Function at 0x1400301e0
Capabilities:
Create process on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x348
movaps xmmword [rsp + 0x330], xmm7
movaps xmmword [rsp + 0x320], xmm6
mov r12, rcx
mov rax, qword [0x14010c038]
xor rax, rsp
mov qword [rsp + 0x318], rax
call fcn.140040030
test al, al
jne 0x14003165f
xorps xmm0, xmm0
lea rdx, [rsp + 0x300]
movaps xmmword [rdx], xmm0
mov qword [rdx + 0x10], 0
mov rcx, qword [r12]
call fcn.140040060
mov rsi, qword [r12]
mov rbp, qword [rsi + 0x78]
mov rdi, qword [rsi + 0x80]
cmp rbp, rdi
je 0x1400302cd
lea rsi, [rsp + 0x148]
lea r14, [rsp + 0x2f0]
lea rbx, [rsp + 0x300]
movzx eax, byte [rbp + 0x17]
test al, al
mov rcx, qword [rbp]
cmovns rcx, rbp
mov qword [rsp + 0x2f0], rcx
cmovs rax, qword [rbp + 8]
mov qword [rsp + 0x2f8], rax
mov rcx, rsi
mov rdx, r14
call fcn.14005cd00
mov rcx, rsi
mov rdx, rbx
call fcn.140040060
cmp byte [rsp + 0x15f], 0
jns 0x1400302c0
mov rcx, qword [rsp + 0x148]
call fcn.140078974
add rbp, 0x18
cmp rdi, rbp
jne 0x140030270
mov rsi, qword [r12]
movzx eax, byte [rsi + 0x2f]
test al, al
jns 0x1400302d9
mov rax, qword [rsi + 0x20]
test rax, rax
jne 0x14003064f
movzx eax, byte [rsi + 0x47]
test al, al
jns 0x1400302ee
mov rax, qword [rsi + 0x38]
test rax, rax
jne 0x1400306c3
movzx eax, byte [rsi + 0x5f]
test al, al
js 0x140030304
mov rcx, rax
jmp 0x140030308
mov rcx, qword [rsi + 0x50]
test rcx, rcx
jne 0x140030737
mov r15, qword [rsi + 0x60]
lea r14, [rsi + 0x68]
cmp r15, r14
je 0x1400304d0
mov qword [rsp + 0x58], r12
lea rdi, [rsp + 0x2b0]
xorps xmm6, xmm6
lea rbx, [rsp + 0x80]
lea r12, str.annotation
lea rsi, [rsp + 0x290]
lea rbp, [rsp + 0x148]
lea r13, [rsp + 0x300]
lea rdx, [r15 + 0x20]
mov rcx, rdi
mov r8b, 0x3d
call fcn.1400ab970
movzx r8d, byte [r15 + 0x4f]
test r8b, r8b
jns 0x14003037c
mov r8, qword [r15 + 0x40]
mov rdx, qword [r15 + 0x38]
jmp 0x140030380
lea rdx, [r15 + 0x38]
mov rcx, rdi
call fcn.1400576e0
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x110], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x100], xmm0
movups xmmword [rax], xmm6
mov qword [rax + 0x10], 0
movzx eax, byte [rsp + 0x117]
test al, al
mov rcx, qword [rsp + 0x100]
lea rdx, [rsp + 0x100]
cmovns rcx, rdx
mov qword [rsp + 0x2d0], rcx
cmovs rax, qword [rsp + 0x108]
mov qword [rsp + 0x2d8], rax
mov rcx, rbx
lea rdx, [rsp + 0x2d0]
call fcn.14005cd00
mov rcx, rsi
mov rdx, r12
call fcn.1400aa540
mov rcx, rbp
mov rdx, rsi
mov r8, rbx
call fcn.140031820
mov rcx, rbp
mov rdx, r13
call fcn.140040060
cmp byte [rsp + 0x15f], 0
jns 0x14003042c
mov rcx, qword [rsp + 0x148]
call fcn.140078974
cmp byte [rsp + 0x2a7], 0
jns 0x140030443
mov rcx, qword [rsp + 0x290]
call fcn.140078974
cmp byte [rsp + 0x97], 0
jns 0x14003045a
mov rcx, qword [rsp + 0x80]
call fcn.140078974
cmp byte [rsp + 0x117], 0
jns 0x140030471
mov rcx, qword [rsp + 0x100]
call fcn.140078974
cmp byte [rsp + 0x2c7], 0
jns 0x140030488
mov rcx, qword [rsp + 0x2b0]
call fcn.140078974
mov rcx, qword [r15 + 8]
test rcx, rcx
je 0x14003049e
mov rax, rcx
mov rcx, qword [rcx]
test rcx, rcx
jne 0x140030491
jmp 0x1400304bb
mov rax, qword [r15 + 0x10]
cmp qword [rax], r15
je 0x1400304bb
add r15, 0x10
mov rcx, qword [r15]
lea r15, [rcx + 0x10]
mov rax, qword [rcx + 0x10]
cmp qword [rax], rcx
jne 0x1400304ab
mov r15, rax
cmp rax, r14
jne 0x140030359
mov r12, qword [rsp + 0x58]
mov rsi, qword [r12]
mov rdi, qword [rsi + 0x90]
mov rsi, qword [rsi + 0x98]
cmp rdi, rsi
je 0x14003055d
lea r15, [0x1400f382f]
lea rbx, [rsp + 0x80]
lea rbp, [rsp + 0x148]
lea r14, [rsp + 0x300]
mov rcx, rbx
mov rdx, r15
call fcn.1400aa540
mov rcx, rbp
mov rdx, rbx
mov r8, rdi
call fcn.140031820
mov rcx, rbp
mov rdx, r14
call fcn.140040060
cmp byte [rsp + 0x15f], 0
jns 0x14003053d
mov rcx, qword [rsp + 0x148]
call fcn.140078974
cmp byte [rsp + 0x97], 0
jns 0x140030554
mov rcx, qword [rsp + 0x80]
call fcn.140078974
add rdi, 0x18
cmp rsi, rdi
jne 0x140030502
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, 0x1f0fff
mov edx, 1
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
jne 0x1400307ed
mov ecx, 2
call fcn.140064750
xor ebx, ebx
mov ebp, 0
test al, al
je 0x1400305e6
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x148]
mov rcx, rsi
mov r8d, 0x18c
mov r9d, 2
call fcn.1400cb600
lea rcx, [rsp + 0x158]
lea rdx, [0x1400f383a]
mov r8d, 0xb
call fcn.140051090
mov rcx, rsi
call fcn.1400cb6f0
xor ebx, ebx
xor ebp, ebp
cmp byte [rsp + 0x317], 0
jns 0x1400305fd
mov rcx, qword [rsp + 0x300]
call fcn.140078974
cmp bpl, 1
mov eax, 1
adc rax, 0
mov qword [0x1401141b8], rax
mov rcx, r12
call fcn.1400316d0
mov rcx, qword [rsp + 0x318]
xor rcx, rsp
call fcn.1400797f0
mov eax, ebx
movaps xmm6, xmmword [rsp + 0x320]
movaps xmm7, xmmword [rsp + 0x330]
add rsp, 0x348
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
add rsi, 0x18
lea rdx, str.database
lea rdi, [rsp + 0x80]
mov rcx, rdi
call fcn.1400aa540
lea rbx, [rsp + 0x148]
mov rcx, rbx
mov rdx, rdi
mov r8, rsi
call fcn.140031820
lea rdx, [rsp + 0x300]
mov rcx, rbx
call fcn.140040060
cmp byte [rbx + 0x17], 0
jns 0x1400306a3
mov rcx, qword [rsp + 0x148]
call fcn.140078974
cmp byte [rsp + 0x97], 0
jns 0x1400306ba
mov rcx, qword [rsp + 0x80]
call fcn.140078974
mov rsi, qword [r12]
jmp 0x1400302e2
add rsi, 0x30
lea rdx, str.metrics_dir
lea rdi, [rsp + 0x80]
mov rcx, rdi
call fcn.1400aa540
lea rbx, [rsp + 0x148]
mov rcx, rbx
mov rdx, rdi
mov r8, rsi
call fcn.140031820
lea rdx, [rsp + 0x300]
mov rcx, rbx
call fcn.140040060
cmp byte [rbx + 0x17], 0
jns 0x140030717
mov rcx, qword [rsp + 0x148]
call fcn.140078974
cmp byte [rsp + 0x97], 0
jns 0x14003072e
mov rcx, qword [rsp + 0x80]
call fcn.140078974
mov rsi, qword [r12]
jmp 0x1400302f7
lea rcx, [rsi + 0x48]
test al, al
cmovs rcx, qword [rsi + 0x48]
lea rdx, [rsp + 0x2e0]
mov qword [rdx], rcx
cmovs rax, qword [rsi + 0x50]
mov qword [rdx + 8], rax
lea rsi, [rsp + 0x80]
mov rcx, rsi
call fcn.14005cd00
lea rdx, [0x1400f3820]
lea rdi, [rsp + 0x100]
mov rcx, rdi
call fcn.1400aa540
lea rbx, [rsp + 0x148]
mov rcx, rbx
mov rdx, rdi
mov r8, rsi
call fcn.140031820
lea rdx, [rsp + 0x300]
mov rcx, rbx
call fcn.140040060
cmp byte [rbx + 0x17], 0
jns 0x1400307b6
mov rcx, qword [rsp + 0x148]
call fcn.140078974
cmp byte [rsp + 0x117], 0
jns 0x1400307cd
mov rcx, qword [rsp + 0x100]
call fcn.140078974
cmp byte [rsp + 0x97], 0
jns 0x1400307e4
mov rcx, qword [rsp + 0x80]
call fcn.140078974
mov rsi, qword [r12]
jmp 0x140030311
mov rdi, rax
movabs r14, 0xaaaaaaaaaaaaaaaa
lea rbx, [rsp + 0x100]
mov qword [rbx + 0x40], r14
movaps xmm6, xmmword [0x1400ec9c0]
movaps xmmword [rbx + 0x30], xmm6
movaps xmmword [rbx + 0x20], xmm6
movaps xmmword [rbx + 0x10], xmm6
movaps xmmword [rbx], xmm6
mov rax, qword [r12]
mov rax, qword [rax + 0xc8]
mov r9, qword [0x14010e298]
mov r8, qword [0x14010e290]
mov rdx, qword [0x14010e288]
lea rcx, [0x140114188]
mov qword [rsp + 0x40], rcx
lea rcx, [0x140114178]
mov qword [rsp + 0x38], rcx
lea rcx, [0x140114168]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rax
mov rcx, rbx
call fcn.1400401f0
lea rsi, [rsp + 0x2b0]
mov rcx, rbx
mov rdx, rsi
call fcn.140040220
lea rdx, str.__initial_client_data
lea rbx, [rsp + 0x290]
mov rcx, rbx
call fcn.1400aa540
movzx r8d, byte [rsi + 0x17]
test r8b, r8b
jns 0x1400308b6
mov r8, qword [rsp + 0x2b8]
mov rsi, qword [rsp + 0x2b0]
mov rcx, rbx
mov rdx, rsi
call fcn.1400576e0
mov rcx, qword [rax + 0x10]
lea r15, [rsp + 0x80]
mov qword [r15 + 0x10], rcx
movups xmm0, xmmword [rax]
movaps xmmword [r15], xmm0
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov qword [rax + 0x10], 0
movzx eax, byte [r15 + 0x17]
test al, al
mov rcx, qword [r15]
cmovns rcx, r15
lea rdx, [rsp + 0xf0]
mov qword [rdx], rcx
cmovs rax, qword [r15 + 8]
mov qword [rdx + 8], rax
lea rsi, [rsp + 0x148]
mov rcx, rsi
call fcn.14005cd00
lea rbx, [rsp + 0x300]
mov rcx, rsi
mov rdx, rbx
call fcn.140040060
cmp byte [rsi + 0x17], 0
jns 0x14003093e
mov rcx, qword [rsp + 0x148]
call fcn.140078974
cmp byte [rsp + 0x97], 0
jns 0x140030955
mov rcx, qword [rsp + 0x80]
call fcn.140078974
cmp byte [rsp + 0x2a7], 0
jns 0x14003096c
mov rcx, qword [rsp + 0x290]
call fcn.140078974
cmp byte [rsp + 0x2c7], 0
jns 0x140030983
mov rcx, qword [rsp + 0x2b0]
call fcn.140078974
xorps xmm7, xmm7
movaps xmmword [rsp + 0xb0], xmm7
movaps xmmword [rsp + 0xe0], xmm7
movaps xmmword [rsp + 0xd0], xmm7
movaps xmmword [rsp + 0xc0], xmm7
movaps xmmword [rsp + 0xa0], xmm7
movaps xmmword [rsp + 0x90], xmm7
movaps xmmword [rsp + 0x80], xmm7
mov dword [rsp + 0xbc], 0x100
mov rsi, qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov ecx, 0xfffffff6
call rsi
mov qword [rsp + 0xd0], rax
mov ecx, 0xfffffff5
call rsi
mov qword [rsp + 0xd8], rax
mov ecx, 0xfffffff4
call rsi
mov qword [rsp + 0xe0], rax
movaps xmmword [rsp + 0x2b0], xmm7
mov qword [rsp + 0x2c0], 0
mov eax, dword [0x1401141c8]
mov ecx, dword [0x14010f734]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400315b1
mov eax, dword [0x1401141d8]
mov ecx, dword [0x14010f734]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400315f8
mov rbp, qword [0x1401141c0]
test rbp, rbp
je 0x140030aff
cmp qword [0x1401141d0], 0
je 0x140030aff
mov dword [rsp + 0x80], 0x70
lea r9, [rsp + 0x290]
mov qword [r9], r14
xor ecx, ecx
mov edx, 1
xor r8d, r8d
call rbp
test eax, eax
je 0x140030b43
mov ecx, 2
call fcn.140064750
test al, al
je 0x140030fb9
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x148]
mov rcx, rsi
mov r8d, 0x1bd
mov r9d, 2
call fcn.140033a00
lea rcx, [rsp + 0x158]
lea rdx, str.InitializeProcThreadAttributeList__size__succeeded__expected_failure
mov r8d, 0x44
call fcn.140051090
mov rcx, rsi
call fcn.140033ea0
jmp 0x140030fb9
mov r14, r15
mov dword [rsp + 0x80], 0x68
xor r15d, r15d
xor r13d, r13d
xor esi, esi
mov rdx, qword [r12]
movzx r8d, byte [rdx + 0x17]
test r8b, r8b
js 0x140030b2e
cmp r8b, 0xc
jb 0x140030b39
jmp 0x140030c48
cmp qword [rdx + 8], 0xc
jae 0x140030c44
mov rbp, rbx
xor ebx, ebx
jmp 0x140030cac
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x140030f5d
lea rsi, [rsp + 0x290]
mov rcx, qword [rsi]
call fcn.1400789ac
mov r13, rax
mov qword [rsp + 0xe8], rax
mov rcx, rax
mov edx, 1
xor r8d, r8d
mov r9, rsi
call qword [0x1401141c0]
test eax, eax
je 0x140030fe4
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x58], r12
mov rax, qword [rsp + 0xe8]
mov qword [rsp + 0x60], rax
mov rbx, qword [rsp + 0x2b0]
mov r12, qword [rsp + 0x2c0]
mov rax, r12
sub rax, rbx
sar rax, 3
cmp rax, 7
ja 0x140030c0d
mov rbp, qword [rsp + 0x2b8]
sub rbp, rbx
mov ecx, 0x40
call fcn.140078938
mov rsi, rax
lea r14, [rax + rbp]
mov r12, rax
add r12, 0x40
test rbp, rbp
jg 0x140031662
mov qword [rsp + 0x2b0], rsi
mov qword [rsp + 0x2b8], r14
mov qword [rsp + 0x2c0], r12
test rbx, rbx
jne 0x140031675
movabs r13, 0x1fffffffffffffff
mov rbp, qword [rsp + 0x2b8]
cmp rbp, r12
je 0x140031049
mov rax, qword [0x14010e288]
mov qword [rbp], rax
add rbp, 8
mov qword [rsp + 0x2b8], rbp
jmp 0x140031113
mov r8, qword [rdx + 8]
mov rbp, rbx
add r8, 0xfffffffffffffff4
lea rax, [rdx + 0x18]
mov qword [rsp + 0x20], rax
lea rbx, [rsp + 0x148]
mov rcx, rbx
mov r9, 0xffffffffffffffff
call fcn.140023bd0
cmp byte [rsp + 0x15f], 0
jns 0x140030c81
mov rbx, qword [rsp + 0x148]
lea rdx, str.rundll32.exe
mov rcx, rbx
call fcn.14008dd58
test eax, eax
sete bl
cmp byte [rsp + 0x15f], 0
jns 0x140030cac
mov rcx, qword [rsp + 0x148]
call fcn.140078974
movabs rax, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x2a0], rax
movaps xmmword [rsp + 0x290], xmm6
cmp byte [rsp + 0x317], 0
jns 0x140030cd8
mov rbp, qword [rsp + 0x300]
test bl, bl
je 0x140030ce3
xor ecx, ecx
mov rdx, rbp
jmp 0x140030cf3
mov rcx, qword [r12]
cmp byte [rcx + 0x17], 0
mov rdx, rbp
jns 0x140030cf3
mov rcx, qword [rcx]
lea rax, [rsp + 0x290]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x40], r14
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], 1
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x140030e7a
mov rcx, qword [rsp + 0x298]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, eax
mov ecx, 1
call fcn.140064750
test al, al
je 0x140030d9d
test esi, esi
jne 0x140030d9d
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x148]
mov rcx, rsi
mov r8d, 0x20d
mov r9d, 1
call fcn.1400cb600
lea rcx, [rsp + 0x158]
lea rdx, str.CloseHandle_thread
mov r8d, 0x12
call fcn.140051090
mov rcx, rsi
call fcn.1400cb6f0
mov rcx, qword [rsp + 0x290]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, eax
mov ecx, 1
call fcn.140064750
test al, al
je 0x140030e0d
test esi, esi
jne 0x140030e0d
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x148]
mov rcx, rsi
mov r8d, 0x210
mov r9d, 1
call fcn.1400cb600
lea rcx, [rsp + 0x158]
lea rdx, str.CloseHandle_process
mov r8d, 0x13
call fcn.140051090
mov rcx, rsi
call fcn.1400cb6f0
mov rsi, qword [r12]
mov rcx, qword [rsi + 0xc8]
cmp rcx, 0xffffffffffffffff
je 0x140030e2e
call fcn.14003fe50
mov qword [rsi + 0xc8], 0xffffffffffffffff
mov qword [rsi + 0xc8], 0xffffffffffffffff
xorps xmm0, xmm0
lea rdx, [rsp + 0x148]
movups xmmword [rdx + 0x14], xmm0
movups xmmword [rdx + 4], xmm0
mov dword [rdx], 2
lea r8, [rsp + 0x70]
mov dword [r8 + 8], 0
mov qword [r8], 0
mov ecx, 0xa8
add rcx, qword [r12]
call fcn.14003f5a0
mov ebp, eax
mov ebx, eax
jmp 0x140030ee1
mov ecx, 2
call fcn.140064750
xor ebp, ebp
mov ebx, 0
test al, al
je 0x140030ee1
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x148]
mov rcx, rsi
mov r8d, 0x208
mov r9d, 2
call fcn.1400cb600
lea rcx, [rsp + 0x158]
lea rdx, str.CreateProcess
mov r8d, 0xd
call fcn.140051090
mov rcx, rsi
call fcn.1400cb6f0
xor ebp, ebp
xor ebx, ebx
test r15, r15
je 0x140030f4e
mov eax, dword [0x1401141e8]
mov ecx, dword [0x14010f734]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jle 0x140030f45
lea rcx, [0x1401141e8]
call fcn.140078a90
cmp dword [0x1401141e8], 0xffffffff
jne 0x140030f45
lea rcx, str.kernel32.dll
lea rdx, str.::DeleteProcThreadAttributeList
mov r8b, 1
call fcn.1400402c0
mov qword [0x1401141e0], rax
lea rcx, [0x1401141e8]
call fcn.140078b28
mov rcx, r15
call qword [0x1401141e0]
test r13, r13
je 0x140030fbd
mov rcx, r13
call fcn.1400789b4
jmp 0x140030fbd
mov ecx, 2
call fcn.140064750
test al, al
je 0x140030fb9
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x148]
mov rcx, rsi
mov r8d, 0x1c1
mov r9d, 2
call fcn.1400cb600
lea rcx, [rsp + 0x158]
lea rdx, str.InitializeProcThreadAttributeList__size_
mov r8d, 0x28
call fcn.140051090
mov rcx, rsi
call fcn.1400cb6f0
xor ebp, ebp
xor ebx, ebx
mov rcx, qword [rsp + 0x2b0]
test rcx, rcx
je 0x140030fd7
mov qword [rsp + 0x2b8], rcx
call fcn.140078974
mov rcx, rdi
call fcn.14003fe60
jmp 0x1400305e6
mov ecx, 2
call fcn.140064750
test al, al
je 0x140031040
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x148]
mov rcx, rsi
mov r8d, 0x1cc
mov r9d, 2
call fcn.1400cb600
lea rcx, [rsp + 0x158]
lea rdx, str.InitializeProcThreadAttributeList
mov r8d, 0x21
call fcn.140051090
mov rcx, rsi
call fcn.1400cb6f0
xor ebx, ebx
xor ebp, ebp
jmp 0x140030f4e
mov rax, qword [rsp + 0x2b0]
mov qword [rsp + 0x50], rax
sub r12, rax
mov rsi, r12
sar rsi, 3
lea rax, [rsi + 1]
cmp rax, r13
ja 0x14003164d
mov rcx, r13
mov rbp, r12
sar rbp, 2
cmp rbp, rax
cmovb rbp, rax
movabs rax, 0xfffffffffffffff
cmp rsi, rax
cmovae rbp, r13
test rbp, rbp
je 0x1400310b2
cmp rbp, rcx
ja 0x14003165a
mov r13, rcx
lea rcx, [rbp*8]
call fcn.140078938
mov rbx, rax
jmp 0x1400310b7
mov r13, rcx
xor ebx, ebx
lea r14, [rbx + rbp*8]
mov rax, qword [0x14010e288]
lea rbp, [rbx + rsi*8]
add rbp, 8
mov qword [rbp - 8], rax
test r12, r12
mov rsi, qword [rsp + 0x50]
jle 0x1400310e6
mov rcx, rbx
mov rdx, rsi
mov r8, r12
call fcn.14007bca0
mov qword [rsp + 0x2b0], rbx
mov qword [rsp + 0x2b8], rbp
mov qword [rsp + 0x2c0], r14
test rsi, rsi
je 0x140031113
mov rcx, rsi
call fcn.140078974
mov rbp, qword [rsp + 0x2b8]
cmp rbp, qword [rsp + 0x2c0]
mov r12, qword [rsp + 0x58]
je 0x140031141
mov rax, qword [0x14010e290]
mov qword [rbp], rax
add rbp, 8
mov qword [rsp + 0x2b8], rbp
mov r14, rbp
jmp 0x140031218
mov rdx, qword [rsp + 0x2b0]
sub rbp, rdx
mov r14, rbp
sar r14, 3
lea rax, [r14 + 1]
cmp rax, r13
ja 0x14003164d
mov rsi, rbp
sar rsi, 2
cmp rsi, rax
cmovb rsi, rax
movabs rax, 0xfffffffffffffff
cmp r14, rax
cmovae rsi, r13
test rsi, rsi
je 0x1400311b2
mov rax, r13
cmp rsi, r13
ja 0x14003165a
mov r13, rdx
lea rcx, [rsi*8]
call fcn.140078938
mov rbx, rax
mov rdx, r13
movabs r13, 0x1fffffffffffffff
jmp 0x1400311b4
xor ebx, ebx
lea rsi, [rbx + rsi*8]
mov rax, qword [0x14010e290]
lea r14, [rbx + r14*8]
add r14, 8
mov qword [r14 - 8], rax
test rbp, rbp
jle 0x1400311eb
mov rcx, rbx
mov r13, rdx
mov r8, rbp
call fcn.14007bca0
mov rdx, r13
movabs r13, 0x1fffffffffffffff
mov qword [rsp + 0x2b0], rbx
mov qword [rsp + 0x2b8], r14
mov qword [rsp + 0x2c0], rsi
test rdx, rdx
je 0x140031218
mov rcx, rdx
call fcn.140078974
mov r14, qword [rsp + 0x2b8]
cmp r14, qword [rsp + 0x2c0]
je 0x140031240
mov rax, qword [0x14010e298]
mov qword [r14], rax
add r14, 8
mov qword [rsp + 0x2b8], r14
mov rsi, r14
jmp 0x140031306
mov rax, qword [rsp + 0x2b0]
mov qword [rsp + 0x50], rax
sub r14, rax
mov rbp, r14
sar rbp, 3
lea rax, [rbp + 1]
cmp rax, r13
ja 0x14003164d
mov rsi, r14
sar rsi, 2
cmp rsi, rax
cmovb rsi, rax
movabs rax, 0xfffffffffffffff
cmp rbp, rax
cmovae rsi, r13
test rsi, rsi
je 0x1400312a3
cmp rsi, r13
ja 0x14003165a
lea rcx, [rsi*8]
call fcn.140078938
mov rbx, rax
jmp 0x1400312a5
xor ebx, ebx
lea r12, [rbx + rsi*8]
mov rax, qword [0x14010e298]
lea rsi, [rbx + rbp*8]
add rsi, 8
mov qword [rsi - 8], rax
test r14, r14
mov rbp, qword [rsp + 0x50]
jle 0x1400312d4
mov rcx, rbx
mov rdx, rbp
mov r8, r14
call fcn.14007bca0
mov qword [rsp + 0x2b0], rbx
mov qword [rsp + 0x2b8], rsi
mov qword [rsp + 0x2c0], r12
test rbp, rbp
mov r12, qword [rsp + 0x58]
je 0x140031306
mov rcx, rbp
call fcn.140078974
mov rsi, qword [rsp + 0x2b8]
mov r14, qword [r12]
cmp rsi, qword [rsp + 0x2c0]
je 0x140031332
mov rax, qword [r14 + 0xc8]
mov qword [rsi], rax
add rsi, 8
mov qword [rsp + 0x2b8], rsi
mov r12, rsi
jmp 0x1400313fb
mov rax, qword [rsp + 0x2b0]
mov qword [rsp + 0x50], rax
sub rsi, rax
mov r12, rsi
sar r12, 3
lea rax, [r12 + 1]
cmp rax, r13
ja 0x14003164d
mov rbp, rsi
sar rbp, 2
cmp rbp, rax
cmovb rbp, rax
movabs rax, 0xfffffffffffffff
cmp r12, rax
cmovae rbp, r13
test rbp, rbp
je 0x140031396
cmp rbp, r13
ja 0x14003165a
lea rcx, [rbp*8]
call fcn.140078938
mov rbx, rax
jmp 0x140031398
xor ebx, ebx
lea rcx, [rbx + rbp*8]
mov rax, qword [r14 + 0xc8]
lea r12, [rbx + r12*8]
add r12, 8
mov qword [r12 - 8], rax
test rsi, rsi
mov rbp, qword [rsp + 0x50]
jle 0x1400313ce
mov r14, rcx
mov rcx, rbx
mov rdx, rbp
mov r8, rsi
call fcn.14007bca0
mov rcx, r14
mov qword [rsp + 0x2b0], rbx
mov qword [rsp + 0x2b8], r12
mov qword [rsp + 0x2c0], rcx
test rbp, rbp
je 0x1400313fb
mov rcx, rbp
call fcn.140078974
mov r12, qword [rsp + 0x2b8]
cmp r12, qword [rsp + 0x2c0]
je 0x14003141a
mov qword [r12], rdi
add r12, 8
mov qword [rsp + 0x2b8], r12
jmp 0x1400314c2
mov rbx, qword [rsp + 0x2b0]
sub r12, rbx
mov r14, r12
sar r14, 3
lea rax, [r14 + 1]
cmp rax, r13
ja 0x14003164d
mov rbp, r12
sar rbp, 2
cmp rbp, rax
cmovb rbp, rax
movabs rax, 0xfffffffffffffff
cmp r14, rax
cmovae rbp, r13
test rbp, rbp
je 0x140031478
cmp rbp, r13
ja 0x14003165a
lea rcx, [rbp*8]
call fcn.140078938
mov rsi, rax
jmp 0x14003147a
xor esi, esi
lea r13, [rsi + rbp*8]
lea rbp, [rsi + r14*8]
add rbp, 8
mov qword [rbp - 8], rdi
test r12, r12
jle 0x14003149d
mov rcx, rsi
mov rdx, rbx
mov r8, r12
call fcn.14007bca0
mov qword [rsp + 0x2b0], rsi
mov qword [rsp + 0x2b8], rbp
mov qword [rsp + 0x2c0], r13
test rbx, rbx
je 0x1400314c2
mov rcx, rbx
call fcn.140078974
mov rdx, qword [rsp + 0xd0]
lea rsi, [rsp + 0x2b0]
mov rcx, rsi
call fcn.1400319a0
mov rdx, qword [rsp + 0xd8]
mov rcx, rsi
call fcn.1400319a0
mov rdx, qword [rsp + 0xe0]
mov rcx, rsi
call fcn.1400319a0
mov r9, qword [rsi]
mov rax, qword [rsi + 8]
sub rax, r9
mov rcx, qword [rsp + 0xe8]
xorps xmm0, xmm0
movups xmmword [rsp + 0x28], xmm0
mov qword [rsp + 0x20], rax
mov r8d, 0x20002
xor edx, edx
call qword [0x1401141d0]
test eax, eax
mov r12, qword [rsp + 0x58]
je 0x14003154f
mov r14, r15
mov esi, 0x80000
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x60]
lea rbx, [rsp + 0x300]
jmp 0x140030b15
mov ecx, 2
call fcn.140064750
test al, al
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x60]
je 0x140030edd
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x148]
mov rcx, rsi
mov r8d, 0x1e6
mov r9d, 2
call fcn.1400cb600
lea rcx, [rsp + 0x158]
lea rdx, str.UpdateProcThreadAttribute
mov r8d, 0x19
jmp 0x140030ed0
lea rcx, [0x1401141c8]
call fcn.140078a90
cmp dword [0x1401141c8], 0xffffffff
jne 0x140030a36
lea rcx, str.kernel32.dll
lea rdx, str.::InitializeProcThreadAttributeList
xor r8d, r8d
call fcn.1400402c0
mov qword [0x1401141c0], rax
lea rcx, [0x1401141c8]
call fcn.140078b28
jmp 0x140030a36
lea rcx, [0x1401141d8]
call fcn.140078a90
cmp dword [0x1401141d8], 0xffffffff
jne 0x140030a5b
cmp qword [0x1401141c0], 0
je 0x140031633
lea rcx, str.kernel32.dll
lea rdx, str.::UpdateProcThreadAttribute
xor r8d, r8d
call fcn.1400402c0
jmp 0x140031635
xor eax, eax
mov qword [0x1401141d0], rax
lea rcx, [0x1401141d8]
call fcn.140078b28
jmp 0x140030a5b
lea rcx, [rsp + 0x2b0]
call fcn.1400a5790
call fcn.14008bd20
int3
mov rcx, rsi
mov rdx, rbx
mov r8, rbp
call fcn.14007bca0
jmp 0x140030bec
mov rcx, rbx
call fcn.140078974
mov r12, qword [rsp + 0x2c0]
jmp 0x140030c0d