Function at 0x1400f1804
Capabilities:
Create process on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x338
movaps xmmword [rsp + 0x320], xmm7
movaps xmmword [rsp + 0x310], xmm6
mov r15, rcx
mov rax, qword [0x1401c6028]
xor rax, rsp
mov qword [rsp + 0x308], rax
mov rax, qword gs:[0x30]
mov rax, qword [rax + 0x60]
mov rax, qword [rax + 0x110]
mov rax, qword [rax + 0x10]
mov rcx, qword gs:[0x30]
cmp rax, qword [rcx + 0x48]
je 0x1400f29cc
xorps xmm6, xmm6
lea rdx, [rsp + 0x2f0]
movaps xmmword [rdx], xmm6
mov qword [rdx + 0x10], 0
mov rcx, qword [r15]
call fcn.14011c118
mov rdi, qword [r15]
mov rsi, qword [rdi + 0x78]
mov r14, qword [rdi + 0x80]
cmp rsi, r14
je 0x1400f191f
lea rdi, [rsp + 0x170]
lea rbx, [rsp + 0x2f0]
movzx edx, byte [rsi + 0x17]
mov rcx, rsi
test dl, dl
jns 0x1400f18c7
mov rdx, qword [rsi + 8]
test rdx, rdx
js 0x1400f29c9
mov rcx, qword [rsi]
test rcx, rcx
jne 0x1400f18d5
test rdx, rdx
jne 0x1400f29c0
movaps xmmword [rsp + 0x170], xmm6
mov qword [rsp + 0x180], 0
mov r8, rdi
call fcn.140064fe0
mov rcx, rdi
mov rdx, rbx
call fcn.14011c118
cmp byte [rsp + 0x187], 0
jns 0x1400f1913
mov rcx, qword [rsp + 0x170]
call fcn.140150da4
add rsi, 0x18
cmp rsi, r14
jne 0x1400f18ac
mov rdi, qword [r15]
movzx eax, byte [rdi + 0x2f]
test al, al
jns 0x1400f192b
mov rax, qword [rdi + 0x20]
test rax, rax
je 0x1400f199f
add rdi, 0x18
lea rdx, str.database
lea rbx, [rsp + 0x90]
mov rcx, rbx
call fcn.14002854c
lea r14, [rsp + 0x170]
mov rcx, r14
mov rdx, rbx
mov r8, rdi
call fcn.1400f2cf0
lea rdx, [rsp + 0x2f0]
mov rcx, r14
call fcn.14011c118
cmp byte [r14 + 0x17], 0
jns 0x1400f1985
mov rcx, qword [rsp + 0x170]
call fcn.140150da4
cmp byte [rsp + 0xa7], 0
jns 0x1400f199c
mov rcx, qword [rsp + 0x90]
call fcn.140150da4
mov rdi, qword [r15]
movzx eax, byte [rdi + 0x47]
test al, al
jns 0x1400f19ab
mov rax, qword [rdi + 0x38]
test rax, rax
je 0x1400f1a1f
add rdi, 0x30
lea rdx, str.metrics_dir
lea rbx, [rsp + 0x90]
mov rcx, rbx
call fcn.14002854c
lea r14, [rsp + 0x170]
mov rcx, r14
mov rdx, rbx
mov r8, rdi
call fcn.1400f2cf0
lea rdx, [rsp + 0x2f0]
mov rcx, r14
call fcn.14011c118
cmp byte [r14 + 0x17], 0
jns 0x1400f1a05
mov rcx, qword [rsp + 0x170]
call fcn.140150da4
cmp byte [rsp + 0xa7], 0
jns 0x1400f1a1c
mov rcx, qword [rsp + 0x90]
call fcn.140150da4
mov rdi, qword [r15]
lea rcx, [rdi + 0x48]
movzx edx, byte [rdi + 0x5f]
test dl, dl
js 0x1400f1a35
test rdx, rdx
jne 0x1400f1a4b
jmp 0x1400f1af4
mov rdx, qword [rdi + 0x50]
test rdx, rdx
je 0x1400f1af4
js 0x1400f29de
mov rcx, qword [rcx]
test rcx, rcx
je 0x1400f29d2
xorps xmm0, xmm0
lea rdi, [rsp + 0x90]
movaps xmmword [rdi], xmm0
mov qword [rdi + 0x10], 0
mov r8, rdi
call fcn.140064fe0
lea rdx, [0x14019edcb]
lea rbx, [rsp + 0x120]
mov rcx, rbx
call fcn.14002854c
lea r14, [rsp + 0x170]
mov rcx, r14
mov rdx, rbx
mov r8, rdi
call fcn.1400f2cf0
lea rdx, [rsp + 0x2f0]
mov rcx, r14
call fcn.14011c118
cmp byte [r14 + 0x17], 0
jns 0x1400f1ac3
mov rcx, qword [rsp + 0x170]
call fcn.140150da4
cmp byte [rsp + 0x137], 0
jns 0x1400f1ada
mov rcx, qword [rsp + 0x120]
call fcn.140150da4
cmp byte [rsp + 0xa7], 0
jns 0x1400f1af1
mov rcx, qword [rsp + 0x90]
call fcn.140150da4
mov rdi, qword [r15]
mov qword [rsp + 0x58], r15
mov rsi, qword [rdi + 0x60]
lea rbp, [rdi + 0x68]
cmp rsi, rbp
je 0x1400f1cb1
lea rdi, [rsp + 0x2d0]
xorps xmm6, xmm6
lea rbx, [rsp + 0x90]
lea r14, str.annotation
lea r15, [rsp + 0x2b0]
lea r12, [rsp + 0x170]
lea r13, [rsp + 0x2f0]
lea rdx, [rsi + 0x20]
mov rcx, rdi
mov r8b, 0x3d
call fcn.14003041c
movzx r8d, byte [rsi + 0x4f]
test r8b, r8b
jns 0x1400f1b5f
mov r8, qword [rsi + 0x40]
mov rdx, qword [rsi + 0x38]
jmp 0x1400f1b63
lea rdx, [rsi + 0x38]
mov rcx, rdi
call fcn.140050402
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x130], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x120], xmm0
movups xmmword [rax], xmm6
mov qword [rax + 0x10], 0
movzx edx, byte [rsp + 0x137]
test dl, dl
cmovs rdx, qword [rsp + 0x128]
mov rcx, qword [rsp + 0x120]
lea rax, [rsp + 0x120]
cmovns rcx, rax
test rdx, rdx
js 0x1400f29c3
je 0x1400f1bc8
test rcx, rcx
je 0x1400f29c6
movaps xmmword [rsp + 0x90], xmm6
mov qword [rsp + 0xa0], 0
mov r8, rbx
call fcn.140064fe0
mov rcx, r15
mov rdx, r14
call fcn.14002854c
mov rcx, r12
mov rdx, r15
mov r8, rbx
call fcn.1400f2cf0
mov rcx, r12
mov rdx, r13
call fcn.14011c118
cmp byte [rsp + 0x187], 0
jns 0x1400f1c1f
mov rcx, qword [rsp + 0x170]
call fcn.140150da4
cmp byte [rsp + 0x2c7], 0
jns 0x1400f1c36
mov rcx, qword [rsp + 0x2b0]
call fcn.140150da4
cmp byte [rsp + 0xa7], 0
jns 0x1400f1c4d
mov rcx, qword [rsp + 0x90]
call fcn.140150da4
cmp byte [rsp + 0x137], 0
jns 0x1400f1c64
mov rcx, qword [rsp + 0x120]
call fcn.140150da4
cmp byte [rsp + 0x2e7], 0
jns 0x1400f1c7b
mov rcx, qword [rsp + 0x2d0]
call fcn.140150da4
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x1400f1c91
mov rax, rcx
mov rcx, qword [rcx]
test rcx, rcx
jne 0x1400f1c84
jmp 0x1400f1c9d
mov rax, qword [rsi + 0x10]
cmp qword [rax], rsi
mov rsi, rax
jne 0x1400f1c91
mov rsi, rax
cmp rax, rbp
jne 0x1400f1b3c
mov rax, qword [rsp + 0x58]
mov rdi, qword [rax]
mov rbx, qword [rdi + 0x90]
mov rsi, qword [rdi + 0x98]
cmp rbx, rsi
je 0x1400f1d3e
lea rdi, [0x1401adc30]
lea r14, [rsp + 0x90]
lea r15, [rsp + 0x170]
lea r12, [rsp + 0x2f0]
mov rcx, r14
mov rdx, rdi
call fcn.14002854c
mov rcx, r15
mov rdx, r14
mov r8, rbx
call fcn.1400f2cf0
mov rcx, r15
mov rdx, r12
call fcn.14011c118
cmp byte [rsp + 0x187], 0
jns 0x1400f1d1e
mov rcx, qword [rsp + 0x170]
call fcn.140150da4
cmp byte [rsp + 0xa7], 0
jns 0x1400f1d35
mov rcx, qword [rsp + 0x90]
call fcn.140150da4
add rbx, 0x18
cmp rbx, rsi
jne 0x1400f1ce3
movabs r13, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x2e0], r13
movaps xmm6, xmmword [0x1401990c0]
movaps xmmword [rsp + 0x2d0], xmm6
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, 0x1f0fff
mov edx, 1
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_OpenProcess]
lea rbp, [0x14019b048]
mov qword [rsp + 0x2d0], rbp
mov qword [rsp + 0x2d8], rax
mov byte [rsp + 0x2e0], 0
test rax, rax
je 0x1400f20c4
lea rcx, [rsp + 0x120]
mov qword [rcx + 0x40], r13
mov r15, qword [rsp + 0x58]
mov rdx, qword [r15]
mov rdx, qword [rdx + 0xc8]
movups xmm0, xmmword [0x1401d4684]
mov r8, qword [0x1401d4678]
lea r9, [0x1401de0f8]
mov qword [rcx], r9
lea r9, [0x1401de104]
mov qword [rcx + 8], r9
lea r9, [0x1401de110]
mov qword [rcx + 0x10], r9
mov qword [rcx + 0x18], r8
movups xmmword [rcx + 0x20], xmm0
mov qword [rcx + 0x30], rdx
mov qword [rcx + 0x38], rax
mov byte [rcx + 0x40], 1
lea rdi, [rsp + 0x2b0]
mov rdx, rdi
call fcn.14008406c
lea rdx, str.__initial_client_data
lea rbx, [rsp + 0x108]
mov rcx, rbx
call fcn.14002854c
movzx r8d, byte [rdi + 0x17]
test r8b, r8b
jns 0x1400f1e3e
mov r8, qword [rsp + 0x2b8]
mov rdi, qword [rsp + 0x2b0]
mov rcx, rbx
mov rdx, rdi
call fcn.140050402
mov rcx, qword [rax + 0x10]
lea r12, [rsp + 0x90]
mov qword [r12 + 0x10], rcx
movups xmm0, xmmword [rax]
movaps xmmword [r12], xmm0
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov qword [rax + 0x10], 0
movzx edx, byte [r12 + 0x17]
test dl, dl
cmovs rdx, qword [r12 + 8]
mov rcx, qword [r12]
cmovns rcx, r12
test rdx, rdx
js 0x1400f29d5
je 0x1400f1e9a
test rcx, rcx
je 0x1400f29d8
lea r14, [rsp + 0x170]
movaps xmmword [r14], xmm0
mov qword [r14 + 0x10], 0
mov r8, r14
call fcn.140064fe0
lea rbx, [rsp + 0x2f0]
mov rcx, r14
mov rdx, rbx
call fcn.14011c118
cmp byte [r14 + 0x17], 0
jns 0x1400f1edd
mov rcx, qword [rsp + 0x170]
call fcn.140150da4
cmp byte [rsp + 0xa7], 0
jns 0x1400f1ef4
mov rcx, qword [rsp + 0x90]
call fcn.140150da4
cmp byte [rsp + 0x11f], 0
jns 0x1400f1f0b
mov rcx, qword [rsp + 0x108]
call fcn.140150da4
cmp byte [rsp + 0x2c7], 0
jns 0x1400f1f22
mov rcx, qword [rsp + 0x2b0]
call fcn.140150da4
xorps xmm7, xmm7
movaps xmmword [rsp + 0xc0], xmm7
movaps xmmword [rsp + 0xf0], xmm7
movaps xmmword [rsp + 0xe0], xmm7
movaps xmmword [rsp + 0xd0], xmm7
movaps xmmword [rsp + 0xb0], xmm7
movaps xmmword [rsp + 0xa0], xmm7
movaps xmmword [rsp + 0x90], xmm7
mov dword [rsp + 0xcc], 0x100
mov rsi, qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov ecx, 0xfffffff6
call rsi
mov qword [rsp + 0xe0], rax
mov ecx, 0xfffffff5
call rsi
mov qword [rsp + 0xe8], rax
mov ecx, 0xfffffff4
call rsi
mov qword [rsp + 0xf0], rax
xor eax, eax
mov qword [rsp + 0x2c0], rax
movaps xmmword [rsp + 0x2b0], xmm7
lea rcx, [r13 - 0xaa]
mov qword [rsp + 0x118], rcx
lea rdi, [0x14019b050]
mov qword [rsp + 0x108], rdi
mov qword [rsp + 0x110], rax
mov eax, dword [0x1401de150]
mov ecx, dword [0x1401d52c8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400f291f
mov eax, dword [0x1401de160]
mov ecx, dword [0x1401d52c8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400f2966
mov rax, qword [0x1401de148]
test rax, rax
je 0x1400f20de
cmp qword [0x1401de158], 0
je 0x1400f20de
mov dword [rsp + 0x90], 0x70
lea r9, [rsp + 0x70]
mov qword [r9], r13
xor ecx, ecx
mov edx, 1
xor r8d, r8d
call qword [0x1401b8a48]
test eax, eax
je 0x1400f21a7
cmp dword [0x1401d8070], 2
jg 0x1400f25ad
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
mov rsi, rdi
lea rdi, [rsp + 0x170]
mov rcx, rdi
mov r8d, 0x1d8
mov r9d, 2
call fcn.140072910
lea rcx, [rsp + 0x180]
lea rdx, str.InitializeProcThreadAttributeList__size__succeeded__expected_failure
mov r8d, 0x44
call fcn.140027c01
mov rcx, rdi
mov rdi, rsi
call fcn.140072e50
jmp 0x1400f25ad
cmp dword [0x1401d8070], 2
mov r15, qword [rsp + 0x58]
jle 0x1400f210c
mov esi, 2
xor ebx, ebx
jmp 0x1400f2627
mov dword [rsp + 0x90], 0x68
xor r13d, r13d
xor esi, esi
mov r9, qword [r15]
mov al, byte [r9 + 0x17]
test al, al
js 0x1400f2167
cmp al, 0xc
jb 0x1400f2175
mov r12, r13
mov r13, rdi
movzx r8d, al
jmp 0x1400f22a2
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rdi, [rsp + 0x170]
mov rcx, rdi
mov r8d, 0x1a7
mov r9d, 2
call fcn.140073ae0
lea rcx, [rsp + 0x180]
lea rdx, [0x1401b03a7]
mov r8d, 0xb
call fcn.140027c01
mov rcx, rdi
call fcn.140073c70
mov esi, 2
xor ebx, ebx
jmp 0x1400f25ff
mov r8, qword [r9 + 8]
cmp r8, 0xc
jae 0x1400f229c
movabs rcx, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x80], rcx
movaps xmmword [rsp + 0x70], xmm6
cmp byte [rsp + 0x307], 0
jns 0x1400f228f
mov rdx, qword [rsp + 0x2f0]
jmp 0x1400f2347
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x1400f254f
lea r15, [rsp + 0x70]
mov rcx, qword [r15]
call fcn.140150ddc
mov r13, rax
mov qword [rsp + 0xf8], rax
mov rax, qword [0x1401de148]
mov rcx, r13
mov edx, 1
xor r8d, r8d
mov r9, r15
call qword [0x1401b8a48]
test eax, eax
je 0x1400f2683
lea r15, [rsp + 0x108]
mov rcx, r15
call fcn.1400f302a
mov qword [r15 + 8], r13
mov rcx, qword [rsp + 0x2c0]
mov r15, qword [rsp + 0x2b0]
mov rsi, qword [rsp + 0x2b8]
mov rax, rcx
sub rax, r15
cmp rax, 0x3f
ja 0x1400f26dc
mov ecx, 0x40
call fcn.140150d68
lea rcx, [rax + 0x40]
mov rdx, rsi
sub rdx, r15
lea rax, [rax + rdx]
mov rdx, rax
je 0x1400f2265
mov rdx, rax
mov r8, rsi
mov r9, qword [r8 - 8]
add r8, 0xfffffffffffffff8
mov qword [rdx - 8], r9
add rdx, 0xfffffffffffffff8
cmp r8, r15
jne 0x1400f2250
mov qword [rsp + 0x2b0], rdx
mov qword [rsp + 0x2b8], rax
mov qword [rsp + 0x2c0], rcx
cmp rsi, r15
je 0x1400f26e1
add rsi, 0xfffffffffffffff8
jne 0x1400f227d
int3
lea rdx, [rsp + 0x2f0]
jmp 0x1400f2347
mov r12, r13
mov r13, rdi
mov rdi, rbp
add r8, 0xfffffffffffffff4
lea rax, [rsp + 0x70]
mov qword [rsp + 0x20], rax
mov rcx, r14
mov rdx, r9
mov r9, 0xffffffffffffffff
call fcn.1400511b6
cmp byte [rsp + 0x187], 0
jns 0x1400f22d7
mov r14, qword [rsp + 0x170]
lea rdx, str.rundll32.exe
mov rcx, r14
call fcn.14016d15c
mov ebp, eax
cmp byte [rsp + 0x187], 0
jns 0x1400f22ff
mov rcx, qword [rsp + 0x170]
call fcn.140150da4
cmp byte [rsp + 0x307], 0
jns 0x1400f2311
mov rbx, qword [rsp + 0x2f0]
movabs rax, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x80], rax
movaps xmmword [rsp + 0x70], xmm6
test ebp, ebp
je 0x1400f2350
mov r9, qword [r15]
mov al, byte [r9 + 0x17]
mov rbp, rdi
mov rdi, r13
mov r13, r12
mov rdx, rbx
lea r12, [rsp + 0x90]
test al, al
jns 0x1400f2367
mov r9, qword [r9]
jmp 0x1400f2367
xor r9d, r9d
mov rbp, rdi
mov rdi, r13
mov r13, r12
mov rdx, rbx
lea r12, [rsp + 0x90]
lea rax, [rsp + 0x70]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x40], r12
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], 1
mov rcx, r9
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x1400f24ec
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [0x1401d8070], 1
jg 0x1400f2411
cmp dword [0x1401c8550], 0
je 0x1400f2411
test eax, eax
jne 0x1400f2411
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rbx, [rsp + 0x170]
mov rcx, rbx
mov r8d, 0x228
mov r9d, 1
call fcn.140073ae0
lea rcx, [rsp + 0x180]
lea rdx, str.CloseHandle_thread
mov r8d, 0x12
call fcn.140027c01
mov rcx, rbx
call fcn.140073c70
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [0x1401d8070], 1
jg 0x1400f2481
cmp dword [0x1401c8550], 0
je 0x1400f2481
test eax, eax
jne 0x1400f2481
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rbx, [rsp + 0x170]
mov rcx, rbx
mov r8d, 0x22b
mov r9d, 1
call fcn.140073ae0
lea rcx, [rsp + 0x180]
lea rdx, str.CloseHandle_process
mov r8d, 0x13
call fcn.140027c01
mov rcx, rbx
call fcn.140073c70
mov ecx, 0xc0
add rcx, qword [r15]
lea rbx, [rsp + 0x170]
mov qword [rbx], 0xffffffffffffffff
mov rdx, rbx
call fcn.1400eed16
xorps xmm0, xmm0
movups xmmword [rbx + 0x14], xmm0
movups xmmword [rbx + 4], xmm0
mov dword [rbx], 2
lea r8, [rsp + 0x60]
mov dword [r8 + 8], 0
mov qword [r8], 0
mov ecx, 0xa8
add rcx, qword [r15]
lea rdx, [rsp + 0x170]
call fcn.140117e4c
mov ebx, eax
movzx eax, al
mov esi, 2
sub rsi, rax
jmp 0x1400f25b7
mov esi, 2
cmp dword [0x1401d8070], 2
jg 0x1400f25b5
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rbx, [rsp + 0x170]
mov rcx, rbx
mov r8d, 0x223
mov r9d, 2
call fcn.140073ae0
lea rcx, [rsp + 0x180]
lea rdx, str.CreateProcess
mov r8d, 0xd
call fcn.140027c01
mov rcx, rbx
call fcn.140073c70
jmp 0x1400f25b5
cmp dword [0x1401d8070], 2
jg 0x1400f25ad
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
mov rsi, rdi
lea rdi, [rsp + 0x170]
mov rcx, rdi
mov r8d, 0x1dc
mov r9d, 2
call fcn.140073ae0
lea rcx, [rsp + 0x180]
lea rdx, str.InitializeProcThreadAttributeList__size_
mov r8d, 0x28
call fcn.140027c01
mov rcx, rdi
mov rdi, rsi
call fcn.140073c70
xor r13d, r13d
mov esi, 2
xor ebx, ebx
mov qword [rsp + 0x108], rdi
cmp byte [rsp + 0x118], 0
jne 0x1400f29db
lea rcx, [rsp + 0x108]
call fcn.1400f302a
test r13, r13
je 0x1400f25e7
mov rcx, r13
call fcn.140150de4
lea rax, [rsp + 0x2b0]
lea rcx, [rsp + 0x170]
mov qword [rcx], rax
call fcn.14002a2c4
mov qword [rsp + 0x2d0], rbp
cmp byte [rsp + 0x2e0], 0
jne 0x1400f29cf
mov rcx, qword [rsp + 0x2d8]
test rcx, rcx
je 0x1400f2627
call fcn.140110914
cmp byte [rsp + 0x307], 0
jns 0x1400f263e
mov rcx, qword [rsp + 0x2f0]
call fcn.140150da4
mov qword [0x1401de140], rsi
mov rcx, r15
call fcn.1400f2c1a
mov rcx, qword [rsp + 0x308]
xor rcx, rsp
call fcn.140152280
mov eax, ebx
movaps xmm6, xmmword [rsp + 0x310]
movaps xmm7, xmmword [rsp + 0x320]
add rsp, 0x338
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
cmp dword [0x1401d8070], 2
mov r15, qword [rsp + 0x58]
jg 0x1400f25b0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rbx, [rsp + 0x170]
mov rcx, rbx
mov r8d, 0x1e7
mov r9d, 2
call fcn.140073ae0
lea rcx, [rsp + 0x180]
lea rdx, [0x1401b0478]
mov r8d, 0x21
jmp 0x1400f290d
mov rax, rsi
jmp 0x1400f26fe
test r15, r15
je 0x1400f26fe
mov rcx, r15
call fcn.140150da4
mov rax, qword [rsp + 0x2b8]
mov rcx, qword [rsp + 0x2c0]
cmp rax, rcx
jae 0x1400f2721
test rax, rax
mov rsi, qword [rsp + 0x58]
je 0x1400f29e4
mov rcx, qword [0x1401d4678]
mov qword [rax], rcx
add rax, 8
jmp 0x1400f273a
lea rdx, [0x1401d4678]
lea rcx, [rsp + 0x2b0]
call fcn.14002cb10
mov rsi, qword [rsp + 0x58]
mov qword [rsp + 0x2b8], rax
cmp rax, qword [rsp + 0x2c0]
jae 0x1400f2765
test rax, rax
je 0x1400f29e7
mov rcx, qword [0x1401d4684]
mov qword [rax], rcx
add rax, 8
jmp 0x1400f2779
lea rdx, [0x1401d4684]
lea rcx, [rsp + 0x2b0]
call fcn.14002cb10
mov qword [rsp + 0x2b8], rax
cmp rax, qword [rsp + 0x2c0]
jae 0x1400f27a4
test rax, rax
je 0x1400f29ea
mov rcx, qword [0x1401d468c]
mov qword [rax], rcx
add rax, 8
jmp 0x1400f27b8
lea rdx, [0x1401d468c]
lea rcx, [rsp + 0x2b0]
call fcn.14002cb10
mov qword [rsp + 0x2b8], rax
mov edx, 0xc8
add rdx, qword [rsi]
cmp rax, qword [rsp + 0x2c0]
jae 0x1400f27e7
test rax, rax
je 0x1400f29ed
mov rcx, qword [rdx]
mov qword [rax], rcx
add rax, 8
jmp 0x1400f27f4
lea rcx, [rsp + 0x2b0]
call fcn.14002cb10
mov qword [rsp + 0x2b8], rax
cmp rax, qword [rsp + 0x2c0]
jae 0x1400f2820
test rax, rax
je 0x1400f29f0
mov rcx, qword [rsp + 0x2d8]
mov qword [rax], rcx
add rax, 8
jmp 0x1400f2835
lea rdx, [rsp + 0x2d8]
lea rcx, [rsp + 0x2b0]
call fcn.14002cb10
lea r15, [rsp + 0x2b0]
mov qword [r15 + 8], rax
mov rdx, qword [rsp + 0xe0]
mov rcx, r15
call fcn.1400f2e8e
mov rdx, qword [rsp + 0xe8]
mov rcx, r15
call fcn.1400f2e8e
mov rdx, qword [rsp + 0xf0]
mov rcx, r15
call fcn.1400f2e8e
mov r9, qword [r15]
mov rdx, qword [r15 + 8]
sub rdx, r9
je 0x1400f29e1
mov rax, qword [0x1401de158]
mov rcx, qword [rsp + 0xf8]
xorps xmm0, xmm0
movups xmmword [rsp + 0x28], xmm0
mov qword [rsp + 0x20], rdx
mov r8d, 0x20002
xor edx, edx
call qword [0x1401b8a48]
test eax, eax
mov r15, qword [rsp + 0x58]
je 0x1400f28be
mov esi, 0x80000
jmp 0x1400f20ee
cmp dword [0x1401d8070], 2
jg 0x1400f25b0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rbx, [rsp + 0x170]
mov rcx, rbx
mov r8d, 0x201
mov r9d, 2
call fcn.140073ae0
lea rcx, [rsp + 0x180]
lea rdx, [0x1401b049a]
mov r8d, 0x19
call fcn.140027c01
mov rcx, rbx
call fcn.140073c70
jmp 0x1400f25b0
lea rcx, [0x1401de150]
call fcn.140150ec0
cmp dword [0x1401de150], 0xffffffff
jne 0x1400f1ff9
lea rcx, [0x14019f302]
lea rdx, str.::InitializeProcThreadAttributeList
xor r8d, r8d
call fcn.140118540
mov qword [0x1401de148], rax
lea rcx, [0x1401de150]
call fcn.140150f58
jmp 0x1400f1ff9
lea rcx, [0x1401de160]
call fcn.140150ec0
cmp dword [0x1401de160], 0xffffffff
jne 0x1400f201e
cmp qword [0x1401de148], 0
je 0x1400f29a1
lea rcx, [0x14019f302]
lea rdx, str.::UpdateProcThreadAttribute
xor r8d, r8d
call fcn.140118540
jmp 0x1400f29a3
xor eax, eax
mov qword [0x1401de158], rax
lea rcx, [0x1401de160]
call fcn.140150f58
mov r15, qword [rsp + 0x58]
jmp 0x1400f201e
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3