Function at 0x140029540
Capabilities:
Create directory
Get common file path

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2c0]
sub rsp, 0x3c0
mov rax, qword [0x1401e7e78]
xor rax, rsp
mov qword [rbp + 0x2b0], rax
mov r12, rdx
mov qword [rsp + 0x50], rcx
xor edi, edi
mov r15d, edi
lea rcx, [rsp + 0x58]
call fcn.1401238fc
nop
lea rsi, [r12 + 0x804]
mov ebx, 0x288
mov r8d, ebx
xor edx, edx
mov rcx, rsi
call fcn.14013b230
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
xorps xmm1, xmm1
movups xmmword [rbp - 0x50], xmm1
movups xmmword [rbp - 0x40], xmm1
lea r8d, [rdi + 1]
lock xadd dword [0x14021c7f0], r8d
test r8d, r8d
jle 0x1400295d6
lea rdx, [0x1401725b0]
lea rcx, [rbp - 0x50]
call fcn.14000cfdc
mov edx, 0x7f02
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorW]
mov rcx, rax
call qword [sym.imp.USER32.dll_SetCursor]
mov rcx, qword [r12 + 0xa90]
test rcx, rcx
je 0x14002962d
mov dword [rbp - 0x80], 0xb
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [rax*2 + 2]
mov dword [rbp - 0x7c], eax
mov rax, qword [r12 + 0xa90]
mov qword [rbp - 0x78], rax
mov dword [rsp + 0x70], 1
lea rax, [rbp - 0x80]
mov qword [rsp + 0x74], rax
lea r13, [r12 + 4]
xor edx, edx
mov r8d, 0x800
mov rcx, r13
call fcn.14013b230
mov qword [rsp + 0x20], rsi
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x10]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHGetFolderPathW]
mov r14d, eax
test eax, eax
jns 0x140029690
mov r8, rbx
xor edx, edx
mov rcx, rsi
call fcn.14013b230
mov rdx, rsi
mov ecx, 0x104
call qword [sym.imp.KERNEL32.dll_GetTempPathW]
test eax, eax
je 0x140029684
cmp word [rsi], di
jne 0x140029695
lea rdx, str.CreateDumpForReport_called__get_desktop_or_temp_folder_failed
jmp 0x1400299cc
cmp word [rsi], di
je 0x1400296b4
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_lstrlenW]
movsxd rcx, eax
cmp word [r12 + rcx*2 + 0x802], 0x5c
lea r8, [0x140172640]
jne 0x1400296bb
lea r8, str.ConEmuTrap
mov edi, 0x144
mov edx, edi
mov rcx, rsi
call fcn.140001f38
xor edx, edx
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_lstrlenW]
movsxd rbx, eax
mov r8d, 8
lea rdx, [0x14015a140]
lea rcx, [rbp - 0x60]
call qword [sym.imp.KERNEL32.dll_lstrcpynW]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
sub rdi, rbx
lea rcx, [r12 + 0x804]
lea rcx, [rcx + rbx*2]
lea rdx, [rbp - 0x50]
mov qword [rsp + 0x40], rdx
mov dword [rsp + 0x38], eax
lea rax, [rbp - 0x60]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0x12
mov dword [rsp + 0x20], 0xc
mov r9d, 0x16
lea r8, str.Trap__02u_02u_02u_s__u_s.dmp
mov rdx, rdi
call fcn.14012091c
xor edi, edi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov edx, 0xc0000000
lea r8d, [rdi + 3]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r15, rax
cmp rax, 0xffffffffffffffff
jne 0x140029789
lea rdx, str.CreateDumpForReport_called__create_dump_file_failed
jmp 0x1400299cc
lea rdx, str.dbghelp.dll
lea rcx, [rsp + 0x58]
call fcn.14012396c
test rax, rax
jne 0x1400297ab
lea rdx, str.CreateDumpForReport_called__LoadLibrary_Dbghelp.dll__failed
jmp 0x1400299cc
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x1400299bb
lea rdx, str.MiniDumpWriteDump
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x68], rax
test rax, rax
je 0x1400299bb
mov dword [rsp + 0x64], edi
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [rbp - 0x70], eax
mov rcx, qword [rsp + 0x50]
mov qword [rbp - 0x6c], rcx
mov dword [rbp - 0x64], edi
mov rcx, qword [r12 + 0xa90]
neg rcx
sbb rbx, rbx
lea rax, [rsp + 0x70]
and rbx, rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov edi, eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
and qword [rsp + 0x30], 0
mov qword [rsp + 0x28], rbx
lea rax, [rbp - 0x70]
mov qword [rsp + 0x20], rax
mov r9d, 2
mov r8, r15
mov edx, edi
call qword [rsp + 0x68]
xor edi, edi
test eax, eax
jne 0x140029849
lea rdx, str.CreateDumpForReport_called__MiniDumpWriteDump_failed
jmp 0x1400299cc
xor edx, edx
mov r8d, 0x20a
lea rcx, [rbp + 0xa0]
call fcn.14013b230
mov r8d, 0x104
lea rdx, [rbp + 0xa0]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea rcx, [rbp + 0xa0]
call fcn.140125c18
mov rsi, rax
xor edx, edx
mov r8d, 0xc8
lea rcx, [rbp - 0x30]
call fcn.14013b230
mov rbx, qword [rsp + 0x50]
test rbx, rbx
je 0x140029959
mov rcx, qword [rbx]
test rcx, rcx
je 0x140029959
cmp dword [rcx], 0xce004345
je 0x140029959
mov r8d, dword [rcx]
lea rdx, str.Exception_0x_08X
lea rcx, [rbp - 0x30]
call fcn.14000d08c
mov rdi, qword [rbx]
cmp dword [rdi], 0xc0000005
jne 0x140029969
cmp dword [rdi + 0x18], 2
jb 0x140029969
mov rbx, qword [rdi + 0x20]
mov rdi, qword [rdi + 0x28]
lea rcx, [rbp - 0x30]
call qword [sym.imp.KERNEL32.dll_lstrlenW]
movsxd rcx, eax
mov rax, rdi
shr rax, 0x20
lea rdx, str.DEP
lea r9, [0x14015a140]
cmp rbx, 8
cmove r9, rdx
lea rdx, [0x1401728d8]
cmp rbx, 1
cmove r9, rdx
lea rdx, str.Read
test rbx, rbx
cmove r9, rdx
mov edx, 0x64
sub rdx, rcx
lea r8, [rbp - 0x30]
lea rcx, [r8 + rcx*2]
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], eax
lea r8, str.___s_x_08X_08X_
call fcn.14012091c
jmp 0x140029969
lea rdx, str.Assertion
lea rcx, [rbp - 0x30]
call fcn.140028184
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
lea rcx, [0x14017292c]
mov qword [rsp + 0x48], rcx
lea rcx, [0x14015a140]
mov qword [rsp + 0x40], rcx
mov dword [rsp + 0x38], 0x12
mov dword [rsp + 0x30], 0xc
mov dword [rsp + 0x28], 0x16
mov dword [rsp + 0x20], eax
mov r9, rsi
lea r8, [rbp - 0x30]
lea rdx, str._s_was_occurred___s__PID_u__r_nConEmu_build__02u_02u_02u_s__s
mov rcx, r13
call fcn.140004a58
jmp 0x140029a17
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x64], eax
lea rdx, str.CreateDumpForReport_called__MiniDumpWriteDump_not_found
mov r8d, 0xff
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_lstrcpynW]
cmp word [rsi], di
je 0x140029a03
lea r8, [0x140167d54]
mov ebx, 0x400
mov edx, ebx
mov rcx, r13
call fcn.140001f38
mov r8, rsi
mov edx, ebx
mov rcx, r13
call fcn.140001f38
test r14d, r14d
jne 0x140029a11
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r14d, eax
cmp r15, 0xffffffffffffffff
je 0x140029a25
test r15, r15
je 0x140029a25
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, 0x7f00
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorW]
mov rcx, rax
call qword [sym.imp.USER32.dll_SetCursor]
mov dword [r12], r14d
lea rcx, [rsp + 0x58]
call fcn.14012390c
mov eax, r14d
mov rcx, qword [rbp + 0x2b0]
xor rcx, rsp
call fcn.140139b10
mov rbx, qword [rsp + 0x410]
add rsp, 0x3c0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret