Function at 0x140001fd4
Capabilities:
Check if file exists
Get file attributes

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
sub rsp, 0x830
mov rax, qword [0x140018280]
xor rax, rsp
mov qword [rsp + 0x820], rax
mov rsi, r9
mov rdi, r8
mov rbx, rdx
test cl, cl
je 0x1400022db
lea rdx, [rsp + 0x420]
mov r8d, 0x400
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea rcx, [rsp + 0x420]
call fcn.140003e30
mov rdx, rbx
mov rcx, rax
call fcn.140006ee8
lea rcx, [rsp + 0x420]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesA]
lea rbp, [0x1400137ff]
mov rbx, 0xffffffff80000000
cmp eax, 0xffffffff
je 0x1400020f8
cmp byte [rsp + 0x870], 0
je 0x14000206a
mov ecx, 0x200
jmp 0x14000206c
xor ecx, ecx
call fcn.14000401c
lea rdx, str.CLSID_s
lea rcx, [rsp + 0x20]
mov r8, rdi
call fcn.140001fa8
lea r9, [0x140013ac0]
mov r8, rbp
mov rdx, rax
mov rcx, rbx
call fcn.140004404
lea rdx, str.CLSID_sInProcServer32
lea rcx, [rsp + 0x20]
mov r8, rdi
call fcn.140001fa8
lea r9, [rsp + 0x420]
mov r8, rbp
mov rdx, rax
mov rcx, rbx
call fcn.140004404
lea rdx, str.CLSID_sInProcServer32
lea rcx, [rsp + 0x20]
mov r8, rdi
call fcn.140001fa8
lea r9, str.Apartment
lea r8, str.ThreadingModel
mov rdx, rax
mov rcx, rbx
call fcn.140004404
xor ecx, ecx
call fcn.14000401c
lea rdx, str.WinRAR_shellexContextMenuHandlers_s
lea rcx, [rsp + 0x20]
mov r8, rdi
call fcn.140001fa8
mov r9, rbp
mov r8, rbp
mov rdx, rax
mov rcx, rbx
call fcn.140004404
lea rdx, str.WinRAR_shellexPropertySheetHandlers_s
lea rcx, [rsp + 0x20]
mov r8, rdi
call fcn.140001fa8
mov r9, rbp
mov r8, rbp
mov rdx, rax
mov rcx, rbx
call fcn.140004404
lea rdx, str.WinRAR.ZIP_shellexContextMenuHandlers_s
lea rcx, [rsp + 0x20]
mov r8, rdi
call fcn.140001fa8
mov r9, rbp
mov r8, rbp
mov rdx, rax
mov rcx, rbx
call fcn.140004404
lea rdx, str.WinRAR.ZIP_shellexPropertySheetHandlers_s
lea rcx, [rsp + 0x20]
mov r8, rdi
call fcn.140001fa8
mov r9, rbp
mov r8, rbp
mov rdx, rax
mov rcx, rbx
call fcn.140004404
lea rdx, str.exefile_shellexPropertySheetHandlers_s
lea rcx, [rsp + 0x20]
mov r8, rdi
call fcn.140001fa8
mov r9, rbp
mov r8, rbp
mov rdx, rax
mov rcx, rbx
call fcn.140004404
lea rdx, str.WinRAR_shellexDropHandler
mov r9, rdi
mov r8, rbp
mov rcx, rbx
call fcn.140004404
lea rdx, str.WinRAR.ZIP_shellexDropHandler
mov r9, rdi
mov r8, rbp
mov rcx, rbx
call fcn.140004404
lea rdx, str._shellexContextMenuHandlers_s
lea rcx, [rsp + 0x20]
mov r8, rsi
call fcn.140001fa8
mov r9, rdi
mov r8, rbp
mov rdx, rax
mov rcx, rbx
call fcn.140004404
lea rdx, str.Folder_shellexContextMenuHandlers_s
lea rcx, [rsp + 0x20]
mov r8, rsi
call fcn.140001fa8
mov r9, rdi
mov r8, rbp
mov rdx, rax
mov rcx, rbx
call fcn.140004404
lea rdx, str.Folder_shellexDragDropHandlers_s
lea rcx, [rsp + 0x20]
mov r8, rsi
call fcn.140001fa8
mov r9, rdi
mov r8, rbp
mov rdx, rax
mov rcx, rbx
call fcn.140004404
lea rdx, str.Drive_shellexDragDropHandlers_s
lea rcx, [rsp + 0x20]
mov r8, rsi
call fcn.140001fa8
mov r9, rdi
mov r8, rbp
mov rdx, rax
mov rcx, rbx
call fcn.140004404
lea rdx, str.Directory_shellexContextMenuHandlers_s
lea rcx, [rsp + 0x20]
mov r8, rsi
call fcn.140001fa8
mov r9, rdi
mov r8, rbp
mov rdx, rax
mov rcx, rbx
call fcn.140004404
lea rdx, str.Directory_shellexDragDropHandlers_s
lea rcx, [rsp + 0x20]
mov r8, rsi
call fcn.140001fa8
mov r9, rdi
mov r8, rbp
mov rdx, rax
mov rcx, rbx
call fcn.140004404
lea r9, str.WinRAR_shell_extension
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersionShell_ExtensionsApproved
mov r8, rdi
mov rcx, 0xffffffff80000002
call fcn.140004404
jmp 0x1400024a3
lea rdx, str.CLSID_sInProcServer32
lea rcx, [rsp + 0x20]
call fcn.140001fa8
mov rbx, 0xffffffff80000000
mov rdx, rax
mov rcx, rbx
call fcn.140004024
lea rdx, str.CLSID_s
lea rcx, [rsp + 0x20]
mov r8, rdi
call fcn.140001fa8
mov rcx, rbx
mov rdx, rax
call fcn.140004024
lea rdx, str.WinRAR_shellexContextMenuHandlers_s
lea rcx, [rsp + 0x20]
mov r8, rdi
call fcn.140001fa8
mov rcx, rbx
mov rdx, rax
call fcn.140004024
lea rdx, str.WinRAR_shellexPropertySheetHandlers_s
lea rcx, [rsp + 0x20]
mov r8, rdi
call fcn.140001fa8
mov rcx, rbx
mov rdx, rax
call fcn.140004024
lea rdx, str.WinRAR.ZIP_shellexContextMenuHandlers_s
lea rcx, [rsp + 0x20]
mov r8, rdi
call fcn.140001fa8
mov rcx, rbx
mov rdx, rax
call fcn.140004024
lea rdx, str.WinRAR.ZIP_shellexPropertySheetHandlers_s
lea rcx, [rsp + 0x20]
mov r8, rdi
call fcn.140001fa8
mov rcx, rbx
mov rdx, rax
call fcn.140004024
lea rdx, str.exefile_shellexPropertySheetHandlers_s
lea rcx, [rsp + 0x20]
mov r8, rdi
call fcn.140001fa8
mov rcx, rbx
mov rdx, rax
call fcn.140004024
lea rdx, str.WinRAR_shellexDropHandler
mov rcx, rbx
call fcn.140004024
lea rdx, str.WinRAR.ZIP_shellexDropHandler
mov rcx, rbx
call fcn.140004024
lea rdx, str._shellexContextMenuHandlers_s
lea rcx, [rsp + 0x20]
mov r8, rsi
call fcn.140001fa8
mov rcx, rbx
mov rdx, rax
call fcn.140004024
lea rdx, str.Folder_shellexContextMenuHandlers_s
lea rcx, [rsp + 0x20]
mov r8, rsi
call fcn.140001fa8
mov rcx, rbx
mov rdx, rax
call fcn.140004024
lea rdx, str.Folder_shellexDragDropHandlers_s
lea rcx, [rsp + 0x20]
mov r8, rsi
call fcn.140001fa8
mov rcx, rbx
mov rdx, rax
call fcn.140004024
lea rdx, str.Drive_shellexDragDropHandlers_s
lea rcx, [rsp + 0x20]
mov r8, rsi
call fcn.140001fa8
mov rdx, rax
mov rcx, rbx
call fcn.140004024
lea rdx, str.Directory_shellexContextMenuHandlers_s
lea rcx, [rsp + 0x20]
mov r8, rsi
call fcn.140001fa8
mov rcx, rbx
mov rdx, rax
call fcn.140004024
lea rdx, str.Directory_shellexDragDropHandlers_s
lea rcx, [rsp + 0x20]
mov r8, rsi
call fcn.140001fa8
mov rcx, rbx
mov rdx, rax
call fcn.140004024
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersionShell_ExtensionsApproved
lea rcx, [rbx + 2]
mov r8, rdi
call fcn.140004080
mov rcx, qword [rsp + 0x820]
xor rcx, rsp
call fcn.140007160
mov rbx, qword [rsp + 0x850]
add rsp, 0x830
pop rdi
pop rsi
pop rbp
ret