Function at 0x14003bb90
Capabilities:
Create process on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x4a8
movaps xmmword [rsp + 0x490], xmm6
mov r13, rcx
mov rax, qword [0x1400e45d8]
xor rax, rsp
mov qword [rsp + 0x488], rax
call fcn.140057a10
test al, al
jne 0x14003d088
xorps xmm0, xmm0
lea rdx, [rsp + 0x470]
movaps xmmword [rdx], xmm0
mov qword [rdx + 0x10], 0
mov rcx, qword [r13]
call fcn.140057a40
mov rdi, qword [r13]
mov rsi, qword [rdi + 0x78]
mov rbx, qword [rdi + 0x80]
cmp rsi, rbx
je 0x14003bc74
lea rdi, [rsp + 0x2f8]
lea r14, [rsp + 0x460]
lea rbp, [rsp + 0x470]
movzx eax, byte [rsi + 0x17]
test al, al
mov rcx, qword [rsi]
cmovns rcx, rsi
mov qword [rsp + 0x460], rcx
cmovs rax, qword [rsi + 8]
mov qword [rsp + 0x468], rax
mov rcx, rdi
mov rdx, r14
call fcn.140034420
mov rcx, rdi
mov rdx, rbp
call fcn.140057a40
cmp byte [rsp + 0x30f], 0
jns 0x14003bc67
mov rcx, qword [rsp + 0x2f8]
call fcn.14008d81c
add rsi, 0x18
cmp rbx, rsi
jne 0x14003bc18
mov rdi, qword [r13]
movzx eax, byte [rdi + 0x2f]
test al, al
jns 0x14003bc80
mov rax, qword [rdi + 0x20]
test rax, rax
jne 0x14003bd7b
movzx eax, byte [rdi + 0x47]
test al, al
jns 0x14003bc95
mov rax, qword [rdi + 0x38]
test rax, rax
jne 0x14003bdef
movzx eax, byte [rdi + 0x5f]
test al, al
js 0x14003bcab
mov rcx, rax
jmp 0x14003bcaf
mov rcx, qword [rdi + 0x50]
test rcx, rcx
jne 0x14003be63
mov r15, qword [rdi + 0x60]
lea r14, [rdi + 0x68]
cmp r14, r15
jne 0x14003bf19
mov rbx, qword [rdi + 0x90]
mov rbp, qword [rdi + 0x98]
cmp rbx, rbp
jne 0x14003c0bf
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, 0x1f0fff
mov edx, 1
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
jne 0x14003c13f
mov ecx, 2
call fcn.1400485b0
xor ebp, ebp
mov ebx, 0
test al, al
jne 0x14003c42a
cmp byte [rsp + 0x487], 0
jns 0x14003bd32
mov rcx, qword [rsp + 0x470]
call fcn.14008d81c
cmp bl, 1
mov eax, 1
adc rax, 0
mov qword [0x1400e85a0], rax
mov rcx, r13
call fcn.14003da10
mov rcx, qword [rsp + 0x488]
xor rcx, rsp
call fcn.14008db90
mov eax, ebp
movaps xmm6, xmmword [rsp + 0x490]
add rsp, 0x4a8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
add rdi, 0x18
lea rdx, str.database
lea rbx, [rsp + 0xb0]
mov rcx, rbx
call fcn.140002910
lea rbp, [rsp + 0x2f8]
mov rcx, rbp
mov rdx, rbx
mov r8, rdi
call fcn.14003db50
lea rdx, [rsp + 0x470]
mov rcx, rbp
call fcn.140057a40
cmp byte [rbp + 0x17], 0
jns 0x14003bdcf
mov rcx, qword [rsp + 0x2f8]
call fcn.14008d81c
cmp byte [rsp + 0xc7], 0
jns 0x14003bde6
mov rcx, qword [rsp + 0xb0]
call fcn.14008d81c
mov rdi, qword [r13]
jmp 0x14003bc89
add rdi, 0x30
lea rdx, str.metrics_dir
lea rbx, [rsp + 0xb0]
mov rcx, rbx
call fcn.140002910
lea rbp, [rsp + 0x2f8]
mov rcx, rbp
mov rdx, rbx
mov r8, rdi
call fcn.14003db50
lea rdx, [rsp + 0x470]
mov rcx, rbp
call fcn.140057a40
cmp byte [rbp + 0x17], 0
jns 0x14003be43
mov rcx, qword [rsp + 0x2f8]
call fcn.14008d81c
cmp byte [rsp + 0xc7], 0
jns 0x14003be5a
mov rcx, qword [rsp + 0xb0]
call fcn.14008d81c
mov rdi, qword [r13]
jmp 0x14003bc9e
lea rcx, [rdi + 0x48]
test al, al
cmovs rcx, qword [rdi + 0x48]
lea rdx, [rsp + 0x450]
mov qword [rdx], rcx
cmovs rax, qword [rdi + 0x50]
mov qword [rdx + 8], rax
lea rdi, [rsp + 0xb0]
mov rcx, rdi
call fcn.140034420
lea rdx, [0x1400bec1e]
lea rbx, [rsp + 0x230]
mov rcx, rbx
call fcn.140002910
lea rbp, [rsp + 0x2f8]
mov rcx, rbp
mov rdx, rbx
mov r8, rdi
call fcn.14003db50
lea rdx, [rsp + 0x470]
mov rcx, rbp
call fcn.140057a40
cmp byte [rbp + 0x17], 0
jns 0x14003bee2
mov rcx, qword [rsp + 0x2f8]
call fcn.14008d81c
cmp byte [rsp + 0x247], 0
jns 0x14003bef9
mov rcx, qword [rsp + 0x230]
call fcn.14008d81c
cmp byte [rsp + 0xc7], 0
jns 0x14003bf10
mov rcx, qword [rsp + 0xb0]
call fcn.14008d81c
mov rdi, qword [r13]
jmp 0x14003bcb8
lea r12, [rsp + 0x2b0]
xorps xmm6, xmm6
lea rsi, [rsp + 0xb0]
lea rdi, [rsp + 0x88]
lea rbx, [rsp + 0x2f8]
lea rbp, [rsp + 0x470]
lea rdx, [r15 + 0x20]
mov rcx, r12
mov r8b, 0x3d
call fcn.140004fa0
movzx r8d, byte [r15 + 0x4f]
test r8b, r8b
jns 0x14003bf67
mov r8, qword [r15 + 0x40]
mov rdx, qword [r15 + 0x38]
jmp 0x14003bf6b
lea rdx, [r15 + 0x38]
mov rcx, r12
call fcn.140027b90
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x240], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x230], xmm0
movups xmmword [rax], xmm6
mov qword [rax + 0x10], 0
movzx eax, byte [rsp + 0x247]
test al, al
mov rcx, qword [rsp + 0x230]
lea rdx, [rsp + 0x230]
cmovns rcx, rdx
mov qword [rsp + 0x440], rcx
cmovs rax, qword [rsp + 0x238]
mov qword [rsp + 0x448], rax
mov rcx, rsi
lea rdx, [rsp + 0x440]
call fcn.140034420
mov rcx, rdi
lea rdx, str.annotation
call fcn.140002910
mov rcx, rbx
mov rdx, rdi
mov r8, rsi
call fcn.14003db50
mov rcx, rbx
mov rdx, rbp
call fcn.140057a40
cmp byte [rsp + 0x30f], 0
jns 0x14003c01b
mov rcx, qword [rsp + 0x2f8]
call fcn.14008d81c
cmp byte [rsp + 0x9f], 0
jns 0x14003c032
mov rcx, qword [rsp + 0x88]
call fcn.14008d81c
cmp byte [rsp + 0xc7], 0
jns 0x14003c049
mov rcx, qword [rsp + 0xb0]
call fcn.14008d81c
cmp byte [rsp + 0x247], 0
jns 0x14003c060
mov rcx, qword [rsp + 0x230]
call fcn.14008d81c
cmp byte [rsp + 0x2c7], 0
jns 0x14003c077
mov rcx, qword [rsp + 0x2b0]
call fcn.14008d81c
mov rcx, qword [r15 + 8]
test rcx, rcx
je 0x14003c08d
mov rax, rcx
mov rcx, qword [rcx]
test rcx, rcx
jne 0x14003c080
jmp 0x14003c0aa
mov rax, qword [r15 + 0x10]
cmp qword [rax], r15
je 0x14003c0aa
add r15, 0x10
mov rcx, qword [r15]
lea r15, [rcx + 0x10]
mov rax, qword [rcx + 0x10]
cmp qword [rax], rcx
jne 0x14003c09a
mov r15, rax
cmp r14, rax
jne 0x14003bf44
mov rdi, qword [r13]
jmp 0x14003bcc9
lea r14, [0x1400bec2d]
lea r12, [rsp + 0xb0]
lea rdi, [rsp + 0x2f8]
lea r15, [rsp + 0x470]
mov rcx, r12
mov rdx, r14
call fcn.140002910
mov rcx, rdi
mov rdx, r12
mov r8, rbx
call fcn.14003db50
mov rcx, rdi
mov rdx, r15
call fcn.140057a40
cmp byte [rsp + 0x30f], 0
jns 0x14003c119
mov rcx, qword [rsp + 0x2f8]
call fcn.14008d81c
cmp byte [rsp + 0xc7], 0
jns 0x14003c130
mov rcx, qword [rsp + 0xb0]
call fcn.14008d81c
add rbx, 0x18
cmp rbp, rbx
je 0x14003bce0
jmp 0x14003c0de
mov rdi, rax
mov rax, qword [r13]
mov rax, qword [rax + 0xc8]
mov r9, qword [0x1400e45b8]
mov r8, qword [0x1400e45b0]
mov rdx, qword [0x1400e45a8]
lea rcx, [0x1400e8570]
mov qword [rsp + 0x40], rcx
lea rcx, [0x1400e8560]
mov qword [rsp + 0x38], rcx
lea rcx, [0x1400e8550]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rax
lea rbp, [rsp + 0x2b0]
mov rcx, rbp
call fcn.140057be0
lea rbx, [rsp + 0x230]
mov rcx, rbp
mov rdx, rbx
call fcn.140057c10
lea rdx, str.__initial_client_data
lea rbp, [rsp + 0x88]
mov rcx, rbp
call fcn.140002910
movzx r8d, byte [rbx + 0x17]
test r8b, r8b
jns 0x14003c1e4
mov r8, qword [rsp + 0x238]
mov rbx, qword [rsp + 0x230]
mov rcx, rbp
mov rdx, rbx
call fcn.140027b90
mov rcx, qword [rax + 0x10]
lea rbp, [rsp + 0xb0]
mov qword [rbp + 0x10], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rbp], xmm0
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov qword [rax + 0x10], 0
movzx eax, byte [rbp + 0x17]
test al, al
mov rcx, qword [rbp]
cmovns rcx, rbp
lea rdx, [rsp + 0x2a0]
mov qword [rdx], rcx
cmovs rax, qword [rbp + 8]
mov qword [rdx + 8], rax
lea rsi, [rsp + 0x2f8]
mov rcx, rsi
call fcn.140034420
lea r12, [rsp + 0x470]
mov rcx, rsi
mov rdx, r12
call fcn.140057a40
cmp byte [rsi + 0x17], 0
jns 0x14003c26c
mov rcx, qword [rsp + 0x2f8]
call fcn.14008d81c
cmp byte [rsp + 0xc7], 0
jns 0x14003c283
mov rcx, qword [rsp + 0xb0]
call fcn.14008d81c
cmp byte [rsp + 0x9f], 0
jns 0x14003c29a
mov rcx, qword [rsp + 0x88]
call fcn.14008d81c
cmp byte [rsp + 0x247], 0
jns 0x14003c2b1
mov rcx, qword [rsp + 0x230]
call fcn.14008d81c
xorps xmm6, xmm6
movaps xmmword [rsp + 0x260], xmm6
movaps xmmword [rsp + 0x290], xmm6
movaps xmmword [rsp + 0x280], xmm6
movaps xmmword [rsp + 0x270], xmm6
movaps xmmword [rsp + 0x250], xmm6
movaps xmmword [rsp + 0x240], xmm6
movaps xmmword [rsp + 0x230], xmm6
mov dword [rsp + 0x26c], 0x100
mov rbx, qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov ecx, 0xfffffff6
call rbx
mov qword [rsp + 0x280], rax
mov ecx, 0xfffffff5
call rbx
mov qword [rsp + 0x288], rax
mov ecx, 0xfffffff4
call rbx
mov qword [rsp + 0x290], rax
movaps xmmword [rsp + 0x210], xmm6
mov qword [rsp + 0x220], 0
mov eax, dword [0x1400e85b0]
mov ecx, dword [0x1400e8628]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14003cfa5
mov eax, dword [0x1400e85c0]
mov ecx, dword [0x1400e8628]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14003cfec
mov rbp, qword [0x1400e85a8]
test rbp, rbp
je 0x14003c481
cmp qword [0x1400e85b8], 0
je 0x14003c481
mov dword [rsp + 0x230], 0x70
lea r9, [rsp + 0xb0]
xor ecx, ecx
mov edx, 1
xor r8d, r8d
call rbp
test eax, eax
je 0x14003c4bf
mov ecx, 2
call fcn.1400485b0
test al, al
je 0x14003c7c2
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rbx, [rsp + 0x2f8]
mov rcx, rbx
mov r8d, 0x1be
mov r9d, 2
call fcn.140048660
lea rcx, [rsp + 0x308]
lea rdx, str.InitializeProcThreadAttributeList__size__succeeded__expected_failure
mov r8d, 0x44
call fcn.140002b20
mov rcx, rbx
call fcn.140048af0
jmp 0x14003c7c2
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rdi, [rsp + 0x2f8]
mov rcx, rdi
mov r8d, 0x18d
mov r9d, 2
call fcn.140049240
lea rcx, [rsp + 0x308]
lea rdx, [0x1400bec38]
mov r8d, 0xb
call fcn.140002b20
mov rcx, rdi
call fcn.140049330
xor ebp, ebp
xor ebx, ebx
jmp 0x14003bd1b
mov dword [rsp + 0x230], 0x68
xor r15d, r15d
xor r14d, r14d
xor ebx, ebx
mov rdx, qword [r13]
movzx r8d, byte [rdx + 0x17]
test r8b, r8b
js 0x14003c4ad
cmp r8b, 0xc
jb 0x14003c4b8
jmp 0x14003c5bd
cmp qword [rdx + 8], 0xc
jae 0x14003c5b9
xor esi, esi
jmp 0x14003c617
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x14003c7b0
lea rbx, [rsp + 0xb0]
mov rcx, qword [rbx]
call fcn.14008d85c
mov r14, rax
mov qword [rsp + 0x298], rax
mov rcx, rax
mov edx, 1
xor r8d, r8d
mov r9, rbx
call qword [0x1400e85a8]
test eax, eax
je 0x14003c7ed
mov qword [rsp + 0x68], r14
mov rax, qword [rsp + 0x298]
mov qword [rsp + 0x60], rax
mov r14, qword [rsp + 0x210]
mov r15, qword [rsp + 0x220]
mov rax, r15
sub rax, r14
sar rax, 3
cmp rax, 7
ja 0x14003c583
mov rbx, qword [rsp + 0x218]
sub rbx, r14
mov ecx, 0x40
call fcn.14008d7cc
mov rbp, rax
add rax, rbx
mov r15, rbp
add r15, 0x40
test rbx, rbx
jg 0x14003d09d
mov qword [rsp + 0x210], rbp
mov qword [rsp + 0x218], rax
mov qword [rsp + 0x220], r15
test r14, r14
jne 0x14003d0b6
movabs r8, 0x1fffffffffffffff
mov rbx, qword [rsp + 0x218]
cmp rbx, r15
je 0x14003c805
mov rax, qword [0x1400e45a8]
mov qword [rbx], rax
add rbx, 8
mov qword [rsp + 0x218], rbx
jmp 0x14003c9f6
mov r8, qword [rdx + 8]
add r8, 0xfffffffffffffff4
lea rax, [rdx + 0x18]
mov qword [rsp + 0x20], rax
mov rcx, rsi
mov r9, 0xffffffffffffffff
call fcn.140028340
cmp byte [rsp + 0x30f], 0
jns 0x14003c5eb
mov rsi, qword [rsp + 0x2f8]
lea rdx, str.rundll32.exe
mov rcx, rsi
call fcn.1400a1de4
test eax, eax
sete sil
cmp byte [rsp + 0x30f], 0
jns 0x14003c617
mov rcx, qword [rsp + 0x2f8]
call fcn.14008d81c
cmp byte [rsp + 0x487], 0
jns 0x14003c629
mov r12, qword [rsp + 0x470]
test sil, sil
je 0x14003c632
xor ecx, ecx
jmp 0x14003c63f
mov rcx, qword [r13]
cmp byte [rcx + 0x17], 0
jns 0x14003c63f
mov rcx, qword [rcx]
lea rax, [rsp + 0x1f8]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x230]
mov qword [rsp + 0x40], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], 1
mov rdx, r12
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x14003c755
mov rcx, qword [rsp + 0x200]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ebp, eax
mov ecx, 1
call fcn.1400485b0
mov ebx, eax
test ebp, ebp
jne 0x14003c6ac
test bl, bl
jne 0x14003c87e
test ebp, ebp
sete al
and bl, al
cmp bl, 1
mov rcx, qword [rsp + 0x1f8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ebp, eax
mov ecx, 1
call fcn.1400485b0
mov ebx, eax
test ebp, ebp
jne 0x14003c6de
test bl, bl
jne 0x14003c8d3
test ebp, ebp
sete al
and bl, al
cmp bl, 1
mov rsi, qword [r13]
mov rcx, qword [rsi + 0xc8]
cmp rcx, 0xffffffffffffffff
je 0x14003c709
call fcn.140056e50
mov qword [rsi + 0xc8], 0xffffffffffffffff
mov qword [rsi + 0xc8], 0xffffffffffffffff
xorps xmm0, xmm0
lea rdx, [rsp + 0x88]
movups xmmword [rdx + 0x14], xmm0
movups xmmword [rdx + 4], xmm0
mov dword [rdx], 2
lea r8, [rsp + 0x78]
mov dword [r8 + 8], 0
mov qword [r8], 0
mov ecx, 0xa8
add rcx, qword [r13]
call fcn.140057170
mov ebx, eax
mov ebp, eax
jmp 0x14003c76e
mov ecx, 2
call fcn.1400485b0
xor ebx, ebx
mov ebp, 0
test al, al
jne 0x14003c928
test r15, r15
je 0x14003c7a1
mov eax, dword [0x1400e85d0]
mov ecx, dword [0x1400e8628]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14003d027
mov rcx, r15
call qword [0x1400e85c8]
test r14, r14
je 0x14003c7c6
mov rcx, r14
call fcn.14008d864
jmp 0x14003c7c6
mov ecx, 2
call fcn.1400485b0
test al, al
jne 0x14003ceb9
xor ebx, ebx
xor ebp, ebp
mov rcx, qword [rsp + 0x210]
test rcx, rcx
je 0x14003c7e0
mov qword [rsp + 0x218], rcx
call fcn.14008d81c
mov rcx, rdi
call fcn.140056e60
jmp 0x14003bd1b
mov ecx, 2
call fcn.1400485b0
test al, al
jne 0x14003cf0c
xor ebx, ebx
xor ebp, ebp
jmp 0x14003c7a6
mov rdx, qword [rsp + 0x210]
sub r15, rdx
mov rbx, r15
sar rbx, 3
lea rax, [rbx + 1]
cmp rax, r8
ja 0x14003d08b
mov rbp, r15
sar rbp, 2
cmp rbp, rax
cmovb rbp, rax
movabs rax, 0xfffffffffffffff
cmp rbx, rax
cmovae rbp, r8
test rbp, rbp
je 0x14003c97b
mov qword [rsp + 0x58], rdx
cmp rbp, r8
ja 0x14003d098
lea rcx, [rbp*8]
call fcn.14008d7cc
mov r14, rax
movabs r8, 0x1fffffffffffffff
mov rdx, qword [rsp + 0x58]
jmp 0x14003c97e
lea rbp, [rsp + 0x2f8]
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
mov rcx, rbp
mov r8d, 0x20e
mov r9d, 1
call fcn.140049240
lea rcx, [rsp + 0x308]
lea rdx, str.CloseHandle_thread
mov r8d, 0x12
call fcn.140002b20
mov rcx, rbp
call fcn.140049330
test bl, bl
jmp 0x14003c6b6
lea rbp, [rsp + 0xb0]
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
mov rcx, rbp
mov r8d, 0x211
mov r9d, 1
call fcn.140049240
lea rcx, [rsp + 0xc0]
lea rdx, str.CloseHandle_process
mov r8d, 0x13
call fcn.140002b20
mov rcx, rbp
call fcn.140049330
test bl, bl
jmp 0x14003c6e8
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rbx, [rsp + 0x2f8]
mov rcx, rbx
mov r8d, 0x209
mov r9d, 2
call fcn.140049240
lea rcx, [rsp + 0x308]
lea rdx, str.CreateProcess
mov r8d, 0xd
call fcn.140002b20
mov rcx, rbx
call fcn.140049330
jmp 0x14003ceb0
xor r14d, r14d
lea rcx, [r14 + rbp*8]
mov rax, qword [0x1400e45a8]
lea rbx, [r14 + rbx*8]
add rbx, 8
mov qword [rbx - 8], rax
test r15, r15
jle 0x14003c9bf
mov qword [rsp + 0x58], rcx
mov rcx, r14
mov rbp, rdx
mov r8, r15
call fcn.140090b40
mov rcx, qword [rsp + 0x58]
movabs r8, 0x1fffffffffffffff
mov rdx, rbp
mov qword [rsp + 0x210], r14
mov qword [rsp + 0x218], rbx
mov qword [rsp + 0x220], rcx
test rdx, rdx
je 0x14003c9f6
mov rcx, rdx
call fcn.14008d81c
movabs r8, 0x1fffffffffffffff
mov rbx, qword [rsp + 0x218]
mov r15, qword [rsp + 0x220]
cmp rbx, r15
je 0x14003ca1e
mov rax, qword [0x1400e45b0]
mov qword [rbx], rax
add rbx, 8
mov qword [rsp + 0x218], rbx
jmp 0x14003cb0b
mov rdx, qword [rsp + 0x210]
sub r15, rdx
mov rbx, r15
sar rbx, 3
lea rax, [rbx + 1]
cmp rax, r8
ja 0x14003d08b
mov rbp, r15
sar rbp, 2
cmp rbp, rax
cmovb rbp, rax
movabs rax, 0xfffffffffffffff
cmp rbx, rax
cmovae rbp, r8
test rbp, rbp
je 0x14003ca90
mov qword [rsp + 0x58], rdx
cmp rbp, r8
ja 0x14003d098
lea rcx, [rbp*8]
call fcn.14008d7cc
mov r14, rax
movabs r8, 0x1fffffffffffffff
mov rdx, qword [rsp + 0x58]
jmp 0x14003ca93
xor r14d, r14d
lea rcx, [r14 + rbp*8]
mov rax, qword [0x1400e45b0]
lea rbx, [r14 + rbx*8]
add rbx, 8
mov qword [rbx - 8], rax
test r15, r15
jle 0x14003cad4
mov qword [rsp + 0x58], rcx
mov rcx, r14
mov rbp, rdx
mov r8, r15
call fcn.140090b40
mov rcx, qword [rsp + 0x58]
movabs r8, 0x1fffffffffffffff
mov rdx, rbp
mov qword [rsp + 0x210], r14
mov qword [rsp + 0x218], rbx
mov qword [rsp + 0x220], rcx
test rdx, rdx
je 0x14003cb0b
mov rcx, rdx
call fcn.14008d81c
movabs r8, 0x1fffffffffffffff
mov rbx, qword [rsp + 0x218]
mov r15, qword [rsp + 0x220]
cmp rbx, r15
je 0x14003cb33
mov rax, qword [0x1400e45b8]
mov qword [rbx], rax
add rbx, 8
mov qword [rsp + 0x218], rbx
jmp 0x14003cc20
mov rdx, qword [rsp + 0x210]
sub r15, rdx
mov rbx, r15
sar rbx, 3
lea rax, [rbx + 1]
cmp rax, r8
ja 0x14003d08b
mov rbp, r15
sar rbp, 2
cmp rbp, rax
cmovb rbp, rax
movabs rax, 0xfffffffffffffff
cmp rbx, rax
cmovae rbp, r8
test rbp, rbp
je 0x14003cba5
mov qword [rsp + 0x58], rdx
cmp rbp, r8
ja 0x14003d098
lea rcx, [rbp*8]
call fcn.14008d7cc
mov r14, rax
movabs r8, 0x1fffffffffffffff
mov rdx, qword [rsp + 0x58]
jmp 0x14003cba8
xor r14d, r14d
lea rcx, [r14 + rbp*8]
mov rax, qword [0x1400e45b8]
lea rbx, [r14 + rbx*8]
add rbx, 8
mov qword [rbx - 8], rax
test r15, r15
jle 0x14003cbe9
mov qword [rsp + 0x58], rcx
mov rcx, r14
mov rbp, rdx
mov r8, r15
call fcn.140090b40
mov rcx, qword [rsp + 0x58]
movabs r8, 0x1fffffffffffffff
mov rdx, rbp
mov qword [rsp + 0x210], r14
mov qword [rsp + 0x218], rbx
mov qword [rsp + 0x220], rcx
test rdx, rdx
je 0x14003cc20
mov rcx, rdx
call fcn.14008d81c
movabs r8, 0x1fffffffffffffff
mov rbx, qword [rsp + 0x218]
mov rcx, qword [r13]
mov r15, qword [rsp + 0x220]
cmp rbx, r15
je 0x14003cc56
mov rax, qword [rcx + 0xc8]
mov qword [rbx], rax
add rbx, 8
mov qword [rsp + 0x218], rbx
mov r14, qword [rsp + 0x68]
mov r15, qword [rsp + 0x60]
jmp 0x14003cd3d
mov rdx, qword [rsp + 0x210]
sub r15, rdx
mov rbx, r15
sar rbx, 3
lea rax, [rbx + 1]
cmp rax, r8
ja 0x14003d08b
mov rbp, r15
sar rbp, 2
cmp rbp, rax
cmovb rbp, rax
movabs rax, 0xfffffffffffffff
cmp rbx, rax
cmovae rbp, r8
test rbp, rbp
mov qword [rsp + 0x58], rdx
je 0x14003ccc8
mov qword [rsp + 0x70], rcx
cmp rbp, r8
ja 0x14003d098
lea rcx, [rbp*8]
call fcn.14008d7cc
mov r14, rax
mov rdx, qword [rsp + 0x58]
mov rcx, qword [rsp + 0x70]
jmp 0x14003cccb
xor r14d, r14d
lea rbp, [r14 + rbp*8]
mov rax, qword [rcx + 0xc8]
lea rbx, [r14 + rbx*8]
add rbx, 8
mov qword [rbx - 8], rax
test r15, r15
jle 0x14003ccfc
mov rcx, r14
mov rdx, qword [rsp + 0x58]
mov r8, r15
call fcn.140090b40
mov rdx, qword [rsp + 0x58]
mov qword [rsp + 0x210], r14
mov qword [rsp + 0x218], rbx
mov qword [rsp + 0x220], rbp
test rdx, rdx
je 0x14003cd29
mov rcx, rdx
call fcn.14008d81c
mov rbx, qword [rsp + 0x218]
mov r14, qword [rsp + 0x68]
mov r15, qword [rsp + 0x60]
movabs r8, 0x1fffffffffffffff
mov rbp, qword [rsp + 0x220]
cmp rbx, rbp
je 0x14003cd5e
mov qword [rbx], rdi
add rbx, 8
mov qword [rsp + 0x218], rbx
jmp 0x14003ce2b
mov rdx, qword [rsp + 0x210]
sub rbx, rdx
mov r14, rbx
sar r14, 3
lea rax, [r14 + 1]
cmp rax, r8
ja 0x14003d08b
sub rbp, rdx
mov rcx, rbp
sar rcx, 3
sar rbp, 2
cmp rbp, rax
cmovb rbp, rax
movabs rax, 0xfffffffffffffff
cmp rcx, rax
cmovae rbp, r8
test rbp, rbp
je 0x14003cdcd
mov qword [rsp + 0x58], rdx
cmp rbp, r8
ja 0x14003d098
lea rcx, [rbp*8]
call fcn.14008d7cc
mov r15, rax
mov rdx, qword [rsp + 0x58]
jmp 0x14003cdd0
xor r15d, r15d
lea rax, [r15 + rbp*8]
lea rbp, [r15 + r14*8]
add rbp, 8
mov qword [rbp - 8], rdi
test rbx, rbx
jle 0x14003cdfc
mov rcx, r15
mov r14, rdx
mov r8, rbx
mov rbx, rax
call fcn.140090b40
mov rax, rbx
mov rdx, r14
mov qword [rsp + 0x210], r15
mov qword [rsp + 0x218], rbp
mov qword [rsp + 0x220], rax
test rdx, rdx
mov r14, qword [rsp + 0x68]
mov r15, qword [rsp + 0x60]
je 0x14003ce2b
mov rcx, rdx
call fcn.14008d81c
mov rdx, qword [rsp + 0x280]
lea rbx, [rsp + 0x210]
mov rcx, rbx
call fcn.14003dce0
mov rdx, qword [rsp + 0x288]
mov rcx, rbx
call fcn.14003dce0
mov rdx, qword [rsp + 0x290]
mov rcx, rbx
call fcn.14003dce0
mov r9, qword [rbx]
mov rax, qword [rbx + 8]
sub rax, r9
mov rcx, qword [rsp + 0x298]
xorps xmm0, xmm0
movups xmmword [rsp + 0x28], xmm0
mov qword [rsp + 0x20], rax
mov r8d, 0x20002
xor edx, edx
call qword [0x1400e85b8]
test eax, eax
je 0x14003ce9e
mov ebx, 0x80000
jmp 0x14003c494
mov ecx, 2
call fcn.1400485b0
test al, al
jne 0x14003cf5f
xor ebx, ebx
xor ebp, ebp
jmp 0x14003c76e
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rbx, [rsp + 0x2f8]
mov rcx, rbx
mov r8d, 0x1c2
mov r9d, 2
call fcn.140049240
lea rcx, [rsp + 0x308]
lea rdx, str.InitializeProcThreadAttributeList__size_
mov r8d, 0x28
call fcn.140002b20
mov rcx, rbx
call fcn.140049330
jmp 0x14003c7c2
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rbx, [rsp + 0x2f8]
mov rcx, rbx
mov r8d, 0x1cd
mov r9d, 2
call fcn.140049240
lea rcx, [rsp + 0x308]
lea rdx, str.InitializeProcThreadAttributeList
mov r8d, 0x21
call fcn.140002b20
mov rcx, rbx
call fcn.140049330
jmp 0x14003c7ff
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rbx, [rsp + 0x2f8]
mov rcx, rbx
mov r8d, 0x1e7
mov r9d, 2
call fcn.140049240
lea rcx, [rsp + 0x308]
lea rdx, str.UpdateProcThreadAttribute
mov r8d, 0x19
jmp 0x14003c969
lea rcx, [0x1400e85b0]
call fcn.14008d940
cmp dword [0x1400e85b0], 0xffffffff
jne 0x14003c364
lea rcx, [0x1400bebc0]
lea rdx, str.::InitializeProcThreadAttributeList
xor r8d, r8d
call fcn.140057cb0
mov qword [0x1400e85a8], rax
lea rcx, [0x1400e85b0]
call fcn.14008d9d8
jmp 0x14003c364
lea rcx, [0x1400e85c0]
call fcn.14008d940
cmp dword [0x1400e85c0], 0xffffffff
jne 0x14003c389
cmp qword [0x1400e85a8], 0
je 0x14003d06e
lea rcx, [0x1400bebc0]
lea rdx, str.::UpdateProcThreadAttribute
xor r8d, r8d
call fcn.140057cb0
jmp 0x14003d070
lea rcx, [0x1400e85d0]
call fcn.14008d940
cmp dword [0x1400e85d0], 0xffffffff
jne 0x14003c798
lea rcx, [0x1400bebc0]
lea rdx, str.::DeleteProcThreadAttributeList
mov r8b, 1
call fcn.140057cb0
mov qword [0x1400e85c8], rax
lea rcx, [0x1400e85d0]
call fcn.14008d9d8
jmp 0x14003c798
xor eax, eax
mov qword [0x1400e85b8], rax
lea rcx, [0x1400e85c0]
call fcn.14008d9d8
jmp 0x14003c389
int3
lea rcx, [rsp + 0x210]
call fcn.1400299b0
call fcn.14009fdac
mov rcx, rbp
mov rdx, r14
mov r8, rbx
mov rbx, rax
call fcn.140090b40
mov rax, rbx
jmp 0x14003c562
mov rcx, r14
call fcn.14008d81c
mov r15, qword [rsp + 0x220]
jmp 0x14003c583