Function at 0x140013b01
Capabilities:
Enumerate services

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x278
movaps xmmword [rsp + 0x260], xmm6
mov qword [rsp + 0x78], rdx
mov qword [rsp + 0x80], rcx
mov rax, qword [0x14030d038]
xor rax, rsp
mov qword [rsp + 0x258], rax
movabs rax, 0x3fffffffffffffe7
lea r15, [rsp + 0x114]
mov dword [r15], 0x2000
mov ebx, 0x2000
lea r12, [rax + 0x18]
xor r14d, r14d
xor esi, esi
xor r13d, r13d
mov rbp, rsi
sub rbp, r13
cmp rbp, rbx
jae 0x140013b9c
mov rdi, rbx
sub rdi, rbp
mov rax, r14
sub rax, rsi
cmp rax, rdi
jb 0x140013bcd
test rdi, rdi
je 0x140013ba7
lea rbx, [rsi + rdi]
mov rcx, rsi
xor edx, edx
mov r8, rdi
call fcn.140117f60
mov rsi, rbx
jmp 0x140013ba7
lea rax, [rbx + r13]
cmp rbp, rbx
cmova rsi, rax
mov r8d, esi
sub r8d, r13d
mov ecx, 5
mov rdx, r13
mov r9, r15
call fcn.1401f4a96
cmp eax, 0xc0000004
jne 0x140013c3f
mov ebx, dword [rsp + 0x114]
jmp 0x140013b65
sub r14, r13
lea rax, [r14 + r14]
cmp rax, rbx
cmovb rax, rbx
cmp r14, r12
mov r14, rax
movabs rax, 0x7fffffffffffffff
cmovae r14, rax
test r14, r14
je 0x140013c3b
mov rcx, r14
call fcn.140112048
mov rsi, rax
lea rcx, [rsi + rbp]
xor edx, edx
mov r8, rdi
call fcn.140117f60
test rbp, rbp
jle 0x140013c20
mov rcx, rsi
mov rdx, r13
mov r8, rbp
call fcn.1401178b0
add r14, rsi
add rbx, rsi
test r13, r13
je 0x140013c33
mov rcx, r13
call fcn.140112038
mov r13, rsi
jmp 0x140013b97
xor esi, esi
jmp 0x140013bff
test eax, eax
jns 0x140013c80
xor ebp, ebp
test r13, r13
je 0x140013c52
mov rcx, r13
call fcn.140112038
mov rcx, qword [rsp + 0x258]
xor rcx, rsp
call fcn.140115e50
mov eax, ebp
movaps xmm6, xmmword [rsp + 0x260]
add rsp, 0x278
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov qword [rsp + 0x108], 0
xor ebp, ebp
xor ecx, ecx
xor edx, edx
mov r8d, 4
call qword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
test rax, rax
je 0x140014fbe
mov r15, rax
mov qword [rsp + 0x68], r13
mov ecx, 0x18
call fcn.140112048
mov rdi, rax
mov ecx, 0x15e0
call fcn.140112048
mov rsi, rax
mov qword [rdi], rax
lea rbx, [rax + 0x15e0]
mov qword [rdi + 0x10], rbx
mov r8d, 0x15e0
mov rcx, rax
xor edx, edx
call fcn.140117f60
mov qword [rdi + 8], rbx
mov qword [rsp + 0xf0], rdi
lea rax, [rsp + 0xd0]
mov dword [rax], ebp
lea rax, [rsp + 0xa0]
mov dword [rax], ebp
mov eax, 0x15e0
xorps xmm6, xmm6
mov r13, qword [sym.imp.ADVAPI32.dll_EnumServicesStatusExW]
mov r14, qword [sym.imp.KERNEL32.dll_GetLastError]
movups xmmword [rsp + 0x40], xmm6
lea rcx, [rsp + 0xd0]
mov qword [rsp + 0x38], rcx
lea rcx, [rsp + 0xa0]
mov qword [rsp + 0x30], rcx
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rsi
mov rcx, r15
xor edx, edx
mov r8d, 0x30
mov r9d, 1
call r13
mov ebx, eax
test eax, eax
jne 0x140013e90
call r14
cmp eax, 0xea
jne 0x140013ec3
mov rbx, qword [rsp + 0xf0]
mov rax, qword [rbx]
mov rcx, qword [rbx + 8]
mov rbp, rcx
sub rbp, rax
mov edi, dword [rsp + 0xa0]
lea rdx, [rdi + rbp]
cmp rbp, rdx
jae 0x140013dc1
mov r8, qword [rbx + 0x10]
mov rsi, r8
sub rsi, rcx
cmp rsi, rdi
jb 0x140013df2
test rdi, rdi
je 0x140013dbb
lea rsi, [rcx + rdi]
xor edx, edx
mov r8, rdi
call fcn.140117f60
mov rcx, rsi
mov qword [rbx + 8], rcx
jmp 0x140013dca
jbe 0x140013dca
add rax, rdx
mov qword [rbx + 8], rax
mov dword [rsp + 0xa0], 0
mov rcx, qword [rsp + 0xf0]
mov rsi, qword [rcx]
mov rax, qword [rcx + 8]
sub rax, rsi
jne 0x140013d1d
jmp 0x1400150bf
test rdx, rdx
js 0x1400150d6
mov rsi, r12
sub r8, rax
lea r12, [r8 + r8]
cmp r12, rdx
cmovb r12, rdx
cmp r8, rsi
movabs rax, 0x7fffffffffffffff
cmovae r12, rax
test r12, r12
je 0x140013e8c
mov rcx, r12
call fcn.140112048
add rbp, rax
add r12, rax
lea rax, [rdi + rbp]
mov qword [rsp + 0x50], rax
mov rcx, rbp
xor edx, edx
mov r8, rdi
call fcn.140117f60
mov rdx, qword [rbx]
mov r8, qword [rbx + 8]
sub r8, rdx
sub rbp, r8
test r8, r8
jle 0x140013e63
mov rcx, rbp
call fcn.1401178b0
mov rdx, qword [rbx]
mov qword [rbx], rbp
mov rax, qword [rsp + 0x50]
mov qword [rbx + 8], rax
mov qword [rbx + 0x10], r12
test rdx, rdx
mov r12, rsi
je 0x140013dca
mov rcx, rdx
call fcn.140112038
jmp 0x140013dca
xor eax, eax
jmp 0x140013e2a
mov rdx, qword [rsp + 0xf0]
mov qword [rsp + 0xf0], 0
lea rcx, [rsp + 0x108]
call fcn.1401adab0
mov eax, dword [rsp + 0xd0]
mov dword [rsp + 0x64], eax
mov r13, qword [rsp + 0x68]
jmp 0x140013f2d
mov ecx, 2
call fcn.1400f34e0
test al, al
mov r13, qword [rsp + 0x68]
je 0x140013f25
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_util_watson_memory_csv.cc
lea rsi, [rsp + 0x118]
mov rcx, rsi
mov r8d, 0x73
mov r9d, 2
call fcn.14019f9e0
lea rcx, [rsp + 0x128]
lea rdx, str.Cannot_enumerate_running_services.
mov r8d, 0x22
call fcn.1400ff874
mov rcx, rsi
call fcn.140183e60
mov dword [rsp + 0x64], 0xaaaaaaaa
xor ebp, ebp
lea r14, [rsp + 0xf0]
mov rcx, r14
xor edx, edx
call fcn.1401adab0
mov rcx, r15
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
test ebx, ebx
je 0x140014fbe
movabs rax, 0x9aaaaaa0000aaaa
mov qword [rsp + 0x100], rax
movups xmm0, xmmword [str.ImageName]
movaps xmmword [rsp + 0xf0], xmm0
movzx eax, word [0x1402c8294]
mov word [rsp + 0x100], ax
xor r12d, r12d
mov rax, r12
shl rax, 4
lea rcx, str.UniqueProcessId
mov r8, qword [rax + rcx]
lea rbp, [rsp + 0x118]
mov rcx, rbp
lea rdx, str.___ls
call fcn.1401cc040
movzx eax, byte [rsp + 0x12f]
mov rbx, rax
test al, al
jns 0x140013fcd
mov rbx, qword [rsp + 0x120]
mov rbp, qword [rsp + 0x118]
movzx ecx, byte [rsp + 0x107]
mov r15d, 0xa
mov rsi, rcx
test cl, cl
jns 0x140014002
mov r15, qword [rsp + 0x100]
movabs rdx, 0x7fffffffffffffff
and r15, rdx
dec r15
mov rsi, qword [rsp + 0xf8]
mov rdx, r15
sub rdx, rsi
cmp rdx, rbx
jb 0x140014098
test rbx, rbx
movabs r15, 0x7fffffffffffffff
je 0x140014075
mov rax, r14
test cl, cl
jns 0x14001402f
mov rax, qword [rsp + 0xf0]
lea rcx, [rax + rsi*2]
xor edx, edx
movzx edi, word [rbp + rdx*2]
mov word [rcx + rdx*2], di
inc rdx
cmp rbx, rdx
jne 0x140014035
add rsi, rbx
cmp byte [rsp + 0x107], 0
js 0x14001405d
mov byte [rsp + 0x107], sil
jmp 0x140014065
mov qword [rsp + 0xf8], rsi
lea rax, [rax + rsi*2]
mov word [rax], 0
mov al, byte [rsp + 0x12f]
test al, al
jns 0x140014086
mov rcx, qword [rsp + 0x118]
call fcn.140112038
inc r12
cmp r12, 0x1f
jne 0x140013f85
jmp 0x1400141b8
lea rdi, [rsi + rbx]
mov rax, rdi
sub rax, r15
movabs rdx, 0x7fffffffffffffff
sub rdx, r15
add rdx, 0xffffffffffffffef
cmp rdx, rax
jb 0x1400150c4
test cl, cl
jns 0x1400140c8
mov r14, qword [rsp + 0xf0]
mov qword [rsp + 0x50], r14
movabs rax, 0x3fffffffffffffe7
cmp r15, rax
jae 0x1400141a5
lea rax, [r15 + r15]
cmp rdi, rax
cmovae rax, rdi
mov r14d, 0xb
cmp rax, 0xb
jb 0x140014108
add rax, 8
and rax, 0xfffffffffffffff8
mov r14, rax
js 0x1400150d1
lea rcx, [r14 + r14]
call fcn.140112048
mov r13, rax
test rsi, rsi
mov rdx, qword [rsp + 0x50]
jne 0x140014183
lea rcx, [rsi*2]
add rcx, r13
add rbx, rbx
mov rdx, rbp
mov r8, rbx
call fcn.1401178b0
cmp r15, 0xa
jne 0x140014199
mov qword [rsp + 0xf0], r13
movabs r15, 0x7fffffffffffffff
lea rax, [r15 + 1]
or r14, rax
mov qword [rsp + 0x100], r14
mov qword [rsp + 0xf8], rdi
lea rax, [rdi*2]
add rax, r13
mov r13, qword [rsp + 0x68]
lea r14, [rsp + 0xf0]
jmp 0x140014069
xor eax, eax
movzx ecx, word [rdx + rax*2]
mov word [r13 + rax*2], cx
inc rax
cmp rsi, rax
jne 0x140014185
jmp 0x14001411e
mov rcx, qword [rsp + 0x50]
call fcn.140112038
jmp 0x14001413d
movabs rax, 0x7fffffffffffffff
lea r14, [rax - 0x10]
jmp 0x140014108
movzx eax, byte [rsp + 0x107]
mov ebp, 0xa
mov rbx, rax
test al, al
jns 0x1400141e2
mov rbp, qword [rsp + 0x100]
and rbp, r15
dec rbp
mov rbx, qword [rsp + 0xf8]
mov rcx, rbp
sub rcx, rbx
cmp rcx, 0xb
jb 0x140014fd2
test al, al
jns 0x140014200
mov rax, qword [rsp + 0xf0]
jmp 0x140014208
lea rax, [rsp + 0xf0]
lea rcx, [rax + rbx*2]
xor edx, edx
lea rbp, str._Services_r_n
movzx edi, word [rdx + rbp]
mov word [rcx + rdx], di
cmp rdx, 0x14
je 0x140014229
add rdx, 2
jmp 0x140014215
add rbx, 0xb
cmp byte [rsp + 0x107], 0
js 0x140014240
mov byte [rsp + 0x107], bl
jmp 0x140014248
mov qword [rsp + 0xf8], rbx
lea rax, [rax + rbx*2]
mov word [rax], 0
mov rcx, qword [rsp + 0x108]
mov r14, qword [rcx]
cmp qword [rcx + 8], r14
je 0x1400150bf
xorps xmm0, xmm0
movaps xmmword [rsp + 0xd0], xmm0
mov qword [rsp + 0xe0], 0
mov eax, dword [rsp + 0x64]
mov qword [rsp + 0x88], rax
lea rbp, str._Idle_
mov rsi, r13
mov qword [rsp + 0x70], r14
cmp qword [rsi + 0x50], 0
je 0x1400142b7
mov rcx, qword [rsi + 0x40]
mov qword [rsp + 0xc0], rcx
test rcx, rcx
je 0x1400142d3
call fcn.1401124ec
jmp 0x1400142d5
cmp byte [rsp + 0xe7], 0
js 0x14001432b
mov byte [rsp + 0xe7], 6
lea rax, [rsp + 0xd0]
jmp 0x14001433f
xor eax, eax
mov qword [rsp + 0xc8], rax
lea rcx, [rsp + 0x118]
lea rdx, [rsp + 0xc0]
call fcn.140100de0
cmp byte [rsp + 0xe7], 0
jns 0x140014309
mov rcx, qword [rsp + 0xd0]
call fcn.140112038
mov rax, qword [rsp + 0x128]
mov qword [rsp + 0xe0], rax
movups xmm0, xmmword [rsp + 0x118]
movaps xmmword [rsp + 0xd0], xmm0
jmp 0x140014376
mov qword [rsp + 0xd8], 6
mov rax, qword [rsp + 0xd0]
cmp rax, rbp
jae 0x14001435a
xor ecx, ecx
movzx edx, word [rcx + rbp]
mov word [rax + rcx], dx
cmp rcx, 0xa
je 0x140014370
add rcx, 2
jmp 0x140014346
jbe 0x140014370
mov ecx, 5
movzx edx, word [rbp + rcx*2]
mov word [rax + rcx*2], dx
sub rcx, 1
jae 0x140014361
mov word [rax + 0xc], 0
cmp byte [rsp + 0xe7], 0
lea r8, [rsp + 0xd0]
jns 0x140014390
mov r8, qword [rsp + 0xd0]
mov qword [rsp + 0x50], rsi
lea rdi, [rsp + 0x118]
mov rcx, rdi
lea rdx, str.__ls__
call fcn.1401cc040
movzx eax, byte [rsp + 0x12f]
mov r15, rax
test al, al
jns 0x1400143cb
mov r15, qword [rsp + 0x120]
mov rdi, qword [rsp + 0x118]
movzx ecx, byte [rsp + 0x107]
mov ebx, 0xa
mov rsi, rcx
test cl, cl
jns 0x1400143ff
mov rbx, qword [rsp + 0x100]
movabs rdx, 0x7fffffffffffffff
and rbx, rdx
dec rbx
mov rsi, qword [rsp + 0xf8]
mov rdx, rbx
sub rdx, rsi
cmp rdx, r15
jb 0x140014bc3
test r15, r15
je 0x14001446c
lea rax, [rsp + 0xf0]
test cl, cl
jns 0x140014427
mov rax, qword [rsp + 0xf0]
lea rcx, [rax + rsi*2]
xor edx, edx
movzx ebp, word [rdi + rdx*2]
mov word [rcx + rdx*2], bp
inc rdx
cmp r15, rdx
jne 0x14001442d
add rsi, r15
cmp byte [rsp + 0x107], 0
js 0x140014454
mov byte [rsp + 0x107], sil
jmp 0x14001445c
mov qword [rsp + 0xf8], rsi
lea rax, [rax + rsi*2]
mov word [rax], 0
mov al, byte [rsp + 0x12f]
test al, al
jns 0x14001447d
mov rcx, qword [rsp + 0x118]
call fcn.140112038
xor ebp, ebp
movabs r15, 0x7fffffffffffffff
mov rsi, qword [rsp + 0x50]
mov rax, rbp
shl rax, 4
lea rcx, str.UniqueProcessId
mov eax, dword [rax + rcx + 8]
mov ecx, 0x5000121a
bt rcx, rbp
jb 0x140014574
mov r8, qword [rsi + rax]
lea rbx, [rsp + 0x118]
mov rcx, rbx
lea rdx, str._llu_
call fcn.1401cc040
movzx eax, byte [rsp + 0x12f]
mov rdi, rax
test al, al
jns 0x1400144e9
mov rdi, qword [rsp + 0x120]
mov rbx, qword [rsp + 0x118]
movzx ecx, byte [rsp + 0x107]
mov r12d, 0xa
mov rsi, rcx
test cl, cl
jns 0x140014514
mov r12, qword [rsp + 0x100]
and r12, r15
dec r12
mov rsi, qword [rsp + 0xf8]
mov rdx, r12
sub rdx, rsi
cmp rdx, rdi
jb 0x1400146a7
test rdi, rdi
je 0x14001464a
lea r8, [rsp + 0xf0]
test cl, cl
jns 0x140014540
mov r8, qword [rsp + 0xf0]
lea rcx, [r8 + rsi*2]
xor edx, edx
movzx eax, word [rbx + rdx*2]
mov word [rcx + rdx*2], ax
inc rdx
cmp rdi, rdx
jne 0x140014546
add rsi, rdi
cmp byte [rsp + 0x107], 0
js 0x140014632
mov byte [rsp + 0x107], sil
jmp 0x14001463a
mov r8d, dword [rsi + rax]
lea rbx, [rsp + 0x118]
mov rcx, rbx
lea rdx, str._lu_
call fcn.1401cc040
movzx eax, byte [rsp + 0x12f]
mov rdi, rax
test al, al
jns 0x1400145ae
mov rdi, qword [rsp + 0x120]
mov rbx, qword [rsp + 0x118]
movzx ecx, byte [rsp + 0x107]
mov r12d, 0xa
mov r14, rcx
test cl, cl
jns 0x1400145d9
mov r12, qword [rsp + 0x100]
and r12, r15
dec r12
mov r14, qword [rsp + 0xf8]
mov rdx, r12
sub rdx, r14
cmp rdx, rdi
jb 0x14001478f
test rdi, rdi
je 0x14001467f
lea rax, [rsp + 0xf0]
test cl, cl
jns 0x140014605
mov rax, qword [rsp + 0xf0]
lea rcx, [rax + r14*2]
xor edx, edx
movzx esi, word [rbx + rdx*2]
mov word [rcx + rdx*2], si
inc rdx
cmp rdi, rdx
jne 0x14001460b
add r14, rdi
cmp byte [rsp + 0x107], 0
js 0x140014662
mov byte [rsp + 0x107], r14b
jmp 0x14001466a
mov qword [rsp + 0xf8], rsi
lea rax, [r8 + rsi*2]
mov word [rax], 0
mov al, byte [rsp + 0x12f]
test al, al
jns 0x14001465b
mov rcx, qword [rsp + 0x118]
call fcn.140112038
mov rsi, qword [rsp + 0x50]
jmp 0x140014695
mov qword [rsp + 0xf8], r14
mov rsi, qword [rsp + 0x50]
lea rax, [rax + r14*2]
mov word [rax], 0
mov al, byte [rsp + 0x12f]
test al, al
jns 0x140014690
mov rcx, qword [rsp + 0x118]
call fcn.140112038
mov r14, qword [rsp + 0x70]
inc rbp
cmp rbp, 0x1f
jne 0x14001448e
jmp 0x1400148e2
mov rdx, r15
lea r15, [rsi + rdi]
mov rax, r15
sub rax, r12
sub rdx, r12
add rdx, 0xffffffffffffffef
cmp rdx, rax
jb 0x1400150c4
lea rax, [rsp + 0xf0]
test cl, cl
jns 0x1400146d8
mov rax, qword [rsp + 0xf0]
mov qword [rsp + 0x58], rax
movabs rax, 0x3fffffffffffffe7
cmp r12, rax
jae 0x1400148bc
lea rax, [r12 + r12]
cmp r15, rax
cmovae rax, r15
mov r13d, 0xb
cmp rax, 0xb
jb 0x140014718
add rax, 8
and rax, 0xfffffffffffffff8
mov r13, rax
js 0x1400150d1
mov rcx, r13
add rcx, r13
call fcn.140112048
mov r14, rax
test rsi, rsi
mov rdx, qword [rsp + 0x58]
jne 0x14001486f
lea rcx, [r14 + rsi*2]
add rdi, rdi
mov rdx, rbx
mov r8, rdi
call fcn.1401178b0
cmp r12, 0xa
jne 0x14001489e
mov qword [rsp + 0xf0], r14
movabs rcx, 0x7fffffffffffffff
lea rax, [rcx + 1]
or r13, rax
mov qword [rsp + 0x100], r13
mov qword [rsp + 0xf8], r15
lea rax, [r14 + r15*2]
mov r15, rcx
mov r13, qword [rsp + 0x68]
mov r14, qword [rsp + 0x70]
jmp 0x14001463e
mov rdx, r15
lea r15, [r14 + rdi]
mov rax, r15
sub rax, r12
sub rdx, r12
add rdx, 0xffffffffffffffef
cmp rdx, rax
jb 0x1400150c4
lea rax, [rsp + 0xf0]
test cl, cl
jns 0x1400147c0
mov rax, qword [rsp + 0xf0]
mov qword [rsp + 0x58], rax
movabs rax, 0x3fffffffffffffe7
cmp r12, rax
jae 0x1400148cf
lea rax, [r12 + r12]
cmp r15, rax
cmovae rax, r15
mov r13d, 0xb
cmp rax, 0xb
jb 0x140014800
add rax, 8
and rax, 0xfffffffffffffff8
mov r13, rax
js 0x1400150d1
mov rcx, r13
add rcx, r13
call fcn.140112048
mov rsi, rax
test r14, r14
mov rdx, qword [rsp + 0x58]
jne 0x140014887
lea rcx, [rsi + r14*2]
add rdi, rdi
mov rdx, rbx
mov r8, rdi
call fcn.1401178b0
cmp r12, 0xa
jne 0x1400148ad
mov qword [rsp + 0xf0], rsi
movabs rcx, 0x7fffffffffffffff
lea rax, [rcx + 1]
or r13, rax
mov qword [rsp + 0x100], r13
mov qword [rsp + 0xf8], r15
lea rax, [rsi + r15*2]
mov r15, rcx
mov r13, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x50]
jmp 0x140014673
xor eax, eax
movzx ecx, word [rdx + rax*2]
mov word [r14 + rax*2], cx
inc rax
cmp rsi, rax
jne 0x140014871
jmp 0x140014734
xor eax, eax
movzx ecx, word [rdx + rax*2]
mov word [rsi + rax*2], cx
inc rax
cmp r14, rax
jne 0x140014889
jmp 0x140014818
mov rcx, qword [rsp + 0x58]
call fcn.140112038
jmp 0x140014750
mov rcx, qword [rsp + 0x58]
call fcn.140112038
jmp 0x140014830
movabs rax, 0x7fffffffffffffff
lea r13, [rax - 0x10]
jmp 0x140014718
movabs rax, 0x7fffffffffffffff
lea r13, [rax - 0x10]
jmp 0x140014800
cmp dword [rsp + 0x64], 0
je 0x140014b2c
mov al, 1
xor ebp, ebp
imul rcx, rbp, 0x38
mov edx, dword [r14 + rcx + 0x2c]
cmp edx, dword [rsi + 0x50]
jne 0x140014a02
mov r9, qword [r14 + rcx + 8]
test al, 1
lea r8, [0x1402b0402]
lea rax, [0x1402c82ee]
cmove r8, rax
lea rbx, [rsp + 0x118]
mov rcx, rbx
lea rdx, str._ls_ls
call fcn.1401cc040
movzx eax, byte [rsp + 0x12f]
mov rdi, rax
test al, al
jns 0x140014952
mov rdi, qword [rsp + 0x120]
mov rbx, qword [rsp + 0x118]
movzx ecx, byte [rsp + 0x107]
mov r12d, 0xa
mov rsi, rcx
test cl, cl
jns 0x14001497d
mov r12, qword [rsp + 0x100]
and r12, r15
dec r12
mov rsi, qword [rsp + 0xf8]
mov rdx, r12
sub rdx, rsi
cmp rdx, rdi
jb 0x140014a18
test rdi, rdi
je 0x1400149ea
lea r8, [rsp + 0xf0]
test cl, cl
jns 0x1400149a5
mov r8, qword [rsp + 0xf0]
lea rcx, [r8 + rsi*2]
xor edx, edx
movzx eax, word [rbx + rdx*2]
mov word [rcx + rdx*2], ax
inc rdx
cmp rdi, rdx
jne 0x1400149ab
add rsi, rdi
cmp byte [rsp + 0x107], 0
js 0x1400149d2
mov byte [rsp + 0x107], sil
jmp 0x1400149da
mov qword [rsp + 0xf8], rsi
lea rax, [r8 + rsi*2]
mov word [rax], 0
mov al, byte [rsp + 0x12f]
test al, al
jns 0x1400149fb
mov rcx, qword [rsp + 0x118]
call fcn.140112038
xor eax, eax
mov rsi, qword [rsp + 0x50]
inc rbp
cmp rbp, qword [rsp + 0x88]
jne 0x1400148f1
jmp 0x140014b2c
mov rdx, r15
lea r15, [rsi + rdi]
mov rax, r15
sub rax, r12
sub rdx, r12
add rdx, 0xffffffffffffffef
cmp rdx, rax
jb 0x1400150c4
lea rax, [rsp + 0xf0]
test cl, cl
jns 0x140014a49
mov rax, qword [rsp + 0xf0]
mov qword [rsp + 0x58], rax
movabs rax, 0x3fffffffffffffe7
cmp r12, rax
jae 0x140014b19
lea rax, [r12 + r12]
cmp r15, rax
cmovae rax, r15
mov r13d, 0xb
cmp rax, 0xb
jb 0x140014a89
add rax, 8
and rax, 0xfffffffffffffff8
mov r13, rax
js 0x1400150d1
mov rcx, r13
add rcx, r13
call fcn.140112048
mov r14, rax
test rsi, rsi
mov rdx, qword [rsp + 0x58]
jne 0x140014af8
lea rcx, [r14 + rsi*2]
add rdi, rdi
mov rdx, rbx
mov r8, rdi
call fcn.1401178b0
cmp r12, 0xa
jne 0x140014b0d
mov qword [rsp + 0xf0], r14
movabs rcx, 0x7fffffffffffffff
lea rax, [rcx + 1]
or r13, rax
mov qword [rsp + 0x100], r13
mov qword [rsp + 0xf8], r15
lea rax, [r14 + r15*2]
mov r15, rcx
mov r13, qword [rsp + 0x68]
mov r14, qword [rsp + 0x70]
jmp 0x1400149de
xor eax, eax
movzx ecx, word [rdx + rax*2]
mov word [r14 + rax*2], cx
inc rax
cmp rsi, rax
jne 0x140014afa
jmp 0x140014aa1
mov rcx, qword [rsp + 0x58]
call fcn.140112038
jmp 0x140014ab9
movabs rax, 0x7fffffffffffffff
lea r13, [rax - 0x10]
jmp 0x140014a89
movzx eax, byte [rsp + 0x107]
mov ebp, 0xa
mov rbx, rax
test al, al
jns 0x140014b56
mov rbp, qword [rsp + 0x100]
and rbp, r15
dec rbp
mov rbx, qword [rsp + 0xf8]
mov rcx, rbp
sub rcx, rbx
cmp rcx, 2
jb 0x140014cb5
lea rcx, [rsp + 0xf0]
test al, al
jns 0x140014b7a
mov rcx, qword [rsp + 0xf0]
mov dword [rcx + rbx*2], 0xa000d
add rbx, 2
cmp byte [rsp + 0x107], 0
js 0x140014b98
mov byte [rsp + 0x107], bl
jmp 0x140014ba0
mov qword [rsp + 0xf8], rbx
lea rax, [rcx + rbx*2]
lea rbp, str._Idle_
mov word [rax], 0
mov eax, dword [rsi]
add rsi, rax
test rax, rax
jne 0x140014298
jmp 0x140014df1
lea r12, [rsi + r15]
mov rax, r12
sub rax, rbx
movabs rdx, 0x7fffffffffffffff
sub rdx, rbx
add rdx, 0xffffffffffffffef
cmp rdx, rax
jb 0x1400150c4
lea rax, [rsp + 0xf0]
test cl, cl
jns 0x140014bfb
mov rax, qword [rsp + 0xf0]
mov qword [rsp + 0x58], rax
movabs rax, 0x3fffffffffffffe7
cmp rbx, rax
jae 0x140014dcb
lea rax, [rbx + rbx]
cmp r12, rax
cmovae rax, r12
mov r14d, 0xb
cmp rax, 0xb
jb 0x140014c3b
add rax, 8
and rax, 0xfffffffffffffff8
mov r14, rax
js 0x1400150d1
lea rcx, [r14 + r14]
call fcn.140112048
mov rbp, rax
test rsi, rsi
mov rdx, qword [rsp + 0x58]
jne 0x140014d82
lea rcx, [rsi*2]
add rcx, rbp
add r15, r15
mov rdx, rdi
mov r8, r15
call fcn.1401178b0
cmp rbx, 0xa
jne 0x140014daf
mov qword [rsp + 0xf0], rbp
movabs rax, 0x7fffffffffffffff
inc rax
or r14, rax
mov qword [rsp + 0x100], r14
mov qword [rsp + 0xf8], r12
lea rax, [r12*2]
add rax, rbp
mov r14, qword [rsp + 0x70]
jmp 0x140014460
mov rdx, r15
lea r15, [rbx + 2]
mov rcx, r15
sub rcx, rbp
sub rdx, rbp
add rdx, 0xffffffffffffffef
cmp rdx, rcx
jb 0x1400150c4
lea r14, [rsp + 0xf0]
test al, al
jns 0x140014ce6
mov r14, qword [rsp + 0xf0]
movabs rax, 0x3fffffffffffffe7
cmp rbp, rax
jae 0x140014dde
mov rax, rbp
add rax, rbp
cmp r15, rax
cmovae rax, r15
mov edi, 0xb
cmp rax, 0xb
jb 0x140014d22
add rax, 8
and rax, 0xfffffffffffffff8
mov rdi, rax
js 0x1400150d1
lea rcx, [rdi + rdi]
call fcn.140112048
mov rsi, rax
test rbx, rbx
jne 0x140014d9a
mov dword [rsi + rbx*2], 0xa000d
cmp rbp, 0xa
jne 0x140014dbe
mov qword [rsp + 0xf0], rsi
movabs rax, 0x7fffffffffffffff
inc rax
or rdi, rax
mov qword [rsp + 0x100], rdi
mov qword [rsp + 0xf8], r15
lea rax, [rsi + r15*2]
mov r14, qword [rsp + 0x70]
lea rbp, str._Idle_
mov rsi, qword [rsp + 0x50]
jmp 0x140014bab
xor eax, eax
movzx ecx, word [rdx + rax*2]
mov word [rbp + rax*2], cx
inc rax
cmp rsi, rax
jne 0x140014d84
jmp 0x140014c55
xor eax, eax
movzx ecx, word [r14 + rax*2]
mov word [rsi + rax*2], cx
inc rax
cmp rbx, rax
jne 0x140014d9c
jmp 0x140014d33
mov rcx, qword [rsp + 0x58]
call fcn.140112038
jmp 0x140014c78
mov rcx, r14
call fcn.140112038
jmp 0x140014d40
movabs rax, 0x7fffffffffffffff
lea r14, [rax - 0x10]
jmp 0x140014c3b
movabs rax, 0x7fffffffffffffff
lea rdi, [rax - 0x10]
jmp 0x140014d22
movabs rax, 0xaaaaaaaaaaaaaaaa
lea rsi, [rsp + 0xa0]
mov qword [rsi + 0x10], rax
movaps xmm0, xmmword [0x1402ae190]
movaps xmmword [rsi], xmm0
lea rax, str.memory.csv
lea r8, [rsp + 0x90]
mov qword [r8], rax
mov qword [r8 + 8], 0xa
mov rcx, qword [rsp + 0x80]
mov rdx, rsi
call fcn.14000cf90
mov ecx, 0x60
call fcn.140112048
mov rdi, rax
mov rcx, rax
mov edx, 1
call fcn.140229206
mov rcx, rdi
mov rdx, rsi
mov r8d, 3
xor r9d, r9d
call fcn.14001f9aa
test al, al
je 0x140014eb8
lea rdx, [rsp + 0xf0]
movzx r8d, byte [rdx + 0x17]
test r8b, r8b
cmovs r8, qword [rdx + 8]
cmovs rdx, qword [rdx]
add r8, r8
mov rcx, qword [rdi + 0x38]
call fcn.14017adeb
test al, al
je 0x140014f11
mov rcx, rdi
call fcn.14001c27a
lea rdx, [rsp + 0xa0]
mov rcx, qword [rsp + 0x78]
call fcn.1400f0080
mov bpl, 1
jmp 0x140014f6e
mov ecx, 2
call fcn.1400f34e0
test al, al
je 0x140014f6c
lea rdx, str..._.._third_party_crashpad_crashpad_util_watson_memory_csv.cc
lea rsi, [rsp + 0x118]
mov rcx, rsi
mov r8d, 0x117
mov r9d, 2
call fcn.14019a740
lea rcx, [rsp + 0x128]
lea rdx, str.Failed_to_create_memory.csv
mov r8d, 0x1b
call fcn.1400ff874
mov rcx, rsi
call fcn.140001d00
jmp 0x140014f6c
mov ecx, 2
call fcn.1400f34e0
test al, al
je 0x140014f64
lea rdx, str..._.._third_party_crashpad_crashpad_util_watson_memory_csv.cc
lea rsi, [rsp + 0x118]
mov rcx, rsi
mov r8d, 0x11d
mov r9d, 2
call fcn.14019a740
lea rcx, [rsp + 0x128]
lea rdx, str.Failed_to_write_to_memory.csv
mov r8d, 0x1d
call fcn.1400ff874
mov rcx, rsi
call fcn.140001d00
mov rcx, rdi
call fcn.14001c27a
xor ebp, ebp
test rdi, rdi
je 0x140014f83
mov rcx, rdi
call fcn.14001c842
mov rcx, rdi
call fcn.140112038
lea rcx, [rsp + 0xa0]
call fcn.1400e1350
cmp byte [rsp + 0xe7], 0
jns 0x140014fa7
mov rcx, qword [rsp + 0xd0]
call fcn.140112038
cmp byte [rsp + 0x107], 0
jns 0x140014fbe
mov rcx, qword [rsp + 0xf0]
call fcn.140112038
lea rcx, [rsp + 0x108]
xor edx, edx
call fcn.1401adab0
jmp 0x140013c45
mov rdx, r15
lea r15, [rbx + 0xb]
mov rcx, r15
sub rcx, rbp
sub rdx, rbp
add rdx, 0xffffffffffffffef
cmp rdx, rcx
jb 0x1400150c4
test al, al
jns 0x140014ffd
mov r14, qword [rsp + 0xf0]
jmp 0x140015005
lea r14, [rsp + 0xf0]
movabs rax, 0x3fffffffffffffe7
cmp rbp, rax
jae 0x1400150de
mov rax, rbp
add rax, rbp
cmp r15, rax
cmovae rax, r15
mov edi, 0xb
cmp rax, 0xb
jb 0x140015041
add rax, 8
and rax, 0xfffffffffffffff8
mov rdi, rax
js 0x1400150d1
lea rcx, [rdi + rdi]
call fcn.140112048
mov rsi, rax
test rbx, rbx
jne 0x1400150a0
mov rax, qword [0x1402c82b2]
mov qword [rsi + rbx*2 + 0xe], rax
movups xmm0, xmmword [str._Services_r_n]
movups xmmword [rsi + rbx*2], xmm0
cmp rbp, 0xa
jne 0x1400150b5
mov qword [rsp + 0xf0], rsi
movabs rax, 0x7fffffffffffffff
inc rax
or rdi, rax
mov qword [rsp + 0x100], rdi
mov qword [rsp + 0xf8], r15
lea rax, [rsi + r15*2]
jmp 0x14001424c
xor eax, eax
movzx ecx, word [r14 + rax*2]
mov word [rsi + rax*2], cx
inc rax
cmp rbx, rax
jne 0x1400150a2
jmp 0x140015052
mov rcx, r14
call fcn.140112038
jmp 0x14001506f
call fcn.1401cc020
lea rcx, [rsp + 0xf0]
call fcn.1401573b4
call fcn.140112370
mov rcx, rbx
call fcn.140196430
movabs rax, 0x7fffffffffffffff
lea rdi, [rax - 0x10]
jmp 0x140015041