Function at 0x1400a3744
Capabilities:
Create process on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x338
movaps xmmword [rsp + 0x320], xmm6
mov r12, rcx
mov rax, qword [0x140267e38]
xor rax, rsp
mov qword [rsp + 0x318], rax
xorps xmm0, xmm0
lea rdx, [rsp + 0x300]
movaps xmmword [rdx], xmm0
mov qword [rdx + 0x10], 0
mov rcx, qword [rcx]
call fcn.1400e6078
mov r14, qword [r12]
mov rbp, qword [r14 + 0x78]
mov rdi, qword [r14 + 0x80]
cmp rbp, rdi
je 0x1400a381c
lea rsi, [rsp + 0x158]
lea r14, [rsp + 0x2f0]
lea r15, [rsp + 0x300]
xor ebx, ebx
movzx eax, byte [rbp + 0x17]
test al, al
mov rcx, qword [rbp]
cmovns rcx, rbp
mov qword [rsp + 0x2f0], rcx
cmovs rax, qword [rbp + 8]
mov qword [rsp + 0x2f8], rax
mov rcx, rsi
mov rdx, r14
call fcn.14006f0b0
mov rcx, rsi
mov rdx, r15
call fcn.1400e6078
cmp byte [rsp + 0x16f], bl
jns 0x1400a380f
mov rcx, qword [rsp + 0x158]
call fcn.1401c9f6c
add rbp, 0x18
cmp rdi, rbp
jne 0x1400a37c0
mov r14, qword [r12]
movzx eax, byte [r14 + 0x2f]
test al, al
jns 0x1400a3829
mov rax, qword [r14 + 0x20]
test rax, rax
je 0x1400a389d
add r14, 0x18
lea rdx, str.database
lea rsi, [rsp + 0x90]
mov rcx, rsi
call fcn.140002c8a
lea rbx, [rsp + 0x158]
mov rcx, rbx
mov rdx, rsi
mov r8, r14
call fcn.1400a50f0
lea rdx, [rsp + 0x300]
mov rcx, rbx
call fcn.1400e6078
cmp byte [rbx + 0x17], 0
jns 0x1400a3882
mov rcx, qword [rsp + 0x158]
call fcn.1401c9f6c
cmp byte [rsp + 0xa7], 0
jns 0x1400a3899
mov rcx, qword [rsp + 0x90]
call fcn.1401c9f6c
mov r14, qword [r12]
movzx eax, byte [r14 + 0x47]
test al, al
jns 0x1400a38aa
mov rax, qword [r14 + 0x38]
test rax, rax
je 0x1400a391e
add r14, 0x30
lea rdx, str.metrics_dir
lea rsi, [rsp + 0x90]
mov rcx, rsi
call fcn.140002c8a
lea rbx, [rsp + 0x158]
mov rcx, rbx
mov rdx, rsi
mov r8, r14
call fcn.1400a50f0
lea rdx, [rsp + 0x300]
mov rcx, rbx
call fcn.1400e6078
cmp byte [rbx + 0x17], 0
jns 0x1400a3903
mov rcx, qword [rsp + 0x158]
call fcn.1401c9f6c
cmp byte [rsp + 0xa7], 0
jns 0x1400a391a
mov rcx, qword [rsp + 0x90]
call fcn.1401c9f6c
mov r14, qword [r12]
movzx eax, byte [r14 + 0x5f]
test al, al
js 0x1400a392c
mov rcx, rax
jmp 0x1400a3930
mov rcx, qword [r14 + 0x50]
test rcx, rcx
mov qword [rsp + 0x58], r12
je 0x1400a39f0
lea rcx, [r14 + 0x48]
test al, al
cmovs rcx, qword [r14 + 0x48]
lea rdx, [rsp + 0x2e0]
mov qword [rdx], rcx
cmovs rax, qword [r14 + 0x50]
mov qword [rdx + 8], rax
lea rsi, [rsp + 0x90]
mov rcx, rsi
call fcn.14006f0b0
lea rdx, [0x14021164e]
lea rdi, [rsp + 0x110]
mov rcx, rdi
call fcn.140002c8a
lea rbx, [rsp + 0x158]
mov rcx, rbx
mov rdx, rdi
mov r8, rsi
call fcn.1400a50f0
lea rdx, [rsp + 0x300]
mov rcx, rbx
call fcn.1400e6078
xor eax, eax
cmp byte [rbx + 0x17], al
jns 0x1400a39be
mov rcx, qword [rsp + 0x158]
call fcn.1401c9f6c
cmp byte [rsp + 0x127], 0
jns 0x1400a39d5
mov rcx, qword [rsp + 0x110]
call fcn.1401c9f6c
cmp byte [rsp + 0xa7], 0
jns 0x1400a39ec
mov rcx, qword [rsp + 0x90]
call fcn.1401c9f6c
mov r14, qword [r12]
mov r15, qword [r14 + 0x60]
add r14, 0x68
cmp r14, r15
je 0x1400a3ba0
lea r13, [rsp + 0x2b0]
xorps xmm6, xmm6
lea rsi, [rsp + 0x90]
lea rbx, [rsp + 0x298]
lea rbp, [rsp + 0x158]
lea r12, [rsp + 0x300]
xor edi, edi
lea rdx, [r15 + 0x20]
mov rcx, r13
mov r8b, 0x3d
call fcn.1400a527f
movzx r8d, byte [r15 + 0x4f]
test r8b, r8b
jns 0x1400a3a51
mov r8, qword [r15 + 0x40]
mov rdx, qword [r15 + 0x38]
jmp 0x1400a3a55
lea rdx, [r15 + 0x38]
mov rcx, r13
call fcn.14003ae50
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x120], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x110], xmm0
movups xmmword [rax], xmm6
mov qword [rax + 0x10], 0
movzx eax, byte [rsp + 0x127]
test al, al
mov rcx, qword [rsp + 0x110]
lea rdx, [rsp + 0x110]
cmovns rcx, rdx
mov qword [rsp + 0x2d0], rcx
cmovs rax, qword [rsp + 0x118]
mov qword [rsp + 0x2d8], rax
mov rcx, rsi
lea rdx, [rsp + 0x2d0]
call fcn.14006f0b0
mov rcx, rbx
lea rdx, str.annotation
call fcn.140002c8a
mov rcx, rbp
mov rdx, rbx
mov r8, rsi
call fcn.1400a50f0
mov rcx, rbp
mov rdx, r12
call fcn.1400e6078
cmp byte [rsp + 0x16f], dil
jns 0x1400a3b05
mov rcx, qword [rsp + 0x158]
call fcn.1401c9f6c
cmp byte [rsp + 0x2af], 0
jns 0x1400a3b1c
mov rcx, qword [rsp + 0x298]
call fcn.1401c9f6c
cmp byte [rsp + 0xa7], 0
jns 0x1400a3b33
mov rcx, qword [rsp + 0x90]
call fcn.1401c9f6c
cmp byte [rsp + 0x127], 0
jns 0x1400a3b4a
mov rcx, qword [rsp + 0x110]
call fcn.1401c9f6c
cmp byte [rsp + 0x2c7], 0
jns 0x1400a3b61
mov rcx, qword [rsp + 0x2b0]
call fcn.1401c9f6c
mov rcx, qword [r15 + 8]
test rcx, rcx
je 0x1400a3b77
mov rax, rcx
mov rcx, qword [rcx]
test rcx, rcx
jne 0x1400a3b6a
jmp 0x1400a3b94
mov rax, qword [r15 + 0x10]
cmp qword [rax], r15
je 0x1400a3b94
add r15, 0x10
mov rcx, qword [r15]
mov rax, qword [rcx + 0x10]
lea r15, [rcx + 0x10]
cmp qword [rax], rcx
jne 0x1400a3b84
mov r15, rax
cmp r14, rax
jne 0x1400a3a2e
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, 0x1f0fff
mov edx, 1
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
je 0x1400a3ed1
mov r14, rax
mov rdi, qword [rsp + 0x58]
mov rax, qword [rdi]
mov rax, qword [rax + 0xb0]
mov r9, qword [0x140267e18]
mov r8, qword [0x140267e10]
mov rdx, qword [0x140267e08]
lea rcx, [0x14026b860]
mov qword [rsp + 0x40], rcx
lea rcx, [0x14026b850]
mov qword [rsp + 0x38], rcx
lea rcx, [0x14026b840]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], rax
lea rbx, [rsp + 0x110]
mov rcx, rbx
call fcn.1400e61ea
lea rsi, [rsp + 0x2b0]
mov rcx, rbx
mov rdx, rsi
call fcn.1400e656a
lea rdx, str.__initial_client_data
lea rbx, [rsp + 0x298]
mov rcx, rbx
call fcn.140002c8a
movzx r8d, byte [rsi + 0x17]
test r8b, r8b
jns 0x1400a3c6b
mov r8, qword [rsp + 0x2b8]
mov rsi, qword [rsp + 0x2b0]
mov rcx, rbx
mov rdx, rsi
call fcn.14003ae50
mov rcx, qword [rax + 0x10]
lea r12, [rsp + 0x90]
mov qword [r12 + 0x10], rcx
movups xmm0, xmmword [rax]
movaps xmmword [r12], xmm0
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov qword [rax + 0x10], 0
movzx eax, byte [r12 + 0x17]
test al, al
mov rcx, qword [r12]
cmovns rcx, r12
lea rdx, [rsp + 0x100]
mov qword [rdx], rcx
cmovs rax, qword [r12 + 8]
mov qword [rdx + 8], rax
lea rbx, [rsp + 0x158]
mov rcx, rbx
call fcn.14006f0b0
lea r15, [rsp + 0x300]
mov rcx, rbx
mov rdx, r15
call fcn.1400e6078
xor eax, eax
cmp byte [rbx + 0x17], al
jns 0x1400a3cf9
mov rcx, qword [rsp + 0x158]
call fcn.1401c9f6c
cmp byte [rsp + 0xa7], 0
jns 0x1400a3d10
mov rcx, qword [rsp + 0x90]
call fcn.1401c9f6c
cmp byte [rsp + 0x2af], 0
jns 0x1400a3d27
mov rcx, qword [rsp + 0x298]
call fcn.1401c9f6c
cmp byte [rsp + 0x2c7], 0
jns 0x1400a3d3e
mov rcx, qword [rsp + 0x2b0]
call fcn.1401c9f6c
xorps xmm6, xmm6
movaps xmmword [rsp + 0xc0], xmm6
movaps xmmword [rsp + 0xf0], xmm6
movaps xmmword [rsp + 0xe0], xmm6
movaps xmmword [rsp + 0xd0], xmm6
movaps xmmword [rsp + 0xb0], xmm6
movaps xmmword [rsp + 0xa0], xmm6
movaps xmmword [rsp + 0x90], xmm6
mov dword [rsp + 0xcc], 0x100
mov rsi, qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov ecx, 0xfffffff6
call rsi
mov qword [rsp + 0xe0], rax
mov ecx, 0xfffffff5
call rsi
mov qword [rsp + 0xe8], rax
mov ecx, 0xfffffff4
call rsi
mov qword [rsp + 0xf0], rax
xor eax, eax
mov qword [rsp + 0x2c0], rax
movaps xmmword [rsp + 0x2b0], xmm6
lea r13, str.PU_n_
mov qword [rsp + 0x298], r13
mov qword [rsp + 0x2a0], rax
mov byte [rsp + 0x2a8], 0
mov eax, dword [0x14026b8a0]
mov ecx, dword [0x14026d938]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400a4a1f
mov eax, dword [0x14026b8b0]
mov ecx, dword [0x14026d938]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400a4a66
mov rbp, qword [0x14026b898]
test rbp, rbp
je 0x1400a3f3f
cmp qword [0x14026b8a8], 0
je 0x1400a3f3f
mov dword [rsp + 0x90], 0x70
lea r9, [rsp + 0x78]
xor ecx, ecx
mov edx, 1
xor r8d, r8d
call rbp
test eax, eax
je 0x1400a41f9
mov ecx, 2
call fcn.140060b40
test al, al
je 0x1400a430b
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x158]
mov rcx, rsi
mov r8d, 0x1ae
mov r9d, 2
call fcn.140060c10
lea rcx, [rsp + 0x160]
lea rdx, str.InitializeProcThreadAttributeList__size__succeeded__expected_failure
mov r8d, 0x44
call fcn.140007184
mov rcx, rsi
call fcn.140061070
jmp 0x1400a430b
mov ecx, 2
call fcn.140060b40
xor esi, esi
test al, al
mov rdi, qword [rsp + 0x58]
je 0x1400a4361
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x158]
mov rcx, rsi
mov r8d, 0x17d
mov r9d, 2
call fcn.1400618b0
lea rcx, [rsp + 0x168]
lea rdx, [0x14021165d]
mov r8d, 0xb
call fcn.140007184
mov rcx, rsi
call fcn.140061980
xor esi, esi
jmp 0x1400a4361
mov dword [rsp + 0x90], 0x68
xor ebp, ebp
xor esi, esi
mov rdx, qword [rdi]
movzx r8d, byte [rdx + 0x17]
test r8b, r8b
js 0x1400a3f60
mov rax, r8
jmp 0x1400a3f64
mov rax, qword [rdx + 8]
cmp rax, 0xc
jae 0x1400a3f71
xor ebx, ebx
jmp 0x1400a3ff8
mov rdi, r13
mov r13, r12
mov r12, r14
mov r14, r15
mov r15, rbp
test r8b, r8b
jns 0x1400a3f89
mov r8, qword [rdx + 8]
add r8, 0xfffffffffffffff4
lea rax, [rdx + 0x18]
mov qword [rsp + 0x20], rax
mov rcx, rbx
mov r9, 0xffffffffffffffff
call fcn.14003b8b0
xor ebp, ebp
cmp byte [rsp + 0x16f], bpl
jns 0x1400a3fb9
mov rbx, qword [rsp + 0x158]
lea rdx, str.rundll32.exe
mov rcx, rbx
call fcn.1401e1a60
test eax, eax
sete bl
cmp byte [rsp + 0x16f], bpl
jns 0x1400a3fe4
mov rcx, qword [rsp + 0x158]
call fcn.1401c9f6c
mov rbp, r15
mov r15, r14
mov r14, r12
mov r12, r13
mov r13, rdi
mov rdi, qword [rsp + 0x58]
xor ecx, ecx
cmp byte [rsp + 0x317], cl
jns 0x1400a400b
mov r15, qword [rsp + 0x300]
test bl, bl
jne 0x1400a401b
mov rcx, qword [rdi]
cmp byte [rcx + 0x17], 0
jns 0x1400a401b
mov rcx, qword [rcx]
lea rax, [rsp + 0x78]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x40], r12
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], 1
mov rdx, r15
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x1400a4192
mov rcx, qword [rsp + 0x80]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, eax
mov ecx, 1
call fcn.140060b40
test esi, esi
jne 0x1400a40c5
test al, al
je 0x1400a40c5
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x158]
mov rcx, rsi
mov r8d, 0x1fe
mov r9d, 1
call fcn.1400618b0
lea rcx, [rsp + 0x168]
lea rdx, str.CloseHandle_thread
mov r8d, 0x12
call fcn.140007184
mov rcx, rsi
call fcn.140061980
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, eax
mov ecx, 1
call fcn.140060b40
test esi, esi
jne 0x1400a4132
test al, al
je 0x1400a4132
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x158]
mov rcx, rsi
mov r8d, 0x201
mov r9d, 1
call fcn.1400618b0
lea rcx, [rsp + 0x168]
lea rdx, str.CloseHandle_process
mov r8d, 0x13
call fcn.140007184
mov rcx, rsi
call fcn.140061980
mov ecx, 0xa8
add rcx, qword [rdi]
lea rsi, [rsp + 0x158]
mov qword [rsi], 0xffffffffffffffff
mov rdx, rsi
call fcn.1400a4f98
xorps xmm0, xmm0
movups xmmword [rsi + 0x14], xmm0
movups xmmword [rsi + 4], xmm0
mov dword [rsi], 2
lea r8, [rsp + 0x68]
mov dword [r8 + 8], 0
mov qword [r8], 0
mov ecx, 0x90
add rcx, qword [rdi]
lea rdx, [rsp + 0x158]
call fcn.1400e5b64
mov esi, eax
jmp 0x1400a430f
mov ecx, 2
call fcn.140060b40
xor esi, esi
test al, al
je 0x1400a430f
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x158]
mov rcx, rsi
mov r8d, 0x1f9
mov r9d, 2
call fcn.1400618b0
lea rcx, [rsp + 0x168]
lea rdx, str.CreateProcess
mov r8d, 0xd
call fcn.140007184
mov rcx, rsi
call fcn.140061980
jmp 0x1400a430d
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x1400a42af
lea rsi, [rsp + 0x78]
mov rcx, qword [rsi]
call fcn.1401c9fac
mov rbp, rax
mov qword [rsp + 0xf8], rax
mov rcx, rax
mov edx, 1
xor r8d, r8d
mov r9, rsi
call qword [0x14026b898]
test eax, eax
je 0x1400a43c2
mov qword [rsp + 0x60], rbp
movabs rdi, 0x1fffffffffffffff
lea rsi, [rsp + 0x298]
mov rcx, rsi
call fcn.1400a558a
mov rax, qword [rsp + 0xf8]
mov qword [rsi + 8], rax
lea rsi, [rsp + 0x2b0]
mov edx, 8
mov rcx, rsi
call fcn.1400a532e
mov r13, qword [rsi + 8]
mov rbp, qword [rsi + 0x10]
cmp r13, rbp
je 0x1400a441a
mov rax, qword [0x140267e08]
mov qword [r13], rax
add r13, 8
mov qword [rsp + 0x2b8], r13
mov rbp, r13
mov r9, rdi
jmp 0x1400a4516
mov ecx, 2
call fcn.140060b40
test al, al
je 0x1400a430b
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x158]
mov rcx, rsi
mov r8d, 0x1b2
mov r9d, 2
call fcn.1400618b0
lea rcx, [rsp + 0x168]
lea rdx, str.InitializeProcThreadAttributeList__size_
mov r8d, 0x28
call fcn.140007184
mov rcx, rsi
call fcn.140061980
xor ebp, ebp
xor esi, esi
mov qword [rsp + 0x298], r13
cmp byte [rsp + 0x2a8], 0
jne 0x1400a4abb
lea rcx, [rsp + 0x298]
call fcn.1400a558a
test rbp, rbp
je 0x1400a433f
mov rcx, rbp
call fcn.1401c9fb4
mov rcx, qword [rsp + 0x2b0]
test rcx, rcx
je 0x1400a4359
mov qword [rsp + 0x2b8], rcx
call fcn.1401c9f6c
mov rcx, r14
call fcn.1400a8b7e
cmp byte [rsp + 0x317], 0
jns 0x1400a4378
mov rcx, qword [rsp + 0x300]
call fcn.1401c9f6c
cmp sil, 1
mov eax, 1
adc rax, 0
mov qword [0x14026b890], rax
mov rcx, rdi
call fcn.1400a506a
mov rcx, qword [rsp + 0x318]
xor rcx, rsp
call fcn.1401ca2e0
mov eax, esi
movaps xmm6, xmmword [rsp + 0x320]
add rsp, 0x338
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov ecx, 2
call fcn.140060b40
test al, al
je 0x1400a430d
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x158]
mov rcx, rsi
mov r8d, 0x1bd
mov r9d, 2
call fcn.1400618b0
lea rcx, [rsp + 0x168]
lea rdx, [0x14021172e]
mov r8d, 0x21
jmp 0x1400a41e7
mov rsi, qword [rsp + 0x2b0]
sub r13, rsi
mov rdx, r13
sar rdx, 3
lea rax, [rdx + 1]
cmp rax, rdi
ja 0x1400a4abe
mov r9, rdi
sub rbp, rsi
mov rcx, rbp
sar rcx, 3
sar rbp, 2
cmp rbp, rax
cmovb rbp, rax
movabs rdi, 0xfffffffffffffff
cmp rcx, rdi
cmovae rbp, r9
test rbp, rbp
je 0x1400a4499
mov qword [rsp + 0x50], rdx
cmp rbp, r9
ja 0x1400a4acb
lea rcx, [rbp*8]
call fcn.1401c9f10
mov rdi, rax
movabs rdx, 0x1fffffffffffffff
mov r9, rdx
mov rdx, qword [rsp + 0x50]
jmp 0x1400a449b
xor edi, edi
lea rcx, [rdi + rbp*8]
mov rax, qword [0x140267e08]
lea rbp, [rdi + rdx*8]
add rbp, 8
mov qword [rbp - 8], rax
test r13, r13
jle 0x1400a44dc
mov qword [rsp + 0x50], rcx
mov rcx, rdi
mov rdx, rsi
mov r8, r13
call fcn.1401cccd0
mov rcx, qword [rsp + 0x50]
movabs rdx, 0x1fffffffffffffff
mov r9, rdx
mov qword [rsp + 0x2b0], rdi
mov qword [rsp + 0x2b8], rbp
mov qword [rsp + 0x2c0], rcx
test rsi, rsi
je 0x1400a4516
mov rcx, rsi
call fcn.1401c9f6c
movabs rdx, 0x1fffffffffffffff
mov r9, rdx
mov rbp, qword [rsp + 0x2b8]
mov r13, qword [rsp + 0x2c0]
cmp rbp, r13
je 0x1400a453f
mov rax, qword [0x140267e10]
mov qword [rbp], rax
add rbp, 8
mov qword [rsp + 0x2b8], rbp
jmp 0x1400a4630
mov r8, qword [rsp + 0x2b0]
sub r13, r8
mov rbp, r13
sar rbp, 3
lea rax, [rbp + 1]
cmp rax, r9
ja 0x1400a4abe
mov rsi, r13
sar rsi, 2
cmp rsi, rax
cmovb rsi, rax
movabs rax, 0xfffffffffffffff
cmp rbp, rax
cmovae rsi, r9
test rsi, rsi
je 0x1400a45ad
cmp rsi, r9
ja 0x1400a4acb
mov rdi, r8
lea rcx, [rsi*8]
call fcn.1401c9f10
movabs rdx, 0x1fffffffffffffff
mov r9, rdx
mov r8, rdi
jmp 0x1400a45af
xor eax, eax
lea rsi, [rax + rsi*8]
mov rcx, qword [0x140267e10]
lea rbp, [rax + rbp*8]
add rbp, 8
mov qword [rbp - 8], rcx
test r13, r13
jle 0x1400a45f6
mov rdi, rax
mov rcx, rax
mov rdx, r8
mov qword [rsp + 0x50], r8
mov r8, r13
call fcn.1401cccd0
mov rax, rdi
mov r8, qword [rsp + 0x50]
movabs rdx, 0x1fffffffffffffff
mov r9, rdx
mov qword [rsp + 0x2b0], rax
mov qword [rsp + 0x2b8], rbp
mov qword [rsp + 0x2c0], rsi
test r8, r8
je 0x1400a4630
mov rcx, r8
call fcn.1401c9f6c
movabs rdx, 0x1fffffffffffffff
mov r9, rdx
mov rbp, qword [rsp + 0x2b8]
mov r13, qword [rsp + 0x2c0]
cmp rbp, r13
je 0x1400a4659
mov rax, qword [0x140267e18]
mov qword [rbp], rax
add rbp, 8
mov qword [rsp + 0x2b8], rbp
jmp 0x1400a474a
mov r8, qword [rsp + 0x2b0]
sub r13, r8
mov rbp, r13
sar rbp, 3
lea rax, [rbp + 1]
cmp rax, r9
ja 0x1400a4abe
mov rsi, r13
sar rsi, 2
cmp rsi, rax
cmovb rsi, rax
movabs rax, 0xfffffffffffffff
cmp rbp, rax
cmovae rsi, r9
test rsi, rsi
je 0x1400a46c7
cmp rsi, r9
ja 0x1400a4acb
mov rdi, r8
lea rcx, [rsi*8]
call fcn.1401c9f10
movabs rdx, 0x1fffffffffffffff
mov r9, rdx
mov r8, rdi
jmp 0x1400a46c9
xor eax, eax
lea rsi, [rax + rsi*8]
mov rcx, qword [0x140267e18]
lea rbp, [rax + rbp*8]
add rbp, 8
mov qword [rbp - 8], rcx
test r13, r13
jle 0x1400a4710
mov rdi, rax
mov rcx, rax
mov rdx, r8
mov qword [rsp + 0x50], r8
mov r8, r13
call fcn.1401cccd0
mov rax, rdi
mov r8, qword [rsp + 0x50]
movabs rdx, 0x1fffffffffffffff
mov r9, rdx
mov qword [rsp + 0x2b0], rax
mov qword [rsp + 0x2b8], rbp
mov qword [rsp + 0x2c0], rsi
test r8, r8
je 0x1400a474a
mov rcx, r8
call fcn.1401c9f6c
movabs rdx, 0x1fffffffffffffff
mov r9, rdx
mov rbp, qword [rsp + 0x2b8]
mov rax, qword [rsp + 0x58]
mov rcx, qword [rax]
mov r13, qword [rsp + 0x2c0]
cmp rbp, r13
je 0x1400a477b
mov rax, qword [rcx + 0xb0]
mov qword [rbp], rax
add rbp, 8
mov qword [rsp + 0x2b8], rbp
jmp 0x1400a4870
mov rdi, qword [rsp + 0x2b0]
sub r13, rdi
mov rbp, r13
sar rbp, 3
lea rax, [rbp + 1]
cmp rax, r9
ja 0x1400a4abe
mov rsi, r13
sar rsi, 2
cmp rsi, rax
cmovb rsi, rax
movabs rax, 0xfffffffffffffff
cmp rbp, rax
cmovae rsi, r9
test rsi, rsi
je 0x1400a47ed
mov qword [rsp + 0x50], rcx
cmp rsi, r9
ja 0x1400a4acb
lea rcx, [rsi*8]
call fcn.1401c9f10
movabs rdx, 0x1fffffffffffffff
mov r9, rdx
mov rcx, qword [rsp + 0x50]
jmp 0x1400a47ef
xor eax, eax
lea rsi, [rax + rsi*8]
mov rcx, qword [rcx + 0xb0]
lea rbp, [rax + rbp*8]
add rbp, 8
mov qword [rbp - 8], rcx
test r13, r13
jle 0x1400a4836
mov rcx, rax
mov rdx, rdi
mov qword [rsp + 0x50], rdi
mov rdi, rax
mov r8, r13
call fcn.1401cccd0
mov rax, rdi
mov rdi, qword [rsp + 0x50]
movabs rdx, 0x1fffffffffffffff
mov r9, rdx
mov qword [rsp + 0x2b0], rax
mov qword [rsp + 0x2b8], rbp
mov qword [rsp + 0x2c0], rsi
test rdi, rdi
je 0x1400a4870
mov rcx, rdi
call fcn.1401c9f6c
movabs rdx, 0x1fffffffffffffff
mov r9, rdx
mov rbp, qword [rsp + 0x2b8]
mov r13, qword [rsp + 0x2c0]
cmp rbp, r13
je 0x1400a4892
mov qword [rbp], r14
add rbp, 8
mov qword [rsp + 0x2b8], rbp
jmp 0x1400a4943
mov rdi, qword [rsp + 0x2b0]
sub r13, rdi
mov rbp, r13
sar rbp, 3
lea rax, [rbp + 1]
cmp rax, r9
ja 0x1400a4abe
mov rsi, r13
sar rsi, 2
cmp rsi, rax
cmovb rsi, rax
movabs rax, 0xfffffffffffffff
cmp rbp, rax
cmovae rsi, r9
test rsi, rsi
je 0x1400a48ed
cmp rsi, r9
ja 0x1400a4acb
lea rcx, [rsi*8]
call fcn.1401c9f10
jmp 0x1400a48ef
xor eax, eax
lea rsi, [rax + rsi*8]
lea rbp, [rax + rbp*8]
add rbp, 8
mov qword [rbp - 8], r14
test r13, r13
jle 0x1400a491e
mov rcx, rax
mov rdx, rdi
mov r8, r13
mov r13, rdi
mov rdi, rax
call fcn.1401cccd0
mov rax, rdi
mov rdi, r13
mov qword [rsp + 0x2b0], rax
mov qword [rsp + 0x2b8], rbp
mov qword [rsp + 0x2c0], rsi
test rdi, rdi
je 0x1400a4943
mov rcx, rdi
call fcn.1401c9f6c
mov rdx, qword [rsp + 0xe0]
lea rsi, [rsp + 0x2b0]
mov rcx, rsi
call fcn.1400a53cb
mov rdx, qword [rsp + 0xe8]
mov rcx, rsi
call fcn.1400a53cb
mov rdx, qword [rsp + 0xf0]
mov rcx, rsi
call fcn.1400a53cb
mov r9, qword [rsi]
mov rax, qword [rsi + 8]
sub rax, r9
mov rcx, qword [rsp + 0xf8]
xorps xmm0, xmm0
movups xmmword [rsp + 0x28], xmm0
mov qword [rsp + 0x20], rax
mov r8d, 0x20002
xor edx, edx
call qword [0x14026b8a8]
test eax, eax
mov rdi, qword [rsp + 0x58]
lea r13, str.PU_n_
mov rbp, qword [rsp + 0x60]
je 0x1400a49c7
mov esi, 0x80000
jmp 0x1400a3f4e
mov ecx, 2
call fcn.140060b40
test al, al
je 0x1400a430d
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x158]
mov rcx, rsi
mov r8d, 0x1d7
mov r9d, 2
call fcn.1400618b0
lea rcx, [rsp + 0x168]
lea rdx, [0x140211750]
mov r8d, 0x19
jmp 0x1400a41e7
lea rcx, [0x14026b8a0]
call fcn.1401ca090
cmp dword [0x14026b8a0], 0xffffffff
jne 0x1400a3e0e
lea rcx, [0x1402003d6]
lea rdx, str.::InitializeProcThreadAttributeList
xor r8d, r8d
call fcn.1400e6604
mov qword [0x14026b898], rax
lea rcx, [0x14026b8a0]
call fcn.1401ca128
jmp 0x1400a3e0e
lea rcx, [0x14026b8b0]
call fcn.1401ca090
cmp dword [0x14026b8b0], 0xffffffff
jne 0x1400a3e33
cmp qword [0x14026b898], 0
je 0x1400a4aa1
lea rcx, [0x1402003d6]
lea rdx, str.::UpdateProcThreadAttribute
xor r8d, r8d
call fcn.1400e6604
jmp 0x1400a4aa3
xor eax, eax
mov qword [0x14026b8a8], rax
lea rcx, [0x14026b8b0]
call fcn.1401ca128
jmp 0x1400a3e33
int3
lea rcx, [rsp + 0x2b0]
call fcn.14003d05c
call fcn.1401dedf4
int3