Function at 0x140078590
Capabilities:
Create process on windows

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x328
lea rbp, [rsp + 0x80]
movdqa xmmword [rbp + 0x290], xmm6
mov r12, rcx
mov rax, qword [0x1401e3a38]
xor rax, rbp
mov qword [rbp + 0x288], rax
mov eax, 7
movq xmm0, rax
pslldq xmm0, 8
lea rdx, [rbp + 0x268]
movdqu xmmword [rdx + 0x10], xmm0
mov word [rdx], 0
mov rcx, qword [rcx]
call fcn.1400bc590
mov rsi, qword [r12]
mov rdi, qword [rsi + 0x90]
mov rbx, qword [rsi + 0x98]
cmp rdi, rbx
je 0x14007865c
lea rsi, [rbp + 0x108]
lea r14, [rbp + 0x40]
lea r15, [rbp + 0x268]
cmp qword [rdi + 0x18], 0xf
mov rax, rdi
jbe 0x140078625
mov rax, qword [rdi]
mov qword [rbp + 0x40], rax
mov rax, qword [rdi + 0x10]
mov qword [rbp + 0x48], rax
mov rcx, rsi
mov rdx, r14
call fcn.14004e1e0
mov rcx, rsi
mov rdx, r15
call fcn.1400bc590
mov rcx, rsi
call fcn.140006b40
add rdi, 0x20
cmp rbx, rdi
jne 0x140078618
mov rsi, qword [r12]
cmp qword [rsi + 0x30], 0
je 0x1400786cf
add rsi, 0x20
mov eax, 0xf
movq xmm0, rax
pslldq xmm0, 8
lea rdi, [rbp + 0x50]
movdqu xmmword [rdi + 0x10], xmm0
mov byte [rdi], 0
lea rdx, str.database
mov r8d, 8
mov rcx, rdi
call fcn.1400068a0
lea rbx, [rbp + 0x108]
mov rcx, rbx
mov rdx, rdi
mov r8, rsi
call fcn.140079ac0
lea rdx, [rbp + 0x268]
mov rcx, rbx
call fcn.1400bc590
mov rcx, rbx
call fcn.140006b40
mov rcx, rdi
call fcn.140006b00
mov rsi, qword [r12]
cmp qword [rsi + 0x50], 0
je 0x140078742
add rsi, 0x40
mov eax, 0xf
movq xmm0, rax
pslldq xmm0, 8
lea rdi, [rbp + 0x50]
movdqu xmmword [rdi + 0x10], xmm0
mov byte [rdi], 0
lea rdx, str.metrics_dir
mov r8d, ntohl
mov rcx, rdi
call fcn.1400068a0
lea rbx, [rbp + 0x108]
mov rcx, rbx
mov rdx, rdi
mov r8, rsi
call fcn.140079ac0
lea rdx, [rbp + 0x268]
mov rcx, rbx
call fcn.1400bc590
mov rcx, rbx
call fcn.140006b40
mov rcx, rdi
call fcn.140006b00
mov rsi, qword [r12]
mov rax, qword [rsi + 0x70]
test rax, rax
mov qword [rbp - 0x28], r12
je 0x1400787ee
cmp qword [rsi + 0x78], 0xf
jbe 0x140078760
mov rsi, qword [rsi + 0x60]
jmp 0x140078764
add rsi, 0x60
lea rdx, [rbp + 0x30]
mov qword [rdx], rsi
mov qword [rdx + 8], rax
lea rsi, [rbp + 0x50]
mov rcx, rsi
call fcn.14004e1e0
mov eax, 0xf
movq xmm0, rax
pslldq xmm0, 8
lea rdi, [rbp + 0xc0]
movdqu xmmword [rdi + 0x10], xmm0
mov byte [rdi], 0
lea rdx, [0x1401a3dff]
mov r8d, 3
mov rcx, rdi
call fcn.1400068a0
lea rbx, [rbp + 0x108]
mov rcx, rbx
mov rdx, rdi
mov r8, rsi
call fcn.140079ac0
lea rdx, [rbp + 0x268]
mov rcx, rbx
call fcn.1400bc590
mov rcx, rbx
call fcn.140006b40
mov rcx, rdi
call fcn.140006b00
mov rcx, rsi
call fcn.140006b40
mov rsi, qword [r12]
mov rax, qword [rsi + 0x80]
mov r15, qword [rax]
mov qword [rbp - 0x30], rax
cmp r15, rax
je 0x140078987
mov r14d, 0xf
movq xmm6, r14
pslldq xmm6, 8
xor r13d, r13d
lea rdi, [rbp + 0x240]
lea rsi, [rbp + 0x50]
lea rbx, [rbp + 0x220]
lea r12, [rbp + 0x108]
movdqu xmmword [rbp + 0x250], xmm6
mov byte [rbp + 0x240], r13b
mov rdx, qword [r15 + 0x30]
inc rdx
mov rcx, rdi
call fcn.1400137b0
mov r8, qword [r15 + 0x30]
cmp qword [r15 + 0x38], r14
jbe 0x14007885f
mov rdx, qword [r15 + 0x20]
jmp 0x140078863
lea rdx, [r15 + 0x20]
mov rcx, rdi
call fcn.140009a20
mov rcx, rdi
mov dl, 0x3d
call fcn.140013950
mov r8, qword [r15 + 0x50]
cmp qword [r15 + 0x58], r14
jbe 0x140078885
mov rdx, qword [r15 + 0x40]
jmp 0x140078889
lea rdx, [r15 + 0x40]
mov rcx, rdi
call fcn.140009a20
movdqu xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
movaps xmmword [rbp + 0xd0], xmm1
movdqa xmmword [rbp + 0xc0], xmm0
movdqu xmmword [rax + 0x10], xmm6
mov byte [rax], r13b
mov rax, qword [rbp + 0xd0]
lea rcx, [rbp + 0xc0]
cmp qword [rbp + 0xd8], r14
jbe 0x1400788ce
mov rcx, qword [rbp + 0xc0]
mov qword [rbp + 0x20], rcx
mov qword [rbp + 0x28], rax
mov rcx, rsi
lea rdx, [rbp + 0x20]
call fcn.14004e1e0
movdqu xmmword [rbp + 0x230], xmm6
mov byte [rbp + 0x220], r13b
mov r8d, 0xa
mov rcx, rbx
lea rdx, str.annotation
call fcn.1400068a0
mov rcx, r12
mov rdx, rbx
mov r8, rsi
call fcn.140079ac0
mov rcx, r12
lea rdx, [rbp + 0x268]
call fcn.1400bc590
mov rcx, r12
call fcn.140006b40
mov rcx, rbx
call fcn.140006b00
mov rcx, rsi
call fcn.140006b40
lea rcx, [rbp + 0xc0]
call fcn.140006b00
mov rcx, rdi
call fcn.140006b00
mov rcx, qword [r15 + 0x10]
cmp byte [rcx + 0x19], r13b
je 0x14007896e
mov rax, qword [r15 + 8]
cmp byte [rax + 0x19], 0
jne 0x14007897a
cmp r15, qword [rax + 0x10]
mov r15, rax
je 0x140078959
jmp 0x14007897a
mov rax, rcx
mov rcx, qword [rcx]
cmp byte [rcx + 0x19], 0
je 0x14007896e
mov r15, rax
cmp rax, qword [rbp - 0x30]
jne 0x140078831
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, 0x1f0fff
mov edx, 1
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [rbp + 0x10], rax
mov byte [rbp + 0x18], 0
test rax, rax
je 0x140078aa7
mov rcx, qword [rbp - 0x28]
mov rcx, qword [rcx]
mov rcx, qword [rcx + 0xc8]
mov r9, qword [0x1401e3a20]
mov r8, qword [0x1401e3a18]
mov rdx, qword [0x1401e3a10]
lea rbx, [0x1401e8378]
mov qword [rsp + 0x40], rbx
lea rbx, [0x1401e8368]
mov qword [rsp + 0x38], rbx
lea rbx, [0x1401e8358]
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rdi, [rbp + 0xc0]
mov rcx, rdi
call fcn.1400bc6d0
lea rsi, [rbp + 0x240]
mov rcx, rdi
mov rdx, rsi
call fcn.1400bca20
mov eax, 0xf
movq xmm0, rax
pslldq xmm0, 8
lea rdi, [rbp + 0x220]
movdqu xmmword [rdi + 0x10], xmm0
mov byte [rdi], 0
lea rdx, str.__initial_client_data
mov r8d, 0x16
mov rcx, rdi
call fcn.1400068a0
mov r8, qword [rsi + 0x10]
mov rax, qword [rsi + 0x18]
mov r9, qword [rdi + 0x10]
mov rcx, qword [rdi + 0x18]
mov rdx, rcx
sub rdx, r9
cmp r8, rdx
jbe 0x140078b0c
mov rdx, rax
sub rdx, r8
cmp rdx, r9
jb 0x140078b0c
cmp rcx, 0xf
jbe 0x140078a91
mov rdi, qword [rbp + 0x220]
lea rcx, [rbp + 0x240]
xor edx, edx
mov r8, rdi
call fcn.1400155e0
jmp 0x140078b28
mov ecx, 2
call fcn.14003be50
xor esi, esi
test al, al
mov rbx, qword [rbp - 0x28]
je 0x140079101
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rbp + 0x108]
mov rcx, rsi
mov r8d, 0x17d
mov r9d, 2
call fcn.14003cd30
lea rcx, [rbp + 0x118]
lea rdx, [0x1401a3e0e]
call fcn.140002b70
mov rcx, rsi
call fcn.14003ce70
xor esi, esi
jmp 0x140079101
cmp rax, 0xf
jbe 0x140078b19
mov rsi, qword [rbp + 0x240]
lea rcx, [rbp + 0x220]
mov rdx, rsi
call fcn.140009a20
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
movaps xmmword [rbp + 0x50], xmm0
movaps xmmword [rbp + 0x60], xmm1
mov ecx, 0xf
movq xmm0, rcx
pslldq xmm0, 8
movdqu xmmword [rax + 0x10], xmm0
xor edi, edi
mov byte [rax], dil
lea rsi, [rbp + 0x50]
mov rax, qword [rsi + 0x10]
cmp qword [rsi + 0x18], 0xf
mov rcx, rsi
jbe 0x140078b66
mov rcx, qword [rbp + 0x50]
mov rdx, rbp
mov qword [rdx], rcx
mov qword [rdx + 8], rax
lea r12, [rbp + 0x108]
mov rcx, r12
call fcn.14004e1e0
lea r13, [rbp + 0x268]
mov rcx, r12
mov rdx, r13
call fcn.1400bc590
mov rcx, r12
call fcn.140006b40
mov rcx, rsi
call fcn.140006b00
lea r14, [rbp + 0x220]
mov rcx, r14
call fcn.140006b00
lea rsi, [rbp + 0x240]
mov rcx, rsi
call fcn.140006b00
pxor xmm6, xmm6
movdqa xmmword [rbp + 0x80], xmm6
movdqa xmmword [rbp + 0xb0], xmm6
movdqa xmmword [rbp + 0xa0], xmm6
movdqa xmmword [rbp + 0x90], xmm6
movdqa xmmword [rbp + 0x70], xmm6
movdqa xmmword [rbp + 0x60], xmm6
movdqa xmmword [rbp + 0x50], xmm6
mov dword [rbp + 0x8c], 0x100
mov rbx, qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov ecx, 0xfffffff6
call rbx
mov qword [rbp + 0xa0], rax
mov ecx, 0xfffffff5
call rbx
mov qword [rbp + 0xa8], rax
mov ecx, 0xfffffff4
call rbx
mov qword [rbp + 0xb0], rax
mov qword [rsi + 0x10], rdi
movdqa xmmword [rsi], xmm6
mov qword [rbp - 0x10], rdi
mov byte [rbp - 8], dil
mov eax, dword [0x1401e83b8]
mov ecx, dword [0x1401ea448]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 0x18]
jg 0x14007939f
mov eax, dword [0x1401e83c8]
mov ecx, dword [0x1401ea448]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 0x18]
jg 0x1400793e8
mov rdi, qword [0x1401e83b0]
test rdi, rdi
je 0x140078d19
mov rax, qword [0x1401e83c0]
test rax, rax
je 0x140078d19
mov dword [rbp + 0x50], 0x70
lea r9, [rbp + 0x220]
xor ecx, ecx
mov edx, 1
xor r8d, r8d
call rdi
test eax, eax
je 0x140078f90
mov ecx, 2
call fcn.14003be50
test al, al
je 0x1400790a2
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rbp + 0x108]
mov rcx, rsi
mov r8d, 0x1ae
mov r9d, 2
call fcn.14003bf00
lea rcx, [rbp + 0x110]
lea rdx, str.InitializeProcThreadAttributeList__size__succeeded__expected_failure
call fcn.140002b70
mov rcx, rsi
call fcn.14003c3a0
jmp 0x1400790a2
mov dword [rbp + 0x50], 0x68
xor r15d, r15d
xor esi, esi
mov rax, qword [rbp - 0x28]
mov rdx, qword [rax]
mov r8, qword [rdx + 0x10]
cmp r8, 0xc
jae 0x140078d3a
xor edi, edi
jmp 0x140078d9b
add r8, 0xfffffffffffffff4
mov eax, 7
movq xmm0, rax
pslldq xmm0, 8
movdqu xmmword [rbp + 0x118], xmm0
mov word [rbp + 0x108], 0
mov rcx, r12
mov r9, 0xffffffffffffffff
call fcn.140006460
cmp qword [rbp + 0x120], 7
mov rcx, r12
jbe 0x140078d81
mov rcx, qword [rbp + 0x108]
lea rdx, str.rundll32.exe
call fcn.14017c020
test eax, eax
sete dil
mov rcx, r12
call fcn.140006b40
cmp qword [rbp + 0x280], 7
mov rbx, qword [rbp - 0x28]
jbe 0x140078db0
mov r13, qword [rbp + 0x268]
test dil, dil
je 0x140078db9
xor ecx, ecx
jmp 0x140078dc6
mov rcx, qword [rbx]
cmp qword [rcx + 0x18], 8
jb 0x140078dc6
mov rcx, qword [rcx]
mov qword [rsp + 0x48], r14
lea rax, [rbp + 0x50]
mov qword [rsp + 0x40], rax
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], 1
mov rdx, r13
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x140078f2f
mov rcx, qword [rbp + 0x228]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, eax
mov ecx, 1
call fcn.14003be50
test esi, esi
jne 0x140078e68
test al, al
je 0x140078e68
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rbp + 0x108]
mov rcx, rsi
mov r8d, 0x1fe
mov r9d, 1
call fcn.14003cd30
lea rcx, [rbp + 0x118]
lea rdx, str.CloseHandle_thread
call fcn.140002b70
mov rcx, rsi
call fcn.14003ce70
mov rcx, qword [rbp + 0x220]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, eax
mov ecx, 1
call fcn.14003be50
test esi, esi
jne 0x140078ecf
test al, al
je 0x140078ecf
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rbp + 0x108]
mov rcx, rsi
mov r8d, 0x201
mov r9d, 1
call fcn.14003cd30
lea rcx, [rbp + 0x118]
lea rdx, str.CloseHandle_process
call fcn.140002b70
mov rcx, rsi
call fcn.14003ce70
mov ecx, 0xc8
add rcx, qword [rbx]
lea rsi, [rbp + 0x108]
mov qword [rsi], 0xffffffffffffffff
mov rdx, rsi
call fcn.140079950
pxor xmm0, xmm0
movdqu xmmword [rsi + 0x14], xmm0
movdqu xmmword [rsi + 4], xmm0
mov dword [rsi], 2
lea r8, [rbp - 0x20]
mov dword [r8 + 8], 0
mov qword [r8], 0
mov ecx, 0xa8
add rcx, qword [rbx]
lea rdx, [rbp + 0x108]
call fcn.1400bc080
mov esi, eax
jmp 0x1400790ab
mov ecx, 2
call fcn.14003be50
xor esi, esi
test al, al
je 0x1400790ab
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rbp + 0x108]
mov rcx, rsi
mov r8d, 0x1f9
mov r9d, 2
call fcn.14003cd30
lea rcx, [rbp + 0x118]
lea rdx, str.CreateProcess
call fcn.140002b70
mov rcx, rsi
call fcn.14003ce70
xor esi, esi
jmp 0x1400790ab
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x14007904e
lea rsi, [rbp + 0x220]
mov rcx, qword [rsi]
call fcn.14014b220
mov r15, rax
mov qword [rbp + 0xb8], rax
mov rcx, rax
mov edx, 1
xor r8d, r8d
mov r9, rsi
call qword [0x1401e83b0]
test eax, eax
je 0x140079175
lea rsi, [rbp - 0x10]
mov rcx, rsi
call fcn.140079d40
mov rax, qword [rbp + 0xb8]
mov qword [rsi], rax
mov rdx, qword [rbp + 0x250]
mov rax, rdx
sub rax, qword [rbp + 0x240]
sar rax, 3
cmp rax, 7
ja 0x14007901d
lea rsi, [rbp + 0x240]
mov edx, 8
mov rcx, rsi
call fcn.140079dd0
mov rdx, qword [rsi + 0x10]
mov rax, qword [rbp + 0x248]
cmp rdx, rax
je 0x1400791c5
mov rcx, qword [0x1401e3a10]
mov qword [rax], rcx
mov rdx, qword [rbp + 0x248]
add rdx, 8
mov qword [rbp + 0x248], rdx
jmp 0x1400791df
mov ecx, 2
call fcn.14003be50
test al, al
je 0x1400790a2
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rbp + 0x108]
mov rcx, rsi
mov r8d, IsOS
mov r9d, 2
call fcn.14003cd30
lea rcx, [rbp + 0x118]
lea rdx, str.InitializeProcThreadAttributeList__size_
call fcn.140002b70
mov rcx, rsi
call fcn.14003ce70
xor r15d, r15d
xor esi, esi
mov rbx, qword [rbp - 0x28]
cmp byte [rbp - 8], 0
jne 0x140079446
lea rcx, [rbp - 0x10]
call fcn.140079d40
test r15, r15
je 0x1400790cb
mov rcx, r15
call fcn.14014b210
mov rdx, qword [rbp + 0x240]
test rdx, rdx
je 0x140079101
lea rdi, [rbp + 0x240]
mov r8, qword [rdi + 0x10]
sub r8, rdx
sar r8, 3
mov rcx, rdi
call fcn.14000e080
pxor xmm0, xmm0
movdqa xmmword [rdi], xmm0
mov qword [rdi + 0x10], 0
cmp byte [rbp + 0x18], 0
jne 0x14007943f
mov rcx, qword [rbp + 0x10]
test rcx, rcx
je 0x140079121
call fcn.1400bbfa0
mov qword [rbp + 0x10], 0
lea rcx, [rbp + 0x268]
call fcn.140006b40
cmp sil, 1
mov eax, 1
adc rax, 0
xchg qword [0x1401e83a8], rax
mov rcx, rbx
call fcn.140079a20
mov rcx, qword [rbp + 0x288]
xor rcx, rbp
call fcn.14014b5e0
mov eax, esi
movaps xmm6, xmmword [rbp + 0x290]
add rsp, 0x328
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
mov ecx, 2
call fcn.14003be50
test al, al
je 0x1400790a5
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rbp + 0x108]
mov rcx, rsi
mov r8d, 0x1bd
mov r9d, 2
call fcn.14003cd30
lea rcx, [rbp + 0x118]
lea rdx, [0x1401a3edf]
jmp 0x14007938d
lea r8, [0x1401e3a10]
lea rsi, [rbp + 0x240]
mov rcx, rsi
call fcn.14000df50
mov rdx, qword [rsi + 8]
cmp qword [rbp + 0x250], rdx
je 0x140079206
mov rax, qword [0x1401e3a18]
mov qword [rdx], rax
mov rdx, qword [rbp + 0x248]
add rdx, 8
mov qword [rbp + 0x248], rdx
jmp 0x140079220
lea r8, [0x1401e3a18]
lea rsi, [rbp + 0x240]
mov rcx, rsi
call fcn.14000df50
mov rdx, qword [rsi + 8]
cmp qword [rbp + 0x250], rdx
je 0x140079247
mov rax, qword [0x1401e3a20]
mov qword [rdx], rax
mov rdx, qword [rbp + 0x248]
add rdx, 8
mov qword [rbp + 0x248], rdx
jmp 0x140079261
lea r8, [0x1401e3a20]
lea rsi, [rbp + 0x240]
mov rcx, rsi
call fcn.14000df50
mov rdx, qword [rsi + 8]
mov r8d, 0xc8
mov rax, qword [rbp - 0x28]
add r8, qword [rax]
cmp qword [rbp + 0x250], rdx
je 0x140079291
mov rax, qword [r8]
mov qword [rdx], rax
mov rdx, qword [rbp + 0x248]
add rdx, 8
mov qword [rbp + 0x248], rdx
jmp 0x1400792a4
lea rsi, [rbp + 0x240]
mov rcx, rsi
call fcn.14000df50
mov rdx, qword [rsi + 8]
cmp qword [rbp + 0x250], rdx
je 0x1400792c2
mov rax, qword [rbp + 0x10]
mov qword [rdx], rax
mov eax, 8
add qword [rbp + 0x248], rax
jmp 0x1400792d2
lea rcx, [rbp + 0x240]
lea r8, [rbp + 0x10]
call fcn.14000df50
mov rdx, qword [rbp + 0xa0]
lea rsi, [rbp + 0x240]
mov rcx, rsi
call fcn.140079ca0
mov rdx, qword [rbp + 0xa8]
mov rcx, rsi
call fcn.140079ca0
mov rdx, qword [rbp + 0xb0]
mov rcx, rsi
call fcn.140079ca0
mov r9, qword [rsi]
mov rax, qword [rsi + 8]
sub rax, r9
mov rcx, qword [rbp + 0xb8]
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x28], xmm0
mov qword [rsp + 0x20], rax
mov r8d, 0x20002
xor edx, edx
call qword [0x1401e83c0]
test eax, eax
je 0x140079342
mov esi, 0x80000
jmp 0x140078d25
mov ecx, 2
call fcn.14003be50
test al, al
je 0x1400790a5
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rbp + 0x108]
mov rcx, rsi
mov r8d, 0x1d7
mov r9d, 2
call fcn.14003cd30
lea rcx, [rbp + 0x118]
lea rdx, [0x1401a3f01]
call fcn.140002b70
mov rcx, rsi
call fcn.14003ce70
jmp 0x1400790a5
lea rcx, [0x1401e83b8]
call fcn.14014b390
mov eax, dword [0x1401e83b8]
cmp eax, 0xffffffff
jne 0x140078c62
lea rcx, [0x14019a0d0]
lea rdx, str.::InitializeProcThreadAttributeList
xor r8d, r8d
call fcn.1400bcac0
mov qword [0x1401e83b0], rax
lea rcx, [0x1401e83b8]
call fcn.14014b400
jmp 0x140078c62
lea rcx, [0x1401e83c8]
call fcn.14014b390
mov eax, dword [0x1401e83c8]
cmp eax, 0xffffffff
jne 0x140078c87
cmp qword [0x1401e83b0], 0
je 0x140079425
lea rcx, [0x14019a0d0]
lea rdx, str.::UpdateProcThreadAttribute
xor r8d, r8d
call fcn.1400bcac0
jmp 0x140079427
xor eax, eax
mov qword [0x1401e83c0], rax
lea rcx, [0x1401e83c8]
call fcn.14014b400
jmp 0x140078c87
int3
int3