Function at 0x14006b4c0
Capabilities:
Create process on windows
Self delete

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x2a8
movaps xmmword [rsp + 0x290], xmm6
mov r15, rcx
mov rax, qword [0x140287028]
xor rax, rsp
mov qword [rsp + 0x288], rax
mov rax, qword gs:[0x30]
mov rax, qword [rax + 0x60]
mov rax, qword [rax + 0x110]
mov rax, qword [rax + 0x10]
mov rcx, qword gs:[0x30]
cmp rax, qword [rcx + 0x48]
je 0x14006c5e5
xorps xmm6, xmm6
lea rdx, [rsp + 0x270]
movaps xmmword [rdx], xmm6
mov qword [rdx + 0x10], 0
mov rcx, qword [r15]
call fcn.1400d64e0
mov rdi, qword [r15]
mov rsi, qword [rdi + 0x78]
mov r14, qword [rdi + 0x80]
cmp rsi, r14
je 0x14006b5bd
lea rdi, [rsp + 0xd0]
lea rbx, [rsp + 0x270]
movzx eax, byte [rsi + 0x17]
mov edx, eax
and edx, 0x7f
test al, al
mov rcx, qword [rsi]
cmovs rdx, qword [rsi + 8]
cmovns rcx, rsi
movaps xmmword [rsp + 0xd0], xmm6
mov qword [rsp + 0xe0], 0
mov r8, rdi
call fcn.140130aa0
mov rcx, rdi
mov rdx, rbx
call fcn.1400d64e0
cmp byte [rsp + 0xe7], 0
jns 0x14006b5b1
mov rcx, qword [rsp + 0xd0]
call fcn.140172a44
add rsi, 0x18
cmp rsi, r14
jne 0x14006b55c
mov rdi, qword [r15]
movzx eax, byte [rdi + 0x2f]
test al, al
jns 0x14006b5c9
mov rax, qword [rdi + 0x20]
test rax, rax
jne 0x14006b9bf
movzx eax, byte [rdi + 0x47]
test al, al
jns 0x14006b5de
mov rax, qword [rdi + 0x38]
test rax, rax
jne 0x14006ba2a
movzx eax, byte [rdi + 0x5f]
test al, al
js 0x14006b5f4
mov rcx, rax
jmp 0x14006b5f8
mov rcx, qword [rdi + 0x50]
test rcx, rcx
mov qword [rsp + 0x58], r15
jne 0x14006ba95
mov r13, qword [rdi + 0x60]
lea r14, [rdi + 0x68]
cmp r13, r14
je 0x14006b859
movabs rbx, 0x7fffffffffffffef
xorps xmm6, xmm6
lea r15, [rsp + 0x230]
xor r12d, r12d
movzx edi, byte [r13 + 0x37]
test dil, dil
jns 0x14006b63f
mov rbp, qword [r13 + 0x28]
jmp 0x14006b644
mov ebp, edi
and ebp, 0x7f
lea rsi, [rbp + 1]
cmp rsi, rbx
ja 0x14006c5dd
cmp rsi, 0x16
ja 0x14006b678
movaps xmmword [rsp + 0x230], xmm6
mov qword [rsp + 0x240], 0
mov byte [rsp + 0x247], sil
mov rcx, r15
jmp 0x14006b6bb
mov r12, r15
mov r15, rbx
mov rbx, rsi
or rbx, 0xf
inc rbx
mov rcx, rbx
call fcn.140172a4c
mov rcx, rax
lea rax, [r15 + 0x11]
or rax, rbx
mov rbx, r15
mov r15, r12
xor r12d, r12d
mov qword [rsp + 0x240], rax
mov qword [rsp + 0x230], rcx
mov qword [rsp + 0x238], rsi
lea rdx, [r13 + 0x20]
test dil, dil
jns 0x14006b6c7
mov rdx, qword [rdx]
lea rsi, [rcx + rbp]
cmp rdx, rcx
jb 0x14006b6d9
cmp rsi, rdx
ja 0x14006c5e8
test rbp, rbp
je 0x14006b6e6
mov r8, rbp
call fcn.140177150
mov word [rsi], 0x3d
movzx r8d, byte [r13 + 0x4f]
test r8b, r8b
jns 0x14006b6ff
mov r8, qword [r13 + 0x40]
mov rdx, qword [r13 + 0x38]
jmp 0x14006b707
lea rdx, [r13 + 0x38]
and r8d, 0x7f
mov rcx, r15
call fcn.1400365e0
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x260], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x250], xmm0
movups xmmword [rax], xmm6
mov qword [rax + 0x10], r12
movzx eax, byte [rsp + 0x267]
mov edx, eax
and edx, 0x7f
test al, al
mov rcx, qword [rsp + 0x250]
cmovs rdx, qword [rsp + 0x258]
lea rax, [rsp + 0x250]
cmovns rcx, rax
movaps xmmword [rsp + 0x60], xmm6
mov qword [rsp + 0x70], r12
lea rsi, [rsp + 0x60]
mov r8, rsi
call fcn.140130aa0
lea rdi, [rsp + 0x218]
mov rcx, rdi
lea rdx, str.annotation
call fcn.1401af190
lea rbp, [rsp + 0xd0]
mov rcx, rbp
mov rdx, rdi
mov r8, rsi
call fcn.1400792d0
mov rcx, rbp
lea rdx, [rsp + 0x270]
call fcn.1400d64e0
cmp byte [rsp + 0xe7], 0
jns 0x14006b7c4
mov rcx, qword [rsp + 0xd0]
call fcn.140172a44
cmp byte [rsp + 0x22f], 0
jns 0x14006b7db
mov rcx, qword [rsp + 0x218]
call fcn.140172a44
cmp byte [rsp + 0x77], 0
jns 0x14006b7ec
mov rcx, qword [rsp + 0x60]
call fcn.140172a44
cmp byte [rsp + 0x267], 0
jns 0x14006b803
mov rcx, qword [rsp + 0x250]
call fcn.140172a44
cmp byte [rsp + 0x247], 0
jns 0x14006b81a
mov rcx, qword [rsp + 0x230]
call fcn.140172a44
test r13, r13
je 0x14006c5e2
mov rcx, qword [r13 + 8]
test rcx, rcx
jne 0x14006b83a
mov rax, qword [r13 + 0x10]
cmp qword [rax], r13
mov r13, rax
je 0x14006b845
jmp 0x14006b82c
mov rax, rcx
mov rcx, qword [rcx]
test rcx, rcx
jne 0x14006b83a
mov r13, rax
cmp rax, r14
jne 0x14006b62f
mov rax, qword [rsp + 0x58]
mov rdi, qword [rax]
mov rbx, qword [rdi + 0x90]
mov rsi, qword [rdi + 0x98]
cmp rbx, rsi
je 0x14006b8dd
lea rdi, [0x14026f120]
lea r14, [rsp + 0x60]
lea r15, [rsp + 0xd0]
lea r12, [rsp + 0x270]
mov rcx, r14
mov rdx, rdi
call fcn.1401af190
mov rcx, r15
mov rdx, r14
mov r8, rbx
call fcn.1400792d0
mov rcx, r15
mov rdx, r12
call fcn.1400d64e0
cmp byte [rsp + 0xe7], 0
jns 0x14006b8c3
mov rcx, qword [rsp + 0xd0]
call fcn.140172a44
cmp byte [rsp + 0x77], 0
jns 0x14006b8d4
mov rcx, qword [rsp + 0x60]
call fcn.140172a44
add rbx, 0x18
cmp rbx, rsi
jne 0x14006b888
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, 0x1f0fff
mov edx, 1
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
mov r13, qword [rsp + 0x58]
jne 0x14006bb46
cmp dword [0x140299b30], 2
jg 0x14006b95c
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rsi, [rsp + 0xd0]
mov rcx, rsi
mov r8d, 0x19a
mov r9d, 2
call fcn.1401d2730
lea rcx, [rsp + 0xe0]
lea rdx, [0x1402719f4]
mov r8d, 0xb
call fcn.1401af730
mov rcx, rsi
call fcn.1401d27b0
xor ebp, ebp
xor r15d, r15d
cmp byte [rsp + 0x287], 0
jns 0x14006b978
mov rcx, qword [rsp + 0x270]
call fcn.140172a44
xor eax, eax
cmp r15b, 1
adc rax, 1
mov qword [0x1402a2ad8], rax
mov rcx, r13
call fcn.140079120
mov rcx, qword [rsp + 0x288]
xor rcx, rsp
call fcn.1401756e0
mov eax, ebp
movaps xmm6, xmmword [rsp + 0x290]
add rsp, 0x2a8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
add rdi, 0x18
lea rdx, str.database
lea rbx, [rsp + 0x60]
mov rcx, rbx
call fcn.1401af190
lea r14, [rsp + 0xd0]
mov rcx, r14
mov rdx, rbx
mov r8, rdi
call fcn.1400792d0
lea rdx, [rsp + 0x270]
mov rcx, r14
call fcn.1400d64e0
cmp byte [r14 + 0x17], 0
jns 0x14006ba11
mov rcx, qword [rsp + 0xd0]
call fcn.140172a44
cmp byte [rsp + 0x77], 0
jns 0x14006ba22
mov rcx, qword [rsp + 0x60]
call fcn.140172a44
mov rdi, qword [r15]
jmp 0x14006b5d2
add rdi, 0x30
lea rdx, str.metrics_dir
lea rbx, [rsp + 0x60]
mov rcx, rbx
call fcn.1401af190
lea r14, [rsp + 0xd0]
mov rcx, r14
mov rdx, rbx
mov r8, rdi
call fcn.1400792d0
lea rdx, [rsp + 0x270]
mov rcx, r14
call fcn.1400d64e0
cmp byte [r14 + 0x17], 0
jns 0x14006ba7c
mov rcx, qword [rsp + 0xd0]
call fcn.140172a44
cmp byte [rsp + 0x77], 0
jns 0x14006ba8d
mov rcx, qword [rsp + 0x60]
call fcn.140172a44
mov rdi, qword [r15]
jmp 0x14006b5e7
lea rcx, [rdi + 0x48]
mov edx, eax
and edx, 0x7f
test al, al
cmovs rcx, qword [rdi + 0x48]
cmovs rdx, qword [rdi + 0x50]
xorps xmm0, xmm0
lea rdi, [rsp + 0x60]
movaps xmmword [rdi], xmm0
mov qword [rdi + 0x10], 0
mov r8, rdi
call fcn.140130aa0
lea rdx, [0x140262d21]
lea rbx, [rsp + 0x250]
mov rcx, rbx
call fcn.1401af190
lea r14, [rsp + 0xd0]
mov rcx, r14
mov rdx, rbx
mov r8, rdi
call fcn.1400792d0
lea rdx, [rsp + 0x270]
mov rcx, r14
call fcn.1400d64e0
cmp byte [r14 + 0x17], 0
jns 0x14006bb16
mov rcx, qword [rsp + 0xd0]
call fcn.140172a44
cmp byte [rsp + 0x267], 0
jns 0x14006bb2d
mov rcx, qword [rsp + 0x250]
call fcn.140172a44
cmp byte [rsp + 0x77], 0
jns 0x14006bb3e
mov rcx, qword [rsp + 0x60]
call fcn.140172a44
mov rdi, qword [r15]
jmp 0x14006b606
mov rdi, rax
mov rax, qword [r13]
mov rax, qword [rax + 0xc8]
mov rcx, qword [0x140296780]
mov r9, qword [0x140296770]
mov r8, qword [0x140296760]
movsxd rdx, edi
cmp rdx, rdi
jne 0x14006c5eb
mov edx, edi
movsxd r10, eax
cmp r10, rax
jne 0x14006c5f3
movsxd r10, ecx
cmp r10, rcx
jne 0x14006c5fb
movsxd r10, r9d
cmp r10, r9
jne 0x14006c603
movsxd r10, r8d
cmp r10, r8
jne 0x14006c60c
lea r10, [0x1402a2aa8]
mov qword [rsp + 0x48], r10
lea r10, [0x1402a2a98]
mov qword [rsp + 0x40], r10
lea r10, [0x1402a2a88]
mov qword [rsp + 0x38], r10
mov dword [rsp + 0x30], edx
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], ecx
lea rdx, str.0x_x_0x_x_0x_x_0x_x_0x_x_0x_I64x_0x_I64x_0x_I64x
lea rbx, [rsp + 0x250]
mov rcx, rbx
call fcn.140102fa0
lea rdx, str.__initial_client_data
lea rsi, [rsp + 0x230]
mov rcx, rsi
call fcn.1401af190
movzx r8d, byte [rbx + 0x17]
test r8b, r8b
jns 0x14006bc21
mov r8, qword [rsp + 0x258]
mov rbx, qword [rsp + 0x250]
jmp 0x14006bc25
and r8d, 0x7f
mov rcx, rsi
mov rdx, rbx
call fcn.1400365e0
mov rcx, qword [rax + 0x10]
lea rsi, [rsp + 0x60]
mov qword [rsi + 0x10], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsi], xmm0
xorps xmm0, xmm0
movups xmmword [rax], xmm0
xor r8d, r8d
mov qword [rax + 0x10], r8
movzx eax, byte [rsi + 0x17]
mov edx, eax
and edx, 0x7f
test al, al
mov rcx, qword [rsi]
cmovns rcx, rsi
cmovs rdx, qword [rsi + 8]
lea r13, [rsp + 0xd0]
movaps xmmword [r13], xmm0
mov qword [r13 + 0x10], r8
mov r8, r13
call fcn.140130aa0
lea r12, [rsp + 0x270]
mov rcx, r13
mov rdx, r12
call fcn.1400d64e0
cmp byte [r13 + 0x17], 0
jns 0x14006bca7
mov rcx, qword [rsp + 0xd0]
call fcn.140172a44
cmp byte [rsp + 0x77], 0
jns 0x14006bcb8
mov rcx, qword [rsp + 0x60]
call fcn.140172a44
cmp byte [rsp + 0x247], 0
jns 0x14006bccf
mov rcx, qword [rsp + 0x230]
call fcn.140172a44
cmp byte [rsp + 0x267], 0
jns 0x14006bce6
mov rcx, qword [rsp + 0x250]
call fcn.140172a44
xorps xmm0, xmm0
movaps xmmword [rsp + 0x90], xmm0
movaps xmmword [rsp + 0xc0], xmm0
movaps xmmword [rsp + 0xb0], xmm0
movaps xmmword [rsp + 0xa0], xmm0
movaps xmmword [rsp + 0x80], xmm0
movaps xmmword [rsp + 0x70], xmm0
movaps xmmword [rsp + 0x60], xmm0
mov dword [rsp + 0x9c], 0x100
mov rbx, qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov ecx, 0xfffffff6
call rbx
mov r14, rax
mov qword [rsp + 0xb0], rax
mov ecx, 0xfffffff5
call rbx
mov rbp, rax
mov qword [rsp + 0xb8], rax
mov ecx, 0xfffffff4
call rbx
mov r15, rax
mov qword [rsp + 0xc0], rax
movabs r10, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x260], r10
movaps xmm6, xmmword [0x140261350]
movaps xmmword [rsp + 0x250], xmm6
mov eax, dword [0x1402a2ae8]
mov ecx, dword [0x140296f94]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14006c513
mov eax, dword [0x1402a2af8]
mov ecx, dword [0x140296f94]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14006c573
mov rax, qword [0x1402a2ae0]
test rax, rax
je 0x14006be6e
cmp qword [0x1402a2af0], 0
je 0x14006be6e
mov dword [rsp + 0x60], 0x70
lea r9, [rsp + 0x230]
mov qword [r9], r10
xor ecx, ecx
mov edx, 1
xor r8d, r8d
call qword [case.0x1401d7990.0]
test eax, eax
je 0x14006c0e5
cmp dword [0x140299b30], 2
jg 0x14006c2a3
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rsi, [rsp + 0xd0]
mov rcx, rsi
mov r8d, 0x1cb
mov r9d, 2
call fcn.140007b50
lea rcx, [rsp + 0xe0]
lea rdx, str.InitializeProcThreadAttributeList__size__succeeded__expected_failure
mov r8d, 0x44
call fcn.1401af730
mov rcx, rsi
call fcn.140007c40
jmp 0x14006c2a3
mov dword [rsp + 0x60], 0x68
xor r14d, r14d
xor ebx, ebx
xor r15d, r15d
mov rax, qword [rsp + 0x58]
mov rdx, qword [rax]
movzx r8d, byte [rdx + 0x17]
test r8b, r8b
js 0x14006bfda
cmp r8b, 0xc
jae 0x14006bfe8
mov qword [rsp + 0x240], r10
movaps xmmword [rsp + 0x230], xmm6
cmp byte [rsp + 0x287], 0
jns 0x14006bec2
mov r12, qword [rsp + 0x270]
jmp 0x14006beca
lea r12, [rsp + 0x270]
mov r13, qword [rsp + 0x58]
cmp byte [rdx + 0x17], 0
jns 0x14006bed8
mov rdx, qword [rdx]
lea rax, [rsp + 0x230]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x40], rsi
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], 1
mov rcx, rdx
mov rdx, r12
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x14006c080
mov rcx, qword [rsp + 0x238]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [0x140299b30], 1
jg 0x14006bf41
cmp dword [0x140288f38], 0
je 0x14006bf41
test eax, eax
je 0x14006c464
mov rcx, qword [rsp + 0x230]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [0x140299b30], 1
jg 0x14006bf69
cmp dword [0x140288f38], 0
je 0x14006bf69
test eax, eax
je 0x14006c4b8
mov rsi, qword [r13]
mov rcx, qword [rsi + 0xc8]
cmp rcx, 0xffffffffffffffff
je 0x14006bf87
call fcn.140065d80
test al, al
je 0x14006c61c
mov qword [rsi + 0xc8], 0xffffffffffffffff
xorps xmm0, xmm0
lea rdx, [rsp + 0xd0]
movups xmmword [rdx + 0x14], xmm0
movups xmmword [rdx + 4], xmm0
mov dword [rdx], 2
lea r8, [rsp + 0x218]
mov dword [r8 + 8], 0
mov qword [r8], 0
mov ecx, 0xa8
add rcx, qword [r13]
call fcn.1400636c0
mov r15d, eax
mov ebp, eax
jmp 0x14006c0dd
mov r8, qword [rdx + 8]
cmp r8, 0xc
jb 0x14006be9e
add r8, 0xfffffffffffffff4
lea rax, [rdx + 0x18]
mov qword [rsp + 0x20], rax
mov rcx, r13
mov r9, 0xffffffffffffffff
call fcn.14002b650
cmp byte [rsp + 0xe7], 0
jns 0x14006c016
mov r13, qword [rsp + 0xd0]
lea rdx, str.rundll32.exe
mov rcx, r13
call fcn.140173ac4
mov ebp, eax
cmp byte [rsp + 0xe7], 0
jns 0x14006c03e
mov rcx, qword [rsp + 0xd0]
call fcn.140172a44
cmp byte [rsp + 0x287], 0
mov r13, qword [rsp + 0x58]
jns 0x14006c055
mov r12, qword [rsp + 0x270]
movabs rax, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x240], rax
movaps xmmword [rsp + 0x230], xmm6
test ebp, ebp
je 0x14006c50c
mov rdx, qword [r13]
jmp 0x14006becf
cmp dword [0x140299b30], 2
jg 0x14006c0d8
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rsi, [rsp + 0xd0]
mov rcx, rsi
mov r8d, 0x216
mov r9d, 2
call fcn.1401d2730
lea rcx, [rsp + 0xe0]
lea rdx, str.CreateProcess
mov r8d, 0xd
call fcn.1401af730
mov rcx, rsi
call fcn.1401d27b0
xor r15d, r15d
xor ebp, ebp
mov r12, rbx
jmp 0x14006c2ba
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x14006c24b
lea rax, [rsp + 0x230]
mov rcx, qword [rax]
call fcn.140172dc0
mov rbx, rax
mov qword [rsp + 0xc8], rax
mov rax, qword [0x1402a2ae0]
mov rcx, rbx
mov edx, 1
xor r8d, r8d
lea r9, [rsp + 0x230]
call qword [case.0x1401d7990.0]
test eax, eax
je 0x14006c3a2
mov ecx, 0x40
call fcn.140172a4c
lea rcx, [rax + 0x40]
mov qword [rsp + 0x250], rax
mov qword [rsp + 0x260], rcx
test rax, rax
je 0x14006c61f
mov rcx, qword [0x140296760]
mov qword [rax], rcx
cmp rax, 0xfffffffffffffff8
je 0x14006c622
mov rcx, qword [0x140296770]
mov qword [rax + 8], rcx
cmp rax, 0xfffffffffffffff0
je 0x14006c625
mov rcx, qword [0x140296780]
mov qword [rax + 0x10], rcx
cmp rax, 0xffffffffffffffe8
je 0x14006c628
mov rcx, qword [rsp + 0x58]
mov rcx, qword [rcx]
mov rcx, qword [rcx + 0xc8]
mov qword [rax + 0x18], rcx
cmp rax, 0xffffffffffffffe0
je 0x14006c62b
mov qword [rax + 0x20], rdi
add rax, 0x28
lea rcx, [rsp + 0x250]
mov qword [rcx + 8], rax
mov rdx, r14
call fcn.1400c8060
lea r14, [rsp + 0x250]
mov rcx, r14
mov rdx, rbp
call fcn.1400c8060
mov rbp, r14
mov rcx, r14
mov rdx, r15
call fcn.1400c8060
mov r14, qword [r14]
mov rcx, qword [rbp + 8]
sub rcx, r14
je 0x14006c62e
mov rax, qword [0x1402a2af0]
xorps xmm0, xmm0
movups xmmword [rsp + 0x28], xmm0
mov qword [rsp + 0x20], rcx
mov r8d, 0x20002
mov rcx, rbx
xor edx, edx
mov r9, r14
call qword [case.0x1401d7990.0]
test eax, eax
je 0x14006c404
mov r15d, 0x80000
movabs r10, 0xaaaaaaaaaaaaaaaa
jmp 0x14006be7e
cmp dword [0x140299b30], 2
jg 0x14006c2a3
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rsi, [rsp + 0xd0]
mov rcx, rsi
mov r8d, 0x1cf
mov r9d, 2
call fcn.1401d2730
lea rcx, [rsp + 0xe0]
lea rdx, str.InitializeProcThreadAttributeList__size_
mov r8d, 0x28
call fcn.1401af730
mov rcx, rsi
call fcn.1401d27b0
xor r14d, r14d
xor eax, eax
xor ebx, ebx
mov r13, qword [rsp + 0x58]
mov r12, rbx
xor r15d, r15d
mov rbx, rax
xor ebp, ebp
test rbx, rbx
je 0x14006c33e
mov eax, dword [0x1402a2b08]
mov ecx, dword [0x140296f94]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jle 0x14006c32e
lea rcx, [0x1402a2b08]
call fcn.140172b08
cmp dword [0x1402a2b08], 0xffffffff
jne 0x14006c32e
lea rcx, [0x140262d46]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
test rax, rax
je 0x14006c615
lea rdx, [0x140271b53]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1402a2b00], rax
lea rcx, [0x1402a2b08]
call fcn.140172aa8
mov rax, qword [0x1402a2b00]
mov rcx, rbx
call qword [case.0x1401d7990.0]
test r12, r12
je 0x14006c34b
mov rcx, r12
call fcn.140172f08
test r14, r14
je 0x14006c358
mov rcx, r14
call fcn.140172a44
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
jne 0x14006b961
lea rdx, str....._third_partycrashpadcrashpadutilwin_scoped_handle.cc
lea rsi, [rsp + 0xd0]
mov rcx, rsi
mov r8d, 0x1e
call fcn.1401eba50
lea rdx, [0x1402734ac]
mov rcx, rsi
call fcn.1401f96f0
mov rcx, rsi
call fcn.1401eba80
jmp 0x14006b961
cmp dword [0x140299b30], 2
jg 0x14006c3fa
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rsi, [rsp + 0xd0]
mov rcx, rsi
mov r8d, 0x1da
mov r9d, 2
call fcn.1401d2730
lea rcx, [rsp + 0xe0]
lea rdx, [0x140271ac5]
mov r8d, 0x21
call fcn.1401af730
mov rcx, rsi
call fcn.1401d27b0
xor r14d, r14d
xor eax, eax
jmp 0x14006c2aa
cmp dword [0x140299b30], 2
jg 0x14006c45c
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rsi, [rsp + 0xd0]
mov rcx, rsi
mov r8d, 0x1f4
mov r9d, 2
call fcn.1401d2730
lea rcx, [rsp + 0xe0]
lea rdx, [0x140271ae7]
mov r8d, 0x19
call fcn.1401af730
mov rcx, rsi
call fcn.1401d27b0
mov rax, rbx
jmp 0x14006c2aa
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rsi, [rsp + 0xd0]
mov rcx, rsi
mov r8d, 0x21b
mov r9d, 1
call fcn.1401d2730
lea rcx, [rsp + 0xe0]
lea rdx, str.CloseHandle_thread
mov r8d, 0x12
call fcn.1401af730
mov rcx, rsi
call fcn.1401d27b0
jmp 0x14006bf41
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rsi, [rsp + 0xd0]
mov rcx, rsi
mov r8d, 0x21e
mov r9d, 1
call fcn.1401d2730
lea rcx, [rsp + 0xe0]
lea rdx, str.CloseHandle_process
mov r8d, 0x13
call fcn.1401af730
mov rcx, rsi
call fcn.1401d27b0
jmp 0x14006bf69
xor edx, edx
jmp 0x14006bed8
lea rcx, [0x1402a2ae8]
mov rbx, r10
call fcn.140172b08
mov r10, rbx
cmp dword [0x1402a2ae8], 0xffffffff
jne 0x14006bda9
lea rcx, [0x140262d46]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
test rax, rax
je 0x14006c631
lea rdx, [0x140271a19]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1402a2ae0], rax
lea rcx, [0x1402a2ae8]
call fcn.140172aa8
mov r10, rbx
jmp 0x14006bda9
lea rcx, [0x1402a2af8]
mov rbx, r10
call fcn.140172b08
mov r10, rbx
cmp dword [0x1402a2af8], 0xffffffff
jne 0x14006bdce
cmp qword [0x1402a2ae0], 0
je 0x14006c5c0
lea rcx, [0x140262d46]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
test rax, rax
je 0x14006c5c0
lea rdx, [0x140271a3d]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0x14006c5c2
xor eax, eax
mov qword [0x1402a2af0], rax
lea rcx, [0x1402a2af8]
call fcn.140172aa8
mov r10, rbx
jmp 0x14006bdce
call fcn.14018c460
int3
int3
int3
int3
int3
int3
int3
int3
xor eax, eax
jmp 0x14006c31b
int3
int3
int3
int3
int3
int3
int3
xor eax, eax
jmp 0x14006c558