Function at 0x14042f550
Capabilities:
Create process on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x850]
sub rsp, 0x950
mov rax, qword [0x1405f98c0]
xor rax, rsp
mov qword [rbp + 0x848], rax
mov r14, rcx
mov qword [rbp - 0x78], rcx
mov qword [rbp + 0xe0], rcx
xor r12d, r12d
mov esi, r12d
mov dword [rsp + 0x50], r12d
call fcn.140436400
test al, al
je 0x14042f5fb
mov dword [rsp + 0x20], 4
mov r9d, 0x16c
lea r8, str.C:UsersShadowDownloads_sentry_native__1_externalcrashpadclientcrashpad_client_win.cc
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace::StartHandlerProcess_class_std::unique_ptr_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData_struct_std::default_delete_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData____
lea rcx, [rbp + 0x498]
call fcn.140437f10
nop
mov esi, 1
mov dword [rsp + 0x50], esi
lea rdx, str.Check_failed:__IsThreadInLoaderLock__
mov rcx, rax
call fcn.1400c90c0
mov rcx, rax
lea rdx, [0x14053c838]
call fcn.1400c90c0
nop
test sil, 1
je 0x14042f610
and esi, 0xfffffffe
lea rcx, [rbp + 0x498]
call fcn.140438120
mov byte [rsp + 0x54], 0
mov qword [rbp + 0x5a8], r12
mov qword [rbp + 0x5b0], 7
mov word [rbp + 0x598], r12w
lea rdx, [rbp + 0x598]
mov rcx, qword [r14]
call fcn.140435b60
mov rax, qword [r14]
mov rbx, qword [rax + 0x90]
mov rdi, qword [rax + 0x98]
cmp rbx, rdi
je 0x14042f6fb
mov rax, rbx
cmp qword [rbx + 0x18], 0x10
jb 0x14042f665
mov rax, qword [rbx]
mov qword [rbp - 0x30], rax
mov rax, qword [rbx + 0x10]
mov qword [rbp - 0x28], rax
lea rdx, [rbp - 0x30]
lea rcx, [rbp + 0x708]
call fcn.140438dd0
nop
lea rdx, [rbp + 0x598]
mov rcx, rax
call fcn.140435b60
nop
mov rdx, qword [rbp + 0x720]
cmp rdx, 8
jb 0x14042f6d8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x708]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14042f6d3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1404312b1
call fcn.1403e3650
mov qword [rbp + 0x718], r12
mov qword [rbp + 0x720], 7
mov word [rbp + 0x708], r12w
add rbx, 0x20
jmp 0x14042f64f
mov r8, qword [r14]
cmp qword [r8 + 0x30], 0
je 0x14042f819
mov qword [rbp + 0x6b0], recv
mov qword [rbp + 0x6a8], 8
movabs rax, 0x6573616261746164
mov qword [rbp + 0x698], rax
mov byte [rbp + 0x6a0], 0
add r8, 0x20
lea rdx, [rbp + 0x698]
lea rcx, [rbp + 0x728]
call fcn.14042eea0
nop
lea rdx, [rbp + 0x598]
mov rcx, rax
call fcn.140435b60
nop
mov rdx, qword [rbp + 0x740]
cmp rdx, 8
jb 0x14042f7a5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x728]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14042f7a0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1404312b7
call fcn.1403e3650
mov qword [rbp + 0x738], r12
mov qword [rbp + 0x740], 7
mov word [rbp + 0x728], r12w
mov rdx, qword [rbp + 0x6b0]
cmp rdx, 0x10
jb 0x14042f800
inc rdx
mov rcx, qword [rbp + 0x698]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14042f7fb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1404312bd
call fcn.1403e3650
mov qword [rbp + 0x6a8], r12
mov qword [rbp + 0x6b0], recv
mov byte [rbp + 0x698], 0
mov rax, qword [r14]
cmp qword [rax + 0x50], 0
je 0x14042f954
mov qword [rbp + 0x5f0], recv
mov qword [rbp + 0x5e8], recv
movsd xmm0, qword [str.metrics_dir]
movsd qword [rbp + 0x5d8], xmm0
movzx eax, word [0x14053cc18]
mov word [rbp + 0x5e0], ax
movzx eax, byte [0x14053cc1a]
mov byte [rbp + 0x5e2], al
mov byte [rbp + 0x5e3], 0
mov r8, qword [r14]
add r8, 0x40
lea rdx, [rbp + 0x5d8]
lea rcx, [rbp + 0x808]
call fcn.14042eea0
nop
lea rdx, [rbp + 0x598]
mov rcx, rax
call fcn.140435b60
nop
mov rdx, qword [rbp + 0x820]
cmp rdx, 8
jb 0x14042f8e0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x808]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14042f8db
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1404312c3
call fcn.1403e3650
mov qword [rbp + 0x818], r12
mov qword [rbp + 0x820], 7
mov word [rbp + 0x808], r12w
mov rdx, qword [rbp + 0x5f0]
cmp rdx, 0x10
jb 0x14042f93b
inc rdx
mov rcx, qword [rbp + 0x5d8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14042f936
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1404312c9
call fcn.1403e3650
mov qword [rbp + 0x5e8], r12
mov qword [rbp + 0x5f0], recv
mov byte [rbp + 0x5d8], 0
mov rax, qword [r14]
cmp qword [rax + 0x70], 0
je 0x14042fb07
lea rcx, [rax + 0x60]
cmp qword [rax + 0x78], 0x10
jb 0x14042f971
mov rcx, qword [rax + 0x60]
mov qword [rbp - 0x20], rcx
mov rax, qword [rax + 0x70]
mov qword [rbp - 0x18], rax
mov qword [rbp + 0x650], recv
mov qword [rbp + 0x648], 3
movzx eax, word [0x14053cc1c]
mov word [rbp + 0x638], ax
movzx eax, byte [0x14053cc1e]
mov byte [rbp + 0x63a], al
mov byte [rbp + 0x63b], 0
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0x768]
call fcn.140438dd0
nop
mov r8, rax
lea rdx, [rbp + 0x638]
lea rcx, [rbp + 0x748]
call fcn.14042eea0
nop
lea rdx, [rbp + 0x598]
mov rcx, rax
call fcn.140435b60
nop
mov rdx, qword [rbp + 0x760]
cmp rdx, 8
jb 0x14042fa33
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x748]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14042fa2e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1404312cf
call fcn.1403e3650
mov qword [rbp + 0x758], r12
mov qword [rbp + 0x760], 7
mov word [rbp + 0x748], r12w
mov rdx, qword [rbp + 0x780]
cmp rdx, 8
jb 0x14042fa93
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x768]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14042fa8e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1404312d5
call fcn.1403e3650
mov qword [rbp + 0x778], r12
mov qword [rbp + 0x780], 7
mov word [rbp + 0x768], r12w
mov rdx, qword [rbp + 0x650]
cmp rdx, 0x10
jb 0x14042faee
inc rdx
mov rcx, qword [rbp + 0x638]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14042fae9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1404312db
call fcn.1403e3650
mov qword [rbp + 0x648], r12
mov qword [rbp + 0x650], recv
mov byte [rbp + 0x638], 0
mov rbx, qword [r14]
mov rbx, qword [rbx + 0x80]
mov rbx, qword [rbx]
xor eax, eax
mov byte [rbp - 0x80], al
lea edx, [rax + 0x16]
cmp byte [rbx + 0x19], al
jne 0x14042ff53
mov byte [rsp + 0x58], 0x3d
movabs rcx, 0x8000000000000027
movabs rax, 0x7fffffffffffffff
lea r15, [rbx + 0x20]
mov r13, qword [r15 + 0x10]
cmp r13, rax
je 0x140431305
mov qword [rbp - 0x70], r15
cmp qword [r15 + 0x18], 0x10
jb 0x14042fb6b
mov rax, qword [r15]
mov qword [rbp - 0x70], rax
movabs rax, 0x7fffffffffffffff
mov qword [rbp + 0x608], r12
mov qword [rbp + 0x610], r12
lea r12, [r13 + 1]
mov edi, recv
lea r14, [rbp + 0x5f8]
cmp r12, rdi
jbe 0x14042fc09
mov rdi, r12
or rdi, 0xf
mov qword [rbp + 0x100], rdi
cmp rdi, rax
jbe 0x14042fba9
mov rdi, rax
mov rax, rcx
jmp 0x14042fbd2
mov qword [rbp + 0x80], rdx
cmp rdi, 0x16
cmovb rdi, rdx
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x14042fbf1
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1404312e1
mov rcx, rax
call fcn.1403e3660
test rax, rax
je 0x1404312ff
lea r14, [rax + 0x27]
and r14, 0xffffffffffffffe0
mov qword [r14 - 8], rax
jmp 0x14042fc02
test rcx, rcx
je 0x14042fbfd
call fcn.1403e3660
jmp 0x14042fbff
xor eax, eax
mov r14, rax
mov qword [rbp + 0x5f8], r14
mov qword [rbp + 0x608], r12
mov qword [rbp + 0x610], rdi
mov r8, r13
mov rdx, qword [rbp - 0x70]
mov rcx, r14
call fcn.14043cc20
mov byte [r14 + r13], 0x3d
mov byte [r14 + r12], 0
bts esi, 0xa
lea rdx, [r15 + 0x20]
cmp qword [r15 + 0x38], 0x10
jb 0x14042fc43
mov rdx, qword [r15 + 0x20]
mov r8, qword [r15 + 0x30]
lea rcx, [rbp + 0x5f8]
call fcn.1400c64a0
xor r12d, r12d
mov qword [rbp + 0x5c8], r12
mov qword [rbp + 0x5d0], r12
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x5b8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x5c8], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], recv
mov byte [rax], r12b
bts esi, 0xb
lea rax, [rbp + 0x5b8]
cmp qword [rbp + 0x5d0], 0x10
cmovae rax, qword [rbp + 0x5b8]
mov qword [rbp - 0x10], rax
mov rax, qword [rbp + 0x5c8]
mov qword [rbp - 8], rax
mov qword [rbp + 0x670], recv
mov qword [rbp + 0x668], 0xa
movsd xmm0, qword [str.annotation]
movsd qword [rbp + 0x658], xmm0
movzx eax, word [0x14053cc28]
mov word [rbp + 0x660], ax
mov byte [rbp + 0x662], r12b
lea rdx, [rbp - 0x10]
lea rcx, [rbp + 0x7a8]
call fcn.140438dd0
nop
mov r8, rax
lea rdx, [rbp + 0x658]
lea rcx, [rbp + 0x788]
call fcn.14042eea0
nop
lea rdx, [rbp + 0x598]
mov rcx, rax
call fcn.140435b60
nop
mov rdx, qword [rbp + 0x7a0]
cmp rdx, 8
jb 0x14042fd6b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x788]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14042fd66
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1404312e7
call fcn.1403e3650
mov qword [rbp + 0x798], r12
mov qword [rbp + 0x7a0], 7
mov word [rbp + 0x788], r12w
mov rdx, qword [rbp + 0x7c0]
cmp rdx, 8
jb 0x14042fdcb
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x7a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14042fdc6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1404312ed
call fcn.1403e3650
mov qword [rbp + 0x7b8], r12
mov qword [rbp + 0x7c0], 7
mov word [rbp + 0x7a8], r12w
mov rdx, qword [rbp + 0x670]
cmp rdx, 0x10
jb 0x14042fe26
inc rdx
mov rcx, qword [rbp + 0x658]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14042fe21
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1404312f3
call fcn.1403e3650
mov qword [rbp + 0x668], r12
mov qword [rbp + 0x670], recv
mov byte [rbp + 0x658], 0
mov rdx, qword [rbp + 0x5d0]
cmp rdx, 0x10
jb 0x14042fe80
inc rdx
mov rcx, qword [rbp + 0x5b8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14042fe7b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1404312f9
call fcn.1403e3650
mov qword [rbp + 0x5c8], r12
mov qword [rbp + 0x5d0], recv
mov byte [rbp + 0x5b8], 0
mov rdx, qword [rbp + 0x610]
cmp rdx, 0x10
jb 0x14042feda
inc rdx
mov rcx, qword [rbp + 0x5f8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14042fed5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1404312ff
call fcn.1403e3650
mov qword [rbp + 0x608], r12
mov qword [rbp + 0x610], recv
mov byte [rbp + 0x5f8], 0
mov rax, qword [rbx + 0x10]
cmp byte [rax + 0x19], 0
je 0x14042ff1f
mov rax, qword [rbx + 8]
cmp byte [rax + 0x19], 0
jne 0x14042ff1a
cmp rbx, qword [rax + 0x10]
jne 0x14042ff1a
mov rbx, rax
mov rax, qword [rax + 8]
cmp byte [rax + 0x19], 0
je 0x14042ff07
mov rbx, rax
jmp 0x14042ff3f
mov rbx, rax
mov rcx, qword [rax]
cmp byte [rcx + 0x19], 0
jne 0x14042ff3f
nop dword [rax + rax]
mov rbx, rcx
mov rax, qword [rcx]
mov rcx, rax
cmp byte [rax + 0x19], 0
je 0x14042ff30
cmp byte [rbx + 0x19], 0
jne 0x14042ff4f
mov edx, reloc.WS2_32.dll_shutdown
jmp 0x14042fb2a
mov r14, qword [rbp - 0x78]
mov rax, qword [r14]
mov rbx, qword [rax + 0xa8]
mov rdi, qword [rax + 0xb0]
cmp rbx, rdi
je 0x140430092
mov qword [rbp + 0x690], recv
mov qword [rbp + 0x688], 0xa
movsd xmm0, qword [0x1404ab7d0]
movsd qword [rbp + 0x678], xmm0
movzx eax, word [0x1404ab7d8]
mov word [rbp + 0x680], ax
mov byte [rbp + 0x682], 0
mov r8, rbx
lea rdx, [rbp + 0x678]
lea rcx, [rbp + 0x7c8]
call fcn.14042eea0
nop
lea rdx, [rbp + 0x598]
mov rcx, rax
call fcn.140435b60
nop
mov rdx, qword [rbp + 0x7e0]
cmp rdx, 8
jb 0x140430015
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x7c8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140430010
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14043130b
call fcn.1403e3650
mov qword [rbp + 0x7d8], r12
mov qword [rbp + 0x7e0], 7
mov word [rbp + 0x7c8], r12w
mov rdx, qword [rbp + 0x690]
cmp rdx, 0x10
jb 0x140430070
inc rdx
mov rcx, qword [rbp + 0x678]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14043006b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140431311
call fcn.1403e3650
mov qword [rbp + 0x688], r12
mov qword [rbp + 0x690], recv
mov byte [rbp + 0x678], 0
add rbx, 0x20
jmp 0x14042ff64
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
mov edx, 1
mov ecx, 0x1f0fff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r13, rax
mov qword [rsp + 0x78], rax
test rax, rax
jne 0x1404301b3
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 2
mov r9d, 0x193
lea r8, str.C:UsersShadowDownloads_sentry_native__1_externalcrashpadclientcrashpad_client_win.cc
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace::StartHandlerProcess_class_std::unique_ptr_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData_struct_std::default_delete_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData____
lea rcx, [rbp + 0x238]
call fcn.1404380a0
nop
or esi, 2
mov dword [rsp + 0x50], esi
lea rdx, [0x14053cc30]
mov rcx, rax
call fcn.1400c90c0
nop
test sil, 2
je 0x14043011f
and esi, 0xfffffffd
mov dword [rsp + 0x50], esi
lea rcx, [rbp + 0x238]
call fcn.1404383e0
nop
mov rdx, qword [rbp + 0x5b0]
cmp rdx, 8
jb 0x140430165
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x598]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140430160
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140431317
call fcn.1403e3650
mov qword [rbp + 0x5a8], r12
mov qword [rbp + 0x5b0], 7
mov word [rbp + 0x598], r12w
bt esi, 0xc
jae 0x140430199
btr esi, 0xc
mov dword [rsp + 0x50], esi
lea rcx, [rbp + 0x130]
call fcn.140438120
mov qword [0x14088f030], 2
mov rcx, r14
call fcn.14042e880
xor al, al
jmp 0x14043127b
mov rax, qword [r14]
lea rcx, [0x14088f038]
mov qword [rsp + 0x40], rcx
lea rcx, [0x14088f020]
mov qword [rsp + 0x38], rcx
lea rcx, [0x14088f000]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], r13
mov rax, qword [rax + 0xe0]
mov qword [rsp + 0x20], rax
mov r9, qword [0x1405fa540]
mov r8, qword [0x1405fa538]
mov rdx, qword [0x1405fa530]
lea rcx, [rbp + 0x340]
call fcn.140436310
lea rdx, [rbp + 0x828]
lea rcx, [rbp + 0x340]
call fcn.140436350
mov rbx, rax
mov qword [rbp + 0x6e8], r12
mov qword [rbp + 0x6f0], recv
mov byte [rbp + 0x6d8], 0
mov r8d, reloc.WS2_32.dll_shutdown
lea rdx, str.__initial_client_data
lea rcx, [rbp + 0x6d8]
call fcn.1400c8a70
nop
mov r9, rbx
lea r8, [rbp + 0x6d8]
movzx edx, byte [rsp + 0x58]
lea rcx, [rbp + 0x6b8]
call fcn.1400e4f20
bts esi, 0xd
mov dword [rsp + 0x50], esi
lea rax, [rbp + 0x6b8]
cmp qword [rbp + 0x6d0], 0x10
cmovae rax, qword [rbp + 0x6b8]
mov qword [rbp], rax
mov rax, qword [rbp + 0x6c8]
mov qword [rbp + 8], rax
lea rdx, [rbp]
lea rcx, [rbp + 0x7e8]
call fcn.140438dd0
nop
lea rdx, [rbp + 0x598]
mov rcx, rax
call fcn.140435b60
nop
mov rdx, qword [rbp + 0x800]
cmp rdx, 8
jb 0x140430305
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x7e8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140430300
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14043131d
call fcn.1403e3650
mov qword [rbp + 0x7f8], r12
mov qword [rbp + 0x800], 7
mov word [rbp + 0x7e8], r12w
mov rdx, qword [rbp + 0x6d0]
cmp rdx, 0x10
jb 0x140430360
inc rdx
mov rcx, qword [rbp + 0x6b8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14043035b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140431323
call fcn.1403e3650
mov qword [rbp + 0x6c8], r12
mov qword [rbp + 0x6d0], recv
mov byte [rbp + 0x6b8], 0
mov rdx, qword [rbp + 0x6f0]
cmp rdx, 0x10
jb 0x1404303ba
inc rdx
mov rcx, qword [rbp + 0x6d8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1404303b5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140431329
call fcn.1403e3650
mov qword [rbp + 0x6e8], r12
mov qword [rbp + 0x6f0], recv
mov byte [rbp + 0x6d8], 0
mov rdx, qword [rbp + 0x840]
cmp rdx, 0x10
jb 0x140430414
inc rdx
mov rcx, qword [rbp + 0x828]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14043040f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14043132f
call fcn.1403e3650
mov qword [rbp + 0x838], r12
mov qword [rbp + 0x840], recv
mov byte [rbp + 0x828], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
movups xmmword [rbp + 0x20], xmm0
movups xmmword [rbp + 0x30], xmm0
movups xmmword [rbp + 0x40], xmm0
movups xmmword [rbp + 0x50], xmm0
movups xmmword [rbp + 0x60], xmm0
movups xmmword [rbp + 0x70], xmm0
mov dword [rbp + 0x4c], 0x100
mov ecx, 0xfffffff6
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov qword [rbp + 0x60], rax
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov qword [rbp + 0x68], rax
mov ecx, 0xfffffff4
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov qword [rbp + 0x70], rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x60], xmm0
mov r15, r12
mov qword [rsp + 0x70], r12
mov rbx, r12
mov qword [rbp - 0x50], rbx
mov rdi, r12
mov qword [rbp - 0x60], r12
mov ecx, dword [0x14088e2b4]
mov rax, qword gs:[0x58]
mov edx, 8
mov r12, qword [rax + rcx*8]
add r12, rdx
mov qword [rbp - 0x70], r12
mov eax, dword [r12]
cmp dword [0x14088f080], eax
jg 0x140431335
mov eax, dword [r12]
cmp dword [0x14088f090], eax
jg 0x14043137c
mov rax, qword [0x14088f078]
test rax, rax
je 0x140430c01
cmp qword [0x14088f088], 0
je 0x140430c01
mov dword [rbp - 0x68], 0x80000
mov dword [rbp + 0x10], reloc.WS2_32.dll_WSASetLastError
lea r9, [rbp - 0x58]
xor r8d, r8d
lea edx, [r8 + 1]
xor ecx, ecx
call rax
test eax, eax
je 0x14043061d
mov dword [rsp + 0x20], 2
mov r9d, 0x1c4
lea r8, str.C:UsersShadowDownloads_sentry_native__1_externalcrashpadclientcrashpad_client_win.cc
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace::StartHandlerProcess_class_std::unique_ptr_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData_struct_std::default_delete_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData____
lea rcx, [rbp + 0x130]
call fcn.140437f10
nop
or esi, 4
mov dword [rsp + 0x50], esi
lea rdx, str.InitializeProcThreadAttributeList__size__succeeded__expected_failure
mov rcx, rax
call fcn.1400c90c0
nop
test sil, 4
je 0x14043057b
and esi, 0xfffffffb
mov dword [rsp + 0x50], esi
lea rcx, [rbp + 0x130]
call fcn.140438120
nop
mov rcx, r13
call fcn.140432960
xor ebx, ebx
mov qword [rsp + 0x78], rbx
mov rdx, qword [rbp + 0x5b0]
cmp rdx, 8
jb 0x1404305d0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x598]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1404305cb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1404313d1
call fcn.1403e3650
mov qword [rbp + 0x5a8], rbx
mov qword [rbp + 0x5b0], 7
mov word [rbp + 0x598], bx
bt esi, 0xe
jae 0x140430603
btr esi, 0xe
mov dword [rsp + 0x50], esi
lea rcx, [rbp + 0x238]
call fcn.140438120
mov qword [0x14088f030], 2
mov rcx, r14
call fcn.14042e880
xor al, al
jmp 0x14043127b
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
je 0x140430731
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 2
mov r9d, 0x1c8
lea r8, str.C:UsersShadowDownloads_sentry_native__1_externalcrashpadclientcrashpad_client_win.cc
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace::StartHandlerProcess_class_std::unique_ptr_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData_struct_std::default_delete_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData____
lea rcx, [rbp + 0x130]
call fcn.1404380a0
nop
or esi, 8
mov dword [rsp + 0x50], esi
lea rdx, str.InitializeProcThreadAttributeList__size_
mov rcx, rax
call fcn.1400c90c0
nop
test sil, 8
je 0x14043068f
and esi, 0xfffffff7
mov dword [rsp + 0x50], esi
lea rcx, [rbp + 0x130]
call fcn.1404383e0
nop
mov rcx, r13
call fcn.140432960
xor ebx, ebx
mov qword [rsp + 0x78], rbx
mov rdx, qword [rbp + 0x5b0]
cmp rdx, 8
jb 0x1404306e4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x598]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1404306df
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1404313d1
call fcn.1403e3650
mov qword [rbp + 0x5a8], rbx
mov qword [rbp + 0x5b0], 7
mov word [rbp + 0x598], bx
bt esi, 0xf
jae 0x140430717
btr esi, 0xf
mov dword [rsp + 0x50], esi
lea rcx, [rbp + 0x238]
call fcn.140438120
mov qword [0x14088f030], 2
mov rcx, r14
call fcn.14042e880
xor al, al
jmp 0x14043127b
mov rcx, qword [rbp - 0x58]
call fcn.1403e38dc
mov rbx, rax
mov qword [rbp - 0x50], rax
mov qword [rbp + 0x78], rax
lea r9, [rbp - 0x58]
xor r8d, r8d
lea edx, [r8 + 1]
mov rcx, rax
call qword [0x14088f078]
test eax, eax
jne 0x140430874
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 2
mov r9d, 0x1d3
lea r8, str.C:UsersShadowDownloads_sentry_native__1_externalcrashpadclientcrashpad_client_win.cc
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace::StartHandlerProcess_class_std::unique_ptr_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData_struct_std::default_delete_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData____
lea rcx, [rbp + 0x130]
call fcn.1404380a0
nop
or esi, 0x10
mov dword [rsp + 0x50], esi
lea rdx, str.InitializeProcThreadAttributeList
mov rcx, rax
call fcn.1400c90c0
nop
test sil, 0x10
je 0x1404307c4
and esi, 0xffffffef
mov dword [rsp + 0x50], esi
lea rcx, [rbp + 0x130]
call fcn.1404383e0
nop
test rbx, rbx
je 0x1404307d2
mov rcx, rbx
call fcn.1403e3650
nop
mov rcx, r13
call fcn.140432960
xor ebx, ebx
mov qword [rsp + 0x78], rbx
mov rdx, qword [rbp + 0x5b0]
cmp rdx, 8
jb 0x140430827
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x598]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140430822
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1404313d1
call fcn.1403e3650
mov qword [rbp + 0x5a8], rbx
mov qword [rbp + 0x5b0], 7
mov word [rbp + 0x598], bx
bt esi, 0x10
jae 0x14043085a
btr esi, 0x10
mov dword [rsp + 0x50], esi
lea rcx, [rbp + 0x238]
call fcn.140438120
mov qword [0x14088f030], 2
mov rcx, r14
call fcn.14042e880
xor al, al
jmp 0x14043127b
mov rdi, qword [rbp + 0x78]
mov qword [rbp - 0x60], rdi
mov ecx, 0x40
call fcn.1403e3660
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], rax
add rax, 0x40
mov qword [rsp + 0x70], rax
lea rdx, [0x1405fa530]
lea rcx, [rsp + 0x60]
call fcn.14042e310
lea rdx, [0x1405fa538]
lea rcx, [rsp + 0x60]
call fcn.14042e310
lea rdx, [0x1405fa540]
lea rcx, [rsp + 0x60]
call fcn.14042e310
mov rdx, qword [r14]
add rdx, 0xe0
lea rcx, [rsp + 0x60]
call fcn.14042e310
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x60]
call fcn.14042e310
mov r13, qword [rbp + 0x60]
mov qword [rbp - 0x48], r13
lea rax, [r13 - 1]
cmp rax, 0xfffffffffffffffd
ja 0x140430963
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_GetFileType]
dec eax
test eax, 0xfffffffd
jne 0x140430963
mov r15, qword [rsp + 0x68]
mov qword [rbp + 0x88], r15
mov qword [rbp + 0x90], r15
mov r14, qword [rsp + 0x60]
mov qword [rbp + 0x98], r14
mov rax, r14
cmp r14, r15
je 0x140430955
nop word [rax + rax]
cmp qword [rax], r13
je 0x140430950
add rax, 8
cmp rax, r15
jne 0x140430940
jmp 0x140430955
cmp rax, r15
jne 0x14043096d
lea rdx, [rbp - 0x48]
lea rcx, [rsp + 0x60]
call fcn.14042e310
mov r14, qword [rsp + 0x60]
mov r15, qword [rsp + 0x68]
mov r13, qword [rbp + 0x68]
mov qword [rbp - 0x40], r13
lea rax, [r13 - 1]
cmp rax, 0xfffffffffffffffd
ja 0x1404309dd
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_GetFileType]
dec eax
test eax, 0xfffffffd
jne 0x1404309dd
mov qword [rbp + 0xa0], r15
mov qword [rbp + 0xa8], r15
mov qword [rbp + 0xb0], r14
mov rax, r14
cmp r14, r15
je 0x1404309c5
nop
cmp qword [rax], r13
je 0x1404309c0
add rax, 8
cmp rax, r15
jne 0x1404309b0
jmp 0x1404309c5
cmp rax, r15
jne 0x1404309dd
lea rdx, [rbp - 0x40]
lea rcx, [rsp + 0x60]
call fcn.14042e310
mov r15, qword [rsp + 0x68]
mov r14, qword [rsp + 0x60]
mov r13, qword [rbp + 0x70]
mov qword [rbp - 0x38], r13
lea rax, [r13 - 1]
cmp rax, 0xfffffffffffffffd
ja 0x140430a4d
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_GetFileType]
dec eax
test eax, 0xfffffffd
jne 0x140430a4d
mov qword [rbp + 0xb8], r15
mov qword [rbp + 0xd8], r15
mov qword [rbp + 0xc0], r14
mov rax, r14
cmp r14, r15
je 0x140430a35
nop
cmp qword [rax], r13
je 0x140430a30
add rax, 8
cmp rax, r15
jne 0x140430a20
jmp 0x140430a35
cmp rax, r15
jne 0x140430a4d
lea rdx, [rbp - 0x38]
lea rcx, [rsp + 0x60]
call fcn.14042e310
mov r15, qword [rsp + 0x68]
mov r14, qword [rsp + 0x60]
sub r15, r14
sar r15, 3
lea rax, [r15*8]
xor r15d, r15d
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], rax
mov r9, r14
xor edx, edx
mov r8d, 0x20002
mov rcx, qword [rbp + 0x78]
call qword [0x14088f088]
test eax, eax
jne 0x140430bf3
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 2
mov r9d, 0x1ed
lea r8, str.C:UsersShadowDownloads_sentry_native__1_externalcrashpadclientcrashpad_client_win.cc
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace::StartHandlerProcess_class_std::unique_ptr_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData_struct_std::default_delete_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData____
lea rcx, [rbp + 0x130]
call fcn.1404380a0
nop
or esi, 0x20
mov dword [rsp + 0x50], esi
lea rdx, str.UpdateProcThreadAttribute
mov rcx, rax
call fcn.1400c90c0
nop
test sil, 0x20
je 0x140430aee
and esi, 0xffffffdf
mov dword [rsp + 0x50], esi
lea rcx, [rbp + 0x130]
call fcn.1404383e0
nop
test rdi, rdi
je 0x140430b10
mov eax, dword [r12]
cmp dword [0x14088f070], eax
jg 0x1404313d7
mov rcx, rdi
call qword [0x14088f068]
mov qword [rbp - 0x60], r15
test rbx, rbx
je 0x140430b1e
mov rcx, rbx
call fcn.1403e3650
nop
test r14, r14
je 0x140430b72
mov rax, qword [rsp + 0x70]
sub rax, r14
sar rax, 3
lea rdx, [rax*8]
mov rax, r14
cmp rdx, 0x1000
jb 0x140430b5c
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14043141e
mov rcx, r14
call fcn.1403e3650
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], r15
mov rcx, qword [rsp + 0x78]
call fcn.140432960
mov qword [rsp + 0x78], r15
mov r8, qword [rbp + 0x5b0]
cmp r8, 8
jb 0x140430ba4
inc r8
mov rdx, qword [rbp + 0x598]
lea rcx, [rbp + 0x598]
call fcn.1400c6870
mov qword [rbp + 0x5a8], r15
mov qword [rbp + 0x5b0], 7
mov word [rbp + 0x598], r15w
bt esi, 0x11
jae 0x140430bd8
btr esi, 0x11
mov dword [rsp + 0x50], esi
lea rcx, [rbp + 0x238]
call fcn.140438120
mov qword [0x14088f030], 2
mov rcx, qword [rbp - 0x78]
call fcn.14042e880
xor al, al
jmp 0x14043127b
mov r15, qword [rsp + 0x70]
mov r13, qword [rsp + 0x78]
xor ecx, ecx
jmp 0x140430c12
xor ecx, ecx
mov dword [rbp - 0x68], ecx
mov dword [rbp + 0x10], 0x68
mov r14, qword [rsp + 0x60]
mov rax, qword [rbp - 0x78]
mov rax, qword [rax]
mov rdx, qword [rax + 0x10]
cmp rdx, 0xc
jb 0x140430cc4
add rdx, 0xfffffffffffffff4
mov qword [rbp + 0x628], rcx
mov qword [rbp + 0x630], 7
mov word [rbp + 0x618], cx
mov rcx, qword [rax + 0x10]
cmp rcx, rdx
jb 0x140431424
mov qword [rbp + 0xc8], 0xffffffffffffffff
sub rcx, rdx
mov qword [rbp + 0xd0], rcx
mov r8, 0xffffffffffffffff
cmp rcx, r8
cmovb r8, rcx
cmp qword [rax + 0x18], 8
jb 0x140430c7e
mov rax, qword [rax]
lea rdx, [rax + rdx*2]
lea rcx, [rbp + 0x618]
call fcn.140102060
or esi, 0x40040
mov dword [rsp + 0x50], esi
lea rcx, [rbp + 0x618]
cmp qword [rbp + 0x630], 8
cmovae rcx, qword [rbp + 0x618]
lea rdx, str.rundll32.exe
call fcn.140409dcc
test eax, eax
jne 0x140430cc4
mov r12b, 1
jmp 0x140430cc7
xor r12b, r12b
test sil, 0x40
je 0x140430d39
and esi, 0xffffffbf
mov dword [rsp + 0x50], esi
mov rdx, qword [rbp + 0x630]
cmp rdx, 8
jb 0x140430d1a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x618]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140430d15
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14043142a
call fcn.1403e3650
xor r8d, r8d
mov qword [rbp + 0x628], r8
mov qword [rbp + 0x630], 7
mov word [rbp + 0x618], r8w
jmp 0x140430d3c
xor r8d, r8d
test r12b, r12b
mov r12, qword [rbp - 0x78]
je 0x140430d4a
mov rcx, r8
jmp 0x140430d58
mov rcx, qword [r12]
cmp qword [rcx + 0x18], 8
jb 0x140430d58
mov rcx, qword [rcx]
lea rdx, [rbp + 0x598]
cmp qword [rbp + 0x5b0], 8
cmovae rdx, qword [rbp + 0x598]
lea rax, [rbp + 0xe8]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0x10]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r8
mov qword [rsp + 0x30], r8
mov eax, dword [rbp - 0x68]
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x140430f15
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 2
mov r9d, 0x20f
lea r8, str.C:UsersShadowDownloads_sentry_native__1_externalcrashpadclientcrashpad_client_win.cc
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace::StartHandlerProcess_class_std::unique_ptr_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData_struct_std::default_delete_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData____
lea rcx, [rbp + 0x130]
call fcn.1404380a0
nop
bts esi, 7
mov dword [rsp + 0x50], esi
lea rdx, str.CreateProcess
mov rcx, rax
call fcn.1400c90c0
nop
test sil, sil
jns 0x140430e15
btr esi, 7
mov dword [rsp + 0x50], esi
lea rcx, [rbp + 0x130]
call fcn.1404383e0
nop
test rdi, rdi
je 0x140430e3b
mov rax, qword [rbp - 0x70]
mov eax, dword [rax]
cmp dword [0x14088f070], eax
jg 0x140431430
mov rcx, rdi
call qword [0x14088f068]
xor edi, edi
mov qword [rbp - 0x60], rdi
test rbx, rbx
je 0x140430e49
mov rcx, rbx
call fcn.1403e3650
nop
test r14, r14
je 0x140430e98
sub r15, r14
sar r15, 3
lea rdx, [r15*8]
mov rax, r14
cmp rdx, 0x1000
jb 0x140430e82
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1404312ab
mov rcx, r14
call fcn.1403e3650
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], rdi
mov rcx, r13
call fcn.140432960
mov qword [rsp + 0x78], rdi
mov r8, qword [rbp + 0x5b0]
cmp r8, 8
jb 0x140430ec8
inc r8
mov rdx, qword [rbp + 0x598]
lea rcx, [rbp + 0x598]
call fcn.1400c6870
mov qword [rbp + 0x5a8], rdi
mov qword [rbp + 0x5b0], 7
mov word [rbp + 0x598], di
bt esi, 0x13
jae 0x140430efb
btr esi, 0x13
mov dword [rsp + 0x50], esi
lea rcx, [rbp + 0x238]
call fcn.140438120
mov qword [0x14088f030], 2
mov rcx, r12
call fcn.14042e880
xor al, al
jmp 0x14043127b
mov rcx, qword [rbp + 0xf0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
jne 0x140430f70
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 1
mov r9d, 0x214
lea r8, str.C:UsersShadowDownloads_sentry_native__1_externalcrashpadclientcrashpad_client_win.cc
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace::StartHandlerProcess_class_std::unique_ptr_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData_struct_std::default_delete_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData____
lea rcx, [rbp + 0x130]
call fcn.1404380a0
nop
bts esi, 8
mov dword [rsp + 0x50], esi
lea rdx, str.CloseHandle_thread
mov rcx, rax
call fcn.1400c90c0
nop
bt esi, 8
jae 0x140430f8a
btr esi, 8
mov dword [rsp + 0x50], esi
lea rcx, [rbp + 0x130]
call fcn.1404383e0
mov rcx, qword [rbp + 0xe8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
jne 0x140430fe5
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 1
mov r9d, 0x217
lea r8, str.C:UsersShadowDownloads_sentry_native__1_externalcrashpadclientcrashpad_client_win.cc
lea rdx, str.bool___cdecl_crashpad::_anonymous_namespace::StartHandlerProcess_class_std::unique_ptr_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData_struct_std::default_delete_struct_crashpad::_anonymous_namespace::BackgroundHandlerStartThreadData____
lea rcx, [rbp + 0x390]
call fcn.1404380a0
nop
bts esi, 9
mov dword [rsp + 0x50], esi
lea rdx, str.CloseHandle_process
mov rcx, rax
call fcn.1400c90c0
nop
bt esi, 9
jae 0x140430fff
btr esi, 9
mov dword [rsp + 0x50], esi
lea rcx, [rbp + 0x390]
call fcn.1404383e0
mov r12, qword [r12]
mov rcx, qword [r12 + 0xe0]
cmp rcx, 0xffffffffffffffff
je 0x140431016
call fcn.140432950
mov qword [r12 + 0xe0], 0xffffffffffffffff
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x10c], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x11c], xmm1
mov dword [rbp + 0x108], 2
xor eax, eax
mov qword [rbp + 0x6f8], rax
mov dword [rbp + 0x700], eax
mov r12, qword [rbp - 0x78]
mov rcx, qword [r12]
add rcx, 0xc0
lea r8, [rbp + 0x6f8]
lea rdx, [rbp + 0x108]
call fcn.140436800
test al, al
jne 0x14043117b
test rdi, rdi
je 0x1404310a1
mov rax, qword [rbp - 0x70]
mov eax, dword [rax]
cmp dword [0x14088f070], eax
jg 0x140431477
mov rcx, rdi
call qword [0x14088f068]
xor edi, edi
mov qword [rbp - 0x60], rdi
test rbx, rbx
je 0x1404310af
mov rcx, rbx
call fcn.1403e3650
nop
test r14, r14
je 0x1404310fe
sub r15, r14
sar r15, 3
lea rdx, [r15*8]
mov rax, r14
cmp rdx, 0x1000
jb 0x1404310e8
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1404312ab
mov rcx, r14
call fcn.1403e3650
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], rdi
mov rcx, r13
call fcn.140432960
mov qword [rsp + 0x78], rdi
mov r8, qword [rbp + 0x5b0]
cmp r8, 8
jb 0x14043112e
inc r8
mov rdx, qword [rbp + 0x598]
lea rcx, [rbp + 0x598]
call fcn.1400c6870
mov qword [rbp + 0x5a8], rdi
mov qword [rbp + 0x5b0], 7
mov word [rbp + 0x598], di
bt esi, 0x14
jae 0x140431161
btr esi, 0x14
mov dword [rsp + 0x50], esi
lea rcx, [rbp + 0x238]
call fcn.140438120
mov qword [0x14088f030], 2
mov rcx, r12
call fcn.14042e880
xor al, al
jmp 0x14043127b
mov byte [rsp + 0x54], 1
test rdi, rdi
je 0x1404311a6
mov rax, qword [rbp - 0x70]
mov eax, dword [rax]
cmp dword [0x14088f070], eax
jg 0x1404314be
mov rcx, rdi
call qword [0x14088f068]
xor edi, edi
mov qword [rbp - 0x60], rdi
test rbx, rbx
je 0x1404311b4
mov rcx, rbx
call fcn.1403e3650
nop
test r14, r14
je 0x140431203
sub r15, r14
sar r15, 3
lea rdx, [r15*8]
mov rax, r14
cmp rdx, 0x1000
jb 0x1404311ed
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1404312ab
mov rcx, r14
call fcn.1403e3650
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], rdi
mov rcx, r13
call fcn.140432960
mov qword [rsp + 0x78], rdi
mov r8, qword [rbp + 0x5b0]
cmp r8, 8
jb 0x140431233
inc r8
mov rdx, qword [rbp + 0x598]
lea rcx, [rbp + 0x598]
call fcn.1400c6870
mov qword [rbp + 0x5a8], rdi
mov qword [rbp + 0x5b0], 7
mov word [rbp + 0x598], di
bt esi, 0x15
jae 0x140431266
btr esi, 0x15
mov dword [rsp + 0x50], esi
lea rcx, [rbp + 0x238]
call fcn.140438120
mov qword [0x14088f030], 1
mov rcx, r12
call fcn.14042e880
mov al, 1
mov rcx, qword [rbp + 0x848]
xor rcx, rsp
call fcn.1403e3630
lea r11, [rsp + 0x950]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1403fd768
nop
call fcn.1403fd768
nop
call fcn.1403fd768
nop
call fcn.1403fd768
nop
call fcn.1403fd768
nop
call fcn.1403fd768
nop
call fcn.1403fd768
nop
call fcn.1403fd768
nop
call fcn.1403fd768
int3
call fcn.1400c4e70
nop
call fcn.1403fd768
nop
call fcn.1403fd768
nop
call fcn.1403fd768
nop
call fcn.1403fd768
nop
call fcn.1403fd768
int3
call fcn.1400c4f10
nop
call fcn.1403fd768
nop
call fcn.1403fd768
nop
call fcn.1403fd768
nop
call fcn.1403fd768
nop
call fcn.1403fd768
nop
call fcn.1403fd768
nop
call fcn.1403fd768
nop
lea rcx, [0x14088f080]
call fcn.1403e3aa0
cmp dword [0x14088f080], 0xffffffff
jne 0x1404304ce
xor r8d, r8d
lea rdx, str.::InitializeProcThreadAttributeList
lea rcx, str.kernel32.dll
call fcn.1404362b0
mov qword [0x14088f078], rax
lea rcx, [0x14088f080]
call fcn.1403e3a34
jmp 0x1404304ce
lea rcx, [0x14088f090]
call fcn.1403e3aa0
cmp dword [0x14088f090], 0xffffffff
jne 0x1404304de
cmp qword [0x14088f078], 0
je 0x1404313b7
xor r8d, r8d
lea rdx, str.::UpdateProcThreadAttribute
lea rcx, str.kernel32.dll
call fcn.1404362b0
jmp 0x1404313b9
xor eax, eax
mov qword [0x14088f088], rax
lea rcx, [0x14088f090]
call fcn.1403e3a34
jmp 0x1404304de
call fcn.1403fd768
nop
lea rcx, [0x14088f070]
call fcn.1403e3aa0
cmp dword [0x14088f070], 0xffffffff
jne 0x140430b03
mov r8b, 1
lea rdx, str.::DeleteProcThreadAttributeList
lea rcx, str.kernel32.dll
call fcn.1404362b0
mov qword [0x14088f068], rax
lea rcx, [0x14088f070]
call fcn.1403e3a34
jmp 0x140430b03
call fcn.1403fd768
nop
call fcn.1400d10f0
int3
call fcn.1403fd768
nop
lea rcx, [0x14088f070]
call fcn.1403e3aa0
cmp dword [0x14088f070], 0xffffffff
jne 0x140430e2c
mov r8b, 1
lea rdx, str.::DeleteProcThreadAttributeList
lea rcx, str.kernel32.dll
call fcn.1404362b0
mov qword [0x14088f068], rax
lea rcx, [0x14088f070]
call fcn.1403e3a34
jmp 0x140430e2c
lea rcx, [0x14088f070]
call fcn.1403e3aa0
cmp dword [0x14088f070], 0xffffffff
jne 0x140431092
mov r8b, 1
lea rdx, str.::DeleteProcThreadAttributeList
lea rcx, str.kernel32.dll
call fcn.1404362b0
mov qword [0x14088f068], rax
lea rcx, [0x14088f070]
call fcn.1403e3a34
jmp 0x140431092
lea rcx, [0x14088f070]
call fcn.1403e3aa0
cmp dword [0x14088f070], 0xffffffff
jne 0x140431197
mov r8b, 1
lea rdx, str.::DeleteProcThreadAttributeList
lea rcx, str.kernel32.dll
call fcn.1404362b0
mov qword [0x14088f068], rax
lea rcx, [0x14088f070]
call fcn.1403e3a34
jmp 0x140431197