Function at 0x1400acc30
Capabilities:
Create thread

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x218
movaps xmmword [rsp + 0x200], xmm6
mov qword [rsp + 0x40], r9
mov qword [rsp + 0x38], r8
mov qword [rsp + 0x30], rdx
mov r15, rcx
mov r12, qword [rsp + 0x288]
mov rax, qword [0x1403a7038]
xor rax, rsp
mov qword [rsp + 0x1f8], rax
movabs rax, 0xaaaaaaaaaaaaaaaa
lea rbx, [rsp + 0x50]
mov qword [rbx + 0x10], rax
movaps xmm0, xmmword [0x14033b990]
movaps xmmword [rbx], xmm0
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
lea rdx, str..pipecrashpad__lu_
mov rcx, rbx
mov r8d, eax
call fcn.1401850f0
mov esi, 0xfffffffc
lea r13, [rsp + 0x198]
xorps xmm6, xmm6
lea rbp, [rsp + 0x1e0]
lea rdi, [rsp + 0x1d0]
mov rcx, r13
call fcn.140103560
movzx r9d, byte [rsp + 0x67]
test r9b, r9b
cmovs r9, qword [rsp + 0x58]
mov r8, qword [rsp + 0x50]
cmovns r8, rbx
mov rcx, r13
xor edx, edx
call fcn.140179bd0
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x1c0], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x1b0], xmm0
movups xmmword [rax], xmm6
mov qword [rax + 0x10], 0
movzx eax, byte [rsp + 0x1c7]
test al, al
mov rcx, qword [rsp + 0x1b0]
lea rdx, [rsp + 0x1b0]
cmovns rcx, rdx
mov qword [rsp + 0x1d0], rcx
cmovs rax, qword [rsp + 0x1b8]
mov qword [rsp + 0x1d8], rax
mov rcx, rbp
mov rdx, rdi
call fcn.1401859c0
cmp byte [r15 + 0x17], 0
js 0x1400ad0e1
mov rax, qword [rsp + 0x1f0]
mov qword [r15 + 0x10], rax
movups xmm0, xmmword [rsp + 0x1e0]
movups xmmword [r15], xmm0
mov byte [rsp + 0x1f7], 0
mov word [rsp + 0x1e0], 0
cmp byte [rsp + 0x1c7], 0
jns 0x1400acda6
mov rcx, qword [rsp + 0x1b0]
call fcn.1401cfdbc
cmp byte [rsp + 0x1af], 0
js 0x1400ad0ee
mov rcx, r15
mov dl, 1
call fcn.140101230
mov r14, rax
cmp rax, 0xffffffffffffffff
jne 0x1400acdd4
lea eax, [rsi + 1]
test esi, esi
mov esi, eax
jne 0x1400acccc
cmp r14, 0xffffffffffffffff
je 0x1400ad100
cmp byte [rsp + 0x67], 0
jns 0x1400acdef
mov rcx, qword [rsp + 0x50]
call fcn.1401cfdbc
xorps xmm0, xmm0
lea rbx, [rsp + 0x1e0]
movaps xmmword [rbx], xmm0
mov qword [rbx + 0x10], 0
mov dword [rbx], 0x18
mov dword [rbx + 0x10], 1
mov rsi, qword [sym.imp.KERNEL32.dll_CreateEventW]
mov rcx, rbx
xor edx, edx
xor r8d, r8d
xor r9d, r9d
call rsi
mov qword [0x1403b0b08], rax
mov rcx, rbx
xor edx, edx
xor r8d, r8d
xor r9d, r9d
call rsi
mov qword [0x1403b0b10], rax
mov rcx, rbx
xor edx, edx
xor r8d, r8d
xor r9d, r9d
call rsi
mov qword [0x1403b0b18], rax
lea rcx, [0x1403bb638]
call fcn.140103800
mov ecx, 8
call fcn.1401cfd80
mov rbx, rax
mov rcx, rax
call fcn.140189370
mov qword [0x1403bb660], rbx
lea rcx, [fcn.140270dd0]
call qword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
lea rdx, [0x140270f40]
mov ecx, 0x16
call fcn.1401f6ab0
mov ecx, 0xd8
call fcn.1401cfd80
mov r13, rax
mov rcx, rax
mov rdx, qword [rsp + 0x30]
call fcn.14017c8d0
lea rcx, [r13 + 0x18]
mov rdx, qword [rsp + 0x38]
call fcn.14017c8d0
lea rcx, [r13 + 0x30]
mov rdx, qword [rsp + 0x40]
call fcn.14017c8d0
lea rcx, [r13 + 0x48]
mov rbp, qword [rsp + 0x280]
cmp byte [rbp + 0x17], 0
jns 0x1400ad147
mov rdx, qword [rbp]
mov r8, qword [rbp + 8]
call fcn.140179b50
lea rbp, [r13 + 0x68]
xorps xmm6, xmm6
movups xmmword [r13 + 0x68], xmm6
mov qword [r13 + 0x60], rbp
mov rdi, qword [r12]
add r12, 8
cmp rdi, r12
je 0x1400acf70
lea rsi, [r13 + 0x60]
lea rbx, [rsp + 0x50]
lea r9, [rdi + 0x20]
mov qword [rsp + 0x20], r9
mov rcx, rsi
mov rdx, rbx
mov r8, rbp
call fcn.1400ae850
mov rcx, qword [rdi + 8]
test rcx, rcx
jne 0x1400acf4d
mov rax, qword [rdi + 0x10]
cmp qword [rax], rdi
jne 0x1400acf5a
mov rdi, rax
cmp rax, r12
jne 0x1400acf1a
jmp 0x1400acf70
mov rax, rcx
mov rcx, qword [rcx]
test rcx, rcx
je 0x1400acf43
jmp 0x1400acf4d
add rdi, 0x10
mov rcx, qword [rdi]
lea rdi, [rcx + 0x10]
mov rax, qword [rcx + 0x10]
cmp qword [rax], rcx
je 0x1400acf43
jmp 0x1400acf5e
movups xmmword [r13 + 0x78], xmm6
mov qword [r13 + 0x88], 0
mov rax, qword [rsp + 0x290]
mov rbp, qword [rax]
mov rbx, qword [rax + 8]
mov rdi, rbx
sub rdi, rbp
movabs r12, 0xaaaaaaaaaaaaaaab
mov rcx, rbx
sub rcx, rbp
je 0x1400ad021
sar rdi, 3
imul rdi, r12
movabs rax, 0xaaaaaaaaaaaaaaa
cmp rdi, rax
ja 0x1400ad241
call fcn.1401cfd80
mov rsi, rax
mov qword [r13 + 0x80], rax
mov qword [r13 + 0x78], rax
lea rax, [rdi + rdi*2]
lea rax, [rsi + rax*8]
mov qword [r13 + 0x88], rax
cmp byte [rbp + 0x17], 0
js 0x1400ad008
mov rax, qword [rbp + 0x10]
mov qword [rsi + 0x10], rax
movups xmm0, xmmword [rbp]
movups xmmword [rsi], xmm0
add rbp, 0x18
add rsi, 0x18
cmp rbp, rbx
jne 0x1400acfe4
jmp 0x1400ad01a
mov rdx, qword [rbp]
mov r8, qword [rbp + 8]
mov rcx, rsi
call fcn.140179b50
jmp 0x1400acff9
mov qword [r13 + 0x80], rsi
xorps xmm0, xmm0
movups xmmword [r13 + 0x90], xmm0
mov qword [r13 + 0xa0], 0
mov rax, qword [rsp + reloc.SHELL32.dll_IsUserAnAdmin]
mov rsi, qword [rax]
mov rdi, qword [rax + 8]
mov rbx, rdi
sub rbx, rsi
mov rcx, rdi
sub rcx, rsi
jne 0x1400ad15b
mov rcx, r13
add rcx, 0xa8
cmp byte [r15 + 0x17], 0
jns 0x1400ad1c6
mov rdx, qword [r15]
mov r8, qword [r15 + 8]
call fcn.14017ada0
lea rax, [0x140337ad8]
mov qword [r13 + 0xc0], rax
mov qword [r13 + 0xc8], r14
mov byte [r13 + 0xd0], 0
cmp byte [rsp + 0x2a0], 0
jne 0x1400ad1da
lea rcx, [rsp + 0x48]
mov qword [rcx], r13
call fcn.1400ad2f0
mov esi, eax
mov rcx, qword [rsp + 0x1f8]
xor rcx, rsp
call fcn.1401d1390
mov eax, esi
movaps xmm6, xmmword [rsp + 0x200]
add rsp, 0x218
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov rcx, qword [r15]
call fcn.1401cfdbc
jmp 0x1400acd65
mov rcx, qword [rsp + 0x198]
call fcn.1401cfdbc
jmp 0x1400acdb4
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rbx, [rsp + 0x1e0]
mov rcx, rbx
mov r8d, 0x131
call fcn.1402ad1e0
mov rcx, rbx
call fcn.1402ad110
lea rdx, str.CreateNamedPipe
mov r8d, 0xf
mov rcx, rax
call fcn.14020f8f0
mov rcx, rbx
call fcn.1402ad120
jmp 0x1400acdde
mov rax, qword [rbp + 0x10]
mov qword [rcx + 0x10], rax
movups xmm0, xmmword [rbp]
movups xmmword [rcx], xmm0
jmp 0x1400acef4
sar rbx, 3
imul rbx, r12
movabs rax, 0xaaaaaaaaaaaaaaa
cmp rbx, rax
ja 0x1400ad297
call fcn.1401cfd80
mov rbp, rax
mov qword [r13 + 0x98], rax
mov qword [r13 + 0x90], rax
lea rax, [rbx + rbx*2]
lea rax, [rax*8]
add rax, rbp
mov qword [r13 + 0xa0], rax
mov rcx, rbp
mov rdx, rsi
call fcn.14017c8d0
add rsi, 0x18
add rbp, 0x18
cmp rsi, rdi
jne 0x1400ad1a2
mov qword [r13 + 0x98], rbp
jmp 0x1400ad058
mov rax, qword [r15 + 0x10]
mov qword [rcx + 0x10], rax
movups xmm0, xmmword [r15]
movups xmmword [rcx], xmm0
jmp 0x1400ad079
lea rsi, [r15 + 0x18]
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
lea r8, [0x1402709c0]
xor ecx, ecx
xor edx, edx
mov r9, r13
call qword [sym.imp.KERNEL32.dll_CreateThread]
lea rdx, [rsp + 0x50]
mov qword [rdx], rax
mov rcx, rsi
call fcn.1400ad2a0
mov sil, 1
cmp qword [r15 + 0x20], 0
jne 0x1400ad0b3
mov ecx, 2
call fcn.14017e5e0
test al, al
jne 0x1400ad24d
mov qword [0x1403bb668], 2
xor esi, esi
jmp 0x1400ad0b3
add r13, 0x78
mov rcx, r13
call fcn.14020f6b0
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._third_party_crashpad_crashpad_client_crashpad_client_win.cc
lea rsi, [rsp + 0x50]
mov rcx, rsi
mov r8d, 0x298
mov r9d, 2
call fcn.14023e670
lea rcx, [rsp + 0x60]
lea rdx, [0x14034bc9a]
mov r8d, ntohl
call fcn.14020f8f0
mov rcx, rsi
call fcn.14023e6f0
jmp 0x1400ad22f
add r13, 0x90
jmp 0x1400ad245