Function at 0x140078944
Capabilities:
Create process on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xa38
movaps xmmword [rsp + 0xa20], xmm7
movaps xmmword [rsp + 0xa10], xmm6
mov r13, rcx
mov rax, qword [0x14019c018]
xor rax, rsp
mov qword [rsp + 0xa08], rax
call fcn.1400c3170
test al, al
jne 0x140079f03
xorps xmm0, xmm0
lea rdx, [rsp + 0x1e0]
movaps xmmword [rdx], xmm0
mov qword [rdx + 0x10], 0
mov rcx, qword [r13]
call fcn.1400c319c
mov rsi, qword [r13]
mov rbp, qword [rsi + 0x78]
mov rdi, qword [rsi + 0x80]
cmp rbp, rdi
je 0x140078a31
lea rsi, [rsp + 0x200]
lea r14, [rsp + 0x1d0]
lea rbx, [rsp + 0x1e0]
movzx eax, byte [rbp + 0x17]
test al, al
mov rcx, qword [rbp]
cmovns rcx, rbp
mov qword [rsp + 0x1d0], rcx
cmovs rax, qword [rbp + 8]
mov qword [rsp + 0x1d8], rax
mov rcx, rsi
mov rdx, r14
call fcn.14004ad20
mov rcx, rsi
mov rdx, rbx
call fcn.1400c319c
cmp byte [rsp + 0x217], 0
jns 0x140078a24
mov rcx, qword [rsp + 0x200]
call fcn.1401349d4
add rbp, 0x18
cmp rbp, rdi
jne 0x1400789d4
mov rsi, qword [r13]
movzx eax, byte [rsi + 0x2f]
test al, al
jns 0x140078a3d
mov rax, qword [rsi + 0x20]
test rax, rax
je 0x140078ab1
add rsi, 0x18
lea rdx, str.database
lea rdi, [rsp + 0xa0]
mov rcx, rdi
call fcn.14001e654
lea rbx, [rsp + 0x200]
mov rcx, rbx
mov rdx, rdi
mov r8, rsi
call fcn.14007a0b4
lea rdx, [rsp + 0x1e0]
mov rcx, rbx
call fcn.1400c319c
cmp byte [rbx + 0x17], 0
jns 0x140078a96
mov rcx, qword [rsp + 0x200]
call fcn.1401349d4
cmp byte [rsp + 0xb7], 0
jns 0x140078aad
mov rcx, qword [rsp + 0xa0]
call fcn.1401349d4
mov rsi, qword [r13]
movzx eax, byte [rsi + 0x47]
test al, al
jns 0x140078abd
mov rax, qword [rsi + 0x38]
test rax, rax
je 0x140078b31
add rsi, 0x30
lea rdx, str.metrics_dir
lea rdi, [rsp + 0xa0]
mov rcx, rdi
call fcn.14001e654
lea rbx, [rsp + 0x200]
mov rcx, rbx
mov rdx, rdi
mov r8, rsi
call fcn.14007a0b4
lea rdx, [rsp + 0x1e0]
mov rcx, rbx
call fcn.1400c319c
cmp byte [rbx + 0x17], 0
jns 0x140078b16
mov rcx, qword [rsp + 0x200]
call fcn.1401349d4
cmp byte [rsp + 0xb7], 0
jns 0x140078b2d
mov rcx, qword [rsp + 0xa0]
call fcn.1401349d4
mov rsi, qword [r13]
movzx eax, byte [rsi + 0x5f]
test al, al
js 0x140078b3e
mov rcx, rax
jmp 0x140078b42
mov rcx, qword [rsi + 0x50]
test rcx, rcx
je 0x140078bfc
lea rcx, [rsi + 0x48]
test al, al
cmovs rcx, qword [rsi + 0x48]
lea rdx, [rsp + 0x1c0]
mov qword [rdx], rcx
cmovs rax, qword [rsi + 0x50]
mov qword [rdx + 8], rax
lea rsi, [rsp + 0xa0]
mov rcx, rsi
call fcn.14004ad20
lea rdx, [0x14017b70e]
lea rdi, [rsp + 0x120]
mov rcx, rdi
call fcn.14001e654
lea rbx, [rsp + 0x200]
mov rcx, rbx
mov rdx, rdi
mov r8, rsi
call fcn.14007a0b4
lea rdx, [rsp + 0x1e0]
mov rcx, rbx
call fcn.1400c319c
cmp byte [rbx + 0x17], 0
jns 0x140078bca
mov rcx, qword [rsp + 0x200]
call fcn.1401349d4
cmp byte [rsp + 0x137], 0
jns 0x140078be1
mov rcx, qword [rsp + 0x120]
call fcn.1401349d4
cmp byte [rsp + 0xb7], 0
jns 0x140078bf8
mov rcx, qword [rsp + 0xa0]
call fcn.1401349d4
mov rsi, qword [r13]
mov r14, qword [rsi + 0x60]
lea r12, [rsi + 0x68]
cmp r14, r12
mov qword [rsp + 0x58], r13
je 0x140078dbb
lea r13, [rsp + 0x190]
xorps xmm6, xmm6
lea rbx, [rsp + 0xa0]
lea r15, str.annotation
lea rsi, [rsp + 0x178]
lea rdi, [rsp + 0x200]
lea rbp, [rsp + 0x1e0]
lea rdx, [r14 + 0x20]
mov rcx, r13
mov r8b, 0x3d
call fcn.140026688
movzx r8d, byte [r14 + 0x4f]
test r8b, r8b
jns 0x140078c67
mov r8, qword [r14 + 0x40]
mov rdx, qword [r14 + 0x38]
jmp 0x140078c6b
lea rdx, [r14 + 0x38]
mov rcx, r13
call fcn.14004401c
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x130], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x120], xmm0
movups xmmword [rax], xmm6
mov qword [rax + 0x10], 0
movzx eax, byte [rsp + 0x137]
test al, al
mov rcx, qword [rsp + 0x120]
lea rdx, [rsp + 0x120]
cmovns rcx, rdx
mov qword [rsp + 0x1b0], rcx
cmovs rax, qword [rsp + 0x128]
mov qword [rsp + 0x1b8], rax
mov rcx, rbx
lea rdx, [rsp + 0x1b0]
call fcn.14004ad20
mov rcx, rsi
mov rdx, r15
call fcn.14001e654
mov rcx, rdi
mov rdx, rsi
mov r8, rbx
call fcn.14007a0b4
mov rcx, rdi
mov rdx, rbp
call fcn.1400c319c
cmp byte [rsp + 0x217], 0
jns 0x140078d17
mov rcx, qword [rsp + 0x200]
call fcn.1401349d4
cmp byte [rsp + 0x18f], 0
jns 0x140078d2e
mov rcx, qword [rsp + 0x178]
call fcn.1401349d4
cmp byte [rsp + 0xb7], 0
jns 0x140078d45
mov rcx, qword [rsp + 0xa0]
call fcn.1401349d4
cmp byte [rsp + 0x137], 0
jns 0x140078d5c
mov rcx, qword [rsp + 0x120]
call fcn.1401349d4
cmp byte [rsp + 0x1a7], 0
jns 0x140078d73
mov rcx, qword [rsp + 0x190]
call fcn.1401349d4
mov rcx, qword [r14 + 8]
test rcx, rcx
je 0x140078d89
mov rax, rcx
mov rcx, qword [rcx]
test rcx, rcx
jne 0x140078d7c
jmp 0x140078da6
mov rax, qword [r14 + 0x10]
cmp qword [rax], r14
je 0x140078da6
add r14, 0x10
mov rcx, qword [r14]
lea r14, [rcx + 0x10]
mov rax, qword [rcx + 0x10]
cmp qword [rax], rcx
jne 0x140078d96
mov r14, rax
cmp rax, r12
jne 0x140078c44
mov r13, qword [rsp + 0x58]
mov rsi, qword [r13]
mov rdi, qword [rsi + 0x90]
mov rsi, qword [rsi + 0x98]
cmp rdi, rsi
je 0x140078e48
lea r14, [0x14017b64b]
lea rbx, [rsp + 0xa0]
lea rbp, [rsp + 0x200]
lea r15, [rsp + 0x1e0]
mov rcx, rbx
mov rdx, r14
call fcn.14001e654
mov rcx, rbp
mov rdx, rbx
mov r8, rdi
call fcn.14007a0b4
mov rcx, rbp
mov rdx, r15
call fcn.1400c319c
cmp byte [rsp + 0x217], 0
jns 0x140078e28
mov rcx, qword [rsp + 0x200]
call fcn.1401349d4
cmp byte [rsp + 0xb7], 0
jns 0x140078e3f
mov rcx, qword [rsp + 0xa0]
call fcn.1401349d4
add rdi, 0x18
cmp rdi, rsi
jne 0x140078ded
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, 0x1f0fff
mov edx, 1
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
je 0x1400791b3
mov r12, rax
movaps xmm6, xmmword [0x140173f60]
lea rsi, [rsp + 0x120]
movaps xmmword [rsi + 0x40], xmm6
movaps xmmword [rsi + 0x30], xmm6
movaps xmmword [rsi + 0x20], xmm6
movaps xmmword [rsi + 0x10], xmm6
movaps xmmword [rsi], xmm6
mov rax, qword [r13]
mov rax, qword [rax + 0xc8]
mov rcx, qword [0x14019e060]
mov r9, qword [0x14019e058]
mov r8, qword [0x14019e050]
mov rdx, qword [0x14019e048]
lea rbp, [0x1401aacc8]
mov qword [rsp + 0x48], rbp
lea rbp, [0x1401aac98]
mov qword [rsp + 0x40], rbp
lea rbp, [0x1401aac58]
mov qword [rsp + 0x38], rbp
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
mov rcx, rsi
call fcn.140052d30
lea rbx, [rsp + 0x190]
mov rcx, rsi
mov rdx, rbx
call fcn.1400530f0
lea rdx, str.__initial_client_data
lea rsi, [rsp + 0x178]
mov rcx, rsi
call fcn.14001e654
movzx r8d, byte [rbx + 0x17]
test r8b, r8b
jns 0x140078f35
mov r8, qword [rsp + 0x198]
mov rbx, qword [rsp + 0x190]
mov rcx, rsi
mov rdx, rbx
call fcn.14004401c
mov rcx, qword [rax + 0x10]
lea r13, [rsp + 0xa0]
mov qword [r13 + 0x10], rcx
movups xmm0, xmmword [rax]
movaps xmmword [r13], xmm0
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov qword [rax + 0x10], 0
movzx eax, byte [r13 + 0x17]
test al, al
mov rcx, qword [r13]
cmovns rcx, r13
lea rdx, [rsp + 0x110]
mov qword [rdx], rcx
cmovs rax, qword [r13 + 8]
mov qword [rdx + 8], rax
lea rbx, [rsp + 0x200]
mov rcx, rbx
call fcn.14004ad20
lea r15, [rsp + 0x1e0]
mov rcx, rbx
mov rdx, r15
call fcn.1400c319c
cmp byte [rbx + 0x17], 0
jns 0x140078fbf
mov rcx, qword [rsp + 0x200]
call fcn.1401349d4
cmp byte [rsp + 0xb7], 0
jns 0x140078fd6
mov rcx, qword [rsp + 0xa0]
call fcn.1401349d4
cmp byte [rsp + 0x18f], 0
jns 0x140078fed
mov rcx, qword [rsp + 0x178]
call fcn.1401349d4
cmp byte [rsp + 0x1a7], 0
jns 0x140079004
mov rcx, qword [rsp + 0x190]
call fcn.1401349d4
movabs rbp, 0xaaaaaaaaaaaaaaaa
xorps xmm7, xmm7
movaps xmmword [rsp + 0xd0], xmm7
movaps xmmword [rsp + 0x100], xmm7
movaps xmmword [rsp + 0xf0], xmm7
movaps xmmword [rsp + 0xe0], xmm7
movaps xmmword [rsp + 0xc0], xmm7
movaps xmmword [rsp + 0xb0], xmm7
movaps xmmword [rsp + 0xa0], xmm7
mov dword [rsp + 0xdc], 0x100
mov rsi, qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov ecx, 0xfffffff6
call rsi
mov qword [rsp + 0xf0], rax
mov ecx, 0xfffffff5
call rsi
mov qword [rsp + 0xf8], rax
mov ecx, 0xfffffff4
call rsi
mov qword [rsp + 0x100], rax
xor eax, eax
mov qword [rsp + 0x1a0], rax
movaps xmmword [rsp + 0x190], xmm7
mov qword [rsp + 0x188], rbp
lea rdi, [0x1401750d0]
mov qword [rsp + 0x178], rdi
mov qword [rsp + 0x180], rax
mov byte [rsp + 0x188], 0
mov eax, dword [0x1401aad20]
mov ecx, dword [0x1401a559c]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140079e55
mov eax, dword [0x1401aad30]
mov ecx, dword [0x1401a559c]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140079e9c
mov rax, qword [0x1401aad18]
test rax, rax
je 0x14007921c
cmp qword [0x1401aad28], 0
je 0x14007921c
mov dword [rsp + 0xa0], 0x70
lea r9, [rsp + 0x80]
mov qword [r9], rbp
xor ecx, ecx
mov edx, 1
xor r8d, r8d
call qword [0x1401bf010]
test eax, eax
je 0x14007925b
mov ecx, 2
call fcn.14006c840
test al, al
je 0x1400795ec
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x200]
mov rcx, rsi
mov r8d, 0x1a1
mov r9d, 2
call fcn.14006c8f0
lea rcx, [rsp + 0x210]
lea rdx, str.InitializeProcThreadAttributeList__size__succeeded__expected_failure
mov r8d, 0x44
call fcn.14001df3c
mov rcx, rsi
call fcn.14006cd80
jmp 0x1400795ec
mov ecx, 2
call fcn.14006c840
xor esi, esi
test al, al
je 0x140079648
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x200]
mov rcx, rsi
mov r8d, 0x16f
mov r9d, 2
call fcn.14006d900
lea rcx, [rsp + 0x210]
lea rdx, [0x14018002f]
mov r8d, inet_ntoa
call fcn.14001df3c
mov rcx, rsi
call fcn.14006d9f0
xor esi, esi
jmp 0x140079648
mov dword [rsp + 0xa0], 0x68
xor r14d, r14d
xor esi, esi
mov rax, qword [rsp + 0x58]
mov rdx, qword [rax]
movzx r8d, byte [rdx + 0x17]
test r8b, r8b
js 0x140079249
cmp r8b, 0xc
jb 0x140079254
jmp 0x14007930b
cmp qword [rdx + 8], 0xc
jae 0x140079307
xor ebx, ebx
jmp 0x140079364
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x140079590
lea rsi, [rsp + 0x80]
mov rcx, qword [rsi]
call fcn.140134a0c
mov r14, rax
mov qword [rsp + 0x108], rax
mov rax, qword [0x1401aad18]
mov rcx, r14
mov edx, 1
xor r8d, r8d
mov r9, rsi
call qword [0x1401bf010]
test eax, eax
je 0x1400796b1
lea rsi, [rsp + 0x178]
mov rcx, rsi
call fcn.14007a44a
mov qword [rsi + 8], r14
lea rbp, [rsp + 0x190]
mov edx, 9
mov rcx, rbp
call fcn.14007a234
mov rsi, qword [rbp + 8]
cmp rsi, qword [rbp + 0x10]
je 0x140079709
mov rax, qword [0x14019e048]
mov qword [rsi], rax
add rsi, 8
mov qword [rsp + 0x198], rsi
mov rdi, rsi
movabs r8, 0x1fffffffffffffff
jmp 0x1400797fc
mov r8, qword [rdx + 8]
add r8, 0xfffffffffffffff4
lea rax, [rdx + 0x18]
mov qword [rsp + 0x20], rax
mov rcx, rbx
mov r9, 0xffffffffffffffff
call fcn.140044f4c
cmp byte [rsp + 0x217], 0
jns 0x140079339
mov rbx, qword [rsp + 0x200]
lea rdx, str.rundll32.exe
mov rcx, rbx
call fcn.14014c844
test eax, eax
sete bl
cmp byte [rsp + 0x217], 0
jns 0x140079364
mov rcx, qword [rsp + 0x200]
call fcn.1401349d4
mov qword [rsp + 0x90], rbp
movaps xmmword [rsp + 0x80], xmm6
cmp byte [rsp + 0x1f7], 0
jns 0x140079386
mov r15, qword [rsp + 0x1e0]
test bl, bl
je 0x14007938e
xor ecx, ecx
jmp 0x14007939f
mov rax, qword [rsp + 0x58]
mov rcx, qword [rax]
cmp byte [rcx + 0x17], 0
jns 0x14007939f
mov rcx, qword [rcx]
lea rax, [rsp + 0x80]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x40], r13
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], 1
mov rdx, r15
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x140079525
mov rcx, qword [rsp + 0x88]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, eax
mov ecx, 1
call fcn.14006c840
test al, al
mov r13, qword [rsp + 0x58]
je 0x140079451
test esi, esi
jne 0x140079451
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x200]
mov rcx, rsi
mov r8d, 0x1f2
mov r9d, 1
call fcn.14006d900
lea rcx, [rsp + 0x210]
lea rdx, str.CloseHandle_thread
mov r8d, 0x12
call fcn.14001df3c
mov rcx, rsi
call fcn.14006d9f0
mov rcx, qword [rsp + 0x80]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, eax
mov ecx, 1
call fcn.14006c840
test al, al
je 0x1400794c1
test esi, esi
jne 0x1400794c1
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x200]
mov rcx, rsi
mov r8d, 0x1f5
mov r9d, 1
call fcn.14006d900
lea rcx, [rsp + 0x210]
lea rdx, str.CloseHandle_process
mov r8d, 0x13
call fcn.14001df3c
mov rcx, rsi
call fcn.14006d9f0
mov ecx, 0xc0
add rcx, qword [r13]
lea rdx, [rsp + 0x200]
mov qword [rdx], 0xffffffffffffffff
call fcn.1400702e2
lea rdx, [0x14017f0db]
lea rsi, [rsp + 0x200]
mov r8d, 0x804
mov rcx, rsi
call fcn.1401379e0
mov dword [rsi], 2
xorps xmm0, xmm0
lea r8, [rsp + 0x70]
movaps xmmword [r8], xmm0
mov ecx, 0xa8
add rcx, qword [r13]
mov rdx, rsi
call fcn.1400b2db4
mov esi, eax
jmp 0x1400795f6
mov ecx, 2
call fcn.14006c840
xor esi, esi
test al, al
mov r13, qword [rsp + 0x58]
je 0x1400795f6
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x200]
mov rcx, rsi
mov r8d, 0x1ed
mov r9d, 2
call fcn.14006d900
lea rcx, [rsp + 0x210]
lea rdx, str.CreateProcess
mov r8d, 0xd
call fcn.14001df3c
mov rcx, rsi
call fcn.14006d9f0
xor esi, esi
jmp 0x1400795f6
mov ecx, 2
call fcn.14006c840
test al, al
je 0x1400795ec
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x200]
mov rcx, rsi
mov r8d, 0x1a5
mov r9d, 2
call fcn.14006d900
lea rcx, [rsp + 0x210]
lea rdx, str.InitializeProcThreadAttributeList__size_
mov r8d, 0x28
call fcn.14001df3c
mov rcx, rsi
call fcn.14006d9f0
xor r14d, r14d
xor esi, esi
mov r13, qword [rsp + 0x58]
mov qword [rsp + 0x178], rdi
cmp byte [rsp + 0x188], 0
jne 0x140079f06
lea rcx, [rsp + 0x178]
call fcn.14007a44a
test r14, r14
je 0x140079626
mov rcx, r14
call fcn.140134a14
mov rcx, qword [rsp + 0x190]
test rcx, rcx
je 0x140079640
mov qword [rsp + 0x198], rcx
call fcn.1401349d4
mov rcx, r12
call fcn.140099e3e
cmp byte [rsp + 0x1f7], 0
jns 0x14007965f
mov rcx, qword [rsp + 0x1e0]
call fcn.1401349d4
cmp sil, 1
mov eax, 1
adc rax, 0
mov qword [0x1401aacf8], rax
mov rcx, r13
call fcn.14007a020
mov rcx, qword [rsp + 0xa08]
xor rcx, rsp
call fcn.140135280
mov eax, esi
movaps xmm6, xmmword [rsp + 0xa10]
movaps xmm7, xmmword [rsp + 0xa20]
add rsp, 0xa38
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov ecx, 2
call fcn.14006c840
test al, al
je 0x1400795ef
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x200]
mov rcx, rsi
mov r8d, 0x1b0
mov r9d, 2
call fcn.14006d900
lea rcx, [rsp + 0x210]
lea rdx, str.InitializeProcThreadAttributeList
mov r8d, 0x21
jmp 0x140079e43
mov rdx, qword [rsp + 0x190]
sub rsi, rdx
mov rdi, rsi
sar rdi, 3
lea rax, [rdi + 1]
movabs r8, 0x1fffffffffffffff
cmp rax, r8
ja 0x140079ef1
mov rbp, rsi
sar rbp, 2
cmp rbp, rax
cmovb rbp, rax
movabs rax, 0xfffffffffffffff
cmp rdi, rax
cmovae rbp, r8
test rbp, rbp
mov qword [rsp + 0x50], rdx
je 0x140079782
cmp rbp, r8
ja 0x140079efe
lea rcx, [rbp*8]
call fcn.140134998
movabs r8, 0x1fffffffffffffff
mov rdx, qword [rsp + 0x50]
jmp 0x140079784
xor eax, eax
lea rbp, [rax + rbp*8]
mov rcx, qword [0x14019e048]
lea rdi, [rax + rdi*8]
add rdi, 8
mov qword [rdi - 8], rcx
test rsi, rsi
jle 0x1400797c5
mov rcx, rax
mov rdx, qword [rsp + 0x50]
mov r8, rsi
mov rsi, rax
call fcn.1401379e0
mov rax, rsi
mov rdx, qword [rsp + 0x50]
movabs r8, 0x1fffffffffffffff
mov qword [rsp + 0x190], rax
mov qword [rsp + 0x198], rdi
mov qword [rsp + 0x1a0], rbp
test rdx, rdx
je 0x1400797fc
mov rcx, rdx
call fcn.1401349d4
movabs r8, 0x1fffffffffffffff
mov rdi, qword [rsp + 0x198]
cmp rdi, qword [rsp + 0x1a0]
je 0x140079824
mov rax, qword [0x14019e050]
mov qword [rdi], rax
add rdi, 8
mov qword [rsp + 0x198], rdi
mov rsi, rdi
jmp 0x14007990d
mov rdx, qword [rsp + 0x190]
sub rdi, rdx
mov rsi, rdi
sar rsi, 3
lea rax, [rsi + 1]
cmp rax, r8
ja 0x140079ef1
mov rbp, rdi
sar rbp, 2
cmp rbp, rax
cmovb rbp, rax
movabs rax, 0xfffffffffffffff
cmp rsi, rax
cmovae rbp, r8
test rbp, rbp
mov qword [rsp + 0x50], rdx
je 0x140079893
cmp rbp, r8
ja 0x140079efe
lea rcx, [rbp*8]
call fcn.140134998
movabs r8, 0x1fffffffffffffff
mov rdx, qword [rsp + 0x50]
jmp 0x140079895
xor eax, eax
lea rbp, [rax + rbp*8]
mov rcx, qword [0x14019e050]
lea rsi, [rax + rsi*8]
add rsi, 8
mov qword [rsi - 8], rcx
test rdi, rdi
jle 0x1400798d6
mov rcx, rax
mov rdx, qword [rsp + 0x50]
mov r8, rdi
mov rdi, rax
call fcn.1401379e0
mov rax, rdi
mov rdx, qword [rsp + 0x50]
movabs r8, 0x1fffffffffffffff
mov qword [rsp + 0x190], rax
mov qword [rsp + 0x198], rsi
mov qword [rsp + 0x1a0], rbp
test rdx, rdx
je 0x14007990d
mov rcx, rdx
call fcn.1401349d4
movabs r8, 0x1fffffffffffffff
mov rsi, qword [rsp + 0x198]
cmp rsi, qword [rsp + 0x1a0]
je 0x140079935
mov rax, qword [0x14019e058]
mov qword [rsi], rax
add rsi, 8
mov qword [rsp + 0x198], rsi
mov rbp, rsi
jmp 0x140079a1e
mov rdx, qword [rsp + 0x190]
sub rsi, rdx
mov rbp, rsi
sar rbp, 3
lea rax, [rbp + 1]
cmp rax, r8
ja 0x140079ef1
mov rdi, rsi
sar rdi, 2
cmp rdi, rax
cmovb rdi, rax
movabs rax, 0xfffffffffffffff
cmp rbp, rax
cmovae rdi, r8
test rdi, rdi
mov qword [rsp + 0x50], rdx
je 0x1400799a4
cmp rdi, r8
ja 0x140079efe
lea rcx, [rdi*8]
call fcn.140134998
movabs r8, 0x1fffffffffffffff
mov rdx, qword [rsp + 0x50]
jmp 0x1400799a6
xor eax, eax
lea rdi, [rax + rdi*8]
mov rcx, qword [0x14019e058]
lea rbp, [rax + rbp*8]
add rbp, 8
mov qword [rbp - 8], rcx
test rsi, rsi
jle 0x1400799e7
mov rcx, rax
mov rdx, qword [rsp + 0x50]
mov r8, rsi
mov rsi, rax
call fcn.1401379e0
mov rax, rsi
mov rdx, qword [rsp + 0x50]
movabs r8, 0x1fffffffffffffff
mov qword [rsp + 0x190], rax
mov qword [rsp + 0x198], rbp
mov qword [rsp + 0x1a0], rdi
test rdx, rdx
je 0x140079a1e
mov rcx, rdx
call fcn.1401349d4
movabs r8, 0x1fffffffffffffff
mov rbp, qword [rsp + 0x198]
cmp rbp, qword [rsp + 0x1a0]
je 0x140079a47
mov rax, qword [0x14019e060]
mov qword [rbp], rax
add rbp, 8
mov qword [rsp + 0x198], rbp
mov rdi, rbp
jmp 0x140079b3a
mov rax, qword [rsp + 0x190]
mov qword [rsp + 0x50], rax
sub rbp, rax
mov rsi, rbp
sar rsi, 3
lea rax, [rsi + 1]
cmp rax, r8
ja 0x140079ef1
mov rdi, rbp
sar rdi, 2
cmp rdi, rax
cmovb rdi, rax
movabs rax, 0xfffffffffffffff
cmp rsi, rax
cmovae rdi, r8
test rdi, rdi
je 0x140079ab4
cmp rdi, r8
ja 0x140079efe
lea rcx, [rdi*8]
call fcn.140134998
mov rdx, rax
movabs r8, 0x1fffffffffffffff
jmp 0x140079ab6
xor edx, edx
lea rcx, [rdx + rdi*8]
mov rax, qword [0x14019e060]
lea rdi, [rdx + rsi*8]
add rdi, 8
mov qword [rdi - 8], rax
test rbp, rbp
mov rsi, qword [rsp + 0x50]
jle 0x140079b03
mov qword [rsp + 0x68], rcx
mov rcx, rdx
mov qword [rsp + 0x60], rdx
mov rdx, rsi
mov r8, rbp
call fcn.1401379e0
mov rdx, qword [rsp + 0x60]
movabs r8, 0x1fffffffffffffff
mov rcx, qword [rsp + 0x68]
mov qword [rsp + 0x190], rdx
mov qword [rsp + 0x198], rdi
mov qword [rsp + 0x1a0], rcx
test rsi, rsi
je 0x140079b3a
mov rcx, rsi
call fcn.1401349d4
movabs r8, 0x1fffffffffffffff
mov rdi, qword [rsp + 0x198]
mov rax, qword [rsp + 0x58]
mov rcx, qword [rax]
cmp rdi, qword [rsp + 0x1a0]
movabs rbp, 0xaaaaaaaaaaaaaaaa
je 0x140079b74
mov rax, qword [rcx + 0xc8]
mov qword [rdi], rax
add rdi, 8
mov qword [rsp + 0x198], rdi
mov rsi, rdi
jmp 0x140079c77
mov rdx, qword [rsp + 0x190]
sub rdi, rdx
mov rbp, rdi
sar rbp, 3
lea rax, [rbp + 1]
cmp rax, r8
ja 0x140079ef1
mov rsi, rdi
sar rsi, 2
cmp rsi, rax
cmovb rsi, rax
movabs rax, 0xfffffffffffffff
cmp rbp, rax
cmovae rsi, r8
test rsi, rsi
je 0x140079bed
mov qword [rsp + 0x60], rcx
mov qword [rsp + 0x50], rdx
cmp rsi, r8
ja 0x140079efe
lea rcx, [rsi*8]
call fcn.140134998
movabs r8, 0x1fffffffffffffff
mov rdx, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x60]
jmp 0x140079bef
xor eax, eax
lea r9, [rax + rsi*8]
mov rcx, qword [rcx + 0xc8]
lea rsi, [rax + rbp*8]
add rsi, 8
mov qword [rsi - 8], rcx
test rdi, rdi
jle 0x140079c36
mov rcx, rax
mov rbp, rdx
mov r8, rdi
mov rdi, rax
mov qword [rsp + 0x50], r9
call fcn.1401379e0
mov r9, qword [rsp + 0x50]
mov rax, rdi
mov rdx, rbp
movabs r8, 0x1fffffffffffffff
mov qword [rsp + 0x190], rax
mov qword [rsp + 0x198], rsi
mov qword [rsp + 0x1a0], r9
test rdx, rdx
movabs rbp, 0xaaaaaaaaaaaaaaaa
je 0x140079c77
mov rcx, rdx
call fcn.1401349d4
movabs r8, 0x1fffffffffffffff
mov rsi, qword [rsp + 0x198]
cmp rsi, qword [rsp + 0x1a0]
lea rdi, [0x1401750d0]
je 0x140079c9c
mov qword [rsi], r12
add rsi, 8
mov qword [rsp + 0x198], rsi
jmp 0x140079d76
mov rdx, qword [rsp + 0x190]
sub rsi, rdx
mov rcx, rsi
sar rcx, 3
lea rax, [rcx + 1]
cmp rax, r8
ja 0x140079ef1
mov rbp, rsi
sar rbp, 2
cmp rbp, rax
cmovb rbp, rax
movabs rax, 0xfffffffffffffff
cmp rcx, rax
cmovae rbp, r8
test rbp, rbp
mov qword [rsp + 0x50], rdx
je 0x140079d0e
mov qword [rsp + 0x60], rcx
cmp rbp, r8
ja 0x140079efe
lea rcx, [rbp*8]
call fcn.140134998
mov rdi, rax
mov rdx, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x60]
jmp 0x140079d10
xor edi, edi
lea rax, [rdi + rbp*8]
lea rbp, [rdi + rcx*8]
add rbp, 8
mov qword [rbp - 8], r12
test rsi, rsi
jle 0x140079d40
mov rcx, rdi
mov rdx, qword [rsp + 0x50]
mov r8, rsi
mov rsi, rax
call fcn.1401379e0
mov rax, rsi
mov rdx, qword [rsp + 0x50]
mov qword [rsp + 0x190], rdi
mov qword [rsp + 0x198], rbp
mov qword [rsp + 0x1a0], rax
test rdx, rdx
lea rdi, [0x1401750d0]
movabs rbp, 0xaaaaaaaaaaaaaaaa
je 0x140079d76
mov rcx, rdx
call fcn.1401349d4
mov rdx, qword [rsp + 0xf0]
lea rsi, [rsp + 0x190]
mov rcx, rsi
call fcn.14007a2d1
mov rdx, qword [rsp + 0xf8]
mov rcx, rsi
call fcn.14007a2d1
mov rdx, qword [rsp + 0x100]
mov rcx, rsi
call fcn.14007a2d1
mov rax, qword [0x1401aad28]
mov r9, qword [rsi]
mov rdx, qword [rsi + 8]
sub rdx, r9
mov rcx, qword [rsp + 0x108]
xorps xmm0, xmm0
movups xmmword [rsp + 0x28], xmm0
mov qword [rsp + 0x20], rdx
mov r8d, 0x20002
xor edx, edx
call qword [0x1401bf010]
test eax, eax
je 0x140079df0
mov esi, 0x80000
jmp 0x14007922c
mov ecx, 2
call fcn.14006c840
test al, al
je 0x1400795ef
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x200]
mov rcx, rsi
mov r8d, 0x1cb
mov r9d, 2
call fcn.14006d900
lea rcx, [rsp + 0x210]
lea rdx, str.UpdateProcThreadAttribute
mov r8d, 0x19
call fcn.14001df3c
mov rcx, rsi
call fcn.14006d9f0
jmp 0x1400795ef
lea rcx, [0x1401aad20]
call fcn.140134af0
cmp dword [0x1401aad20], 0xffffffff
jne 0x1400790e6
lea rcx, [0x14017b8be]
lea rdx, str.::InitializeProcThreadAttributeList
xor r8d, r8d
call fcn.140076cc8
mov qword [0x1401aad18], rax
lea rcx, [0x1401aad20]
call fcn.140134b88
jmp 0x1400790e6
lea rcx, [0x1401aad30]
call fcn.140134af0
cmp dword [0x1401aad30], 0xffffffff
jne 0x14007910b
cmp qword [0x1401aad18], 0
je 0x140079ed7
lea rcx, [0x14017b8be]
lea rdx, str.::UpdateProcThreadAttribute
xor r8d, r8d
call fcn.140076cc8
jmp 0x140079ed9
xor eax, eax
mov qword [0x1401aad28], rax
lea rcx, [0x1401aad30]
call fcn.140134b88
jmp 0x14007910b
lea rcx, [rsp + 0x190]
call fcn.14001ba1a
call fcn.140149890
int3
int3