Function at 0x14001bb70
Capabilities:
Get disk size

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
lea rbp, [rsp - 0x3e8]
sub rsp, 0x4e8
xor eax, eax
mov rdi, r8
mov qword [rsp + 0x30], rax
mov rsi, rdx
mov dword [rsp + 0x28], 0x80000080
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x20], 2
mov edx, 0x40000000
mov r13, rcx
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rcx, rax
lea rdx, [0x140066e4c]
mov rbx, rax
call fcn.14003a530
lea rax, [rdi + 0xa8]
cmp qword [rax + 0x18], 0x10
jb 0x14001bbea
mov rax, qword [rax]
lea r9, [rdi + 0x88]
cmp qword [r9 + 0x18], 0x10
jb 0x14001bbfb
mov r9, qword [r9]
lea r8, [rdi + 0x68]
cmp qword [r8 + 0x18], 0x10
jb 0x14001bc09
mov r8, qword [r8]
mov qword [rsp + 0x520], r14
lea rdx, str._s_by__s__version:__s__r_n_r_n
mov rcx, rbx
mov qword [rsp + 0x4e0], r15
mov qword [rsp + 0x20], rax
call fcn.14003a530
mov r12, qword [rbp + 0x450]
lea r8, [rbp - 0x80]
xor edi, edi
mov qword [rbp - 0x68], 7
mov rcx, rsi
mov qword [rbp - 0x70], rdi
mov word [rbp - 0x80], di
lea rax, [r12 + 0xd0]
mov rdx, rax
mov qword [rbp - 0x40], rax
call fcn.1400336e0
lea rdx, [r12 + 0x30]
lea rcx, [rdx + 0x98]
mov qword [rbp - 0x28], rdx
mov rax, rdx
cmp rdx, rcx
je 0x14001bc8d
nop dword [rax]
cmp dword [rax], edi
jne 0x14001bcd5
add rax, 4
cmp rax, rcx
jne 0x14001bc80
mov rcx, qword [rbp - 0x68]
lea r14, [rbp - 0x80]
mov rax, qword [rbp - 0x80]
cmp rcx, 8
mov rdx, qword [rbp - 0x70]
cmovae r14, rax
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], 0xf
mov byte [rsp + 0x40], dil
test rdx, rdx
jne 0x14001c184
mov qword [rsp + 0x50], rdi
lea r15, [rsp + 0x40]
mov byte [rsp + 0x40], dil
jmp 0x14001c2ad
mov rcx, qword [rbp - 0x68]
lea r14, [rbp - 0x80]
mov rax, qword [rbp - 0x80]
cmp rcx, 8
mov rdx, qword [rbp - 0x70]
cmovae r14, rax
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], 0xf
mov byte [rsp + 0x40], dil
test rdx, rdx
jne 0x14001bd19
mov qword [rsp + 0x50], rdi
lea r12, [rsp + 0x40]
mov byte [rsp + 0x40], dil
jmp 0x14001be42
mov r15d, dword [rbp - 0x70]
mov r8, r14
mov qword [rsp + 0x38], rdi
mov r9d, r15d
mov qword [rsp + 0x30], rdi
xor edx, edx
mov dword [rsp + 0x28], edi
mov ecx, 0xfde9
mov qword [rsp + 0x20], rdi
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
test eax, eax
jg 0x14001bd65
cmp qword [rsp + 0x58], 0x10
lea rax, [rsp + 0x40]
mov qword [rsp + 0x50], rdi
cmovae rax, qword [rsp + 0x40]
mov byte [rax], dil
jmp 0x14001be25
mov rdx, qword [rsp + 0x50]
movsxd rcx, eax
cmp rcx, rdx
ja 0x14001bd8e
cmp qword [rsp + 0x58], 0x10
lea rax, [rsp + 0x40]
mov qword [rsp + 0x50], rcx
cmovae rax, qword [rsp + 0x40]
mov byte [rax + rcx], dil
jmp 0x14001bdea
mov r8, qword [rsp + 0x58]
mov rsi, rcx
mov rax, r8
sub rsi, rdx
sub rax, rdx
cmp rsi, rax
ja 0x14001bdd0
cmp r8, 0x10
mov qword [rsp + 0x50], rcx
lea rdi, [rsp + 0x40]
mov r8, rsi
cmovae rdi, qword [rsp + 0x40]
add rdi, rdx
xor edx, edx
mov rcx, rdi
call fcn.140043610
mov byte [rsi + rdi], 0
xor edi, edi
jmp 0x14001bdea
xor eax, eax
lea rcx, [rsp + 0x40]
movzx r8d, al
mov byte [rsp + 0x20], al
mov r9, rsi
mov rdx, rsi
call fcn.1400168d0
cmp qword [rsp + 0x58], 0x10
lea rcx, [rsp + 0x40]
mov eax, dword [rsp + 0x50]
mov r9d, r15d
cmovae rcx, qword [rsp + 0x40]
mov r8, r14
mov qword [rsp + 0x38], rdi
xor edx, edx
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rcx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
cmp qword [rsp + 0x58], 0x10
lea r12, [rsp + 0x40]
mov rcx, qword [rbp - 0x68]
cmovae r12, qword [rsp + 0x40]
mov rdx, qword [rbp - 0x70]
mov rax, qword [rbp - 0x80]
cmp rcx, 8
mov qword [rsp + 0x70], rdi
lea r14, [rbp - 0x80]
mov qword [rsp + 0x78], 0xf
cmovae r14, rax
mov byte [rsp + 0x60], 0
test rdx, rdx
jne 0x14001be79
mov qword [rsp + 0x70], rdi
lea r15, [rsp + 0x60]
mov byte [rsp + 0x60], dl
jmp 0x14001bf96
mov r15d, dword [rbp - 0x70]
mov r8, r14
mov qword [rsp + 0x38], rdi
mov r9d, r15d
mov qword [rsp + 0x30], rdi
xor edx, edx
mov dword [rsp + 0x28], edi
mov ecx, 0xfde9
mov qword [rsp + 0x20], rdi
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
test eax, eax
jg 0x14001bec5
cmp qword [rsp + 0x78], 0x10
lea rax, [rsp + 0x60]
mov qword [rsp + 0x70], rdi
cmovae rax, qword [rsp + 0x60]
mov byte [rax], 0
jmp 0x14001bf85
mov rdx, qword [rsp + 0x70]
movsxd rcx, eax
cmp rcx, rdx
ja 0x14001beee
cmp qword [rsp + 0x78], 0x10
lea rax, [rsp + 0x60]
mov qword [rsp + 0x70], rcx
cmovae rax, qword [rsp + 0x60]
mov byte [rax + rcx], 0
jmp 0x14001bf4a
mov r8, qword [rsp + 0x78]
mov rsi, rcx
mov rax, r8
sub rsi, rdx
sub rax, rdx
cmp rsi, rax
ja 0x14001bf30
cmp r8, 0x10
mov qword [rsp + 0x70], rcx
lea rdi, [rsp + 0x60]
mov r8, rsi
cmovae rdi, qword [rsp + 0x60]
add rdi, rdx
xor edx, edx
mov rcx, rdi
call fcn.140043610
mov byte [rsi + rdi], 0
xor edi, edi
jmp 0x14001bf4a
xor eax, eax
lea rcx, [rsp + 0x60]
movzx r8d, al
mov byte [rsp + 0x20], al
mov r9, rsi
mov rdx, rsi
call fcn.1400168d0
cmp qword [rsp + 0x78], 0x10
lea rcx, [rsp + 0x60]
mov eax, dword [rsp + 0x70]
mov r9d, r15d
cmovae rcx, qword [rsp + 0x60]
mov r8, r14
mov qword [rsp + 0x38], rdi
xor edx, edx
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rcx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
cmp qword [rsp + 0x78], 0x10
lea r15, [rsp + 0x60]
cmovae r15, qword [rsp + 0x60]
mov rax, qword [rbp - 0x28]
mov rcx, qword [rbp - 0x40]
mov r14d, dword [rax]
call fcn.140033a30
mov rdi, rax
mov ecx, r14d
mov rax, qword [rbp + 0x450]
movzx esi, word [rax + 0x108]
call fcn.140033820
mov qword [rsp + 0x38], rdi
lea rdx, str._s_caused__s__0x_08x__r_n__in_module__s_at__04x:_08x._r_n_r_n
mov dword [rsp + 0x30], esi
mov r9, rax
mov qword [rsp + 0x28], r12
mov r8, r15
mov rcx, rbx
mov dword [rsp + 0x20], r14d
call fcn.14003a530
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x14001c024
mov rcx, qword [rsp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001c01f
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001cb30
call fcn.14003f61c
mov rdx, qword [rsp + 0x58]
xor edi, edi
mov qword [rsp + 0x70], rdi
mov qword [rsp + 0x78], 0xf
mov byte [rsp + 0x60], dil
cmp rdx, 0x10
jb 0x14001c076
mov rcx, qword [rsp + 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001c071
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001cb36
call fcn.14003f61c
mov r14, qword [rbp - 0x40]
mov r12, qword [rbp + 0x450]
mov rdx, qword [rbp + 0x428]
mov rcx, rbx
call fcn.1400329f0
movdqa xmm0, xmmword [0x140067d90]
mov r8, 0xffffffffffffffff
movdqu xmmword [rsp + 0x50], xmm0
mov qword [rbp - 0x30], 0
mov qword [rbp - 0x38], 0
mov word [rsp + 0x40], di
nop word [rax + rax]
inc r8
cmp word [r13 + r8*2], 0
jne 0x14001c0c0
mov rdx, r13
lea rcx, [rsp + 0x40]
call fcn.14002a200
mov edx, 0x5c
mov rcx, r13
call fcn.140043bec
mov r8, rax
test rax, rax
je 0x14001c4e1
add r8, 2
cmp r8, r13
je 0x14001c4e1
sub r8, r13
mov qword [rbp - 0x50], rdi
sar r8, 1
lea rdx, [rsp + 0x40]
cmp qword [rsp + 0x50], r8
lea rcx, [rbp - 0x60]
mov qword [rbp - 0x48], 7
cmovb r8, qword [rsp + 0x50]
cmp qword [rsp + 0x58], 8
mov word [rbp - 0x60], di
cmovae rdx, qword [rsp + 0x40]
call fcn.14002a200
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x14001c53a
mov rcx, qword [rsp + 0x40]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001c535
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001cb3c
jmp 0x14001c535
mov r15d, dword [rbp - 0x70]
mov r8, r14
mov qword [rsp + 0x38], rdi
mov r9d, r15d
mov qword [rsp + 0x30], rdi
xor edx, edx
mov dword [rsp + 0x28], edi
mov ecx, 0xfde9
mov qword [rsp + 0x20], rdi
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
test eax, eax
jg 0x14001c1d0
cmp qword [rsp + 0x58], 0x10
lea rax, [rsp + 0x40]
mov qword [rsp + 0x50], rdi
cmovae rax, qword [rsp + 0x40]
mov byte [rax], dil
jmp 0x14001c290
mov rdx, qword [rsp + 0x50]
movsxd rcx, eax
cmp rcx, rdx
ja 0x14001c1f9
cmp qword [rsp + 0x58], 0x10
lea rax, [rsp + 0x40]
mov qword [rsp + 0x50], rcx
cmovae rax, qword [rsp + 0x40]
mov byte [rax + rcx], dil
jmp 0x14001c255
mov r8, qword [rsp + 0x58]
mov rsi, rcx
mov rax, r8
sub rsi, rdx
sub rax, rdx
cmp rsi, rax
ja 0x14001c23b
cmp r8, 0x10
mov qword [rsp + 0x50], rcx
lea rdi, [rsp + 0x40]
mov r8, rsi
cmovae rdi, qword [rsp + 0x40]
add rdi, rdx
xor edx, edx
mov rcx, rdi
call fcn.140043610
mov byte [rsi + rdi], 0
xor edi, edi
jmp 0x14001c255
xor eax, eax
lea rcx, [rsp + 0x40]
movzx r8d, al
mov byte [rsp + 0x20], al
mov r9, rsi
mov rdx, rsi
call fcn.1400168d0
cmp qword [rsp + 0x58], 0x10
lea rcx, [rsp + 0x40]
mov eax, dword [rsp + 0x50]
mov r9d, r15d
cmovae rcx, qword [rsp + 0x40]
mov r8, r14
mov qword [rsp + 0x38], rdi
xor edx, edx
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rcx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
cmp qword [rsp + 0x58], 0x10
lea r15, [rsp + 0x40]
mov rcx, qword [rbp - 0x68]
cmovae r15, qword [rsp + 0x40]
mov rdx, qword [rbp - 0x70]
mov rax, qword [rbp - 0x80]
cmp rcx, 8
mov qword [rsp + 0x70], rdi
lea r14, [rbp - 0x80]
mov qword [rsp + 0x78], 0xf
cmovae r14, rax
mov byte [rsp + 0x60], 0
test rdx, rdx
jne 0x14001c2e4
mov qword [rsp + 0x70], rdi
lea rdi, [rsp + 0x60]
mov byte [rsp + 0x60], dl
jmp 0x14001c408
mov r12d, dword [rbp - 0x70]
mov r8, r14
mov qword [rsp + 0x38], rdi
mov r9d, r12d
mov qword [rsp + 0x30], rdi
xor edx, edx
mov dword [rsp + 0x28], edi
mov ecx, 0xfde9
mov qword [rsp + 0x20], rdi
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
test eax, eax
jg 0x14001c330
cmp qword [rsp + 0x78], 0x10
lea rax, [rsp + 0x60]
mov qword [rsp + 0x70], rdi
cmovae rax, qword [rsp + 0x60]
mov byte [rax], 0
jmp 0x14001c3f0
mov rdx, qword [rsp + 0x70]
movsxd rcx, eax
cmp rcx, rdx
ja 0x14001c359
cmp qword [rsp + 0x78], 0x10
lea rax, [rsp + 0x60]
mov qword [rsp + 0x70], rcx
cmovae rax, qword [rsp + 0x60]
mov byte [rax + rcx], 0
jmp 0x14001c3b5
mov r8, qword [rsp + 0x78]
mov rsi, rcx
mov rax, r8
sub rsi, rdx
sub rax, rdx
cmp rsi, rax
ja 0x14001c39b
cmp r8, 0x10
mov qword [rsp + 0x70], rcx
lea rdi, [rsp + 0x60]
mov r8, rsi
cmovae rdi, qword [rsp + 0x60]
add rdi, rdx
xor edx, edx
mov rcx, rdi
call fcn.140043610
mov byte [rsi + rdi], 0
xor edi, edi
jmp 0x14001c3b5
xor eax, eax
lea rcx, [rsp + 0x60]
movzx r8d, al
mov byte [rsp + 0x20], al
mov r9, rsi
mov rdx, rsi
call fcn.1400168d0
cmp qword [rsp + 0x78], 0x10
lea rcx, [rsp + 0x60]
mov eax, dword [rsp + 0x70]
mov r9d, r12d
cmovae rcx, qword [rsp + 0x60]
mov r8, r14
mov qword [rsp + 0x38], rdi
xor edx, edx
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rcx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
cmp qword [rsp + 0x78], 0x10
lea rdi, [rsp + 0x60]
mov r12, qword [rbp + 0x450]
cmovae rdi, qword [rsp + 0x60]
lea r14, [r12 + 0xd0]
mov rcx, r14
call fcn.140033a30
movzx ecx, word [r12 + 0x108]
lea r9, [r12 + 0x5a1]
mov qword [rsp + 0x30], rax
lea rdx, str._s__s_in_module__s_at__04x:_08x._r_n_r_n
mov dword [rsp + 0x28], ecx
mov r8, rdi
mov rcx, rbx
mov qword [rsp + 0x20], r15
call fcn.14003a530
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x14001c486
mov rcx, qword [rsp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001c481
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001cb42
call fcn.14003f61c
mov rdx, qword [rsp + 0x58]
xor edi, edi
mov qword [rsp + 0x70], rdi
mov qword [rsp + 0x78], 0xf
mov byte [rsp + 0x60], dil
cmp rdx, 0x10
jb 0x14001c081
mov rcx, qword [rsp + 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001c4d7
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001cb48
call fcn.14003f61c
jmp 0x14001c081
mov rax, qword [rsp + 0x58]
mov rdx, rdi
mov qword [rbp - 0x50], rdx
mov qword [rbp - 0x48], 7
mov word [rbp - 0x60], di
cmp rax, 8
jb 0x14001c5e9
mov rcx, qword [rsp + 0x40]
lea rdx, [rax*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001c535
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001cb4e
call fcn.14003f61c
mov rdx, qword [rbp - 0x50]
test rdx, rdx
je 0x14001c5e9
cmp qword [rbp - 0x48], 8
lea rcx, [rbp - 0x60]
lea r8, [rbp - 0x38]
cmovae rcx, qword [rbp - 0x60]
lea rdx, [rbp - 0x30]
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov rdx, qword [rbp - 0x50]
test eax, eax
je 0x14001c5e9
cmp qword [rbp - 0x48], 8
lea rax, [rbp - 0x60]
movdqa xmm0, xmmword [0x140067da0]
lea r8, [rsp + 0x40]
cmovae rax, qword [rbp - 0x60]
lea rcx, [rbp + 0x450]
mov r9d, 0xfde9
mov qword [rbp + 0x450], rax
movdqu xmmword [rsp + 0x50], xmm0
mov byte [rsp + 0x40], 0
call fcn.140014bd0
cmp qword [rsp + 0x58], 0x10
lea r8, [rsp + 0x40]
mov rax, qword [rbp - 0x38]
lea rdx, str.Disk_space_data_for__s:__llu_bytes_free_of__llu_total._r_n_r_n
cmovae r8, qword [rsp + 0x40]
mov rcx, rbx
mov r9, qword [rbp - 0x30]
mov qword [rsp + 0x20], rax
call fcn.14003a530
lea rcx, [rsp + 0x40]
call fcn.14000feb0
jmp 0x14001c685
cmp qword [rbp - 0x48], 8
lea rax, [rbp - 0x60]
movdqa xmm0, xmmword [0x140067da0]
lea r8, [rsp + 0x40]
cmovae rax, qword [rbp - 0x60]
lea rcx, [rbp + 0x450]
mov r9d, 0xfde9
mov qword [rbp + 0x450], rax
movdqu xmmword [rsp + 0x50], xmm0
mov byte [rsp + 0x40], 0
call fcn.140014bd0
cmp qword [rsp + 0x58], 0x10
lea r8, [rsp + 0x40]
lea rdx, str.Disk_space_data_for__s_is_unavailable._r_n_r_n
mov rcx, rbx
cmovae r8, qword [rsp + 0x40]
call fcn.14003a530
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x14001c685
mov rcx, qword [rsp + 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001c680
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001cb54
call fcn.14003f61c
cmp dword [r12 + 0x30], 0xc0000005
jne 0x14001c6e2
cmp dword [r12 + 0x48], 2
jb 0x14001c6e2
cmp qword [r12 + 0x50], 0
lea rax, str.Read_from
lea r9, str.Write_to
mov edx, 0x3e8
cmove r9, rax
lea r8, str._s_location__08p_caused_an_access_violation._r_n
mov rax, qword [r12 + 0x58]
lea rcx, [rbp - 0x10]
mov qword [rsp + 0x20], rax
call fcn.14001f8c0
lea r8, [rbp - 0x10]
mov rcx, rbx
lea rdx, [0x1400669f8]
call fcn.14003a530
mov rdx, r14
mov rcx, rbx
call fcn.140032630
lea rdx, [0x1400637b8]
mov rcx, rbx
call fcn.14003a530
mov r13, qword [rbp + 0x428]
mov r8, r14
mov rdx, r13
mov rcx, rbx
call fcn.140031ff0
lea rdx, [0x1400637b8]
mov rcx, rbx
call fcn.14003a530
mov r15, qword [rbp + 0x430]
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], 7
mov word [rsp + 0x40], di
cmp qword [r15 + 0x120], 0x10
lea rsi, [r15 + 0x108]
jb 0x14001c752
mov rsi, qword [r15 + 0x108]
mov rdi, qword [r15 + 0x118]
test rdi, rdi
jne 0x14001c774
xor ecx, ecx
lea r8, [rsp + 0x40]
mov qword [rsp + 0x50], rcx
mov word [rsp + 0x40], cx
jmp 0x14001c805
xor eax, eax
mov r9d, edi
mov dword [rsp + 0x28], eax
mov r8, rsi
xor edx, edx
mov qword [rsp + 0x20], rax
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
test eax, eax
jg 0x14001c7b3
xor ecx, ecx
lea rax, [rsp + 0x40]
cmp qword [rsp + 0x58], 8
mov qword [rsp + 0x50], rcx
cmovae rax, qword [rsp + 0x40]
mov word [rax], cx
jmp 0x14001c7f4
xor r8d, r8d
movsxd rdx, eax
lea rcx, [rsp + 0x40]
call fcn.1400146e0
cmp qword [rsp + 0x58], 8
lea rcx, [rsp + 0x40]
mov eax, dword [rsp + 0x50]
mov r9d, edi
cmovae rcx, qword [rsp + 0x40]
mov r8, rsi
mov dword [rsp + 0x28], eax
xor edx, edx
mov qword [rsp + 0x20], rcx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
cmp qword [rsp + 0x58], 8
lea r8, [rsp + 0x40]
cmovae r8, qword [rsp + 0x40]
movsxd rax, dword [rbp + 0x440]
cmp eax, 6
ja case.default.0x14001c822
lea rdx, [0x140000000]
mov ecx, dword [rdx + rax*4 + 0x1cb6c]
add rcx, rdx
jmp rcx
lea rdx, str.Mono_DLL_loaded_successfully_at__S._r_n
jmp 0x14001c869
lea rdx, str.No_mono_DLL_path_set._This_app_is_either_running_IL2CPP__or_the_crash_occurred_before_mono_was_initialized._r_n
mov rcx, rbx
call fcn.14003a530
jmp case.0x14001c822.6
lea rdx, str._WARNING__r_nManaged_call_stack_frames_will_be_incorrect_or_missing._r_nThe_Mono_DLL_at__S_does_not_provide_out_of_process_stack_information_support._r_nUpgrade_to_a_newer_version_of_the_Mono_Scripting_Runtime_for_more_detailed_debug_information._r_n
jmp 0x14001c869
lea rdx, str._WARNING__r_nManaged_call_stack_frames_will_be_incorrect_or_missing_because_the_Mono_DLL_at__S_could_not_be_found._r_n
jmp 0x14001c869
lea rdx, str._WARNING__r_nMono_DLL_loaded_successfully_at__S_but_failed_to_read_Mono_Function_Access_Tables._Stack_frames_may_be_missing_or_corrupt._r_n
jmp 0x14001c869
lea rdx, str._WARNING__r_nMono_DLL_loaded_successfully_at__S_but_failed_to_read_Mono_stack_frame_memory._Stack_frames_may_be_missing_or_corrupt._r_n
jmp 0x14001c869
lea rdx, str._WARNING__r_nManaged_call_stack_frames_will_be_incorrect_or_missing_because_the_Mono_DLL_at__S_could_not_be_loaded__unknown_error_._r_n
mov rcx, rbx
call fcn.14003a530
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x14001c8b3
mov rcx, qword [rsp + 0x40]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001c8ae
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001cb5a
call fcn.14003f61c
mov rsi, qword [rbp + 0x448]
lea rax, [0x1400669b0]
xor edx, edx
mov qword [rbp - 0x20], rax
lea rax, [rbp - 0x20]
mov qword [rbp - 0x18], rbx
mov qword [rsi + 0x38], rax
mov r8d, dword [r12 + 0xc]
lea ecx, [rdx + 0x4a]
call qword [sym.imp.KERNEL32.dll_OpenThread]
mov rdi, rax
test rax, rax
je 0x14001c92f
mov r8d, dword [r12 + 0xc]
lea rdx, str._r_n_r_nStack_Trace_of_Crashed_Thread__d:_r_n
mov rcx, rbx
call fcn.14003a530
mov r9d, 0x400
mov r8, r14
mov rdx, rdi
mov rcx, rsi
call fcn.14001f8a0
test al, al
jne 0x14001c924
lea rdx, str.Exception_encountered_during_stack_walk._r_n
mov rcx, rbx
call fcn.14003a530
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x14001c93f
mov rax, qword [rsi]
lea rdx, str._Unable_to_access_crash_thread_information__r_n
mov rcx, rsi
call qword [rax + 0x28]
lea rdx, str._r_nStacks_for_Running_Threads:_r_n_r_n
mov rcx, rbx
call fcn.14003a530
mov r14, qword [rbp + 0x438]
mov rdi, qword [r14]
mov rax, qword [r14 + 0x10]
lea rcx, [rdi + rax*8]
cmp rdi, rcx
je 0x14001c9d1
mov rcx, qword [rdi]
call qword [sym.imp.KERNEL32.dll_GetThreadId]
cmp eax, dword [r12 + 0xc]
je 0x14001c9bd
mov r8d, eax
lea rdx, str.Call_Stack_for_Thread__d:_r_n
mov rcx, rbx
call fcn.14003a530
mov rdx, qword [rdi]
mov r9d, 0x400
xor r8d, r8d
mov rcx, rsi
call fcn.14001f8a0
test al, al
jne 0x14001c9ae
lea rdx, str.Exception_encountered_during_stack_walk._r_n
mov rcx, rbx
call fcn.14003a530
lea rdx, str._r_n_r_n
mov rcx, rbx
call fcn.14003a530
mov rcx, qword [r14 + 0x10]
add rdi, 8
mov rax, qword [r14]
lea rcx, [rax + rcx*8]
cmp rdi, rcx
jne 0x14001c965
lea rdx, str._r_n_r_n
mov rcx, rbx
call fcn.14003a530
mov r9, qword [r12 + 0x18]
mov rcx, rbx
test r9, r9
je 0x14001c9ff
mov r8, qword [r12 + 0x168]
mov rdx, r13
call fcn.140032770
jmp 0x14001ca0b
lea rdx, str.No_call_stack_available._r_n
call fcn.14003a530
mov rdx, r13
mov rcx, rbx
call fcn.140032530
mov rdx, r15
mov rcx, rbx
call fcn.14001b790
lea r8, [0x140067080]
mov rcx, rbx
lea rdx, str._r_n__end_of__S___r_n
call fcn.14003a530
mov rcx, rbx
call fcn.14003a4d0
lea rax, [rbx - 1]
cmp rax, 0xfffffffffffffffd
ja 0x14001ca59
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rbx, 0xffffffffffffffff
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x14001ca99
mov rcx, qword [rbp - 0x60]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001ca94
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001cb60
call fcn.14003f61c
mov rdx, qword [rbp - 0x68]
xor edi, edi
mov qword [rbp - 0x50], rdi
mov qword [rbp - 0x48], 7
mov word [rbp - 0x60], di
cmp rdx, 8
jb 0x14001caeb
mov rcx, qword [rbp - 0x80]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001cae6
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001cb66
call fcn.14003f61c
lea rax, [rbx - 1]
mov qword [rbp - 0x70], rdi
mov qword [rbp - 0x68], 7
mov word [rbp - 0x80], di
cmp rax, 0xfffffffffffffffd
ja 0x14001cb0e
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r15, qword [rsp + 0x4e0]
mov al, 1
mov r14, qword [rsp + 0x520]
add rsp, 0x4e8
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.14004a3a0
int3
call fcn.14004a3a0
int3
call fcn.14004a3a0
int3
call fcn.14004a3a0
int3
call fcn.14004a3a0
int3
call fcn.14004a3a0
int3
call fcn.14004a3a0
int3
call fcn.14004a3a0
int3
call fcn.14004a3a0
int3
call fcn.14004a3a0
int3