Function at 0x140001900
Capabilities:
Check if file exists
Execute command
Get file attributes
Open clipboard
Query environment variable
Write clipboard data

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x120]
sub rsp, 0x220
mov rax, qword [section..data]
xor rax, rsp
mov qword [rbp + 0x110], rax
mov r8d, 0x104
lea rdx, [rbp]
lea rcx, str.LOCALAPPDATA
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
dec eax
cmp eax, 0x102
ja 0x140001969
lea rdx, [rbp]
lea rcx, [rbp - 0x30]
call fcn.140002040
mov al, 1
jmp 0x14000196b
xor al, al
mov byte [rbp - 0x10], al
test al, al
jne 0x14000199f
lea rdx, str.Failed_to_get_LOCALAPPDATA_path_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002280
lea rdx, [0x140002450]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ebx, 1
jmp 0x140001f45
lea rdx, [rbp - 0x30]
lea rcx, [rsp + 0x68]
call fcn.140002160
nop
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
mov rsi, qword [rsp + 0x78]
sub rax, rsi
cmp rax, 0x1b
jb 0x140001fcd
lea r15, [rsp + 0x68]
mov r12, qword [rsp + 0x68]
mov r13, qword [rbp - 0x80]
cmp r13, 0xf
cmova r15, r12
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x58], xmm1
lea r14, [rsi + 0x1b]
mov ebx, 0xf
lea rdi, [rsp + 0x48]
movabs rax, 0x8000000000000000
lea edx, [rbx + 7]
cmp r14, rbx
jbe 0x140001a7f
mov rbx, r14
or rbx, 0xf
cmp rbx, rcx
jbe 0x140001a46
mov rbx, rcx
add rax, 0x27
mov rcx, rax
call fcn.140002800
test rax, rax
je 0x140001eea
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140001a7a
cmp rbx, rdx
cmovb rbx, rdx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140001a69
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140001fc1
jmp 0x140001a27
test rcx, rcx
je 0x140001a78
call fcn.140002800
mov rdi, rax
jmp 0x140001a7a
xor edi, edi
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x58], r14
mov qword [rsp + 0x60], rbx
mov r8, rsi
mov rdx, r15
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
movups xmm0, xmmword [str.FortniteGameSavedCrashes]
movups xmmword [rdi + rsi], xmm0
movsd xmm0, qword [0x140004478]
movsd qword [rdi + rsi + 0x10], xmm0
movzx eax, word [0x140004480]
mov word [rdi + rsi + 0x18], ax
movzx eax, byte [0x140004482]
mov byte [rdi + rsi + 0x1a], al
mov byte [rdi + r14], 0
lea rcx, [rsp + 0x48]
cmp qword [rsp + 0x60], 0xf
cmova rcx, qword [rsp + 0x48]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
je 0x140001e81
test al, 0x10
je 0x140001e81
lea rdx, [rsp + 0x48]
lea rcx, [rbp - 0x78]
call fcn.140001230
nop
cmp byte [rbp - 0x58], 0
jne 0x140001b43
lea rdx, str.Failed_to_get_most_recent_crash_path_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002280
lea rdx, [0x140002450]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.pause
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ebx, 1
jmp 0x140001e26
lea rdx, [rbp - 0x78]
lea rcx, [rbp - 0x50]
call fcn.140002160
nop
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
mov r14, qword [rbp - 0x40]
sub rax, r14
cmp rax, 0x10
jb 0x140001fbb
lea r13, [rbp - 0x50]
mov rsi, qword [rbp - 0x50]
cmp qword [rbp - 0x38], 0xf
cmova r13, rsi
xorps xmm0, xmm0
movups xmmword [rsp + 0x28], xmm0
xor eax, eax
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x40], rax
lea r15, [r14 + 0x10]
mov ebx, 0xf
lea rdi, [rsp + 0x28]
cmp r15, rbx
jbe 0x140001c1e
mov rbx, r15
or rbx, 0xf
cmp rbx, rcx
jbe 0x140001be3
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140002800
test rax, rax
je 0x140001dc1
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140001c19
cmp rbx, 0x16
mov ecx, 0x16
cmovb rbx, rcx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140001c0c
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140001fc7
jmp 0x140001bc4
test rcx, rcx
je 0x140001c16
call fcn.140002800
mov rdi, rax
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x40], rbx
mov r8, r14
mov rdx, r13
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
movups xmm0, xmmword [str.UE4Minidump.dmp]
movups xmmword [rdi + r14], xmm0
mov byte [rdi + r15], 0
lea rcx, [rsp + 0x28]
cmp qword [rsp + 0x40], 0xf
cmova rcx, qword [rsp + 0x28]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
je 0x140001d58
test al, 0x10
jne 0x140001d58
xor ecx, ecx
call qword [sym.imp.USER32.dll_OpenClipboard]
test eax, eax
je 0x140001d4f
call qword [sym.imp.USER32.dll_EmptyClipboard]
test eax, eax
je 0x140001d49
mov rdi, qword [rsp + 0x38]
lea rdx, [rdi + 0x15]
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov rbx, rax
test rax, rax
je 0x140001d49
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GlobalLock]
test rax, rax
je 0x140001d40
mov dword [rax], 0x14
mov dword [rax + 0x10], 0
lea rcx, [rax + 0x14]
lea rdx, [rsp + 0x28]
cmp qword [rsp + 0x40], 0xf
cmova rdx, qword [rsp + 0x28]
lea r8, [rdi + 1]
call sub.VCRUNTIME140.dll_memcpy
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov rdx, rbx
mov ecx, 0xf
call qword [sym.imp.USER32.dll_SetClipboardData]
test rax, rax
je 0x140001d40
call qword [sym.imp.USER32.dll_CloseClipboard]
lea rdx, str.Copied_to_clipboard__You_can_now_upload_the_file_with_CTRLV.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002280
lea rdx, [0x140002450]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.pause
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor ebx, ebx
jmp 0x140001d8d
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GlobalFree]
call qword [sym.imp.USER32.dll_CloseClipboard]
lea rdx, str.Failed_to_copy_crash_dump_to_clipboard_
jmp 0x140001d5f
lea rdx, str.Failed_to_get_most_crash_dump_file_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002280
lea rdx, [0x140002450]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.pause
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ebx, 1
mov rdx, qword [rsp + 0x40]
cmp rdx, 0xf
jbe 0x140001dcd
inc rdx
mov rcx, qword [rsp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001dc8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001dc8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140002844
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x40], 0xf
mov byte [rsp + 0x28], 0
mov rax, qword [rbp - 0x38]
cmp rax, 0xf
jbe 0x140001e22
lea rdx, [rax + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x140001e1a
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001e1a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rsi
call fcn.140002844
mov r13, qword [rbp - 0x80]
cmp byte [rbp - 0x58], 0
je 0x140001eb6
mov rdx, qword [rbp - 0x60]
cmp rdx, 0xf
jbe 0x140001e6e
inc rdx
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001e69
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001e69
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140002844
movdqa xmm0, xmmword [0x140004590]
movdqu xmmword [rbp - 0x68], xmm0
mov byte [rbp - 0x78], 0
jmp 0x140001eb6
lea rdx, str.Failed_to_get_Fortnite_crashes_path_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002280
lea rdx, [0x140002450]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.pause
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ebx, 1
mov rdx, qword [rsp + 0x60]
cmp rdx, 0xf
jbe 0x140001ef6
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001ef1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001ef1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140002844
movdqa xmm0, xmmword [0x140004590]
movdqu xmmword [rsp + 0x58], xmm0
mov byte [rsp + 0x48], 0
cmp r13, 0xf
jbe 0x140001f45
lea rdx, [r13 + 1]
mov rax, r12
cmp rdx, 0x1000
jb 0x140001f3c
add rdx, 0x27
mov r12, qword [r12 - 8]
sub rax, r12
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001f3c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r12
call fcn.140002844
nop
cmp byte [rbp - 0x10], 0
je 0x140001f89
mov rdx, qword [rbp - 0x18]
cmp rdx, 0xf
jbe 0x140001f89
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001f84
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001f84
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140002844
mov eax, ebx
mov rcx, qword [rbp + 0x110]
xor rcx, rsp
call fcn.1400027e0
lea r11, [rsp + 0x220]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1400011a0
nop
call fcn.140001100
nop
call fcn.140001100
nop
call fcn.1400011a0
int3