Function at 0x1400b8a04
Capabilities:
Create process on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x378
movaps xmmword [rsp + 0x360], xmm7
movaps xmmword [rsp + 0x350], xmm6
mov r15, rcx
mov rax, qword [0x1401af6a8]
xor rax, rsp
mov qword [rsp + 0x348], rax
call fcn.1400db9b0
test al, al
je 0x1400b8a79
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea r9, str._IsThreadInLoaderLock__
lea rsi, [rsp + 0x178]
mov rcx, rsi
mov r8d, 0x163
call fcn.140024e50
mov rcx, rsi
call fcn.140024ee0
mov rcx, rsi
call fcn.140024ef0
xorps xmm0, xmm0
lea rdx, [rsp + 0x330]
movaps xmmword [rdx], xmm0
mov qword [rdx + 0x10], 0
mov rcx, qword [r15]
call fcn.1400db9dc
mov rdi, qword [r15]
mov rax, qword [rdi + 0x78]
mov rbp, qword [rdi + 0x80]
cmp rax, rbp
je 0x1400b8b33
lea rsi, [rsp + 0x178]
lea r14, [rsp + 0x320]
lea rbx, [rsp + 0x330]
lea rdi, [rax + 1]
test byte [rax], 1
mov rcx, rdi
je 0x1400b8ad6
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x320], rcx
movzx ecx, byte [rax]
test cl, 1
je 0x1400b8aec
mov rcx, qword [rax + 8]
jmp 0x1400b8aef
shr rcx, 1
mov qword [rsp + 0x328], rcx
mov rcx, rsi
mov rdx, r14
call fcn.140039490
mov rcx, rsi
mov rdx, rbx
call fcn.1400db9dc
test byte [rsp + 0x178], 1
je 0x1400b8b24
mov rcx, qword [rsp + 0x188]
call fcn.14012d304
add rdi, 0x17
mov rax, rdi
cmp rdi, rbp
jne 0x1400b8ac6
mov rdi, qword [r15]
movzx eax, byte [rdi + 0x18]
test al, 1
jne 0x1400b8b40
shr rax, 1
jmp 0x1400b8b44
mov rax, qword [rdi + 0x20]
test rax, rax
je 0x1400b8bb6
add rdi, 0x18
lea rdx, str.database
lea rsi, [rsp + 0x90]
mov rcx, rsi
call fcn.14000291e
lea rbx, [rsp + 0x178]
mov rcx, rbx
mov rdx, rsi
mov r8, rdi
call fcn.1400ba200
lea rdx, [rsp + 0x330]
mov rcx, rbx
call fcn.1400db9dc
test byte [rbx], 1
je 0x1400b8b9c
mov rcx, qword [rsp + 0x188]
call fcn.14012d304
test byte [rsp + 0x90], 1
je 0x1400b8bb3
mov rcx, qword [rsp + 0xa0]
call fcn.14012d304
mov rdi, qword [r15]
movzx eax, byte [rdi + 0x30]
test al, 1
jne 0x1400b8bc3
shr rax, 1
jmp 0x1400b8bc7
mov rax, qword [rdi + 0x38]
test rax, rax
je 0x1400b8c39
add rdi, 0x30
lea rdx, str.metrics_dir
lea rsi, [rsp + 0x90]
mov rcx, rsi
call fcn.14000291e
lea rbx, [rsp + 0x178]
mov rcx, rbx
mov rdx, rsi
mov r8, rdi
call fcn.1400ba200
lea rdx, [rsp + 0x330]
mov rcx, rbx
call fcn.1400db9dc
test byte [rbx], 1
je 0x1400b8c1f
mov rcx, qword [rsp + 0x188]
call fcn.14012d304
test byte [rsp + 0x90], 1
je 0x1400b8c36
mov rcx, qword [rsp + 0xa0]
call fcn.14012d304
mov rdi, qword [r15]
movzx eax, byte [rdi + 0x48]
test al, 1
jne 0x1400b8c49
mov rcx, rax
shr rcx, 1
jmp 0x1400b8c4d
mov rcx, qword [rdi + 0x50]
test rcx, rcx
mov qword [rsp + 0x58], r15
je 0x1400b8d14
lea rcx, [rdi + 0x48]
inc rcx
mov ebx, eax
shr bl, 1
test al, 1
cmovne rcx, qword [rdi + 0x58]
lea rdx, [rsp + 0x310]
mov qword [rdx], rcx
movzx eax, bl
cmovne rax, qword [rdi + 0x50]
mov qword [rdx + 8], rax
lea rsi, [rsp + 0x90]
mov rcx, rsi
call fcn.140039490
lea rdx, [0x14016ab51]
lea rdi, [rsp + 0x130]
mov rcx, rdi
call fcn.14000291e
lea rbx, [rsp + 0x178]
mov rcx, rbx
mov rdx, rdi
mov r8, rsi
call fcn.1400ba200
lea rdx, [rsp + 0x330]
mov rcx, rbx
call fcn.1400db9dc
test byte [rbx], 1
je 0x1400b8ce3
mov rcx, qword [rsp + 0x188]
call fcn.14012d304
test byte [rsp + 0x130], 1
je 0x1400b8cfa
mov rcx, qword [rsp + 0x140]
call fcn.14012d304
test byte [rsp + 0x90], 1
je 0x1400b8d11
mov rcx, qword [rsp + 0xa0]
call fcn.14012d304
mov rdi, qword [r15]
mov r15, qword [rdi + 0x60]
add rdi, 0x68
cmp rdi, r15
je 0x1400b8ecf
lea r13, [rsp + 0x2e0]
xorps xmm6, xmm6
lea rsi, [rsp + 0x90]
lea r12, str.annotation
lea rbx, [rsp + 0x2c0]
lea rbp, [rsp + 0x178]
lea r14, [rsp + 0x330]
lea rdx, [r15 + 0x20]
mov rcx, r13
mov r8b, 0x3d
call fcn.14000425c
movzx r8d, byte [r15 + 0x38]
test r8b, 1
je 0x1400b8d7b
mov r8, qword [r15 + 0x40]
mov rdx, qword [r15 + 0x48]
jmp 0x1400b8d82
shr r8, 1
lea rdx, [r15 + 0x39]
mov rcx, r13
call fcn.140021aa2
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x140], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x130], xmm0
movups xmmword [rax], xmm6
mov qword [rax + 0x10], 0
movzx eax, byte [rsp + 0x130]
mov rcx, rax
shr rcx, 1
test al, 1
mov rax, qword [rsp + 0x140]
lea rdx, [rsp + 0x131]
cmove rax, rdx
mov qword [rsp + 0x300], rax
cmovne rcx, qword [rsp + 0x138]
mov qword [rsp + 0x308], rcx
mov rcx, rsi
lea rdx, [rsp + 0x300]
call fcn.140039490
mov rcx, rbx
mov rdx, r12
call fcn.14000291e
mov rcx, rbp
mov rdx, rbx
mov r8, rsi
call fcn.1400ba200
mov rcx, rbp
mov rdx, r14
call fcn.1400db9dc
test byte [rsp + 0x178], 1
je 0x1400b8e34
mov rcx, qword [rsp + 0x188]
call fcn.14012d304
test byte [rsp + 0x2c0], 1
je 0x1400b8e4b
mov rcx, qword [rsp + 0x2d0]
call fcn.14012d304
test byte [rsp + 0x90], 1
je 0x1400b8e62
mov rcx, qword [rsp + 0xa0]
call fcn.14012d304
test byte [rsp + 0x130], 1
je 0x1400b8e79
mov rcx, qword [rsp + 0x140]
call fcn.14012d304
test byte [rsp + 0x2e0], 1
je 0x1400b8e90
mov rcx, qword [rsp + 0x2f0]
call fcn.14012d304
mov rcx, qword [r15 + 8]
test rcx, rcx
je 0x1400b8ea6
mov rax, rcx
mov rcx, qword [rcx]
test rcx, rcx
jne 0x1400b8e99
jmp 0x1400b8ec3
mov rax, qword [r15 + 0x10]
cmp qword [rax], r15
je 0x1400b8ec3
add r15, 0x10
mov rcx, qword [r15]
mov rax, qword [rcx + 0x10]
lea r15, [rcx + 0x10]
cmp qword [rax], rcx
jne 0x1400b8eb3
mov r15, rax
cmp rdi, rax
jne 0x1400b8d57
movabs r14, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x2f0], r14
movaps xmm6, xmmword [section..rdata]
movaps xmmword [rsp + 0x2e0], xmm6
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, 0x1f0fff
mov edx, 1
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_OpenProcess]
lea rcx, [0x140174ee0]
mov qword [rsp + 0x2e0], rcx
mov qword [rsp + 0x2e8], rax
mov byte [rsp + 0x2f0], 0
test rax, rax
je 0x1400b8ff1
lea rsi, [rsp + 0x130]
mov qword [rsi + 0x40], r14
movaps xmmword [rsi + 0x30], xmm6
movaps xmmword [rsi + 0x20], xmm6
movaps xmmword [rsi + 0x10], xmm6
movaps xmmword [rsi], xmm6
mov rbp, qword [rsp + 0x58]
mov rcx, qword [rbp]
mov rcx, qword [rcx + 0xb0]
mov r9, qword [0x1401af8e8]
mov r8, qword [0x1401af8e0]
mov rdx, qword [0x1401af8d8]
lea rbx, [0x1401b4e80]
mov qword [rsp + 0x40], rbx
lea rbx, [0x1401b4e70]
mov qword [rsp + 0x38], rbx
lea rbx, [0x1401b4e60]
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
mov rcx, rsi
call fcn.14004c742
lea rdi, [rsp + 0x2c0]
mov rcx, rsi
mov rdx, rdi
call fcn.14004caf2
lea rdx, str.__initial_client_data
lea rsi, [rsp + 0x100]
mov rcx, rsi
call fcn.14000291e
movzx r8d, byte [rdi]
test r8b, 1
je 0x1400b905f
mov r8, qword [rsp + 0x2c8]
mov rdx, qword [rsp + 0x2d0]
jmp 0x1400b906a
mov ecx, 2
call fcn.14002c580
xor esi, esi
test al, al
mov rbp, qword [rsp + 0x58]
je 0x1400b96eb
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x178]
mov rcx, rsi
mov r8d, 0x185
mov r9d, 2
call fcn.14002d550
lea rcx, [rsp + 0x188]
lea rdx, [0x140174d81]
mov r8d, 0xb
call fcn.140001e21
mov rcx, rsi
call fcn.14002d640
xor esi, esi
jmp 0x1400b96eb
shr r8, 1
lea rdx, [rsp + 0x2c1]
mov rcx, rsi
call fcn.140021aa2
mov rcx, qword [rax + 0x10]
lea rbx, [rsp + 0x91]
mov qword [rbx + 0xf], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rbx - 1], xmm0
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov qword [rax + 0x10], 0
movzx eax, byte [rbx - 1]
mov rcx, rax
shr rcx, 1
test al, 1
mov rax, qword [rbx + 0xf]
cmove rax, rbx
lea rdx, [rsp + 0x120]
mov qword [rdx], rax
cmovne rcx, qword [rbx + 7]
mov qword [rdx + 8], rcx
lea rsi, [rsp + 0x178]
mov rcx, rsi
call fcn.140039490
lea rdx, [rsp + 0x330]
mov rcx, rsi
call fcn.1400db9dc
test byte [rsi], 1
je 0x1400b90f1
mov rcx, qword [rsp + 0x188]
call fcn.14012d304
test byte [rsp + 0x90], 1
je 0x1400b9108
mov rcx, qword [rsp + 0xa0]
call fcn.14012d304
test byte [rsp + 0x100], 1
je 0x1400b911f
mov rcx, qword [rsp + 0x110]
call fcn.14012d304
test byte [rsp + 0x2c0], 1
je 0x1400b9136
mov rcx, qword [rsp + 0x2d0]
call fcn.14012d304
xorps xmm7, xmm7
movaps xmmword [rsp + 0xc0], xmm7
movaps xmmword [rsp + 0xf0], xmm7
movaps xmmword [rsp + 0xe0], xmm7
movaps xmmword [rsp + 0xd0], xmm7
movaps xmmword [rsp + 0xb0], xmm7
movaps xmmword [rsp + 0xa0], xmm7
movaps xmmword [rsp + 0x90], xmm7
mov dword [rsp + 0xcc], 0x100
mov rsi, qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov ecx, 0xfffffff6
call rsi
mov qword [rsp + 0xe0], rax
mov ecx, 0xfffffff5
call rsi
mov qword [rsp + 0xe8], rax
mov ecx, 0xfffffff4
call rsi
mov qword [rsp + 0xf0], rax
xor eax, eax
mov qword [rsp + 0x2d0], rax
movaps xmmword [rsp + 0x2c0], xmm7
movaps xmmword [rsp + 0x100], xmm6
mov qword [rsp + 0x110], r14
lea rcx, [0x140174ee8]
mov qword [rsp + 0x100], rcx
mov qword [rsp + 0x108], rax
mov byte [rsp + 0x110], 0
mov eax, dword [0x1401b4ec0]
mov ecx, dword [0x1401b2730]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400b9d4e
mov eax, dword [0x1401b4ed0]
mov ecx, dword [0x1401b2730]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400b9d95
mov rbx, qword [0x1401b4eb8]
test rbx, rbx
je 0x1400b92dc
cmp qword [0x1401b4ec8], 0
je 0x1400b92dc
mov dword [rsp + 0x90], 0x70
lea r9, [rsp + 0x70]
mov qword [r9], r14
xor ecx, ecx
mov edx, 1
xor r8d, r8d
call rbx
test eax, eax
je 0x1400b931a
mov ecx, 2
call fcn.14002c580
test al, al
je 0x1400b96b2
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x178]
mov rcx, rsi
mov r8d, 0x1b6
mov r9d, 2
call fcn.14002c620
lea rcx, [rsp + 0x188]
lea rdx, str.InitializeProcThreadAttributeList__size__succeeded__expected_failure
mov r8d, 0x44
call fcn.140001e21
mov rcx, rsi
call fcn.14002cae0
jmp 0x1400b96b2
mov dword [rsp + 0x90], 0x68
xor r13d, r13d
xor edi, edi
mov rdx, qword [rbp]
movzx r8d, byte [rdx]
test r8b, 1
jne 0x1400b9308
cmp r8b, 0x18
jb 0x1400b9313
shr r8, 1
jmp 0x1400b93ce
cmp qword [rdx + 8], 0xc
jae 0x1400b93ca
xor esi, esi
jmp 0x1400b9432
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x1400b9656
lea rsi, [rsp + 0x70]
mov rcx, qword [rsi]
call fcn.14012d33c
mov r13, rax
mov qword [rsp + 0xf8], rax
mov rcx, rax
mov edx, 1
xor r8d, r8d
mov r9, rsi
call qword [0x1401b4eb8]
test eax, eax
je 0x1400b9761
movabs r15, 0x1fffffffffffffff
lea rsi, [rsp + 0x100]
mov rcx, rsi
call fcn.1400ba686
mov rax, qword [rsp + 0xf8]
mov qword [rsi + 8], rax
lea rsi, [rsp + 0x2c0]
mov edx, 8
mov rcx, rsi
call fcn.1400ba3a8
mov rdi, qword [rsi + 8]
mov rbx, qword [rsi + 0x10]
cmp rdi, rbx
je 0x1400b97b9
mov rax, qword [0x1401af8d8]
mov qword [rdi], rax
add rdi, 8
mov qword [rsp + 0x2c8], rdi
mov rbx, rdi
mov rdx, r15
jmp 0x1400b98a1
mov r8, qword [rdx + 8]
add r8, 0xfffffffffffffff4
lea rax, [rdx + 0x18]
mov qword [rsp + 0x20], rax
lea rsi, [rsp + 0x178]
mov rcx, rsi
mov r9, 0xffffffffffffffff
call fcn.140022340
test byte [rsi], 1
je 0x1400b9401
mov rcx, qword [rsp + 0x188]
jmp 0x1400b9409
lea rcx, [rsp + 0x17a]
lea rdx, str.rundll32.exe
call fcn.140143118
test eax, eax
sete sil
test byte [rsp + 0x178], 1
je 0x1400b9432
mov rcx, qword [rsp + 0x188]
call fcn.14012d304
mov qword [rsp + 0x80], r14
movaps xmmword [rsp + 0x70], xmm6
test byte [rsp + 0x330], 1
je 0x1400b9453
mov rdx, qword [rsp + 0x340]
jmp 0x1400b945b
lea rdx, [rsp + 0x332]
test sil, sil
je 0x1400b9464
xor ecx, ecx
jmp 0x1400b9477
mov rcx, qword [rbp]
test byte [rcx], 1
jne 0x1400b9473
add rcx, 2
jmp 0x1400b9477
mov rcx, qword [rcx + 0x10]
lea rax, [rsp + 0x70]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x90]
mov qword [rsp + 0x40], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], 1
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x1400b95f2
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, eax
mov ecx, 1
call fcn.14002c580
test esi, esi
jne 0x1400b9523
test al, al
je 0x1400b9523
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x178]
mov rcx, rsi
mov r8d, 0x206
mov r9d, 1
call fcn.14002d550
lea rcx, [rsp + 0x188]
lea rdx, str.CloseHandle_thread
mov r8d, 0x12
call fcn.140001e21
mov rcx, rsi
call fcn.14002d640
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, eax
mov ecx, 1
call fcn.14002c580
test esi, esi
jne 0x1400b9590
test al, al
je 0x1400b9590
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x178]
mov rcx, rsi
mov r8d, 0x209
mov r9d, 1
call fcn.14002d550
lea rcx, [rsp + 0x188]
lea rdx, str.CloseHandle_process
mov r8d, 0x13
call fcn.140001e21
mov rcx, rsi
call fcn.14002d640
mov ecx, 0xa8
add rcx, qword [rbp]
lea rsi, [rsp + 0x178]
mov qword [rsi], 0xffffffffffffffff
mov rdx, rsi
call fcn.1400b9ffa
xorps xmm0, xmm0
movups xmmword [rsi + 0x14], xmm0
movups xmmword [rsi + 4], xmm0
mov dword [rsi], 2
lea r8, [rsp + 0x60]
mov dword [r8 + 8], 0
mov qword [r8], 0
mov ecx, 0x90
add rcx, qword [rbp]
lea rdx, [rsp + 0x178]
call fcn.1400db044
mov esi, eax
jmp 0x1400b96b7
mov ecx, 2
call fcn.14002c580
xor esi, esi
test al, al
je 0x1400b96b7
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x178]
mov rcx, rsi
mov r8d, 0x201
mov r9d, 2
call fcn.14002d550
lea rcx, [rsp + 0x188]
lea rdx, str.CreateProcess
mov r8d, 0xd
call fcn.140001e21
mov rcx, rsi
call fcn.14002d640
jmp 0x1400b96b5
mov ecx, 2
call fcn.14002c580
test al, al
je 0x1400b96b2
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x178]
mov rcx, rsi
mov r8d, 0x1ba
mov r9d, 2
call fcn.14002d550
lea rcx, [rsp + 0x188]
lea rdx, str.InitializeProcThreadAttributeList__size_
mov r8d, 0x28
call fcn.140001e21
mov rcx, rsi
call fcn.14002d640
xor r13d, r13d
xor esi, esi
lea rcx, [rsp + 0x100]
call fcn.1400ba596
test r13, r13
je 0x1400b96d1
mov rcx, r13
call fcn.14012d344
mov rcx, qword [rsp + 0x2c0]
test rcx, rcx
je 0x1400b96eb
mov qword [rsp + 0x2c8], rcx
call fcn.14012d304
lea rcx, [rsp + 0x2e0]
call fcn.1400b839e
test byte [rsp + 0x330], 1
je 0x1400b970f
mov rcx, qword [rsp + 0x340]
call fcn.14012d304
cmp sil, 1
mov eax, 1
adc rax, 0
mov qword [0x1401b4eb0], rax
mov rcx, rbp
call fcn.1400ba178
mov rcx, qword [rsp + 0x348]
xor rcx, rsp
call fcn.14012d670
mov eax, esi
movaps xmm6, xmmword [rsp + 0x350]
movaps xmm7, xmmword [rsp + 0x360]
add rsp, 0x378
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov ecx, 2
call fcn.14002c580
test al, al
je 0x1400b96b5
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x178]
mov rcx, rsi
mov r8d, 0x1c5
mov r9d, 2
call fcn.14002d550
lea rcx, [rsp + 0x188]
lea rdx, [0x140174e52]
mov r8d, 0x21
jmp 0x1400b9647
mov rsi, qword [rsp + 0x2c0]
sub rdi, rsi
mov r12, rdi
sar r12, 3
lea rax, [r12 + 1]
cmp rax, r15
ja 0x1400b9dea
mov rdx, r15
sub rbx, rsi
mov rcx, rbx
sar rcx, 3
sar rbx, 2
cmp rbx, rax
cmovb rbx, rax
movabs rax, 0xfffffffffffffff
cmp rcx, rax
cmovae rbx, r15
test rbx, rbx
mov r15, rsi
je 0x1400b982f
cmp rbx, rdx
ja 0x1400b9df7
lea rcx, [rbx*8]
call fcn.14012d2c8
mov rsi, rax
movabs rdx, 0x1fffffffffffffff
jmp 0x1400b9831
xor esi, esi
lea rbp, [rsi + rbx*8]
mov rax, qword [0x1401af8d8]
lea rbx, [rsi + r12*8]
add rbx, 8
mov qword [rbx - 8], rax
test rdi, rdi
jle 0x1400b9865
mov rcx, rsi
mov rdx, r15
mov r8, rdi
call fcn.1401306b0
movabs rdx, 0x1fffffffffffffff
mov qword [rsp + 0x2c0], rsi
mov qword [rsp + 0x2c8], rbx
mov qword [rsp + 0x2d0], rbp
test r15, r15
mov rbp, qword [rsp + 0x58]
je 0x1400b98a1
mov rcx, r15
call fcn.14012d304
movabs rdx, 0x1fffffffffffffff
mov rbx, qword [rsp + 0x2c8]
mov rsi, qword [rsp + 0x2d0]
cmp rbx, rsi
je 0x1400b98c9
mov rax, qword [0x1401af8e0]
mov qword [rbx], rax
add rbx, 8
mov qword [rsp + 0x2c8], rbx
jmp 0x1400b999f
mov r15, qword [rsp + 0x2c0]
sub rsi, r15
mov rbx, rsi
sar rbx, 3
lea rax, [rbx + 1]
cmp rax, rdx
ja 0x1400b9dea
mov rdi, rsi
sar rdi, 2
cmp rdi, rax
cmovb rdi, rax
movabs rax, 0xfffffffffffffff
cmp rbx, rax
cmovae rdi, rdx
test rdi, rdi
je 0x1400b9931
cmp rdi, rdx
ja 0x1400b9df7
lea rcx, [rdi*8]
call fcn.14012d2c8
mov r12, rax
movabs rdx, 0x1fffffffffffffff
jmp 0x1400b9934
xor r12d, r12d
lea rdi, [r12 + rdi*8]
mov rax, qword [0x1401af8e0]
lea rbx, [r12 + rbx*8]
add rbx, 8
mov qword [rbx - 8], rax
test rsi, rsi
jle 0x1400b9968
mov rcx, r12
mov rdx, r15
mov r8, rsi
call fcn.1401306b0
movabs rdx, 0x1fffffffffffffff
mov qword [rsp + 0x2c0], r12
mov qword [rsp + 0x2c8], rbx
mov qword [rsp + 0x2d0], rdi
test r15, r15
je 0x1400b999f
mov rcx, r15
call fcn.14012d304
movabs rdx, 0x1fffffffffffffff
mov rbx, qword [rsp + 0x2c8]
mov rsi, qword [rsp + 0x2d0]
cmp rbx, rsi
je 0x1400b99c7
mov rax, qword [0x1401af8e8]
mov qword [rbx], rax
add rbx, 8
mov qword [rsp + 0x2c8], rbx
jmp 0x1400b9a9d
mov r15, qword [rsp + 0x2c0]
sub rsi, r15
mov rbx, rsi
sar rbx, 3
lea rax, [rbx + 1]
cmp rax, rdx
ja 0x1400b9dea
mov rdi, rsi
sar rdi, 2
cmp rdi, rax
cmovb rdi, rax
movabs rax, 0xfffffffffffffff
cmp rbx, rax
cmovae rdi, rdx
test rdi, rdi
je 0x1400b9a2f
cmp rdi, rdx
ja 0x1400b9df7
lea rcx, [rdi*8]
call fcn.14012d2c8
mov r12, rax
movabs rdx, 0x1fffffffffffffff
jmp 0x1400b9a32
xor r12d, r12d
lea rdi, [r12 + rdi*8]
mov rax, qword [0x1401af8e8]
lea rbx, [r12 + rbx*8]
add rbx, 8
mov qword [rbx - 8], rax
test rsi, rsi
jle 0x1400b9a66
mov rcx, r12
mov rdx, r15
mov r8, rsi
call fcn.1401306b0
movabs rdx, 0x1fffffffffffffff
mov qword [rsp + 0x2c0], r12
mov qword [rsp + 0x2c8], rbx
mov qword [rsp + 0x2d0], rdi
test r15, r15
je 0x1400b9a9d
mov rcx, r15
call fcn.14012d304
movabs rdx, 0x1fffffffffffffff
mov rbx, qword [rsp + 0x2c8]
mov r12, qword [rbp]
mov r15, qword [rsp + 0x2d0]
cmp rbx, r15
je 0x1400b9aca
mov rax, qword [r12 + 0xb0]
mov qword [rbx], rax
add rbx, 8
mov qword [rsp + 0x2c8], rbx
jmp 0x1400b9ba0
mov rbp, qword [rsp + 0x2c0]
sub r15, rbp
mov rbx, r15
sar rbx, 3
lea rax, [rbx + 1]
cmp rax, rdx
ja 0x1400b9dea
mov rdi, r15
sar rdi, 2
cmp rdi, rax
cmovb rdi, rax
movabs rax, 0xfffffffffffffff
cmp rbx, rax
cmovae rdi, rdx
test rdi, rdi
je 0x1400b9b32
cmp rdi, rdx
ja 0x1400b9df7
lea rcx, [rdi*8]
call fcn.14012d2c8
mov rsi, rax
movabs rdx, 0x1fffffffffffffff
jmp 0x1400b9b34
xor esi, esi
lea rdi, [rsi + rdi*8]
mov rax, qword [r12 + 0xb0]
lea rbx, [rsi + rbx*8]
add rbx, 8
mov qword [rbx - 8], rax
test r15, r15
jle 0x1400b9b69
mov rcx, rsi
mov rdx, rbp
mov r8, r15
call fcn.1401306b0
movabs rdx, 0x1fffffffffffffff
mov qword [rsp + 0x2c0], rsi
mov qword [rsp + 0x2c8], rbx
mov qword [rsp + 0x2d0], rdi
test rbp, rbp
je 0x1400b9ba0
mov rcx, rbp
call fcn.14012d304
movabs rdx, 0x1fffffffffffffff
mov rbx, qword [rsp + 0x2c8]
mov rsi, qword [rsp + 0x2d0]
cmp rbx, rsi
mov rbp, qword [rsp + 0x58]
je 0x1400b9bce
mov rax, qword [rsp + 0x2e8]
mov qword [rbx], rax
add rbx, 8
mov qword [rsp + 0x2c8], rbx
jmp 0x1400b9c83
mov r12, qword [rsp + 0x2c0]
sub rsi, r12
mov r15, rsi
sar r15, 3
lea rax, [r15 + 1]
cmp rax, rdx
ja 0x1400b9dea
mov rdi, rsi
sar rdi, 2
cmp rdi, rax
cmovb rdi, rax
movabs rax, 0xfffffffffffffff
cmp r15, rax
cmovae rdi, rdx
test rdi, rdi
je 0x1400b9c2c
cmp rdi, rdx
ja 0x1400b9df7
lea rcx, [rdi*8]
call fcn.14012d2c8
mov rbx, rax
jmp 0x1400b9c2e
xor ebx, ebx
lea rbp, [rbx + rdi*8]
mov rax, qword [rsp + 0x2e8]
lea rdi, [rbx + r15*8]
add rdi, 8
mov qword [rdi - 8], rax
test rsi, rsi
jle 0x1400b9c59
mov rcx, rbx
mov rdx, r12
mov r8, rsi
call fcn.1401306b0
mov qword [rsp + 0x2c0], rbx
mov qword [rsp + 0x2c8], rdi
mov qword [rsp + 0x2d0], rbp
test r12, r12
mov rbp, qword [rsp + 0x58]
je 0x1400b9c83
mov rcx, r12
call fcn.14012d304
mov rdx, qword [rsp + 0xe0]
lea rsi, [rsp + 0x2c0]
mov rcx, rsi
call fcn.1400ba445
mov rdx, qword [rsp + 0xe8]
mov rcx, rsi
call fcn.1400ba445
mov rdx, qword [rsp + 0xf0]
mov rcx, rsi
call fcn.1400ba445
mov r9, qword [rsi]
mov rax, qword [rsi + 8]
sub rax, r9
mov rcx, qword [rsp + 0xf8]
xorps xmm0, xmm0
movups xmmword [rsp + 0x28], xmm0
mov qword [rsp + 0x20], rax
mov r8d, 0x20002
xor edx, edx
call qword [0x1401b4ec8]
test eax, eax
je 0x1400b9cf6
mov edi, 0x80000
jmp 0x1400b92ec
mov ecx, 2
call fcn.14002c580
test al, al
je 0x1400b96b5
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x178]
mov rcx, rsi
mov r8d, 0x1df
mov r9d, 2
call fcn.14002d550
lea rcx, [rsp + 0x188]
lea rdx, [0x140174e74]
mov r8d, 0x19
jmp 0x1400b9647
lea rcx, [0x1401b4ec0]
call fcn.14012d420
cmp dword [0x1401b4ec0], 0xffffffff
jne 0x1400b9216
lea rcx, [0x140166f78]
lea rdx, str.::InitializeProcThreadAttributeList
xor r8d, r8d
call fcn.1400dbb58
mov qword [0x1401b4eb8], rax
lea rcx, [0x1401b4ec0]
call fcn.14012d4b8
jmp 0x1400b9216
lea rcx, [0x1401b4ed0]
call fcn.14012d420
cmp dword [0x1401b4ed0], 0xffffffff
jne 0x1400b923b
cmp qword [0x1401b4eb8], 0
je 0x1400b9dd0
lea rcx, [0x140166f78]
lea rdx, str.::UpdateProcThreadAttribute
xor r8d, r8d
call fcn.1400dbb58
jmp 0x1400b9dd2
xor eax, eax
mov qword [0x1401b4ec8], rax
lea rcx, [0x1401b4ed0]
call fcn.14012d4b8
jmp 0x1400b923b
lea rcx, [rsp + 0x2c0]
call fcn.140023930
call fcn.1401405b4
int3