Function at 0x1400165a0
Capabilities:
Check if file exists
Copy file
Create process on windows
Delete file
Get file attributes
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x10], rdx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1b40]
mov eax, 0x1c40
call fcn.140030960
sub rsp, rax
mov r15, r9
mov byte [rsp + 0x20], 0
xor r9d, r9d
mov r13, rdx
mov rbx, r8
mov edi, ecx
mov edx, ecx
lea rcx, [rbp + 0xd0]
lea r8d, [r9 + 0x48]
call fcn.140007f20
xor edx, edx
lea rcx, [rbp + 0x190]
mov r8d, 0x9b0
call fcn.140038450
lea rax, [rbp + 0x20]
xor esi, esi
mov r9d, 0x9b0
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x190]
mov qword [rbp + 0x20], rsi
mov rdx, rbx
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
jne 0x140016655
mov r9d, 0x9b0
lea rcx, str.Failed_to_read_PID__ds_memory_at__p___d_bytes__n
mov r8, rbx
mov edx, edi
call fcn.140001e00
mov ebx, 0xfffffc81
jmp 0x140017779
mov r9, qword [rbp + 0x190]
movabs r8, 0x556e697479434883
cmp r9, r8
je 0x140016683
mov edx, edi
lea rcx, str.Crash_data_sent_by_PID__d_is_corrupt:_expected_magic_0x_llx_but_got_0x_llx_n
call fcn.140001e00
mov ebx, 0xfffffc82
jmp 0x140017779
mov r9d, dword [rbp + 0x1a0]
cmp r9d, 0x9b0
je 0x1400166b1
mov r8d, 0x9b0
lea rcx, str.Crash_data_sent_by_PID__d_is_corrupt:_expected_size__d_but_got__d_n
mov edx, edi
call fcn.140001e00
mov ebx, 0xfffffc82
jmp 0x140017779
mov r8d, dword [rbp + 0x198]
cmp r8d, edi
je 0x1400166d5
mov edx, edi
lea rcx, str.Crash_data_sent_by_PID__d_is_corrupt:_expected_to_agree_on_PID_but_got__d_n
call fcn.140001e00
mov ebx, 0xfffffc82
jmp 0x140017779
cmp qword [r15 + 0x60], 0x10
lea rbx, [r15 + 0x48]
mov qword [rbp - 0x58], rsi
mov qword [rbp - 0x50], 7
mov word [rbp - 0x68], si
mov qword [rbp - 0x80], rsi
mov qword [rbp - 0x78], 7
mov word [rsp + 0x70], si
jb 0x140016705
mov rbx, qword [r15 + 0x48]
mov r14, qword [r15 + 0x58]
test r14, r14
jne 0x14001671c
mov qword [rbp - 0x80], rsi
mov word [rsp + 0x70], si
jmp 0x14001680a
mov dword [rsp + 0x28], esi
mov r9d, r14d
mov r8, rbx
mov qword [rsp + 0x20], rsi
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
test eax, eax
jg 0x140016758
cmp qword [rbp - 0x78], 8
lea rax, [rsp + 0x70]
mov qword [rbp - 0x80], rsi
cmovae rax, qword [rsp + 0x70]
mov word [rax], si
jmp 0x14001680a
mov r8, qword [rbp - 0x80]
movsxd rcx, eax
cmp rcx, r8
ja 0x14001677e
cmp qword [rbp - 0x78], 8
lea rax, [rsp + 0x70]
mov qword [rbp - 0x80], rcx
cmovae rax, qword [rsp + 0x70]
mov word [rax + rcx*2], si
jmp 0x1400167db
mov rdi, qword [rbp - 0x78]
mov rdx, rcx
mov rax, rdi
sub rdx, r8
sub rax, r8
cmp rdx, rax
ja 0x1400167c3
cmp rdi, 8
mov qword [rbp - 0x80], rcx
lea r9, [rsp + 0x70]
cmovae r9, qword [rsp + 0x70]
lea rdi, [r9 + r8*2]
test rdx, rdx
je 0x1400167b8
movzx eax, si
mov rcx, rdx
rep stosw word [rdi], ax
lea rax, [r8 + rdx]
mov word [r9 + rax*2], si
jmp 0x1400167db
xor eax, eax
mov word [rsp + 0x20], si
movzx r8d, al
lea rcx, [rsp + 0x70]
mov r9, rdx
call fcn.14000e050
cmp qword [rbp - 0x78], 8
lea rcx, [rsp + 0x70]
mov eax, dword [rbp - 0x80]
mov r9d, r14d
cmovae rcx, qword [rsp + 0x70]
mov r8, rbx
mov dword [rsp + 0x28], eax
xor edx, edx
mov qword [rsp + 0x20], rcx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea rdx, [rbp - 0x68]
lea rcx, [rsp + 0x70]
call fcn.140014110
test al, al
movabs rdi, 0x7fffffffffffffff
mov rax, qword [rbp - 0x78]
sete bl
cmp rax, 8
jb 0x14001688d
mov rcx, qword [rsp + 0x70]
lea rdx, [rax + 1]
mov rax, rcx
cmp rdx, rdi
ja 0x1400177a2
add rdx, rdx
cmp rdx, 0x1000
jb 0x140016888
lea rdi, [rdx + 0x27]
cmp rdi, rdx
jbe 0x1400177a2
mov rdx, rdi
test al, 0x1f
jne 0x1400177a2
mov rcx, qword [rcx - 8]
cmp rcx, rax
jae 0x1400177a2
sub rax, rcx
sub rax, 8
cmp rax, 0x1f
ja 0x1400177a2
call fcn.14003068c
test bl, bl
je 0x1400168ab
cmp qword [rbp - 0x50], 8
lea rdx, [rbp - 0x68]
lea rcx, str.Couldnt_create_crash_dump_directory:__S_n
cmovae rdx, qword [rbp - 0x68]
call fcn.140001e00
mov r9d, 0x800
lea r8, [rbp + 0xb40]
xor edx, edx
mov rcx, r13
call sub.PSAPI.DLL_GetModuleFileNameExW
call fcn.14002cdb0
mov r12, rax
mov qword [rbp - 8], rax
cmp byte [r15 + 0x128], sil
je 0x140016c6b
cmp qword [r15 + 0xc0], 0x10
lea r14, [r15 + 0xa8]
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], si
jb 0x140016906
mov r14, qword [r15 + 0xa8]
mov rbx, qword [r15 + 0xb8]
test rbx, rbx
jne 0x140016926
mov qword [rsp + 0x60], rsi
lea rbx, [rsp + 0x50]
mov word [rsp + 0x50], si
jmp 0x140016a2e
mov dword [rsp + 0x28], esi
mov r9d, ebx
mov r8, r14
mov qword [rsp + 0x20], rsi
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
test eax, eax
jg 0x140016964
cmp qword [rsp + 0x68], 8
lea rax, [rsp + 0x50]
mov qword [rsp + 0x60], rsi
cmovae rax, qword [rsp + 0x50]
mov word [rax], si
jmp 0x140016a1d
mov r8, qword [rsp + 0x60]
movsxd rcx, eax
cmp rcx, r8
ja 0x14001698d
cmp qword [rsp + 0x68], 8
lea rax, [rsp + 0x50]
mov qword [rsp + 0x60], rcx
cmovae rax, qword [rsp + 0x50]
mov word [rax + rcx*2], si
jmp 0x1400169ec
mov rdi, qword [rsp + 0x68]
mov rdx, rcx
mov rax, rdi
sub rdx, r8
sub rax, r8
cmp rdx, rax
ja 0x1400169d4
cmp rdi, 8
mov qword [rsp + 0x60], rcx
lea r9, [rsp + 0x50]
cmovae r9, qword [rsp + 0x50]
lea rdi, [r9 + r8*2]
test rdx, rdx
je 0x1400169c9
movzx eax, si
mov rcx, rdx
rep stosw word [rdi], ax
lea rax, [r8 + rdx]
mov word [r9 + rax*2], si
jmp 0x1400169ec
xor eax, eax
mov word [rsp + 0x20], si
movzx r8d, al
lea rcx, [rsp + 0x50]
mov r9, rdx
call fcn.14000e050
cmp qword [rsp + 0x68], 8
lea rcx, [rsp + 0x50]
mov eax, dword [rsp + 0x60]
mov r9d, ebx
cmovae rcx, qword [rsp + 0x50]
mov r8, r14
mov dword [rsp + 0x28], eax
xor edx, edx
mov qword [rsp + 0x20], rcx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
cmp qword [rsp + 0x68], 8
lea rbx, [rsp + 0x50]
cmovae rbx, qword [rsp + 0x50]
lea rax, [r15 + 0x68]
mov qword [rbp - 0x80], rsi
cmp qword [rax + 0x18], 0x10
mov r15, rax
mov qword [rbp - 0x78], 7
mov word [rsp + 0x70], si
jb 0x140016a50
mov r15, qword [rax]
mov r14, qword [rax + 0x10]
test r14, r14
jne 0x140016a6c
mov qword [rbp - 0x80], rsi
lea r8, [rsp + 0x70]
mov word [rsp + 0x70], si
jmp 0x140016b6a
mov dword [rsp + 0x28], esi
mov r9d, r14d
mov r8, r15
mov qword [rsp + 0x20], rsi
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
test eax, eax
jg 0x140016aa8
cmp qword [rbp - 0x78], 8
lea rax, [rsp + 0x70]
mov qword [rbp - 0x80], rsi
cmovae rax, qword [rsp + 0x70]
mov word [rax], si
jmp 0x140016b5a
mov r8, qword [rbp - 0x80]
movsxd rcx, eax
cmp rcx, r8
ja 0x140016ace
cmp qword [rbp - 0x78], 8
lea rax, [rsp + 0x70]
mov qword [rbp - 0x80], rcx
cmovae rax, qword [rsp + 0x70]
mov word [rax + rcx*2], si
jmp 0x140016b2b
mov rdi, qword [rbp - 0x78]
mov rdx, rcx
mov rax, rdi
sub rdx, r8
sub rax, r8
cmp rdx, rax
ja 0x140016b13
cmp rdi, 8
mov qword [rbp - 0x80], rcx
lea r9, [rsp + 0x70]
cmovae r9, qword [rsp + 0x70]
lea rdi, [r9 + r8*2]
test rdx, rdx
je 0x140016b08
movzx eax, si
mov rcx, rdx
rep stosw word [rdi], ax
lea rax, [r8 + rdx]
mov word [r9 + rax*2], si
jmp 0x140016b2b
xor eax, eax
mov word [rsp + 0x20], si
movzx r8d, al
lea rcx, [rsp + 0x70]
mov r9, rdx
call fcn.14000e050
cmp qword [rbp - 0x78], 8
lea rcx, [rsp + 0x70]
mov eax, dword [rbp - 0x80]
mov r9d, r14d
cmovae rcx, qword [rsp + 0x70]
mov r8, r15
mov dword [rsp + 0x28], eax
xor edx, edx
mov qword [rsp + 0x20], rcx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
cmp qword [rbp - 0x78], 8
lea r8, [rsp + 0x70]
cmovae r8, qword [rsp + 0x70]
mov rax, qword [r12]
lea rdx, [rbp + 0xb40]
mov r9, rbx
mov rcx, r12
call qword [rax]
mov rdx, qword [rbp - 0x78]
movabs rbx, 0x7fffffffffffffff
cmp rdx, 8
jb 0x140016bec
mov rcx, qword [rsp + 0x70]
inc rdx
mov rax, rcx
cmp rdx, rbx
ja 0x1400177a8
add rdx, rdx
cmp rdx, 0x1000
jb 0x140016be7
lea rdi, [rdx + 0x27]
cmp rdi, rdx
jbe 0x1400177a8
mov rdx, rdi
test al, 0x1f
jne 0x1400177a8
mov rcx, qword [rcx - 8]
cmp rcx, rax
jae 0x1400177a8
sub rax, rcx
sub rax, 8
cmp rax, 0x1f
ja 0x1400177a8
call fcn.14003068c
mov rax, qword [rsp + 0x68]
mov qword [rbp - 0x80], rsi
mov qword [rbp - 0x78], 7
mov word [rsp + 0x70], si
cmp rax, 8
jb 0x140016c64
mov rcx, qword [rsp + 0x50]
lea rdx, [rax + 1]
mov rax, rcx
cmp rdx, rbx
ja 0x1400177ae
add rdx, rdx
cmp rdx, 0x1000
jb 0x140016c5f
lea rdi, [rdx + 0x27]
cmp rdi, rdx
jbe 0x1400177ae
mov rdx, rdi
test al, 0x1f
jne 0x1400177ae
mov rcx, qword [rcx - 8]
cmp rcx, rax
jae 0x1400177ae
sub rax, rcx
sub rax, 8
cmp rax, 0x1f
ja 0x1400177ae
call fcn.14003068c
mov r15, qword [rbp + 0x1b98]
mov rdx, qword [rbp - 0x58]
lea rcx, [rbp - 0x28]
movdqa xmm0, xmmword [0x14005a090]
add rdx, 0xa
movdqu xmmword [rbp - 0x18], xmm0
mov word [rbp - 0x28], si
call fcn.140028000
cmp qword [rbp - 0x50], 8
lea r9, [rbp - 0x68]
mov rcx, qword [rbp - 0x10]
cmovae r9, qword [rbp - 0x68]
mov rax, rcx
mov r14, qword [rbp - 0x18]
mov rbx, qword [rbp - 0x58]
sub rax, r14
cmp rbx, rax
ja 0x140016ce1
cmp rcx, 8
lea rax, [rbx + r14]
lea rdi, [rbp - 0x28]
mov qword [rbp - 0x18], rax
cmovae rdi, qword [rbp - 0x28]
lea r8, [rbx + rbx]
mov rdx, r9
lea rcx, [rdi + r14*2]
call fcn.140037930
lea rax, [r14 + rbx]
mov word [rdi + rax*2], si
jmp 0x140016cf8
xor eax, eax
mov qword [rsp + 0x20], rbx
movzx r8d, al
lea rcx, [rbp - 0x28]
mov rdx, rbx
call fcn.140029ad0
mov rdx, qword [rbp - 0x10]
mov rcx, qword [rbp - 0x18]
mov rax, rdx
sub rax, rcx
cmp rax, 0xa
jb 0x140016d3d
cmp rdx, 8
lea rbx, [rcx + 0xa]
lea rdi, [rbp - 0x28]
mov qword [rbp - 0x18], rbx
cmovae rdi, qword [rbp - 0x28]
lea rdx, str.error.log
mov r8d, 0x14
lea rcx, [rdi + rcx*2]
call fcn.140037930
mov word [rdi + rbx*2], si
jmp 0x140016d5f
xor eax, eax
mov qword [rsp + 0x20], 0xa
lea r9, str.error.log
movzx r8d, al
lea rcx, [rbp - 0x28]
lea edx, [rax + 0xa]
call fcn.140029ad0
mov rdx, qword [rbp - 0x58]
lea rcx, [rbp - 0x48]
movdqa xmm0, xmmword [0x14005a090]
add rdx, 0xa
movdqu xmmword [rbp - 0x38], xmm0
mov word [rbp - 0x48], si
call fcn.140028000
cmp qword [rbp - 0x50], 8
lea r9, [rbp - 0x68]
mov rcx, qword [rbp - 0x30]
cmovae r9, qword [rbp - 0x68]
mov rax, rcx
mov r14, qword [rbp - 0x38]
mov rbx, qword [rbp - 0x58]
sub rax, r14
cmp rbx, rax
ja 0x140016dd5
cmp rcx, 8
lea rax, [r14 + rbx]
lea rdi, [rbp - 0x48]
mov qword [rbp - 0x38], rax
cmovae rdi, qword [rbp - 0x48]
lea r8, [rbx + rbx]
mov rdx, r9
lea rcx, [rdi + r14*2]
call fcn.140037930
lea rax, [r14 + rbx]
mov word [rdi + rax*2], si
jmp 0x140016dec
xor eax, eax
mov qword [rsp + 0x20], rbx
movzx r8d, al
lea rcx, [rbp - 0x48]
mov rdx, rbx
call fcn.140029ad0
mov rdx, qword [rbp - 0x30]
mov rcx, qword [rbp - 0x38]
mov rax, rdx
sub rax, rcx
cmp rax, 0xa
jb 0x140016e31
cmp rdx, 8
lea rbx, [rcx + 0xa]
lea rdi, [rbp - 0x48]
mov qword [rbp - 0x38], rbx
cmovae rdi, qword [rbp - 0x48]
lea rdx, str.crash.dmp
mov r8d, 0x14
lea rcx, [rdi + rcx*2]
call fcn.140037930
mov word [rdi + rbx*2], si
jmp 0x140016e53
xor eax, eax
mov qword [rsp + 0x20], 0xa
lea r9, str.crash.dmp
movzx r8d, al
lea rcx, [rbp - 0x48]
lea edx, [rax + 0xa]
call fcn.140029ad0
mov rcx, r15
call fcn.1400177f0
mov rcx, qword [rbp + 0x1b98]
xorps xmm0, xmm0
mov r15, rax
mov qword [rbp + 0x28], rax
mov r12, rsi
mov qword [rsp + 0x70], rsi
movdqu xmmword [rsp + 0x78], xmm0
cmp qword [rcx + 0x120], 0x10
lea rbx, [rcx + 0x108]
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], si
jb 0x140016ea5
mov rbx, qword [rcx + 0x108]
mov r14, qword [rcx + 0x118]
mov eax, 1
mov dword [rbp - 0x70], eax
test r14, r14
jne 0x140016ec8
mov qword [rsp + 0x60], rsi
mov word [rsp + 0x50], si
jmp 0x140017023
mov dword [rsp + 0x28], esi
mov r9d, r14d
mov r8, rbx
mov qword [rsp + 0x20], rsi
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
test eax, eax
jg 0x140016f06
cmp qword [rsp + 0x68], 8
lea rax, [rsp + 0x50]
mov qword [rsp + 0x60], rsi
cmovae rax, qword [rsp + 0x50]
mov word [rax], si
jmp 0x140016fbf
mov r8, qword [rsp + 0x60]
movsxd rcx, eax
cmp rcx, r8
ja 0x140016f2f
cmp qword [rsp + 0x68], 8
lea rax, [rsp + 0x50]
mov qword [rsp + 0x60], rcx
cmovae rax, qword [rsp + 0x50]
mov word [rax + rcx*2], si
jmp 0x140016f8e
mov rdi, qword [rsp + 0x68]
mov rdx, rcx
mov rax, rdi
sub rdx, r8
sub rax, r8
cmp rdx, rax
ja 0x140016f76
cmp rdi, 8
mov qword [rsp + 0x60], rcx
lea r9, [rsp + 0x50]
cmovae r9, qword [rsp + 0x50]
lea rdi, [r9 + r8*2]
test rdx, rdx
je 0x140016f6b
movzx eax, si
mov rcx, rdx
rep stosw word [rdi], ax
lea rax, [r8 + rdx]
mov word [r9 + rax*2], si
jmp 0x140016f8e
xor eax, eax
mov word [rsp + 0x20], si
movzx r8d, al
lea rcx, [rsp + 0x50]
mov r9, rdx
call fcn.14000e050
cmp qword [rsp + 0x68], 8
lea rcx, [rsp + 0x50]
mov eax, dword [rsp + 0x60]
mov r9d, r14d
cmovae rcx, qword [rsp + 0x50]
mov r8, rbx
mov dword [rsp + 0x28], eax
xor edx, edx
mov qword [rsp + 0x20], rcx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
cmp qword [rsp + 0x68], 8
lea rdi, [rsp + 0x50]
mov rbx, rsi
cmovae rdi, qword [rsp + 0x50]
test rdi, rdi
je 0x14001701e
cmp word [rdi], bx
je 0x14001701e
mov r8, qword [rbp + 0x1b0]
mov rdx, rdi
mov rcx, r13
call fcn.14002db50
test rax, rax
jne 0x140017016
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x14001700e
test al, 0x10
jne 0x14001700e
mov r13d, 2
jmp 0x140017029
mov r13d, 3
jmp 0x140017029
mov rbx, rax
mov r13d, esi
jmp 0x140017029
mov eax, 1
mov r13d, eax
mov rbx, rsi
lea rcx, [rsp + 0x50]
call fcn.14000b190
test rbx, rbx
je 0x14001704a
mov rdx, qword [rbp + 0x1b8]
mov rcx, rbx
call fcn.1400177c0
mov r13d, eax
mov rcx, qword [rbp + 0x1b88]
call qword [sym.imp.KERNEL32.dll_GetProcessId]
mov r8, qword [rbp + 0x1b88]
lea rcx, [rbp + 0x90]
mov edx, eax
mov qword [rsp + 0x20], rsi
mov r9, rbx
call fcn.14002ad70
lea rcx, [rbp + 0x90]
call fcn.14000a5d0
lea rcx, [rbp + 0x90]
call fcn.14002ddf0
mov rcx, qword [rbp - 8]
mov edx, 0x14
mov rax, qword [rcx]
call qword [rax + 0x18]
cmp qword [rbp - 0x30], 8
lea rax, [rbp + 0x1c0]
mov edi, dword [rbp + 0x19c]
lea r14, [rbp - 0x48]
cmovae r14, qword [rbp - 0x48]
mov edx, 0x40000000
mov qword [rbp + 0x58], rax
mov rcx, r14
lea rax, [rbp + 0x260]
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], 0x80000080
xor r9d, r9d
xor r8d, r8d
mov qword [rbp + 0x60], rax
mov dword [rsp + 0x20], 2
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x14001712b
mov rdx, qword [rbp + 0x1b88]
lea r9, [rbp + 0x58]
mov r8d, edi
mov rcx, rax
call fcn.14002be80
mov rcx, rbx
movzx edi, al
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test dil, dil
jne 0x14001722a
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x14001713d
movzx eax, ax
or eax, 0x80070000
cmp qword [rbp - 0x30], 8
lea rdx, [rbp - 0x48]
mov r8d, eax
lea rcx, str.Failed_to_generate_minidump_at__S___x__n
cmovae rdx, qword [rbp - 0x48]
call fcn.140001e00
mov rbx, qword [rbp - 8]
mov edx, 0x28
mov rcx, rbx
mov rax, qword [rbx]
call qword [rax + 0x18]
test r15, r15
je 0x1400172e5
mov rdi, qword [rbp + 0xd0]
lea rax, fcn.140024da0
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov qword [rbp + 0xc8], rax
mov rax, qword [rbp + 0xe0]
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x60], rsi
lea rcx, [rdi + rax*8]
cmp rdi, rcx
je 0x1400172cd
mov rcx, qword [rdi]
call qword [sym.imp.KERNEL32.dll_GetThreadId]
cmp eax, dword [rbp + 0x19c]
lea rdx, str.Thread__d
mov r8d, eax
lea rcx, [rbp + 0x30]
sete r14b
mov ebx, eax
call fcn.140007540
mov r15, rax
cmp qword [rsp + 0x58], rsi
je 0x140017247
cmp qword [rsp + 0x60], rsi
jne 0x140017247
mov edx, dword [0x140057a4c]
lea r9, str.C:_buildslaveunity_buildPlatformDependent_Win_UnityCrashHandler_CrashHandlerWindows.cpp
mov r8d, 0x10
mov dword [rsp + 0x20], 0xab
lea ecx, [r8 + 0x40]
call fcn.140001ea0
test rax, rax
je 0x140017242
movzx r8d, r14b
mov rdx, r15
mov rcx, rax
call fcn.1400035b0
mov qword [rsp + 0x60], rax
jmp 0x140017247
lea rdx, [rbp - 0x48]
lea rcx, [rsp + 0x70]
call fcn.14000fcf0
mov r12, qword [rsp + 0x70]
jmp 0x14001715a
mov qword [rsp + 0x60], rsi
mov rcx, qword [rbp + 0x30]
test rcx, rcx
je 0x14001725e
cmp qword [rbp + 0x38], rsi
jbe 0x14001725e
mov edx, dword [rbp + 0x50]
call fcn.140001eb0
mov rdx, qword [rdi]
lea rcx, [rbp + 0x90]
mov r9d, 0x400
xor r8d, r8d
call fcn.140018d80
test al, al
jne 0x140017288
mov edx, ebx
lea rcx, str.Exception_encountered_during_stack_walk_of_thread__d_n
call fcn.140001e00
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x1400172a6
mov rdx, qword [rsp + 0x60]
test rdx, rdx
je 0x1400172a6
call fcn.140003760
mov qword [rsp + 0x60], rsi
mov rcx, qword [rbp + 0xe0]
add rdi, 8
mov rax, qword [rbp + 0xd0]
lea rcx, [rax + rcx*8]
cmp rdi, rcx
jne 0x1400171b2
mov r15, qword [rbp + 0x28]
mov rbx, qword [rbp - 8]
mov rcx, r15
call fcn.14002b230
test al, al
jne 0x1400172e5
lea rcx, str.Failed_to_cache_native_crash_report._n
call fcn.140001e00
mov rax, qword [rbx]
mov edx, 0x3c
mov rcx, rbx
call qword [rax + 0x18]
cmp qword [rbp - 0x10], 8
lea rax, [rbp + 0x190]
mov r15, qword [rbp + 0x1b98]
lea rcx, [rbp - 0x28]
mov rdi, qword [rbp + 0x1b88]
lea r9, [rbp + 0xd0]
cmovae rcx, qword [rbp - 0x28]
mov r8, r15
mov qword [rsp + 0x30], rax
mov rdx, rdi
lea rax, [rbp + 0x90]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r13d
call fcn.140014fa0
lea rdx, [rbp - 0x28]
test al, al
je 0x140017357
lea rcx, [rsp + 0x70]
call fcn.14000fcf0
mov r12, qword [rsp + 0x70]
jmp 0x14001736d
cmp qword [rbp - 0x10], 8
lea rcx, str.Failed_to_generate_report_summary_at__S_n
cmovae rdx, qword [rbp - 0x28]
call fcn.140001e00
mov rax, qword [rbx]
mov edx, 0x50
mov rcx, rbx
call qword [rax + 0x18]
cmp byte [rbp + 0x1ba0], sil
je 0x14001739e
test byte [rbp + 0x730], 1
je 0x14001739e
mov edx, dword [rbp + 0x1c0]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
jmp 0x1400173ab
mov rcx, qword [rbp + 0x1bb0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov rdi, qword [r15 + 0x10]
cmp rdi, qword [r15 + 0x18]
je 0x1400175ed
nop dword [rax]
cmp qword [rdi + 0x18], 0x10
mov r14, rdi
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], si
jb 0x1400173e0
mov r14, qword [rdi]
mov rbx, qword [rdi + 0x10]
test rbx, rbx
jne 0x1400173fd
mov qword [rsp + 0x60], rsi
lea rcx, [rsp + 0x50]
mov word [rsp + 0x50], si
jmp 0x14001748a
mov dword [rsp + 0x28], esi
mov r9d, ebx
mov r8, r14
mov qword [rsp + 0x20], rsi
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
test eax, eax
jg 0x140017438
cmp qword [rsp + 0x68], 8
lea rax, [rsp + 0x50]
mov qword [rsp + 0x60], rsi
cmovae rax, qword [rsp + 0x50]
mov word [rax], si
jmp 0x140017479
xor r8d, r8d
movsxd rdx, eax
lea rcx, [rsp + 0x50]
call fcn.14000b5f0
cmp qword [rsp + 0x68], 8
lea rcx, [rsp + 0x50]
mov eax, dword [rsp + 0x60]
mov r9d, ebx
cmovae rcx, qword [rsp + 0x50]
mov r8, r14
mov dword [rsp + 0x28], eax
xor edx, edx
mov qword [rsp + 0x20], rcx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
cmp qword [rsp + 0x68], 8
lea rcx, [rsp + 0x50]
cmovae rcx, qword [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x1400175b3
test al, 0x10
jne 0x1400175b3
cmp qword [rbp - 0x50], 8
lea rdx, [rbp - 0x68]
mov qword [rbp + 0x10], rsi
cmovae rdx, qword [rbp - 0x68]
or r8, 0xffffffffffffffff
mov qword [rbp + 0x18], 7
mov word [rbp], si
inc r8
cmp word [rdx + r8*2], si
jne 0x1400174c3
lea rcx, [rbp]
call fcn.140025010
cmp qword [rsp + 0x68], 8
lea rdx, [rsp + 0x50]
mov qword [rbp + 0x40], rsi
cmovae rdx, qword [rsp + 0x50]
or r8, 0xffffffffffffffff
mov qword [rbp + 0x48], 7
mov word [rbp + 0x30], si
nop dword [rax + rax]
inc r8
cmp word [rdx + r8*2], si
jne 0x140017500
lea rcx, [rbp + 0x30]
call fcn.140025010
lea r8, [rbp]
lea rdx, [rbp + 0x30]
lea rcx, [rbp + 0x68]
call fcn.140017dd0
lea rcx, [rbp]
call fcn.14000b190
cmp qword [rbp + 0x80], 8
lea rdx, [rbp + 0x68]
lea rcx, [rsp + 0x50]
mov dword [rsp + 0x28], 1
cmovae rdx, qword [rbp + 0x68]
cmp qword [rsp + 0x68], 8
mov qword [rsp + 0x20], rsi
cmovae rcx, qword [rsp + 0x50]
xor r9d, r9d
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_CopyFileExW]
test eax, eax
jne 0x14001759a
cmp qword [rbp - 0x50], 8
lea r8, [rbp - 0x68]
mov rdx, rdi
cmovae r8, qword [rbp - 0x68]
cmp qword [rdi + 0x18], 0x10
jb 0x140017587
mov rdx, qword [rdi]
lea rcx, str.Failed_to_copy___s__to_crash_report_folder_at___S__n
call fcn.140001e00
lea rdx, [rsp + 0x50]
jmp 0x14001759e
lea rdx, [rbp + 0x68]
lea rcx, [rsp + 0x70]
call fcn.14000fcf0
lea rcx, [rbp + 0x68]
call fcn.14000b190
jmp 0x1400175cc
cmp qword [rdi + 0x18], 0x10
mov rdx, rdi
jb 0x1400175c0
mov rdx, qword [rdi]
lea rcx, str.Failed_to_find_file___s__n
call fcn.140001e00
lea rcx, [rsp + 0x50]
call fcn.14000b190
add rdi, 0x40
cmp rdi, qword [r15 + 0x18]
jne 0x1400173c0
mov r12, qword [rsp + 0x70]
mov rbx, qword [rbp - 8]
mov rax, qword [rbx]
mov edx, 0x64
mov rcx, rbx
call qword [rax + 0x18]
cmp qword [r15 + 0x38], rsi
je 0x1400176eb
lea rdi, [r15 + 0x28]
mov r8, r15
mov rdx, rdi
lea r9, [rsp + 0x70]
lea rcx, [rbp]
call fcn.140015ec0
cmp qword [rbp + 0x18], 8
lea rdx, [rbp]
lea rcx, str.Launching_custom_bug_reporter_with_command_line:_n___S_n
cmovae rdx, qword [rbp]
call fcn.140001e00
xor edx, edx
lea rcx, [rbp + 0x120]
lea r8d, [rdx + 0x68]
call fcn.140038450
mov eax, 5
mov dword [rbp + 0x120], 0x68
mov word [rbp + 0x160], ax
lea rdx, [rbp]
xor eax, eax
mov dword [rbp + 0x15c], 1
cmp qword [rbp + 0x18], 8
mov qword [rsp + 0x50], rax
cmovae rdx, qword [rbp]
xor r9d, r9d
mov qword [rsp + 0x58], rax
xor r8d, r8d
mov qword [rsp + 0x60], rax
xor ecx, ecx
lea rax, [rsp + 0x50]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0x120]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], esi
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
cmp eax, 1
je 0x1400176df
cmp qword [rdi + 0x18], 0x10
jb 0x1400176cd
mov rdi, qword [rdi]
mov rdx, rdi
lea rcx, str.Failed_to_launch_bug_reporter:___s_
call fcn.140001e00
mov dword [rbp - 0x70], esi
lea rcx, [rbp]
call fcn.14000b190
mov esi, dword [rbp - 0x70]
cmp byte [rbp + 0x1ba8], 0
mov rcx, rbx
mov rax, qword [rbx]
je 0x1400176ff
call qword [rax + 0x20]
jmp 0x140017702
call qword [rax + 8]
test byte [rbp + 0x730], 1
lea rcx, [rbp + 0x90]
mov ebx, 0xfffffc86
cmovne ebx, esi
call fcn.140008370
test r12, r12
je 0x14001775e
mov rsi, qword [rsp + 0x78]
mov rdi, r12
cmp r12, rsi
je 0x140017741
nop
mov rcx, rdi
call fcn.14000b190
add rdi, 0x20
cmp rdi, rsi
jne 0x140017730
mov rdx, qword [rbp - 0x80]
mov r9d, 8
sub rdx, r12
mov rcx, r12
sar rdx, 5
lea r8d, [r9 + 0x18]
call fcn.140007700
lea rcx, [rbp - 0x48]
call fcn.14000b190
lea rcx, [rbp - 0x28]
call fcn.14000b190
lea rcx, [rbp - 0x68]
call fcn.14000b190
lea rcx, [rbp + 0xd0]
call fcn.140008290
mov eax, ebx
mov rbx, qword [rsp + 0x1c80]
add rsp, 0x1c40
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.14003ecdc
int3
call fcn.14003ecdc
int3
call fcn.14003ecdc
int3