d0], eax
jg 0x1400e9d5d
mov rcx, rsi
call qword [0x14070a9c8]
mov qword [rbp - 0x70], rbx
test rdi, rdi
je 0x1400e94b2
mov rcx, rdi
call fcn.14013466c
nop
test r15, r15
je 0x1400e94de
mov r8, qword [rsp + 0x68]
sub r8, r15
sar r8, 3
mov rdx, r15
lea rcx, [rsp + 0x58]
call fcn.1400ea2a0
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], rbx
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x1400e94f2
call fcn.1400efe90
mov qword [rsp + 0x70], rbx
mov r8, qword [rbp + 0x580]
cmp r8, 8
jb 0x1400e9515
inc r8
mov rdx, qword [rbp + 0x568]
lea rcx, [rbp + 0x568]
call fcn.1400ea2f0
mov qword [rbp + 0x578], rbx
mov qword [rbp + 0x580], 7
mov word [rbp + 0x568], bx
bt r14d, 0x11
jae 0x1400e954b
btr r14d, 0x11
mov dword [rsp + 0x50], r14d
lea rcx, [rbp + 0x208]
call fcn.1400fd740
nop
mov qword [0x14070a990], 2
mov rcx, qword [rbp - 0x80]
call fcn.1400e5960
xor al, al
jmp 0x1400e9bc0
mov rbx, qword [rsp + 0x70]
mov r12, qword [rsp + 0x68]
mov r13, qword [rbp - 0x80]
xor ecx, ecx
jmp 0x1400e958a
xor ecx, ecx
mov dword [rbp - 0x78], ecx
mov dword [rbp], 0x68
mov r15, qword [rsp + 0x58]
mov rax, qword [r13]
mov rdx, qword [rax + 0x10]
cmp rdx, 0xc
jb 0x1400e9629
add rdx, 0xfffffffffffffff4
mov qword [rbp + 0x608], rcx
mov qword [rbp + 0x618], rcx
mov qword [rbp + 0x620], 7
mov rcx, qword [rax + 0x10]
cmp rcx, rdx
jb 0x1400e9da4
sub rcx, rdx
mov r8, 0xffffffffffffffff
cmp rcx, r8
cmovb r8, rcx
cmp qword [rax + 0x18], 8
jb 0x1400e95e1
mov rax, qword [rax]
lea rdx, [rax + rdx*2]
lea rcx, [rbp + 0x608]
call fcn.14003a5e0
or r14d, 0x40040
mov dword [rsp + 0x50], r14d
lea rcx, [rbp + 0x608]
cmp qword [rbp + 0x620], 8
cmovae rcx, qword [rbp + 0x608]
lea rdx, str.rundll32.exe
call fcn.1401776c4
test eax, eax
jne 0x1400e9629
mov r13b, 1
jmp 0x1400e962c
xor r13b, r13b
test r14b, 0x40
je 0x1400e96a0
and r14d, 0xffffffbf
mov dword [rsp + 0x50], r14d
mov rdx, qword [rbp + 0x620]
cmp rdx, 8
jb 0x1400e9681
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x608]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400e967c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400e9daa
call fcn.140133e68
xor r8d, r8d
mov qword [rbp + 0x618], r8
mov qword [rbp + 0x620], 7
mov word [rbp + 0x608], r8w
jmp 0x1400e96a3
xor r8d, r8d
lea rdx, [rbp + 0x568]
cmp qword [rbp + 0x580], 8
cmovae rdx, qword [rbp + 0x568]
test r13b, r13b
mov r13, qword [rbp - 0x80]
je 0x1400e96c8
mov rcx, r8
jmp 0x1400e96d6
mov rcx, qword [r13]
cmp qword [rcx + 0x18], 8
jb 0x1400e96d6
mov rcx, qword [rcx]
lea rax, [rbp + 0xc0]
mov qword [rsp + 0x48], rax
lea rax, [rbp]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r8
mov qword [rsp + 0x30], r8
mov eax, dword [rbp - 0x78]
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x1400e9888
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 2
mov r9d, 0x222
lea r8, str.D:3party_code_sentry_nativeexternalcrashpadclientcrashpad_client_win.cc
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace::StartHandlerProcess_class_std::unique_ptr_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData_struct_std::default_delete_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData____
lea rcx, [rbp + 0x100]
call fcn.1400fd6c0
nop
bts r14d, 7
mov dword [rsp + 0x50], r14d
lea rdx, str.CreateProcess
mov rcx, rax
call fcn.1400dbf30
nop
test r14b, r14b
jns 0x1400e9780
btr r14d, 7
mov dword [rsp + 0x50], r14d
lea rcx, [rbp + 0x100]
call fcn.1400fd990
nop
test rsi, rsi
je 0x1400e97a7
mov rax, qword [rsp + 0x78]
mov eax, dword [rax]
cmp dword [0x14070a9d0], eax
jg 0x1400e9db0
mov rcx, rsi
call qword [0x14070a9c8]
xor esi, esi
mov qword [rbp - 0x70], rsi
test rdi, rdi
je 0x1400e97b5
mov rcx, rdi
call fcn.14013466c
nop
test r15, r15
je 0x1400e97df
sub r12, r15
sar r12, 3
mov r8, r12
mov rdx, r15
lea rcx, [rsp + 0x58]
call fcn.1400ea2a0
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], rsi
test rbx, rbx
je 0x1400e97f1
mov rcx, rbx
call fcn.1400efe90
mov qword [rsp + 0x70], rsi
mov rdx, qword [rbp + 0x580]
cmp rdx, 8
jb 0x1400e9837
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x568]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400e9832
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400e9df7
call fcn.140133e68
mov qword [rbp + 0x578], rsi
mov qword [rbp + 0x580], 7
mov word [rbp + 0x568], si
bt r14d, 0x13
jae 0x1400e986d
btr r14d, 0x13
mov dword [rsp + 0x50], r14d
lea rcx, [rbp + 0x208]
call fcn.1400fd740
nop
mov qword [0x14070a990], 2
mov rcx, r13
call fcn.1400e5960
xor al, al
jmp 0x1400e9bc0
mov rcx, qword [rbp + 0xc8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
jne 0x1400e98e5
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 1
mov r9d, 0x227
lea r8, str.D:3party_code_sentry_nativeexternalcrashpadclientcrashpad_client_win.cc
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace::StartHandlerProcess_class_std::unique_ptr_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData_struct_std::default_delete_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData____
lea rcx, [rbp + 0x100]
call fcn.1400fd6c0
nop
bts r14d, 8
mov dword [rsp + 0x50], r14d
lea rdx, str.CloseHandle_thread
mov rcx, rax
call fcn.1400dbf30
nop
bt r14d, 8
jae 0x1400e9902
btr r14d, 8
mov dword [rsp + 0x50], r14d
lea rcx, [rbp + 0x100]
call fcn.1400fd990
mov rcx, qword [rbp + 0xc0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
jne 0x1400e995f
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 1
mov r9d, 0x22a
lea r8, str.D:3party_code_sentry_nativeexternalcrashpadclientcrashpad_client_win.cc
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace::StartHandlerProcess_class_std::unique_ptr_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData_struct_std::default_delete_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData____
lea rcx, [rbp + 0x360]
call fcn.1400fd6c0
nop
bts r14d, 9
mov dword [rsp + 0x50], r14d
lea rdx, str.CloseHandle_process
mov rcx, rax
call fcn.1400dbf30
nop
bt r14d, 9
jae 0x1400e997c
btr r14d, 9
mov dword [rsp + 0x50], r14d
lea rcx, [rbp + 0x360]
call fcn.1400fd990
mov r13, qword [r13]
mov rcx, qword [r13 + 0xe0]
cmp rcx, 0xffffffffffffffff
je 0x1400e9992
call fcn.1400efe80
mov qword [r13 + 0xe0], 0xffffffffffffffff
xorps xmm0, xmm0
movdqu xmmword [rbp + 0xdc], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xec], xmm1
mov dword [rbp + 0xd8], 2
xor eax, eax
mov qword [rbp + 0x6c8], rax
mov dword [rbp + 0x6d0], eax
mov r13, qword [rbp - 0x80]
mov rcx, qword [r13]
add rcx, 0xc0
lea r8, [rbp + 0x6c8]
lea rdx, [rbp + 0xd8]
call fcn.1400fa240
test al, al
jne 0x1400e9adb
test rsi, rsi
je 0x1400e9a1d
mov rax, qword [rsp + 0x78]
mov eax, dword [rax]
cmp dword [0x14070a9d0], eax
jg 0x1400e9dfd
mov rcx, rsi
call qword [0x14070a9c8]
xor esi, esi
mov qword [rbp - 0x70], rsi
test rdi, rdi
je 0x1400e9a2b
mov rcx, rdi
call fcn.14013466c
nop
test r15, r15
je 0x1400e9a55
sub r12, r15
sar r12, 3
mov r8, r12
mov rdx, r15
lea rcx, [rsp + 0x58]
call fcn.1400ea2a0
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], rsi
test rbx, rbx
je 0x1400e9a67
mov rcx, rbx
call fcn.1400efe90
mov qword [rsp + 0x70], rsi
mov r8, qword [rbp + 0x580]
cmp r8, 8
jb 0x1400e9a8a
inc r8
mov rdx, qword [rbp + 0x568]
lea rcx, [rbp + 0x568]
call fcn.1400ea2f0
mov qword [rbp + 0x578], rsi
mov qword [rbp + 0x580], 7
mov word [rbp + 0x568], si
bt r14d, 0x14
jae 0x1400e9ac0
btr r14d, 0x14
mov dword [rsp + 0x50], r14d
lea rcx, [rbp + 0x208]
call fcn.1400fd740
nop
mov qword [0x14070a990], 2
mov rcx, r13
call fcn.1400e5960
xor al, al
jmp 0x1400e9bc0
mov byte [rsp + 0x54], 1
test rsi, rsi
je 0x1400e9b07
mov rax, qword [rsp + 0x78]
mov eax, dword [rax]
cmp dword [0x14070a9d0], eax
jg 0x1400e9bf0
mov rcx, rsi
call qword [0x14070a9c8]
xor esi, esi
mov qword [rbp - 0x70], rsi
test rdi, rdi
je 0x1400e9b15
mov rcx, rdi
call fcn.14013466c
nop
test r15, r15
je 0x1400e9b3f
sub r12, r15
sar r12, 3
mov r8, r12
mov rdx, r15
lea rcx, [rsp + 0x58]
call fcn.1400ea2a0
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], rsi
test rbx, rbx
je 0x1400e9b51
mov rcx, rbx
call fcn.1400efe90
mov qword [rsp + 0x70], rsi
mov r8, qword [rbp + 0x580]
cmp r8, 8
jb 0x1400e9b74
inc r8
mov rdx, qword [rbp + 0x568]
lea rcx, [rbp + 0x568]
call fcn.1400ea2f0
mov qword [rbp + 0x578], rsi
mov qword [rbp + 0x580], 7
mov word [rbp + 0x568], si
bt r14d, 0x15
jae 0x1400e9baa
btr r14d, 0x15
mov dword [rsp + 0x50], r14d
lea rcx, [rbp + 0x208]
call fcn.1400fd740
nop
mov qword [0x14070a990], 1
mov rcx, r13
call fcn.1400e5960
mov al, 1
mov rcx, qword [rbp + 0x818]
xor rcx, rsp
call fcn.140134a90
lea r11, [rsp + 0x920]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
lea rcx, [0x14070a9d0]
call fcn.140134534
cmp dword [0x14070a9d0], 0xffffffff
jne 0x1400e9af8
mov r8b, 1
lea rdx, str.::DeleteProcThreadAttributeList
lea rcx, [0x140424af0]
call fcn.1400f4fb0
mov qword [0x14070a9c8], rax
lea rcx, [0x14070a9d0]
call fcn.1401344d4
jmp 0x1400e9af8
call fcn.1401462a8
nop
call fcn.1401462a8
nop
call fcn.1401462a8
nop
call fcn.1401462a8
nop
call fcn.1401462a8
nop
call fcn.1401462a8
nop
call fcn.1401462a8
nop
call fcn.1401462a8
int3
call fcn.14000f3e0
nop
call fcn.1401462a8
nop
call fcn.1401462a8
nop
call fcn.1401462a8
nop
call fcn.1401462a8
nop
call fcn.1401462a8
int3
call fcn.1400157c0
nop
call fcn.1401462a8
nop
call fcn.1401462a8
nop
call fcn.1401462a8
nop
call fcn.1401462a8
nop
call fcn.1401462a8
nop
call fcn.1401462a8
nop
call fcn.1401462a8
nop
lea rcx, [0x14070a9e0]
call fcn.140134534
cmp dword [0x14070a9e0], 0xffffffff
jne 0x1400e8e8a
xor r8d, r8d
lea rdx, str.::InitializeProcThreadAttributeList
lea rcx, [0x140424af0]
call fcn.1400f4fb0
mov qword [0x14070a9d8], rax
lea rcx, [0x14070a9e0]
call fcn.1401344d4
jmp 0x1400e8e8a
lea rcx, [0x14070a9f0]
call fcn.140134534
cmp dword [0x14070a9f0], 0xffffffff
jne 0x1400e8e99
cmp qword [0x14070a9d8], 0
je 0x1400e9d3d
xor r8d, r8d
lea rdx, str.::UpdateProcThreadAttribute
lea rcx, [0x140424af0]
call fcn.1400f4fb0
jmp 0x1400e9d3f
xor eax, eax
mov qword [0x14070a9e8], rax
lea rcx, [0x14070a9f0]
call fcn.1401344d4
jmp 0x1400e8e99
call fcn.1401462a8
nop
lea rcx, [0x14070a9d0]
call fcn.140134534
cmp dword [0x14070a9d0], 0xffffffff
jne 0x1400e9497
mov r8b, 1
lea rdx, str.::DeleteProcThreadAttributeList
lea rcx, [0x140424af0]
call fcn.1400f4fb0
mov qword [0x14070a9c8], rax
lea rcx, [0x14070a9d0]
call fcn.1401344d4
jmp 0x1400e9497
call fcn.140074b90
int3
call fcn.1401462a8
nop
lea rcx, [0x14070a9d0]
call fcn.140134534
cmp dword [0x14070a9d0], 0xffffffff
jne 0x1400e9798
mov r8b, 1
lea rdx, str.::DeleteProcThreadAttributeList
lea rcx, [0x140424af0]
call fcn.1400f4fb0
mov qword [0x14070a9c8], rax
lea rcx, [0x14070a9d0]
call fcn.1401344d4
jmp 0x1400e9798
call fcn.1401462a8
nop
lea rcx, [0x14070a9d0]
call fcn.140134534
cmp dword [0x14070a9d0], 0xffffffff
jne 0x1400e9a0e
mov r8b, 1
lea rdx, str.::DeleteProcThreadAttributeList
lea rcx, [0x140424af0]
call fcn.1400f4fb0
mov qword [0x14070a9c8], rax
lea rcx, [0x14070a9d0]
call fcn.1401344d4
jmp 0x1400e9a0e