Function at 0x140068800
Capabilities:
Create process on windows
Self delete

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x2f8
movaps xmmword [rsp + 0x2e0], xmm6
mov r13, rcx
mov rax, qword [0x14029c028]
xor rax, rsp
mov qword [rsp + 0x2d8], rax
mov rax, qword gs:[0x30]
mov rax, qword [rax + 0x60]
mov rax, qword [rax + 0x110]
mov rax, qword [rax + 0x10]
mov rcx, qword gs:[0x30]
cmp rax, qword [rcx + 0x48]
je 0x140069c6d
xorps xmm0, xmm0
lea rdx, [rsp + 0x2c0]
movaps xmmword [rdx], xmm0
mov qword [rdx + 0x10], 0
mov rcx, qword [r13]
call fcn.1400d25c0
mov rdi, qword [r13]
mov r14, qword [rdi + 0x78]
mov r15, qword [rdi + 0x80]
cmp r14, r15
je 0x140068931
lea rsi, [rsp + 0xf8]
lea rdi, [rsp + 0x2b0]
lea rbx, [rsp + 0x2c0]
jmp 0x140068903
mov qword [rsp + 0x2b0], r14
mov qword [rsp + 0x2b8], rax
mov rcx, r14
test rcx, rcx
jne 0x1400688cd
test rax, rax
jne 0x140069c5e
mov rcx, rsi
mov rdx, rdi
call fcn.1401219b0
mov rcx, rsi
mov rdx, rbx
call fcn.1400d25c0
cmp byte [rsp + 0x10f], 0
jns 0x1400688fa
mov rcx, qword [rsp + 0xf8]
call fcn.140184dbc
add r14, 0x18
cmp r14, r15
je 0x14006892d
movzx eax, byte [r14 + 0x17]
test al, al
jns 0x1400688ac
mov rcx, qword [r14]
mov rax, qword [r14 + 8]
mov qword [rsp + 0x2b0], rcx
mov qword [rsp + 0x2b8], rax
test rax, rax
jns 0x1400688bf
jmp 0x140069c61
mov rdi, qword [r13]
movzx eax, byte [rdi + 0x2f]
test al, al
jns 0x14006893d
mov rax, qword [rdi + 0x20]
test rax, rax
jne 0x140069a09
movzx eax, byte [rdi + 0x47]
test al, al
jns 0x140068952
mov rax, qword [rdi + 0x38]
test rax, rax
jne 0x140069a77
movzx eax, byte [rdi + 0x5f]
test al, al
js 0x140068998
test rax, rax
jne 0x140069953
mov rbx, qword [rdi + 0x60]
lea rbp, [rdi + 0x68]
cmp rbx, rbp
je 0x140068c2b
movabs rax, 0x7ffffffffffffff8
lea r14, [rax - 9]
xorps xmm6, xmm6
mov qword [rsp + 0x50], rbp
jmp 0x140068c01
mov rax, qword [rdi + 0x50]
test rax, rax
je 0x14006896c
mov rdi, qword [rdi + 0x48]
mov qword [rsp + 0x2a0], rdi
mov qword [rsp + 0x2a8], rax
jns 0x140069967
jmp 0x140069cb6
mov rbp, r14
mov r14, r13
mov r13, r15
or r13, 0xf
inc r13
mov rcx, r13
call fcn.140184dc4
mov rdi, rax
movabs rax, 0x7ffffffffffffff8
add rax, 8
or rax, r13
mov r13, r14
mov r14, rbp
mov rbp, qword [rsp + 0x50]
mov qword [rsp + 0x260], rax
mov qword [rsp + 0x250], rdi
mov qword [rsp + 0x258], r15
jmp 0x140068a4c
mov rsi, qword [rbx + 0x28]
lea r15, [rsi + 1]
cmp r15, r14
ja 0x140069c64
cmp r15, 0x16
ja 0x1400689c0
movaps xmmword [rsp + 0x250], xmm6
mov qword [rsp + 0x260], 0
mov byte [rsp + 0x267], r15b
lea rdi, [rsp + 0x250]
lea rdx, [rbx + 0x20]
test r12b, r12b
jns 0x140068a58
mov rdx, qword [rdx]
cmp rdx, rdi
jb 0x140068a6a
lea rax, [rdi + rsi]
cmp rax, rdx
ja 0x140069c70
mov rcx, rdi
mov r8, rsi
call fcn.140189480
mov word [rdi + rsi], 0x3d
movzx r8d, byte [rbx + 0x4f]
test r8b, r8b
js 0x140068a8f
lea rdx, [rbx + 0x38]
and r8d, 0x7f
jmp 0x140068a97
mov r8, qword [rbx + 0x40]
mov rdx, qword [rbx + 0x38]
lea rcx, [rsp + 0x250]
call fcn.140161ed0
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x290], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x280], xmm0
movups xmmword [rax], xmm6
mov qword [rax + 0x10], 0
movzx ecx, byte [rsp + 0x297]
mov eax, ecx
and eax, 0x7f
test cl, cl
cmovs rax, qword [rsp + 0x288]
mov rcx, qword [rsp + 0x280]
lea rdx, [rsp + 0x280]
cmovns rcx, rdx
mov qword [rsp + 0x270], rcx
mov qword [rsp + 0x278], rax
test rax, rax
js 0x140069c67
test rcx, rcx
jne 0x140068b19
test rax, rax
jne 0x140069c73
lea rsi, [rsp + 0x70]
mov rcx, rsi
lea rdx, [rsp + 0x270]
call fcn.1401219b0
lea rdi, [rsp + 0x238]
mov rcx, rdi
lea rdx, str.annotation
call fcn.1401c4780
lea r15, [rsp + 0xf8]
mov rcx, r15
mov rdx, rdi
mov r8, rsi
call fcn.1400776d0
mov rcx, r15
lea rdx, [rsp + 0x2c0]
call fcn.1400d25c0
cmp byte [rsp + 0x10f], 0
jns 0x140068b82
mov rcx, qword [rsp + 0xf8]
call fcn.140184dbc
cmp byte [rsp + 0x24f], 0
jns 0x140068b99
mov rcx, qword [rsp + 0x238]
call fcn.140184dbc
cmp byte [rsp + 0x87], 0
jns 0x140068bad
mov rcx, qword [rsp + 0x70]
call fcn.140184dbc
cmp byte [rsp + 0x297], 0
jns 0x140068bc4
mov rcx, qword [rsp + 0x280]
call fcn.140184dbc
cmp byte [rsp + 0x267], 0
jns 0x140068bdb
mov rcx, qword [rsp + 0x250]
call fcn.140184dbc
test rbx, rbx
je 0x140069c6a
mov rcx, qword [rbx + 8]
test rcx, rcx
jne 0x140068c1a
mov rax, qword [rbx + 0x10]
cmp qword [rax], rbx
mov rbx, rax
jne 0x140068bed
mov rbx, rax
cmp rax, rbp
je 0x140068c27
movzx r12d, byte [rbx + 0x37]
test r12b, r12b
js 0x140068a11
mov esi, r12d
and esi, 0x7f
jmp 0x140068a15
mov rax, rcx
mov rcx, qword [rcx]
test rcx, rcx
je 0x140068bf9
jmp 0x140068c1a
mov rdi, qword [r13]
mov rsi, qword [rdi + 0x90]
mov r12, qword [rdi + 0x98]
cmp rsi, r12
je 0x140068cb2
lea rdi, [0x140284e70]
lea rbx, [rsp + 0x70]
lea r14, [rsp + 0xf8]
lea r15, [rsp + 0x2c0]
mov rcx, rbx
mov rdx, rdi
call fcn.1401c4780
mov rcx, r14
mov rdx, rbx
mov r8, rsi
call fcn.1400776d0
mov rcx, r14
mov rdx, r15
call fcn.1400d25c0
cmp byte [rsp + 0x10f], 0
jns 0x140068c95
mov rcx, qword [rsp + 0xf8]
call fcn.140184dbc
cmp byte [rsp + 0x87], 0
jns 0x140068ca9
mov rcx, qword [rsp + 0x70]
call fcn.140184dbc
add rsi, 0x18
cmp rsi, r12
jne 0x140068c5a
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, 0x1f0fff
mov edx, 1
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
jne 0x140068d91
cmp dword [0x1402b75e0], 2
jg 0x140068d2c
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rsi, [rsp + 0xf8]
mov rcx, rsi
mov r8d, 0x1a3
mov r9d, 2
call fcn.1401fa650
lea rcx, [rsp + 0x108]
lea rdx, [0x140287087]
mov r8d, 0xb
call fcn.1401c2dd0
mov rcx, rsi
call fcn.1401fa6d0
xor r15d, r15d
xor r12d, r12d
cmp byte [rsp + 0x2d7], 0
jns 0x140068d49
mov rcx, qword [rsp + 0x2c0]
call fcn.140184dbc
xor eax, eax
cmp r12b, 1
adc rax, 1
mov qword [0x1402b7c20], rax
mov rcx, r13
call fcn.140077520
mov rcx, qword [rsp + 0x2d8]
xor rcx, rsp
call fcn.1401879f0
mov eax, r15d
movaps xmm6, xmmword [rsp + 0x2e0]
add rsp, 0x2f8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov rdi, rax
mov rax, qword [r13]
mov rax, qword [rax + 0xc8]
mov rcx, qword [0x1402abfc0]
mov r9, qword [0x1402abfb0]
mov r8, qword [0x1402abfa0]
movsxd rdx, edi
cmp rdx, rdi
jne 0x140069c7c
mov edx, edi
movsxd r10, eax
cmp r10, rax
jne 0x140069c84
movsxd r10, ecx
cmp r10, rcx
jne 0x140069c8c
movsxd r10, r9d
cmp r10, r9
jne 0x140069c94
movsxd r10, r8d
cmp r10, r8
jne 0x140069c9d
lea r10, [0x1402b7bf0]
mov qword [rsp + 0x48], r10
lea r10, [0x1402b7be0]
mov qword [rsp + 0x40], r10
lea r10, [0x1402b7bd0]
mov qword [rsp + 0x38], r10
mov dword [rsp + 0x30], edx
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], ecx
lea rdx, str.0x_x_0x_x_0x_x_0x_x_0x_x_0x_I64x_0x_I64x_0x_I64x
lea rsi, [rsp + 0x280]
mov rcx, rsi
call fcn.140121620
lea rdx, str.__initial_client_data
lea rbx, [rsp + 0x250]
mov rcx, rbx
call fcn.1401c4780
movzx r8d, byte [rsi + 0x17]
test r8b, r8b
js 0x140068e60
and r8d, 0x7f
jmp 0x140068e70
mov r8, qword [rsp + 0x288]
mov rsi, qword [rsp + 0x280]
mov rcx, rbx
mov rdx, rsi
call fcn.140161ed0
mov rcx, qword [rax + 0x10]
lea r15, [rsp + 0x70]
mov qword [r15 + 0x10], rcx
movups xmm0, xmmword [rax]
movaps xmmword [r15], xmm0
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov qword [rax + 0x10], 0
movzx ecx, byte [r15 + 0x17]
mov eax, ecx
and eax, 0x7f
test cl, cl
cmovs rax, qword [r15 + 8]
mov rcx, qword [r15]
cmovns rcx, r15
mov qword [rsp + 0xe8], rcx
mov qword [rsp + 0xf0], rax
test rax, rax
js 0x140069c76
mov qword [rsp + 0x50], r13
test rcx, rcx
jne 0x140068ee1
test rax, rax
jne 0x140069ca6
lea r13, [rsp + 0xf8]
lea rdx, [rsp + 0xe8]
mov rcx, r13
call fcn.1401219b0
lea r12, [rsp + 0x2c0]
mov rcx, r13
mov rdx, r12
call fcn.1400d25c0
cmp byte [r13 + 0x17], 0
jns 0x140068f20
mov rcx, qword [rsp + 0xf8]
call fcn.140184dbc
cmp byte [rsp + 0x87], 0
jns 0x140068f34
mov rcx, qword [rsp + 0x70]
call fcn.140184dbc
cmp byte [rsp + 0x267], 0
jns 0x140068f4b
mov rcx, qword [rsp + 0x250]
call fcn.140184dbc
cmp byte [rsp + 0x297], 0
jns 0x140068f62
mov rcx, qword [rsp + 0x280]
call fcn.140184dbc
xorps xmm6, xmm6
movaps xmmword [rsp + 0xa0], xmm6
movaps xmmword [rsp + 0xd0], xmm6
movaps xmmword [rsp + 0xc0], xmm6
movaps xmmword [rsp + 0xb0], xmm6
movaps xmmword [rsp + 0x90], xmm6
movaps xmmword [rsp + 0x80], xmm6
movaps xmmword [rsp + 0x70], xmm6
mov dword [rsp + 0xac], 0x100
mov rsi, qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov ecx, 0xfffffff6
call rsi
mov qword [rsp + 0xc0], rax
mov ecx, 0xfffffff5
call rsi
mov qword [rsp + 0xc8], rax
mov ecx, 0xfffffff4
call rsi
mov qword [rsp + 0xd0], rax
movaps xmmword [rsp + 0x280], xmm6
mov qword [rsp + 0x290], 0
mov eax, dword [0x1402b7c30]
mov ecx, dword [0x1402ac5e0]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140069ba6
mov eax, dword [0x1402b7c40]
mov ecx, dword [0x1402ac5e0]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140069bfd
mov rax, qword [0x1402b7c28]
movabs rcx, 0xaaaaaaaaaaaaaaaa
test rax, rax
je 0x1400690f1
cmp qword [0x1402b7c38], 0
je 0x1400690f1
mov dword [rsp + 0x70], 0x70
lea r9, [rsp + 0x250]
mov qword [r9], rcx
xor ecx, ecx
mov edx, 1
xor r8d, r8d
call qword [0x1402ca008]
test eax, eax
je 0x140069447
cmp dword [0x1402b75e0], 2
jg 0x1400690d8
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rsi, [rsp + 0xf8]
mov rcx, rsi
mov r8d, 0x1d4
mov r9d, 2
call fcn.1400078c0
lea rcx, [rsp + 0x108]
lea rdx, str.InitializeProcThreadAttributeList__size__succeeded__expected_failure
mov r8d, 0x44
call fcn.1401c2dd0
mov rcx, rsi
call fcn.1400079b0
xor r14d, r14d
xor ebp, ebp
xor esi, esi
xor ebx, ebx
mov r13, qword [rsp + 0x50]
xor r12d, r12d
xor r15d, r15d
jmp 0x14006926c
mov dword [rsp + 0x70], 0x68
xor r14d, r14d
xor ebp, ebp
xor eax, eax
mov qword [rsp + 0x60], rax
xor ebx, ebx
xor esi, esi
mov rax, qword [rsp + 0x50]
mov rdx, qword [rax]
movzx r8d, byte [rdx + 0x17]
test r8b, r8b
js 0x140069394
cmp r8b, 0xc
jae 0x1400693a2
mov qword [rsp + 0x260], rcx
movaps xmm0, xmmword [0x14026dc70]
movaps xmmword [rsp + 0x250], xmm0
cmp byte [rsp + 0x2d7], 0
js 0x140069154
lea r12, [rsp + 0x2c0]
jmp 0x14006915c
mov r12, qword [rsp + 0x2c0]
mov r13, qword [rsp + 0x50]
cmp byte [rdx + 0x17], 0
jns 0x14006916a
mov rdx, qword [rdx]
lea rax, [rsp + 0x250]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x40], r15
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], 1
mov rcx, rdx
mov rdx, r12
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x140069331
mov rcx, qword [rsp + 0x258]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [0x1402b75e0], 1
jg 0x1400691d2
cmp dword [0x1402abf58], 0
je 0x1400691d2
test eax, eax
je 0x140069afe
mov rcx, qword [rsp + 0x250]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [0x1402b75e0], 1
jg 0x1400691fa
cmp dword [0x1402abf58], 0
je 0x1400691fa
test eax, eax
je 0x140069b52
mov rsi, qword [r13]
mov rcx, qword [rsi + 0xc8]
cmp rcx, 0xffffffffffffffff
je 0x140069218
call fcn.140061d00
test al, al
je 0x140069cb9
mov qword [rsi + 0xc8], 0xffffffffffffffff
xorps xmm0, xmm0
lea rdx, [rsp + 0xf8]
movups xmmword [rdx + 0x14], xmm0
movups xmmword [rdx + 4], xmm0
mov dword [rdx], 2
lea r8, [rsp + 0x238]
mov dword [r8 + 8], 0
mov qword [r8], 0
mov ecx, 0xa8
add rcx, qword [r13]
call fcn.140060840
mov r12d, eax
mov r15d, eax
mov rsi, qword [rsp + 0x60]
test rsi, rsi
je 0x1400692f0
mov eax, dword [0x1402b7c50]
mov ecx, dword [0x1402ac5e0]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jle 0x1400692e0
lea rcx, [0x1402b7c50]
call fcn.140184f58
cmp dword [0x1402b7c50], 0xffffffff
jne 0x1400692e0
lea rcx, [0x140278570]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
test rax, rax
je 0x140069ca9
lea rdx, [0x1402871e5]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1402b7c48], rax
lea rcx, [0x1402b7c50]
call fcn.140184fc0
mov rax, qword [0x1402b7c48]
mov rcx, rsi
call qword [0x1402ca008]
test rbx, rbx
je 0x1400692fd
mov rcx, rbx
call fcn.140185020
test rbp, rbp
je 0x14006931b
cmp r14, rbp
jne 0x140069ae5
mov qword [rsp + 0x288], rbp
mov rcx, rbp
call fcn.140184dbc
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
jne 0x140068d32
jmp 0x140069cbc
cmp dword [0x1402b75e0], 2
jg 0x140069389
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rsi, [rsp + 0xf8]
mov rcx, rsi
mov r8d, 0x21f
mov r9d, 2
call fcn.1401fa650
lea rcx, [rsp + 0x108]
lea rdx, str.CreateProcess
mov r8d, 0xd
call fcn.1401c2dd0
mov rcx, rsi
call fcn.1401fa6d0
xor r12d, r12d
xor r15d, r15d
jmp 0x140069267
mov r8, qword [rdx + 8]
cmp r8, 0xc
jb 0x140069129
add r8, 0xfffffffffffffff4
lea rax, [rsp + 0x250]
mov qword [rsp + 0x20], rax
mov rcx, r13
mov r9, 0xffffffffffffffff
call fcn.14001ebb0
cmp byte [rsp + 0x10f], 0
jns 0x1400693d4
mov r13, qword [rsp + 0xf8]
lea rdx, str.rundll32.exe
mov rcx, r13
call fcn.1401a1b04
mov r13d, eax
cmp byte [rsp + 0x10f], 0
jns 0x1400693fd
mov rcx, qword [rsp + 0xf8]
call fcn.140184dbc
cmp byte [rsp + 0x2d7], 0
jns 0x14006940f
mov r12, qword [rsp + 0x2c0]
movabs rax, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x260], rax
movaps xmm0, xmmword [0x14026dc70]
movaps xmmword [rsp + 0x250], xmm0
test r13d, r13d
je 0x140069af2
mov r13, qword [rsp + 0x50]
mov rdx, qword [r13]
jmp 0x140069161
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
je 0x1400694b3
cmp dword [0x1402b75e0], 2
jg 0x1400690d8
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rsi, [rsp + 0xf8]
mov rcx, rsi
mov r8d, 0x1d8
mov r9d, 2
call fcn.1401fa650
lea rcx, [rsp + 0x108]
lea rdx, str.InitializeProcThreadAttributeList__size_
mov r8d, 0x28
call fcn.1401c2dd0
mov rcx, rsi
call fcn.1401fa6d0
jmp 0x1400690d8
lea rsi, [rsp + 0x250]
mov rcx, qword [rsi]
call fcn.140185028
mov rbx, rax
mov qword [rsp + 0xd8], rax
mov rax, qword [0x1402b7c28]
mov rcx, rbx
mov edx, 1
xor r8d, r8d
mov r9, rsi
call qword [0x1402ca008]
test eax, eax
je 0x140069677
mov rsi, qword [rsp + 0xd8]
mov ecx, 0x40
call fcn.140184dc4
mov rbp, rax
add rax, 0x40
mov qword [rsp + 0x280], rbp
mov qword [rsp + 0x290], rax
test rbp, rbp
je 0x140069d0c
mov rax, qword [0x1402abfa0]
mov qword [rbp], rax
mov rax, rbp
add rax, 8
mov qword [rsp + 0x288], rax
je 0x140069d0f
mov qword [rsp + 0x58], rbx
mov rax, qword [0x1402abfb0]
mov qword [rbp + 8], rax
cmp rbp, 0xfffffffffffffff0
je 0x140069d12
mov rax, qword [0x1402abfc0]
mov qword [rbp + 0x10], rax
lea rax, [rbp + 0x18]
mov qword [rsp + 0x288], rax
mov rbx, qword [rsp + 0x290]
mov rcx, qword [rsp + 0x50]
mov r8, qword [rcx]
cmp rax, rbx
mov qword [rsp + 0x60], rsi
je 0x1400696db
test rax, rax
je 0x140069d15
mov rax, qword [r8 + 0xc8]
mov qword [rbp + 0x18], rax
mov rsi, rbp
add rsi, 0x20
mov qword [rsp + 0x288], rsi
mov r8, qword [rsp + 0x290]
mov rbx, qword [rsp + 0x58]
cmp rsi, r8
je 0x14006983e
test rsi, rsi
je 0x140069d18
mov qword [rsi], rdi
add rsi, 8
mov qword [rsp + 0x288], rsi
mov rdx, qword [rsp + 0xc0]
lea rsi, [rsp + 0x280]
mov rcx, rsi
call fcn.1400c6000
mov rdx, qword [rsp + 0xc8]
mov rcx, rsi
call fcn.1400c6000
mov rdx, qword [rsp + 0xd0]
mov rcx, rsi
call fcn.1400c6000
mov rbp, qword [rsi]
mov r14, qword [rsi + 8]
mov rdx, r14
sub rdx, rbp
je 0x140069946
mov rax, qword [0x1402b7c38]
mov rcx, qword [rsp + 0xd8]
xorps xmm0, xmm0
movups xmmword [rsp + 0x28], xmm0
mov qword [rsp + 0x20], rdx
mov r8d, 0x20002
xor edx, edx
mov r9, rbp
call qword [0x1402ca008]
test eax, eax
je 0x1400697d7
mov esi, 0x80000
movabs rcx, 0xaaaaaaaaaaaaaaaa
jmp 0x140069109
cmp dword [0x1402b75e0], 2
jg 0x1400696cf
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rsi, [rsp + 0xf8]
mov rcx, rsi
mov r8d, 0x1e3
mov r9d, 2
call fcn.1401fa650
lea rcx, [rsp + 0x108]
lea rdx, [0x140287158]
mov r8d, 0x21
call fcn.1401c2dd0
mov rcx, rsi
call fcn.1401fa6d0
xor r14d, r14d
xor ebp, ebp
xor esi, esi
jmp 0x1400690e1
mov rax, rbx
sub rax, rbp
mov r14, rax
sar r14, 3
lea rdx, [r14 + 1]
mov rcx, rdx
shr rcx, 0x3d
jne 0x140069d1b
movabs rcx, 0x1fffffffffffffff
mov rsi, rax
sar rsi, 2
cmp rsi, rdx
cmovbe rsi, rdx
movabs rdx, 0x7ffffffffffffff8
cmp rax, rdx
cmovae rsi, rcx
test rsi, rsi
mov qword [rsp + 0x68], r8
je 0x140069d1e
cmp rsi, rcx
ja 0x140069d25
lea rcx, [rsi*8]
call fcn.140184dc4
shl r14, 3
add r14, rax
je 0x140069d28
lea r8, [rax + rsi*8]
mov rax, qword [rsp + 0x68]
mov rax, qword [rax + 0xc8]
mov qword [r14], rax
lea rsi, [r14 + 8]
cmp rbx, rbp
je 0x140069796
mov rax, qword [rbx - 8]
add rbx, 0xfffffffffffffff8
mov qword [r14 - 8], rax
add r14, 0xfffffffffffffff8
cmp rbx, rbp
jne 0x14006976f
mov rcx, qword [rsp + 0x280]
mov rbp, qword [rsp + 0x288]
jmp 0x140069799
mov rcx, rbp
mov qword [rsp + 0x280], r14
mov qword [rsp + 0x288], rsi
mov qword [rsp + 0x290], r8
mov rbx, qword [rsp + 0x58]
cmp rbp, rcx
je 0x1400697c6
add rbp, 0xfffffffffffffff8
jne 0x1400697b6
jmp 0x140069cb0
test rcx, rcx
jne 0x140069936
mov rbp, r14
jmp 0x1400695c2
cmp dword [0x1402b75e0], 2
jg 0x14006982f
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rsi, [rsp + 0xf8]
mov rcx, rsi
mov r8d, 0x1fd
mov r9d, 2
call fcn.1401fa650
lea rcx, [rsp + 0x108]
lea rdx, [0x14028717a]
mov r8d, 0x19
call fcn.1401c2dd0
mov rcx, rsi
call fcn.1401fa6d0
mov r13, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x60]
jmp 0x1400690e6
mov rax, r8
sub rax, rbp
mov rsi, rax
sar rsi, 3
lea rdx, [rsi + 1]
mov rcx, rdx
shr rcx, 0x3d
jne 0x140069d2b
movabs rcx, 0x1fffffffffffffff
mov rbx, rax
sar rbx, 2
cmp rbx, rdx
cmovbe rbx, rdx
movabs rdx, 0x7ffffffffffffff8
cmp rax, rdx
cmovae rbx, rcx
test rbx, rbx
je 0x140069949
cmp rbx, rcx
ja 0x140069d2e
mov r14, r8
lea rcx, [rbx*8]
call fcn.140184dc4
shl rsi, 3
add rsi, rax
je 0x140069d31
mov r8, r14
lea rax, [rax + rbx*8]
mov qword [rsi], rdi
lea rdx, [rsi + 8]
cmp r14, rbp
jne 0x1400698d1
mov rcx, rbp
mov rbx, qword [rsp + 0x58]
jmp 0x1400698fb
mov rbx, qword [rsp + 0x58]
mov rcx, qword [r8 - 8]
add r8, 0xfffffffffffffff8
mov qword [rsi - 8], rcx
add rsi, 0xfffffffffffffff8
cmp r8, rbp
jne 0x1400698d6
mov rcx, qword [rsp + 0x280]
mov rbp, qword [rsp + 0x288]
mov qword [rsp + 0x280], rsi
mov qword [rsp + 0x288], rdx
mov qword [rsp + 0x290], rax
cmp rbp, rcx
je 0x140069923
add rbp, 0xfffffffffffffff8
jne 0x140069913
jmp 0x140069cb3
test rcx, rcx
je 0x1400695e3
call fcn.140184dbc
jmp 0x1400695e3
mov rbp, r8
call fcn.140184dbc
mov r8, rbp
jmp 0x1400697cf
int3
mov r14, r8
xor eax, eax
jmp 0x1400698a7
add rdi, 0x48
mov qword [rsp + 0x2a0], rdi
mov qword [rsp + 0x2a8], rax
test rdi, rdi
je 0x140069c79
lea rsi, [rsp + 0x70]
lea rdx, [rsp + 0x2a0]
mov rcx, rsi
call fcn.1401219b0
lea rdx, [0x14027854c]
lea rdi, [rsp + 0x280]
mov rcx, rdi
call fcn.1401c4780
lea rbx, [rsp + 0xf8]
mov rcx, rbx
mov rdx, rdi
mov r8, rsi
call fcn.1400776d0
lea rdx, [rsp + 0x2c0]
mov rcx, rbx
call fcn.1400d25c0
cmp byte [rbx + 0x17], 0
jns 0x1400699d5
mov rcx, qword [rsp + 0xf8]
call fcn.140184dbc
cmp byte [rsp + 0x297], 0
jns 0x1400699ec
mov rcx, qword [rsp + 0x280]
call fcn.140184dbc
cmp byte [rsp + 0x87], 0
jns 0x140069a00
mov rcx, qword [rsp + 0x70]
call fcn.140184dbc
mov rdi, qword [r13]
jmp 0x14006896c
add rdi, 0x18
lea rdx, str.database
lea rsi, [rsp + 0x70]
mov rcx, rsi
call fcn.1401c4780
lea rbx, [rsp + 0xf8]
mov rcx, rbx
mov rdx, rsi
mov r8, rdi
call fcn.1400776d0
lea rdx, [rsp + 0x2c0]
mov rcx, rbx
call fcn.1400d25c0
cmp byte [rbx + 0x17], 0
jns 0x140069a5a
mov rcx, qword [rsp + 0xf8]
call fcn.140184dbc
cmp byte [rsp + 0x87], 0
jns 0x140069a6e
mov rcx, qword [rsp + 0x70]
call fcn.140184dbc
mov rdi, qword [r13]
jmp 0x140068946
add rdi, 0x30
lea rdx, str.metrics_dir
lea rsi, [rsp + 0x70]
mov rcx, rsi
call fcn.1401c4780
lea rbx, [rsp + 0xf8]
mov rcx, rbx
mov rdx, rsi
mov r8, rdi
call fcn.1400776d0
lea rdx, [rsp + 0x2c0]
mov rcx, rbx
call fcn.1400d25c0
cmp byte [rbx + 0x17], 0
jns 0x140069ac8
mov rcx, qword [rsp + 0xf8]
call fcn.140184dbc
cmp byte [rsp + 0x87], 0
jns 0x140069adc
mov rcx, qword [rsp + 0x70]
call fcn.140184dbc
mov rdi, qword [r13]
jmp 0x14006895b
add r14, 0xfffffffffffffff8
jne 0x140069302
int3
xor edx, edx
mov r13, qword [rsp + 0x50]
jmp 0x14006916a
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rsi, [rsp + 0xf8]
mov rcx, rsi
mov r8d, 0x224
mov r9d, 1
call fcn.1401fa650
lea rcx, [rsp + 0x108]
lea rdx, str.CloseHandle_thread
mov r8d, 0x12
call fcn.1401c2dd0
mov rcx, rsi
call fcn.1401fa6d0
jmp 0x1400691d2
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rsi, [rsp + 0xf8]
mov rcx, rsi
mov r8d, 0x227
mov r9d, 1
call fcn.1401fa650
lea rcx, [rsp + 0x108]
lea rdx, str.CloseHandle_process
mov r8d, 0x13
call fcn.1401c2dd0
mov rcx, rsi
call fcn.1401fa6d0
jmp 0x1400691fa
lea rcx, [0x1402b7c30]
call fcn.140184f58
cmp dword [0x1402b7c30], 0xffffffff
jne 0x140069012
lea rcx, [0x140278570]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
test rax, rax
je 0x140069bf9
lea rdx, [0x1402870ac]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1402b7c28], rax
lea rcx, [0x1402b7c30]
call fcn.140184fc0
jmp 0x140069012
xor eax, eax
jmp 0x140069be1
lea rcx, [0x1402b7c40]
call fcn.140184f58
cmp dword [0x1402b7c40], 0xffffffff
jne 0x140069037
cmp qword [0x1402b7c28], 0
je 0x140069c5a
lea rcx, [0x140278570]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
test rax, rax
je 0x140069c5a
lea rdx, [0x1402870d0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1402b7c38], rax
lea rcx, [0x1402b7c40]
call fcn.140184fc0
jmp 0x140069037
xor eax, eax
jmp 0x140069c42
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
xor eax, eax
jmp 0x1400692cd
int3
int3
int3
int3
lea rdx, str.Free
lea r8, str....._third_partycrashpadcrashpadutilwin_scoped_handle.cc
lea rsi, [rsp + 0xf8]
mov rcx, rsi
mov r9d, 0x1e
call fcn.1400ee990
lea rdi, [rsp + 0x70]
mov rcx, rdi
mov rdx, rsi
call fcn.1401fbb20
lea rdx, [0x140288b91]
mov rcx, rdi
call fcn.1402108b0
mov rcx, rdi
call fcn.1401fbb50
jmp 0x140068d32
int3
int3
int3
int3
int3
int3
xor eax, eax
jmp 0x140069746
int3
int3
int3
int3
int3