Function at 0x10001a2b0
Capabilities:
Check if file exists
Get file attributes

Disassembly:
mov rax, rsp
push rbp
push rsi
push rdi
push r12
push r13
sub rsp, 0xd0
mov qword [rsp + 0x60], 0xfffffffffffffffe
mov qword [rax + 0x18], rbx
mov rbx, rcx
xor ebp, ebp
mov qword [rsp + 0x68], rbp
mov qword [rsp + 0x70], rbp
mov qword [rax - 0x80], rbp
mov qword [rax - 0x78], rbp
mov qword [rax - 0x70], rbp
lea edi, [rbp + 0xa]
mov dword [rax - 0x68], edi
mov rax, qword [rcx + 0x48]
cmp dword [rax - 0x10], ebp
jne 0x10001a319
add rcx, 0x48
call fcn.100034e44
cmp eax, ebp
je 0x10001a362
lea rcx, [rsp + 0x68]
call fcn.10001fb3c
mov eax, 0x80000000
jmp 0x10001a974
lea rax, [rsp + 0x100]
mov qword [rsp + 0x108], rax
lea rdx, [rcx + 0x48]
lea rcx, [rsp + 0x100]
call fcn.100020390
nop
xor r8d, r8d
lea rdx, [rbx + 0x48]
mov rcx, rax
call fcn.100034be4
cmp eax, ebp
je 0x10001a362
lea rcx, [rsp + 0x68]
call fcn.10001fb3c
mov eax, 0x80000000
jmp 0x10001a974
mov rcx, qword [rbx + 0x48]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x10001a94f
shr eax, 4
mov r12d, 1
and al, r12b
je 0x10001a94f
mov r8, qword [rbx + 0x48]
lea rdx, [0x100002a90]
mov ecx, r12d
call fcn.10001e4c4
lea r11, [rsp + 0x100]
mov qword [rsp + 0x108], r11
lea rdx, [0x100001f68]
lea rcx, [rsp + 0x100]
call fcn.100020428
nop
mov rcx, rax
call fcn.1000252d4
cmp eax, ebp
jne 0x10001a3e1
lea r8, [0x100001f68]
lea rdx, [0x100002ae8]
mov ecx, r12d
call fcn.10001e4c4
mov r13d, 2
cmp dword [0x1000844c8], ebp
je 0x10001a527
cmp dword [rbx + 0x14], ebp
jne 0x10001a409
lea ecx, [r13 + 6]
call fcn.1000268b4
cmp eax, ebp
jne 0x10001a409
mov eax, ebp
jmp 0x10001a40c
mov eax, r12d
mov dword [rbx + 0x14], eax
cmp dword [rbx + 0x18], ebp
jne 0x10001a423
xor ecx, ecx
call fcn.1000268b4
cmp eax, ebp
jne 0x10001a423
mov eax, ebp
jmp 0x10001a426
mov eax, r12d
mov dword [rbx + 0x18], eax
cmp dword [rbx + 0x24], ebp
jne 0x10001a43e
mov ecx, r12d
call fcn.1000268b4
cmp eax, ebp
jne 0x10001a43e
mov eax, ebp
jmp 0x10001a441
mov eax, r12d
mov dword [rbx + 0x24], eax
cmp dword [rbx + 0x28], ebp
jne 0x10001a459
mov ecx, r13d
call fcn.1000268b4
cmp eax, ebp
jne 0x10001a459
mov eax, ebp
jmp 0x10001a45c
mov eax, r12d
mov dword [rbx + 0x28], eax
cmp dword [rbx + 0x38], ebp
jne 0x10001a476
mov ecx, 6
call fcn.1000268b4
cmp eax, ebp
jne 0x10001a476
mov eax, ebp
jmp 0x10001a479
mov eax, r12d
mov dword [rbx + 0x38], eax
cmp dword [rbx + 0x3c], ebp
jne 0x10001a493
mov ecx, 4
call fcn.1000268b4
cmp eax, ebp
jne 0x10001a493
mov eax, ebp
jmp 0x10001a496
mov eax, r12d
mov dword [rbx + 0x3c], eax
cmp dword [rbx + 0x40], ebp
jne 0x10001a4b0
mov ecx, 3
call fcn.1000268b4
cmp eax, ebp
jne 0x10001a4b0
mov eax, ebp
jmp 0x10001a4b3
mov eax, r12d
mov dword [rbx + 0x40], eax
cmp dword [rbx + 0x50], ebp
jne 0x10001a4cd
mov ecx, 5
call fcn.1000268b4
cmp eax, ebp
jne 0x10001a4cd
mov eax, ebp
jmp 0x10001a4d0
mov eax, r12d
mov dword [rbx + 0x50], eax
cmp dword [rbx + 0x5c], ebp
jne 0x10001a4ea
mov ecx, 9
call fcn.1000268b4
cmp eax, ebp
jne 0x10001a4ea
mov eax, ebp
jmp 0x10001a4ed
mov eax, r12d
mov dword [rbx + 0x5c], eax
cmp dword [rbx + 0x1c], ebp
jne 0x10001a507
mov ecx, 7
call fcn.1000268b4
cmp eax, ebp
jne 0x10001a507
mov eax, ebp
jmp 0x10001a50a
mov eax, r12d
mov dword [rbx + 0x1c], eax
cmp dword [rbx + 0x6c], ebp
jne 0x10001a521
mov ecx, edi
call fcn.1000268b4
cmp eax, ebp
jne 0x10001a521
mov eax, ebp
jmp 0x10001a524
mov eax, r12d
mov dword [rbx + 0x6c], eax
cmp dword [rbx + 0x14], ebp
jne 0x10001a535
cmp dword [rbx + 0x18], ebp
jne 0x10001a535
mov ecx, ebp
jmp 0x10001a538
mov ecx, r12d
mov r8d, dword [rbx + 0x50]
movzx edx, word [rbx + 0x10]
call fcn.10001be60
cmp eax, ebp
je 0x10001a563
call fcn.100025498
nop
lea rcx, [rsp + 0x68]
call fcn.10001fb3c
mov eax, 0x80000000
jmp 0x10001a974
cmp dword [rbx + 0x14], ebp
jne 0x10001a571
cmp dword [rbx + 0x18], ebp
jne 0x10001a571
mov ecx, ebp
jmp 0x10001a574
mov ecx, r12d
call fcn.10001bcd4
cmp eax, ebp
je 0x10001a597
call fcn.100025498
nop
lea rcx, [rsp + 0x68]
call fcn.10001fb3c
mov eax, 0x80000000
jmp 0x10001a974
cmp dword [rbx + 0x24], ebp
je 0x10001a5b3
cmp dword [rbx + 0x28], ebp
je 0x10001a5b3
mov dword [rbx + 0x28], ebp
lea rdx, [0x100002b30]
mov ecx, r13d
call fcn.10001e014
cmp dword [rbx + 0x14], ebp
jne 0x10001a5bd
cmp dword [rbx + 0x18], ebp
je 0x10001a5d7
cmp dword [rbx + 0x24], ebp
je 0x10001a5d7
mov dword [rbx + 0x14], ebp
mov dword [rbx + 0x18], ebp
lea rdx, [0x100002c30]
mov ecx, r13d
call fcn.10001e014
cmp dword [rbx + 0x14], ebp
jne 0x10001a5e5
cmp dword [rbx + 0x18], ebp
je 0x10001a6c5
cmp dword [rbx + 0x20], ebp
jne 0x10001a6c5
cmp qword [0x1000848b8], rbp
je 0x10001a6c5
mov qword [rsp + 0x98], rbp
mov qword [rsp + 0xa0], rbp
mov qword [rsp + 0xa8], rbp
mov qword [rsp + 0xb0], rbp
mov qword [rsp + 0xb8], rbp
mov dword [rsp + 0xc0], edi
lea rax, [rsp + 0x100]
mov qword [rsp + 0x108], rax
mov qword [rsp + 0x100], rbp
mov rdi, qword [0x1000848b8]
cmp rdi, rbp
je 0x10001a672
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rcx, qword [rsp + 0x100]
cmp rcx, rbp
je 0x10001a66a
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [rsp + 0x100], rdi
lea r8, [rsp + 0x98]
mov edx, r12d
lea rcx, [rsp + 0x100]
call fcn.100027a24
cmp qword [rsp + 0x98], rbp
je 0x10001a6b8
lea rcx, [rsp + 0x98]
call fcn.100028414
mov dword [rbx + 0x14], ebp
mov dword [rbx + 0x18], ebp
lea rdx, [0x100002d10]
mov ecx, r13d
call fcn.10001e014
jmp 0x10001a6c5
lea rcx, [rsp + 0x98]
call fcn.100028414
cmp dword [rbx + 0x6c], ebp
je 0x10001a6e1
cmp dword [rbx + 0x38], ebp
jne 0x10001a6e1
mov dword [rbx + 0x6c], ebp
lea rdx, [0x100002e00]
mov ecx, r13d
call fcn.10001e014
cmp dword [rbx + 0x14], ebp
jne 0x10001a6eb
cmp dword [rbx + 0x18], ebp
je 0x10001a702
cmp dword [rbx + 0x68], ebp
je 0x10001a702
mov dword [rbx + 0x68], ebp
lea rdx, [0x100002ee0]
mov ecx, r13d
call fcn.10001e014
cmp dword [rbx + 0x14], ebp
je 0x10001a716
lea rdx, [0x100002f70]
mov ecx, r12d
call fcn.10001e014
cmp dword [rbx + 0x18], ebp
je 0x10001a72a
lea rdx, [0x100002ff0]
mov ecx, r12d
call fcn.10001e014
cmp dword [rbx + 0x1c], ebp
je 0x10001a73e
lea rdx, [0x100003090]
mov ecx, r12d
call fcn.10001e014
cmp dword [rbx + 0x20], ebp
je 0x10001a752
lea rdx, [0x1000030e0]
mov ecx, r12d
call fcn.10001e014
mov rax, qword [rbx + 0x30]
cmp dword [rax - 0x10], ebp
je 0x10001a76d
mov r8, rax
lea rdx, [0x100003130]
mov ecx, r12d
call fcn.10001e4c4
cmp dword [rbx + 0x24], ebp
je 0x10001a781
lea rdx, [0x1000031b0]
mov ecx, r12d
call fcn.10001e014
cmp dword [rbx + 0x28], ebp
je 0x10001a795
lea rdx, [0x100003220]
mov ecx, r12d
call fcn.10001e014
cmp dword [rbx + 0x38], ebp
je 0x10001a7a9
lea rdx, [0x1000032a0]
mov ecx, r12d
call fcn.10001e014
cmp dword [rbx + 0x3c], ebp
je 0x10001a7bd
lea rdx, [0x100003370]
mov ecx, r12d
call fcn.10001e014
cmp dword [rbx + 0x40], ebp
je 0x10001a7d1
lea rdx, [0x1000033f0]
mov ecx, r12d
call fcn.10001e014
cmp dword [rbx + 0x5c], ebp
je 0x10001a7e5
lea rdx, [0x100003470]
mov ecx, r12d
call fcn.10001e014
cmp dword [rbx + 0x68], ebp
je 0x10001a7f9
lea rdx, [0x100003500]
mov ecx, r12d
call fcn.10001e014
cmp dword [rbx + 0x6c], ebp
je 0x10001a80d
lea rdx, [0x100003590]
mov ecx, r12d
call fcn.10001e014
lea rax, [rsp + 0x100]
mov qword [rsp + 0x108], rax
lea rdx, [rbx + 0x30]
lea rcx, [rsp + 0x100]
call fcn.100020390
mov r11, rax
mov ecx, dword [rbx + 0x5c]
mov dword [rsp + 0x50], ecx
mov edx, dword [rbx + 0x3c]
mov dword [rsp + 0x48], edx
mov edx, dword [rbx + 0x40]
mov dword [rsp + 0x40], edx
mov edx, dword [rbx + 0x38]
mov dword [rsp + 0x38], edx
mov edx, dword [rbx + 0x28]
mov dword [rsp + 0x30], edx
mov eax, dword [rbx + 0x24]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], r11
mov r9d, dword [rbx + 0x1c]
mov r8d, dword [rbx + 0x18]
mov edx, dword [rbx + 0x14]
lea rcx, [rbx + 0x48]
call fcn.1000286b8
cmp dword [rbx + 0x14], ebp
jne 0x10001a8e2
cmp dword [rbx + 0x18], ebp
jne 0x10001a8e2
mov r8d, dword [rbx + 0x6c]
mov edx, dword [rbx + 0x68]
mov ecx, dword [rbx + 0x20]
call fcn.100020664
cmp eax, ebp
jne 0x10001a8eb
lea rcx, [0x100084030]
call qword [sym.imp.COMCTL32.dll_PropertySheetW]
cmp eax, 0xffffffff
jne 0x10001a8bc
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea r8, [0x100005bd8]
mov edx, eax
mov ecx, 3
call fcn.10001e1c4
mov rcx, qword [0x100084000]
cmp rcx, rbp
je 0x10001a8ce
call qword [sym.imp.GDI32.dll_DeleteObject]
mov rcx, qword [0x100083ff8]
cmp rcx, rbp
je 0x10001a8eb
call qword [sym.imp.USER32.dll_DestroyIcon]
jmp 0x10001a8eb
xor edx, edx
xor ecx, ecx
call fcn.1000287f8
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x100]
call fcn.1000294a8
mov edi, eax
cmp eax, ebp
je 0x10001a91a
cmp dword [rbx + 0x14], ebp
jne 0x10001a91a
cmp dword [rbx + 0x18], ebp
jne 0x10001a91a
mov r8d, r13d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_RestartDialog]
lea r8, [rsp + 0x68]
mov edx, dword [rsp + 0x100]
mov ecx, edi
call fcn.10001d6a8
mov ebx, eax
lea rcx, [0x1000837d0]
call fcn.10001fb3c
call fcn.100025498
nop
lea rcx, [rsp + 0x68]
call fcn.10001fb3c
mov eax, ebx
jmp 0x10001a974
mov r8, qword [rbx + 0x48]
lea rdx, [0x100002ac0]
mov ecx, 3
call fcn.10001e4c4
nop
lea rcx, [rsp + 0x68]
call fcn.10001fb3c
mov eax, 0x80000000
mov rbx, qword [rsp + 0x110]
add rsp, 0xd0
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret