Function at 0x14003d680
Capabilities:
Create process on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x348
movaps xmmword [rsp + 0x330], xmm7
movaps xmmword [rsp + 0x320], xmm6
mov r15, rcx
mov rax, qword [0x140119028]
xor rax, rsp
mov qword [rsp + 0x318], rax
call fcn.14004fbe0
test al, al
jne 0x14003eb40
xorps xmm0, xmm0
lea rdx, [rsp + 0x300]
movaps xmmword [rdx], xmm0
mov qword [rdx + 0x10], 0
mov rcx, qword [r15]
call fcn.14004fc10
mov r8, qword [r15]
mov rbp, qword [r8 + 0x78]
mov rdi, qword [r8 + 0x80]
cmp rbp, rdi
je 0x14003d76a
lea rsi, [rsp + 0x150]
lea r14, [rsp + 0x2f0]
lea rbx, [rsp + 0x300]
movzx eax, byte [rbp + 0x17]
test al, al
mov rcx, qword [rbp]
cmovns rcx, rbp
mov qword [rsp + 0x2f0], rcx
cmovs rax, qword [rbp + 8]
mov qword [rsp + 0x2f8], rax
mov rcx, rsi
mov rdx, r14
call fcn.14006da60
mov rcx, rsi
mov rdx, rbx
call fcn.14004fc10
cmp byte [rsp + 0x167], 0
jns 0x14003d75e
mov rcx, qword [rsp + 0x150]
call fcn.1400897f8
add rbp, 0x18
cmp rbp, rdi
jne 0x14003d70e
mov r8, qword [r15]
movzx eax, byte [r8 + 0x2f]
test al, al
jns 0x14003d777
mov rax, qword [r8 + 0x20]
test rax, rax
je 0x14003d7ea
add r8, 0x18
lea rdx, [rsp + 0x80]
mov byte [rdx + 0x17], 8
movabs rax, 0x6573616261746164
mov qword [rdx], rax
mov byte [rdx + 8], 0
lea rsi, [rsp + 0x150]
mov rcx, rsi
call fcn.14003f080
lea rdx, [rsp + 0x300]
mov rcx, rsi
call fcn.14004fc10
cmp byte [rsi + 0x17], 0
jns 0x14003d7d0
mov rcx, qword [rsp + 0x150]
call fcn.1400897f8
cmp byte [rsp + 0x97], 0
jns 0x14003d7e7
mov rcx, qword [rsp + 0x80]
call fcn.1400897f8
mov r8, qword [r15]
movzx eax, byte [r8 + 0x47]
test al, al
jns 0x14003d7f7
mov rax, qword [r8 + 0x38]
test rax, rax
je 0x14003d871
add r8, 0x30
lea rdx, [rsp + 0x80]
mov byte [rdx + 0x17], 0xb
movabs rax, 0x2d7363697274656d
mov qword [rdx], rax
mov dword [rdx + 7], 0x7269642d
mov byte [rdx + 0xb], 0
lea rsi, [rsp + 0x150]
mov rcx, rsi
call fcn.14003f080
lea rdx, [rsp + 0x300]
mov rcx, rsi
call fcn.14004fc10
cmp byte [rsi + 0x17], 0
jns 0x14003d857
mov rcx, qword [rsp + 0x150]
call fcn.1400897f8
cmp byte [rsp + 0x97], 0
jns 0x14003d86e
mov rcx, qword [rsp + 0x80]
call fcn.1400897f8
mov r8, qword [r15]
movzx eax, byte [r8 + 0x5f]
test al, al
js 0x14003d87f
mov rcx, rax
jmp 0x14003d883
mov rcx, qword [r8 + 0x50]
test rcx, rcx
je 0x14003d934
lea rcx, [r8 + 0x48]
test al, al
cmovs rcx, qword [r8 + 0x48]
lea rdx, [rsp + 0x2e0]
mov qword [rdx], rcx
cmovs rax, qword [r8 + 0x50]
mov qword [rdx + 8], rax
lea rsi, [rsp + 0x80]
mov rcx, rsi
call fcn.14006da60
lea rdx, [rsp + 0x100]
mov byte [rdx + 0x17], 3
mov dword [rdx], 0x6c7275
lea rdi, [rsp + 0x150]
mov rcx, rdi
mov r8, rsi
call fcn.14003f080
lea rdx, [rsp + 0x300]
mov rcx, rdi
call fcn.14004fc10
cmp byte [rdi + 0x17], 0
jns 0x14003d903
mov rcx, qword [rsp + 0x150]
call fcn.1400897f8
cmp byte [rsp + 0x117], 0
jns 0x14003d91a
mov rcx, qword [rsp + 0x100]
call fcn.1400897f8
cmp byte [rsp + 0x97], 0
jns 0x14003d931
mov rcx, qword [rsp + 0x80]
call fcn.1400897f8
mov r8, qword [r15]
mov qword [rsp + 0x58], r15
mov r13, qword [r8 + 0x60]
lea rbp, [r8 + 0x68]
cmp r13, rbp
je 0x14003db10
lea rdi, [rsp + 0x2b0]
xorps xmm6, xmm6
lea rbx, [rsp + 0x80]
lea r14, [rsp + 0x2d0]
lea rsi, [rsp + 0x150]
lea r15, [rsp + 0x290]
lea r12, [rsp + 0x300]
lea rdx, [r13 + 0x20]
mov rcx, rdi
mov r8b, 0x3d
call fcn.1400c11c0
movzx r8d, byte [r13 + 0x4f]
test r8b, r8b
jns 0x14003d9a0
mov r8, qword [r13 + 0x40]
mov rdx, qword [r13 + 0x38]
jmp 0x14003d9a4
lea rdx, [r13 + 0x38]
mov rcx, rdi
call fcn.1400684d0
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x110], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x100], xmm0
movups xmmword [rax], xmm6
mov qword [rax + 0x10], 0
movzx eax, byte [rsp + 0x117]
test al, al
mov rcx, qword [rsp + 0x100]
lea rdx, [rsp + 0x100]
cmovns rcx, rdx
mov qword [rsp + 0x2d0], rcx
cmovs rax, qword [rsp + 0x108]
mov qword [rsp + 0x2d8], rax
mov rcx, rbx
mov rdx, r14
call fcn.14006da60
mov byte [rsp + 0x2a7], 0xa
movabs rax, 0x697461746f6e6e61
mov qword [rsp + 0x290], rax
mov word [rsp + 0x298], 0x6e6f
mov byte [rsp + 0x29a], 0
mov rcx, rsi
mov rdx, r15
mov r8, rbx
call fcn.14003f080
mov rcx, rsi
mov rdx, r12
call fcn.14004fc10
cmp byte [rsp + 0x167], 0
jns 0x14003da6c
mov rcx, qword [rsp + 0x150]
call fcn.1400897f8
cmp byte [rsp + 0x2a7], 0
jns 0x14003da83
mov rcx, qword [rsp + 0x290]
call fcn.1400897f8
cmp byte [rsp + 0x97], 0
jns 0x14003da9a
mov rcx, qword [rsp + 0x80]
call fcn.1400897f8
cmp byte [rsp + 0x117], 0
jns 0x14003dab1
mov rcx, qword [rsp + 0x100]
call fcn.1400897f8
cmp byte [rsp + 0x2c7], 0
jns 0x14003dac8
mov rcx, qword [rsp + 0x2b0]
call fcn.1400897f8
mov rcx, qword [r13 + 8]
test rcx, rcx
je 0x14003dade
mov rax, rcx
mov rcx, qword [rcx]
test rcx, rcx
jne 0x14003dad1
jmp 0x14003dafc
mov rax, qword [r13 + 0x10]
cmp qword [rax], r13
je 0x14003dafc
add r13, 0x10
mov rcx, qword [r13]
lea r13, [rcx + 0x10]
mov rax, qword [rcx + 0x10]
cmp qword [rax], rcx
jne 0x14003daeb
mov r13, rax
cmp rax, rbp
jne 0x14003d97d
mov rax, qword [rsp + 0x58]
mov r8, qword [rax]
mov rsi, qword [r8 + 0x90]
mov rbx, qword [r8 + 0x98]
cmp rsi, rbx
je 0x14003dbbb
movabs r15, 0x656d686361747461
lea rdi, [rsp + 0x150]
lea r14, [rsp + 0x80]
lea rbp, [rsp + 0x300]
mov byte [rsp + 0x97], 0xa
mov qword [rsp + 0x80], r15
mov word [rsp + 0x88], 0x746e
mov byte [rsp + 0x8a], 0
mov rcx, rdi
mov rdx, r14
mov r8, rsi
call fcn.14003f080
mov rcx, rdi
mov rdx, rbp
call fcn.14004fc10
cmp byte [rsp + 0x167], 0
jns 0x14003db9b
mov rcx, qword [rsp + 0x150]
call fcn.1400897f8
cmp byte [rsp + 0x97], 0
jns 0x14003dbb2
mov rcx, qword [rsp + 0x80]
call fcn.1400897f8
add rsi, 0x18
cmp rsi, rbx
jne 0x14003db49
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, 0x1f0fff
mov edx, 1
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
je 0x14003df12
mov rdi, rax
movabs rbp, 0xaaaaaaaaaaaaaaaa
lea rbx, [rsp + 0x100]
mov qword [rbx + 0x40], rbp
movaps xmm6, xmmword [0x1400ffac0]
movaps xmmword [rbx + 0x30], xmm6
movaps xmmword [rbx + 0x20], xmm6
movaps xmmword [rbx + 0x10], xmm6
movaps xmmword [rbx], xmm6
mov r15, qword [rsp + 0x58]
mov rax, qword [r15]
mov rax, qword [rax + 0xc8]
mov r9, qword [0x1401213a8]
mov r8, qword [0x1401213a0]
mov rdx, qword [0x140121398]
lea rcx, [0x140127418]
mov qword [rsp + 0x40], rcx
lea rcx, [0x140127408]
mov qword [rsp + 0x38], rcx
lea rcx, [0x1401273f8]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rax
mov rcx, rbx
call fcn.14004fd90
lea rsi, [rsp + 0x2b0]
mov rcx, rbx
mov rdx, rsi
call fcn.14004fdc0
movups xmm0, xmmword [str.__initial_client_data]
movaps xmmword [rsp + 0x290], xmm0
movabs rax, 0x3d617461642d746e
mov qword [rsp + 0x29e], rax
mov word [rsp + 0x2a6], 0x1600
movzx r8d, byte [rsi + 0x17]
test r8b, r8b
jns 0x14003dcbe
mov r8, qword [rsp + 0x2b8]
mov rsi, qword [rsp + 0x2b0]
lea r12, [rsp + 0x290]
mov rcx, r12
mov rdx, rsi
call fcn.1400684d0
mov rcx, qword [rax + 0x10]
lea rbx, [rsp + 0x80]
mov qword [rbx + 0x10], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rbx], xmm0
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov qword [rax + 0x10], 0
movzx eax, byte [rbx + 0x17]
test al, al
mov rcx, qword [rbx]
cmovns rcx, rbx
lea rdx, [rsp + 0xf0]
mov qword [rdx], rcx
cmovs rax, qword [rbx + 8]
mov qword [rdx + 8], rax
lea r13, [rsp + 0x150]
mov rcx, r13
call fcn.14006da60
lea rbx, [rsp + 0x300]
mov rcx, r13
mov rdx, rbx
call fcn.14004fc10
cmp byte [r13 + 0x17], 0
jns 0x14003dd4d
mov rcx, qword [rsp + 0x150]
call fcn.1400897f8
cmp byte [rsp + 0x97], 0
jns 0x14003dd64
mov rcx, qword [rsp + 0x80]
call fcn.1400897f8
cmp byte [rsp + 0x2a7], 0
jns 0x14003dd7b
mov rcx, qword [rsp + 0x290]
call fcn.1400897f8
cmp byte [rsp + 0x2c7], 0
jns 0x14003dd92
mov rcx, qword [rsp + 0x2b0]
call fcn.1400897f8
xorps xmm7, xmm7
movaps xmmword [rsp + 0xb0], xmm7
movaps xmmword [rsp + 0xe0], xmm7
movaps xmmword [rsp + 0xd0], xmm7
movaps xmmword [rsp + 0xc0], xmm7
movaps xmmword [rsp + 0xa0], xmm7
movaps xmmword [rsp + 0x90], xmm7
movaps xmmword [rsp + 0x80], xmm7
mov dword [rsp + 0xbc], 0x100
mov rsi, qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov ecx, 0xfffffff6
call rsi
mov qword [rsp + 0xd0], rax
mov ecx, 0xfffffff5
call rsi
mov qword [rsp + 0xd8], rax
mov ecx, 0xfffffff4
call rsi
mov qword [rsp + 0xe0], rax
movaps xmmword [rsp + 0x2b0], xmm7
mov qword [rsp + 0x2c0], 0
mov eax, dword [0x140127458]
mov ecx, dword [0x140122788]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14003ea95
mov eax, dword [0x140127468]
mov ecx, dword [0x140122788]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14003eadc
mov rax, qword [0x140127450]
test rax, rax
je 0x14003df87
cmp qword [0x140127460], 0
je 0x14003df87
mov dword [rsp + 0x80], 0x70
lea r9, [rsp + 0x290]
mov qword [r9], rbp
xor ecx, ecx
mov edx, 1
xor r8d, r8d
call qword [0x140135008]
test eax, eax
je 0x14003dfcb
mov ecx, 2
call fcn.140074720
test al, al
je 0x14003e304
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rsi, [rsp + 0x150]
mov rcx, rsi
mov r8d, 0x1c4
mov r9d, 2
call fcn.140042260
lea rcx, [rsp + 0x160]
lea rdx, str.InitializeProcThreadAttributeList__size__succeeded__expected_failure
mov r8d, 0x44
call fcn.1400bcbd0
mov rcx, rsi
call fcn.140042750
jmp 0x14003e304
mov ecx, 2
call fcn.140074720
xor esi, esi
mov ebx, 0
test al, al
mov r15, qword [rsp + 0x58]
je 0x14003e322
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rsi, [rsp + 0x150]
mov rcx, rsi
mov r8d, 0x193
mov r9d, 2
call fcn.1400dd030
lea rcx, [rsp + 0x160]
lea rdx, [0x140103930]
mov r8d, 0xb
call fcn.1400bcbd0
mov rcx, rsi
call fcn.1400dd0b0
xor esi, esi
xor ebx, ebx
jmp 0x14003e322
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x60], rbx
mov dword [rsp + 0x80], 0x68
xor r14d, r14d
xor esi, esi
mov rdx, qword [r15]
movzx r8d, byte [rdx + 0x17]
test r8b, r8b
js 0x14003dfb9
cmp r8b, 0xc
jb 0x14003dfc4
jmp 0x14003e0c7
cmp qword [rdx + 8], 0xc
jae 0x14003e0c3
xor ebx, ebx
jmp 0x14003e120
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x14003e2f2
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x60], rbx
lea rsi, [rsp + 0x290]
mov rcx, qword [rsi]
call fcn.14008982c
mov r14, rax
mov qword [rsp + 0xe8], rax
mov rax, qword [0x140127450]
mov rcx, r14
mov edx, 1
xor r8d, r8d
mov r9, rsi
call qword [0x140135008]
test eax, eax
je 0x14003e387
mov qword [rsp + 0x68], r14
mov r14, qword [rsp + 0x2b0]
mov r15, qword [rsp + 0x2c0]
mov rax, r15
sub rax, r14
cmp rax, 0x3f
ja 0x14003e090
mov rsi, qword [rsp + 0x2b8]
sub rsi, r14
mov ecx, 0x40
call fcn.1400897bc
mov rbp, rax
lea rdi, [rax + rsi]
mov r15, rax
add r15, 0x40
test rsi, rsi
jg 0x14003eb43
mov qword [rsp + 0x2b0], rbp
mov qword [rsp + 0x2b8], rdi
mov qword [rsp + 0x2c0], r15
test r14, r14
jne 0x14003eb56
movabs r12, 0x1fffffffffffffff
mov rsi, qword [rsp + 0x2b8]
cmp rsi, r15
je 0x14003e3a2
mov rax, qword [0x140121398]
mov qword [rsi], rax
add rsi, 8
mov rbx, qword [rsp + 0x50]
jmp 0x14003e55f
mov r8, qword [rdx + 8]
add r8, 0xfffffffffffffff4
lea rax, [rdx + 0x18]
mov qword [rsp + 0x20], rax
mov rcx, r13
mov r9, 0xffffffffffffffff
call fcn.1400309f0
cmp byte [rsp + 0x167], 0
jns 0x14003e0f5
mov r13, qword [rsp + 0x150]
lea rdx, str.rundll32.exe
mov rcx, r13
call fcn.1400a4244
test eax, eax
sete bl
cmp byte [rsp + 0x167], 0
jns 0x14003e120
mov rcx, qword [rsp + 0x150]
call fcn.1400897f8
mov qword [rsp + 0x2a0], rbp
movaps xmmword [rsp + 0x290], xmm6
cmp byte [rsp + 0x317], 0
jns 0x14003e147
mov rax, qword [rsp + 0x300]
mov qword [rsp + 0x60], rax
test bl, bl
je 0x14003e14f
xor ecx, ecx
jmp 0x14003e15b
mov rcx, qword [r15]
cmp byte [rcx + 0x17], 0
jns 0x14003e15b
mov rcx, qword [rcx]
mov qword [rsp + 0x48], r12
lea rax, [rsp + 0x80]
mov qword [rsp + 0x40], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], 1
mov rdx, qword [rsp + 0x60]
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x14003e251
mov rcx, qword [rsp + 0x298]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, eax
mov ecx, 1
call fcn.140074720
test al, al
je 0x14003e1c0
test esi, esi
je 0x14003e407
mov rcx, qword [rsp + 0x290]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, eax
mov ecx, 1
call fcn.140074720
test al, al
je 0x14003e1e6
test esi, esi
je 0x14003e45a
mov rsi, qword [r15]
mov rcx, qword [rsi + 0xc8]
cmp rcx, 0xffffffffffffffff
je 0x14003e206
call fcn.14004f9b0
mov qword [rsi + 0xc8], 0xffffffffffffffff
mov qword [rsi + 0xc8], 0xffffffffffffffff
xorps xmm0, xmm0
lea rdx, [rsp + 0x150]
movups xmmword [rdx + 0x14], xmm0
movups xmmword [rdx + 4], xmm0
mov dword [rdx], 2
lea r8, [rsp + 0x70]
mov dword [r8 + 8], 0
mov qword [r8], 0
mov ecx, 0xa8
add rcx, qword [r15]
call fcn.14004f050
mov ebx, eax
mov esi, eax
jmp 0x14003e26a
mov ecx, 2
call fcn.140074720
xor ebx, ebx
mov esi, 0
test al, al
jne 0x14003e4ad
test r14, r14
je 0x14003e2de
mov eax, dword [0x140127478]
mov ecx, dword [0x140122788]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jle 0x14003e2ce
lea rcx, [0x140127478]
call fcn.140089910
cmp dword [0x140127478], 0xffffffff
jne 0x14003e2ce
lea rcx, str.kernel32.dll
lea rdx, str.::DeleteProcThreadAttributeList
mov r8b, 1
call fcn.14004fe60
mov qword [0x140127470], rax
lea rcx, [0x140127478]
call fcn.1400899a8
mov rax, qword [0x140127470]
mov rcx, r14
call qword [0x140135008]
test r14, r14
je 0x14003e2eb
mov rcx, r14
call fcn.140089834
mov rdi, qword [rsp + 0x50]
jmp 0x14003e308
mov ecx, 2
call fcn.140074720
test al, al
jne 0x14003e9a9
xor ebx, ebx
xor esi, esi
mov rcx, qword [rsp + 0x2b0]
test rcx, rcx
je 0x14003e31a
call fcn.1400897f8
mov rcx, rdi
call fcn.14004f9c0
cmp byte [rsp + 0x317], 0
jns 0x14003e339
mov rcx, qword [rsp + 0x300]
call fcn.1400897f8
xor eax, eax
cmp bl, 1
adc rax, 1
mov qword [0x140127448], rax
mov rcx, r15
call fcn.14003ef20
mov rcx, qword [rsp + 0x318]
xor rcx, rsp
call fcn.14008ab00
mov eax, esi
movaps xmm6, xmmword [rsp + 0x320]
movaps xmm7, xmmword [rsp + 0x330]
add rsp, 0x348
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov ecx, 2
call fcn.140074720
test al, al
jne 0x14003e9fc
xor esi, esi
xor ebx, ebx
jmp 0x14003e2de
mov rbx, qword [rsp + 0x2b0]
sub r15, rbx
mov rsi, r15
sar rsi, 3
lea rax, [rsi + 1]
cmp rax, r12
ja 0x14003eb36
mov rbp, r15
sar rbp, 2
cmp rbp, rax
cmovbe rbp, rax
movabs rax, 0x7ffffffffffffff8
cmp r15, rax
cmovae rbp, r12
test rbp, rbp
je 0x14003e500
cmp rbp, r12
ja 0x14003eb3b
lea rcx, [rbp*8]
call fcn.1400897bc
mov r14, rax
jmp 0x14003e503
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rsi, [rsp + 0x150]
mov rcx, rsi
mov r8d, 0x214
mov r9d, 1
call fcn.1400dd030
lea rcx, [rsp + 0x160]
lea rdx, str.CloseHandle_thread
mov r8d, 0x12
call fcn.1400bcbd0
mov rcx, rsi
call fcn.1400dd0b0
jmp 0x14003e1c0
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rsi, [rsp + 0x150]
mov rcx, rsi
mov r8d, 0x217
mov r9d, 1
call fcn.1400dd030
lea rcx, [rsp + 0x160]
lea rdx, str.CloseHandle_process
mov r8d, 0x13
call fcn.1400bcbd0
mov rcx, rsi
call fcn.1400dd0b0
jmp 0x14003e1e6
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rsi, [rsp + 0x150]
mov rcx, rsi
mov r8d, 0x20f
mov r9d, 2
call fcn.1400dd030
lea rcx, [rsp + 0x160]
lea rdx, str.CreateProcess
mov r8d, 0xd
call fcn.1400bcbd0
mov rcx, rsi
call fcn.1400dd0b0
jmp 0x14003e9a0
xor r14d, r14d
lea rdi, [r14 + rbp*8]
mov rax, qword [0x140121398]
lea rsi, [r14 + rsi*8]
add rsi, 8
mov qword [rsi - 8], rax
test r15, r15
jle 0x14003e52d
mov rcx, r14
mov rdx, rbx
mov r8, r15
call fcn.14008c580
mov qword [rsp + 0x2b0], r14
mov qword [rsp + 0x2b8], rsi
mov qword [rsp + 0x2c0], rdi
test rbx, rbx
mov rcx, rbx
mov rbx, qword [rsp + 0x50]
je 0x14003e55f
call fcn.1400897f8
mov rsi, qword [rsp + 0x2b8]
cmp rsi, qword [rsp + 0x2c0]
mov r15, qword [rsp + 0x58]
je 0x14003e584
mov rax, qword [0x1401213a0]
mov qword [rsi], rax
add rsi, 8
mov rdi, rsi
jmp 0x14003e646
mov rbx, qword [rsp + 0x2b0]
sub rsi, rbx
mov r15, rsi
sar r15, 3
lea rax, [r15 + 1]
cmp rax, r12
ja 0x14003eb36
mov rbp, rsi
sar rbp, 2
cmp rbp, rax
cmovbe rbp, rax
movabs rax, 0x7ffffffffffffff8
cmp rsi, rax
cmovae rbp, r12
test rbp, rbp
je 0x14003e5e2
cmp rbp, r12
ja 0x14003eb3b
lea rcx, [rbp*8]
call fcn.1400897bc
mov r14, rax
jmp 0x14003e5e5
xor r14d, r14d
lea rbp, [r14 + rbp*8]
mov rax, qword [0x1401213a0]
lea rdi, [r14 + r15*8]
add rdi, 8
mov qword [rdi - 8], rax
test rsi, rsi
jle 0x14003e60f
mov rcx, r14
mov rdx, rbx
mov r8, rsi
call fcn.14008c580
mov qword [rsp + 0x2b0], r14
mov qword [rsp + 0x2b8], rdi
mov qword [rsp + 0x2c0], rbp
test rbx, rbx
mov r15, qword [rsp + 0x58]
mov rcx, rbx
mov rbx, qword [rsp + 0x50]
je 0x14003e646
call fcn.1400897f8
mov rdi, qword [rsp + 0x2b8]
cmp rdi, qword [rsp + 0x2c0]
je 0x14003e666
mov rax, qword [0x1401213a8]
mov qword [rdi], rax
add rdi, 8
mov rsi, rdi
jmp 0x14003e723
mov rbx, qword [rsp + 0x2b0]
sub rdi, rbx
mov rsi, rdi
sar rsi, 3
lea rax, [rsi + 1]
cmp rax, r12
ja 0x14003eb36
mov rbp, rdi
sar rbp, 2
cmp rbp, rax
cmovbe rbp, rax
movabs rax, 0x7ffffffffffffff8
cmp rdi, rax
cmovae rbp, r12
test rbp, rbp
je 0x14003e6c4
cmp rbp, r12
ja 0x14003eb3b
lea rcx, [rbp*8]
call fcn.1400897bc
mov r14, rax
jmp 0x14003e6c7
xor r14d, r14d
lea rbp, [r14 + rbp*8]
mov rax, qword [0x1401213a8]
lea rsi, [r14 + rsi*8]
add rsi, 8
mov qword [rsi - 8], rax
test rdi, rdi
jle 0x14003e6f1
mov rcx, r14
mov rdx, rbx
mov r8, rdi
call fcn.14008c580
mov qword [rsp + 0x2b0], r14
mov qword [rsp + 0x2b8], rsi
mov qword [rsp + 0x2c0], rbp
test rbx, rbx
mov rcx, rbx
mov rbx, qword [rsp + 0x50]
je 0x14003e723
call fcn.1400897f8
mov rsi, qword [rsp + 0x2b8]
mov r15, qword [r15]
cmp rsi, qword [rsp + 0x2c0]
je 0x14003e753
mov rax, qword [r15 + 0xc8]
mov qword [rsi], rax
add rsi, 8
mov rbp, rsi
mov r15, qword [rsp + 0x58]
lea r12, [rsp + 0x290]
jmp 0x14003e81d
mov rbx, qword [rsp + 0x2b0]
sub rsi, rbx
mov rbp, rsi
sar rbp, 3
lea rax, [rbp + 1]
cmp rax, r12
ja 0x14003eb36
mov rdi, rsi
sar rdi, 2
cmp rdi, rax
cmovbe rdi, rax
movabs rax, 0x7ffffffffffffff8
cmp rsi, rax
cmovae rdi, r12
test rdi, rdi
je 0x14003e7b1
cmp rdi, r12
ja 0x14003eb3b
lea rcx, [rdi*8]
call fcn.1400897bc
mov r14, rax
jmp 0x14003e7b4
xor r14d, r14d
lea rdi, [r14 + rdi*8]
mov rax, qword [r15 + 0xc8]
lea rbp, [r14 + rbp*8]
add rbp, 8
mov qword [rbp - 8], rax
test rsi, rsi
jle 0x14003e7de
mov rcx, r14
mov rdx, rbx
mov r8, rsi
call fcn.14008c580
mov qword [rsp + 0x2b0], r14
mov qword [rsp + 0x2b8], rbp
mov qword [rsp + 0x2c0], rdi
test rbx, rbx
mov r15, qword [rsp + 0x58]
lea r12, [rsp + 0x290]
mov rcx, rbx
mov rbx, qword [rsp + 0x50]
je 0x14003e81d
call fcn.1400897f8
mov rbp, qword [rsp + 0x2b8]
cmp rbp, qword [rsp + 0x2c0]
je 0x14003e83c
mov qword [rbp], rbx
add rbp, 8
mov qword [rsp + 0x2b8], rbp
jmp 0x14003e900
mov r14, qword [rsp + 0x2b0]
sub rbp, r14
mov r15, rbp
sar r15, 3
lea rax, [r15 + 1]
movabs rcx, 0x1fffffffffffffff
cmp rax, rcx
ja 0x14003eb36
mov rdi, rbp
sar rdi, 2
cmp rdi, rax
cmovbe rdi, rax
movabs rax, 0x7ffffffffffffff8
cmp rbp, rax
cmovae rdi, rcx
test rdi, rdi
je 0x14003e8a4
cmp rdi, rcx
ja 0x14003eb3b
lea rcx, [rdi*8]
call fcn.1400897bc
mov rsi, rax
jmp 0x14003e8a6
xor esi, esi
lea rbx, [rsi + rdi*8]
lea rdi, [rsi + r15*8]
add rdi, 8
mov rax, qword [rsp + 0x50]
mov qword [rdi - 8], rax
test rbp, rbp
jle 0x14003e8ce
mov rcx, rsi
mov rdx, r14
mov r8, rbp
call fcn.14008c580
mov qword [rsp + 0x2b0], rsi
mov qword [rsp + 0x2b8], rdi
mov qword [rsp + 0x2c0], rbx
test r14, r14
mov r15, qword [rsp + 0x58]
lea r12, [rsp + 0x290]
je 0x14003e900
mov rcx, r14
call fcn.1400897f8
mov rdx, qword [rsp + 0xd0]
lea rsi, [rsp + 0x2b0]
mov rcx, rsi
call fcn.14003f210
mov rdx, qword [rsp + 0xd8]
mov rcx, rsi
call fcn.14003f210
mov rdx, qword [rsp + 0xe0]
mov rcx, rsi
call fcn.14003f210
mov rax, qword [0x140127460]
mov r9, qword [rsi]
mov rdx, qword [rsi + 8]
sub rdx, r9
mov rcx, qword [rsp + 0xe8]
xorps xmm0, xmm0
movups xmmword [rsp + 0x28], xmm0
mov qword [rsp + 0x20], rdx
mov r8d, 0x20002
xor edx, edx
call qword [0x140135008]
test eax, eax
je 0x14003e989
mov esi, 0x80000
mov r14, qword [rsp + 0x68]
movabs rbp, 0xaaaaaaaaaaaaaaaa
jmp 0x14003dfa1
mov ecx, 2
call fcn.140074720
test al, al
mov r14, qword [rsp + 0x68]
jne 0x14003ea4f
xor ebx, ebx
xor esi, esi
jmp 0x14003e26a
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rsi, [rsp + 0x150]
mov rcx, rsi
mov r8d, 0x1c8
mov r9d, 2
call fcn.1400dd030
lea rcx, [rsp + 0x160]
lea rdx, str.InitializeProcThreadAttributeList__size_
mov r8d, 0x28
call fcn.1400bcbd0
mov rcx, rsi
call fcn.1400dd0b0
jmp 0x14003e304
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rsi, [rsp + 0x150]
mov rcx, rsi
mov r8d, 0x1d3
mov r9d, 2
call fcn.1400dd030
lea rcx, [rsp + 0x160]
lea rdx, str.InitializeProcThreadAttributeList
mov r8d, 0x21
call fcn.1400bcbd0
mov rcx, rsi
call fcn.1400dd0b0
jmp 0x14003e399
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rsi, [rsp + 0x150]
mov rcx, rsi
mov r8d, 0x1ed
mov r9d, 2
call fcn.1400dd030
lea rcx, [rsp + 0x160]
lea rdx, str.UpdateProcThreadAttribute
mov r8d, 0x19
jmp 0x14003e4ee
lea rcx, [0x140127458]
call fcn.140089910
cmp dword [0x140127458], 0xffffffff
jne 0x14003de45
lea rcx, str.kernel32.dll
lea rdx, str.::InitializeProcThreadAttributeList
xor r8d, r8d
call fcn.14004fe60
mov qword [0x140127450], rax
lea rcx, [0x140127458]
call fcn.1400899a8
jmp 0x14003de45
lea rcx, [0x140127468]
call fcn.140089910
cmp dword [0x140127468], 0xffffffff
jne 0x14003de6a
cmp qword [0x140127450], 0
je 0x14003eb17
lea rcx, str.kernel32.dll
lea rdx, str.::UpdateProcThreadAttribute
xor r8d, r8d
call fcn.14004fe60
jmp 0x14003eb19
xor eax, eax
mov qword [0x140127460], rax
lea rcx, [0x140127468]
call fcn.1400899a8
mov r15, qword [rsp + 0x58]
jmp 0x14003de6a
call fcn.1400a1f00
call fcn.1400bd1c0
int3
mov rcx, rbp
mov rdx, r14
mov r8, rsi
call fcn.14008c580
jmp 0x14003e06f
mov rcx, r14
call fcn.1400897f8
mov r15, qword [rsp + 0x2c0]
jmp 0x14003e090