Function at 0x140069cfb
Capabilities:
Create process memory minidump

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x138
lea rbp, [rsp + 0x80]
movaps xmmword [rbp + 0xa0], xmm6
mov qword [rbp + 0x98], 0xfffffffffffffffe
mov r14, rcx
call fcn.1400795ab
mov r15, rax
mov rax, qword [rax]
mov rcx, r15
mov edx, 0x7b
call qword [rax + 0x20]
test rax, rax
je 0x14006a239
mov rax, qword [r15]
mov r8d, 1
mov rcx, r15
mov edx, 0x3b7
call qword [rax + 0x60]
lea rdx, [0x1401af120]
lea rcx, [rbp + 0x30]
call fcn.140003920
lea rdx, str.fullCrashDumps
lea rcx, [rbp + 0x30]
call fcn.14006bfec
lea rcx, [rbp - 0x40]
lea rdx, [rbp + 0x30]
xor r8d, r8d
call fcn.140017490
cmp dword [rbp - 0x40], 1
ja 0x140069dba
xorps xmm0, xmm0
lea r8, [rbp - 0x40]
movaps xmmword [r8], xmm0
mov dword [r8 + 0x10], 0
lea rcx, [rbp + 0x30]
xor edx, edx
call fcn.1400178e6
test al, al
je 0x14006a1e3
xor ecx, ecx
call sub.api_ms_win_crt_time_l1_1_0.dll__time64
lea rcx, [rbp + 0x10]
mov qword [rcx], rax
call sub.api_ms_win_crt_time_l1_1_0.dll__localtime64
lea r8, str.d_Y_m_d_t_H_M_S
lea rcx, [rbp - 0x40]
mov edx, 0x50
mov r9, rax
call sub.api_ms_win_crt_time_l1_1_0.dll_strftime
lea rbx, [rbp + 0x70]
mov qword [rbx], 0
movaps xmm6, xmmword [section..rdata]
movups xmmword [rbx + 0x10], xmm6
mov byte [rbx], 0
lea rsi, [rbp - 0x40]
mov rcx, rsi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rcx, rbx
mov rdx, rsi
mov r8, rax
call fcn.14000136e
mov r8, qword [rbp + 0x80]
mov rax, qword [rbp + 0x88]
mov rcx, rax
sub rcx, r8
cmp rcx, 0xe
jae 0x140069e60
lea rax, str.fullCrashdump_
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x28], send
lea rcx, [rbp + 0x70]
mov edx, 0xe
xor r9d, r9d
call fcn.14000860a
mov rbx, rax
jmp 0x140069ef5
lea rcx, [r8 + 0xe]
mov qword [rbp + 0x80], rcx
cmp rax, 0x10
mov rcx, qword [rbp + 0x70]
mov rdi, rbx
cmovae rdi, rcx
lea rdx, [0x140141a8a]
mov r12d, send
mov esi, 0xe
cmp rdi, rdx
jae 0x140069eb0
lea rdx, [rdi + r8]
lea r9, str.fullCrashdump_
mov esi, 0xe
cmp rdx, r9
jb 0x140069eb0
mov rsi, rdi
sub rsi, r9
ja 0x140069eb0
xor esi, esi
inc r8
cmp rax, 0x10
cmovb rcx, rbx
add rcx, 0xe
mov rdx, rdi
call sub.VCRUNTIME140.dll_memmove
lea r13, str.fullCrashdump_
mov rcx, rdi
mov rdx, r13
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
sub r12, rsi
lea rdx, [rsi + r13]
add rdx, 0xe
add rdi, rsi
mov rcx, rdi
mov r8, r12
call sub.VCRUNTIME140.dll_memcpy
movups xmm0, xmmword [rbx]
movups xmm1, xmmword [rbx + 0x10]
movaps xmmword [rbp + 0x60], xmm1
movaps xmmword [rbp + 0x50], xmm0
movups xmmword [rbx + 0x10], xmm6
mov byte [rbx], 0
mov rcx, qword [rbp + 0x60]
mov rdx, qword [rbp + 0x68]
mov rax, rdx
sub rax, rcx
cmp rax, 4
jae 0x140069f3f
mov qword [rsp + 0x20], 4
lea r9, str..dmp
lea rcx, [rbp + 0x50]
mov edx, 4
call fcn.1400022ee
jmp 0x140069f64
lea rbx, [rcx + 4]
lea rax, [rbp + 0x50]
mov qword [rax + 0x10], rbx
mov rbx, rax
cmp rdx, 0x10
jb 0x140069f58
mov rbx, qword [rbp + 0x50]
mov dword [rbx + rcx], 0x706d642e
mov byte [rbx + rcx + 4], 0
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
movaps xmmword [rbp + 0x20], xmm1
movaps xmmword [rbp + 0x10], xmm0
movups xmmword [rax + 0x10], xmm6
mov byte [rax], 0
mov rax, qword [rbp + 0x68]
cmp rax, 0x10
jb 0x140069fb9
mov rcx, qword [rbp + 0x50]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x140069fb4
mov rbx, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rbx
cmp rcx, 0x20
jae 0x14006a259
add rax, 0x28
mov rdx, rax
mov rcx, rbx
call fcn.1400e7768
movaps xmmword [rbp + 0x60], xmm6
mov byte [rbp + 0x50], 0
mov rax, qword [rbp + 0x88]
cmp rax, 0x10
jb 0x14006a003
mov rcx, qword [rbp + 0x70]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x140069ffe
mov rbx, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rbx
cmp rcx, 0x20
jae 0x14006a25e
add rax, 0x28
mov rdx, rax
mov rcx, rbx
call fcn.1400e7768
lea rcx, [rbp + 0x50]
lea rdx, [rbp + 0x30]
call fcn.140003920
lea rcx, [rbp + 0x50]
lea rdx, [rbp + 0x10]
call fcn.14000a74c
mov qword [rbp + 0x90], 0xffffffffffffffff
lea rcx, [rbp + 0x50]
lea rsi, [rbp + 0x70]
mov rdx, rsi
call fcn.14000a0d6
cmp qword [rbp + 0x88], 0x10
jb 0x14006a046
mov rsi, qword [rbp + 0x70]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 2
mov rcx, rsi
mov edx, 0xc0000000
mov r8d, 3
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileA]
lea rcx, [rbp + 0x90]
mov rdx, rax
call fcn.14006a59e
mov rax, qword [rbp + 0x88]
cmp rax, 0x10
jb 0x14006a0c7
mov rcx, qword [rbp + 0x70]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14006a0c2
mov rbx, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rbx
cmp rcx, 0x20
jae 0x14006a263
add rax, 0x28
mov rdx, rax
mov rcx, rbx
call fcn.1400e7768
mov rax, qword [rbp + 0x90]
inc rax
cmp rax, 2
jb 0x14006a150
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [rbp + 0x70], eax
mov qword [rbp + 0x74], r14
mov dword [rbp + 0x7c], 1
mov rsi, qword [rbp + 0x90]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov edi, eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
xorps xmm0, xmm0
movups xmmword [rsp + 0x28], xmm0
lea rcx, [rbp + 0x70]
mov qword [rsp + 0x20], rcx
mov rcx, rax
mov edx, edi
mov r8, rsi
mov r9d, 2
call sub.dbghelp.dll_MiniDumpWriteDump
test eax, eax
jne 0x14006a13c
mov rax, qword [r15]
mov r8d, 1
mov rcx, r15
mov edx, 0x3b9
call qword [rax + 0x60]
mov rax, qword [r15]
mov r8d, 1
mov rcx, r15
mov edx, 0x3bb
call qword [rax + 0x60]
lea rcx, [rbp + 0x90]
call fcn.14006a640
mov rax, qword [rbp + 0x68]
cmp rax, 8
jb 0x14006a1a2
mov rcx, qword [rbp + 0x50]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x14006a19d
mov rbx, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rbx
cmp rcx, 0x20
jae 0x14006a268
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, rbx
call fcn.1400e7768
mov rax, qword [rbp + 0x28]
cmp rax, 0x10
jb 0x14006a1f7
mov rcx, qword [rbp + 0x10]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14006a1dc
mov rbx, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rbx
cmp rcx, 0x20
jae 0x14006a26d
add rax, 0x28
mov rdx, rax
mov rcx, rbx
call fcn.1400e7768
jmp 0x14006a1f7
mov rax, qword [r15]
mov r8d, 1
mov rcx, r15
mov edx, 0x3b8
call qword [rax + 0x60]
mov rax, qword [rbp + 0x48]
cmp rax, 8
jb 0x14006a239
mov rcx, qword [rbp + 0x30]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x14006a234
mov rbx, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rbx
cmp rcx, 0x20
jae 0x14006a254
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, rbx
call fcn.1400e7768
movaps xmm6, xmmword [rbp + 0xa0]
add rsp, 0x138
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
int3