Function at 0x18001d894
Capabilities:
Check if file exists

Disassembly:
push rbx
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0x7b8
mov rax, qword [0x180034040]
xor rax, rsp
mov qword [rsp + 0x7a0], rax
mov r12, r9
mov rsi, r8
mov r14, rdx
mov r15, rcx
and qword [rsp + 0xd0], 0
mov ebx, 0x20a
mov r8d, ebx
xor edx, edx
lea rcx, [rsp + 0x380]
call sub.ucrtbase.dll_memset
mov r8d, ebx
xor edx, edx
lea rcx, [rsp + 0x170]
call sub.ucrtbase.dll_memset
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0xb0], xmm0
mov qword [rsp + 0xc0], rax
lea rax, [rsp + 0xd0]
mov qword [rsp + 0xa0], rax
mov byte [rsp + 0xa8], 1
mov rcx, qword [rsp + 0x7e8]
cmp qword [r14 + 8], 0
je 0x18001de75
xor edx, edx
lea r8d, [rdx + 1]
mov rcx, qword [r14]
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov rbx, rax
mov qword [rsp + 0x160], rax
mov rcx, qword [rsp + 0x7e8]
test rax, rax
je 0x18001de80
mov rdi, qword [rsp + 0x7e8]
mov r8d, 0x104
lea rdx, [rsp + 0x380]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x18001de85
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov r9d, 0x18
lea r8, [rsp + 0xb0]
mov rdx, rbx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_K32GetModuleInformation]
mov rcx, qword [rsp + 0x7e8]
test eax, eax
je 0x18001de8d
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov edx, 0x104
mov qword [rsp + 0x38], rdx
lea rax, [rsp + 0x170]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rdx
lea rax, [rsp + 0x170]
mov qword [rsp + 0x20], rax
mov r9d, 2
lea r8, [rsp + 0x380]
xor edx, edx
call qword [sym.imp.dbghelp.dll_SymGetSymbolFileW]
test eax, eax
jne 0x18001dd94
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [rsp + 0x7e8]
cmp eax, 2
jne 0x18001de92
xor edx, edx
mov r8d, 0x20a
lea rcx, [rsp + 0x590]
call sub.ucrtbase.dll_memset
mov rdi, qword [rsp + 0x7e8]
mov r8d, 0x104
lea rdx, [rsp + 0x590]
lea rcx, [0x180000000]
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x18001de99
mov edx, 0x104
lea rcx, [rsp + 0x590]
call qword [sym.imp.api_ms_win_core_path_l1_1_0.dll_PathCchRemoveFileSpec]
mov rcx, qword [rsp + 0x7e8]
test eax, eax
js 0x18001dea1
xorps xmm0, xmm0
movups xmmword [rsp + 0xd8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0xe8], xmm1
mov r8d, 4
lea rdx, str.SRV
lea rcx, [rsp + 0xd8]
call fcn.180010734
nop
lea r8, [rsp + 0x590]
lea rdx, [rsp + 0xd8]
lea rcx, [rsp + 0x80]
call fcn.180013a88
nop
lea r8, str._symbolshttp:__msdl.microsoft.com_download_symbols
mov rdx, rax
lea rcx, [rsp + 0xf8]
call fcn.180013a88
nop
lea rcx, [rsp + 0x80]
call fcn.1800074a8
nop
lea rcx, [rsp + 0xd8]
call fcn.1800074a8
call qword [sym.imp.dbghelp.dll_SymGetOptions]
bts eax, 0x1f
mov ecx, eax
call qword [sym.imp.dbghelp.dll_SymSetOptions]
mov dword [rsp + 0xc8], eax
xor eax, eax
mov qword [rsp + 0xe8], rax
lea rax, [rsp + 0xc8]
mov qword [rsp + 0x80], rax
mov qword [rsp + 0x88], r15
movups xmm0, xmmword [rsp + 0x80]
movdqu xmmword [rsp + 0xd8], xmm0
mov byte [rsp + 0xe8], 1
lea rdi, [r15 + 0x10]
xor ecx, ecx
mov qword [rsp + 0x78], rcx
mov r8, qword [rsi + 0x38]
xor r9d, r9d
test r8, r8
je 0x18001db87
mov rax, qword [r8]
lea rdx, [rsp + 0x40]
mov rcx, r8
call qword [rax]
mov rcx, rax
mov qword [rsp + 0x78], rax
mov r9, rax
lea rax, [rsp + 0x40]
cmp r9, rax
je 0x18001dba9
cmp qword [rdi + 0x38], rdi
je 0x18001dba9
mov rcx, qword [rdi + 0x38]
mov qword [rsp + 0x78], rcx
mov qword [rdi + 0x38], r9
jmp 0x18001dcc3
xor r8d, r8d
mov qword [rsp + reloc.COMCTL32.dll_Ordinal_344], r8
test r9, r9
je 0x18001dc16
lea rax, [rsp + 0x40]
cmp r9, rax
jne 0x18001dc04
mov rax, qword [r9]
lea rdx, [rsp + 0x120]
mov rcx, r9
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov r8, rax
mov qword [rsp + reloc.COMCTL32.dll_Ordinal_344], rax
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x18001dc16
mov rax, qword [rcx]
lea rdx, [rsp + 0x40]
cmp rcx, rdx
setne dl
call qword [rax + 0x20]
mov r8, qword [rsp + reloc.COMCTL32.dll_Ordinal_344]
jmp 0x18001dc0f
mov r8, r9
mov qword [rsp + reloc.COMCTL32.dll_Ordinal_344], r9
xor ecx, ecx
mov qword [rsp + 0x78], rcx
mov r9, qword [rdi + 0x38]
test r9, r9
je 0x18001dc75
mov rcx, r9
cmp r9, rdi
jne 0x18001dc6b
mov rax, qword [r9]
lea rdx, [rsp + 0x40]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rcx, rax
mov qword [rsp + 0x78], rax
mov r8, qword [rdi + 0x38]
test r8, r8
je 0x18001dc61
mov rax, qword [r8]
cmp r8, rdi
setne dl
mov rcx, r8
call qword [rax + 0x20]
mov rcx, qword [rsp + 0x78]
mov r8, qword [rsp + reloc.COMCTL32.dll_Ordinal_344]
jmp 0x18001dc70
mov r8, qword [rsp + reloc.COMCTL32.dll_Ordinal_344]
jmp 0x18001dc75
mov qword [rsp + 0x78], rcx
and qword [rdi + 0x38], 0
test r8, r8
je 0x18001dcc3
lea rax, [rsp + 0x120]
cmp r8, rax
jne 0x18001dcbf
mov rax, qword [r8]
mov rdx, rdi
mov rcx, r8
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov qword [rdi + 0x38], rax
mov rcx, qword [rsp + reloc.COMCTL32.dll_Ordinal_344]
test rcx, rcx
je 0x18001dcb8
mov rax, qword [rcx]
lea rdx, [rsp + 0x120]
cmp rcx, rdx
setne dl
call qword [rax + 0x20]
mov rcx, qword [rsp + 0x78]
jmp 0x18001dcc3
mov qword [rdi + 0x38], r8
test rcx, rcx
je 0x18001dcd9
mov rax, qword [rcx]
lea rdx, [rsp + 0x40]
cmp rcx, rdx
setne dl
call qword [rax + 0x20]
lea rcx, [r15 + 0x50]
mov r8, qword [r14 + 8]
mov rdx, qword [r14]
call fcn.18000b3b0
lea rdi, [rsp + 0xf8]
cmp qword [rsp + 0x110], 7
cmova rdi, qword [rsp + 0xf8]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov edx, 0x104
mov qword [rsp + 0x38], rdx
lea rcx, [rsp + 0x170]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rdx
lea rcx, [rsp + 0x170]
mov qword [rsp + 0x20], rcx
mov r9d, 2
lea r8, [rsp + 0x380]
mov rdx, rdi
mov rcx, rax
call qword [sym.imp.dbghelp.dll_SymGetSymbolFileW]
mov rcx, qword [rsp + 0x7e8]
test eax, eax
je 0x18001dea9
mov ecx, dword [rsp + 0xc8]
call qword [sym.imp.dbghelp.dll_SymSetOptions]
lea rdi, [r15 + 0x10]
mov rcx, qword [rdi + 0x38]
test rcx, rcx
je 0x18001dd87
mov rax, qword [rcx]
cmp rcx, rdi
setne dl
call qword [rax + 0x20]
and qword [rdi + 0x38], 0
lea rcx, [rsp + 0xf8]
call fcn.1800074a8
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
and dword [rsp + 0x38], 0
and qword [rsp + 0x30], 0
mov eax, dword [rsp + 0xb8]
mov dword [rsp + 0x28], eax
mov rax, qword [rsp + 0xb0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
lea r8, [rsp + 0x380]
xor edx, edx
call qword [sym.imp.dbghelp.dll_SymLoadModuleExW]
mov rdi, rax
mov qword [rsp + 0xd0], rax
mov rcx, qword [rsp + 0x7e8]
test rax, rax
je 0x18001deaf
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0x20], r12
lea r9, [0x18001debc]
xor r8d, r8d
mov rdx, rdi
mov rcx, rax
call qword [sym.imp.dbghelp.dll_SymEnumSymbols]
mov rcx, qword [rsp + 0x7e8]
test eax, eax
je 0x18001deb4
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
nop
mov rbx, qword [rsp + 0xd0]
test rbx, rbx
je 0x18001de49
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rdx, rbx
mov rcx, rax
call qword [sym.imp.dbghelp.dll_SymUnloadModule64]
xor eax, eax
jmp 0x18001de54
mov rcx, qword [rsp + 0x7a0]
xor rcx, rsp
call fcn.180022510
add rsp, 0x7b8
pop r15
pop r14
pop r12
pop rdi
pop rsi
pop rbx
ret
mov edx, 0x80070057
call fcn.18000a404
nop
call fcn.180010ce8
mov rcx, rdi
call fcn.180010ce8
call fcn.180010ce8
mov edx, eax
call fcn.1800177e0
mov rcx, rdi
call fcn.180010ce8
mov edx, eax
call fcn.18000a404
nop
call fcn.180010ce8
nop
call fcn.180010ce8
call fcn.180010ce8
int3