Function at 0x1400a8210
Capabilities:
Create thread

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x218
movaps xmmword [rsp + 0x200], xmm6
mov qword [rsp + 0x40], r9
mov qword [rsp + 0x38], r8
mov qword [rsp + 0x30], rdx
mov r15, rcx
mov r12, qword [rsp + 0x288]
mov rax, qword [0x1403a0028]
xor rax, rsp
mov qword [rsp + 0x1f8], rax
movabs rax, 0xaaaaaaaaaaaaaaaa
lea rbx, [rsp + 0x50]
mov qword [rbx + 0x10], rax
movaps xmm0, xmmword [0x14032f5c0]
movaps xmmword [rbx], xmm0
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
lea rdx, str..pipecrashpad__lu_
mov rcx, rbx
mov r8d, eax
call fcn.140169560
mov esi, 0xfffffffc
lea rdi, [rsp + 0x198]
xorps xmm6, xmm6
lea rbp, [rsp + 0x1e0]
lea r14, [rsp + 0x1d0]
mov rcx, rdi
call fcn.1400eb2e0
movzx eax, byte [rsp + 0x67]
mov r9d, eax
and r9d, 0x7f
test al, al
cmovs r9, qword [rsp + 0x58]
mov r8, qword [rsp + 0x50]
cmovns r8, rbx
mov rcx, rdi
xor edx, edx
call fcn.14005c290
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x1c0], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x1b0], xmm0
movups xmmword [rax], xmm6
mov qword [rax + 0x10], 0
movzx eax, byte [rsp + 0x1c7]
mov ecx, eax
and ecx, 0x7f
test al, al
mov rax, qword [rsp + 0x1b0]
lea rdx, [rsp + 0x1b0]
cmovns rax, rdx
mov qword [rsp + 0x1d0], rax
cmovs rcx, qword [rsp + 0x1b8]
mov qword [rsp + 0x1d8], rcx
mov rcx, rbp
mov rdx, r14
call fcn.140169fc0
cmp byte [r15 + 0x17], 0
js 0x1400a86b8
mov rax, qword [rsp + 0x1f0]
mov qword [r15 + 0x10], rax
movups xmm0, xmmword [rsp + 0x1e0]
movups xmmword [r15], xmm0
mov byte [rsp + 0x1f7], 0
mov word [rsp + 0x1e0], 0
cmp byte [rsp + 0x1c7], 0
jns 0x1400a8390
mov rcx, qword [rsp + 0x1b0]
call fcn.1401b9ce8
cmp byte [rsp + 0x1af], 0
js 0x1400a86c5
mov rcx, r15
mov dl, 1
call fcn.1400e91b0
mov r13, rax
cmp rax, 0xffffffffffffffff
jne 0x1400a83be
lea eax, [rsi + 1]
test esi, esi
mov esi, eax
jne 0x1400a82ac
cmp r13, 0xffffffffffffffff
je 0x1400a86d7
cmp byte [rsp + 0x67], 0
jns 0x1400a83d9
mov rcx, qword [rsp + 0x50]
call fcn.1401b9ce8
xorps xmm0, xmm0
lea rbx, [rsp + 0x1e0]
movaps xmmword [rbx], xmm0
mov qword [rbx + 0x10], 0
mov dword [rbx], 0x18
mov dword [rbx + 0x10], 1
mov rsi, qword [sym.imp.KERNEL32.dll_CreateEventW]
mov rcx, rbx
xor edx, edx
xor r8d, r8d
xor r9d, r9d
call rsi
mov qword [0x1403a38d0], rax
mov rcx, rbx
xor edx, edx
xor r8d, r8d
xor r9d, r9d
call rsi
mov qword [0x1403a38e4], rax
mov rcx, rbx
xor edx, edx
xor r8d, r8d
xor r9d, r9d
call rsi
mov qword [0x1403a38ec], rax
lea rcx, [0x1403b76a8]
call fcn.1400eb580
mov ecx, 8
call fcn.1401b9cac
mov rbx, rax
mov rcx, rax
call fcn.14016dd40
mov qword [0x1403b76d0], rbx
lea rcx, [fcn.140256be0]
call qword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
lea rdx, [0x140256d50]
mov ecx, 0x16
call fcn.1401e07f0
mov ecx, 0xd8
call fcn.1401b9cac
mov r14, rax
mov rcx, rax
mov rdx, qword [rsp + 0x30]
call fcn.14015ea80
lea rcx, [r14 + 0x18]
mov rdx, qword [rsp + 0x38]
call fcn.14015ea80
lea rcx, [r14 + 0x30]
mov rdx, qword [rsp + 0x40]
call fcn.14015ea80
lea rcx, [r14 + 0x48]
mov rbp, qword [rsp + 0x280]
cmp byte [rbp + 0x17], 0
jns 0x1400a871e
mov rdx, qword [rbp]
mov r8, qword [rbp + 8]
call fcn.14015bac0
lea rbp, [r14 + 0x68]
xorps xmm6, xmm6
movups xmmword [r14 + 0x68], xmm6
mov qword [r14 + 0x60], rbp
mov rdi, qword [r12]
add r12, 8
cmp rdi, r12
je 0x1400a8547
lea rsi, [r14 + 0x60]
lea rbx, [rsp + 0x50]
lea r9, [rdi + 0x20]
mov qword [rsp + 0x20], r9
mov rcx, rsi
mov rdx, rbx
mov r8, rbp
call fcn.1400a9ab0
mov rcx, qword [rdi + 8]
test rcx, rcx
jne 0x1400a853a
mov rax, qword [rdi + 0x10]
cmp qword [rax], rdi
mov rdi, rax
jne 0x1400a8524
mov rdi, rax
cmp rax, r12
jne 0x1400a8504
jmp 0x1400a8547
mov rax, rcx
mov rcx, qword [rcx]
test rcx, rcx
je 0x1400a8530
jmp 0x1400a853a
movups xmmword [r14 + 0x78], xmm6
mov qword [r14 + 0x88], 0
mov rax, qword [rsp + 0x290]
mov rbp, qword [rax]
mov rbx, qword [rax + 8]
mov rdi, rbx
sub rdi, rbp
movabs r12, 0xaaaaaaaaaaaaaaab
mov rcx, rbx
sub rcx, rbp
je 0x1400a85f8
sar rdi, 3
imul rdi, r12
movabs rax, 0xaaaaaaaaaaaaaaa
cmp rdi, rax
ja 0x1400a8811
call fcn.1401b9cac
mov rsi, rax
mov qword [r14 + 0x78], rax
mov qword [r14 + 0x80], rax
lea rax, [rdi + rdi*2]
lea rax, [rsi + rax*8]
mov qword [r14 + 0x88], rax
cmp byte [rbp + 0x17], 0
js 0x1400a85df
mov rax, qword [rbp + 0x10]
mov qword [rsi + 0x10], rax
movups xmm0, xmmword [rbp]
movups xmmword [rsi], xmm0
add rbp, 0x18
add rsi, 0x18
cmp rbp, rbx
jne 0x1400a85bb
jmp 0x1400a85f1
mov rdx, qword [rbp]
mov r8, qword [rbp + 8]
mov rcx, rsi
call fcn.14015bac0
jmp 0x1400a85d0
mov qword [r14 + 0x80], rsi
xorps xmm0, xmm0
movups xmmword [r14 + 0x90], xmm0
mov qword [r14 + 0xa0], 0
mov rax, qword [rsp + reloc.SHELL32.dll_IsUserAnAdmin]
mov rbp, qword [rax]
mov rdi, qword [rax + 8]
mov rbx, rdi
sub rbx, rbp
mov rcx, rdi
sub rcx, rbp
jne 0x1400a8732
mov rcx, r14
add rcx, 0xa8
cmp byte [r15 + 0x17], 0
jns 0x1400a8796
mov rdx, qword [r15]
mov r8, qword [r15 + 8]
call fcn.14015ca80
lea rax, str._n__
mov qword [r14 + 0xc0], rax
mov qword [r14 + 0xc8], r13
mov byte [r14 + 0xd0], 0
cmp byte [rsp + 0x2a0], 0
jne 0x1400a87aa
lea rcx, [rsp + 0x48]
mov qword [rcx], r14
call fcn.1400a88b0
mov esi, eax
mov rcx, qword [rsp + 0x1f8]
xor rcx, rsp
call fcn.1401bb0d0
mov eax, esi
movaps xmm6, xmmword [rsp + 0x200]
add rsp, 0x218
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov rcx, qword [r15]
call fcn.1401b9ce8
jmp 0x1400a834f
mov rcx, qword [rsp + 0x198]
call fcn.1401b9ce8
jmp 0x1400a839e
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rbx, [rsp + 0x1e0]
mov rcx, rbx
mov r8d, 0x138
call fcn.140291d50
mov rcx, rbx
call fcn.140291d70
lea rdx, str.CreateNamedPipe
mov r8d, 0xf
mov rcx, rax
call fcn.1401f9cc0
mov rcx, rbx
call fcn.140291d80
jmp 0x1400a83c8
mov rax, qword [rbp + 0x10]
mov qword [rcx + 0x10], rax
movups xmm0, xmmword [rbp]
movups xmmword [rcx], xmm0
jmp 0x1400a84de
sar rbx, 3
imul rbx, r12
movabs rax, 0xaaaaaaaaaaaaaaa
cmp rbx, rax
ja 0x1400a8811
call fcn.1401b9cac
mov rsi, rax
mov qword [r14 + 0x90], rax
mov qword [r14 + 0x98], rax
lea rax, [rbx + rbx*2]
lea rax, [rsi + rax*8]
mov qword [r14 + 0xa0], rax
mov rcx, rsi
mov rdx, rbp
call fcn.14015ea80
add rbp, 0x18
add rsi, 0x18
cmp rbp, rdi
jne 0x1400a8772
mov qword [r14 + 0x98], rsi
jmp 0x1400a862f
mov rax, qword [r15 + 0x10]
mov qword [rcx + 0x10], rax
movups xmm0, xmmword [r15]
movups xmmword [rcx], xmm0
jmp 0x1400a8650
lea rsi, [r15 + 0x18]
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
lea r8, [0x1402567c0]
xor ecx, ecx
xor edx, edx
mov r9, r14
call qword [sym.imp.KERNEL32.dll_CreateThread]
lea rdx, [rsp + 0x50]
mov qword [rdx], rax
mov rcx, rsi
call fcn.1400a8860
mov sil, 1
cmp qword [r15 + 0x20], 0
jne 0x1400a868a
mov ecx, 2
call fcn.140160660
test al, al
jne 0x1400a8816
mov qword [0x1403b76d8], 2
xor esi, esi
jmp 0x1400a868a
call fcn.1401d3c50
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrashpad_client_win.cc
lea rsi, [rsp + 0x50]
mov rcx, rsi
mov r8d, 0x29f
mov r9d, 2
call fcn.140224610
lea rcx, [rsp + 0x60]
lea rdx, [0x14033f092]
mov r8d, ntohl
call fcn.1401f9cc0
mov rcx, rsi
call fcn.140224690
jmp 0x1400a87ff