Function at 0x1400683e0
Capabilities:
Check if file exists
Get file attributes

Disassembly:
mov r11, rsp
mov dword [r11 + 0x20], r9d
mov qword [r11 + 0x18], r8
mov qword [r11 + 0x10], rdx
mov qword [r11 + 8], rcx
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xd00
mov rax, qword [0x1402bf200]
xor rax, rsp
mov qword [rsp + 0xcf0], rax
mov r12d, r9d
mov dword [rsp + 0x54], r9d
mov esi, dword [rsp + 0xd60]
mov r14, rcx
mov qword [rsp + 0x58], rcx
mov rbx, rdx
mov r13, r8
xor r15d, r15d
mov dword [rsp + 0x50], r15d
cmp byte [rcx + 0x6a], r15b
je 0x140068540
mov dword [rsp + 0x40], 0x35383744
mov dword [rsp + 0x44], 0x46353539
movsd xmm0, qword [str.dump]
movsd qword [rsp + 0x118], xmm0
mov eax, dword [0x14023c298]
mov dword [rsp + 0x120], eax
mov rax, qword [rsp + 0x40]
mov qword [r11 - 0xc14], rax
mov dword [rsp + 0x12c], 0x4f
xorps xmm0, xmm0
movups xmmword [rsp + 0x980], xmm0
lea rcx, [r11 - 0x3b8]
call fcn.140026d50
nop
mov rcx, qword [rsp + 0x980]
test rcx, rcx
je 0x1400684ed
mov rax, qword [rcx]
lea rdx, str.Attempting_to_install_crashguard_twice__ignored.
mov qword [rsp + 0x80], rdx
mov qword [rsp + 0x88], 0x30
lea r9, [rsp + 0x80]
lea r8, [rsp + 0x118]
lea edx, [r15 + 5]
mov rax, qword [rax + 0x10]
call qword [case.0x1400617cf.0]
nop
mov rbx, qword [rsp + 0x988]
test rbx, rbx
je 0x140068536
mov rsi, 0xffffffffffffffff
mov eax, esi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x140068536
mov rax, qword [rbx]
mov rcx, rbx
mov rax, qword [rax]
call qword [case.0x1400617cf.0]
lock xadd dword [rbx + 0xc], esi
cmp esi, 1
jne 0x140068536
mov rax, qword [rbx]
mov rcx, rbx
mov rax, qword [rax + 8]
call qword [case.0x1400617cf.0]
mov eax, 2
jmp 0x140069662
mov byte [r14 + 0x6a], 1
lea rcx, [r14 + 0xa0]
cmp rcx, rbx
je 0x140068567
mov rdx, rbx
cmp qword [rbx + 0x18], 7
jbe 0x14006855e
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
call fcn.14002a5c0
mov eax, 0x7fffffff
test esi, esi
cmovle esi, eax
xchg dword [r14 + 0x74], esi
mov eax, r12d
shr eax, 0xa
and al, 1
mov byte [r14 + 0x70], al
mov rcx, rbx
cmp qword [rbx + 0x18], 7
jbe 0x14006858e
mov rcx, qword [rbx]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x1400695bb
test al, 0x10
je 0x1400695bb
mov rdx, r13
lea rcx, [rsp + 0x9c0]
call fcn.140024420
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x900], xmm0
mov qword [rsp + 0x910], r15
mov qword [rsp + 0x918], 7
mov word [rsp + 0x900], r15w
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, rax
mov r8d, 0x104
lea rdx, [rsp + 0xae0]
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
jne 0x1400686a6
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x54], eax
mov dword [rsp + 0x40], 0x35383744
mov dword [rsp + 0x44], 0x46353539
movsd xmm0, qword [str.dump]
movsd qword [rsp + 0x60], xmm0
mov eax, dword [0x14023c298]
mov dword [rsp + 0x68], eax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x6c], rax
mov dword [rsp + 0x74], 0x6e
lea rax, str.Install_failed:_cannot_get_filename_of_current_process_due_to_error:_
mov qword [rsp + 0x80], rax
mov qword [rsp + 0x88], 0x47
lea r9, [rsp + 0x54]
lea r8, [rsp + 0x80]
lea rdx, [rsp + 0x60]
mov ecx, 7
call fcn.14003fa10
nop
lea rcx, [rsp + 0x900]
call fcn.14002adf0
nop
lea rcx, [rsp + 0x9c0]
call fcn.14002adf0
mov eax, 6
jmp 0x140069662
lea rcx, [rsp + 0xae0]
call qword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
mov rsi, 0xffffffffffffffff
test rax, rax
je 0x1400686de
mov r8, rsi
inc r8
cmp word [rax + r8*2], 0
jne 0x1400686c3
mov rdx, rax
lea rcx, [rsp + 0x900]
call fcn.14002a5c0
cmp qword [rsp + 0x9d0], 0
jne 0x140068722
lea rcx, [rsp + 0xae0]
call qword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
lea rax, [rsp + 0xae0]
mov r8, rsi
inc r8
cmp word [rax + r8*2], 0
jne 0x140068702
lea rdx, [rsp + 0xae0]
lea rcx, [rsp + 0x9c0]
call fcn.14002a5c0
lea rdx, [rsp + 0x9c0]
mov rcx, r14
call fcn.1400696a0
lea rcx, [0x14006fc20]
call fcn.14019aebc
lea r13, vtable.std::exception.0
mov qword [rsp + 0x1b0], r13
xorps xmm0, xmm0
movups xmmword [rsp + 0x1b8], xmm0
lea rbx, [0x140242de0]
mov qword [rsp + 0x1a8], rbx
call fcn.140067e30
mov rcx, rax
mov rax, qword [rax]
lea r8, [r14 + 0x6c]
lea rdx, str.avcfg:__settings_CrashGuard_FullDumpFraction
mov rax, qword [rax + 0x58]
call qword [case.0x1400617cf.0]
nop
lea rdi, [0x140242db8]
mov qword [rsp + 0x1a8], rdi
mov qword [rsp + 0x1b0], r13
lea rcx, [rsp + 0x1b8]
call fcn.14019cbd0
lea rcx, str.avcfg:__settings_CrashGuard_FullDumpFraction
call fcn.140067280
test al, al
je 0x140068815
mov qword [rsp + 0x190], r13
xorps xmm0, xmm0
movups xmmword [rsp + 0x198], xmm0
mov qword [rsp + 0x188], rbx
call fcn.140067e30
mov rcx, rax
mov rax, qword [rax]
lea r8, [r14 + 0x6c]
lea rdx, str.avdef:__config_Common_FullDumpFraction
mov rax, qword [rax + 0x58]
call qword [case.0x1400617cf.0]
nop
mov qword [rsp + 0x188], rdi
mov qword [rsp + 0x190], r13
lea rcx, [rsp + 0x198]
call fcn.14019cbd0
mov qword [rsp + 0x170], r13
xorps xmm0, xmm0
movups xmmword [rsp + 0x178], xmm0
mov qword [rsp + 0x168], rbx
call fcn.140067e30
mov rcx, rax
mov rax, qword [rax]
lea rbx, str.Release
mov r9, rbx
lea r8, str.avdef:__config_Common_VersionType
lea rdx, [rsp + 0xb0]
mov rax, qword [rax + 0xb8]
call qword [case.0x1400617cf.0]
mov edi, 4
mov dword [rsp + 0x50], edi
lea rax, [0x140242db8]
mov qword [rsp + 0x168], rax
mov qword [rsp + 0x170], r13
lea rcx, [rsp + 0x178]
call fcn.14019cbd0
lea rdx, [rsp + 0xb0]
cmp qword [rsp + 0xc8], 7
cmova rdx, qword [rsp + 0xb0]
mov rcx, qword [rsp + 0xc0]
cmp rcx, 7
jne 0x1400688e2
test rcx, rcx
je 0x1400688d3
sub rdx, rbx
nop
movzx eax, word [rbx + rdx]
cmp ax, word [rbx]
jne 0x1400688e2
add rbx, 2
sub rcx, 1
jne 0x1400688c0
lea rcx, [rsp + 0xb0]
call fcn.14002adf0
jmp 0x1400688f4
lea rcx, [rsp + 0xb0]
call fcn.14002adf0
mov byte [r14 + 0x70], 1
mov eax, r12d
and eax, 0x21
cmp al, 0x21
jne 0x140068bae
call fcn.1400455d0
cmp dword [rax + 0x20], 2
setne al
mov byte [r14 + 0x69], al
call fcn.1400455d0
lea rcx, [rax + 0x70]
mov rdx, qword [rcx + 0x10]
movabs rax, 0x7ffffffffffffffe
sub rax, rdx
cmp rax, 1
jb 0x140069685
cmp qword [rcx + 0x18], 7
jbe 0x140068940
mov rcx, qword [rcx]
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], 1
lea r9, [0x14023c9d8]
lea rcx, [rsp + 0x2b0]
call fcn.1400230c0
mov edi, 0x44
lea r8d, [rdi - 0x3c]
lea rdx, str.AvDumper
lea rcx, [rsp + 0x2b0]
call fcn.140023d10
xorps xmm0, xmm0
movups xmmword [rsp + 0x240], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x250], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x240], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x250], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 7
mov word [rax], r15w
bts edi, 7
mov r8d, 2
lea rdx, [0x14023c9b8]
lea rcx, [rsp + 0x240]
call fcn.140023d10
xorps xmm0, xmm0
movups xmmword [rsp + 0x148], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x158], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x148], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x158], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 7
mov word [rax], r15w
or edi, 0x20
mov r8d, 1
lea rdx, [0x14023c9d4]
lea rcx, [rsp + 0x148]
call fcn.140023d10
xorps xmm0, xmm0
movups xmmword [rsp + 0x990], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x9a0], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x990], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x9a0], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 7
mov word [rax], r15w
or edi, 0x10
mov dword [rsp + 0x50], edi
lea rcx, [rsp + 0x148]
call fcn.14002adf0
nop
lea rcx, [rsp + 0x240]
call fcn.14002adf0
nop
lea rcx, [rsp + 0x2b0]
call fcn.14002adf0
mov qword [rsp + 0x8e0], r15
lea r9, [rsp + 0x990]
cmp qword [rsp + 0x9a8], 7
cmova r9, qword [rsp + 0x990]
lea rax, [rsp + 0x8e0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r15
xor r8d, r8d
lea rdx, str.ncalrpc
xor ecx, ecx
call qword [sym.imp.RPCRT4.dll_RpcStringBindingComposeW]
mov ebx, eax
test eax, eax
jne 0x140068b0c
lea rdx, [0x14032a978]
mov rcx, qword [rsp + 0x8e0]
call qword [sym.imp.RPCRT4.dll_RpcBindingFromStringBindingW]
mov ebx, eax
cmp qword [rsp + 0x8e0], 0
je 0x140068b25
lea rcx, [rsp + 0x8e0]
call qword [sym.imp.RPCRT4.dll_RpcStringFreeW]
test ebx, ebx
jne 0x140068b67
mov eax, dword [r14 + 0x6c]
test eax, eax
je 0x140068b54
cdq
and edx, 0xf
add eax, edx
sar eax, 4
mov ecx, 1
cmp eax, ecx
cmovg ecx, eax
mov eax, dword [r14 + 0x78]
cdq
idiv ecx
test edx, edx
jne 0x140068b54
mov r8b, 1
jmp 0x140068b57
xor r8b, r8b
lea rdx, [r14 + 0xa0]
lea rcx, [r14 + 0x68]
call fcn.1400660b0
movzx ebx, byte [r14 + 0x68]
lea rcx, [rsp + 0x990]
call fcn.14002adf0
and r12d, 0xfffffffe
test bl, bl
cmove r12d, dword [rsp + 0x54]
mov dword [rsp + 0xd58], r12d
jmp 0x140068bae
test r12b, 0x14
je 0x1400691b0
xorps xmm0, xmm0
movups xmmword [rsp + 0x940], xmm0
mov qword [rsp + 0x950], r15
mov qword [rsp + 0x958], r15
mov r8d, 0x17
lea rdx, str.python.exe_pythonw.exe_
lea rcx, [rsp + 0x940]
call fcn.14002a920
nop
lea rax, str.CrashGuardProcessWatcherExclusions
mov qword [rsp + 0x1e0], rax
mov qword [rsp + 0x1e8], 0x22
call fcn.14003b3c0
mov rcx, rax
cmp qword [rax + 0x18], 7
jbe 0x140068c1b
mov rcx, qword [rax]
mov rax, qword [rax + 0x10]
mov qword [rsp + 0x1d0], rcx
mov qword [rsp + 0x1d8], rax
mov qword [rsp + 0x2f0], 0xffffffff80000002
movaps xmm0, xmmword [rsp + 0x1d0]
movdqa xmmword [rsp + 0x270], xmm0
lea rdx, [rsp + 0x270]
lea rcx, [rsp + 0x2f8]
call fcn.14003db70
mov qword [rsp + 0x528], 0x100
mov rax, qword [rsp + 0x2f0]
mov qword [rsp + 0x530], rax
lea rdx, [rsp + 0x2f8]
lea rcx, [rsp + 0x538]
call fcn.14003dde0
mov eax, dword [rsp + 0x528]
mov dword [rsp + 0x768], eax
mov eax, dword [rsp + 0x52c]
mov dword [rsp + 0x76c], eax
mov byte [rsp + 0x770], 1
movaps xmm0, xmmword [rsp + 0x1e0]
movdqa xmmword [rsp + 0x280], xmm0
lea r8, [rsp + 0x280]
lea rdx, [rsp + 0x530]
lea rcx, [rsp + 0x2d0]
call fcn.14005a520
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 7
jbe 0x140068cf3
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rsp + 0x940]
call fcn.140023d10
nop
lea rcx, [rsp + 0x2d0]
call fcn.14002adf0
nop
lea rcx, [rsp + 0x530]
call fcn.14003da50
nop
mov r8, qword [rsp + 0x520]
cmp r8, 7
jbe 0x140068d44
mov rdx, qword [rsp + 0x508]
lea rcx, [rsp + 0x500]
call fcn.14003df00
nop
jmp 0x140068d68
xorps xmm0, xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x8e8], xmm1
mov qword [rsp + 0x8f8], r15
movups xmmword [rsp + 0x920], xmm0
mov qword [rsp + 0x930], r15
mov qword [rsp + 0x938], 7
mov word [rsp + 0x920], r15w
xor edx, edx
mov r8d, 0xf8
lea rcx, [rsp + 0x9e0]
call fcn.1401d80e0
lea rax, [0x14023bfd8]
mov qword [rsp + 0x9e0], rax
lea rax, [0x14023bb90]
mov qword [rsp + 0x9f0], rax
mov qword [rsp + 0xa80], r15
mov qword [rsp + 0xa88], 0
mov dword [rsp + 0xa90], r15d
mov qword [rsp + 0xa98], r15
xorps xmm0, xmm0
movdqa xmmword [rsp + 0xaa0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rsp + 0xab0], xmm1
lea rax, vtable.std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__.0
mov qword [rsp + 0xa78], rax
movdqa xmmword [rsp + 0xac0], xmm0
mov word [rsp + 0xad0], r15w
or edi, 8
mov dword [rsp + 0x50], edi
lea rdx, [rsp + 0x9f8]
lea rcx, [rsp + 0x9e0]
call fcn.1400432b0
nop
mov rax, qword [rsp + 0x9e0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_stringstream_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__.0
mov qword [rsp + rcx + 0x9e0], rax
mov rax, qword [rsp + 0x9e0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rsp + rcx + 0x9dc], edx
lea rax, [rsp + 0x9f8]
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x9f8]
call fcn.140007d70
nop
lea rax, vtable.std::basic_stringbuf_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__.0
mov qword [rsp + 0x9f8], rax
lea rax, [rsp + 0x940]
cmp qword [rsp + 0x958], 7
cmova rax, qword [rsp + 0x940]
mov qword [rsp + 0x58], rax
mov ecx, r15d
mov rax, qword [rsp + 0x950]
mov qword [rsp + 0xa8], rax
cmp rax, 0x7fffffff
ja 0x14006968b
test rax, rax
je 0x140068f98
movabs rcx, 0x7fffffffffffffff
cmp rax, rcx
ja 0x140069691
lea rbx, [rax + rax]
mov rcx, rbx
call fcn.14002aac0
mov rdi, rax
mov r8, rbx
mov rdx, qword [rsp + 0x58]
mov rcx, rax
call fcn.1401d7a40
mov rax, qword [rsp + 0xa8]
lea rcx, [rax + rax]
lea rax, [rdi + rcx]
mov qword [rsp + 0xa60], rax
mov rax, qword [rsp + 0xa10]
mov qword [rax], rdi
mov rax, qword [rsp + 0xa30]
mov qword [rax], rdi
sar rcx, 1
mov rax, qword [rsp + 0xa48]
mov dword [rax], ecx
mov rcx, qword [rsp + 0xa60]
mov rax, qword [rsp + 0xa18]
mov qword [rax], rdi
mov rax, qword [rsp + 0xa38]
mov qword [rax], rdi
sub rcx, rdi
sar rcx, 1
mov rax, qword [rsp + 0xa50]
mov dword [rax], ecx
mov ecx, 1
jmp 0x140068fa0
mov qword [rsp + 0xa60], r15
mov dword [rsp + 0xa68], ecx
mov r8d, 0x3b
lea rdx, [rsp + 0x920]
lea rcx, [rsp + 0x9e0]
call fcn.140043d10
mov rdx, rax
mov rax, qword [rax]
movsxd rcx, dword [rax + 4]
test byte [rcx + rdx + 0x10], 6
jne 0x14006905c
nop word [rax + rax]
cmp qword [rsp + 0x930], 0
je 0x140069030
mov rax, qword [rsp + 0x8f0]
cmp rax, qword [rsp + 0x8f8]
je 0x140069018
lea rdx, [rsp + 0x920]
mov rcx, rax
call fcn.140024420
add qword [rsp + 0x8f0], 0x20
jmp 0x140069030
lea r8, [rsp + 0x920]
mov rdx, rax
lea rcx, [rsp + 0x8e8]
call fcn.140045360
mov r8d, 0x3b
lea rdx, [rsp + 0x920]
lea rcx, [rsp + 0x9e0]
call fcn.140043d10
mov rdx, rax
mov rax, qword [rax]
movsxd rcx, dword [rax + 4]
test byte [rcx + rdx + 0x10], 6
je 0x140068fe0
mov rbx, qword [rsp + 0x8e8]
mov rdi, qword [rsp + 0x8f0]
cmp rbx, rdi
je 0x140069179
mov r13d, 4
mov rax, qword gs:[0x58]
add r13, qword [rax]
nop word [rax + rax]
mov eax, dword [r13]
cmp dword [0x14032993c], eax
jle 0x1400690c9
lea rcx, [0x14032993c]
call fcn.14019b210
cmp dword [0x14032993c], 0xffffffff
jne 0x1400690c9
call fcn.1401984c0
mov qword [0x140329940], rax
lea rcx, [0x14032993c]
call fcn.14019b1a0
lea rax, [rsp + 0x900]
cmp qword [rsp + 0x918], 7
cmova rax, qword [rsp + 0x900]
mov qword [rsp + 0x1f0], rax
mov rax, qword [rsp + 0x910]
mov qword [rsp + 0x1f8], rax
mov rcx, rbx
cmp qword [rbx + 0x18], 7
jbe 0x140069108
mov rcx, qword [rbx]
mov rax, qword [rbx + 0x10]
mov qword [rsp + 0x200], rcx
mov qword [rsp + 0x208], rax
movaps xmm0, xmmword [rsp + 0x1f0]
movdqa xmmword [rsp + 0x290], xmm0
movaps xmm1, xmmword [rsp + 0x200]
movdqa xmmword [rsp + 0x2a0], xmm1
mov r9, qword [0x140329940]
mov r8, rsi
lea rdx, [rsp + 0x290]
lea rcx, [rsp + 0x2a0]
call fcn.1400413a0
test eax, eax
jne 0x140069165
and r12d, 0xffffffeb
add rbx, 0x20
cmp rbx, rdi
jne 0x140069090
lea r13, vtable.std::exception.0
lea rcx, [rsp + 0x9e0]
call fcn.140042430
nop
lea rcx, [rsp + 0x920]
call fcn.14002adf0
nop
lea rcx, [rsp + 0x8e8]
call fcn.140036c00
nop
lea rcx, [rsp + 0x940]
call fcn.14002adf0
lea rcx, [r14 + 8]
mov edx, r12d
call fcn.1400636a0
test al, al
jne 0x14006922a
mov dword [rsp + 0x40], 0x35383744
mov dword [rsp + 0x44], 0x46353539
movsd xmm0, qword [str.dump]
movsd qword [rsp + 0x90], xmm0
mov eax, dword [0x14023c298]
mov dword [rsp + 0x98], eax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x9c], rax
mov dword [rsp + 0xa4], 0xd9
lea r8, str.Failed_to_install_crash_hooks
lea rdx, [rsp + 0x90]
mov ecx, 7
call fcn.14000c230
mov r15d, 5
jmp 0x1400694eb
cmp byte [r14 + 0x68], 0
je 0x1400692ec
mov dword [rsp + 0x40], 0x35383744
mov dword [rsp + 0x44], 0x46353539
movsd xmm0, qword [str.dump]
movsd qword [rsp + 0x130], xmm0
mov eax, dword [0x14023c298]
mov dword [rsp + 0x138], eax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x13c], rax
mov dword [rsp + 0x144], 0xde
xorps xmm0, xmm0
movups xmmword [rsp + 0x970], xmm0
lea rcx, [rsp + 0x970]
call fcn.140026d50
nop
mov rcx, qword [rsp + 0x970]
test rcx, rcx
je 0x1400692df
mov rax, qword [rcx]
lea rdx, str.CrashGuard_initialized_successfully__external_debugger_attached
mov qword [rsp + 0x210], rdx
mov qword [rsp + 0x218], 0x3f
lea r9, [rsp + 0x210]
lea r8, [rsp + 0x130]
mov edx, 2
mov rax, qword [rax + 0x10]
call qword [case.0x1400617cf.0]
nop
mov rbx, qword [rsp + 0x978]
jmp 0x1400693cc
lea rcx, [r14 + 0x80]
cmp qword [rcx + 0x18], 7
jbe 0x1400692fd
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x140069310
test al, 0x10
jne 0x140069310
mov al, 1
jmp 0x140069312
xor al, al
mov dword [rsp + 0x40], 0x35383744
mov dword [rsp + 0x44], 0x46353539
movsd xmm0, qword [str.dump]
test al, al
mov eax, dword [0x14023c298]
je 0x140069417
movsd qword [rsp + 0xd0], xmm0
mov dword [rsp + 0xd8], eax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0xdc], rax
mov dword [rsp + 0xe4], 0xe3
xorps xmm0, xmm0
movups xmmword [rsp + 0x960], xmm0
lea rcx, [rsp + 0x960]
call fcn.140026d50
nop
mov rcx, qword [rsp + 0x960]
test rcx, rcx
je 0x1400693c4
mov rax, qword [rcx]
lea rdx, str.CrashGuard_initialized_successfully__external_dumping_enabled
mov qword [rsp + 0x220], rdx
mov qword [rsp + 0x228], 0x3d
lea r9, [rsp + 0x220]
lea r8, [rsp + 0xd0]
mov edx, 2
mov rax, qword [rax + 0x10]
call qword [case.0x1400617cf.0]
nop
mov rbx, qword [rsp + 0x968]
test rbx, rbx
je 0x1400694eb
mov eax, esi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x1400694eb
mov rax, qword [rbx]
mov rcx, rbx
mov rax, qword [rax]
call qword [case.0x1400617cf.0]
lock xadd dword [rbx + 0xc], esi
cmp esi, 1
jne 0x1400694eb
mov rax, qword [rbx]
mov rcx, rbx
mov rax, qword [rax + 8]
call qword [case.0x1400617cf.0]
jmp 0x1400694eb
movsd qword [rsp + 0xe8], xmm0
mov dword [rsp + 0xf0], eax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0xf4], rax
mov dword [rsp + 0xfc], 0xe8
xorps xmm0, xmm0
movups xmmword [rsp + 0x9b0], xmm0
lea rcx, [rsp + 0x9b0]
call fcn.140026d50
nop
mov rcx, qword [rsp + 0x9b0]
test rcx, rcx
je 0x1400694a3
mov rax, qword [rcx]
lea rdx, str.CrashGuard_initialized_successfully__only_internal_dumping_available
mov qword [rsp + 0x230], rdx
mov qword [rsp + 0x238], 0x44
lea r9, [rsp + 0x230]
lea r8, [rsp + 0xe8]
mov edx, 2
mov rax, qword [rax + 0x10]
call qword [case.0x1400617cf.0]
nop
mov rbx, qword [rsp + 0x9b8]
test rbx, rbx
je 0x1400694e5
mov eax, esi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x1400694e5
mov rax, qword [rbx]
mov rcx, rbx
mov rax, qword [rax]
call qword [case.0x1400617cf.0]
lock xadd dword [rbx + 0xc], esi
cmp esi, 1
jne 0x1400694e5
mov rax, qword [rbx]
mov rcx, rbx
mov rax, qword [rax + 8]
call qword [case.0x1400617cf.0]
mov r15d, 1
mov qword [rsp + 0x68], r13
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
lea rbx, [0x140242de0]
mov qword [rsp + 0x60], rbx
call fcn.140067e30
mov rcx, rax
mov rax, qword [rax]
lea r8, [r14 + 0x6c]
lea rdx, str.avcfg:__settings_CrashGuard_FullDumpFraction
mov rax, qword [rax + 0x58]
call qword [case.0x1400617cf.0]
nop
lea rdi, [0x140242db8]
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x68], r13
lea rcx, [rsp + 0x70]
call fcn.14019cbd0
lea rcx, str.avcfg:__settings_CrashGuard_FullDumpFraction
call fcn.140067280
test al, al
je 0x140069598
mov qword [rsp + 0x68], r13
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
mov qword [rsp + 0x60], rbx
call fcn.140067e30
mov rcx, rax
mov rax, qword [rax]
lea r8, [r14 + 0x6c]
lea rdx, str.avdef:__config_Common_FullDumpFraction
mov rax, qword [rax + 0x58]
call qword [case.0x1400617cf.0]
nop
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x68], r13
lea rcx, [rsp + 0x70]
call fcn.14019cbd0
nop
lea rcx, [rsp + 0x900]
call fcn.14002adf0
nop
lea rcx, [rsp + 0x9c0]
call fcn.14002adf0
mov eax, r15d
jmp 0x140069662
mov dword [rsp + 0x40], 0x35383744
mov dword [rsp + 0x44], 0x46353539
movsd xmm0, qword [str.dump]
movsd qword [rsp + 0x60], xmm0
mov eax, dword [0x14023c298]
mov dword [rsp + 0x68], eax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x6c], rax
mov dword [rsp + 0x74], 0x60
lea rcx, [rsp + 0x80]
call fcn.140026d50
lea r9, [rsp + 0x60]
mov r8d, 7
mov rdx, rax
lea rcx, [rsp + 0x780]
call fcn.140025780
nop
lea rdx, str.Dump_path_
lea rcx, [rsp + 0x780]
call fcn.140028820
cmp qword [rbx + 0x18], 7
jbe 0x14006963c
mov rbx, qword [rbx]
mov rdx, rbx
mov rcx, rax
call fcn.140028820
mov rcx, rax
call fcn.14006b810
nop
lea rcx, [rsp + 0x780]
call fcn.140028440
mov eax, 3
mov rcx, qword [rsp + 0xcf0]
xor rcx, rsp
call fcn.14019acb0
add rsp, 0xd00
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
call fcn.14002a900
nop
call fcn.140196fd0
int3
call fcn.14002ac60
int3