Function at 0x140079b64
Capabilities:
Create process on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xa38
movaps xmmword [rsp + 0xa20], xmm7
movaps xmmword [rsp + 0xa10], xmm6
mov r13, rcx
mov rax, qword [0x14019e018]
xor rax, rsp
mov qword [rsp + 0xa08], rax
call fcn.1400c5000
test al, al
jne 0x14007b123
xorps xmm0, xmm0
lea rdx, [rsp + 0x1e0]
movaps xmmword [rdx], xmm0
mov qword [rdx + 0x10], 0
mov rcx, qword [r13]
call fcn.1400c502c
mov rsi, qword [r13]
mov rbp, qword [rsi + 0x78]
mov rdi, qword [rsi + 0x80]
cmp rbp, rdi
je 0x140079c51
lea rsi, [rsp + 0x200]
lea r14, [rsp + 0x1d0]
lea rbx, [rsp + 0x1e0]
movzx eax, byte [rbp + 0x17]
test al, al
mov rcx, qword [rbp]
cmovns rcx, rbp
mov qword [rsp + 0x1d0], rcx
cmovs rax, qword [rbp + 8]
mov qword [rsp + 0x1d8], rax
mov rcx, rsi
mov rdx, r14
call fcn.14004af40
mov rcx, rsi
mov rdx, rbx
call fcn.1400c502c
cmp byte [rsp + 0x217], 0
jns 0x140079c44
mov rcx, qword [rsp + 0x200]
call fcn.140136864
add rbp, 0x18
cmp rbp, rdi
jne 0x140079bf4
mov rsi, qword [r13]
movzx eax, byte [rsi + 0x2f]
test al, al
jns 0x140079c5d
mov rax, qword [rsi + 0x20]
test rax, rax
je 0x140079cd1
add rsi, 0x18
lea rdx, str.database
lea rdi, [rsp + 0xa0]
mov rcx, rdi
call fcn.14001e654
lea rbx, [rsp + 0x200]
mov rcx, rbx
mov rdx, rdi
mov r8, rsi
call fcn.14007b2d4
lea rdx, [rsp + 0x1e0]
mov rcx, rbx
call fcn.1400c502c
cmp byte [rbx + 0x17], 0
jns 0x140079cb6
mov rcx, qword [rsp + 0x200]
call fcn.140136864
cmp byte [rsp + 0xb7], 0
jns 0x140079ccd
mov rcx, qword [rsp + 0xa0]
call fcn.140136864
mov rsi, qword [r13]
movzx eax, byte [rsi + 0x47]
test al, al
jns 0x140079cdd
mov rax, qword [rsi + 0x38]
test rax, rax
je 0x140079d51
add rsi, 0x30
lea rdx, str.metrics_dir
lea rdi, [rsp + 0xa0]
mov rcx, rdi
call fcn.14001e654
lea rbx, [rsp + 0x200]
mov rcx, rbx
mov rdx, rdi
mov r8, rsi
call fcn.14007b2d4
lea rdx, [rsp + 0x1e0]
mov rcx, rbx
call fcn.1400c502c
cmp byte [rbx + 0x17], 0
jns 0x140079d36
mov rcx, qword [rsp + 0x200]
call fcn.140136864
cmp byte [rsp + 0xb7], 0
jns 0x140079d4d
mov rcx, qword [rsp + 0xa0]
call fcn.140136864
mov rsi, qword [r13]
movzx eax, byte [rsi + 0x5f]
test al, al
js 0x140079d5e
mov rcx, rax
jmp 0x140079d62
mov rcx, qword [rsi + 0x50]
test rcx, rcx
je 0x140079e1c
lea rcx, [rsi + 0x48]
test al, al
cmovs rcx, qword [rsi + 0x48]
lea rdx, [rsp + 0x1c0]
mov qword [rdx], rcx
cmovs rax, qword [rsi + 0x50]
mov qword [rdx + 8], rax
lea rsi, [rsp + 0xa0]
mov rcx, rsi
call fcn.14004af40
lea rdx, [0x14017d70e]
lea rdi, [rsp + 0x120]
mov rcx, rdi
call fcn.14001e654
lea rbx, [rsp + 0x200]
mov rcx, rbx
mov rdx, rdi
mov r8, rsi
call fcn.14007b2d4
lea rdx, [rsp + 0x1e0]
mov rcx, rbx
call fcn.1400c502c
cmp byte [rbx + 0x17], 0
jns 0x140079dea
mov rcx, qword [rsp + 0x200]
call fcn.140136864
cmp byte [rsp + 0x137], 0
jns 0x140079e01
mov rcx, qword [rsp + 0x120]
call fcn.140136864
cmp byte [rsp + 0xb7], 0
jns 0x140079e18
mov rcx, qword [rsp + 0xa0]
call fcn.140136864
mov rsi, qword [r13]
mov r14, qword [rsi + 0x60]
lea r12, [rsi + 0x68]
cmp r14, r12
mov qword [rsp + 0x58], r13
je 0x140079fdb
lea r13, [rsp + 0x190]
xorps xmm6, xmm6
lea rbx, [rsp + 0xa0]
lea r15, str.annotation
lea rsi, [rsp + 0x178]
lea rdi, [rsp + 0x200]
lea rbp, [rsp + 0x1e0]
lea rdx, [r14 + 0x20]
mov rcx, r13
mov r8b, 0x3d
call fcn.140026758
movzx r8d, byte [r14 + 0x4f]
test r8b, r8b
jns 0x140079e87
mov r8, qword [r14 + 0x40]
mov rdx, qword [r14 + 0x38]
jmp 0x140079e8b
lea rdx, [r14 + 0x38]
mov rcx, r13
call fcn.14004414c
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x130], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x120], xmm0
movups xmmword [rax], xmm6
mov qword [rax + 0x10], 0
movzx eax, byte [rsp + 0x137]
test al, al
mov rcx, qword [rsp + 0x120]
lea rdx, [rsp + 0x120]
cmovns rcx, rdx
mov qword [rsp + 0x1b0], rcx
cmovs rax, qword [rsp + 0x128]
mov qword [rsp + 0x1b8], rax
mov rcx, rbx
lea rdx, [rsp + 0x1b0]
call fcn.14004af40
mov rcx, rsi
mov rdx, r15
call fcn.14001e654
mov rcx, rdi
mov rdx, rsi
mov r8, rbx
call fcn.14007b2d4
mov rcx, rdi
mov rdx, rbp
call fcn.1400c502c
cmp byte [rsp + 0x217], 0
jns 0x140079f37
mov rcx, qword [rsp + 0x200]
call fcn.140136864
cmp byte [rsp + 0x18f], 0
jns 0x140079f4e
mov rcx, qword [rsp + 0x178]
call fcn.140136864
cmp byte [rsp + 0xb7], 0
jns 0x140079f65
mov rcx, qword [rsp + 0xa0]
call fcn.140136864
cmp byte [rsp + 0x137], 0
jns 0x140079f7c
mov rcx, qword [rsp + 0x120]
call fcn.140136864
cmp byte [rsp + 0x1a7], 0
jns 0x140079f93
mov rcx, qword [rsp + 0x190]
call fcn.140136864
mov rcx, qword [r14 + 8]
test rcx, rcx
je 0x140079fa9
mov rax, rcx
mov rcx, qword [rcx]
test rcx, rcx
jne 0x140079f9c
jmp 0x140079fc6
mov rax, qword [r14 + 0x10]
cmp qword [rax], r14
je 0x140079fc6
add r14, 0x10
mov rcx, qword [r14]
lea r14, [rcx + 0x10]
mov rax, qword [rcx + 0x10]
cmp qword [rax], rcx
jne 0x140079fb6
mov r14, rax
cmp rax, r12
jne 0x140079e64
mov r13, qword [rsp + 0x58]
mov rsi, qword [r13]
mov rdi, qword [rsi + 0x90]
mov rsi, qword [rsi + 0x98]
cmp rdi, rsi
je 0x14007a068
lea r14, [0x14017d64b]
lea rbx, [rsp + 0xa0]
lea rbp, [rsp + 0x200]
lea r15, [rsp + 0x1e0]
mov rcx, rbx
mov rdx, r14
call fcn.14001e654
mov rcx, rbp
mov rdx, rbx
mov r8, rdi
call fcn.14007b2d4
mov rcx, rbp
mov rdx, r15
call fcn.1400c502c
cmp byte [rsp + 0x217], 0
jns 0x14007a048
mov rcx, qword [rsp + 0x200]
call fcn.140136864
cmp byte [rsp + 0xb7], 0
jns 0x14007a05f
mov rcx, qword [rsp + 0xa0]
call fcn.140136864
add rdi, 0x18
cmp rdi, rsi
jne 0x14007a00d
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, 0x1f0fff
mov edx, 1
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
je 0x14007a3d3
mov r12, rax
movaps xmm6, xmmword [0x140175f60]
lea rsi, [rsp + 0x120]
movaps xmmword [rsi + 0x40], xmm6
movaps xmmword [rsi + 0x30], xmm6
movaps xmmword [rsi + 0x20], xmm6
movaps xmmword [rsi + 0x10], xmm6
movaps xmmword [rsi], xmm6
mov rax, qword [r13]
mov rax, qword [rax + 0xc8]
mov rcx, qword [0x1401a0060]
mov r9, qword [0x1401a0058]
mov r8, qword [0x1401a0050]
mov rdx, qword [0x1401a0048]
lea rbp, [0x1401accf0]
mov qword [rsp + 0x48], rbp
lea rbp, [0x1401accc0]
mov qword [rsp + 0x40], rbp
lea rbp, [0x1401acc80]
mov qword [rsp + 0x38], rbp
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
mov rcx, rsi
call fcn.140052f50
lea rbx, [rsp + 0x190]
mov rcx, rsi
mov rdx, rbx
call fcn.140053310
lea rdx, str.__initial_client_data
lea rsi, [rsp + 0x178]
mov rcx, rsi
call fcn.14001e654
movzx r8d, byte [rbx + 0x17]
test r8b, r8b
jns 0x14007a155
mov r8, qword [rsp + 0x198]
mov rbx, qword [rsp + 0x190]
mov rcx, rsi
mov rdx, rbx
call fcn.14004414c
mov rcx, qword [rax + 0x10]
lea r13, [rsp + 0xa0]
mov qword [r13 + 0x10], rcx
movups xmm0, xmmword [rax]
movaps xmmword [r13], xmm0
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov qword [rax + 0x10], 0
movzx eax, byte [r13 + 0x17]
test al, al
mov rcx, qword [r13]
cmovns rcx, r13
lea rdx, [rsp + 0x110]
mov qword [rdx], rcx
cmovs rax, qword [r13 + 8]
mov qword [rdx + 8], rax
lea rbx, [rsp + 0x200]
mov rcx, rbx
call fcn.14004af40
lea r15, [rsp + 0x1e0]
mov rcx, rbx
mov rdx, r15
call fcn.1400c502c
cmp byte [rbx + 0x17], 0
jns 0x14007a1df
mov rcx, qword [rsp + 0x200]
call fcn.140136864
cmp byte [rsp + 0xb7], 0
jns 0x14007a1f6
mov rcx, qword [rsp + 0xa0]
call fcn.140136864
cmp byte [rsp + 0x18f], 0
jns 0x14007a20d
mov rcx, qword [rsp + 0x178]
call fcn.140136864
cmp byte [rsp + 0x1a7], 0
jns 0x14007a224
mov rcx, qword [rsp + 0x190]
call fcn.140136864
movabs rbp, 0xaaaaaaaaaaaaaaaa
xorps xmm7, xmm7
movaps xmmword [rsp + 0xd0], xmm7
movaps xmmword [rsp + 0x100], xmm7
movaps xmmword [rsp + 0xf0], xmm7
movaps xmmword [rsp + 0xe0], xmm7
movaps xmmword [rsp + 0xc0], xmm7
movaps xmmword [rsp + 0xb0], xmm7
movaps xmmword [rsp + 0xa0], xmm7
mov dword [rsp + 0xdc], 0x100
mov rsi, qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov ecx, 0xfffffff6
call rsi
mov qword [rsp + 0xf0], rax
mov ecx, 0xfffffff5
call rsi
mov qword [rsp + 0xf8], rax
mov ecx, 0xfffffff4
call rsi
mov qword [rsp + 0x100], rax
xor eax, eax
mov qword [rsp + 0x1a0], rax
movaps xmmword [rsp + 0x190], xmm7
mov qword [rsp + 0x188], rbp
lea rdi, [0x1401770d0]
mov qword [rsp + 0x178], rdi
mov qword [rsp + 0x180], rax
mov byte [rsp + 0x188], 0
mov eax, dword [0x1401acd48]
mov ecx, dword [0x1401a759c]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14007b075
mov eax, dword [0x1401acd58]
mov ecx, dword [0x1401a759c]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14007b0bc
mov rax, qword [0x1401acd40]
test rax, rax
je 0x14007a43c
cmp qword [0x1401acd50], 0
je 0x14007a43c
mov dword [rsp + 0xa0], 0x70
lea r9, [rsp + 0x80]
mov qword [r9], rbp
xor ecx, ecx
mov edx, 1
xor r8d, r8d
call qword [0x1401c1010]
test eax, eax
je 0x14007a47b
mov ecx, 2
call fcn.14006d9d0
test al, al
je 0x14007a80c
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x200]
mov rcx, rsi
mov r8d, 0x1a1
mov r9d, 2
call fcn.14006da80
lea rcx, [rsp + 0x210]
lea rdx, str.InitializeProcThreadAttributeList__size__succeeded__expected_failure
mov r8d, 0x44
call fcn.14001df3c
mov rcx, rsi
call fcn.14006df10
jmp 0x14007a80c
mov ecx, 2
call fcn.14006d9d0
xor esi, esi
test al, al
je 0x14007a868
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x200]
mov rcx, rsi
mov r8d, 0x16f
mov r9d, 2
call fcn.14006ea90
lea rcx, [rsp + 0x210]
lea rdx, [0x14018203f]
mov r8d, inet_ntoa
call fcn.14001df3c
mov rcx, rsi
call fcn.14006eb80
xor esi, esi
jmp 0x14007a868
mov dword [rsp + 0xa0], 0x68
xor r14d, r14d
xor esi, esi
mov rax, qword [rsp + 0x58]
mov rdx, qword [rax]
movzx r8d, byte [rdx + 0x17]
test r8b, r8b
js 0x14007a469
cmp r8b, 0xc
jb 0x14007a474
jmp 0x14007a52b
cmp qword [rdx + 8], 0xc
jae 0x14007a527
xor ebx, ebx
jmp 0x14007a584
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x14007a7b0
lea rsi, [rsp + 0x80]
mov rcx, qword [rsi]
call fcn.14013689c
mov r14, rax
mov qword [rsp + 0x108], rax
mov rax, qword [0x1401acd40]
mov rcx, r14
mov edx, 1
xor r8d, r8d
mov r9, rsi
call qword [0x1401c1010]
test eax, eax
je 0x14007a8d1
lea rsi, [rsp + 0x178]
mov rcx, rsi
call fcn.14007b66a
mov qword [rsi + 8], r14
lea rbp, [rsp + 0x190]
mov edx, 9
mov rcx, rbp
call fcn.14007b454
mov rsi, qword [rbp + 8]
cmp rsi, qword [rbp + 0x10]
je 0x14007a929
mov rax, qword [0x1401a0048]
mov qword [rsi], rax
add rsi, 8
mov qword [rsp + 0x198], rsi
mov rdi, rsi
movabs r8, 0x1fffffffffffffff
jmp 0x14007aa1c
mov r8, qword [rdx + 8]
add r8, 0xfffffffffffffff4
lea rax, [rdx + 0x18]
mov qword [rsp + 0x20], rax
mov rcx, rbx
mov r9, 0xffffffffffffffff
call fcn.14004507c
cmp byte [rsp + 0x217], 0
jns 0x14007a559
mov rbx, qword [rsp + 0x200]
lea rdx, str.rundll32.exe
mov rcx, rbx
call fcn.14014e6d4
test eax, eax
sete bl
cmp byte [rsp + 0x217], 0
jns 0x14007a584
mov rcx, qword [rsp + 0x200]
call fcn.140136864
mov qword [rsp + 0x90], rbp
movaps xmmword [rsp + 0x80], xmm6
cmp byte [rsp + 0x1f7], 0
jns 0x14007a5a6
mov r15, qword [rsp + 0x1e0]
test bl, bl
je 0x14007a5ae
xor ecx, ecx
jmp 0x14007a5bf
mov rax, qword [rsp + 0x58]
mov rcx, qword [rax]
cmp byte [rcx + 0x17], 0
jns 0x14007a5bf
mov rcx, qword [rcx]
lea rax, [rsp + 0x80]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x40], r13
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], 1
mov rdx, r15
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x14007a745
mov rcx, qword [rsp + 0x88]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, eax
mov ecx, 1
call fcn.14006d9d0
test al, al
mov r13, qword [rsp + 0x58]
je 0x14007a671
test esi, esi
jne 0x14007a671
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x200]
mov rcx, rsi
mov r8d, 0x1f2
mov r9d, 1
call fcn.14006ea90
lea rcx, [rsp + 0x210]
lea rdx, str.CloseHandle_thread
mov r8d, 0x12
call fcn.14001df3c
mov rcx, rsi
call fcn.14006eb80
mov rcx, qword [rsp + 0x80]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, eax
mov ecx, 1
call fcn.14006d9d0
test al, al
je 0x14007a6e1
test esi, esi
jne 0x14007a6e1
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x200]
mov rcx, rsi
mov r8d, 0x1f5
mov r9d, 1
call fcn.14006ea90
lea rcx, [rsp + 0x210]
lea rdx, str.CloseHandle_process
mov r8d, 0x13
call fcn.14001df3c
mov rcx, rsi
call fcn.14006eb80
mov ecx, 0xc0
add rcx, qword [r13]
lea rdx, [rsp + 0x200]
mov qword [rdx], 0xffffffffffffffff
call fcn.140071472
lea rdx, [0x1401810eb]
lea rsi, [rsp + 0x200]
mov r8d, 0x804
mov rcx, rsi
call fcn.140139870
mov dword [rsi], 2
xorps xmm0, xmm0
lea r8, [rsp + 0x70]
movaps xmmword [r8], xmm0
mov ecx, 0xa8
add rcx, qword [r13]
mov rdx, rsi
call fcn.1400b4c44
mov esi, eax
jmp 0x14007a816
mov ecx, 2
call fcn.14006d9d0
xor esi, esi
test al, al
mov r13, qword [rsp + 0x58]
je 0x14007a816
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x200]
mov rcx, rsi
mov r8d, 0x1ed
mov r9d, 2
call fcn.14006ea90
lea rcx, [rsp + 0x210]
lea rdx, str.CreateProcess
mov r8d, 0xd
call fcn.14001df3c
mov rcx, rsi
call fcn.14006eb80
xor esi, esi
jmp 0x14007a816
mov ecx, 2
call fcn.14006d9d0
test al, al
je 0x14007a80c
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x200]
mov rcx, rsi
mov r8d, 0x1a5
mov r9d, 2
call fcn.14006ea90
lea rcx, [rsp + 0x210]
lea rdx, str.InitializeProcThreadAttributeList__size_
mov r8d, 0x28
call fcn.14001df3c
mov rcx, rsi
call fcn.14006eb80
xor r14d, r14d
xor esi, esi
mov r13, qword [rsp + 0x58]
mov qword [rsp + 0x178], rdi
cmp byte [rsp + 0x188], 0
jne 0x14007b126
lea rcx, [rsp + 0x178]
call fcn.14007b66a
test r14, r14
je 0x14007a846
mov rcx, r14
call fcn.1401368a4
mov rcx, qword [rsp + 0x190]
test rcx, rcx
je 0x14007a860
mov qword [rsp + 0x198], rcx
call fcn.140136864
mov rcx, r12
call fcn.14009bb6e
cmp byte [rsp + 0x1f7], 0
jns 0x14007a87f
mov rcx, qword [rsp + 0x1e0]
call fcn.140136864
cmp sil, 1
mov eax, 1
adc rax, 0
mov qword [0x1401acd20], rax
mov rcx, r13
call fcn.14007b240
mov rcx, qword [rsp + 0xa08]
xor rcx, rsp
call fcn.140137110
mov eax, esi
movaps xmm6, xmmword [rsp + 0xa10]
movaps xmm7, xmmword [rsp + 0xa20]
add rsp, 0xa38
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov ecx, 2
call fcn.14006d9d0
test al, al
je 0x14007a80f
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x200]
mov rcx, rsi
mov r8d, 0x1b0
mov r9d, 2
call fcn.14006ea90
lea rcx, [rsp + 0x210]
lea rdx, str.InitializeProcThreadAttributeList
mov r8d, 0x21
jmp 0x14007b063
mov rdx, qword [rsp + 0x190]
sub rsi, rdx
mov rdi, rsi
sar rdi, 3
lea rax, [rdi + 1]
movabs r8, 0x1fffffffffffffff
cmp rax, r8
ja 0x14007b111
mov rbp, rsi
sar rbp, 2
cmp rbp, rax
cmovb rbp, rax
movabs rax, 0xfffffffffffffff
cmp rdi, rax
cmovae rbp, r8
test rbp, rbp
mov qword [rsp + 0x50], rdx
je 0x14007a9a2
cmp rbp, r8
ja 0x14007b11e
lea rcx, [rbp*8]
call fcn.140136828
movabs r8, 0x1fffffffffffffff
mov rdx, qword [rsp + 0x50]
jmp 0x14007a9a4
xor eax, eax
lea rbp, [rax + rbp*8]
mov rcx, qword [0x1401a0048]
lea rdi, [rax + rdi*8]
add rdi, 8
mov qword [rdi - 8], rcx
test rsi, rsi
jle 0x14007a9e5
mov rcx, rax
mov rdx, qword [rsp + 0x50]
mov r8, rsi
mov rsi, rax
call fcn.140139870
mov rax, rsi
mov rdx, qword [rsp + 0x50]
movabs r8, 0x1fffffffffffffff
mov qword [rsp + 0x190], rax
mov qword [rsp + 0x198], rdi
mov qword [rsp + 0x1a0], rbp
test rdx, rdx
je 0x14007aa1c
mov rcx, rdx
call fcn.140136864
movabs r8, 0x1fffffffffffffff
mov rdi, qword [rsp + 0x198]
cmp rdi, qword [rsp + 0x1a0]
je 0x14007aa44
mov rax, qword [0x1401a0050]
mov qword [rdi], rax
add rdi, 8
mov qword [rsp + 0x198], rdi
mov rsi, rdi
jmp 0x14007ab2d
mov rdx, qword [rsp + 0x190]
sub rdi, rdx
mov rsi, rdi
sar rsi, 3
lea rax, [rsi + 1]
cmp rax, r8
ja 0x14007b111
mov rbp, rdi
sar rbp, 2
cmp rbp, rax
cmovb rbp, rax
movabs rax, 0xfffffffffffffff
cmp rsi, rax
cmovae rbp, r8
test rbp, rbp
mov qword [rsp + 0x50], rdx
je 0x14007aab3
cmp rbp, r8
ja 0x14007b11e
lea rcx, [rbp*8]
call fcn.140136828
movabs r8, 0x1fffffffffffffff
mov rdx, qword [rsp + 0x50]
jmp 0x14007aab5
xor eax, eax
lea rbp, [rax + rbp*8]
mov rcx, qword [0x1401a0050]
lea rsi, [rax + rsi*8]
add rsi, 8
mov qword [rsi - 8], rcx
test rdi, rdi
jle 0x14007aaf6
mov rcx, rax
mov rdx, qword [rsp + 0x50]
mov r8, rdi
mov rdi, rax
call fcn.140139870
mov rax, rdi
mov rdx, qword [rsp + 0x50]
movabs r8, 0x1fffffffffffffff
mov qword [rsp + 0x190], rax
mov qword [rsp + 0x198], rsi
mov qword [rsp + 0x1a0], rbp
test rdx, rdx
je 0x14007ab2d
mov rcx, rdx
call fcn.140136864
movabs r8, 0x1fffffffffffffff
mov rsi, qword [rsp + 0x198]
cmp rsi, qword [rsp + 0x1a0]
je 0x14007ab55
mov rax, qword [0x1401a0058]
mov qword [rsi], rax
add rsi, 8
mov qword [rsp + 0x198], rsi
mov rbp, rsi
jmp 0x14007ac3e
mov rdx, qword [rsp + 0x190]
sub rsi, rdx
mov rbp, rsi
sar rbp, 3
lea rax, [rbp + 1]
cmp rax, r8
ja 0x14007b111
mov rdi, rsi
sar rdi, 2
cmp rdi, rax
cmovb rdi, rax
movabs rax, 0xfffffffffffffff
cmp rbp, rax
cmovae rdi, r8
test rdi, rdi
mov qword [rsp + 0x50], rdx
je 0x14007abc4
cmp rdi, r8
ja 0x14007b11e
lea rcx, [rdi*8]
call fcn.140136828
movabs r8, 0x1fffffffffffffff
mov rdx, qword [rsp + 0x50]
jmp 0x14007abc6
xor eax, eax
lea rdi, [rax + rdi*8]
mov rcx, qword [0x1401a0058]
lea rbp, [rax + rbp*8]
add rbp, 8
mov qword [rbp - 8], rcx
test rsi, rsi
jle 0x14007ac07
mov rcx, rax
mov rdx, qword [rsp + 0x50]
mov r8, rsi
mov rsi, rax
call fcn.140139870
mov rax, rsi
mov rdx, qword [rsp + 0x50]
movabs r8, 0x1fffffffffffffff
mov qword [rsp + 0x190], rax
mov qword [rsp + 0x198], rbp
mov qword [rsp + 0x1a0], rdi
test rdx, rdx
je 0x14007ac3e
mov rcx, rdx
call fcn.140136864
movabs r8, 0x1fffffffffffffff
mov rbp, qword [rsp + 0x198]
cmp rbp, qword [rsp + 0x1a0]
je 0x14007ac67
mov rax, qword [0x1401a0060]
mov qword [rbp], rax
add rbp, 8
mov qword [rsp + 0x198], rbp
mov rdi, rbp
jmp 0x14007ad5a
mov rax, qword [rsp + 0x190]
mov qword [rsp + 0x50], rax
sub rbp, rax
mov rsi, rbp
sar rsi, 3
lea rax, [rsi + 1]
cmp rax, r8
ja 0x14007b111
mov rdi, rbp
sar rdi, 2
cmp rdi, rax
cmovb rdi, rax
movabs rax, 0xfffffffffffffff
cmp rsi, rax
cmovae rdi, r8
test rdi, rdi
je 0x14007acd4
cmp rdi, r8
ja 0x14007b11e
lea rcx, [rdi*8]
call fcn.140136828
mov rdx, rax
movabs r8, 0x1fffffffffffffff
jmp 0x14007acd6
xor edx, edx
lea rcx, [rdx + rdi*8]
mov rax, qword [0x1401a0060]
lea rdi, [rdx + rsi*8]
add rdi, 8
mov qword [rdi - 8], rax
test rbp, rbp
mov rsi, qword [rsp + 0x50]
jle 0x14007ad23
mov qword [rsp + 0x68], rcx
mov rcx, rdx
mov qword [rsp + 0x60], rdx
mov rdx, rsi
mov r8, rbp
call fcn.140139870
mov rdx, qword [rsp + 0x60]
movabs r8, 0x1fffffffffffffff
mov rcx, qword [rsp + 0x68]
mov qword [rsp + 0x190], rdx
mov qword [rsp + 0x198], rdi
mov qword [rsp + 0x1a0], rcx
test rsi, rsi
je 0x14007ad5a
mov rcx, rsi
call fcn.140136864
movabs r8, 0x1fffffffffffffff
mov rdi, qword [rsp + 0x198]
mov rax, qword [rsp + 0x58]
mov rcx, qword [rax]
cmp rdi, qword [rsp + 0x1a0]
movabs rbp, 0xaaaaaaaaaaaaaaaa
je 0x14007ad94
mov rax, qword [rcx + 0xc8]
mov qword [rdi], rax
add rdi, 8
mov qword [rsp + 0x198], rdi
mov rsi, rdi
jmp 0x14007ae97
mov rdx, qword [rsp + 0x190]
sub rdi, rdx
mov rbp, rdi
sar rbp, 3
lea rax, [rbp + 1]
cmp rax, r8
ja 0x14007b111
mov rsi, rdi
sar rsi, 2
cmp rsi, rax
cmovb rsi, rax
movabs rax, 0xfffffffffffffff
cmp rbp, rax
cmovae rsi, r8
test rsi, rsi
je 0x14007ae0d
mov qword [rsp + 0x60], rcx
mov qword [rsp + 0x50], rdx
cmp rsi, r8
ja 0x14007b11e
lea rcx, [rsi*8]
call fcn.140136828
movabs r8, 0x1fffffffffffffff
mov rdx, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x60]
jmp 0x14007ae0f
xor eax, eax
lea r9, [rax + rsi*8]
mov rcx, qword [rcx + 0xc8]
lea rsi, [rax + rbp*8]
add rsi, 8
mov qword [rsi - 8], rcx
test rdi, rdi
jle 0x14007ae56
mov rcx, rax
mov rbp, rdx
mov r8, rdi
mov rdi, rax
mov qword [rsp + 0x50], r9
call fcn.140139870
mov r9, qword [rsp + 0x50]
mov rax, rdi
mov rdx, rbp
movabs r8, 0x1fffffffffffffff
mov qword [rsp + 0x190], rax
mov qword [rsp + 0x198], rsi
mov qword [rsp + 0x1a0], r9
test rdx, rdx
movabs rbp, 0xaaaaaaaaaaaaaaaa
je 0x14007ae97
mov rcx, rdx
call fcn.140136864
movabs r8, 0x1fffffffffffffff
mov rsi, qword [rsp + 0x198]
cmp rsi, qword [rsp + 0x1a0]
lea rdi, [0x1401770d0]
je 0x14007aebc
mov qword [rsi], r12
add rsi, 8
mov qword [rsp + 0x198], rsi
jmp 0x14007af96
mov rdx, qword [rsp + 0x190]
sub rsi, rdx
mov rcx, rsi
sar rcx, 3
lea rax, [rcx + 1]
cmp rax, r8
ja 0x14007b111
mov rbp, rsi
sar rbp, 2
cmp rbp, rax
cmovb rbp, rax
movabs rax, 0xfffffffffffffff
cmp rcx, rax
cmovae rbp, r8
test rbp, rbp
mov qword [rsp + 0x50], rdx
je 0x14007af2e
mov qword [rsp + 0x60], rcx
cmp rbp, r8
ja 0x14007b11e
lea rcx, [rbp*8]
call fcn.140136828
mov rdi, rax
mov rdx, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x60]
jmp 0x14007af30
xor edi, edi
lea rax, [rdi + rbp*8]
lea rbp, [rdi + rcx*8]
add rbp, 8
mov qword [rbp - 8], r12
test rsi, rsi
jle 0x14007af60
mov rcx, rdi
mov rdx, qword [rsp + 0x50]
mov r8, rsi
mov rsi, rax
call fcn.140139870
mov rax, rsi
mov rdx, qword [rsp + 0x50]
mov qword [rsp + 0x190], rdi
mov qword [rsp + 0x198], rbp
mov qword [rsp + 0x1a0], rax
test rdx, rdx
lea rdi, [0x1401770d0]
movabs rbp, 0xaaaaaaaaaaaaaaaa
je 0x14007af96
mov rcx, rdx
call fcn.140136864
mov rdx, qword [rsp + 0xf0]
lea rsi, [rsp + 0x190]
mov rcx, rsi
call fcn.14007b4f1
mov rdx, qword [rsp + 0xf8]
mov rcx, rsi
call fcn.14007b4f1
mov rdx, qword [rsp + 0x100]
mov rcx, rsi
call fcn.14007b4f1
mov rax, qword [0x1401acd50]
mov r9, qword [rsi]
mov rdx, qword [rsi + 8]
sub rdx, r9
mov rcx, qword [rsp + 0x108]
xorps xmm0, xmm0
movups xmmword [rsp + 0x28], xmm0
mov qword [rsp + 0x20], rdx
mov r8d, 0x20002
xor edx, edx
call qword [0x1401c1010]
test eax, eax
je 0x14007b010
mov esi, 0x80000
jmp 0x14007a44c
mov ecx, 2
call fcn.14006d9d0
test al, al
je 0x14007a80f
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x200]
mov rcx, rsi
mov r8d, 0x1cb
mov r9d, 2
call fcn.14006ea90
lea rcx, [rsp + 0x210]
lea rdx, str.UpdateProcThreadAttribute
mov r8d, 0x19
call fcn.14001df3c
mov rcx, rsi
call fcn.14006eb80
jmp 0x14007a80f
lea rcx, [0x1401acd48]
call fcn.140136980
cmp dword [0x1401acd48], 0xffffffff
jne 0x14007a306
lea rcx, [0x14017d8be]
lea rdx, str.::InitializeProcThreadAttributeList
xor r8d, r8d
call fcn.140077ee8
mov qword [0x1401acd40], rax
lea rcx, [0x1401acd48]
call fcn.140136a18
jmp 0x14007a306
lea rcx, [0x1401acd58]
call fcn.140136980
cmp dword [0x1401acd58], 0xffffffff
jne 0x14007a32b
cmp qword [0x1401acd40], 0
je 0x14007b0f7
lea rcx, [0x14017d8be]
lea rdx, str.::UpdateProcThreadAttribute
xor r8d, r8d
call fcn.140077ee8
jmp 0x14007b0f9
xor eax, eax
mov qword [0x1401acd50], rax
lea rcx, [0x1401acd58]
call fcn.140136a18
jmp 0x14007a32b
lea rcx, [rsp + 0x190]
call fcn.14001ba1a
call fcn.14014b720
int3
int3