Function at 0x140010690
Capabilities:
Terminate process

Disassembly:
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x670
mov rax, qword [0x1400fe4a8]
xor rax, rsp
mov qword [rsp + 0x660], rax
mov r15, r9
mov rsi, r8
mov r12, rdx
mov qword [rsp + 0x78], rdx
mov r13, rcx
mov qword [rsp + 0xe0], rcx
mov qword [rsp + 0x90], rcx
mov qword [rsp + 0x98], rdx
mov rax, qword [rsp + 0x6d8]
mov qword [rsp + 0xd0], rax
lea rcx, [rsp + 0x2b0]
call fcn.140070950
mov ecx, 0x10
call fcn.1400ceac0
test rax, rax
je 0x14001071d
mov rdx, r12
mov rcx, rax
call fcn.140035f00
mov rdi, rax
xor r14d, r14d
jmp 0x140010723
xor r14d, r14d
mov edi, r14d
mov rbx, rdi
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x80], rbx
mov qword [rsp + 0x20], r15
mov r9, rsi
mov r8b, 1
mov rdx, r12
lea rcx, [rsp + 0x2b0]
call fcn.140071b70
test al, al
jne 0x1400107a0
mov ecx, 3
call fcn.140008120
lea rdx, str.Snapshot_failed
lea rcx, str.handler
call fcn.14002f1b0
test rdi, rdi
je 0x140010789
mov rcx, rdi
call fcn.140035f50
mov edx, 0x10
mov rcx, rdi
call fcn.1400ceafc
lea rcx, [rsp + 0x2b0]
call fcn.140070d10
mov eax, 0xffff7002
jmp 0x14001125b
lea rcx, [rsp + 0x2b0]
call fcn.140071490
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x20]
mov esi, eax
mov dword [rsp + 0x40], eax
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov r15, rax
mov qword [rsp + 0xa0], rax
mov dword [rsp + 0x34], 3
mov ecx, esi
sub ecx, 0x517a7dc
je 0x140011061
sub ecx, 0x10
je 0x140010816
xorps xmm0, xmm0
mov qword [rsp + 0x58], r14
movdqu xmmword [rsp + 0x48], xmm0
cmp ecx, 3
je 0x14001080c
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x80], rbx
jmp 0x140010856
mov dword [rsp + 0x34], 2
jmp 0x140010856
mov dword [rsp + 0x34], 1
mov rbx, r14
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x80], rbx
test rdi, rdi
je 0x140010848
mov rcx, rdi
call fcn.140035f50
mov edx, 0x10
mov rcx, rdi
call fcn.1400ceafc
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x48], xmm0
mov qword [rsp + 0x58], r14
mov rcx, qword [r13 + 8]
mov rax, qword [rcx]
call qword [rax + 8]
test rax, rax
je 0x140010875
lea rdx, [rsp + 0x280]
mov rcx, rax
call fcn.14006edc0
movups xmm0, xmmword [rsp + 0x280]
movups xmmword [rsp + 0x528], xmm0
mov rsi, qword [r13 + 0x20]
lea rax, [rsp + 0x538]
cmp rax, rsi
je 0x1400108e0
mov rdi, qword [rsp + 0x538]
mov r8, qword [rdi + 8]
lea rdx, [rsp + 0x538]
lea rcx, [rsp + 0x538]
call fcn.140009610
mov qword [rdi + 8], rdi
mov qword [rdi], rdi
mov qword [rdi + 0x10], rdi
mov qword [rsp + 0x540], r14
movzx r8d, byte [rsp + 0x30]
mov rdx, rsi
lea rcx, [rsp + 0x538]
call fcn.14000f490
lea rcx, [rsp + 0x5a0]
call fcn.140083090
lea rdx, [rsp + 0x2b0]
lea rcx, [rsp + 0x5a0]
call fcn.1400837d0
lea r8, [rsp + 0x5a0]
lea rdx, [rsp + 0x2b0]
mov rcx, qword [r13 + 0x30]
call fcn.1400133b0
cmp dword [rsp + 0x34], 3
jne 0x14001092d
neg al
sbb eax, eax
and eax, 2
mov dword [rsp + 0x34], eax
movzx eax, byte [rsp + 0x6d0]
xor al, 1
mov byte [rsp + 0x30], al
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x2b0]
lea rdx, [rsp + 0x34]
lea rcx, [rsp + 0x1f0]
call fcn.14000e1f0
cmp dword [rsp + 0x200], 0
jne 0x140010973
cmp dword [rsp + 0x278], 0
jne 0x140010973
mov dil, 1
jmp 0x140010976
xor dil, dil
mov qword [rsp + 0x38], r14
mov rcx, qword [r13 + 8]
mov rax, qword [rcx]
lea r8, [rsp + 0x34]
lea rdx, [rsp + 0x38]
call qword [rax + 0x40]
test eax, eax
jne 0x140010fe3
mov rax, qword [rsp + 0x38]
movups xmm0, xmmword [rax + 0x88]
movups xmmword [rsp + 0x518], xmm0
movups xmm1, xmmword [rax + 0x88]
movaps xmmword [rsp + 0x1f0], xmm1
test dil, dil
je 0x1400109e6
mov r8, r15
lea rdx, [rsp + 0x1f0]
mov rcx, r13
call fcn.1400134a0
test al, al
je 0x1400109e6
lea rdx, [rsp + 0x1f0]
mov rcx, r13
call fcn.140013750
mov rdx, qword [rsp + 0x38]
mov rdx, qword [rdx + 8]
lea rcx, [rsp + 0x5a0]
call fcn.140084230
test al, al
jne 0x140010a13
lea rdx, str.WriteEverything_failed
lea rcx, str.handler
call fcn.14002f1b0
mov rax, qword [r13 + 0x28]
mov rdi, qword [rax]
mov r15, qword [rax + 8]
cmp rdi, r15
je 0x140010b63
mov edx, 1
lea rcx, [rsp + 0xf0]
call fcn.140033540
mov rdx, rdi
lea rcx, [rsp + 0xf0]
call fcn.140033940
test al, al
je 0x140010b46
lea rdx, [rsp + 0x190]
mov rcx, rdi
call fcn.140029870
lea rax, [rsp + 0x190]
cmp qword [rsp + 0x1a8], 8
cmovae rax, qword [rsp + 0x190]
mov qword [rsp + 0xc0], rax
mov rax, qword [rsp + 0x1a0]
mov qword [rsp + 0xc8], rax
movaps xmm0, xmmword [rsp + 0xc0]
movdqa xmmword [rsp + 0xb0], xmm0
lea rdx, [rsp + 0xb0]
lea rcx, [rsp + 0x1b0]
call fcn.1400293b0
mov rdx, rax
mov rcx, qword [rsp + 0x38]
call fcn.14006c980
mov rsi, rax
mov rdx, qword [rsp + 0x1c8]
cmp rdx, 0x10
jb 0x140010b08
inc rdx
mov rcx, qword [rsp + 0x1b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140010b03
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140010b5c
call fcn.1400ceafc
mov qword [rsp + 0x1c0], r14
mov qword [rsp + 0x1c8], 0xf
mov byte [rsp + 0x1b0], 0
test rsi, rsi
je 0x140010b39
mov rdx, rsi
lea rcx, [rsp + 0xf0]
call fcn.140034080
lea rcx, [rsp + 0x190]
call fcn.140029580
lea rcx, [rsp + 0xf0]
call fcn.140033600
add rdi, 0x20
jmp 0x140010a1e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rdx, qword [rsp + 0x38]
add rdx, 0x18
lea rcx, [rsp + 0x290]
call fcn.140029490
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0x38], r14
mov qword [rsp + 0xb0], rax
mov rcx, qword [r13 + 8]
mov rax, qword [rcx]
lea rdx, [rsp + 0x1d0]
mov qword [rsp + 0x20], rdx
mov r9, qword [rsp + 0xa0]
lea r8, [rsp + 0x1f0]
lea rdx, [rsp + 0xb0]
call qword [rax + 0x50]
test eax, eax
je 0x140010be3
lea rdx, str.FinishedWritingReport_failed
lea rcx, str.handler
call fcn.14002f1b0
lea rcx, [rsp + 0x290]
call fcn.140029580
jmp 0x140011022
call fcn.14002d200
mov rcx, rax
mov edx, dword [rsp + 0x34]
call fcn.14002e090
test al, al
je 0x140010ebe
lea rcx, [rsp + 0x2b0]
call fcn.140071490
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x18]
mov qword [rsp + 0xb0], rax
lea rcx, [rsp + 0x2b0]
cmp dword [rsp + 0x34], 0
je 0x140010d5d
lea rdx, [rsp + 0x190]
call fcn.140072d50
mov rax, qword [rsp + 0x198]
mov rdi, qword [rsp + 0x190]
cmp rdi, rax
je 0x140010d08
mov r13, qword [rsp + 0xb0]
mov r14, rax
mov rbx, r12
mov rcx, qword [rdi]
mov rax, qword [rcx]
call qword [rax + 0x20]
cmp rax, r13
jne 0x140010ce3
lea rcx, [rsp + 0x2b0]
call fcn.140072a10
movzx r12d, al
mov rcx, qword [rdi]
mov rdx, qword [rcx]
call qword [rdx + 0x10]
mov r15, rax
mov r8d, r13d
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenThread]
mov rsi, rax
test rax, rax
je 0x140010cd0
test r15, r15
je 0x140010cd0
lea rax, [rsp + 0x48]
mov qword [rsp + 0x20], rax
mov r9, rsi
mov r8, rbx
movzx edx, r12b
mov rcx, r15
call fcn.140033510
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x140010ce3
lea rdx, str.Fail_to_backtrace_thread_with_null_thread_handle_or_context
lea rcx, str.handler
call fcn.14002f1b0
add rdi, 8
cmp rdi, r14
jne 0x140010c61
mov rdi, qword [rsp + 0x190]
mov rbx, qword [rsp + 0x68]
xor r14d, r14d
mov r13, qword [rsp + 0xe0]
test rdi, rdi
je 0x140010df2
mov rax, qword [rsp + 0x1a0]
sub rax, rdi
sar rax, 3
lea rdx, [rax*8]
mov rax, rdi
cmp rdx, 0x1000
jb 0x140010d50
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140010d50
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rdi
call fcn.1400ceafc
jmp 0x140010df2
call fcn.140071490
mov rdi, rax
lea rcx, [rsp + 0x2b0]
call fcn.140071490
mov rsi, rax
lea rcx, [rsp + 0x2b0]
call fcn.140072a10
movzx r15d, al
mov rdx, qword [rdi]
mov rcx, rdi
call qword [rdx + 0x10]
mov rdi, rax
mov rdx, qword [rsi]
mov rcx, rsi
call qword [rdx + 0x18]
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenThread]
mov rsi, rax
test rax, rax
je 0x140010ddf
test rdi, rdi
je 0x140010ddf
lea rax, [rsp + 0x48]
mov qword [rsp + 0x20], rax
mov r9, rsi
mov r8, r12
movzx edx, r15b
mov rcx, rdi
call fcn.140033510
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x140010df2
lea rdx, str.Fail_to_backtrace_thread_with_null_thread_handle_or_context
lea rcx, str.handler
call fcn.14002f1b0
mov rax, qword [rsp + 0xd0]
mov byte [rax], 1
lea rcx, [rsp + 0x2b0]
call fcn.140071490
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 8]
mov rdi, rax
mov rcx, qword [r13 + 0x18]
test rcx, rcx
je 0x140010e6e
test rax, rax
je 0x140010e6e
mov rax, qword [r13 + 0x10]
test rax, rax
je 0x140010e41
lea rdx, [rsp + 0x1f0]
mov rcx, rax
call fcn.1400169c0
mov rcx, qword [r13 + 0x18]
mov qword [rsp + 0x20], rdi
lea r9, [rsp + 0x48]
lea r8, [rsp + 0x290]
lea rdx, [rsp + 0x1f0]
call fcn.14001ed60
mov rcx, qword [r13 + 0x18]
call fcn.14001f710
jmp 0x140010fb0
mov rcx, qword [r13 + 8]
mov rax, qword [rcx]
lea rdx, [rsp + 0x1f0]
call qword [rax + 0x98]
cmp qword [r13 + 0x18], 0
jne 0x140010e9d
lea rdx, str.Crop_thread_is_not_running_so_delete_dump_directly
lea rcx, str.handler
call fcn.14002f1b0
test rdi, rdi
jne 0x140010fb0
lea rdx, str.Exception_context_is_null_so_delete_crop_dump_directly
lea rcx, str.handler
call fcn.14002f1b0
jmp 0x140010fb0
movaps xmm0, xmmword [rsp + 0x1f0]
movups xmmword [rsp + 0xf0], xmm0
mov eax, dword [rsp + 0x200]
mov dword [rsp + 0x100], eax
lea rdx, [rsp + 0x208]
lea rcx, [rsp + 0x108]
call fcn.140009ac0
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x128], xmm0
mov ecx, 0x60
call fcn.1400ceac0
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rsp + 0x128], rax
movzx r8d, byte [rsp + 0x30]
lea rdx, [rsp + 0x228]
lea rcx, [rsp + 0x128]
call fcn.14000f490
lea rdx, [rsp + 0x238]
lea rcx, [rsp + 0x138]
call fcn.140009ac0
lea rdx, [rsp + 0x258]
lea rcx, [rsp + 0x158]
call fcn.140009ac0
mov eax, dword [rsp + 0x278]
mov dword [rsp + 0x178], eax
movzx eax, byte [rsp + 0x27c]
mov byte [rsp + 0x17c], al
movzx eax, byte [rsp + 0x27d]
mov byte [rsp + 0x17d], al
movzx eax, byte [rsp + 0x27e]
mov byte [rsp + 0x17e], al
lea rdx, [rsp + 0xf0]
mov rcx, r13
call fcn.1400135f0
cmp dword [rsp + 0x34], 0
jne 0x140010fd4
mov r9d, dword [rsp + 0x40]
lea r8, [rsp + 0x1d0]
lea rdx, [rsp + 0x2b0]
mov rcx, r13
call fcn.140011cb0
lea rcx, [rsp + 0x290]
call fcn.140029580
jmp 0x140011022
lea rdx, str.PrepareNewReport_failed
lea rcx, str.handler
call fcn.14002f1b0
test dil, dil
je 0x140011022
mov r8, r15
lea rdx, [rsp + 0x1f0]
mov rcx, r13
call fcn.1400134a0
test al, al
je 0x140011022
lea rdx, [rsp + 0x1f0]
mov rcx, r13
call fcn.140013750
mov rdi, qword [rsp + 0x38]
test rdi, rdi
je 0x140011041
mov rcx, rdi
call fcn.14006c4c0
mov edx, 0xa0
mov rcx, rdi
call fcn.1400ceafc
lea rcx, [rsp + 0x1f0]
call fcn.140010150
lea rcx, [rsp + 0x5a0]
call fcn.140083130
mov esi, dword [rsp + 0x40]
jmp 0x140011092
mov dword [rsp + 0x34], 4
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x48], xmm0
mov qword [rsp + 0x58], r14
lea rdx, str.Dont_need_to_write_fulldump.
lea rcx, str.handler
call fcn.14002f1b0
mov qword [rsp + 0x80], rbx
mov eax, dword [rsp + 0x34]
cmp eax, 1
je 0x140011b67
cmp eax, 2
jne 0x1400110b2
cmp byte [rsp + 0x6d0], 0
jne 0x140011b67
mov dword [rsp + 0x70], r14d
mov dword [rsp + 0x88], r14d
lea r8, [rsp + 0x70]
lea rdx, [rsp + 0x88]
lea rcx, [rsp + 0x2b0]
call fcn.140072ac0
movsxd r8, dword [rsp + 0x70]
cmp r8, 0x2800
jbe 0x14001127e
lea rdx, str.Physical_memory_usage_of_crash_process_is_too_high__d__MB_to_capture_fulldmp.
lea rcx, str.handler
call fcn.14002f1b0
mov r8, qword [rsp + 0x48]
test r8, r8
je 0x140011230
mov rsi, qword [rsp + 0x50]
cmp r8, rsi
je 0x1400111ca
lea rdi, [r8 + 0x38]
nop
mov rdx, qword [rdi]
cmp rdx, 0x10
jb 0x14001115a
inc rdx
mov rcx, qword [rdi - 0x18]
cmp rdx, 0x1000
jb 0x140011155
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140011c9e
mov rcx, r8
call fcn.1400ceafc
mov qword [rdi - 8], r14
mov qword [rdi], 0xf
mov byte [rdi - 0x18], 0
mov rdx, qword [rdi - 0x20]
cmp rdx, 0x10
jb 0x1400111a4
inc rdx
mov rcx, qword [rdi - 0x38]
cmp rdx, 0x1000
jb 0x14001119f
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140011c9e
mov rcx, r8
call fcn.1400ceafc
mov qword [rdi - 0x28], r14
mov qword [rdi - 0x20], 0xf
mov byte [rdi - 0x38], 0
add rdi, 0x50
lea rax, [rdi - 0x38]
cmp rax, rsi
jne 0x140011120
mov r8, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x58]
sub rcx, r8
movabs rax, 0x6666666666666667
imul rcx
sar rdx, 5
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*4]
shl rdx, 4
mov rax, r8
cmp rdx, 0x1000
jb 0x14001121a
add rdx, 0x27
mov r8, qword [r8 - 8]
sub rax, r8
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140011c9e
mov rcx, r8
call fcn.1400ceafc
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x48], xmm0
mov qword [rsp + 0x58], r14
test rbx, rbx
je 0x14001124a
mov rcx, rbx
call fcn.140035f50
mov edx, 0x10
mov rcx, rbx
call fcn.1400ceafc
lea rcx, [rsp + 0x2b0]
call fcn.140070d10
mov eax, dword [rsp + 0x40]
mov rcx, qword [rsp + 0x660]
xor rcx, rsp
call fcn.1400cebd0
add rsp, 0x670
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
mov qword [rsp + 0x60], r14
xor r15b, r15b
mov byte [rsp + 0x30], r15b
cmp dword [rsp + 0x34], 4
je 0x1400113ba
call fcn.14002d200
cmp qword [rax + 0x230], 0
je 0x1400113af
mov rax, qword [rsp + 0x50]
cmp qword [rsp + 0x48], rax
jne 0x14001135c
lea rcx, [rsp + 0x2b0]
call fcn.140071490
mov rdi, rax
lea rcx, [rsp + 0x2b0]
call fcn.140071490
mov rsi, rax
lea rcx, [rsp + 0x2b0]
call fcn.140072a10
movzx r12d, al
mov rdx, qword [rdi]
mov rcx, rdi
call qword [rdx + 0x10]
mov rdi, rax
mov rdx, qword [rsi]
mov rcx, rsi
call qword [rdx + 0x18]
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenThread]
mov rsi, rax
test rax, rax
je 0x140011345
test rdi, rdi
je 0x140011345
lea rax, [rsp + 0x48]
mov qword [rsp + 0x20], rax
mov r9, rsi
mov r8, qword [rsp + 0x78]
movzx edx, r12b
mov rcx, rdi
call fcn.140033510
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x140011358
lea rdx, str.Fail_to_backtrace_thread_with_null_thread_handle_or_context
lea rcx, str.handler
call fcn.14002f1b0
mov esi, dword [rsp + 0x40]
call fcn.14002d200
mov rcx, rax
lea r9, [rsp + 0x60]
lea r8, [rsp + 0x48]
mov edx, esi
call fcn.14002e0c0
lea rcx, str.handler
test al, al
je 0x1400113a3
mov r8, qword [rsp + 0x60]
lea rdx, str.This_crash_will_write_fulldmp_with_cid__d
call fcn.14002f1b0
mov dword [rsp + 0x34], 4
mov r15b, 1
mov byte [rsp + 0x30], r15b
jmp 0x1400113ba
lea rdx, str.This_crash_doesnt_need_to_write_fulldmp.
call fcn.14002f1b0
cmp dword [rsp + 0x34], 4
jne 0x140011ad0
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x2b0]
lea rdx, [rsp + 0x34]
lea rcx, [rsp + 0x1f0]
call fcn.14000e1f0
mov qword [rsp + 0x1a8], 0xf
mov qword [rsp + 0x1a0], 0xb
movsd xmm0, qword [str.fulldmp_cid]
movzx eax, word [0x1400d5128]
mov byte [rsp + 0x19b], 0
movsd qword [rsp + 0x190], xmm0
mov word [rsp + 0x198], ax
movzx eax, byte [0x1400d512a]
mov byte [rsp + 0x19a], al
test r15b, r15b
je 0x1400115cb
mov rdx, qword [rsp + 0x60]
lea rcx, [rsp + 0x1b0]
call fcn.140013250
mov rdi, rax
lea rdx, [rsp + 0x190]
lea rcx, [rsp + 0x228]
call fcn.140010380
mov rcx, rax
mov rdx, rdi
call fcn.140010290
mov rdx, qword [rsp + 0x1c8]
cmp rdx, 0x10
jb 0x1400114a4
inc rdx
mov rcx, qword [rsp + 0x1b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001149f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400114fa
call fcn.1400ceafc
mov qword [rsp + 0x1c0], r14
mov qword [rsp + 0x1c8], 0xf
mov byte [rsp + 0x1b0], 0
mov rdx, qword [rsp + 0x1a8]
cmp rdx, 0x10
jb 0x140011506
inc rdx
mov rcx, qword [rsp + 0x190]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011501
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140011501
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400ceafc
mov qword [rsp + 0x1a8], 0xf
mov qword [rsp + 0x1a0], 0xd
movsd xmm0, qword [str.fulldmp_scene]
movsd qword [rsp + 0x190], xmm0
mov eax, dword [0x1400d5118]
mov dword [rsp + 0x198], eax
movzx eax, byte [0x1400d511c]
mov byte [rsp + 0x19c], al
mov byte [rsp + 0x19d], 0
lea rdx, [rsp + 0x190]
lea rcx, [rsp + 0x228]
call fcn.140010380
mov r8d, 5
lea rdx, [0x1400d637c]
mov rcx, rax
call fcn.14000cf40
mov rdx, qword [rsp + 0x1a8]
cmp rdx, 0x10
jb 0x1400116a7
inc rdx
mov rcx, qword [rsp + 0x190]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400115c1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400115c1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400ceafc
jmp 0x1400116a7
lea rdx, [rsp + 0x190]
lea rcx, [rsp + 0x228]
call fcn.140010380
mov rdx, rax
lea rcx, [rsp + 0x1d0]
call fcn.140009ac0
mov rdx, qword [rsp + 0x1a8]
cmp rdx, 0x10
jb 0x140011637
inc rdx
mov rcx, qword [rsp + 0x190]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011631
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140011631
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400ceafc
nop
cmp qword [rsp + 0x1e0], 0
jne 0x140011647
mov rax, r14
jmp 0x14001166d
lea rcx, [rsp + 0x1d0]
cmp qword [rsp + 0x1e8], 0x10
cmovae rcx, qword [rsp + 0x1d0]
xor edx, edx
lea r8d, [rdx + 0xa]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtoull]
mov qword [rsp + 0x60], rax
jmp 0x14001169a
lea rcx, [rsp + 0x1d0]
call fcn.140009ca0
cmp qword [rsp + 0x60], 0
jne 0x14001176a
lea rdx, str.Invalid_cid_value_for_fulldmp
lea rcx, str.handler
call fcn.14002f1b0
lea rcx, [rsp + 0x1f0]
call fcn.140010150
mov rdi, qword [rsp + 0x48]
test rdi, rdi
je 0x140011230
mov rsi, qword [rsp + 0x50]
cmp rdi, rsi
je 0x14001170f
nop dword [rax + rax]
lea rcx, [rdi + 0x20]
call fcn.140009ca0
mov rcx, rdi
call fcn.140009ca0
add rdi, 0x50
cmp rdi, rsi
jne 0x1400116f0
mov rdi, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x58]
sub rcx, rdi
movabs rax, 0x6666666666666667
imul rcx
sar rdx, 5
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*4]
shl rdx, 4
mov rax, rdi
cmp rdx, 0x1000
jb 0x140011b5f
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140011b5f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14002d200
mov rcx, rax
lea rdx, [rsp + 0x60]
call fcn.14002ce40
test al, al
je 0x140011798
mov r8d, dword [rsp + 0x40]
lea rdx, str.Fulldmp_cloud_msg_cid:__lld_has_been_completed
lea rcx, str.handler
call fcn.14002f1b0
lea rcx, [rsp + 0x2b0]
call fcn.140071490
mov rdi, rax
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x20]
mov dword [rsp + 0xf0], eax
mov rdx, qword [rdi]
mov rcx, rdi
call qword [rdx + 0x28]
mov dword [rsp + 0xf4], eax
mov qword [rsp + 0xf8], r14
mov rdx, qword [rdi]
mov rcx, rdi
call qword [rdx + 0x30]
mov qword [rsp + 0x100], rax
mov rdx, qword [rdi]
mov rcx, rdi
call qword [rdx + 0x38]
mov r8, rax
mov rcx, qword [rax + 8]
sub rcx, qword [rax]
sar rcx, 3
mov dword [rsp + 0x108], ecx
mov rdx, r14
mov rcx, qword [rax + 8]
sub rcx, qword [rax]
sar rcx, 3
test rcx, rcx
je 0x140011842
nop dword [rax]
nop word [rax + rax]
mov rax, qword [r8]
mov rcx, qword [rax + rdx*8]
mov qword [rsp + rdx*8 + 0x110], rcx
inc rdx
mov rax, qword [r8 + 8]
sub rax, qword [r8]
sar rax, 3
cmp rdx, rax
jb 0x140011820
lea rax, [rsp + 0xf0]
mov qword [rsp + 0xd0], rax
lea rcx, [rsp + 0x2b0]
call fcn.140071490
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x10]
mov qword [rsp + 0xd8], rax
xor sil, sil
mov rdi, qword [rsp + 0x78]
mov r12, rdi
call fcn.140035dd0
test al, al
je 0x1400118f7
mov rcx, rdi
call fcn.140035cc0
test rax, rax
je 0x1400118f7
mov r12, rax
mov sil, 1
mov rdi, rbx
mov rbx, r14
test rdi, rdi
je 0x1400118b7
mov rcx, rdi
call fcn.140035f50
mov edx, 0x10
mov rcx, rdi
call fcn.1400ceafc
test r15b, r15b
je 0x1400118f7
mov edx, dword [rsp + 0x40]
mov rdi, qword [rsp + 0x78]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
test eax, eax
je 0x1400118f7
mov edx, 0xffffffff
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x1400118f7
lea rdx, str.Failed_to_wait_for_process_termination_
lea rcx, str.handler
call fcn.14002f1b0
lea rcx, [rsp + 0x2b0]
call fcn.140071490
mov rcx, qword [rsp + 0x60]
mov qword [rsp + 0x90], rcx
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x18]
mov rdi, rax
lea rcx, [rsp + 0x2b0]
call fcn.140072c30
mov r15d, eax
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x38], r14
mov rcx, qword [r13 + 8]
mov r9, qword [rcx]
lea r8, [rsp + 0x200]
lea rdx, [rsp + 0x38]
call qword [r9 + 0x40]
test eax, eax
je 0x14001197e
lea rdx, str.Prepare_New_Fulldmp_Report_failed
lea rcx, str.handler
call fcn.14002f1b0
test sil, sil
je 0x140011aa4
lea rcx, [rsp + 0x68]
call fcn.140035e80
jmp 0x140011aa4
mov rdx, qword [rsp + 0x38]
movups xmm0, xmmword [rdx + 0x88]
movaps xmmword [rsp + 0x1f0], xmm0
add rdx, 0x18
lea rcx, [rsp + 0x1b0]
call fcn.140029490
mov byte [rsp + 0x28], sil
lea rax, [rsp + 0xd0]
mov qword [rsp + 0x20], rax
mov r9d, edi
mov r8d, r15d
mov rdx, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x38]
mov rcx, qword [rcx + 8]
call fcn.140034710
movzx edi, al
test sil, sil
je 0x1400119e0
lea rcx, [rsp + 0x68]
call fcn.140035e80
test dil, dil
jne 0x140011a05
mov rcx, qword [rsp + 0x38]
mov rcx, qword [rcx + 8]
call fcn.140033e50
lea rcx, [rsp + 0x1b0]
call fcn.140034410
jmp 0x140011a97
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x98], rax
mov rcx, qword [r13 + 8]
mov rax, qword [rcx]
lea rdx, [rsp + 0x1d0]
mov qword [rsp + 0x20], rdx
mov r9, qword [rsp + 0xa0]
lea r8, [rsp + 0x1f0]
lea rdx, [rsp + 0x98]
call qword [rax + 0x50]
test eax, eax
je 0x140011a6c
lea rcx, [rsp + 0x1b0]
call fcn.140034410
lea rdx, str.Finished_Writing_Fulldmp_Report_failed
lea rcx, str.handler
call fcn.14002f1b0
jmp 0x140011a97
call fcn.14002d200
mov rcx, rax
lea rdx, [rsp + 0x90]
call fcn.14002cd30
mov rcx, qword [r13 + 0x10]
test rcx, rcx
je 0x140011a97
lea rdx, [rsp + 0x1f0]
call fcn.14001bcb0
lea rcx, [rsp + 0x1b0]
call fcn.140029580
mov rdi, qword [rsp + 0x38]
test rdi, rdi
je 0x140011ac3
mov rcx, rdi
call fcn.14006c4c0
mov edx, 0xa0
mov rcx, rdi
call fcn.1400ceafc
lea rcx, [rsp + 0x1f0]
call fcn.140010150
mov rdi, qword [rsp + 0x48]
test rdi, rdi
je 0x140011230
mov rsi, qword [rsp + 0x50]
cmp rdi, rsi
je 0x140011b0f
nop dword [rax + rax]
lea rcx, [rdi + 0x20]
call fcn.140009ca0
mov rcx, rdi
call fcn.140009ca0
add rdi, 0x50
cmp rdi, rsi
jne 0x140011af0
mov rdi, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x58]
sub rcx, rdi
movabs rax, 0x6666666666666667
imul rcx
sar rdx, 5
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*4]
shl rdx, 4
mov rax, rdi
cmp rdx, 0x1000
jb 0x140011b5f
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140011c9e
mov rcx, rdi
jmp 0x14001121d
lea rdx, str.Dont_need_to_write_fulldump.
lea rcx, str.handler
call fcn.14002f1b0
mov r8, qword [rsp + 0x48]
test r8, r8
je 0x140011230
mov rsi, qword [rsp + 0x50]
cmp r8, rsi
je 0x140011c4a
lea rdi, [r8 + 0x38]
nop word [rax + rax]
mov rdx, qword [rdi]
cmp rdx, 0x10
jb 0x140011bda
inc rdx
mov rcx, qword [rdi - 0x18]
cmp rdx, 0x1000
jb 0x140011bd5
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140011c9e
mov rcx, r8
call fcn.1400ceafc
mov qword [rdi - 8], r14
mov qword [rdi], 0xf
mov byte [rdi - 0x18], 0
mov rdx, qword [rdi - 0x20]
cmp rdx, 0x10
jb 0x140011c24
inc rdx
mov rcx, qword [rdi - 0x38]
cmp rdx, 0x1000
jb 0x140011c1f
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140011c9e
mov rcx, r8
call fcn.1400ceafc
mov qword [rdi - 0x28], r14
mov qword [rdi - 0x20], 0xf
mov byte [rdi - 0x38], 0
add rdi, 0x50
lea rax, [rdi - 0x38]
cmp rax, rsi
jne 0x140011ba0
mov r8, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x58]
sub rcx, r8
movabs rax, 0x6666666666666667
imul rcx
sar rdx, 5
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*4]
shl rdx, 4
mov rax, r8
cmp rdx, 0x1000
jb 0x14001121a
add rdx, 0x27
mov r8, qword [r8 - 8]
sub rax, r8
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001121a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3