Function at 0x14000c63c
Capabilities:
Create process on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x378
movaps xmmword [rsp + 0x360], xmm7
movaps xmmword [rsp + 0x350], xmm6
mov r12, rcx
mov rax, qword [0x14028f028]
xor rax, rsp
mov qword [rsp + 0x348], rax
call fcn.14014241f
test al, al
jne 0x14000d7f2
xorps xmm0, xmm0
lea rdx, [rsp + 0x330]
movaps xmmword [rdx], xmm0
mov qword [rdx + 0x10], 0
mov rcx, qword [r12]
call fcn.1400b56c7
mov r8, qword [r12]
mov rbp, qword [r8 + 0x78]
mov rdi, qword [r8 + 0x80]
cmp rbp, rdi
je 0x14000c729
lea rsi, [rsp + 0x180]
lea r14, [rsp + 0x320]
lea rbx, [rsp + 0x330]
movzx eax, byte [rbp + 0x17]
test al, al
mov rcx, qword [rbp]
cmovns rcx, rbp
mov qword [rsp + 0x320], rcx
cmovs rax, qword [rbp + 8]
mov qword [rsp + 0x328], rax
mov rcx, rsi
mov rdx, r14
call fcn.14009ccc0
mov rcx, rsi
mov rdx, rbx
call fcn.1400b56c7
cmp byte [rsp + 0x197], 0
jns 0x14000c71c
mov rcx, qword [rsp + 0x180]
call fcn.1400c9cac
add rbp, 0x18
cmp rdi, rbp
jne 0x14000c6cc
mov r8, qword [r12]
movzx eax, byte [r8 + 0x2f]
test al, al
jns 0x14000c736
mov rax, qword [r8 + 0x20]
test rax, rax
jne 0x14000cbdb
movzx eax, byte [r8 + 0x47]
test al, al
jns 0x14000c74c
mov rax, qword [r8 + 0x38]
test rax, rax
jne 0x14000cc4f
movzx eax, byte [r8 + 0x5f]
test al, al
js 0x14000c763
mov rcx, rax
jmp 0x14000c767
mov rcx, qword [r8 + 0x50]
test rcx, rcx
jne 0x14000ccc9
mov rsi, qword [r8 + 0x60]
lea r13, [r8 + 0x68]
cmp rsi, r13
je 0x14000c9d5
xorps xmm6, xmm6
lea rbx, [rsp + 0x2e0]
xor r14d, r14d
movaps xmmword [rsp + 0x2e0], xmm6
mov qword [rsp + 0x2f0], 0
movzx ebp, byte [rsi + 0x37]
test bpl, bpl
jns 0x14000c7b6
mov rbp, qword [rsi + 0x28]
mov r15, qword [rsi + 0x20]
jmp 0x14000c7ba
lea r15, [rsi + 0x20]
lea rax, [rbp + 1]
cmp rax, 0xfffffffffffffff0
jae 0x14000d7e5
cmp rax, 0x17
jae 0x14000c7e0
mov byte [rsp + 0x2f7], bpl
mov rdi, rbx
test rbp, rbp
jne 0x14000c819
jmp 0x14000c827
mov r14, r12
lea r12, [rbp + 0x11]
and r12, 0xfffffffffffffff0
mov rcx, r12
call fcn.1400c9cbc
mov rdi, rax
mov qword [rsp + 0x2e0], rax
bts r12, 0x3f
mov qword [rsp + 0x2f0], r12
mov r12, r14
xor r14d, r14d
mov qword [rsp + 0x2e8], rbp
mov rcx, rdi
mov rdx, r15
mov r8, rbp
call fcn.1400cf0a0
mov byte [rdi + rbp], r14b
mov rcx, rbx
mov dl, 0x3d
call fcn.140065b42
movzx r8d, byte [rsi + 0x4f]
test r8b, r8b
jns 0x14000c849
mov r8, qword [rsi + 0x40]
mov rdx, qword [rsi + 0x38]
jmp 0x14000c84d
lea rdx, [rsi + 0x38]
mov rcx, rbx
call fcn.140075026
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x140], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x130], xmm0
movups xmmword [rax], xmm6
mov qword [rax + 0x10], 0
movzx eax, byte [rsp + 0x147]
test al, al
mov rcx, qword [rsp + 0x130]
lea rdx, [rsp + 0x130]
cmovns rcx, rdx
mov qword [rsp + 0x300], rcx
cmovs rax, qword [rsp + 0x138]
mov qword [rsp + 0x308], rax
lea rdi, [rsp + 0x90]
mov rcx, rdi
lea rdx, [rsp + 0x300]
call fcn.14009ccc0
mov byte [rsp + 0x2d7], 0xa
mov rax, qword [str.annotation]
mov qword [rsp + 0x2c0], rax
movzx eax, word [0x140269a78]
mov word [rsp + 0x2c8], ax
mov byte [rsp + 0x2ca], r14b
lea rbp, [rsp + 0x180]
mov rcx, rbp
lea rdx, [rsp + 0x2c0]
mov r8, rdi
call fcn.1401b6fca
mov rcx, rbp
lea rdx, [rsp + 0x330]
call fcn.1400b56c7
cmp byte [rsp + 0x197], r14b
jns 0x14000c936
mov rcx, qword [rsp + 0x180]
call fcn.1400c9cac
cmp byte [rsp + 0x2d7], 0
jns 0x14000c94d
mov rcx, qword [rsp + 0x2c0]
call fcn.1400c9cac
cmp byte [rsp + 0xa7], 0
jns 0x14000c964
mov rcx, qword [rsp + 0x90]
call fcn.1400c9cac
cmp byte [rsp + 0x147], 0
jns 0x14000c97b
mov rcx, qword [rsp + 0x130]
call fcn.1400c9cac
cmp byte [rsp + 0x2f7], 0
jns 0x14000c992
mov rcx, qword [rsp + 0x2e0]
call fcn.1400c9cac
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x14000c9a8
mov rax, rcx
mov rcx, qword [rcx]
test rcx, rcx
jne 0x14000c99b
jmp 0x14000c9c5
mov rax, qword [rsi + 0x10]
cmp qword [rax], rsi
je 0x14000c9c5
add rsi, 0x10
mov rcx, qword [rsi]
lea rsi, [rcx + 0x10]
mov rax, qword [rcx + 0x10]
cmp qword [rax], rcx
jne 0x14000c9b5
mov rsi, rax
cmp rax, r13
jne 0x14000c78f
mov r8, qword [r12]
mov r13, r12
mov rsi, qword [r8 + 0x90]
mov rbx, qword [r8 + 0x98]
cmp rsi, rbx
je 0x14000ca87
mov r15, qword [0x140269a7b]
movzx r12d, word [0x140269a83]
lea rdi, [rsp + 0x180]
lea r14, [rsp + 0x90]
lea rbp, [rsp + 0x330]
mov byte [rsp + 0xa7], 0xa
mov qword [rsp + 0x90], r15
mov word [rsp + 0x98], r12w
mov byte [rsp + 0x9a], 0
mov rcx, rdi
mov rdx, r14
mov r8, rsi
call fcn.1401b6fca
mov rcx, rdi
mov rdx, rbp
call fcn.1400b56c7
cmp byte [rsp + 0x197], 0
jns 0x14000ca67
mov rcx, qword [rsp + 0x180]
call fcn.1400c9cac
cmp byte [rsp + 0xa7], 0
jns 0x14000ca7e
mov rcx, qword [rsp + 0x90]
call fcn.1400c9cac
add rsi, 0x18
cmp rbx, rsi
jne 0x14000ca16
movabs r12, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x2f0], r12
movaps xmm6, xmmword [0x140257270]
movaps xmmword [rsp + 0x2e0], xmm6
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, 0x1f0fff
mov edx, 1
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_OpenProcess]
lea rbx, [0x1402536c8]
mov qword [rsp + 0x2e0], rbx
mov qword [rsp + 0x2e8], rax
mov byte [rsp + 0x2f0], 0
test rax, rax
jne 0x14000cd88
mov ecx, 2
call fcn.1400ac390
xor esi, esi
test al, al
je 0x14000cb4a
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x180]
mov rcx, rsi
mov r8d, 0x189
mov r9d, 2
call fcn.14014efd0
lea rcx, [rsp + 0x190]
lea rdx, [0x14026d314]
mov r8d, 0xb
call fcn.1400a7acb
mov rcx, rsi
call fcn.1401412f0
xor esi, esi
mov qword [rsp + 0x2e0], rbx
cmp byte [rsp + 0x2f0], 0
jne 0x14000d7f5
mov rcx, qword [rsp + 0x2e8]
test rcx, rcx
je 0x14000cb72
call fcn.140189202
cmp byte [rsp + 0x347], 0
jns 0x14000cb89
mov rcx, qword [rsp + 0x330]
call fcn.1400c9cac
cmp sil, 1
mov eax, 1
adc rax, 0
mov qword [0x14029b170], rax
mov rcx, r13
call fcn.14001bca4
mov rcx, qword [rsp + 0x348]
xor rcx, rsp
call fcn.1400ccfe0
mov eax, esi
movaps xmm6, xmmword [rsp + 0x350]
movaps xmm7, xmmword [rsp + 0x360]
add rsp, 0x378
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
add r8, 0x18
lea rdx, [rsp + 0x90]
mov byte [rdx + 0x17], 8
movabs rax, 0x6573616261746164
mov qword [rdx], rax
mov byte [rdx + 8], 0
lea rsi, [rsp + 0x180]
mov rcx, rsi
call fcn.1401b6fca
lea rdx, [rsp + 0x330]
mov rcx, rsi
call fcn.1400b56c7
cmp byte [rsi + 0x17], 0
jns 0x14000cc2f
mov rcx, qword [rsp + 0x180]
call fcn.1400c9cac
cmp byte [rsp + 0xa7], 0
jns 0x14000cc46
mov rcx, qword [rsp + 0x90]
call fcn.1400c9cac
mov r8, qword [r12]
jmp 0x14000c73f
add r8, 0x30
lea rdx, [rsp + 0x90]
mov byte [rdx + 0x17], 0xb
mov rax, qword [str.metrics_dir]
mov qword [rdx], rax
mov eax, dword [0x140269a8d]
mov dword [rdx + 7], eax
mov byte [rdx + 0xb], 0
lea rsi, [rsp + 0x180]
mov rcx, rsi
call fcn.1401b6fca
lea rdx, [rsp + 0x330]
mov rcx, rsi
call fcn.1400b56c7
cmp byte [rsi + 0x17], 0
jns 0x14000cca9
mov rcx, qword [rsp + 0x180]
call fcn.1400c9cac
cmp byte [rsp + 0xa7], 0
jns 0x14000ccc0
mov rcx, qword [rsp + 0x90]
call fcn.1400c9cac
mov r8, qword [r12]
jmp 0x14000c755
lea rcx, [r8 + 0x48]
test al, al
cmovs rcx, qword [r8 + 0x48]
lea rdx, [rsp + 0x310]
mov qword [rdx], rcx
cmovs rax, qword [r8 + 0x50]
mov qword [rdx + 8], rax
lea rsi, [rsp + 0x90]
mov rcx, rsi
call fcn.14009ccc0
lea rdx, [rsp + 0x130]
mov byte [rdx + 0x17], 3
movzx eax, word [0x140259d5a]
mov word [rdx], ax
mov al, byte [0x140259d5c]
mov byte [rdx + 2], al
mov byte [rdx + 3], 0
lea rdi, [rsp + 0x180]
mov rcx, rdi
mov r8, rsi
call fcn.1401b6fca
lea rdx, [rsp + 0x330]
mov rcx, rdi
call fcn.1400b56c7
cmp byte [rdi + 0x17], 0
jns 0x14000cd51
mov rcx, qword [rsp + 0x180]
call fcn.1400c9cac
cmp byte [rsp + 0x147], 0
jns 0x14000cd68
mov rcx, qword [rsp + 0x130]
call fcn.1400c9cac
cmp byte [rsp + 0xa7], 0
jns 0x14000cd7f
mov rcx, qword [rsp + 0x90]
call fcn.1400c9cac
mov r8, qword [r12]
jmp 0x14000c770
lea rdi, [rsp + 0x130]
mov qword [rdi + 0x40], r12
movaps xmmword [rdi + 0x30], xmm6
movaps xmmword [rdi + 0x20], xmm6
movaps xmmword [rdi + 0x10], xmm6
movaps xmmword [rdi], xmm6
mov rcx, qword [r13]
mov rcx, qword [rcx + 0xc8]
mov r9, qword [0x140292820]
mov r8, qword [0x140292818]
mov rdx, qword [0x140292810]
lea rbp, [0x14029b140]
mov qword [rsp + 0x40], rbp
lea rbp, [0x14029b130]
mov qword [rsp + 0x38], rbp
lea rbp, [0x14029b120]
mov qword [rsp + 0x30], rbp
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
mov rcx, rdi
call fcn.14022a810
lea rsi, [rsp + 0x2c0]
mov rcx, rdi
mov rdx, rsi
call fcn.140189168
movups xmm0, xmmword [str.__initial_client_data]
movaps xmmword [rsp + 0x100], xmm0
movabs rax, 0x3d617461642d746e
mov qword [rsp + 0x10e], rax
mov word [rsp + 0x116], 0x1600
movzx r8d, byte [rsi + 0x17]
test r8b, r8b
jns 0x14000ce51
mov r8, qword [rsp + 0x2c8]
mov rsi, qword [rsp + 0x2c0]
lea rcx, [rsp + 0x100]
mov rdx, rsi
call fcn.140075026
mov rcx, qword [rax + 0x10]
lea r15, [rsp + 0x90]
mov qword [r15 + 0x10], rcx
movups xmm0, xmmword [rax]
movaps xmmword [r15], xmm0
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov qword [rax + 0x10], 0
movzx eax, byte [r15 + 0x17]
test al, al
mov rcx, qword [r15]
cmovns rcx, r15
lea rdx, [rsp + 0x120]
mov qword [rdx], rcx
cmovs rax, qword [r15 + 8]
mov qword [rdx + 8], rax
lea rdi, [rsp + 0x180]
mov rcx, rdi
call fcn.14009ccc0
lea rdx, [rsp + 0x330]
mov rcx, rdi
call fcn.1400b56c7
cmp byte [rdi + 0x17], 0
jns 0x14000cedb
mov rcx, qword [rsp + 0x180]
call fcn.1400c9cac
cmp byte [rsp + 0xa7], 0
jns 0x14000cef2
mov rcx, qword [rsp + 0x90]
call fcn.1400c9cac
cmp byte [rsp + 0x117], 0
jns 0x14000cf09
mov rcx, qword [rsp + 0x100]
call fcn.1400c9cac
cmp byte [rsp + 0x2d7], 0
jns 0x14000cf20
mov rcx, qword [rsp + 0x2c0]
call fcn.1400c9cac
movabs rsi, 0xaaaaaaaaaaaaaa00
xorps xmm7, xmm7
movaps xmmword [rsp + 0xc0], xmm7
movaps xmmword [rsp + 0xf0], xmm7
movaps xmmword [rsp + 0xe0], xmm7
movaps xmmword [rsp + 0xd0], xmm7
movaps xmmword [rsp + 0xb0], xmm7
movaps xmmword [rsp + 0xa0], xmm7
movaps xmmword [rsp + 0x90], xmm7
mov dword [rsp + 0xcc], 0x100
mov rbp, qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov ecx, 0xfffffff6
call rbp
mov qword [rsp + 0xe0], rax
mov ecx, 0xfffffff5
call rbp
mov qword [rsp + 0xe8], rax
mov ecx, 0xfffffff4
call rbp
mov qword [rsp + 0xf0], rax
xor eax, eax
mov qword [rsp + 0x2d0], rax
movaps xmmword [rsp + 0x2c0], xmm7
mov qword [rsp + 0x110], rsi
lea r14, [0x1402536d0]
mov qword [rsp + 0x100], r14
mov qword [rsp + 0x108], rax
mov eax, dword [0x14029b180]
mov ecx, dword [0x140293330]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000d749
mov eax, dword [0x14029b190]
mov ecx, dword [0x140293330]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000d790
mov rbp, qword [0x14029b178]
test rbp, rbp
je 0x14000d107
cmp qword [0x14029b188], 0
je 0x14000d107
mov dword [rsp + 0x90], 0x70
add rsi, 0xaa
lea r9, [rsp + 0x70]
mov qword [r9], rsi
xor ecx, ecx
mov edx, 1
xor r8d, r8d
call rbp
test eax, eax
jne 0x14000d3a8
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x14000d401
lea rsi, [rsp + 0x70]
mov rcx, qword [rsi]
call fcn.1400ca15c
mov rbp, rax
mov qword [rsp + 0xf8], rax
mov rcx, rax
mov edx, 1
xor r8d, r8d
mov r9, rsi
call qword [0x14029b178]
test eax, eax
jne 0x14000d4b5
mov ecx, 2
call fcn.1400ac390
test al, al
je 0x14000d460
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x180]
mov rcx, rsi
mov r8d, 0x1c9
mov r9d, 2
call fcn.14014efd0
lea rcx, [rsp + 0x190]
lea rdx, [0x14026d3e5]
mov r8d, 0x21
jmp 0x14000d258
mov dword [rsp + 0x90], 0x68
xor ebp, ebp
xor esi, esi
mov rdx, qword [r13]
movzx r8d, byte [rdx + 0x17]
test r8b, r8b
jns 0x14000d132
mov r8, qword [rdx + 8]
cmp r8, 0xc
jae 0x14000d138
xor edi, edi
jmp 0x14000d192
cmp r8b, 0xc
jb 0x14000d12e
add r8, 0xfffffffffffffff4
lea rax, [rdx + 0x18]
mov qword [rsp + 0x20], rax
mov rcx, rdi
mov r9, 0xffffffffffffffff
call fcn.14009b98e
cmp byte [rsp + 0x197], 0
jns 0x14000d166
mov rdi, qword [rsp + 0x180]
lea rdx, str.rundll32.exe
mov rcx, rdi
call fcn.1400cbb10
test eax, eax
sete dil
cmp byte [rsp + 0x197], 0
jns 0x14000d192
mov rcx, qword [rsp + 0x180]
call fcn.1400c9cac
mov qword [rsp + 0x80], r12
movaps xmmword [rsp + 0x70], xmm6
cmp byte [rsp + 0x347], 0
lea rdx, [rsp + 0x330]
jns 0x14000d1b9
mov rdx, qword [rsp + 0x330]
test dil, dil
je 0x14000d1c2
xor ecx, ecx
jmp 0x14000d1cf
mov rcx, qword [r13]
cmp byte [rcx + 0x17], 0
jns 0x14000d1cf
mov rcx, qword [rcx]
lea rax, [rsp + 0x70]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x40], r15
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], 1
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x14000d26a
mov ecx, 2
call fcn.1400ac390
xor esi, esi
test al, al
je 0x14000d462
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x180]
mov rcx, rsi
mov r8d, 0x205
mov r9d, 2
call fcn.14014efd0
lea rcx, [rsp + 0x190]
lea rdx, str.CreateProcess
mov r8d, 0xd
call fcn.1400a7acb
mov rcx, rsi
call fcn.1401412f0
jmp 0x14000d460
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, eax
mov ecx, 1
call fcn.1400ac390
test al, al
je 0x14000d2d8
test esi, esi
jne 0x14000d2d8
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x180]
mov rcx, rsi
mov r8d, 0x20a
mov r9d, 1
call fcn.14014efd0
lea rcx, [rsp + 0x190]
lea rdx, str.CloseHandle_thread
mov r8d, 0x12
call fcn.1400a7acb
mov rcx, rsi
call fcn.1401412f0
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, eax
mov ecx, 1
call fcn.1400ac390
test al, al
je 0x14000d346
test esi, esi
jne 0x14000d346
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x180]
mov rcx, rsi
mov r8d, 0x20d
mov r9d, 1
call fcn.14014efd0
lea rcx, [rsp + 0x190]
lea rdx, str.CloseHandle_process
mov r8d, 0x13
call fcn.1400a7acb
mov rcx, rsi
call fcn.1401412f0
mov ecx, 0xc0
add rcx, qword [r13]
lea rsi, [rsp + 0x180]
mov qword [rsi], 0xffffffffffffffff
mov rdx, rsi
call fcn.14010ae5e
xorps xmm0, xmm0
movups xmmword [rsi + 0x14], xmm0
movups xmmword [rsi + 4], xmm0
mov dword [rsi], 2
lea r8, [rsp + 0x60]
mov dword [r8 + 8], 0
mov qword [r8], 0
mov ecx, 0xa8
add rcx, qword [r13]
lea rdx, [rsp + 0x180]
call fcn.14006105c
mov esi, eax
jmp 0x14000d462
mov ecx, 2
call fcn.1400ac390
test al, al
je 0x14000d45e
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x180]
mov rcx, rsi
mov r8d, 0x1ba
mov r9d, 2
call fcn.140122230
lea rcx, [rsp + 0x190]
lea rdx, str.InitializeProcThreadAttributeList__size__succeeded__expected_failure
mov r8d, 0x44
call fcn.1400a7acb
mov rcx, rsi
call fcn.140001c60
jmp 0x14000d45e
mov ecx, 2
call fcn.1400ac390
test al, al
je 0x14000d45e
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x180]
mov rcx, rsi
mov r8d, 0x1be
mov r9d, 2
call fcn.14014efd0
lea rcx, [rsp + 0x190]
lea rdx, str.InitializeProcThreadAttributeList__size_
mov r8d, 0x28
call fcn.1400a7acb
mov rcx, rsi
call fcn.1401412f0
xor ebp, ebp
xor esi, esi
mov qword [rsp + 0x100], r14
cmp byte [rsp + 0x110], 0
jne 0x14000d7f8
lea rcx, [rsp + 0x100]
call fcn.1401b71dc
test rbp, rbp
je 0x14000d492
mov rcx, rbp
call fcn.1400c9cb4
mov rcx, qword [rsp + 0x2c0]
test rcx, rcx
je 0x14000cb4a
mov qword [rsp + 0x2c8], rcx
call fcn.1400c9cac
jmp 0x14000cb4a
lea rsi, [rsp + 0x100]
mov rcx, rsi
call fcn.1401b71dc
mov qword [rsp + 0x58], rbp
mov qword [rsi + 8], rbp
mov rcx, qword [rsp + 0x2c0]
mov rsi, qword [rsp + 0x2d0]
mov rax, rsi
sub rax, rcx
sar rax, 3
cmp rax, 7
ja 0x14000d544
mov rbp, qword [rsp + 0x2c8]
mov qword [rsp + 0x50], rcx
sub rbp, rcx
mov ecx, 0x40
call fcn.1400c9cbc
mov r14, rax
add rax, rbp
mov rsi, r14
add rsi, 0x40
test rbp, rbp
jg 0x14000d7fb
mov qword [rsp + 0x2c0], r14
mov qword [rsp + 0x2c8], rax
mov qword [rsp + 0x2d0], rsi
mov rcx, qword [rsp + 0x50]
test rcx, rcx
jne 0x14000d816
mov rax, qword [rsp + 0x2c8]
cmp rax, rsi
lea r14, [0x1402536d0]
mov rbp, qword [rsp + 0x58]
jne 0x14000d57a
lea rdx, [0x140292810]
lea rsi, [rsp + 0x2c0]
mov rcx, rsi
call fcn.140150bdc
mov rax, qword [rsi + 8]
jmp 0x14000d590
mov rcx, qword [0x140292810]
mov qword [rax], rcx
add rax, 8
mov qword [rsp + 0x2c8], rax
cmp rax, qword [rsp + 0x2d0]
jne 0x14000d5b7
lea rdx, [0x140292818]
lea rsi, [rsp + 0x2c0]
mov rcx, rsi
call fcn.140150bdc
mov rax, qword [rsi + 8]
jmp 0x14000d5cd
mov rcx, qword [0x140292818]
mov qword [rax], rcx
add rax, 8
mov qword [rsp + 0x2c8], rax
cmp rax, qword [rsp + 0x2d0]
jne 0x14000d5f4
lea rdx, [0x140292820]
lea rsi, [rsp + 0x2c0]
mov rcx, rsi
call fcn.140150bdc
mov rax, qword [rsi + 8]
jmp 0x14000d60a
mov rcx, qword [0x140292820]
mov qword [rax], rcx
add rax, 8
mov qword [rsp + 0x2c8], rax
mov edx, 0xc8
add rdx, qword [r13]
cmp rax, qword [rsp + 0x2d0]
jne 0x14000d633
lea rsi, [rsp + 0x2c0]
mov rcx, rsi
call fcn.140150bdc
mov rax, qword [rsi + 8]
jmp 0x14000d645
mov rcx, qword [rdx]
mov qword [rax], rcx
add rax, 8
mov qword [rsp + 0x2c8], rax
cmp rax, qword [rsp + 0x2d0]
jne 0x14000d666
lea rdx, [rsp + 0x2e8]
lea rcx, [rsp + 0x2c0]
call fcn.140150bdc
jmp 0x14000d67d
mov rcx, qword [rsp + 0x2e8]
mov qword [rax], rcx
add rax, 8
mov qword [rsp + 0x2c8], rax
mov rdx, qword [rsp + 0xe0]
lea rsi, [rsp + 0x2c0]
mov rcx, rsi
call fcn.1401b7152
mov rdx, qword [rsp + 0xe8]
mov rcx, rsi
call fcn.1401b7152
mov rdx, qword [rsp + 0xf0]
mov rcx, rsi
call fcn.1401b7152
mov r9, qword [rsi]
mov rax, qword [rsi + 8]
sub rax, r9
mov rcx, qword [rsp + 0xf8]
xorps xmm0, xmm0
movups xmmword [rsp + 0x28], xmm0
mov qword [rsp + 0x20], rax
mov r8d, 0x20002
xor edx, edx
call qword [0x14029b188]
test eax, eax
jne 0x14000d73f
mov ecx, 2
call fcn.1400ac390
test al, al
je 0x14000d460
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x180]
mov rcx, rsi
mov r8d, 0x1e3
mov r9d, 2
call fcn.14014efd0
lea rcx, [rsp + 0x190]
lea rdx, [0x14026d407]
mov r8d, 0x19
jmp 0x14000d258
mov esi, 0x80000
jmp 0x14000d116
lea rcx, [0x14029b180]
call fcn.1400c9d58
cmp dword [0x14029b180], 0xffffffff
jne 0x14000cffa
lea rcx, [0x14025755e]
lea rdx, str.::InitializeProcThreadAttributeList
xor r8d, r8d
call fcn.1401420ab
mov qword [0x14029b178], rax
lea rcx, [0x14029b180]
call fcn.1400c9cf8
jmp 0x14000cffa
lea rcx, [0x14029b190]
call fcn.1400c9d58
cmp dword [0x14029b190], 0xffffffff
jne 0x14000d01f
cmp qword [0x14029b178], 0
jne 0x14000d7b7
xor eax, eax
jmp 0x14000d7cd
lea rcx, [0x14025755e]
lea rdx, str.::UpdateProcThreadAttribute
xor r8d, r8d
call fcn.1401420ab
mov qword [0x14029b188], rax
lea rcx, [0x14029b190]
call fcn.1400c9cf8
jmp 0x14000d01f
lea rcx, [rsp + 0x2e0]
call fcn.140113fe4
int3
int3
int3
mov rcx, r14
mov rdx, qword [rsp + 0x50]
mov r8, rbp
mov rbp, rax
call fcn.1400cf0a0
mov rax, rbp
jmp 0x14000d51e
call fcn.1400c9cac
mov rsi, qword [rsp + 0x2d0]
jmp 0x14000d544