Function at 0x1400b9bc4
Capabilities:
Create process on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x4f8
movaps xmmword [rsp + 0x4e0], xmm7
movaps xmmword [rsp + 0x4d0], xmm6
mov r13, rcx
mov rax, qword [0x1401b46a8]
xor rax, rsp
mov qword [rsp + 0x4c8], rax
call fcn.1400df124
test al, al
je 0x1400b9c39
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea r9, str._IsThreadInLoaderLock__
lea rsi, [rsp + 0x318]
mov rcx, rsi
mov r8d, 0x166
call fcn.140025970
mov rcx, rsi
call fcn.140025a00
mov rcx, rsi
call fcn.140025a10
xorps xmm0, xmm0
lea rdx, [rsp + 0x4b0]
movaps xmmword [rdx], xmm0
mov qword [rdx + 0x10], 0
mov rcx, qword [r13]
call fcn.1400df150
mov rsi, qword [r13]
mov rax, qword [rsi + 0x78]
mov rbp, qword [rsi + 0x80]
cmp rax, rbp
je 0x1400b9cf6
lea rsi, [rsp + 0x318]
lea r14, [rsp + 0x4a0]
lea rbx, [rsp + 0x4b0]
lea rdi, [rax + 1]
test byte [rax], 1
mov rcx, rdi
je 0x1400b9c98
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x4a0], rcx
movzx ecx, byte [rax]
test cl, 1
je 0x1400b9cae
mov rcx, qword [rax + 8]
jmp 0x1400b9cb1
shr rcx, 1
mov qword [rsp + 0x4a8], rcx
mov rcx, rsi
mov rdx, r14
call fcn.140039f10
mov rcx, rsi
mov rdx, rbx
call fcn.1400df150
test byte [rsp + 0x318], 1
je 0x1400b9ce6
mov rcx, qword [rsp + 0x328]
call fcn.1401321e4
add rdi, 0x17
mov rax, rdi
cmp rdi, rbp
jne 0x1400b9c88
mov rsi, qword [r13]
movzx eax, byte [rsi + 0x18]
test al, 1
jne 0x1400b9d03
shr rax, 1
jmp 0x1400b9d07
mov rax, qword [rsi + 0x20]
test rax, rax
je 0x1400b9d7a
add rsi, 0x18
lea rdx, str.database
lea rdi, [rsp + 0xa0]
mov rcx, rdi
call fcn.14000299e
lea rbx, [rsp + 0x318]
mov rcx, rbx
mov rdx, rdi
mov r8, rsi
call fcn.1400bb546
lea rdx, [rsp + 0x4b0]
mov rcx, rbx
call fcn.1400df150
test byte [rbx], 1
je 0x1400b9d5f
mov rcx, qword [rsp + 0x328]
call fcn.1401321e4
test byte [rsp + 0xa0], 1
je 0x1400b9d76
mov rcx, qword [rsp + 0xb0]
call fcn.1401321e4
mov rsi, qword [r13]
movzx eax, byte [rsi + 0x30]
test al, 1
jne 0x1400b9d87
shr rax, 1
jmp 0x1400b9d8b
mov rax, qword [rsi + 0x38]
test rax, rax
je 0x1400b9dfe
add rsi, 0x30
lea rdx, str.metrics_dir
lea rdi, [rsp + 0xa0]
mov rcx, rdi
call fcn.14000299e
lea rbx, [rsp + 0x318]
mov rcx, rbx
mov rdx, rdi
mov r8, rsi
call fcn.1400bb546
lea rdx, [rsp + 0x4b0]
mov rcx, rbx
call fcn.1400df150
test byte [rbx], 1
je 0x1400b9de3
mov rcx, qword [rsp + 0x328]
call fcn.1401321e4
test byte [rsp + 0xa0], 1
je 0x1400b9dfa
mov rcx, qword [rsp + 0xb0]
call fcn.1401321e4
mov rsi, qword [r13]
movzx eax, byte [rsi + 0x48]
test al, 1
jne 0x1400b9e0e
mov rcx, rax
shr rcx, 1
jmp 0x1400b9e12
mov rcx, qword [rsi + 0x50]
test rcx, rcx
je 0x1400b9ed5
lea rcx, [rsi + 0x48]
inc rcx
mov ebx, eax
shr bl, 1
test al, 1
cmovne rcx, qword [rsi + 0x58]
lea rdx, [rsp + 0x490]
mov qword [rdx], rcx
movzx eax, bl
cmovne rax, qword [rsi + 0x50]
mov qword [rdx + 8], rax
lea rsi, [rsp + 0xa0]
mov rcx, rsi
call fcn.140039f10
lea rdx, [0x140166a25]
lea rdi, [rsp + 0x250]
mov rcx, rdi
call fcn.14000299e
lea rbx, [rsp + 0x318]
mov rcx, rbx
mov rdx, rdi
mov r8, rsi
call fcn.1400bb546
lea rdx, [rsp + 0x4b0]
mov rcx, rbx
call fcn.1400df150
test byte [rbx], 1
je 0x1400b9ea3
mov rcx, qword [rsp + 0x328]
call fcn.1401321e4
test byte [rsp + 0x250], 1
je 0x1400b9eba
mov rcx, qword [rsp + 0x260]
call fcn.1401321e4
test byte [rsp + 0xa0], 1
je 0x1400b9ed1
mov rcx, qword [rsp + 0xb0]
call fcn.1401321e4
mov rsi, qword [r13]
mov r15, qword [rsi + 0x60]
lea r14, [rsi + 0x68]
cmp r14, r15
je 0x1400ba098
mov qword [rsp + 0x58], r13
lea r13, [rsp + 0x2d0]
xorps xmm6, xmm6
lea rbx, [rsp + 0xa0]
lea r12, str.annotation
lea rsi, [rsp + 0x78]
lea rdi, [rsp + 0x318]
lea rbp, [rsp + 0x4b0]
lea rdx, [r15 + 0x20]
mov rcx, r13
mov r8b, 0x3d
call fcn.140004f0c
movzx r8d, byte [r15 + 0x38]
test r8b, 1
je 0x1400b9f3e
mov r8, qword [r15 + 0x40]
mov rdx, qword [r15 + 0x48]
jmp 0x1400b9f45
shr r8, 1
lea rdx, [r15 + 0x39]
mov rcx, r13
call fcn.14002268e
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x260], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x250], xmm0
movups xmmword [rax], xmm6
mov qword [rax + 0x10], 0
movzx eax, byte [rsp + 0x250]
mov rcx, rax
shr rcx, 1
test al, 1
mov rax, qword [rsp + 0x260]
lea rdx, [rsp + 0x251]
cmove rax, rdx
mov qword [rsp + 0x480], rax
cmovne rcx, qword [rsp + 0x258]
mov qword [rsp + 0x488], rcx
mov rcx, rbx
lea rdx, [rsp + 0x480]
call fcn.140039f10
mov rcx, rsi
mov rdx, r12
call fcn.14000299e
mov rcx, rdi
mov rdx, rsi
mov r8, rbx
call fcn.1400bb546
mov rcx, rdi
mov rdx, rbp
call fcn.1400df150
test byte [rsp + 0x318], 1
je 0x1400b9ff7
mov rcx, qword [rsp + 0x328]
call fcn.1401321e4
test byte [rsp + 0x78], 1
je 0x1400ba00b
mov rcx, qword [rsp + 0x88]
call fcn.1401321e4
test byte [rsp + 0xa0], 1
je 0x1400ba022
mov rcx, qword [rsp + 0xb0]
call fcn.1401321e4
test byte [rsp + 0x250], 1
je 0x1400ba039
mov rcx, qword [rsp + 0x260]
call fcn.1401321e4
test byte [rsp + 0x2d0], 1
je 0x1400ba050
mov rcx, qword [rsp + 0x2e0]
call fcn.1401321e4
mov rcx, qword [r15 + 8]
test rcx, rcx
je 0x1400ba066
mov rax, rcx
mov rcx, qword [rcx]
test rcx, rcx
jne 0x1400ba059
jmp 0x1400ba083
mov rax, qword [r15 + 0x10]
cmp qword [rax], r15
je 0x1400ba083
add r15, 0x10
mov rcx, qword [r15]
lea r15, [rcx + 0x10]
mov rax, qword [rcx + 0x10]
cmp qword [rax], rcx
jne 0x1400ba073
mov r15, rax
cmp r14, rax
jne 0x1400b9f1a
mov r13, qword [rsp + 0x58]
mov rsi, qword [r13]
mov rdi, qword [rsi + 0x90]
mov rsi, qword [rsi + 0x98]
cmp rdi, rsi
je 0x1400ba125
lea r15, [0x140171e1b]
lea rbx, [rsp + 0xa0]
lea rbp, [rsp + 0x318]
lea r14, [rsp + 0x4b0]
mov rcx, rbx
mov rdx, r15
call fcn.14000299e
mov rcx, rbp
mov rdx, rbx
mov r8, rdi
call fcn.1400bb546
mov rcx, rbp
mov rdx, r14
call fcn.1400df150
test byte [rsp + 0x318], 1
je 0x1400ba105
mov rcx, qword [rsp + 0x328]
call fcn.1401321e4
test byte [rsp + 0xa0], 1
je 0x1400ba11c
mov rcx, qword [rsp + 0xb0]
call fcn.1401321e4
add rdi, 0x18
cmp rsi, rdi
jne 0x1400ba0ca
movabs rbx, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x470], rbx
movaps xmm6, xmmword [section..rdata]
movaps xmmword [rsp + 0x460], xmm6
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, 0x1f0fff
mov edx, 1
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_OpenProcess]
lea rcx, [0x140179f98]
mov qword [rsp + 0x460], rcx
mov qword [rsp + 0x468], rax
mov byte [rsp + 0x470], 0
test rax, rax
je 0x1400ba23c
lea rsi, [rsp + 0x2d0]
mov qword [rsi + 0x40], rbx
movaps xmmword [rsi + 0x30], xmm6
movaps xmmword [rsi + 0x20], xmm6
movaps xmmword [rsi + 0x10], xmm6
movaps xmmword [rsi], xmm6
mov rcx, qword [r13]
mov rcx, qword [rcx + 0xc8]
mov r9, qword [0x1401b48e8]
mov r8, qword [0x1401b48e0]
mov rdx, qword [0x1401b48d8]
lea rbp, [0x1401b9e90]
mov qword [rsp + 0x40], rbp
lea rbp, [0x1401b9e80]
mov qword [rsp + 0x38], rbp
lea rbp, [0x1401b9e70]
mov qword [rsp + 0x30], rbp
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
mov rcx, rsi
call fcn.14004d43e
lea r12, [rsp + 0x250]
mov rcx, rsi
mov rdx, r12
call fcn.14004d7ec
lea rdx, str.__initial_client_data
lea rsi, [rsp + 0x78]
mov rcx, rsi
call fcn.14000299e
movzx r8d, byte [r12]
test r8b, 1
je 0x1400ba2a5
mov r8, qword [rsp + 0x258]
mov rdx, qword [rsp + 0x260]
jmp 0x1400ba2b0
mov ecx, 2
call fcn.14002dd00
xor esi, esi
test al, al
je 0x1400ba95b
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x318]
mov rcx, rsi
mov r8d, 0x18d
mov r9d, 2
call fcn.14002ecb0
lea rcx, [rsp + 0x328]
lea rdx, [0x140179e38]
mov r8d, 0xb
call fcn.140001e21
mov rcx, rsi
call fcn.14002eda0
xor esi, esi
jmp 0x1400ba95b
shr r8, 1
lea rdx, [rsp + 0x251]
mov rcx, rsi
call fcn.14002268e
mov rcx, qword [rax + 0x10]
lea rbp, [rsp + 0xa1]
mov qword [rbp + 0xf], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rbp - 1], xmm0
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov qword [rax + 0x10], 0
movzx eax, byte [rbp - 1]
mov rcx, rax
shr rcx, 1
test al, 1
mov rax, qword [rbp + 0xf]
cmove rax, rbp
lea rdx, [rsp + 0x2c0]
mov qword [rdx], rax
cmovne rcx, qword [rbp + 7]
mov qword [rdx + 8], rcx
lea rsi, [rsp + 0x318]
mov rcx, rsi
call fcn.140039f10
lea rdx, [rsp + 0x4b0]
mov rcx, rsi
call fcn.1400df150
test byte [rsi], 1
je 0x1400ba337
mov rcx, qword [rsp + 0x328]
call fcn.1401321e4
test byte [rsp + 0xa0], 1
je 0x1400ba34e
mov rcx, qword [rsp + 0xb0]
call fcn.1401321e4
test byte [rsp + 0x78], 1
je 0x1400ba362
mov rcx, qword [rsp + 0x88]
call fcn.1401321e4
test byte [rsp + 0x250], 1
je 0x1400ba379
mov rcx, qword [rsp + 0x260]
call fcn.1401321e4
xorps xmm7, xmm7
movaps xmmword [rsp + 0x280], xmm7
movaps xmmword [rsp + 0x2b0], xmm7
movaps xmmword [rsp + 0x2a0], xmm7
movaps xmmword [rsp + 0x290], xmm7
movaps xmmword [rsp + 0x270], xmm7
movaps xmmword [rsp + 0x260], xmm7
movaps xmmword [rsp + 0x250], xmm7
mov dword [rsp + 0x28c], 0x100
mov rsi, qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov ecx, 0xfffffff6
call rsi
mov qword [rsp + 0x2a0], rax
mov ecx, 0xfffffff5
call rsi
mov qword [rsp + 0x2a8], rax
mov ecx, 0xfffffff4
call rsi
mov qword [rsp + 0x2b0], rax
xor eax, eax
mov qword [rsp + 0x240], rax
movaps xmmword [rsp + 0x230], xmm7
movaps xmmword [rsp + 0x210], xmm6
mov qword [rsp + 0x220], rbx
lea rcx, [0x140179fa0]
mov qword [rsp + 0x210], rcx
mov qword [rsp + 0x218], rax
mov byte [rsp + 0x220], 0
mov eax, dword [0x1401b9ed0]
mov ecx, dword [0x1401b7730]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400bb008
mov eax, dword [0x1401b9ee0]
mov ecx, dword [0x1401b7730]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400bb04f
mov rbp, qword [0x1401b9ec8]
test rbp, rbp
je 0x1400ba522
cmp qword [0x1401b9ed8], 0
je 0x1400ba522
mov dword [rsp + 0x250], 0x70
lea r9, [rsp + 0xa0]
mov qword [r9], rbx
xor ecx, ecx
mov edx, 1
xor r8d, r8d
call rbp
test eax, eax
je 0x1400ba560
mov ecx, 2
call fcn.14002dd00
test al, al
je 0x1400ba922
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x318]
mov rcx, rsi
mov r8d, 0x1be
mov r9d, 2
call fcn.14002dda0
lea rcx, [rsp + 0x328]
lea rdx, str.InitializeProcThreadAttributeList__size__succeeded__expected_failure
mov r8d, 0x44
call fcn.140001e21
mov rcx, rsi
call fcn.14002e260
jmp 0x1400ba922
mov dword [rsp + 0x250], 0x68
xor r14d, r14d
xor edi, edi
mov rdx, qword [r13]
movzx r8d, byte [rdx]
test r8b, 1
jne 0x1400ba54e
cmp r8b, 0x18
jb 0x1400ba559
shr r8, 1
jmp 0x1400ba61c
cmp qword [rdx + 8], 0xc
jae 0x1400ba618
xor esi, esi
jmp 0x1400ba680
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x1400ba8c6
lea rsi, [rsp + 0xa0]
mov rcx, qword [rsi]
call fcn.14013221c
mov r14, rax
mov qword [rsp + 0x2b8], rax
mov rcx, rax
mov edx, 1
xor r8d, r8d
mov r9, rsi
call qword [0x1401b9ec8]
test eax, eax
je 0x1400ba9d1
movabs r15, 0x1fffffffffffffff
lea rsi, [rsp + 0x210]
mov rcx, rsi
call fcn.1400bb9c6
mov rax, qword [rsp + 0x2b8]
mov qword [rsi + 8], rax
lea rsi, [rsp + 0x230]
mov edx, 8
mov rcx, rsi
call fcn.1400bb6ee
mov rdi, qword [rsi + 8]
mov rbp, qword [rsi + 0x10]
cmp rdi, rbp
mov qword [rsp + 0x58], r13
je 0x1400baa29
mov rax, qword [0x1401b48d8]
mov qword [rdi], rax
add rdi, 8
mov qword [rsp + 0x238], rdi
mov rbp, rdi
mov rdx, r15
jmp 0x1400bab16
mov r8, qword [rdx + 8]
add r8, 0xfffffffffffffff4
lea rax, [rdx + 0x18]
mov qword [rsp + 0x20], rax
lea rsi, [rsp + 0x318]
mov rcx, rsi
mov r9, 0xffffffffffffffff
call fcn.140022ed2
test byte [rsi], 1
je 0x1400ba64f
mov rcx, qword [rsp + 0x328]
jmp 0x1400ba657
lea rcx, [rsp + 0x31a]
lea rdx, str.rundll32.exe
call fcn.140148338
test eax, eax
sete sil
test byte [rsp + 0x318], 1
je 0x1400ba680
mov rcx, qword [rsp + 0x328]
call fcn.1401321e4
mov qword [rsp + 0x200], rbx
movaps xmmword [rsp + 0x1f0], xmm6
test byte [rsp + 0x4b0], 1
je 0x1400ba6a4
mov rdx, qword [rsp + 0x4c0]
jmp 0x1400ba6ac
lea rdx, [rsp + 0x4b2]
test sil, sil
je 0x1400ba6b5
xor ecx, ecx
jmp 0x1400ba6c8
mov rcx, qword [r13]
test byte [rcx], 1
jne 0x1400ba6c4
add rcx, 2
jmp 0x1400ba6c8
mov rcx, qword [rcx + 0x10]
lea rax, [rsp + 0x1f0]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x40], r12
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], 1
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x1400ba77c
mov rcx, qword [rsp + 0x1f8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, eax
mov ecx, 1
call fcn.14002dd00
mov ebx, eax
test esi, esi
jne 0x1400ba7e3
test bl, bl
je 0x1400ba7e3
lea rsi, [rsp + 0x318]
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
mov rcx, rsi
mov r8d, 0x20e
mov r9d, 1
call fcn.14002ecb0
lea rcx, [rsp + 0x328]
lea rdx, str.CloseHandle_thread
mov r8d, 0x12
call fcn.140001e21
mov rcx, rsi
call fcn.14002eda0
test bl, bl
jmp 0x1400ba7ed
mov ecx, 2
call fcn.14002dd00
xor esi, esi
test al, al
je 0x1400ba927
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x318]
mov rcx, rsi
mov r8d, 0x209
mov r9d, 2
call fcn.14002ecb0
lea rcx, [rsp + 0x328]
lea rdx, str.CreateProcess
mov r8d, 0xd
call fcn.140001e21
mov rcx, rsi
call fcn.14002eda0
jmp 0x1400ba925
test esi, esi
sete al
and bl, al
cmp bl, 1
mov rcx, qword [rsp + 0x1f0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, eax
mov ecx, 1
call fcn.14002dd00
mov ebx, eax
test esi, esi
jne 0x1400ba863
test bl, bl
je 0x1400ba863
lea rsi, [rsp + 0xa0]
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
mov rcx, rsi
mov r8d, 0x211
mov r9d, 1
call fcn.14002ecb0
lea rcx, [rsp + 0xb0]
lea rdx, str.CloseHandle_process
mov r8d, 0x13
call fcn.140001e21
mov rcx, rsi
call fcn.14002eda0
test bl, bl
jmp 0x1400ba86d
test esi, esi
sete al
and bl, al
cmp bl, 1
mov ecx, 0xc0
add rcx, qword [r13]
lea rsi, [rsp + 0x78]
mov qword [rsi], 0xffffffffffffffff
mov rdx, rsi
call fcn.1400bb2ba
xorps xmm0, xmm0
movups xmmword [rsi + 0x14], xmm0
movups xmmword [rsi + 4], xmm0
mov dword [rsi], 2
lea r8, [rsp + 0x68]
mov dword [r8 + 8], 0
mov qword [r8], 0
mov ecx, 0xa8
add rcx, qword [r13]
lea rdx, [rsp + 0x78]
call fcn.1400de7ac
mov esi, eax
jmp 0x1400ba927
mov ecx, 2
call fcn.14002dd00
test al, al
je 0x1400ba922
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x318]
mov rcx, rsi
mov r8d, 0x1c2
mov r9d, 2
call fcn.14002ecb0
lea rcx, [rsp + 0x328]
lea rdx, str.InitializeProcThreadAttributeList__size_
mov r8d, 0x28
call fcn.140001e21
mov rcx, rsi
call fcn.14002eda0
xor r14d, r14d
xor esi, esi
lea rcx, [rsp + 0x210]
call fcn.1400bb8de
test r14, r14
je 0x1400ba941
mov rcx, r14
call fcn.140132224
mov rcx, qword [rsp + 0x230]
test rcx, rcx
je 0x1400ba95b
mov qword [rsp + 0x238], rcx
call fcn.1401321e4
lea rcx, [rsp + 0x460]
call fcn.1400b9546
test byte [rsp + 0x4b0], 1
je 0x1400ba97f
mov rcx, qword [rsp + 0x4c0]
call fcn.1401321e4
cmp sil, 1
mov eax, 1
adc rax, 0
mov qword [0x1401b9ec0], rax
mov rcx, r13
call fcn.1400bb4b2
mov rcx, qword [rsp + 0x4c8]
xor rcx, rsp
call fcn.140132550
mov eax, esi
movaps xmm6, xmmword [rsp + 0x4d0]
movaps xmm7, xmmword [rsp + 0x4e0]
add rsp, 0x4f8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov ecx, 2
call fcn.14002dd00
test al, al
je 0x1400ba925
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x318]
mov rcx, rsi
mov r8d, 0x1cd
mov r9d, 2
call fcn.14002ecb0
lea rcx, [rsp + 0x328]
lea rdx, [0x140179f09]
mov r8d, 0x21
jmp 0x1400ba7d1
mov rsi, qword [rsp + 0x230]
sub rdi, rsi
mov r13, rdi
sar r13, 3
lea rax, [r13 + 1]
cmp rax, r15
ja 0x1400bb0a4
mov rdx, r15
sub rbp, rsi
mov rcx, rbp
sar rcx, 3
sar rbp, 2
cmp rbp, rax
cmovb rbp, rax
movabs rax, 0xfffffffffffffff
cmp rcx, rax
cmovae rbp, r15
test rbp, rbp
mov r15, rsi
je 0x1400baa9e
cmp rbp, rdx
ja 0x1400bb0b1
lea rcx, [rbp*8]
call fcn.1401321a8
mov rsi, rax
movabs rdx, 0x1fffffffffffffff
jmp 0x1400baaa0
xor esi, esi
lea rcx, [rsi + rbp*8]
mov rax, qword [0x1401b48d8]
lea rbp, [rsi + r13*8]
add rbp, 8
mov qword [rbp - 8], rax
test rdi, rdi
jle 0x1400baada
mov r13, rcx
mov rcx, rsi
mov rdx, r15
mov r8, rdi
call fcn.140135640
mov rcx, r13
movabs rdx, 0x1fffffffffffffff
mov qword [rsp + 0x230], rsi
mov qword [rsp + 0x238], rbp
mov qword [rsp + 0x240], rcx
test r15, r15
mov r13, qword [rsp + 0x58]
je 0x1400bab16
mov rcx, r15
call fcn.1401321e4
movabs rdx, 0x1fffffffffffffff
mov rbp, qword [rsp + 0x238]
mov rsi, qword [rsp + 0x240]
cmp rbp, rsi
je 0x1400bab3f
mov rax, qword [0x1401b48e0]
mov qword [rbp], rax
add rbp, 8
mov qword [rsp + 0x238], rbp
jmp 0x1400bac24
mov r15, qword [rsp + 0x230]
sub rsi, r15
mov rbp, rsi
sar rbp, 3
lea rax, [rbp + 1]
cmp rax, rdx
ja 0x1400bb0a4
mov rdi, rsi
sar rdi, 2
cmp rdi, rax
cmovb rdi, rax
movabs rax, 0xfffffffffffffff
cmp rbp, rax
cmovae rdi, rdx
test rdi, rdi
je 0x1400baba7
cmp rdi, rdx
ja 0x1400bb0b1
lea rcx, [rdi*8]
call fcn.1401321a8
mov r13, rax
movabs rdx, 0x1fffffffffffffff
jmp 0x1400babaa
xor r13d, r13d
lea rdi, [rdi*8]
add rdi, r13
mov rax, qword [0x1401b48e0]
lea rbp, [rbp*8 + 8]
add rbp, r13
mov qword [rbp - 8], rax
test rsi, rsi
jle 0x1400babe8
mov rcx, r13
mov rdx, r15
mov r8, rsi
call fcn.140135640
movabs rdx, 0x1fffffffffffffff
mov qword [rsp + 0x230], r13
mov qword [rsp + 0x238], rbp
mov qword [rsp + 0x240], rdi
test r15, r15
mov r13, qword [rsp + 0x58]
je 0x1400bac24
mov rcx, r15
call fcn.1401321e4
movabs rdx, 0x1fffffffffffffff
mov rbp, qword [rsp + 0x238]
mov rsi, qword [rsp + 0x240]
cmp rbp, rsi
je 0x1400bac4d
mov rax, qword [0x1401b48e8]
mov qword [rbp], rax
add rbp, 8
mov qword [rsp + 0x238], rbp
jmp 0x1400bad32
mov r15, qword [rsp + 0x230]
sub rsi, r15
mov rbp, rsi
sar rbp, 3
lea rax, [rbp + 1]
cmp rax, rdx
ja 0x1400bb0a4
mov rdi, rsi
sar rdi, 2
cmp rdi, rax
cmovb rdi, rax
movabs rax, 0xfffffffffffffff
cmp rbp, rax
cmovae rdi, rdx
test rdi, rdi
je 0x1400bacb5
cmp rdi, rdx
ja 0x1400bb0b1
lea rcx, [rdi*8]
call fcn.1401321a8
mov r13, rax
movabs rdx, 0x1fffffffffffffff
jmp 0x1400bacb8
xor r13d, r13d
lea rdi, [rdi*8]
add rdi, r13
mov rax, qword [0x1401b48e8]
lea rbp, [rbp*8 + 8]
add rbp, r13
mov qword [rbp - 8], rax
test rsi, rsi
jle 0x1400bacf6
mov rcx, r13
mov rdx, r15
mov r8, rsi
call fcn.140135640
movabs rdx, 0x1fffffffffffffff
mov qword [rsp + 0x230], r13
mov qword [rsp + 0x238], rbp
mov qword [rsp + 0x240], rdi
test r15, r15
mov r13, qword [rsp + 0x58]
je 0x1400bad32
mov rcx, r15
call fcn.1401321e4
movabs rdx, 0x1fffffffffffffff
mov rbp, qword [rsp + 0x238]
mov r13, qword [r13]
mov r15, qword [rsp + 0x240]
cmp rbp, r15
je 0x1400bad64
mov rax, qword [r13 + 0xc8]
mov qword [rbp], rax
add rbp, 8
mov qword [rsp + 0x238], rbp
mov r13, qword [rsp + 0x58]
jmp 0x1400bae4e
mov r8, qword [rsp + 0x230]
sub r15, r8
mov rbp, r15
sar rbp, 3
lea rax, [rbp + 1]
cmp rax, rdx
ja 0x1400bb0a4
mov rdi, r15
sar rdi, 2
cmp rdi, rax
cmovb rdi, rax
movabs rax, 0xfffffffffffffff
cmp rbp, rax
cmovae rdi, rdx
test rdi, rdi
je 0x1400badd6
mov qword [rsp + 0x60], r8
cmp rdi, rdx
ja 0x1400bb0b1
lea rcx, [rdi*8]
call fcn.1401321a8
mov rsi, rax
movabs rdx, 0x1fffffffffffffff
mov r8, qword [rsp + 0x60]
jmp 0x1400badd8
xor esi, esi
lea rdi, [rsi + rdi*8]
mov rax, qword [r13 + 0xc8]
lea rbp, [rsi + rbp*8]
add rbp, 8
mov qword [rbp - 8], rax
test r15, r15
jle 0x1400bae12
mov rcx, rsi
mov rdx, r8
mov r13, r8
mov r8, r15
call fcn.140135640
mov r8, r13
movabs rdx, 0x1fffffffffffffff
mov qword [rsp + 0x230], rsi
mov qword [rsp + 0x238], rbp
mov qword [rsp + 0x240], rdi
test r8, r8
mov r13, qword [rsp + 0x58]
je 0x1400bae4e
mov rcx, r8
call fcn.1401321e4
movabs rdx, 0x1fffffffffffffff
mov rbp, qword [rsp + 0x238]
mov rsi, qword [rsp + 0x240]
cmp rbp, rsi
je 0x1400bae78
mov rax, qword [rsp + 0x468]
mov qword [rbp], rax
add rbp, 8
mov qword [rsp + 0x238], rbp
jmp 0x1400baf3d
mov r15, qword [rsp + 0x230]
sub rsi, r15
mov r13, rsi
sar r13, 3
lea rax, [r13 + 1]
cmp rax, rdx
ja 0x1400bb0a4
mov rdi, rsi
sar rdi, 2
cmp rdi, rax
cmovb rdi, rax
movabs rax, 0xfffffffffffffff
cmp r13, rax
cmovae rdi, rdx
test rdi, rdi
je 0x1400baed6
cmp rdi, rdx
ja 0x1400bb0b1
lea rcx, [rdi*8]
call fcn.1401321a8
mov rbp, rax
jmp 0x1400baed8
xor ebp, ebp
lea rcx, [rdi*8]
add rcx, rbp
mov rax, qword [rsp + 0x468]
lea rdi, [r13*8 + 8]
add rdi, rbp
mov qword [rdi - 8], rax
test rsi, rsi
jle 0x1400baf13
mov r13, rcx
mov rcx, rbp
mov rdx, r15
mov r8, rsi
call fcn.140135640
mov rcx, r13
mov qword [rsp + 0x230], rbp
mov qword [rsp + 0x238], rdi
mov qword [rsp + 0x240], rcx
test r15, r15
mov r13, qword [rsp + 0x58]
je 0x1400baf3d
mov rcx, r15
call fcn.1401321e4
mov rdx, qword [rsp + 0x2a0]
lea rsi, [rsp + 0x230]
mov rcx, rsi
call fcn.1400bb78b
mov rdx, qword [rsp + 0x2a8]
mov rcx, rsi
call fcn.1400bb78b
mov rdx, qword [rsp + 0x2b0]
mov rcx, rsi
call fcn.1400bb78b
mov r9, qword [rsi]
mov rax, qword [rsi + 8]
sub rax, r9
mov rcx, qword [rsp + 0x2b8]
xorps xmm0, xmm0
movups xmmword [rsp + 0x28], xmm0
mov qword [rsp + 0x20], rax
mov r8d, 0x20002
xor edx, edx
call qword [0x1401b9ed8]
test eax, eax
je 0x1400bafb0
mov edi, 0x80000
jmp 0x1400ba532
mov ecx, 2
call fcn.14002dd00
test al, al
je 0x1400ba925
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x318]
mov rcx, rsi
mov r8d, 0x1e7
mov r9d, 2
call fcn.14002ecb0
lea rcx, [rsp + 0x328]
lea rdx, [0x140179f2b]
mov r8d, 0x19
jmp 0x1400ba7d1
lea rcx, [0x1401b9ed0]
call fcn.140132300
cmp dword [0x1401b9ed0], 0xffffffff
jne 0x1400ba459
lea rcx, [0x14016bf08]
lea rdx, str.::InitializeProcThreadAttributeList
xor r8d, r8d
call fcn.1400df2cc
mov qword [0x1401b9ec8], rax
lea rcx, [0x1401b9ed0]
call fcn.140132398
jmp 0x1400ba459
lea rcx, [0x1401b9ee0]
call fcn.140132300
cmp dword [0x1401b9ee0], 0xffffffff
jne 0x1400ba47e
cmp qword [0x1401b9ec8], 0
je 0x1400bb08a
lea rcx, [0x14016bf08]
lea rdx, str.::UpdateProcThreadAttribute
xor r8d, r8d
call fcn.1400df2cc
jmp 0x1400bb08c
xor eax, eax
mov qword [0x1401b9ed8], rax
lea rcx, [0x1401b9ee0]
call fcn.140132398
jmp 0x1400ba47e
lea rcx, [rsp + 0x230]
call fcn.140024440
call fcn.1401457d4
int3