Function at 0x14004a360
Capabilities:
Access peb ldr_data
Create process on windows

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rbp
push rdi
push r12
push r13
push r14
lea rbp, [rsp - 0x1ba0]
mov eax, 0x1ca0
call fcn.1400816f0
sub rsp, rax
mov rax, qword [0x1400e0038]
xor rax, rsp
mov qword [rbp + 0x1b90], rax
xor r12d, r12d
lea r14, str..._.._client_crashpad_client_win.cc
mov dword [rsp + 0x58], r12d
mov r13, rcx
mov rax, qword gs:[0x30]
mov esi, r12d
mov rcx, qword [rax + 0x60]
mov rax, qword gs:[0x30]
mov rdx, qword [rcx + 0x110]
mov rcx, qword [rax + 0x48]
cmp qword [rdx + 0x10], rcx
jne 0x14004a435
lea rcx, [rbp + 0x8d8]
lea esi, [r12 + 1]
call fcn.140006da0
lea rcx, [rbp + 0x8d8]
mov qword [rbp + 0x9c0], r14
mov qword [rbp + 0x9c8], r12
mov dword [rbp + 0x9d0], 0x20d
mov dword [rbp + 0x9d4], 4
call fcn.140013280
lea rdx, str.Check_failed:__IsThreadInLoaderLock__
lea rcx, [rbp + 0x8d8]
call fcn.140006680
mov rcx, rax
lea rdx, [0x1400c20f0]
call fcn.140006680
test sil, 1
je 0x14004a44a
and esi, 0xfffffffe
lea rcx, [rbp + 0x8d8]
call fcn.140012fd0
mov rcx, qword [r13]
lea rdx, [rbp + 0x1840]
xorps xmm0, xmm0
mov qword [rbp + 0x1850], r12
movups xmmword [rbp + 0x1840], xmm0
mov word [rbp + 0x1840], r12w
mov qword [rbp + 0x1858], 7
call fcn.140078730
mov rax, qword [r13]
mov rdi, qword [rax + 0x98]
mov rbx, qword [rax + 0x90]
cmp rbx, rdi
je 0x14004a4eb
cmp qword [rbx + 0x18], 0x10
mov rax, rbx
jb 0x14004a4a2
mov rax, qword [rbx]
mov qword [rbp - 0x50], rax
lea rdx, [rbp + 0x70]
mov rax, qword [rbx + 0x10]
lea rcx, [rbp + 0x1ab0]
mov qword [rbp - 0x48], rax
movaps xmm0, xmmword [rbp - 0x50]
movdqa xmmword [rbp + 0x70], xmm0
call fcn.140011320
mov rcx, rax
lea rdx, [rbp + 0x1840]
call fcn.140078730
lea rcx, [rbp + 0x1ab0]
call fcn.140001910
add rbx, 0x20
cmp rbx, rdi
jne 0x14004a495
mov r8, qword [r13]
cmp qword [r8 + 0x30], r12
je 0x14004a568
mov rax, qword [str.database]
lea rdx, [rbp + 0x1a30]
xorps xmm0, xmm0
mov qword [rbp + 0x1a40], 8
movups xmmword [rbp + 0x1a30], xmm0
add r8, 0x20
mov qword [rbp + 0x1a30], rax
lea rcx, [rbp + 0x1ad0]
mov byte [rbp + 0x1a38], r12b
mov qword [rbp + 0x1a48], 0xf
call fcn.140049be0
mov rcx, rax
lea rdx, [rbp + 0x1840]
call fcn.140078730
lea rcx, [rbp + 0x1ad0]
call fcn.140001910
lea rcx, [rbp + 0x1a30]
call fcn.140001980
mov r8, qword [r13]
cmp qword [r8 + 0x50], r12
je 0x14004a603
movzx eax, word [0x1400c2a38]
lea rdx, [rbp + 0x19a0]
movsd xmm0, qword [str.metrics_dir]
lea rcx, [rbp + 0x1af0]
mov word [rbp + 0x19a8], ax
add r8, 0x40
movzx eax, byte [0x1400c2a3a]
mov byte [rbp + 0x19aa], al
mov dword [rbp + 0x19ac], r12d
mov qword [rbp + 0x19b0], 0xb
mov qword [rbp + 0x19b8], 0xf
movsd qword [rbp + 0x19a0], xmm0
mov byte [rbp + 0x19ab], r12b
call fcn.140049be0
mov rcx, rax
lea rdx, [rbp + 0x1840]
call fcn.140078730
lea rcx, [rbp + 0x1af0]
call fcn.140001910
lea rcx, [rbp + 0x19a0]
call fcn.140001980
mov rax, qword [r13]
add rax, 0x60
mov rcx, qword [rax + 0x10]
test rcx, rcx
je 0x14004a6d3
cmp qword [rax + 0x18], 0x10
jb 0x14004a622
mov rax, qword [rax]
mov qword [rbp - 0x38], rcx
lea rdx, [rbp + 0x80]
mov qword [rbp - 0x40], rax
lea rcx, [rbp + 0x1b30]
movaps xmm0, xmmword [rbp - 0x40]
movdqa xmmword [rbp + 0x80], xmm0
call fcn.140011320
mov ecx, dword [0x1400c2ae4]
lea rdx, [rbp + 0x19c0]
xorps xmm0, xmm0
mov qword [rbp + 0x19d0], 3
movups xmmword [rbp + 0x19c0], xmm0
mov word [rbp + 0x19c0], cx
mov r8, rax
movzx ecx, byte [0x1400c2ae6]
mov byte [rbp + 0x19c2], cl
lea rcx, [rbp + 0x1b10]
mov qword [rbp + 0x19d8], 0xf
mov byte [rbp + 0x19c3], r12b
call fcn.140049be0
mov rcx, rax
lea rdx, [rbp + 0x1840]
call fcn.140078730
lea rcx, [rbp + 0x1b10]
call fcn.140001910
lea rcx, [rbp + 0x19c0]
call fcn.140001980
lea rcx, [rbp + 0x1b30]
call fcn.140001910
mov rbx, qword [r13]
xor eax, eax
mov qword [rsp + 0x1cd8], r15
mov byte [rbp - 0x80], al
mov rbx, qword [rbx + 0x80]
mov rbx, qword [rbx]
cmp byte [rbx + 0x19], al
jne 0x14004ab4d
movabs r15, 0x7fffffffffffffff
mov rax, qword [rbx + 0x30]
mov byte [rsp + 0x50], 0x3d
cmp rax, r15
je 0x14004bf47
cmp qword [rbx + 0x38], 0x10
lea r9, [rbx + 0x20]
jb 0x14004a722
mov r9, qword [rbx + 0x20]
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x30], 1
mov qword [rsp + 0x28], rcx
lea rcx, [rbp + 0x1a10]
mov qword [rsp + 0x20], rax
call fcn.14003fd50
cmp qword [rbx + 0x58], 0x10
lea rdx, [rbx + 0x40]
mov r8, qword [rdx + 0x10]
jb 0x14004a758
mov rdx, qword [rdx]
lea rcx, [rbp + 0x1a10]
call fcn.1400061f0
mov qword [rbp + 0x18b0], r12
lea r14, [rbp + 0x18a0]
mov qword [rbp + 0x18b8], r12
xorps xmm0, xmm0
movups xmmword [rbp + 0x18a0], xmm0
mov qword [rbp + 0x1878], 7
movups xmm0, xmmword [rax]
mov qword [rbp + 0x1870], r12
movups xmmword [rbp + 0x18a0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x18b0], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
xorps xmm1, xmm1
mov byte [rax], r12b
cmp qword [rbp + 0x18b8], 0x10
mov rdi, qword [rbp + 0x18b0]
cmovae r14, qword [rbp + 0x18a0]
movups xmmword [rbp + 0x1860], xmm1
mov word [rbp + 0x1860], r12w
test rdi, rdi
je 0x14004a7ff
cmp byte [r14], 0x80
lea rcx, [rbp + 0x1860]
mov rdx, rdi
jb 0x14004a7fa
shr rdx, 1
call fcn.140014390
lea r8, [rbp + 0x1860]
mov rdx, rdi
mov rcx, r14
call fcn.140011420
cmp qword [rbp + 0x1878], 8
lea rdx, [rbp + 0x1860]
mov r8, qword [rbp + 0x1870]
lea rcx, [rbp + 0x1940]
cmovae rdx, qword [rbp + 0x1860]
xorps xmm0, xmm0
movups xmmword [rbp + 0x1940], xmm0
mov qword [rbp + 0x1950], r12
mov qword [rbp + 0x1958], r12
call fcn.14000daa0
mov rdx, qword [rbp + 0x1878]
cmp rdx, 8
jb 0x14004a899
mov rcx, qword [rbp + 0x1860]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004a894
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004bf41
call fcn.1400809f0
movzx eax, word [0x1400c29f0]
lea r8, [rbp + 0x1940]
xorps xmm0, xmm0
mov qword [rbp + 0x1870], r12
movups xmmword [rbp + 0x18c0], xmm0
lea rdx, [rbp + 0x18c0]
mov qword [rbp + 0x1878], 7
movsd xmm0, qword [str.annotation]
lea rcx, [rbp + 0x1a90]
movsd qword [rbp + 0x18c0], xmm0
mov word [rbp + 0x1860], r12w
mov qword [rbp + 0x18d0], 0xa
mov qword [rbp + 0x18d8], 0xf
mov word [rbp + 0x18c8], ax
mov byte [rbp + 0x18ca], r12b
call fcn.140049be0
mov rcx, rax
lea rdx, [rbp + 0x1840]
call fcn.140078730
mov rdx, qword [rbp + 0x1aa8]
cmp rdx, 8
jb 0x14004a967
mov rcx, qword [rbp + 0x1a90]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004a962
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004bf41
call fcn.1400809f0
mov rdx, qword [rbp + 0x18d8]
mov qword [rbp + 0x1aa0], r12
mov qword [rbp + 0x1aa8], 7
mov word [rbp + 0x1a90], r12w
cmp rdx, 0x10
jb 0x14004a9c2
mov rcx, qword [rbp + 0x18c0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004a9bd
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004bf41
call fcn.1400809f0
mov rdx, qword [rbp + 0x1958]
mov qword [rbp + 0x18d0], r12
mov qword [rbp + 0x18d8], 0xf
mov byte [rbp + 0x18c0], r12b
cmp rdx, 8
jb 0x14004aa21
mov rcx, qword [rbp + 0x1940]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004aa1c
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004bf41
call fcn.1400809f0
mov rdx, qword [rbp + 0x18b8]
mov qword [rbp + 0x1950], r12
mov qword [rbp + 0x1958], 7
mov word [rbp + 0x1940], r12w
cmp rdx, 0x10
jb 0x14004aa7c
mov rcx, qword [rbp + 0x18a0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004aa77
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004bf41
call fcn.1400809f0
mov rdx, qword [rbp + 0x1a28]
mov qword [rbp + 0x18b0], r12
mov qword [rbp + 0x18b8], 0xf
mov byte [rbp + 0x18a0], r12b
cmp rdx, 0x10
jb 0x14004aad6
mov rcx, qword [rbp + 0x1a10]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004aad1
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004bf41
call fcn.1400809f0
mov rax, qword [rbx + 0x10]
mov qword [rbp + 0x1a20], r12
mov qword [rbp + 0x1a28], 0xf
mov byte [rbp + 0x1a10], r12b
cmp byte [rax + 0x19], r12b
je 0x14004ab1b
mov rax, qword [rbx + 8]
cmp byte [rax + 0x19], r12b
jne 0x14004ab16
cmp rbx, qword [rax + 0x10]
jne 0x14004ab16
mov rbx, rax
mov rax, qword [rax + 8]
cmp byte [rax + 0x19], r12b
je 0x14004ab03
mov rbx, rax
jmp 0x14004ab3c
mov rbx, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], r12b
jne 0x14004ab3c
nop word [rax + rax]
mov rbx, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], r12b
je 0x14004ab30
cmp byte [rbx + 0x19], r12b
je 0x14004a701
lea r14, str..._.._client_crashpad_client_win.cc
mov rax, qword [r13]
mov rbx, qword [rax + 0xa8]
mov rdi, qword [rax + 0xb0]
cmp rbx, rdi
je 0x14004aca1
nop dword [rax + rax]
movzx eax, word [0x1400c2a00]
lea rdx, [rbp + 0x18e0]
xorps xmm0, xmm0
mov qword [rbp + 0x18f0], 0xa
movups xmmword [rbp + 0x18e0], xmm0
lea rcx, [rbp + 0x1a50]
mov r8, rbx
movsd xmm0, qword [0x1400c29f8]
movsd qword [rbp + 0x18e0], xmm0
mov qword [rbp + 0x18f8], 0xf
mov word [rbp + 0x18e8], ax
mov byte [rbp + 0x18ea], r12b
call fcn.140049be0
mov rcx, rax
lea rdx, [rbp + 0x1840]
call fcn.140078730
mov rdx, qword [rbp + 0x1a68]
cmp rdx, 8
jb 0x14004ac20
mov rcx, qword [rbp + 0x1a50]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004ac1b
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004bf4d
call fcn.1400809f0
mov rdx, qword [rbp + 0x18f8]
mov qword [rbp + 0x1a60], r12
mov qword [rbp + 0x1a68], 7
mov word [rbp + 0x1a50], r12w
cmp rdx, 0x10
jb 0x14004ac7b
mov rcx, qword [rbp + 0x18e0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004ac76
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004bf4d
call fcn.1400809f0
add rbx, 0x20
mov qword [rbp + 0x18f0], r12
mov qword [rbp + 0x18f8], 0xf
mov byte [rbp + 0x18e0], r12b
cmp rbx, rdi
jne 0x14004ab70
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov edx, 1
mov ecx, 0x1f0fff
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [rsp + 0x58], rax
test rax, rax
jne 0x14004ae64
or esi, 2
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [rbp + 0xa0]
mov ebx, eax
call fcn.140006da0
lea rcx, [rbp + 0xa0]
mov qword [rbp + 0x188], r14
mov qword [rbp + 0x190], r12
mov dword [rbp + 0x198], 0x234
mov dword [rbp + 0x19c], 2
call fcn.140013280
lea rdx, [0x1400c9d10]
mov dword [rbp + 0x1a0], ebx
lea rcx, [rbp + 0xa0]
call fcn.140006680
lea rdx, [0x1400c2070]
lea rcx, [rbp + 0xa0]
call fcn.140006680
mov edx, dword [rbp + 0x1a0]
lea rcx, [rbp + 0x1a70]
mov rbx, rax
call fcn.140012e60
cmp qword [rax + 0x18], 0x10
mov r8, qword [rax + 0x10]
jb 0x14004ad5c
mov rax, qword [rax]
mov rdx, rax
mov rcx, rbx
call fcn.140009230
mov rdx, qword [rbp + 0x1a88]
cmp rdx, 0x10
jb 0x14004ada8
mov rcx, qword [rbp + 0x1a70]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004ada3
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004bf3b
call fcn.1400809f0
lea rcx, [rbp + 0xa0]
mov qword [rbp + 0x1a80], r12
mov qword [rbp + 0x1a88], 0xf
mov byte [rbp + 0x1a70], r12b
call fcn.140012fd0
lea rcx, [rsp + 0x58]
call fcn.140017b80
mov rdx, qword [rbp + 0x1858]
cmp rdx, 8
jb 0x14004ae1d
mov rcx, qword [rbp + 0x1840]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004ae18
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004bf35
call fcn.1400809f0
mov qword [rbp + 0x1850], r12
mov qword [rbp + 0x1858], 7
mov word [rbp + 0x1840], r12w
bt esi, 0xb
jae 0x14004ae49
lea rcx, [rbp + 0xc20]
call fcn.140012fd0
nop
mov rcx, r13
mov qword [0x1400e4df8], 2
call fcn.14004c490
xor al, al
jmp 0x14004bf02
mov rcx, qword [r13]
mov rdx, qword [0x1400e0c80]
mov r8, qword [0x1400e0c78]
mov r9, qword [0x1400e0c70]
mov r10, qword [rcx + 0xe0]
movsxd rcx, eax
cmp rax, rcx
je 0x14004ae90
int3
movsxd rcx, r10d
cmp r10, rcx
je 0x14004ae9c
int3
movsxd rcx, r9d
cmp r9, rcx
je 0x14004aea8
int3
movsxd rcx, r8d
cmp r8, rcx
je 0x14004aeb4
int3
movsxd rcx, edx
cmp rdx, rcx
je 0x14004aec0
int3
lea rcx, [0x1400e4dd0]
mov qword [rsp + 0x48], rcx
lea rcx, [0x1400e4dc0]
mov qword [rsp + 0x40], rcx
lea rcx, [0x1400e4e00]
mov qword [rsp + 0x38], rcx
lea rcx, [rbp + 0x19f0]
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], r10d
mov dword [rsp + 0x20], r9d
mov r9d, r8d
mov r8d, edx
lea rdx, str.0x_x_0x_x_0x_x_0x_x_0x_x_0x_I64x_0x_I64x_0x_I64x
call fcn.140012b10
mov edx, 0x20
mov qword [rbp + 0x1928], r12
lea rcx, [rbp + 0x1920]
call fcn.140006270
movups xmm0, xmmword [str.__initial_client_data]
lea r9, [rbp + 0x19f0]
mov qword [rbp + 0x1920], rax
lea r8, [rbp + 0x1920]
mov qword [rbp + 0x1930], 0x16
movups xmmword [rax], xmm0
mov ecx, dword [0x1400c9d08]
mov dword [rax + 0x10], ecx
movzx ecx, word [0x1400c9d0c]
mov word [rax + 0x14], cx
lea rcx, [rbp + 0x1960]
mov qword [rbp + 0x1938], 0x1f
mov byte [rax + 0x16], r12b
call fcn.14004c600
cmp qword [rbp + 0x1978], 0x10
lea rdi, [rbp + 0x1960]
mov rbx, qword [rbp + 0x1970]
xorps xmm0, xmm0
cmovae rdi, qword [rbp + 0x1960]
mov qword [rbp + 0x1898], 7
mov qword [rbp + 0x1890], r12
movups xmmword [rbp + 0x1880], xmm0
mov word [rbp + 0x1880], r12w
test rbx, rbx
je 0x14004afda
cmp byte [rdi], 0x80
lea rcx, [rbp + 0x1880]
mov rdx, rbx
jb 0x14004afd5
shr rdx, 1
call fcn.140014390
lea r8, [rbp + 0x1880]
mov rdx, rbx
mov rcx, rdi
call fcn.140011420
cmp qword [rbp + 0x1898], 8
lea rdx, [rbp + 0x1880]
mov r8, qword [rbp + 0x1890]
lea rcx, [rbp + 0x1980]
cmovae rdx, qword [rbp + 0x1880]
xorps xmm0, xmm0
movups xmmword [rbp + 0x1980], xmm0
mov qword [rbp + 0x1990], r12
mov qword [rbp + 0x1998], r12
call fcn.14000daa0
mov rdx, qword [rbp + 0x1898]
cmp rdx, 8
jb 0x14004b074
mov rcx, qword [rbp + 0x1880]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004b06f
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004bf53
call fcn.1400809f0
lea rdx, [rbp + 0x1840]
mov qword [rbp + 0x1890], r12
lea rcx, [rbp + 0x1980]
mov qword [rbp + 0x1898], 7
mov word [rbp + 0x1880], r12w
call fcn.140078730
mov rdx, qword [rbp + 0x1998]
cmp rdx, 8
jb 0x14004b0e7
mov rcx, qword [rbp + 0x1980]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004b0e2
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004bf53
call fcn.1400809f0
mov rdx, qword [rbp + 0x1978]
mov qword [rbp + 0x1990], r12
mov qword [rbp + 0x1998], 7
mov word [rbp + 0x1980], r12w
cmp rdx, 0x10
jb 0x14004b142
mov rcx, qword [rbp + 0x1960]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004b13d
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004bf53
call fcn.1400809f0
mov rdx, qword [rbp + 0x1938]
mov qword [rbp + 0x1970], r12
mov qword [rbp + 0x1978], 0xf
mov byte [rbp + 0x1960], r12b
cmp rdx, 0x10
jb 0x14004b19c
mov rcx, qword [rbp + 0x1920]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004b197
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004bf53
call fcn.1400809f0
mov rdx, qword [rbp + 0x1a08]
mov qword [rbp + 0x1930], r12
mov qword [rbp + 0x1938], 0xf
mov byte [rbp + 0x1920], r12b
cmp rdx, 0x10
jb 0x14004b1f6
mov rcx, qword [rbp + 0x19f0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004b1f1
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004bf53
call fcn.1400809f0
xorps xmm0, xmm0
mov qword [rbp + 0x1a00], r12
movups xmmword [rbp + 0x10], xmm0
mov ecx, 0xfffffff6
mov dword [rbp + 0x1c], 0x100
mov qword [rbp + 0x1a08], 0xf
mov byte [rbp + 0x19f0], r12b
movups xmmword [rbp - 0x20], xmm0
movups xmmword [rbp - 0x10], xmm0
movups xmmword [rbp], xmm0
movups xmmword [rbp + 0x20], xmm0
movups xmmword [rbp + 0x30], xmm0
movups xmmword [rbp + 0x40], xmm0
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov ecx, 0xfffffff5
mov qword [rbp + 0x30], rax
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov ecx, 0xfffffff4
mov qword [rbp + 0x38], rax
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov r14, r12
mov qword [rsp + 0x60], r12
mov qword [rbp + 0x40], rax
mov r15, r12
mov rax, qword gs:[0x58]
mov rbx, r12
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x78], r12
mov r12d, 4
add r12, qword [rax]
mov eax, dword [r12]
cmp dword [0x1400e4f20], eax
jg 0x14004bf59
mov eax, dword [r12]
cmp dword [0x1400e4f14], eax
jg 0x14004c02b
mov rax, qword [0x1400e4ef8]
test rax, rax
je 0x14004b8ec
cmp qword [0x1400e4f08], rbx
je 0x14004b8ec
xor r8d, r8d
mov dword [rbp - 0x20], 0x70
lea r9, [rbp - 0x78]
xor ecx, ecx
mov r12d, 0x80000
lea edx, [r8 + 1]
call rax
test eax, eax
je 0x14004b3ef
lea rcx, [rbp + 0x7d8]
or esi, 4
call fcn.140006da0
lea rax, str..._.._client_crashpad_client_win.cc
mov qword [rbp + 0x8c8], rbx
lea rcx, [rbp + 0x7d8]
mov qword [rbp + 0x8c0], rax
mov dword [rbp + 0x8d0], 0x265
mov dword [rbp + 0x8d4], 2
call fcn.140013280
lea rdx, str.InitializeProcThreadAttributeList__size__succeeded__expected_failure
lea rcx, [rbp + 0x7d8]
call fcn.140006680
lea rcx, [rbp + 0x7d8]
call fcn.140012fd0
lea rcx, [rsp + 0x78]
call fcn.14004c560
lea rcx, [rsp + 0x58]
call fcn.140017b80
mov rdx, qword [rbp + 0x1858]
cmp rdx, 8
jb 0x14004b3aa
mov rcx, qword [rbp + 0x1840]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004b3a5
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004c10e
call fcn.1400809f0
mov qword [rbp + 0x1850], rbx
mov qword [rbp + 0x1858], 7
mov word [rbp + 0x1840], bx
test r12d, esi
je 0x14004b3d4
lea rcx, [rbp + 0x1540]
call fcn.140012fd0
nop
mov rcx, r13
mov qword [0x1400e4df8], 2
call fcn.14004c490
xor al, al
jmp 0x14004bf02
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
je 0x14004b4ee
or esi, 8
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [rbp + 0x2b0]
mov ebx, eax
call fcn.140006da0
lea rax, str..._.._client_crashpad_client_win.cc
mov dword [rbp + 0x3a8], 0x269
xor edi, edi
mov qword [rbp + 0x398], rax
lea rcx, [rbp + 0x2b0]
mov qword [rbp + 0x3a0], rdi
mov dword [rbp + 0x3ac], 2
call fcn.140013280
lea rdx, str.InitializeProcThreadAttributeList__size_
mov dword [rbp + 0x3b0], ebx
lea rcx, [rbp + 0x2b0]
call fcn.140006680
lea rcx, [rbp + 0x2b0]
call fcn.140013810
lea rcx, [rsp + 0x78]
call fcn.14004c560
lea rcx, [rsp + 0x58]
call fcn.140017b80
mov r8, qword [rbp + 0x1858]
cmp r8, 8
jb 0x14004b4a8
mov rdx, qword [rbp + 0x1840]
lea rcx, [rbp + 0x1840]
inc r8
call fcn.140001b10
mov qword [rbp + 0x1850], rdi
mov qword [rbp + 0x1858], 7
mov word [rbp + 0x1840], di
bt esi, 0x17
jae 0x14004b4d3
lea rcx, [rbp + 0x1640]
call fcn.140012fd0
nop
mov rcx, r13
mov qword [0x1400e4df8], 2
call fcn.14004c490
xor al, al
jmp 0x14004bf02
mov rcx, qword [rbp - 0x78]
call fcn.140080a34
xor r8d, r8d
mov qword [rbp + 0x48], rax
lea r9, [rbp - 0x78]
mov rcx, rax
mov rbx, rax
lea edx, [r8 + 1]
call qword [0x1400e4ef8]
test eax, eax
jne 0x14004b611
or esi, 0x10
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [rbp + 0x1a8]
mov edi, eax
call fcn.140006da0
lea rax, str..._.._client_crashpad_client_win.cc
mov qword [rbp + 0x298], r14
lea rcx, [rbp + 0x1a8]
mov qword [rbp + 0x290], rax
mov dword [rbp + 0x2a0], 0x274
mov dword [rbp + 0x2a4], 2
call fcn.140013280
lea rdx, str.InitializeProcThreadAttributeList
mov dword [rbp + 0x2a8], edi
lea rcx, [rbp + 0x1a8]
call fcn.140006680
lea rcx, [rbp + 0x1a8]
call fcn.140013810
lea rcx, [rsp + 0x78]
call fcn.14004c560
mov rcx, rbx
call fcn.1400809f0
lea rcx, [rsp + 0x58]
call fcn.140017b80
mov r8, qword [rbp + 0x1858]
cmp r8, 8
jb 0x14004b5ca
mov rdx, qword [rbp + 0x1840]
lea rcx, [rbp + 0x1840]
inc r8
call fcn.140001b10
mov qword [rbp + 0x1850], r14
mov qword [rbp + 0x1858], 7
mov word [rbp + 0x1840], r14w
bt esi, 0x18
jae 0x14004b5f6
lea rcx, [rbp + 0x1440]
call fcn.140012fd0
nop
mov rcx, r13
mov qword [0x1400e4df8], 2
call fcn.14004c490
xor al, al
jmp 0x14004bf02
lea rcx, [rsp + 0x78]
call fcn.14004c560
mov rax, qword [rbp + 0x48]
mov edx, 8
mov qword [rsp + 0x78], rax
call fcn.14002a8e0
mov qword [rsp + 0x60], rax
lea rdx, [0x1400e0c80]
mov qword [rsp + 0x68], rax
lea rcx, [rsp + 0x60]
add rax, 0x40
mov qword [rsp + 0x70], rax
call fcn.140028500
lea rdx, [0x1400e0c78]
lea rcx, [rsp + 0x60]
call fcn.140028500
lea rdx, [0x1400e0c70]
lea rcx, [rsp + 0x60]
call fcn.140028500
mov rdx, qword [r13]
lea rcx, [rsp + 0x60]
add rdx, 0xe0
call fcn.140028500
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x60]
call fcn.140028500
mov rdi, qword [rbp + 0x30]
mov qword [rbp - 0x70], rdi
lea rax, [rdi - 1]
cmp rax, 0xfffffffffffffffd
ja 0x14004b6e7
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetFileType]
dec eax
test eax, 0xfffffffd
jne 0x14004b6e7
mov r14, qword [rsp + 0x60]
mov r8, rdi
mov rdi, qword [rsp + 0x68]
mov rcx, r14
mov rdx, rdi
call fcn.14007e950
cmp rax, rdi
jne 0x14004b6f1
lea rdx, [rbp - 0x70]
lea rcx, [rsp + 0x60]
call fcn.140028500
mov r14, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x68]
mov r15, qword [rbp + 0x38]
mov qword [rbp - 0x68], r15
lea rax, [r15 - 1]
cmp rax, 0xfffffffffffffffd
ja 0x14004b740
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_GetFileType]
dec eax
test eax, 0xfffffffd
jne 0x14004b740
mov r8, r15
mov rdx, rdi
mov rcx, r14
call fcn.14007e950
cmp rax, rdi
jne 0x14004b740
lea rdx, [rbp - 0x68]
lea rcx, [rsp + 0x60]
call fcn.140028500
mov rdi, qword [rsp + 0x68]
mov r14, qword [rsp + 0x60]
mov r15, qword [rbp + 0x40]
mov qword [rbp - 0x60], r15
lea rax, [r15 - 1]
cmp rax, 0xfffffffffffffffd
ja 0x14004b78f
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_GetFileType]
dec eax
test eax, 0xfffffffd
jne 0x14004b78f
mov r8, r15
mov rdx, rdi
mov rcx, r14
call fcn.14007e950
cmp rax, rdi
jne 0x14004b78f
lea rdx, [rbp - 0x60]
lea rcx, [rsp + 0x60]
call fcn.140028500
mov rdi, qword [rsp + 0x68]
mov r14, qword [rsp + 0x60]
mov rcx, qword [rbp + 0x48]
xor r15d, r15d
mov qword [rsp + 0x30], r15
sub rdi, r14
and rdi, 0xfffffffffffffff8
mov qword [rsp + 0x28], r15
mov r9, r14
mov qword [rsp + 0x20], rdi
xor edx, edx
mov r8d, 0x20002
call qword [0x1400e4f08]
test eax, eax
jne 0x14004b8e3
or esi, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [rbp + 0x3b8]
mov edi, eax
call fcn.140006da0
lea rax, str..._.._client_crashpad_client_win.cc
mov qword [rbp + 0x4a8], r15
lea rcx, [rbp + 0x3b8]
mov qword [rbp + 0x4a0], rax
mov dword [rbp + 0x4b0], 0x28e
mov dword [rbp + 0x4b4], 2
call fcn.140013280
lea rdx, str.UpdateProcThreadAttribute
mov dword [rbp + 0x4b8], edi
lea rcx, [rbp + 0x3b8]
call fcn.140006680
lea rcx, [rbp + 0x3b8]
call fcn.140013810
lea rcx, [rsp + 0x78]
call fcn.14004c560
mov rcx, rbx
call fcn.1400809f0
test r14, r14
je 0x14004b86f
mov r8, qword [rsp + 0x70]
mov rdx, r14
sub r8, r14
sar r8, 3
call fcn.14000d6f0
xorps xmm0, xmm0
mov qword [rsp + 0x70], r15
movdqu xmmword [rsp + 0x60], xmm0
lea rcx, [rsp + 0x58]
call fcn.140017b80
mov r8, qword [rbp + 0x1858]
cmp r8, 8
jb 0x14004b89c
mov rdx, qword [rbp + 0x1840]
lea rcx, [rbp + 0x1840]
inc r8
call fcn.140001b10
mov qword [rbp + 0x1850], r15
mov qword [rbp + 0x1858], 7
mov word [rbp + 0x1840], r15w
bt esi, 0x19
jae 0x14004b8c8
lea rcx, [rbp + 0x1740]
call fcn.140012fd0
nop
mov rcx, r13
mov qword [0x1400e4df8], 2
call fcn.14004c490
xor al, al
jmp 0x14004bf02
mov r15, qword [rsp + 0x70]
xor ecx, ecx
jmp 0x14004b8f8
xor ecx, ecx
mov dword [rbp - 0x20], 0x68
mov r12d, ecx
mov rax, qword [r13]
mov rdx, qword [rax + 0x10]
cmp rdx, 0xc
jb 0x14004b98d
xorps xmm0, xmm0
mov qword [rbp + 0x1910], rcx
movups xmmword [rbp + 0x1900], xmm0
mov qword [rbp + 0x1918], rcx
add rdx, 0xfffffffffffffff4
mov rcx, qword [rax + 0x10]
or esi, 0x40
cmp rcx, rdx
jb 0x14004c114
sub rcx, rdx
mov r8, 0xffffffffffffffff
cmp rcx, r8
cmovb r8, rcx
cmp qword [rax + 0x18], 8
jb 0x14004b951
mov rax, qword [rax]
lea rdx, [rax + rdx*2]
lea rcx, [rbp + 0x1900]
call fcn.14000daa0
cmp qword [rbp + 0x1918], 8
lea rcx, [rbp + 0x1900]
lea rdx, str.rundll32.exe
cmovae rcx, qword [rbp + 0x1900]
call fcn.140097b10
test eax, eax
jne 0x14004b98d
mov dil, 1
jmp 0x14004b990
xor dil, dil
test sil, 0x40
je 0x14004b9fe
mov rdx, qword [rbp + 0x1918]
and esi, 0xffffffbf
cmp rdx, 8
jb 0x14004b9df
mov rcx, qword [rbp + 0x1900]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004b9da
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004c11a
call fcn.1400809f0
xor r8d, r8d
mov qword [rbp + 0x1918], 7
mov qword [rbp + 0x1910], r8
mov word [rbp + 0x1900], r8w
jmp 0x14004ba01
xor r8d, r8d
cmp qword [rbp + 0x1858], 8
lea rdx, [rbp + 0x1840]
cmovae rdx, qword [rbp + 0x1840]
test dil, dil
je 0x14004ba22
mov rcx, r8
jmp 0x14004ba30
mov rcx, qword [r13]
cmp qword [rcx + 0x18], 8
jb 0x14004ba30
mov rcx, qword [rcx]
lea rax, [rbp + 0x50]
xor r9d, r9d
mov qword [rsp + 0x48], rax
lea rax, [rbp - 0x20]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r8
mov qword [rsp + 0x30], r8
xor r8d, r8d
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], 1
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x14004bbda
bts esi, 8
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [rbp + 0x6d0]
mov edi, eax
call fcn.140006da0
lea rax, str..._.._client_crashpad_client_win.cc
mov dword [rbp + 0x7c8], 0x2b7
xor r12d, r12d
mov qword [rbp + 0x7b8], rax
lea rcx, [rbp + 0x6d0]
mov qword [rbp + 0x7c0], r12
mov dword [rbp + 0x7cc], 2
call fcn.140013280
lea rdx, str.CreateProcess
mov dword [rbp + 0x7d0], edi
lea rcx, [rbp + 0x6d0]
call fcn.140006680
lea rcx, [rbp + 0x6d0]
call fcn.140013810
lea rcx, [rsp + 0x78]
call fcn.14004c560
test rbx, rbx
je 0x14004baf9
mov rcx, rbx
call fcn.1400809f0
test r14, r14
je 0x14004bb43
sub r15, r14
mov rax, r14
and r15, 0xfffffffffffffff8
cmp r15, 0x1000
jb 0x14004bb2a
mov r14, qword [r14 - 8]
add r15, 0x27
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004bf35
mov rdx, r15
mov rcx, r14
call fcn.1400809f0
xorps xmm0, xmm0
mov qword [rsp + 0x70], r12
movdqu xmmword [rsp + 0x60], xmm0
lea rcx, [rsp + 0x58]
call fcn.140017b80
mov rdx, qword [rbp + 0x1858]
cmp rdx, 8
jb 0x14004bb93
mov rcx, qword [rbp + 0x1840]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004bb8e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004bf35
call fcn.1400809f0
mov qword [rbp + 0x1850], r12
mov qword [rbp + 0x1858], 7
mov word [rbp + 0x1840], r12w
bt esi, 0xc
jae 0x14004bbbf
lea rcx, [rbp + 0xd20]
call fcn.140012fd0
nop
mov rcx, r13
mov qword [0x1400e4df8], 2
call fcn.14004c490
xor al, al
jmp 0x14004bf02
mov rcx, qword [rbp + 0x58]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
jne 0x14004bc53
bts esi, 9
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [rbp + 0x5c8]
mov edi, eax
call fcn.140006da0
lea rax, str..._.._client_crashpad_client_win.cc
mov dword [rbp + 0x6c0], 0x2bc
xor r12d, r12d
mov qword [rbp + 0x6b0], rax
lea rcx, [rbp + 0x5c8]
mov qword [rbp + 0x6b8], r12
mov dword [rbp + 0x6c4], 1
call fcn.140013280
lea rdx, str.CloseHandle_thread
mov dword [rbp + 0x6c8], edi
lea rcx, [rbp + 0x5c8]
call fcn.140006680
jmp 0x14004bc56
xor r12d, r12d
bt esi, 9
jae 0x14004bc6c
btr esi, 9
lea rcx, [rbp + 0x5c8]
call fcn.140013810
mov rcx, qword [rbp + 0x50]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
jne 0x14004bce0
bts esi, 0xa
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [rbp + 0x4c0]
mov edi, eax
call fcn.140006da0
lea rax, str..._.._client_crashpad_client_win.cc
mov qword [rbp + 0x5b0], r12
lea rcx, [rbp + 0x4c0]
mov qword [rbp + 0x5a8], rax
mov dword [rbp + 0x5b8], 0x2bf
mov dword [rbp + 0x5bc], 1
call fcn.140013280
lea rdx, str.CloseHandle_process
mov dword [rbp + 0x5c0], edi
lea rcx, [rbp + 0x4c0]
call fcn.140006680
bt esi, 0xa
jae 0x14004bcf6
btr esi, 0xa
lea rcx, [rbp + 0x4c0]
call fcn.140013810
mov rdi, qword [r13]
mov rcx, qword [rdi + 0xe0]
cmp rcx, 0xffffffffffffffff
je 0x14004bd0c
call fcn.14001c1f0
xor edx, edx
mov qword [rdi + 0xe0], 0xffffffffffffffff
mov r8d, 0x23c
lea rcx, [rbp + 0x9e4]
call fcn.140083680
mov rcx, qword [r13]
lea r8, [rbp + 0x19e0]
xor eax, eax
mov dword [rbp + 0x9e0], 2
add rcx, 0xc0
mov qword [rbp + 0x19e0], rax
lea rdx, [rbp + 0x9e0]
mov dword [rbp + 0x19e8], eax
call fcn.14001b5b0
lea rcx, [rsp + 0x78]
test al, al
jne 0x14004be3d
call fcn.14004c560
test rbx, rbx
je 0x14004bd81
mov rcx, rbx
call fcn.1400809f0
test r14, r14
je 0x14004bda6
sub r15, r14
mov rdx, r14
sar r15, 3
mov r8, r15
call fcn.14000d6f0
xorps xmm0, xmm0
mov qword [rsp + 0x70], r12
movdqu xmmword [rsp + 0x60], xmm0
lea rcx, [rsp + 0x58]
call fcn.140017b80
mov rdx, qword [rbp + 0x1858]
cmp rdx, 8
jb 0x14004bdf6
mov rcx, qword [rbp + 0x1840]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004bdf1
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004bf35
call fcn.1400809f0
mov qword [rbp + 0x1850], r12
mov qword [rbp + 0x1858], 7
mov word [rbp + 0x1840], r12w
bt esi, 0x11
jae 0x14004be22
lea rcx, [rbp + 0xe20]
call fcn.140012fd0
nop
mov rcx, r13
mov qword [0x1400e4df8], 2
call fcn.14004c490
xor al, al
jmp 0x14004bf02
call fcn.14004c560
test rbx, rbx
je 0x14004be4f
mov rcx, rbx
call fcn.1400809f0
test r14, r14
je 0x14004be74
sub r15, r14
mov rdx, r14
sar r15, 3
mov r8, r15
call fcn.14000d6f0
xorps xmm0, xmm0
mov qword [rsp + 0x70], r12
movdqu xmmword [rsp + 0x60], xmm0
lea rcx, [rsp + 0x58]
call fcn.140017b80
mov rdx, qword [rbp + 0x1858]
cmp rdx, 8
jb 0x14004bec0
mov rcx, qword [rbp + 0x1840]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004bebb
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004bf35
call fcn.1400809f0
mov qword [rbp + 0x1850], r12
mov qword [rbp + 0x1858], 7
mov word [rbp + 0x1840], r12w
bt esi, 0x12
jae 0x14004beec
lea rcx, [rbp + 0xf20]
call fcn.140012fd0
nop
mov rcx, r13
mov qword [0x1400e4df8], 1
call fcn.14004c490
mov al, 1
mov r15, qword [rsp + 0x1cd8]
mov rcx, qword [rbp + 0x1b90]
xor rcx, rsp
call fcn.1400809d0
lea r11, [rsp + 0x1ca0]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r14
pop r13
pop r12
pop rdi
pop rbp
ret
call fcn.140087b78
int3
call fcn.140087b78
int3
call fcn.140087b78
int3
call fcn.140001c80
int3
call fcn.140087b78
int3
call fcn.140087b78
int3
lea rcx, [0x1400e4f20]
call fcn.140080e34
cmp dword [0x1400e4f20], 0xffffffff
jne 0x14004b29c
lea rcx, str.kernel32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov rdi, rax
bt esi, 0xe
jae 0x14004bf98
btr esi, 0xe
lea rcx, [rbp + 0x1020]
call fcn.140013810
bt esi, 0xd
jae 0x14004bfe5
mov rdx, qword [rbp + 0x1b68]
btr esi, 0xd
cmp rdx, 0x10
jb 0x14004bfe5
mov rcx, qword [rbp + 0x1b50]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004bfe0
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004bfe0
call fcn.140087b78
int3
call fcn.1400809f0
test rdi, rdi
je 0x14004c013
lea rdx, [0x1400c9d42]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
bt esi, 0xf
jae 0x14004c013
btr esi, 0xf
lea rcx, [rbp + 0x1128]
call fcn.140013810
lea rcx, [0x1400e4f20]
mov qword [0x1400e4ef8], rdi
call fcn.140080dd4
jmp 0x14004b29c
lea rcx, [0x1400e4f14]
call fcn.140080e34
cmp dword [0x1400e4f14], 0xffffffff
jne 0x14004b2ac
cmp qword [0x1400e4ef8], rbx
je 0x14004c0f4
lea rcx, str.kernel32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov rdi, rax
bt esi, 0x15
jae 0x14004c077
btr esi, 0x15
lea rcx, [rbp + 0x1230]
call fcn.140013810
bt esi, 0x14
jae 0x14004c0c4
mov rdx, qword [rbp + 0x1b88]
btr esi, 0x14
cmp rdx, 0x10
jb 0x14004c0c4
mov rcx, qword [rbp + 0x1b70]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004c0bf
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004c0bf
call fcn.140087b78
int3
call fcn.1400809f0
test rdi, rdi
je 0x14004c0f4
lea rdx, [0x1400c9d22]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
bt esi, 0x16
jae 0x14004c0f6
btr esi, 0x16
lea rcx, [rbp + 0x1338]
call fcn.140013810
jmp 0x14004c0f6
xor edi, edi
lea rcx, [0x1400e4f14]
mov qword [0x1400e4f08], rdi
call fcn.140080dd4
jmp 0x14004b2ac
call fcn.140087b78
int3
call fcn.1400090e0
int3
call fcn.140087b78
int3