Function at 0x140047d60
Capabilities:
Create process memory minidump

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x4c8
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x440], 0xfffffffffffffffe
mov rsi, rcx
lea rdi, [rbp - 0x40]
mov r8d, 0x20c
mov rcx, rdi
xor edx, edx
call fcn.140090810
mov dword [rbp + 0x1cc], 0x80
mov rax, qword [0x1400c26b0]
test rax, rax
je 0x140047e86
mov r15d, dword [rax + 0x18]
lea ebx, [r15 - 1]
mov r14, qword [rax + 0x10]
cmp r15d, 0x81
jb 0x140047de0
lea rcx, [rbp - 0x40]
mov edx, ebx
call fcn.140034a90
mov rcx, qword [rbp + 0x1c0]
jmp 0x140047de2
xor ecx, ecx
test rcx, rcx
mov rax, rcx
cmove rax, rdi
cmp r15d, 2
jl 0x140047e72
mov ecx, ebx
cmp ebx, 1
jne 0x140047e01
xor edx, edx
jmp 0x140047e4e
mov r8d, ecx
and r8d, 0xfffffffe
xor edx, edx
nop word [rax + rax]
mov r9d, dword [r14 + rdx*4]
mov r10d, dword [rbp + 0x1c8]
lea r11d, [r10 + 1]
mov dword [rbp + 0x1c8], r11d
mov dword [rax + r10*4], r9d
mov r9d, dword [r14 + rdx*4 + 4]
mov r10d, dword [rbp + 0x1c8]
lea r11d, [r10 + 1]
mov dword [rbp + 0x1c8], r11d
mov dword [rax + r10*4], r9d
add rdx, 2
cmp r8, rdx
jne 0x140047e10
test cl, 1
je 0x140047e6b
mov ecx, dword [r14 + rdx*4]
mov edx, dword [rbp + 0x1c8]
lea r8d, [rdx + 1]
mov dword [rbp + 0x1c8], r8d
mov dword [rax + rdx*4], ecx
mov rcx, qword [rbp + 0x1c0]
test rcx, rcx
cmovne rdi, rcx
mov eax, dword [rbp + 0x1c8]
mov dword [rdi + rax*4], 0
lea r15, vtable.base::core::UTF8Encoding.0
mov qword [rbp + 0x1d0], r15
lea rdx, str..mdmp
lea rdi, [rbp - 0x40]
lea r9, [rbp + 0x1d0]
mov rcx, rdi
mov r8d, 5
call fcn.140032cd0
mov qword [rbp + 0x430], 0
mov r14d, dword [rbp + 0x1c8]
test r14d, r14d
je 0x140047f2a
mov ecx, 0x20
call fcn.140053080
mov rbx, rax
mov dword [rax + 8], 0
lea rax, vtable.base::core::StringBuffer.0
mov qword [rbx], rax
inc r14d
mov dword [rbx + 0x18], r14d
movsxd r14, r14d
shl r14, 2
mov rcx, r14
call fcn.14006da4c
mov qword [rbx + 0x10], rax
mov rcx, qword [rbp + 0x1c0]
test rcx, rcx
cmovne rdi, rcx
mov rcx, rax
mov rdx, rdi
mov r8, r14
call fcn.140090170
mov qword [rbp + 0x430], rbx
lock inc dword [rbx + 8]
mov rcx, qword [rbp + 0x1c0]
test rcx, rcx
je 0x140047f3b
call fcn.14006ce38
lea r8, [0x1400c27d8]
lea rcx, [rbp + 0x430]
lea rdi, [rbp + 0x3e8]
mov rdx, rdi
call fcn.140033930
cmp qword [rbp + 0x400], 8
jb 0x140047f69
mov rdi, qword [rbp + 0x3e8]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 2
mov rcx, rdi
mov edx, 0xc0000000
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rdi, rax
inc rax
cmp rax, 2
jb 0x1400483f6
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [rbp + 0x418], eax
mov qword [rbp + 0x41c], rsi
mov dword [rbp + 0x424], 0
lea rax, [0x140048730]
mov qword [rbp + 0x408], rax
mov qword [rbp + 0x410], 0
test rsi, rsi
lea r14, [rbp + 0x418]
cmove r14, rsi
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ebx, eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea rcx, [rbp + 0x408]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x20], r14
mov qword [rsp + 0x28], 0
mov rcx, rax
mov edx, ebx
mov r8, rdi
mov r9d, 0x50
call sub.dbghelp.dll_MiniDumpWriteDump
test eax, eax
je 0x140048044
call fcn.14003a780
mov r8, qword [rax]
lea rdx, str.Crash_dump_created.
mov rcx, rax
call qword [r8 + 0x98]
jmp 0x14004805d
call fcn.14003a780
mov r8, qword [rax]
lea rdx, str.Failed_to_create_crash_dump.
mov rcx, rax
call qword [r8 + 0x98]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp - 0x40]
mov r8d, 0x20c
xor edx, edx
call fcn.140090810
mov dword [rbp + 0x1cc], 0x80
test rsi, rsi
je 0x1400481a0
mov qword [rbp + 0x1d0], r15
lea rdx, str.Unhandled_Exception
lea rcx, [rbp - 0x40]
lea r9, [rbp + 0x1d0]
mov r8d, 0x13
call fcn.140032cd0
mov qword [rbp + 0x1d0], r15
lea rdx, str._nExceptionCode:
lea rcx, [rbp - 0x40]
lea r9, [rbp + 0x1d0]
mov r8d, 0xf
call fcn.140032cd0
mov rax, qword [rsi]
mov edx, dword [rax]
lea rcx, [rbp - 0x40]
call fcn.140034de0
mov qword [rbp + 0x1d0], r15
lea rdx, str._nExceptionAddress:
lea rcx, [rbp - 0x40]
lea r9, [rbp + 0x1d0]
mov r8d, 0x12
call fcn.140032cd0
mov rax, qword [rsi]
mov r14, qword [rax + 0x10]
mov qword [rbp + 0x1d0], r15
lea rdx, [0x1400a5086]
lea rcx, [rbp - 0x40]
lea r9, [rbp + 0x1d0]
mov r8d, 2
call fcn.140032cd0
lea rsi, [rbp + 0x1ef]
xor r12d, r12d
lea r13, str.0123456789ABCDEF
lea rdi, [rbp - 0x40]
lea rbx, [rbp + 0x438]
nop dword [rax + rax]
mov byte [rbp + 0x1f0], 0
lea eax, [r12*4]
mov cl, 0x3c
sub cl, al
mov rax, r14
shr rax, cl
and eax, 0xf
movzx eax, byte [rax + r13]
mov byte [rbp + 0x1ef], al
mov qword [rbp + 0x438], r15
mov rcx, rsi
call fcn.14006f020
mov rcx, rdi
mov rdx, rsi
mov r8d, eax
mov r9, rbx
call fcn.140032cd0
inc r12
cmp r12, 0x10
jne 0x140048150
lea rsi, [rbp + 0x1d0]
mov r8d, 0x20c
mov rcx, rsi
xor edx, edx
call fcn.140090810
mov dword [rbp + 0x3dc], 0x80
mov rax, qword [0x1400c26b0]
test rax, rax
je 0x1400482a5
mov r14d, dword [rax + 0x18]
lea edi, [r14 - 1]
mov rbx, qword [rax + 0x10]
cmp r14d, 0x81
jb 0x1400481fd
lea rcx, [rbp + 0x1d0]
mov edx, edi
call fcn.140034a90
mov rcx, qword [rbp + 0x3d0]
jmp 0x1400481ff
xor ecx, ecx
test rcx, rcx
mov rax, rcx
cmove rax, rsi
cmp r14d, 2
jl 0x140048291
mov ecx, edi
cmp edi, 1
jne 0x14004821e
xor edx, edx
jmp 0x14004826e
mov r8d, ecx
and r8d, 0xfffffffe
xor edx, edx
nop word [rax + rax]
mov r9d, dword [rbx + rdx*4]
mov r10d, dword [rbp + 0x3d8]
lea r11d, [r10 + 1]
mov dword [rbp + 0x3d8], r11d
mov dword [rax + r10*4], r9d
mov r9d, dword [rbx + rdx*4 + 4]
mov r10d, dword [rbp + 0x3d8]
lea r11d, [r10 + 1]
mov dword [rbp + 0x3d8], r11d
mov dword [rax + r10*4], r9d
add rdx, 2
cmp r8, rdx
jne 0x140048230
test cl, 1
je 0x14004828a
mov ecx, dword [rbx + rdx*4]
mov edx, dword [rbp + 0x3d8]
lea r8d, [rdx + 1]
mov dword [rbp + 0x3d8], r8d
mov dword [rax + rdx*4], ecx
mov rcx, qword [rbp + 0x3d0]
test rcx, rcx
cmovne rsi, rcx
mov eax, dword [rbp + 0x3d8]
mov dword [rsi + rax*4], 0
mov qword [rbp + 0x438], r15
lea rdx, str..info
lea rsi, [rbp + 0x1d0]
lea r9, [rbp + 0x438]
mov rcx, rsi
mov r8d, 5
call fcn.140032cd0
mov qword [rbp + 0x438], 0
mov ebx, dword [rbp + 0x3d8]
test ebx, ebx
je 0x140048341
mov ecx, 0x20
call fcn.140053080
mov rdi, rax
mov dword [rax + 8], 0
lea rax, vtable.base::core::StringBuffer.0
mov qword [rdi], rax
inc ebx
mov dword [rdi + 0x18], ebx
movsxd rbx, ebx
shl rbx, 2
mov rcx, rbx
call fcn.14006da4c
mov qword [rdi + 0x10], rax
mov rcx, qword [rbp + 0x3d0]
test rcx, rcx
cmovne rsi, rcx
mov rcx, rax
mov rdx, rsi
mov r8, rbx
call fcn.140090170
mov qword [rbp + 0x438], rdi
lock inc dword [rdi + 8]
mov rcx, qword [rbp + 0x3d0]
test rcx, rcx
je 0x140048352
call fcn.14006ce38
mov qword [rsp + 0x20], 0x1000
lea rcx, [rbp + 0x1d0]
lea rdx, [rbp + 0x438]
xor r8d, r8d
xor r9d, r9d
call fcn.140038670
mov rcx, qword [rbp + 0x1d0]
mov rax, qword [rcx]
lea rdx, [rbp - 0x40]
mov qword [rbp + 0x428], rcx
call qword [rax + 0x60]
mov rcx, qword [rbp + 0x428]
mov rax, qword [rcx]
call qword [rax + 0x1b0]
call fcn.14003a780
mov r8, qword [rax]
lea rdx, [rbp - 0x40]
mov rcx, rax
call qword [r8 + 0xa8]
mov rcx, qword [rbp + 0x428]
call fcn.140039ea0
mov rcx, qword [rbp + 0x438]
test rcx, rcx
je 0x1400483e5
mov qword [rbp + 0x438], 0
lock dec dword [rcx + 8]
jne 0x1400483e5
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
mov rcx, qword [rbp + 0x1c0]
test rcx, rcx
je 0x1400483f6
call fcn.14006ce38
mov rax, qword [rbp + 0x400]
cmp rax, 8
jb 0x14004843e
mov rcx, qword [rbp + 0x3e8]
lea rdx, [rax*2 + 2]
cmp rdx, 0x1000
jb 0x140048439
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14004847e
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
call fcn.1400530c4
mov rcx, qword [rbp + 0x430]
test rcx, rcx
je 0x140048465
mov qword [rbp + 0x430], 0
lock dec dword [rcx + 8]
jne 0x140048465
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
mov eax, 1
add rsp, 0x4c8
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
call fcn.1400669d4
int3