Function at 0x140072240
Capabilities:
Create process on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x348
movaps xmmword [rsp + 0x330], xmm7
movaps xmmword [rsp + 0x320], xmm6
mov r12, rcx
mov rax, qword [0x14021b038]
xor rax, rsp
mov qword [rsp + 0x318], rax
call fcn.140097d10
test al, al
jne 0x1400736bd
xorps xmm0, xmm0
lea rdx, [rsp + 0x300]
movaps xmmword [rdx], xmm0
mov qword [rdx + 0x10], 0
mov rcx, qword [r12]
call fcn.140097d40
mov rsi, qword [r12]
mov rbp, qword [rsi + 0x78]
mov rdi, qword [rsi + 0x80]
cmp rbp, rdi
je 0x14007232d
lea rsi, [rsp + 0x150]
lea r14, [rsp + 0x2f0]
lea rbx, [rsp + 0x300]
movzx eax, byte [rbp + 0x17]
test al, al
mov rcx, qword [rbp]
cmovns rcx, rbp
mov qword [rsp + 0x2f0], rcx
cmovs rax, qword [rbp + 8]
mov qword [rsp + 0x2f8], rax
mov rcx, rsi
mov rdx, r14
call fcn.1400ed8f0
mov rcx, rsi
mov rdx, rbx
call fcn.140097d40
cmp byte [rsp + 0x167], 0
jns 0x140072320
mov rcx, qword [rsp + 0x150]
call fcn.1401109f8
add rbp, 0x18
cmp rdi, rbp
jne 0x1400722d0
mov rsi, qword [r12]
movzx eax, byte [rsi + 0x2f]
test al, al
jns 0x140072339
mov rax, qword [rsi + 0x20]
test rax, rax
jne 0x1400726ae
movzx eax, byte [rsi + 0x47]
test al, al
jns 0x14007234e
mov rax, qword [rsi + 0x38]
test rax, rax
jne 0x140072722
movzx eax, byte [rsi + 0x5f]
test al, al
js 0x140072364
mov rcx, rax
jmp 0x140072368
mov rcx, qword [rsi + 0x50]
test rcx, rcx
jne 0x140072796
mov r14, qword [rsi + 0x60]
lea r13, [rsi + 0x68]
cmp r14, r13
je 0x140072530
mov qword [rsp + 0x58], r12
lea r12, [rsp + 0x2b0]
xorps xmm6, xmm6
lea rbx, [rsp + 0x80]
lea r15, str.annotation
lea rsi, [rsp + 0x290]
lea rdi, [rsp + 0x150]
lea rbp, [rsp + 0x300]
lea rdx, [r14 + 0x20]
mov rcx, r12
mov r8b, 0x3d
call fcn.140144f10
movzx r8d, byte [r14 + 0x4f]
test r8b, r8b
jns 0x1400723dc
mov r8, qword [r14 + 0x40]
mov rdx, qword [r14 + 0x38]
jmp 0x1400723e0
lea rdx, [r14 + 0x38]
mov rcx, r12
call fcn.1400e3e70
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x110], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x100], xmm0
movups xmmword [rax], xmm6
mov qword [rax + 0x10], 0
movzx eax, byte [rsp + 0x117]
test al, al
mov rcx, qword [rsp + 0x100]
lea rdx, [rsp + 0x100]
cmovns rcx, rdx
mov qword [rsp + 0x2d0], rcx
cmovs rax, qword [rsp + 0x108]
mov qword [rsp + 0x2d8], rax
mov rcx, rbx
lea rdx, [rsp + 0x2d0]
call fcn.1400ed8f0
mov rcx, rsi
mov rdx, r15
call fcn.1401416d0
mov rcx, rdi
mov rdx, rsi
mov r8, rbx
call fcn.140073be0
mov rcx, rdi
mov rdx, rbp
call fcn.140097d40
cmp byte [rsp + 0x167], 0
jns 0x14007248c
mov rcx, qword [rsp + 0x150]
call fcn.1401109f8
cmp byte [rsp + 0x2a7], 0
jns 0x1400724a3
mov rcx, qword [rsp + 0x290]
call fcn.1401109f8
cmp byte [rsp + 0x97], 0
jns 0x1400724ba
mov rcx, qword [rsp + 0x80]
call fcn.1401109f8
cmp byte [rsp + 0x117], 0
jns 0x1400724d1
mov rcx, qword [rsp + 0x100]
call fcn.1401109f8
cmp byte [rsp + 0x2c7], 0
jns 0x1400724e8
mov rcx, qword [rsp + 0x2b0]
call fcn.1401109f8
mov rcx, qword [r14 + 8]
test rcx, rcx
je 0x1400724fe
mov rax, rcx
mov rcx, qword [rcx]
test rcx, rcx
jne 0x1400724f1
jmp 0x14007251b
mov rax, qword [r14 + 0x10]
cmp qword [rax], r14
je 0x14007251b
add r14, 0x10
mov rcx, qword [r14]
lea r14, [rcx + 0x10]
mov rax, qword [rcx + 0x10]
cmp qword [rax], rcx
jne 0x14007250b
mov r14, rax
cmp rax, r13
jne 0x1400723b9
mov r12, qword [rsp + 0x58]
mov rsi, qword [r12]
mov rdi, qword [rsi + 0x90]
mov rsi, qword [rsi + 0x98]
cmp rdi, rsi
je 0x1400725bd
lea r14, [0x1401f5ff1]
lea rbx, [rsp + 0x80]
lea rbp, [rsp + 0x150]
lea r15, [rsp + 0x300]
mov rcx, rbx
mov rdx, r14
call fcn.1401416d0
mov rcx, rbp
mov rdx, rbx
mov r8, rdi
call fcn.140073be0
mov rcx, rbp
mov rdx, r15
call fcn.140097d40
cmp byte [rsp + 0x167], 0
jns 0x14007259d
mov rcx, qword [rsp + 0x150]
call fcn.1401109f8
cmp byte [rsp + 0x97], 0
jns 0x1400725b4
mov rcx, qword [rsp + 0x80]
call fcn.1401109f8
add rdi, 0x18
cmp rsi, rdi
jne 0x140072562
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, 0x1f0fff
mov edx, 1
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
jne 0x14007284c
mov ecx, 2
call fcn.1400e83a0
xor esi, esi
mov ebx, 0
test al, al
je 0x140072646
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x150]
mov rcx, rsi
mov r8d, 0x18c
mov r9d, 2
call fcn.14015f200
lea rcx, [rsp + 0x160]
lea rdx, [0x1401f5ffc]
mov r8d, ntohl
call fcn.1400dd7e0
mov rcx, rsi
call fcn.14015f280
xor esi, esi
xor ebx, ebx
cmp byte [rsp + 0x317], 0
jns 0x14007265d
mov rcx, qword [rsp + 0x300]
call fcn.1401109f8
cmp bl, 1
mov eax, 1
adc rax, 0
mov qword [0x140221f30], rax
mov rcx, r12
call fcn.140073a80
mov rcx, qword [rsp + 0x318]
xor rcx, rsp
call fcn.140111870
mov eax, esi
movaps xmm6, xmmword [rsp + 0x320]
movaps xmm7, xmmword [rsp + 0x330]
add rsp, 0x348
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
add rsi, 0x18
lea rdx, str.database
lea rdi, [rsp + 0x80]
mov rcx, rdi
call fcn.1401416d0
lea rbx, [rsp + 0x150]
mov rcx, rbx
mov rdx, rdi
mov r8, rsi
call fcn.140073be0
lea rdx, [rsp + 0x300]
mov rcx, rbx
call fcn.140097d40
cmp byte [rbx + 0x17], 0
jns 0x140072702
mov rcx, qword [rsp + 0x150]
call fcn.1401109f8
cmp byte [rsp + 0x97], 0
jns 0x140072719
mov rcx, qword [rsp + 0x80]
call fcn.1401109f8
mov rsi, qword [r12]
jmp 0x140072342
add rsi, 0x30
lea rdx, str.metrics_dir
lea rdi, [rsp + 0x80]
mov rcx, rdi
call fcn.1401416d0
lea rbx, [rsp + 0x150]
mov rcx, rbx
mov rdx, rdi
mov r8, rsi
call fcn.140073be0
lea rdx, [rsp + 0x300]
mov rcx, rbx
call fcn.140097d40
cmp byte [rbx + 0x17], 0
jns 0x140072776
mov rcx, qword [rsp + 0x150]
call fcn.1401109f8
cmp byte [rsp + 0x97], 0
jns 0x14007278d
mov rcx, qword [rsp + 0x80]
call fcn.1401109f8
mov rsi, qword [r12]
jmp 0x140072357
lea rcx, [rsi + 0x48]
test al, al
cmovs rcx, qword [rsi + 0x48]
lea rdx, [rsp + 0x2e0]
mov qword [rdx], rcx
cmovs rax, qword [rsi + 0x50]
mov qword [rdx + 8], rax
lea rsi, [rsp + 0x80]
mov rcx, rsi
call fcn.1400ed8f0
lea rdx, [0x1401f5fe2]
lea rdi, [rsp + 0x100]
mov rcx, rdi
call fcn.1401416d0
lea rbx, [rsp + 0x150]
mov rcx, rbx
mov rdx, rdi
mov r8, rsi
call fcn.140073be0
lea rdx, [rsp + 0x300]
mov rcx, rbx
call fcn.140097d40
cmp byte [rbx + 0x17], 0
jns 0x140072815
mov rcx, qword [rsp + 0x150]
call fcn.1401109f8
cmp byte [rsp + 0x117], 0
jns 0x14007282c
mov rcx, qword [rsp + 0x100]
call fcn.1401109f8
cmp byte [rsp + 0x97], 0
jns 0x140072843
mov rcx, qword [rsp + 0x80]
call fcn.1401109f8
mov rsi, qword [r12]
jmp 0x140072371
mov rdi, rax
movabs r14, 0xaaaaaaaaaaaaaaaa
lea rbx, [rsp + 0x100]
mov qword [rbx + 0x40], r14
movaps xmm6, xmmword [0x1401e90c0]
movaps xmmword [rbx + 0x30], xmm6
movaps xmmword [rbx + 0x20], xmm6
movaps xmmword [rbx + 0x10], xmm6
movaps xmmword [rbx], xmm6
mov qword [rsp + 0x58], r12
mov rax, qword [r12]
mov rax, qword [rax + 0xc8]
mov r9, qword [0x14021d788]
mov r8, qword [0x14021d780]
mov rdx, qword [0x14021d778]
lea rcx, [0x140221f00]
mov qword [rsp + 0x40], rcx
lea rcx, [0x140221ef0]
mov qword [rsp + 0x38], rcx
lea rcx, [0x140221ee0]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rax
mov rcx, rbx
call fcn.140097ed0
lea rsi, [rsp + 0x2b0]
mov rcx, rbx
mov rdx, rsi
call fcn.1400982e0
lea rdx, str.__initial_client_data
lea r15, [rsp + 0x290]
mov rcx, r15
call fcn.1401416d0
movzx r8d, byte [rsi + 0x17]
test r8b, r8b
jns 0x14007291a
mov r8, qword [rsp + 0x2b8]
mov rsi, qword [rsp + 0x2b0]
mov rcx, r15
mov rdx, rsi
call fcn.1400e3e70
mov rcx, qword [rax + 0x10]
lea r12, [rsp + 0x80]
mov qword [r12 + 0x10], rcx
movups xmm0, xmmword [rax]
movaps xmmword [r12], xmm0
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov qword [rax + 0x10], 0
movzx eax, byte [r12 + 0x17]
test al, al
mov rcx, qword [r12]
cmovns rcx, r12
lea rdx, [rsp + 0xf0]
mov qword [rdx], rcx
cmovs rax, qword [r12 + 8]
mov qword [rdx + 8], rax
lea rbx, [rsp + 0x150]
mov rcx, rbx
call fcn.1400ed8f0
lea r13, [rsp + 0x300]
mov rcx, rbx
mov rdx, r13
call fcn.140097d40
cmp byte [rbx + 0x17], 0
jns 0x1400729a7
mov rcx, qword [rsp + 0x150]
call fcn.1401109f8
cmp byte [rsp + 0x97], 0
jns 0x1400729be
mov rcx, qword [rsp + 0x80]
call fcn.1401109f8
cmp byte [rsp + 0x2a7], 0
jns 0x1400729d5
mov rcx, qword [rsp + 0x290]
call fcn.1401109f8
cmp byte [rsp + 0x2c7], 0
jns 0x1400729ec
mov rcx, qword [rsp + 0x2b0]
call fcn.1401109f8
xorps xmm7, xmm7
movaps xmmword [rsp + 0xb0], xmm7
movaps xmmword [rsp + 0xe0], xmm7
movaps xmmword [rsp + 0xd0], xmm7
movaps xmmword [rsp + 0xc0], xmm7
movaps xmmword [rsp + 0xa0], xmm7
movaps xmmword [rsp + 0x90], xmm7
movaps xmmword [rsp + 0x80], xmm7
mov dword [rsp + 0xbc], 0x100
mov rsi, qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov ecx, 0xfffffff6
call rsi
mov qword [rsp + 0xd0], rax
mov ecx, 0xfffffff5
call rsi
mov qword [rsp + 0xd8], rax
mov ecx, 0xfffffff4
call rsi
mov qword [rsp + 0xe0], rax
movaps xmmword [rsp + 0x2b0], xmm7
mov qword [rsp + 0x2c0], 0
mov eax, dword [0x140221f40]
mov ecx, dword [0x14021ef3c]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14007360f
mov eax, dword [0x140221f50]
mov ecx, dword [0x14021ef3c]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140073656
mov rbp, qword [0x140221f38]
test rbp, rbp
je 0x140072b68
cmp qword [0x140221f48], 0
je 0x140072b68
mov dword [rsp + 0x80], 0x70
lea r9, [rsp + 0x290]
mov qword [r9], r14
xor ecx, ecx
mov edx, 1
xor r8d, r8d
call rbp
test eax, eax
je 0x140072ba6
mov ecx, 2
call fcn.1400e83a0
test al, al
je 0x140072ff7
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x150]
mov rcx, rsi
mov r8d, 0x1bd
mov r9d, 2
call fcn.14004a130
lea rcx, [rsp + 0x160]
lea rdx, str.InitializeProcThreadAttributeList__size__succeeded__expected_failure
mov r8d, 0x44
call fcn.1400dd7e0
mov rcx, rsi
call fcn.14004a5c0
jmp 0x140072ff7
mov dword [rsp + 0x80], 0x68
xor ebp, ebp
xor esi, esi
mov rax, qword [rsp + 0x58]
mov rdx, qword [rax]
movzx r8d, byte [rdx + 0x17]
test r8b, r8b
js 0x140072b94
cmp r8b, 0xc
jb 0x140072b9f
jmp 0x140072c98
cmp qword [rdx + 8], 0xc
jae 0x140072c94
xor ebx, ebx
jmp 0x140072cf1
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x140072f9b
lea rsi, [rsp + 0x290]
mov rcx, qword [rsi]
call fcn.140110a2c
mov rbp, rax
mov qword [rsp + 0xe8], rax
mov rcx, rax
mov edx, 1
xor r8d, r8d
mov r9, rsi
call qword [0x140221f38]
test eax, eax
je 0x140073027
mov qword [rsp + 0x68], rbp
mov r14, qword [rsp + 0x2b0]
mov r15, qword [rsp + 0x2c0]
mov rax, r15
sub rax, r14
sar rax, 3
cmp rax, 7
ja 0x140072c5e
mov rsi, qword [rsp + 0x2b8]
sub rsi, r14
mov ecx, 0x40
call fcn.1401109bc
mov rbp, rax
lea r13, [rax + rsi]
mov r15, rax
add r15, 0x40
test rsi, rsi
jg 0x1400736c0
mov qword [rsp + 0x2b0], rbp
mov qword [rsp + 0x2b8], r13
mov qword [rsp + 0x2c0], r15
test r14, r14
jne 0x1400736d3
movabs r14, 0x1fffffffffffffff
mov rsi, qword [rsp + 0x2b8]
cmp rsi, r15
je 0x140073091
mov rax, qword [0x14021d778]
mov qword [rsi], rax
add rsi, 8
mov qword [rsp + 0x2b8], rsi
jmp 0x140073153
mov r8, qword [rdx + 8]
add r8, 0xfffffffffffffff4
lea rax, [rdx + 0x18]
mov qword [rsp + 0x20], rax
mov rcx, rbx
mov r9, 0xffffffffffffffff
call fcn.140032520
cmp byte [rsp + 0x167], 0
jns 0x140072cc6
mov rbx, qword [rsp + 0x150]
lea rdx, str.rundll32.exe
mov rcx, rbx
call fcn.1401273f0
test eax, eax
sete bl
cmp byte [rsp + 0x167], 0
jns 0x140072cf1
mov rcx, qword [rsp + 0x150]
call fcn.1401109f8
mov qword [rsp + 0x2a0], r14
movaps xmmword [rsp + 0x290], xmm6
cmp byte [rsp + 0x317], 0
jns 0x140072d13
mov r13, qword [rsp + 0x300]
test bl, bl
je 0x140072d1b
xor ecx, ecx
jmp 0x140072d2c
mov rax, qword [rsp + 0x58]
mov rcx, qword [rax]
cmp byte [rcx + 0x17], 0
jns 0x140072d2c
mov rcx, qword [rcx]
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x40], r12
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], 1
mov rdx, r13
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x140072eb3
mov rcx, qword [rsp + 0x298]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, eax
mov ecx, 1
call fcn.1400e83a0
test al, al
mov r12, qword [rsp + 0x58]
je 0x140072dd6
test esi, esi
jne 0x140072dd6
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x150]
mov rcx, rsi
mov r8d, 0x20d
mov r9d, 1
call fcn.14015f200
lea rcx, [rsp + 0x160]
lea rdx, str.CloseHandle_thread
mov r8d, 0x12
call fcn.1400dd7e0
mov rcx, rsi
call fcn.14015f280
mov rcx, qword [rsp + 0x290]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, eax
mov ecx, 1
call fcn.1400e83a0
test al, al
je 0x140072e46
test esi, esi
jne 0x140072e46
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x150]
mov rcx, rsi
mov r8d, 0x210
mov r9d, 1
call fcn.14015f200
lea rcx, [rsp + 0x160]
lea rdx, str.CloseHandle_process
mov r8d, 0x13
call fcn.1400dd7e0
mov rcx, rsi
call fcn.14015f280
mov rsi, qword [r12]
mov rcx, qword [rsi + 0xc8]
cmp rcx, 0xffffffffffffffff
je 0x140072e67
call fcn.140097b30
mov qword [rsi + 0xc8], 0xffffffffffffffff
mov qword [rsi + 0xc8], 0xffffffffffffffff
xorps xmm0, xmm0
lea rdx, [rsp + 0x150]
movups xmmword [rdx + 0x14], xmm0
movups xmmword [rdx + 4], xmm0
mov dword [rdx], 2
lea r8, [rsp + 0x70]
mov dword [r8 + 8], 0
mov qword [r8], 0
mov ecx, 0xa8
add rcx, qword [r12]
call fcn.140095180
mov ebx, eax
mov esi, eax
jmp 0x140072f1f
mov ecx, 2
call fcn.1400e83a0
xor ebx, ebx
mov esi, 0
test al, al
mov r12, qword [rsp + 0x58]
je 0x140072f1f
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x150]
mov rcx, rsi
mov r8d, 0x208
mov r9d, 2
call fcn.14015f200
lea rcx, [rsp + 0x160]
lea rdx, str.CreateProcess
mov r8d, ntohl
call fcn.1400dd7e0
mov rcx, rsi
call fcn.14015f280
xor ebx, ebx
xor esi, esi
test rbp, rbp
je 0x140072f8c
mov eax, dword [0x140221f60]
mov ecx, dword [0x14021ef3c]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jle 0x140072f83
lea rcx, [0x140221f60]
call fcn.140110b10
cmp dword [0x140221f60], 0xffffffff
jne 0x140072f83
lea rcx, [0x1401ef616]
lea rdx, str.::DeleteProcThreadAttributeList
mov r8b, 1
call fcn.140098380
mov qword [0x140221f58], rax
lea rcx, [0x140221f60]
call fcn.140110ba8
mov rcx, rbp
call qword [0x140221f58]
test rbp, rbp
je 0x140073000
mov rcx, rbp
call fcn.140110a34
jmp 0x140073000
mov ecx, 2
call fcn.1400e83a0
test al, al
je 0x140072ff7
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x150]
mov rcx, rsi
mov r8d, 0x1c1
mov r9d, 2
call fcn.14015f200
lea rcx, [rsp + 0x160]
lea rdx, str.InitializeProcThreadAttributeList__size_
mov r8d, 0x28
call fcn.1400dd7e0
mov rcx, rsi
call fcn.14015f280
xor ebx, ebx
xor esi, esi
mov r12, qword [rsp + 0x58]
mov rcx, qword [rsp + 0x2b0]
test rcx, rcx
je 0x14007301a
mov qword [rsp + 0x2b8], rcx
call fcn.1401109f8
mov rcx, rdi
call fcn.140097b40
jmp 0x140072646
mov ecx, 2
call fcn.1400e83a0
test al, al
je 0x140073083
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x150]
mov rcx, rsi
mov r8d, 0x1cc
mov r9d, 2
call fcn.14015f200
lea rcx, [rsp + 0x160]
lea rdx, [0x1401f60cd]
mov r8d, 0x21
call fcn.1400dd7e0
mov rcx, rsi
call fcn.14015f280
xor esi, esi
xor ebx, ebx
mov r12, qword [rsp + 0x58]
jmp 0x140072f8c
mov r13, qword [rsp + 0x2b0]
sub r15, r13
mov rsi, r15
sar rsi, 3
lea rax, [rsi + 1]
cmp rax, r14
ja 0x1400736ab
mov rbp, r15
sar rbp, 2
cmp rbp, rax
cmovb rbp, rax
movabs rax, 0xfffffffffffffff
cmp rsi, rax
cmovae rbp, r14
test rbp, rbp
je 0x1400730ef
cmp rbp, r14
ja 0x1400736b8
lea rcx, [rbp*8]
call fcn.1401109bc
mov r14, rax
jmp 0x1400730f2
xor r14d, r14d
lea rbp, [r14 + rbp*8]
mov rax, qword [0x14021d778]
lea rsi, [r14 + rsi*8]
add rsi, 8
mov qword [rsi - 8], rax
test r15, r15
jle 0x14007311c
mov rcx, r14
mov rdx, r13
mov r8, r15
call fcn.140113df0
mov qword [rsp + 0x2b0], r14
mov qword [rsp + 0x2b8], rsi
mov qword [rsp + 0x2c0], rbp
test r13, r13
movabs r14, 0x1fffffffffffffff
je 0x140073153
mov rcx, r13
call fcn.1401109f8
mov rsi, qword [rsp + 0x2b8]
cmp rsi, qword [rsp + 0x2c0]
je 0x14007317b
mov rax, qword [0x14021d780]
mov qword [rsi], rax
add rsi, 8
mov qword [rsp + 0x2b8], rsi
mov r15, rsi
jmp 0x14007323d
mov r13, qword [rsp + 0x2b0]
sub rsi, r13
mov r15, rsi
sar r15, 3
lea rax, [r15 + 1]
cmp rax, r14
ja 0x1400736ab
mov rbp, rsi
sar rbp, 2
cmp rbp, rax
cmovb rbp, rax
movabs rax, 0xfffffffffffffff
cmp r15, rax
cmovae rbp, r14
test rbp, rbp
je 0x1400731d9
cmp rbp, r14
ja 0x1400736b8
lea rcx, [rbp*8]
call fcn.1401109bc
mov r14, rax
jmp 0x1400731dc
xor r14d, r14d
lea rbp, [r14 + rbp*8]
mov rax, qword [0x14021d780]
lea r15, [r14 + r15*8]
add r15, 8
mov qword [r15 - 8], rax
test rsi, rsi
jle 0x140073206
mov rcx, r14
mov rdx, r13
mov r8, rsi
call fcn.140113df0
mov qword [rsp + 0x2b0], r14
mov qword [rsp + 0x2b8], r15
mov qword [rsp + 0x2c0], rbp
test r13, r13
movabs r14, 0x1fffffffffffffff
je 0x14007323d
mov rcx, r13
call fcn.1401109f8
mov r15, qword [rsp + 0x2b8]
cmp r15, qword [rsp + 0x2c0]
je 0x140073265
mov rax, qword [0x14021d788]
mov qword [r15], rax
add r15, 8
mov qword [rsp + 0x2b8], r15
mov rbp, r15
jmp 0x140073331
mov rax, qword [rsp + 0x2b0]
mov qword [rsp + 0x60], rax
sub r15, rax
mov rsi, r15
sar rsi, 3
lea rax, [rsi + 1]
cmp rax, r14
ja 0x1400736ab
mov rbp, r15
sar rbp, 2
cmp rbp, rax
cmovb rbp, rax
movabs rax, 0xfffffffffffffff
cmp rsi, rax
cmovae rbp, r14
test rbp, rbp
je 0x1400732c8
cmp rbp, r14
ja 0x1400736b8
lea rcx, [rbp*8]
call fcn.1401109bc
mov r14, rax
jmp 0x1400732cb
xor r14d, r14d
lea r13, [r14 + rbp*8]
mov rax, qword [0x14021d788]
lea rbp, [r14 + rsi*8]
add rbp, 8
mov qword [rbp - 8], rax
test r15, r15
mov rsi, qword [rsp + 0x60]
jle 0x1400732fa
mov rcx, r14
mov rdx, rsi
mov r8, r15
call fcn.140113df0
mov qword [rsp + 0x2b0], r14
mov qword [rsp + 0x2b8], rbp
mov qword [rsp + 0x2c0], r13
test rsi, rsi
movabs r14, 0x1fffffffffffffff
je 0x140073331
mov rcx, rsi
call fcn.1401109f8
mov rbp, qword [rsp + 0x2b8]
mov rax, qword [rsp + 0x58]
mov r15, qword [rax]
cmp rbp, qword [rsp + 0x2c0]
je 0x140073362
mov rax, qword [r15 + 0xc8]
mov qword [rbp], rax
add rbp, 8
mov qword [rsp + 0x2b8], rbp
mov r13, rbp
jmp 0x140073434
mov rax, qword [rsp + 0x2b0]
mov qword [rsp + 0x60], rax
sub rbp, rax
mov r13, rbp
sar r13, 3
lea rax, [r13 + 1]
cmp rax, r14
ja 0x1400736ab
mov rsi, rbp
sar rsi, 2
cmp rsi, rax
cmovb rsi, rax
movabs rax, 0xfffffffffffffff
cmp r13, rax
cmovae rsi, r14
test rsi, rsi
je 0x1400733c5
cmp rsi, r14
ja 0x1400736b8
lea rcx, [rsi*8]
call fcn.1401109bc
mov r14, rax
jmp 0x1400733c8
xor r14d, r14d
lea rcx, [r14 + rsi*8]
mov rax, qword [r15 + 0xc8]
lea r13, [r14 + r13*8]
add r13, 8
mov qword [r13 - 8], rax
test rbp, rbp
mov rsi, qword [rsp + 0x60]
jle 0x1400733fd
mov r15, rcx
mov rcx, r14
mov rdx, rsi
mov r8, rbp
call fcn.140113df0
mov rcx, r15
mov qword [rsp + 0x2b0], r14
mov qword [rsp + 0x2b8], r13
mov qword [rsp + 0x2c0], rcx
test rsi, rsi
movabs r14, 0x1fffffffffffffff
je 0x140073434
mov rcx, rsi
call fcn.1401109f8
mov r13, qword [rsp + 0x2b8]
cmp r13, qword [rsp + 0x2c0]
je 0x140073453
mov qword [r13], rdi
add r13, 8
mov qword [rsp + 0x2b8], r13
jmp 0x14007350e
mov rcx, r14
mov r14, qword [rsp + 0x2b0]
sub r13, r14
mov r15, r13
sar r15, 3
lea rax, [r15 + 1]
cmp rax, rcx
ja 0x1400736ab
mov rsi, r13
sar rsi, 2
cmp rsi, rax
cmovb rsi, rax
movabs rax, 0xfffffffffffffff
cmp r15, rax
cmovae rsi, rcx
test rsi, rsi
je 0x1400734b4
cmp rsi, rcx
ja 0x1400736b8
lea rcx, [rsi*8]
call fcn.1401109bc
mov rbp, rax
jmp 0x1400734b6
xor ebp, ebp
lea rax, [rsi*8]
add rax, rbp
lea rsi, [r15*8 + 8]
add rsi, rbp
mov qword [rsi - 8], rdi
test r13, r13
jle 0x1400734e9
mov rcx, rbp
mov rdx, r14
mov r8, r13
mov r15, rax
call fcn.140113df0
mov rax, r15
mov qword [rsp + 0x2b0], rbp
mov qword [rsp + 0x2b8], rsi
mov qword [rsp + 0x2c0], rax
test r14, r14
je 0x14007350e
mov rcx, r14
call fcn.1401109f8
mov rdx, qword [rsp + 0xd0]
lea rsi, [rsp + 0x2b0]
mov rcx, rsi
call fcn.140073d60
mov rdx, qword [rsp + 0xd8]
mov rcx, rsi
call fcn.140073d60
mov rdx, qword [rsp + 0xe0]
mov rcx, rsi
call fcn.140073d60
mov r9, qword [rsi]
mov rax, qword [rsi + 8]
sub rax, r9
mov rcx, qword [rsp + 0xe8]
xorps xmm0, xmm0
movups xmmword [rsp + 0x28], xmm0
mov qword [rsp + 0x20], rax
mov r8d, 0x20002
xor edx, edx
call qword [0x140221f48]
test eax, eax
lea r15, [rsp + 0x290]
lea r13, [rsp + 0x300]
je 0x1400735a0
mov esi, 0x80000
mov rbp, qword [rsp + 0x68]
movabs r14, 0xaaaaaaaaaaaaaaaa
jmp 0x140072b77
mov ecx, 2
call fcn.1400e83a0
test al, al
mov rbp, qword [rsp + 0x68]
je 0x140073601
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x150]
mov rcx, rsi
mov r8d, 0x1e6
mov r9d, 2
call fcn.14015f200
lea rcx, [rsp + 0x160]
lea rdx, [0x1401f60ef]
mov r8d, 0x19
call fcn.1400dd7e0
mov rcx, rsi
call fcn.14015f280
xor ebx, ebx
xor esi, esi
mov r12, qword [rsp + 0x58]
jmp 0x140072f1f
lea rcx, [0x140221f40]
call fcn.140110b10
cmp dword [0x140221f40], 0xffffffff
jne 0x140072a9f
lea rcx, [0x1401ef616]
lea rdx, str.::InitializeProcThreadAttributeList
xor r8d, r8d
call fcn.140098380
mov qword [0x140221f38], rax
lea rcx, [0x140221f40]
call fcn.140110ba8
jmp 0x140072a9f
lea rcx, [0x140221f50]
call fcn.140110b10
cmp dword [0x140221f50], 0xffffffff
jne 0x140072ac4
cmp qword [0x140221f38], 0
je 0x140073691
lea rcx, [0x1401ef616]
lea rdx, str.::UpdateProcThreadAttribute
xor r8d, r8d
call fcn.140098380
jmp 0x140073693
xor eax, eax
mov qword [0x140221f48], rax
lea rcx, [0x140221f50]
call fcn.140110ba8
jmp 0x140072ac4
lea rcx, [rsp + 0x2b0]
call fcn.1401414e0
call fcn.140124830
int3
mov rcx, rbp
mov rdx, r14
mov r8, rsi
call fcn.140113df0
jmp 0x140072c3d
mov rcx, r14
call fcn.1401109f8
mov r15, qword [rsp + 0x2c0]
jmp 0x140072c5e