Function at 0x14008bc70
Capabilities:
Create process on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x348
movaps xmmword [rsp + 0x330], xmm6
mov r14, rcx
mov rax, qword [0x14020eb28]
xor rax, rsp
mov qword [rsp + 0x328], rax
call fcn.1400cd190
test al, al
jne 0x14008d079
xorps xmm0, xmm0
lea rdx, [rsp + 0x310]
movaps xmmword [rdx], xmm0
mov qword [rdx + 0x10], 0
mov rcx, qword [r14]
call fcn.1400cd1c0
mov rdi, qword [r14]
mov rsi, qword [rdi + 0x78]
mov rbx, qword [rdi + 0x80]
cmp rsi, rbx
je 0x14008bd51
lea rdi, [rsp + 0x160]
lea r15, [rsp + 0x300]
lea rbp, [rsp + 0x310]
movzx eax, byte [rsi + 0x17]
test al, al
mov rcx, qword [rsi]
cmovns rcx, rsi
mov qword [rsp + 0x300], rcx
cmovs rax, qword [rsi + 8]
mov qword [rsp + 0x308], rax
mov rcx, rdi
mov rdx, r15
call fcn.14005fa10
mov rcx, rdi
mov rdx, rbp
call fcn.1400cd1c0
cmp byte [rsp + 0x177], 0
jns 0x14008bd45
mov rcx, qword [rsp + 0x160]
call fcn.140180390
add rsi, 0x18
cmp rbx, rsi
jne 0x14008bcf6
mov rdi, qword [r14]
movzx eax, byte [rdi + 0x2f]
test al, al
jns 0x14008bd5d
mov rax, qword [rdi + 0x20]
test rax, rax
jne 0x14008be41
movzx eax, byte [rdi + 0x47]
test al, al
jns 0x14008bd72
mov rax, qword [rdi + 0x38]
test rax, rax
jne 0x14008beb4
movzx eax, byte [rdi + 0x5f]
test al, al
js 0x14008bd88
mov rcx, rax
jmp 0x14008bd8c
mov rcx, qword [rdi + 0x50]
test rcx, rcx
jne 0x14008bf27
mov r15, qword [rdi + 0x60]
add rdi, 0x68
cmp rdi, r15
jne 0x14008bfdc
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, 0x1f0fff
mov edx, 1
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
jne 0x14008c17e
mov ecx, 2
call fcn.140055330
xor ebp, ebp
mov ebx, 0
test al, al
jne 0x14008c46b
cmp byte [rsp + 0x327], 0
jns 0x14008bdf8
mov rcx, qword [rsp + 0x310]
call fcn.140180390
cmp bl, 1
mov eax, 1
adc rax, 0
mov qword [0x140212790], rax
mov rcx, r14
call fcn.14008d9f0
mov rcx, qword [rsp + 0x328]
xor rcx, rsp
call fcn.140180700
mov eax, ebp
movaps xmm6, xmmword [rsp + 0x330]
add rsp, 0x348
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
add rdi, 0x18
lea rdx, str.database
lea rbx, [rsp + 0x90]
mov rcx, rbx
call fcn.1400029a0
lea rbp, [rsp + 0x160]
mov rcx, rbp
mov rdx, rbx
mov r8, rdi
call fcn.14008db00
lea rdx, [rsp + 0x310]
mov rcx, rbp
call fcn.1400cd1c0
cmp byte [rbp + 0x17], 0
jns 0x14008be95
mov rcx, qword [rsp + 0x160]
call fcn.140180390
cmp byte [rsp + 0xa7], 0
jns 0x14008beac
mov rcx, qword [rsp + 0x90]
call fcn.140180390
mov rdi, qword [r14]
jmp 0x14008bd66
add rdi, 0x30
lea rdx, str.metrics_dir
lea rbx, [rsp + 0x90]
mov rcx, rbx
call fcn.1400029a0
lea rbp, [rsp + 0x160]
mov rcx, rbp
mov rdx, rbx
mov r8, rdi
call fcn.14008db00
lea rdx, [rsp + 0x310]
mov rcx, rbp
call fcn.1400cd1c0
cmp byte [rbp + 0x17], 0
jns 0x14008bf08
mov rcx, qword [rsp + 0x160]
call fcn.140180390
cmp byte [rsp + 0xa7], 0
jns 0x14008bf1f
mov rcx, qword [rsp + 0x90]
call fcn.140180390
mov rdi, qword [r14]
jmp 0x14008bd7b
lea rcx, [rdi + 0x48]
test al, al
cmovs rcx, qword [rdi + 0x48]
lea rdx, [rsp + 0x2f0]
mov qword [rdx], rcx
cmovs rax, qword [rdi + 0x50]
mov qword [rdx + 8], rax
lea rdi, [rsp + 0x90]
mov rcx, rdi
call fcn.14005fa10
lea rdx, [0x1401c5121]
lea rbx, [rsp + 0x110]
mov rcx, rbx
call fcn.1400029a0
lea rbp, [rsp + 0x160]
mov rcx, rbp
mov rdx, rbx
mov r8, rdi
call fcn.14008db00
lea rdx, [rsp + 0x310]
mov rcx, rbp
call fcn.1400cd1c0
cmp byte [rbp + 0x17], 0
jns 0x14008bfa6
mov rcx, qword [rsp + 0x160]
call fcn.140180390
cmp byte [rsp + 0x127], 0
jns 0x14008bfbd
mov rcx, qword [rsp + 0x110]
call fcn.140180390
cmp byte [rsp + 0xa7], 0
jns 0x14008bfd4
mov rcx, qword [rsp + 0x90]
call fcn.140180390
mov rdi, qword [r14]
jmp 0x14008bd95
lea r12, [rsp + 0x2c0]
xorps xmm6, xmm6
lea r13, [rsp + 0x90]
lea rbx, [rsp + reloc.SHELL32.dll_IsUserAnAdmin]
lea rbp, [rsp + 0x160]
lea rsi, [rsp + 0x310]
lea rdx, [r15 + 0x20]
mov rcx, r12
mov r8b, 0x3d
call fcn.14000ec10
movzx r8d, byte [r15 + 0x4f]
test r8b, r8b
jns 0x14008c02a
mov r8, qword [r15 + 0x40]
mov rdx, qword [r15 + 0x38]
jmp 0x14008c02e
lea rdx, [r15 + 0x38]
mov rcx, r12
call fcn.1400371f0
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x120], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x110], xmm0
movups xmmword [rax], xmm6
mov qword [rax + 0x10], 0
movzx eax, byte [rsp + 0x127]
test al, al
mov rcx, qword [rsp + 0x110]
lea rdx, [rsp + 0x110]
cmovns rcx, rdx
mov qword [rsp + 0x2e0], rcx
cmovs rax, qword [rsp + 0x118]
mov qword [rsp + 0x2e8], rax
mov rcx, r13
lea rdx, [rsp + 0x2e0]
call fcn.14005fa10
mov rcx, rbx
lea rdx, str.annotation
call fcn.1400029a0
mov rcx, rbp
mov rdx, rbx
mov r8, r13
call fcn.14008db00
mov rcx, rbp
mov rdx, rsi
call fcn.1400cd1c0
cmp byte [rsp + 0x177], 0
jns 0x14008c0de
mov rcx, qword [rsp + 0x160]
call fcn.140180390
cmp byte [rsp + 0x2bf], 0
jns 0x14008c0f5
mov rcx, qword [rsp + reloc.SHELL32.dll_IsUserAnAdmin]
call fcn.140180390
cmp byte [rsp + 0xa7], 0
jns 0x14008c10c
mov rcx, qword [rsp + 0x90]
call fcn.140180390
cmp byte [rsp + 0x127], 0
jns 0x14008c123
mov rcx, qword [rsp + 0x110]
call fcn.140180390
cmp byte [rsp + 0x2d7], 0
jns 0x14008c13a
mov rcx, qword [rsp + 0x2c0]
call fcn.140180390
mov rcx, qword [r15 + 8]
test rcx, rcx
je 0x14008c150
mov rax, rcx
mov rcx, qword [rcx]
test rcx, rcx
jne 0x14008c143
jmp 0x14008c16d
mov rax, qword [r15 + 0x10]
cmp qword [rax], r15
je 0x14008c16d
add r15, 0x10
mov rcx, qword [r15]
mov rax, qword [rcx + 0x10]
lea r15, [rcx + 0x10]
cmp qword [rax], rcx
jne 0x14008c15d
mov r15, rax
cmp rdi, rax
je 0x14008bda6
jmp 0x14008c007
mov rdi, rax
mov rax, qword [r14]
mov rax, qword [rax + 0xb0]
mov r9, qword [0x14020eb08]
mov r8, qword [0x14020eb00]
mov rdx, qword [0x14020eaf8]
lea rcx, [0x140212760]
mov qword [rsp + 0x40], rcx
lea rcx, [0x140212750]
mov qword [rsp + 0x38], rcx
lea rcx, [0x140212740]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rax
lea rbp, [rsp + 0x110]
mov rcx, rbp
call fcn.1400cd390
lea rbx, [rsp + 0x2c0]
mov rcx, rbp
mov rdx, rbx
call fcn.1400cd760
lea rdx, str.__initial_client_data
lea rsi, [rsp + reloc.SHELL32.dll_IsUserAnAdmin]
mov rcx, rsi
call fcn.1400029a0
movzx r8d, byte [rbx + 0x17]
test r8b, r8b
jns 0x14008c222
mov r8, qword [rsp + 0x2c8]
mov rbx, qword [rsp + 0x2c0]
mov rcx, rsi
mov rdx, rbx
call fcn.1400371f0
mov rcx, qword [rax + 0x10]
lea r13, [rsp + 0x90]
mov qword [r13 + 0x10], rcx
movups xmm0, xmmword [rax]
movaps xmmword [r13], xmm0
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov qword [rax + 0x10], 0
movzx eax, byte [r13 + 0x17]
test al, al
mov rcx, qword [r13]
cmovns rcx, r13
lea rdx, [rsp + 0x100]
mov qword [rdx], rcx
cmovs rax, qword [r13 + 8]
mov qword [rdx + 8], rax
lea r15, [rsp + 0x160]
mov rcx, r15
call fcn.14005fa10
lea rbx, [rsp + 0x310]
mov rcx, r15
mov rdx, rbx
call fcn.1400cd1c0
cmp byte [r15 + 0x17], 0
jns 0x14008c2ad
mov rcx, qword [rsp + 0x160]
call fcn.140180390
cmp byte [rsp + 0xa7], 0
jns 0x14008c2c4
mov rcx, qword [rsp + 0x90]
call fcn.140180390
cmp byte [rsp + 0x2bf], 0
jns 0x14008c2db
mov rcx, qword [rsp + reloc.SHELL32.dll_IsUserAnAdmin]
call fcn.140180390
cmp byte [rsp + 0x2d7], 0
jns 0x14008c2f2
mov rcx, qword [rsp + 0x2c0]
call fcn.140180390
xorps xmm6, xmm6
movaps xmmword [rsp + 0xc0], xmm6
movaps xmmword [rsp + 0xf0], xmm6
movaps xmmword [rsp + 0xe0], xmm6
movaps xmmword [rsp + 0xd0], xmm6
movaps xmmword [rsp + 0xb0], xmm6
movaps xmmword [rsp + 0xa0], xmm6
movaps xmmword [rsp + 0x90], xmm6
mov dword [rsp + 0xcc], 0x100
mov rsi, qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov ecx, 0xfffffff6
call rsi
mov qword [rsp + 0xe0], rax
mov ecx, 0xfffffff5
call rsi
mov qword [rsp + 0xe8], rax
mov ecx, 0xfffffff4
call rsi
mov qword [rsp + 0xf0], rax
movaps xmmword [rsp + 0x2c0], xmm6
mov qword [rsp + 0x2d0], 0
mov eax, dword [0x1402127a0]
mov ecx, dword [0x140214838]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14008cf8c
mov eax, dword [0x1402127b0]
mov ecx, dword [0x140214838]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14008cfd3
mov rbp, qword [0x140212798]
test rbp, rbp
je 0x14008c4c2
cmp qword [0x1402127a8], 0
je 0x14008c4c2
mov dword [rsp + 0x90], 0x70
lea r9, [rsp + reloc.SHELL32.dll_IsUserAnAdmin]
xor ecx, ecx
mov edx, 1
xor r8d, r8d
call rbp
test eax, eax
je 0x14008c508
mov ecx, 2
call fcn.140055330
test al, al
je 0x14008c7fb
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rbx, [rsp + 0x160]
mov rcx, rbx
mov r8d, 0x1b6
mov r9d, 2
call fcn.1400553e0
lea rcx, [rsp + 0x170]
lea rdx, str.InitializeProcThreadAttributeList__size__succeeded__expected_failure
mov r8d, 0x44
call fcn.140006490
mov rcx, rbx
call fcn.140055870
jmp 0x14008c7fb
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rdi, [rsp + 0x160]
mov rcx, rdi
mov r8d, 0x185
mov r9d, 2
call fcn.140055fe0
lea rcx, [rsp + 0x170]
lea rdx, [0x1401c5130]
mov r8d, ntohl
call fcn.140006490
mov rcx, rdi
call fcn.1400560d0
xor ebp, ebp
xor ebx, ebx
jmp 0x14008bde1
mov qword [rsp + 0x78], rbx
mov dword [rsp + 0x90], 0x68
xor eax, eax
mov qword [rsp + 0x68], rax
xor r12d, r12d
xor ebp, ebp
mov rdx, qword [r14]
movzx r8d, byte [rdx + 0x17]
test r8b, r8b
js 0x14008c4f6
cmp r8b, 0xc
jb 0x14008c501
jmp 0x14008c60d
cmp qword [rdx + 8], 0xc
jae 0x14008c609
xor esi, esi
jmp 0x14008c667
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x14008c7e9
lea rbp, [rsp + reloc.SHELL32.dll_IsUserAnAdmin]
mov rcx, qword [rbp]
call fcn.1401803cc
mov r12, rax
mov qword [rsp + 0xf8], rax
mov rcx, rax
mov edx, 1
xor r8d, r8d
mov r9, rbp
call qword [0x140212798]
test eax, eax
je 0x14008c826
mov qword [rsp + 0x78], rbx
mov qword [rsp + 0x60], r12
mov rax, qword [rsp + 0xf8]
mov qword [rsp + 0x68], rax
mov rbx, qword [rsp + 0x2c0]
mov r12, qword [rsp + 0x2d0]
mov rax, r12
sub rax, rbx
sar rax, 3
cmp rax, 7
ja 0x14008c5d2
mov rbp, qword [rsp + 0x2c8]
sub rbp, rbx
mov ecx, 0x40
call fcn.140180340
mov rsi, rax
add rax, rbp
mov r12, rsi
add r12, 0x40
test rbp, rbp
jg 0x14008d08e
mov qword [rsp + 0x2c0], rsi
mov qword [rsp + 0x2c8], rax
mov qword [rsp + 0x2d0], r12
test rbx, rbx
jne 0x14008d0a7
movabs rbx, 0x1fffffffffffffff
mov rbp, qword [rsp + 0x2c8]
cmp rbp, r12
je 0x14008c83e
mov rax, qword [0x14020eaf8]
mov qword [rbp], rax
add rbp, 8
mov qword [rsp + 0x2c8], rbp
jmp 0x14008ca13
mov r8, qword [rdx + 8]
add r8, 0xfffffffffffffff4
lea rax, [rdx + 0x18]
mov qword [rsp + 0x20], rax
mov rcx, r15
mov r9, 0xffffffffffffffff
call fcn.140037b40
cmp byte [rsp + 0x177], 0
jns 0x14008c63b
mov r15, qword [rsp + 0x160]
lea rdx, str.rundll32.exe
mov rcx, r15
call fcn.1401975ec
test eax, eax
sete sil
cmp byte [rsp + 0x177], 0
jns 0x14008c667
mov rcx, qword [rsp + 0x160]
call fcn.140180390
cmp byte [rsp + 0x327], 0
jns 0x14008c67e
mov rax, qword [rsp + 0x310]
mov qword [rsp + 0x78], rax
test sil, sil
je 0x14008c687
xor ecx, ecx
jmp 0x14008c693
mov rcx, qword [r14]
cmp byte [rcx + 0x17], 0
jns 0x14008c693
mov rcx, qword [rcx]
lea rax, [rsp + reloc.SHELL32.dll_IsUserAnAdmin]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x40], r13
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x28], ebp
mov dword [rsp + 0x20], 1
mov rdx, qword [rsp + 0x78]
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x14008c78c
mov rcx, qword [rsp + 0x2b0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ebx, eax
mov ecx, 1
call fcn.140055330
test ebx, ebx
jne 0x14008c6f8
test al, al
jne 0x14008c8a8
mov rcx, qword [rsp + reloc.SHELL32.dll_IsUserAnAdmin]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ebx, eax
mov ecx, 1
call fcn.140055330
test ebx, ebx
jne 0x14008c71e
test al, al
jne 0x14008c8fb
mov rsi, qword [r14]
mov rcx, qword [rsi + 0xb0]
cmp rcx, 0xffffffffffffffff
je 0x14008c73e
call fcn.1400cc740
mov qword [rsi + 0xb0], 0xffffffffffffffff
mov qword [rsi + 0xb0], 0xffffffffffffffff
xorps xmm0, xmm0
lea rdx, [rsp + 0x160]
movups xmmword [rdx + 0x14], xmm0
movups xmmword [rdx + 4], xmm0
mov dword [rdx], 2
lea r8, [rsp + 0x80]
mov dword [r8 + 8], 0
mov qword [r8], 0
mov ecx, 0x90
add rcx, qword [r14]
call fcn.1400cc9e0
mov ebx, eax
mov ebp, eax
jmp 0x14008c7a5
mov ecx, 2
call fcn.140055330
xor ebx, ebx
mov ebp, 0
test al, al
jne 0x14008c94e
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x14008c7da
mov eax, dword [0x1402127c0]
mov esi, dword [0x140214838]
mov rdx, qword gs:[0x58]
mov rdx, qword [rdx + rsi*8]
cmp eax, dword [rdx + 4]
jg 0x14008d00e
call qword [0x1402127b8]
test r12, r12
je 0x14008c7ff
mov rcx, r12
call fcn.1401803d4
jmp 0x14008c7ff
mov ecx, 2
call fcn.140055330
test al, al
jne 0x14008cea0
xor ebx, ebx
xor ebp, ebp
mov rcx, qword [rsp + 0x2c0]
test rcx, rcx
je 0x14008c819
mov qword [rsp + 0x2c8], rcx
call fcn.140180390
mov rcx, rdi
call fcn.1400cc750
jmp 0x14008bde1
mov ecx, 2
call fcn.140055330
test al, al
jne 0x14008cef3
xor ebx, ebx
xor ebp, ebp
jmp 0x14008c7df
mov rax, qword [rsp + 0x2c0]
mov qword [rsp + 0x58], rax
sub r12, rax
mov rsi, r12
sar rsi, 3
lea rax, [rsi + 1]
cmp rax, rbx
ja 0x14008d07c
mov rbp, r12
sar rbp, 2
cmp rbp, rax
cmovb rbp, rax
movabs rax, 0xfffffffffffffff
cmp rsi, rax
cmovae rbp, rbx
test rbp, rbp
je 0x14008c9a1
cmp rbp, rbx
ja 0x14008d089
lea rcx, [rbp*8]
call fcn.140180340
mov rbx, rax
jmp 0x14008c9a3
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rbx, [rsp + 0x160]
mov rcx, rbx
mov r8d, 0x206
mov r9d, 1
call fcn.140055fe0
lea rcx, [rsp + 0x170]
lea rdx, str.CloseHandle_thread
mov r8d, 0x12
call fcn.140006490
mov rcx, rbx
call fcn.1400560d0
jmp 0x14008c6f8
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rbx, [rsp + 0x160]
mov rcx, rbx
mov r8d, 0x209
mov r9d, 1
call fcn.140055fe0
lea rcx, [rsp + 0x170]
lea rdx, str.CloseHandle_process
mov r8d, 0x13
call fcn.140006490
mov rcx, rbx
call fcn.1400560d0
jmp 0x14008c71e
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rbx, [rsp + 0x160]
mov rcx, rbx
mov r8d, 0x201
mov r9d, 2
call fcn.140055fe0
lea rcx, [rsp + 0x170]
lea rdx, str.CreateProcess
mov r8d, ntohl
call fcn.140006490
mov rcx, rbx
call fcn.1400560d0
jmp 0x14008ce97
xor ebx, ebx
lea rcx, [rbx + rbp*8]
mov rax, qword [0x14020eaf8]
lea rbp, [rbx + rsi*8]
add rbp, 8
mov qword [rbp - 8], rax
test r12, r12
mov rsi, qword [rsp + 0x58]
jle 0x14008c9dc
mov qword [rsp + 0x70], rcx
mov rcx, rbx
mov rdx, rsi
mov r8, r12
call fcn.1401836f0
mov rcx, qword [rsp + 0x70]
mov qword [rsp + 0x2c0], rbx
mov qword [rsp + 0x2c8], rbp
mov qword [rsp + 0x2d0], rcx
test rsi, rsi
movabs rbx, 0x1fffffffffffffff
je 0x14008ca13
mov rcx, rsi
call fcn.140180390
mov rbp, qword [rsp + 0x2c8]
mov r12, qword [rsp + 0x2d0]
cmp rbp, r12
je 0x14008ca3c
mov rax, qword [0x14020eb00]
mov qword [rbp], rax
add rbp, 8
mov qword [rsp + 0x2c8], rbp
jmp 0x14008cb14
mov rdx, qword [rsp + 0x2c0]
sub r12, rdx
mov rbp, r12
sar rbp, 3
lea rax, [rbp + 1]
cmp rax, rbx
ja 0x14008d07c
mov rsi, r12
sar rsi, 2
cmp rsi, rax
cmovb rsi, rax
movabs rax, 0xfffffffffffffff
cmp rbp, rax
cmovae rsi, rbx
test rsi, rsi
je 0x14008caa4
mov qword [rsp + 0x58], rdx
cmp rsi, rbx
ja 0x14008d089
lea rcx, [rsi*8]
call fcn.140180340
mov rbx, rax
mov rdx, qword [rsp + 0x58]
jmp 0x14008caa6
xor ebx, ebx
lea rcx, [rbx + rsi*8]
mov rax, qword [0x14020eb00]
lea rbp, [rbx + rbp*8]
add rbp, 8
mov qword [rbp - 8], rax
test r12, r12
jle 0x14008cadd
mov qword [rsp + 0x58], rcx
mov rcx, rbx
mov rsi, rdx
mov r8, r12
call fcn.1401836f0
mov rcx, qword [rsp + 0x58]
mov rdx, rsi
mov qword [rsp + 0x2c0], rbx
mov qword [rsp + 0x2c8], rbp
mov qword [rsp + 0x2d0], rcx
test rdx, rdx
movabs rbx, 0x1fffffffffffffff
je 0x14008cb14
mov rcx, rdx
call fcn.140180390
mov rbp, qword [rsp + 0x2c8]
mov r12, qword [rsp + 0x2d0]
cmp rbp, r12
je 0x14008cb3d
mov rax, qword [0x14020eb08]
mov qword [rbp], rax
add rbp, 8
mov qword [rsp + 0x2c8], rbp
jmp 0x14008cc15
mov rdx, qword [rsp + 0x2c0]
sub r12, rdx
mov rbp, r12
sar rbp, 3
lea rax, [rbp + 1]
cmp rax, rbx
ja 0x14008d07c
mov rsi, r12
sar rsi, 2
cmp rsi, rax
cmovb rsi, rax
movabs rax, 0xfffffffffffffff
cmp rbp, rax
cmovae rsi, rbx
test rsi, rsi
je 0x14008cba5
mov qword [rsp + 0x58], rdx
cmp rsi, rbx
ja 0x14008d089
lea rcx, [rsi*8]
call fcn.140180340
mov rbx, rax
mov rdx, qword [rsp + 0x58]
jmp 0x14008cba7
xor ebx, ebx
lea rcx, [rbx + rsi*8]
mov rax, qword [0x14020eb08]
lea rbp, [rbx + rbp*8]
add rbp, 8
mov qword [rbp - 8], rax
test r12, r12
jle 0x14008cbde
mov qword [rsp + 0x58], rcx
mov rcx, rbx
mov rsi, rdx
mov r8, r12
call fcn.1401836f0
mov rcx, qword [rsp + 0x58]
mov rdx, rsi
mov qword [rsp + 0x2c0], rbx
mov qword [rsp + 0x2c8], rbp
mov qword [rsp + 0x2d0], rcx
test rdx, rdx
movabs rbx, 0x1fffffffffffffff
je 0x14008cc15
mov rcx, rdx
call fcn.140180390
mov rbp, qword [rsp + 0x2c8]
mov rcx, qword [r14]
mov r12, qword [rsp + 0x2d0]
cmp rbp, r12
je 0x14008cc46
mov rax, qword [rcx + 0xb0]
mov qword [rbp], rax
add rbp, 8
mov qword [rsp + 0x2c8], rbp
mov r12, qword [rsp + 0x60]
jmp 0x14008cd27
mov rdx, qword [rsp + 0x2c0]
sub r12, rdx
mov rbp, r12
sar rbp, 3
lea rax, [rbp + 1]
cmp rax, rbx
ja 0x14008d07c
mov rsi, r12
sar rsi, 2
cmp rsi, rax
cmovb rsi, rax
movabs rax, 0xfffffffffffffff
cmp rbp, rax
cmovae rsi, rbx
test rsi, rsi
mov qword [rsp + 0x58], rdx
je 0x14008ccb8
mov qword [rsp + 0x70], rcx
cmp rsi, rbx
ja 0x14008d089
lea rcx, [rsi*8]
call fcn.140180340
mov rbx, rax
mov rdx, qword [rsp + 0x58]
mov rcx, qword [rsp + 0x70]
jmp 0x14008ccba
xor ebx, ebx
lea rsi, [rbx + rsi*8]
mov rax, qword [rcx + 0xb0]
lea rbp, [rbx + rbp*8]
add rbp, 8
mov qword [rbp - 8], rax
test r12, r12
jle 0x14008cceb
mov rcx, rbx
mov rdx, qword [rsp + 0x58]
mov r8, r12
call fcn.1401836f0
mov rdx, qword [rsp + 0x58]
mov qword [rsp + 0x2c0], rbx
mov qword [rsp + 0x2c8], rbp
mov qword [rsp + 0x2d0], rsi
test rdx, rdx
je 0x14008cd18
mov rcx, rdx
call fcn.140180390
mov rbp, qword [rsp + 0x2c8]
mov r12, qword [rsp + 0x60]
movabs rbx, 0x1fffffffffffffff
mov rsi, qword [rsp + 0x2d0]
cmp rbp, rsi
je 0x14008cd49
mov qword [rbp], rdi
add rbp, 8
mov qword [rsp + 0x2c8], rbp
jmp 0x14008ce11
mov rdx, qword [rsp + 0x2c0]
sub rbp, rdx
mov r12, rbp
sar r12, 3
lea rax, [r12 + 1]
cmp rax, rbx
ja 0x14008d07c
sub rsi, rdx
mov rcx, rsi
sar rcx, 3
sar rsi, 2
cmp rsi, rax
cmovb rsi, rax
movabs rax, 0xfffffffffffffff
cmp rcx, rax
cmovae rsi, rbx
test rsi, rsi
je 0x14008cdb9
mov qword [rsp + 0x58], rdx
cmp rsi, rbx
ja 0x14008d089
lea rcx, [rsi*8]
call fcn.140180340
mov rbx, rax
mov rdx, qword [rsp + 0x58]
jmp 0x14008cdbb
xor ebx, ebx
lea rax, [rbx + rsi*8]
lea rsi, [rbx + r12*8]
add rsi, 8
mov qword [rsi - 8], rdi
test rbp, rbp
jle 0x14008cde7
mov rcx, rbx
mov r12, rdx
mov r8, rbp
mov rbp, rax
call fcn.1401836f0
mov rax, rbp
mov rdx, r12
mov qword [rsp + 0x2c0], rbx
mov qword [rsp + 0x2c8], rsi
mov qword [rsp + 0x2d0], rax
test rdx, rdx
mov r12, qword [rsp + 0x60]
je 0x14008ce11
mov rcx, rdx
call fcn.140180390
mov rdx, qword [rsp + 0xe0]
lea rbp, [rsp + 0x2c0]
mov rcx, rbp
call fcn.14008dc90
mov rdx, qword [rsp + 0xe8]
mov rcx, rbp
call fcn.14008dc90
mov rdx, qword [rsp + 0xf0]
mov rcx, rbp
call fcn.14008dc90
mov r9, qword [rbp]
mov rax, qword [rbp + 8]
sub rax, r9
mov rcx, qword [rsp + 0xf8]
xorps xmm0, xmm0
movups xmmword [rsp + 0x28], xmm0
mov qword [rsp + 0x20], rax
mov r8d, 0x20002
xor edx, edx
call qword [0x1402127a8]
test eax, eax
je 0x14008ce85
mov ebp, 0x80000
jmp 0x14008c4de
mov ecx, 2
call fcn.140055330
test al, al
jne 0x14008cf46
xor ebx, ebx
xor ebp, ebp
jmp 0x14008c7a5
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rbx, [rsp + 0x160]
mov rcx, rbx
mov r8d, 0x1ba
mov r9d, 2
call fcn.140055fe0
lea rcx, [rsp + 0x170]
lea rdx, str.InitializeProcThreadAttributeList__size_
mov r8d, 0x28
call fcn.140006490
mov rcx, rbx
call fcn.1400560d0
jmp 0x14008c7fb
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rbx, [rsp + 0x160]
mov rcx, rbx
mov r8d, 0x1c5
mov r9d, 2
call fcn.140055fe0
lea rcx, [rsp + 0x170]
lea rdx, [0x1401c5201]
mov r8d, 0x21
call fcn.140006490
mov rcx, rbx
call fcn.1400560d0
jmp 0x14008c838
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rbx, [rsp + 0x160]
mov rcx, rbx
mov r8d, 0x1df
mov r9d, 2
call fcn.140055fe0
lea rcx, [rsp + 0x170]
lea rdx, [0x1401c5223]
mov r8d, 0x19
jmp 0x14008c98f
lea rcx, [0x1402127a0]
call fcn.1401804b0
cmp dword [0x1402127a0], 0xffffffff
jne 0x14008c3a5
lea rcx, [0x1401be106]
lea rdx, str.::InitializeProcThreadAttributeList
xor r8d, r8d
call fcn.1400cd800
mov qword [0x140212798], rax
lea rcx, [0x1402127a0]
call fcn.140180548
jmp 0x14008c3a5
lea rcx, [0x1402127b0]
call fcn.1401804b0
cmp dword [0x1402127b0], 0xffffffff
jne 0x14008c3ca
cmp qword [0x140212798], 0
je 0x14008d05f
lea rcx, [0x1401be106]
lea rdx, str.::UpdateProcThreadAttribute
xor r8d, r8d
call fcn.1400cd800
jmp 0x14008d061
lea rcx, [0x1402127c0]
call fcn.1401804b0
mov rcx, qword [rsp + 0x68]
cmp dword [0x1402127c0], 0xffffffff
jne 0x14008c7d4
lea rcx, [0x1401be106]
lea rdx, str.::DeleteProcThreadAttributeList
mov r8b, 1
call fcn.1400cd800
mov qword [0x1402127b8], rax
lea rcx, [0x1402127c0]
call fcn.140180548
mov rcx, qword [rsp + 0x68]
jmp 0x14008c7d4
xor eax, eax
mov qword [0x1402127a8], rax
lea rcx, [0x1402127b0]
call fcn.140180548
jmp 0x14008c3ca
int3
lea rcx, [rsp + 0x2c0]
call fcn.1400399c0
call fcn.140194834
mov rcx, rsi
mov rdx, rbx
mov r8, rbp
mov rbp, rax
call fcn.1401836f0
mov rax, rbp
jmp 0x14008c5b1
mov rcx, rbx
call fcn.140180390
mov r12, qword [rsp + 0x2d0]
jmp 0x14008c5d2