Function at 0x140027e50
Capabilities:
Create directory
Get common file path

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2c8]
sub rsp, 0x3c8
mov rax, qword [0x1401f5698]
xor rax, rsp
mov qword [rbp + 0x2b0], rax
mov rsi, r8
mov qword [rsp + 0x58], rcx
mov rbx, r9
mov r13, rdx
xor edi, edi
mov qword [rsp + 0x50], rbx
mov rcx, rsi
xor edx, edx
mov r8d, 0x288
mov r12d, edi
mov r14d, edi
call fcn.14012d4b0
mov r8d, dword [0x14022abdc]
xorps xmm1, xmm1
xorps xmm0, xmm0
movups xmmword [rbp - 0x68], xmm0
movups xmmword [rbp - 0x58], xmm1
movups xmmword [rbp - 0x48], xmm1
test r8d, r8d
je 0x140027ed6
lea rdx, [0x14017faf8]
lea rcx, [rbp - 0x58]
call fcn.14000c788
lock inc dword [0x14022abdc]
mov edx, 0x7f02
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorW]
mov rcx, rax
call qword [sym.imp.USER32.dll_SetCursor]
test rbx, rbx
je 0x140027f27
mov rcx, rbx
mov dword [rbp - 0x78], 0xb
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov qword [rbp - 0x70], rbx
mov dword [rsp + 0x78], 1
lea eax, [rax*2 + 2]
mov dword [rbp - 0x74], eax
lea rax, [rbp - 0x78]
mov qword [rsp + 0x7c], rax
xor edx, edx
mov r8d, 0x800
mov rcx, r13
call fcn.14012d4b0
xor r9d, r9d
mov qword [rsp + 0x20], rsi
xor r8d, r8d
xor ecx, ecx
lea edx, [r9 + 0x10]
call qword [sym.imp.SHELL32.dll_SHGetFolderPathW]
mov r15d, eax
test eax, eax
jns 0x140027f8b
lfence
xor edx, edx
mov r8d, 0x288
mov rcx, rsi
call fcn.14012d4b0
mov rdx, rsi
mov ecx, 0x104
call qword [sym.imp.KERNEL32.dll_GetTempPathW]
test eax, eax
je 0x140027f7f
cmp word [rsi], di
jne 0x140027f90
lea rdx, str.CreateDumpForReport_called__get_desktop_or_temp_folder_failed
jmp 0x140028126
cmp word [rsi], di
je 0x140027fab
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_lstrlenW]
movsxd rcx, eax
lea r8, [0x14017fb80]
cmp word [rsi + rcx*2 - 2], 0x5c
jne 0x140027fb2
lea r8, str.ConEmuTrap
mov edi, 0x144
mov rcx, rsi
mov edx, edi
call fcn.140001e48
xor edx, edx
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov r8d, 8
lea rdx, [0x1401759d0]
lea rcx, [rbp - 0x68]
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrcpynW]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
lea rdx, [rbp - 0x58]
sub rdi, rbx
mov qword [rsp + 0x40], rdx
lea rcx, [rsi + rbx*2]
mov dword [rsp + 0x38], eax
lea r8, str.Trap__02u_02u_02u_s__u_s.dmp
lea rax, [rbp - 0x68]
mov r9d, 0x14
mov qword [rsp + 0x30], rax
mov rdx, rdi
mov dword [rsp + 0x28], 0xd
mov dword [rsp + 0x20], 7
call fcn.1401145a0
xor edi, edi
xor r9d, r9d
mov qword [rsp + 0x30], rdi
mov edx, 0xc0000000
mov dword [rsp + 0x28], 0x80
mov rcx, rsi
mov dword [rsp + 0x20], 2
lea r8d, [rdi + 3]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r12, rax
cmp rax, 0xffffffffffffffff
jne 0x140028078
lea rdx, str.CreateDumpForReport_called__create_dump_file_failed
jmp 0x140028126
lea rcx, str.Dbghelp.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov r14, rax
test rax, rax
jne 0x140028099
lea rdx, str.CreateDumpForReport_called__LoadLibrary_Dbghelp.dll__failed
jmp 0x140028126
lea rdx, str.MiniDumpWriteDump
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x70], rax
test rax, rax
jne 0x1400280bc
lea rdx, str.CreateDumpForReport_called__MiniDumpWriteDump_not_found
jmp 0x140028126
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
neg qword [rsp + 0x50]
mov dword [rsp + 0x60], eax
mov rax, qword [rsp + 0x58]
sbb rbx, rbx
mov qword [rsp + 0x64], rax
lea rax, [rsp + 0x78]
and rbx, rax
mov dword [rsp + 0x6c], edi
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov edi, eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
xor r8d, r8d
mov edx, edi
mov qword [rsp + 0x30], r8
mov rcx, rax
lea rax, [rsp + 0x60]
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rax
lea r9d, [r8 + 2]
mov r8, r12
call qword [rsp + 0x70]
xor edi, edi
test eax, eax
jne 0x14002817a
lea rdx, str.CreateDumpForReport_called__MiniDumpWriteDump_failed
mov r8d, 0xff
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_lstrcpynW]
cmp word [rsi], di
je 0x14002815d
mov ebx, 0x400
lea r8, [0x1401759f4]
mov edx, ebx
mov rcx, r13
call fcn.140001e48
mov r8, rsi
mov edx, ebx
mov rcx, r13
call fcn.140001e48
test r15d, r15d
jne 0x14002816b
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r15d, eax
cmp r12, 0xffffffffffffffff
je 0x1400282db
jmp 0x1400282cd
xor edx, edx
lea rcx, [rbp + 0xa0]
mov r8d, 0x20a
call fcn.14012d4b0
mov r8d, 0x104
lea rdx, [rbp + 0xa0]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea rcx, [rbp + 0xa0]
call fcn.140118eac
mov rbx, qword [rsp + 0x58]
mov rsi, rax
test rbx, rbx
je 0x14002826d
mov rcx, qword [rbx]
test rcx, rcx
je 0x14002826d
mov r8d, dword [rcx]
lea rdx, str.Exception_0x_08X
lea rcx, [rbp - 0x30]
call fcn.14000c838
mov rdi, qword [rbx]
cmp dword [rdi], 0xc0000005
jne 0x14002827d
cmp dword [rdi + 0x18], 2
jb 0x14002827d
mov rbx, qword [rdi + 0x20]
lea rcx, [rbp - 0x30]
mov rdi, qword [rdi + 0x28]
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea rdx, str.DEP
mov dword [rsp + 0x28], edi
movsxd rcx, eax
lea r8, [rbp - 0x30]
mov rax, rdi
lea r9, [0x1401759d0]
shr rax, 0x20
cmp rbx, 8
mov dword [rsp + 0x20], eax
cmove r9, rdx
cmp rbx, 1
lea rdx, [0x14017fe18]
cmove r9, rdx
test rbx, rbx
lea rdx, str.Read
cmove r9, rdx
mov edx, 0x64
sub rdx, rcx
lea rcx, [r8 + rcx*2]
lea r8, str.___s_x_08X_08X_
call fcn.1401145a0
jmp 0x14002827d
lea rdx, str.Assertion
lea rcx, [rbp - 0x30]
call fcn.140026c44
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
lea rcx, [0x14017fe6c]
mov r9, rsi
mov qword [rsp + 0x48], rcx
lea r8, [rbp - 0x30]
lea rcx, [0x1401759d0]
mov qword [rsp + 0x40], rcx
lea rdx, str._s_was_occurred___s__PID_u__r_nConEmu_build__02u_02u_02u_s__s
mov dword [rsp + 0x38], 0xd
mov rcx, r13
mov dword [rsp + 0x30], 7
mov dword [rsp + 0x28], 0x14
mov dword [rsp + 0x20], eax
call fcn.140004760
test r12, r12
je 0x1400282db
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test r14, r14
je 0x1400282e9
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov edx, 0x7f00
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorW]
mov rcx, rax
call qword [sym.imp.USER32.dll_SetCursor]
mov eax, r15d
mov rcx, qword [rbp + 0x2b0]
xor rcx, rsp
call fcn.14012bda0
add rsp, 0x3c8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret