Function at 0x18001cc54
Capabilities:
Check if file exists

Disassembly:
push rbx
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0x7b8
mov rax, qword [0x180034040]
xor rax, rsp
mov qword [rsp + 0x7a0], rax
mov r12, r9
mov rsi, r8
mov r14, rdx
mov r15, rcx
and qword [rsp + 0xd0], 0
mov ebx, 0x20a
mov r8d, ebx
xor edx, edx
lea rcx, [rsp + 0x380]
call sub.ucrtbase.dll_memset
mov r8d, ebx
xor edx, edx
lea rcx, [rsp + 0x170]
call sub.ucrtbase.dll_memset
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0xb0], xmm0
mov qword [rsp + 0xc0], rax
lea rax, [rsp + 0xd0]
mov qword [rsp + 0xa0], rax
mov byte [rsp + 0xa8], 1
mov rcx, qword [rsp + 0x7e8]
cmp qword [r14 + 8], 0
je 0x18001d235
xor edx, edx
lea r8d, [rdx + 1]
mov rcx, qword [r14]
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov rbx, rax
mov qword [rsp + 0x160], rax
mov rcx, qword [rsp + 0x7e8]
test rax, rax
je 0x18001d240
mov rdi, qword [rsp + 0x7e8]
mov r8d, 0x104
lea rdx, [rsp + 0x380]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x18001d245
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov r9d, 0x18
lea r8, [rsp + 0xb0]
mov rdx, rbx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_K32GetModuleInformation]
mov rcx, qword [rsp + 0x7e8]
test eax, eax
je 0x18001d24d
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov edx, 0x104
mov qword [rsp + 0x38], rdx
lea rax, [rsp + 0x170]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rdx
lea rax, [rsp + 0x170]
mov qword [rsp + 0x20], rax
mov r9d, 2
lea r8, [rsp + 0x380]
xor edx, edx
call qword [sym.imp.dbghelp.dll_SymGetSymbolFileW]
test eax, eax
jne 0x18001d154
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [rsp + 0x7e8]
cmp eax, 2
jne 0x18001d252
xor edx, edx
mov r8d, 0x20a
lea rcx, [rsp + 0x590]
call sub.ucrtbase.dll_memset
mov rdi, qword [rsp + 0x7e8]
mov r8d, 0x104
lea rdx, [rsp + 0x590]
lea rcx, [0x180000000]
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x18001d259
mov edx, 0x104
lea rcx, [rsp + 0x590]
call qword [sym.imp.api_ms_win_core_path_l1_1_0.dll_PathCchRemoveFileSpec]
mov rcx, qword [rsp + 0x7e8]
test eax, eax
js 0x18001d261
xorps xmm0, xmm0
movups xmmword [rsp + 0xd8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0xe8], xmm1
mov r8d, 4
lea rdx, str.SRV
lea rcx, [rsp + 0xd8]
call fcn.18000ff44
nop
lea r8, [rsp + 0x590]
lea rdx, [rsp + 0xd8]
lea rcx, [rsp + 0x80]
call fcn.180013298
nop
lea r8, str._symbolshttp:__msdl.microsoft.com_download_symbols
mov rdx, rax
lea rcx, [rsp + 0xf8]
call fcn.180013298
nop
lea rcx, [rsp + 0x80]
call fcn.180006e84
nop
lea rcx, [rsp + 0xd8]
call fcn.180006e84
call qword [sym.imp.dbghelp.dll_SymGetOptions]
bts eax, 0x1f
mov ecx, eax
call qword [sym.imp.dbghelp.dll_SymSetOptions]
mov dword [rsp + 0xc8], eax
xor eax, eax
mov qword [rsp + 0xe8], rax
lea rax, [rsp + 0xc8]
mov qword [rsp + 0x80], rax
mov qword [rsp + 0x88], r15
movups xmm0, xmmword [rsp + 0x80]
movdqu xmmword [rsp + 0xd8], xmm0
mov byte [rsp + 0xe8], 1
lea rdi, [r15 + 0x10]
xor ecx, ecx
mov qword [rsp + 0x78], rcx
mov r8, qword [rsi + 0x38]
xor r9d, r9d
test r8, r8
je 0x18001cf47
mov rax, qword [r8]
lea rdx, [rsp + 0x40]
mov rcx, r8
call qword [rax]
mov rcx, rax
mov qword [rsp + 0x78], rax
mov r9, rax
lea rax, [rsp + 0x40]
cmp r9, rax
je 0x18001cf69
cmp qword [rdi + 0x38], rdi
je 0x18001cf69
mov rcx, qword [rdi + 0x38]
mov qword [rsp + 0x78], rcx
mov qword [rdi + 0x38], r9
jmp 0x18001d083
xor r8d, r8d
mov qword [rsp + reloc.COMCTL32.dll_Ordinal_344], r8
test r9, r9
je 0x18001cfd6
lea rax, [rsp + 0x40]
cmp r9, rax
jne 0x18001cfc4
mov rax, qword [r9]
lea rdx, [rsp + 0x120]
mov rcx, r9
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov r8, rax
mov qword [rsp + reloc.COMCTL32.dll_Ordinal_344], rax
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x18001cfd6
mov rax, qword [rcx]
lea rdx, [rsp + 0x40]
cmp rcx, rdx
setne dl
call qword [rax + 0x20]
mov r8, qword [rsp + reloc.COMCTL32.dll_Ordinal_344]
jmp 0x18001cfcf
mov r8, r9
mov qword [rsp + reloc.COMCTL32.dll_Ordinal_344], r9
xor ecx, ecx
mov qword [rsp + 0x78], rcx
mov r9, qword [rdi + 0x38]
test r9, r9
je 0x18001d035
mov rcx, r9
cmp r9, rdi
jne 0x18001d02b
mov rax, qword [r9]
lea rdx, [rsp + 0x40]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rcx, rax
mov qword [rsp + 0x78], rax
mov r8, qword [rdi + 0x38]
test r8, r8
je 0x18001d021
mov rax, qword [r8]
cmp r8, rdi
setne dl
mov rcx, r8
call qword [rax + 0x20]
mov rcx, qword [rsp + 0x78]
mov r8, qword [rsp + reloc.COMCTL32.dll_Ordinal_344]
jmp 0x18001d030
mov r8, qword [rsp + reloc.COMCTL32.dll_Ordinal_344]
jmp 0x18001d035
mov qword [rsp + 0x78], rcx
and qword [rdi + 0x38], 0
test r8, r8
je 0x18001d083
lea rax, [rsp + 0x120]
cmp r8, rax
jne 0x18001d07f
mov rax, qword [r8]
mov rdx, rdi
mov rcx, r8
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov qword [rdi + 0x38], rax
mov rcx, qword [rsp + reloc.COMCTL32.dll_Ordinal_344]
test rcx, rcx
je 0x18001d078
mov rax, qword [rcx]
lea rdx, [rsp + 0x120]
cmp rcx, rdx
setne dl
call qword [rax + 0x20]
mov rcx, qword [rsp + 0x78]
jmp 0x18001d083
mov qword [rdi + 0x38], r8
test rcx, rcx
je 0x18001d099
mov rax, qword [rcx]
lea rdx, [rsp + 0x40]
cmp rcx, rdx
setne dl
call qword [rax + 0x20]
lea rcx, [r15 + 0x50]
mov r8, qword [r14 + 8]
mov rdx, qword [r14]
call fcn.18000ad8c
lea rdi, [rsp + 0xf8]
cmp qword [rsp + 0x110], 7
cmova rdi, qword [rsp + 0xf8]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov edx, 0x104
mov qword [rsp + 0x38], rdx
lea rcx, [rsp + 0x170]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rdx
lea rcx, [rsp + 0x170]
mov qword [rsp + 0x20], rcx
mov r9d, 2
lea r8, [rsp + 0x380]
mov rdx, rdi
mov rcx, rax
call qword [sym.imp.dbghelp.dll_SymGetSymbolFileW]
mov rcx, qword [rsp + 0x7e8]
test eax, eax
je 0x18001d269
mov ecx, dword [rsp + 0xc8]
call qword [sym.imp.dbghelp.dll_SymSetOptions]
lea rdi, [r15 + 0x10]
mov rcx, qword [rdi + 0x38]
test rcx, rcx
je 0x18001d147
mov rax, qword [rcx]
cmp rcx, rdi
setne dl
call qword [rax + 0x20]
and qword [rdi + 0x38], 0
lea rcx, [rsp + 0xf8]
call fcn.180006e84
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
and dword [rsp + 0x38], 0
and qword [rsp + 0x30], 0
mov eax, dword [rsp + 0xb8]
mov dword [rsp + 0x28], eax
mov rax, qword [rsp + 0xb0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
lea r8, [rsp + 0x380]
xor edx, edx
call qword [sym.imp.dbghelp.dll_SymLoadModuleExW]
mov rdi, rax
mov qword [rsp + 0xd0], rax
mov rcx, qword [rsp + 0x7e8]
test rax, rax
je 0x18001d26f
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0x20], r12
lea r9, [0x18001d27c]
xor r8d, r8d
mov rdx, rdi
mov rcx, rax
call qword [sym.imp.dbghelp.dll_SymEnumSymbols]
mov rcx, qword [rsp + 0x7e8]
test eax, eax
je 0x18001d274
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
nop
mov rbx, qword [rsp + 0xd0]
test rbx, rbx
je 0x18001d209
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rdx, rbx
mov rcx, rax
call qword [sym.imp.dbghelp.dll_SymUnloadModule64]
xor eax, eax
jmp 0x18001d214
mov rcx, qword [rsp + 0x7a0]
xor rcx, rsp
call fcn.180021870
add rsp, 0x7b8
pop r15
pop r14
pop r12
pop rdi
pop rsi
pop rbx
ret
mov edx, 0x80070057
call fcn.180009de0
nop
call fcn.1800104f8
mov rcx, rdi
call fcn.1800104f8
call fcn.1800104f8
mov edx, eax
call fcn.180016ff0
mov rcx, rdi
call fcn.1800104f8
mov edx, eax
call fcn.180009de0
nop
call fcn.1800104f8
nop
call fcn.1800104f8
call fcn.1800104f8
int3