Function at 0x140071b80
Capabilities:
Create thread

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x218
movaps xmmword [rsp + 0x200], xmm6
mov qword [rsp + 0x40], r9
mov qword [rsp + 0x38], r8
mov qword [rsp + 0x30], rdx
mov r15, rcx
mov r12, qword [rsp + 0x288]
mov rax, qword [0x14021b038]
xor rax, rsp
mov qword [rsp + 0x1f8], rax
movabs rax, 0xaaaaaaaaaaaaaaaa
lea rbx, [rsp + 0x50]
mov qword [rbx + 0x10], rax
movaps xmm0, xmmword [0x1401e90c0]
movaps xmmword [rbx], xmm0
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
lea rdx, str..pipecrashpad__lu_
mov rcx, rbx
mov r8d, eax
call fcn.1400ecc00
mov esi, 0xfffffffc
lea r13, [rsp + 0x198]
xorps xmm6, xmm6
lea rbp, [rsp + 0x1e0]
lea rdi, [rsp + 0x1d0]
mov rcx, r13
call fcn.140097920
movzx r9d, byte [rsp + 0x67]
test r9b, r9b
cmovs r9, qword [rsp + 0x58]
mov r8, qword [rsp + 0x50]
cmovns r8, rbx
mov rcx, r13
xor edx, edx
call fcn.1400e37d0
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x1c0], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x1b0], xmm0
movups xmmword [rax], xmm6
mov qword [rax + 0x10], 0
movzx eax, byte [rsp + 0x1c7]
test al, al
mov rcx, qword [rsp + 0x1b0]
lea rdx, [rsp + 0x1b0]
cmovns rcx, rdx
mov qword [rsp + 0x1d0], rcx
cmovs rax, qword [rsp + 0x1b8]
mov qword [rsp + 0x1d8], rax
mov rcx, rbp
mov rdx, rdi
call fcn.1400ed8f0
cmp byte [r15 + 0x17], 0
js 0x14007209c
mov rax, qword [rsp + 0x1f0]
mov qword [r15 + 0x10], rax
movups xmm0, xmmword [rsp + 0x1e0]
movups xmmword [r15], xmm0
mov byte [rsp + 0x1f7], 0
mov word [rsp + 0x1e0], 0
cmp byte [rsp + 0x1c7], 0
jns 0x140071cf6
mov rcx, qword [rsp + 0x1b0]
call fcn.1401109f8
cmp byte [rsp + 0x1af], 0
js 0x1400720a9
mov rcx, r15
mov dl, 1
call fcn.1400954a0
mov r14, rax
cmp rax, 0xffffffffffffffff
jne 0x140071d24
lea eax, [rsi + 1]
test esi, esi
mov esi, eax
jne 0x140071c1c
cmp r14, 0xffffffffffffffff
je 0x1400720bb
cmp byte [rsp + 0x67], 0
jns 0x140071d3f
mov rcx, qword [rsp + 0x50]
call fcn.1401109f8
xorps xmm0, xmm0
lea rbx, [rsp + 0x1e0]
movaps xmmword [rbx], xmm0
mov qword [rbx + 0x10], 0
mov dword [rbx], 0x18
mov dword [rbx + 0x10], 1
mov rsi, qword [sym.imp.KERNEL32.dll_CreateEventW]
mov rcx, rbx
xor edx, edx
xor r8d, r8d
xor r9d, r9d
call rsi
mov qword [0x14021d778], rax
mov rcx, rbx
xor edx, edx
xor r8d, r8d
xor r9d, r9d
call rsi
mov qword [0x14021d780], rax
mov rcx, rbx
xor edx, edx
xor r8d, r8d
xor r9d, r9d
call rsi
mov qword [0x14021d788], rax
lea rcx, [0x140221f00]
call fcn.140097bc0
mov ecx, 8
call fcn.1401109bc
mov rbx, rax
mov rcx, rax
call fcn.1400f3b60
mov qword [0x140221f28], rbx
lea rcx, [fcn.14016f140]
call qword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
lea rdx, [0x14016f2b0]
mov ecx, 0x16
call fcn.14012b3d0
mov ecx, 0xd8
call fcn.1401109bc
mov rbx, rax
mov rcx, rax
mov rdx, qword [rsp + 0x30]
call fcn.1400e6760
lea rcx, [rbx + 0x18]
mov rdx, qword [rsp + 0x38]
call fcn.1400e6760
lea rcx, [rbx + 0x30]
mov rdx, qword [rsp + 0x40]
call fcn.1400e6760
lea rcx, [rbx + 0x48]
mov rbp, qword [rsp + 0x280]
cmp byte [rbp + 0x17], 0
jns 0x140072102
mov rdx, qword [rbp]
mov r8, qword [rbp + 8]
call fcn.1400e3750
lea rbp, [rbx + 0x68]
xorps xmm6, xmm6
movups xmmword [rbx + 0x68], xmm6
mov qword [rbx + 0x60], rbp
mov rdi, qword [r12]
add r12, 8
cmp rdi, r12
je 0x140071ebf
lea rsi, [rbx + 0x60]
lea r13, [rsp + 0x50]
lea r9, [rdi + 0x20]
mov qword [rsp + 0x20], r9
mov rcx, rsi
mov rdx, r13
mov r8, rbp
call fcn.140073730
mov rcx, qword [rdi + 8]
test rcx, rcx
jne 0x140071e9c
mov rax, qword [rdi + 0x10]
cmp qword [rax], rdi
jne 0x140071ea9
mov rdi, rax
cmp rax, r12
jne 0x140071e69
jmp 0x140071ebf
mov rax, rcx
mov rcx, qword [rcx]
test rcx, rcx
je 0x140071e92
jmp 0x140071e9c
add rdi, 0x10
mov rcx, qword [rdi]
lea rdi, [rcx + 0x10]
mov rax, qword [rcx + 0x10]
cmp qword [rax], rcx
je 0x140071e92
jmp 0x140071ead
movups xmmword [rbx + 0x78], xmm6
mov qword [rbx + 0x88], 0
mov rax, qword [rsp + 0x290]
mov rbp, qword [rax]
mov r13, qword [rax + 8]
mov rcx, r13
movabs r12, 0xaaaaaaaaaaaaaaab
sub rcx, rbp
jne 0x140072015
xorps xmm0, xmm0
movups xmmword [rbx + 0x90], xmm0
mov qword [rbx + 0xa0], 0
mov rax, qword [rsp + reloc.SHELL32.dll_IsUserAnAdmin]
mov rsi, qword [rax]
mov r13, qword [rax + 8]
mov rcx, r13
sub rcx, rsi
je 0x140071f8d
mov rdi, rcx
sar rdi, 3
imul rdi, r12
movabs rax, 0xaaaaaaaaaaaaaaa
cmp rdi, rax
ja 0x1400721d9
call fcn.1401109bc
mov rbp, rax
mov qword [rbx + 0x98], rax
mov qword [rbx + 0x90], rax
lea rax, [rdi + rdi*2]
lea rax, [rax*8]
add rax, rbp
mov qword [rbx + 0xa0], rax
cmp rsi, r13
je 0x140071f86
mov rcx, rbp
mov rdx, rsi
call fcn.1400e6760
add rsi, 0x18
add rbp, 0x18
cmp r13, rsi
jne 0x140071f6e
mov qword [rbx + 0x98], rbp
mov rcx, rbx
add rcx, 0xa8
cmp byte [r15 + 0x17], 0
jns 0x140072116
mov rdx, qword [r15]
mov r8, qword [r15 + 8]
call fcn.1400e4a50
lea rax, [0x1401e56a8]
mov qword [rbx + 0xc0], rax
mov qword [rbx + 0xc8], r14
mov byte [rbx + 0xd0], 0
cmp byte [rsp + 0x2a0], 0
jne 0x14007212a
lea rcx, [rsp + 0x48]
mov qword [rcx], rbx
call fcn.140072240
mov esi, eax
mov rcx, qword [rsp + 0x1f8]
xor rcx, rsp
call fcn.140111870
mov eax, esi
movaps xmm6, xmmword [rsp + 0x200]
add rsp, 0x218
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov rdi, rcx
sar rdi, 3
imul rdi, r12
movabs rax, 0xaaaaaaaaaaaaaaa
cmp rdi, rax
ja 0x1400721e8
call fcn.1401109bc
mov rsi, rax
mov qword [rbx + 0x80], rax
mov qword [rbx + 0x78], rax
lea rax, [rdi + rdi*2]
lea rax, [rsi + rax*8]
mov qword [rbx + 0x88], rax
cmp rbp, r13
je 0x140072090
cmp byte [rbp + 0x17], 0
js 0x14007207e
mov rax, qword [rbp + 0x10]
mov qword [rsi + 0x10], rax
movups xmm0, xmmword [rbp]
movups xmmword [rsi], xmm0
add rbp, 0x18
add rsi, 0x18
cmp r13, rbp
jne 0x14007205a
jmp 0x140072090
mov rdx, qword [rbp]
mov r8, qword [rbp + 8]
mov rcx, rsi
call fcn.1400e3750
jmp 0x14007206f
mov qword [rbx + 0x80], rsi
jmp 0x140071ef3
mov rcx, qword [r15]
call fcn.1401109f8
jmp 0x140071cb5
mov rcx, qword [rsp + 0x198]
call fcn.1401109f8
jmp 0x140071d04
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rbx, [rsp + 0x1e0]
mov rcx, rbx
mov r8d, 0x12d
call fcn.14017dc60
mov rcx, rbx
call fcn.14017db90
lea rdx, str.CreateNamedPipe
mov r8d, 0xf
mov rcx, rax
call fcn.1400dd7e0
mov rcx, rbx
call fcn.14017dba0
jmp 0x140071d2e
mov rax, qword [rbp + 0x10]
mov qword [rcx + 0x10], rax
movups xmm0, xmmword [rbp]
movups xmmword [rcx], xmm0
jmp 0x140071e44
mov rax, qword [r15 + 0x10]
mov qword [rcx + 0x10], rax
movups xmm0, xmmword [r15]
movups xmmword [rcx], xmm0
jmp 0x140071fae
lea rsi, [r15 + 0x18]
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
lea r8, [0x14016ed40]
xor ecx, ecx
xor edx, edx
mov r9, rbx
call qword [sym.imp.KERNEL32.dll_CreateThread]
lea rdx, [rsp + 0x50]
mov qword [rdx], rax
mov rcx, rsi
call fcn.1400721f0
mov sil, 1
cmp qword [r15 + 0x20], 0
jne 0x140071fe7
mov ecx, 2
call fcn.1400e83a0
test al, al
je 0x1400721c7
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x50]
mov rcx, rsi
mov r8d, 0x291
mov r9d, 2
call fcn.14015f200
lea rcx, [rsp + 0x60]
lea rdx, [0x1401f5f36]
mov r8d, ntohl
call fcn.1400dd7e0
mov rcx, rsi
call fcn.14015f280
mov qword [0x140221f30], 2
xor esi, esi
jmp 0x140071fe7
add rbx, 0x90
mov rcx, rbx
call fcn.1401414e0
add rbx, 0x78
jmp 0x1400721e0