Function at 0x14011ec90
Capabilities:
Create process on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x870]
sub rsp, 0x970
mov rax, qword [0x14018a048]
xor rax, rsp
mov qword [rbp + 0x860], rax
mov r13, rcx
mov qword [rsp + 0x68], rcx
mov qword [rbp + 0x740], rcx
xor esi, esi
mov r12d, esi
mov dword [rsp + 0x50], esi
call fcn.140059b20
test al, al
je 0x14011ed3c
mov dword [rsp + 0x20], 4
mov r9d, 0x179
lea r8, str.E:.conan7ca4bd1_sourcesexternalcrashpadclientcrashpad_client_win.cc
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace::StartHandlerProcess_class_std::unique_ptr_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData_struct_std::default_delete_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData____
lea rcx, [rbp + 0x4c0]
call fcn.14005b410
nop
mov r12d, 1
mov dword [rsp + 0x50], r12d
lea rdx, str.Check_failed:__IsThreadInLoaderLock__
mov rcx, rax
call fcn.140001300
mov rcx, rax
lea rdx, [0x14013f2b4]
call fcn.140001300
nop
test r12b, 1
je 0x14011ed52
and r12d, 0xfffffffe
lea rcx, [rbp + 0x4c0]
call fcn.14005b620
mov byte [rsp + 0x58], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x768], xmm0
mov qword [rbp + 0x778], rsi
mov qword [rbp + 0x780], 7
mov word [rbp + 0x768], si
lea rdx, [rbp + 0x768]
mov rcx, qword [r13]
call fcn.140128c60
mov rax, qword [r13]
mov rbx, qword [rax + 0x90]
mov rdi, qword [rax + 0x98]
cmp rbx, rdi
je 0x14011ee40
mov rax, rbx
cmp qword [rbx + 0x18], 0x10
jb 0x14011edb2
mov rax, qword [rbx]
mov qword [rbp + 0x1c0], rax
mov rax, qword [rbx + 0x10]
mov qword [rbp + 0x1c8], rax
movaps xmm0, xmmword [rbp + 0x1c0]
movdqa xmmword [rbp + 0x260], xmm0
lea rdx, [rbp + 0x260]
lea rcx, [rbp + 0x148]
call fcn.14005caf0
nop
lea rdx, [rbp + 0x768]
mov rcx, rax
call fcn.140128c60
nop
mov r8, qword [rbp + 0x160]
cmp r8, 8
jb 0x14011ee1a
inc r8
mov rdx, qword [rbp + 0x148]
lea rcx, [rbp + 0x148]
call fcn.14004dc70
mov qword [rbp + 0x158], rsi
mov qword [rbp + 0x160], 7
mov word [rbp + 0x148], si
add rbx, 0x20
cmp rbx, rdi
jne 0x14011eda5
mov rbx, qword [r13]
cmp qword [rbx + 0x30], 0
je 0x14011ef0f
xorps xmm0, xmm0
movups xmmword [rbp + 0x78], xmm0
mov qword [rbp + 0x88], rsi
mov qword [rbp + 0x90], rsi
mov r8d, 8
lea rdx, str.database
lea rcx, [rbp + 0x78]
call fcn.140001a80
nop
lea r8, [rbx + 0x20]
lea rdx, [rbp + 0x78]
lea rcx, [rbp + 0x128]
call fcn.14011e370
nop
lea rdx, [rbp + 0x768]
mov rcx, rax
call fcn.140128c60
nop
mov r8, qword [rbp + 0x140]
cmp r8, 8
jb 0x14011eec3
inc r8
mov rdx, qword [rbp + 0x128]
lea rcx, [rbp + 0x128]
call fcn.14004dc70
mov qword [rbp + 0x138], rsi
mov qword [rbp + 0x140], 7
mov word [rbp + 0x128], si
mov r8, qword [rbp + 0x90]
cmp r8, 0x10
jb 0x14011eef9
inc r8
mov rdx, qword [rbp + 0x78]
lea rcx, [rbp + 0x78]
call fcn.140008490
mov qword [rbp + 0x88], rsi
mov qword [rbp + 0x90], 0xf
mov byte [rbp + 0x78], 0
mov rbx, qword [r13]
cmp qword [rbx + 0x50], 0
je 0x14011efcf
xorps xmm0, xmm0
movups xmmword [rbp + 0x58], xmm0
mov qword [rbp + 0x68], rsi
mov qword [rbp + 0x70], rsi
mov r8d, 0xb
lea rdx, str.metrics_dir
lea rcx, [rbp + 0x58]
call fcn.140001a80
nop
lea r8, [rbx + 0x40]
lea rdx, [rbp + 0x58]
lea rcx, [rbp + 0x108]
call fcn.14011e370
nop
lea rdx, [rbp + 0x768]
mov rcx, rax
call fcn.140128c60
nop
mov r8, qword [rbp + 0x120]
cmp r8, 8
jb 0x14011ef8c
inc r8
mov rdx, qword [rbp + 0x108]
lea rcx, [rbp + 0x108]
call fcn.14004dc70
mov qword [rbp + 0x118], rsi
mov qword [rbp + 0x120], 7
mov word [rbp + 0x108], si
mov r8, qword [rbp + 0x70]
cmp r8, 0x10
jb 0x14011efbf
inc r8
mov rdx, qword [rbp + 0x58]
lea rcx, [rbp + 0x58]
call fcn.140008490
mov qword [rbp + 0x68], rsi
mov qword [rbp + 0x70], 0xf
mov byte [rbp + 0x58], 0
mov rax, qword [r13]
cmp qword [rax + 0x70], 0
je 0x14011f110
lea rcx, [rax + 0x60]
cmp qword [rax + 0x78], 0x10
jb 0x14011efed
mov rcx, qword [rax + 0x60]
mov qword [rbp + 0x1b0], rcx
mov rax, qword [rax + 0x70]
mov qword [rbp + 0x1b8], rax
movaps xmm0, xmmword [rbp + 0x1b0]
movdqa xmmword [rbp + 0x250], xmm0
lea rdx, [rbp + 0x250]
lea rcx, [rbp + 0xc8]
call fcn.14005caf0
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x38], xmm0
mov qword [rbp + 0x48], rsi
mov qword [rbp + 0x50], rsi
mov r8d, 3
lea rdx, [0x14013db8c]
lea rcx, [rbp + 0x38]
call fcn.140001a80
nop
mov r8, rbx
lea rdx, [rbp + 0x38]
lea rcx, [rbp + 0xe8]
call fcn.14011e370
nop
lea rdx, [rbp + 0x768]
mov rcx, rax
call fcn.140128c60
nop
mov r8, qword [rbp + 0x100]
cmp r8, 8
jb 0x14011f091
inc r8
mov rdx, qword [rbp + 0xe8]
lea rcx, [rbp + 0xe8]
call fcn.14004dc70
mov qword [rbp + 0xf8], rsi
mov qword [rbp + 0x100], 7
mov word [rbp + 0xe8], si
mov r8, qword [rbp + 0x50]
cmp r8, 0x10
jb 0x14011f0c4
inc r8
mov rdx, qword [rbp + 0x38]
lea rcx, [rbp + 0x38]
call fcn.140008490
mov qword [rbp + 0x48], rsi
mov qword [rbp + 0x50], 0xf
mov byte [rbp + 0x38], 0
mov r8, qword [rbp + 0xe0]
cmp r8, 8
jb 0x14011f0f7
inc r8
mov rdx, qword [rbp + 0xc8]
lea rcx, [rbp + 0xc8]
call fcn.14004dc70
mov qword [rbp + 0xd8], rsi
mov qword [rbp + 0xe0], 7
mov word [rbp + 0xc8], si
mov rbx, qword [r13]
mov rbx, qword [rbx + 0x80]
mov rbx, qword [rbx]
xor eax, eax
mov byte [rsp + 0x59], al
lea ecx, [rax + 0x16]
lea edx, [rax + 0xa]
lea r8, [rax - 1]
cmp byte [rbx + 0x19], al
jne 0x14011f52a
mov byte [rbp + 0x760], 0x3d
movabs rax, 0x7fffffffffffffff
lea r14, [rbx + 0x20]
mov r15, qword [r14 + 0x10]
cmp r15, rax
je 0x140120928
mov qword [rsp + 0x60], r14
cmp qword [r14 + 0x18], 0x10
jb 0x14011f177
mov rax, qword [r14]
mov qword [rsp + 0x60], rax
movabs rax, 0x7fffffffffffffff
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
mov qword [rbp - 0x38], rsi
mov qword [rbp - 0x30], rsi
lea r13, [r15 + 1]
mov edi, 0xf
lea rsi, [rbp - 0x48]
cmp r13, rdi
jbe 0x14011f214
mov rdi, r13
or rdi, 0xf
mov qword [rbp + 0x7d8], rdi
cmp rdi, rax
jbe 0x14011f1b0
mov rdi, rax
jmp 0x14011f1bf
mov qword [rbp + 0x280], rcx
cmp rdi, 0x16
cmovb rdi, rcx
mov rcx, rdi
add rcx, 1
cmovb rcx, r8
cmp rcx, 0x1000
jb 0x14011f1ff
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140120904
mov rcx, rax
call fcn.14009b910
test rax, rax
je 0x140120922
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x14011f210
test rcx, rcx
je 0x14011f20b
call fcn.14009b910
jmp 0x14011f20d
xor eax, eax
mov rsi, rax
mov qword [rbp - 0x48], rsi
mov qword [rbp - 0x38], r13
mov qword [rbp - 0x30], rdi
mov r8, r15
mov rdx, qword [rsp + 0x60]
mov rcx, rsi
call fcn.14009e510
mov byte [rsi + r15], 0x3d
mov byte [rsi + r13], 0
bts r12d, 0xd
lea rdx, [r14 + 0x20]
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0x10
jb 0x14011f24d
mov rdx, qword [rdx]
lea rcx, [rbp - 0x48]
call fcn.1400082a0
xorps xmm0, xmm0
movups xmmword [rbp - 0x68], xmm0
xor esi, esi
mov qword [rbp - 0x58], rsi
mov qword [rbp - 0x50], rsi
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x68], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x58], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], sil
bts r12d, 0xc
lea rax, [rbp - 0x68]
cmp qword [rbp - 0x50], 0x10
cmovae rax, qword [rbp - 0x68]
mov qword [rbp + 0x1d0], rax
mov rax, qword [rbp - 0x58]
mov qword [rbp + 0x1d8], rax
movaps xmm0, xmmword [rbp + 0x1d0]
movdqa xmmword [rbp + 0x2a0], xmm0
lea rdx, [rbp + 0x2a0]
lea rcx, [rbp + 0x230]
call fcn.14005caf0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
mov qword [rbp - 0x18], 0xa
mov qword [rbp - 0x10], 0xf
movsd xmm0, qword [str.annotation]
movsd qword [rbp - 0x28], xmm0
movzx ecx, word [0x14013da98]
mov word [rbp - 0x20], cx
mov byte [rbp - 0x1e], sil
mov r8, rax
lea rdx, [rbp - 0x28]
lea rcx, [rbp + 0x210]
call fcn.14011e370
nop
lea rdx, [rbp + 0x768]
mov rcx, rax
call fcn.140128c60
nop
mov rdx, qword [rbp + 0x228]
cmp rdx, 8
jb 0x14011f36a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x210]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14011f365
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14012090a
call fcn.14009b94c
mov qword [rbp + 0x220], rsi
mov qword [rbp + 0x228], 7
mov word [rbp + 0x210], si
mov rdx, qword [rbp - 0x10]
cmp rdx, 0x10
jb 0x14011f3be
inc rdx
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14011f3b9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140120910
call fcn.14009b94c
mov qword [rbp - 0x18], rsi
mov qword [rbp - 0x10], 0xf
mov byte [rbp - 0x28], 0
mov rdx, qword [rbp + 0x248]
cmp rdx, 8
jb 0x14011f414
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x230]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14011f40f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140120916
call fcn.14009b94c
mov qword [rbp + 0x240], rsi
mov qword [rbp + 0x248], 7
mov word [rbp + 0x230], si
mov rdx, qword [rbp - 0x50]
cmp rdx, 0x10
jb 0x14011f468
inc rdx
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14011f463
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14012091c
call fcn.14009b94c
mov qword [rbp - 0x58], rsi
mov qword [rbp - 0x50], 0xf
mov byte [rbp - 0x68], 0
mov rdx, qword [rbp - 0x30]
cmp rdx, 0x10
jb 0x14011f4b3
inc rdx
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14011f4ae
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140120922
call fcn.14009b94c
mov qword [rbp - 0x38], rsi
mov qword [rbp - 0x30], 0xf
mov byte [rbp - 0x48], 0
mov rax, qword [rbx + 0x10]
cmp byte [rax + 0x19], 0
je 0x14011f4ef
mov rax, qword [rbx + 8]
cmp byte [rax + 0x19], 0
jne 0x14011f4ea
cmp rbx, qword [rax + 0x10]
jne 0x14011f4ea
mov rbx, rax
mov rax, qword [rax + 8]
cmp byte [rax + 0x19], 0
je 0x14011f4d7
mov rbx, rax
jmp 0x14011f50c
mov rbx, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], 0
jne 0x14011f50c
nop dword [rax + rax]
mov rbx, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], 0
je 0x14011f500
cmp byte [rbx + 0x19], 0
jne 0x14011f520
mov ecx, 0x16
lea r8, [rcx - 0x17]
jmp 0x14011f13e
mov r13, qword [rsp + 0x68]
mov edx, 0xa
mov rax, qword [r13]
mov rbx, qword [rax + 0xa8]
mov rdi, qword [rax + 0xb0]
cmp rbx, rdi
je 0x14011f655
xorps xmm0, xmm0
movups xmmword [rbp - 8], xmm0
mov qword [rbp + 8], rdx
mov qword [rbp + 0x10], 0xf
movsd xmm0, qword [0x14013daa0]
movsd qword [rbp - 8], xmm0
movzx eax, word [0x14013daa8]
mov word [rbp], ax
mov byte [rbp + 2], 0
mov r8, rbx
lea rdx, [rbp - 8]
lea rcx, [rbp + 0x168]
call fcn.14011e370
nop
lea rdx, [rbp + 0x768]
mov rcx, rax
call fcn.140128c60
nop
mov rdx, qword [rbp + 0x180]
cmp rdx, 8
jb 0x14011f5de
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x168]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14011f5d9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14012092e
call fcn.14009b94c
mov qword [rbp + 0x178], rsi
mov qword [rbp + 0x180], 7
mov word [rbp + 0x168], si
mov rdx, qword [rbp + 0x10]
cmp rdx, 0x10
jb 0x14011f632
inc rdx
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14011f62d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140120934
call fcn.14009b94c
mov qword [rbp + 8], rsi
mov qword [rbp + 0x10], 0xf
mov byte [rbp - 8], 0
add rbx, 0x20
cmp rbx, rdi
je 0x14011f655
mov edx, 0xa
jmp 0x14011f545
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
mov edx, 1
mov ecx, 0x1f0fff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rdi, rax
mov qword [rbp + 0x788], rax
test rax, rax
jne 0x14011f77f
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 2
mov r9d, 0x19f
lea r8, str.E:.conan7ca4bd1_sourcesexternalcrashpadclientcrashpad_client_win.cc
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace::StartHandlerProcess_class_std::unique_ptr_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData_struct_std::default_delete_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData____
lea rcx, [rbp + 0x3b8]
call fcn.14005b5a0
nop
or r12d, 2
mov dword [rsp + 0x50], r12d
lea rdx, [0x140160660]
mov rcx, rax
call fcn.140001300
nop
test r12b, 2
je 0x14011f6e8
and r12d, 0xfffffffd
mov dword [rsp + 0x50], r12d
lea rcx, [rbp + 0x3b8]
call fcn.14005b8e0
nop
mov rdx, qword [rbp + 0x780]
cmp rdx, 8
jb 0x14011f72e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x768]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14011f729
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140120a9a
call fcn.14009b94c
mov qword [rbp + 0x778], rsi
mov qword [rbp + 0x780], 7
mov word [rbp + 0x768], si
bt r12d, 0xb
jae 0x14011f764
btr r12d, 0xb
mov dword [rsp + 0x50], r12d
lea rcx, [rbp + 0x2b0]
call fcn.14005b620
nop
mov qword [0x14018ff78], 2
mov rcx, r13
call fcn.14011c690
xor al, al
jmp 0x1401208ce
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x810], xmm0
movups xmmword [rbp + 0x820], xmm0
movups xmmword [rbp + 0x830], xmm0
movups xmmword [rbp + 0x840], xmm0
mov qword [rbp + 0x850], rax
mov rax, qword [r13]
mov rcx, qword [rax + 0xe0]
lea rax, [0x14018ff80]
mov qword [rsp + 0x40], rax
lea rax, [0x14018ff68]
mov qword [rsp + 0x38], rax
lea rax, [0x14018ff50]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rcx
mov r9, qword [0x14018ac90]
mov r8, qword [0x14018ac88]
mov rdx, qword [0x14018ac80]
lea rcx, [rbp + 0x810]
call fcn.140044a60
lea rdx, [rbp + 0x1f0]
lea rcx, [rbp + 0x810]
call fcn.140044f00
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x18], xmm0
mov edx, 0x20
lea rcx, [rbp + 0x18]
call fcn.1400081d0
mov qword [rbp + 0x18], rax
mov qword [rbp + 0x28], 0x16
mov qword [rbp + 0x30], 0x1f
movups xmm0, xmmword [str.__initial_client_data]
movups xmmword [rax], xmm0
mov ecx, dword [0x140160680]
mov dword [rax + 0x10], ecx
movzx ecx, word [0x140160684]
mov word [rax + 0x14], cx
mov byte [rax + 0x16], 0
mov r9, rbx
lea r8, [rbp + 0x18]
movzx edx, byte [rbp + 0x760]
lea rcx, [rbp + 0x98]
call fcn.14011c0f0
bts r12d, 0xa
mov dword [rsp + 0x50], r12d
lea rax, [rbp + 0x98]
cmp qword [rbp + 0xb0], 0x10
cmovae rax, qword [rbp + 0x98]
mov qword [rbp + 0x1e0], rax
mov rax, qword [rbp + 0xa8]
mov qword [rbp + 0x1e8], rax
movaps xmm0, xmmword [rbp + 0x1e0]
movdqa xmmword [rbp + 0x290], xmm0
lea rdx, [rbp + 0x290]
lea rcx, [rbp + 0x188]
call fcn.14005caf0
nop
lea rdx, [rbp + 0x768]
mov rcx, rax
call fcn.140128c60
nop
mov rdx, qword [rbp + 0x1a0]
cmp rdx, 8
jb 0x14011f92b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x188]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14011f926
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14012093a
call fcn.14009b94c
mov qword [rbp + 0x198], rsi
mov qword [rbp + 0x1a0], 7
mov word [rbp + 0x188], si
mov rdx, qword [rbp + 0xb0]
cmp rdx, 0x10
jb 0x14011f985
inc rdx
mov rcx, qword [rbp + 0x98]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14011f980
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140120940
call fcn.14009b94c
mov qword [rbp + 0xa8], rsi
mov qword [rbp + 0xb0], 0xf
mov byte [rbp + 0x98], 0
mov rdx, qword [rbp + 0x30]
cmp rdx, 0x10
jb 0x14011f9d9
inc rdx
mov rcx, qword [rbp + 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14011f9d4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140120946
call fcn.14009b94c
mov qword [rbp + 0x28], rsi
mov qword [rbp + 0x30], 0xf
mov byte [rbp + 0x18], 0
mov rdx, qword [rbp + 0x208]
cmp rdx, 0x10
jb 0x14011fa2a
inc rdx
mov rcx, qword [rbp + 0x1f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14011fa25
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14012094c
call fcn.14009b94c
mov qword [rbp + 0x200], rsi
mov qword [rbp + 0x208], 0xf
mov byte [rbp + 0x1f0], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x6d0], xmm0
movups xmmword [rbp + 0x6e0], xmm0
movups xmmword [rbp + 0x6f0], xmm0
movups xmmword [rbp + 0x700], xmm0
movups xmmword [rbp + 0x710], xmm0
movups xmmword [rbp + 0x720], xmm0
movups xmmword [rbp + 0x730], xmm0
mov dword [rbp + 0x70c], 0x100
mov ecx, 0xfffffff6
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov qword [rbp + 0x720], rax
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov qword [rbp + 0x728], rax
mov ecx, 0xfffffff4
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov qword [rbp + 0x730], rax
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x790], xmm1
mov rax, rsi
mov qword [rsp + 0x60], rax
mov qword [rbp + 0x7a0], rax
mov rbx, rsi
mov qword [rbp + 0x7c0], rbx
mov qword [rbp + 0x7a8], rsi
mov ecx, dword [0x14018e418]
mov rax, qword gs:[0x58]
mov edx, 4
mov r15, qword [rax + rcx*8]
add r15, rdx
mov qword [rbp + 0xc0], r15
mov eax, dword [r15]
cmp dword [0x14018ffc8], eax
jg 0x140120952
mov eax, dword [r15]
cmp dword [0x14018ffd8], eax
jg 0x140120999
mov rax, qword [0x14018ffc0]
test rax, rax
je 0x1401200fe
cmp qword [0x14018ffd0], 0
je 0x1401200fe
mov r14d, 0x80000
mov dword [rsp + 0x70], r14d
mov dword [rbp + 0x6d0], 0x70
lea r9, [rbp + 0x6c8]
xor r8d, r8d
lea edx, [r8 + 1]
xor ecx, ecx
call rax
test eax, eax
je 0x14011fc75
mov dword [rsp + 0x20], 2
mov r9d, 0x1d0
lea r8, str.E:.conan7ca4bd1_sourcesexternalcrashpadclientcrashpad_client_win.cc
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace::StartHandlerProcess_class_std::unique_ptr_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData_struct_std::default_delete_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData____
lea rcx, [rbp + 0x2b0]
call fcn.14005b410
nop
or r12d, 4
mov dword [rsp + 0x50], r12d
lea rdx, str.InitializeProcThreadAttributeList__size__succeeded__expected_failure
mov rcx, rax
call fcn.140001300
nop
test r12b, 4
je 0x14011fbcd
and r12d, 0xfffffffb
mov dword [rsp + 0x50], r12d
lea rcx, [rbp + 0x2b0]
call fcn.14005b620
nop
mov rcx, rdi
call fcn.140055080
xor ebx, ebx
mov qword [rbp + 0x788], rbx
mov rdx, qword [rbp + 0x780]
cmp rdx, 8
jb 0x14011fc24
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x768]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14011fc1f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401209ee
call fcn.14009b94c
mov qword [rbp + 0x778], rbx
mov qword [rbp + 0x780], 7
mov word [rbp + 0x768], bx
bt r12d, 0x12
jae 0x14011fc5a
btr r12d, 0x12
mov dword [rsp + 0x50], r12d
lea rcx, [rbp + 0x3b8]
call fcn.14005b620
nop
mov qword [0x14018ff78], 2
mov rcx, r13
call fcn.14011c690
xor al, al
jmp 0x1401208ce
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
je 0x14011fd6e
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 2
mov r9d, 0x1d4
lea r8, str.E:.conan7ca4bd1_sourcesexternalcrashpadclientcrashpad_client_win.cc
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace::StartHandlerProcess_class_std::unique_ptr_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData_struct_std::default_delete_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData____
lea rcx, [rbp + 0x2b0]
call fcn.14005b5a0
nop
or r12d, 8
mov dword [rsp + 0x50], r12d
lea rdx, str.InitializeProcThreadAttributeList__size_
mov rcx, rax
call fcn.140001300
nop
test r12b, 8
je 0x14011fceb
and r12d, 0xfffffff7
mov dword [rsp + 0x50], r12d
lea rcx, [rbp + 0x2b0]
call fcn.14005b8e0
nop
mov rcx, rdi
call fcn.140055080
xor ebx, ebx
mov qword [rbp + 0x788], rbx
mov r8, qword [rbp + 0x780]
cmp r8, 8
jb 0x14011fd1f
inc r8
mov rdx, qword [rbp + 0x768]
lea rcx, [rbp + 0x768]
call fcn.14004dc70
mov qword [rbp + 0x778], rbx
mov qword [rbp + 0x780], 7
mov word [rbp + 0x768], bx
test r14d, r12d
je 0x14011fd53
btr r12d, 0x13
mov dword [rsp + 0x50], r12d
lea rcx, [rbp + 0x3b8]
call fcn.14005b620
nop
mov qword [0x14018ff78], 2
mov rcx, r13
call fcn.14011c690
xor al, al
jmp 0x1401208ce
mov rcx, qword [rbp + 0x6c8]
call fcn.14009be38
mov rbx, rax
mov qword [rbp + 0x7c0], rax
mov qword [rbp + 0x738], rax
lea r9, [rbp + 0x6c8]
xor r8d, r8d
lea edx, [r8 + 1]
mov rcx, rax
call qword [0x14018ffc0]
test eax, eax
jne 0x14011fe9f
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 2
mov r9d, 0x1df
lea r8, str.E:.conan7ca4bd1_sourcesexternalcrashpadclientcrashpad_client_win.cc
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace::StartHandlerProcess_class_std::unique_ptr_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData_struct_std::default_delete_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData____
lea rcx, [rbp + 0x2b0]
call fcn.14005b5a0
nop
or r12d, 0x10
mov dword [rsp + 0x50], r12d
lea rdx, str.InitializeProcThreadAttributeList
mov rcx, rax
call fcn.140001300
nop
test r12b, 0x10
je 0x14011fe11
and r12d, 0xffffffef
mov dword [rsp + 0x50], r12d
lea rcx, [rbp + 0x2b0]
call fcn.14005b8e0
nop
mov rcx, rbx
call fcn.14009b954
nop
mov rcx, rdi
call fcn.140055080
xor ebx, ebx
mov qword [rbp + 0x788], rbx
mov r8, qword [rbp + 0x780]
cmp r8, 8
jb 0x14011fe4e
inc r8
mov rdx, qword [rbp + 0x768]
lea rcx, [rbp + 0x768]
call fcn.14004dc70
mov qword [rbp + 0x778], rbx
mov qword [rbp + 0x780], 7
mov word [rbp + 0x768], bx
bt r12d, 0x14
jae 0x14011fe84
btr r12d, 0x14
mov dword [rsp + 0x50], r12d
lea rcx, [rbp + 0x3b8]
call fcn.14005b620
nop
mov qword [0x14018ff78], 2
mov rcx, r13
call fcn.14011c690
xor al, al
jmp 0x1401208ce
mov rsi, qword [rbp + 0x738]
mov qword [rbp + 0x7a8], rsi
mov edx, 8
lea rcx, [rbp + 0x790]
call fcn.140120fd0
mov qword [rbp + 0x790], rax
mov qword [rbp + 0x798], rax
add rax, 0x40
mov qword [rbp + 0x7a0], rax
lea rdx, [0x14018ac80]
lea rcx, [rbp + 0x790]
call fcn.140121090
lea rdx, [0x14018ac88]
lea rcx, [rbp + 0x790]
call fcn.140121090
lea rdx, [0x14018ac90]
lea rcx, [rbp + 0x790]
call fcn.140121090
mov rdx, qword [r13]
add rdx, 0xe0
lea rcx, [rbp + 0x790]
call fcn.140121090
lea rdx, [rbp + 0x788]
lea rcx, [rbp + 0x790]
call fcn.140121090
mov rdx, qword [rbp + 0x720]
lea rcx, [rbp + 0x790]
call fcn.14011c850
mov rdx, qword [rbp + 0x728]
lea rcx, [rbp + 0x790]
call fcn.14011c850
mov rdx, qword [rbp + 0x730]
lea rcx, [rbp + 0x790]
call fcn.14011c850
mov rax, qword [rbp + 0x798]
mov r13, qword [rbp + 0x790]
sub rax, r13
sar rax, 3
lea rax, [rax*8]
xor r14d, r14d
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], rax
mov r9, r13
xor edx, edx
mov r8d, 0x20002
mov rcx, qword [rbp + 0x738]
call qword [0x14018ffd0]
test eax, eax
jne 0x1401200e9
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 2
mov r9d, 0x1f9
lea r8, str.E:.conan7ca4bd1_sourcesexternalcrashpadclientcrashpad_client_win.cc
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace::StartHandlerProcess_class_std::unique_ptr_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData_struct_std::default_delete_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData____
lea rcx, [rbp + 0x2b0]
call fcn.14005b5a0
nop
or r12d, 0x20
mov dword [rsp + 0x50], r12d
lea rdx, str.UpdateProcThreadAttribute
mov rcx, rax
call fcn.140001300
nop
test r12b, 0x20
je 0x140120029
and r12d, 0xffffffdf
mov dword [rsp + 0x50], r12d
lea rcx, [rbp + 0x2b0]
call fcn.14005b8e0
nop
test rsi, rsi
je 0x14012004d
mov eax, dword [r15]
cmp dword [0x14018ffb8], eax
jg 0x1401209f4
mov rcx, rsi
call qword [0x14018ffb0]
mov qword [rbp + 0x7a8], r14
mov rcx, rbx
call fcn.14009b954
nop
test r13, r13
je 0x14012008a
mov r8, qword [rbp + 0x7a0]
sub r8, r13
sar r8, 3
mov rdx, r13
lea rcx, [rbp + 0x790]
call fcn.140121040
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x790], xmm0
mov qword [rbp + 0x7a0], r14
mov rcx, qword [rbp + 0x788]
test rcx, rcx
je 0x1401200a2
call fcn.140055080
mov qword [rbp + 0x788], r14
lea rcx, [rbp + 0x768]
call fcn.140047540
nop
bt r12d, 0x15
jae 0x1401200cc
btr r12d, 0x15
mov dword [rsp + 0x50], r12d
lea rcx, [rbp + 0x3b8]
call fcn.14005b620
nop
mov qword [0x14018ff78], 2
mov rcx, qword [rsp + 0x68]
call fcn.14011c690
xor al, al
jmp 0x1401208ce
mov rdi, qword [rbp + 0x788]
mov rax, qword [rbp + 0x7a0]
mov qword [rsp + 0x60], rax
jmp 0x140120117
xor r14d, r14d
mov dword [rsp + 0x70], r14d
mov dword [rbp + 0x6d0], 0x68
mov r13, qword [rbp + 0x790]
mov rax, qword [rsp + 0x68]
mov rax, qword [rax]
mov rdx, qword [rax + 0x10]
cmp rdx, 0xc
jb 0x14012026e
add rdx, 0xfffffffffffffff4
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
mov qword [rbp - 0x78], r14
mov rcx, qword [rax + 0x10]
cmp rcx, rdx
jb 0x140120a3b
mov qword [rbp + 0x7d0], 0xffffffffffffffff
sub rcx, rdx
mov qword [rbp + 0x278], rcx
mov r14, 0xffffffffffffffff
cmp rcx, r14
cmovb r14, rcx
cmp qword [rax + 0x18], 8
jb 0x140120177
mov rax, qword [rax]
lea rcx, [rax + rdx*2]
mov qword [rbp + 0xb8], rcx
movabs rax, 0x7ffffffffffffffe
mov qword [rsp + 0x50], rax
cmp r14, rax
ja 0x140120a41
mov qword [rbp - 0x70], 7
cmp r14, 8
jae 0x1401201c9
mov qword [rbp - 0x78], r14
add r14, r14
mov r8, r14
mov rdx, rcx
lea rcx, [rsp + 0x78]
call fcn.14009e510
xor eax, eax
mov word [rsp + r14 + 0x78], ax
jmp 0x14012023d
mov rcx, r14
or rcx, 7
mov qword [rbp + 0x7c8], rcx
cmp rcx, rax
ja 0x1401201f7
mov edx, 0xa
mov qword [rbp + 0x270], rdx
mov rax, rcx
cmp rcx, rdx
cmovb rax, rdx
mov qword [rsp + 0x50], rax
lea rdx, [rax + 1]
lea rcx, [rsp + 0x78]
call fcn.14002f8d0
mov r15, rax
mov qword [rsp + 0x78], rax
mov qword [rbp - 0x78], r14
mov rax, qword [rsp + 0x50]
mov qword [rbp - 0x70], rax
add r14, r14
mov r8, r14
mov rdx, qword [rbp + 0xb8]
mov rcx, r15
call fcn.14009e510
xor eax, eax
mov word [r15 + r14], ax
mov r15, qword [rbp + 0xc0]
or r12d, 0x4040
mov dword [rsp + 0x50], r12d
lea rcx, [rsp + 0x78]
cmp qword [rbp - 0x70], 8
cmovae rcx, qword [rsp + 0x78]
lea rdx, str.rundll32.exe
call fcn.140103330
test eax, eax
jne 0x14012026e
mov r14b, 1
jmp 0x140120271
xor r14b, r14b
test r12b, 0x40
je 0x1401202d8
and r12d, 0xffffffbf
mov dword [rsp + 0x50], r12d
mov rdx, qword [rbp - 0x70]
cmp rdx, 8
jb 0x1401202c1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401202bc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140120a47
call fcn.14009b94c
xor r8d, r8d
mov qword [rbp - 0x78], r8
mov qword [rbp - 0x70], 7
mov word [rsp + 0x78], r8w
jmp 0x1401202db
xor r8d, r8d
lea rdx, [rbp + 0x768]
cmp qword [rbp + 0x780], 8
cmovae rdx, qword [rbp + 0x768]
test r14b, r14b
mov r14, qword [rsp + 0x68]
je 0x140120301
mov rcx, r8
jmp 0x14012030e
mov rcx, qword [r14]
cmp qword [rcx + 0x18], 8
jb 0x14012030e
mov rcx, qword [rcx]
lea rax, [rbp + 0x748]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0x6d0]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r8
mov qword [rsp + 0x30], r8
mov eax, dword [rsp + 0x70]
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x1401204f3
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 2
mov r9d, 0x21b
lea r8, str.E:.conan7ca4bd1_sourcesexternalcrashpadclientcrashpad_client_win.cc
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace::StartHandlerProcess_class_std::unique_ptr_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData_struct_std::default_delete_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData____
lea rcx, [rbp + 0x2b0]
call fcn.14005b5a0
nop
bts r12d, 7
mov dword [rsp + 0x50], r12d
lea rdx, str.CreateProcess
mov rcx, rax
call fcn.140001300
nop
test r12b, r12b
jns 0x1401203bc
btr r12d, 7
mov dword [rsp + 0x50], r12d
lea rcx, [rbp + 0x2b0]
call fcn.14005b8e0
nop
test rsi, rsi
je 0x1401203e2
mov eax, dword [r15]
cmp dword [0x14018ffb8], eax
jg 0x140120a4d
mov rcx, rsi
call qword [0x14018ffb0]
xor esi, esi
mov qword [rbp + 0x7a8], rsi
test rbx, rbx
je 0x1401203f0
mov rcx, rbx
call fcn.14009b954
nop
test r13, r13
je 0x140120448
mov rax, qword [rsp + 0x60]
sub rax, r13
sar rax, 3
lea rdx, [rax*8]
mov rax, r13
cmp rdx, 0x1000
jb 0x14012042e
add rdx, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140120a94
mov rcx, r13
call fcn.14009b94c
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x790], xmm0
mov qword [rbp + 0x7a0], rsi
test rdi, rdi
je 0x14012045c
mov rcx, rdi
call fcn.140055080
mov qword [rbp + 0x788], rsi
mov rdx, qword [rbp + 0x780]
cmp rdx, 8
jb 0x1401204a2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x768]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14012049d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140120a9a
call fcn.14009b94c
mov qword [rbp + 0x778], rsi
mov qword [rbp + 0x780], 7
mov word [rbp + 0x768], si
bt r12d, 0xf
jae 0x1401204d8
btr r12d, 0xf
mov dword [rsp + 0x50], r12d
lea rcx, [rbp + 0x3b8]
call fcn.14005b620
nop
mov qword [0x14018ff78], 2
mov rcx, r14
call fcn.14011c690
xor al, al
jmp 0x1401208ce
mov rcx, qword [rbp + 0x750]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
jne 0x140120550
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 1
mov r9d, 0x220
lea r8, str.E:.conan7ca4bd1_sourcesexternalcrashpadclientcrashpad_client_win.cc
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace::StartHandlerProcess_class_std::unique_ptr_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData_struct_std::default_delete_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData____
lea rcx, [rbp + 0x2b0]
call fcn.14005b5a0
nop
bts r12d, 8
mov dword [rsp + 0x50], r12d
lea rdx, str.CloseHandle_thread
mov rcx, rax
call fcn.140001300
nop
bt r12d, 8
jae 0x14012056d
btr r12d, 8
mov dword [rsp + 0x50], r12d
lea rcx, [rbp + 0x2b0]
call fcn.14005b8e0
mov rcx, qword [rbp + 0x748]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
jne 0x1401205ca
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 1
mov r9d, 0x223
lea r8, str.E:.conan7ca4bd1_sourcesexternalcrashpadclientcrashpad_client_win.cc
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace::StartHandlerProcess_class_std::unique_ptr_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData_struct_std::default_delete_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData____
lea rcx, [rbp + 0x5c0]
call fcn.14005b5a0
nop
bts r12d, 9
mov dword [rsp + 0x50], r12d
lea rdx, str.CloseHandle_process
mov rcx, rax
call fcn.140001300
nop
bt r12d, 9
jae 0x1401205e7
btr r12d, 9
mov dword [rsp + 0x50], r12d
lea rcx, [rbp + 0x5c0]
call fcn.14005b8e0
mov r14, qword [r14]
mov rcx, qword [r14 + 0xe0]
cmp rcx, 0xffffffffffffffff
je 0x1401205fc
call fcn.140055070
mov qword [r14 + 0xe0], 0xffffffffffffffff
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x7e4], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x7f4], xmm1
mov dword [rbp + 0x7e0], 2
xor eax, eax
mov qword [rbp + 0x7b0], rax
mov dword [rbp + 0x7b8], eax
mov r14, qword [rsp + 0x68]
mov rcx, qword [r14]
add rcx, 0xc0
lea r8, [rbp + 0x7b0]
lea rdx, [rbp + 0x7e0]
call fcn.140057290
test al, al
jne 0x140120797
test rsi, rsi
je 0x140120686
mov eax, dword [r15]
cmp dword [0x14018ffb8], eax
jg 0x140120aa0
mov rcx, rsi
call qword [0x14018ffb0]
xor esi, esi
mov qword [rbp + 0x7a8], rsi
test rbx, rbx
je 0x140120694
mov rcx, rbx
call fcn.14009b954
nop
test r13, r13
je 0x1401206ec
mov rax, qword [rsp + 0x60]
sub rax, r13
sar rax, 3
lea rdx, [rax*8]
mov rax, r13
cmp rdx, 0x1000
jb 0x1401206d2
add rdx, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140120b2e
mov rcx, r13
call fcn.14009b94c
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x790], xmm0
mov qword [rbp + 0x7a0], rsi
test rdi, rdi
je 0x140120700
mov rcx, rdi
call fcn.140055080
mov qword [rbp + 0x788], rsi
mov rdx, qword [rbp + 0x780]
cmp rdx, 8
jb 0x140120746
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x768]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140120741
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401208fe
call fcn.14009b94c
mov qword [rbp + 0x778], rsi
mov qword [rbp + 0x780], 7
mov word [rbp + 0x768], si
bt r12d, 0x10
jae 0x14012077c
btr r12d, 0x10
mov dword [rsp + 0x50], r12d
lea rcx, [rbp + 0x3b8]
call fcn.14005b620
nop
mov qword [0x14018ff78], 2
mov rcx, r14
call fcn.14011c690
xor al, al
jmp 0x1401208ce
mov byte [rsp + 0x58], 1
test rsi, rsi
je 0x1401207c2
mov eax, dword [r15]
cmp dword [0x14018ffb8], eax
jg 0x140120ae7
mov rcx, rsi
call qword [0x14018ffb0]
xor esi, esi
mov qword [rbp + 0x7a8], rsi
test rbx, rbx
je 0x1401207d0
mov rcx, rbx
call fcn.14009b954
nop
test r13, r13
je 0x140120828
mov rax, qword [rsp + 0x60]
sub rax, r13
sar rax, 3
lea rdx, [rax*8]
mov rax, r13
cmp rdx, 0x1000
jb 0x14012080e
add rdx, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140120b2e
mov rcx, r13
call fcn.14009b94c
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x790], xmm0
mov qword [rbp + 0x7a0], rsi
test rdi, rdi
je 0x14012083c
mov rcx, rdi
call fcn.140055080
mov qword [rbp + 0x788], rsi
mov rdx, qword [rbp + 0x780]
cmp rdx, 8
jb 0x140120882
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x768]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14012087d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401208fe
call fcn.14009b94c
mov qword [rbp + 0x778], rsi
mov qword [rbp + 0x780], 7
mov word [rbp + 0x768], si
bt r12d, 0x11
jae 0x1401208b8
btr r12d, 0x11
mov dword [rsp + 0x50], r12d
lea rcx, [rbp + 0x3b8]
call fcn.14005b620
nop
mov qword [0x14018ff78], 1
mov rcx, r14
call fcn.14011c690
mov al, 1
mov rcx, qword [rbp + 0x860]
xor rcx, rsp
call fcn.14009bde0
lea r11, [rsp + 0x970]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1400ad228
nop
call fcn.140008090
nop
call fcn.1400ad228
nop
call fcn.1400ad228
nop
call fcn.1400ad228
nop
call fcn.1400ad228
nop
call fcn.1400ad228
int3
call fcn.140008150
nop
call fcn.1400ad228
nop
call fcn.1400ad228
nop
call fcn.1400ad228
nop
call fcn.1400ad228
nop
call fcn.1400ad228
nop
call fcn.1400ad228
nop
lea rcx, [0x14018ffc8]
call fcn.14009bb9c
cmp dword [0x14018ffc8], 0xffffffff
jne 0x14011fb13
xor r8d, r8d
lea rdx, str.::InitializeProcThreadAttributeList
lea rcx, str.kernel32.dll
call fcn.140056e20
mov qword [0x14018ffc0], rax
lea rcx, [0x14018ffc8]
call fcn.14009bb3c
jmp 0x14011fb13
lea rcx, [0x14018ffd8]
call fcn.14009bb9c
cmp dword [0x14018ffd8], 0xffffffff
jne 0x14011fb22
cmp qword [0x14018ffc0], 0
je 0x1401209d4
xor r8d, r8d
lea rdx, str.::UpdateProcThreadAttribute
lea rcx, str.kernel32.dll
call fcn.140056e20
jmp 0x1401209d6
xor eax, eax
mov qword [0x14018ffd0], rax
lea rcx, [0x14018ffd8]
call fcn.14009bb3c
jmp 0x14011fb22
call fcn.1400ad228
nop
lea rcx, [0x14018ffb8]
call fcn.14009bb9c
cmp dword [0x14018ffb8], 0xffffffff
jne 0x14012003d
mov r8b, 1
lea rdx, str.::DeleteProcThreadAttributeList
lea rcx, str.kernel32.dll
call fcn.140056e20
mov qword [0x14018ffb0], rax
lea rcx, [0x14018ffb8]
call fcn.14009bb3c
jmp 0x14012003d
call fcn.14005b170
int3
call fcn.140008150
int3
call fcn.1400ad228
nop
lea rcx, [0x14018ffb8]
call fcn.14009bb9c
cmp dword [0x14018ffb8], 0xffffffff
jne 0x1401203d0
mov r8b, 1
lea rdx, str.::DeleteProcThreadAttributeList
lea rcx, str.kernel32.dll
call fcn.140056e20
mov qword [0x14018ffb0], rax
lea rcx, [0x14018ffb8]
call fcn.14009bb3c
jmp 0x1401203d0
call fcn.1400ad228
nop
call fcn.1400ad228
nop
lea rcx, [0x14018ffb8]
call fcn.14009bb9c
cmp dword [0x14018ffb8], 0xffffffff
jne 0x140120674
mov r8b, 1
lea rdx, str.::DeleteProcThreadAttributeList
lea rcx, str.kernel32.dll
call fcn.140056e20
mov qword [0x14018ffb0], rax
lea rcx, [0x14018ffb8]
call fcn.14009bb3c
jmp 0x140120674
lea rcx, [0x14018ffb8]
call fcn.14009bb9c
cmp dword [0x14018ffb8], 0xffffffff
jne 0x1401207b0
mov r8b, 1
lea rdx, str.::DeleteProcThreadAttributeList
lea rcx, str.kernel32.dll
call fcn.140056e20
mov qword [0x14018ffb0], rax
lea rcx, [0x14018ffb8]
call fcn.14009bb3c
jmp 0x1401207b0
call fcn.1400ad228
int3