Function at 0x140011b67
Capabilities:
Enumerate services

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x278
movaps xmmword [rsp + 0x260], xmm6
mov qword [rsp + 0x80], rdx
mov qword [rsp + 0x88], rcx
mov rax, qword [0x14028f028]
xor rax, rsp
mov qword [rsp + 0x258], rax
movabs rax, 0x3fffffffffffffe7
lea r15, [rsp + 0x114]
mov dword [r15], 0x2000
mov ebx, 0x2000
lea r13, [rax + 0x18]
xor r14d, r14d
xor esi, esi
xor edx, edx
mov rbp, rsi
sub rbp, rdx
cmp rbp, rbx
jae 0x140011c0a
mov rdi, rbx
sub rdi, rbp
mov rax, r14
sub rax, rsi
cmp rax, rdi
jb 0x140011c46
test rdi, rdi
je 0x140011c15
lea rbx, [rsi + rdi]
mov rbp, rdx
mov rcx, rsi
xor edx, edx
mov r8, rdi
call fcn.1400cf750
mov rdx, rbp
mov rsi, rbx
jmp 0x140011c15
lea rax, [rdx + rbx]
cmp rbp, rbx
cmova rsi, rax
mov r8d, esi
sub r8d, edx
mov ecx, 5
mov qword [rsp + 0x68], rdx
mov r9, r15
call fcn.1401890d6
cmp eax, 0xc0000004
jne 0x140011cbe
mov ebx, dword [rsp + 0x114]
mov rdx, qword [rsp + 0x68]
jmp 0x140011bcd
mov r12, rdx
sub r14, rdx
lea rax, [r14 + r14]
cmp rax, rbx
cmovb rax, rbx
cmp r14, r13
mov r14, rax
movabs rax, 0x7fffffffffffffff
cmovae r14, rax
test r14, r14
je 0x140011cba
mov rcx, r14
call fcn.1400c9cbc
mov rsi, rax
lea rcx, [rsi + rbp]
xor edx, edx
mov r8, rdi
call fcn.1400cf750
test rbp, rbp
mov rdi, r12
jle 0x140011c9f
mov rcx, rsi
mov rdx, rdi
mov r8, rbp
call fcn.1400cf0a0
add r14, rsi
add rbx, rsi
test rdi, rdi
je 0x140011cb2
mov rcx, rdi
call fcn.1400c9cac
mov rdx, rsi
jmp 0x140011c05
xor esi, esi
jmp 0x140011c7b
test eax, eax
mov rcx, qword [rsp + 0x68]
jns 0x140011d01
xor edi, edi
test rcx, rcx
je 0x140011cd3
call fcn.1400c9cac
mov rcx, qword [rsp + 0x258]
xor rcx, rsp
call fcn.1400ccfe0
mov eax, edi
movaps xmm6, xmmword [rsp + 0x260]
add rsp, 0x278
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov qword [rsp + 0x108], 0
xor edi, edi
xor ecx, ecx
xor edx, edx
mov r8d, 4
call qword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
test rax, rax
je 0x140012f8a
mov r15, rax
mov qword [rsp + 0x70], r13
mov ecx, 0x18
call fcn.1400c9cbc
mov rbx, rax
mov ecx, 0x15e0
call fcn.1400c9cbc
mov rsi, rax
mov qword [rbx], rax
lea rbp, [rax + 0x15e0]
mov qword [rbx + 0x10], rbp
mov r8d, 0x15e0
mov rcx, rax
xor edx, edx
call fcn.1400cf750
mov qword [rbx + 8], rbp
mov qword [rsp + 0xf0], rbx
lea rbx, [rsp + 0xd0]
mov dword [rbx], edi
lea r12, [rsp + 0xa0]
mov dword [r12], edi
mov eax, 0x15e0
xorps xmm6, xmm6
mov r13, qword [sym.imp.ADVAPI32.dll_EnumServicesStatusExW]
mov r14, qword [sym.imp.KERNEL32.dll_GetLastError]
movups xmmword [rsp + 0x40], xmm6
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rsi
mov rcx, r15
xor edx, edx
mov r8d, 0x30
mov r9d, 1
call r13
mov ebp, eax
test eax, eax
jne 0x140011f1d
call r14
cmp eax, 0xea
jne 0x140011f4b
mov rdi, qword [rsp + 0xf0]
mov rax, qword [rdi]
mov rcx, qword [rdi + 8]
mov rbp, rcx
sub rbp, rax
mov ebx, dword [rsp + 0xa0]
lea rdx, [rbx + rbp]
cmp rbp, rdx
jae 0x140011e3c
mov r8, qword [rdi + 0x10]
mov rsi, r8
sub rsi, rcx
cmp rsi, rbx
jb 0x140011e75
test rbx, rbx
je 0x140011e2e
lea rsi, [rcx + rbx]
xor edx, edx
mov r8, rbx
call fcn.1400cf750
mov rcx, rsi
lea rbx, [rsp + 0xd0]
mov qword [rdi + 8], rcx
jmp 0x140011e4d
lea rbx, [rsp + 0xd0]
jbe 0x140011e4d
add rax, rdx
mov qword [rdi + 8], rax
mov dword [rsp + 0xa0], 0
mov rcx, qword [rsp + 0xf0]
mov rsi, qword [rcx]
mov rax, qword [rcx + 8]
sub rax, rsi
jne 0x140011da0
jmp 0x14001309c
test rdx, rdx
js 0x1400130b3
mov rsi, r12
sub r8, rax
lea r12, [r8 + r8]
cmp r12, rdx
cmovb r12, rdx
cmp r8, qword [rsp + 0x70]
movabs rax, 0x7fffffffffffffff
cmovae r12, rax
test r12, r12
je 0x140011f19
mov rcx, r12
call fcn.1400c9cbc
add rbp, rax
add r12, rax
lea rax, [rbx + rbp]
mov qword [rsp + 0x58], rax
mov rcx, rbp
xor edx, edx
mov r8, rbx
call fcn.1400cf750
mov rdx, qword [rdi]
mov r8, qword [rdi + 8]
sub r8, rdx
sub rbp, r8
test r8, r8
jle 0x140011ee8
mov rcx, rbp
call fcn.1400cf0a0
mov rdx, qword [rdi]
mov qword [rdi], rbp
mov rax, qword [rsp + 0x58]
mov qword [rdi + 8], rax
mov qword [rdi + 0x10], r12
test rdx, rdx
lea rbx, [rsp + 0xd0]
mov r12, rsi
je 0x140011e4d
mov rcx, rdx
call fcn.1400c9cac
jmp 0x140011e4d
xor eax, eax
jmp 0x140011eaf
mov rdx, qword [rsp + 0xf0]
mov qword [rsp + 0xf0], 0
lea rcx, [rsp + 0x108]
call fcn.140166bc6
mov eax, dword [rsp + 0xd0]
mov dword [rsp + 0x64], eax
jmp 0x140011fb0
mov ecx, 2
call fcn.1400ac390
test al, al
je 0x140011fa8
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_util_watson_memory_csv.cc
lea rsi, [rsp + 0x118]
mov rcx, rsi
mov r8d, 0x73
mov r9d, 2
call fcn.14014efd0
lea rcx, [rsp + 0x128]
lea rdx, str.Cannot_enumerate_running_services.
mov r8d, 0x22
call fcn.1400a7acb
mov rcx, rsi
call fcn.1401412f0
mov dword [rsp + 0x64], 0xaaaaaaaa
xor edi, edi
lea r14, [rsp + 0xf0]
mov rcx, r14
xor edx, edx
call fcn.140166bc6
mov rcx, r15
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
test ebp, ebp
je 0x140012f8a
movabs rax, 0x9aaaaaa0000aaaa
mov qword [rsp + 0x100], rax
movups xmm0, xmmword [str.ImageName]
movaps xmmword [rsp + 0xf0], xmm0
movzx eax, word [0x14025fd34]
mov word [rsp + 0x100], ax
xor r12d, r12d
lea r13, str.___ls
movabs r15, 0x7fffffffffffffff
mov rax, r12
shl rax, 4
lea rcx, str.UniqueProcessId
mov r8, qword [rax + rcx]
lea rdi, [rsp + 0x118]
mov rcx, rdi
mov rdx, r13
call fcn.140180c90
movzx eax, byte [rsp + 0x12f]
mov rbp, rax
test al, al
jns 0x14001205d
mov rbp, qword [rsp + 0x120]
mov rdi, qword [rsp + 0x118]
movzx ecx, byte [rsp + 0x107]
mov ebx, 0xa
mov rsi, rcx
test cl, cl
jns 0x140012087
mov rbx, qword [rsp + 0x100]
and rbx, r15
dec rbx
mov rsi, qword [rsp + 0xf8]
mov rdx, rbx
sub rdx, rsi
cmp rdx, rbp
jb 0x14001210e
test rbp, rbp
je 0x1400120eb
mov rax, r14
test cl, cl
jns 0x1400120a6
mov rax, qword [rsp + 0xf0]
lea rcx, [rax + rsi*2]
xor edx, edx
movzx ebx, word [rdi + rdx*2]
mov word [rcx + rdx*2], bx
inc rdx
cmp rbp, rdx
jne 0x1400120ac
add rsi, rbp
cmp byte [rsp + 0x107], 0
js 0x1400120d3
mov byte [rsp + 0x107], sil
jmp 0x1400120db
mov qword [rsp + 0xf8], rsi
lea rax, [rax + rsi*2]
mov word [rax], 0
mov al, byte [rsp + 0x12f]
test al, al
jns 0x1400120fc
mov rcx, qword [rsp + 0x118]
call fcn.1400c9cac
inc r12
cmp r12, 0x1f
jne 0x140012019
jmp 0x140012213
lea r13, [rsi + rbp]
mov rax, r13
sub rax, rbx
mov rdx, r15
sub rdx, rbx
add rdx, 0xffffffffffffffef
cmp rdx, rax
jb 0x1400130a1
test cl, cl
jns 0x140012137
mov r14, qword [rsp + 0xf0]
mov qword [rsp + 0x58], r14
movabs rax, 0x3fffffffffffffe7
cmp rbx, rax
jae 0x14001220a
lea rax, [rbx + rbx]
cmp r13, rax
cmovae rax, r13
mov r14d, 0xb
cmp rax, 0xb
jb 0x140012177
add rax, 8
and rax, 0xfffffffffffffff8
mov r14, rax
js 0x1400130ae
lea rcx, [r14 + r14]
call fcn.1400c9cbc
mov r15, rax
test rsi, rsi
mov rdx, qword [rsp + 0x58]
jne 0x1400121e9
lea rcx, [r15 + rsi*2]
add rbp, rbp
mov rdx, rdi
mov r8, rbp
call fcn.1400cf0a0
cmp rbx, 0xa
jne 0x1400121fe
mov qword [rsp + 0xf0], r15
movabs rcx, 0x7fffffffffffffff
lea rax, [rcx + 1]
or r14, rax
mov qword [rsp + 0x100], r14
mov qword [rsp + 0xf8], r13
lea rax, [r15 + r13*2]
mov r15, rcx
lea r14, [rsp + 0xf0]
lea r13, str.___ls
jmp 0x1400120df
xor eax, eax
movzx ecx, word [rdx + rax*2]
mov word [r15 + rax*2], cx
inc rax
cmp rsi, rax
jne 0x1400121eb
jmp 0x14001218d
mov rcx, qword [rsp + 0x58]
call fcn.1400c9cac
jmp 0x1400121a5
lea r14, [r15 - 0x10]
jmp 0x140012177
movzx eax, byte [rsp + 0x107]
mov ebp, 0xa
mov rbx, rax
test al, al
jns 0x14001223d
mov rbp, qword [rsp + 0x100]
and rbp, r15
dec rbp
mov rbx, qword [rsp + 0xf8]
mov rcx, rbp
sub rcx, rbx
cmp rcx, 0xb
jb 0x140012fa3
test al, al
jns 0x14001225b
mov rax, qword [rsp + 0xf0]
jmp 0x140012263
lea rax, [rsp + 0xf0]
lea rcx, [rax + rbx*2]
xor edx, edx
lea rbp, str._Services_r_n
movzx edi, word [rdx + rbp]
mov word [rcx + rdx], di
cmp rdx, 0x14
je 0x140012284
add rdx, 2
jmp 0x140012270
add rbx, 0xb
cmp byte [rsp + 0x107], 0
js 0x14001229b
mov byte [rsp + 0x107], bl
jmp 0x1400122a3
mov qword [rsp + 0xf8], rbx
lea rsi, [rsp + 0xd0]
lea rax, [rax + rbx*2]
mov word [rax], 0
mov rcx, qword [rsp + 0x108]
mov rax, qword [rcx]
cmp qword [rcx + 8], rax
je 0x14001309c
xorps xmm0, xmm0
movaps xmmword [rsp + 0xd0], xmm0
mov qword [rsp + 0xe0], 0
mov ecx, dword [rsp + 0x64]
mov qword [rsp + 0x70], rcx
lea r12, [rsp + 0x118]
mov r13, qword [rsp + 0x68]
mov qword [rsp + 0x78], rax
cmp qword [r13 + 0x50], 0
je 0x14001231a
mov rcx, qword [r13 + 0x40]
mov qword [rsp + 0xc0], rcx
test rcx, rcx
je 0x14001232b
call fcn.1400ca328
jmp 0x14001232d
mov rcx, rsi
lea rdx, str._Idle_
call fcn.1400bdc02
jmp 0x14001237c
xor eax, eax
mov qword [rsp + 0xc8], rax
mov rcx, r12
lea rdx, [rsp + 0xc0]
call fcn.1400b8c90
cmp byte [rsp + 0xe7], 0
jns 0x14001235c
mov rcx, qword [rsp + 0xd0]
call fcn.1400c9cac
mov rax, qword [rsp + 0x128]
mov qword [rsp + 0xe0], rax
movups xmm0, xmmword [rsp + 0x118]
movaps xmmword [rsp + 0xd0], xmm0
cmp byte [rsp + 0xe7], 0
jns 0x14001238e
mov rsi, qword [rsp + 0xd0]
mov rcx, r12
lea rdx, str.__ls__
mov r8, rsi
call fcn.140180c90
movzx eax, byte [rsp + 0x12f]
mov rdi, rax
mov rbx, r12
test al, al
jns 0x1400123c2
mov rdi, qword [rsp + 0x120]
mov rbx, qword [rsp + 0x118]
movzx ecx, byte [rsp + 0x107]
mov ebp, 0xa
mov rsi, rcx
test cl, cl
jns 0x1400123ec
mov rbp, qword [rsp + 0x100]
and rbp, r15
dec rbp
mov rsi, qword [rsp + 0xf8]
mov rdx, rbp
sub rdx, rsi
cmp rdx, rdi
mov qword [rsp + 0x58], r13
jb 0x140012bad
test rdi, rdi
je 0x14001245e
lea rax, [rsp + 0xf0]
test cl, cl
jns 0x140012419
mov rax, qword [rsp + 0xf0]
lea rcx, [rax + rsi*2]
xor edx, edx
movzx ebp, word [rbx + rdx*2]
mov word [rcx + rdx*2], bp
inc rdx
cmp rdi, rdx
jne 0x14001241f
add rsi, rdi
cmp byte [rsp + 0x107], 0
js 0x140012446
mov byte [rsp + 0x107], sil
jmp 0x14001244e
mov qword [rsp + 0xf8], rsi
lea rax, [rax + rsi*2]
mov word [rax], 0
mov al, byte [rsp + 0x12f]
test al, al
jns 0x14001246f
mov rcx, qword [rsp + 0x118]
call fcn.1400c9cac
xor r14d, r14d
mov rax, r14
shl rax, 4
lea rcx, str.UniqueProcessId
mov eax, dword [rax + rcx + 8]
mov ecx, 0x5000121a
bt rcx, r14
jb 0x140012553
mov r8, qword [r13 + rax]
mov rcx, r12
lea rdx, str._llu_
call fcn.140180c90
movzx eax, byte [rsp + 0x12f]
mov rdi, rax
mov rbx, r12
test al, al
jns 0x1400124c9
mov rdi, qword [rsp + 0x120]
mov rbx, qword [rsp + 0x118]
movzx ecx, byte [rsp + 0x107]
mov esi, 0xa
mov rbp, rcx
test cl, cl
jns 0x1400124f3
mov rsi, qword [rsp + 0x100]
and rsi, r15
dec rsi
mov rbp, qword [rsp + 0xf8]
mov rdx, rsi
sub rdx, rbp
cmp rdx, rdi
jb 0x140012680
test rdi, rdi
je 0x14001262a
lea rax, [rsp + 0xf0]
test cl, cl
jns 0x14001251f
mov rax, qword [rsp + 0xf0]
lea rcx, [rax + rbp*2]
xor edx, edx
movzx esi, word [rbx + rdx*2]
mov word [rcx + rdx*2], si
inc rdx
cmp rdi, rdx
jne 0x140012525
add rbp, rdi
cmp byte [rsp + 0x107], 0
js 0x140012612
mov byte [rsp + 0x107], bpl
jmp 0x14001261a
mov r8d, dword [r13 + rax]
mov rcx, r12
lea rdx, str._lu_
call fcn.140180c90
movzx eax, byte [rsp + 0x12f]
mov rdi, rax
mov rbx, r12
test al, al
jns 0x140012589
mov rdi, qword [rsp + 0x120]
mov rbx, qword [rsp + 0x118]
movzx ecx, byte [rsp + 0x107]
mov r13d, 0xa
mov r12, rcx
test cl, cl
jns 0x1400125b4
mov r13, qword [rsp + 0x100]
and r13, r15
dec r13
mov r12, qword [rsp + 0xf8]
mov rdx, r13
sub rdx, r12
cmp rdx, rdi
jb 0x140012777
test rdi, rdi
mov r13, qword [rsp + 0x58]
je 0x140012655
lea rax, [rsp + 0xf0]
test cl, cl
jns 0x1400125e5
mov rax, qword [rsp + 0xf0]
lea rcx, [rax + r12*2]
xor edx, edx
movzx ebp, word [rbx + rdx*2]
mov word [rcx + rdx*2], bp
inc rdx
cmp rdi, rdx
jne 0x1400125eb
add r12, rdi
cmp byte [rsp + 0x107], 0
js 0x14001263d
mov byte [rsp + 0x107], r12b
jmp 0x140012645
mov qword [rsp + 0xf8], rbp
lea rax, [rax + rbp*2]
mov word [rax], 0
mov al, byte [rsp + 0x12f]
test al, al
jns 0x14001266e
mov rcx, qword [rsp + 0x118]
call fcn.1400c9cac
jmp 0x14001266e
mov qword [rsp + 0xf8], r12
lea rax, [rax + r12*2]
mov word [rax], 0
mov al, byte [rsp + 0x12f]
test al, al
jns 0x140012666
mov rcx, qword [rsp + 0x118]
call fcn.1400c9cac
lea r12, [rsp + 0x118]
inc r14
cmp r14, 0x1f
jne 0x140012472
jmp 0x1400128c3
lea r12, [rdi + rbp]
mov rax, r12
sub rax, rsi
mov rdx, r15
sub rdx, rsi
add rdx, 0xffffffffffffffef
cmp rdx, rax
jb 0x1400130a1
lea rax, [rsp + 0xf0]
test cl, cl
jns 0x1400126b1
mov rax, qword [rsp + 0xf0]
mov qword [rsp + 0x50], rax
movabs rax, 0x3fffffffffffffe7
cmp rsi, rax
jae 0x14001289d
lea rax, [rsi + rsi]
cmp r12, rax
cmovae rax, r12
mov r15d, 0xb
cmp rax, 0xb
jb 0x1400126f1
add rax, 8
and rax, 0xfffffffffffffff8
mov r15, rax
js 0x1400130ae
lea rcx, [r15 + r15]
call fcn.1400c9cbc
mov r13, rax
test rbp, rbp
mov rdx, qword [rsp + 0x50]
jne 0x140012852
lea rcx, [rbp*2]
add rcx, r13
add rdi, rdi
mov rdx, rbx
mov r8, rdi
call fcn.1400cf0a0
cmp rsi, 0xa
jne 0x14001287f
mov qword [rsp + 0xf0], r13
movabs rcx, 0x7fffffffffffffff
lea rax, [rcx + 1]
or r15, rax
mov qword [rsp + 0x100], r15
mov r15, rcx
mov qword [rsp + 0xf8], r12
lea rax, [r12*2]
add rax, r13
lea r12, [rsp + 0x118]
mov r13, qword [rsp + 0x58]
jmp 0x14001261e
lea rbp, [r12 + rdi]
mov rax, rbp
sub rax, r13
mov rdx, r15
sub rdx, r13
add rdx, 0xffffffffffffffef
cmp rdx, rax
jb 0x1400130a1
lea rax, [rsp + 0xf0]
test cl, cl
jns 0x1400127a8
mov rax, qword [rsp + 0xf0]
mov qword [rsp + 0x50], rax
movabs rax, 0x3fffffffffffffe7
cmp r13, rax
jae 0x1400128b0
mov rax, r13
add rax, r13
cmp rbp, rax
cmovae rax, rbp
mov r15d, 0xb
cmp rax, 0xb
jb 0x1400127ea
add rax, 8
and rax, 0xfffffffffffffff8
mov r15, rax
js 0x1400130ae
lea rcx, [r15 + r15]
call fcn.1400c9cbc
mov rsi, rax
test r12, r12
mov rdx, qword [rsp + 0x50]
jne 0x14001286b
lea rcx, [rsi + r12*2]
add rdi, rdi
mov rdx, rbx
mov r8, rdi
call fcn.1400cf0a0
cmp r13, 0xa
jne 0x14001288e
mov qword [rsp + 0xf0], rsi
movabs rcx, 0x7fffffffffffffff
lea rax, [rcx + 1]
or r15, rax
mov qword [rsp + 0x100], r15
mov r15, rcx
mov qword [rsp + 0xf8], rbp
lea rax, [rsi + rbp*2]
mov r13, qword [rsp + 0x58]
jmp 0x140012649
xor eax, eax
movzx ecx, word [rdx + rax*2]
mov word [r13 + rax*2], cx
inc rax
cmp rbp, rax
jne 0x140012854
jmp 0x14001270b
xor eax, eax
movzx ecx, word [rdx + rax*2]
mov word [rsi + rax*2], cx
inc rax
cmp r12, rax
jne 0x14001286d
jmp 0x140012800
mov rcx, qword [rsp + 0x50]
call fcn.1400c9cac
jmp 0x14001272e
mov rcx, qword [rsp + 0x50]
call fcn.1400c9cac
jmp 0x140012818
movabs rax, 0x7fffffffffffffff
lea r15, [rax - 0x10]
jmp 0x1400126f1
movabs rax, 0x7fffffffffffffff
lea r15, [rax - 0x10]
jmp 0x1400127ea
cmp dword [rsp + 0x64], 0
mov r14, qword [rsp + 0x78]
je 0x140012b13
mov al, 1
xor ebp, ebp
imul rcx, rbp, 0x38
mov edx, dword [r14 + rcx + 0x2c]
cmp edx, dword [r13 + 0x50]
jne 0x1400129e4
mov r9, qword [r14 + rcx + 8]
test al, 1
lea r8, [0x14025c21e]
lea rax, [0x14025fd8e]
cmove r8, rax
mov rcx, r12
lea rdx, str._ls_ls
call fcn.140180c90
movzx eax, byte [rsp + 0x12f]
mov rdi, rax
mov rbx, r12
test al, al
jns 0x140012934
mov rdi, qword [rsp + 0x120]
mov rbx, qword [rsp + 0x118]
movzx ecx, byte [rsp + 0x107]
mov r13d, 0xa
mov rsi, rcx
test cl, cl
jns 0x14001295f
mov r13, qword [rsp + 0x100]
and r13, r15
dec r13
mov rsi, qword [rsp + 0xf8]
mov rdx, r13
sub rdx, rsi
cmp rdx, rdi
jb 0x1400129f7
test rdi, rdi
mov r13, qword [rsp + 0x58]
je 0x1400129d1
lea r8, [rsp + 0xf0]
test cl, cl
jns 0x14001298c
mov r8, qword [rsp + 0xf0]
lea rcx, [r8 + rsi*2]
xor edx, edx
movzx eax, word [rbx + rdx*2]
mov word [rcx + rdx*2], ax
inc rdx
cmp rdi, rdx
jne 0x140012992
add rsi, rdi
cmp byte [rsp + 0x107], 0
js 0x1400129b9
mov byte [rsp + 0x107], sil
jmp 0x1400129c1
mov qword [rsp + 0xf8], rsi
lea rax, [r8 + rsi*2]
mov word [rax], 0
mov al, byte [rsp + 0x12f]
test al, al
jns 0x1400129e2
mov rcx, qword [rsp + 0x118]
call fcn.1400c9cac
xor eax, eax
inc rbp
cmp rbp, qword [rsp + 0x70]
jne 0x1400128d7
jmp 0x140012b13
lea r14, [rsi + rdi]
mov rax, r14
sub rax, r13
mov rdx, r15
sub rdx, r13
add rdx, 0xffffffffffffffef
cmp rdx, rax
jb 0x1400130a1
lea rax, [rsp + 0xf0]
test cl, cl
jns 0x140012a28
mov rax, qword [rsp + 0xf0]
mov qword [rsp + 0x50], rax
movabs rax, 0x3fffffffffffffe7
cmp r13, rax
jae 0x140012b00
mov rax, r13
add rax, r13
cmp r14, rax
cmovae rax, r14
mov r15d, 0xb
cmp rax, 0xb
jb 0x140012a6a
add rax, 8
and rax, 0xfffffffffffffff8
mov r15, rax
js 0x1400130ae
lea rcx, [r15 + r15]
call fcn.1400c9cbc
mov r12, rax
test rsi, rsi
mov rdx, qword [rsp + 0x50]
jne 0x140012adf
lea rcx, [r12 + rsi*2]
add rdi, rdi
mov rdx, rbx
mov r8, rdi
call fcn.1400cf0a0
cmp r13, 0xa
jne 0x140012af4
mov qword [rsp + 0xf0], r12
movabs rcx, 0x7fffffffffffffff
lea rax, [rcx + 1]
or r15, rax
mov qword [rsp + 0x100], r15
mov r15, rcx
mov qword [rsp + 0xf8], r14
lea rax, [r12 + r14*2]
mov r14, qword [rsp + 0x78]
lea r12, [rsp + 0x118]
mov r13, qword [rsp + 0x58]
jmp 0x1400129c5
xor eax, eax
movzx ecx, word [rdx + rax*2]
mov word [r12 + rax*2], cx
inc rax
cmp rsi, rax
jne 0x140012ae1
jmp 0x140012a80
mov rcx, qword [rsp + 0x50]
call fcn.1400c9cac
jmp 0x140012a98
movabs rax, 0x7fffffffffffffff
lea r15, [rax - 0x10]
jmp 0x140012a6a
movzx eax, byte [rsp + 0x107]
mov ebp, 0xa
mov rbx, rax
test al, al
jns 0x140012b3d
mov rbp, qword [rsp + 0x100]
and rbp, r15
dec rbp
mov rbx, qword [rsp + 0xf8]
mov rcx, rbp
sub rcx, rbx
cmp rcx, 2
jb 0x140012c8d
lea rcx, [rsp + 0xf0]
test al, al
jns 0x140012b61
mov rcx, qword [rsp + 0xf0]
mov dword [rcx + rbx*2], 0xa000d
add rbx, 2
cmp byte [rsp + 0x107], 0
lea rsi, [rsp + 0xd0]
js 0x140012b87
mov byte [rsp + 0x107], bl
jmp 0x140012b8f
mov qword [rsp + 0xf8], rbx
lea rax, [rcx + rbx*2]
mov word [rax], 0
mov eax, dword [r13]
add r13, rax
test rax, rax
jne 0x1400122fb
jmp 0x140012dba
lea r12, [rsi + rdi]
mov rax, r12
sub rax, rbp
mov rdx, r15
sub rdx, rbp
add rdx, 0xffffffffffffffef
cmp rdx, rax
jb 0x1400130a1
lea rax, [rsp + 0xf0]
test cl, cl
jns 0x140012bde
mov rax, qword [rsp + 0xf0]
mov qword [rsp + 0x50], rax
movabs rax, 0x3fffffffffffffe7
cmp rbp, rax
jae 0x140012d9e
mov rax, rbp
add rax, rbp
cmp r12, rax
cmovae rax, r12
mov r13d, 0xb
cmp rax, 0xb
jb 0x140012c20
add rax, 8
and rax, 0xfffffffffffffff8
mov r13, rax
js 0x1400130ae
mov rcx, r13
add rcx, r13
call fcn.1400c9cbc
mov r14, rax
test rsi, rsi
mov rdx, qword [rsp + 0x50]
jne 0x140012d55
lea rcx, [r14 + rsi*2]
add rdi, rdi
mov rdx, rbx
mov r8, rdi
call fcn.1400cf0a0
cmp rbp, 0xa
jne 0x140012d82
mov qword [rsp + 0xf0], r14
lea rax, [r15 + 1]
or r13, rax
mov qword [rsp + 0x100], r13
mov qword [rsp + 0xf8], r12
lea rax, [r14 + r12*2]
lea r12, [rsp + 0x118]
mov r13, qword [rsp + 0x58]
jmp 0x140012452
mov rdx, r15
lea r15, [rbx + 2]
mov rcx, r15
sub rcx, rbp
sub rdx, rbp
add rdx, 0xffffffffffffffef
cmp rdx, rcx
jb 0x1400130a1
lea r14, [rsp + 0xf0]
test al, al
jns 0x140012cbe
mov r14, qword [rsp + 0xf0]
movabs rax, 0x3fffffffffffffe7
cmp rbp, rax
jae 0x140012da7
mov rax, rbp
add rax, rbp
cmp r15, rax
cmovae rax, r15
mov edi, 0xb
cmp rax, 0xb
jb 0x140012cfa
add rax, 8
and rax, 0xfffffffffffffff8
mov rdi, rax
js 0x1400130ae
lea rcx, [rdi + rdi]
call fcn.1400c9cbc
mov rsi, rax
test rbx, rbx
jne 0x140012d6d
mov dword [rsi + rbx*2], 0xa000d
cmp rbp, 0xa
jne 0x140012d91
mov qword [rsp + 0xf0], rsi
movabs rcx, 0x7fffffffffffffff
lea rax, [rcx + 1]
or rdi, rax
mov qword [rsp + 0x100], rdi
mov qword [rsp + 0xf8], r15
lea rax, [rsi + r15*2]
mov r15, rcx
lea rsi, [rsp + 0xd0]
jmp 0x140012b93
xor eax, eax
movzx ecx, word [rdx + rax*2]
mov word [r14 + rax*2], cx
inc rax
cmp rsi, rax
jne 0x140012d57
jmp 0x140012c3c
xor eax, eax
movzx ecx, word [r14 + rax*2]
mov word [rsi + rax*2], cx
inc rax
cmp rbx, rax
jne 0x140012d6f
jmp 0x140012d0b
mov rcx, qword [rsp + 0x50]
call fcn.1400c9cac
jmp 0x140012c58
mov rcx, r14
call fcn.1400c9cac
jmp 0x140012d18
lea r13, [r15 - 0x10]
jmp 0x140012c20
movabs rax, 0x7fffffffffffffff
lea rdi, [rax - 0x10]
jmp 0x140012cfa
movabs rax, 0xaaaaaaaaaaaaaaaa
lea rsi, [rsp + 0xa0]
mov qword [rsi + 0x10], rax
movaps xmm0, xmmword [0x140257270]
movaps xmmword [rsi], xmm0
lea rax, str.memory.csv
lea r8, [rsp + 0x90]
mov qword [r8], rax
mov qword [r8 + 8], 0xa
mov rcx, qword [rsp + 0x88]
mov rdx, rsi
call fcn.14000b920
mov ecx, 0x60
call fcn.1400c9cbc
mov rbx, rax
mov rcx, rax
mov edx, 1
call fcn.1401f064c
mov rcx, rbx
mov rdx, rsi
mov r8d, 3
xor r9d, r9d
call fcn.14001d20c
test al, al
je 0x140012e84
lea rdx, [rsp + 0xf0]
movzx r8d, byte [rdx + 0x17]
test r8b, r8b
cmovs r8, qword [rdx + 8]
cmovs rdx, qword [rdx]
add r8, r8
mov rcx, qword [rbx + 0x38]
call fcn.1401384e7
test al, al
je 0x140012edd
mov rcx, rbx
call fcn.14001b68e
lea rdx, [rsp + 0xa0]
mov rcx, qword [rsp + 0x80]
call fcn.1400a95b0
mov dil, 1
jmp 0x140012f3a
mov ecx, 2
call fcn.1400ac390
test al, al
je 0x140012f38
lea rdx, str..._.._third_party_crashpad_crashpad_util_watson_memory_csv.cc
lea rsi, [rsp + 0x118]
mov rcx, rsi
mov r8d, 0x117
mov r9d, 2
call fcn.140122230
lea rcx, [rsp + 0x128]
lea rdx, str.Failed_to_create_memory.csv
mov r8d, 0x1b
call fcn.1400a7acb
mov rcx, rsi
call fcn.140001c60
jmp 0x140012f38
mov ecx, 2
call fcn.1400ac390
test al, al
je 0x140012f30
lea rdx, str..._.._third_party_crashpad_crashpad_util_watson_memory_csv.cc
lea rsi, [rsp + 0x118]
mov rcx, rsi
mov r8d, 0x11d
mov r9d, 2
call fcn.140122230
lea rcx, [rsp + 0x128]
lea rdx, str.Failed_to_write_to_memory.csv
mov r8d, 0x1d
call fcn.1400a7acb
mov rcx, rsi
call fcn.140001c60
mov rcx, rbx
call fcn.14001b68e
xor edi, edi
test rbx, rbx
je 0x140012f4f
mov rcx, rbx
call fcn.1400194c8
mov rcx, rbx
call fcn.1400c9cac
lea rcx, [rsp + 0xa0]
call fcn.14007cab0
cmp byte [rsp + 0xe7], 0
jns 0x140012f73
mov rcx, qword [rsp + 0xd0]
call fcn.1400c9cac
cmp byte [rsp + 0x107], 0
jns 0x140012f8a
mov rcx, qword [rsp + 0xf0]
call fcn.1400c9cac
lea rcx, [rsp + 0x108]
xor edx, edx
call fcn.140166bc6
mov rcx, qword [rsp + 0x68]
jmp 0x140011cc9
mov rdx, r15
lea r15, [rbx + 0xb]
mov rcx, r15
sub rcx, rbp
sub rdx, rbp
add rdx, 0xffffffffffffffef
cmp rdx, rcx
jb 0x1400130a1
test al, al
jns 0x140012fce
mov r14, qword [rsp + 0xf0]
jmp 0x140012fd6
lea r14, [rsp + 0xf0]
movabs rax, 0x3fffffffffffffe7
cmp rbp, rax
jae 0x1400130bb
mov rax, rbp
add rax, rbp
cmp r15, rax
cmovae rax, r15
mov edi, 0xb
cmp rax, 0xb
jb 0x140013012
add rax, 8
and rax, 0xfffffffffffffff8
mov rdi, rax
js 0x1400130ae
lea rcx, [rdi + rdi]
call fcn.1400c9cbc
mov rsi, rax
test rbx, rbx
jne 0x14001307d
mov rax, qword [0x14025fd52]
mov qword [rsi + rbx*2 + 0xe], rax
movups xmm0, xmmword [str._Services_r_n]
movups xmmword [rsi + rbx*2], xmm0
cmp rbp, 0xa
jne 0x140013092
mov qword [rsp + 0xf0], rsi
movabs rcx, 0x7fffffffffffffff
lea rax, [rcx + 1]
or rdi, rax
mov qword [rsp + 0x100], rdi
mov qword [rsp + 0xf8], r15
lea rax, [rsi + r15*2]
mov r15, rcx
lea rsi, [rsp + 0xd0]
jmp 0x1400122af
xor eax, eax
movzx ecx, word [r14 + rax*2]
mov word [rsi + rax*2], cx
inc rax
cmp rbx, rax
jne 0x14001307f
jmp 0x140013023
mov rcx, r14
call fcn.1400c9cac
jmp 0x140013040
call fcn.1401ef0a6
lea rcx, [rsp + 0xf0]
call fcn.140113fe4
call fcn.1400c9fe0
mov rcx, rdi
call fcn.14014e7e0
movabs rax, 0x7fffffffffffffff
lea rdi, [rax - 0x10]
jmp 0x140013012