Function at 0x14006e330
Capabilities:
Create process on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x348
movaps xmmword [rsp + 0x330], xmm7
movaps xmmword [rsp + 0x320], xmm6
mov r12, rcx
mov rax, qword [0x1402cf018]
xor rax, rsp
mov qword [rsp + 0x318], rax
call fcn.1400d1fc0
test al, al
jne 0x14006f7e7
xorps xmm0, xmm0
lea rdx, [rsp + 0x300]
movaps xmmword [rdx], xmm0
mov qword [rdx + 0x10], 0
mov rcx, qword [r12]
call fcn.1400d1ff0
mov rsi, qword [r12]
mov rbp, qword [rsi + 0x78]
mov rdi, qword [rsi + 0x80]
cmp rbp, rdi
je 0x14006e41d
lea rsi, [rsp + 0x150]
lea r14, [rsp + 0x2f0]
lea rbx, [rsp + 0x300]
movzx eax, byte [rbp + 0x17]
test al, al
mov rcx, qword [rbp]
cmovns rcx, rbp
mov qword [rsp + 0x2f0], rcx
cmovs rax, qword [rbp + 8]
mov qword [rsp + 0x2f8], rax
mov rcx, rsi
mov rdx, r14
call fcn.140050810
mov rcx, rsi
mov rdx, rbx
call fcn.1400d1ff0
cmp byte [rsp + 0x167], 0
jns 0x14006e410
mov rcx, qword [rsp + 0x150]
call fcn.140142744
add rbp, 0x18
cmp rbp, rdi
jne 0x14006e3c0
mov rsi, qword [r12]
movzx eax, byte [rsi + 0x2f]
test al, al
jns 0x14006e429
mov rax, qword [rsi + 0x20]
test rax, rax
je 0x14006e49d
add rsi, 0x18
lea rdx, str.database
lea rdi, [rsp + 0x80]
mov rcx, rdi
call fcn.140173440
lea rbx, [rsp + 0x150]
mov rcx, rbx
mov rdx, rdi
mov r8, rsi
call fcn.14006fcc0
lea rdx, [rsp + 0x300]
mov rcx, rbx
call fcn.1400d1ff0
cmp byte [rbx + 0x17], 0
jns 0x14006e482
mov rcx, qword [rsp + 0x150]
call fcn.140142744
cmp byte [rsp + 0x97], 0
jns 0x14006e499
mov rcx, qword [rsp + 0x80]
call fcn.140142744
mov rsi, qword [r12]
movzx eax, byte [rsi + 0x47]
test al, al
jns 0x14006e4a9
mov rax, qword [rsi + 0x38]
test rax, rax
je 0x14006e51d
add rsi, 0x30
lea rdx, str.metrics_dir
lea rdi, [rsp + 0x80]
mov rcx, rdi
call fcn.140173440
lea rbx, [rsp + 0x150]
mov rcx, rbx
mov rdx, rdi
mov r8, rsi
call fcn.14006fcc0
lea rdx, [rsp + 0x300]
mov rcx, rbx
call fcn.1400d1ff0
cmp byte [rbx + 0x17], 0
jns 0x14006e502
mov rcx, qword [rsp + 0x150]
call fcn.140142744
cmp byte [rsp + 0x97], 0
jns 0x14006e519
mov rcx, qword [rsp + 0x80]
call fcn.140142744
mov rsi, qword [r12]
movzx eax, byte [rsi + 0x5f]
test al, al
jns 0x14006e52b
mov rcx, qword [rsi + 0x50]
jmp 0x14006e52e
mov rcx, rax
test rcx, rcx
je 0x14006e5e8
lea rcx, [rsi + 0x48]
test al, al
cmovs rcx, qword [rsi + 0x48]
lea rdx, [rsp + 0x2e0]
mov qword [rdx], rcx
cmovs rax, qword [rsi + 0x50]
mov qword [rdx + 8], rax
lea rsi, [rsp + 0x80]
mov rcx, rsi
call fcn.140050810
lea rdx, [0x1402a333e]
lea rdi, [rsp + 0x100]
mov rcx, rdi
call fcn.140173440
lea rbx, [rsp + 0x150]
mov rcx, rbx
mov rdx, rdi
mov r8, rsi
call fcn.14006fcc0
lea rdx, [rsp + 0x300]
mov rcx, rbx
call fcn.1400d1ff0
cmp byte [rbx + 0x17], 0
jns 0x14006e5b6
mov rcx, qword [rsp + 0x150]
call fcn.140142744
cmp byte [rsp + 0x117], 0
jns 0x14006e5cd
mov rcx, qword [rsp + 0x100]
call fcn.140142744
cmp byte [rsp + 0x97], 0
jns 0x14006e5e4
mov rcx, qword [rsp + 0x80]
call fcn.140142744
mov rsi, qword [r12]
mov r14, qword [rsi + 0x60]
lea r13, [rsi + 0x68]
cmp r14, r13
mov qword [rsp + 0x58], r12
je 0x14006e7a7
lea r12, [rsp + 0x2b0]
xorps xmm6, xmm6
lea rbx, [rsp + 0x80]
lea r15, str.annotation
lea rsi, [rsp + 0x290]
lea rdi, [rsp + 0x150]
lea rbp, [rsp + 0x300]
lea rdx, [r14 + 0x20]
mov rcx, r12
mov r8b, 0x3d
call fcn.140178900
movzx r8d, byte [r14 + 0x4f]
test r8b, r8b
jns 0x14006e653
mov r8, qword [r14 + 0x40]
mov rdx, qword [r14 + 0x38]
jmp 0x14006e657
lea rdx, [r14 + 0x38]
mov rcx, r12
call fcn.140128310
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x110], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x100], xmm0
movups xmmword [rax], xmm6
mov qword [rax + 0x10], 0
movzx eax, byte [rsp + 0x117]
test al, al
mov rcx, qword [rsp + 0x100]
lea rdx, [rsp + 0x100]
cmovns rcx, rdx
mov qword [rsp + 0x2d0], rcx
cmovs rax, qword [rsp + 0x108]
mov qword [rsp + 0x2d8], rax
mov rcx, rbx
lea rdx, [rsp + 0x2d0]
call fcn.140050810
mov rcx, rsi
mov rdx, r15
call fcn.140173440
mov rcx, rdi
mov rdx, rsi
mov r8, rbx
call fcn.14006fcc0
mov rcx, rdi
mov rdx, rbp
call fcn.1400d1ff0
cmp byte [rsp + 0x167], 0
jns 0x14006e703
mov rcx, qword [rsp + 0x150]
call fcn.140142744
cmp byte [rsp + 0x2a7], 0
jns 0x14006e71a
mov rcx, qword [rsp + 0x290]
call fcn.140142744
cmp byte [rsp + 0x97], 0
jns 0x14006e731
mov rcx, qword [rsp + 0x80]
call fcn.140142744
cmp byte [rsp + 0x117], 0
jns 0x14006e748
mov rcx, qword [rsp + 0x100]
call fcn.140142744
cmp byte [rsp + 0x2c7], 0
jns 0x14006e75f
mov rcx, qword [rsp + 0x2b0]
call fcn.140142744
mov rcx, qword [r14 + 8]
test rcx, rcx
jne 0x14006e787
mov rax, qword [r14 + 0x10]
cmp qword [rax], r14
je 0x14006e792
add r14, 0x10
mov rcx, qword [r14]
lea r14, [rcx + 0x10]
mov rax, qword [rcx + 0x10]
cmp qword [rax], rcx
jne 0x14006e775
jmp 0x14006e792
mov rax, rcx
mov rcx, qword [rcx]
test rcx, rcx
jne 0x14006e787
mov r14, rax
cmp rax, r13
jne 0x14006e630
mov r12, qword [rsp + 0x58]
mov rsi, qword [r12]
mov rdi, qword [rsi + 0x90]
mov rsi, qword [rsi + 0x98]
cmp rdi, rsi
je 0x14006e834
lea r14, [0x1402a334d]
lea rbx, [rsp + 0x80]
lea rbp, [rsp + 0x150]
lea r15, [rsp + 0x300]
mov rcx, rbx
mov rdx, r14
call fcn.140173440
mov rcx, rbp
mov rdx, rbx
mov r8, rdi
call fcn.14006fcc0
mov rcx, rbp
mov rdx, r15
call fcn.1400d1ff0
cmp byte [rsp + 0x167], 0
jns 0x14006e814
mov rcx, qword [rsp + 0x150]
call fcn.140142744
cmp byte [rsp + 0x97], 0
jns 0x14006e82b
mov rcx, qword [rsp + 0x80]
call fcn.140142744
add rdi, 0x18
cmp rdi, rsi
jne 0x14006e7d9
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, 0x1f0fff
mov edx, 1
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
jne 0x14006e8c2
mov ecx, 2
call fcn.14004c5c0
xor esi, esi
mov ebx, 0
test al, al
je 0x14006f052
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x150]
mov rcx, rsi
mov r8d, 0x192
mov r9d, 2
call fcn.1401944b0
lea rcx, [rsp + 0x160]
lea rdx, [0x1402a3358]
mov r8d, ntohl
call fcn.140124730
mov rcx, rsi
call fcn.140194530
xor esi, esi
xor ebx, ebx
jmp 0x14006f052
mov r13, rax
movabs r14, 0xaaaaaaaaaaaaaaaa
lea rbx, [rsp + 0x100]
mov qword [rbx + 0x40], r14
movaps xmm6, xmmword [0x1402961a0]
movaps xmmword [rbx + 0x30], xmm6
movaps xmmword [rbx + 0x20], xmm6
movaps xmmword [rbx + 0x10], xmm6
movaps xmmword [rbx], xmm6
mov rax, qword [r12]
mov rax, qword [rax + 0xc8]
mov r9, qword [0x1402d1788]
mov r8, qword [0x1402d1780]
mov rdx, qword [0x1402d1778]
lea rcx, [0x1402ddb08]
mov qword [rsp + 0x40], rcx
lea rcx, [0x1402ddaf8]
mov qword [rsp + 0x38], rcx
lea rcx, [0x1402ddae8]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], rax
mov rcx, rbx
call fcn.140223140
lea rsi, [rsp + 0x2b0]
mov rcx, rbx
mov rdx, rsi
call fcn.140223170
lea rdx, str.__initial_client_data
lea rdi, [rsp + 0x290]
mov rcx, rdi
call fcn.140173440
movzx r8d, byte [rsi + 0x17]
test r8b, r8b
jns 0x14006e98b
mov r8, qword [rsp + 0x2b8]
mov rsi, qword [rsp + 0x2b0]
mov rcx, rdi
mov rdx, rsi
call fcn.140128310
mov rcx, qword [rax + 0x10]
lea r12, [rsp + 0x80]
mov qword [r12 + 0x10], rcx
movups xmm0, xmmword [rax]
movaps xmmword [r12], xmm0
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov qword [rax + 0x10], 0
movzx eax, byte [r12 + 0x17]
test al, al
mov rcx, qword [r12]
cmovns rcx, r12
lea rdx, [rsp + 0xf0]
mov qword [rdx], rcx
cmovs rax, qword [r12 + 8]
mov qword [rdx + 8], rax
lea rbx, [rsp + 0x150]
mov rcx, rbx
call fcn.140050810
lea r15, [rsp + 0x300]
mov rcx, rbx
mov rdx, r15
call fcn.1400d1ff0
cmp byte [rbx + 0x17], 0
jns 0x14006ea18
mov rcx, qword [rsp + 0x150]
call fcn.140142744
cmp byte [rsp + 0x97], 0
jns 0x14006ea2f
mov rcx, qword [rsp + 0x80]
call fcn.140142744
cmp byte [rsp + 0x2a7], 0
jns 0x14006ea46
mov rcx, qword [rsp + 0x290]
call fcn.140142744
cmp byte [rsp + 0x2c7], 0
jns 0x14006ea5d
mov rcx, qword [rsp + 0x2b0]
call fcn.140142744
xorps xmm7, xmm7
movaps xmmword [rsp + 0xb0], xmm7
movaps xmmword [rsp + 0xe0], xmm7
movaps xmmword [rsp + 0xd0], xmm7
movaps xmmword [rsp + 0xc0], xmm7
movaps xmmword [rsp + 0xa0], xmm7
movaps xmmword [rsp + 0x90], xmm7
movaps xmmword [rsp + 0x80], xmm7
mov dword [rsp + 0xbc], 0x100
mov rsi, qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov ecx, 0xfffffff6
call rsi
mov qword [rsp + 0xd0], rax
mov ecx, 0xfffffff5
call rsi
mov qword [rsp + 0xd8], rax
mov ecx, 0xfffffff4
call rsi
mov qword [rsp + 0xe0], rax
movaps xmmword [rsp + 0x2b0], xmm7
mov qword [rsp + 0x2c0], 0
mov eax, dword [0x1402ddb48]
mov ecx, dword [0x1402da9d4]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14006f73f
mov eax, dword [0x1402ddb58]
mov ecx, dword [0x1402da9d4]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14006f786
mov rbp, qword [0x1402ddb40]
test rbp, rbp
je 0x14006ec2d
cmp qword [0x1402ddb50], 0
je 0x14006ec2d
mov dword [rsp + 0x80], 0x70
lea r9, [rsp + 0x290]
mov qword [r9], r14
xor ecx, ecx
mov edx, 1
xor r8d, r8d
call rbp
test eax, eax
jne 0x14006ef72
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x14006efcb
lea rsi, [rsp + 0x290]
mov rcx, qword [rsi]
call fcn.14014277c
mov rbp, rax
mov qword [rsp + 0xe8], rax
mov rcx, rax
mov edx, 1
xor r8d, r8d
mov r9, rsi
call qword [0x1402ddb40]
test eax, eax
jne 0x14006f0ba
mov ecx, 2
call fcn.14004c5c0
test al, al
je 0x14006ec1f
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x150]
mov rcx, rsi
mov r8d, 0x1d2
mov r9d, 2
call fcn.1401944b0
lea rcx, [rsp + 0x160]
lea rdx, [0x1402a3429]
mov r8d, 0x21
call fcn.140124730
mov rcx, rsi
call fcn.140194530
xor esi, esi
xor ebx, ebx
mov r12, qword [rsp + 0x58]
jmp 0x14006ef5c
mov dword [rsp + 0x80], 0x68
xor ebp, ebp
xor esi, esi
mov rax, qword [rsp + 0x58]
mov rdx, qword [rax]
movzx r8d, byte [rdx + 0x17]
test r8b, r8b
jns 0x14006ec5b
cmp qword [rdx + 8], 0xc
jb 0x14006ec61
mov r8, qword [rdx + 8]
jmp 0x14006ec65
cmp r8b, 0xc
jae 0x14006ec65
xor ebx, ebx
jmp 0x14006ecbe
add r8, 0xfffffffffffffff4
lea rax, [rdx + 0x18]
mov qword [rsp + 0x20], rax
mov rcx, rbx
mov r9, 0xffffffffffffffff
call fcn.140033b00
cmp byte [rsp + 0x167], 0
jns 0x14006ec93
mov rbx, qword [rsp + 0x150]
lea rdx, str.rundll32.exe
mov rcx, rbx
call fcn.140158f28
test eax, eax
sete bl
cmp byte [rsp + 0x167], 0
jns 0x14006ecbe
mov rcx, qword [rsp + 0x150]
call fcn.140142744
mov qword [rsp + 0x2a0], r14
movaps xmmword [rsp + 0x290], xmm6
cmp byte [rsp + 0x317], 0
jns 0x14006ece0
mov r15, qword [rsp + 0x300]
test bl, bl
je 0x14006ece8
xor ecx, ecx
jmp 0x14006ecf9
mov rax, qword [rsp + 0x58]
mov rcx, qword [rax]
cmp byte [rcx + 0x17], 0
jns 0x14006ecf9
mov rcx, qword [rcx]
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x40], r12
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], 1
mov rdx, r15
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x14006ed9f
mov ecx, 2
call fcn.14004c5c0
xor ebx, ebx
mov esi, 0
test al, al
mov r12, qword [rsp + 0x58]
je 0x14006eeef
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x150]
mov rcx, rsi
mov r8d, 0x20e
mov r9d, 2
call fcn.1401944b0
lea rcx, [rsp + 0x160]
lea rdx, str.CreateProcess
mov r8d, ntohl
call fcn.140124730
mov rcx, rsi
call fcn.140194530
xor ebx, ebx
xor esi, esi
jmp 0x14006eeef
mov rcx, qword [rsp + 0x298]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, eax
mov ecx, 1
call fcn.14004c5c0
test al, al
mov r12, qword [rsp + 0x58]
je 0x14006ee14
test esi, esi
jne 0x14006ee14
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x150]
mov rcx, rsi
mov r8d, 0x213
mov r9d, 1
call fcn.1401944b0
lea rcx, [rsp + 0x160]
lea rdx, str.CloseHandle_thread
mov r8d, 0x12
call fcn.140124730
mov rcx, rsi
call fcn.140194530
mov rcx, qword [rsp + 0x290]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, eax
mov ecx, 1
call fcn.14004c5c0
test al, al
je 0x14006ee84
test esi, esi
jne 0x14006ee84
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x150]
mov rcx, rsi
mov r8d, 0x216
mov r9d, 1
call fcn.1401944b0
lea rcx, [rsp + 0x160]
lea rdx, str.CloseHandle_process
mov r8d, 0x13
call fcn.140124730
mov rcx, rsi
call fcn.140194530
mov rsi, qword [r12]
mov rcx, qword [rsi + 0xc8]
cmp rcx, 0xffffffffffffffff
je 0x14006eea5
call fcn.1400d1d90
mov qword [rsi + 0xc8], 0xffffffffffffffff
mov qword [rsi + 0xc8], 0xffffffffffffffff
xorps xmm0, xmm0
lea rdx, [rsp + 0x150]
movups xmmword [rdx + 0x14], xmm0
movups xmmword [rdx + 4], xmm0
mov dword [rdx], 2
lea r8, [rsp + 0x70]
mov dword [r8 + 8], 0
mov qword [r8], 0
mov ecx, 0xa8
add rcx, qword [r12]
call fcn.1400cf840
mov ebx, eax
mov esi, eax
test rbp, rbp
je 0x14006ef5c
mov eax, dword [0x1402ddb68]
mov ecx, dword [0x1402da9d4]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jle 0x14006ef53
lea rcx, [0x1402ddb68]
call fcn.140142860
cmp dword [0x1402ddb68], 0xffffffff
jne 0x14006ef53
lea rcx, [0x14029c8f6]
lea rdx, str.::DeleteProcThreadAttributeList
mov r8b, 1
call fcn.1400d2590
mov qword [0x1402ddb60], rax
lea rcx, [0x1402ddb68]
call fcn.1401428f8
mov rcx, rbp
call qword [0x1402ddb60]
test rbp, rbp
je 0x14006f030
mov rcx, rbp
call fcn.140142784
jmp 0x14006f030
mov ecx, 2
call fcn.14004c5c0
test al, al
je 0x14006f027
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x150]
mov rcx, rsi
mov r8d, 0x1c3
mov r9d, 2
call fcn.14004c600
lea rcx, [rsp + 0x160]
lea rdx, str.InitializeProcThreadAttributeList__size__succeeded__expected_failure
mov r8d, 0x44
call fcn.140124730
mov rcx, rsi
call fcn.14004caa0
jmp 0x14006f027
mov ecx, 2
call fcn.14004c5c0
test al, al
je 0x14006f027
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x150]
mov rcx, rsi
mov r8d, 0x1c7
mov r9d, 2
call fcn.1401944b0
lea rcx, [rsp + 0x160]
lea rdx, str.InitializeProcThreadAttributeList__size_
mov r8d, 0x28
call fcn.140124730
mov rcx, rsi
call fcn.140194530
xor ebx, ebx
xor esi, esi
mov r12, qword [rsp + 0x58]
mov rcx, qword [rsp + 0x2b0]
test rcx, rcx
je 0x14006f04a
mov qword [rsp + 0x2b8], rcx
call fcn.140142744
mov rcx, r13
call fcn.1400d1da0
cmp byte [rsp + 0x317], 0
jns 0x14006f069
mov rcx, qword [rsp + 0x300]
call fcn.140142744
cmp bl, 1
mov eax, 1
adc rax, 0
mov qword [0x1402ddb38], rax
mov rcx, r12
call fcn.1401a9630
mov rcx, qword [rsp + 0x318]
xor rcx, rsp
call fcn.140143020
mov eax, esi
movaps xmm6, xmmword [rsp + 0x320]
movaps xmm7, xmmword [rsp + 0x330]
add rsp, 0x348
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov qword [rsp + 0x60], rbp
mov r14, qword [rsp + 0x2b0]
mov r15, qword [rsp + 0x2c0]
mov rax, r15
sub rax, r14
sar rax, 3
cmp rax, 7
ja 0x14006f12c
mov rsi, qword [rsp + 0x2b8]
sub rsi, r14
mov ecx, 0x40
call fcn.140142708
mov rbp, rax
lea rdi, [rax + rsi]
mov r15, rax
add r15, 0x40
test rsi, rsi
jg 0x14006f7ea
mov qword [rsp + 0x2b0], rbp
mov qword [rsp + 0x2b8], rdi
mov qword [rsp + 0x2c0], r15
test r14, r14
jne 0x14006f7fd
movabs rcx, 0x1fffffffffffffff
mov rbp, qword [rsp + 0x2b8]
cmp rbp, r15
jne 0x14006f18b
mov rdx, qword [rsp + 0x2b0]
sub r15, rdx
mov rsi, r15
sar rsi, 3
lea rax, [rsi + 1]
cmp rax, rcx
ja 0x14006f72d
mov rbp, r15
sar rbp, 2
cmp rbp, rax
cmovb rbp, rax
movabs rax, 0xfffffffffffffff
cmp rsi, rax
cmovae rbp, rcx
test rbp, rbp
jne 0x14006f1a7
xor r14d, r14d
jmp 0x14006f1d0
mov rax, qword [0x1402d1778]
mov qword [rbp], rax
add rbp, 8
mov qword [rsp + 0x2b8], rbp
jmp 0x14006f23e
cmp rbp, rcx
ja 0x14006f73a
mov rdi, rdx
lea rcx, [rbp*8]
call fcn.140142708
mov r14, rax
movabs rcx, 0x1fffffffffffffff
mov rdx, rdi
lea rdi, [r14 + rbp*8]
mov rax, qword [0x1402d1778]
lea rbp, [r14 + rsi*8]
add rbp, 8
mov qword [rbp - 8], rax
test r15, r15
jle 0x14006f207
mov rcx, r14
mov rsi, rdx
mov r8, r15
call fcn.140145a10
mov rdx, rsi
movabs rcx, 0x1fffffffffffffff
mov qword [rsp + 0x2b0], r14
mov qword [rsp + 0x2b8], rbp
mov qword [rsp + 0x2c0], rdi
test rdx, rdx
je 0x14006f23e
mov rcx, rdx
call fcn.140142744
movabs rcx, 0x1fffffffffffffff
mov rbp, qword [rsp + 0x2b8]
cmp rbp, qword [rsp + 0x2c0]
jne 0x14006f290
mov rdx, qword [rsp + 0x2b0]
sub rbp, rdx
mov r15, rbp
sar r15, 3
lea rax, [r15 + 1]
cmp rax, rcx
ja 0x14006f72d
mov rsi, rbp
sar rsi, 2
cmp rsi, rax
cmovb rsi, rax
movabs rax, 0xfffffffffffffff
cmp r15, rax
cmovae rsi, rcx
test rsi, rsi
jne 0x14006f2af
xor r14d, r14d
jmp 0x14006f2d8
mov rax, qword [0x1402d1780]
mov qword [rbp], rax
add rbp, 8
mov qword [rsp + 0x2b8], rbp
mov rdi, rbp
jmp 0x14006f346
cmp rsi, rcx
ja 0x14006f73a
mov rdi, rdx
lea rcx, [rsi*8]
call fcn.140142708
mov r14, rax
movabs rcx, 0x1fffffffffffffff
mov rdx, rdi
lea rsi, [r14 + rsi*8]
mov rax, qword [0x1402d1780]
lea rdi, [r14 + r15*8]
add rdi, 8
mov qword [rdi - 8], rax
test rbp, rbp
jle 0x14006f30f
mov rcx, r14
mov r15, rdx
mov r8, rbp
call fcn.140145a10
mov rdx, r15
movabs rcx, 0x1fffffffffffffff
mov qword [rsp + 0x2b0], r14
mov qword [rsp + 0x2b8], rdi
mov qword [rsp + 0x2c0], rsi
test rdx, rdx
je 0x14006f346
mov rcx, rdx
call fcn.140142744
movabs rcx, 0x1fffffffffffffff
mov rdi, qword [rsp + 0x2b8]
cmp rdi, qword [rsp + 0x2c0]
jne 0x14006f398
mov r15, qword [rsp + 0x2b0]
sub rdi, r15
mov rbp, rdi
sar rbp, 3
lea rax, [rbp + 1]
cmp rax, rcx
ja 0x14006f72d
mov rsi, rdi
sar rsi, 2
cmp rsi, rax
cmovb rsi, rax
movabs rax, 0xfffffffffffffff
cmp rbp, rax
cmovae rsi, rcx
test rsi, rsi
jne 0x14006f3b6
xor r14d, r14d
jmp 0x14006f3d9
mov rax, qword [0x1402d1788]
mov qword [rdi], rax
add rdi, 8
mov qword [rsp + 0x2b8], rdi
mov rbp, rdi
jmp 0x14006f444
cmp rsi, rcx
ja 0x14006f73a
lea rcx, [rsi*8]
call fcn.140142708
mov r14, rax
movabs rcx, 0x1fffffffffffffff
lea rsi, [r14 + rsi*8]
mov rax, qword [0x1402d1788]
lea rbp, [r14 + rbp*8]
add rbp, 8
mov qword [rbp - 8], rax
test rdi, rdi
jle 0x14006f40d
mov rcx, r14
mov rdx, r15
mov r8, rdi
call fcn.140145a10
movabs rcx, 0x1fffffffffffffff
mov qword [rsp + 0x2b0], r14
mov qword [rsp + 0x2b8], rbp
mov qword [rsp + 0x2c0], rsi
test r15, r15
je 0x14006f444
mov rcx, r15
call fcn.140142744
movabs rcx, 0x1fffffffffffffff
mov rbp, qword [rsp + 0x2b8]
mov rax, qword [rsp + 0x58]
mov r15, qword [rax]
cmp rbp, qword [rsp + 0x2c0]
jne 0x14006f49e
mov rdx, qword [rsp + 0x2b0]
sub rbp, rdx
mov rsi, rbp
sar rsi, 3
lea rax, [rsi + 1]
cmp rax, rcx
ja 0x14006f72d
mov rdi, rbp
sar rdi, 2
cmp rdi, rax
cmovb rdi, rax
movabs rax, 0xfffffffffffffff
cmp rsi, rax
cmovae rdi, rcx
test rdi, rdi
jne 0x14006f4c5
xor r14d, r14d
jmp 0x14006f4f2
mov rax, qword [r15 + 0xc8]
mov qword [rbp], rax
add rbp, 8
mov qword [rsp + 0x2b8], rbp
mov rsi, rbp
lea r15, [rsp + 0x300]
jmp 0x14006f568
mov qword [rsp + 0x68], rdx
cmp rdi, rcx
ja 0x14006f73a
lea rcx, [rdi*8]
call fcn.140142708
mov r14, rax
movabs rcx, 0x1fffffffffffffff
mov rdx, qword [rsp + 0x68]
lea rdi, [r14 + rdi*8]
mov rax, qword [r15 + 0xc8]
lea rsi, [r14 + rsi*8]
add rsi, 8
mov qword [rsi - 8], rax
test rbp, rbp
jle 0x14006f529
mov rcx, r14
mov r15, rdx
mov r8, rbp
call fcn.140145a10
mov rdx, r15
movabs rcx, 0x1fffffffffffffff
mov qword [rsp + 0x2b0], r14
mov qword [rsp + 0x2b8], rsi
mov qword [rsp + 0x2c0], rdi
test rdx, rdx
lea r15, [rsp + 0x300]
je 0x14006f568
mov rcx, rdx
call fcn.140142744
movabs rcx, 0x1fffffffffffffff
mov rsi, qword [rsp + 0x2b8]
cmp rsi, qword [rsp + 0x2c0]
jne 0x14006f5ba
mov r14, qword [rsp + 0x2b0]
sub rsi, r14
mov rbp, rsi
sar rbp, 3
lea rax, [rbp + 1]
cmp rax, rcx
ja 0x14006f72d
mov rdi, rsi
sar rdi, 2
cmp rdi, rax
cmovb rdi, rax
movabs rax, 0xfffffffffffffff
cmp rbp, rax
cmovae rdi, rcx
test rdi, rdi
jne 0x14006f5cb
xor r15d, r15d
jmp 0x14006f5e4
mov qword [rsi], r13
add rsi, 8
mov qword [rsp + 0x2b8], rsi
jmp 0x14006f634
cmp rdi, rcx
ja 0x14006f73a
lea rcx, [rdi*8]
call fcn.140142708
mov r15, rax
lea rdi, [r15 + rdi*8]
lea rbp, [r15 + rbp*8]
add rbp, 8
mov qword [rbp - 8], r13
test rsi, rsi
jle 0x14006f607
mov rcx, r15
mov rdx, r14
mov r8, rsi
call fcn.140145a10
mov qword [rsp + 0x2b0], r15
mov qword [rsp + 0x2b8], rbp
mov qword [rsp + 0x2c0], rdi
test r14, r14
lea r15, [rsp + 0x300]
je 0x14006f634
mov rcx, r14
call fcn.140142744
mov rdx, qword [rsp + 0xd0]
lea rsi, [rsp + 0x2b0]
mov rcx, rsi
call fcn.14006fe40
mov rdx, qword [rsp + 0xd8]
mov rcx, rsi
call fcn.14006fe40
mov rdx, qword [rsp + 0xe0]
mov rcx, rsi
call fcn.14006fe40
mov r9, qword [rsi]
mov rax, qword [rsi + 8]
sub rax, r9
mov rcx, qword [rsp + 0xe8]
xorps xmm0, xmm0
movups xmmword [rsp + 0x28], xmm0
mov qword [rsp + 0x20], rax
mov r8d, 0x20002
xor edx, edx
call qword [0x1402ddb50]
test eax, eax
jne 0x14006f70c
mov ecx, 2
call fcn.14004c5c0
test al, al
mov rbp, qword [rsp + 0x60]
je 0x14006f6fe
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x150]
mov rcx, rsi
mov r8d, 0x1ec
mov r9d, 2
call fcn.1401944b0
lea rcx, [rsp + 0x160]
lea rdx, [0x1402a344b]
mov r8d, 0x19
call fcn.140124730
mov rcx, rsi
call fcn.140194530
xor ebx, ebx
xor esi, esi
mov r12, qword [rsp + 0x58]
jmp 0x14006eeef
mov esi, 0x80000
mov rbp, qword [rsp + 0x60]
movabs r14, 0xaaaaaaaaaaaaaaaa
lea rdi, [rsp + 0x290]
jmp 0x14006ec3c
lea rcx, [rsp + 0x2b0]
call fcn.1401731e0
call fcn.1401564d0
lea rcx, [0x1402ddb48]
call fcn.140142860
cmp dword [0x1402ddb48], 0xffffffff
jne 0x14006eb10
lea rcx, [0x14029c8f6]
lea rdx, str.::InitializeProcThreadAttributeList
xor r8d, r8d
call fcn.1400d2590
mov qword [0x1402ddb40], rax
lea rcx, [0x1402ddb48]
call fcn.1401428f8
jmp 0x14006eb10
lea rcx, [0x1402ddb58]
call fcn.140142860
cmp dword [0x1402ddb58], 0xffffffff
jne 0x14006eb35
mov rsi, rdi
mov rdi, r14
cmp qword [0x1402ddb40], 0
jne 0x14006f7b3
xor eax, eax
jmp 0x14006f7c9
lea rcx, [0x14029c8f6]
lea rdx, str.::UpdateProcThreadAttribute
xor r8d, r8d
call fcn.1400d2590
mov qword [0x1402ddb50], rax
lea rcx, [0x1402ddb58]
call fcn.1401428f8
mov r14, rdi
mov rdi, rsi
jmp 0x14006eb35
int3
mov rcx, rbp
mov rdx, r14
mov r8, rsi
call fcn.140145a10
jmp 0x14006f10b
mov rcx, r14
call fcn.140142744
mov r15, qword [rsp + 0x2c0]
jmp 0x14006f12c