Function at 0x1400e7c70
Capabilities:
Create process on windows

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x860]
sub rsp, 0x960
mov rax, qword [0x14037ec08]
xor rax, rsp
mov qword [rbp + 0x850], rax
mov rsi, rcx
mov qword [rsp + 0x9b0], r13
mov cl, 1
mov r14d, r8d
mov r15, rdx
call fcn.1400ddda0
xor r12d, r12d
lea r13, str.CrashReportClient
mov rbx, rax
test rax, rax
je 0x1400e7d2f
mov rdi, 0xffffffffffffffff
nop dword [rax]
inc rdi
cmp word [r13 + rdi*2], r12w
jne 0x1400e7cd0
movzx ecx, word [rax]
dec edi
add rbx, 2
test cx, cx
je 0x1400e7d2f
nop dword [rax]
movzx eax, cx
sub eax, 0x61
cmp eax, 0x1a
sbb ax, ax
and ax, 0x20
sub cx, ax
cmp cx, 0x43
jne 0x1400e7d23
movsxd r8, edi
lea rdx, [0x140282db2]
mov rcx, rbx
call fcn.140041f80
test eax, eax
je 0x1400e7dc1
movzx ecx, word [rbx]
add rbx, 2
test cx, cx
jne 0x1400e7cf0
mov rbx, r12
call fcn.140037b10
mov rcx, qword [0x1403debb0]
mov byte [rsp + 0x60], r12b
test rcx, rcx
je 0x1400e7d6e
cmp r14d, 1
je 0x1400e7d6e
lea rax, [0x1403e98c0]
mov rdx, r13
lea r9, [rsp + 0x60]
mov qword [rsp + 0x20], rax
lea r8, str.bImplicitSend
call fcn.1400a4fe0
mov r13, qword [rsp + 0x9b0]
test rbx, rbx
jne 0x1400e880b
xor edx, edx
lea rcx, [rbp + 0x230]
mov r8d, 0x212
call fcn.140260ab0
mov r8d, 0x80
lea rdx, [rbp + 0x130]
mov rcx, rsi
call fcn.140035a60
lea rcx, [rbp - 0x28]
call fcn.140034680
call fcn.1400c6ec0
cmp dword [rax + 8], r12d
je 0x1400e7dca
mov rcx, qword [rax]
jmp 0x1400e7dd1
add rbx, 0xfffffffffffffffe
jmp 0x1400e7d32
lea rcx, [0x140280be0]
lea rax, str.Crashes
mov qword [rbp + 0xe0], rcx
mov qword [rbp + 0xe8], rax
lea rdx, [rbp + 0xe0]
lea rax, [rbp + 0x130]
mov qword [rbp - 0x38], r12
mov r8d, 3
mov qword [rbp + 0xf0], rax
lea rcx, [rbp - 0x38]
mov qword [rbp - 0x30], r12
call fcn.1400bf4a0
call fcn.140047280
cmp dword [rbp - 0x30], r12d
lea r8, [0x140280be0]
mov r9, rax
lea rdx, [rsp + 0x78]
cmovne r8, qword [rbp - 0x38]
mov rcx, qword [rax]
mov rax, qword [rcx + 0x100]
mov rcx, r9
call qword [case.0x140041db8.0]
call fcn.140047280
cmp dword [rbp - 0x80], r12d
lea rdx, [0x140280be0]
mov r9, rax
mov r8b, 1
cmovne rdx, qword [rsp + 0x78]
mov rcx, qword [rax]
mov rax, qword [rcx + 0x58]
mov rcx, r9
call qword [case.0x140041db8.0]
test al, al
je 0x1400e87e0
cmp dword [rbp - 0x80], r12d
lea rax, [0x140280be0]
mov r8d, 2
mov qword [rbp - 0x48], r12
cmovne rax, qword [rsp + 0x78]
lea rdx, [rbp + 0xe0]
mov qword [rbp + 0xe0], rax
lea rcx, [rbp - 0x48]
mov rax, qword [str.8___]
mov qword [rbp + 0xe8], rax
mov qword [rbp - 0x40], r12
call fcn.1400bf4a0
mov rax, qword [rsi]
lea rdx, [0x140280be0]
cmp dword [rbp - 0x40], r12d
mov rcx, rsi
cmovne rdx, qword [rbp - 0x48]
mov rax, qword [rax + 8]
call qword [case.0x140041db8.0]
mov rax, qword [rsi]
lea rdx, [0x140280be0]
cmp dword [rbp - 0x80], r12d
mov r8, r15
mov rcx, rsi
cmovne rdx, qword [rsp + 0x78]
mov rax, qword [rax + 0x28]
call qword [case.0x140041db8.0]
cmp dword [rbp - 0x80], r12d
lea rcx, [0x140280be0]
cmovne rcx, qword [rsp + 0x78]
call fcn.1400e3750
lea rcx, [rsp + 0x78]
call fcn.140030f70
cmp dword [rbp - 0x80], r12d
lea r8, [0x140280be0]
lea rdx, str.__s_
cmovne r8, qword [rsp + 0x78]
lea rcx, [rbp - 0x78]
call fcn.1400268a0
cmp byte [0x1403ceba0], r12b
setne bl
cmp byte [rsp + 0x60], r12b
je 0x1400e7f5f
lea rdx, str.__Unattended__ImplicitSend
mov r8d, 0x1a
jmp 0x1400e7f6c
lea rdx, str.__Unattended
mov r8d, 0xc
lea rcx, [rbp - 0x78]
call fcn.1400246e0
test bl, bl
je 0x1400e7f8f
mov r8d, 9
lea rdx, str.__nullrhi
lea rcx, [rbp - 0x78]
call fcn.1400246e0
mov edx, 0xb
mov qword [rsp + 0x50], r12
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x58], r12
call fcn.140019a30
mov edx, dword [rsp + 0x58]
mov r14d, dword [rsp + 0x5c]
lea ebx, [rdx + 0xb]
mov dword [rsp + 0x58], ebx
cmp ebx, r14d
jle 0x1400e7fd0
lea rcx, [rsp + 0x50]
call fcn.1400197d0
mov r14d, dword [rsp + 0x5c]
mov ebx, dword [rsp + 0x58]
mov rsi, qword [rsp + 0x50]
lea rdx, str.__AppName
mov rcx, rsi
mov r8d, 0x16
call fcn.140038f30
cmp ebx, 1
jg 0x1400e803a
mov rbx, qword [rbp - 0x20]
mov rdi, r12
mov r14, qword [rbp - 0x28]
mov qword [rsp + 0x68], r12
mov dword [rsp + 0x70], ebx
test ebx, ebx
jne 0x1400e800f
mov r14, r12
jmp 0x1400e80a2
xor r8d, r8d
lea rcx, [rsp + 0x68]
mov edx, ebx
call fcn.1400228d0
mov rdi, qword [rsp + 0x68]
mov rdx, r14
movsxd r8, ebx
mov rcx, rdi
add r8, r8
call fcn.140260aa0
mov ebx, dword [rsp + 0x70]
jmp 0x1400e809f
mov rax, qword [rbp - 0x20]
lea edi, [rax - 1]
test eax, eax
jne 0x1400e8048
mov edi, r12d
test ebx, ebx
jne 0x1400e8053
lea eax, [rbx + 1]
test edi, edi
jne 0x1400e8056
mov eax, r12d
lea edx, [rax + rbx]
mov qword [rsp + 0x50], rsi
add edx, edi
mov dword [rsp + 0x58], ebx
mov dword [rsp + 0x5c], r14d
mov rsi, r12
cmp edx, r14d
jle 0x1400e807b
lea rcx, [rsp + 0x50]
call fcn.140019a30
mov rdx, qword [rbp - 0x28]
lea rcx, [rsp + 0x50]
mov r8d, edi
call fcn.1400246e0
mov rdi, qword [rsp + 0x50]
mov ebx, dword [rsp + 0x58]
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], r12
mov r14, rdi
lea r8d, [rbx - 1]
test ebx, ebx
jne 0x1400e80ad
mov r8d, r12d
mov rdx, rdi
lea rcx, [rbp - 0x78]
call fcn.1400246e0
test r14, r14
je 0x1400e80c6
mov rcx, r14
call fcn.1400556b0
test rsi, rsi
je 0x1400e80d3
mov rcx, rsi
call fcn.1400556b0
mov edx, 0xd
mov qword [rsp + 0x50], r12
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x58], r12
call fcn.140019a30
mov edx, dword [rsp + 0x58]
mov r14d, dword [rsp + 0x5c]
lea edi, [rdx + 0xd]
mov dword [rsp + 0x58], edi
cmp edi, r14d
jle 0x1400e8114
lea rcx, [rsp + 0x50]
call fcn.1400197d0
mov r14d, dword [rsp + 0x5c]
mov edi, dword [rsp + 0x58]
mov rsi, qword [rsp + 0x50]
lea rdx, str.__CrashGUID
mov rcx, rsi
mov r8d, 0x1a
call fcn.140038f30
cmp word [rbp + 0x130], r12w
je 0x1400e81a7
lea rax, [rbp + 0x130]
mov rbx, 0xffffffffffffffff
inc rbx
cmp word [rax + rbx*2], r12w
jne 0x1400e8146
test edi, edi
jne 0x1400e815b
lea eax, [rdi + 1]
test ebx, ebx
jne 0x1400e815e
mov eax, r12d
lea edx, [rbx + rdi]
mov qword [rsp + 0x50], rsi
add edx, eax
mov dword [rsp + 0x58], edi
mov dword [rsp + 0x5c], r14d
cmp edx, r14d
jle 0x1400e8180
lea rcx, [rsp + 0x50]
call fcn.140019a30
mov r8d, ebx
lea rdx, [rbp + 0x130]
lea rcx, [rsp + 0x50]
call fcn.1400246e0
mov rsi, qword [rsp + 0x50]
mov edi, dword [rsp + 0x58]
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], r12
lea r8d, [rdi - 1]
test edi, edi
mov rdx, rsi
lea rcx, [rbp - 0x78]
cmove r8d, r12d
call fcn.1400246e0
test rsi, rsi
je 0x1400e81ca
mov rcx, rsi
call fcn.1400556b0
lea rcx, [rbp - 0x58]
call fcn.1400ded20
cmp dword [rbp - 0x50], 1
jle 0x1400e8321
mov edx, 0x10
mov qword [rsp + 0x50], r12
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x58], r12
call fcn.140019a30
mov edx, dword [rsp + 0x58]
mov r14d, dword [rsp + 0x5c]
lea ebx, [rdx + 0x10]
mov dword [rsp + 0x58], ebx
cmp ebx, r14d
jle 0x1400e821e
lea rcx, [rsp + 0x50]
call fcn.1400197d0
mov r14d, dword [rsp + 0x5c]
mov ebx, dword [rsp + 0x58]
mov rsi, qword [rsp + 0x50]
lea rdx, str.__DebugSymbols
mov rcx, rsi
mov r8d, 0x20
call fcn.140038f30
cmp ebx, 1
jg 0x1400e8288
mov rbx, qword [rbp - 0x50]
mov rdi, r12
mov r14, qword [rbp - 0x58]
mov qword [rsp + 0x68], r12
mov dword [rsp + 0x70], ebx
test ebx, ebx
jne 0x1400e825d
mov r14, r12
jmp 0x1400e82f0
xor r8d, r8d
lea rcx, [rsp + 0x68]
mov edx, ebx
call fcn.1400228d0
mov rdi, qword [rsp + 0x68]
mov rdx, r14
movsxd r8, ebx
mov rcx, rdi
add r8, r8
call fcn.140260aa0
mov ebx, dword [rsp + 0x70]
jmp 0x1400e82ed
mov rax, qword [rbp - 0x50]
lea edi, [rax - 1]
test eax, eax
jne 0x1400e8296
mov edi, r12d
test ebx, ebx
jne 0x1400e82a1
lea eax, [rbx + 1]
test edi, edi
jne 0x1400e82a4
mov eax, r12d
lea edx, [rdi + rbx]
mov qword [rsp + 0x50], rsi
add edx, eax
mov dword [rsp + 0x58], ebx
mov dword [rsp + 0x5c], r14d
mov rsi, r12
cmp edx, r14d
jle 0x1400e82c9
lea rcx, [rsp + 0x50]
call fcn.140019a30
mov rdx, qword [rbp - 0x58]
lea rcx, [rsp + 0x50]
mov r8d, edi
call fcn.1400246e0
mov rdi, qword [rsp + 0x50]
mov ebx, dword [rsp + 0x58]
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], r12
mov r14, rdi
lea r8d, [rbx - 1]
test ebx, ebx
jne 0x1400e82fb
mov r8d, r12d
mov rdx, rdi
lea rcx, [rbp - 0x78]
call fcn.1400246e0
test r14, r14
je 0x1400e8314
mov rcx, r14
call fcn.1400556b0
test rsi, rsi
je 0x1400e8321
mov rcx, rsi
call fcn.1400556b0
xor edx, edx
xor ecx, ecx
mov r15, r12
call qword [sym.imp.KERNEL32.dll_GetDllDirectoryW]
lea ebx, [rax*2 + 2]
test ebx, ebx
je 0x1400e836c
xor edx, edx
mov ecx, ebx
mov edi, ebx
call fcn.14005e760
mov r15, rax
test rax, rax
je 0x1400e836c
mov r8d, edi
xor edx, edx
mov rcx, rax
call fcn.140260ab0
mov rdx, r15
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_GetDllDirectoryW]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetDllDirectoryW]
mov qword [rbp - 0x68], r12
mov qword [rbp - 0x60], r12
call fcn.1400a4be0
mov rcx, rax
lea r8, [rbp - 0x68]
mov r9b, 1
lea rdx, str.AbsCrashReportClientLog
call fcn.1400bd1d0
test al, al
je 0x1400e849e
movsxd rbx, dword [rbp - 0x60]
mov rdi, qword [rbp - 0x68]
mov qword [rsp + 0x50], r12
mov dword [rsp + 0x58], ebx
test ebx, ebx
jne 0x1400e83b3
mov dword [rsp + 0x5c], r12d
jmp 0x1400e83d5
xor r8d, r8d
lea rcx, [rsp + 0x50]
mov edx, ebx
call fcn.1400228d0
mov rcx, qword [rsp + 0x50]
mov r8, rbx
add r8, r8
mov rdx, rdi
call fcn.140260aa0
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xf8]
call fcn.1400be020
xor r8d, r8d
mov qword [rsp + 0x68], r12
lea rcx, [rsp + 0x68]
mov dword [rsp + 0x70], 1
lea edx, [r8 + 1]
call fcn.140097a00
mov rcx, qword [rsp + 0x68]
lea rdx, [rbp + 0xf8]
call fcn.1400bdfc0
lea r8, [rsp + 0x68]
lea rdx, str.__abslog_0_
lea rcx, [rbp + 0xe0]
call fcn.1400c1ce0
mov ecx, dword [rax + 8]
test ecx, ecx
mov rdx, qword [rax]
lea r8d, [rcx - 1]
cmove r8d, r12d
lea rcx, [rbp - 0x78]
call fcn.1400246e0
mov rcx, qword [rbp + 0xe0]
test rcx, rcx
je 0x1400e8457
call fcn.1400556b0
mov edi, dword [rsp + 0x70]
test edi, edi
je 0x1400e847e
mov rbx, qword [rsp + 0x68]
add rbx, 0x10
mov rcx, qword [rbx]
test rcx, rcx
je 0x1400e8475
call fcn.1400556b0
add rbx, 0x20
sub edi, 1
jne 0x1400e8468
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x1400e848d
call fcn.1400556b0
mov rcx, qword [rbp + 0x108]
test rcx, rcx
je 0x1400e849e
call fcn.1400556b0
call fcn.1400b4660
mov rcx, rax
call fcn.1400b65a0
test eax, eax
je 0x1400e878c
movups xmm0, xmmword [str.CrashReportClient.exe]
lea rax, [rbp + 0x230]
mov dword [rbp + 0xe8], 0x109
movups xmm1, xmmword [0x14029e230]
mov qword [rsp + 0x50], rax
lea rdx, [rbp + 0xf8]
lea rax, [rsp + 0x50]
movups xmmword [rbp + 0xf8], xmm0
lea rcx, [rbp + 0xe0]
mov qword [rbp + 0xe0], rax
movsd xmm0, qword [0x14029e240]
mov eax, dword [0x14029e248]
movsd qword [rbp + 0x118], xmm0
mov dword [rbp + 0x120], eax
movups xmmword [rbp + 0x108], xmm1
call fcn.1400dafe0
test al, al
je 0x1400e878c
call fcn.140035360
mov rdi, qword [rax]
movsxd r14, dword [rax + 8]
shl r14, 4
add r14, rdi
cmp rdi, r14
je 0x1400e878c
cmp dword [rdi + 8], r12d
je 0x1400e854f
mov r8, qword [rdi]
jmp 0x1400e8556
lea r8, [0x140280be0]
lea rdx, str.__SentryProjectDsn_s
lea rcx, [rsp + 0x68]
call fcn.1400268a0
mov ebx, dword [rbp - 0x70]
cmp ebx, 1
jg 0x1400e8587
mov rsi, qword [rsp + 0x68]
mov ebx, dword [rsp + 0x70]
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], r12
jmp 0x1400e8607
mov esi, dword [rsp + 0x70]
test esi, esi
je 0x1400e8593
dec esi
jmp 0x1400e8596
mov esi, r12d
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], r12
test ebx, ebx
je 0x1400e85a8
dec ebx
jmp 0x1400e85ab
mov ebx, r12d
lea edx, [rbx + rsi]
test edx, edx
jle 0x1400e85be
inc edx
lea rcx, [rsp + 0x50]
call fcn.140019a30
test ebx, ebx
je 0x1400e85d3
mov rdx, qword [rbp - 0x78]
lea rcx, [rsp + 0x50]
mov r8d, ebx
call fcn.1400246e0
mov rdx, qword [rsp + 0x68]
lea rcx, [rsp + 0x50]
mov r8d, esi
call fcn.1400246e0
mov rcx, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x50]
mov ebx, dword [rsp + 0x58]
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], r12
test rcx, rcx
je 0x1400e8607
call fcn.1400556b0
xorps xmm0, xmm0
mov dword [rbp - 0x10], 0x68
test ebx, ebx
mov qword [rbp - 8], r12
lea r9, [0x140280be0]
movdqa xmmword [rbp], xmm0
cmovne r9, rsi
mov dword [rbp + 0x10], 0x80000000
lea r8, [rbp + 0x230]
mov dword [rbp + 0x14], 0x80000000
lea rdx, str.__s___s
mov dword [rbp + 0x18], 0x80000000
lea rcx, [rbp + 0xe0]
mov dword [rbp + 0x1c], 0x80000000
mov qword [rbp + 0x20], r12
mov qword [rbp + 0x28], r12
mov dword [rbp + 0x30], r12d
mov qword [rbp + 0x38], r12
movdqa xmmword [rbp + 0x40], xmm0
mov qword [rbp + 0x50], r12
call fcn.1400268a0
mov rdx, qword [rbp + 0xe0]
lea rax, [rbp + 0xf8]
mov qword [rsp + 0x48], rax
xor r9d, r9d
lea rax, [rbp - 0x10]
xor r8d, r8d
mov qword [rsp + 0x40], rax
xor ecx, ecx
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], 0x28
mov dword [rsp + 0x20], 1
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x1400e8754
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov word [rbp + 0x450], r12w
mov ebx, eax
test eax, eax
jne 0x1400e86dc
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [rbp + 0x450]
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], 0x200
mov r9d, 0x400
mov qword [rsp + 0x20], rcx
mov r8d, eax
mov ecx, 0x1000
xor edx, edx
call qword [sym.imp.KERNEL32.dll_FormatMessageW]
mov edx, 0xd
lea rcx, [rbp + 0x450]
call fcn.140260ac2
test rax, rax
je 0x1400e8725
mov word [rax], r12w
mov edx, 0xa
lea rcx, [rbp + 0x450]
call fcn.140260ac2
test rax, rax
je 0x1400e873f
mov word [rax], r12w
cmp ebx, 8
je 0x1400e8749
cmp ebx, 0xe
jne 0x1400e8761
lea rcx, [rbp + 0x60]
call fcn.1400e2f80
jmp 0x1400e8761
mov rcx, qword [rbp + 0x100]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0xe0]
test rcx, rcx
je 0x1400e8772
call fcn.1400556b0
test rsi, rsi
je 0x1400e877f
mov rcx, rsi
call fcn.1400556b0
add rdi, 0x10
cmp rdi, r14
jne 0x1400e8544
test r15, r15
je 0x1400e87a2
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_SetDllDirectoryW]
mov rcx, r15
call fcn.1400556b0
mov rcx, qword [rbp - 0x68]
test rcx, rcx
je 0x1400e87b0
call fcn.1400556b0
mov rcx, qword [rbp - 0x58]
test rcx, rcx
je 0x1400e87be
call fcn.1400556b0
mov rcx, qword [rbp - 0x78]
test rcx, rcx
je 0x1400e87cc
call fcn.1400556b0
mov rcx, qword [rbp - 0x48]
test rcx, rcx
je 0x1400e87e0
call fcn.1400556b0
nop word [rax + rax]
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x1400e87ef
call fcn.1400556b0
mov rcx, qword [rbp - 0x38]
test rcx, rcx
je 0x1400e87fd
call fcn.1400556b0
mov rcx, qword [rbp - 0x28]
test rcx, rcx
je 0x1400e880b
call fcn.1400556b0
mov eax, 0xffffffff
mov rcx, qword [rbp + 0x850]
xor rcx, rsp
call fcn.14025eac0
add rsp, 0x960
pop r15
pop r14
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret