Function at 0x14001d370
Capabilities:
Check if file exists
Copy file
Create process on windows
Delete file
Get file attributes
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x10], rdx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1b50]
mov eax, 0x1c50
call fcn.14003f8f0
sub rsp, rax
mov r15, r9
mov byte [rsp + 0x20], 0
xor r9d, r9d
mov r12, rdx
mov rbx, r8
mov edi, ecx
mov edx, ecx
lea rcx, [rbp + 0xe0]
lea r8d, [r9 + 0x48]
call fcn.1400110c0
xor edx, edx
lea rcx, [rbp + 0x1a0]
mov r8d, 0x9b0
call fcn.140043610
lea rax, [rbp + 0x30]
xor esi, esi
mov r9d, 0x9b0
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x1a0]
mov qword [rbp + 0x30], rsi
mov rdx, rbx
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
jne 0x14001d425
mov r9d, 0x9b0
lea rcx, str.Failed_to_read_PID__ds_memory_at__p___d_bytes__n
mov r8, rbx
mov edx, edi
call fcn.140001f50
mov ebx, 0xfffffc81
jmp 0x14001e590
mov r9, qword [rbp + 0x1a0]
movabs r8, 0x556e697479434883
cmp r9, r8
je 0x14001d453
mov edx, edi
lea rcx, str.Crash_data_sent_by_PID__d_is_corrupt:_expected_magic_0x_llx_but_got_0x_llx_n
call fcn.140001f50
mov ebx, 0xfffffc82
jmp 0x14001e590
mov r9d, dword [rbp + 0x1b0]
cmp r9d, 0x9b0
je 0x14001d481
mov r8d, 0x9b0
lea rcx, str.Crash_data_sent_by_PID__d_is_corrupt:_expected_size__d_but_got__d_n
mov edx, edi
call fcn.140001f50
mov ebx, 0xfffffc82
jmp 0x14001e590
mov r8d, dword [rbp + 0x1a8]
cmp r8d, edi
je 0x14001d4a5
mov edx, edi
lea rcx, str.Crash_data_sent_by_PID__d_is_corrupt:_expected_to_agree_on_PID_but_got__d_n
call fcn.140001f50
mov ebx, 0xfffffc82
jmp 0x14001e590
cmp qword [r15 + 0x60], 0x10
lea rbx, [r15 + 0x48]
mov qword [rbp - 0x58], rsi
mov qword [rbp - 0x50], 7
mov word [rbp - 0x68], si
mov qword [rbp - 0x80], rsi
mov qword [rbp - 0x78], 7
mov word [rsp + 0x70], si
jb 0x14001d4d5
mov rbx, qword [r15 + 0x48]
mov r14, qword [r15 + 0x58]
test r14, r14
jne 0x14001d4ec
mov qword [rbp - 0x80], rsi
mov word [rsp + 0x70], si
jmp 0x14001d5da
mov dword [rsp + 0x28], esi
mov r9d, r14d
mov r8, rbx
mov qword [rsp + 0x20], rsi
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
test eax, eax
jg 0x14001d528
cmp qword [rbp - 0x78], 8
lea rax, [rsp + 0x70]
mov qword [rbp - 0x80], rsi
cmovae rax, qword [rsp + 0x70]
mov word [rax], si
jmp 0x14001d5da
mov r8, qword [rbp - 0x80]
movsxd rcx, eax
cmp rcx, r8
ja 0x14001d54e
cmp qword [rbp - 0x78], 8
lea rax, [rsp + 0x70]
mov qword [rbp - 0x80], rcx
cmovae rax, qword [rsp + 0x70]
mov word [rax + rcx*2], si
jmp 0x14001d5ab
mov rdi, qword [rbp - 0x78]
mov rdx, rcx
mov rax, rdi
sub rdx, r8
sub rax, r8
cmp rdx, rax
ja 0x14001d593
cmp rdi, 8
mov qword [rbp - 0x80], rcx
lea r9, [rsp + 0x70]
cmovae r9, qword [rsp + 0x70]
lea rdi, [r9 + r8*2]
test rdx, rdx
je 0x14001d588
movzx eax, si
mov rcx, rdx
rep stosw word [rdi], ax
lea rax, [r8 + rdx]
mov word [r9 + rax*2], si
jmp 0x14001d5ab
xor eax, eax
mov word [rsp + 0x20], si
movzx r8d, al
lea rcx, [rsp + 0x70]
mov r9, rdx
call fcn.140010be0
cmp qword [rbp - 0x78], 8
lea rcx, [rsp + 0x70]
mov eax, dword [rbp - 0x80]
mov r9d, r14d
cmovae rcx, qword [rsp + 0x70]
mov r8, rbx
mov dword [rsp + 0x28], eax
xor edx, edx
mov qword [rsp + 0x20], rcx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea rdx, [rbp - 0x68]
lea rcx, [rsp + 0x70]
call fcn.14001b1e0
mov rdx, qword [rbp - 0x78]
test al, al
sete dil
cmp rdx, 8
jb 0x14001d62f
mov rcx, qword [rsp + 0x70]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001d62a
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001e5b9
call fcn.14003f61c
test dil, dil
je 0x14001d64e
cmp qword [rbp - 0x50], 8
lea rdx, [rbp - 0x68]
lea rcx, str.Couldnt_create_crash_dump_directory:__S_n
cmovae rdx, qword [rbp - 0x68]
call fcn.140001f50
mov r9d, 0x800
lea r8, [rbp + 0xb50]
xor edx, edx
mov rcx, r12
call sub.PSAPI.DLL_GetModuleFileNameExW
call fcn.1400330d0
mov r13, rax
mov qword [rbp - 8], rax
cmp byte [r15 + 0x128], sil
je 0x14001d9bb
cmp qword [r15 + 0xc0], 0x10
lea r14, [r15 + 0xa8]
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], si
jb 0x14001d6a9
mov r14, qword [r15 + 0xa8]
mov rbx, qword [r15 + 0xb8]
test rbx, rbx
jne 0x14001d6c9
mov qword [rsp + 0x60], rsi
lea rbx, [rsp + 0x50]
mov word [rsp + 0x50], si
jmp 0x14001d7d1
mov dword [rsp + 0x28], esi
mov r9d, ebx
mov r8, r14
mov qword [rsp + 0x20], rsi
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
test eax, eax
jg 0x14001d707
cmp qword [rsp + 0x68], 8
lea rax, [rsp + 0x50]
mov qword [rsp + 0x60], rsi
cmovae rax, qword [rsp + 0x50]
mov word [rax], si
jmp 0x14001d7c0
mov r8, qword [rsp + 0x60]
movsxd rcx, eax
cmp rcx, r8
ja 0x14001d730
cmp qword [rsp + 0x68], 8
lea rax, [rsp + 0x50]
mov qword [rsp + 0x60], rcx
cmovae rax, qword [rsp + 0x50]
mov word [rax + rcx*2], si
jmp 0x14001d78f
mov rdi, qword [rsp + 0x68]
mov rdx, rcx
mov rax, rdi
sub rdx, r8
sub rax, r8
cmp rdx, rax
ja 0x14001d777
cmp rdi, 8
mov qword [rsp + 0x60], rcx
lea r9, [rsp + 0x50]
cmovae r9, qword [rsp + 0x50]
lea rdi, [r9 + r8*2]
test rdx, rdx
je 0x14001d76c
movzx eax, si
mov rcx, rdx
rep stosw word [rdi], ax
lea rax, [r8 + rdx]
mov word [r9 + rax*2], si
jmp 0x14001d78f
xor eax, eax
mov word [rsp + 0x20], si
movzx r8d, al
lea rcx, [rsp + 0x50]
mov r9, rdx
call fcn.140010be0
cmp qword [rsp + 0x68], 8
lea rcx, [rsp + 0x50]
mov eax, dword [rsp + 0x60]
mov r9d, ebx
cmovae rcx, qword [rsp + 0x50]
mov r8, r14
mov dword [rsp + 0x28], eax
xor edx, edx
mov qword [rsp + 0x20], rcx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
cmp qword [rsp + 0x68], 8
lea rbx, [rsp + 0x50]
cmovae rbx, qword [rsp + 0x50]
lea rax, [r15 + 0x68]
mov qword [rbp - 0x80], rsi
cmp qword [rax + 0x18], 0x10
mov r15, rax
mov qword [rbp - 0x78], 7
mov word [rsp + 0x70], si
jb 0x14001d7f3
mov r15, qword [rax]
mov r14, qword [rax + 0x10]
test r14, r14
jne 0x14001d80f
mov qword [rbp - 0x80], rsi
lea r8, [rsp + 0x70]
mov word [rsp + 0x70], si
jmp 0x14001d90d
mov dword [rsp + 0x28], esi
mov r9d, r14d
mov r8, r15
mov qword [rsp + 0x20], rsi
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
test eax, eax
jg 0x14001d84b
cmp qword [rbp - 0x78], 8
lea rax, [rsp + 0x70]
mov qword [rbp - 0x80], rsi
cmovae rax, qword [rsp + 0x70]
mov word [rax], si
jmp 0x14001d8fd
mov r8, qword [rbp - 0x80]
movsxd rcx, eax
cmp rcx, r8
ja 0x14001d871
cmp qword [rbp - 0x78], 8
lea rax, [rsp + 0x70]
mov qword [rbp - 0x80], rcx
cmovae rax, qword [rsp + 0x70]
mov word [rax + rcx*2], si
jmp 0x14001d8ce
mov rdi, qword [rbp - 0x78]
mov rdx, rcx
mov rax, rdi
sub rdx, r8
sub rax, r8
cmp rdx, rax
ja 0x14001d8b6
cmp rdi, 8
mov qword [rbp - 0x80], rcx
lea r9, [rsp + 0x70]
cmovae r9, qword [rsp + 0x70]
lea rdi, [r9 + r8*2]
test rdx, rdx
je 0x14001d8ab
movzx eax, si
mov rcx, rdx
rep stosw word [rdi], ax
lea rax, [r8 + rdx]
mov word [r9 + rax*2], si
jmp 0x14001d8ce
xor eax, eax
mov word [rsp + 0x20], si
movzx r8d, al
lea rcx, [rsp + 0x70]
mov r9, rdx
call fcn.140010be0
cmp qword [rbp - 0x78], 8
lea rcx, [rsp + 0x70]
mov eax, dword [rbp - 0x80]
mov r9d, r14d
cmovae rcx, qword [rsp + 0x70]
mov r8, r15
mov dword [rsp + 0x28], eax
xor edx, edx
mov qword [rsp + 0x20], rcx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
cmp qword [rbp - 0x78], 8
lea r8, [rsp + 0x70]
cmovae r8, qword [rsp + 0x70]
mov rax, qword [r13]
lea rdx, [rbp + 0xb50]
mov r9, rbx
mov rcx, r13
call qword [rax]
mov rdx, qword [rbp - 0x78]
cmp rdx, 8
jb 0x14001d961
mov rcx, qword [rsp + 0x70]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001d95c
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001e5bf
call fcn.14003f61c
mov rdx, qword [rsp + 0x68]
mov qword [rbp - 0x80], rsi
mov qword [rbp - 0x78], 7
mov word [rsp + 0x70], si
cmp rdx, 8
jb 0x14001d9b4
mov rcx, qword [rsp + 0x50]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001d9af
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001e5c5
call fcn.14003f61c
mov r15, qword [rbp + 0x1ba8]
mov rdx, qword [rbp - 0x58]
lea rcx, [rbp - 0x28]
movdqa xmm0, xmmword [0x140067d90]
add rdx, 0xa
movdqu xmmword [rbp - 0x18], xmm0
mov word [rbp - 0x28], si
call fcn.14002c410
cmp qword [rbp - 0x50], 8
lea r9, [rbp - 0x68]
mov rcx, qword [rbp - 0x10]
cmovae r9, qword [rbp - 0x68]
mov rax, rcx
mov r14, qword [rbp - 0x18]
mov rbx, qword [rbp - 0x58]
sub rax, r14
cmp rbx, rax
ja 0x14001da31
cmp rcx, 8
lea rax, [r14 + rbx]
lea rdi, [rbp - 0x28]
mov qword [rbp - 0x18], rax
cmovae rdi, qword [rbp - 0x28]
lea r8, [rbx + rbx]
mov rdx, r9
lea rcx, [rdi + r14*2]
call fcn.140042af0
lea rax, [r14 + rbx]
mov word [rdi + rax*2], si
jmp 0x14001da48
xor eax, eax
mov qword [rsp + 0x20], rbx
movzx r8d, al
lea rcx, [rbp - 0x28]
mov rdx, rbx
call fcn.140016720
mov rdx, qword [rbp - 0x10]
mov rcx, qword [rbp - 0x18]
mov rax, rdx
sub rax, rcx
cmp rax, 0xa
jb 0x14001da8d
cmp rdx, 8
lea rbx, [rcx + 0xa]
lea rdi, [rbp - 0x28]
mov qword [rbp - 0x18], rbx
cmovae rdi, qword [rbp - 0x28]
lea rdx, str.error.log
mov r8d, 0x14
lea rcx, [rdi + rcx*2]
call fcn.140042af0
mov word [rdi + rbx*2], si
jmp 0x14001daaf
xor eax, eax
mov qword [rsp + 0x20], 0xa
lea r9, str.error.log
movzx r8d, al
lea rcx, [rbp - 0x28]
lea edx, [rax + 0xa]
call fcn.140016720
mov rdx, qword [rbp - 0x58]
lea rcx, [rbp - 0x48]
movdqa xmm0, xmmword [0x140067d90]
add rdx, 0xa
movdqu xmmword [rbp - 0x38], xmm0
mov word [rbp - 0x48], si
call fcn.14002c410
cmp qword [rbp - 0x50], 8
lea r9, [rbp - 0x68]
mov rcx, qword [rbp - 0x30]
cmovae r9, qword [rbp - 0x68]
mov rax, rcx
mov r14, qword [rbp - 0x38]
mov rbx, qword [rbp - 0x58]
sub rax, r14
cmp rbx, rax
ja 0x14001db25
cmp rcx, 8
lea rax, [r14 + rbx]
lea rdi, [rbp - 0x48]
mov qword [rbp - 0x38], rax
cmovae rdi, qword [rbp - 0x48]
lea r8, [rbx + rbx]
mov rdx, r9
lea rcx, [rdi + r14*2]
call fcn.140042af0
lea rax, [rbx + r14]
mov word [rdi + rax*2], si
jmp 0x14001db3c
xor eax, eax
mov qword [rsp + 0x20], rbx
movzx r8d, al
lea rcx, [rbp - 0x48]
mov rdx, rbx
call fcn.140016720
mov rdx, qword [rbp - 0x30]
mov rcx, qword [rbp - 0x38]
mov rax, rdx
sub rax, rcx
cmp rax, 0xa
jb 0x14001db81
cmp rdx, 8
lea rbx, [rcx + 0xa]
lea rdi, [rbp - 0x48]
mov qword [rbp - 0x38], rbx
cmovae rdi, qword [rbp - 0x48]
lea rdx, str.crash.dmp
mov r8d, 0x14
lea rcx, [rdi + rcx*2]
call fcn.140042af0
mov word [rdi + rbx*2], si
jmp 0x14001dba3
xor eax, eax
mov qword [rsp + 0x20], 0xa
lea r9, str.crash.dmp
movzx r8d, al
lea rcx, [rbp - 0x48]
lea edx, [rax + 0xa]
call fcn.140016720
mov rcx, r15
call fcn.14001e5e0
cmp qword [r15 + 0x120], 0x10
lea rbx, [r15 + 0x108]
xorps xmm0, xmm0
mov qword [rbp + 0x38], rax
movdqu xmmword [rsp + 0x78], xmm0
mov r13, rax
mov qword [rbp + 0x28], rsi
mov r14, rsi
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], si
jb 0x14001dbf2
mov rbx, qword [r15 + 0x108]
mov r15, qword [r15 + 0x118]
mov eax, 1
mov dword [rbp - 0x6c], eax
test r15, r15
jne 0x14001dc15
mov qword [rsp + 0x60], rsi
mov word [rsp + 0x50], si
jmp 0x14001dd7b
mov dword [rsp + 0x28], esi
mov r9d, r15d
mov r8, rbx
mov qword [rsp + 0x20], rsi
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
test eax, eax
jg 0x14001dc53
cmp qword [rsp + 0x68], 8
lea rax, [rsp + 0x50]
mov qword [rsp + 0x60], rsi
cmovae rax, qword [rsp + 0x50]
mov word [rax], si
jmp 0x14001dd0c
mov r8, qword [rsp + 0x60]
movsxd rcx, eax
cmp rcx, r8
ja 0x14001dc7c
cmp qword [rsp + 0x68], 8
lea rax, [rsp + 0x50]
mov qword [rsp + 0x60], rcx
cmovae rax, qword [rsp + 0x50]
mov word [rax + rcx*2], si
jmp 0x14001dcdb
mov rdi, qword [rsp + 0x68]
mov rdx, rcx
mov rax, rdi
sub rdx, r8
sub rax, r8
cmp rdx, rax
ja 0x14001dcc3
cmp rdi, 8
mov qword [rsp + 0x60], rcx
lea r9, [rsp + 0x50]
cmovae r9, qword [rsp + 0x50]
lea rdi, [r9 + r8*2]
test rdx, rdx
je 0x14001dcb8
movzx eax, si
mov rcx, rdx
rep stosw word [rdi], ax
lea rax, [r8 + rdx]
mov word [r9 + rax*2], si
jmp 0x14001dcdb
xor eax, eax
mov word [rsp + 0x20], si
movzx r8d, al
lea rcx, [rsp + 0x50]
mov r9, rdx
call fcn.140010be0
cmp qword [rsp + 0x68], 8
lea rcx, [rsp + 0x50]
mov eax, dword [rsp + 0x60]
mov r9d, r15d
cmovae rcx, qword [rsp + 0x50]
mov r8, rbx
mov dword [rsp + 0x28], eax
xor edx, edx
mov qword [rsp + 0x20], rcx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
cmp qword [rsp + 0x68], 8
lea rdi, [rsp + 0x50]
mov rbx, rsi
cmovae rdi, qword [rsp + 0x50]
test rdi, rdi
je 0x14001dd76
cmp word [rdi], bx
je 0x14001dd76
mov r8, qword [rbp + 0x1c0]
mov rdx, rdi
mov rcx, r12
call fcn.140033c70
test rax, rax
jne 0x14001dd6b
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x14001dd5f
test al, 0x10
jne 0x14001dd5f
mov r12d, 2
mov dword [rbp - 0x70], r12d
jmp 0x14001dd84
mov r12d, 3
mov dword [rbp - 0x70], r12d
jmp 0x14001dd84
mov rbx, rax
mov dword [rbp - 0x70], esi
mov r12d, esi
jmp 0x14001dd84
mov eax, 1
mov r12d, eax
mov dword [rbp - 0x70], eax
mov rbx, rsi
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x14001ddc6
mov rcx, qword [rsp + 0x50]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001ddc1
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001e5cb
call fcn.14003f61c
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], si
test rbx, rbx
je 0x14001ddf3
mov rdx, qword [rbp + 0x1c8]
mov rcx, rbx
call fcn.14001e9a0
mov r12d, eax
mov dword [rbp - 0x70], eax
mov rcx, qword [rbp + 0x1b98]
call qword [sym.imp.KERNEL32.dll_GetProcessId]
mov r8, qword [rbp + 0x1b98]
lea rcx, [rbp + 0xa0]
mov edx, eax
mov qword [rsp + 0x20], rsi
mov r9, rbx
call fcn.1400308e0
lea rcx, [rbp + 0xa0]
call fcn.1400136a0
lea rcx, [rbp + 0xa0]
call fcn.140033f10
mov rcx, qword [rbp - 8]
mov edx, 0x14
mov rax, qword [rcx]
call qword [rax + 0x18]
cmp qword [rbp - 0x30], 8
lea rax, [rbp + 0x1d0]
mov edi, dword [rbp + 0x1ac]
lea r15, [rbp - 0x48]
cmovae r15, qword [rbp - 0x48]
mov edx, 0x40000000
mov qword [rbp + 0x68], rax
mov rcx, r15
lea rax, [rbp + 0x270]
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], 0x80000080
xor r9d, r9d
xor r8d, r8d
mov qword [rbp + 0x70], rax
mov dword [rsp + 0x20], 2
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x14001ded4
mov rdx, qword [rbp + 0x1b98]
lea r9, [rbp + 0x68]
mov r8d, edi
mov rcx, rax
call fcn.1400320a0
mov rcx, rbx
movzx edi, al
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test dil, dil
jne 0x14001e010
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x14001dee6
movzx eax, ax
or eax, 0x80070000
cmp qword [rbp - 0x30], 8
lea rdx, [rbp - 0x48]
mov r8d, eax
lea rcx, str.Failed_to_generate_minidump_at__S___x__n
cmovae rdx, qword [rbp - 0x48]
call fcn.140001f50
mov rcx, qword [rbp - 8]
mov edx, 0x28
mov rax, qword [rcx]
call qword [rax + 0x18]
test r13, r13
je 0x14001e0de
lea rax, fcn.14001f050
mov qword [rsp + 0x58], r13
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov byte [r13 + 0x530], 1
mov rbx, qword [rbp + 0xe0]
mov qword [rbp + 0xd8], rax
mov rax, qword [rbp + 0xf0]
mov qword [rsp + 0x60], rsi
lea rcx, [rbx + rax*8]
cmp rbx, rcx
je 0x14001e0c6
mov r14d, esi
mov rcx, qword [rbx]
call qword [sym.imp.KERNEL32.dll_GetThreadId]
cmp eax, dword [rbp + 0x1ac]
lea rdx, str.Thread__d
mov r8d, eax
lea rcx, [rbp + 0x40]
sete r13b
mov r12d, eax
call fcn.140010010
mov r15, rax
cmp qword [rsp + 0x58], rsi
je 0x14001e031
cmp qword [rsp + 0x60], rsi
jne 0x14001e031
mov edx, dword [0x140066198]
lea r9, str.C:_buildslaveunity_buildPlatformDependent_Win_UnityCrashHandler_CrashHandlerWindows.cpp
mov r8d, 8
mov dword [rsp + 0x20], 0xb3
lea ecx, [r8 + 0x50]
call fcn.140001ff0
mov rdi, rax
test rax, rax
je 0x14001e02c
mov dword [rax], r14d
lea rcx, [rax + 8]
mov edx, dword [r15 + 0x20]
mov dword [rcx + 0x20], edx
mov rdx, r15
mov qword [rcx], rsi
mov qword [rcx + 0x18], rsi
mov byte [rcx + 8], sil
call fcn.140001bb0
mov byte [rdi + 0x30], r13b
mov qword [rdi + 0x38], rsi
mov dword [rdi + 0x40], 0x47
mov qword [rdi + 0x48], rsi
mov qword [rdi + 0x50], rsi
mov qword [rsp + 0x60], rdi
jmp 0x14001e031
lea rdx, [rbp - 0x48]
lea rcx, [rsp + 0x70]
call fcn.140017b20
mov r14, qword [rsp + 0x70]
mov qword [rbp + 0x28], r14
jmp 0x14001df03
mov qword [rsp + 0x60], rsi
mov rcx, qword [rbp + 0x40]
inc r14d
test rcx, rcx
je 0x14001e04b
cmp qword [rbp + 0x48], rsi
jbe 0x14001e04b
mov edx, dword [rbp + 0x60]
call fcn.140002000
mov rdx, qword [rbx]
lea rcx, [rbp + 0xa0]
mov r9d, 0x400
xor r8d, r8d
call fcn.14001f8a0
test al, al
jne 0x14001e076
mov edx, r12d
lea rcx, str.Exception_encountered_during_stack_walk_of_thread__d_n
call fcn.140001f50
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x14001e09b
mov rdx, qword [rsp + 0x60]
test rdx, rdx
je 0x14001e09b
add rcx, 0x538
call fcn.140007f90
mov qword [rsp + 0x60], rsi
mov rcx, qword [rbp + 0xf0]
add rbx, 8
mov rax, qword [rbp + 0xe0]
lea rcx, [rax + rcx*8]
cmp rbx, rcx
jne 0x14001df63
mov r14, qword [rbp + 0x28]
mov r12d, dword [rbp - 0x70]
mov r13, qword [rbp + 0x38]
mov rcx, r13
call fcn.1400314f0
test al, al
jne 0x14001e0de
lea rcx, str.Failed_to_cache_crash_report._n
call fcn.140001f50
mov r13, qword [rbp - 8]
mov edx, 0x3c
mov rcx, r13
mov rax, qword [r13]
call qword [rax + 0x18]
cmp qword [rbp - 0x10], 8
lea rax, [rbp + 0x1a0]
mov r15, qword [rbp + 0x1ba8]
lea rcx, [rbp - 0x28]
mov rdi, qword [rbp + 0x1b98]
lea r9, [rbp + 0xe0]
cmovae rcx, qword [rbp - 0x28]
mov r8, r15
mov qword [rsp + 0x30], rax
mov rdx, rdi
lea rax, [rbp + 0xa0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r12d
call fcn.14001bb70
lea rdx, [rbp - 0x28]
test al, al
je 0x14001e155
lea rcx, [rsp + 0x70]
call fcn.140017b20
mov r14, qword [rsp + 0x70]
jmp 0x14001e16b
cmp qword [rbp - 0x10], 8
lea rcx, str.Failed_to_generate_report_summary_at__S_n
cmovae rdx, qword [rbp - 0x28]
call fcn.140001f50
mov rax, qword [r13]
mov edx, 0x50
mov rcx, r13
call qword [rax + 0x18]
cmp byte [rbp + 0x1bb0], sil
je 0x14001e19d
test byte [rbp + 0x740], 1
je 0x14001e19d
mov edx, dword [rbp + 0x1d0]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
jmp 0x14001e1aa
mov rcx, qword [rbp + 0x1bc0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov rdi, qword [r15 + 0x10]
cmp rdi, qword [r15 + 0x18]
je 0x14001e3eb
mov r13d, 1
nop
cmp qword [rdi + 0x18], 0x10
mov r14, rdi
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], si
jb 0x14001e1e0
mov r14, qword [rdi]
mov rbx, qword [rdi + 0x10]
test rbx, rbx
jne 0x14001e1fd
mov qword [rsp + 0x60], rsi
lea rcx, [rsp + 0x50]
mov word [rsp + 0x50], si
jmp 0x14001e28a
mov dword [rsp + 0x28], esi
mov r9d, ebx
mov r8, r14
mov qword [rsp + 0x20], rsi
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
test eax, eax
jg 0x14001e238
cmp qword [rsp + 0x68], 8
lea rax, [rsp + 0x50]
mov qword [rsp + 0x60], rsi
cmovae rax, qword [rsp + 0x50]
mov word [rax], si
jmp 0x14001e279
xor r8d, r8d
movsxd rdx, eax
lea rcx, [rsp + 0x50]
call fcn.1400146e0
cmp qword [rsp + 0x68], 8
lea rcx, [rsp + 0x50]
mov eax, dword [rsp + 0x60]
mov r9d, ebx
cmovae rcx, qword [rsp + 0x50]
mov r8, r14
mov dword [rsp + 0x28], eax
xor edx, edx
mov qword [rsp + 0x20], rcx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
cmp qword [rsp + 0x68], 8
lea rcx, [rsp + 0x50]
cmovae rcx, qword [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x14001e3b1
test al, 0x10
jne 0x14001e3b1
cmp qword [rbp - 0x50], 8
lea rdx, [rbp - 0x68]
mov qword [rbp + 0x18], rsi
mov r8, 0xffffffffffffffff
cmovae rdx, qword [rbp - 0x68]
mov qword [rbp + 0x20], 7
mov word [rbp + 8], si
inc r8
cmp word [rdx + r8*2], si
jne 0x14001e2c6
lea rcx, [rbp + 8]
call fcn.14002a200
cmp qword [rsp + 0x68], 8
lea rdx, [rsp + 0x50]
mov qword [rbp + 0x50], rsi
mov r8, 0xffffffffffffffff
cmovae rdx, qword [rsp + 0x50]
mov qword [rbp + 0x58], 7
mov word [rbp + 0x40], si
inc r8
cmp word [rdx + r8*2], si
jne 0x14001e301
lea rcx, [rbp + 0x40]
call fcn.14002a200
lea r8, [rbp + 8]
lea rdx, [rbp + 0x40]
lea rcx, [rbp + 0x78]
call fcn.14001ea50
lea rcx, [rbp + 8]
call fcn.140011350
cmp qword [rbp + 0x90], 8
lea rdx, [rbp + 0x78]
lea rcx, [rsp + 0x50]
mov dword [rsp + 0x28], r13d
cmovae rdx, qword [rbp + 0x78]
cmp qword [rsp + 0x68], 8
mov qword [rsp + 0x20], rsi
cmovae rcx, qword [rsp + 0x50]
xor r9d, r9d
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_CopyFileExW]
test eax, eax
jne 0x14001e398
cmp qword [rbp - 0x50], 8
lea r8, [rbp - 0x68]
mov rdx, rdi
cmovae r8, qword [rbp - 0x68]
cmp qword [rdi + 0x18], 0x10
jb 0x14001e385
mov rdx, qword [rdi]
lea rcx, str.Failed_to_copy___s__to_crash_report_folder_at___S__n
call fcn.140001f50
lea rdx, [rsp + 0x50]
jmp 0x14001e39c
lea rdx, [rbp + 0x78]
lea rcx, [rsp + 0x70]
call fcn.140017b20
lea rcx, [rbp + 0x78]
call fcn.140011350
jmp 0x14001e3ca
cmp qword [rdi + 0x18], 0x10
mov rdx, rdi
jb 0x14001e3be
mov rdx, qword [rdi]
lea rcx, str.Failed_to_find_file___s__n
call fcn.140001f50
lea rcx, [rsp + 0x50]
call fcn.140011350
add rdi, 0x40
cmp rdi, qword [r15 + 0x18]
jne 0x14001e1c0
mov r14, qword [rsp + 0x70]
mov r13, qword [rbp - 8]
mov rax, qword [r13]
mov edx, 0x64
mov rcx, r13
call qword [rax + 0x18]
cmp qword [r15 + 0x38], rsi
je 0x14001e4ea
lea rdi, [r15 + 0x28]
mov r8, r15
mov rdx, rdi
lea r9, [rsp + 0x70]
lea rcx, [rbp + 8]
call fcn.14001cde0
cmp qword [rbp + 0x20], 8
lea rdx, [rbp + 8]
lea rcx, str.Launching_custom_bug_reporter_with_command_line:_n___S_n
cmovae rdx, qword [rbp + 8]
call fcn.140001f50
xor edx, edx
lea rcx, [rbp + 0x130]
lea r8d, [rdx + 0x68]
call fcn.140043610
mov eax, 5
mov dword [rbp + 0x130], 0x68
mov word [rbp + 0x170], ax
lea rdx, [rbp + 8]
xor eax, eax
mov dword [rbp + 0x16c], 1
cmp qword [rbp + 0x20], 8
mov qword [rsp + 0x50], rax
cmovae rdx, qword [rbp + 8]
xor r9d, r9d
mov qword [rsp + 0x58], rax
xor r8d, r8d
mov qword [rsp + 0x60], rax
xor ecx, ecx
lea rax, [rsp + 0x50]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0x130]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], esi
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
cmp eax, 1
je 0x14001e4de
cmp qword [rdi + 0x18], 0x10
jb 0x14001e4cc
mov rdi, qword [rdi]
mov rdx, rdi
lea rcx, str.Failed_to_launch_bug_reporter:___s_
call fcn.140001f50
mov dword [rbp - 0x6c], esi
lea rcx, [rbp + 8]
call fcn.140011350
mov esi, dword [rbp - 0x6c]
cmp byte [rbp + 0x1bb8], 0
mov rcx, r13
mov rax, qword [r13]
je 0x14001e4ff
call qword [rax + 0x20]
jmp 0x14001e502
call qword [rax + 8]
test byte [rbp + 0x740], 1
lea rcx, [rbp + 0xa0]
mov ebx, 0xfffffc86
cmovne ebx, esi
call fcn.140011490
test r14, r14
je 0x14001e575
mov rsi, qword [rsp + 0x78]
mov rdi, r14
cmp r14, rsi
je 0x14001e541
nop
mov rcx, rdi
call fcn.140011350
add rdi, 0x20
cmp rdi, rsi
jne 0x14001e530
mov rdx, qword [rbp - 0x80]
mov rax, r14
sub rdx, r14
and rdx, 0xffffffffffffffe0
cmp rdx, 0x1000
jb 0x14001e56d
mov r14, qword [r14 - 8]
add rdx, 0x27
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001e5d1
mov rcx, r14
call fcn.14003f61c
lea rcx, [rbp - 0x48]
call fcn.140011350
lea rcx, [rbp - 0x28]
call fcn.140011350
lea rcx, [rbp - 0x68]
call fcn.140011350
lea rcx, [rbp + 0xe0]
call fcn.1400113c0
mov eax, ebx
mov rbx, qword [rsp + 0x1c90]
add rsp, 0x1c50
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.14004a3a0
int3
call fcn.14004a3a0
int3
call fcn.14004a3a0
int3
call fcn.14004a3a0
int3
call fcn.14004a3a0
int3