Function at 0x1402192a9
Capabilities:
Enumerate services

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x258
movaps xmmword [rsp + 0x240], xmm6
mov qword [rsp + 0x70], rdx
mov qword [rsp + 0x78], rcx
mov rax, qword [0x14033f038]
xor rax, rsp
mov qword [rsp + 0x238], rax
lea r14, [rsp + 0xf4]
mov dword [r14], 0x2000
xor r13d, r13d
movabs rax, 0x3fffffffffffffe7
add rax, 0x18
mov qword [rsp + 0x58], rax
xor esi, esi
xor r15d, r15d
mov r12, r15
mov ebp, dword [rsp + 0xf4]
mov r15, rsi
sub r15, r12
cmp r15, rbp
jae 0x140219353
mov rax, rbp
sub rax, r15
mov rcx, r13
sub rcx, rsi
cmp rcx, rax
jb 0x140219383
lea rbx, [rsi + rax]
test rsi, rsi
je 0x14021a5ae
mov byte [rsi], 0
inc rsi
dec rax
jne 0x140219334
mov rdi, r12
mov rsi, rbx
mov r15, rdi
jmp 0x140219364
lea rax, [r12 + rbp]
cmp r15, rbp
cmova rsi, rax
mov rdi, r12
mov r15, r12
mov r8d, esi
sub r8d, edi
mov ecx, 5
mov rdx, r15
mov r9, r14
call fcn.14022eab9
cmp eax, 0xc0000004
je 0x14021930a
jmp 0x1402193f9
sub r13, r12
mov rbx, r13
add rbx, r13
cmp rbx, rbp
cmovbe rbx, rbp
cmp r13, qword [rsp + 0x58]
movabs rax, 0x7fffffffffffffff
cmovae rbx, rax
mov rcx, rbx
call fcn.14016ecd4
mov rdi, rax
mov r13, rbx
add r13, rax
lea rbx, [rax + rbp]
mov rax, r15
mov rcx, rdi
add rcx, rax
je 0x14021a5a5
mov byte [rcx], 0
inc rax
cmp rbp, rax
jne 0x1402193be
mov rcx, rdi
mov rdx, r12
mov r8, r15
call fcn.1401730b0
test r12, r12
je 0x14021934b
mov rcx, r12
call fcn.14016eccc
jmp 0x14021934b
test eax, eax
jns 0x14021943c
xor r12d, r12d
test r15, r15
je 0x14021940d
mov rcx, r15
call fcn.14016eccc
mov rcx, qword [rsp + 0x238]
xor rcx, rsp
call fcn.140171860
mov eax, r12d
movaps xmm6, xmmword [rsp + 0x240]
add rsp, 0x258
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov qword [rsp + 0xe8], 0
xor r12d, r12d
xor ecx, ecx
xor edx, edx
mov r8d, 4
call qword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
test rax, rax
jne 0x140219471
lea rcx, [rsp + 0xe8]
xor edx, edx
call fcn.14012a550
jmp 0x140219400
mov r14, rax
movabs rax, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0xd0], rax
mov ecx, 0x18
call fcn.14016ecd4
mov rdi, rax
mov ecx, 0x15e0
call fcn.14016ecd4
mov qword [rdi], rax
mov qword [rdi + 8], rax
lea rcx, [rax + 0x15e0]
mov qword [rdi + 0x10], rcx
mov rdx, rax
neg rdx
xor r8d, r8d
cmp rdx, r8
je 0x14021a5ab
mov byte [rax + r8], 0
inc r8
cmp r8, 0x15e0
jne 0x1402194b8
mov qword [rsp + 0x50], r15
mov qword [rdi + 8], rcx
mov qword [rsp + 0xd0], rdi
xor edx, edx
lea r8, [rsp + 0xb0]
mov dword [r8], edx
lea r8, [rsp + 0x90]
mov dword [r8], edx
xorps xmm6, xmm6
mov r12, qword [sym.imp.ADVAPI32.dll_EnumServicesStatusExW]
mov r13, qword [sym.imp.KERNEL32.dll_GetLastError]
sub ecx, eax
movups xmmword [rsp + 0x40], xmm6
lea rdx, [rsp + 0xb0]
mov qword [rsp + 0x38], rdx
lea rdx, [rsp + 0x90]
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x28], ecx
mov rcx, r14
xor edx, edx
mov r8d, 0x30
mov r9d, 1
call r12
mov ebp, eax
test eax, eax
jne 0x140219699
call r13
cmp eax, 0xea
jne 0x1402196c7
mov rbp, qword [rsp + 0xd0]
mov rax, qword [rbp]
mov rcx, qword [rbp + 8]
mov rdi, rcx
sub rdi, rax
mov ebx, dword [rsp + 0x90]
lea r15, [rdi + rbx]
cmp rdi, r15
jae 0x1402195e3
mov rdx, qword [rbp + 0x10]
mov r8, rdx
sub r8, rcx
cmp r8, rbx
jb 0x1402195f1
test rbx, rbx
je 0x1402195b7
lea rax, [rcx + rbx]
test rcx, rcx
je 0x14021a5a8
mov byte [rcx], 0
inc rcx
dec rbx
jne 0x1402195a0
mov rcx, rax
mov qword [rbp + 8], rcx
mov rcx, qword [rsp + 0xd0]
mov rax, qword [rcx]
mov rcx, qword [rcx + 8]
mov dword [rsp + 0x90], 0
cmp rcx, rax
jne 0x14021950c
jmp 0x14021a59d
jbe 0x1402195ca
add r15, rax
mov qword [rbp + 8], r15
mov rcx, r15
jmp 0x1402195ca
test r15, r15
js 0x14021a59d
sub rdx, rax
lea rax, [rdx + rdx]
cmp rax, r15
cmova r15, rax
movabs rax, 0x3fffffffffffffe7
add rax, 0x18
cmp rdx, rax
movabs rax, 0x7fffffffffffffff
cmovae r15, rax
mov rcx, r15
call fcn.14016ecd4
add rdi, rax
add r15, rax
lea rax, [rdi + rbx]
mov qword [rsp + 0x58], rax
mov rax, rdi
test rax, rax
je 0x14021a5a2
mov byte [rax], 0
inc rax
dec rbx
jne 0x140219641
mov rdx, qword [rbp]
mov r8, qword [rbp + 8]
mov rax, rdx
sub rax, r8
sub r8, rdx
add rdi, rax
mov rcx, rdi
call fcn.1401730b0
mov rcx, qword [rbp]
mov qword [rbp], rdi
mov rax, qword [rsp + 0x58]
mov qword [rbp + 8], rax
mov qword [rbp + 0x10], r15
test rcx, rcx
je 0x1402195bb
call fcn.14016eccc
jmp 0x1402195bb
mov rdx, qword [rsp + 0xd0]
mov qword [rsp + 0xd0], 0
lea rcx, [rsp + 0xe8]
call fcn.14012a550
mov eax, dword [rsp + 0xb0]
mov dword [rsp + 0x58], eax
jmp 0x140219727
cmp dword [0x140352b00], 2
jg 0x14021971f
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadutilwatsonmemory_csv.cc
lea rdi, [rsp + 0xf8]
mov rcx, rdi
mov r8d, 0x73
mov r9d, 2
call fcn.14020a880
lea rcx, [rsp + 0x108]
lea rdx, str.Cannot_enumerate_running_services.
mov r8d, 0x22
call fcn.14015f6d6
mov rcx, rdi
call fcn.14020a900
mov dword [rsp + 0x58], 0xaaaaaaaa
xor r12d, r12d
lea rdi, [rsp + 0xd0]
mov rcx, rdi
xor edx, edx
call fcn.14012a550
mov rcx, r14
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
test ebp, ebp
mov r15, qword [rsp + 0x50]
je 0x140219460
movabs rax, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0xe0], rax
movaps xmm6, xmmword [0x140301d60]
movaps xmmword [rsp + 0xd0], xmm6
mov byte [rsp + 0xe7], 9
lea rax, str.ImageName
cmp rdi, rax
mov r15, rdi
ja 0x14021979b
lea rcx, [rsp + 0xe2]
cmp rcx, rax
ja 0x14021a605
movups xmm0, xmmword [str.ImageName]
movaps xmmword [rsp + 0xd0], xmm0
mov dword [rsp + 0xe0], 0x65
xor ebx, ebx
lea r13, str.UniqueProcessId
lea r14, str.___ls
lea r12, [rsp + 0xf8]
mov r8, qword [rbx + r13]
mov rcx, r12
mov rdx, r14
call fcn.14020e1f0
movzx ebp, byte [rsp + 0x10f]
test bpl, bpl
jns 0x1402197fb
mov rbp, qword [rsp + 0x100]
mov rdx, qword [rsp + 0xf8]
jmp 0x140219801
and ebp, 0x7f
mov rdx, r12
test rdx, rdx
jne 0x14021980f
test rbp, rbp
jne 0x14021a5cc
movzx ecx, byte [rsp + 0xe7]
mov eax, 0xa
mov rdi, rcx
test cl, cl
jns 0x140219843
mov rax, qword [rsp + 0xe0]
movabs r8, 0x7fffffffffffffff
and rax, r8
dec rax
mov rdi, qword [rsp + 0xd8]
mov r8, rax
sub r8, rdi
cmp r8, rbp
jb 0x1402198f8
test rbp, rbp
je 0x1402198ba
mov r12, r14
mov r14, r13
mov r13, r15
test cl, cl
jns 0x14021986c
mov r15, qword [rsp + 0xd0]
lea rcx, [r15 + rdi*2]
cmp rcx, rdx
ja 0x140219882
lea rax, [rcx + rbp*2]
cmp rax, rdx
ja 0x14021a5d8
mov r8, rbp
add r8, rbp
call fcn.1401730b0
add rdi, rbp
cmp byte [rsp + 0xe7], 0
jns 0x1402198e4
mov qword [rsp + 0xd8], rdi
mov word [r15 + rdi*2], 0
mov r15, r13
mov r13, r14
mov r14, r12
lea r12, [rsp + 0xf8]
cmp byte [rsp + 0x10f], 0
jns 0x1402198d1
mov rcx, qword [rsp + 0xf8]
call fcn.14016eccc
add rbx, 0x10
cmp rbx, 0x1f0
jne 0x1402197cd
jmp 0x140219927
cmp rdi, 0xb
jae 0x14021a5de
mov byte [rsp + 0xe7], dil
jmp 0x1402198a2
lea r8, [rdi + rbp]
sub r8, rax
mov qword [rsp + 0x38], rdx
mov qword [rsp + 0x30], rbp
mov qword [rsp + 0x20], rdi
mov qword [rsp + 0x28], 0
mov rcx, r15
mov rdx, rax
mov r9, rdi
call fcn.140094000
jmp 0x1402198ba
movzx eax, byte [rsp + 0xe7]
mov r15d, 0xa
mov rbx, rax
test al, al
jns 0x14021995c
mov r15, qword [rsp + 0xe0]
movabs rcx, 0x7fffffffffffffff
and r15, rcx
dec r15
mov rbx, qword [rsp + 0xd8]
mov rcx, r15
sub rcx, rbx
cmp rcx, 0xb
jb 0x14021a45c
test al, al
jns 0x14021997a
mov rax, qword [rsp + 0xd0]
jmp 0x140219982
lea rax, [rsp + 0xd0]
mov rbp, qword [rsp + 0x50]
lea rcx, [rax + rbx*2]
lea rdx, str._Services_r_n
cmp rcx, rdx
ja 0x1402199a8
lea r8, [rax + rbx*2]
add r8, 0x16
cmp r8, rdx
ja 0x14021a608
movups xmm0, xmmword [str._Services_r_n]
movups xmmword [rcx], xmm0
movabs rdx, 0xa000d00730065
mov qword [rcx + 0xe], rdx
lea rcx, [rbx + 0xb]
cmp byte [rsp + 0xe7], 0
jns 0x14021a397
mov qword [rsp + 0xd8], rcx
lea rax, [rax + rcx*2]
mov word [rax], 0
cmp rsi, rbp
je 0x14021a5ff
mov rax, qword [rsp + 0xe8]
mov rbx, qword [rax]
cmp qword [rax + 8], rbx
je 0x14021a59d
xorps xmm0, xmm0
movaps xmmword [rsp + 0xb0], xmm0
mov qword [rsp + 0xc0], 0
mov eax, dword [rsp + 0x58]
imul rbp, rax, 0x38
lea r15, [rsp + 0xf8]
mov rsi, qword [rsp + 0x50]
cmp qword [rsi + 0x50], 0
jne 0x140219a54
cmp byte [rsp + 0xc7], 0
jns 0x140219a61
mov qword [rsp + 0xb8], 6
mov rax, qword [rsp + 0xb0]
jmp 0x140219a71
mov rdi, qword [rsi + 0x40]
test rdi, rdi
jne 0x140219a8d
xor eax, eax
jmp 0x140219a95
mov byte [rsp + 0xc7], 6
lea rax, [rsp + 0xb0]
movabs rcx, 0x6c00640049005b
mov qword [rax], rcx
mov dword [rax + 8], 0x5d0065
mov word [rax + 0xc], 0
jmp 0x140219adb
mov rcx, rdi
call fcn.14016f5e8
lea r8, [rdi + rax*2]
mov rcx, r15
mov rdx, rdi
call fcn.14020ed60
cmp byte [rsp + 0xc7], 0
jns 0x140219abb
mov rcx, qword [rsp + 0xb0]
call fcn.14016eccc
mov rax, qword [rsp + 0x108]
mov qword [rsp + 0xc0], rax
movups xmm0, xmmword [rsp + 0xf8]
movaps xmmword [rsp + 0xb0], xmm0
cmp byte [rsp + 0xc7], 0
lea r8, [rsp + 0xb0]
jns 0x140219af5
mov r8, qword [rsp + 0xb0]
mov rcx, r15
lea rdx, str.__ls__
call fcn.14020e1f0
movzx r14d, byte [rsp + 0x10f]
test r14b, r14b
jns 0x140219b24
mov r14, qword [rsp + 0x100]
mov rdx, qword [rsp + 0xf8]
jmp 0x140219b2b
and r14d, 0x7f
mov rdx, r15
test rdx, rdx
jne 0x140219b39
test r14, r14
jne 0x14021a5cf
movzx ecx, byte [rsp + 0xe7]
mov eax, 0xa
mov rdi, rcx
test cl, cl
jns 0x140219b6d
mov rax, qword [rsp + 0xe0]
movabs r8, 0x7fffffffffffffff
and rax, r8
dec rax
mov rdi, qword [rsp + 0xd8]
mov r8, rax
sub r8, rdi
cmp r8, r14
jb 0x14021a0c6
test r14, r14
je 0x140219bd4
lea r12, [rsp + 0xd0]
test cl, cl
jns 0x140219b95
mov r12, qword [rsp + 0xd0]
lea rcx, [r12 + rdi*2]
cmp rcx, rdx
ja 0x140219bab
lea rax, [rcx + r14*2]
cmp rax, rdx
ja 0x14021a5db
lea r8, [r14 + r14]
call fcn.1401730b0
add rdi, r14
cmp byte [rsp + 0xe7], 0
jns 0x14021a0af
mov qword [rsp + 0xd8], rdi
mov word [r12 + rdi*2], 0
cmp byte [rsp + 0x10f], 0
jns 0x140219beb
mov rcx, qword [rsp + 0xf8]
call fcn.14016eccc
lea r14, [0x14030d068]
xor r12d, r12d
mov eax, dword [r14]
mov ecx, 0x5000121a
bt rcx, r12
jb 0x140219c36
mov r8, qword [rsi + rax]
mov rcx, r15
lea rdx, str._llu_
call fcn.14020e1f0
movzx r13d, byte [rsp + 0x10f]
test r13b, r13b
jns 0x140219c70
mov r13, qword [rsp + 0x100]
mov rdx, qword [rsp + 0xf8]
jmp 0x140219c77
mov r8d, dword [rsi + rax]
mov rcx, r15
lea rdx, str._lu_
call fcn.14020e1f0
movzx r13d, byte [rsp + 0x10f]
test r13b, r13b
jns 0x140219d26
mov r13, qword [rsp + 0x100]
mov rdx, qword [rsp + 0xf8]
jmp 0x140219d2d
and r13d, 0x7f
mov rdx, r15
test rdx, rdx
jne 0x140219c85
test r13, r13
jne 0x14021a5b4
movzx ecx, byte [rsp + 0xe7]
mov eax, 0xa
mov rdi, rcx
test cl, cl
jns 0x140219cb9
mov rax, qword [rsp + 0xe0]
movabs r8, 0x7fffffffffffffff
and rax, r8
dec rax
mov rdi, qword [rsp + 0xd8]
mov r8, rax
sub r8, rdi
cmp r8, r13
jb 0x140219e06
test r13, r13
je 0x140219ddc
lea r15, [rsp + 0xd0]
test cl, cl
jns 0x140219ce5
mov r15, qword [rsp + 0xd0]
lea rcx, [r15 + rdi*2]
cmp rcx, rdx
ja 0x140219cfb
lea rax, [rcx + r13*2]
cmp rax, rdx
ja 0x14021a5ba
mov r8, r13
add r8, r13
call fcn.1401730b0
add rdi, r13
cmp byte [rsp + 0xe7], 0
js 0x140219dc5
cmp rdi, 0xb
jb 0x140219e44
jmp 0x14021a5c0
and r13d, 0x7f
mov rdx, r15
test rdx, rdx
jne 0x140219d3b
test r13, r13
jne 0x14021a5b1
movzx ecx, byte [rsp + 0xe7]
mov eax, 0xa
mov rdi, rcx
test cl, cl
jns 0x140219d6f
mov rax, qword [rsp + 0xe0]
movabs r8, 0x7fffffffffffffff
and rax, r8
dec rax
mov rdi, qword [rsp + 0xd8]
mov r8, rax
sub r8, rdi
cmp r8, r13
jb 0x140219e06
test r13, r13
je 0x140219ddc
lea r15, [rsp + 0xd0]
test cl, cl
jns 0x140219d97
mov r15, qword [rsp + 0xd0]
lea rcx, [r15 + rdi*2]
cmp rcx, rdx
ja 0x140219dad
lea rax, [rcx + r13*2]
cmp rax, rdx
ja 0x14021a5bd
mov r8, r13
add r8, r13
call fcn.1401730b0
add rdi, r13
cmp byte [rsp + 0xe7], 0
jns 0x140219e3a
mov qword [rsp + 0xd8], rdi
mov word [r15 + rdi*2], 0
lea r15, [rsp + 0xf8]
cmp byte [rsp + 0x10f], 0
jns 0x140219df3
mov rcx, qword [rsp + 0xf8]
call fcn.14016eccc
inc r12
add r14, 0x10
cmp r12, 0x1f
jne 0x140219bf5
jmp 0x140219e51
lea r8, [rdi + r13]
sub r8, rax
mov qword [rsp + 0x38], rdx
mov qword [rsp + 0x30], r13
mov qword [rsp + 0x20], rdi
mov qword [rsp + 0x28], 0
lea rcx, [rsp + 0xd0]
mov rdx, rax
mov r9, rdi
call fcn.140094000
jmp 0x140219ddc
cmp rdi, 0xb
jae 0x14021a5c3
mov byte [rsp + 0xe7], dil
jmp 0x140219dcd
cmp dword [rsp + 0x58], 0
jne 0x140219f19
movzx eax, byte [rsp + 0xe7]
mov r12d, 0xa
mov r14, rax
test al, al
jns 0x140219e91
mov r12, qword [rsp + 0xe0]
movabs rcx, 0x7fffffffffffffff
and r12, rcx
dec r12
mov r14, qword [rsp + 0xd8]
mov rcx, r12
sub rcx, r14
cmp rcx, 2
jb 0x14021a0fd
lea rcx, [rsp + 0xd0]
test al, al
jns 0x140219eb5
mov rcx, qword [rsp + 0xd0]
lea rax, [rcx + r14*2]
lea rdx, [0x14030d6f2]
cmp rax, rdx
ja 0x140219edd
lea rdx, [rcx + r14*2]
add rdx, 4
lea r8, [0x14030d6f2]
cmp rdx, r8
ja 0x14021a5d2
mov dword [rax], 0xa000d
add r14, 2
cmp byte [rsp + 0xe7], 0
jns 0x14021a098
mov qword [rsp + 0xd8], r14
lea rax, [rcx + r14*2]
mov word [rax], 0
mov eax, dword [rsi]
add rsi, rax
test rax, rax
jne 0x140219a2d
jmp 0x14021a1f4
mov al, 1
xor r14d, r14d
mov ecx, dword [rbx + r14 + 0x2c]
cmp ecx, dword [rsi + 0x50]
je 0x140219f36
add r14, 0x38
cmp rbp, r14
jne 0x140219f1e
jmp 0x140219e5c
mov r9, qword [rbx + r14 + 8]
test al, 1
lea r8, [0x1403026a2]
lea rax, [0x14030d6e0]
cmove r8, rax
mov rcx, r15
lea rdx, [0x14030d6e4]
call fcn.14020e1f0
movzx r12d, byte [rsp + 0x10f]
test r12b, r12b
jns 0x140219f7e
mov r12, qword [rsp + 0x100]
mov rdx, qword [rsp + 0xf8]
jmp 0x140219f85
and r12d, 0x7f
mov rdx, r15
test rdx, rdx
jne 0x140219f93
test r12, r12
jne 0x14021a5b7
movzx ecx, byte [rsp + 0xe7]
mov eax, 0xa
mov rdi, rcx
test cl, cl
jns 0x140219fc7
mov rax, qword [rsp + 0xe0]
movabs r8, 0x7fffffffffffffff
and rax, r8
dec rax
mov rdi, qword [rsp + 0xd8]
mov r8, rax
sub r8, rdi
cmp r8, r12
jb 0x14021a064
test r12, r12
je 0x14021a032
lea r15, [rsp + 0xd0]
test cl, cl
jns 0x140219fef
mov r15, qword [rsp + 0xd0]
lea rcx, [r15 + rdi*2]
cmp rcx, rdx
ja 0x14021a005
lea rax, [rcx + r12*2]
cmp rax, rdx
ja 0x14021a5c6
lea r8, [r12 + r12]
call fcn.1401730b0
add rdi, r12
cmp byte [rsp + 0xe7], 0
jns 0x14021a050
mov qword [rsp + 0xd8], rdi
mov word [r15 + rdi*2], 0
lea r15, [rsp + 0xf8]
cmp byte [rsp + 0x10f], 0
jns 0x14021a049
mov rcx, qword [rsp + 0xf8]
call fcn.14016eccc
xor eax, eax
jmp 0x140219f28
cmp rdi, 0xb
jae 0x14021a5c9
mov byte [rsp + 0xe7], dil
jmp 0x14021a023
lea r8, [rdi + r12]
sub r8, rax
mov qword [rsp + 0x38], rdx
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x20], rdi
mov qword [rsp + 0x28], 0
lea rcx, [rsp + 0xd0]
mov rdx, rax
mov r9, rdi
call fcn.140094000
jmp 0x14021a032
cmp r14, 0xb
jae 0x14021a5d5
mov byte [rsp + 0xe7], r14b
jmp 0x140219efd
cmp rdi, 0xb
jae 0x14021a5e1
mov byte [rsp + 0xe7], dil
jmp 0x140219bcd
lea r8, [rdi + r14]
sub r8, rax
mov qword [rsp + 0x38], rdx
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x20], rdi
mov qword [rsp + 0x28], 0
lea rcx, [rsp + 0xd0]
mov rdx, rax
mov r9, rdi
call fcn.140094000
jmp 0x140219bd4
lea rdi, [r14 + 2]
mov rcx, rdi
sub rcx, r12
movabs rdx, 0x7fffffffffffffff
sub rdx, r12
add rdx, 0xffffffffffffffef
cmp rdx, rcx
jb 0x14021a59d
lea rcx, [rsp + 0xd0]
test al, al
jns 0x14021a135
mov rcx, qword [rsp + 0xd0]
movabs rax, 0x3fffffffffffffe7
cmp r12, rax
mov qword [rsp + 0x60], rcx
jae 0x14021a5e4
lea rax, [r12 + r12]
cmp rdi, rax
cmova rax, rdi
mov r13d, 0xb
cmp rax, 0xb
jb 0x14021a174
or rax, 7
inc rax
mov r13, rax
js 0x14021a5f7
mov rcx, r13
add rcx, r13
call fcn.14016ecd4
mov r9, rax
test r14, r14
jne 0x14021a42a
lea rax, [r9 + r14*2]
lea rcx, [0x14030d6f2]
cmp rax, rcx
ja 0x14021a1b3
lea rcx, [r9 + r14*2]
add rcx, 4
lea rdx, [0x14030d6f2]
cmp rcx, rdx
ja 0x14021a5fc
mov dword [rax], 0xa000d
cmp r12, 0xa
jne 0x14021a493
mov qword [rsp + 0xd0], r9
movabs rax, 0x7fffffffffffffff
inc rax
or r13, rax
mov qword [rsp + 0xe0], r13
mov qword [rsp + 0xd8], rdi
lea rax, [r9 + rdi*2]
jmp 0x140219f01
lea rdi, [rsp + 0x90]
movabs rax, 0xaaaaaaaaaaaaaaaa
mov qword [rdi + 0x10], rax
movaps xmmword [rdi], xmm6
lea rax, [0x14030d6f8]
lea r8, [rsp + 0x80]
mov qword [r8], rax
mov qword [r8 + 8], 0xa
mov rcx, qword [rsp + 0x78]
mov rdx, rdi
call fcn.14006cbc0
mov ecx, 0x60
call fcn.14016ecd4
mov rbx, rax
mov rcx, rax
mov edx, 1
call fcn.14022eef4
mov rcx, rbx
mov rdx, rdi
mov r8d, 3
xor r9d, r9d
call fcn.14022f014
test al, al
je 0x14021a2de
lea rdx, [rsp + 0xd0]
movzx eax, byte [rdx + 0x17]
mov r8d, eax
and r8d, 0x7f
test al, al
cmovs r8, qword [rdx + 8]
cmovs rdx, qword [rdx]
add r8, r8
mov rcx, qword [rbx + 0x38]
call fcn.1401086b5
test al, al
mov r15, qword [rsp + 0x50]
je 0x14021a3ad
cmp qword [rbx + 0x18], 0xffffffffffffffff
je 0x14021a60e
lea rcx, [rbx + 0x10]
mov rax, 0xffffffffffffffff
mov qword [rbx + 0x38], rax
lea rdx, [rsp + 0xf8]
mov qword [rdx], rax
call fcn.1400d03b2
lea rdx, [rsp + 0x90]
mov rcx, qword [rsp + 0x70]
call fcn.140077bf0
mov r12b, 1
jmp 0x14021a334
cmp dword [0x140352b00], 2
mov r15, qword [rsp + 0x50]
jg 0x14021a331
lea rdx, str....._third_partycrashpadcrashpadutilwatsonmemory_csv.cc
lea rdi, [rsp + 0xf8]
mov rcx, rdi
mov r8d, 0x117
mov r9d, 2
call fcn.1400d3710
lea rcx, [rsp + 0x108]
lea rdx, str.Failed_to_create_memory.csv
mov r8d, 0x1b
call fcn.14015f6d6
mov rcx, rdi
call fcn.140169410
xor r12d, r12d
test rbx, rbx
je 0x14021a349
mov rcx, rbx
call fcn.14022efac
mov rcx, rbx
call fcn.14016eccc
cmp byte [rsp + 0xa7], 0
jns 0x14021a360
mov rcx, qword [rsp + 0x90]
call fcn.14016eccc
cmp byte [rsp + 0xc7], 0
jns 0x14021a377
mov rcx, qword [rsp + 0xb0]
call fcn.14016eccc
cmp byte [rsp + 0xe7], 0
jns 0x140219460
mov rcx, qword [rsp + 0xd0]
call fcn.14016eccc
jmp 0x140219460
cmp rbx, 0xfffffffffffffff4
jbe 0x14021a60b
mov byte [rsp + 0xe7], cl
jmp 0x1402199da
cmp dword [0x140352b00], 2
jg 0x14021a3fb
lea rdx, str....._third_partycrashpadcrashpadutilwatsonmemory_csv.cc
lea rdi, [rsp + 0xf8]
mov rcx, rdi
mov r8d, 0x11d
mov r9d, 2
call fcn.1400d3710
lea rcx, [rsp + 0x108]
lea rdx, str.Failed_to_write_to_memory.csv
mov r8d, 0x1d
call fcn.14015f6d6
mov rcx, rdi
call fcn.140169410
cmp qword [rbx + 0x18], 0xffffffffffffffff
je 0x14021a611
lea rcx, [rbx + 0x10]
mov rax, 0xffffffffffffffff
mov qword [rbx + 0x38], rax
lea rdx, [rsp + 0xf8]
mov qword [rdx], rax
call fcn.1400d03b2
jmp 0x14021a331
mov rdx, qword [rsp + 0x60]
cmp rdx, r9
jb 0x14021a441
lea rax, [r9 + r14*2]
cmp rax, rdx
ja 0x14021a602
lea r8, [r14 + r14]
mov rcx, r9
mov qword [rsp + 0x68], r9
call fcn.1401730b0
mov r9, qword [rsp + 0x68]
jmp 0x14021a18b
lea r12, [rbx + 0xb]
mov rcx, r12
sub rcx, r15
movabs rdx, 0x7fffffffffffffff
sub rdx, r15
add rdx, 0xffffffffffffffef
cmp rdx, rcx
jb 0x14021a59d
test al, al
mov rbp, qword [rsp + 0x50]
jns 0x14021a4a8
mov r14, qword [rsp + 0xd0]
jmp 0x14021a4b0
mov rcx, qword [rsp + 0x60]
mov r14, r9
call fcn.14016eccc
mov r9, r14
jmp 0x14021a1c3
lea r14, [rsp + 0xd0]
movabs rax, 0x3fffffffffffffe7
cmp r15, rax
jae 0x14021a614
lea rax, [r15 + r15]
cmp r12, rax
cmova rax, r12
mov r13d, 0xb
cmp rax, 0xb
jb 0x14021a4ea
or rax, 7
inc rax
mov r13, rax
js 0x14021a5f7
mov rcx, r13
add rcx, r13
call fcn.14016ecd4
mov rdi, rax
test rbx, rbx
jne 0x14021a56d
lea rax, [rdi + rbx*2]
lea rcx, str._Services_r_n
cmp rax, rcx
ja 0x14021a51e
lea rdx, [rdi + rbx*2]
add rdx, 0x16
cmp rdx, rcx
ja 0x14021a627
movups xmm0, xmmword [str._Services_r_n]
movups xmmword [rax], xmm0
movabs rcx, 0xa000d00730065
mov qword [rax + 0xe], rcx
cmp r15, 0xa
jne 0x14021a593
mov qword [rsp + 0xd0], rdi
movabs rax, 0x7fffffffffffffff
inc rax
or r13, rax
mov qword [rsp + 0xe0], r13
mov qword [rsp + 0xd8], r12
lea rax, [rdi + r12*2]
jmp 0x1402199de
cmp r14, rdi
jb 0x14021a57f
lea rax, [rdi + rbx*2]
cmp rax, r14
ja 0x14021a62a
lea r8, [rbx + rbx]
mov rcx, rdi
mov rdx, r14
call fcn.1401730b0
jmp 0x14021a4fd
mov rcx, r14
call fcn.14016eccc
jmp 0x14021a53c
call fcn.14016fee0
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
movabs rax, 0x7fffffffffffffff
lea r13, [rax - 0x10]
jmp 0x14021a174
call fcn.1401c93df
int3
int3
int3
int3
int3
int3
int3
int3
movabs rax, 0x7fffffffffffffff
lea r13, [rax - 0x10]
jmp 0x14021a4ea
int3
int3